PC-HELP.CZ

České diskuzní fórum o počítačích
https://pc-help.cnews.cz/

Prosím o kontrolu logu

https://pc-help.cnews.cz/viewtopic.php?f=70&t=177758

Stránka 1 z 5

Prosím o kontrolu logu

Napsal: 03 srp 2016 17:01
od inditarod
Dobrý den, jsem pouhým uživatelem PC a tak nevím, co s tím...
Nainstaloval jsem před dvěma dny WIN 10 a objevuje se mi po startu okno, kde se uvádí:

\appdata\roaming\win2.vbs
řádek: 12
znak: 1
chyba: nedostatek paměti
kód: 800A03E9
zdroj: Microsoft VBScript - chyba komponenty

Co s tím může laik jako já udělat? Díky za radu...





Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 16:55:54, on 3.8.2016
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.10586.0494)

FIREFOX: 33.0.2 (x86 cs)
Boot mode: Normal

Running processes:
C:\Program Files\Reason\Security\Protection\rscp\bin\rscp_bg.exe
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\WINDOWS\SysWOW64\DllHost.exe
C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe
C:\Users\User\AppData\Local\Microsoft\OneDrive\OneDrive.exe
C:\Users\User\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
C:\Program Files (x86)\Common Files\Ulead Systems\AutoDetector\Monitor.exe
C:\Program Files (x86)\Software602\Print2PDF\Print2PDF.exe
C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Windows\SysWOW64\wscript.exe
C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Users\User\Downloads\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll
F2 - REG:system.ini: UserInit=
O2 - BHO: WebTransBHO Class - {2DB66063-BB98-466A-AA0D-3E7ACF5ED853} - C:\ProgramData\LangSoft\WebIE.dll
O2 - BHO: PXCIEaddin - {42DFA04F-0F16-418e-B80C-AB97A5AFAD39} - C:\Program Files\Tracker Software\PDF-XChange 4\PXCIEAddin4.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_101\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~3\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_101\bin\jp2ssv.dll
O3 - Toolbar: WebTranslator - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - C:\ProgramData\LangSoft\WebIE.dll
O3 - Toolbar: PDFXChange 4.0 - {42DFA04F-0F16-418e-B80C-AB97A5AFAD39} - C:\Program Files\Tracker Software\PDF-XChange 4\PXCIEAddin4.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll
O3 - Toolbar: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
O3 - Toolbar: FireShot - {6E6E744E-4D20-4ce3-9A7A-26DFFFE22F68} - C:\Users\User\AppData\Roaming\FireShot\FSAddin-98_38.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [Ulead AutoDetector v2] C:\Program Files (x86)\Common Files\Ulead Systems\AutoDetector\monitor.exe
O4 - HKLM\..\Run: [Print2PDF Print Monitor] "C:\Program Files (x86)\Software602\Print2PDF\Print2PDF.exe" /server
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [nvch] rundll32.exe rchnewver.dll,go
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [win2] wscript.exe //B "C:\Users\User\AppData\Roaming\win2.vbs"
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [ISUSPM Startup] C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe -startup
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Xvid] C:\Program Files (x86)\Xvid\CheckUpdate.exe
O4 - HKCU\..\Run: [EEDSpeedLauncher] rundll32.exe C:\Windows\system32\eed_ec.dll,SpeedLauncher
O4 - HKCU\..\Run: [cz.seznam.software.autoupdate] "C:\Users\User\AppData\Roaming\Seznam.cz\szninstall.exe" -c
O4 - HKCU\..\Run: [cz.seznam.software.szndesktop] "C:\Users\User\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q
O4 - HKCU\..\Run: [SpybotPostWindows10UpgradeReInstall] "C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe"
O4 - HKCU\..\Run: [Zoner Photo Studio Autoupdate] C:\PROGRAM FILES\ZONER\PHOTO STUDIO 15\Program32\ZPSTRAY.EXE
O4 - HKCU\..\Run: [OneDrive] "C:\Users\User\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [win2] wscript.exe //B "C:\Users\User\AppData\Roaming\win2.vbs"
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [EEDSpeedLauncher] rundll32.exe C:\WINDOWS\system32\eed_ec.dll,SpeedLauncher (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [EEDSpeedLauncher] rundll32.exe C:\WINDOWS\system32\eed_ec.dll,SpeedLauncher (User 'Default user')
O4 - Startup: Update Explorer.lnk = ?
O4 - Global Startup: McAfee Security Scan Plus.lnk = C:\Program Files\McAfee Security Scan\3.11.334\SSScheduler.exe
O8 - Extra context menu item: Download All with WinGet - res://C:\Program Files (x86)\Indentix\WinGet 3.0\WinIE.dll/301
O8 - Extra context menu item: Download with WinGet - res://C:\Program Files (x86)\Indentix\WinGet 3.0\WinIE.dll/300
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\Program Files (x86)\Microsoft Office\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll/105
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra 'Tools' menuitem: @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra button: ICQ7M - {781B39EC-2E18-41FC-9B00-B84E4FFCA85F} - C:\Program Files (x86)\ICQ7M\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7M - {781B39EC-2E18-41FC-9B00-B84E4FFCA85F} - C:\Program Files (x86)\ICQ7M\ICQ.exe
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: WebTran - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: &Nastavit překladač - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: &Slovník - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: Přeložit &označený text - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: Přeložit &stránku - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\ProgramData\LangSoft\WebIE.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Plugin Control) - http://appldnld.apple.com.edgesuite.net ... plugin.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O16 - DPF: {D8950D0E-FCE7-4AE4-9370-7E4CFBC04362} (FormApps Plug-in) - https://eportal.cssz.cz/fas/page/active ... bff_cs.cab
O16 - DPF: {F680B28A-3AEE-4C88-93ED-45AE9215C128} (CryptSignX Control) - https://adisepo.mfcr.cz/adistc/adis/idp ... tsignx.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{817b1d44-4b2f-4b5f-8256-0ba633846785}: NameServer = 192.168.0.2
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: 602Updater (602XML Updater) - Software602 a.s. - C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: DokanMounter - Unknown owner - C:\Program Files (x86)\Dokan\DokanLibrary\mounter.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Firebird Server - DefaultInstance (FirebirdServerDefaultInstance) - Firebird Project - C:\Program Files (x86)\Firebird\Firebird_2_5\bin\fb_inet_server.exe
O23 - Service: Futuremark SystemInfo Service - Futuremark Corporation - C:\Program Files (x86)\Futuremark\Futuremark SystemInfo\FMSISvc.exe
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP SI Service (HPSIService) - Unknown owner - C:\Windows\system32\HPSIsvc.exe (file missing)
O23 - Service: ICQ Service - Unknown owner - C:\Program Files (x86)\ICQ6Toolbar\ICQ Service.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files\McAfee Security Scan\3.11.334\McCHSvc.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @mqutil.dll,-6102 (MSMQ) - Unknown owner - C:\WINDOWS\system32\mqsvc.exe (file missing)
O23 - Service: NBService - Nero AG - C:\Program Files (x86)\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: NMIndexingService - Nero AG - C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Network Service (NvStreamNetworkSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\WINDOWS\system32\nvvsvc.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: Reason Core Security Bundle Protection (rscp) - Unknown owner - C:\Program Files\Reason\Security\Protection\rscp\bin\rscp_svc.exe
O23 - Service: Reason Core Security Engine Service (rsEngineSvc) - Reason Software Company Inc. - C:\Program Files\Reason\Security\rsEngineSvc.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvscpapisvr.exe
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\WINDOWS\system32\TieringEngineService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 17590 bytes

Re: Prosím o kontrolu logu

Napsal: 03 srp 2016 19:08
od jaro3
Odinstaluj:
Spybot - Search and Destroy
McAfee Security Scan

Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected. Poté klikni na Main (hlavní stránku ) a klikni na Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranění historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit dočasné soubory Windows, vysypat koš atd.
- Pokud používáš jen Google Chrome , tak ATF nemusíš použít.


Stáhni si TFC
http://www.geekstogo.com/forum/files/fi ... -oldtimer/
Otevři soubor a zavři všechny ostatní okna, Klikni na Start k zahájení procesu. Program by neměl trvat dlouho.
Poté by se měl PC restartovat, pokud ne , proveď sám.

Stáhni AdwCleaner (by Xplode)
http://www.bleepingcomputer.com/download/adwcleaner/

Ulož si ho na svojí plochu
Ukonči všechny programy , okna a prohlížeče
Spusť program poklepáním a klikni na „Prohledat-Scan“
Po skenu klikni na „Logfile“ ,objeví log ( jinak je uložen systémovem disku jako AdwCleaner[C?].txt), jeho obsah sem celý vlož.

Stáhni si Malwarebytes' Anti-Malware
- Při instalaci odeber zatržítko u „Povolit bezplatnou zkušební verzi Malwarebytes' Anti-Malware Premium“
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Aktualizace Malwarebytes' Anti-Malware a Spustit aplikaci Malwarebytes' Anti-Malware, pokud jo tak klikni na tlačítko konec
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a klikni na Skenovat nyní a
- po proběhnutí programu se ti objeví hláška vpravo dole tak klikni na Uložit výsledky a vyber zkopírovat do schránky a vlož sem celý log.
-jinak se log nachází zde: C:\ProgramData\Malwarebytes\Malwarebytes Anti-Malware\Logs

- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).

Pokud budou problémy , spusť v nouz. režimu.

Re: Prosím o kontrolu logu

Napsal: 03 srp 2016 21:02
od inditarod
McAfee jsem právě odinstaloval, ale Spyboot už jsem odinstaloval dříve. Vidím, že tam po něm zůstal adresář s nějakými soubory, ale program nainstalovaný není. Mám jen fyzicky smazat celý ten adresář?
Díky...

Re: Prosím o kontrolu logu

Napsal: 03 srp 2016 21:25
od jaro3
Zkus na to tohle:
Stáhněte si a nainstalujte Revo Uninstaller FreePlease download and install Revo Uninstaller Free
http://www.revouninstaller.com/start_fr ... nload.html
Poklepáním na Revo Uninstaller jej spustit.
Ze seznamu programů klikněte dvakrát na programu odstranit
Až budete vyzváni, zda chcete odinstalovat klepněte na tlačítko Ano.
Ujistěte se, že je vybrána možnost Mírný potom klepněte na tlačítko Další.
Program bude probíhat, Pokud budete vyzváni znovu klepněte na tlačítko Ano
Při vestavěný Uninstaller je dokončena klepněte na tlačítko Další.
Jakmile program hledal zbytky klepněte na tlačítko Další.
Zkontrolujte / zaškrtněte položky Bolded jen na seznamu a potom klepněte na tlačítko Odstranit
Po vyzvání klepněte na Ano a pak na další.
dal šek na všechny složky, které se nachází a vyberte možnost odstranění
Po zobrazení výzvy vyberte ano, pak na další
Poté, co udělal na tlačítko Dokončit.

pokud v seznamu nebude , pokračuj dál.

Re: Prosím o kontrolu logu

Napsal: 03 srp 2016 22:32
od inditarod
Není tam ten Spyboot. Ani v tom Revo...

Re: Prosím o kontrolu logu

Napsal: 03 srp 2016 22:35
od inditarod
Mám v compu jen ten adresář se soubory. A zajímavé je, že po spuštění se mi startuje něco jako "Makes sure Spybot 2 is there in Windows 10", vydavatel Safer-Networking. Mám to zakázáno...

Re: Prosím o kontrolu logu

Napsal: 03 srp 2016 23:09
od jaro3
Tak pokračuj v tom co jsem psal výše.

Re: Prosím o kontrolu logu

Napsal: 04 srp 2016 01:43
od inditarod
# AdwCleaner v5.201 - Log vytvořen 04/08/2016 v 01:40:14
# Aktualizováno 30/06/2016 by ToolsLib
# Databáze : 2016-08-02.3 [Server]
# Operační system : Windows 10 Home (X64)
# Uživatelské jméno : User - USER-PC
# Spuštěno z : C:\Users\User\Downloads\adwcleaner_5.201.exe
# Nastavení : Sken
# Podpora : https://toolslib.net/forum

***** [ Služby ] *****

Služba Nalezeno : ICQ Service

***** [ Složky ] *****

Složka Nalezeno : C:\ProgramData\Babylon
Složka Nalezeno : C:\ProgramData\ICQ\ICQToolbar
Složka Nalezeno : C:\Program Files (x86)\Ask.com
Složka Nalezeno : C:\Program Files (x86)\Guard-ICQ
Složka Nalezeno : C:\Program Files (x86)\ICQ6Toolbar
Složka Nalezeno : C:\Program Files (x86)\Movies Toolbar
Složka Nalezeno : C:\Program Files (x86)\ytd
Složka Nalezeno : C:\Program Files (x86)\movies toolbar
Složka Nalezeno : C:\WINDOWS\installer\{86d4b82a-abed-442a-be86-96357b70f4fe}
Složka Nalezeno : C:\Users\User\AppData\LocalLow\AskToolbar
Složka Nalezeno : C:\Users\User\AppData\Roaming\Babylon
Složka Nalezeno : C:\Users\User\AppData\Roaming\OpenCandy
Složka Nalezeno : C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\utrhvzc9.default\extensions\{ea614400-e918-4741-9a97-7a972ff7c30b}

***** [ Soubory ] *****

Soubor Nalezeno : C:\Users\User\AppData\Roaming\ReadMe.vbs
Soubor Nalezeno : C:\Users\User\AppData\Roaming\win2.vbs
Soubor Nalezeno : C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fdloijijlkoblmigdofommgnheckmaki
Soubor Nalezeno : C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_st.chatango.com_0.localstorage
Soubor Nalezeno : C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_st.chatango.com_0.localstorage-journal
Soubor Nalezeno : C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_wlogin.icq.com_0.localstorage
Soubor Nalezeno : C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_wlogin.icq.com_0.localstorage-journal
Soubor Nalezeno : C:\user.js

***** [ DLL ] *****


***** [ WMI ] *****


***** [ Zástupci ] *****


***** [ Naplánované úlohy ] *****

Úloha Nalezeno : Scheduled Update for Ask Toolbar

***** [ Registry ] *****

Klíč Nalezeno : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Klíč Nalezeno : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
Klíč Nalezeno : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
Klíč Nalezeno : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
Klíč Nalezeno : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Klíč Nalezeno : HKLM\SOFTWARE\Classes\AppID\GenericAskToolbar.DLL
Klíč Nalezeno : HKLM\SOFTWARE\Classes\AppID\ICQ Service.exe
Klíč Nalezeno : HKLM\SOFTWARE\Classes\ctTOOLBAR.ctToolBarCtrl.4
Klíč Nalezeno : HKLM\SOFTWARE\Google\Chrome\Extensions\fdloijijlkoblmigdofommgnheckmaki
Klíč Nalezeno : HKLM\SOFTWARE\Google\Chrome\Extensions\jbolfgndggfhhpbnkgnpjkfhinclbigj
Klíč Nalezeno : HKLM\SOFTWARE\Classes\funmoods.dskBnd
Klíč Nalezeno : HKLM\SOFTWARE\Classes\funmoods.dskBnd.1
Klíč Nalezeno : HKLM\SOFTWARE\Classes\funmoods.funmoodsHlpr
Klíč Nalezeno : HKLM\SOFTWARE\Classes\funmoods.funmoodsHlpr.1
Klíč Nalezeno : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd
Klíč Nalezeno : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd.1
Klíč Nalezeno : HKLM\SOFTWARE\Classes\ICQToolBar.IEHook
Klíč Nalezeno : HKLM\SOFTWARE\Classes\ICQToolBar.IEHook.1
Klíč Nalezeno : HKLM\SOFTWARE\Classes\Prod.cap
Klíč Nalezeno : HKLM\SOFTWARE\Classes\protector_dll.Protector
Klíč Nalezeno : HKLM\SOFTWARE\Classes\protector_dll.Protector.1
Klíč Nalezeno : HKLM\SOFTWARE\Classes\protector_dll.ProtectorBho
Klíč Nalezeno : HKLM\SOFTWARE\Classes\protector_dll.ProtectorBho.1
Klíč Nalezeno : HKLM\SOFTWARE\Classes\protector_dll.ProtectorLib
Klíč Nalezeno : HKLM\SOFTWARE\Classes\protector_dll.ProtectorLib.1
Klíč Nalezeno : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\AppID\{5D723752-5899-47E8-99B4-62C824EF9E13}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\AppID\{960DF771-CFCB-4E53-A5B5-6EF2BBE6E706}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{75EBB0AA-4214-4CB4-90EC-E3E07ECD04F7}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{855F3B16-6D32-4FE6-8A56-BBB695989046}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{A4C272EC-ED9E-4ACE-A6F2-9558C7F29EF3}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\Interface\{0D80F1C5-D17B-4177-AC68-955F3EF9F191}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\Interface\{23C70BCA-6E23-4A65-AD2E-1389062074F1}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\Interface\{23D8EEF7-0E13-4000-B9C4-6603C1E912D1}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\Interface\{295CACB4-51F5-46FD-914E-C72BAAE1B672}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\Interface\{2CE5C4B9-6DBE-4528-96FA-C9FF38EF1762}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\Interface\{34C1FDF7-02C1-4F23-B393-F48B16E071D1}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\Interface\{54291324-7A3D-4F11-B707-3FB6A2C97BD9}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\Interface\{59C63F11-D4E5-46E7-9B8A-EE158DCA83A8}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\Interface\{5DA22CBD-0029-4A09-B757-CF0FAFC488ED}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\Interface\{77A6E7D4-4A83-4A9B-A2A0-EF3B125DC29D}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\Interface\{C0585B2F-74D7-4734-88DE-6C150C5D4036}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\Interface\{D8242E89-2F81-484A-AE5B-BA8CAD5B7347}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\Interface\{EF0588D6-1621-4A75-B8BE-F4BC34794136}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\TypeLib\{1D085C0A-E4F4-4F66-BDBF-4BE51015BFC3}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\TypeLib\{960DF771-CFCB-4E53-A5B5-6EF2BBE6E706}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Klíč Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{75EBB0AA-4214-4CB4-90EC-E3E07ECD04F7}
Klíč Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{855F3B16-6D32-4FE6-8A56-BBB695989046}
Klíč Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A4C272EC-ED9E-4ACE-A6F2-9558C7F29EF3}
Klíč Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
Klíč Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{75EBB0AA-4214-4CB4-90EC-E3E07ECD04F7}
Klíč Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{855F3B16-6D32-4FE6-8A56-BBB695989046}
Klíč Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A4C272EC-ED9E-4ACE-A6F2-9558C7F29EF3}
Hodnota Nalezeno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{855F3B16-6D32-4FE6-8A56-BBB695989046}]
Hodnota Nalezeno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Hodnota Nalezeno : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{855F3B16-6D32-4FE6-8A56-BBB695989046}]
Klíč Nalezeno : HKCU\Software\APN
Klíč Nalezeno : HKCU\Software\Ask.com
Klíč Nalezeno : HKCU\Software\ICQ\ICQToolbar
Klíč Nalezeno : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\ICQ\ICQToolbar
Klíč Nalezeno : HKCU\Software\AppDataLow\Software\AskToolbar
Klíč Nalezeno : HKLM\SOFTWARE\APN
Klíč Nalezeno : HKLM\SOFTWARE\AskToolbar
Klíč Nalezeno : HKLM\SOFTWARE\Babylon
Klíč Nalezeno : HKLM\SOFTWARE\BabylonToolbar
Klíč Nalezeno : HKLM\SOFTWARE\ICQ\ICQToolbar
Klíč Nalezeno : HKLM\SOFTWARE\SafetyNut
Klíč Nalezeno : HKLM\SOFTWARE\Mail.Ru
Klíč Nalezeno : HKLM\SOFTWARE\SAFETYNUT
Klíč Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ICQToolbar
Klíč Nalezeno : HKU\S-1-5-21-1804479744-3448908533-1041230410-1000\Software\APN
Klíč Nalezeno : HKU\S-1-5-21-1804479744-3448908533-1041230410-1000\Software\Ask.com
Klíč Nalezeno : HKU\S-1-5-21-1804479744-3448908533-1041230410-1000\Software\ICQ\ICQToolbar
Klíč Nalezeno : HKU\S-1-5-21-1804479744-3448908533-1041230410-1000\Software\AppDataLow\Software\AskToolbar
Klíč Nalezeno : HKLM\SOFTWARE\Classes\Installer\Features\A28B4D68DEBAA244EB686953B7074FEF
Klíč Nalezeno : HKLM\SOFTWARE\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF
Klíč Nalezeno : HKLM\SOFTWARE\Classes\Installer\UpgradeCodes\F928123A039649549966D4C29D35B1C9
Klíč Nalezeno : HKLM\SOFTWARE\Classes\Installer\UpgradeCodes\F928123A039649549966d4C29D35B1C9
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0CFE535C35F99574E8340BFA75BF92C2
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0E12F736682067FDE4D1158D5940A82E
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1A24B5BB8521B03E0C8D908F5ABC0AE6
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\261F213D1F55267499B1F87D0CC3BCF7
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2B0D56C4F4C46D844A57FFED6F0D2852
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\49D4375FE41653242AEA4C969E4E65E0
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6AA0923513360135B272E8289C5F13FA
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6F7467AF8F29C134CBBAB394ECCFDE96
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\741B4ADF27276464790022C965AB6DA8
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7DE196B10195F5647A2B21B761F3DE01
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\922525DCC5199162F8935747CA3D8E59
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9D4F5849367142E4685ED8C25E44C5ED
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A5875B04372C19545BEB90D4D606C472
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A876D9E80B896EC44A8620248CC79296
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B66FFAB725B92594C986DE826A867888
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BCDA179D619B91648538E3394CAC94CC
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D677B1A9671D4D4004F6F2A4469E86EA
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DD1402A9DD4215A43ABDE169A41AFA0E
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E36E114A0EAD2AD46B381D23AD69CDDF
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EF8E618DB3AEDFBB384561B5C548F65E
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\F928123A039649549966D4C29D35B1C9
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\F928123A039649549966d4C29D35B1C9
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF
Klíč Nalezeno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{905A77E1-4154-4D2B-96E0-9C2386CFF965}
Data Nalezeno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [DefaultScope] - {905A77E1-4154-4D2B-96E0-9C2386CFF965}
Klíč Nalezeno : HKU\S-1-5-21-1804479744-3448908533-1041230410-1000\Software\Microsoft\Internet Explorer\SearchScopes\{905A77E1-4154-4D2B-96E0-9C2386CFF965}
Data Nalezeno : HKU\S-1-5-21-1804479744-3448908533-1041230410-1000\Software\Microsoft\Internet Explorer\SearchScopes [DefaultScope] - {905A77E1-4154-4D2B-96E0-9C2386CFF965}
Klíč Nalezeno : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\ask.com
Klíč Nalezeno : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\gounzip.dl.tb.ask.com
Klíč Nalezeno : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\internetspeedtracker.dl.myway.com
Hodnota Nalezeno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32 [ApnUpdater]

***** [ Prohlížeče ] *****

[C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\utrhvzc9.default\prefs.js] Nalezeno : user_pref("browser.babylon.HPOnNewTab", "search.babylon.com");
[C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\utrhvzc9.default\prefs.js] Nalezeno : user_pref("browser.search.order.1", "Search the web (Babylon)");
[C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\utrhvzc9.default\prefs.js] Nalezeno : user_pref("extensions.BabylonToolbar_i.newTab", true);
[C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\utrhvzc9.default\prefs.js] Nalezeno : user_pref("extensions.BabylonToolbar_i.newTabUrl", "hxxp://search.babylon.com/?affID=110021&tt=060612_7_&babsrc=NT_ss&mntrId=f0e3a80c000000000000f4ec38807516");
[C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\utrhvzc9.default\prefs.js] Nalezeno : user_pref("extensions.ffxtlbr@funmoods.com.install-event-fired", true);
[C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\utrhvzc9.default\prefs.js] Nalezeno : user_pref("extensions.foxcub.prev.KWD", "hxxp://search.babylon.com/?affID=110021&tt=060612_7_&babsrc=KW_ss&mntrId=f0e3a80c000000000000f4ec38807516&q=");
[C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\utrhvzc9.default\prefs.js] Nalezeno : user_pref("extensions.foxcub.prev.search.selected", "Search the web (Babylon)");
[C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\utrhvzc9.default\prefs.js] Nalezeno : user_pref("extensions.funmoods_i.aflt", "make");
[C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\utrhvzc9.default\prefs.js] Nalezeno : user_pref("extensions.funmoods_i.dfltLng", "");
[C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\utrhvzc9.default\prefs.js] Nalezeno : user_pref("extensions.funmoods_i.dfltSrch", true);
[C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\utrhvzc9.default\prefs.js] Nalezeno : user_pref("extensions.funmoods_i.dnsErr", true);
[C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\utrhvzc9.default\prefs.js] Nalezeno : user_pref("extensions.funmoods_i.excTlbr", false);
[C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\utrhvzc9.default\prefs.js] Nalezeno : user_pref("extensions.funmoods_i.hmpg", true);
[C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\utrhvzc9.default\prefs.js] Nalezeno : user_pref("extensions.funmoods_i.hmpgUrl", "hxxp://start.funmoods.com/?f=1&a=make");
[C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\utrhvzc9.default\prefs.js] Nalezeno : user_pref("extensions.funmoods_i.id", "f0e3a80c000000000000f4ec38807516");
[C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\utrhvzc9.default\prefs.js] Nalezeno : user_pref("extensions.funmoods_i.instlDay", "15538");
[C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\utrhvzc9.default\prefs.js] Nalezeno : user_pref("extensions.funmoods_i.instlRef", "");
[C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\utrhvzc9.default\prefs.js] Nalezeno : user_pref("extensions.funmoods_i.newTab", true);
[C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\utrhvzc9.default\prefs.js] Nalezeno : user_pref("extensions.funmoods_i.newTabUrl", "hxxp://start.funmoods.com/?f=2&a=make");
[C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\utrhvzc9.default\prefs.js] Nalezeno : user_pref("extensions.funmoods_i.prdct", "funmoods");
[C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\utrhvzc9.default\prefs.js] Nalezeno : user_pref("extensions.funmoods_i.prtnrId", "funmoods");
[C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\utrhvzc9.default\prefs.js] Nalezeno : user_pref("extensions.funmoods_i.smplGrp", "none");
[C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\utrhvzc9.default\prefs.js] Nalezeno : user_pref("extensions.funmoods_i.srchPrvdr", "Search");
[C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\utrhvzc9.default\prefs.js] Nalezeno : user_pref("extensions.funmoods_i.tlbrId", "base");
[C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\utrhvzc9.default\prefs.js] Nalezeno : user_pref("extensions.funmoods_i.tlbrSrchUrl", "hxxp://start.funmoods.com/results.php?f=3&a=make&q=");
[C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\utrhvzc9.default\prefs.js] Nalezeno : user_pref("extensions.funmoods_i.vrsn", "1.5.11.16");
[C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\utrhvzc9.default\prefs.js] Nalezeno : user_pref("extensions.funmoods_i.vrsnTs", "1.5.11.1612:55:19");
[C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\utrhvzc9.default\prefs.js] Nalezeno : user_pref("extensions.funmoods_i.vrsni", "1.5.11.16");
[C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\utrhvzc9.default\prefs.js] Nalezeno : user_pref("extensions.fvd_single.seopack.b_surfcanyon", true);
[C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\utrhvzc9.default\prefs.js] Nalezeno : user_pref("extensions.fvd_single.surfcanyon.ramp.start_time", "1397330934713");
[C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\utrhvzc9.default\prefs.js] Nalezeno : user_pref("extensions.toolbar@ask.com.install-event-fired", true);
[C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\utrhvzc9.default\user.js] Nalezeno : user_pref("extensions.funmoods_i.hmpg", true);
[C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\utrhvzc9.default\user.js] Nalezeno : user_pref("extensions.funmoods_i.hmpgUrl", "hxxp://start.funmoods.com/?f=1&a=make");
[C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\utrhvzc9.default\user.js] Nalezeno : user_pref("extensions.funmoods_i.dfltSrch", true);
[C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\utrhvzc9.default\user.js] Nalezeno : user_pref("extensions.funmoods_i.srchPrvdr", "Search");
[C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\utrhvzc9.default\user.js] Nalezeno : user_pref("extensions.funmoods_i.dnsErr", true);
[C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\utrhvzc9.default\user.js] Nalezeno : user_pref("extensions.funmoods_i.newTab", true);
[C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\utrhvzc9.default\user.js] Nalezeno : user_pref("extensions.funmoods_i.newTabUrl", "hxxp://start.funmoods.com/?f=2&a=make");
[C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\utrhvzc9.default\user.js] Nalezeno : user_pref("extensions.funmoods_i.tlbrSrchUrl", "hxxp://start.funmoods.com/results.php?f=3&a=make&q=");
[C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\utrhvzc9.default\user.js] Nalezeno : user_pref("extensions.funmoods_i.id", "f0e3a80c000000000000f4ec38807516");
[C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\utrhvzc9.default\user.js] Nalezeno : user_pref("extensions.funmoods_i.instlDay", "15538");
[C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\utrhvzc9.default\user.js] Nalezeno : user_pref("extensions.funmoods_i.vrsn", "1.5.11.16");
[C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\utrhvzc9.default\user.js] Nalezeno : user_pref("extensions.funmoods_i.vrsni", "1.5.11.16");
[C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\utrhvzc9.default\user.js] Nalezeno : user_pref("extensions.funmoods_i.vrsnTs", "1.5.11.1612:55:19");
[C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\utrhvzc9.default\user.js] Nalezeno : user_pref("extensions.funmoods_i.prtnrId", "funmoods");
[C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\utrhvzc9.default\user.js] Nalezeno : user_pref("extensions.funmoods_i.prdct", "funmoods");
[C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\utrhvzc9.default\user.js] Nalezeno : user_pref("extensions.funmoods_i.aflt", "make");
[C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\utrhvzc9.default\user.js] Nalezeno : user_pref("extensions.funmoods_i.smplGrp", "none");
[C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\utrhvzc9.default\user.js] Nalezeno : user_pref("extensions.funmoods_i.tlbrId", "base");
[C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\utrhvzc9.default\user.js] Nalezeno : user_pref("extensions.funmoods_i.instlRef", "");
[C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\utrhvzc9.default\user.js] Nalezeno : user_pref("extensions.funmoods_i.dfltLng", "");
[C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\utrhvzc9.default\user.js] Nalezeno : user_pref("extensions.funmoods_i.excTlbr", false);
[C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] Nalezeno : zapmeta.at
[C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] Nalezeno : ausschneiden.de.softonic.com

*************************

C:\AdwCleaner\AdwCleaner[S1].txt - [22411 bytů] - [04/08/2016 01:40:14]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [22485 bytů] ##########

Re: Prosím o kontrolu logu

Napsal: 04 srp 2016 09:25
od jaro3
A Malwarebytes' Anti-Malware?

Spusť znovu AdwCleaner (u Windows Vista či Windows7, klikni na AdwCleaner pravým a vyber „Spustit jako správce“
klikni na „Prohledat-Scan“, po prohledání klikni na „ Cleaning (Vymazat)“

Program provede opravu, po automatickém restartu neukáže log (C:\AdwCleaner [C?].txt) , jeho obsah sem celý vlož.

Stáhni si Junkware Removal Tool by Thisisu
http://www.bleepingcomputer.com/downloa ... oval-tool/
na svojí plochu.

Deaktivuj si svůj antivirový program. Pravým tl. myši klikni na JRT.exe a vyber „spustit jako správce“. Pro pokračování budeš vyzván ke stisknutí jakékoliv klávesy. Na nějakou klikni.
Začne skenování programu. Skenování může trvat dloho , podle množství nákaz. Po ukončení skenu se objeví log (JRT.txt) , který se uloží na ploše.
Zkopíruj sem prosím celý jeho obsah.

Re: Prosím o kontrolu logu

Napsal: 04 srp 2016 10:21
od inditarod
Mám napřed spustit Anti-Malware nebo napřed zopakovat AdwCleaner? Díky...

Re: Prosím o kontrolu logu

Napsal: 04 srp 2016 11:29
od jaro3
napřed adwcleaner.

Re: Prosím o kontrolu logu

Napsal: 04 srp 2016 14:03
od inditarod
AdwCleaner píše, že chce odstranit "ICQ service", to je OK?
Časové pásmo: UTC+02:00
Stránka 1 z 5
Powered by phpBB® Forum Software © phpBB Limited
https://www.phpbb.com/