PC-HELP.CZ

Dobrý den, moc prosím o kontrolu logu. Předem děkuji mnohokrát:

RogueKiller V12.11.5.0 (x64) [Jul 3 2017] (Free) by Adlice Software
mail : http://www.adlice.com/contact/
Feedback : https://forum.adlice.com
Webová stránka : http://www.adlice.com/download/roguekiller/
Blog : http://www.adlice.com

Operační systém : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Spuštěno : Normální režim
Uživatel : troyssd [Práva správce]
Started from : C:\Users\troyssd\Desktop\RogueKiller_portable64.exe
Mód : Prohledat -- Datum : 07/06/2017 09:12:37 (Duration : 00:19:26)

¤¤¤ Procesy : 0 ¤¤¤

¤¤¤ Registry : 26 ¤¤¤
[Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\RK_System_ON_E_C36B\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules | {306DC3D9-21DB-4147-A14B-C2F9130FA386} : v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|App=C:\Users\troy2\AppData\Roaming\uTorrent\utorrent.exe|Name=µTorrent (TCP-In)|Desc=Allow µTorrent network traffic with Edge Traversal|Edge=TRUE| [x] -> Nalezeno
[Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\RK_System_ON_E_C36B\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules | {7A244B3A-3F4F-43F7-9D0C-DFDA5A246D60} : v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|App=C:\Users\troy2\AppData\Roaming\uTorrent\utorrent.exe|Name=µTorrent (UDP-In)|Desc=Allow µTorrent network traffic with Edge Traversal|Edge=TRUE| [x] -> Nalezeno
[Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\RK_System_ON_E_C36B\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules | {4A7C15BE-1D35-493F-AC8E-73C2EF4B7413} : v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Private|App=C:\Users\troy2\AppData\Local\Temp\skype.exe|Name=skype.exe| [x] -> Nalezeno
[Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\RK_System_ON_E_C36B\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules | {F8A0E083-53F9-420C-80F6-DA94827E0A4D} : v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Private|App=C:\Users\troy2\AppData\Local\Temp\skype.exe|Name=skype.exe| [x] -> Nalezeno
[Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\RK_System_ON_E_C36B\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules | {1089EAF5-AE01-4073-8E29-3A095B16C871} : v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|App=C:\Users\troy2\AppData\Local\Temp\skype.exe|Name=skype.exe| [x] -> Nalezeno
[Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\RK_System_ON_E_C36B\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules | {5A409060-C50B-40FC-BA37-9BAB423FEE9C} : v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|App=C:\Users\troy2\AppData\Local\Temp\skype.exe|Name=skype.exe| [x] -> Nalezeno
[Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules | TCP Query User{7FDACBB1-DBE7-4176-9CF4-9785C9F040A1}C:\users\troyssd\appdata\local\temp\keygen.exe : v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Private|App=C:\users\troyssd\appdata\local\temp\keygen.exe|Name=keygen.exe|Desc=keygen.exe|Defer=User| [x] -> Nalezeno
[Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules | UDP Query User{8CF9A682-3989-4DEA-9DF7-807A3C0F2B2E}C:\users\troyssd\appdata\local\temp\keygen.exe : v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|App=C:\users\troyssd\appdata\local\temp\keygen.exe|Name=keygen.exe|Desc=keygen.exe|Defer=User| [x] -> Nalezeno
[Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\RK_System_ON_E_C36B\ControlSet002\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules | {306DC3D9-21DB-4147-A14B-C2F9130FA386} : v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|App=C:\Users\troy2\AppData\Roaming\uTorrent\utorrent.exe|Name=µTorrent (TCP-In)|Desc=Allow µTorrent network traffic with Edge Traversal|Edge=TRUE| [x] -> Nalezeno
[Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\RK_System_ON_E_C36B\ControlSet002\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules | {7A244B3A-3F4F-43F7-9D0C-DFDA5A246D60} : v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|App=C:\Users\troy2\AppData\Roaming\uTorrent\utorrent.exe|Name=µTorrent (UDP-In)|Desc=Allow µTorrent network traffic with Edge Traversal|Edge=TRUE| [x] -> Nalezeno
[Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\RK_System_ON_E_C36B\ControlSet002\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules | {4A7C15BE-1D35-493F-AC8E-73C2EF4B7413} : v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Private|App=C:\Users\troy2\AppData\Local\Temp\skype.exe|Name=skype.exe| [x] -> Nalezeno
[Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\RK_System_ON_E_C36B\ControlSet002\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules | {F8A0E083-53F9-420C-80F6-DA94827E0A4D} : v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Private|App=C:\Users\troy2\AppData\Local\Temp\skype.exe|Name=skype.exe| [x] -> Nalezeno
[Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\RK_System_ON_E_C36B\ControlSet002\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules | {1089EAF5-AE01-4073-8E29-3A095B16C871} : v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|App=C:\Users\troy2\AppData\Local\Temp\skype.exe|Name=skype.exe| [x] -> Nalezeno
[Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\RK_System_ON_E_C36B\ControlSet002\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules | {5A409060-C50B-40FC-BA37-9BAB423FEE9C} : v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|App=C:\Users\troy2\AppData\Local\Temp\skype.exe|Name=skype.exe| [x] -> Nalezeno
[Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\System\ControlSet002\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules | TCP Query User{7FDACBB1-DBE7-4176-9CF4-9785C9F040A1}C:\users\troyssd\appdata\local\temp\keygen.exe : v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Private|App=C:\users\troyssd\appdata\local\temp\keygen.exe|Name=keygen.exe|Desc=keygen.exe|Defer=User| [x] -> Nalezeno
[Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\System\ControlSet002\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules | UDP Query User{8CF9A682-3989-4DEA-9DF7-807A3C0F2B2E}C:\users\troyssd\appdata\local\temp\keygen.exe : v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|App=C:\users\troyssd\appdata\local\temp\keygen.exe|Name=keygen.exe|Desc=keygen.exe|Defer=User| [x] -> Nalezeno
[Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\RK_System_ON_E_C36B\ControlSet003\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules | {306DC3D9-21DB-4147-A14B-C2F9130FA386} : v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|App=C:\Users\troy2\AppData\Roaming\uTorrent\utorrent.exe|Name=µTorrent (TCP-In)|Desc=Allow µTorrent network traffic with Edge Traversal|Edge=TRUE| [x] -> Nalezeno
[Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\RK_System_ON_E_C36B\ControlSet003\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules | {7A244B3A-3F4F-43F7-9D0C-DFDA5A246D60} : v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|App=C:\Users\troy2\AppData\Roaming\uTorrent\utorrent.exe|Name=µTorrent (UDP-In)|Desc=Allow µTorrent network traffic with Edge Traversal|Edge=TRUE| [x] -> Nalezeno
[Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\RK_System_ON_E_C36B\ControlSet003\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules | {4A7C15BE-1D35-493F-AC8E-73C2EF4B7413} : v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Private|App=C:\Users\troy2\AppData\Local\Temp\skype.exe|Name=skype.exe| [x] -> Nalezeno
[Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\RK_System_ON_E_C36B\ControlSet003\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules | {F8A0E083-53F9-420C-80F6-DA94827E0A4D} : v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Private|App=C:\Users\troy2\AppData\Local\Temp\skype.exe|Name=skype.exe| [x] -> Nalezeno
[Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\RK_System_ON_E_C36B\ControlSet003\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules | {1089EAF5-AE01-4073-8E29-3A095B16C871} : v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|App=C:\Users\troy2\AppData\Local\Temp\skype.exe|Name=skype.exe| [x] -> Nalezeno
[Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\RK_System_ON_E_C36B\ControlSet003\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules | {5A409060-C50B-40FC-BA37-9BAB423FEE9C} : v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|App=C:\Users\troy2\AppData\Local\Temp\skype.exe|Name=skype.exe| [x] -> Nalezeno
[PUM.StartMenu] (X64) HKEY_USERS\RK_troy2_ON_E_C664\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowMyGames : 0 -> Nalezeno
[PUM.StartMenu] (X86) HKEY_USERS\RK_troy2_ON_E_C664\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowMyGames : 0 -> Nalezeno
[PUM.StartMenu] (X64) HKEY_USERS\S-1-5-21-2355449394-796308985-3639473744-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowMyGames : 0 -> Nalezeno
[PUM.StartMenu] (X86) HKEY_USERS\S-1-5-21-2355449394-796308985-3639473744-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowMyGames : 0 -> Nalezeno

¤¤¤ Úlohy : 0 ¤¤¤

¤¤¤ Soubory : 0 ¤¤¤

¤¤¤ WMI : 0 ¤¤¤

¤¤¤ Soubor HOSTS : 0 ¤¤¤

¤¤¤ Antirootkit : 0 (Driver: Nahrán) ¤¤¤

¤¤¤ Webové prohlížeče : 4 ¤¤¤
[PUP.Gen2][Firefox:Addon] vqlcwanp.default : ?????????? ???????? [vb@yandex.ru] -> Nalezeno
[PUP.Gen2][Firefox:Addon] vqlcwanp.default : Yandex Elements [yasearch@yandex.ru] -> Nalezeno
[PUP.Gen0][Chrome:Addon] Default : Video Downloader professional [elicpjhcidhpjomhibiffojpinpmmpil] -> Nalezeno
[PUP.Gen1][Chrome:Config] Default [SecurePrefs] : session.startup_urls [http://www.yessearches.com/?mode=nnnb&ptid=dam&uid=F33EEFC8B298195444B8B6582CFE4FAF&v=20160421&ts=AHEqAHEoB3UnA0..] -> Nalezeno

¤¤¤ Kontrola MBR : ¤¤¤
+++++ PhysicalDrive0: KINGSTON SV300S37A240G SCSI Disk Device +++++
--- User ---
[MBR] 3f35d270d9f80b3eccb3f186f61a0600
[BSP] 70d979f947b7667222d417b1e6bf973a : Windows Vista/7/8|VT.Unknown MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 206848 | Size: 228834 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
User = LL1 ... OK
Error reading LL2 MBR! ([1] Nesprávná funkce. )

+++++ PhysicalDrive1: ST2000DM001-1ER164 ATA Device +++++
--- User ---
[MBR] 8ccce4050ef1026bf24dc01a3a73a4bf
[BSP] 7b0d18e63ff57dc104396b30c17ca67d : Windows Vista/7/8|VT.Unknown MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 100 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
1 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 206848 | Size: 1907627 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
User = LL1 ... OK
User = LL2 ... OK

+++++ PhysicalDrive2: Mass Storage Device USB Device +++++
--- User ---
[MBR] 51b51c09a3779482ad50d0de7655ef29
[BSP] df4f83c1f72e36823a12b0dfc7617313 : Empty MBR Code
Partition table:
0 - [ACTIVE] FAT32 (0xb) [VISIBLE] Offset (sectors): 8192 | Size: 29660 MB
User = LL1 ... OK
Error reading LL2 MBR! ([32] Po?adavek není podporován. )

+++++ PhysicalDrive3: Seagate Expansion Desk USB Device +++++
Error reading User MBR! ([57] Parametr není správný. )
Error reading LL1 MBR! ([79] ?asový limit semaforu vypr?el. )
Error reading LL2 MBR! ([32] Po?adavek není podporován. )

Proč zakládáš nové téma? Nebo to je jiný PC?

To je druhý PC

Aha tak začneme stejně.

Vlož log z HJT:
http://www.pc-help.cz/viewtopic.php?f=70&t=5119

Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected. Poté klikni na Main (hlavní stránku ) a klikni na Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranění historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit dočasné soubory Windows, vysypat koš atd.
- Pokud používáš jen Google Chrome , tak ATF nemusíš použít.


Stáhni si TFC
http://www.geekstogo.com/forum/files/fi ... -oldtimer/
Otevři soubor a zavři všechny ostatní okna, Klikni na Start k zahájení procesu. Program by neměl trvat dlouho.
Poté by se měl PC restartovat, pokud ne , proveď sám.

Stáhni AdwCleaner (by Xplode
http://www.bleepingcomputer.com/download/adwcleaner/
http://www.adlice.com/downloadprogress/

Ulož si ho na svojí plochu
Ukonči všechny programy , okna a prohlížeče
Spusť program poklepáním a klikni na „Scan“
Po skenu klikni na „Logfile“ ,objeví se okno „Log Manager“ a pak poklepej na odpovídající log , který se otevře. ( jinak je uložen systémovem disku jako C:\AdwCleaner [C?].txt ), jeho obsah sem celý vlož.

Stáhni si Malwarebytes' Anti-Malware
- Při instalaci odeber zatržítko u „Povolit bezplatnou zkušební verzi Malwarebytes' Anti-Malware Premium“
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Aktualizace Malwarebytes' Anti-Malware a Spustit aplikaci Malwarebytes' Anti-Malware, pokud jo tak klikni na tlačítko konec
-Pokud není program aktuální , klikni na možnost „Aktualizovat nyní“ či „Opravit nyní“.
- bude nalezena aktualizace a nainstaluje se.
- poté klikni na Skenovat nyní
- po proběhnutí programu se ti objeví hláška vpravo dole, tak klikni na Uložit výsledky a vyber zkopírovat do schránky a vlož sem celý log. Nebo klikni na „Textový soubor ( .txt)“ a log si ulož.
-jinak se log nachází zde: C:\ProgramData\Malwarebytes\Malwarebytes Anti-Malware\Logs

- po té klikni na tlačítko Dokončit, a program zavři křížkem vpravo nahoře.
(zatím nic nemaž!).
Pokud budou problémy , spusť v nouz. režimu.