Prosím o kontrolu logu

[Motas]

Zdravím prosím o kontrolu logu,
ntb v poslední době několikrát hodilo "modrou smrt", chod je problémový s nutností častého restartu.
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:12:42, on 15.12.2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17496)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe
C:\Program Files (x86)\T-Mobile\Web'n'walk Manager\Manager.exe
C:\Program Files (x86)\OpenVPN\bin\openvpn-gui-1.0.3.exe
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\coreshredder.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Motorola\Bluetooth\btplayerctrl.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,First Home Page = http://g.msn.com/1ewenusDefaultPack/UP97_FRPage
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: ContributeBHO Class - {074C1DC5-9320-4A9A-947D-C042949C6216} - C:\Program Files (x86)\Adobe\Adobe Contribute CS5\Plugins\IEPlugin\contributeieplugin.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: BHO_Startup - {3134413B-49B4-425C-98A5-893C1F195601} - C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\IEBHO.dll
O2 - BHO: neurowise - {37aaa223-fb06-4375-a67e-2724c635bb6d} - C:\Program Files (x86)\neurowise\neurowisebho.dll
O2 - BHO: HP ProtectTools Security Manager Extension - {395610AE-C624-4f58-B89E-23733EA00F9A} - C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpOtsPluginIe8.dll (file missing)
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Pomocná služba pro přihlášení ke službě Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O2 - BHO: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll
O3 - Toolbar: Contribute Toolbar - {517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - C:\Program Files (x86)\Adobe\Adobe Contribute CS5\Plugins\IEPlugin\contributeieplugin.dll
O4 - HKLM\..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
O4 - HKLM\..\Run: [File Sanitizer] C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\CoreShredder.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [DTRun] c:\Program Files (x86)\ArcSoft\TotalMedia Suite\TotalMedia Theatre 3\uDTRun.exe
O4 - HKLM\..\Run: [NortonOnlineBackupReminder] "C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe" UNATTENDED
O4 - HKLM\..\Run: [AdobeCS4ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [AdobeCS5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [QLBController] C:\Program Files (x86)\Hewlett-Packard\HP HotKey Support\QLBController.exe /start
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
O4 - HKCU\..\Run: [Google Update] "C:\Users\Liba\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [T-Mobile CManager] "C:\Program Files (x86)\T-Mobile\Web'n'walk Manager\Manager.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: OpenVPN GUI.lnk = C:\Program Files (x86)\OpenVPN\bin\openvpn-gui-1.0.3.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-103 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-102 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
O9 - Extra button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: @C:\Program Files\Motorola\Bluetooth\btmshell.dll,-137 - {bd707fe6-39f6-4bda-9265-86a76719bdc5} - C:\Program Files\Motorola\Bluetooth\btmiesend.htm
O9 - Extra 'Tools' menuitem: @C:\Program Files\Motorola\Bluetooth\btmshell.dll,-137 - {bd707fe6-39f6-4bda-9265-86a76719bdc5} - C:\Program Files\Motorola\Bluetooth\btmiesend.htm
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: http://*.mcafee.com (HKLM)
O15 - Trusted Zone: http://betavscan.mcafeeasap.com (HKLM)
O15 - Trusted Zone: http://vs.mcafeeasap.com (HKLM)
O15 - Trusted Zone: http://www.mcafeeasap.com (HKLM)
O15 - ESC Trusted Zone: http://*.mcafee.com (HKLM)
O15 - ESC Trusted Zone: http://betavscan.mcafeeasap.com (HKLM)
O15 - ESC Trusted Zone: http://vs.mcafeeasap.com (HKLM)
O15 - ESC Trusted Zone: http://www.mcafeeasap.com (HKLM)
O17 - HKLM\System\CCS\Services\Tcpip\..\{61EC5F60-2B72-406D-9365-760F23A4D2B2}: NameServer = 93.153.117.1 93.153.117.33
O17 - HKLM\System\CCS\Services\Tcpip\..\{61EE94EF-0BEF-49B9-B902-C7BEAC725AAB}: NameServer = 93.153.117.1 93.153.117.33
O17 - HKLM\System\CCS\Services\Tcpip\..\{BE3BA3AA-A5EB-439C-AD29-593C607F139D}: NameServer = 192.168.123.254
O17 - HKLM\System\CCS\Services\Tcpip\..\{D0790023-8456-4602-B41B-C4BF536ECE38}: NameServer =
O18 - Protocol: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O20 - Winlogon Notify: DeviceNP - DeviceNP.dll (file missing)
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Program Files\IDT\WDM\AESTSr64.exe
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - LSI Corporation - C:\Program Files\LSI SoftModem\agr64svc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\windows\system32\atiesrxx.exe (file missing)
O23 - Service: Bluetooth Device Manager - Motorola, Inc. - C:\Program Files\Motorola\Bluetooth\devmgrsrv.exe
O23 - Service: Bluetooth Media Service - Motorola, Inc. - C:\Program Files\Motorola\Bluetooth\audiosrv.exe
O23 - Service: Bluetooth OBEX Service - Motorola, Inc. - C:\Program Files\Motorola\Bluetooth\obexsrv.exe
O23 - Service: DEBridge - McAfee, Inc. - c:\Program Files\Hewlett-Packard\Drive Encryption\SbHpAuthenticatorService.exe
O23 - Service: Device Error Recovery Service (dgdersvc) - Devguru Co., Ltd. - C:\windows\system32\dgdersvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\windows\system32\fxssvc.exe (file missing)
O23 - Service: HP ProtectTools Device Locking / Auditing (FLCDLOCK) - Hewlett-Packard Ltd - c:\Windows\SysWOW64\flcdlock.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: FLEXnet Licensing Service 64 - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe
O23 - Service: HP Power Assistant Service - Hewlett-Packard Company - C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Service.exe
O23 - Service: HP Support Assistant Service - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
O23 - Service: HP Wireless Assistant Service - Hewlett-Packard - C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe
O23 - Service: HP DayStarter Service (HPDayStarterService) - Hewlett-Packard Company - c:\Program Files\Hewlett-Packard\HP QuickLook\32-bit\HPDayStarterService.exe
O23 - Service: HP Quick Synchronization Service (HPDrvMntSvc.exe) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe
O23 - Service: Drive Encryption Service (HpFkCryptService) - McAfee, Inc. - c:\Program Files\Hewlett-Packard\Drive Encryption\HpFkCrypt.exe
O23 - Service: File Sanitizer for HP ProtectTools (HPFSService) - Hewlett-Packard - C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\HPFSService.exe
O23 - Service: HP Hotkey Monitor (hpHotkeyMonitor) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP HotKey Support\hpHotkeyMonitor.exe
O23 - Service: HP Software Framework Service (hpqwmiex) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
O23 - Service: HP Service (hpsrv) - Unknown owner - C:\windows\system32\Hpservice.exe (file missing)
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: OpenVPN Service (OpenVPNService) - Unknown owner - C:\Program Files (x86)\OpenVPN\bin\openvpnserv.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: ServiceLayer - Nokia. - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\stlang64.dll,-10122 (STacSV) - IDT, Inc. - C:\Program Files\IDT\WDM\STacSV64.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: TeamViewer 6 (TeamViewer6) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe
O23 - Service: TeamViewer 7 (TeamViewer7) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe
O23 - Service: ArcCapture (uArcCapture) - ArcSoft, Inc. - C:\windows\system\uArcCapture.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management & Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Validity VCS Fingerprint Service (vcsFPService) - Validity Sensors, Inc. - C:\windows\system32\vcsFPService.exe
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 17607 bytes

[Reklama]

[jaro3]

Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected. Poté klikni na Main (hlavní stránku ) a klikni na Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranění historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit dočasné soubory Windows, vysypat koš atd.

- Pokud používáš jen Google Chrome , tak ATF nemusíš použít.


Stáhni si TFC
Otevři soubor a zavři všechny ostatní okna, Klikni na Start k zahájení procesu. Program by neměl trvat dlouho.
Poté by se měl PC restartovat, pokud ne , proveď sám.

Stáhni AdwCleaner (by Xplode)
http://www.bleepingcomputer.com/download/adwcleaner/

Ulož si ho na svojí plochu
Ukonči všechny programy , okna a prohlížeče
Spusť program poklepáním a klikni na „Prohledat-Scan“
Po skenu se objeví log ( jinak je uložen systémovem disku jako AdwCleaner[R?].txt), jeho obsah sem celý vlož.

Stáhni si Malwarebytes' Anti-Malware
- Při instalaci odeber zatržítko u „Povolit bezplatnou zkušební verzi Malwarebytes' Anti-Malware Premium“
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Aktualizace Malwarebytes' Anti-Malware a Spustit aplikaci Malwarebytes' Anti-Malware, pokud jo tak klikni na tlačítko konec
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a klikni na Skenovat nyní a
- po proběhnutí programu se ti objeví hláška vpravo dole tak klikni na b] Kopírovat do schránky [/b]a a vlož sem celý log.

- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).

Pokud budou problémy , spusť v nouz. režimu.

http://www.bleepingcomputer.com/forums/ ... i-malware/

[Motas]

# AdwCleaner v4.105 - Report created 15/12/2014 at 19:39:00
# Updated 08/12/2014 by Xplode
# Database : 2014-12-13.4 [Live]
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : Liba - LIBA-HP
# Running from : C:\Users\Liba\Downloads\adwcleaner_4.105.exe
# Option : Clean

***** [ Services ] *****

Service Deleted : c2cautoupdatesvc
Service Deleted : c2cpnrsvc

***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\ytd video downloader
Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ytd video downloader
Folder Deleted : C:\Program Files (x86)\GreenTree Applications
Folder Deleted : C:\Program Files (x86)\neurowise
Folder Deleted : C:\Users\Liba\AppData\Roaming\OpenCandy
Folder Deleted : C:\Users\Liba\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl
File Deleted : C:\Users\Liba\AppData\Roaming\Mozilla\Firefox\Profiles\f7kfxooy.default\searchplugins\ask-web-search.xml
File Deleted : C:\Users\Liba\AppData\Roaming\Mozilla\Firefox\Profiles\f7kfxooy.default\searchplugins\bingp.xml

***** [ Scheduled Tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\Search\ask.com
Key Deleted : HKLM\SOFTWARE\14919ea49a8f3b4aa3cf1058d9a64cec
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40B7-AC73-056A5EBA4A7E}
Key Deleted : HKCU\Software\APN PIP
Key Deleted : HKLM\SOFTWARE\DeviceVM
Key Deleted : HKLM\SOFTWARE\dt soft\daemon tools toolbar
Key Deleted : HKLM\SOFTWARE\PIP
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{1a413f37-ed88-4fec-9666-5c48dc4b7bb7}
Key Deleted : [x64] HKLM\SOFTWARE\DeviceVM

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17496


-\\ Mozilla Firefox v34.0.5 (x86 cs)

[f7kfxooy.default\prefs.js] - Line Deleted : user_pref("extensions.mywebsearch.prevKwdEnabled", true);
[f7kfxooy.default\prefs.js] - Line Deleted : user_pref("extensions.mywebsearch.prevKwdURL", "hxxp://www.bing.com/search?FORM=UP97DF&PC=UP97&q=");
[f7kfxooy.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.BUTTON_STRUCTURE", "[{\"b\":221354507,\"c\":\"mindspark.magnify\",\"p\":\"L.0\"},{\"b\":221354508,\"c\":\"mindspark.entersearchterms\",\"p\":\"L.0.0[...]
[f7kfxooy.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.browser.search.defaultenginename.tb", "Ask Web Search");
[f7kfxooy.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.browser.search.selectedEngine.savedPrev", "true");
[f7kfxooy.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.browser.search.selectedEngine.tb", "Ask Web Search");
[f7kfxooy.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.browser.startup.homepage.prev", "hxxp://www.seznam.cz/");
[f7kfxooy.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.browser.startup.homepage.savedPrev", "true");
[f7kfxooy.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.browser.startup.homepage.tb", "hxxp://home.tb.ask.com/index.jhtml?ptb=87305CB0-4CF9-4CCC-874F-8EE7A428A4B5&n=780ce7d8&p2=^BA5^xdm007^YYA^cz&si=CIyX0[...]
[f7kfxooy.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.browser.startup.page.savedPrev", 1);
[f7kfxooy.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.browser.startup.page.tb", 1);
[f7kfxooy.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.competitorDNS", "{\"comment\":\"refresh every 1 week (7*24*60*60*1000)\",\"refreshPeriod\":604800000,\"list\":[{\"url\":\"hxxp://www.dnsrsearch.com/[...]
[f7kfxooy.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.firstKnownVersion", "6.72.5.26004");
[f7kfxooy.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.homepage", "hxxp://home.tb.ask.com/index.jhtml?ptb=87305CB0-4CF9-4CCC-874F-8EE7A428A4B5&n=780ce7d8&p2=^BA5^xdm007^YYA^cz&si=CIyX0sj7gcICFcrKtAod2WkA[...]
[f7kfxooy.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.hp.enabled", false);
[f7kfxooy.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.hp.guardType", "HPR");
[f7kfxooy.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.hp.user.defined", true);
[f7kfxooy.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.initialized", true);
[f7kfxooy.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.installKeysSource", "Cookies");
[f7kfxooy.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.installType", "XPI");
[f7kfxooy.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.installation.contextKey", "");
[f7kfxooy.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.installation.installDate", "2014111704");
[f7kfxooy.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.installation.partnerId", "^BA5^xdm007^YYA^cz");
[f7kfxooy.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.installation.partnerSubId", "CIyX0sj7gcICFcrKtAod2WkA-Q");
[f7kfxooy.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.installation.pixelUrl", "hxxp://free.onlinemapfinder.com/install_pixels.jhtml?partner=^BA5^xdm007^YYA^cz&coId=d5dd3bd6e9ff4cfeb81c6ee25f4b52cd&tbGui[...]
[f7kfxooy.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.installation.success", true);
[f7kfxooy.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.installation.toolbarId", "87305CB0-4CF9-4CCC-874F-8EE7A428A4B5");
[f7kfxooy.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.isCompliantUninstallImplementation", true);
[f7kfxooy.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.lastActivePing", "1416983443284");
[f7kfxooy.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.lastKnownVersion", "6.76.5.33339");
[f7kfxooy.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.options.defaultSearch", true);
[f7kfxooy.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.options.homePageEnabled", true);
[f7kfxooy.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.options.keywordEnabled", true);
[f7kfxooy.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.options.tabEnabled", true);
[f7kfxooy.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.partnerPixelFired", true);
[f7kfxooy.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.successUrl", "hxxp://free.onlinemapfinder.com/installComplete.jhtml");
[f7kfxooy.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.toolbarCollapsed", true);
[f7kfxooy.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark._9pMembers_.weather.location", "10001");
[f7kfxooy.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark.hp.enabled", false);
[f7kfxooy.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark.hp.enabled.guid", "");
[f7kfxooy.default\prefs.js] - Line Deleted : user_pref("extensions.toolbar.mindspark.lastInstalled", "onlinemapfinder@mindspark.com");
[f7kfxooy.default\prefs.js] - Line Deleted : user_pref("keyword.URL", "hxxp://search.tb.ask.com/search/GGmain.jhtml?st=kwd&ptb=87305CB0-4CF9-4CCC-874F-8EE7A428A4B5&n=780ce7d8&ind=2014111704&p2=^BA5^xdm007^YYA^cz&si=CIyX0sj7gcICFcrKtAod2WkA-Q&sea[...]

-\\ Google Chrome v


*************************

AdwCleaner[R0].txt - [9212 octets] - [15/12/2014 19:36:07]
AdwCleaner[S0].txt - [9596 octets] - [15/12/2014 19:39:00]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [9656 octets] ##########

[Motas]

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 15.12.2014
Scan Time: 19:50:00
Logfile:
Administrator: Yes

Version: 2.00.4.1028
Malware Database: v2014.12.15.04
Rootkit Database: v2014.12.14.01
License: Free
Malware Protection: Disabled
Malicious Website Protection: Disabled
Self-protection: Disabled

OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: Liba

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 340238
Time Elapsed: 19 min, 16 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 9
PUP.Optional.Neurowise.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{37aaa223-fb06-4375-a67e-2724c635bb6d}, , [4bd5de85e49815219425ac229072d62a],
PUP.Optional.Neurowise.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{1af36092-b15a-4b86-8978-72b96b45342f}, , [4bd5de85e49815219425ac229072d62a],
PUP.Optional.Neurowise.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{872D57F4-F3E9-46C9-81B2-98386BCF0A61}, , [4bd5de85e49815219425ac229072d62a],
PUP.Optional.Neurowise.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{872D57F4-F3E9-46C9-81B2-98386BCF0A61}, , [4bd5de85e49815219425ac229072d62a],
PUP.Optional.Neurowise.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{1af36092-b15a-4b86-8978-72b96b45342f}, , [4bd5de85e49815219425ac229072d62a],
PUP.Optional.Neurowise.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{37AAA223-FB06-4375-A67E-2724C635BB6D}, , [4bd5de85e49815219425ac229072d62a],
PUP.Optional.Neurowise.A, HKU\S-1-5-21-2393504972-1419417108-348636176-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{37AAA223-FB06-4375-A67E-2724C635BB6D}, , [4bd5de85e49815219425ac229072d62a],
PUP.Optional.Neurowise.A, HKLM\SOFTWARE\WOW6432NODE\neurowise, , [8a969cc79ce021157bcc105804ffce32],
PUP.Optional.Neurowise.A, HKU\S-1-5-21-2393504972-1419417108-348636176-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\neurowise, , [dc44a0c3314b64d2b4940c5c7390a858],

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 5
PUP.Optional.MindSpark.A, C:\Users\Liba\AppData\Roaming\Mozilla\Firefox\Profiles\f7kfxooy.default\extensions\9pffxtbr@OnlineMapFinder_9p.com, , [f42c283baececa6ce06d43e3c83b50b0],
PUP.Optional.MindSpark.A, C:\Users\Liba\AppData\Roaming\Mozilla\Firefox\Profiles\f7kfxooy.default\extensions\9pffxtbr@OnlineMapFinder_9p.com\chrome, , [f42c283baececa6ce06d43e3c83b50b0],
PUP.Optional.MindSpark.A, C:\Users\Liba\AppData\Roaming\Mozilla\Firefox\Profiles\f7kfxooy.default\extensions\9pffxtbr@OnlineMapFinder_9p.com\META-INF, , [f42c283baececa6ce06d43e3c83b50b0],
PUP.Optional.MindSpark.A, C:\Users\Liba\AppData\Roaming\Mozilla\Firefox\Profiles\f7kfxooy.default\extensions\9pffxtbr@OnlineMapFinder_9p.com\plugins, , [f42c283baececa6ce06d43e3c83b50b0],
PUP.Optional.MindSpark.A, C:\Users\Liba\AppData\Roaming\Mozilla\Firefox\Profiles\f7kfxooy.default\OnlineMapFinder_9p, , [75ab67fcadcf6ec8a8d5cf57a85bd52b],

Files: 13
RiskWare.Tool.CK, C:\Users\Liba\Downloads\adobe_IL_CS5_keygen.exe, , [150b590a0f6db581212f57887e83f20e],
PUP.Optional.Spigot.A, C:\Users\Liba\Downloads\YTDSetup.exe, , [9b857ce7007cdf572abe20069e62cb35],
PUP.Optional.OpenCandy, C:\Users\Liba\Downloads\KMPlayer_EN_3.1.0.0_R2.exe, , [27f986ddb1cb39fd9e52148171946b95],
PUP.Optional.MindSpark.A, C:\Users\Liba\AppData\Roaming\Mozilla\Firefox\Profiles\f7kfxooy.default\extensions\9pffxtbr@OnlineMapFinder_9p.com\bootstrap.js, , [f42c283baececa6ce06d43e3c83b50b0],
PUP.Optional.MindSpark.A, C:\Users\Liba\AppData\Roaming\Mozilla\Firefox\Profiles\f7kfxooy.default\extensions\9pffxtbr@OnlineMapFinder_9p.com\chrome.manifest, , [f42c283baececa6ce06d43e3c83b50b0],
PUP.Optional.MindSpark.A, C:\Users\Liba\AppData\Roaming\Mozilla\Firefox\Profiles\f7kfxooy.default\extensions\9pffxtbr@OnlineMapFinder_9p.com\install.rdf, , [f42c283baececa6ce06d43e3c83b50b0],
PUP.Optional.MindSpark.A, C:\Users\Liba\AppData\Roaming\Mozilla\Firefox\Profiles\f7kfxooy.default\extensions\9pffxtbr@OnlineMapFinder_9p.com\install_no_bootstrap.rdf, , [f42c283baececa6ce06d43e3c83b50b0],
PUP.Optional.MindSpark.A, C:\Users\Liba\AppData\Roaming\Mozilla\Firefox\Profiles\f7kfxooy.default\extensions\9pffxtbr@OnlineMapFinder_9p.com\chrome\9pffxtbr.jar, , [f42c283baececa6ce06d43e3c83b50b0],
PUP.Optional.MindSpark.A, C:\Users\Liba\AppData\Roaming\Mozilla\Firefox\Profiles\f7kfxooy.default\extensions\9pffxtbr@OnlineMapFinder_9p.com\META-INF\manifest.mf, , [f42c283baececa6ce06d43e3c83b50b0],
PUP.Optional.MindSpark.A, C:\Users\Liba\AppData\Roaming\Mozilla\Firefox\Profiles\f7kfxooy.default\extensions\9pffxtbr@OnlineMapFinder_9p.com\META-INF\zigbert.rsa, , [f42c283baececa6ce06d43e3c83b50b0],
PUP.Optional.MindSpark.A, C:\Users\Liba\AppData\Roaming\Mozilla\Firefox\Profiles\f7kfxooy.default\extensions\9pffxtbr@OnlineMapFinder_9p.com\META-INF\zigbert.sf, , [f42c283baececa6ce06d43e3c83b50b0],
PUP.Optional.MindSpark.A, C:\Users\Liba\AppData\Roaming\Mozilla\Firefox\Profiles\f7kfxooy.default\extensions\9pffxtbr@OnlineMapFinder_9p.com\plugins\NativeMessagingDispatcher.dll, , [f42c283baececa6ce06d43e3c83b50b0],
PUP.Optional.MindSpark.A, C:\Users\Liba\AppData\Roaming\Mozilla\Firefox\Profiles\f7kfxooy.default\OnlineMapFinder_9p\87305CB0-4CF9-4CCC-874F-8EE7A428A4B5.sqlite, , [75ab67fcadcf6ec8a8d5cf57a85bd52b],

Physical Sectors: 0
(No malicious items detected)


(end)

[jaro3]

Spusť znovu AdwCleaner (u Windows Vista či Windows7, klikni na AdwCleaner pravým a vyber „Spustit jako správce“
klikni na „Prohledat-Scan“, po prohledání klikni na „ Vymazat-Clean“

Program provede opravu, po automatickém restartu neukáže log (C:\AdwCleaner [S?].txt) , jeho obsah sem celý vlož.

Stáhni si Junkware Removal Tool by Thisisu

na svojí plochu.

Deaktivuj si svůj antivirový program. Pravým tl. myši klikni na JRT.exe a vyber „spustit jako správce“. Pro pokračování budeš vyzván ke stisknutí jakékoliv klávesy. Na nějakou klikni.
Začne skenování programu. Skenování může trvat dloho , podle množství nákaz. Po ukončení skenu se objeví log (JRT.txt) , který se uloží na ploše.
Zkopíruj sem prosím celý jeho obsah.

. spusť znovu MbAM a dej Skenovat nyní
- po proběhnutí programu se ti objeví hláška tak klikni na „Vše do karantény(smazat vybrané)“ a na „Exportovat záznam“ a vyber „textový soubor“ , soubor nějak pojmenuj a někam ho ulož. Zkopíruj se celý obsah toho logu.

Stáhni si RogueKiller by Adlice Software
32bit.:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
64bit.:
http://www.sur-la-toile.com/RogueKiller ... lerX64.exe
na svojí plochu.
- Zavři všechny ostatní programy a prohlížeče.
- Pro OS Vista a win7 spusť program RogueKiller.exe jako správce , u XP poklepáním.
- počkej až skončí Prescan -vyhledávání škodlivých procesů.
- Zkontroluj , zda máš zaškrtnuto:
Kontrola MBR
Kontrola Faked
Antirootkit
-Potom klikni na „Prohledat“.
- Program skenuje procesy PC. Po proskenování klikni na „Zpráva“celý obsah logu sem zkopíruj.
Pokud je program blokován , zkus ho spustit několikrát. Pokud dále program nepůjde spustit a pracovat, přejmenuj ho na winlogon.exe.