Prosim o kontrolu logu Vyřešeno

[Gumimacko]

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 26. 8. 2014
Scan Time: 20:36:26
Logfile: fghfghfg.txt
Administrator: Yes

Version: 2.00.2.1012
Malware Database: v2014.08.26.07
Rootkit Database: v2014.08.21.01
License: Trial
Malware Protection: Enabled
Malicious Website Protection: Enabled
Self-protection: Disabled

OS: Windows 7 Service Pack 1
CPU: x86
File System: NTFS
User: Hanka

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 281721
Time Elapsed: 9 min, 59 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 0
(No malicious items detected)

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 0
(No malicious items detected)

Files: 0
(No malicious items detected)

Physical Sectors: 0
(No malicious items detected)


(end)

[Reklama]

[Gumimacko]

scan na RogueKiller by Adlice Software sa mi nedokonči, vždý sa mi zastavi a čakam aj 20 min a nepokračuje tak potom ho zrušim, skušal som
aj opakovat ale to iste a dalej som skusil aj premenovat ten program ale nepomohlo

[jaro3]

Zkusil si ho spustit v nouz. režimu?

[Gumimacko]

to nie vyskušam

[Gumimacko]

skusil som aj v nudzovom režime ale znova sa kontrola zastavila a nepokračovala
tak som ju stopol a tu je ten log ktory je neuplny...kontrola nebola ani v polovici ked sa to zastavilo

RogueKiller V9.2.8.0 [Jul 11 2014] by Adlice Software
mail : http://www.adlice.com/contact/
Feedback : http://forum.adlice.com
Webové stránky : http://www.adlice.com/softwares/roguekiller/
Blog : http://www.adlice.com

Operačný systém : Windows 7 (6.1.7601 Service Pack 1) 32 bits version
Spustené v : Núdzový režim
Užívateľ : Hanka [Práva Správcu]
Režim : Kontrola Aborted -- Dátum : 08/27/2014 14:43:37

¤¤¤ Škodlivé procesy : 0 ¤¤¤

¤¤¤ Záznamy Registrov : 4 ¤¤¤
[PUM.Policies] HKEY_USERS\S-1-5-21-453876874-1984889947-2870445166-1001\Software\Microsoft\Windows\CurrentVersion\Policies\System | DisableRegistryTools : 0 -> NÁJDENÉ
[PUM.Policies] HKEY_USERS\S-1-5-21-453876874-1984889947-2870445166-1001\Software\Microsoft\Windows\CurrentVersion\Policies\System | DisableTaskMgr : 0 -> NÁJDENÉ
[PUM.DesktopIcons] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1 -> NÁJDENÉ
[PUM.DesktopIcons] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {59031a47-3f72-44a7-89c5-5595fe6b30ee} : 1 -> NÁJDENÉ

¤¤¤ naplánované úlohy : 0 ¤¤¤

¤¤¤ Súbory : 0 ¤¤¤

¤¤¤ Súbor HOSTS : 0 ¤¤¤

¤¤¤ Antirootkit : 0 (Driver: NENAHRATÉ [0xc000035f]) ¤¤¤

¤¤¤ webové prehliadače : 0 ¤¤¤

¤¤¤ Kontrola MBR : ¤¤¤

============================================
RKreport_SCN_08262014_211228.log - RKreport_SCN_08262014_213319.log - RKreport_SCN_08262014_213334.log - RKreport_SCN_08262014_213335.log
RKreport_SCN_08262014_213340.log - RKreport_SCN_08262014_214546.log - RKreport_SCN_08262014_214607.log - RKreport_SCN_08272014_141349.log
RKreport_SCN_08272014_142830.log - RKreport_SCN_08272014_142926.log - RKreport_SCN_08272014_143736.log

[jaro3]

Zavři všechny programy a prohlížeče. Deaktivuj antivir a firewall.
Prosím, odpoj všechny USB nebo externí disky z počítače před spuštěním tohoto programu.
Spusť znovu RogueKiller ( Pro Windows Vista nebo Windows 7, klepni pravým a vyber "Spustit jako správce", ve Windows XP poklepej ke spuštění).
- Počkej, až Prescan dokončí práci...
- Pak klikni na "Prohledat " ,po jeho skončení:


- V záložkách (Registry , Tasks , Web Browser apod.) vše zatrhni (dej zatržítka)

- Klikni na "Smazat"
- Počkej, dokud Status box nezobrazí " Mazání dokončeno "
- Klikni na "Zpráva " a zkopíruj a vlož obsah té zprávy prosím sem. Log je možno nalézt v RKreport [číslo]. txt na ploše.
- Zavři RogueKiller


zase spíš v nouz. režimu.

+
Stahni
Zoek.exe

a uloz si ho na plochu.
Zavři všechny ostatní programy , okna i prohlížeče.
Spusť Zoek.exe ( u win vista , win7, 8 klikni na něj pravým a vyber : „Spustit jako správce“
- pozor , náběh programu může trvat déle.

Do okna programu vlož skript níže:

Kód: Vybrat vše

autoclean;
emptyclsid;
iedefaults;
FFdefaults;
CHRdefaults;
emptyalltemp;
resethosts;

klikni na Run Script
Program provede sken , opravu, sken i oprava může trvat i více minut ,je třeba posečkat do konce. Do okna neklikej!
Program nabídne restart , potvrď .

Po restartu se může nějaký čas ukázat pouze černá plocha , to je normální. Je třeba počkat až se vytvoří log. Ten si můžeš uložit třeba do dokumentů , jinak se sám ukládá do:
C:\zoek-results.log
Zkopíruj sem celý obsah toho logu.

[Gumimacko]

RogueKiller V9.2.8.0 [Jul 11 2014] by Adlice Software
mail : http://www.adlice.com/contact/
Feedback : http://forum.adlice.com
Webové stránky : http://www.adlice.com/softwares/roguekiller/
Blog : http://www.adlice.com

Operačný systém : Windows 7 (6.1.7601 Service Pack 1) 32 bits version
Spustené v : Normálny režim
Užívateľ : Hanka [Práva Správcu]
Režim : Odebrať -- Dátum : 08/27/2014 19:56:50

¤¤¤ Škodlivé procesy : 0 ¤¤¤

¤¤¤ Záznamy Registrov : 4 ¤¤¤
[PUM.Policies] HKEY_USERS\S-1-5-21-453876874-1984889947-2870445166-1001\Software\Microsoft\Windows\CurrentVersion\Policies\System | DisableRegistryTools : 0 -> VYMAZANÉ
[PUM.Policies] HKEY_USERS\S-1-5-21-453876874-1984889947-2870445166-1001\Software\Microsoft\Windows\CurrentVersion\Policies\System | DisableTaskMgr : 0 -> VYMAZANÉ
[PUM.DesktopIcons] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1 -> NAHRADENÉ (0)
[PUM.DesktopIcons] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {59031a47-3f72-44a7-89c5-5595fe6b30ee} : 1 -> NAHRADENÉ (0)

¤¤¤ naplánované úlohy : 1 ¤¤¤
[Suspicious.Path] \\Registration -- "C:\Program Files\Hewlett-Packard\HP Setup\RemEngine.exe" (Registration ShowMessageTask2D) -> VYMAZANÉ

¤¤¤ Súbory : 0 ¤¤¤

¤¤¤ Súbor HOSTS : 0 ¤¤¤

¤¤¤ Antirootkit : 40 (Driver: NAHRATÉ) ¤¤¤
[EAT:Addr] (explorer.exe) wlanhlp.dll - DllRegisterServer : C:\windows\system32\mtxoci.dll @ 0x6fc5ccd4
[EAT:Addr] (explorer.exe) wlanhlp.dll - DllUnregisterServer : C:\windows\system32\mtxoci.dll @ 0x6fc5bfbe
[EAT:Addr] (explorer.exe) wlanhlp.dll - Enlist : C:\windows\system32\mtxoci.dll @ 0x6fc55d7b
[EAT:Addr] (explorer.exe) wlanhlp.dll - GetXaSwitch : C:\windows\system32\mtxoci.dll @ 0x6fc5d49b
[EAT:Addr] (explorer.exe) wlanhlp.dll - MTxOciGetVersion : C:\windows\system32\mtxoci.dll @ 0x6fc55817
[EAT:Addr] (explorer.exe) wlanhlp.dll - MTxOciInit : C:\windows\system32\mtxoci.dll @ 0x6fc55793
[EAT:Addr] (explorer.exe) wlanhlp.dll - MTxOciRegisterCursor : C:\windows\system32\mtxoci.dll @ 0x6fc556c1
[EAT:Addr] (explorer.exe) wlanhlp.dll - MTxolog : C:\windows\system32\mtxoci.dll @ 0x6fc558b6
[EAT:Addr] (explorer.exe) wlanhlp.dll - obindps : C:\windows\system32\mtxoci.dll @ 0x6fc543fd
[EAT:Addr] (explorer.exe) wlanhlp.dll - obndra : C:\windows\system32\mtxoci.dll @ 0x6fc55406
[EAT:Addr] (explorer.exe) wlanhlp.dll - obndrn : C:\windows\system32\mtxoci.dll @ 0x6fc554bd
[EAT:Addr] (explorer.exe) wlanhlp.dll - obndrv : C:\windows\system32\mtxoci.dll @ 0x6fc55566
[EAT:Addr] (explorer.exe) wlanhlp.dll - obreak : C:\windows\system32\mtxoci.dll @ 0x6fc544c4
[EAT:Addr] (explorer.exe) wlanhlp.dll - ocan : C:\windows\system32\mtxoci.dll @ 0x6fc54563
[EAT:Addr] (explorer.exe) wlanhlp.dll - oclose : C:\windows\system32\mtxoci.dll @ 0x6fc545ef
[EAT:Addr] (explorer.exe) wlanhlp.dll - ocof : C:\windows\system32\mtxoci.dll @ 0x6fc54697
[EAT:Addr] (explorer.exe) wlanhlp.dll - ocom : C:\windows\system32\mtxoci.dll @ 0x6fc5472b
[EAT:Addr] (explorer.exe) wlanhlp.dll - ocon : C:\windows\system32\mtxoci.dll @ 0x6fc547bf
[EAT:Addr] (explorer.exe) wlanhlp.dll - odefin : C:\windows\system32\mtxoci.dll @ 0x6fc55612
[EAT:Addr] (explorer.exe) wlanhlp.dll - odefinps : C:\windows\system32\mtxoci.dll @ 0x6fc54853
[EAT:Addr] (explorer.exe) wlanhlp.dll - odescr : C:\windows\system32\mtxoci.dll @ 0x6fc54a38
[EAT:Addr] (explorer.exe) wlanhlp.dll - odessp : C:\windows\system32\mtxoci.dll @ 0x6fc54911
[EAT:Addr] (explorer.exe) wlanhlp.dll - oerhms : C:\windows\system32\mtxoci.dll @ 0x6fc54ae1
[EAT:Addr] (explorer.exe) wlanhlp.dll - oermsg : C:\windows\system32\mtxoci.dll @ 0x6fc54bf8
[EAT:Addr] (explorer.exe) wlanhlp.dll - oexec : C:\windows\system32\mtxoci.dll @ 0x6fc54c5d
[EAT:Addr] (explorer.exe) wlanhlp.dll - oexfet : C:\windows\system32\mtxoci.dll @ 0x6fc54ce9
[EAT:Addr] (explorer.exe) wlanhlp.dll - oexn : C:\windows\system32\mtxoci.dll @ 0x6fc54d80
[EAT:Addr] (explorer.exe) wlanhlp.dll - ofen : C:\windows\system32\mtxoci.dll @ 0x6fc54e14
[EAT:Addr] (explorer.exe) wlanhlp.dll - ofetch : C:\windows\system32\mtxoci.dll @ 0x6fc54ea4
[EAT:Addr] (explorer.exe) wlanhlp.dll - oflng : C:\windows\system32\mtxoci.dll @ 0x6fc54f30
[EAT:Addr] (explorer.exe) wlanhlp.dll - ogetpi : C:\windows\system32\mtxoci.dll @ 0x6fc54fd0
[EAT:Addr] (explorer.exe) wlanhlp.dll - olog : C:\windows\system32\mtxoci.dll @ 0x6fc558ab
[EAT:Addr] (explorer.exe) wlanhlp.dll - ologTransacted : C:\windows\system32\mtxoci.dll @ 0x6fc55e4b
[EAT:Addr] (explorer.exe) wlanhlp.dll - ologof : C:\windows\system32\mtxoci.dll @ 0x6fc55c9d
[EAT:Addr] (explorer.exe) wlanhlp.dll - oopen : C:\windows\system32\mtxoci.dll @ 0x6fc550fe
[EAT:Addr] (explorer.exe) wlanhlp.dll - oopt : C:\windows\system32\mtxoci.dll @ 0x6fc5506a
[EAT:Addr] (explorer.exe) wlanhlp.dll - oparse : C:\windows\system32\mtxoci.dll @ 0x6fc55236
[EAT:Addr] (explorer.exe) wlanhlp.dll - opinit : C:\windows\system32\mtxoci.dll @ 0x6fc5582e
[EAT:Addr] (explorer.exe) wlanhlp.dll - orol : C:\windows\system32\mtxoci.dll @ 0x6fc552d0
[EAT:Addr] (explorer.exe) wlanhlp.dll - osetpi : C:\windows\system32\mtxoci.dll @ 0x6fc5536f

¤¤¤ webové prehliadače : 12 ¤¤¤
[IE:Addon] System : Nuance PDF [{E3286BF1-E654-42FF-B4A6-5E111731DF6B}] -> VYMAZANÉ
[IE:Addon] System : Bing Bar [{8dcb7100-df86-4384-8842-8fa844297b3f}] -> VYMAZANÉ
[IE:Addon] System : Google Toolbar [{2318C2B1-4965-11d4-9B18-009027A5CD4F}] -> VYMAZANÉ
[FIREFX:Addon] zqcu4bk9.default : McAfee Security Scan Plus detection [{e4f94d1e-2f53-401e-8885-681602c0ddd8}] -> VYMAZANÉ
[FIREFX:Addon] zqcu4bk9.default : PDF Converter 6.0 [nuance@pdf6] -> VYMAZANÉ
[FIREFX:Addon] zqcu4bk9.default : Skype Click to Call [{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}] -> VYMAZANÉ
[CHROME:Addon] Default : Music Toolbar [aaaaihhnfnbnpbhpagnmoplpcjbediml] -> ERROR [2]
[CHROME:Addon] Default : YouTube [blpcfgokakmgnkcojhhkbfbldkacnbeo] -> ERROR [2]
[CHROME:Addon] Default : Google Search [coobgpohoikkiipiblmjeljniedjpjpf] -> ERROR [2]
[CHROME:Addon] Default : Skype Click to Call [lifbcibllhkdhoafpjfnlhfpfgnpldfl] -> ERROR [2]
[CHROME:Addon] Default : Google Wallet [nmmhkkegccagdldgiimedpiccmgmieda] -> ERROR [2]
[CHROME:Addon] Default : Gmail [pjkljhegncpnkpknbcohdijeoejaedia] -> ERROR [2]

¤¤¤ Kontrola MBR : ¤¤¤
+++++ PhysicalDrive0: Hitachi HTS725050A9A364 +++++
--- User ---
[MBR] 7ae581d20392617500fc78418a9c2a23
[BSP] 14f54d4019d670c9d0444b40265b046d : HP MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 300 MB
1 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 616448 | Size: 459229 MB
2 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 941117440 | Size: 15360 MB
3 - [XXXXXX] FAT32-LBA (0xc) [VISIBLE] Offset (sectors): 972574720 | Size: 2043 MB
User = LL1 ... OK
User = LL2 ... OK


============================================
RKreport_SCN_08262014_211228.log - RKreport_SCN_08262014_213319.log - RKreport_SCN_08262014_213334.log - RKreport_SCN_08262014_213335.log
RKreport_SCN_08262014_213340.log - RKreport_SCN_08262014_214546.log - RKreport_SCN_08262014_214607.log - RKreport_SCN_08272014_141349.log
RKreport_SCN_08272014_142830.log - RKreport_SCN_08272014_142926.log - RKreport_SCN_08272014_143736.log - RKreport_SCN_08272014_144337.log
RKreport_SCN_08272014_195111.log

[Gumimacko]

Zoek.exe v5.0.0.0 Updated 06-August-2014
Tool run by Hanka on st 27. 08. 2014 at 20:29:42,87.
Microsoft Windows 7 Home Premium 6.1.7601 Service Pack 1 x86
Running in: Safe Mode MINIMAL No Internet Access Detected
Launched: C:\Users\Hanka\Desktop\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

# localhost name resolution is handle within DNS itself.
127.0.0.1 localhost
::1 localhost

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-453876874-1984889947-2870445166-1001\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D2CE3E00-F94A-4740-988E-03DC2F38C34F} deleted successfully
HKEY_USERS\S-1-5-21-453876874-1984889947-2870445166-1001\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D2CE3E00-F94A-4740-988E-03DC2F38C34F} deleted successfully
HKEY_USERS\S-1-5-21-453876874-1984889947-2870445166-1001\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AA58ED58-01DD-4d91-8333-CF10577473F7} deleted successfully
HKEY_USERS\S-1-5-21-453876874-1984889947-2870445166-1001\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AA58ED58-01DD-4d91-8333-CF10577473F7} deleted successfully
HKEY_USERS\S-1-5-21-453876874-1984889947-2870445166-1001\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DA986D7D-CCAF-47B2-84FE-BFA1549BEBF9} deleted successfully
HKEY_USERS\S-1-5-21-453876874-1984889947-2870445166-1001\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{DA986D7D-CCAF-47B2-84FE-BFA1549BEBF9} deleted successfully
HKEY_USERS\S-1-5-21-453876874-1984889947-2870445166-1001\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8DCB7100-DF86-4384-8842-8FA844297B3F} deleted successfully
HKEY_USERS\S-1-5-21-453876874-1984889947-2870445166-1001\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{8DCB7100-DF86-4384-8842-8FA844297B3F} deleted successfully
HKEY_USERS\S-1-5-21-453876874-1984889947-2870445166-1001\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2318C2B1-4965-11D4-9B18-009027A5CD4F} deleted successfully
HKEY_USERS\S-1-5-21-453876874-1984889947-2870445166-1001\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2318C2B1-4965-11D4-9B18-009027A5CD4F} deleted successfully
HKEY_CLASSES_ROOT\CLSID\{D2CE3E00-F94A-4740-988E-03DC2F38C34F} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D2CE3E00-F94A-4740-988E-03DC2F38C34F} deleted successfully
HKEY_CLASSES_ROOT\CLSID\{AA58ED58-01DD-4d91-8333-CF10577473F7} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7} deleted successfully
HKEY_CLASSES_ROOT\CLSID\{DA986D7D-CCAF-47B2-84FE-BFA1549BEBF9} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DA986D7D-CCAF-47B2-84FE-BFA1549BEBF9} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2318C2B1-4965-11D4-9B18-009027A5CD4F} deleted successfully

==== Deleting CLSID Registry Values ======================

HKEY_USERS\S-1-5-21-453876874-1984889947-2870445166-1001\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{2318C2B1-4965-11D4-9B18-009027A5CD4F} deleted successfully
HKEY_USERS\S-1-5-21-453876874-1984889947-2870445166-1001\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{21FA44EF-376D-4D53-9B0F-8A89D3229068} deleted successfully

==== Deleting Services ======================


==== FireFox Fix ======================

Deleted from C:\Users\Hanka\AppData\Roaming\Mozilla\Firefox\Profiles\zqcu4bk9.default\prefs.js:

Added to C:\Users\Hanka\AppData\Roaming\Mozilla\Firefox\Profiles\zqcu4bk9.default\prefs.js:
user_pref("browser.startup.homepage", "http://www.google.com");
user_pref("browser.search.defaulturl", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.newtab.url", "http://www.google.com/");
user_pref("browser.search.defaultengine", "Google");
user_pref("browser.search.defaultenginename", "Google");
user_pref("browser.search.selectedEngine", "Google");
user_pref("browser.search.order.1", "Google");
user_pref("keyword.URL", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.search.suggest.enabled", true);
user_pref("browser.search.useDBForOrder", true);

==== Deleting Files \ Folders ======================

C:\UNWISE.EXE deleted
C:\Users\Hanka\Searches deleted
C:\Users\Hanka\AppData\LocalLow\imeshmusicboxtoolbar181 deleted
"C:\Users\Hanka\AppData\Local\{31DF50B9-ED3E-4704-A043-F22FCCB25170}" deleted

==== Firefox Extensions Registry ======================

[HKEY_CURRENT_USER\Software\Mozilla\Firefox\Extensions]
"{e4f94d1e-2f53-401e-8885-681602c0ddd8}"="C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi" [04. 04. 2014 12:36]

==== Firefox Extensions ======================

ProfilePath: C:\Users\Hanka\AppData\Roaming\Mozilla\Firefox\Profiles\zqcu4bk9.default
- PDF Converter 6.0 - %ProfilePath%\extensions\nuance@pdf6

AppDir: C:\Program Files\Mozilla Firefox
- Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
- Skype Click to Call - %AppDir%\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi

==== Firefox Plugins ======================

Profilepath: C:\Users\Hanka\AppData\Roaming\Mozilla\Firefox\Profiles\zqcu4bk9.default
4390CCD3790F8D9C427C0C29590C62D7 - C:\windows\system32\Macromed\Flash\NPSWF32_14_0_0_145.dll - Shockwave Flash
FB5621842FDABF9F8359775573498FBC - C:\Users\Hanka\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll - Google Update
FB5621842FDABF9F8359775573498FBC - C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll - Google Update
5CB01CF141E021DAAE96991A5BA57944 - C:\Users\Hanka\AppData\Roaming\Mozilla\plugins\npo1d.dll - Google Talk Plugin Video Renderer
DD31F0C436E4F5E6FA9783FF8A80ADC1 - C:\Users\Hanka\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll - Google Talk Plugin
893BF7D2261C56C24F813405D9D018E0 - c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll - Silverlight Plug-In
CBFE3156904AB2D1A097F5E74A6C62F3 - C:\Program Files\VideoLAN\VLC\npvlc.dll - VLC Web Plugin
7A1E2AF50DDCDD49C114C1099DBEF6E1 - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\dtplugin\npdeployJava1.dll - Java Deployment Toolkit 7.0.50.255
D0DA6B2FB50A0667CF4BACC2AEFEA009 - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll - Java(TM) Platform SE 7 U5
8CC90A080E1C3C7DCEF3A0FA4CC2AF61 - C:\Program Files\Nuance\PDF Reader\bin\nppdf.dll - Zeon Plus
8CC90A080E1C3C7DCEF3A0FA4CC2AF61 - C:\Program Files\Nuance\PDF Reader\Bin\nppdf.dll - Zeon Plus
E01E08A5C8BB2196E9C7E23F8370D5FD - C:\Program Files\Nuance\PDF Professional 6\Bin\nppdf.dll - Zeon Plus
8DA2ED6B04EA33F2EAE8BA883F903729 - c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrlui.dll - Microsoft® Silverlight


==== Chrome Look ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
aaaaihhnfnbnpbhpagnmoplpcjbediml - C:\Users\Hanka\AppData\Local\imeshmusicboxtoolbar181\GC\toolbar.crx[]
lifbcibllhkdhoafpjfnlhfpfgnpldfl - C:\Program Files\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx[14. 07. 2014 18:22]

Music Toolbar - Hanka\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aaaaihhnfnbnpbhpagnmoplpcjbediml
Skype Click to Call - Hanka\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl

==== Chromium Startpages ======================

C:\Users\Hanka\AppData\Local\Google\Chrome\User Data\Profile 1\Preferences
"homepage": "http://www.google.com/",
"startup_urls": [ "http://www.google.com/", "http://www.search.ask.com/?o=APN10653A&gct=hp&d=1-1687&v=a12281-274&t=4", "http://www.search.ask.com/?o=APN10653A&gct=hp&d=1-1687&v=a13337-274&t=4" ],


==== Chrome Fix ======================

C:\Users\Hanka\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aaaaihhnfnbnpbhpagnmoplpcjbediml deleted successfully

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com"
"Default_Page_URL"="http://www.bing.com"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="http://www.bing.com"
"Start Page"="http://www.bing.com"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
No DefaultScope Set For HKCU

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Start Page"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{012E1000-F331-11DB-8314-0800200C9A66}"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
{012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC"
{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7SKPT_sk"
{783FB0DE-DAD1-42CA-BEEF-3AA2038443F1} Bing Url="http://www.bing.com/search?q={searchTerms}&form=CMNTDF&pc=CMNTDF&src=IE-SearchBox"

==== Reset Google Chrome ======================

C:\Users\Hanka\AppData\Local\Google\Chrome\User Data\Profile 1\Preferences was reset successfully
C:\Users\Hanka\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully
C:\Users\Hanka\AppData\Local\Google\Chrome\User Data\Profile 1\Web Data was reset successfully

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions\aaaaihhnfnbnpbhpagnmoplpcjbediml deleted successfully
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\imeshmusicboxtoolbar181CR deleted successfully
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\imeshmusicboxtoolbar181IE deleted successfully
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\xoarwyj deleted successfully

==== Empty IE Cache ======================

C:\Users\Hanka\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\windows\serviceprofiles\Localservice\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully
C:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Hanka\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot

==== Empty FireFox Cache ======================

C:\Users\Hanka\AppData\Local\Mozilla\Firefox\Profiles\zqcu4bk9.default\Cache emptied successfully

==== Empty Chrome Cache ======================

C:\Users\Hanka\AppData\Local\Google\Chrome\User Data\Profile 1\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== C:\zoek_backup content ======================

C:\zoek_backup (files=199 folders=53 1189109 bytes)

==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\Hanka\AppData\Local\Temp will be emptied at reboot
C:\windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\windows\Temp successfully emptied
C:\Users\Hanka\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== Deleting Files / Folders ======================

"C:\Users\Hanka\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" not found

==== EOF on st 27. 08. 2014 at 20:43:50,25 ======================

[jaro3]

Co problémy?

[Gumimacko]

počitač sa zrychlil takže to vyzera dobre a ešte by som potreboval poradit neaky antivirus

[jaro3]

Stáhni si zde DelFix

ulož si soubor na plochu.
Poklepáním na ikonu spusť nástroj Delfix.exe
( Ve Windows Vista, Windows 7 a 8, musíš spustit soubor pravým tlačítkem myši -> Spustit jako správce .
V hlavním menu, zkontroluj tyto možnosti - Odstranění dezinfekce nástrojů (Remove desinfection tools) – Vyčistit body obnovy (Purge System Restore)
Poté klikněte na tlačítko Spustit (Run) a nech nástroj dělat svoji práci

Poté se zpráva se otevře (DelFix.txt). Vlož celý obsah zprávy sem.Jinak je zpráva zde:
v C: \ DelFix.txt

Avira , Avast nebo AVG .

Pokud nejsou problémy , je to vše a můžeš dát vyřešeno , zelenou fajfku.

[Gumimacko]

# DelFix v10.8 - Logfile created 28/08/2014 at 09:40:47
# Updated 29/07/2014 by Xplode
# Username : Hanka - HANKA-HP
# Operating System : Windows 7 Home Premium Service Pack 1 (32 bits)

~ Removing disinfection tools ...

Deleted : C:\zoek_backup
Deleted : C:\AdwCleaner
Deleted : C:\zoek-results.log
Deleted : C:\Users\Hanka\Desktop\AdwCleaner.exe
Deleted : C:\Users\Hanka\Desktop\JRT.exe
Deleted : C:\Users\Hanka\Desktop\JRT.txt
Deleted : C:\Users\Hanka\Desktop\RogueKiller.exe
Deleted : C:\Users\Hanka\Desktop\winlogon.exe
Deleted : C:\Users\Hanka\Desktop\zoek.exe
Deleted : C:\Users\Hanka\Downloads\HijackThis.exe
Deleted : C:\Users\Hanka\Downloads\hijackthis.log
Deleted : C:\Users\Hanka\Downloads\TFC.exe
Deleted : HKLM\SOFTWARE\OldTimer Tools
Deleted : HKLM\SOFTWARE\AdwCleaner
Deleted : HKLM\SOFTWARE\TrendMicro\Hijackthis

~ Cleaning system restore ...

Deleted : RP #181 [Windows 7 Service Pack 1 | 08/13/2014 15:33:18]
Deleted : RP #182 [Windows Update | 08/22/2014 07:13:49]
Deleted : RP #183 [Nainstalováno: ESET Smart Security | 08/26/2014 11:32:35]

New restore point created !

########## - EOF - ##########