Prosím o kontrolu logu - zpomalený počítač

rev · Příspěvekod **rev** » 11 říj 2014 19:59

Ahoj, prosím o překontrolování logu. Díky

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:43:56, on 11.10.2014
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
D:\WINDOWS\System32\smss.exe
D:\WINDOWS\system32\csrss.exe
D:\WINDOWS\system32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\Explorer.EXE
D:\Program Files\AVAST Software\Avast\AvastSvc.exe
D:\WINDOWS\system32\spoolsv.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\system32\dgdersvc.exe
D:\WINDOWS\system32\FsUsbExService.Exe
D:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jqs.exe
D:\WINDOWS\system32\nvsvc32.exe
D:\WINDOWS\system32\svchost.exe
D:\Program Files\Vodafone\Vodafone Mobile Connect\Bin\VMCService.exe
D:\WINDOWS\system32\wbem\wmiprvse.exe
D:\WINDOWS\System32\alg.exe
D:\WINDOWS\system32\wscntfy.exe
D:\Program Files\MSI\Live Update 3\LMonitor.exe
D:\Program Files\Vodafone\Vodafone Mobile Connect\Bin\MobileConnect.exe
D:\WINDOWS\SOUNDMAN.EXE
D:\Program Files\QuickTime\qttask.exe
D:\Program Files\Common Files\Java\Java Update\jusched.exe
D:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
D:\Program Files\AVAST Software\Avast\AvastUI.exe
D:\WINDOWS\system32\ctfmon.exe
D:\Program Files\Samsung\Kies\KiesTrayAgent.exe
D:\Program Files\MSI\3D!Turbo Experience\3D!Turbo.exe
D:\WINDOWS\system32\wbem\unsecapp.exe
D:\Program Files\Common Files\Java\Java Update\jucheck.exe
D:\Program Files\Mozilla Firefox\firefox.exe
D:\Program Files\Mozilla Firefox\plugin-container.exe
D:\Program Files\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.seznam.cz/?clid=22668
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.seznam.cz/?sourceid=quicksearch_22668&q={searchTerms}
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.seznam.cz/?clid=22668
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.seznam.cz/?clid=22668
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.seznam.cz/?sourceid=quicksearch_22668&q={searchTerms}
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.seznam.cz/?clid=22668
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - D:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Web Assistant Helper - {336D0C35-8A85-403a-B9D2-65C292C39087} - D:\Program Files\Web Assistant\Extension32.dll (file missing)
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - D:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - D:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll
O2 - BHO: Yontoo Layers - {FD72061E-9FDE-484D-A58A-0BAB4151CAD8} - D:\Program Files\Yontoo\YontooIEClient.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE D:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NVCLOCK] Rundll32 nvclock.dll,fnNvclock
O4 - HKLM\..\Run: [LiveMonitor] D:\Program Files\MSI\Live Update 3\LMonitor.exe
O4 - HKLM\..\Run: [MobileConnect] %programfiles%\Vodafone\Vodafone Mobile Connect\Bin\MobileConnect.exe /silent
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [SW20] D:\WINDOWS\system32\sw20.exe
O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Adobe ARM] "D:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [QuickTime Task] "D:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] "D:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [ISUSPM Startup] D:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "D:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [AvastUI.exe] "D:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKCU\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [KiesTrayAgent] D:\Program Files\Samsung\Kies\/\KiesTrayAgent.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: fliptoast.lnk = D:\Program Files\fliptoast\fliptoast.exe
O4 - Global Startup: 3D!Turbo Experience.lnk = D:\Program Files\MSI\3D!Turbo Experience\3D!Turbo.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://D:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - D:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - D:\WINDOWS\system32\browseui.dll
O23 - Service: avast! Antivirus - AVAST Software - D:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Device Error Recovery Service (dgdersvc) - Devguru Co., Ltd. - D:\WINDOWS\system32\dgdersvc.exe
O23 - Service: FsUsbExService - Teruten - D:\WINDOWS\system32\FsUsbExService.Exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - D:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - D:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Oracle Corporation - D:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jqs.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - D:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - D:\WINDOWS\system32\nvsvc32.exe
O23 - Service: ServiceLayer - Nokia. - D:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Vodafone Mobile Connect Service (VMCService) - Vodafone - D:\Program Files\Vodafone\Vodafone Mobile Connect\Bin\VMCService.exe

--
End of file - 7052 bytes

Reklama

Příspěvekod **jaro3** » 12 říj 2014 09:30

Platform: Windows XP SP2 --- co si doinstalovat SP3??

Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected. Poté klikni na Main (hlavní stránku ) a klikni na Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranění historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit dočasné soubory Windows, vysypat koš atd.

- Pokud používáš jen Google Chrome , tak ATF nemusíš použít.

Stáhni si TFC
Otevři soubor a zavři všechny ostatní okna, Klikni na Start k zahájení procesu. Program by neměl trvat dlouho.
Poté by se měl PC restartovat, pokud ne , proveď sám.

Stáhni AdwCleaner (by Xplode)
http://www.bleepingcomputer.com/download/adwcleaner/

Ulož si ho na svojí plochu
Ukonči všechny programy , okna a prohlížeče
Spusť program poklepáním a klikni na „Prohledat-Scan“
Po skenu se objeví log ( jinak je uložen systémovem disku jako AdwCleaner[R?].txt), jeho obsah sem celý vlož.

Stáhni si Malwarebytes' Anti-Malware
- Při instalaci odeber zatržítko u „Povolit bezplatnou zkušební verzi Malwarebytes' Anti-Malware Premium“
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Aktualizace Malwarebytes' Anti-Malware a Spustit aplikaci Malwarebytes' Anti-Malware, pokud jo tak klikni na tlačítko konec
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a klikni na Skenovat nyní a
- po proběhnutí programu se ti objeví hláška vpravo dole tak klikni na b] Kopírovat do schránky [/b]a a vlož sem celý log.

- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).

Pokud budou problémy , spusť v nouz. režimu.

rev · Příspěvekod **rev** » 12 říj 2014 16:04

Tak předně, nevím, co je vlastně to PS2 či PS3 :smile:

Vše jsem udělal dle návodu. Bohužel u Mbab mi to stále hází nějakou chybovost a tím pádem log nemám. Nějak se to nainstaluje, ale už při instalaci mi to hlásí 4 chyby, tak nevím co s tím. Vkládám aspon log z ADW

# AdwCleaner v3.311 - Report created 12/10/2014 at 15:28:16
# Updated 30/09/2014 by Xplode
# Operating System : Microsoft Windows XP Service Pack 2 (32 bits)
# Username : Rev - S-B008CC2B52274
# Running from : D:\Documents and Settings\Rev\Plocha\adwcleaner_3.311.exe
# Option : Scan

***** [ Services ] *****

***** [ Files / Folders ] *****

File Found : D:\Documents and Settings\Rev\Data aplikací\Mozilla\Firefox\Profiles\8e2c9kd8.default\Extensions\OneClickDownload@OneClickDownload.com.xpi
File Found : D:\Documents and Settings\Rev\Data aplikací\Mozilla\Firefox\Profiles\8e2c9kd8.default\Extensions\plugin@yontoo.com.xpi
File Found : D:\Documents and Settings\Rev\Data aplikací\Mozilla\Firefox\Profiles\8e2c9kd8.default\searchplugins\MyStart Search.xml
File Found : D:\Documents and Settings\Rev\Data aplikací\Mozilla\Firefox\Profiles\8e2c9kd8.default\user.js
Folder Found : D:\Documents and Settings\All Users\Data aplikací\Tarma Installer
Folder Found : D:\Documents and Settings\All Users\Data aplikací\Trymedia
Folder Found : D:\Documents and Settings\Rev\Data aplikací\Mozilla\Firefox\Profiles\8e2c9kd8.default\Smartbar
Folder Found : D:\Documents and Settings\Rev\Data aplikací\Mozilla\Firefox\Profiles\8e2c9kd8.default\ValueApps
Folder Found : D:\Documents and Settings\Rev\Data aplikací\Uniblue
Folder Found : D:\Documents and Settings\Rev\Local Settings\Data aplikací\Conduit
Folder Found : D:\Documents and Settings\Rev\Local Settings\Data aplikací\PackageAware
Folder Found : D:\Program Files\1ClickDownload
Folder Found : D:\Program Files\Conduit
Folder Found : D:\Program Files\Uniblue
Folder Found : D:\Program Files\Yontoo

***** [ Scheduled Tasks ] *****

***** [ Shortcuts ] *****

***** [ Registry ] *****

Key Found : HKCU\Software\1ClickDownload
Key Found : HKCU\Software\Conduit
Key Found : HKCU\Software\IM
Key Found : HKCU\Software\ImInstaller
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{336D0C35-8A85-403A-B9D2-65C292C39087}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}
Key Found : HKCU\Software\SmartBar
Key Found : HKCU\Software\SweetIM
Key Found : HKCU\Software\Trymedia Systems
Key Found : HKCU\Software\Web Assistant
Key Found : HKLM\SOFTWARE\Classes\AppID\{5B1881D1-D9C7-46DF-B041-1E593282C7D0}
Key Found : HKLM\SOFTWARE\Classes\AppID\{608D3067-77E8-463D-9084-908966806826}
Key Found : HKLM\SOFTWARE\Classes\AppID\{B302A1BD-0157-49FA-90F1-4E94F22C7B4B}
Key Found : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Key Found : HKLM\SOFTWARE\Classes\AppID\{CFDAFE39-20CE-451D-BD45-A37452F39CF0}
Key Found : HKLM\SOFTWARE\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}
Key Found : HKLM\SOFTWARE\Classes\AppID\Extension.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\YontooIEClient.DLL
Key Found : HKLM\SOFTWARE\Classes\CLSID\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{336D0C35-8A85-403A-B9D2-65C292C39087}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{6DDA37BA-0553-499A-AE0D-BEBA67204548}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{7E84186E-B5DE-4226-8A66-6E49C6B511B4}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{99066096-8989-4612-841F-621A01D54AD7}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{FE9271F2-6EFD-44B0-A826-84C829536E93}
Key Found : HKLM\SOFTWARE\Classes\Extension.ExtensionHelperObject
Key Found : HKLM\SOFTWARE\Classes\Extension.ExtensionHelperObject.1
Key Found : HKLM\SOFTWARE\Classes\Interface\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}
Key Found : HKLM\SOFTWARE\Classes\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5}
Key Found : HKLM\SOFTWARE\Classes\Interface\{A36867C6-302D-49FC-9D8E-1EB037B5F1AB}
Key Found : HKLM\SOFTWARE\Classes\Toolbar.CT3072253
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{1D5A4199-956E-49BC-B89F-6A35C57C0D13}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{D372567D-67C1-4B29-B3F0-159B52B3E967}
Key Found : HKLM\SOFTWARE\Classes\YontooIEClient.Api
Key Found : HKLM\SOFTWARE\Classes\YontooIEClient.Api.1
Key Found : HKLM\SOFTWARE\Classes\YontooIEClient.Layers
Key Found : HKLM\SOFTWARE\Classes\YontooIEClient.Layers.1
Key Found : HKLM\SOFTWARE\Conduit
Key Found : HKLM\SOFTWARE\Freeze.com
Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd
Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\niapdbllcanepiiimjjndipklodoedlc
Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\pmlghpafmmnmmkjdhacccolfgnkiboco
Key Found : HKLM\SOFTWARE\Iminent
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{336D0C35-8A85-403a-B9D2-65C292C39087}_is1
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\1ClickDownload
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{336D0C35-8A85-403A-B9D2-65C292C39087}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\1ClickDownload
Key Found : HKLM\SOFTWARE\SmartBar
Key Found : HKLM\SOFTWARE\SweetIM
Key Found : HKLM\SOFTWARE\Tarma Installer
Key Found : HKLM\SOFTWARE\Trymedia Systems
Key Found : HKLM\SOFTWARE\Uniblue
Key Found : HKLM\SOFTWARE\Web Assistant
Value Found : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{336D0C35-8A85-403a-B9D2-65C292C39087}]
Value Found : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List [D:\Program Files\1ClickDownload\1ClickDownloader.exe]

***** [ Browsers ] *****

-\\ Internet Explorer v6.0.2900.2180

-\\ Mozilla Firefox v15.0 (cs)

[ File : D:\Documents and Settings\Rev\Data aplikací\Mozilla\Firefox\Profiles\8e2c9kd8.default\prefs.js ]

Line Found : user_pref("CT3072253.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Found : user_pref("CT3072253.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Found : user_pref("CT3072253.FirstTime", "true");
Line Found : user_pref("CT3072253.FirstTimeFF3", "true");
Line Found : user_pref("CT3072253.RestartDialogFirstTime", "false");
Line Found : user_pref("CT3072253.RestartDialogShouldDisplay", "false");
Line Found : user_pref("CT3072253.UserID", "UN54249804639404696");
Line Found : user_pref("CT3072253.addressBarTakeOverEnabledInHidden", "true");
Line Found : user_pref("CT3072253.autoDisableScopes", 14);
Line Found : user_pref("CT3072253.cbfirsttime", "Fri Jul 27 2012 16:50:28 GMT+0200");
Line Found : user_pref("CT3072253.countryCode", "CZ");
Line Found : user_pref("CT3072253.defaultSearch", "FALSE");
Line Found : user_pref("CT3072253.enableAlerts", "always");
Line Found : user_pref("CT3072253.enableSearchFromAddressBar", "FALSE");
Line Found : user_pref("CT3072253.firstTimeDialogOpened", "true");
Line Found : user_pref("CT3072253.fixPageNotFoundError", "true");
Line Found : user_pref("CT3072253.fixPageNotFoundErrorByUser", "true");
Line Found : user_pref("CT3072253.fixPageNotFoundErrorInHidden", "true");
Line Found : user_pref("CT3072253.fixUrls", true);
Line Found : user_pref("CT3072253.fullUserID", "UN54249804639404696.UP.2128");
Line Found : user_pref("CT3072253.installId", "fft1EB.tmp.exe");
Line Found : user_pref("CT3072253.installType", "XPE");
Line Found : user_pref("CT3072253.isCheckedStartAsHidden", true);
Line Found : user_pref("CT3072253.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Found : user_pref("CT3072253.isNewTabEnabled", true);
Line Found : user_pref("CT3072253.isPerformedSmartBarTransition", "true");
Line Found : user_pref("CT3072253.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
Line Found : user_pref("CT3072253.isWelcomPage", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
Line Found : user_pref("CT3072253.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"hxxp://www.trovigo.com/?gd=&ctid=CT3072253&octid=CT3072253&ISID=ISID_ID&SearchSource=15&CUI=UN54249804639404696&Lay=1&UM=[...]
Line Found : user_pref("CT3072253.lastVersion", "10.34.0.503");
Line Found : user_pref("CT3072253.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"hxxps%3A%2F%2Fwww.mozilla.org%2Fcs%2Fplugincheck%2F\",\"EB_MAIN_FRAME_TITLE\":\"Kontrola%20aktu%C3%A1lnos[...]
Line Found : user_pref("CT3072253.openThankYouPage", "true");
Line Found : user_pref("CT3072253.openUninstallPage", "FALSE");
Line Found : user_pref("CT3072253.performedDomainChangesMigration", "true");
Line Found : user_pref("CT3072253.search.searchAppId", "129571859753931591");
Line Found : user_pref("CT3072253.search.searchCount", "0");
Line Found : user_pref("CT3072253.searchInNewTabEnabledByUser", "true");
Line Found : user_pref("CT3072253.searchInNewTabEnabledInHidden", "true");
Line Found : user_pref("CT3072253.searchSuggestEnabledByUser", "FALSE");
Line Found : user_pref("CT3072253.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Found : user_pref("CT3072253.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
Line Found : user_pref("CT3072253.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\"}");
Line Found : user_pref("CT3072253.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT3072253\"}");
Line Found : user_pref("CT3072253.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"hxxp://uTorrentControl2.OurToolbar.com//xpi\"}");
Line Found : user_pref("CT3072253.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"uTorrentControl2 \"}");
Line Found : user_pref("CT3072253.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Found : user_pref("CT3072253.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data\":\"2\"}");
Line Found : user_pref("CT3072253.serviceLayer_services_Configuration_lastUpdate", "1412949461655");
Line Found : user_pref("CT3072253.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1412949455956");
Line Found : user_pref("CT3072253.serviceLayer_services_appTracking_lastUpdate", "1412949454617");
Line Found : user_pref("CT3072253.serviceLayer_services_appsMetadata_lastUpdate", "1412949454710");
Line Found : user_pref("CT3072253.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1412949454623");
Line Found : user_pref("CT3072253.serviceLayer_services_login_10.10.20.14_lastUpdate", "1346099549872");
Line Found : user_pref("CT3072253.serviceLayer_services_login_10.10.27.6_lastUpdate", "1412947529197");
Line Found : user_pref("CT3072253.serviceLayer_services_login_10.34.0.503_lastUpdate", "1412949454720");
Line Found : user_pref("CT3072253.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1412949455875");
Line Found : user_pref("CT3072253.serviceLayer_services_searchAPI_lastUpdate", "1412949456059");
Line Found : user_pref("CT3072253.serviceLayer_services_serviceMap_lastUpdate", "1412947527188");
Line Found : user_pref("CT3072253.serviceLayer_services_toolbarContextMenu_lastUpdate", "1412949455968");
Line Found : user_pref("CT3072253.serviceLayer_services_toolbarSettings_lastUpdate", "1412947528577");
Line Found : user_pref("CT3072253.serviceLayer_services_translation_lastUpdate", "1412947527373");
Line Found : user_pref("CT3072253.settingsINI", true);
Line Found : user_pref("CT3072253.shouldFirstTimeDialog", "false");
Line Found : user_pref("CT3072253.showToolbarPermission", "false");
Line Found : user_pref("CT3072253.smartbar.CTID", "CT3072253");
Line Found : user_pref("CT3072253.smartbar.Uninstall", "0");
Line Found : user_pref("CT3072253.smartbar.isHidden", true);
Line Found : user_pref("CT3072253.smartbar.toolbarName", "uTorrentControl2 ");
Line Found : user_pref("CT3072253.toolbarBornServerTime", "27-7-2012");
Line Found : user_pref("CT3072253.toolbarCurrentServerTime", "10-10-2014");
Line Found : user_pref("CT3072253.toolbarLoginClientTime", "Fri Oct 10 2014 15:57:31 GMT+0200");
Line Found : user_pref("CT3072253_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1412949441015,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");
Line Found : user_pref("browser.newtab.url", "hxxp://mystart.incredibar.com/mb128?a=6OyJdwaE8y&loc=FF_NT");
Line Found : user_pref("browser.search.defaultenginename", "MyStart Search");
Line Found : user_pref("extensions.incredibar.actvtyRptTime", "1343398485380");
Line Found : user_pref("extensions.incredibar.admin", false);
Line Found : user_pref("extensions.incredibar.aflt", "orgnl");
Line Found : user_pref("extensions.incredibar.afterInstallRpt", "sent");
Line Found : user_pref("extensions.incredibar.cntry", "CZ");
Line Found : user_pref("extensions.incredibar.dfltLng", "EN");
Line Found : user_pref("extensions.incredibar.dfltSrch", false);
Line Found : user_pref("extensions.incredibar.dfltlng", "EN");
Line Found : user_pref("extensions.incredibar.dfltsrch", "false");
Line Found : user_pref("extensions.incredibar.did", "10658");
Line Found : user_pref("extensions.incredibar.envrmnt", "production");
Line Found : user_pref("extensions.incredibar.excTlbr", false);
Line Found : user_pref("extensions.incredibar.hdrMd5", "BA6ADE7EC18F1E417FA4FA920D6A8159");
Line Found : user_pref("extensions.incredibar.hmpg", false);
Line Found : user_pref("extensions.incredibar.hrdid", "7cdcc416000000000000001e101f3534");
Line Found : user_pref("extensions.incredibar.id", "7cdcc416000000000000001e101f3534");
Line Found : user_pref("extensions.incredibar.installerproductid", "26");
Line Found : user_pref("extensions.incredibar.instlDay", "15548");
Line Found : user_pref("extensions.incredibar.instlRef", "");
Line Found : user_pref("extensions.incredibar.instlday", "15548");
Line Found : user_pref("extensions.incredibar.instlref", "");
Line Found : user_pref("extensions.incredibar.isDcmntCmplt", false);
Line Found : user_pref("extensions.incredibar.isdcmntcmplt", "false");
Line Found : user_pref("extensions.incredibar.keywordurl", "");
Line Found : user_pref("extensions.incredibar.lastVrsnTs", "1.5.11.1416:14:20");
Line Found : user_pref("extensions.incredibar.mntrvrsn", "1.2.0");
Line Found : user_pref("extensions.incredibar.newTab", false);
Line Found : user_pref("extensions.incredibar.newtab", "false");
Line Found : user_pref("extensions.incredibar.newtaburl", "");
Line Found : user_pref("extensions.incredibar.noFFXTlbr", false);
Line Found : user_pref("extensions.incredibar.ppd", "");
Line Found : user_pref("extensions.incredibar.prdct", "incredibar");
Line Found : user_pref("extensions.incredibar.productid", "26");
Line Found : user_pref("extensions.incredibar.prtnrId", "Incredibar");
Line Found : user_pref("extensions.incredibar.prtnrid", "Incredibar");
Line Found : user_pref("extensions.incredibar.sg", "none");
Line Found : user_pref("extensions.incredibar.smplGrp", "none");
Line Found : user_pref("extensions.incredibar.smplgrp", "none");
Line Found : user_pref("extensions.incredibar.srch", "");
Line Found : user_pref("extensions.incredibar.srchprvdr", "");
Line Found : user_pref("extensions.incredibar.tlbrId", "base");
Line Found : user_pref("extensions.incredibar.tlbrSrchUrl", "hxxp://mystart.Incredibar.com/?a=6OyJdwaE8y&loc=IB_TB&i=26&search=");
Line Found : user_pref("extensions.incredibar.tlbrid", "base");
Line Found : user_pref("extensions.incredibar.tlbrsrchurl", "hxxp://mystart.Incredibar.com/?a=6OyJdwaE8y&loc=IB_TB&i=26&search=");
Line Found : user_pref("extensions.incredibar.upn2", "6OyJdwaE8y");
Line Found : user_pref("extensions.incredibar.upn2n", "92261827849145602");
Line Found : user_pref("extensions.incredibar.vrsn", "1.5.11.14");
Line Found : user_pref("extensions.incredibar.vrsnTs", "1.5.11.1416:14:20");
Line Found : user_pref("extensions.incredibar.vrsni", "1.5.11.14");
Line Found : user_pref("extensions.incredibar.vrsnts", "1.5.11.1416:14:20");
Line Found : user_pref("extensions.incredibar_i.aflt", "orgnl");
Line Found : user_pref("extensions.incredibar_i.dfltLng", "");
Line Found : user_pref("extensions.incredibar_i.did", "10658");
Line Found : user_pref("extensions.incredibar_i.excTlbr", false);
Line Found : user_pref("extensions.incredibar_i.id", "7cdcc416000000000000001e101f3534");
Line Found : user_pref("extensions.incredibar_i.installerproductid", "26");
Line Found : user_pref("extensions.incredibar_i.instlDay", "15548");
Line Found : user_pref("extensions.incredibar_i.instlRef", "");
Line Found : user_pref("extensions.incredibar_i.ms_url_id", "");
Line Found : user_pref("extensions.incredibar_i.newTab", false);
Line Found : user_pref("extensions.incredibar_i.ppd", "");
Line Found : user_pref("extensions.incredibar_i.prdct", "incredibar");
Line Found : user_pref("extensions.incredibar_i.productid", "26");
Line Found : user_pref("extensions.incredibar_i.prtnrId", "Incredibar");
Line Found : user_pref("extensions.incredibar_i.smplGrp", "none");
Line Found : user_pref("extensions.incredibar_i.tlbrId", "base");
Line Found : user_pref("extensions.incredibar_i.tlbrSrchUrl", "hxxp://mystart.Incredibar.com/?a=6OyJdwaE8y&loc=IB_TB&i=26&search=");
Line Found : user_pref("extensions.incredibar_i.upn2", "6OyJdwaE8y");
Line Found : user_pref("extensions.incredibar_i.upn2n", "92261827849145602");
Line Found : user_pref("extensions.incredibar_i.vrsn", "1.5.11.14");
Line Found : user_pref("extensions.incredibar_i.vrsnTs", "1.5.11.1416:14:20");
Line Found : user_pref("extensions.incredibar_i.vrsni", "1.5.11.14");
Line Found : user_pref("extensions.wrc.SearchRules.ask.com.style", ".WRCN {display:none} #yui-main .tsrc_vnru .title + .WRCN, #yui-main #teoma-results .title + .WRCN {display:inline !important; background: url(\"I[...]
Line Found : user_pref("extensions.wrc.SearchRules.ask.com.url", "^hxxp(s)?\\:\\/\\/(.+\\.)?ask\\.com\\/.*");
Line Found : user_pref("extensions.wrc.SearchRules.rambler.ru.style", ".WRCN {display:none} .search-results .title + .WRCN {display:inline !important; background: url(\"IMAGE\") right no-repeat}");
Line Found : user_pref("extentions.y2layers.defaultEnableAppsList", "bestvideodownloader,ezLooker,pagerage,buzzdock,toprelatedtopics,twittube");
Line Found : user_pref("extentions.y2layers.installId", "065f9419-e7dd-4353-9957-ad00b5ed5f74");
Line Found : user_pref("keyword.URL", "hxxp://mystart.incredibar.com/mb128/?loc=IB_DS&a=6OyJdwaE8y&&i=26&search=");
Line Found : user_pref("smartbar.machineId", "N1KME7WL3HQN5BQSRNJ2DWGBPK4");
Line Found : user_pref("valueApps.CT3072253.mam_gk_currentVersion", "312E31332E302E3137");
Line Found : user_pref("valueApps.CT3072253.mam_gk_currentVersion.storedInFile", false);
Line Found : user_pref("valueApps.CT3072253.mam_gk_migrated_from_ls", "31");
Line Found : user_pref("valueApps.CT3072253.mam_gk_migrated_from_ls.storedInFile", false);
Line Found : user_pref("valueApps.CT3072253.mam_gk_userBornDate", "4E2F41");
Line Found : user_pref("valueApps.CT3072253.mam_gk_userBornDate.storedInFile", false);

-\\ Google Chrome v

*************************

AdwCleaner[R0].txt - [20173 octets] - [12/10/2014 15:28:16]

########## EOF - D:\AdwCleaner\AdwCleaner[R0].txt - [20234 octets] ##########

rev · Příspěvekod **rev** » 12 říj 2014 16:06

Sorry, myslel jsem SP 2 či SP 3. Napadá mě nějaký service pack, ale nevím nevím....

Příspěvekod **Orcus** » 12 říj 2014 16:36

A co zkusit Google?
https://www.google.cz/webhp?sourceid=ch ... 20xp%20sp3

Poté:

Spusť znovu AdwCleaner (u Windows Vista či Windows7, klikni na AdwCleaner pravým a vyber „Spustit jako správce“
Klikni na „ Smazat“
Program provede opravu, po automatickém restartu neukáže log (C:\AdwCleaner [S?].txt) , jeho obsah sem celý vlož.

====================================================

Stáhni si Junkware Removal Tool

na svojí plochu.
Deaktivuj si svůj antivirový program.
Pravým tl. myši klikni na JRT.exe a vyber „spustit jako správce“. Pro pokračování budeš vyzván ke stisknutí jakékoliv klávesy. Na nějakou klikni.
Začne skenování programu. Skenování může trvat dloho , podle množství nákaz. Po ukončení skenu se objeví log (JRT.txt) , který se uloží na ploše.
Zkopíruj sem prosím celý jeho obsah.

====================================================

Stáhni si RogueKiller
32bit.:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
64bit.:
http://www.sur-la-toile.com/RogueKiller ... lerX64.exe
na svojí plochu.
- Zavři všechny ostatní programy a prohlížeče.
- Pro OS Vista a win7 spusť program RogueKiller.exe jako správce , u XP poklepáním.
- počkej až skončí Prescan -vyhledávání škodlivých procesů.
- Zkontroluj , zda máš zaškrtnuto:
Kontrola MBR
Kontrola Faked
Antirootkit
-Potom klikni na „Prohledat“.
- Program skenuje procesy PC. Po proskenování klikni na „Zpráva“celý obsah logu sem zkopíruj.
Pokud je program blokován , zkus ho spustit několikrát. Pokud dále program nepůjde spustit a pracovat, přejmenuj ho na winlogon.exe.

rev · Příspěvekod **rev** » 12 říj 2014 19:23

Takže tady jsou ty logy

# AdwCleaner v3.311 - Report created 12/10/2014 at 18:48:56
# Updated 30/09/2014 by Xplode
# Operating System : Microsoft Windows XP Service Pack 2 (32 bits)
# Username : Rev - S-B008CC2B52274
# Running from : D:\Documents and Settings\Rev\Plocha\adwcleaner_3.311.exe
# Option : Clean

***** [ Services ] *****

***** [ Files / Folders ] *****

Folder Deleted : D:\Documents and Settings\All Users\Data aplikací\Tarma Installer
Folder Deleted : D:\Documents and Settings\All Users\Data aplikací\Trymedia
Folder Deleted : D:\Program Files\1ClickDownload
Folder Deleted : D:\Program Files\Conduit
Folder Deleted : D:\Program Files\Uniblue
Folder Deleted : D:\Documents and Settings\Rev\Local Settings\Data aplikací\Conduit
Folder Deleted : D:\Documents and Settings\Rev\Local Settings\Data aplikací\PackageAware
Folder Deleted : D:\Documents and Settings\Rev\Data aplikací\Uniblue
Folder Deleted : D:\Documents and Settings\Rev\Data aplikací\Mozilla\Firefox\Profiles\8e2c9kd8.default\Smartbar
Folder Deleted : D:\Documents and Settings\Rev\Data aplikací\Mozilla\Firefox\Profiles\8e2c9kd8.default\ValueApps
Folder Deleted : D:\Documents and Settings\Rev\Data aplikací\Mozilla\Firefox\Profiles\8e2c9kd8.default\Extensions\OneClickDownload@OneClickDownload.com
File Deleted : D:\Documents and Settings\Rev\Data aplikací\Mozilla\Firefox\Profiles\8e2c9kd8.default\Extensions\OneClickDownload@OneClickDownload.com.xpi
File Deleted : D:\Documents and Settings\Rev\Data aplikací\Mozilla\Firefox\Profiles\8e2c9kd8.default\searchplugins\MyStart Search.xml
File Deleted : D:\Documents and Settings\Rev\Data aplikací\Mozilla\Firefox\Profiles\8e2c9kd8.default\user.js

***** [ Scheduled Tasks ] *****

***** [ Shortcuts ] *****

***** [ Registry ] *****

Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{336D0C35-8A85-403a-B9D2-65C292C39087}]
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\pmlghpafmmnmmkjdhacccolfgnkiboco
Key Deleted : HKLM\SOFTWARE\Classes\AppID\Extension.DLL
Key Deleted : HKLM\SOFTWARE\Classes\Extension.ExtensionHelperObject
Key Deleted : HKLM\SOFTWARE\Classes\Extension.ExtensionHelperObject.1
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3072253
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{5B1881D1-D9C7-46DF-B041-1E593282C7D0}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{608D3067-77E8-463D-9084-908966806826}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{B302A1BD-0157-49FA-90F1-4E94F22C7B4B}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{336D0C35-8A85-403A-B9D2-65C292C39087}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6DDA37BA-0553-499A-AE0D-BEBA67204548}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A36867C6-302D-49FC-9D8E-1EB037B5F1AB}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{1D5A4199-956E-49BC-B89F-6A35C57C0D13}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{336D0C35-8A85-403A-B9D2-65C292C39087}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Value Deleted : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List [D:\Program Files\1ClickDownload\1ClickDownloader.exe]
Key Deleted : HKCU\Software\1ClickDownload
Key Deleted : HKCU\Software\Conduit
Key Deleted : HKCU\Software\IM
Key Deleted : HKCU\Software\ImInstaller
Key Deleted : HKCU\Software\SmartBar
Key Deleted : HKCU\Software\SweetIM
Key Deleted : HKCU\Software\Trymedia Systems
Key Deleted : HKCU\Software\Web Assistant
Key Deleted : HKLM\SOFTWARE\Conduit
Key Deleted : HKLM\SOFTWARE\Freeze.com
Key Deleted : HKLM\SOFTWARE\Iminent
Key Deleted : HKLM\SOFTWARE\SmartBar
Key Deleted : HKLM\SOFTWARE\SweetIM
Key Deleted : HKLM\SOFTWARE\Tarma Installer
Key Deleted : HKLM\SOFTWARE\Trymedia Systems
Key Deleted : HKLM\SOFTWARE\Uniblue
Key Deleted : HKLM\SOFTWARE\Web Assistant
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{336D0C35-8A85-403a-B9D2-65C292C39087}_is1

***** [ Browsers ] *****

-\\ Internet Explorer v6.0.2900.5512

-\\ Mozilla Firefox v30.0 (cs)

[ File : D:\Documents and Settings\Rev\Data aplikací\Mozilla\Firefox\Profiles\8e2c9kd8.default\prefs.js ]

Line Deleted : user_pref("CT3072253.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Deleted : user_pref("CT3072253.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Deleted : user_pref("CT3072253.FirstTime", "true");
Line Deleted : user_pref("CT3072253.FirstTimeFF3", "true");
Line Deleted : user_pref("CT3072253.RestartDialogFirstTime", "false");
Line Deleted : user_pref("CT3072253.RestartDialogShouldDisplay", "false");
Line Deleted : user_pref("CT3072253.UserID", "UN54249804639404696");
Line Deleted : user_pref("CT3072253.addressBarTakeOverEnabledInHidden", "true");
Line Deleted : user_pref("CT3072253.autoDisableScopes", 14);
Line Deleted : user_pref("CT3072253.cbfirsttime", "Fri Jul 27 2012 16:50:28 GMT+0200");
Line Deleted : user_pref("CT3072253.countryCode", "CZ");
Line Deleted : user_pref("CT3072253.defaultSearch", "FALSE");
Line Deleted : user_pref("CT3072253.enableAlerts", "always");
Line Deleted : user_pref("CT3072253.enableSearchFromAddressBar", "FALSE");
Line Deleted : user_pref("CT3072253.firstTimeDialogOpened", "true");
Line Deleted : user_pref("CT3072253.fixPageNotFoundError", "true");
Line Deleted : user_pref("CT3072253.fixPageNotFoundErrorByUser", "true");
Line Deleted : user_pref("CT3072253.fixPageNotFoundErrorInHidden", "true");
Line Deleted : user_pref("CT3072253.fixUrls", true);
Line Deleted : user_pref("CT3072253.fullUserID", "UN54249804639404696.UP.2128");
Line Deleted : user_pref("CT3072253.installId", "fft1EB.tmp.exe");
Line Deleted : user_pref("CT3072253.installType", "XPE");
Line Deleted : user_pref("CT3072253.isCheckedStartAsHidden", true);
Line Deleted : user_pref("CT3072253.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Deleted : user_pref("CT3072253.isNewTabEnabled", true);
Line Deleted : user_pref("CT3072253.isPerformedSmartBarTransition", "true");
Line Deleted : user_pref("CT3072253.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
Line Deleted : user_pref("CT3072253.isWelcomPage", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
Line Deleted : user_pref("CT3072253.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"hxxp://www.trovigo.com/?gd=&ctid=CT3072253&octid=CT3072253&ISID=ISID_ID&SearchSource=15&CUI=UN54249804639404696&Lay=1&UM=[...]
Line Deleted : user_pref("CT3072253.lastVersion", "10.34.0.503");
Line Deleted : user_pref("CT3072253.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"hxxps%3A%2F%2Fwww.mozilla.org%2Fcs%2Fplugincheck%2F\",\"EB_MAIN_FRAME_TITLE\":\"Kontrola%20aktu%C3%A1lnos[...]
Line Deleted : user_pref("CT3072253.openThankYouPage", "true");
Line Deleted : user_pref("CT3072253.openUninstallPage", "FALSE");
Line Deleted : user_pref("CT3072253.performedDomainChangesMigration", "true");
Line Deleted : user_pref("CT3072253.search.searchAppId", "129571859753931591");
Line Deleted : user_pref("CT3072253.search.searchCount", "0");
Line Deleted : user_pref("CT3072253.searchInNewTabEnabledByUser", "true");
Line Deleted : user_pref("CT3072253.searchInNewTabEnabledInHidden", "true");
Line Deleted : user_pref("CT3072253.searchSuggestEnabledByUser", "FALSE");
Line Deleted : user_pref("CT3072253.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Deleted : user_pref("CT3072253.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
Line Deleted : user_pref("CT3072253.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\"}");
Line Deleted : user_pref("CT3072253.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT3072253\"}");
Line Deleted : user_pref("CT3072253.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"hxxp://uTorrentControl2.OurToolbar.com//xpi\"}");
Line Deleted : user_pref("CT3072253.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"uTorrentControl2 \"}");
Line Deleted : user_pref("CT3072253.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Deleted : user_pref("CT3072253.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data\":\"2\"}");
Line Deleted : user_pref("CT3072253.serviceLayer_services_Configuration_lastUpdate", "1412949461655");
Line Deleted : user_pref("CT3072253.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1412949455956");
Line Deleted : user_pref("CT3072253.serviceLayer_services_appTracking_lastUpdate", "1412949454617");
Line Deleted : user_pref("CT3072253.serviceLayer_services_appsMetadata_lastUpdate", "1412949454710");
Line Deleted : user_pref("CT3072253.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1412949454623");
Line Deleted : user_pref("CT3072253.serviceLayer_services_login_10.10.20.14_lastUpdate", "1346099549872");
Line Deleted : user_pref("CT3072253.serviceLayer_services_login_10.10.27.6_lastUpdate", "1412947529197");
Line Deleted : user_pref("CT3072253.serviceLayer_services_login_10.34.0.503_lastUpdate", "1412949454720");
Line Deleted : user_pref("CT3072253.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1412949455875");
Line Deleted : user_pref("CT3072253.serviceLayer_services_searchAPI_lastUpdate", "1412949456059");
Line Deleted : user_pref("CT3072253.serviceLayer_services_serviceMap_lastUpdate", "1412947527188");
Line Deleted : user_pref("CT3072253.serviceLayer_services_toolbarContextMenu_lastUpdate", "1412949455968");
Line Deleted : user_pref("CT3072253.serviceLayer_services_toolbarSettings_lastUpdate", "1412947528577");
Line Deleted : user_pref("CT3072253.serviceLayer_services_translation_lastUpdate", "1412947527373");
Line Deleted : user_pref("CT3072253.settingsINI", true);
Line Deleted : user_pref("CT3072253.shouldFirstTimeDialog", "false");
Line Deleted : user_pref("CT3072253.showToolbarPermission", "false");
Line Deleted : user_pref("CT3072253.smartbar.CTID", "CT3072253");
Line Deleted : user_pref("CT3072253.smartbar.Uninstall", "0");
Line Deleted : user_pref("CT3072253.smartbar.isHidden", true);
Line Deleted : user_pref("CT3072253.smartbar.toolbarName", "uTorrentControl2 ");
Line Deleted : user_pref("CT3072253.toolbarBornServerTime", "27-7-2012");
Line Deleted : user_pref("CT3072253.toolbarCurrentServerTime", "10-10-2014");
Line Deleted : user_pref("CT3072253.toolbarLoginClientTime", "Fri Oct 10 2014 15:57:31 GMT+0200");
Line Deleted : user_pref("CT3072253_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1412949441015,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");
Line Deleted : user_pref("browser.newtab.url", "hxxp://mystart.incredibar.com/mb128?a=6OyJdwaE8y&loc=FF_NT");
Line Deleted : user_pref("extensions.incredibar.actvtyRptTime", "1343398485380");
Line Deleted : user_pref("extensions.incredibar.admin", false);
Line Deleted : user_pref("extensions.incredibar.aflt", "orgnl");
Line Deleted : user_pref("extensions.incredibar.afterInstallRpt", "sent");
Line Deleted : user_pref("extensions.incredibar.cntry", "CZ");
Line Deleted : user_pref("extensions.incredibar.dfltLng", "EN");
Line Deleted : user_pref("extensions.incredibar.dfltSrch", false);
Line Deleted : user_pref("extensions.incredibar.dfltlng", "EN");
Line Deleted : user_pref("extensions.incredibar.dfltsrch", "false");
Line Deleted : user_pref("extensions.incredibar.did", "10658");
Line Deleted : user_pref("extensions.incredibar.envrmnt", "production");
Line Deleted : user_pref("extensions.incredibar.excTlbr", false);
Line Deleted : user_pref("extensions.incredibar.hdrMd5", "BA6ADE7EC18F1E417FA4FA920D6A8159");
Line Deleted : user_pref("extensions.incredibar.hmpg", false);
Line Deleted : user_pref("extensions.incredibar.hrdid", "7cdcc416000000000000001e101f3534");
Line Deleted : user_pref("extensions.incredibar.id", "7cdcc416000000000000001e101f3534");
Line Deleted : user_pref("extensions.incredibar.installerproductid", "26");
Line Deleted : user_pref("extensions.incredibar.instlDay", "15548");
Line Deleted : user_pref("extensions.incredibar.instlRef", "");
Line Deleted : user_pref("extensions.incredibar.instlday", "15548");
Line Deleted : user_pref("extensions.incredibar.instlref", "");
Line Deleted : user_pref("extensions.incredibar.isDcmntCmplt", false);
Line Deleted : user_pref("extensions.incredibar.isdcmntcmplt", "false");
Line Deleted : user_pref("extensions.incredibar.keywordurl", "");
Line Deleted : user_pref("extensions.incredibar.lastVrsnTs", "1.5.11.1416:14:20");
Line Deleted : user_pref("extensions.incredibar.mntrvrsn", "1.2.0");
Line Deleted : user_pref("extensions.incredibar.newTab", false);
Line Deleted : user_pref("extensions.incredibar.newtab", "false");
Line Deleted : user_pref("extensions.incredibar.newtaburl", "");
Line Deleted : user_pref("extensions.incredibar.noFFXTlbr", false);
Line Deleted : user_pref("extensions.incredibar.ppd", "");
Line Deleted : user_pref("extensions.incredibar.prdct", "incredibar");
Line Deleted : user_pref("extensions.incredibar.productid", "26");
Line Deleted : user_pref("extensions.incredibar.prtnrId", "Incredibar");
Line Deleted : user_pref("extensions.incredibar.prtnrid", "Incredibar");
Line Deleted : user_pref("extensions.incredibar.sg", "none");
Line Deleted : user_pref("extensions.incredibar.smplGrp", "none");
Line Deleted : user_pref("extensions.incredibar.smplgrp", "none");
Line Deleted : user_pref("extensions.incredibar.srch", "");
Line Deleted : user_pref("extensions.incredibar.srchprvdr", "");
Line Deleted : user_pref("extensions.incredibar.tlbrId", "base");
Line Deleted : user_pref("extensions.incredibar.tlbrSrchUrl", "hxxp://mystart.Incredibar.com/?a=6OyJdwaE8y&loc=IB_TB&i=26&search=");
Line Deleted : user_pref("extensions.incredibar.tlbrid", "base");
Line Deleted : user_pref("extensions.incredibar.tlbrsrchurl", "hxxp://mystart.Incredibar.com/?a=6OyJdwaE8y&loc=IB_TB&i=26&search=");
Line Deleted : user_pref("extensions.incredibar.upn2", "6OyJdwaE8y");
Line Deleted : user_pref("extensions.incredibar.upn2n", "92261827849145602");
Line Deleted : user_pref("extensions.incredibar.vrsn", "1.5.11.14");
Line Deleted : user_pref("extensions.incredibar.vrsnTs", "1.5.11.1416:14:20");
Line Deleted : user_pref("extensions.incredibar.vrsni", "1.5.11.14");
Line Deleted : user_pref("extensions.incredibar.vrsnts", "1.5.11.1416:14:20");
Line Deleted : user_pref("extensions.incredibar_i.aflt", "orgnl");
Line Deleted : user_pref("extensions.incredibar_i.dfltLng", "");
Line Deleted : user_pref("extensions.incredibar_i.did", "10658");
Line Deleted : user_pref("extensions.incredibar_i.excTlbr", false);
Line Deleted : user_pref("extensions.incredibar_i.id", "7cdcc416000000000000001e101f3534");
Line Deleted : user_pref("extensions.incredibar_i.installerproductid", "26");
Line Deleted : user_pref("extensions.incredibar_i.instlDay", "15548");
Line Deleted : user_pref("extensions.incredibar_i.instlRef", "");
Line Deleted : user_pref("extensions.incredibar_i.ms_url_id", "");
Line Deleted : user_pref("extensions.incredibar_i.newTab", false);
Line Deleted : user_pref("extensions.incredibar_i.ppd", "");
Line Deleted : user_pref("extensions.incredibar_i.prdct", "incredibar");
Line Deleted : user_pref("extensions.incredibar_i.productid", "26");
Line Deleted : user_pref("extensions.incredibar_i.prtnrId", "Incredibar");
Line Deleted : user_pref("extensions.incredibar_i.smplGrp", "none");
Line Deleted : user_pref("extensions.incredibar_i.tlbrId", "base");
Line Deleted : user_pref("extensions.incredibar_i.tlbrSrchUrl", "hxxp://mystart.Incredibar.com/?a=6OyJdwaE8y&loc=IB_TB&i=26&search=");
Line Deleted : user_pref("extensions.incredibar_i.upn2", "6OyJdwaE8y");
Line Deleted : user_pref("extensions.incredibar_i.upn2n", "92261827849145602");
Line Deleted : user_pref("extensions.incredibar_i.vrsn", "1.5.11.14");
Line Deleted : user_pref("extensions.incredibar_i.vrsnTs", "1.5.11.1416:14:20");
Line Deleted : user_pref("extensions.incredibar_i.vrsni", "1.5.11.14");
Line Deleted : user_pref("extensions.wrc.SearchRules.ask.com.style", ".WRCN {display:none} #yui-main .tsrc_vnru .title + .WRCN, #yui-main #teoma-results .title + .WRCN {display:inline !important; background: url(\"I[...]
Line Deleted : user_pref("extensions.wrc.SearchRules.ask.com.url", "^hxxp(s)?\\:\\/\\/(.+\\.)?ask\\.com\\/.*");
Line Deleted : user_pref("extensions.wrc.SearchRules.rambler.ru.style", ".WRCN {display:none} .search-results .title + .WRCN {display:inline !important; background: url(\"IMAGE\") right no-repeat}");
Line Deleted : user_pref("keyword.URL", "hxxp://mystart.incredibar.com/mb128/?loc=IB_DS&a=6OyJdwaE8y&&i=26&search=");
Line Deleted : user_pref("smartbar.machineId", "N1KME7WL3HQN5BQSRNJ2DWGBPK4");
Line Deleted : user_pref("valueApps.CT3072253.mam_gk_currentVersion", "312E31332E302E3137");
Line Deleted : user_pref("valueApps.CT3072253.mam_gk_currentVersion.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3072253.mam_gk_migrated_from_ls", "31");
Line Deleted : user_pref("valueApps.CT3072253.mam_gk_migrated_from_ls.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3072253.mam_gk_userBornDate", "4E2F41");
Line Deleted : user_pref("valueApps.CT3072253.mam_gk_userBornDate.storedInFile", false);

-\\ Google Chrome v

*************************

AdwCleaner[R0].txt - [20315 octets] - [12/10/2014 15:28:16]
AdwCleaner[R1].txt - [17970 octets] - [12/10/2014 18:44:32]
AdwCleaner[R2].txt - [18031 octets] - [12/10/2014 18:47:37]
AdwCleaner[S0].txt - [18369 octets] - [12/10/2014 18:48:56]

########## EOF - D:\AdwCleaner\AdwCleaner[S0].txt - [18430 octets] ##########

-------------------------------------------------------------------------------------------------------------------------------------

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.3.2 (10.09.2014:1)
OS: Microsoft Windows XP x86
Ran by Rev on ne 12.10.2014 at 18:55:52,76
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

~~~ Services

~~~ Registry Values

Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\\Search Page

~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{15C4DF55-4B67-495A-A3D3-A497C4A49EE0}

~~~ Files

~~~ Folders

~~~ FireFox

Successfully deleted: [File] D:\user.js
Successfully deleted the following from D:\Documents and Settings\Rev\Data aplikacˇ\mozilla\firefox\profiles\8e2c9kd8.default\prefs.js

user_pref("valueApps.storage.mam_gk_userId", "35323635303032382D643363652D343635352D383165662D313538323237653461633934");

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on ne 12.10.2014 at 19:01:15,87
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

RogueKiller V10.0.1.0 [Oct 10 2014] by Adlice Software
mail : http://www.adlice.com/contact/
Feedback : http://forum.adlice.com
Website : http://www.adlice.com/softwares/roguekiller/
Blog : http://www.adlice.com

Operating System : Windows XP (5.1.2600 Service Pack 3) 32 bits version
Started in : Normal mode
User : Rev [Administrator]
Mode : Scan -- Date : 10/12/2014 19:19:16

¤¤¤ Processes : 0 ¤¤¤

¤¤¤ Registry : 17 ¤¤¤
[] HKEY_LOCAL_MACHINE\RK_Software_ON_C_DD67\Microsoft\Windows\CurrentVersion\Run | SW20 : C:\WINDOWS\system32\sw20.exe -> Found
[] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run | SW20 : D:\WINDOWS\system32\sw20.exe -> Found
[PUM.HomePage] HKEY_LOCAL_MACHINE\RK_Software_ON_C_DD67\Microsoft\Internet Explorer\Main | Start Page : http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home -> Found
[PUM.HomePage] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main | Start Page : https://www.seznam.cz/?clid=22668 -> Found
[PUM.HomePage] HKEY_USERS\RK_Tom_ON_C_8F67\Software\Microsoft\Internet Explorer\Main | Start Page : http://www.microsoft.com/isapi/redir.dl ... ar=msnhome -> Found
[PUM.HomePage] HKEY_USERS\S-1-5-21-527237240-1454471165-682003330-1004\Software\Microsoft\Internet Explorer\Main | Start Page : https://www.seznam.cz/?clid=22668 -> Found
[PUM.SearchPage] HKEY_LOCAL_MACHINE\RK_Software_ON_C_DD67\Microsoft\Internet Explorer\Main | Search Page : http://www.microsoft.com/isapi/redir.dl ... r=iesearch -> Found
[PUM.SearchPage] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main | Search Page : http://search.seznam.cz/?sourceid=quicksearch_22668&q={searchTerms} -> Found
[PUM.SearchPage] HKEY_USERS\RK_Tom_ON_C_8F67\Software\Microsoft\Internet Explorer\Main | Search Page : http://www.microsoft.com/isapi/redir.dl ... r=iesearch -> Found
[PUM.Dns] HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters | DhcpNameServer : 83.240.0.215 83.240.0.136 -> Found
[PUM.Dns] HKEY_LOCAL_MACHINE\System\ControlSet002\Services\Tcpip\Parameters | DhcpNameServer : 83.240.0.215 83.240.0.136 -> Found
[PUM.Dns] HKEY_LOCAL_MACHINE\System\ControlSet003\Services\Tcpip\Parameters | DhcpNameServer : 83.240.0.214 83.240.0.135 -> Found
[PUM.Dns] HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{FFBCF54D-BCC6-403D-888B-A0D55B25E552} | DhcpNameServer : 83.240.0.215 83.240.0.136 -> Found
[PUM.Dns] HKEY_LOCAL_MACHINE\System\ControlSet002\Services\Tcpip\Parameters\Interfaces\{FFBCF54D-BCC6-403D-888B-A0D55B25E552} | DhcpNameServer : 83.240.0.215 83.240.0.136 -> Found
[PUM.Dns] HKEY_LOCAL_MACHINE\System\ControlSet003\Services\Tcpip\Parameters\Interfaces\{FFBCF54D-BCC6-403D-888B-A0D55B25E552} | DhcpNameServer : 83.240.0.214 83.240.0.135 -> Found
[PUM.DesktopIcons] HKEY_LOCAL_MACHINE\RK_Software_ON_C_DD67\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1 -> Found
[PUM.DesktopIcons] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1 -> Found

¤¤¤ Tasks : 0 ¤¤¤

¤¤¤ Files : 0 ¤¤¤

¤¤¤ Hosts File : 1 ¤¤¤
[D:\WINDOWS\System32\drivers\etc\hosts] 127.0.0.1 localhost

¤¤¤ Antirootkit : 0 (Driver: Loaded) ¤¤¤

¤¤¤ Web browsers : 1 ¤¤¤
[PUM.HomePage][FIREFX:Config] 8e2c9kd8.default : user_pref("browser.startup.homepage", "http://www.seznam.cz/"); -> Found

¤¤¤ MBR Check : ¤¤¤
+++++ PhysicalDrive0: ST3120213A +++++
--- User ---
[MBR] 32d5c6fee34f4bb57ae7ff6fa51935e1
[BSP] 4f83fcee3f06841886828d3c40f6da51 : Windows XP MBR Code
Partition table:
0 - [XXXXXX] EXTEN-LBA (0xf) [VISIBLE] Offset (sectors): 16065 | Size: 29988 MB
1 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 61432560 | Size: 84474 MB
User = LL1 ... OK
Error reading LL2 MBR! ([1] Nesprávná funkce. )

+++++ PhysicalDrive1: OTi CF CARD Reader USB Device +++++
Error reading User MBR! ([15] Za?ízení není p?ipraveno. )
Error reading LL1 MBR! NOT VALID!
Error reading LL2 MBR! ([32] Po?adavek není podporován. )

+++++ PhysicalDrive2: OTi SM CARD Reader USB Device +++++
Error reading User MBR! ([15] Za?ízení není p?ipraveno. )
Error reading LL1 MBR! NOT VALID!
Error reading LL2 MBR! ([32] Po?adavek není podporován. )

+++++ PhysicalDrive3: OTi SD CARD Reader USB Device +++++
Error reading User MBR! ([15] Za?ízení není p?ipraveno. )
Error reading LL1 MBR! NOT VALID!
Error reading LL2 MBR! ([32] Po?adavek není podporován. )

+++++ PhysicalDrive4: OTi MS CARD Reader USB Device +++++
Error reading User MBR! ([15] Za?ízení není p?ipraveno. )
Error reading LL1 MBR! NOT VALID!
Error reading LL2 MBR! ([32] Po?adavek není podporován. )

Příspěvekod **jaro3** » 13 říj 2014 09:54

Zavři všechny programy a prohlížeče. Deaktivuj antivir a firewall.
Prosím, odpoj všechny USB (kromě myši s klávesnice) nebo externí disky z počítače před spuštěním tohoto programu.
Spusť znovu RogueKiller ( Pro Windows Vista nebo Windows 7, klepni pravým a vyber "Spustit jako správce", ve Windows XP poklepej ke spuštění).
- Počkej, až Prescan dokončí práci...
- Pak klikni na "Prohledat " ,po jeho skončení:

- V záložkách (Registry , Tasks , Web Browser apod.) vše zatrhni (dej zatržítka)

- Klikni na "Smazat"
- Počkej, dokud Status box nezobrazí " Mazání dokončeno "
- Klikni na "Zpráva " a zkopíruj a vlož obsah té zprávy prosím sem. Log je možno nalézt v RKreport [číslo]. txt na ploše.
- Zavři RogueKiller

Stáhni
Zoek.exe

a uloz si ho na plochu.
Zavři všechny ostatní programy , okna i prohlížeče.
Spusť Zoek.exe ( u win vista , win7, 8 klikni na něj pravým a vyber : „Spustit jako správce“
- pozor , náběh programu může trvat déle.

Do okna programu vlož skript níže:

Kód: Vybrat vše

autoclean;
emptyclsid;
iedefaults;
FFdefaults;
CHRdefaults;
emptyalltemp;
resethosts;

klikni na Run Script
Program provede sken , opravu, sken i oprava může trvat i více minut ,je třeba posečkat do konce. Do okna neklikej!
Program nabídne restart , potvrď .

Po restartu se může nějaký čas ukázat pouze černá plocha , to je normální. Je třeba počkat až se vytvoří log. Ten si můžeš uložit třeba do dokumentů , jinak se sám ukládá do:
C:\zoek-results.log
Zkopíruj sem celý obsah toho logu.

rev · Příspěvekod **rev** » 13 říj 2014 12:31

RogueKiller V10.0.1.0 [Oct 10 2014] by Adlice Software
mail : http://www.adlice.com/contact/
Feedback : http://forum.adlice.com
Website : http://www.adlice.com/softwares/roguekiller/
Blog : http://www.adlice.com

Operating System : Windows XP (5.1.2600 Service Pack 3) 32 bits version
Started in : Normal mode
User : Rev [Administrator]
Mode : Delete -- Date : 10/13/2014 12:00:18

¤¤¤ Processes : 0 ¤¤¤

¤¤¤ Registry : 17 ¤¤¤
[] HKEY_LOCAL_MACHINE\RK_Software_ON_C_9A29\Microsoft\Windows\CurrentVersion\Run | SW20 : C:\WINDOWS\system32\sw20.exe [-] -> Deleted
[] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run | SW20 : D:\WINDOWS\system32\sw20.exe [-] -> Deleted
[PUM.HomePage] HKEY_LOCAL_MACHINE\RK_Software_ON_C_9A29\Microsoft\Internet Explorer\Main | Start Page : http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home -> Replaced (http://go.microsoft.com/fwlink/p/?LinkId=255141)
[PUM.HomePage] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main | Start Page : https://www.seznam.cz/?clid=22668 -> Replaced (http://go.microsoft.com/fwlink/p/?LinkId=255141)
[PUM.HomePage] HKEY_USERS\RK_Tom_ON_C_FDF9\Software\Microsoft\Internet Explorer\Main | Start Page : http://www.microsoft.com/isapi/redir.dl ... ar=msnhome -> Replaced (http://go.microsoft.com/fwlink/p/?LinkId=255141)
[PUM.HomePage] HKEY_USERS\S-1-5-21-527237240-1454471165-682003330-1004\Software\Microsoft\Internet Explorer\Main | Start Page : https://www.seznam.cz/?clid=22668 -> Replaced (http://go.microsoft.com/fwlink/p/?LinkId=255141)
[PUM.SearchPage] HKEY_LOCAL_MACHINE\RK_Software_ON_C_9A29\Microsoft\Internet Explorer\Main | Search Page : http://www.microsoft.com/isapi/redir.dl ... r=iesearch -> Replaced (http://go.microsoft.com/fwlink/?LinkId=54896)
[PUM.SearchPage] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main | Search Page : http://search.seznam.cz/?sourceid=quicksearch_22668&q={searchTerms} -> Replaced (http://go.microsoft.com/fwlink/?LinkId=54896)
[PUM.SearchPage] HKEY_USERS\RK_Tom_ON_C_FDF9\Software\Microsoft\Internet Explorer\Main | Search Page : http://www.microsoft.com/isapi/redir.dl ... r=iesearch -> Replaced (http://go.microsoft.com/fwlink/?LinkId=54896)
[PUM.Dns] HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters | DhcpNameServer : 83.240.0.214 83.240.0.135 -> Replaced ()
[PUM.Dns] HKEY_LOCAL_MACHINE\System\ControlSet002\Services\Tcpip\Parameters | DhcpNameServer : 83.240.0.214 83.240.0.135 -> Replaced ()
[PUM.Dns] HKEY_LOCAL_MACHINE\System\ControlSet003\Services\Tcpip\Parameters | DhcpNameServer : 83.240.0.214 83.240.0.135 -> Replaced ()
[PUM.Dns] HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{FFBCF54D-BCC6-403D-888B-A0D55B25E552} | DhcpNameServer : 83.240.0.214 83.240.0.135 -> Replaced ()
[PUM.Dns] HKEY_LOCAL_MACHINE\System\ControlSet002\Services\Tcpip\Parameters\Interfaces\{FFBCF54D-BCC6-403D-888B-A0D55B25E552} | DhcpNameServer : 83.240.0.214 83.240.0.135 -> Replaced ()
[PUM.Dns] HKEY_LOCAL_MACHINE\System\ControlSet003\Services\Tcpip\Parameters\Interfaces\{FFBCF54D-BCC6-403D-888B-A0D55B25E552} | DhcpNameServer : 83.240.0.214 83.240.0.135 -> Replaced ()
[PUM.DesktopIcons] HKEY_LOCAL_MACHINE\RK_Software_ON_C_9A29\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1 -> Replaced (0)
[PUM.DesktopIcons] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1 -> Replaced (0)

¤¤¤ Tasks : 0 ¤¤¤

¤¤¤ Files : 0 ¤¤¤

¤¤¤ Hosts File : 1 ¤¤¤
[D:\WINDOWS\System32\drivers\etc\hosts] 127.0.0.1 localhost

¤¤¤ Antirootkit : 0 (Driver: Loaded) ¤¤¤

¤¤¤ Web browsers : 3 ¤¤¤
[FIREFX:Addon] 8e2c9kd8.default : avast! Online Security [wrc@avast.com] -> Deleted
[FIREFX:Addon] 8e2c9kd8.default : Microsoft .NET Framework Assistant [{20a82645-c095-46ed-80e3-08825760534b}] -> Deleted
[PUM.HomePage][FIREFX:Config] 8e2c9kd8.default : user_pref("browser.startup.homepage", "http://www.seznam.cz/"); -> Replaced (about:home)

¤¤¤ MBR Check : ¤¤¤
+++++ PhysicalDrive0: ST3120213A +++++
--- User ---
[MBR] 32d5c6fee34f4bb57ae7ff6fa51935e1
[BSP] 4f83fcee3f06841886828d3c40f6da51 : Windows XP MBR Code
Partition table:
0 - [XXXXXX] EXTEN-LBA (0xf) [VISIBLE] Offset (sectors): 16065 | Size: 29988 MB
1 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 61432560 | Size: 84474 MB
User = LL1 ... OK
Error reading LL2 MBR! ([1] Nesprávná funkce. )

+++++ PhysicalDrive1: OTi CF CARD Reader USB Device +++++
Error reading User MBR! ([15] Za?ízení není p?ipraveno. )
Error reading LL1 MBR! NOT VALID!
Error reading LL2 MBR! ([32] Po?adavek není podporován. )

+++++ PhysicalDrive2: OTi SM CARD Reader USB Device +++++
Error reading User MBR! ([15] Za?ízení není p?ipraveno. )
Error reading LL1 MBR! NOT VALID!
Error reading LL2 MBR! ([32] Po?adavek není podporován. )

+++++ PhysicalDrive3: OTi SD CARD Reader USB Device +++++
Error reading User MBR! ([15] Za?ízení není p?ipraveno. )
Error reading LL1 MBR! NOT VALID!
Error reading LL2 MBR! ([32] Po?adavek není podporován. )

+++++ PhysicalDrive4: OTi MS CARD Reader USB Device +++++
Error reading User MBR! ([15] Za?ízení není p?ipraveno. )
Error reading LL1 MBR! NOT VALID!
Error reading LL2 MBR! ([32] Po?adavek není podporován. )

============================================
RKreport_SCN_10122014_191914.log - RKreport_SCN_10132014_115809.log

Zoek.exe v5.0.0.0 Updated 11-October-2014
Tool run by Rev on po 13.10.2014 at 12:11:31,17.
Microsoft Windows XP Home Edition 5.1.2600 Service Pack 3 x86
Running in: Normal Mode Internet Access Detected
Launched: D:\Documents and Settings\Rev\Plocha\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

13.10.2014 12:12:48 Zoek.exe System Restore Point Created Succesfully.

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

127.0.0.1 localhost

==== Deleting CLSID Registry Keys ======================

==== Deleting CLSID Registry Values ======================

HKEY_USERS\S-1-5-21-527237240-1454471165-682003330-1004\Software\Microsoft\Internet Explorer\Approved Extensions\{336D0C35-8A85-403a-B9D2-65C292C39087} deleted successfully
HKEY_LOCAL_MACHINE\software\Wow6432Node\mozilla\Firefox\extensions\{336D0C35-8A85-403a-B9D2-65C292C39087} deleted successfully

==== Deleting Services ======================

==== Deleting Files \ Folders ======================

D:\Program Files\Java deleted
D:\Program Files\ComPlus Applications deleted
D:\WINDOWS\002778_.tmp deleted

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions]
"{20a82645-c095-46ed-80e3-08825760534b}"="D:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension" [25.05.2012 22:42]

==== Chromium Look ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
gomekmidlodglbbmalcneegieacbdmki - D:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx[10.10.2014 15:39]
pacgpkgadgmibnhpdidcnfafllnmeomc - D:\Documents and Settings\Rev\Local Settings\Data aplikacˇ\CRE\pacgpkgadgmibnhpdidcnfafllnmeomc.crx[15.07.2012 14:18]

HKEY_CURRENT_USER\SOFTWARE\Google\Chrome\Extensions
pacgpkgadgmibnhpdidcnfafllnmeomc - D:\Documents and Settings\Rev\Local Settings\Data aplikacˇ\CRE\pacgpkgadgmibnhpdidcnfafllnmeomc.crx[15.07.2012 14:18]

==== Chromium Fix ======================

D:\Documents and Settings\Rev\Local Settings\Data aplikacˇ\CRE\pacgpkgadgmibnhpdidcnfafllnmeomc.crx deleted successfully

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/p/?LinkId=255141"
"Search Page"="http://www.google.com"
"Search Bar"="https://www.seznam.cz/?clid=22668"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Search Bar"="https://www.seznam.cz/?clid=22668"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AboutURLs]
"Tabs"="about:newtab"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
No DefaultScope Set For HKCU

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Bar"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Start Page"="http://go.microsoft.com/fwlink/p/?LinkId=255141"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Search Bar"="http://go.microsoft.com/fwlink/?LinkId=54896"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl]
"(Default)"="http://search.msn.com/results.asp?q=%s"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AboutURLs]
"Tabs"="res://ieframe.dll/tabswelcome.htm"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{012E1000-F331-11DB-8314-0800200C9A66}"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
{012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC"

==== Reset Google Chrome ======================

Nothing found to reset

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc deleted successfully
HKEY_CURRENT_USER\SOFTWARE\Google\Chrome\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc deleted successfully

==== Empty IE Cache ======================

D:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5 emptied successfully
D:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5 emptied successfully
D:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5 emptied successfully
D:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot
D:\Documents and Settings\Rev\Local Settings\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot

==== Empty FireFox Cache ======================

No FireFox Profiles found

==== Empty Chrome Cache ======================

No Chrome User Data found

==== Empty All Flash Cache ======================

No Flash Cache Found

==== Empty All Java Cache ======================

No Java Cache Found

==== D:\zoek_backup content ======================

D:\zoek_backup (files=1242 folders=75 179963603 bytes)

==== Empty Temp Folders ======================

D:\WINDOWS\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

D:\WINDOWS\Temp successfully emptied
D:\DOCUME~1\Rev\LOCALS~1\Temp successfully emptied

==== Empty Recycle Bin ======================

D:\RECYCLER successfully emptied

==== Deleting Files / Folders ======================

"D:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat" not found
"D:\Documents and Settings\Rev\Local Settings\Temporary Internet Files\Content.IE5\index.dat" not found

==== EOF on po 13.10.2014 at 12:27:00,98 ======================

Příspěvekod **jaro3** » 14 říj 2014 10:34

Vlož nový log z HJT + info o problémech.

rev · Příspěvekod **rev** » 14 říj 2014 11:27

Momentálně bych řekl, že vše šlape, jak má. Dva roky jsem byl bez netu a tak, když jsem ho znovu zavedl, se tam natahaly různý aktualizace apod. a proto to běželo strašně pomalu. Načetla se mi web stránka, ale za 3 sekundy se zase objevila značka načítání stránky a třeba minutu jsem musel čekat než to doběhne. Teď mi to nic taovýho nedělá.

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:21:32, on 14.10.2014
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
D:\WINDOWS\System32\smss.exe
D:\WINDOWS\system32\csrss.exe
D:\WINDOWS\system32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\Explorer.EXE
D:\Program Files\AVAST Software\Avast\AvastSvc.exe
D:\WINDOWS\system32\spoolsv.exe
D:\WINDOWS\system32\svchost.exe
D:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jqs.exe
D:\WINDOWS\system32\nvsvc32.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\system32\wscntfy.exe
D:\WINDOWS\System32\alg.exe
D:\WINDOWS\system32\wbem\wmiprvse.exe
D:\Program Files\MSI\Live Update 3\LMonitor.exe
D:\WINDOWS\SOUNDMAN.EXE
D:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
D:\Program Files\QuickTime\qttask.exe
D:\Program Files\Common Files\Java\Java Update\jusched.exe
D:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
D:\Program Files\AVAST Software\Avast\AvastUI.exe
D:\WINDOWS\system32\ctfmon.exe
D:\Program Files\MSI\3D!Turbo Experience\3D!Turbo.exe
D:\WINDOWS\system32\wbem\unsecapp.exe
D:\Program Files\Google\Google Earth\client\googleearth.exe
D:\Program Files\Mozilla Firefox\firefox.exe
D:\Program Files\Mozilla Firefox\plugin-container.exe
D:\Documents and Settings\Rev\Plocha\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - D:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - D:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - D:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE D:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NVCLOCK] Rundll32 nvclock.dll,fnNvclock
O4 - HKLM\..\Run: [LiveMonitor] D:\Program Files\MSI\Live Update 3\LMonitor.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Adobe ARM] "D:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [QuickTime Task] "D:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] "D:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [ISUSPM Startup] D:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "D:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [AvastUI.exe] "D:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKCU\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [KiesTrayAgent] D:\Program Files\Samsung\Kies\/\KiesTrayAgent.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: fliptoast.lnk = D:\Program Files\fliptoast\fliptoast.exe
O4 - Global Startup: 3D!Turbo Experience.lnk = D:\Program Files\MSI\3D!Turbo Experience\3D!Turbo.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://D:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - D:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - D:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - D:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - D:\WINDOWS\system32\browseui.dll
O23 - Service: avast! Antivirus - AVAST Software - D:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - D:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - D:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Oracle Corporation - D:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jqs.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - D:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - D:\WINDOWS\system32\nvsvc32.exe
O23 - Service: ServiceLayer - Nokia. - D:\Program Files\PC Connectivity Solution\ServiceLayer.exe

--
End of file - 6371 bytes

Příspěvekod **Orcus** » 14 říj 2014 16:04

V HJT fixni:
O4 - HKLM\..\Run: [Adobe ARM] "D:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [QuickTime Task] "D:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] "D:\Program Files\Common Files\Java\Java Update\jusched.exe"

Vyčisti systém CCleanerem

====================================================

Stáhni si zde DelFix
http://general-changelog-team.fr/fr/dow ... e/9-delfix

ulož si soubor na plochu.
Poklepáním na ikonu spusť nástroj Delfix.exe
( Ve Windows Vista, Windows 7 a 8, musíš spustit soubor pravým tlačítkem myši -> Spustit jako správce .
V hlavním menu, zkontroluj tyto možnosti - Odstranění dezinfekce nástrojů (Remove desinfection tools) – Vyčistit body obnovy (Purge System Restore) .
Poté klikněte na tlačítko Spustit (Run) a nech nástroj dělat svoji práci.

Poté se zpráva se otevře (DelFix.txt). Vlož celý obsah zprávy sem. Jinak je zpráva zde:
v C: \ DelFix.txt

Pokud to je vše, téma můžeš označit jako vyřešené.

rev · Příspěvekod **rev** » 21 říj 2014 20:00

Nevím, čím to je, ale počítač "pracuje" i v době, kdy na něm nic nedělám. Dioda bliká celkem rychle, případně rovnou svítí a slyším, že počítač pracuje. Když hraju hru, tak se mi seká a když zapnu internet, tak se mi taky načítá celkem pomalu. Nevím, čím to je, ale rychlostí připojení určitě ne.

# DelFix v10.8 - Logfile created 21/10/2014 at 19:54:53
# Updated 29/07/2014 by Xplode
# Username : Rev - S-B008CC2B52274
# Operating System : Microsoft Windows XP Service Pack 3 (32 bits)

~ Removing disinfection tools ...

Deleted : D:\zoek_backup
Deleted : D:\AdwCleaner
Deleted : D:\zoek-results.log
Deleted : D:\Documents and Settings\Rev\Plocha\adwcleaner_3.311.exe
Deleted : D:\Documents and Settings\Rev\Plocha\JRT.exe
Deleted : D:\Documents and Settings\Rev\Plocha\HijackThis.exe
Deleted : D:\Documents and Settings\Rev\Plocha\RogueKiller.exe
Deleted : D:\Documents and Settings\Rev\Plocha\TFC.exe
Deleted : D:\Documents and Settings\Rev\Plocha\zoek.exe
Deleted : HKLM\SOFTWARE\AdwCleaner
Deleted : HKLM\SOFTWARE\TrendMicro\Hijackthis

~ Cleaning system restore ...

Deleted : RP #393 [Nainstalováno Windows XP KB974571. | 10/12/2014 16:18:37]
Deleted : RP #394 [Nainstalováno Windows XP KB975025. | 10/12/2014 16:19:27]
Deleted : RP #395 [Nainstalováno Windows XP KB975467. | 10/12/2014 16:20:14]
Deleted : RP #396 [Nainstalováno Windows XP KB975560. | 10/12/2014 16:21:02]
Deleted : RP #397 [Nainstalováno Windows XP KB975561. | 10/12/2014 16:21:51]
Deleted : RP #398 [Nainstalováno Windows XP KB975562. | 10/12/2014 16:22:41]
Deleted : RP #399 [Nainstalováno Windows XP KB975713. | 10/12/2014 16:23:37]
Deleted : RP #400 [Nainstalováno Windows XP KB977914. | 10/12/2014 16:24:27]
Deleted : RP #401 [Nainstalováno Windows XP KB978037. | 10/12/2014 16:25:17]
Deleted : RP #402 [Nainstalováno Windows XP KB978338. | 10/12/2014 16:26:42]
Deleted : RP #403 [Nainstalováno Windows XP KB978542. | 10/12/2014 16:27:33]
Deleted : RP #404 [Nainstalováno Windows XP KB978601. | 10/12/2014 16:28:30]
Deleted : RP #405 [Nainstalováno Windows XP KB978706. | 10/12/2014 16:29:18]
Deleted : RP #406 [Nainstalováno Windows XP KB979309. | 10/12/2014 16:30:06]
Deleted : RP #407 [Nainstalováno Windows XP KB979482. | 10/12/2014 16:30:52]
Deleted : RP #408 [Nainstalováno Windows XP KB979559. | 10/12/2014 16:31:39]
Deleted : RP #409 [Nainstalováno Windows XP KB979683. | 10/12/2014 16:32:38]
Deleted : RP #410 [Nainstalováno Windows XP KB980218. | 10/12/2014 16:33:30]
Deleted : RP #411 [Nainstalováno Windows XP KB980232. | 10/12/2014 16:34:20]
Deleted : RP #412 [Nainstalováno Windows XP KB982381. | 10/12/2014 16:35:09]
Deleted : RP #413 [zoek.exe restore point | 10/13/2014 10:12:48]
Deleted : RP #414 [Kontrolní bod systému | 10/16/2014 18:57:45]
Deleted : RP #415 [Kontrolní bod systému | 10/18/2014 21:57:31]

New restore point created !

########## - EOF - ##########

Prosím o kontrolu logu - zpomalený počítač Vyřešeno

Prosím o kontrolu logu - zpomalený počítač

Re: Prosím o kontrolu logu - zpomalený počítač

Re: Prosím o kontrolu logu - zpomalený počítač

Re: Prosím o kontrolu logu - zpomalený počítač

Re: Prosím o kontrolu logu - zpomalený počítač

Re: Prosím o kontrolu logu - zpomalený počítač

Re: Prosím o kontrolu logu - zpomalený počítač

Re: Prosím o kontrolu logu - zpomalený počítač

Re: Prosím o kontrolu logu - zpomalený počítač

Re: Prosím o kontrolu logu - zpomalený počítač

Re: Prosím o kontrolu logu - zpomalený počítač

Re: Prosím o kontrolu logu - zpomalený počítač

Kdo je online