Prosím o kontrolu

[Malwyn]

Dobrý den,

Už asi 4 dny jsem řešil problém se zvukem a zatím bohužel bez výsledku, tak mi bylo doporučeno, abych si nechal provést kontrolu zda tam není nějaká škodná. Předem děkuji.

Zde je výpis z Hijackthis :

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 16:01:07, on 21.2.2015
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v8.00 (8.00.6001.19088)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe
C:\Program Files\CyberLink\MagicSports\Kernel\MagicSports\MSPMirage.exe
C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Gaming Keyboard\Monitor.EXE
C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe
C:\Windows\ehome\ehtray.exe
C:\Windows\ehome\ehmsas.exe
C:\Windows\System32\p2phost.exe
C:\Users\elgany\AppData\Local\Akamai\netsession_win.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\ProgramData\U3\U3Launcher\LaunchU3.exe
C:\Users\elgany\AppData\Local\Akamai\netsession_win.exe
C:\Program Files\Gaming Keyboard\OSD.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\CPSHelpRunner.exe
C:\Windows\System32\mobsync.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Users\elgany\Desktop\hijackthis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.omniboxes.com/web/?type=ds&t ... QE5SP9M&q={searchTerms}
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://format.packardbell.com/cgi-bin/r ... ey=IESTART
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: (no name) - {90b49673-5506-483e-b92b-ca0265bd9ca8} - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll
O2 - BHO: Box Rock 1.0.0.7 - {464deeb8-b74f-4117-b8ec-e42f4028f3d1} - C:\Program Files\Box Rock\BoxRockbho.dll (file missing)
O2 - BHO: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Browser Address Error Redirector - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Google\Google_BAE\BAE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL
O3 - Toolbar: Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [RoxWatchTray] "C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe"
O4 - HKLM\..\Run: [MSPService] C:\Program Files\CyberLink\MagicSports\Kernel\MagicSports\MSPMirage.exe
O4 - HKLM\..\Run: [toolbar_eula_launcher] C:\Program Files\Packard Bell\GOOGLE_EULA\EULALauncher.exe
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [VirtualCloneDrive] "C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon
O4 - HKLM\..\Run: [CanonSolutionMenu] C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe /logon
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [VICTORY Gaming Keyboard] "C:\Program Files\Gaming Keyboard\Monitor.exe"
O4 - HKCU\..\Run: [SmpcSys] C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [CollaborationHost] C:\Windows\system32\p2phost.exe -s
O4 - HKCU\..\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020
O4 - HKCU\..\Run: [ISUSPM] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -scheduler
O4 - HKCU\..\Run: [DLD.EXE] C:\Program Files\Download Direct\DLD.exe
O4 - HKCU\..\Run: [ICQ] ~"C:\Program Files\ICQ6.5\ICQ.exe" silent
O4 - HKCU\..\Run: [Akamai NetSession Interface] "C:\Users\elgany\AppData\Local\Akamai\netsession_win.exe"
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [DriverUpdaterPro] C:\Program Files\oTweak\DriverUpdaterPro\DriverUpdaterPro.exe /ot /as /ss
O4 - HKCU\..\Run: [SystemBoosterPro] C:\Program Files\oTweak\SystemBoosterPro\SystemBoosterPro.exe /ot /as /ss
O4 - HKUS\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User '?')
O4 - HKUS\S-1-5-21-2113254736-2033477997-1415408504-1002\..\Run: [SmpcSys] C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe (User '?')
O4 - HKUS\S-1-5-21-2113254736-2033477997-1415408504-1002\..\Run: [CollaborationHost] C:\Windows\system32\p2phost.exe -s (User '?')
O4 - HKUS\S-1-5-21-2113254736-2033477997-1415408504-1002\..\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020 (User '?')
O4 - HKUS\S-1-5-21-2113254736-2033477997-1415408504-1002\..\Run: [ISUSPM] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -scheduler (User '?')
O4 - HKUS\S-1-5-21-2113254736-2033477997-1415408504-1002\..\Run: [DLD.EXE] C:\Program Files\Download Direct\DLD.exe (User '?')
O4 - HKUS\S-1-5-21-2113254736-2033477997-1415408504-1002\..\Run: [ICQ] ~"C:\Program Files\ICQ6.5\ICQ.exe" silent (User '?')
O4 - HKUS\S-1-5-21-2113254736-2033477997-1415408504-1002\..\Run: [Akamai NetSession Interface] "C:\Users\elgany\AppData\Local\Akamai\netsession_win.exe" (User '?')
O4 - HKUS\S-1-5-21-2113254736-2033477997-1415408504-1002\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe (User '?')
O4 - HKUS\S-1-5-21-2113254736-2033477997-1415408504-1002\..\Run: [DriverUpdaterPro] C:\Program Files\oTweak\DriverUpdaterPro\DriverUpdaterPro.exe /ot /as /ss (User '?')
O4 - HKUS\S-1-5-21-2113254736-2033477997-1415408504-1002\..\Run: [SystemBoosterPro] C:\Program Files\oTweak\SystemBoosterPro\SystemBoosterPro.exe /ot /as /ss (User '?')
O4 - HKUS\S-1-5-21-2113254736-2033477997-1415408504-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\..\Run: [SmpcSys] C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe (User '?')
O4 - HKUS\S-1-5-18\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User '?')
O4 - HKUS\.DEFAULT\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'Default user')
O4 - Global Startup: LaunchU3.exe.lnk = ?
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O20 - AppInit_DLLs: \go??????3
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Canon Inkjet Printer/Scanner/Fax Extended Survey Program (IJPLMSVC) - Unknown owner - C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: MySQL - Unknown owner - C:\Program.exe (file missing)
O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe

--
End of file - 11355 bytes

[Reklama]

[Malwyn]

# AdwCleaner v4.111 - Logfile created 21/02/2015 at 15:38:05
# Updated 18/02/2015 by Xplode
# Database : 2015-02-18.3 [Server]
# Operating system : Windows Vista (TM) Home Premium Service Pack 1 (x86)
# Username : elgany - MALWYN
# Running from : C:\Users\elgany\Desktop\AdwCleaner.exe
# Option : Scan

***** [ Services ] *****


***** [ Files / Folders ] *****

File Found : C:\Program Files\Mozilla Firefox\searchplugins\SearchResults.xml
Folder Found : C:\Program Files\oTweak
Folder Found : C:\Users\elgany\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\oTweak Software

***** [ Scheduled tasks ] *****

Task Found : globalUpdateUpdateTaskMachineCore
Task Found : globalUpdateUpdateTaskMachineUA

***** [ Shortcuts ] *****


***** [ Registry ] *****

Data Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - <local>
Key Found : HKCU\Software\oTweak
Key Found : HKCU\Software\WajIntEnhance
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Vosteran.com
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WajIntEnhance
Key Found : HKLM\SOFTWARE\WajIntEnhance
Value Found : HKCU\Software\Microsoft\Internet Explorer\Main [ICQ Search]
Value Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [DriverUpdaterPro]
Value Found : HKCU\Software\Mozilla\Firefox\Extensions [ffox@bandoo.com]
Value Found : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [ffox@bandoo.com]

***** [ Web browsers ] *****

-\\ Internet Explorer v8.0.6001.19088


-\\ Mozilla Firefox v35.0.1 (x86 cs)


-\\ Google Chrome v40.0.2214.115

*************************

AdwCleaner[R0].txt - [35532 bytes] - [17/02/2015 19:07:02]
AdwCleaner[R1].txt - [35592 bytes] - [17/02/2015 19:12:55]
AdwCleaner[R2].txt - [1789 bytes] - [21/02/2015 15:38:05]
AdwCleaner[S0].txt - [36090 bytes] - [17/02/2015 19:16:51]

########## EOF - C:\AdwCleaner\AdwCleaner[R2].txt - [1908 bytes] ##########

[Malwyn]

Malwarebytes Anti-Malware
http://www.malwarebytes.org

Datum skenování: 21.2.2015
Čas skenování: 15:55:03
Protokol: malware.txt
Správce: Ano

Verze: 2.00.4.1028
Databáze malwaru: v2015.02.21.04
Databáze rootkitů: v2015.02.20.01
Licence: Zkušební verze
Ochrana proti malwaru: Zapnuto
Ochrana proti škodlivým webovým stránkám: Zapnuto
Sebeobrany: Vypnuto

OS: Windows Vista Service Pack 1
CPU: x86
Souborový systém: NTFS
Uživatel: elgany

Typ skenu: Sken hrozeb
Výsledek: Dokončeno
Prohledaných objektů: 335324
Uplynulý čas: 16 min, 47 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Vypnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto

Procesy: 0
(Žádné zákerné zjištěny položek)

Moduly: 0
(Žádné zákerné zjištěny položek)

Klíče registru: 24
PUP.Optional.BoxRock.A, HKLM\SOFTWARE\CLASSES\CLSID\{464deeb8-b74f-4117-b8ec-e42f4028f3d1}, , [7a9e42dffe8c9e98d22fcc7e8c779d63],
PUP.Optional.BoxRock.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{137fd54f-6407-494f-a222-05db66ec8248}, , [7a9e42dffe8c9e98d22fcc7e8c779d63],
PUP.Optional.BoxRock.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{EBCD18AF-4FE7-4A67-B50C-87E635F60283}, , [7a9e42dffe8c9e98d22fcc7e8c779d63],
PUP.Optional.BoxRock.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{464DEEB8-B74F-4117-B8EC-E42F4028F3D1}, , [7a9e42dffe8c9e98d22fcc7e8c779d63],
PUP.Optional.Cinema.A, HKLM\SOFTWARE\CinemaP-1.9cV16.02-nv, , [55c3968b6b1fb581a81a327e9c67e11f],
PUP.Optional.Cinema.A, HKLM\SOFTWARE\CinemaP-1.9cV16.02-nv-ie, , [44d434edd2b86ec8a51d119f17ec8779],
PUP.Optional.Cinema.A, HKLM\SOFTWARE\CinemaP-1.9cV17.02, , [a2767da4acde76c0cdf54d6341c2e11f],
PUP.Optional.Cinema.A, HKLM\SOFTWARE\CinemaP-1.9cV17.02-nv, , [ad6b0c15721815219f23713ff90a09f7],
PUP.Optional.Cinema.A, HKLM\SOFTWARE\CinemaP-1.9cV17.02-nv-ie, , [c058968b9feb31054979c7e930d3bd43],
PUP.Optional.InternetSpeedChecker.A, HKLM\SOFTWARE\Internet Speed Checker-nv, , [d642a37e34561d19f951deb532d1ae52],
PUP.Optional.InternetSpeedChecker.A, HKLM\SOFTWARE\Internet Speed Checker-nv-ie, , [ba5e26fb4842aa8c4802464d976c6f91],
PUP.Optional.Omniboxes.A, HKLM\SOFTWARE\omniboxesSoftware, , [0f0955ccacde42f4d134aaeab54e23dd],
PUP.Optional.Wajam.A, HKLM\SOFTWARE\WajIntEnhance, , [8e8a031e3555f93de6eb692ec53eae52],
PUP.Optional.Vosteran, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Vosteran.com, , [49cf9091f89290a666dde7bd29da54ac],
PUP.Optional.Wajam.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\WajIntEnhance, , [35e340e1088272c4d02deea6db28f30d],
PUP.Optional.InternetSpeedChecker.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Internet Speed Checker-nv, , [7a9e2ff217735adc4cffcbc836cda25e],
PUP.Optional.InternetSpeedChecker.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Internet Speed Checker-nv-ie, , [5eba130e5f2b85b1d576f3a04eb55ca4],
PUP.Optional.Cinema.A, HKU\S-1-5-21-2113254736-2033477997-1415408504-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\CinemaP-1.9cV17.02-nv, , [4eca1c05305aa88ef2d119977b884ab6],
PUP.Optional.Cinema.A, HKU\S-1-5-21-2113254736-2033477997-1415408504-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\CinemaP-1.9cV17.02-nv-ie, , [1ff920017a1021157c472987729120e0],
PUP.Optional.InternetSpeedChecker.A, HKU\S-1-5-21-2113254736-2033477997-1415408504-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Internet Speed Checker-nv, , [c25651d0d9b179bd2526187b02010ff1],
PUP.Optional.InternetSpeedChecker.A, HKU\S-1-5-21-2113254736-2033477997-1415408504-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Internet Speed Checker-nv-ie, , [2eeacf527f0ba294b695c8cb7291b947],
PUP.Optional.Wajam.A, HKU\S-1-5-21-2113254736-2033477997-1415408504-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\WajIntEnhance, , [7a9ecf52800ab680cc065e39ec17aa56],
PUP.Optional.Cinema.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\CinemaP-1.9cV17.02, , [1ff9e53cf1998da9bdf53d3f867d35cb],
PUP.Optional.Omniboxes.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\omniboxes uninstall, , [20f8a67b1674c17500c7652d2dd632ce],

Hodnoty registru: 0
(Žádné zákerné zjištěny položek)

Data registru: 2
PUP.Optional.Omniboxes.A, HKU\S-1-5-21-2113254736-2033477997-1415408504-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, http://www.omniboxes.com/web/?type=ds&t ... QE5SP9M&q={searchTerms}, Dobré: (http://www.google.com), Špatné: (http://www.omniboxes.com/web/?type=ds&t ... QE5SP9M&q={searchTerms}),,[c454130ed5b500363fb601bbb74ee917]
Broken.OpenCommand, HKCR\regfile\shell\open\command, "regedit.exe" "Dobré: (regedit.exe "Špatné: ("regedit.exe" "%1"),,[ffffffffffffffffffffffffffffffff]")", %4, %5

Složky: 30
PUP.Optional.uTorrentControl.A, C:\Program Files\uTorrentControl_v2, , [5ebaa57c4c3e7abc362b82dddb28728e],
PUP.Optional.UTorrentControl.A, C:\Users\elgany\AppData\LocalLow\uTorrentControl_v2, , [44d457ca890150e687c44f1242c1e818],
PUP.Optional.UTorrentControl.A, C:\Users\elgany\AppData\LocalLow\uTorrentControl_v2\CacheIcons, , [44d457ca890150e687c44f1242c1e818],
PUP.Optional.UTorrentControl.A, C:\Users\elgany\AppData\LocalLow\uTorrentControl_v2\Dialogs, , [44d457ca890150e687c44f1242c1e818],
PUP.Optional.UTorrentControl.A, C:\Users\elgany\AppData\LocalLow\uTorrentControl_v2\Dialogs\AddedAppDialog, , [44d457ca890150e687c44f1242c1e818],
PUP.Optional.UTorrentControl.A, C:\Users\elgany\AppData\LocalLow\uTorrentControl_v2\Dialogs\DefualtImages, , [44d457ca890150e687c44f1242c1e818],
PUP.Optional.UTorrentControl.A, C:\Users\elgany\AppData\LocalLow\uTorrentControl_v2\Dialogs\DetectedAppDialog, , [44d457ca890150e687c44f1242c1e818],
PUP.Optional.UTorrentControl.A, C:\Users\elgany\AppData\LocalLow\uTorrentControl_v2\Dialogs\EngineFirstTimeDialog, , [44d457ca890150e687c44f1242c1e818],
PUP.Optional.UTorrentControl.A, C:\Users\elgany\AppData\LocalLow\uTorrentControl_v2\Dialogs\ToolbarFirstTimeDialog, , [44d457ca890150e687c44f1242c1e818],
PUP.Optional.UTorrentControl.A, C:\Users\elgany\AppData\LocalLow\uTorrentControl_v2\Dialogs\ToolbarFirstTimeDialog\images, , [44d457ca890150e687c44f1242c1e818],
PUP.Optional.UTorrentControl.A, C:\Users\elgany\AppData\LocalLow\uTorrentControl_v2\Dialogs\ToolbarUntrustedAppsApprovalDialog, , [44d457ca890150e687c44f1242c1e818],
PUP.Optional.UTorrentControl.A, C:\Users\elgany\AppData\LocalLow\uTorrentControl_v2\Dialogs\UntrustedAddedAppDialog, , [44d457ca890150e687c44f1242c1e818],
PUP.Optional.UTorrentControl.A, C:\Users\elgany\AppData\LocalLow\uTorrentControl_v2\Dialogs\UntrustedAppApprovalDialog, , [44d457ca890150e687c44f1242c1e818],
PUP.Optional.UTorrentControl.A, C:\Users\elgany\AppData\LocalLow\uTorrentControl_v2\Dialogs\UntrustedAppPendingDialog, , [44d457ca890150e687c44f1242c1e818],
PUP.Optional.UTorrentControl.A, C:\Users\elgany\AppData\LocalLow\uTorrentControl_v2\EmailNotifier, , [44d457ca890150e687c44f1242c1e818],
PUP.Optional.UTorrentControl.A, C:\Users\elgany\AppData\LocalLow\uTorrentControl_v2\ExternalComponent, , [44d457ca890150e687c44f1242c1e818],
PUP.Optional.UTorrentControl.A, C:\Users\elgany\AppData\LocalLow\uTorrentControl_v2\Logs, , [44d457ca890150e687c44f1242c1e818],
PUP.Optional.UTorrentControl.A, C:\Users\elgany\AppData\LocalLow\uTorrentControl_v2\MyStuffApps, , [44d457ca890150e687c44f1242c1e818],
PUP.Optional.UTorrentControl.A, C:\Users\elgany\AppData\LocalLow\uTorrentControl_v2\plugins, , [44d457ca890150e687c44f1242c1e818],
PUP.Optional.UTorrentControl.A, C:\Users\elgany\AppData\LocalLow\uTorrentControl_v2\plugins\{5E1360DC-8FA8-40df-A8CD-FC3831B3634B}, , [44d457ca890150e687c44f1242c1e818],
PUP.Optional.UTorrentControl.A, C:\Users\elgany\AppData\LocalLow\uTorrentControl_v2\plugins\{5E1360DC-8FA8-40df-A8CD-FC3831B3634B}\3.6.12, , [44d457ca890150e687c44f1242c1e818],
PUP.Optional.UTorrentControl.A, C:\Users\elgany\AppData\LocalLow\uTorrentControl_v2\plugins\{5E1360DC-8FA8-40df-A8CD-FC3831B3634B}\3.6.12\bin, , [44d457ca890150e687c44f1242c1e818],
PUP.Optional.UTorrentControl.A, C:\Users\elgany\AppData\LocalLow\uTorrentControl_v2\Repository, , [44d457ca890150e687c44f1242c1e818],
PUP.Optional.UTorrentControl.A, C:\Windows\System32\config\systemprofile\AppData\LocalLow\uTorrentControl_v2, , [e92f33ee3c4e8ea855f6cb9632d19a66],
PUP.Optional.UTorrentControl.A, C:\Windows\System32\config\systemprofile\AppData\LocalLow\uTorrentControl_v2\Logs, , [e92f33ee3c4e8ea855f6cb9632d19a66],
PUP.Optional.Cinema.A, C:\Program Files\CinemaP-1.9cV16.02, , [c3557ca51b6fef471f93fe7e9b6834cc],
PUP.Optional.Cinema.A, C:\Program Files\CinemaP-1.9cV17.02, , [1ff9e53cf1998da9bdf53d3f867d35cb],
PUP.Optional.Omniboxes.A, C:\Users\elgany\AppData\Roaming\omniboxes, , [20f8a67b1674c17500c7652d2dd632ce],
PUP.Optional.Omniboxes.A, C:\Users\elgany\AppData\Roaming\omniboxes\images, , [20f8a67b1674c17500c7652d2dd632ce],
PUP.Optional.Omniboxes.A, C:\Users\elgany\AppData\Roaming\omniboxes\images\code, , [20f8a67b1674c17500c7652d2dd632ce],

Soubory: 46
PUP.Optional.Nova.A, C:\Program Files\4339b2de-1565-4e1d-b923-a869c9929a59\ea86bf02-670d-4692-b4b6-db49a7149860.dll, , [3edabb662961e056871c0503976bc937],
PUP.Optional.Nova.A, C:\Program Files\4ee018b8-83f8-4cc0-b497-64c11030d911\3949dd36-f098-4fcc-8e88-aef567b62933.dll, , [60b8a67bf09ac076465dad5bfd051ae6],
PUP.Optional.Nova.A, C:\Program Files\4ee018b8-83f8-4cc0-b497-64c11030d911\a5cd8129-9e10-464d-a7c5-41677770cb47.dll, , [43d565bc96f4df573c67ab5d1ae8bb45],
PUP.Optional.Nova.A, C:\Program Files\9dd7c316-ae56-44dd-a5e2-0dfc1d19d2f6\a2a923e0-6f6d-4378-9dfb-46ca1879745e.dll, , [b95f42dfdfabbd79168d3dcb2ad8c43c],
PUP.Optional.CrossRider.A, C:\Program Files\CinemaP-1.9cV17.02\1f84cbaf-c4d3-422f-9e74-5a5092dcd920-1-6.exe, , [c850dc45127888ae54f19b618f763cc4],
PUP.Optional.CrossRider.A, C:\Program Files\CinemaP-1.9cV17.02\1f84cbaf-c4d3-422f-9e74-5a5092dcd920-1-7.exe, , [94841d0471199d995beaf903d0356f91],
PUP.Optional.CrossRider.A, C:\Program Files\CinemaP-1.9cV17.02\1f84cbaf-c4d3-422f-9e74-5a5092dcd920-10.exe, , [30e8849d5535cc6a91b4bc40ec1917e9],
PUP.Optional.CrossRider.A, C:\Program Files\CinemaP-1.9cV17.02\1f84cbaf-c4d3-422f-9e74-5a5092dcd920-5.exe, , [8b8d46dbafdbfa3c90b5837918ed44bc],
PUP.Optional.CrossRider.A, C:\Program Files\CinemaP-1.9cV17.02\1f84cbaf-c4d3-422f-9e74-5a5092dcd920-6.exe, , [56c2c75a1f6b8fa767de05f717ee31cf],
PUP.Optional.CrossRider.A, C:\Program Files\CinemaP-1.9cV17.02\1f84cbaf-c4d3-422f-9e74-5a5092dcd920-7.exe, , [7c9cf829b4d6fc3a0a3bda22c73e7090],
PUP.Optional.Nova.A, C:\Program Files\CinemaP-1.9cV17.02\b309632c-52a3-45b8-97e6-c805d829ff8a.dll, , [21f71908b5d5b0861c87e62236cc5da3],
PUP.Optional.CrossRider.A, C:\Program Files\CinemaP-1.9cV17.02\utils.exe, , [7b9d38e90e7c50e697dd23296d938a76],
PUP.Optional.GlobalUpdate.A, C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore1d04ad8c4549e46.job, , [3fd9061bf19922143684e72fe81d9c64],
PUP.Optional.GlobalUpdate.A, C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineCore1d04ad8c4549e46, , [0d0b51d0ccbe5adcd8e3ff170afb5da3],
PUP.Optional.Cinema.A, C:\Program Files\CinemaP-1.9cV16.02\782b78a4-a860-4fe3-a9de-bd902d48b8a0-1-6.exe, , [c3557ca51b6fef471f93fe7e9b6834cc],
PUP.Optional.Cinema.A, C:\Program Files\CinemaP-1.9cV16.02\782b78a4-a860-4fe3-a9de-bd902d48b8a0-10.exe, , [c3557ca51b6fef471f93fe7e9b6834cc],
PUP.Optional.Cinema.A, C:\Program Files\CinemaP-1.9cV16.02\782b78a4-a860-4fe3-a9de-bd902d48b8a0-6.exe, , [c3557ca51b6fef471f93fe7e9b6834cc],
PUP.Optional.Cinema.A, C:\Program Files\CinemaP-1.9cV16.02\8f91cde9-41e5-4510-8d7f-d637ca4f51ef.dll, , [c3557ca51b6fef471f93fe7e9b6834cc],
PUP.Optional.Cinema.A, C:\Program Files\CinemaP-1.9cV17.02\bgNova.html, , [1ff9e53cf1998da9bdf53d3f867d35cb],
PUP.Optional.Cinema.A, C:\Program Files\CinemaP-1.9cV17.02\Uninstall.exe, , [1ff9e53cf1998da9bdf53d3f867d35cb],
PUP.Optional.Omniboxes.A, C:\Users\elgany\AppData\Roaming\omniboxes\469.json, , [20f8a67b1674c17500c7652d2dd632ce],
PUP.Optional.Omniboxes.A, C:\Users\elgany\AppData\Roaming\omniboxes\MessageBox.xml, , [20f8a67b1674c17500c7652d2dd632ce],
PUP.Optional.Omniboxes.A, C:\Users\elgany\AppData\Roaming\omniboxes\uninstallDlg2.xml, , [20f8a67b1674c17500c7652d2dd632ce],
PUP.Optional.Omniboxes.A, C:\Users\elgany\AppData\Roaming\omniboxes\UninstallManager.exe, , [20f8a67b1674c17500c7652d2dd632ce],
PUP.Optional.Omniboxes.A, C:\Users\elgany\AppData\Roaming\omniboxes\images\bg.png, , [20f8a67b1674c17500c7652d2dd632ce],
PUP.Optional.Omniboxes.A, C:\Users\elgany\AppData\Roaming\omniboxes\images\bg1.png, , [20f8a67b1674c17500c7652d2dd632ce],
PUP.Optional.Omniboxes.A, C:\Users\elgany\AppData\Roaming\omniboxes\images\bk_shadow.png, , [20f8a67b1674c17500c7652d2dd632ce],
PUP.Optional.Omniboxes.A, C:\Users\elgany\AppData\Roaming\omniboxes\images\button.png, , [20f8a67b1674c17500c7652d2dd632ce],
PUP.Optional.Omniboxes.A, C:\Users\elgany\AppData\Roaming\omniboxes\images\button1.png, , [20f8a67b1674c17500c7652d2dd632ce],
PUP.Optional.Omniboxes.A, C:\Users\elgany\AppData\Roaming\omniboxes\images\checkbox.png, , [20f8a67b1674c17500c7652d2dd632ce],
PUP.Optional.Omniboxes.A, C:\Users\elgany\AppData\Roaming\omniboxes\images\checkbox_select.png, , [20f8a67b1674c17500c7652d2dd632ce],
PUP.Optional.Omniboxes.A, C:\Users\elgany\AppData\Roaming\omniboxes\images\checked.png, , [20f8a67b1674c17500c7652d2dd632ce],
PUP.Optional.Omniboxes.A, C:\Users\elgany\AppData\Roaming\omniboxes\images\close.png, , [20f8a67b1674c17500c7652d2dd632ce],
PUP.Optional.Omniboxes.A, C:\Users\elgany\AppData\Roaming\omniboxes\images\loading_bg.png, , [20f8a67b1674c17500c7652d2dd632ce],
PUP.Optional.Omniboxes.A, C:\Users\elgany\AppData\Roaming\omniboxes\images\loading_light.png, , [20f8a67b1674c17500c7652d2dd632ce],
PUP.Optional.Omniboxes.A, C:\Users\elgany\AppData\Roaming\omniboxes\images\min.png, , [20f8a67b1674c17500c7652d2dd632ce],
PUP.Optional.Omniboxes.A, C:\Users\elgany\AppData\Roaming\omniboxes\images\scrollbar.bmp, , [20f8a67b1674c17500c7652d2dd632ce],
PUP.Optional.Omniboxes.A, C:\Users\elgany\AppData\Roaming\omniboxes\images\Thumbs.db, , [20f8a67b1674c17500c7652d2dd632ce],
PUP.Optional.Omniboxes.A, C:\Users\elgany\AppData\Roaming\omniboxes\images\unchecked.png, , [20f8a67b1674c17500c7652d2dd632ce],
PUP.Optional.Omniboxes.A, C:\Users\elgany\AppData\Roaming\omniboxes\images\code\code1.jpg, , [20f8a67b1674c17500c7652d2dd632ce],
PUP.Optional.Omniboxes.A, C:\Users\elgany\AppData\Roaming\omniboxes\images\code\code2.jpg, , [20f8a67b1674c17500c7652d2dd632ce],
PUP.Optional.Omniboxes.A, C:\Users\elgany\AppData\Roaming\omniboxes\images\code\code3.jpg, , [20f8a67b1674c17500c7652d2dd632ce],
PUP.Optional.Omniboxes.A, C:\Users\elgany\AppData\Roaming\omniboxes\images\code\code4.jpg, , [20f8a67b1674c17500c7652d2dd632ce],
PUP.Optional.Omniboxes.A, C:\Users\elgany\AppData\Roaming\omniboxes\images\code\code5.jpg, , [20f8a67b1674c17500c7652d2dd632ce],
PUP.Optional.Omniboxes.A, C:\Users\elgany\AppData\Roaming\omniboxes\images\code\code6.jpg, , [20f8a67b1674c17500c7652d2dd632ce],
PUP.Optional.Omniboxes.A, C:\Users\elgany\AppData\Roaming\omniboxes\images\code\Thumbs.db, , [20f8a67b1674c17500c7652d2dd632ce],

Fyzické sektory: 0
(Žádné zákerné zjištěny položek)


(end)

[jaro3]

Spusť znovu AdwCleaner (u Windows Vista či Windows7, klikni na AdwCleaner pravým a vyber „Spustit jako správce“
klikni na „Prohledat-Scan“, po prohledání klikni na „ Vymazat-Clean“

Program provede opravu, po automatickém restartu neukáže log (C:\AdwCleaner [S?].txt) , jeho obsah sem celý vlož.

Stáhni si Junkware Removal Tool by Thisisu

na svojí plochu.

Deaktivuj si svůj antivirový program. Pravým tl. myši klikni na JRT.exe a vyber „spustit jako správce“. Pro pokračování budeš vyzván ke stisknutí jakékoliv klávesy. Na nějakou klikni.
Začne skenování programu. Skenování může trvat dloho , podle množství nákaz. Po ukončení skenu se objeví log (JRT.txt) , který se uloží na ploše.
Zkopíruj sem prosím celý jeho obsah.

. spusť znovu MbAM a dej Skenovat nyní
- po proběhnutí programu se ti objeví hláška tak klikni na „Vše do karantény(smazat vybrané)“ a na „Exportovat záznam“ a vyber „textový soubor“ , soubor nějak pojmenuj a někam ho ulož. Zkopíruj se celý obsah toho logu.

Stáhni si RogueKiller by Adlice Software
32bit.:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
64bit.:
http://www.sur-la-toile.com/RogueKiller ... lerX64.exe
na svojí plochu.
- Zavři všechny ostatní programy a prohlížeče.
- Pro OS Vista a win7 spusť program RogueKiller.exe jako správce , u XP poklepáním.
- počkej až skončí Prescan -vyhledávání škodlivých procesů.
- Zkontroluj , zda máš zaškrtnuto:
Kontrola MBR
Offline Reg
Antirootkit
-Potom klikni na „Prohledat“.
- Program skenuje procesy PC. Po proskenování klikni na „Zpráva“celý obsah logu sem zkopíruj.
Pokud je program blokován , zkus ho spustit několikrát. Pokud dále program nepůjde spustit a pracovat, přejmenuj ho na winlogon.exe.

[Malwyn]

# AdwCleaner v4.111 - Logfile created 22/02/2015 at 12:19:42
# Updated 18/02/2015 by Xplode
# Database : 2015-02-18.3 [Server]
# Operating system : Windows Vista (TM) Home Premium Service Pack 1 (x86)
# Username : elgany - MALWYN
# Running from : C:\Users\elgany\Desktop\AdwCleaner.exe
# Option : Cleaning

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\Program Files\oTweak
Folder Deleted : C:\Users\elgany\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\oTweak Software
File Deleted : C:\Program Files\Mozilla Firefox\searchplugins\SearchResults.xml

***** [ Scheduled tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****

Value Deleted : HKCU\Software\Mozilla\Firefox\Extensions [ffox@bandoo.com]
Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [ffox@bandoo.com]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Main [ICQ Search]
Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [DriverUpdaterPro]
Key Deleted : HKCU\Software\oTweak
Key Deleted : HKCU\Software\WajIntEnhance
Key Deleted : HKLM\SOFTWARE\WajIntEnhance
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WajIntEnhance
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Vosteran.com
Data Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - <local>

***** [ Web browsers ] *****

-\\ Internet Explorer v8.0.6001.19088


-\\ Mozilla Firefox v35.0.1 (x86 cs)


-\\ Google Chrome v40.0.2214.115


*************************

AdwCleaner[R0].txt - [35532 bytes] - [17/02/2015 19:07:02]
AdwCleaner[R1].txt - [35592 bytes] - [17/02/2015 19:12:55]
AdwCleaner[R2].txt - [1987 bytes] - [21/02/2015 15:38:05]
AdwCleaner[R3].txt - [2046 bytes] - [22/02/2015 12:17:51]
AdwCleaner[S0].txt - [36090 bytes] - [17/02/2015 19:16:51]
AdwCleaner[S1].txt - [1905 bytes] - [22/02/2015 12:19:42]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [1964 bytes] ##########




~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.4.2 (02.02.2015:1)
OS: Windows Vista (TM) Home Premium x86
Ran by elgany on ne 22.02.2015 at 12:30:00,72
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{4E7BD74F-2B8D-469E-CCB0-B130EEDBE97D}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{4E7BD74F-2B8D-469E-CCB0-B130EEDBE97E}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C}



~~~ Files

Successfully deleted: [File] C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineCore1d04ad8c4549e46
Successfully deleted: [File] C:\Windows\prefetch\DRIVERUPDATER.EXE-223B2980.pf
Successfully deleted: [File] C:\Windows\prefetch\DRIVERUPDATETOOLS.EXE-6A371EF4.pf
Successfully deleted: [File] C:\Windows\prefetch\DRIVERUPDATETOOLS.TMP-2352F4E4.pf
Successfully deleted: [File] C:\Windows\prefetch\DRIVERUPDATETOOLS.TMP-46932132.pf



~~~ Folders

Successfully deleted: [Folder] "C:\Users\elgany\appdata\locallow\utorrentcontrol_v2"
Successfully deleted: [Folder] "C:\Program Files\utorrentcontrol_v2"



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on ne 22.02.2015 at 12:31:58,54
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

[Malwyn]

Malwarebytes Anti-Malware
www.malwarebytes.org

Datum skenování: 22.2.2015
Čas skenování: 12:34:49
Protokol: mbam.txt
Správce: Ano

Verze: 2.00.4.1028
Databáze malwaru: v2015.02.22.03
Databáze rootkitů: v2015.02.20.01
Licence: Zkušební verze
Ochrana proti malwaru: Zapnuto
Ochrana proti škodlivým webovým stránkám: Zapnuto
Sebeobrany: Vypnuto

OS: Windows Vista Service Pack 1
CPU: x86
Souborový systém: NTFS
Uživatel: elgany

Typ skenu: Sken hrozeb
Výsledek: Dokončeno
Prohledaných objektů: 335773
Uplynulý čas: 15 min, 38 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Vypnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto

Procesy: 0
(Žádné zákerné zjištěny položek)

Moduly: 0
(Žádné zákerné zjištěny položek)

Klíče registru: 0
(Žádné zákerné zjištěny položek)

Hodnoty registru: 0
(Žádné zákerné zjištěny položek)

Data registru: 0
(Žádné zákerné zjištěny položek)

Složky: 0
(Žádné zákerné zjištěny položek)

Soubory: 0
(Žádné zákerné zjištěny položek)

Fyzické sektory: 0
(Žádné zákerné zjištěny položek)


(end)

[Malwyn]

U toho RogueKiller jsem omylem po dokončení dal smazat, tak snad to nevadí, udělal jsem nový scan a zde je Log:


RogueKiller V10.4.1.0 [Feb 19 2015] by Adlice Software
mail : http://www.adlice.com/contact/
Feedback : http://forum.adlice.com
Webová stránka : http://www.adlice.com/softwares/roguekiller/
Blog : http://www.adlice.com

Operační systém : Windows Vista (6.0.6001 Service Pack 1) 32 bits version
Spuštěno : Normální režim
Uživatel : elgany [Práva správce]
Mód : Prohledat -- Datum : 02/22/2015 13:17:25

¤¤¤ Procesy : 3 ¤¤¤
[Suspicious.Path] netsession_win.exe(2384) -- C:\Users\elgany\AppData\Local\Akamai\netsession_win.exe[7] -> Zastaveno [TermProc]
[Suspicious.Path] LaunchU3.exe(2440) -- C:\ProgramData\U3\U3Launcher\LaunchU3.exe[7] -> Zastaveno [TermProc]
[Suspicious.Path] netsession_win.exe(2580) -- C:\Users\elgany\AppData\Local\Akamai\netsession_win.exe[7] -> Zastaveno [TermProc]

¤¤¤ Registry : 11 ¤¤¤
[PUP] HKEY_CLASSES_ROOT\CLSID\{66E8DCC7-97D2-4A89-8E08-D0610FF0878C} (C:\Users\elgany\AppData\Local\Conduit\Community Alerts\Alert.dll) -> Nalezeno
[PUP] HKEY_CLASSES_ROOT\CLSID\{7473b6bd-4691-4744-a82b-7854eb3d70b6} (C:\Users\elgany\AppData\LocalLow\uTorrentControl_v2\prxtbuTo0.dll) -> Nalezeno
[Hidden.From.SCM] HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\bssbbyfc (System32\drivers\wrti.sys) -> Nalezeno
[PUM.Dns] HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters | DhcpNameServer : 10.0.0.138 [(Private Address) (XX)] -> Nalezeno
[PUM.Dns] HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters | DhcpNameServer : 10.0.0.138 [(Private Address) (XX)] -> Nalezeno
[PUM.Dns] HKEY_LOCAL_MACHINE\System\ControlSet003\Services\Tcpip\Parameters | DhcpNameServer : 10.0.0.138 [(Private Address) (XX)] -> Nalezeno
[PUM.Dns] HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{DD1008E8-4A26-49C9-BD13-3E31342449D8} | DhcpNameServer : 10.0.0.138 [(Private Address) (XX)] -> Nalezeno
[PUM.Dns] HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters\Interfaces\{DD1008E8-4A26-49C9-BD13-3E31342449D8} | DhcpNameServer : 10.0.0.138 [(Private Address) (XX)] -> Nalezeno
[PUM.Dns] HKEY_LOCAL_MACHINE\System\ControlSet003\Services\Tcpip\Parameters\Interfaces\{DD1008E8-4A26-49C9-BD13-3E31342449D8} | DhcpNameServer : 10.0.0.138 [(Private Address) (XX)] -> Nalezeno
[PUM.DesktopIcons] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1 -> Nalezeno
[PUM.DesktopIcons] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {59031a47-3f72-44a7-89c5-5595fe6b30ee} : 1 -> Nalezeno

¤¤¤ Úlohy : 0 ¤¤¤

¤¤¤ Soubory : 0 ¤¤¤

¤¤¤ Soubor HOSTS : 0 ¤¤¤

¤¤¤ Antirootkit : 7 (Driver: Nahrán) ¤¤¤
[IRP:Addr(Hook.IRP)] \SystemRoot\System32\drivers\mountmgr.sys - IRP_MJ_CREATE[0] : Unknown @ 0x866ee1f8
[IRP:Addr(Hook.IRP)] \SystemRoot\System32\drivers\mountmgr.sys - IRP_MJ_CLOSE[2] : Unknown @ 0x866ee1f8
[IRP:Addr(Hook.IRP)] \SystemRoot\System32\drivers\mountmgr.sys - IRP_MJ_DEVICE_CONTROL[14] : Unknown @ 0x866ee1f8
[IRP:Addr(Hook.IRP)] \SystemRoot\System32\drivers\mountmgr.sys - IRP_MJ_INTERNAL_DEVICE_CONTROL[15] : C:\Windows\System32\drivers\prosync1.sys @ 0x8ab676c1
[IRP:Addr(Hook.IRP)] \SystemRoot\System32\drivers\mountmgr.sys - IRP_MJ_POWER[22] : Unknown @ 0x866ee1f8
[IRP:Addr(Hook.IRP)] \SystemRoot\System32\drivers\mountmgr.sys - IRP_MJ_SYSTEM_CONTROL[23] : Unknown @ 0x866ee1f8
[IRP:Addr(Hook.IRP)] \SystemRoot\System32\drivers\mountmgr.sys - IRP_MJ_PNP[27] : Unknown @ 0x866ee1f8

¤¤¤ Webové prohlížeče : 0 ¤¤¤

¤¤¤ Kontrola MBR : ¤¤¤
+++++ PhysicalDrive0: +++++
--- User ---
[MBR] 61c2fd45d5bf866bcf7e7625dccbb169
[BSP] 6182705c197ed54c4ed91fdd8960a050 : HP MBR Code
Partition table:
0 - [XXXXXX] ACER (0x27) [VISIBLE] Offset (sectors): 63 | Size: 8197 MB
1 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 16787925 | Size: 230276 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
User = LL1 ... OK
User = LL2 ... OK

+++++ PhysicalDrive1: +++++
Error reading User MBR! ([15] Za?ízení není p?ipraveno. )
Error reading LL1 MBR! NOT VALID!
Error reading LL2 MBR! ([32] Po?adavek není podporován. )

+++++ PhysicalDrive2: +++++
Error reading User MBR! ([15] Za?ízení není p?ipraveno. )
Error reading LL1 MBR! NOT VALID!
Error reading LL2 MBR! ([32] Po?adavek není podporován. )

+++++ PhysicalDrive3: +++++
Error reading User MBR! ([15] Za?ízení není p?ipraveno. )
Error reading LL1 MBR! NOT VALID!
Error reading LL2 MBR! ([32] Po?adavek není podporován. )

+++++ PhysicalDrive4: +++++
Error reading User MBR! ([15] Za?ízení není p?ipraveno. )
Error reading LL1 MBR! NOT VALID!
Error reading LL2 MBR! ([32] Po?adavek není podporován. )


============================================
RKreport_SCN_02222015_130531.log - RKreport_DEL_02222015_131332.log

[Orcus]

Nevadí, protože u půlky věcí nebyla stejně fajfka.

Zavři všechny programy a prohlížeče. Deaktivuj antivir a firewall.
Prosím, odpoj všechny USB nebo externí disky z počítače před spuštěním tohoto programu.
Spusť RogueKiller ( Pro Windows Vista nebo Windows 7, klepni pravým a vyber "Spustit jako správce", ve Windows XP poklepej ke spuštění).
- Počkej, až Prescan dokončí práci...
- Počkej, dokud status okno zobrazuje "Prohledat "
- V záložkách (Registry , Tasks , Web Browser apod.) vše zatrhni (dej zatržítka).
- Klikni na "Smazat"
- Počkej, dokud Status box zobrazuje " Mazání dokončeno "
- Klikni na "Zpráva" a zkopíruj a vlož obsah té zprávy prosím sem. Log je možno nalézt v RKreport [číslo]. txt na ploše.
- Zavři RogueKiller

====================================================

Stáhni
Zoek.exe

a ulož si ho na plochu.
Zavři všechny ostatní programy, okna i prohlížeče.
Spusť Zoek.exe ( u win vista , win7, 8 klikni na něj pravým a vyber : „Spustit jako správce“
- pozor, náběh programu může trvat déle.

Do okna programu vlož skript níže:

Kód: Vybrat vše

autoclean;
emptyclsid;
iedefaults;
FFdefaults;
CHRdefaults;
emptyalltemp;
resethosts;

Klikni na Run Script
Program provede sken, opravu, sken i oprava může trvat i více minut, je třeba posečkat do konce. Do okna neklikej!
Program nabídne restart , potvrď .

Po restartu se může nějaký čas ukázat pouze černá plocha , to je normální. Je třeba počkat až se vytvoří log. Ten si můžeš uložit třeba do dokumentů, jinak se sám ukládá do:
C:\zoek-results.log
Zkopíruj sem celý obsah toho logu.

[Malwyn]

RogueKiller V10.4.1.0 [Feb 19 2015] by Adlice Software
mail : http://www.adlice.com/contact/
Feedback : http://forum.adlice.com
Webová stránka : http://www.adlice.com/softwares/roguekiller/
Blog : http://www.adlice.com

Operační systém : Windows Vista (6.0.6001 Service Pack 1) 32 bits version
Spuštěno : Normální režim
Uživatel : elgany [Práva správce]
Mód : Smazat -- Datum : 02/22/2015 19:08:36

¤¤¤ Procesy : 1 ¤¤¤
[Suspicious.Path] LaunchU3.exe(2644) -- C:\ProgramData\U3\U3Launcher\LaunchU3.exe[7] -> Zastaveno [TermProc]

¤¤¤ Registry : 10 ¤¤¤
[PUP] HKEY_CLASSES_ROOT\CLSID\{66E8DCC7-97D2-4A89-8E08-D0610FF0878C} (C:\Users\elgany\AppData\Local\Conduit\Community Alerts\Alert.dll) -> Smazáno
[PUP] HKEY_CLASSES_ROOT\CLSID\{7473b6bd-4691-4744-a82b-7854eb3d70b6} (C:\Users\elgany\AppData\LocalLow\uTorrentControl_v2\prxtbuTo0.dll) -> Smazáno
[PUM.Dns] HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters | DhcpNameServer : 10.0.0.138 [(Private Address) (XX)] -> Nahrazeno ()
[PUM.Dns] HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters | DhcpNameServer : 10.0.0.138 [(Private Address) (XX)] -> Nahrazeno ()
[PUM.Dns] HKEY_LOCAL_MACHINE\System\ControlSet003\Services\Tcpip\Parameters | DhcpNameServer : 10.0.0.138 [(Private Address) (XX)] -> Nahrazeno ()
[PUM.Dns] HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{DD1008E8-4A26-49C9-BD13-3E31342449D8} | DhcpNameServer : 10.0.0.138 [(Private Address) (XX)] -> Nahrazeno ()
[PUM.Dns] HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters\Interfaces\{DD1008E8-4A26-49C9-BD13-3E31342449D8} | DhcpNameServer : 10.0.0.138 [(Private Address) (XX)] -> Nahrazeno ()
[PUM.Dns] HKEY_LOCAL_MACHINE\System\ControlSet003\Services\Tcpip\Parameters\Interfaces\{DD1008E8-4A26-49C9-BD13-3E31342449D8} | DhcpNameServer : 10.0.0.138 [(Private Address) (XX)] -> Nahrazeno ()
[PUM.DesktopIcons] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1 -> Nahrazeno (0)
[PUM.DesktopIcons] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {59031a47-3f72-44a7-89c5-5595fe6b30ee} : 1 -> Nahrazeno (0)

¤¤¤ Úlohy : 0 ¤¤¤

¤¤¤ Soubory : 0 ¤¤¤

¤¤¤ Soubor HOSTS : 0 ¤¤¤

¤¤¤ Antirootkit : 7 (Driver: Nahrán) ¤¤¤
[IRP:Addr(Hook.IRP)] \SystemRoot\System32\drivers\mountmgr.sys - IRP_MJ_CREATE[0] : Unknown @ 0x866ee1f8
[IRP:Addr(Hook.IRP)] \SystemRoot\System32\drivers\mountmgr.sys - IRP_MJ_CLOSE[2] : Unknown @ 0x866ee1f8
[IRP:Addr(Hook.IRP)] \SystemRoot\System32\drivers\mountmgr.sys - IRP_MJ_DEVICE_CONTROL[14] : Unknown @ 0x866ee1f8
[IRP:Addr(Hook.IRP)] \SystemRoot\System32\drivers\mountmgr.sys - IRP_MJ_INTERNAL_DEVICE_CONTROL[15] : C:\Windows\System32\drivers\prosync1.sys @ 0x8ab696c1
[IRP:Addr(Hook.IRP)] \SystemRoot\System32\drivers\mountmgr.sys - IRP_MJ_POWER[22] : Unknown @ 0x866ee1f8
[IRP:Addr(Hook.IRP)] \SystemRoot\System32\drivers\mountmgr.sys - IRP_MJ_SYSTEM_CONTROL[23] : Unknown @ 0x866ee1f8
[IRP:Addr(Hook.IRP)] \SystemRoot\System32\drivers\mountmgr.sys - IRP_MJ_PNP[27] : Unknown @ 0x866ee1f8

¤¤¤ Webové prohlížeče : 3 ¤¤¤
[IE:Addon] System : Canon Easy-WebPrint EX [{759D9886-0C6F-4498-BAB6-4A5F47C6C72F}] -> Smazáno
[FIREFX:Addon] gujswhwr.default : Download Direct Integration [{4DB25CC3-3EAE-4bb5-92F0-09757350CE75}] -> Smazáno
[FIREFX:Addon] gujswhwr.default : Microsoft .NET Framework Assistant [{20a82645-c095-46ed-80e3-08825760534b}] -> Smazáno

¤¤¤ Kontrola MBR : ¤¤¤
+++++ PhysicalDrive0: +++++
--- User ---
[MBR] 61c2fd45d5bf866bcf7e7625dccbb169
[BSP] 6182705c197ed54c4ed91fdd8960a050 : HP MBR Code
Partition table:
0 - [XXXXXX] ACER (0x27) [VISIBLE] Offset (sectors): 63 | Size: 8197 MB
1 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 16787925 | Size: 230276 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
User = LL1 ... OK
User = LL2 ... OK

+++++ PhysicalDrive1: +++++
Error reading User MBR! ([15] Za?ízení není p?ipraveno. )
Error reading LL1 MBR! NOT VALID!
Error reading LL2 MBR! ([32] Po?adavek není podporován. )

+++++ PhysicalDrive2: +++++
Error reading User MBR! ([15] Za?ízení není p?ipraveno. )
Error reading LL1 MBR! NOT VALID!
Error reading LL2 MBR! ([32] Po?adavek není podporován. )

+++++ PhysicalDrive3: +++++
Error reading User MBR! ([15] Za?ízení není p?ipraveno. )
Error reading LL1 MBR! NOT VALID!
Error reading LL2 MBR! ([32] Po?adavek není podporován. )

+++++ PhysicalDrive4: +++++
Error reading User MBR! ([15] Za?ízení není p?ipraveno. )
Error reading LL1 MBR! NOT VALID!
Error reading LL2 MBR! ([32] Po?adavek není podporován. )


============================================
RKreport_DEL_02222015_131332.log - RKreport_SCN_02222015_130531.log - RKreport_SCN_02222015_131725.log - RKreport_SCN_02222015_190649.log

[Malwyn]

Zoek.exe v5.0.0.0 Updated 22-February-2015
Tool run by elgany on ne 22.02.2015 at 19:12:43,62.

Running in: Normal Mode Internet Access Detected
Launched: C:\Users\elgany\Desktop\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

Failed to create System Restore Point

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

127.0.0.1 localhost
::1 localhost

==== Empty Folders Check ======================

C:\Program Files\4339b2de-1565-4e1d-b923-a869c9929a59 deleted successfully
C:\Program Files\4ee018b8-83f8-4cc0-b497-64c11030d911 deleted successfully
C:\Program Files\6743d42c-1fee-4b75-9dc5-30d45ca0cc94 deleted successfully
C:\Program Files\9dd7c316-ae56-44dd-a5e2-0dfc1d19d2f6 deleted successfully
C:\Program Files\Ableton deleted successfully
C:\Program Files\Alaplaya deleted successfully
C:\Program Files\Anvisoft deleted successfully
C:\Program Files\Cheat Engine deleted successfully
C:\Program Files\DatawareGames deleted successfully
C:\Program Files\Driver Downloader deleted successfully
C:\Program Files\Light Artist deleted successfully
C:\Program Files\MSXML 4.0 deleted successfully
C:\Program Files\NeroInstall.bak deleted successfully
C:\Program Files\Pando Networks deleted successfully
C:\Program Files\Piranha Bytes deleted successfully
C:\Program Files\Seznam.cz deleted successfully
C:\Program Files\Sierra deleted successfully
C:\Program Files\UBISOFT deleted successfully
C:\Program Files\Winamp deleted successfully
C:\Program Files\Common Files\AOL deleted successfully
C:\Program Files\Common Files\Blizzard Entertainment deleted successfully
C:\PROGRA~2\AVAST Software deleted successfully
C:\PROGRA~2\DAEMON Tools Lite deleted successfully
C:\Users\elgany\AppData\Roaming\DAEMON Tools Lite deleted successfully
C:\Users\elgany\AppData\Roaming\Flock deleted successfully
C:\Users\elgany\AppData\Roaming\ICQ Toolbar deleted successfully
C:\Users\elgany\AppData\Roaming\PeerNetworking deleted successfully
C:\Users\elgany\AppData\Roaming\WinRAR deleted successfully
C:\Users\elgany\AppData\Local\CRE deleted successfully

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-2113254736-2033477997-1415408504-1002\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} deleted successfully
HKEY_USERS\S-1-5-21-2113254736-2033477997-1415408504-1002\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} deleted successfully
HKEY_USERS\S-1-5-21-2113254736-2033477997-1415408504-1002\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{759D9886-0C6F-4498-BAB6-4A5F47C6C72F} deleted successfully
HKEY_USERS\S-1-5-21-2113254736-2033477997-1415408504-1002\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{759D9886-0C6F-4498-BAB6-4A5F47C6C72F} deleted successfully

==== Deleting CLSID Registry Values ======================

HKEY_USERS\S-1-5-21-2113254736-2033477997-1415408504-1002\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} deleted successfully
HKEY_USERS\S-1-5-21-2113254736-2033477997-1415408504-1002\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{759D9886-0C6F-4498-BAB6-4A5F47C6C72F} deleted successfully
HKEY_USERS\S-1-5-21-2113254736-2033477997-1415408504-1002\Software\Microsoft\Internet Explorer\URLSearchHooks\{90b49673-5506-483e-b92b-ca0265bd9ca8} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} deleted successfully

==== Deleting Services ======================


==== FireFox Fix ======================

Deleted from C:\Users\elgany\AppData\Roaming\Mozilla\Firefox\Profiles\gujswhwr.default\prefs.js:

Added to C:\Users\elgany\AppData\Roaming\Mozilla\Firefox\Profiles\gujswhwr.default\prefs.js:
user_pref("browser.startup.homepage", "about:home");
user_pref("browser.newtab.url", "about:newtab");

Deleted from C:\Users\elgany\AppData\Roaming\Mozilla\SeaMonkey\Profiles\vfjstzr4.default\prefs.js:
user_pref("browser.search.defaultengine", "engine://C%3A%5CProgram%20Files%5CSeaMonkey%5Csearchplugins%5Cgoogle.src");

Added to C:\Users\elgany\AppData\Roaming\Mozilla\SeaMonkey\Profiles\vfjstzr4.default\prefs.js:
user_pref("browser.startup.homepage", "about:home");
user_pref("browser.newtab.url", "about:newtab");

==== Deleting Files \ Folders ======================

C:\Program Files\4339b2de-1565-4e1d-b923-a869c9929a59 not found
C:\Program Files\4ee018b8-83f8-4cc0-b497-64c11030d911 not found
C:\Program Files\6743d42c-1fee-4b75-9dc5-30d45ca0cc94 not found
C:\Program Files\9dd7c316-ae56-44dd-a5e2-0dfc1d19d2f6 not found
C:\Program Files\Ableton not found
C:\Program Files\Alaplaya not found
C:\Program Files\Anvisoft not found
C:\Program Files\Cheat Engine not found
C:\Program Files\DatawareGames not found
C:\Program Files\Driver Downloader not found
C:\Program Files\Light Artist not found
C:\Program Files\MSXML 4.0 not found
C:\Program Files\NeroInstall.bak not found
C:\Program Files\Pando Networks not found
C:\Program Files\Piranha Bytes not found
C:\Program Files\Seznam.cz not found
C:\Program Files\Sierra not found
C:\Program Files\UBISOFT not found
C:\Program Files\Winamp not found
"C:\Windows\Installer\1dc83c1.msi" not found
"C:\Windows\Installer\1dc83bc.msi" not found
C:\Program Files\Temp deleted
C:\Program Files\Uninstall Information deleted
C:\Program Files\Windows Live SkyDrive deleted
C:\Program Files\Personal Voice Changer Driver deleted
C:\Program Files\BitLord deleted
C:\Users\elgany\AppData\Roaming\MegauploadToolbar deleted
C:\Users\elgany\AppData\Roaming\Smiley.ico deleted
C:\PROGRA~2\boost_interprocess deleted
C:\PROGRA~2\ICQ deleted
C:\PROGRA~2\DriverGenius deleted
C:\PROGRA~2\EmailNotifier deleted
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BitLord deleted
C:\Users\elgany\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BitLord deleted
C:\Users\elgany\AppData\LocalLow\MegauploadToolbar deleted
C:\Windows\system32\config\systemprofile\Searches deleted
C:\Windows\system32\GroupPolicy\Machine deleted
C:\Windows\system32\GroupPolicy\User deleted
C:\Windows\system32\GroupPolicy\gpt.ini deleted
C:\Users\Public\Desktop\iLivid Download Manager.lnk deleted
"C:\Users\elgany\AppData\Roaming\XTKLK" deleted
"C:\Users\elgany\AppData\Roaming\.zreglib" deleted

==== Firefox Start and Search pages ======================

ProfilePath: C:\Users\elgany\AppData\Roaming\Mozilla\Firefox\Profiles\gujswhwr.default
user_pref("browser.startup.homepage", "about:home");
user_pref("browser.newtab.url", "about:newtab");

ProfilePath: C:\Users\elgany\AppData\Roaming\Mozilla\SeaMonkey\Profiles\vfjstzr4.default
user_pref("browser.startup.homepage", "about:home");
user_pref("browser.newtab.url", "about:newtab");

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions]
"{20a82645-c095-46ed-80e3-08825760534b}"="c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension" [04.07.2011 02:11]
[HKEY_CURRENT_USER\Software\Mozilla\Firefox\Extensions]
"{4DB25CC3-3EAE-4bb5-92F0-09757350CE75}"="C:\Program Files\Download Direct\Plugins\DLDFireFox" [03.11.2008 03:16]

==== Firefox Extensions ======================

ProfilePath: C:\Users\elgany\AppData\Roaming\Mozilla\SeaMonkey\Profiles\vfjstzr4.default
- Undetermined - C:\Program Files\SeaMonkey\extensions\{59c81df5-4b7a-477b-912d-4e0fdf64e5f2}
- Undetermined - C:\Program Files\SeaMonkey\extensions\langpack-cs@chatzilla.mozilla.org
- Undetermined - C:\Program Files\SeaMonkey\extensions\{f13b157f-b174-47e7-a34d-4815ddfdfeb8}
- Undetermined - C:\Program Files\SeaMonkey\extensions\modern@themes.mozilla.org
- DOM Inspector - %ProfilePath%\extensions\inspector@mozilla.org

AppDir: C:\Program Files\Mozilla Firefox
- Google Toolbar for Firefox - %AppDir%\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}
- ICQ Toolbar - %AppDir%\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
- Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

==== Firefox Plugins ======================

Profilepath: C:\Users\elgany\AppData\Roaming\Mozilla\Firefox\Profiles\gujswhwr.default
893BF7D2261C56C24F813405D9D018E0 - c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll - Silverlight Plug-In
3487E6E0A99068CBD7DB75A0BD3FCB0C - C:\Windows\system32\Macromed\Flash\NPSWF32.dll - Shockwave Flash
0843C70733E8CA876475123A6601630D - C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL - CANON iMAGE GATEWAY Album Plugin Utility
1DE714BB4BB48B10BC94FF84C9BC6471 - C:\Program Files\DivX\DivX Web Player\npdivx32.dll - DivX Web Player
8130FF8214221BA5AC764909587E161A - C:\Program Files\Adobe\Reader 8.0\Reader\browser\nppdf32.dll - Adobe Acrobat
AB87EEFFD18F2BAAFC274E7075EA6C67 - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll - Windows Presentation Foundation / Windows Presentation Foundation
99F97C9FE748C37528C338A423577FCB - C:\Users\elgany\AppData\Roaming\Mozilla\plugins\np-mswmp.dll - Microsoft® Windows Media Player Firefox Plugin
8DA2ED6B04EA33F2EAE8BA883F903729 - c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrlui.dll - Microsoft® Silverlight


==== Deleted Firefox Extensions ======================

C:\Program Files\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07} deleted

==== Chromium Look ======================

Google Chrome Version: 40.0.2214.115 (Up to date, latest Stable version: 40.0.2214.115)

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
icmlaeflemplmjndnaapfdbbnpncnbda - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx[]


==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com"
"Search Page"="http://www.google.com"
"Search Bar"="http://www.google.com"
"Default_Page_URL"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com"
"Default_Page_URL"="http://www.google.com"
"Default_Search_URL"="http://www.google.com"
"Search Page"="http://www.google.com"
"Search Bar"="http://www.google.com"
"Start Page Redirect Cache"="http://www.google.com"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AboutURLs]
"Tabs"="res://ieframe.dll/tabswelcome.htm"

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Bar"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Start Page"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Bar"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Start Page Redirect Cache"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AboutURLs]
"Tabs"="about:newtab"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
{012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC"
{67C334C0-408D-4E6D-B5A7-0ADD6AFFA252} Google Url="http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:{language}:{referrer:source}&ie={inputEncoding?}&oe={outputEncoding?}"

==== Reset Google Chrome ======================

C:\Users\elgany\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\elgany\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\0337C6624F0C5E94F8025AF6F9288257 deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\EEC47D12CFEE27D46919F2B21EFDF92B deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda deleted successfully
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Update Service YourFileDownloader deleted successfully
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{21D74CEE-EEFC-4D72-9691-2F2BE1DF9FB2} deleted successfully
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{266C7330-C0F4-49E5-8F20-A56F9F822875} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\0337C6624F0C5E94F8025AF6F9288257 deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\EEC47D12CFEE27D46919F2B21EFDF92B deleted successfully

==== Empty IE Cache ======================

C:\Users\elgany\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\elgany\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot
C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot
C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot

==== Empty FireFox Cache ======================

No FireFox Cache found

==== Empty Chrome Cache ======================

C:\Users\elgany\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== C:\zoek_backup content ======================

C:\zoek_backup (files=1704 folders=188 8138809775 bytes)

==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\elgany\AppData\Local\Temp will be emptied at reboot
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied
C:\Users\elgany\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied
C:\RECYCLER successfully emptied

==== Deleting Files / Folders ======================

"C:\Users\elgany\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" not found
"C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" not found
"C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" not found

==== EOF on ne 22.02.2015 at 19:36:06,13 ======================

[jaro3]

Windows Vista SP1 doinstaluj si SP2!!

Vlož nový log z HJT + informuj o problémech.

[Malwyn]

No já mam i problém v těch aktualizací, 2 se mi stále nechtějí nainstalovat.

tyto dvě se nechtějí aktualizovat

Ty SP2 mi to nedává na výběr. Zkoušel jsem si je stahovat, ale píše to "instalace se nezdařila".

zde screen

.