Moc prosím o kontrolu :) Vyřešeno

[Bozan]

Zdravím, chtěl bych poprosit o kontrolu logu, mám problém, že se můj notebook často z ničeho nic hrozně zpomalí a zatěžuje ho nějaký svchost, problém jsem už řešil v jiném vláknu zde na fóru, ale bohužel bez výsledku a dostal jsem radu, že si mám zde nechat zkontrolovat log :)

Mé staré vlákno s problémem : viewtopic.php?f=7&t=130455

Předem moc děkuji za odpovědi a rady :)

LOG :

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 3:09:07, on 22. 4. 2014
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.16518)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
C:\Program Files (x86)\ASUS\Splendid\ColorUService.exe
C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
D:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe
C:\Program Files (x86)\Internet Explorer\IELowutil.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://asus13.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://feed.snapdo.com/?publisher=Tight ... type=ds&q={searchTerms}&installDate=21/09/2013
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://feed.snapdo.com/?publisher=Tight ... type=ds&q={searchTerms}&installDate=21/09/2013
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://feed.snapdo.com/?publisher=Tight ... 21/09/2013
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://feed.snapdo.com/?publisher=Tight ... type=ds&q={searchTerms}&installDate=21/09/2013
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://feed.snapdo.com/?publisher=Tight ... type=ds&q={searchTerms}&installDate=21/09/2013
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Lync Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL
O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O2 - BHO: Shopping Suggestion. - {e7e8ed77-2fba-4ec6-bc07-65de4de6709f} - mscoree.dll (file missing)
O2 - BHO: InjectScript - {F6C07882-D703-4DD5-905A-2C4E815A5066} - C:\Users\Gunner\AppData\Roaming\D394D188-BAC7-4e03-8FAF-389A4D7EC6F4\Shopping Suggestion.dll
O4 - HKLM\..\Run: [ASUSPRP] "C:\Program Files (x86)\ASUS\APRP\APRP.EXE"
O4 - HKLM\..\Run: [ASUSWebStorage] C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSPanel.exe /S
O4 - HKLM\..\Run: [ASUS InstantKey] C:\Program Files (x86)\ASUS\ASUS Instant Key\Ikey_start.exe
O4 - HKLM\..\Run: [RemoteControl10] "C:\Program Files (x86)\Cyberlink\PowerDVD10\PDVD10Serv.exe"
O4 - HKLM\..\Run: [UpdatePSTShortCut] "C:\Program Files (x86)\Cyberlink\DVD Suite\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\Cyberlink\DVD Suite" UpdateWithCreateOnce "Software\CyberLink\PowerStarter"
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [Babakan] cmd.exe /k if %date:~6,4%%date:~3,2%%date:~0,2% LEQ 20131027 (exit) else (start http://dinoraptzor.org && exit)
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [KiesTrayAgent] D:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKCU\..\Run: [DAEMON Tools Lite] "D:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [AceStream] C:\Users\Gunner\AppData\Roaming\ACEStream\engine\ace_engine.exe
O4 - HKCU\..\Run: [] D:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe Run
O4 - Startup: Dropbox.lnk = Gunner\AppData\Roaming\Dropbox\bin\Dropbox.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files\Microsoft Office 15\Root\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\Program Files\Microsoft Office 15\Root\Office15\ONBttnIE.dll/105
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: @C:\WINDOWS\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\WINDOWS\WindowsMobile\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\WINDOWS\WindowsMobile\INetRepl.dll
O9 - Extra 'Tools' menuitem: @C:\WINDOWS\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\WINDOWS\WindowsMobile\INetRepl.dll
O9 - Extra button: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll
O9 - Extra 'Tools' menuitem: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIELinkedNotes.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~2\MICROS~1\Office12\GRA32A~1.DLL
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O20 - AppInit_DLLs: C:\WINDOWS\SysWOW64\nvinit.dll,C:\Windows\SysWOW64\nvinit.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Intel® Centrino® Wireless Bluetooth® + High Speed Service (AMPPALR3) - Intel Corporation - C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
O23 - Service: ASLDR Service (ASLDRService) - ASUSTek Computer Inc. - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
O23 - Service: ASUS InstantOn Service (ASUS InstantOn) - ASUS - C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe
O23 - Service: Asus WebStorage Windows Service - Unknown owner - C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSWinService.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - ASUS - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: avast! Firewall - AVAST Software - C:\Program Files\AVAST Software\Avast\afwServ.exe
O23 - Service: Bluetooth Device Monitor - Motorola Solutions, Inc. - C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
O23 - Service: Bluetooth OBEX Service - Motorola Solutions, Inc. - C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
O23 - Service: Intel(R) Centrino(R) Wireless Bluetooth(R) + High Speed Security Service (BTHSSecurityMgr) - Intel(R) Corporation - C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) ME Service - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
O23 - Service: Intel(R) Wireless Bluetooth(R) 4.0 Radio Management - Intel Corporation - C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Wireless PAN DHCP Server (MyWiFiDHCPDNS) - Unknown owner - C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
O23 - Service: NBService - Nero AG - C:\Program Files (x86)\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NMIndexingService - Nero AG - C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Zero Configuration Service (ZeroConfigService) - Intel® Corporation - C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe

--
End of file - 15907 bytes

[Reklama]

[Orcus]

Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected. Poté klikni na Main (hlavní stránku ) a klikni na Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranění historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit dočasné soubory Windows, vysypat koš atd.

- Pokud používáš jen Google Chrome , tak ATF nemusíš použít.

===================================================

Stáhni si TFC
Otevři soubor a zavři všechny ostatní okna, Klikni na Start k zahájení procesu. Program by neměl trvat dlouho.
Poté by se měl PC restartovat, pokud ne , proveď sám.

===================================================

Stáhni AdwCleaner (by Xplode)

Ulož si ho na svojí plochu
Ukonči všechny programy , okna a prohlížeče
Spusť program poklepáním a klikni na „Prohledat-Scan“
Po skenu se objeví log ( jinak je uložen systémovem disku jako AdwCleaner[R?].txt), jeho obsah sem celý vlož.

===================================================

Stáhni si Malwarebytes' Anti-Malware
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Aktualizace Malwarebytes' Anti-Malware a Spustit aplikaci Malwarebytes' Anti-Malware, pokud jo tak klikni na tlačítko konec
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a nech vybranou možnost Provést rychlý sken a klikni na tlačítko Skenovat
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Zobrazit výsledky
- pak zvol možnost uložit log a ulož si log na plochu
- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).
Vlož sem pak obsah toho logu.

Pokud budou problémy , spusť v nouz. režimu.

[Bozan]

Dobře, vše provedu a zatím díky :)

[Bozan]

LOG z programu AdwCleaner :

# AdwCleaner v3.103 - Report created 22/04/2014 at 11:12:15
# Updated 21/04/2014 by Xplode
# Operating System : Windows 8.1 (64 bits)
# Username : Gunner - BOZAN
# Running from : C:\Users\Gunner\Desktop\AdwCleaner.exe
# Option : Scan

***** [ Services ] *****


***** [ Files / Folders ] *****

File Found : C:\Users\Gunner\daemonprocess.txt
Folder Found C:\Program Files (x86)\MediaPlayerV1
Folder Found C:\Program Files (x86)\Mobogenie
Folder Found C:\Program Files (x86)\myfree codec
Folder Found C:\Program Files (x86)\VideoPlayerV3
Folder Found C:\Program Files (x86)\WebexpEnhancedV1
Folder Found C:\ProgramData\Microsoft\Windows\Start Menu\Programs\myfree codec
Folder Found C:\Users\Gunner\.android
Folder Found C:\Users\Gunner\AppData\Local\Mobogenie
Folder Found C:\Users\Gunner\Documents\Mobogenie
Folder Found C:\Windows\SysWOW64\AI_RecycleBin

***** [ Shortcuts ] *****

Shortcut Found : C:\Users\Gunner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk ( hxxp://feed.snapdo.com/?publisher=Tight ... 21/09/2013 )

***** [ Registry ] *****

Key Found : HKCU\Software\Classes\pokki
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{318A227B-5E9F-45BD-8999-7F8F10CA4CF5}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\MyFreeCodec
Key Found : HKCU\Software\Myfree Codec
Key Found : [x64] HKCU\Software\Myfree Codec
Key Found : HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}
Key Found : HKLM\SOFTWARE\Classes\AppID\secman.DLL
Key Found : HKLM\SOFTWARE\Classes\CLSID\{00000001-4FEF-40D3-B3FA-E0531B897F98}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{5C3B5DAA-0AFF-4808-90FB-0F2F2D760E36}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{64697678-0000-0010-8000-00AA00389B71}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{FD501041-8EBE-11CE-8183-00AA00577DA2}
Key Found : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Key Found : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Key Found : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager
Key Found : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager.1
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd
Key Found : HKLM\Software\Myfree Codec
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Value Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{318A227B-5E9F-45BD-8999-7F8F10CA4CF5}]

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.16518

Setting Found : HKCU\Software\Microsoft\Internet Explorer\Main [Search Page] - hxxp://feed.snapdo.com/?publisher=Tight ... type=ds&q={searchTerms}&installDate=21/09/2013
Setting Found : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page] - hxxp://feed.snapdo.com/?publisher=Tight ... 21/09/2013
Setting Found : HKCU\Software\Microsoft\Internet Explorer\Main [Search Bar] - hxxp://feed.snapdo.com/?publisher=Tight ... type=ds&q={searchTerms}&installDate=21/09/2013
Setting Found : HKCU\Software\Microsoft\Internet Explorer\Search [Default_Search_URL] - hxxp://feed.snapdo.com/?publisher=Tight ... type=ds&q={searchTerms}&installDate=21/09/2013
Setting Found : HKCU\Software\Microsoft\Internet Explorer\Search [SearchAssistant] - hxxp://feed.snapdo.com/?publisher=Tight ... type=ds&q={searchTerms}&installDate=21/09/2013
Setting Found : HKCU\Software\Microsoft\Internet Explorer\SearchUrl [Default] - hxxp://feed.snapdo.com/?publisher=Tight ... type=ds&q={searchTerms}&installDate=21/09/2013

-\\ Google Chrome v34.0.1847.116

[ File : C:\Users\Gunner\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R2].txt - [4611 octets] - [22/04/2014 11:12:15]

########## EOF - C:\AdwCleaner\AdwCleaner[R2].txt - [4671 octets] ##########

[Bozan]

LOG z programu Malwarebytes' Anti-Malware :

Malwarebytes Anti-Malware
www.malwarebytes.org

Datum skenování: 22. 4. 2014
Čas skenování: 11:52:06
Protokol: fzfz.txt
Správce: Ano

Verze: 2.00.1.1004
Databáze malwaru: v2014.04.22.02
Databáze rootkitů: v2014.03.27.01
Licence: Zkušební verze
Ochrana proti malwaru: Zapnuto
Ochrana proti škodlivým webovým stránkám: Zapnuto
Chameleon: Vypnuto

OS: Windows 8.1
CPU: x64
Souborový systém: NTFS
Uživatel: Gunner

Typ skenu: Sken hrozeb
Výsledek: Dokončeno
Prohledaných objektů: 267124
Uplynulý čas: 20 min, 12 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Vypnuto
Shuriken: Zapnuto
PUP: Zapnuto
PUM: Zapnuto

Procesy: 0
(No malicious items detected)

Moduly: 0
(No malicious items detected)

Klíče registru: 8
PUP.Optional.ShoppingSuggestion.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{F6C07882-D703-4DD5-905A-2C4E815A5066}, , [bc9eb875f388300693dad442e81a8b75],
PUP.Optional.ShoppingSuggestion.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{9186135C-5067-4BD3-A886-B0A533744D5D}, , [bc9eb875f388300693dad442e81a8b75],
PUP.Optional.ShoppingSuggestion.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{2BFF5187-8BA1-4469-91B9-2FC1B6DD7F8C}, , [bc9eb875f388300693dad442e81a8b75],
PUP.Optional.ShoppingSuggestion.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{2BFF5187-8BA1-4469-91B9-2FC1B6DD7F8C}, , [bc9eb875f388300693dad442e81a8b75],
PUP.Optional.ShoppingSuggestion.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{9186135C-5067-4BD3-A886-B0A533744D5D}, , [bc9eb875f388300693dad442e81a8b75],
PUP.Optional.ShoppingSuggestion.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{F6C07882-D703-4DD5-905A-2C4E815A5066}, , [bc9eb875f388300693dad442e81a8b75],
PUP.Optional.ShoppingSuggestion.A, HKU\S-1-5-21-1816891445-2536110239-1848656708-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{F6C07882-D703-4DD5-905A-2C4E815A5066}, , [bc9eb875f388300693dad442e81a8b75],
PUP.Optional.ShoppingSuggestion.A, HKU\S-1-5-21-1816891445-2536110239-1848656708-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{F6C07882-D703-4DD5-905A-2C4E815A5066}, , [bc9eb875f388300693dad442e81a8b75],

Hodnoty registru: 1
PUP.Optional.WebExpEnhanced.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS|ext@WebexpEnhancedV1alpha8894.net, C:\Program Files (x86)\WebexpEnhancedV1\WebexpEnhancedV1alpha8894\ff, , [98c24be2235850e60022027b55ada25e]

Data registru: 6
PUP.Optional.Snapdo, HKU\S-1-5-21-1816891445-2536110239-1848656708-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, http://feed.snapdo.com/?publisher=Tight ... type=ds&q={searchTerms}&installDate=21/09/2013, Dobré: (http://www.google.com), Špatné: (http://feed.snapdo.com/?publisher=Tight ... type=ds&q={searchTerms}&installDate=21/09/2013),,[6febd954423956e02db83aef9c68dd23]
PUP.Optional.Snapdo, HKU\S-1-5-21-1816891445-2536110239-1848656708-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, http://feed.snapdo.com/?publisher=Tight ... 21/09/2013, Dobré: (http://www.google.com), Špatné: (http://feed.snapdo.com/?publisher=Tight ... 21/09/2013),,[04562b023e3d1d192bbb97921fe503fd]
PUP.Optional.Snapdo, HKU\S-1-5-21-1816891445-2536110239-1848656708-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Bar, http://feed.snapdo.com/?publisher=Tight ... type=ds&q={searchTerms}&installDate=21/09/2013, Dobré: (http://www.google.com), Špatné: (http://feed.snapdo.com/?publisher=Tight ... type=ds&q={searchTerms}&installDate=21/09/2013),,[b2a8c36ab4c73600ecf8df4aa65e768a]
PUP.Optional.Snapdo, HKU\S-1-5-21-1816891445-2536110239-1848656708-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|Default_Search_URL, http://feed.snapdo.com/?publisher=Tight ... type=ds&q={searchTerms}&installDate=21/09/2013, Dobré: (http://www.google.com), Špatné: (http://feed.snapdo.com/?publisher=Tight ... type=ds&q={searchTerms}&installDate=21/09/2013),,[d18959d4e695989ed80f45e4937123dd]
PUP.Optional.Snapdo, HKU\S-1-5-21-1816891445-2536110239-1848656708-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|SearchAssistant, http://feed.snapdo.com/?publisher=Tight ... type=ds&q={searchTerms}&installDate=21/09/2013, Dobré: (http://www.google.com), Špatné: (http://feed.snapdo.com/?publisher=Tight ... type=ds&q={searchTerms}&installDate=21/09/2013),,[baa0f03d6912d264de0a25044db7fc04]
PUP.Optional.SnapDo.A, HKU\S-1-5-21-1816891445-2536110239-1848656708-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHURL|Default, http://feed.snapdo.com/?publisher=Tight ... type=ds&q={searchTerms}&installDate=21/09/2013, Dobré: (www.google.com), Špatné: (http://feed.snapdo.com/?publisher=Tight ... type=ds&q={searchTerms}&installDate=21/09/2013),,[5cfed05dbfbcc472314db36d9371d12f]

Složky: 9
PUP.Optional.Webexp, C:\Program Files (x86)\WebexpEnhancedV1, , [5505b875a0dbf5410bd348199171d22e],
PUP.Optional.Webexp, C:\Program Files (x86)\WebexpEnhancedV1\WebexpEnhancedV1alpha8894, , [5505b875a0dbf5410bd348199171d22e],
PUP.Optional.Webexp, C:\Program Files (x86)\WebexpEnhancedV1\WebexpEnhancedV1alpha8894\ch, , [5505b875a0dbf5410bd348199171d22e],
PUP.Optional.Webexp, C:\Program Files (x86)\WebexpEnhancedV1\WebexpEnhancedV1alpha8894\ff, , [5505b875a0dbf5410bd348199171d22e],
PUP.Optional.Webexp, C:\Program Files (x86)\WebexpEnhancedV1\WebexpEnhancedV1alpha8894\ff\chrome, , [5505b875a0dbf5410bd348199171d22e],
PUP.Optional.Webexp, C:\Program Files (x86)\WebexpEnhancedV1\WebexpEnhancedV1alpha8894\ff\chrome\content, , [5505b875a0dbf5410bd348199171d22e],
PUP.Optional.Webexp, C:\Program Files (x86)\WebexpEnhancedV1\WebexpEnhancedV1alpha8894\ff\chrome\content\icons, , [5505b875a0dbf5410bd348199171d22e],
PUP.Optional.Webexp, C:\Program Files (x86)\WebexpEnhancedV1\WebexpEnhancedV1alpha8894\ff\chrome\content\icons\default, , [5505b875a0dbf5410bd348199171d22e],
PUP.Optional.Webexp, C:\Program Files (x86)\WebexpEnhancedV1\WebexpEnhancedV1alpha8894\ie, , [5505b875a0dbf5410bd348199171d22e],

Soubory: 14
PUP.Optional.ShoppingSuggestion.A, C:\Users\Gunner\AppData\Roaming\D394D188-BAC7-4e03-8FAF-389A4D7EC6F4\Shopping Suggestion.dll, , [bc9eb875f388300693dad442e81a8b75],
PUP.Optional.Somoto.A, C:\Users\Gunner\AppData\Local\Application Data\Bundled software uninstaller\bi_client.exe, , [ce8c9c91126940f6f00bbd5537cac040],
PUP.Optional.SmartBar, C:\Windows\Installer\MSI5CAB.tmp, , [b8a29e8f344764d271a209252ed2936d],
PUP.Optional.SmartBar.A, C:\Windows\Installer\6243f.msi, , [1b3f53da3645d561f7dcc661b05021df],
PUP.Optional.ShoppingSuggestion.A, C:\Program Files (x86)\Shopping Suggestion\Shopping Suggestion.dll, , [e9719598b9c2c86e0233f09260a214ec],
Malware.Trace, C:\Windows\Inf\ntvdm.inf, , [5bffa28b19622e08aeff2f6806fd23dd],
PUP.Optional.Webexp, C:\Program Files (x86)\WebexpEnhancedV1\WebexpEnhancedV1alpha8894\ch\WebexpEnhancedV1alpha8894.crx, , [5505b875a0dbf5410bd348199171d22e],
PUP.Optional.Webexp, C:\Program Files (x86)\WebexpEnhancedV1\WebexpEnhancedV1alpha8894\ff\chrome.manifest, , [5505b875a0dbf5410bd348199171d22e],
PUP.Optional.Webexp, C:\Program Files (x86)\WebexpEnhancedV1\WebexpEnhancedV1alpha8894\ff\install.rdf, , [5505b875a0dbf5410bd348199171d22e],
PUP.Optional.Webexp, C:\Program Files (x86)\WebexpEnhancedV1\WebexpEnhancedV1alpha8894\ff\chrome\content\ffWebexpEnhancedV1alpha8894.js, , [5505b875a0dbf5410bd348199171d22e],
PUP.Optional.Webexp, C:\Program Files (x86)\WebexpEnhancedV1\WebexpEnhancedV1alpha8894\ff\chrome\content\ffWebexpEnhancedV1alpha8894ffaction.js, , [5505b875a0dbf5410bd348199171d22e],
PUP.Optional.Webexp, C:\Program Files (x86)\WebexpEnhancedV1\WebexpEnhancedV1alpha8894\ff\chrome\content\overlay.xul, , [5505b875a0dbf5410bd348199171d22e],
PUP.Optional.Webexp, C:\Program Files (x86)\WebexpEnhancedV1\WebexpEnhancedV1alpha8894\ff\chrome\content\icons\Thumbs.db, , [5505b875a0dbf5410bd348199171d22e],
PUP.Optional.Webexp, C:\Program Files (x86)\WebexpEnhancedV1\WebexpEnhancedV1alpha8894\ff\chrome\content\icons\default\WebexpEnhancedV1alpha8894_32.png, , [5505b875a0dbf5410bd348199171d22e],

Fyzické sektory: 0
(No malicious items detected)


(end)

[Orcus]

Znovu spusť MbAM a dej Scan
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Show Results
- ujistit se že máš zatrhnuté všechny vypsané nálezy a klikni na tlačítko Remove Selected
- když skončí odstraňování tak se ti zobrazí log, tak ho sem dej.
- pak zvol v programu OK a pak program ukonči přes Exit

====================================================

Spusť znovu AdwCleaner (u Windows Vista či Windows7, klikni na AdwCleaner pravým a vyber „Spustit jako správce“
Klikni na „ Smazat“
Program provede opravu, po automatickém restartu neukáže log (C:\AdwCleaner [S?].txt) , jeho obsah sem celý vlož.

====================================================

Stáhni si Junkware Removal Tool

na svojí plochu.
Deaktivuj si svůj antivirový program.
Pravým tl. myši klikni na JRT.exe a vyber „spustit jako správce“. Pro pokračování budeš vyzván ke stisknutí jakékoliv klávesy. Na nějakou klikni.
Začne skenování programu. Skenování může trvat dloho , podle množství nákaz. Po ukončení skenu se objeví log (JRT.txt) , který se uloží na ploše.
Zkopíruj sem prosím celý jeho obsah.

====================================================

Stáhni si RogueKiller
32bit.:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
64bit.:
http://www.sur-la-toile.com/RogueKiller ... lerX64.exe
na svojí plochu.
- Zavři všechny ostatní programy a prohlížeče.
- Pro OS Vista a win7 spusť program RogueKiller.exe jako správce , u XP poklepáním.
- počkej až skončí Prescan -vyhledávání škodlivých procesů.
- Zkontroluj , zda máš zaškrtnuto:
Kontrola MBR
Kontrola Faked
Antirootkit
-Potom klikni na „Prohledat“.
- Program skenuje procesy PC. Po proskenování klikni na „Zpráva“celý obsah logu sem zkopíruj.
Pokud je program blokován , zkus ho spustit několikrát. Pokud dále program nepůjde spustit a pracovat, přejmenuj ho na winlogon.exe.

[Bozan]

LOG z programu MbAM :

Malwarebytes Anti-Malware
www.malwarebytes.org

Datum skenování: 22. 4. 2014
Čas skenování: 20:03:34
Protokol: ssss.txt
Správce: Ano

Verze: 2.00.1.1004
Databáze malwaru: v2014.04.22.05
Databáze rootkitů: v2014.03.27.01
Licence: Zkušební verze
Ochrana proti malwaru: Zapnuto
Ochrana proti škodlivým webovým stránkám: Zapnuto
Chameleon: Vypnuto

OS: Windows 8.1
CPU: x64
Souborový systém: NTFS
Uživatel: Gunner

Typ skenu: Sken hrozeb
Výsledek: Dokončeno
Prohledaných objektů: 267804
Uplynulý čas: 17 min, 59 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Vypnuto
Shuriken: Zapnuto
PUP: Zapnuto
PUM: Zapnuto

Procesy: 0
(No malicious items detected)

Moduly: 0
(No malicious items detected)

Klíče registru: 8
PUP.Optional.ShoppingSuggestion.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{F6C07882-D703-4DD5-905A-2C4E815A5066}, Do karantény, [f36a4ae352293ef8894f090d23df31cf],
PUP.Optional.ShoppingSuggestion.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{9186135C-5067-4BD3-A886-B0A533744D5D}, Do karantény, [f36a4ae352293ef8894f090d23df31cf],
PUP.Optional.ShoppingSuggestion.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{2BFF5187-8BA1-4469-91B9-2FC1B6DD7F8C}, Do karantény, [f36a4ae352293ef8894f090d23df31cf],
PUP.Optional.ShoppingSuggestion.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{2BFF5187-8BA1-4469-91B9-2FC1B6DD7F8C}, Do karantény, [f36a4ae352293ef8894f090d23df31cf],
PUP.Optional.ShoppingSuggestion.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{9186135C-5067-4BD3-A886-B0A533744D5D}, Do karantény, [f36a4ae352293ef8894f090d23df31cf],
PUP.Optional.ShoppingSuggestion.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{F6C07882-D703-4DD5-905A-2C4E815A5066}, Do karantény, [f36a4ae352293ef8894f090d23df31cf],
PUP.Optional.ShoppingSuggestion.A, HKU\S-1-5-21-1816891445-2536110239-1848656708-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{F6C07882-D703-4DD5-905A-2C4E815A5066}, Do karantény, [f36a4ae352293ef8894f090d23df31cf],
PUP.Optional.ShoppingSuggestion.A, HKU\S-1-5-21-1816891445-2536110239-1848656708-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{F6C07882-D703-4DD5-905A-2C4E815A5066}, Do karantény, [f36a4ae352293ef8894f090d23df31cf],

Hodnoty registru: 1
PUP.Optional.WebExpEnhanced.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS|ext@WebexpEnhancedV1alpha8894.net, C:\Program Files (x86)\WebexpEnhancedV1\WebexpEnhancedV1alpha8894\ff, Do karantény, [6df0c469017a56e0ac58b2cc0002b749]

Data registru: 6
PUP.Optional.Snapdo, HKU\S-1-5-21-1816891445-2536110239-1848656708-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, http://feed.snapdo.com/?publisher=Tight ... type=ds&q={searchTerms}&installDate=21/09/2013, Dobré: (http://www.google.com), Špatné: (http://feed.snapdo.com/?publisher=Tight ... type=ds&q={searchTerms}&installDate=21/09/2013),Nahrazeno,[e776e746f2896ccac12fd35714f0a55b]
PUP.Optional.Snapdo, HKU\S-1-5-21-1816891445-2536110239-1848656708-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, http://feed.snapdo.com/?publisher=Tight ... 21/09/2013, Dobré: (http://www.google.com), Špatné: (http://feed.snapdo.com/?publisher=Tight ... 21/09/2013),Nahrazeno,[f766e14c3d3e6cca38b9f337df25837d]
PUP.Optional.Snapdo, HKU\S-1-5-21-1816891445-2536110239-1848656708-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Bar, http://feed.snapdo.com/?publisher=Tight ... type=ds&q={searchTerms}&installDate=21/09/2013, Dobré: (http://www.google.com), Špatné: (http://feed.snapdo.com/?publisher=Tight ... type=ds&q={searchTerms}&installDate=21/09/2013),Nahrazeno,[78e5f5385724171f0fe042e8a0649e62]
PUP.Optional.Snapdo, HKU\S-1-5-21-1816891445-2536110239-1848656708-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|Default_Search_URL, http://feed.snapdo.com/?publisher=Tight ... type=ds&q={searchTerms}&installDate=21/09/2013, Dobré: (http://www.google.com), Špatné: (http://feed.snapdo.com/?publisher=Tight ... type=ds&q={searchTerms}&installDate=21/09/2013),Nahrazeno,[d28bb27bed8efd394fa32bff30d44cb4]
PUP.Optional.Snapdo, HKU\S-1-5-21-1816891445-2536110239-1848656708-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|SearchAssistant, http://feed.snapdo.com/?publisher=Tight ... type=ds&q={searchTerms}&installDate=21/09/2013, Dobré: (http://www.google.com), Špatné: (http://feed.snapdo.com/?publisher=Tight ... type=ds&q={searchTerms}&installDate=21/09/2013),Nahrazeno,[c69797961764b28419da70ba9a6a21df]
PUP.Optional.SnapDo.A, HKU\S-1-5-21-1816891445-2536110239-1848656708-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHURL|Default, http://feed.snapdo.com/?publisher=Tight ... type=ds&q={searchTerms}&installDate=21/09/2013, Dobré: (www.google.com), Špatné: (http://feed.snapdo.com/?publisher=Tight ... type=ds&q={searchTerms}&installDate=21/09/2013),Nahrazeno,[85d817164e2db4823356f22f4cb8a15f]

Složky: 9
PUP.Optional.Webexp, C:\Program Files (x86)\WebexpEnhancedV1, Do karantény, [d885a5889be07fb789c5134fd131ba46],
PUP.Optional.Webexp, C:\Program Files (x86)\WebexpEnhancedV1\WebexpEnhancedV1alpha8894, Do karantény, [d885a5889be07fb789c5134fd131ba46],
PUP.Optional.Webexp, C:\Program Files (x86)\WebexpEnhancedV1\WebexpEnhancedV1alpha8894\ch, Do karantény, [d885a5889be07fb789c5134fd131ba46],
PUP.Optional.Webexp, C:\Program Files (x86)\WebexpEnhancedV1\WebexpEnhancedV1alpha8894\ff, Do karantény, [d885a5889be07fb789c5134fd131ba46],
PUP.Optional.Webexp, C:\Program Files (x86)\WebexpEnhancedV1\WebexpEnhancedV1alpha8894\ff\chrome, Do karantény, [d885a5889be07fb789c5134fd131ba46],
PUP.Optional.Webexp, C:\Program Files (x86)\WebexpEnhancedV1\WebexpEnhancedV1alpha8894\ff\chrome\content, Do karantény, [d885a5889be07fb789c5134fd131ba46],
PUP.Optional.Webexp, C:\Program Files (x86)\WebexpEnhancedV1\WebexpEnhancedV1alpha8894\ff\chrome\content\icons, Do karantény, [d885a5889be07fb789c5134fd131ba46],
PUP.Optional.Webexp, C:\Program Files (x86)\WebexpEnhancedV1\WebexpEnhancedV1alpha8894\ff\chrome\content\icons\default, Do karantény, [d885a5889be07fb789c5134fd131ba46],
PUP.Optional.Webexp, C:\Program Files (x86)\WebexpEnhancedV1\WebexpEnhancedV1alpha8894\ie, Do karantény, [d885a5889be07fb789c5134fd131ba46],

Soubory: 11
PUP.Optional.ShoppingSuggestion.A, C:\Users\Gunner\AppData\Roaming\D394D188-BAC7-4e03-8FAF-389A4D7EC6F4\Shopping Suggestion.dll, Do karantény, [f36a4ae352293ef8894f090d23df31cf],
PUP.Optional.SmartBar.A, C:\Windows\Installer\6243f.msi, Do karantény, [c994f13c92e986b09b38ac7ba55b2dd3],
Malware.Trace, C:\Windows\Inf\ntvdm.inf, Do karantény, [54099d90512ac0768509a3f5f112669a],
PUP.Optional.Webexp, C:\Program Files (x86)\WebexpEnhancedV1\WebexpEnhancedV1alpha8894\ch\WebexpEnhancedV1alpha8894.crx, Do karantény, [d885a5889be07fb789c5134fd131ba46],
PUP.Optional.Webexp, C:\Program Files (x86)\WebexpEnhancedV1\WebexpEnhancedV1alpha8894\ff\chrome.manifest, Do karantény, [d885a5889be07fb789c5134fd131ba46],
PUP.Optional.Webexp, C:\Program Files (x86)\WebexpEnhancedV1\WebexpEnhancedV1alpha8894\ff\install.rdf, Do karantény, [d885a5889be07fb789c5134fd131ba46],
PUP.Optional.Webexp, C:\Program Files (x86)\WebexpEnhancedV1\WebexpEnhancedV1alpha8894\ff\chrome\content\ffWebexpEnhancedV1alpha8894.js, Do karantény, [d885a5889be07fb789c5134fd131ba46],
PUP.Optional.Webexp, C:\Program Files (x86)\WebexpEnhancedV1\WebexpEnhancedV1alpha8894\ff\chrome\content\ffWebexpEnhancedV1alpha8894ffaction.js, Do karantény, [d885a5889be07fb789c5134fd131ba46],
PUP.Optional.Webexp, C:\Program Files (x86)\WebexpEnhancedV1\WebexpEnhancedV1alpha8894\ff\chrome\content\overlay.xul, Do karantény, [d885a5889be07fb789c5134fd131ba46],
PUP.Optional.Webexp, C:\Program Files (x86)\WebexpEnhancedV1\WebexpEnhancedV1alpha8894\ff\chrome\content\icons\Thumbs.db, Do karantény, [d885a5889be07fb789c5134fd131ba46],
PUP.Optional.Webexp, C:\Program Files (x86)\WebexpEnhancedV1\WebexpEnhancedV1alpha8894\ff\chrome\content\icons\default\WebexpEnhancedV1alpha8894_32.png, Do karantény, [d885a5889be07fb789c5134fd131ba46],

Fyzické sektory: 0
(No malicious items detected)


(end)

[Bozan]

LOG z programu AdwCleaner :

# AdwCleaner v3.201 - Report created 22/04/2014 at 20:21:11
# Updated 22/04/2014 by Xplode
# Operating System : Windows 8.1 (64 bits)
# Username : Gunner - BOZAN
# Running from : C:\Users\Gunner\Downloads\AdwCleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\myfree codec
Folder Deleted : C:\Program Files (x86)\MediaPlayerV1
Folder Deleted : C:\Program Files (x86)\Mobogenie
Folder Deleted : C:\Program Files (x86)\myfree codec
Folder Deleted : C:\Program Files (x86)\VideoPlayerV3
Folder Deleted : C:\Windows\SysWOW64\AI_RecycleBin
Folder Deleted : C:\Users\Gunner\.android
Folder Deleted : C:\Users\Gunner\AppData\Local\Mobogenie
Folder Deleted : C:\Users\Gunner\Documents\Mobogenie
File Deleted : C:\Users\Gunner\daemonprocess.txt

***** [ Shortcuts ] *****

Shortcut Disinfected : C:\Users\Gunner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk

***** [ Registry ] *****

Key Deleted : HKCU\Software\Classes\pokki
Key Deleted : HKLM\SOFTWARE\Classes\AppID\secman.DLL
Key Deleted : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager
Key Deleted : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager.1
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5C3B5DAA-0AFF-4808-90FB-0F2F2D760E36}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FD501041-8EBE-11CE-8183-00AA00577DA2}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{318A227B-5E9F-45BD-8999-7F8F10CA4CF5}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Value Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{318A227B-5E9F-45BD-8999-7F8F10CA4CF5}]
Key Deleted : HKCU\Software\Myfree Codec
Key Deleted : HKLM\Software\Myfree Codec
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\MyFreeCodec

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.16518


-\\ Google Chrome v34.0.1847.116

[ File : C:\Users\Gunner\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R2].txt - [4767 octets] - [22/04/2014 11:12:15]
AdwCleaner[R3].txt - [3141 octets] - [22/04/2014 20:16:43]
AdwCleaner[S2].txt - [2934 octets] - [22/04/2014 20:21:11]

########## EOF - C:\AdwCleaner\AdwCleaner[S2].txt - [2994 octets] ##########

[Bozan]

LOG z programu Junkware Removal Tool :

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 8.1 x64
Ran by Gunner on Łt 22. 04. 2014 at 20:30:54,75
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders



~~~ Chrome

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Google\Chrome\Extensions\odpccdgkmiicgocepijnaeihjnjnomca



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Łt 22. 04. 2014 at 20:50:41,87
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

[Bozan]

LOG z programu RogueKiller :

RogueKiller V8.8.15 _x64_ [Mar 27 2014] by Adlice Software
mail : http://www.adlice.com/contact/
Podpora : http://forum.adlice.com
Webové stránky : http://www.adlice.com/softwares/roguekiller/
: http://www.adlice.com

Operační systém : Windows 8.1 (6.3.9200 ) 64 bits version
Spuštěno v : Normální režim
Uživatel : Gunner [Práva správce]
Mód : Kontrola -- Datum : 04/22/2014 21:05:49
| ARK || FAK || MBR |

¤¤¤ Škodlivé procesy: : 0 ¤¤¤

¤¤¤ ¤¤¤ Záznamy Registrů: : 12 ¤¤¤
[RUN][SUSP PATH] HKCU\[...]\Run : AceStream (C:\Users\Gunner\AppData\Roaming\ACEStream\engine\ace_engine.exe [7]) -> NALEZENO
[RUN][SUSP PATH] HKUS\S-1-5-21-1816891445-2536110239-1848656708-1002\[...]\Run : AceStream (C:\Users\Gunner\AppData\Roaming\ACEStream\engine\ace_engine.exe [7]) -> NALEZENO
[HJ POL][PUM] HKCU\[...]\System : DisableTaskMgr (0) -> NALEZENO
[HJ POL][PUM] HKCU\[...]\System : DisableRegistryTools (0) -> NALEZENO
[HJ POL][PUM] HKLM\[...]\System : DisableTaskMgr (0) -> NALEZENO
[HJ POL][PUM] HKLM\[...]\System : DisableRegistryTools (0) -> NALEZENO
[HJ POL][PUM] HKLM\[...]\Wow6432Node\[...]\System : DisableTaskMgr (0) -> NALEZENO
[HJ POL][PUM] HKLM\[...]\Wow6432Node\[...]\System : DisableRegistryTools (0) -> NALEZENO
[HJ DESK][PUM] HKCU\[...]\ClassicStartMenu : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> NALEZENO
[HJ DESK][PUM] HKCU\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> NALEZENO
[HJ DESK][PUM] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> NALEZENO
[HJ DESK][PUM] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> NALEZENO

¤¤¤ naplánované úlohy : 0 ¤¤¤

¤¤¤ spuštění položky : 0 ¤¤¤

¤¤¤ Webové prohlížeče : 0 ¤¤¤

¤¤¤ Browser Addons : 0 ¤¤¤

¤¤¤ Zvláštní soubory / Složky: ¤¤¤

¤¤¤ Ovladač : [NENAHRÁNO 0x0] ¤¤¤
[Address] EAT @explorer.exe (AccConvertAccessMaskToActrlAccess) : actxprxy.dll -> HOOKED (C:\Windows\SYSTEM32\ntmarta.dll @ 0xAB73FA0C)
[Address] EAT @explorer.exe (AccConvertAccessToSD) : actxprxy.dll -> HOOKED (C:\Windows\SYSTEM32\ntmarta.dll @ 0xAB73FB80)
[Address] EAT @explorer.exe (AccConvertAccessToSecurityDescriptor) : actxprxy.dll -> HOOKED (C:\Windows\SYSTEM32\ntmarta.dll @ 0xAB73FD3C)
[Address] EAT @explorer.exe (AccConvertAclToAccess) : actxprxy.dll -> HOOKED (C:\Windows\SYSTEM32\ntmarta.dll @ 0xAB73FE90)
[Address] EAT @explorer.exe (AccConvertSDToAccess) : actxprxy.dll -> HOOKED (C:\Windows\SYSTEM32\ntmarta.dll @ 0xAB73FF2C)
[Address] EAT @explorer.exe (AccFreeIndexArray) : actxprxy.dll -> HOOKED (C:\Windows\SYSTEM32\ntmarta.dll @ 0xAB730D80)
[Address] EAT @explorer.exe (AccGetAccessForTrustee) : actxprxy.dll -> HOOKED (C:\Windows\SYSTEM32\ntmarta.dll @ 0xAB7401A8)
[Address] EAT @explorer.exe (AccGetExplicitEntries) : actxprxy.dll -> HOOKED (C:\Windows\SYSTEM32\ntmarta.dll @ 0xAB740288)
[Address] EAT @explorer.exe (AccGetInheritanceSource) : actxprxy.dll -> HOOKED (C:\Windows\SYSTEM32\ntmarta.dll @ 0xAB730EA0)
[Address] EAT @explorer.exe (AccLookupAccountName) : actxprxy.dll -> HOOKED (C:\Windows\SYSTEM32\ntmarta.dll @ 0xAB740348)
[Address] EAT @explorer.exe (AccLookupAccountSid) : actxprxy.dll -> HOOKED (C:\Windows\SYSTEM32\ntmarta.dll @ 0xAB740648)
[Address] EAT @explorer.exe (AccLookupAccountTrustee) : actxprxy.dll -> HOOKED (C:\Windows\SYSTEM32\ntmarta.dll @ 0xAB7409CC)
[Address] EAT @explorer.exe (AccProvCancelOperation) : actxprxy.dll -> HOOKED (C:\Windows\SYSTEM32\ntmarta.dll @ 0xAB73CAFC)
[Address] EAT @explorer.exe (AccProvGetAccessInfoPerObjectType) : actxprxy.dll -> HOOKED (C:\Windows\SYSTEM32\ntmarta.dll @ 0xAB73CB74)
[Address] EAT @explorer.exe (AccProvGetAllRights) : actxprxy.dll -> HOOKED (C:\Windows\SYSTEM32\ntmarta.dll @ 0xAB73CC1C)
[Address] EAT @explorer.exe (AccProvGetCapabilities) : actxprxy.dll -> HOOKED (C:\Windows\SYSTEM32\ntmarta.dll @ 0xAB728100)
[Address] EAT @explorer.exe (AccProvGetOperationResults) : actxprxy.dll -> HOOKED (C:\Windows\SYSTEM32\ntmarta.dll @ 0xAB73CDF8)
[Address] EAT @explorer.exe (AccProvGetTrusteesAccess) : actxprxy.dll -> HOOKED (C:\Windows\SYSTEM32\ntmarta.dll @ 0xAB73CF38)
[Address] EAT @explorer.exe (AccProvGrantAccessRights) : actxprxy.dll -> HOOKED (C:\Windows\SYSTEM32\ntmarta.dll @ 0xAB73D040)
[Address] EAT @explorer.exe (AccProvHandleGetAccessInfoPerObjectType) : actxprxy.dll -> HOOKED (C:\Windows\SYSTEM32\ntmarta.dll @ 0xAB73D1B0)
[Address] EAT @explorer.exe (AccProvHandleGetAllRights) : actxprxy.dll -> HOOKED (C:\Windows\SYSTEM32\ntmarta.dll @ 0xAB73D298)
[Address] EAT @explorer.exe (AccProvHandleGetTrusteesAccess) : actxprxy.dll -> HOOKED (C:\Windows\SYSTEM32\ntmarta.dll @ 0xAB73D410)
[Address] EAT @explorer.exe (AccProvHandleGrantAccessRights) : actxprxy.dll -> HOOKED (C:\Windows\SYSTEM32\ntmarta.dll @ 0xAB73C4D0)
[Address] EAT @explorer.exe (AccProvHandleIsAccessAudited) : actxprxy.dll -> HOOKED (C:\Windows\SYSTEM32\ntmarta.dll @ 0xAB73D48C)
[Address] EAT @explorer.exe (AccProvHandleIsObjectAccessible) : actxprxy.dll -> HOOKED (C:\Windows\SYSTEM32\ntmarta.dll @ 0xAB73D524)
[Address] EAT @explorer.exe (AccProvHandleRevokeAccessRights) : actxprxy.dll -> HOOKED (C:\Windows\SYSTEM32\ntmarta.dll @ 0xAB73D660)
[Address] EAT @explorer.exe (AccProvHandleRevokeAuditRights) : actxprxy.dll -> HOOKED (C:\Windows\SYSTEM32\ntmarta.dll @ 0xAB73D738)
[Address] EAT @explorer.exe (AccProvHandleSetAccessRights) : actxprxy.dll -> HOOKED (C:\Windows\SYSTEM32\ntmarta.dll @ 0xAB73D810)
[Address] EAT @explorer.exe (AccProvIsAccessAudited) : actxprxy.dll -> HOOKED (C:\Windows\SYSTEM32\ntmarta.dll @ 0xAB73D910)
[Address] EAT @explorer.exe (AccProvIsObjectAccessible) : actxprxy.dll -> HOOKED (C:\Windows\SYSTEM32\ntmarta.dll @ 0xAB73DA24)
[Address] EAT @explorer.exe (AccProvRevokeAccessRights) : actxprxy.dll -> HOOKED (C:\Windows\SYSTEM32\ntmarta.dll @ 0xAB73DE74)
[Address] EAT @explorer.exe (AccProvRevokeAuditRights) : actxprxy.dll -> HOOKED (C:\Windows\SYSTEM32\ntmarta.dll @ 0xAB73DFB0)
[Address] EAT @explorer.exe (AccProvSetAccessRights) : actxprxy.dll -> HOOKED (C:\Windows\SYSTEM32\ntmarta.dll @ 0xAB73E0EC)
[Address] EAT @explorer.exe (AccRewriteGetExplicitEntriesFromAcl) : actxprxy.dll -> HOOKED (C:\Windows\SYSTEM32\ntmarta.dll @ 0xAB727BD4)
[Address] EAT @explorer.exe (AccRewriteGetHandleRights) : actxprxy.dll -> HOOKED (C:\Windows\SYSTEM32\ntmarta.dll @ 0xAB731510)
[Address] EAT @explorer.exe (AccRewriteGetNamedRights) : actxprxy.dll -> HOOKED (C:\Windows\SYSTEM32\ntmarta.dll @ 0xAB731680)
[Address] EAT @explorer.exe (AccRewriteSetEntriesInAcl) : actxprxy.dll -> HOOKED (C:\Windows\SYSTEM32\ntmarta.dll @ 0xAB723070)
[Address] EAT @explorer.exe (AccRewriteSetHandleRights) : actxprxy.dll -> HOOKED (C:\Windows\SYSTEM32\ntmarta.dll @ 0xAB722270)
[Address] EAT @explorer.exe (AccRewriteSetNamedRights) : actxprxy.dll -> HOOKED (C:\Windows\SYSTEM32\ntmarta.dll @ 0xAB723BA0)
[Address] EAT @explorer.exe (AccSetEntriesInAList) : actxprxy.dll -> HOOKED (C:\Windows\SYSTEM32\ntmarta.dll @ 0xAB740AD4)
[Address] EAT @explorer.exe (AccTreeResetNamedSecurityInfo) : actxprxy.dll -> HOOKED (C:\Windows\SYSTEM32\ntmarta.dll @ 0xAB7258A0)
[Address] EAT @explorer.exe (EventGuidToName) : actxprxy.dll -> HOOKED (C:\Windows\SYSTEM32\ntmarta.dll @ 0xAB72DE68)
[Address] EAT @explorer.exe (EventNameFree) : actxprxy.dll -> HOOKED (C:\Windows\SYSTEM32\ntmarta.dll @ 0xAB72DEF4)
[Address] EAT @explorer.exe (GetExplicitEntriesFromAclW) : actxprxy.dll -> HOOKED (C:\Windows\SYSTEM32\ntmarta.dll @ 0xAB727BCC)
[Address] EAT @explorer.exe (GetMartaExtensionInterface) : actxprxy.dll -> HOOKED (C:\Windows\SYSTEM32\ntmarta.dll @ 0xAB723600)
[Address] EAT @explorer.exe (GetNamedSecurityInfoW) : actxprxy.dll -> HOOKED (C:\Windows\SYSTEM32\ntmarta.dll @ 0xAB722680)
[Address] EAT @explorer.exe (GetSecurityInfo) : actxprxy.dll -> HOOKED (C:\Windows\SYSTEM32\ntmarta.dll @ 0xAB721390)
[Address] EAT @explorer.exe (SetEntriesInAclW) : actxprxy.dll -> HOOKED (C:\Windows\SYSTEM32\ntmarta.dll @ 0xAB723060)
[Address] EAT @explorer.exe (SetNamedSecurityInfoW) : actxprxy.dll -> HOOKED (C:\Windows\SYSTEM32\ntmarta.dll @ 0xAB723E64)
[Address] EAT @explorer.exe (SetSecurityInfo) : actxprxy.dll -> HOOKED (C:\Windows\SYSTEM32\ntmarta.dll @ 0xAB7221B0)

¤¤¤ Externí včelstvo: ¤¤¤

¤¤¤ Nákaza : ¤¤¤

¤¤¤ Soubor HOSTS: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts




¤¤¤ Kontrola MBR: ¤¤¤

+++++ PhysicalDrive0: (\\.\PHYSICALDRIVE0 @ IDE) Hitachi HTS727575A9E364 +++++
--- User ---
[MBR] 5f90d27f23cfbe3946da12279bf8ced6
[BSP] afae49b179ded1727d5e859b049a90e4 : Empty MBR Code
Partition table:
0 - [XXXXXX] UNKNOWN (0x00) [VISIBLE] Offset (sectors): 1 | Size: 2097152 MB
User = LL1 ... OK!
User = LL2 ... OK!

Dokončeno : << RKreport[0]_S_04222014_210549.txt >>

[Bozan]

Díky moc za pomoc, vážím si toho :)

[jaro3]

Zavři všechny programy a prohlížeče. Deaktivuj antivir a firewall.
Prosím, odpoj všechny USB nebo externí disky z počítače před spuštěním tohoto programu.
Spusť RogueKiller ( Pro Windows Vista nebo Windows 7, klepni pravým a vyber "Spustit jako správce", ve Windows XP poklepej ke spuštění).
- Počkej, až Prescan dokončí práci...
- Počkej, dokud status okno zobrazuje "Prohledat "
- Klikni na "Smazat"
- Počkej, dokud Status box zobrazuje " Mazání dokončeno "
- Klikni na "Zpráva " a zkopíruj a vlož obsah té zprávy prosím sem. Log je možno nalézt v RKreport [číslo]. txt na ploše.
- Zavři RogueKiller

Stáhni si TDSSKiller
Na svojí plochu.Ujisti se , že máš zavřeny všechny ostatní aplikace a prohlížeče. Rozbal soubor a spusť TDSSKiller.exe. Restartuj PC . Log z TDSSKilleru najdeš zde:
C:\TDSSKiller. 2.8.16.0_(datum)_log.txt , vlož sem prosím celý obsah logu.
-pokud bude mít log více než 60.000 znaků , rozděl ho a vlož do více příspěvků