Pomalý notebook a jiné Vyřešeno

[Musky80]

Prosím o kontrolu logu. Nelze instalovat z web storu v chromu, když aktualizuji adblock tak neukrývá už žádnou reklamu, i když před tím fungoval. V Chromu informacích mám "Administrátor aktualizace zakázal" i když jsem přihlášený jako administrátor.

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:51:01, on 14.12.2014
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v9.00 (9.00.8112.16599)

FIREFOX: 33.1 (x86 cs)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Unreal Commander\Uncom.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Users\Tomas\Downloads\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.mystartsearch.com/?type=hp&t ... S_5RF0JYPX
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.mystartsearch.com/?type=hp&t ... S_5RF0JYPX
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.mystartsearch.com/web/?type= ... RF0JYPX&q={searchTerms}
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.mystartsearch.com/web/?type= ... RF0JYPX&q={searchTerms}
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.mystartsearch.com/?type=hp&t ... S_5RF0JYPX
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 81.169.140.103:3128
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O3 - Toolbar: (no name) - {EEE6C35B-6118-11DC-9C72-001320C79847} - (no file)
O3 - Toolbar: Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - blank (file missing)
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{9C243918-1FEF-4898-BC1A-5FDC7A8548AF}: NameServer = 10.1.20.20,10.1.2.20
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: DeviceNP - DeviceNP.dll (file missing)
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Advanced SystemCare Service 8 (AdvancedSystemCareService8) - Unknown owner - G:\Programy\ASC\ASCService.exe (file missing)
O23 - Service: Andrea ADI Filters Service (AEADIFilters) - Andrea Electronics Corporation - C:\Windows\system32\AEADISRV.EXE
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\Windows\system32\agrsmsvc.exe
O23 - Service: Com4QLBEx - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
O23 - Service: Firebird Guardian - DefaultInstance (FirebirdGuardianDefaultInstance) - The Firebird Project - C:\Program Files\Firebird\bin\fbguard.exe
O23 - Service: Firebird Server - DefaultInstance (FirebirdServerDefaultInstance) - The Firebird Project - C:\Program Files\Firebird\bin\fbserver.exe
O23 - Service: HP ProtectTools Device Locking / Auditing (FLCDLOCK) - Hewlett-Packard Ltd - C:\Windows\system32\flcdlock.exe
O23 - Service: Foxit Cloud Safe Update Service (FoxitCloudUpdateService) - Foxit Software Inc. - C:\Program Files\Foxit Reader\Foxit Cloud\FCUpdateService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Canon Inkjet Printer/Scanner/Fax Extended Survey Program (IJPLMSVC) - Unknown owner - C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: TeamViewer 9 (TeamViewer9) - TeamViewer GmbH - C:\Program Files\TeamViewer\Version9\TeamViewer_Service.exe

--
End of file - 6603 bytes

[Reklama]

[Musky80]

Log z AdwCleaner

# AdwCleaner v4.105 - Report created 14/12/2014 at 18:58:58
# Updated 08/12/2014 by Xplode
# Database : 2014-12-13.4 [Live]
# Operating System : Windows Vista (TM) Home Basic Service Pack 2 (32 bits)
# Username : Tomas - IRENA
# Running from : C:\Users\Tomas\Downloads\AdwCleaner.exe
# Option : Scan

***** [ Services ] *****


***** [ Files / Folders ] *****

File Found : C:\Program Files\Mozilla Firefox\browser\searchplugins\mystartsearch.xml
File Found : C:\Users\HP\AppData\Roaming\Mozilla\Firefox\Profiles\6abvzg9s.default\user.js
Folder Found : C:\Program Files\Common Files\Spigot
Folder Found : C:\Program Files\globalUpdate
Folder Found : C:\ProgramData\12408311065113000239
Folder Found : C:\ProgramData\ICQ\ICQToolbar
Folder Found : C:\Users\HP\AppData\LocalLow\SweetIM
Folder Found : C:\Users\HP\AppData\Roaming\Mozilla\Firefox\Profiles\6abvzg9s.default\Extensions\FEo@rCaxegEN.edu
Folder Found : C:\Users\HP\AppData\Roaming\Mozilla\Firefox\Profiles\6abvzg9s.default\Extensions\Lnf@h.org
Folder Found : C:\Users\Tomas\AppData\Local\globalUpdate
Folder Found : C:\Users\Tomas\AppData\Roaming\Mozilla\Firefox\Profiles\honirzoj.default\Extensions\FEo@rCaxegEN.edu
Folder Found : C:\Users\Tomas\AppData\Roaming\Mozilla\Firefox\Profiles\honirzoj.default\Extensions\Lnf@h.org
Folder Found : C:\Users\Tomas\AppData\Roaming\SkypEmoticons
Folder Found : C:\Users\Uzivatel\AppData\LocalLow\Search Settings
Folder Found : C:\Users\Uzivatel\AppData\LocalLow\SweetIM

***** [ Scheduled Tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Found : HKCU\Software\AppDataLow\Software\Crossrider
Key Found : HKCU\Software\BI
Key Found : HKCU\Software\GlobalUpdate
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{01e8a446-f126-4bc2-b5e9-e867703a3254}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3f9004e1-6271-45c8-b08d-ddcdac7140f8}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{01e8a446-f126-4bc2-b5e9-e867703a3254}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3f9004e1-6271-45c8-b08d-ddcdac7140f8}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{BA0C978D-D909-49B6-AFE2-8BDE245DC7E6}
Key Found : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Key Found : HKLM\SOFTWARE\Classes\.
Key Found : HKLM\SOFTWARE\Classes\..9
Key Found : HKLM\SOFTWARE\Classes\BuyNsave.BuyNsave
Key Found : HKLM\SOFTWARE\Classes\BuyNsave.BuyNsave.9
Key Found : HKLM\SOFTWARE\Classes\CLSID\{01e8a446-f126-4bc2-b5e9-e867703a3254}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{3f9004e1-6271-45c8-b08d-ddcdac7140f8}
Key Found : HKLM\SOFTWARE\Classes\Interface\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{E2343056-CC08-46AC-B898-BFC7ACF4E755}
Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\hbcennhacfaagdopikcegfcobcadeocj
Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\icdlfehblmklkikfigmjhbmmpmkmpooj
Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\mhkaekfpcppmmioggniknbnbdbcigpkk
Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\pfndaklgolladniicklehhancnlgocpp
Key Found : HKLM\SOFTWARE\ICQ\ICQToolbar
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Key Found : HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\SearchSettings
Key Found : HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\SweetIM
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{01e8a446-f126-4bc2-b5e9-e867703a3254}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3f9004e1-6271-45c8-b08d-ddcdac7140f8}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{4820778D-AB0D-6D18-C316-52A6A0E1D507}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{842C4394-47F7-60DE-480B-C09116B63559}
Key Found : HKLM\SOFTWARE\mystartsearchSoftware
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{EEE6C35B-6118-11DC-9C72-001320C79847}]

***** [ Browsers ] *****

-\\ Internet Explorer v9.0.8112.16599

Setting Found : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL] - hxxp://www.mystartsearch.com/?type=hp&t ... S_5RF0JYPX
Setting Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page] - hxxp://www.mystartsearch.com/?type=hp&t ... S_5RF0JYPX
Setting Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL] - hxxp://www.mystartsearch.com/?type=hp&t ... S_5RF0JYPX
Setting Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL] - hxxp://www.mystartsearch.com/web/?type= ... RF0JYPX&q={searchTerms}
Setting Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page] - hxxp://www.mystartsearch.com/web/?type= ... RF0JYPX&q={searchTerms}

-\\ Mozilla Firefox v33.1 (x86 cs)

[6abvzg9s.default] - Line Found : user_pref("extensions.MOCZf2JB45wPF9BC.scode", "(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"warnalert11.com\")>-1||url.indexOf(\[...]
[6abvzg9s.default] - Line Found : user_pref("extensions.wwrY6dMQVQq7etn1.scode", "try{(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"warnalert11.com\")>-1||url.index[...]
[honirzoj.default] - Line Found : user_pref("browser.search.defaultenginename", "mystartsearch");
[honirzoj.default] - Line Found : user_pref("browser.search.selectedEngine", "mystartsearch");
[honirzoj.default] - Line Found : user_pref("extensions.MOCZf2JB45wPF9BC.scode", "try{(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"warnalert11.com\")>-1||url.index[...]
[honirzoj.default] - Line Found : user_pref("extensions.wwrY6dMQVQq7etn1.scode", "try{(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"warnalert11.com\")>-1||url.index[...]

-\\ Google Chrome v39.0.2171.95

[C:\Users\HP\AppData\Local\Google\Chrome\User Data\Default\preferences] - Found [Extension] : hbcennhacfaagdopikcegfcobcadeocj
[C:\Users\HP\AppData\Local\Google\Chrome\User Data\Default\preferences] - Found [Extension] : icdlfehblmklkikfigmjhbmmpmkmpooj
[C:\Users\HP\AppData\Local\Google\Chrome\User Data\Default\preferences] - Found [Extension] : mhkaekfpcppmmioggniknbnbdbcigpkk
[C:\Users\HP\AppData\Local\Google\Chrome\User Data\Default\preferences] - Found [Extension] : pfndaklgolladniicklehhancnlgocpp
[C:\Users\Tomas\AppData\Local\Google\Chrome\User Data\Default\preferences] - Found [Extension] : hbcennhacfaagdopikcegfcobcadeocj
[C:\Users\Tomas\AppData\Local\Google\Chrome\User Data\Default\preferences] - Found [Extension] : icdlfehblmklkikfigmjhbmmpmkmpooj
[C:\Users\Tomas\AppData\Local\Google\Chrome\User Data\Default\preferences] - Found [Extension] : mhkaekfpcppmmioggniknbnbdbcigpkk
[C:\Users\Tomas\AppData\Local\Google\Chrome\User Data\Default\preferences] - Found [Extension] : pfndaklgolladniicklehhancnlgocpp
[C:\Users\Tomas\AppData\Local\Google\Chrome\User Data\Default\preferences] - Found [Extension] : nfengeggddojhakldhlpjdlddgkkjkdd
[C:\Users\Tomas\AppData\Local\Google\Chrome\User Data\Default\preferences] - Found [Extension] : bbmegnmpleoagolcnjnejdacakedpcgd
[C:\Users\Tomas\AppData\Local\Google\Chrome\User Data\Default\preferences] - Found [Homepage] : hxxp://www.mystartsearch.com/?type=hp&t ... S_5RF0JYPX
[C:\Users\Tomas\AppData\Local\Google\Chrome\User Data\Default\preferences] - Found [Startup_URLs] : hxxp://www.mystartsearch.com/?type=hp&t ... S_5RF0JYPX
[C:\Users\Tomas\AppData\Local\Google\Chrome\User Data\Default\preferences] - Found [Homepage] : hxxp://www.mystartsearch.com/?type=hp&t ... S_5RF0JYPX
[C:\Users\Tomas\AppData\Local\Google\Chrome\User Data\Default\preferences] - Found [Startup_URLs] : hxxp://www.mystartsearch.com/?type=hp&t ... S_5RF0JYPX

*************************

AdwCleaner[R0].txt - [8553 octets] - [14/12/2014 18:58:58]

########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [8613 octets] ##########

[memphisto]

V Adw nech vše smazat a dodej log po smazání

Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranìní historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit doèasné soubory Windows, vysypat koš atd.
- Pokud používáš jen Google Chrome , tak ATF nemusíš použít.

Stáhni si TFC
Otevři soubor a zavři všechny ostatní okna, Klikni na Start k zahájení procesu. Program by neměl trvat dlouho.
Poté by se měl PC restartovat, pokud ne , proveď sám.


Stáhni si Malwarebytes' Anti-Malware
- Při instalaci odeber zatržítko u „Povolit bezplatnou zkušební verzi Malwarebytes' Anti-Malware Premium“
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Aktualizace Malwarebytes' Anti-Malware a Spustit aplikaci Malwarebytes' Anti-Malware, pokud jo tak klikni na tlačítko konec
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a klikni na Skenovat nyní a
- po proběhnutí programu se ti objeví hláška vpravo dole tak klikni na Kopírovat do schránky a a vlož sem celý log.

- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).

Pokud budou problémy , spusť v nouz. režimu.

[Musky80]

V adw jsem včera vše smazal a po novem pusteni nic nenašel. Atf jsem pustil. Večer pustim tfc a antimalware, který jsem chtěl už stáhnout včera ale ukazovalo mi to 5 hodin na stáhnutí. Zrychlil se trochu ale pluginy nainstalovat nejdou, i když mám Adblock, porad to ukazuje reklamy a i když mám v ikoně číslo (třeba i 40). Chybu "administrátor aktualizace zakázal" jsem vyřešil úpravou hodnoty v registru, vygooglil jsem to. Dam vědět večer, ale nevím ktery, nemám každý den ten ntb, je pracovní.

[jaro3]

Zkus tady:
http://www.bleepingcomputer.com/forums/ ... i-malware/

[Musky80]

ATF i TFC jsem spustil. Tady je log z MWAB

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 16.12.2014
Scan Time: 15:52:09
Logfile:
Administrator: Yes

Version: 2.00.4.1028
Malware Database: v2014.12.16.03
Rootkit Database: v2014.12.14.01
License: Trial
Malware Protection: Enabled
Malicious Website Protection: Enabled
Self-protection: Disabled

OS: Windows Vista Service Pack 2
CPU: x86
File System: NTFS
User: HP

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 388829
Time Elapsed: 24 min, 34 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 6
PUP.Optional.Spigot.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Search Settings, , [e0a3da89c5b751e5d6003990b54fde22],
PUP.Optional.ShopAndUp.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Shop_an_Upi_1.6, , [047f60033d3f59dd55ea87e9eb1828d8],
PUP.Optional.Spigot.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SEARCH SETTINGS, , [5033ce952656072f8c9d85dc9172e21e],
PUP.Optional.Spigot.A, HKU\S-1-5-21-1156409732-3056138097-3817184042-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Search Settings, , [7d066ff4d7a5ce683f975574ca3a6c94],
PUP.Optional.DiVapton.A, HKU\S-1-5-21-1156409732-3056138097-3817184042-1007-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\DiVapton, , [8ef5026165177abc41382d848a7aef11],
PUP.Optional.Spigot.A, HKU\S-1-5-21-1156409732-3056138097-3817184042-1007-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Search Settings, , [6a19fe65106cb680d3039237a75d7c84],

Registry Values: 1
PUP.Optional.Spigot.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SEARCH SETTINGS|GCProtected, 1, , [5033ce952656072f8c9d85dc9172e21e]

Registry Data: 0
(No malicious items detected)

Folders: 5
Rogue.Multiple, C:\ProgramData\23405448, , [5b2894cf0f6d181e9598f6189a6956aa],
PUP.Optional.Spigot.A, C:\Windows\System32\config\systemprofile\AppData\LocalLow\Search Settings, , [3a49ef741f5d12245d34181d39ca7f81],
PUP.Optional.Spigot.A, C:\Windows\System32\config\systemprofile\AppData\LocalLow\Search Settings\res, , [3a49ef741f5d12245d34181d39ca7f81],
PUP.Optional.Spigot.A, C:\Windows\System32\config\systemprofile\AppData\LocalLow\Search Settings\temp, , [3a49ef741f5d12245d34181d39ca7f81],
PUP.Optional.Spigot.A, C:\Users\HP\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mhkaekfpcppmmioggniknbnbdbcigpkk, , [88fb085b740835017a784b0531d29a66],

Files: 11
PUP.Optional.SweetIM, C:\Windows\Installer\348c7858.msi, , [daa9a8bbd2aac76f89eb3a5c42c3827e],
Rogue.Multiple, C:\ProgramData\23405448\BIT2F70.tmp, , [5b2894cf0f6d181e9598f6189a6956aa],
PUP.Optional.Spigot.A, C:\Users\HP\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mhkaekfpcppmmioggniknbnbdbcigpkk\000253.sst, , [88fb085b740835017a784b0531d29a66],
PUP.Optional.Spigot.A, C:\Users\HP\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mhkaekfpcppmmioggniknbnbdbcigpkk\000315.sst, , [88fb085b740835017a784b0531d29a66],
PUP.Optional.Spigot.A, C:\Users\HP\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mhkaekfpcppmmioggniknbnbdbcigpkk\000366.ldb, , [88fb085b740835017a784b0531d29a66],
PUP.Optional.Spigot.A, C:\Users\HP\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mhkaekfpcppmmioggniknbnbdbcigpkk\000397.log, , [88fb085b740835017a784b0531d29a66],
PUP.Optional.Spigot.A, C:\Users\HP\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mhkaekfpcppmmioggniknbnbdbcigpkk\CURRENT, , [88fb085b740835017a784b0531d29a66],
PUP.Optional.Spigot.A, C:\Users\HP\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mhkaekfpcppmmioggniknbnbdbcigpkk\LOCK, , [88fb085b740835017a784b0531d29a66],
PUP.Optional.Spigot.A, C:\Users\HP\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mhkaekfpcppmmioggniknbnbdbcigpkk\LOG, , [88fb085b740835017a784b0531d29a66],
PUP.Optional.Spigot.A, C:\Users\HP\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mhkaekfpcppmmioggniknbnbdbcigpkk\LOG.old, , [88fb085b740835017a784b0531d29a66],
PUP.Optional.Spigot.A, C:\Users\HP\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mhkaekfpcppmmioggniknbnbdbcigpkk\MANIFEST-000396, , [88fb085b740835017a784b0531d29a66],

Physical Sectors: 0
(No malicious items detected)


(end)

[Orcus]

Znovu spusť MbAM a dej Skenovat nyní
Po proběhnutí programu se ti objeví hláška, tak klikni na „Vše do karantény“ -> „Exportovat záznam“ a vyber „textový soubor“ , soubor nějak pojmenuj a ulož na Plochu.
Zkopíruj sem celý obsah toho logu.

====================================================

Stáhni si Junkware Removal Tool

na svojí plochu.
Deaktivuj si svůj antivirový program.
Pravým tl. myši klikni na JRT.exe a vyber „spustit jako správce“. Pro pokračování budeš vyzván ke stisknutí jakékoliv klávesy. Na nějakou klikni.
Začne skenování programu. Skenování může trvat dloho , podle množství nákaz. Po ukončení skenu se objeví log (JRT.txt) , který se uloží na ploše.
Zkopíruj sem prosím celý jeho obsah.

====================================================

Stáhni si RogueKiller
32bit.:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
64bit.:
http://www.sur-la-toile.com/RogueKiller ... lerX64.exe
na svojí plochu.
- Zavři všechny ostatní programy a prohlížeče.
- Pro OS Vista a win7 spusť program RogueKiller.exe jako správce , u XP poklepáním.
- počkej až skončí Prescan -vyhledávání škodlivých procesů.
- Zkontroluj , zda máš zaškrtnuto:
Kontrola MBR
Kontrola Faked
Antirootkit
-Potom klikni na „Prohledat“.
- Program skenuje procesy PC. Po proskenování klikni na „Zpráva“celý obsah logu sem zkopíruj.
Pokud je program blokován , zkus ho spustit několikrát. Pokud dále program nepůjde spustit a pracovat, přejmenuj ho na winlogon.exe.

[Musky80]

JRT

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.4.0 (11.29.2014:1)
OS: Windows Vista (TM) Home Basic x86
Ran by HP on st 17.12.2014 at 16:49:23,06
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\ammyy"



~~~ FireFox

Successfully deleted the following from C:\Users\HP\AppData\Roaming\mozilla\firefox\profiles\6abvzg9s.default\prefs.js

user_pref("extensions.MOCZf2JB45wPF9BC.url", "hxxp://veterances.net/sync2/?q=hfZ9ofV9CShEAen0rTUGrihTB6lKDzt4okqAtNtVh7n0rjnFrTwGrjgGrHkHtMFHhd9FqdwGrjnFqTaErHgMDMlGojUMAe4Uoj
Emptied folder: C:\Users\HP\AppData\Roaming\mozilla\firefox\profiles\6abvzg9s.default\minidumps [38 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on st 17.12.2014 at 16:51:54,66
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

[Musky80]

RogueKiller V10.1.0.0 [Dec 11 2014] by Adlice Software
mail : http://www.adlice.com/contact/
Feedback : http://forum.adlice.com
Webová stránka : http://www.adlice.com/softwares/roguekiller/
Blog : http://www.adlice.com

Operační systém : Windows Vista (6.0.6002 Service Pack 2) 32 bits version
Spuštěno : Normální režim
Uživatel : HP [Práva správce]
Mód : Prohledat -- Datum : 12/17/2014 17:11:06

¤¤¤ Procesy : 0 ¤¤¤

¤¤¤ Registry : 15 ¤¤¤
[Hj.RegVal] HKEY_LOCAL_MACHINE\RK_Software_ON_F_84F4\Microsoft\Windows NT\CurrentVersion\Winlogon | Shell : cmd.exe /k start cmd.exe -> Nalezeno
[PUM.Dns] HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters | DhcpNameServer : 10.70.238.221 10.70.237.2 [(Private Address) (XX)][(Private Address) (XX)] -> Nalezeno
[PUM.Dns] HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters | DhcpNameServer : 10.70.238.221 10.70.237.2 [(Private Address) (XX)][(Private Address) (XX)] -> Nalezeno
[PUM.Dns] HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{6A293C1E-397B-4080-A04D-A2CA237F1C81} | DhcpNameServer : 10.70.238.221 10.70.237.2 [(Private Address) (XX)][(Private Address) (XX)] -> Nalezeno
[PUM.Dns] HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{9C243918-1FEF-4898-BC1A-5FDC7A8548AF} | NameServer : 10.1.20.20,10.1.2.20 [(Private Address) (XX)][(Private Address) (XX)] -> Nalezeno
[PUM.Dns] HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters\Interfaces\{6A293C1E-397B-4080-A04D-A2CA237F1C81} | DhcpNameServer : 10.70.238.221 10.70.237.2 [(Private Address) (XX)][(Private Address) (XX)] -> Nalezeno
[PUM.Dns] HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters\Interfaces\{9C243918-1FEF-4898-BC1A-5FDC7A8548AF} | NameServer : 10.1.20.20,10.1.2.20 [(Private Address) (XX)][(Private Address) (XX)] -> Nalezeno
[PUM.Dns] HKEY_LOCAL_MACHINE\System\ControlSet003\Services\Tcpip\Parameters\Interfaces\{6A293C1E-397B-4080-A04D-A2CA237F1C81} | DhcpNameServer : 10.70.238.221 10.70.237.2 [(Private Address) (XX)][(Private Address) (XX)] -> Nalezeno
[PUM.Dns] HKEY_LOCAL_MACHINE\System\ControlSet003\Services\Tcpip\Parameters\Interfaces\{9C243918-1FEF-4898-BC1A-5FDC7A8548AF} | NameServer : 10.1.20.20,10.1.2.20 [(Private Address) (XX)][(Private Address) (XX)] -> Nalezeno
[PUM.StartMenu] HKEY_USERS\S-1-5-21-1156409732-3056138097-3817184042-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowRecentDocs : 2 -> Nalezeno
[PUM.DesktopIcons] HKEY_LOCAL_MACHINE\RK_Software_ON_F_84F4\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1 -> Nalezeno
[PUM.DesktopIcons] HKEY_LOCAL_MACHINE\RK_Software_ON_F_84F4\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {59031a47-3f72-44a7-89c5-5595fe6b30ee} : 1 -> Nalezeno
[PUM.DesktopIcons] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1 -> Nalezeno
[PUM.DesktopIcons] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {59031a47-3f72-44a7-89c5-5595fe6b30ee} : 1 -> Nalezeno

¤¤¤ Úlohy : 0 ¤¤¤

¤¤¤ Soubory : 0 ¤¤¤

¤¤¤ Soubor HOSTS : 0 [Too big!] ¤¤¤

¤¤¤ Antirootkit : 0 (Driver: Nahrán) ¤¤¤

¤¤¤ Kontrola MBR : ¤¤¤
+++++ PhysicalDrive0: ST9160827AS +++++
--- User ---
[MBR] 1c2cbf6a955e8947264588ddf5dfaa93
[BSP] cab1ddb7dd29883e1d36686ca7916a9c : HP MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 63 | Size: 143200 MB
1 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 293275648 | Size: 7833 MB
2 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 309325824 | Size: 1588 MB
User = LL1 ... OK
User = LL2 ... OK

[jaro3]

Spusť znovu AdwCleaner (u Windows Vista či Windows7, klikni na AdwCleaner pravým a vyber „Spustit jako správce“
klikni na „Prohledat-Scan“, po prohledání klikni na „ Vymazat-Clean“

Program provede opravu, po automatickém restartu neukáže log (C:\AdwCleaner [S?].txt) , jeho obsah sem celý vlož.

Zavři všechny programy a prohlížeče. Deaktivuj antivir a firewall.
Prosím, odpoj všechny USB (kromě myši s klávesnice) nebo externí disky z počítače před spuštěním tohoto programu.
Spusť znovu RogueKiller ( Pro Windows Vista nebo Windows 7, klepni pravým a vyber "Spustit jako správce", ve Windows XP poklepej ke spuštění).
- Počkej, až Prescan dokončí práci...
- Pak klikni na "Prohledat " ,po jeho skončení:


- V záložkách (Registry , Tasks , Web Browser apod.) vše zatrhni (dej zatržítka)
(musíš dát myší zatržítko do toho čtverečku vlevo od registru ap.)

- Klikni na "Smazat"
- Počkej, dokud Status box nezobrazí " Mazání dokončeno "
- Klikni na "Zpráva " a zkopíruj a vlož obsah té zprávy prosím sem. Log je možno nalézt v RKreport [číslo]. txt na ploše.
- Zavři RogueKiller

Vypni antivir
Stáhni
Zoek.exe

a uloz si ho na plochu.
Zavři všechny ostatní programy , okna i prohlížeče.
Spusť Zoek.exe ( u win vista , win7, 8 klikni na něj pravým a vyber : „Spustit jako správce“
- pozor , náběh programu může trvat déle.

Do okna programu vlož skript níže:

Kód: Vybrat vše

autoclean;
emptyclsid;
iedefaults;
FFdefaults;
CHRdefaults;
emptyalltemp;
resethosts;

klikni na Run Script
Program provede sken , opravu, sken i oprava může trvat i více minut ,je třeba posečkat do konce. Do okna neklikej!
Program nabídne restart , potvrď .

Po restartu se může nějaký čas ukázat pouze černá plocha , to je normální. Je třeba počkat až se vytvoří log. Ten si můžeš uložit třeba do dokumentů , jinak se sám ukládá do:
C:\zoek-results.log
Zkopíruj sem celý obsah toho logu.

[Musky80]

# AdwCleaner v4.105 - Report created 19/12/2014 at 14:19:05
# Updated 08/12/2014 by Xplode
# Database : 2014-12-16.1 [Live]
# Operating System : Windows Vista (TM) Home Basic Service Pack 2 (32 bits)
# Username : Tomas - IRENA
# Running from : C:\Users\Tomas\Documents\Karta\Programy\AdwCleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

File Deleted : C:\Users\HP\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_static.olark.com_0.localstorage-journal

***** [ Scheduled Tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****


***** [ Browsers ] *****

-\\ Internet Explorer v9.0.8112.16599


-\\ Mozilla Firefox v33.1 (x86 cs)


-\\ Google Chrome v39.0.2171.95


*************************

AdwCleaner[R1].txt - [8708 octets] - [14/12/2014 19:42:40]
AdwCleaner[R2].txt - [8768 octets] - [14/12/2014 19:45:57]
AdwCleaner[R3].txt - [984 octets] - [14/12/2014 20:04:48]
AdwCleaner[R4].txt - [1176 octets] - [19/12/2014 14:14:53]
AdwCleaner[S0].txt - [8538 octets] - [14/12/2014 19:47:56]
AdwCleaner[S1].txt - [1100 octets] - [19/12/2014 14:19:05]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [1160 octets] ##########

[Musky80]

RogueKiller V10.1.0.0 [Dec 11 2014] by Adlice Software
mail : http://www.adlice.com/contact/
Feedback : http://forum.adlice.com
Webová stránka : http://www.adlice.com/softwares/roguekiller/
Blog : http://www.adlice.com

Operační systém : Windows Vista (6.0.6002 Service Pack 2) 32 bits version
Spuštěno : Normální režim
Uživatel : Tomas [Práva správce]
Mód : Smazat -- Datum : 12/19/2014 14:55:00

¤¤¤ Procesy : 0 ¤¤¤

¤¤¤ Registry : 17 ¤¤¤
[Hj.RegVal] HKEY_LOCAL_MACHINE\RK_Software_ON_F_D8F2\Microsoft\Windows NT\CurrentVersion\Winlogon | Shell : cmd.exe /k start cmd.exe -> Nahrazeno (explorer.exe)
[PUM.Proxy] HKEY_USERS\S-1-5-21-1156409732-3056138097-3817184042-1008\Software\Microsoft\Windows\CurrentVersion\Internet Settings | ProxyServer : 81.169.140.103:3128 -> Smazáno
[PUM.HomePage] HKEY_USERS\S-1-5-21-1156409732-3056138097-3817184042-1008\Software\Microsoft\Internet Explorer\Main | Start Page : https://www.seznam.cz/ -> Nahrazeno (http://go.microsoft.com/fwlink/p/?LinkId=255141)
[PUM.Dns] HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters | DhcpNameServer : 10.70.238.221 10.70.237.2 [(Private Address) (XX)][(Private Address) (XX)] -> Nahrazeno ()
[PUM.Dns] HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters | DhcpNameServer : 10.70.238.221 10.70.237.2 [(Private Address) (XX)][(Private Address) (XX)] -> Nahrazeno ()
[PUM.Dns] HKEY_LOCAL_MACHINE\System\ControlSet003\Services\Tcpip\Parameters | DhcpNameServer : 10.70.238.221 10.70.237.2 [(Private Address) (XX)][(Private Address) (XX)] -> Nahrazeno ()
[PUM.Dns] HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{6A293C1E-397B-4080-A04D-A2CA237F1C81} | DhcpNameServer : 10.70.238.221 10.70.237.2 [(Private Address) (XX)][(Private Address) (XX)] -> Nahrazeno ()
[PUM.Dns] HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{9C243918-1FEF-4898-BC1A-5FDC7A8548AF} | NameServer : 10.1.20.20,10.1.2.20 [(Private Address) (XX)][(Private Address) (XX)] -> Nahrazeno ()
[PUM.Dns] HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters\Interfaces\{6A293C1E-397B-4080-A04D-A2CA237F1C81} | DhcpNameServer : 10.70.238.221 10.70.237.2 [(Private Address) (XX)][(Private Address) (XX)] -> Nahrazeno ()
[PUM.Dns] HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters\Interfaces\{9C243918-1FEF-4898-BC1A-5FDC7A8548AF} | NameServer : 10.1.20.20,10.1.2.20 [(Private Address) (XX)][(Private Address) (XX)] -> Nahrazeno ()
[PUM.Dns] HKEY_LOCAL_MACHINE\System\ControlSet003\Services\Tcpip\Parameters\Interfaces\{6A293C1E-397B-4080-A04D-A2CA237F1C81} | DhcpNameServer : 10.70.238.221 10.70.237.2 [(Private Address) (XX)][(Private Address) (XX)] -> Nahrazeno ()
[PUM.Dns] HKEY_LOCAL_MACHINE\System\ControlSet003\Services\Tcpip\Parameters\Interfaces\{9C243918-1FEF-4898-BC1A-5FDC7A8548AF} | NameServer : 10.1.20.20,10.1.2.20 [(Private Address) (XX)][(Private Address) (XX)] -> Nahrazeno ()
[PUM.StartMenu] HKEY_USERS\S-1-5-21-1156409732-3056138097-3817184042-1008\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowRecentDocs : 2 -> Nahrazeno (1)
[PUM.DesktopIcons] HKEY_LOCAL_MACHINE\RK_Software_ON_F_D8F2\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1 -> Nahrazeno (0)
[PUM.DesktopIcons] HKEY_LOCAL_MACHINE\RK_Software_ON_F_D8F2\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {59031a47-3f72-44a7-89c5-5595fe6b30ee} : 1 -> Nahrazeno (0)
[PUM.DesktopIcons] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1 -> Nahrazeno (0)
[PUM.DesktopIcons] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {59031a47-3f72-44a7-89c5-5595fe6b30ee} : 1 -> Nahrazeno (0)

¤¤¤ Úlohy : 0 ¤¤¤

¤¤¤ Soubory : 0 ¤¤¤

¤¤¤ Soubor HOSTS : 0 [Too big!] ¤¤¤

¤¤¤ Antirootkit : 0 (Driver: Nahrán) ¤¤¤

¤¤¤ Webové prohlížeče : 7 ¤¤¤
[IE:Addon] System : Canon Easy-WebPrint EX [{759D9886-0C6F-4498-BAB6-4A5F47C6C72F}] -> Smazáno
[FIREFX:Addon] honirzoj.default : Adblock Plus [{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}] -> Smazáno
[FIREFX:Addon] honirzoj.default : Microsoft .NET Framework Assistant [{20a82645-c095-46ed-80e3-08825760534b}] -> Smazáno
[FIREFX:Addon] honirzoj.default : Mozilla Firefox hotfix [firefox-hotfix@mozilla.org] -> Smazáno
[FIREFX:Addon] honirzoj.default : BuuyNsave [Lnf@h.org] -> Smazáno
[FIREFX:Addon] honirzoj.default : YouTaUbeAdBBlocke [FEo@rCaxegEN.edu] -> Smazáno
[PUM.HomePage][FIREFX:Config] honirzoj.default : user_pref("browser.startup.homepage", "https://www.seznam.cz/"); -> Nahrazeno (about:home)

¤¤¤ Kontrola MBR : ¤¤¤
+++++ PhysicalDrive0: ST9160827AS +++++
--- User ---
[MBR] 1c2cbf6a955e8947264588ddf5dfaa93
[BSP] cab1ddb7dd29883e1d36686ca7916a9c : HP MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 63 | Size: 143200 MB
1 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 293275648 | Size: 7833 MB
2 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 309325824 | Size: 1588 MB
User = LL1 ... OK
User = LL2 ... OK


============================================
RKreport_SCN_12172014_171106.log - RKreport_SCN_12172014_172024.log - RKreport_SCN_12192014_144953.log