PC-HELP.CZ

Logfile of Trend Micro HijackThis v2.0.5
Scan saved at 18:27:01, on 7. 1. 2015
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.17416)


Boot mode: Normal

Running processes:
C:\Program Files (x86)\XTab\cmdshell.exe
C:\Program Files (x86)\XTab\HPNotify.exe
C:\Windows\vsnpstd3.exe
C:\Users\David\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
C:\Hry\Rockstar Games Social Club\1_0_0_0\RGSC.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Windows\tsnpstd3.exe
C:\Users\David\AppData\Local\Autodesk\.AdskAppManager\R1\AdAppMgr.exe
C:\WINDOWS\syswow64\wwahost.exe
C:\Program Files (x86)\Opera\26.0.1656.60_0\opera.exe
C:\Program Files (x86)\Opera\26.0.1656.60_0\opera_crashreporter.exe
C:\Program Files (x86)\Opera\26.0.1656.60_0\opera.exe
C:\Program Files (x86)\Opera\26.0.1656.60_0\opera.exe
C:\Program Files (x86)\Opera\26.0.1656.60_0\opera.exe
C:\Program Files (x86)\Opera\26.0.1656.60_0\opera.exe
C:\Program Files (x86)\Opera\26.0.1656.60_0\opera.exe
C:\Program Files (x86)\Opera\26.0.1656.60_0\opera.exe
C:\Program Files (x86)\Opera\26.0.1656.60_0\opera.exe
C:\Program Files (x86)\Opera\26.0.1656.60_0\opera.exe
C:\Program Files (x86)\Opera\26.0.1656.60_0\opera.exe
C:\Program Files (x86)\Opera\26.0.1656.60_0\opera.exe
C:\Program Files (x86)\Opera\26.0.1656.60_0\opera.exe
C:\Users\David\Downloads\HijackThis (1).exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://istart.webssearches.com/?type=hp ... XXZ4Y3QE5G
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://istart.webssearches.com/?type=hp ... XXZ4Y3QE5G
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://istart.webssearches.com/?type=hp ... XXZ4Y3QE5G
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://istart.webssearches.com/web/?typ ... 4Y3QE5G&q={searchTerms}
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://istart.webssearches.com/web/?typ ... 4Y3QE5G&q={searchTerms}
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://istart.webssearches.com/?type=hp ... XXZ4Y3QE5G
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,First Home Page = http://go.microsoft.com/fwlink/?LinkID= ... ch%5F13415
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: 486f39d5be3842d1a5b143880bdcbae60069063 - {11111111-1111-1111-1111-110611901163} - C:\Program Files (x86)\HDQ-1.2cV21.12\HDQ-1.2cV21.12-bho.dll
O2 - BHO: IETabPage Class - {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} - C:\Program Files (x86)\XTab\SupTab.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_25\bin\ssv.dll
O2 - BHO: PriceLess - {cf638fea-0ac3-4af7-b3db-9c5a5be756f8} - C:\Program Files (x86)\PriceLess\jI3F1TLcPtsm92.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_25\bin\jp2ssv.dll
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [tsnpstd3] C:\WINDOWS\tsnpstd3.exe
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKLM\..\Run: [ADSKAppManager] "C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgr.exe" -showminimized -checkautorun
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [cz.seznam.software.autoupdate] "C:\Users\David\AppData\Roaming\Seznam.cz\szninstall.exe" -c
O4 - HKCU\..\Run: [cz.seznam.software.szndesktop] "C:\Users\David\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q
O4 - HKCU\..\Run: [RGSC] C:\Hry\Rockstar Games Social Club\RGSCLauncher.exe /silent
O4 - HKCU\..\Run: [EPSON Stylus DX8400 Series] C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_IATICEE.EXE /FU "C:\WINDOWS\TEMP\E_S5130.tmp" /EF "HKCU"
O4 - HKCU\..\Run: [Autodesk Sync] C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe
O4 - HKUS\S-1-5-18\..\Run: [Autodesk Sync] C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Autodesk Sync] C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe (User 'Default user')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~2\MICROS~1\Office12\GRA32A~1.DLL
O23 - Service: Autodesk Application Manager Service (AdAppMgrSvc) - Autodesk Inc. - C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\WINDOWS\system32\atiesrxx.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: FlexNet Licensing Service 64 - Flexera Software LLC - C:\Program Files\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService64.exe
O23 - Service: GamingApp_Service - Micro-Star Int'l Co., Ltd. - C:\Program Files (x86)\MSI\MSI Gaming APP\GamingApp_Service.exe
O23 - Service: globalUpdate Update Service (globalUpdate) (globalUpdate) - globalUpdate - C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe
O23 - Service: globalUpdate Update Service (globalUpdatem) (globalUpdatem) - globalUpdate - C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Unknown owner - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (file missing)
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Unknown owner - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: IHProtect Service - XTab system - C:\Program Files (x86)\XTab\ProtectService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Autodesk Simulation Moldflow MITSI 2015 Job Manager (mitsijm2015) - Autodesk, Inc. - C:\Program Files\Autodesk\Inventor 2015\Moldflow\bin\mitsijm.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: WindowsMangerProtect Service (WindowsMangerProtect) - Fuyu LIMITED - C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 11192 bytes

Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected. Poté klikni na Main (hlavní stránku ) a klikni na Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranění historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit dočasné soubory Windows, vysypat koš atd.

- Pokud používáš jen Google Chrome , tak ATF nemusíš použít.


Stáhni si TFC
Otevři soubor a zavři všechny ostatní okna, Klikni na Start k zahájení procesu. Program by neměl trvat dlouho.
Poté by se měl PC restartovat, pokud ne , proveď sám.

Stáhni AdwCleaner (by Xplode)
http://www.bleepingcomputer.com/download/adwcleaner/

Ulož si ho na svojí plochu
Ukonči všechny programy , okna a prohlížeče
Spusť program poklepáním a klikni na „Prohledat-Scan“
Po skenu se objeví log ( jinak je uložen systémovem disku jako AdwCleaner[R?].txt), jeho obsah sem celý vlož.

Stáhni si Malwarebytes' Anti-Malware
- Při instalaci odeber zatržítko u „Povolit bezplatnou zkušební verzi Malwarebytes' Anti-Malware Premium“
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Aktualizace Malwarebytes' Anti-Malware a Spustit aplikaci Malwarebytes' Anti-Malware, pokud jo tak klikni na tlačítko konec
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a klikni na Skenovat nyní a
- po proběhnutí programu se ti objeví hláška vpravo dole tak klikni na b] Kopírovat do schránky [/b]a a vlož sem celý log.

- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).

Pokud budou problémy , spusť v nouz. režimu.

už při:
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected. Poté klikni na Main (hlavní stránku ) a klikni na Empty Selected.
tak to nějak nejde, naskočilo mi: No files were removed.

toto je ten ADW Cleaner

# AdwCleaner v4.106 - Report created 07/01/2015 at 21:06:40
# Updated 21/12/2014 by Xplode
# Database : 2015-01-03.1 [Live]
# Operating System : Windows 8.1 Pro (64 bits)
# Username : David - DAVID
# Running from : C:\Users\David\Desktop\adwcleaner_4.106.exe
# Option : Scan

***** [ Services ] *****

Service Found : be0fb33b
Service Found : globalUpdate
Service Found : globalUpdatem
Service Found : WindowsMangerProtect
Service Found : IHProtect Service
Service Found : {02fbc4ae-66cc-4219-94c9-1ee6e15d3402}w64
Service Found : {073f2b9a-2357-4614-b174-3fc1afffe941}w64
Service Found : {122141c3-e1a4-4af5-b3d7-650743f49ec0}w64
Service Found : {59399874-7437-4b6e-9c62-82162c4f6112}w64
Service Found : {abbda6e4-1fdf-45e9-8feb-7ffcdf19a253}w64
Service Found : {fc8decf5-c269-4b18-87f1-c395dfcbd88f}w64

***** [ Files / Folders ] *****

File Found : C:\END
File Found : C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage
File Found : C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage-journal
File Found : C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_www.superfish.com_0.localstorage
File Found : C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_www.superfish.com_0.localstorage-journal
File Found : C:\Users\David\AppData\Roaming\Opera Software\Opera Stable\Local Storage\hxxp_static.williamhill.com_0.localstorage
File Found : C:\Users\David\AppData\Roaming\Opera Software\Opera Stable\Local Storage\hxxp_static.williamhill.com_0.localstorage-journal
File Found : C:\Users\David\AppData\Roaming\Opera Software\Opera Stable\Local Storage\hxxp_www.superfish.com_0.localstorage
File Found : C:\Users\David\AppData\Roaming\Opera Software\Opera Stable\Local Storage\hxxp_www.superfish.com_0.localstorage-journal
File Found : C:\Users\David\AppData\Roaming\Opera Software\Opera Stable\Local Storage\hxxps_www.superfish.com_0.localstorage
File Found : C:\Users\David\AppData\Roaming\Opera Software\Opera Stable\Local Storage\hxxps_www.superfish.com_0.localstorage-journal
File Found : C:\WINDOWS\System32\drivers\{02fbc4ae-66cc-4219-94c9-1ee6e15d3402}w64.sys
File Found : C:\WINDOWS\System32\drivers\{073f2b9a-2357-4614-b174-3fc1afffe941}w64.sys
File Found : C:\WINDOWS\System32\drivers\{122141c3-e1a4-4af5-b3d7-650743f49ec0}w64.sys
File Found : C:\WINDOWS\System32\drivers\{59399874-7437-4b6e-9c62-82162c4f6112}w64.sys
File Found : C:\WINDOWS\System32\drivers\{abbda6e4-1fdf-45e9-8feb-7ffcdf19a253}w64.sys
File Found : C:\WINDOWS\System32\drivers\{fc8decf5-c269-4b18-87f1-c395dfcbd88f}w64.sys
File Found : C:\WINDOWS\System32\roboot64.exe
Folder Found : C:\Program Files (x86)\globalUpdate
Folder Found : C:\Program Files (x86)\HDQ-1.2cV21.12
Folder Found : C:\Program Files (x86)\PriceLess
Folder Found : C:\Program Files (x86)\PriceLess
Folder Found : C:\Program Files (x86)\STab
Folder Found : C:\Program Files (x86)\supporter
Folder Found : C:\Program Files (x86)\Tbccint
Folder Found : C:\Program Files (x86)\Zrychleni Pocitace
Folder Found : C:\ProgramData\33759a3d79cb5282
Folder Found : C:\ProgramData\IHProtectUpDate
Folder Found : C:\ProgramData\PriceLess
Folder Found : C:\ProgramData\PriceLess
Folder Found : C:\ProgramData\Tbccint
Folder Found : C:\ProgramData\WindowsMangerProtect
Folder Found : C:\Users\David\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\afpabppcibfahafilhkbbgfnlncppdnc
Folder Found : C:\Users\David\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bbglkiiiofelplniblholffbhhjmdhhi
Folder Found : C:\Users\David\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ndbbddccfchpldajafklmbocobhfijdm
Folder Found : C:\Users\David\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\nncdgoobkfbibaidgbofabghifbelkna
Folder Found : C:\Users\David\AppData\Local\globalUpdate
Folder Found : C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhbnjbbcnalphnliphggnfgjldpmnnj
Folder Found : C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndbbddccfchpldajafklmbocobhfijdm
Folder Found : C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\nncdgoobkfbibaidgbofabghifbelkna
Folder Found : C:\Users\David\AppData\Local\Chromatic Browser
Folder Found : C:\Users\David\AppData\Local\torch
Folder Found : C:\Users\David\AppData\LocalLow\PriceGong
Folder Found : C:\Users\David\AppData\LocalLow\Tbccint
Folder Found : C:\Users\David\AppData\Roaming\Opera Software\Opera Stable\Extensions\afpabppcibfahafilhkbbgfnlncppdnc
Folder Found : C:\Users\David\AppData\Roaming\Solvusoft
Folder Found : C:\Users\David\AppData\Roaming\Systweak
Folder Found : C:\Users\David\AppData\Roaming\webssearches

***** [ Scheduled Tasks ] *****

Task Found : globalUpdateUpdateTaskMachineCore
Task Found : globalUpdateUpdateTaskMachineUA
Task Found : LaunchSignup
Task Found : 50478349-4445-409f-952a-b1a7adecbcc7-1
Task Found : 50478349-4445-409f-952a-b1a7adecbcc7-11
Task Found : 50478349-4445-409f-952a-b1a7adecbcc7-5
Task Found : 50478349-4445-409f-952a-b1a7adecbcc7-5_user

***** [ Shortcuts ] *****


***** [ Registry ] *****

Data Found : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Google Chrome\shell\open\command [(Default)] - "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" hxxp://istart.webssearches.com/?type=sc ... XXZ4Y3QE5G
Data Found : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command [(Default)] - C:\Program Files\Internet Explorer\iexplore.exe hxxp://istart.webssearches.com/?type=sc ... XXZ4Y3QE5G
Data Found : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\OperaStable\shell\open\command [(Default)] - "C:\Program Files (x86)\Opera\Launcher.exe" hxxp://istart.webssearches.com/?type=sc ... XXZ4Y3QE5G
Key Found : HKCU\Software\AppDataLow\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}
Key Found : HKCU\Software\AppDataLow\Software\Crossrider
Key Found : HKCU\Software\AppDataLow\Software\HDQ-1.2cV21.12
Key Found : HKCU\Software\GlobalUpdate
Key Found : HKCU\Software\InstalledBrowserExtensions
Key Found : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\superfish.com
Key Found : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\www.superfish.com
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{11111111-1111-1111-1111-110611901163}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{cf638fea-0ac3-4af7-b3db-9c5a5be756f8}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110611901163}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{cf638fea-0ac3-4af7-b3db-9c5a5be756f8}
Key Found : HKCU\Software\Popajar
Key Found : HKCU\Software\RegisteredApplicationsEx
Key Found : HKCU\Software\SmileysWeLove
Key Found : HKCU\Software\systweak
Key Found : [x64] HKCU\Software\GlobalUpdate
Key Found : [x64] HKCU\Software\InstalledBrowserExtensions
Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Key Found : [x64] HKCU\Software\Popajar
Key Found : [x64] HKCU\Software\RegisteredApplicationsEx
Key Found : [x64] HKCU\Software\SmileysWeLove
Key Found : [x64] HKCU\Software\systweak
Key Found : HKLM\SOFTWARE\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}
Key Found : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Key Found : HKLM\SOFTWARE\Classes\AppID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Key Found : HKLM\SOFTWARE\Classes\AppID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{02A96331-0CA6-40E2-A87D-C224601985EB}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110611901163}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220622902263}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{3B5702BA-7F4C-4D1A-B026-1E9A01D43978}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{459DD0F7-0D55-D3DC-67BC-E6BE37E9D762}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{69F256DF-BA98-45E9-86EA-FC3CFECF9D30}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{6E87FC94-9866-49B9-8E93-5736D6DE3DD7}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{7E49F793-B3CD-4BF7-8419-B34B8BD30E61}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{834469E3-CA2B-4F21-A5CA-4F6F4DBCDE87}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{8529FAA3-5BFD-43C1-AB35-B53C4B96C6E5}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{ADBC39BE-3D20-4333-8D99-E91EB1B62474}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{cf638fea-0ac3-4af7-b3db-9c5a5be756f8}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{CFC47BB5-5FB5-4AD0-8427-6AA04334A3FC}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{E06CA7F5-BA34-4FF6-8D24-B1BDC594D91F}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{E0ADB535-D7B5-4D8B-B15D-578BDD20D76A}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{F6421EE5-A5BE-4D31-81D5-C16B7BF48E4C}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{FD8E81D0-F5FE-4CB1-9AEA-1E163D2BAB78}
Key Found : HKLM\SOFTWARE\Classes\globalUpdate.OneClickCtrl.10
Key Found : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine
Key Found : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine.1.0
Key Found : HKLM\SOFTWARE\Classes\globalUpdate.Update3WebControl.4
Key Found : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync
Key Found : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync.1.0
Key Found : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass
Key Found : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass.1
Key Found : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass
Key Found : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass.1
Key Found : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine
Key Found : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine.1.0
Key Found : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine
Key Found : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine.1.0
Key Found : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback
Key Found : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback.1.0
Key Found : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc
Key Found : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc.1.0
Key Found : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher
Key Found : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher.1.0
Key Found : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService
Key Found : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService.1.0
Key Found : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine
Key Found : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine.1.0
Key Found : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback
Key Found : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback.1.0
Key Found : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc
Key Found : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc.1.0
Key Found : HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Key Found : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550655905563}
Key Found : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660666906663}
Key Found : HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}
Key Found : HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Key Found : HKLM\SOFTWARE\Classes\Pcf638fea_0ac3_4af7_b3db_9c5a5be756f8_.Pcf638fea_0ac3_4af7_b3db_9c5a5be756f8_
Key Found : HKLM\SOFTWARE\Classes\Pcf638fea_0ac3_4af7_b3db_9c5a5be756f8_.Pcf638fea_0ac3_4af7_b3db_9c5a5be756f8_.9
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440644904463}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440644904463}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{A2D733A7-73B0-4C6B-B0C7-06A432950B66}
Key Found : HKLM\SOFTWARE\GlobalUpdate
Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\fjbbjfdilbioabojmcplalojlmdngbjl
Key Found : HKLM\SOFTWARE\HDQ-1.2cV21.12
Key Found : HKLM\SOFTWARE\InstalledBrowserExtensions
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{356afb1f-8aea-4995-b035-4740150d11e8}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{f55bf80e-fcdd-4b8d-90c2-b69aaae7a92e}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110611901163}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{cf638fea-0ac3-4af7-b3db-9c5a5be756f8}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{cf638fea-0ac3-4af7-b3db-9c5a5be756f8}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{75F9BF4A-AF67-A478-A37B-31D73186D3F3}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{75F9BF4A-AF67-A478-A37B-31D73186D3F3}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\HDQ-1.2cV21.12
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\webssearches uninstall
Key Found : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=10
Key Found : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=4
Key Found : HKLM\SOFTWARE\SupDp
Key Found : HKLM\SOFTWARE\SupTab
Key Found : HKLM\SOFTWARE\supWindowsMangerProtect
Key Found : HKLM\SOFTWARE\systweak
Key Found : HKLM\SOFTWARE\webssearchesSoftware
Key Found : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WindowsMangerProtect
Key Found : [x64] HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110611901163}
Key Found : [x64] HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220622902263}
Key Found : [x64] HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
Key Found : [x64] HKLM\SOFTWARE\Classes\CLSID\{cf638fea-0ac3-4af7-b3db-9c5a5be756f8}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550655905563}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660666906663}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Key Found : [x64] HKLM\SOFTWARE\InstalledBrowserExtensions
Key Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{356afb1f-8aea-4995-b035-4740150d11e8}
Key Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{f55bf80e-fcdd-4b8d-90c2-b69aaae7a92e}
Key Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Key Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Key Found : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110611901163}
Key Found : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{cf638fea-0ac3-4af7-b3db-9c5a5be756f8}

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17416

Setting Found : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page] - hxxp://istart.webssearches.com/?type=hp ... XXZ4Y3QE5G
Setting Found : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL] - hxxp://istart.webssearches.com/?type=hp ... XXZ4Y3QE5G
Setting Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL] - hxxp://istart.webssearches.com/web/?typ ... 4Y3QE5G&q={searchTerms}
Setting Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL] - hxxp://istart.webssearches.com/?type=hp ... XXZ4Y3QE5G
Setting Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page] - hxxp://istart.webssearches.com/?type=hp ... XXZ4Y3QE5G
Setting Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page] - hxxp://istart.webssearches.com/web/?typ ... 4Y3QE5G&q={searchTerms}
Setting Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL] - hxxp://istart.webssearches.com/web/?typ ... 4Y3QE5G&q={searchTerms}
Setting Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL] - hxxp://istart.webssearches.com/?type=hp ... XXZ4Y3QE5G
Setting Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page] - hxxp://istart.webssearches.com/?type=hp ... XXZ4Y3QE5G
Setting Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page] - hxxp://istart.webssearches.com/web/?typ ... 4Y3QE5G&q={searchTerms}

-\\ Google Chrome v39.0.2171.95

[C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Web data] - Found [Search Provider] : hxxp://isearch.omiga-plus.com/web/?type ... 4Y3QE5G&q={searchTerms}
[C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Web data] - Found [Search Provider] : hxxp://isearch.omiga-plus.com/web/?type ... 4Y3QE5G&q={searchTerms}
[C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Web data] - Found [Search Provider] : hxxp://isearch.omigaweb/?type=dspp&q={searchTerms}
[C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Web data] - Found [Search Provider] : hxxp://isearch.omigaweb/?type=dspp&q={searchTerms}
[C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Web data] - Found [Search Provider] : hxxp://istart.webssearches.com/web/?typ ... 4Y3QE5G&q={searchTerms}
[C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Web data] - Found [Search Provider] : hxxp://istart.webssearches.com/web/?typ ... 4Y3QE5G&q={searchTerms}
[C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\preferences] - Found [Extension] : idhbnjbbcnalphnliphggnfgjldpmnnj
[C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\preferences] - Found [Extension] : ndbbddccfchpldajafklmbocobhfijdm
[C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\preferences] - Found [Extension] : nncdgoobkfbibaidgbofabghifbelkna
[C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\preferences] - Found [Homepage] : hxxp://istart.webssearches.com/?type=hp ... XXZ4Y3QE5G
[C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\preferences] - Found [Startup_URLs] : hxxp://istart.webssearches.com/?type=hp ... XXZ4Y3QE5G
[C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\preferences] - Found [Homepage] : hxxp://istart.webssearches.com/?type=hp ... XXZ4Y3QE5G
[C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\preferences] - Found [Startup_URLs] : hxxp://istart.webssearches.com/?type=hp ... XXZ4Y3QE5G

-\\ Comodo Dragon v


-\\ Opera v26.0.1656.60

[C:\Users\David\AppData\Roaming\Opera Software\Opera Stable\preferences] - Found [Extension] : aaipilfmheplbcghignccoiiebekkdhe
[C:\Users\David\AppData\Roaming\Opera Software\Opera Stable\preferences] - Found [Extension] : elchiiiejkobdbblfejjkbphbddgmljf
[C:\Users\David\AppData\Roaming\Opera Software\Opera Stable\preferences] - Found [Extension] : ffhfoagmjcnkolneahbpagjcjjaeofbg
[C:\Users\David\AppData\Roaming\Opera Software\Opera Stable\preferences] - Found [Extension] : hjghiofiijcepdnocbgefbdlbckjfheg
[C:\Users\David\AppData\Roaming\Opera Software\Opera Stable\preferences] - Found [Extension] : iklgpchfbohgmghgfagediakopecfmbm
[C:\Users\David\AppData\Roaming\Opera Software\Opera Stable\preferences] - Found [Extension] : kfgaibfbmkjgmimhbbaikfnpkkjkpoan
[C:\Users\David\AppData\Roaming\Opera Software\Opera Stable\preferences] - Found [Extension] : lmnbobhffedhdhfpcjkjphcfpeeiocdn
[C:\Users\David\AppData\Roaming\Opera Software\Opera Stable\preferences] - Found [Extension] : kjpifmjicccpbkfjdkehimhgklfkbanh
[C:\Users\David\AppData\Roaming\Opera Software\Opera Stable\preferences] - Found [Extension] : hoidflomjnnnbiemmkjdjkkialmhbago
[C:\Users\David\AppData\Roaming\Opera Software\Opera Stable\preferences] - Found [Extension] : edjkooiccbgjhlpfhkknkjhfpmjkmelk
[C:\Users\David\AppData\Roaming\Opera Software\Opera Stable\preferences] - Found [Extension] : ekpibplnnkfdcafdpoekhoffegcajene
[C:\Users\David\AppData\Roaming\Opera Software\Opera Stable\preferences] - Found [Extension] : ipljmghelflfikejmgkmlmpjmehfjodc
[C:\Users\David\AppData\Roaming\Opera Software\Opera Stable\preferences] - Found [Extension] : nlgdemkdapolikbjimjajpmonpbpmipk
[C:\Users\David\AppData\Roaming\Opera Software\Opera Stable\preferences] - Found [Extension] : ejddjnilmdncjilbfjgameihlklfpohp
[C:\Users\David\AppData\Roaming\Opera Software\Opera Stable\preferences] - Found [Extension] : eagomcfjiefffhpaejnlpjccikpipdoe
[C:\Users\David\AppData\Roaming\Opera Software\Opera Stable\preferences] - Found [Extension] : afpabppcibfahafilhkbbgfnlncppdnc
[C:\Users\David\AppData\Roaming\Opera Software\Opera Stable\preferences] - Found [Extension] : aonedlchkbicmhepimiahfalheedjgbh

*************************

AdwCleaner[R0].txt - [24294 octets] - [07/01/2015 21:06:40]

########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [24355 octets] ##########

A ještě ten Malwarebytes A-M
Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 7. 1. 2015
Scan Time: 22:34:21
Logfile:
Administrator: Yes

Version: 2.00.4.1028
Malware Database: v2015.01.07.15
Rootkit Database: v2015.01.07.01
License: Trial
Malware Protection: Enabled
Malicious Website Protection: Enabled
Self-protection: Disabled

OS: Windows 8.1
CPU: x64
File System: NTFS
User: David

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 366809
Time Elapsed: 4 min, 24 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 4
PUP.Optional.WindowsProtectManger.A, C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe, 1248, , [4c4f4ea63b4ed95d6bd611b2d829718f]
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\ProtectService.exe, 1596, , [bcdf08ecff8a3303bde4d430df23b44c]
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\CmdShell.exe, 3472, , [cad19b5957323ef8e3a93333e12229d7]
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\HPNotify.exe, 3680, , [cad19b5957323ef8e3a93333e12229d7]

Modules: 10
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\BrowerWatchCH.dll, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\BrowserAction.dll, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\IeWatchDog.dll, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\msvcp110.dll, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\msvcp110.dll, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\msvcp110.dll, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\msvcr110.dll, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\msvcr110.dll, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\msvcr110.dll, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.Supporter.A, C:\Program Files (x86)\Supporter\Supporter.dll, , [118a37bdb2d704325b7dfb6d1de6f60a],

Registry Keys: 105
PUP.Optional.WindowsProtectManger.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\WindowsMangerProtect, , [4c4f4ea63b4ed95d6bd611b2d829718f],
PUP.Optional.XTab.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\IHProtect Service, , [bcdf08ecff8a3303bde4d430df23b44c],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\CLASSES\CLSID\{11111111-1111-1111-1111-110611901163}, , [eead6193ec9d38fe9314d8e85baa3ec2],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{11111111-1111-1111-1111-110611901163}, , [eead6193ec9d38fe9314d8e85baa3ec2],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{44444444-4444-4444-4444-440644904463}, , [eead6193ec9d38fe9314d8e85baa3ec2],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{55555555-5555-5555-5555-550655905563}, , [eead6193ec9d38fe9314d8e85baa3ec2],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{66666666-6666-6666-6666-660666906663}, , [eead6193ec9d38fe9314d8e85baa3ec2],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{55555555-5555-5555-5555-550655905563}, , [eead6193ec9d38fe9314d8e85baa3ec2],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{66666666-6666-6666-6666-660666906663}, , [eead6193ec9d38fe9314d8e85baa3ec2],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{44444444-4444-4444-4444-440644904463}, , [eead6193ec9d38fe9314d8e85baa3ec2],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\CLASSES\486f39d5be3842d1a5b143880bdcbae60069063.BHO.1, , [eead6193ec9d38fe9314d8e85baa3ec2],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{11111111-1111-1111-1111-110611901163}, , [eead6193ec9d38fe9314d8e85baa3ec2],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{11111111-1111-1111-1111-110611901163}, , [eead6193ec9d38fe9314d8e85baa3ec2],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\CLASSES\486f39d5be3842d1a5b143880bdcbae60069063.BHO, , [eead6193ec9d38fe9314d8e85baa3ec2],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\486f39d5be3842d1a5b143880bdcbae60069063.BHO, , [eead6193ec9d38fe9314d8e85baa3ec2],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\486f39d5be3842d1a5b143880bdcbae60069063.BHO.1, , [eead6193ec9d38fe9314d8e85baa3ec2],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-2245859281-165552111-4158562295-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{11111111-1111-1111-1111-110611901163}, , [eead6193ec9d38fe9314d8e85baa3ec2],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-2245859281-165552111-4158562295-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{11111111-1111-1111-1111-110611901163}, , [eead6193ec9d38fe9314d8e85baa3ec2],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{22222222-2222-2222-2222-220622902263}, , [eead6193ec9d38fe9314d8e85baa3ec2],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\CLASSES\486f39d5be3842d1a5b143880bdcbae60069063.Sandbox.1, , [eead6193ec9d38fe9314d8e85baa3ec2],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\CLASSES\486f39d5be3842d1a5b143880bdcbae60069063.Sandbox, , [eead6193ec9d38fe9314d8e85baa3ec2],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\486f39d5be3842d1a5b143880bdcbae60069063.Sandbox, , [eead6193ec9d38fe9314d8e85baa3ec2],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\486f39d5be3842d1a5b143880bdcbae60069063.Sandbox.1, , [eead6193ec9d38fe9314d8e85baa3ec2],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\CLASSES\CLSID\{22222222-2222-2222-2222-220622902263}, , [eead6193ec9d38fe9314d8e85baa3ec2],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\CLASSES\CLSID\{11111111-1111-1111-1111-110611901163}\INPROCSERVER32, , [eead6193ec9d38fe9314d8e85baa3ec2],
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, , [2675f202543512241980c720cd357090],
PUP.Optional.SupTab.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}, , [2675f202543512241980c720cd357090],
PUP.Optional.SupTab.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{917CAAE9-DD47-4025-936E-1414F07DF5B8}, , [2675f202543512241980c720cd357090],
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{917CAAE9-DD47-4025-936E-1414F07DF5B8}, , [2675f202543512241980c720cd357090],
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}, , [2675f202543512241980c720cd357090],
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, , [2675f202543512241980c720cd357090],
PUP.Optional.SupTab.A, HKU\S-1-5-21-2245859281-165552111-4158562295-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, , [2675f202543512241980c720cd357090],
PUP.Optional.SupTab.A, HKU\S-1-5-21-2245859281-165552111-4158562295-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, , [2675f202543512241980c720cd357090],
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{cf638fea-0ac3-4af7-b3db-9c5a5be756f8}, , [acef0ee6d7b23afc25b6fb847a8b6997],
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{CF638FEA-0AC3-4AF7-B3DB-9C5A5BE756F8}, , [acef0ee6d7b23afc25b6fb847a8b6997],
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{CF638FEA-0AC3-4AF7-B3DB-9C5A5BE756F8}, , [acef0ee6d7b23afc25b6fb847a8b6997],
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\CLASSES\Pcf638fea_0ac3_4af7_b3db_9c5a5be756f8_.Pcf638fea_0ac3_4af7_b3db_9c5a5be756f8_, , [acef0ee6d7b23afc25b6fb847a8b6997],
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\CLASSES\Pcf638fea_0ac3_4af7_b3db_9c5a5be756f8_.Pcf638fea_0ac3_4af7_b3db_9c5a5be756f8_.9, , [acef0ee6d7b23afc25b6fb847a8b6997],
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Pcf638fea_0ac3_4af7_b3db_9c5a5be756f8_.Pcf638fea_0ac3_4af7_b3db_9c5a5be756f8_, , [acef0ee6d7b23afc25b6fb847a8b6997],
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Pcf638fea_0ac3_4af7_b3db_9c5a5be756f8_.Pcf638fea_0ac3_4af7_b3db_9c5a5be756f8_.9, , [acef0ee6d7b23afc25b6fb847a8b6997],
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\CLASSES\CLSID\{CF638FEA-0AC3-4AF7-B3DB-9C5A5BE756F8}, , [acef0ee6d7b23afc25b6fb847a8b6997],
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\CLASSES\CLSID\{CF638FEA-0AC3-4AF7-B3DB-9C5A5BE756F8}\INPROCSERVER32, , [acef0ee6d7b23afc25b6fb847a8b6997],
PUP.Optional.MultiPlug.A, HKU\S-1-5-21-2245859281-165552111-4158562295-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{CF638FEA-0AC3-4AF7-B3DB-9C5A5BE756F8}, , [acef0ee6d7b23afc25b6fb847a8b6997],
PUP.Optional.MultiPlug.A, HKU\S-1-5-21-2245859281-165552111-4158562295-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{CF638FEA-0AC3-4AF7-B3DB-9C5A5BE756F8}, , [acef0ee6d7b23afc25b6fb847a8b6997],
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{CF638FEA-0AC3-4AF7-B3DB-9C5A5BE756F8}, , [acef0ee6d7b23afc25b6fb847a8b6997],
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{CF638FEA-0AC3-4AF7-B3DB-9C5A5BE756F8}, , [acef0ee6d7b23afc25b6fb847a8b6997],
PUP.Optional.Sanbreel.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\{02fbc4ae-66cc-4219-94c9-1ee6e15d3402}w64, , [e4b78c682960181e1bf9b62ba95b9b65],
PUP.Optional.Sanbreel.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\{073f2b9a-2357-4614-b174-3fc1afffe941}w64, , [0f8cd61eec9dc0763cd80ed3dc287987],
PUP.Optional.Sanbreel.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\{122141c3-e1a4-4af5-b3d7-650743f49ec0}w64, , [c4d7896b9dec13232de7c9188e769c64],
PUP.Optional.Sanbreel.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\{59399874-7437-4b6e-9c62-82162c4f6112}w64, , [4457698b197093a30014796826defe02],
PUP.Optional.Sanbreel.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\{abbda6e4-1fdf-45e9-8feb-7ffcdf19a253}w64, , [1784a25226634beb47cd37aacb39d927],
PUP.Optional.Sanbreel.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\{fc8decf5-c269-4b18-87f1-c395dfcbd88f}w64, , [1388f7fd86030d290f057d645ea645bb],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\30935, , [8e0d668eaddcff37b87e554a49ba9b65],
PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, , [4556af4597f269cde51cf0ddfd077e82],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\HDQ-1.2cV21.12, , [a8f3f9fb87020d2931459455bb495ca4],
PUP.Optional.IHProtect.A, HKLM\SOFTWARE\WOW6432NODE\IHProtect, , [c0db668eee9bd95d355692d43cc77b85],
PUP.Optional.WPM.A, HKLM\SOFTWARE\WOW6432NODE\supWindowsMangerProtect, , [cecdfef6bacfec4a193dca17788c17e9],
PUP.Optional.WebsSearches.A, HKLM\SOFTWARE\WOW6432NODE\webssearchesSoftware, , [c3d800f4f594f640987f5b44b54e09f7],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\GLOBALUPDATE\UPDATE, , [fc9f39bb5e2b40f64c232163b251bc44],
PUP.Optional.SmileysWeLove.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\fjbbjfdilbioabojmcplalojlmdngbjl, , [9ffc8470f6938aac719cb9d22ad924dc],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\INSTALLEDBROWSEREXTENSIONS\30935, , [0893767e6524dd59c076d9c67c879868],
PUP.Optional.Qone8, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, , [594239bbd6b3e6503ac749848183b848],
PUP.Optional.Booster.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}{be0fb33b}, , [47544ca83653aa8c1d6922658b788878],
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLAPLUGINS\@staging.google.com/globalUpdate Update;version=10, , [722943b1abde979f7fd317cdc73dee12],
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLAPLUGINS\@staging.google.com/globalUpdate Update;version=4, , [5c3f34c0ff8a78be99ba1bc95ea6a15f],
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\SUPTAB, , [dcbf9e5676135ed8ab8643393cc70af6],
PUP.Optional.SystemSpeedup, HKLM\SOFTWARE\WOW6432NODE\SYSTWEAK\ssd, , [5546e80c8efb91a5c5c3fe8824df41bf],
PUP.Optional.Supporter.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\be0fb33b, , [aaf18470cabfd36377622048b74c619f],
PUP.Optional.WindowsMangerProtect.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\EVENTLOG\APPLICATION\WindowsMangerProtect, , [adee03f1c6c382b48dce234e44bfb050],
PUP.Optional.CrossRider.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\HDQ-1.2cV21.12, , [7625ab49157492a4ccacc425798ba957],
PUP.Optional.InternetSpeedChecker, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Internet Speed Checker, , [faa1797b8aff76c0a8cdc0bfd52e9769],
PUP.Optional.SmileysWeLove.A, HKU\S-1-5-21-2245859281-165552111-4158562295-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SmileysWeLove, , [23785d973356d95d7b6bddad22e113ed],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-2245859281-165552111-4158562295-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, , [faa16a8aaadfd066722c22b360a4c53b],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-2245859281-165552111-4158562295-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\HDQ-1.2cV21.12, , [1586995bb2d75adc7800a742bd474ab6],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-2245859281-165552111-4158562295-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\30935, , [930832c2602952e41e304533ec17f10f],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-2245859281-165552111-4158562295-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\HDQ-1.2cV21.12, , [8e0d559f8801c274b11aa4c80bf8916f],
PUP.Optional.Qone8, HKU\S-1-5-21-2245859281-165552111-4158562295-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, , [efacf202c3c6aa8c6e92616c7f85f10f],
PUP.Optional.SystemSpeedup, HKU\S-1-5-21-2245859281-165552111-4158562295-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SYSTWEAK\ssd, , [a5f641b3cdbc0333b1d66521d62d4eb2],
PUP.Optional.WebsSearches.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\webssearches uninstall, , [2b7006ee62279e98d419a88edc279b65],
PUP.Optional.GlobalUpdate.T, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\globalUpdate, , [9902995b5e2bd0669179c585b54ed729],
PUP.Optional.GlobalUpdate.T, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\globalUpdatem, , [9902995b5e2bd0669179c585b54ed729],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\GOOGLEUPDATE.EXE, , [9902995b5e2bd0669179c585b54ed729],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\GOOGLEUPDATE.EXE, , [9902995b5e2bd0669179c585b54ed729],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{5645E0E7-FC12-43BF-A6E4-F9751942B298}, , [9902995b5e2bd0669179c585b54ed729],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\CLASSES\globalUpdate.OneClickCtrl.10, , [9902995b5e2bd0669179c585b54ed729],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdate.OneClickCtrl.10, , [9902995b5e2bd0669179c585b54ed729],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5645E0E7-FC12-43BF-A6E4-F9751942B298}, , [9902995b5e2bd0669179c585b54ed729],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{5645E0E7-FC12-43BF-A6E4-F9751942B298}, , [9902995b5e2bd0669179c585b54ed729],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}, , [9902995b5e2bd0669179c585b54ed729],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\CLASSES\globalUpdate.Update3WebControl.4, , [9902995b5e2bd0669179c585b54ed729],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdate.Update3WebControl.4, , [9902995b5e2bd0669179c585b54ed729],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}, , [9902995b5e2bd0669179c585b54ed729],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}, , [9902995b5e2bd0669179c585b54ed729],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{CFC47BB5-5FB5-4AD0-8427-6AA04334A3FC}, , [9902995b5e2bd0669179c585b54ed729],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{E0ADB535-D7B5-4D8B-B15D-578BDD20D76A}, , [9902995b5e2bd0669179c585b54ed729],
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{75F9BF4A-AF67-A478-A37B-31D73186D3F3}, , [1b801cd8e3a6e3536edb93c208fb49b7],
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{E0D6077D-7186-48B2-A6C6-2F7C533E8CFF}, , [1388da1a47427fb764e6b89d5ba8c739],
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{0F19EF48-CB8C-416A-B84C-C33B02970632}, , [1388da1a47427fb764e6b89d5ba8c739],
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{382F6195-1B46-40D5-B9FD-0493263E6132}, , [1388da1a47427fb764e6b89d5ba8c739],
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{DFF50D27-9859-4F50-9BE1-A4CBFA102B9D}, , [1388da1a47427fb764e6b89d5ba8c739],
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{0F19EF48-CB8C-416A-B84C-C33B02970632}, , [1388da1a47427fb764e6b89d5ba8c739],
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{382F6195-1B46-40D5-B9FD-0493263E6132}, , [1388da1a47427fb764e6b89d5ba8c739],
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{DFF50D27-9859-4F50-9BE1-A4CBFA102B9D}, , [1388da1a47427fb764e6b89d5ba8c739],
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{E0D6077D-7186-48B2-A6C6-2F7C533E8CFF}, , [1388da1a47427fb764e6b89d5ba8c739],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\HDQ-1.2cV21.12, , [f2a921d31d6c4de9927b2539bb48d22e],

Registry Values: 2
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\GLOBALUPDATE\UPDATE|path, C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe, , [fc9f39bb5e2b40f64c232163b251bc44]
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\SUPTAB|ptid, scl, , [dcbf9e5676135ed8ab8643393cc70af6]

Registry Data: 16
PUP.Optional.WebsSearches.A, HKLM\SOFTWARE\CLIENTS\STARTMENUINTERNET\GOOGLE CHROME\SHELL\OPEN\COMMAND, "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" http://istart.webssearches.com/?type=sc ... XXZ4Y3QE5G, Good: (Chrome.exe), Bad: ("C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" http://istart.webssearches.com/?type=sc ... XXZ4Y3QE5G),,[faa1a94be9a0bf77590a5b2717eee41c]
PUP.Optional.WebsSearches.A, HKLM\SOFTWARE\CLIENTS\STARTMENUINTERNET\IEXPLORE.EXE\SHELL\OPEN\COMMAND, C:\Program Files\Internet Explorer\iexplore.exe http://istart.webssearches.com/?type=sc ... XXZ4Y3QE5G, Good: (iexplore.exe), Bad: (C:\Program Files\Internet Explorer\iexplore.exe http://istart.webssearches.com/?type=sc ... XXZ4Y3QE5G),,[bedd16dec4c5ea4c08594141937214ec]
PUP.Optional.WebsSearches.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, http://istart.webssearches.com/web/?typ ... 4Y3QE5G&q={searchTerms}, Good: (www.google.com), Bad: (http://istart.webssearches.com/web/?typ ... 4Y3QE5G&q={searchTerms}),,[2e6d4aaa70199b9b89cfc5bd689d9769]
PUP.Optional.WebsSearches.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, http://istart.webssearches.com/?type=hp ... XXZ4Y3QE5G, Good: (www.google.com), Bad: (http://istart.webssearches.com/?type=hp ... XXZ4Y3QE5G),,[019a22d205846bcb7cdaceb480854cb4]
PUP.Optional.WebsSearches.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, http://istart.webssearches.com/?type=hp ... XXZ4Y3QE5G, Good: (www.google.com), Bad: (http://istart.webssearches.com/?type=hp ... XXZ4Y3QE5G),,[4e4df0041178e4524c0efa884abb36ca]
PUP.Optional.WebSearches, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, http://istart.webssearches.com/web/?typ ... 4Y3QE5G&q={searchTerms}, Good: (www.google.com), Bad: (http://istart.webssearches.com/web/?typ ... 4Y3QE5G&q={searchTerms}),,[bbe0f7fd8efb76c0e98d305ecc396997]
PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Good: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Bad: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),,[3f5c995b2d5c84b24e2ea6e63ec723dd]
PUP.Optional.WebsSearches.A, HKLM\SOFTWARE\WOW6432NODE\CLIENTS\STARTMENUINTERNET\GOOGLE CHROME\SHELL\OPEN\COMMAND, "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" http://istart.webssearches.com/?type=sc ... XXZ4Y3QE5G, Good: (Chrome.exe), Bad: ("C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" http://istart.webssearches.com/?type=sc ... XXZ4Y3QE5G),,[0c8f00f4503961d5fe658bf79471be42]
PUP.Optional.WebsSearches.A, HKLM\SOFTWARE\WOW6432NODE\CLIENTS\STARTMENUINTERNET\IEXPLORE.EXE\SHELL\OPEN\COMMAND, C:\Program Files\Internet Explorer\iexplore.exe http://istart.webssearches.com/?type=sc ... XXZ4Y3QE5G, Good: (iexplore.exe), Bad: (C:\Program Files\Internet Explorer\iexplore.exe http://istart.webssearches.com/?type=sc ... XXZ4Y3QE5G),,[118a83715732cf67dc85245e7f86f50b]
PUP.Optional.WebsSearches.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, http://istart.webssearches.com/web/?typ ... 4Y3QE5G&q={searchTerms}, Good: (www.google.com), Bad: (http://istart.webssearches.com/web/?typ ... 4Y3QE5G&q={searchTerms}),,[afec2fc5bdccf34387d1bbc750b5619f]
PUP.Optional.WebsSearches.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, http://istart.webssearches.com/?type=hp ... XXZ4Y3QE5G, Good: (www.google.com), Bad: (http://istart.webssearches.com/?type=hp ... XXZ4Y3QE5G),,[8615767e8bfe8aac183ef78bb05534cc]
PUP.Optional.WebsSearches.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, http://istart.webssearches.com/?type=hp ... XXZ4Y3QE5G, Good: (www.google.com), Bad: (http://istart.webssearches.com/?type=hp ... XXZ4Y3QE5G),,[6c2fa74d14755adce377b1d152b3837d]
PUP.Optional.WebSearches, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, http://istart.webssearches.com/web/?typ ... 4Y3QE5G&q={searchTerms}, Good: (www.google.com), Bad: (http://istart.webssearches.com/web/?typ ... 4Y3QE5G&q={searchTerms}),,[613a559f2a5f43f30a6cf39b689d1ee2]
PUP.Optional.Qone8, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Good: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Bad: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),,[08937e761d6c3ef88eee2b6151b44ab6]
PUP.Optional.WebsSearches.A, HKU\S-1-5-21-2245859281-165552111-4158562295-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, http://istart.webssearches.com/?type=hp ... XXZ4Y3QE5G, Good: (www.google.com), Bad: (http://istart.webssearches.com/?type=hp ... XXZ4Y3QE5G),,[158621d343461c1a1c3f1270af56ee12]
PUP.Optional.WebsSearches.A, HKU\S-1-5-21-2245859281-165552111-4158562295-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, http://istart.webssearches.com/?type=hp ... XXZ4Y3QE5G, Good: (www.google.com), Bad: (http://istart.webssearches.com/?type=hp ... XXZ4Y3QE5G),,[8e0db53fbccda591afa86e14ad5821df]

Folders: 48
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin\image, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\img, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\img\weather, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\js, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\en-US, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\es-419, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\es-ES, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\fr-BE, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\fr-CA, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\fr-CH, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\fr-FR, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\fr-LU, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\it-CH, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\it-IT, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\pl, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\pt, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\pt-BR, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\ru, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\ru-MO, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\tr-TR, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\vi-VI, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\zh-CN, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\zh-TW, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.Supporter.A, C:\Program Files (x86)\Supporter, , [118a37bdb2d704325b7dfb6d1de6f60a],
PUP.Optional.PriceGong.A, C:\Users\David\AppData\LocalLow\PriceGong, , [415a8b69b3d6bd7919bd1d1680830000],
PUP.Optional.WebsSearches.A, C:\Users\David\AppData\Roaming\webssearches, , [2b7006ee62279e98d419a88edc279b65],
PUP.Optional.WebsSearches.A, C:\Users\David\AppData\Roaming\webssearches\images, , [2b7006ee62279e98d419a88edc279b65],
PUP.Optional.WebsSearches.A, C:\Users\David\AppData\Roaming\webssearches\images\code, , [2b7006ee62279e98d419a88edc279b65],
PUP.Optional.WPM.A, C:\ProgramData\WindowsMangerProtect, , [603b688ca6e31c1a092f1c2c43c0af51],
PUP.Optional.WPM.A, C:\ProgramData\WindowsMangerProtect\update, , [603b688ca6e31c1a092f1c2c43c0af51],
PUP.Optional.SystemSpeedup, C:\Users\David\AppData\Roaming\systweak\ssd, , [0596fcf81b6e72c430a92622da2947b9],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update, , [9902995b5e2bd0669179c585b54ed729],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0, , [9902995b5e2bd0669179c585b54ed729],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\Download, , [9902995b5e2bd0669179c585b54ed729],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\Install, , [9902995b5e2bd0669179c585b54ed729],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\Offline, , [9902995b5e2bd0669179c585b54ed729],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\Offline\{BE849D23-9482-4507-812B-A647197D5C7C}, , [9902995b5e2bd0669179c585b54ed729],
PUP.Optional.MultiPlug.A, C:\ProgramData\PriceLess, , [1b801cd8e3a6e3536edb93c208fb49b7],
PUP.Optional.MultiPlug.A, C:\Program Files (x86)\PriceLess, , [1388da1a47427fb764e6b89d5ba8c739],
PUP.Optional.CrossRider.A, C:\Program Files (x86)\HDQ-1.2cV21.12, , [f2a921d31d6c4de9927b2539bb48d22e],
PUP.Optional.SmileysWeLove.A, C:\Users\David\AppData\Roaming\smileyswelove, , [9902da1ab9d0300687f953125fa43dc3],
PUP.Optional.SmileyWeLove.A, C:\Users\David\AppData\LocalLow\smileyswelove, , [108bf5ffbbce1620ade1acb951b2cf31],
PUP.Optional.IHProtectUpDate.A, C:\ProgramData\IHProtectUpDate, , [bfdc6a8ac2c7d066dcbf3e274eb502fe],
PUP.Optional.IHProtectUpDate.A, C:\ProgramData\IHProtectUpDate\update, , [bfdc6a8ac2c7d066dcbf3e274eb502fe],

Files: 162
PUP.Optional.WindowsProtectManger.A, C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe, , [4c4f4ea63b4ed95d6bd611b2d829718f],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\ProtectService.exe, , [bcdf08ecff8a3303bde4d430df23b44c],
PUP.Optional.CrossRider.A, C:\Program Files (x86)\HDQ-1.2cV21.12\HDQ-1.2cV21.12-bho64.dll, , [eead6193ec9d38fe9314d8e85baa3ec2],
PUP.Optional.CrossRider.A, C:\Program Files (x86)\HDQ-1.2cV21.12\HDQ-1.2cV21.12-bho.dll, , [eead6193ec9d38fe9314d8e85baa3ec2],
PUP.Optional.SupTab.A, C:\Program Files (x86)\XTab\SupTab.dll, , [2675f202543512241980c720cd357090],
PUP.Optional.CrossRider.A, C:\Users\David\AppData\Roaming\PACOGE.exe, , [801b7d77e0a981b52483ffc19f66946c],
PUP.Optional.CrossRider.A, C:\Program Files (x86)\HDQ-1.2cV21.12\50478349-4445-409f-952a-b1a7adecbcc7-11.exe, , [65368a6a59300c2a8225843cce37b050],
PUP.Optional.CrossRider.A, C:\Program Files (x86)\HDQ-1.2cV21.12\50478349-4445-409f-952a-b1a7adecbcc7-5.exe, , [adeeea0a91f89b9baef9447c858049b7],
PUP.Optional.CrossRider.A, C:\Program Files (x86)\HDQ-1.2cV21.12\HDQ-1.2cV21.12-bg.exe, , [debd3db746434ceae2c5f9c75fa6bf41],
PUP.Optional.CrossRider.A, C:\Program Files (x86)\HDQ-1.2cV21.12\HDQ-1.2cV21.12-codedownloader.exe, , [0e8d30c4ed9cb086fbac14ac8b7a07f9],
PUP.Optional.CrossRider.A, C:\Program Files (x86)\HDQ-1.2cV21.12\utils.exe, , [2d6ec034cdbcb48252117dcff808cc34],
PUP.Optional.MultiPlug.A, C:\Program Files (x86)\PriceLess\jI3F1TLcPtsm92.dll, , [acef0ee6d7b23afc25b6fb847a8b6997],
PUP.Optional.MultiPlug.A, C:\Program Files (x86)\PriceLess\jI3F1TLcPtsm92.x64.dll, , [acef0ee6d7b23afc25b6fb847a8b6997],
PUP.Optional.ClickYes, C:\Users\David\Downloads\Installation.exe, , [2d6e579d1f6abe7851dfd3301fe336ca],
PUP.Optional.OpenCandy, C:\Users\David\Downloads\DTLite4491-0356.exe, , [e1bae50f3752ea4c822f9b1715f018e8],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\uninstall.exe, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\BrowerWatchCH.dll, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\BrowerWatchFF.dll, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\BrowserAction.dll, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\CmdShell.exe, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\conf, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\HPNotify.exe, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\IeWatchDog.dll, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\install.data, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\msvcp110.dll, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\msvcr110.dll, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin\about.png, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin\about_bk.png, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin\btn.png, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin\btn_apply.png, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin\close.png, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin\conf.xml, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin\conf_back.png, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin\input_bk.png, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin\logo.png, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin\main.xml, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin\radio_1.png, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin\radio_2.png, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin\rigth_arrow.png, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\skin\settings.png, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\data.html, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\indexIE.html, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\indexIE8.html, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\main.css, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\ver.txt, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\img\arrow.png, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\img\default_add_logo.png, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\img\default_add_logo_hover.png, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\img\default_logo.png, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\img\googlelogo.png, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\img\googlelogo2.png, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\img\google_trends.png, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\img\icon128.png, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\img\icon16.png, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\img\icon48.png, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\img\loading.gif, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\img\logo32.ico, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\img\weather\0.png, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\js\common.js, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\js\ga.js, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\js\ie8.js, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\js\jquery-1.11.0.min.js, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\js\jquery.autocomplete.js, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\js\js.js, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\js\library.js, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\js\xagainit-ie8.js, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\js\xagainit.js, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\js\xagainit2.0.js, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\en-US\messages.json, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\es-419\messages.json, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\es-ES\messages.json, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\fr-BE\messages.json, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\fr-CA\messages.json, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\fr-CH\messages.json, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\fr-FR\messages.json, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\fr-LU\messages.json, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\it-CH\messages.json, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\it-IT\messages.json, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\pl\messages.json, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\pt\messages.json, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\pt-BR\messages.json, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\ru\messages.json, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\ru-MO\messages.json, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\tr-TR\messages.json, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\vi-VI\messages.json, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\zh-CN\messages.json, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.XTab.A, C:\Program Files (x86)\XTab\web\_locales\zh-TW\messages.json, , [cad19b5957323ef8e3a93333e12229d7],
PUP.Optional.Supporter.A, C:\Program Files (x86)\Supporter\Supporter.dll, , [118a37bdb2d704325b7dfb6d1de6f60a],
PUP.Optional.OmigaPlus.A, C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_isearch.omiga-plus.com_0.localstorage, , [c9d261935435999ddb145b109d66be42],
PUP.Optional.OmigaPlus.A, C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_isearch.omiga-plus.com_0.localstorage-journal, , [1c7f33c1a4e587afe906115ac43f50b0],
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\50478349-4445-409f-952a-b1a7adecbcc7-1, , [a1fa599b63260f2729413153946fdc24],
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\50478349-4445-409f-952a-b1a7adecbcc7-11, , [a2f974807b0e39fddb8f2a5aeb18fc04],
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\50478349-4445-409f-952a-b1a7adecbcc7-5, , [e9b2975dbacfcc6af179543031d240c0],
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\50478349-4445-409f-952a-b1a7adecbcc7-5_user, , [5942e50f0386360028428cf8f31025db],
PUP.Optional.Sanbreel.A, C:\Windows\System32\drivers\{02fbc4ae-66cc-4219-94c9-1ee6e15d3402}w64.sys, , [e4b78c682960181e1bf9b62ba95b9b65],
PUP.Optional.Sanbreel.A, C:\Windows\System32\drivers\{073f2b9a-2357-4614-b174-3fc1afffe941}w64.sys, , [0f8cd61eec9dc0763cd80ed3dc287987],
PUP.Optional.Sanbreel.A, C:\Windows\System32\drivers\{122141c3-e1a4-4af5-b3d7-650743f49ec0}w64.sys, , [c4d7896b9dec13232de7c9188e769c64],
PUP.Optional.Sanbreel.A, C:\Windows\System32\drivers\{59399874-7437-4b6e-9c62-82162c4f6112}w64.sys, , [4457698b197093a30014796826defe02],
PUP.Optional.Sanbreel.A, C:\Windows\System32\drivers\{abbda6e4-1fdf-45e9-8feb-7ffcdf19a253}w64.sys, , [1784a25226634beb47cd37aacb39d927],
PUP.Optional.Sanbreel.A, C:\Windows\System32\drivers\{fc8decf5-c269-4b18-87f1-c395dfcbd88f}w64.sys, , [1388f7fd86030d290f057d645ea645bb],
PUP.Optional.CrossRider.T, C:\Windows\Tasks\50478349-4445-409f-952a-b1a7adecbcc7-1.job, , [cfccfff54049d066f9f531b0e71df10f],
PUP.Optional.CrossRider.T, C:\Windows\Tasks\50478349-4445-409f-952a-b1a7adecbcc7-11.job, , [9efd14e01e6be551dd11b42dee1608f8],
PUP.Optional.CrossRider.T, C:\Windows\Tasks\50478349-4445-409f-952a-b1a7adecbcc7-5.job, , [7823d321acdd5fd77f6f964b23e1d927],
PUP.Optional.CrossRider.T, C:\Windows\Tasks\50478349-4445-409f-952a-b1a7adecbcc7-5_user.job, , [82197183167348ee6a84ac35a85cee12],
PUP.Optional.GlobalUpdate.A, C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job, , [5249e90bc6c3d85e4fb50cd63fc546ba],
PUP.Optional.GlobalUpdate.A, C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineCore, , [9902a84c8bfe8fa755b026bc2ed6e51b],
PUP.Optional.GlobalUpdate.A, C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job, , [bcdf8b692069be7871952ab8a75d4fb1],
PUP.Optional.GlobalUpdate.A, C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineUA, , [2c6f995b92f7082ef31413cf1de73ec2],
PUP.Optional.WebsSearches.A, C:\Users\David\AppData\Roaming\webssearches\conf.ini, , [2b7006ee62279e98d419a88edc279b65],
PUP.Optional.WebsSearches.A, C:\Users\David\AppData\Roaming\webssearches\MessageBox.xml, , [2b7006ee62279e98d419a88edc279b65],
PUP.Optional.WebsSearches.A, C:\Users\David\AppData\Roaming\webssearches\uninstallDlg2.xml, , [2b7006ee62279e98d419a88edc279b65],
PUP.Optional.WebsSearches.A, C:\Users\David\AppData\Roaming\webssearches\uninstalled2.ini, , [2b7006ee62279e98d419a88edc279b65],
PUP.Optional.WebsSearches.A, C:\Users\David\AppData\Roaming\webssearches\UninstallManager.exe, , [2b7006ee62279e98d419a88edc279b65],
PUP.Optional.WebsSearches.A, C:\Users\David\AppData\Roaming\webssearches\images\bg.png, , [2b7006ee62279e98d419a88edc279b65],
PUP.Optional.WebsSearches.A, C:\Users\David\AppData\Roaming\webssearches\images\bg1.png, , [2b7006ee62279e98d419a88edc279b65],
PUP.Optional.WebsSearches.A, C:\Users\David\AppData\Roaming\webssearches\images\bk_shadow.png, , [2b7006ee62279e98d419a88edc279b65],
PUP.Optional.WebsSearches.A, C:\Users\David\AppData\Roaming\webssearches\images\button.png, , [2b7006ee62279e98d419a88edc279b65],
PUP.Optional.WebsSearches.A, C:\Users\David\AppData\Roaming\webssearches\images\button1.png, , [2b7006ee62279e98d419a88edc279b65],
PUP.Optional.WebsSearches.A, C:\Users\David\AppData\Roaming\webssearches\images\checkbox.png, , [2b7006ee62279e98d419a88edc279b65],
PUP.Optional.WebsSearches.A, C:\Users\David\AppData\Roaming\webssearches\images\checkbox_select.png, , [2b7006ee62279e98d419a88edc279b65],
PUP.Optional.WebsSearches.A, C:\Users\David\AppData\Roaming\webssearches\images\checked.png, , [2b7006ee62279e98d419a88edc279b65],
PUP.Optional.WebsSearches.A, C:\Users\David\AppData\Roaming\webssearches\images\close.png, , [2b7006ee62279e98d419a88edc279b65],
PUP.Optional.WebsSearches.A, C:\Users\David\AppData\Roaming\webssearches\images\loading_bg.png, , [2b7006ee62279e98d419a88edc279b65],
PUP.Optional.WebsSearches.A, C:\Users\David\AppData\Roaming\webssearches\images\loading_light.png, , [2b7006ee62279e98d419a88edc279b65],
PUP.Optional.WebsSearches.A, C:\Users\David\AppData\Roaming\webssearches\images\min.png, , [2b7006ee62279e98d419a88edc279b65],
PUP.Optional.WebsSearches.A, C:\Users\David\AppData\Roaming\webssearches\images\scrollbar.bmp, , [2b7006ee62279e98d419a88edc279b65],
PUP.Optional.WebsSearches.A, C:\Users\David\AppData\Roaming\webssearches\images\Thumbs.db, , [2b7006ee62279e98d419a88edc279b65],
PUP.Optional.WebsSearches.A, C:\Users\David\AppData\Roaming\webssearches\images\unchecked.png, , [2b7006ee62279e98d419a88edc279b65],
PUP.Optional.WebsSearches.A, C:\Users\David\AppData\Roaming\webssearches\images\code\code1.jpg, , [2b7006ee62279e98d419a88edc279b65],
PUP.Optional.WebsSearches.A, C:\Users\David\AppData\Roaming\webssearches\images\code\code2.jpg, , [2b7006ee62279e98d419a88edc279b65],
PUP.Optional.WebsSearches.A, C:\Users\David\AppData\Roaming\webssearches\images\code\code3.jpg, , [2b7006ee62279e98d419a88edc279b65],
PUP.Optional.WebsSearches.A, C:\Users\David\AppData\Roaming\webssearches\images\code\code4.jpg, , [2b7006ee62279e98d419a88edc279b65],
PUP.Optional.WebsSearches.A, C:\Users\David\AppData\Roaming\webssearches\images\code\code5.jpg, , [2b7006ee62279e98d419a88edc279b65],
PUP.Optional.WebsSearches.A, C:\Users\David\AppData\Roaming\webssearches\images\code\code6.jpg, , [2b7006ee62279e98d419a88edc279b65],
PUP.Optional.WebsSearches.A, C:\Users\David\AppData\Roaming\webssearches\images\code\Thumbs.db, , [2b7006ee62279e98d419a88edc279b65],
PUP.Optional.WPM.A, C:\ProgramData\WindowsMangerProtect\update\conf, , [603b688ca6e31c1a092f1c2c43c0af51],
PUP.Optional.SystemSpeedup, C:\Users\David\AppData\Roaming\systweak\ssd\SSDPTstub.exe, , [0596fcf81b6e72c430a92622da2947b9],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe, , [9902995b5e2bd0669179c585b54ed729],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\GoogleCrashHandler.exe, , [9902995b5e2bd0669179c585b54ed729],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\GoogleUpdate.exe, , [9902995b5e2bd0669179c585b54ed729],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\GoogleUpdateBroker.exe, , [9902995b5e2bd0669179c585b54ed729],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\GoogleUpdateHelper.msi, , [9902995b5e2bd0669179c585b54ed729],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\GoogleUpdateOnDemand.exe, , [9902995b5e2bd0669179c585b54ed729],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\goopdate.dll, , [9902995b5e2bd0669179c585b54ed729],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\goopdateres_en.dll, , [9902995b5e2bd0669179c585b54ed729],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll, , [9902995b5e2bd0669179c585b54ed729],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\psmachine.dll, , [9902995b5e2bd0669179c585b54ed729],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\psuser.dll, , [9902995b5e2bd0669179c585b54ed729],
PUP.Optional.MultiPlug.A, C:\ProgramData\PriceLess\fvRBhBgsXuO7aNc.dat, , [1b801cd8e3a6e3536edb93c208fb49b7],
PUP.Optional.MultiPlug.A, C:\ProgramData\PriceLess\RQihdEnY5UJsqwY.dat, , [1b801cd8e3a6e3536edb93c208fb49b7],
PUP.Optional.MultiPlug.A, C:\ProgramData\PriceLess\RQihdEnY5UJsqwY.exe, , [1b801cd8e3a6e3536edb93c208fb49b7],
PUP.Optional.MultiPlug.A, C:\Program Files (x86)\PriceLess\jI3F1TLcPtsm92.dat, , [1388da1a47427fb764e6b89d5ba8c739],
PUP.Optional.MultiPlug.A, C:\Program Files (x86)\PriceLess\jI3F1TLcPtsm92.tlb, , [1388da1a47427fb764e6b89d5ba8c739],
PUP.Optional.CrossRider.A, C:\Program Files (x86)\HDQ-1.2cV21.12\50478349-4445-409f-952a-b1a7adecbcc7.crx, , [f2a921d31d6c4de9927b2539bb48d22e],
PUP.Optional.CrossRider.A, C:\Program Files (x86)\HDQ-1.2cV21.12\background.html, , [f2a921d31d6c4de9927b2539bb48d22e],
PUP.Optional.CrossRider.A, C:\Program Files (x86)\HDQ-1.2cV21.12\HDQ-1.2cV21.12.ico, , [f2a921d31d6c4de9927b2539bb48d22e],
PUP.Optional.CrossRider.A, C:\Program Files (x86)\HDQ-1.2cV21.12\Uninstall.exe, , [f2a921d31d6c4de9927b2539bb48d22e],
PUP.Optional.SmileysWeLove.A, C:\Users\David\AppData\Roaming\smileyswelove\channel.json, , [9902da1ab9d0300687f953125fa43dc3],
PUP.Optional.SmileyWeLove.A, C:\Users\David\AppData\LocalLow\smileyswelove\channel.json, , [108bf5ffbbce1620ade1acb951b2cf31],
PUP.Optional.IHProtectUpDate.A, C:\ProgramData\IHProtectUpDate\update\conf, , [bfdc6a8ac2c7d066dcbf3e274eb502fe],
PUP.Optional.WebsSearches.A, C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Preferences, Good: (), Bad: ( "startup_urls": [ "http://istart.webssearches.com/?type=hp&ts=1420646744&from=scl&uid=ST1000DM003-1ER162_Z4Y3QE5GXXXXZ4Y3QE5G" ],), ,[0398db19c5c45fd71320972ff60fea16]
PUP.Optional.WebsSearches.A, C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Preferences, Good: (), Bad: ( "homepage": "http://istart.webssearches.com/?type=hp&ts=1420646744&from=scl&uid=ST1000DM003-1ER162_Z4Y3QE5GXXXXZ4Y3QE5G",), ,[7c1f4ca87a0f7abcd85c497d808541bf]

Physical Sectors: 0
(No malicious items detected)


(end)

poraďte prosím, ty reklamy jsou k nevydržení :/

Spusť znovu AdwCleaner (u Windows Vista či Windows7, klikni na AdwCleaner pravým a vyber „Spustit jako správce“
klikni na „Prohledat-Scan“, po prohledání klikni na „ Vymazat-Clean“

Program provede opravu, po automatickém restartu neukáže log (C:\AdwCleaner [S?].txt) , jeho obsah sem celý vlož.

Stáhni si Junkware Removal Tool by Thisisu

na svojí plochu.

Deaktivuj si svůj antivirový program. Pravým tl. myši klikni na JRT.exe a vyber „spustit jako správce“. Pro pokračování budeš vyzván ke stisknutí jakékoliv klávesy. Na nějakou klikni.
Začne skenování programu. Skenování může trvat dloho , podle množství nákaz. Po ukončení skenu se objeví log (JRT.txt) , který se uloží na ploše.
Zkopíruj sem prosím celý jeho obsah.

. spusť znovu MbAM a dej Skenovat nyní
- po proběhnutí programu se ti objeví hláška tak klikni na „Vše do karantény(smazat vybrané)“ a na „Exportovat záznam“ a vyber „textový soubor“ , soubor nějak pojmenuj a někam ho ulož. Zkopíruj se celý obsah toho logu.

Stáhni si RogueKiller by Adlice Software
32bit.:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
64bit.:
http://www.sur-la-toile.com/RogueKiller ... lerX64.exe
na svojí plochu.
- Zavři všechny ostatní programy a prohlížeče.
- Pro OS Vista a win7 spusť program RogueKiller.exe jako správce , u XP poklepáním.
- počkej až skončí Prescan -vyhledávání škodlivých procesů.
- Zkontroluj , zda máš zaškrtnuto:
Kontrola MBR
Kontrola Faked
Antirootkit
-Potom klikni na „Prohledat“.
- Program skenuje procesy PC. Po proskenování klikni na „Zpráva“celý obsah logu sem zkopíruj.
Pokud je program blokován , zkus ho spustit několikrát. Pokud dále program nepůjde spustit a pracovat, přejmenuj ho na winlogon.exe.

AdwCleaner:

# AdwCleaner v4.106 - Report created 08/01/2015 at 17:05:07
# Updated 21/12/2014 by Xplode

# Database : 2015-01-03.1 [Live]
# Operating System : Windows 8.1 Pro (64 bits)
# Username : David - DAVID
# Running from : C:\Users\David\Desktop\adwcleaner_4.106.exe
# Option : Clean

***** [ Services ] *****

Service Deleted : be0fb33b
[#] Service Deleted : globalUpdate
[#] Service Deleted : globalUpdatem
Service Deleted : WindowsMangerProtect
Service Deleted : IHProtect Service
Service Deleted : {02fbc4ae-66cc-4219-94c9-1ee6e15d3402}w64
Service Deleted : {073f2b9a-2357-4614-b174-3fc1afffe941}w64
Service Deleted : {122141c3-e1a4-4af5-b3d7-650743f49ec0}w64
Service Deleted : {59399874-7437-4b6e-9c62-82162c4f6112}w64
Service Deleted : {abbda6e4-1fdf-45e9-8feb-7ffcdf19a253}w64
Service Deleted : {fc8decf5-c269-4b18-87f1-c395dfcbd88f}w64

***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\Tbccint
Folder Deleted : C:\ProgramData\WindowsMangerProtect
Folder Deleted : C:\ProgramData\PriceLess
Folder Deleted : C:\ProgramData\IHProtectUpDate
Folder Deleted : C:\ProgramData\33759a3d79cb5282
Folder Deleted : C:\Program Files (x86)\globalUpdate
Folder Deleted : C:\Program Files (x86)\supporter
Folder Deleted : C:\Program Files (x86)\Tbccint
Folder Deleted : C:\Program Files (x86)\PriceLess
Folder Deleted : C:\Program Files (x86)\Zrychleni Pocitace
Folder Deleted : C:\Program Files (x86)\STab
Folder Deleted : C:\Users\David\AppData\Local\Chromatic Browser
Folder Deleted : C:\Users\David\AppData\Local\globalUpdate
Folder Deleted : C:\Users\David\AppData\Local\torch
Folder Deleted : C:\Users\David\AppData\LocalLow\PriceGong
Folder Deleted : C:\Users\David\AppData\LocalLow\Tbccint
Folder Deleted : C:\Users\David\AppData\Roaming\Solvusoft
Folder Deleted : C:\Users\David\AppData\Roaming\Systweak
Folder Deleted : C:\Users\David\AppData\Roaming\webssearches
Folder Deleted : C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhbnjbbcnalphnliphggnfgjldpmnnj
Folder Deleted : C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndbbddccfchpldajafklmbocobhfijdm
Folder Deleted : C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\nncdgoobkfbibaidgbofabghifbelkna
Folder Deleted : C:\Users\David\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bbglkiiiofelplniblholffbhhjmdhhi
Folder Deleted : C:\Users\David\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\afpabppcibfahafilhkbbgfnlncppdnc
Folder Deleted : C:\Users\David\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ndbbddccfchpldajafklmbocobhfijdm
Folder Deleted : C:\Users\David\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\nncdgoobkfbibaidgbofabghifbelkna
Folder Deleted : C:\Users\David\AppData\Roaming\Opera Software\Opera Stable\Extensions\afpabppcibfahafilhkbbgfnlncppdnc
File Deleted : C:\END
File Deleted : C:\WINDOWS\System32\roboot64.exe
File Deleted : C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage
File Deleted : C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage-journal
File Deleted : C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_www.superfish.com_0.localstorage
File Deleted : C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_www.superfish.com_0.localstorage-journal
File Deleted : C:\Users\David\AppData\Roaming\Opera Software\Opera Stable\Local Storage\hxxp_www.superfish.com_0.localstorage
File Deleted : C:\Users\David\AppData\Roaming\Opera Software\Opera Stable\Local Storage\hxxp_www.superfish.com_0.localstorage-journal
File Deleted : C:\Users\David\AppData\Roaming\Opera Software\Opera Stable\Local Storage\hxxps_www.superfish.com_0.localstorage
File Deleted : C:\Users\David\AppData\Roaming\Opera Software\Opera Stable\Local Storage\hxxps_www.superfish.com_0.localstorage-journal
File Deleted : C:\Users\David\AppData\Roaming\Opera Software\Opera Stable\Local Storage\hxxp_static.williamhill.com_0.localstorage
File Deleted : C:\Users\David\AppData\Roaming\Opera Software\Opera Stable\Local Storage\hxxp_static.williamhill.com_0.localstorage-journal

***** [ Scheduled Tasks ] *****

Task Deleted : globalUpdateUpdateTaskMachineCore
Task Deleted : globalUpdateUpdateTaskMachineUA
Task Deleted : LaunchSignup
Task Deleted : 50478349-4445-409f-952a-b1a7adecbcc7-1
Task Deleted : 50478349-4445-409f-952a-b1a7adecbcc7-11
Task Deleted : 50478349-4445-409f-952a-b1a7adecbcc7-5
Task Deleted : 50478349-4445-409f-952a-b1a7adecbcc7-5_user

***** [ Shortcuts ] *****

Shortcut Disinfected : C:\Users\Public\Desktop\Google Chrome.lnk
Shortcut Disinfected : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk
Shortcut Disinfected : C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
Shortcut Disinfected : C:\Users\David\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
Shortcut Disinfected : C:\Users\David\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
Shortcut Disinfected : C:\Users\David\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk
Shortcut Disinfected : C:\Users\David\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Internet Explorer.lnk

***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\fjbbjfdilbioabojmcplalojlmdngbjl
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\superfish.com
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\www.superfish.com
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.OneClickCtrl.10
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.Update3WebControl.4
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass.1
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass.1
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc.1.0
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=10
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=4
Key Deleted : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WindowsMangerProtect
Key Deleted : HKLM\SOFTWARE\Classes\Pcf638fea_0ac3_4af7_b3db_9c5a5be756f8_.Pcf638fea_0ac3_4af7_b3db_9c5a5be756f8_
Key Deleted : HKLM\SOFTWARE\Classes\Pcf638fea_0ac3_4af7_b3db_9c5a5be756f8_.Pcf638fea_0ac3_4af7_b3db_9c5a5be756f8_.9
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{02A96331-0CA6-40E2-A87D-C224601985EB}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3B5702BA-7F4C-4D1A-B026-1E9A01D43978}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{69F256DF-BA98-45E9-86EA-FC3CFECF9D30}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6E87FC94-9866-49B9-8E93-5736D6DE3DD7}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{7E49F793-B3CD-4BF7-8419-B34B8BD30E61}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{834469E3-CA2B-4F21-A5CA-4F6F4DBCDE87}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{8529FAA3-5BFD-43C1-AB35-B53C4B96C6E5}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{ADBC39BE-3D20-4333-8D99-E91EB1B62474}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CFC47BB5-5FB5-4AD0-8427-6AA04334A3FC}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E06CA7F5-BA34-4FF6-8D24-B1BDC594D91F}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E0ADB535-D7B5-4D8B-B15D-578BDD20D76A}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F6421EE5-A5BE-4D31-81D5-C16B7BF48E4C}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FD8E81D0-F5FE-4CB1-9AEA-1E163D2BAB78}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{459DD0F7-0D55-D3DC-67BC-E6BE37E9D762}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{cf638fea-0ac3-4af7-b3db-9c5a5be756f8}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110611901163}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220622902263}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550655905563}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660666906663}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{A2D733A7-73B0-4C6B-B0C7-06A432950B66}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440644904463}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{cf638fea-0ac3-4af7-b3db-9c5a5be756f8}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110611901163}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{cf638fea-0ac3-4af7-b3db-9c5a5be756f8}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110611901163}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{cf638fea-0ac3-4af7-b3db-9c5a5be756f8}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{11111111-1111-1111-1111-110611901163}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{cf638fea-0ac3-4af7-b3db-9c5a5be756f8}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{cf638fea-0ac3-4af7-b3db-9c5a5be756f8}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110611901163}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220622902263}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550655905563}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660666906663}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{cf638fea-0ac3-4af7-b3db-9c5a5be756f8}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110611901163}
Key Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Data Restored : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command
Data Restored : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Google Chrome\shell\open\command
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Key Deleted : HKCU\Software\GlobalUpdate
Key Deleted : HKCU\Software\InstalledBrowserExtensions
Key Deleted : HKCU\Software\Popajar
Key Deleted : HKCU\Software\RegisteredApplicationsEx
Key Deleted : HKCU\Software\SmileysWeLove
Key Deleted : HKCU\Software\systweak
Key Deleted : HKCU\Software\AppDataLow\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}
Key Deleted : HKCU\Software\AppDataLow\Software\Crossrider
Key Deleted : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Key Deleted : HKLM\SOFTWARE\GlobalUpdate
Key Deleted : HKLM\SOFTWARE\InstalledBrowserExtensions
Key Deleted : HKLM\SOFTWARE\SupDp
Key Deleted : HKLM\SOFTWARE\SupTab
Key Deleted : HKLM\SOFTWARE\supWindowsMangerProtect
Key Deleted : HKLM\SOFTWARE\systweak
Key Deleted : HKLM\SOFTWARE\webssearchesSoftware
Key Deleted : HKLM\SOFTWARE\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\webssearches uninstall
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{75F9BF4A-AF67-A478-A37B-31D73186D3F3}
Key Deleted : [x64] HKLM\SOFTWARE\InstalledBrowserExtensions

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17416

Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]
Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
Setting Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Setting Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Setting Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
Setting Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]

-\\ Google Chrome v39.0.2171.95

[C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://isearch.omiga-plus.com/web/?type ... 4Y3QE5G&q={searchTerms}
[C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://isearch.omiga-plus.com/web/?type ... 4Y3QE5G&q={searchTerms}
[C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://isearch.omigaweb/?type=dspp&q={searchTerms}
[C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://isearch.omigaweb/?type=dspp&q={searchTerms}
[C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://istart.webssearches.com/web/?typ ... 4Y3QE5G&q={searchTerms}
[C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://istart.webssearches.com/web/?typ ... 4Y3QE5G&q={searchTerms}
[C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\preferences] - Deleted [Extension] : idhbnjbbcnalphnliphggnfgjldpmnnj
[C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\preferences] - Deleted [Extension] : ndbbddccfchpldajafklmbocobhfijdm
[C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\preferences] - Deleted [Extension] : nncdgoobkfbibaidgbofabghifbelkna
[C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\preferences] - Deleted [Homepage] : hxxp://istart.webssearches.com/?type=hp ... XXZ4Y3QE5G
[C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\preferences] - Deleted [Startup_URLs] : hxxp://istart.webssearches.com/?type=hp ... XXZ4Y3QE5G
[C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\preferences] - Deleted [Homepage] : hxxp://istart.webssearches.com/?type=hp ... XXZ4Y3QE5G
[C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\preferences] - Deleted [Startup_URLs] : hxxp://istart.webssearches.com/?type=hp ... XXZ4Y3QE5G

-\\ Comodo Dragon v

[C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://isearch.omiga-plus.com/web/?type ... 4Y3QE5G&q={searchTerms}
[C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://isearch.omiga-plus.com/web/?type ... 4Y3QE5G&q={searchTerms}
[C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://isearch.omigaweb/?type=dspp&q={searchTerms}
[C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://isearch.omigaweb/?type=dspp&q={searchTerms}
[C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://istart.webssearches.com/web/?typ ... 4Y3QE5G&q={searchTerms}
[C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://istart.webssearches.com/web/?typ ... 4Y3QE5G&q={searchTerms}

-\\ Opera v26.0.1656.60

[C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://isearch.omiga-plus.com/web/?type ... 4Y3QE5G&q={searchTerms}
[C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://isearch.omiga-plus.com/web/?type ... 4Y3QE5G&q={searchTerms}
[C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://isearch.omigaweb/?type=dspp&q={searchTerms}
[C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://isearch.omigaweb/?type=dspp&q={searchTerms}
[C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://istart.webssearches.com/web/?typ ... 4Y3QE5G&q={searchTerms}
[C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://istart.webssearches.com/web/?typ ... 4Y3QE5G&q={searchTerms}
[C:\Users\David\AppData\Roaming\Opera Software\Opera Stable\preferences] - Deleted [Extension] : aaipilfmheplbcghignccoiiebekkdhe
[C:\Users\David\AppData\Roaming\Opera Software\Opera Stable\preferences] - Deleted [Extension] : elchiiiejkobdbblfejjkbphbddgmljf
[C:\Users\David\AppData\Roaming\Opera Software\Opera Stable\preferences] - Deleted [Extension] : ffhfoagmjcnkolneahbpagjcjjaeofbg
[C:\Users\David\AppData\Roaming\Opera Software\Opera Stable\preferences] - Deleted [Extension] : hjghiofiijcepdnocbgefbdlbckjfheg
[C:\Users\David\AppData\Roaming\Opera Software\Opera Stable\preferences] - Deleted [Extension] : iklgpchfbohgmghgfagediakopecfmbm
[C:\Users\David\AppData\Roaming\Opera Software\Opera Stable\preferences] - Deleted [Extension] : kfgaibfbmkjgmimhbbaikfnpkkjkpoan
[C:\Users\David\AppData\Roaming\Opera Software\Opera Stable\preferences] - Deleted [Extension] : lmnbobhffedhdhfpcjkjphcfpeeiocdn
[C:\Users\David\AppData\Roaming\Opera Software\Opera Stable\preferences] - Deleted [Extension] : kjpifmjicccpbkfjdkehimhgklfkbanh
[C:\Users\David\AppData\Roaming\Opera Software\Opera Stable\preferences] - Deleted [Extension] : hoidflomjnnnbiemmkjdjkkialmhbago
[C:\Users\David\AppData\Roaming\Opera Software\Opera Stable\preferences] - Deleted [Extension] : edjkooiccbgjhlpfhkknkjhfpmjkmelk
[C:\Users\David\AppData\Roaming\Opera Software\Opera Stable\preferences] - Deleted [Extension] : ekpibplnnkfdcafdpoekhoffegcajene
[C:\Users\David\AppData\Roaming\Opera Software\Opera Stable\preferences] - Deleted [Extension] : ipljmghelflfikejmgkmlmpjmehfjodc
[C:\Users\David\AppData\Roaming\Opera Software\Opera Stable\preferences] - Deleted [Extension] : nlgdemkdapolikbjimjajpmonpbpmipk
[C:\Users\David\AppData\Roaming\Opera Software\Opera Stable\preferences] - Deleted [Extension] : ejddjnilmdncjilbfjgameihlklfpohp
[C:\Users\David\AppData\Roaming\Opera Software\Opera Stable\preferences] - Deleted [Extension] : eagomcfjiefffhpaejnlpjccikpipdoe
[C:\Users\David\AppData\Roaming\Opera Software\Opera Stable\preferences] - Deleted [Extension] : afpabppcibfahafilhkbbgfnlncppdnc
[C:\Users\David\AppData\Roaming\Opera Software\Opera Stable\preferences] - Deleted [Extension] : aonedlchkbicmhepimiahfalheedjgbh

*************************

AdwCleaner[R0].txt - [24548 octets] - [07/01/2015 21:06:40]
AdwCleaner[R1].txt - [23342 octets] - [08/01/2015 17:03:54]
AdwCleaner[S0].txt - [24215 octets] - [08/01/2015 17:05:07]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [24276 octets] ##########

:3 stačilo skenovat v AdwCleaner a pak to co to našlo, tak odstranit a už mi to reklamy neháže, takže už další kroky dělat nemusím ? i tak vám moc děkuju ! :)

Ale jen je udělej , nebo se Ti to vrátí zpět.

ok

Tak pokračuj , co jsem radil.