Prosím o kontrolu logu

jkmaxfli · Příspěvekod **jkmaxfli** » 26 bře 2015 08:52

Prosím o kontrolu logu.
Už si nevím rady, ale mám stále problém se spouštěním PC z režimu spánku, kdy se PC restartuje 3x za sebou a poté teprve naběhne systém a cca 5 minut hrabe jeden z disků.
Díky.
.................................................

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:07:47, on 25.3.2015
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.17256)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe
C:\Program Files (x86)\FinalWire\AIDA64 Extreme Edition\aida64.exe
C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerHIDReceiver.exe
C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerQuick.exe
C:\Program Files (x86)\FastStone Capture\FSCapture.exe
C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe
C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe
C:\Program Files (x86)\PowerISO\PWRISOVM.EXE
C:\Program Files (x86)\ROCCAT\Tyon Mouse\TyonMonitor.exe
C:\Program Files (x86)\ROCCAT\Tyon Mouse\TyonMonitorW.exe
C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe
C:\Windows\SysWOW64\ASGT.exe
C:\Program Files (x86)\ASUS\AAHM\1.00.20\aaHMSvc.exe
C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe
C:\Program Files (x86)\ASUS\AsusFanControlService\1.00.25\AsusFanControlService.exe
C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerRemote.exe
C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerScheduleService.exe
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
C:\Program Files (x86)\ASUS\GPU Tweak\GPUTweak.exe
C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
C:\Program Files (x86)\uTorrent\uTorrent.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_17_0_0_134.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_17_0_0_134.exe
C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll
O2 - BHO: Logitech SetPoint - {AF949550-9094-4807-95EC-D1C317803333} - C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office15\URLREDIR.DLL
O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MICROS~1\Office15\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll
O4 - HKLM\..\Run: [USB3MON] "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
O4 - HKLM\..\Run: [TrueImageMonitor.exe] "C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe"
O4 - HKLM\..\Run: [AcronisTibMounterMonitor] C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe
O4 - HKLM\..\Run: [PWRISOVM.EXE] C:\Program Files (x86)\PowerISO\PWRISOVM.EXE
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [RoccatTyon] "C:\Program Files (x86)\ROCCAT\Tyon Mouse\TyonMonitor.EXE"
O4 - HKLM\..\Run: [RoccatTyonW] "C:\Program Files (x86)\ROCCAT\Tyon Mouse\TyonMonitorW.EXE"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: FastStone Capture.lnk = C:\Program Files (x86)\FastStone Capture\FSCapture.exe
O4 - Global Startup: AVer HID Receiver.lnk = C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerHIDReceiver.exe
O4 - Global Startup: AVerQuick.lnk = C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerQuick.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office15\EXCEL.EXE/3000
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL
O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL
O23 - Service: Služba Acronis Scheduler2 (AcrSch2Svc) - Acronis - C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
O23 - Service: Acronis Nonstop Backup Service (afcdpsrv) - Acronis - C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: ASUS Com Service (asComSvc) - Unknown owner - C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe
O23 - Service: ASGT - Unknown owner - C:\Windows\SysWOW64\ASGT.exe
O23 - Service: ASUS HM Com Service (asHmComSvc) - ASUSTeK Computer Inc. - C:\Program Files (x86)\ASUS\AAHM\1.00.20\aaHMSvc.exe
O23 - Service: ASUS System Control Service (AsSysCtrlService) - ASUSTeK Computer Inc. - C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe
O23 - Service: AsusFanControlService - ASUSTeK Computer Inc. - C:\Program Files (x86)\ASUS\AsusFanControlService\1.00.25\AsusFanControlService.exe
O23 - Service: AVerRemote - AVerMedia - C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerRemote.exe
O23 - Service: AVerScheduleService - Unknown owner - C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerScheduleService.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: Intel(R) Integrated Clock Controller Service - Intel(R) ICCS (ICCS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe
O23 - Service: Leawo common service. (Leawo_service) - Unknown owner - C:\Program Files (x86)\Common Files\Appkeys\yytool64.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: O&O Defrag - O&O Software GmbH - C:\Program Files\OO Software\Defrag\oodag.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Acronis Sync Agent Service (syncagentsrv) - Acronis - C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)

--
End of file - 11900 bytes

Reklama

Příspěvekod **jaro3** » 26 bře 2015 09:37

Platform: Windows 7 (WinNT 6.00.3504)
především si doinstaluju SP1!

Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected. Poté klikni na Main (hlavní stránku ) a klikni na Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranění historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit dočasné soubory Windows, vysypat koš atd.

- Pokud používáš jen Google Chrome , tak ATF nemusíš použít.

Stáhni si TFC
Otevři soubor a zavři všechny ostatní okna, Klikni na Start k zahájení procesu. Program by neměl trvat dlouho.
Poté by se měl PC restartovat, pokud ne , proveď sám.

Stáhni AdwCleaner (by Xplode)
http://www.bleepingcomputer.com/download/adwcleaner/

Ulož si ho na svojí plochu
Ukonči všechny programy , okna a prohlížeče
Spusť program poklepáním a klikni na „Prohledat-Scan“
Po skenu se objeví log ( jinak je uložen systémovem disku jako AdwCleaner[R?].txt), jeho obsah sem celý vlož.

Stáhni si Malwarebytes' Anti-Malware
- Při instalaci odeber zatržítko u „Povolit bezplatnou zkušební verzi Malwarebytes' Anti-Malware Premium“
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Aktualizace Malwarebytes' Anti-Malware a Spustit aplikaci Malwarebytes' Anti-Malware, pokud jo tak klikni na tlačítko konec
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a klikni na Skenovat nyní a
- po proběhnutí programu se ti objeví hláška vpravo dole tak klikni na b] Kopírovat do schránky [/b]a a vlož sem celý log.

- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).

Pokud budou problémy , spusť v nouz. režimu.

jkmaxfli · Příspěvekod **jkmaxfli** » 26 bře 2015 18:02

# AdwCleaner v4.113 - Logfile created 26/03/2015 at 17:50:21
# Updated 22/03/2015 by Xplode
# Database : 2015-03-23.1 [Server]
# Operating system : Windows 7 Ultimate (x64)
# Username : jkmaxfli - jkmaxflipc
# Running from : C:\Users\jkmaxfli\Desktop\adwcleaner_4.113.exe
# Option : Scan

***** [ Services ] *****

Service Found : 1a34a8e0

***** [ Files / Folders ] *****

File Found : C:\Users\jkmaxfli\AppData\LocalLow\SkwConfig.bin
File Found : C:\Users\jkmaxfli\AppData\Roaming\LiveSupport.exe_log.txt
File Found : C:\Users\jkmaxfli\AppData\Roaming\Mozilla\Firefox\Profiles\0zx64ihw.default-1360574067865\invalidprefs.js
File Found : C:\Users\jkmaxfli\AppData\Roaming\Mozilla\Firefox\Profiles\0zx64ihw.default-1360574067865\searchplugins\buenosearch.xml
File Found : C:\Users\jkmaxfli\AppData\Roaming\Mozilla\Firefox\Profiles\0zx64ihw.default-1360574067865\searchplugins\smartbar.xml
File Found : C:\Users\jkmaxfli\AppData\Roaming\Mozilla\Firefox\Profiles\0zx64ihw.default-1360574067865\searchplugins\WebSearch.xml
File Found : C:\Users\jkmaxfli\AppData\Roaming\Mozilla\Firefox\Profiles\0zx64ihw.default-1360574067865\user.js
File Found : C:\Users\jkmaxfli\AppData\Roaming\regsvr32.exe_log.txt
File Found : C:\Windows\System32\roboot64.exe
Folder Found : C:\ProgramData\511a7c8c68d5fb67
Folder Found : C:\ProgramData\NextCoup
Folder Found : C:\ProgramData\NexTCouP
Folder Found : C:\ProgramData\SNT
Folder Found : C:\Users\jkmaxfli\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hpmcdiephomdkjdpgbbjhnlebeofkdcd
Folder Found : C:\Users\jkmaxfli\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\kigpmgkoelepakabiliblldhdpnidcod
Folder Found : C:\Users\jkmaxfli\AppData\Local\DriverToolkit
Folder Found : C:\Users\jkmaxfli\AppData\Local\genienext
Folder Found : C:\Users\jkmaxfli\AppData\Local\globalUpdate
Folder Found : C:\Users\jkmaxfli\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hpmcdiephomdkjdpgbbjhnlebeofkdcd
Folder Found : C:\Users\jkmaxfli\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kigpmgkoelepakabiliblldhdpnidcod
Folder Found : C:\Users\jkmaxfli\AppData\Local\Microsoft\Silverlight\OutOfBrowser\Speedchecker.PCSpeedUp
Folder Found : C:\Users\jkmaxfli\AppData\Local\Mobogenie
Folder Found : C:\Users\jkmaxfli\AppData\Local\PackageAware
Folder Found : C:\Users\jkmaxfli\AppData\Local\torch
Folder Found : C:\Users\jkmaxfli\AppData\Roaming\DriverCure
Folder Found : C:\Users\jkmaxfli\AppData\Roaming\etranslator
Folder Found : C:\Users\jkmaxfli\AppData\Roaming\EZDownloader
Folder Found : C:\Users\jkmaxfli\AppData\Roaming\Optimizer Pro
Folder Found : C:\Users\jkmaxfli\AppData\Roaming\ParetoLogic
Folder Found : C:\Users\jkmaxfli\AppData\Roaming\PerformerSoft
Folder Found : C:\Users\jkmaxfli\AppData\Roaming\Solvusoft
Folder Found : C:\Users\jkmaxfli\AppData\Roaming\YourFileDownloader

***** [ Scheduled tasks ] *****

***** [ Shortcuts ] *****

***** [ Registry ] *****

Key Found : HKCU\Software\AppDataLow\{4A0F38A9-FE55-4B89-B73F-E60FDC0F72E9}
Key Found : HKCU\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}
Key Found : HKCU\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}
Key Found : HKCU\Software\AppDataLow\Software\Crossrider
Key Found : HKCU\Software\BI
Key Found : HKCU\Software\DriverToolkit
Key Found : HKCU\Software\etranslator
Key Found : HKCU\Software\GlobalUpdate
Key Found : HKCU\Software\IM
Key Found : HKCU\Software\ImInstaller
Key Found : HKCU\Software\InstalledBrowserExtensions
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{CB4EEB02-825E-466E-B20A-879427DD5546}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\MailRuUpdater
Key Found : HKCU\Software\Optimizer Pro
Key Found : HKCU\Software\ParetoLogic
Key Found : HKCU\Software\RegisteredApplicationsEx
Key Found : HKCU\Software\Softonic
Key Found : HKCU\Software\Speedchecker Limited
Key Found : [x64] HKCU\Software\BI
Key Found : [x64] HKCU\Software\DriverToolkit
Key Found : [x64] HKCU\Software\etranslator
Key Found : [x64] HKCU\Software\GlobalUpdate
Key Found : [x64] HKCU\Software\IM
Key Found : [x64] HKCU\Software\ImInstaller
Key Found : [x64] HKCU\Software\InstalledBrowserExtensions
Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}
Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}
Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{CB4EEB02-825E-466E-B20A-879427DD5546}
Key Found : [x64] HKCU\Software\Optimizer Pro
Key Found : [x64] HKCU\Software\ParetoLogic
Key Found : [x64] HKCU\Software\RegisteredApplicationsEx
Key Found : [x64] HKCU\Software\Softonic
Key Found : [x64] HKCU\Software\Speedchecker Limited
Key Found : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Key Found : HKLM\SOFTWARE\{4A0F38A9-FE55-4B89-B73F-E60FDC0F72E9}
Key Found : HKLM\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}
Key Found : HKLM\SOFTWARE\{77D46E27-0E41-4478-87A6-AABE6FBCF252}
Key Found : HKLM\SOFTWARE\Classes\AppID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Key Found : HKLM\SOFTWARE\Classes\AppID\{51BEE30D-EEC8-4BA3-930B-298B8E759EB1}
Key Found : HKLM\SOFTWARE\Classes\AppID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Key Found : HKLM\SOFTWARE\Classes\AppID\DownloadProxy.EXE
Key Found : HKLM\SOFTWARE\Classes\CLSID\{02A96331-0CA6-40E2-A87D-C224601985EB}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{059EACC2-1ABE-49E8-928D-DC8BD355B7A9}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{3B5702BA-7F4C-4D1A-B026-1E9A01D43978}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{69F256DF-BA98-45E9-86EA-FC3CFECF9D30}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{6E87FC94-9866-49B9-8E93-5736D6DE3DD7}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{6E993643-8FBC-44FE-BC85-D318495C4D96}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{70DE12EA-79F4-46BC-9812-86DB50A2FD64}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{7E49F793-B3CD-4BF7-8419-B34B8BD30E61}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{834469E3-CA2B-4F21-A5CA-4F6F4DBCDE87}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{8529FAA3-5BFD-43C1-AB35-B53C4B96C6E5}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{ADBC39BE-3D20-4333-8D99-E91EB1B62474}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{AF175732-0D59-716D-F757-9F1492D808D9}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{B89F5C49-51DB-4974-AB5A-E25901AA339C}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{caa3dd4e-4d92-4d1a-9602-62eb5fba7cee}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{CFC47BB5-5FB5-4AD0-8427-6AA04334A3FC}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{E06CA7F5-BA34-4FF6-8D24-B1BDC594D91F}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{E0ADB535-D7B5-4D8B-B15D-578BDD20D76A}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{E9B5B0D2-D08A-49FC-8B5C-159B60BAA268}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{F6421EE5-A5BE-4D31-81D5-C16B7BF48E4C}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{FD8E81D0-F5FE-4CB1-9AEA-1E163D2BAB78}
Key Found : HKLM\SOFTWARE\Classes\CrossriderApp0042822.BHO
Key Found : HKLM\SOFTWARE\Classes\CrossriderApp0042822.BHO.1
Key Found : HKLM\SOFTWARE\Classes\CrossriderApp0042822.Sandbox
Key Found : HKLM\SOFTWARE\Classes\CrossriderApp0042822.Sandbox.1
Key Found : HKLM\SOFTWARE\Classes\globalUpdate.OneClickCtrl.10
Key Found : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine
Key Found : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine.1.0
Key Found : HKLM\SOFTWARE\Classes\globalUpdate.Update3WebControl.4
Key Found : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync
Key Found : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync.1.0
Key Found : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass
Key Found : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass.1
Key Found : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass
Key Found : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass.1
Key Found : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine
Key Found : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine.1.0
Key Found : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine
Key Found : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine.1.0
Key Found : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback
Key Found : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback.1.0
Key Found : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc
Key Found : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc.1.0
Key Found : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher
Key Found : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher.1.0
Key Found : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService
Key Found : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService.1.0
Key Found : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine
Key Found : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine.1.0
Key Found : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback
Key Found : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback.1.0
Key Found : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc
Key Found : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc.1.0
Key Found : HKLM\SOFTWARE\Classes\Interface\{31E3BC75-2A09-4CFF-9C92-8D0ED8D1DC0F}
Key Found : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550455285522}
Key Found : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660466286622}
Key Found : HKLM\SOFTWARE\Classes\Interface\{6B3732AA-F6D4-4F16-9E22-49EDC52C9514}
Key Found : HKLM\SOFTWARE\Classes\Interface\{C66F0B7A-BD67-4982-AF71-C6CA6E7F016F}
Key Found : HKLM\SOFTWARE\Classes\Interface\{E7270EC6-0113-4A78-B610-E501D0A9E48E}
Key Found : HKLM\SOFTWARE\Classes\Interface\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC}
Key Found : HKLM\SOFTWARE\Classes\Pcaa3dd4e_4d92_4d1a_9602_62eb5fba7cee_.Pcaa3dd4e_4d92_4d1a_9602_62eb5fba7cee_
Key Found : HKLM\SOFTWARE\Classes\Pcaa3dd4e_4d92_4d1a_9602_62eb5fba7cee_.Pcaa3dd4e_4d92_4d1a_9602_62eb5fba7cee_.9
Key Found : HKLM\SOFTWARE\Classes\PCSU.Registry
Key Found : HKLM\SOFTWARE\Classes\PCSU.SysUtils
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{2105FE20-DEBD-4084-A306-61C5DA001CCA}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{E2343056-CC08-46AC-B898-BFC7ACF4E755}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{E2343056-CC08-46AC-B898-BFC7ACF4E755}
Key Found : HKLM\SOFTWARE\Driver-Soft
Key Found : HKLM\SOFTWARE\GlobalUpdate
Key Found : HKLM\SOFTWARE\InstalledBrowserExtensions
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{caa3dd4e-4d92-4d1a-9602-62eb5fba7cee}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3D0F43D9-C1D7-733C-01F8-4A3001BF8CC3}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{AD11DADE-C597-45D9-D8C5-1D2EB0B89613}
Key Found : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=10
Key Found : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=4
Key Found : HKLM\SOFTWARE\ParetoLogic
Key Found : HKLM\SOFTWARE\Speedchecker Limited
Key Found : HKLM\SOFTWARE\YourFileDownloader
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{31E3BC75-2A09-4CFF-9C92-8D0ED8D1DC0F}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550455285522}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660466286622}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{C66F0B7A-BD67-4982-AF71-C6CA6E7F016F}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{E7270EC6-0113-4A78-B610-E501D0A9E48E}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC}
Key Found : [x64] HKLM\SOFTWARE\InstalledBrowserExtensions
Key Found : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Optimizer Pro_is1
Key Found : [x64] HKLM\SOFTWARE\Speedchecker Limited

***** [ Web browsers ] *****

-\\ Internet Explorer v8.0.7600.17256

-\\ Mozilla Firefox v35.0.1 (x86 cs)

[0zx64ihw.default-1360574067865] - Line Found : user_pref("browser.search.defaultenginename,S", "WebSearch");
[0zx64ihw.default-1360574067865] - Line Found : user_pref("browser.search.defaulturl", "hxxp://websearch.exitingsearch.info/?pid=924&r=2014/03/10&hid=11410409913330149846&lg=EN&cc=CZ&unqvl=50&l=1&q=");
[0zx64ihw.default-1360574067865] - Line Found : user_pref("browser.search.order.1", "WebSearch");
[0zx64ihw.default-1360574067865] - Line Found : user_pref("browser.search.order.1,S", "WebSearch");
[0zx64ihw.default-1360574067865] - Line Found : user_pref("browser.search.selectedEngine,S", "WebSearch");
[0zx64ihw.default-1360574067865] - Line Found : user_pref("extensions.7QAF.scode", "(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"txtlnkusaolp00000800\")>-1||url.indexOf(\"sumoro[...]
[0zx64ihw.default-1360574067865] - Line Found : user_pref("extensions.Hyvd3x.scode", "(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"txtlnkusaolp00000800\")>-1||url.indexOf(\"sumo[...]
[0zx64ihw.default-1360574067865] - Line Found : user_pref("extensions.MdG5Ai.scode", "(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"txtlnkusaolp00000800\")>-1||url.indexOf(\"sumo[...]
[0zx64ihw.default-1360574067865] - Line Found : user_pref("extensions._OgjBVb.scode", "(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"txtlnkusaolp00000800\")>-1||url.indexOf(\"sum[...]
[0zx64ihw.default-1360574067865] - Line Found : user_pref("extensions._Umev59.scode", "(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"txtlnkusaolp00000800\")>-1||url.indexOf(\"sum[...]
[0zx64ihw.default-1360574067865] - Line Found : user_pref("extensions.bcM.scode", "(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"txtlnkusaolp00000800\")>-1||url.indexOf(\"sumorob[...]
[0zx64ihw.default-1360574067865] - Line Found : user_pref("extensions.epGHuFbXzceu.scode", "(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"txtlnkusaolp00000800\")>-1||url.indexOf([...]
[0zx64ihw.default-1360574067865] - Line Found : user_pref("extensions.incredibar.actvtyRptTime", "1360269565638");
[0zx64ihw.default-1360574067865] - Line Found : user_pref("extensions.incredibar.admin", false);
[0zx64ihw.default-1360574067865] - Line Found : user_pref("extensions.incredibar.aflt", "orgnl");
[0zx64ihw.default-1360574067865] - Line Found : user_pref("extensions.incredibar.afterInstallRpt", "sent");
[0zx64ihw.default-1360574067865] - Line Found : user_pref("extensions.incredibar.cntry", "CZ");
[0zx64ihw.default-1360574067865] - Line Found : user_pref("extensions.incredibar.dfltLng", "EN");
[0zx64ihw.default-1360574067865] - Line Found : user_pref("extensions.incredibar.dfltSrch", false);
[0zx64ihw.default-1360574067865] - Line Found : user_pref("extensions.incredibar.dfltlng", "EN");
[0zx64ihw.default-1360574067865] - Line Found : user_pref("extensions.incredibar.dfltsrch", "false");
[0zx64ihw.default-1360574067865] - Line Found : user_pref("extensions.incredibar.did", "10643");
[0zx64ihw.default-1360574067865] - Line Found : user_pref("extensions.incredibar.envrmnt", "production");
[0zx64ihw.default-1360574067865] - Line Found : user_pref("extensions.incredibar.excTlbr", false);
[0zx64ihw.default-1360574067865] - Line Found : user_pref("extensions.incredibar.hdrMd5", "F742F7BA4C1D8CD520C29C604F563AAA");
[0zx64ihw.default-1360574067865] - Line Found : user_pref("extensions.incredibar.hmpg", false);
[0zx64ihw.default-1360574067865] - Line Found : user_pref("extensions.incredibar.hrdid", "88971f29000000000000002100db28d9");
[0zx64ihw.default-1360574067865] - Line Found : user_pref("extensions.incredibar.id", "88971f29000000000000002100db28d9");
[0zx64ihw.default-1360574067865] - Line Found : user_pref("extensions.incredibar.installerproductid", "26");
[0zx64ihw.default-1360574067865] - Line Found : user_pref("extensions.incredibar.instlDay", "15725");
[0zx64ihw.default-1360574067865] - Line Found : user_pref("extensions.incredibar.instlRef", "");
[0zx64ihw.default-1360574067865] - Line Found : user_pref("extensions.incredibar.instlday", "15725");
[0zx64ihw.default-1360574067865] - Line Found : user_pref("extensions.incredibar.instlref", "");
[0zx64ihw.default-1360574067865] - Line Found : user_pref("extensions.incredibar.isDcmntCmplt", true);
[0zx64ihw.default-1360574067865] - Line Found : user_pref("extensions.incredibar.isdcmntcmplt", "false");
[0zx64ihw.default-1360574067865] - Line Found : user_pref("extensions.incredibar.keywordurl", "");
[0zx64ihw.default-1360574067865] - Line Found : user_pref("extensions.incredibar.lastVrsnTs", "1.5.11.1416:34:16");
[0zx64ihw.default-1360574067865] - Line Found : user_pref("extensions.incredibar.mntrvrsn", "1.2.0");
[0zx64ihw.default-1360574067865] - Line Found : user_pref("extensions.incredibar.newTab", false);
[0zx64ihw.default-1360574067865] - Line Found : user_pref("extensions.incredibar.newtab", "false");
[0zx64ihw.default-1360574067865] - Line Found : user_pref("extensions.incredibar.newtaburl", "");
[0zx64ihw.default-1360574067865] - Line Found : user_pref("extensions.incredibar.noFFXTlbr", false);
[0zx64ihw.default-1360574067865] - Line Found : user_pref("extensions.incredibar.ppd", "1");
[0zx64ihw.default-1360574067865] - Line Found : user_pref("extensions.incredibar.prdct", "incredibar");
[0zx64ihw.default-1360574067865] - Line Found : user_pref("extensions.incredibar.productid", "26");
[0zx64ihw.default-1360574067865] - Line Found : user_pref("extensions.incredibar.prtnrId", "Incredibar");
[0zx64ihw.default-1360574067865] - Line Found : user_pref("extensions.incredibar.prtnrid", "Incredibar");
[0zx64ihw.default-1360574067865] - Line Found : user_pref("extensions.incredibar.sg", "none");
[0zx64ihw.default-1360574067865] - Line Found : user_pref("extensions.incredibar.smplGrp", "none");
[0zx64ihw.default-1360574067865] - Line Found : user_pref("extensions.incredibar.smplgrp", "none");
[0zx64ihw.default-1360574067865] - Line Found : user_pref("extensions.incredibar.srch", "");
[0zx64ihw.default-1360574067865] - Line Found : user_pref("extensions.incredibar.srchprvdr", "");
[0zx64ihw.default-1360574067865] - Line Found : user_pref("extensions.incredibar.tlbrId", "base");
[0zx64ihw.default-1360574067865] - Line Found : user_pref("extensions.incredibar.tlbrSrchUrl", "hxxp://mystart.Incredibar.com/?a=6R8RUERTkg&loc=IB_TB&i=26&search=");
[0zx64ihw.default-1360574067865] - Line Found : user_pref("extensions.incredibar.tlbrid", "base");
[0zx64ihw.default-1360574067865] - Line Found : user_pref("extensions.incredibar.tlbrsrchurl", "hxxp://mystart.Incredibar.com/?a=6R8RUERTkg&loc=IB_TB&i=26&search=");
[0zx64ihw.default-1360574067865] - Line Found : user_pref("extensions.incredibar.upn2", "6R8RUERTkg");
[0zx64ihw.default-1360574067865] - Line Found : user_pref("extensions.incredibar.upn2n", "92825780110252508");
[0zx64ihw.default-1360574067865] - Line Found : user_pref("extensions.incredibar.vrsn", "1.5.11.14");
[0zx64ihw.default-1360574067865] - Line Found : user_pref("extensions.incredibar.vrsnTs", "1.5.11.1416:34:16");
[0zx64ihw.default-1360574067865] - Line Found : user_pref("extensions.incredibar.vrsni", "1.5.11.14");
[0zx64ihw.default-1360574067865] - Line Found : user_pref("extensions.incredibar.vrsnts", "1.5.11.1416:34:16");
[0zx64ihw.default-1360574067865] - Line Found : user_pref("extensions.incredibar_i.aflt", "orgnl");
[0zx64ihw.default-1360574067865] - Line Found : user_pref("extensions.incredibar_i.dfltLng", "");
[0zx64ihw.default-1360574067865] - Line Found : user_pref("extensions.incredibar_i.did", "10643");
[0zx64ihw.default-1360574067865] - Line Found : user_pref("extensions.incredibar_i.excTlbr", false);
[0zx64ihw.default-1360574067865] - Line Found : user_pref("extensions.incredibar_i.id", "88971f29000000000000002100db28d9");
[0zx64ihw.default-1360574067865] - Line Found : user_pref("extensions.incredibar_i.installerproductid", "26");
[0zx64ihw.default-1360574067865] - Line Found : user_pref("extensions.incredibar_i.instlDay", "15725");
[0zx64ihw.default-1360574067865] - Line Found : user_pref("extensions.incredibar_i.instlRef", "");
[0zx64ihw.default-1360574067865] - Line Found : user_pref("extensions.incredibar_i.ms_url_id", "");
[0zx64ihw.default-1360574067865] - Line Found : user_pref("extensions.incredibar_i.newTab", false);
[0zx64ihw.default-1360574067865] - Line Found : user_pref("extensions.incredibar_i.ppd", "1");
[0zx64ihw.default-1360574067865] - Line Found : user_pref("extensions.incredibar_i.prdct", "incredibar");
[0zx64ihw.default-1360574067865] - Line Found : user_pref("extensions.incredibar_i.productid", "26");
[0zx64ihw.default-1360574067865] - Line Found : user_pref("extensions.incredibar_i.prtnrId", "Incredibar");
[0zx64ihw.default-1360574067865] - Line Found : user_pref("extensions.incredibar_i.smplGrp", "none");
[0zx64ihw.default-1360574067865] - Line Found : user_pref("extensions.incredibar_i.tlbrId", "base");
[0zx64ihw.default-1360574067865] - Line Found : user_pref("extensions.incredibar_i.tlbrSrchUrl", "hxxp://mystart.Incredibar.com/?a=6R8RUERTkg&loc=IB_TB&i=26&search=");
[0zx64ihw.default-1360574067865] - Line Found : user_pref("extensions.incredibar_i.upn2", "6R8RUERTkg");
[0zx64ihw.default-1360574067865] - Line Found : user_pref("extensions.incredibar_i.upn2n", "92825780110252508");
[0zx64ihw.default-1360574067865] - Line Found : user_pref("extensions.incredibar_i.vrsn", "1.5.11.14");
[0zx64ihw.default-1360574067865] - Line Found : user_pref("extensions.incredibar_i.vrsnTs", "1.5.11.1416:34:16");
[0zx64ihw.default-1360574067865] - Line Found : user_pref("extensions.incredibar_i.vrsni", "1.5.11.14");
[0zx64ihw.default-1360574067865] - Line Found : user_pref("extensions.jHrVGoI0aZsA.scode", "(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"txtlnkusaolp00000800\")>-1||url.indexOf([...]
[0zx64ihw.default-1360574067865] - Line Found : user_pref("keyword.URL", "hxxp://websearch.exitingsearch.info/?pid=924&r=2014/03/10&hid=11410409913330149846&lg=EN&cc=CZ&unqvl=50&l=1&q=");

-\\ Comodo Dragon v

-\\ Chrome Canary v

*************************

AdwCleaner[R0].txt - [24730 bytes] - [26/03/2015 17:46:47]

jkmaxfli · Příspěvekod **jkmaxfli** » 26 bře 2015 18:18

Malwarebytes Anti-Malware
www.malwarebytes.org

Datum skenování: 26.3.2015
Čas skenování: 18:05:36
Protokol: bbbbb.txt
Správce: Ano

Verze: 2.01.4.1018
Databáze malwaru: v2015.03.26.05
Databáze rootkitů: v2015.02.25.01
Licence: Bezplatná verze
Ochrana proti malwaru: Vypnuto
Ochrana proti škodlivým webovým stránkám: Vypnuto
Ochrana programu: Vypnuto

OS: Windows 7
CPU: x64
Souborový systém: NTFS
Uživatel: jkmaxfli

Typ skenu: Sken hrozeb
Výsledek: Dokončeno
Prohledaných objektů: 397249
Uplynulý čas: 5 min, 49 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Vypnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto

Procesy: 0
(Nenalezeny žádné škodlivé položky)

Moduly: 0
(Nenalezeny žádné škodlivé položky)

Klíče registru: 26
PUP.Optional.Babylon.A, HKU\S-1-5-21-1418575231-3307983708-1122877094-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}, , [56c7b694503a46f03a6b81a8b94a16ea],
PUP.Optional.Multiplug, HKU\S-1-5-21-1418575231-3307983708-1122877094-1000_Classes\INTERFACE\{3B3F3AAD-FB97-49FF-BFEE-D22869AC4326}, , [819ce961206a5bdbd9b046e243c08977],
PUP.Optional.Multiplug, HKU\S-1-5-21-1418575231-3307983708-1122877094-1000_Classes\TypeLib\{157B1AA6-3E5C-404A-9118-C1D91F537040}, , [07163515cebcf640dcad69bf6d966d93],
PUP.Optional.SpeedChecker.A, HKLM\SOFTWARE\Speedchecker Limited, , [1effee5cd3b7dc5aaa9dd9ee40c37d83],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0042822.BHO, , [a37a66e484067abc68d428b710f302fe],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0042822.BHO.1, , [b9642327acde8ea8dc60c916dd261ee2],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0042822.Sandbox, , [a97480ca4446fb3bd16bce1151b2f808],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0042822.Sandbox.1, , [ad701e2c0981a5911a22429d28db7888],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\23586, , [59c49dadbfcb90a67801cb30966d0ff1],
PUP.Optional.ShopAndUp.A, HKLM\SOFTWARE\WOW6432NODE\Shop_and _Up_1.2, , [a9749fabe4a62e08601e2ec2af54b24e],
PUP.Optional.SpeedChecker.A, HKLM\SOFTWARE\WOW6432NODE\Speedchecker Limited, , [67b63515b3d7a591b7905f6859aa33cd],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CrossriderApp0042822.BHO, , [e4399ab051390f277dbf9a459271b749],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CrossriderApp0042822.BHO.1, , [1706df6b4c3efc3ab3893ea107fc758b],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CrossriderApp0042822.Sandbox, , [ae6ff753bccef83e3903c41b659eab55],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CrossriderApp0042822.Sandbox.1, , [031a1238cdbdaa8ceb51db04dd26f10f],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\GLOBALUPDATE\UPDATE, , [1409dd6d4644d3636f6b528ee32036ca],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\INSTALLEDBROWSEREXTENSIONS\23586, , [a47988c21773261054252fcc07fc45bb],
PUP.Optional.FastSearchings, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}, , [41dcc486e9a1b87e5c39fc429a6bf907],
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLAPLUGINS\@staging.google.com/globalUpdate Update;version=10, , [908d7cce4f3bc2749f4acb74848104fc],
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLAPLUGINS\@staging.google.com/globalUpdate Update;version=4, , [1706bb8ff09a1b1b9258ee51bf46a55b],
PUP.Optional.ShopAndUp.A, HKU\S-1-5-18\SOFTWARE\APPDATALOW\SOFTWARE\Shop_and _Up_1.2, , [b06dc585d5b55fd7344c39b743c06b95],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1418575231-3307983708-1122877094-1000\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, , [f7268cbeb9d1ff378d022a076e9735cb],
PUP.Optional.ShopAndUp.A, HKU\S-1-5-21-1418575231-3307983708-1122877094-1000\SOFTWARE\APPDATALOW\SOFTWARE\Shop_and _Up_1.2, , [cc5160ea5e2c1620eb95ce22a261eb15],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1418575231-3307983708-1122877094-1000\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\23586, , [2df0a5a5d0baa690aaab3c99f2118977],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1418575231-3307983708-1122877094-1000\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\Winportal, , [0e0fdc6e1377ec4a539d10e97d861ae6],
PUP.Optional.WebSearchInfo, HKU\S-1-5-21-1418575231-3307983708-1122877094-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}, , [bf5e7ccee2a869cd96e705265ca9f010],

Hodnoty registru: 2
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\GLOBALUPDATE\UPDATE|path, C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe, , [1409dd6d4644d3636f6b528ee32036ca]
PUP.Optional.WebSearchInfo, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {BB74DE59-BC4C-4172-9AC4-73315F71CFFE}, , [e637af9b107a73c31f9691af6a9b4cb4]

Data registru: 0
(Nenalezeny žádné škodlivé položky)

Složky: 3
PUP.Optional.MultiPlug.A, C:\ProgramData\NexTCouP, , [51cc4ffb6228cb6b98fa5444659efe02],
PUP.Optional.EzDownloader.A, C:\Users\jkmaxfli\AppData\Roaming\EZDownloader, , [011c5af0a0ea93a3fea4aefc8e75cd33],
PUP.Optional.EzDownloader.A, C:\Users\jkmaxfli\AppData\Roaming\EZDownloader\Errors, , [011c5af0a0ea93a3fea4aefc8e75cd33],

Soubory: 69
PUP.Optional.Somoto.A, C:\Users\jkmaxfli\AppData\Local\Application Data\Bundled software uninstaller\biclient.exe, , [e23bbc8ed7b3a393eb95f351936e51af],
PUP.Optional.NextLive.A, C:\Users\jkmaxfli\AppData\Local\genienext\nengine.dll, , [120b64e61e6cd264c150dca503fe7789],
PUP.Optional.BuenoSearch.A, C:\Users\jkmaxfli\AppData\Roaming\Mozilla\Firefox\Profiles\0zx64ihw.default-1360574067865\searchplugins\buenosearch.xml, , [38e566e40585b77f04239a1cfe05a25e],
PUP.Optional.SmartBar.A, C:\Users\jkmaxfli\AppData\Roaming\Mozilla\Firefox\Profiles\0zx64ihw.default-1360574067865\searchplugins\smartbar.xml, , [32ebcf7b71197bbbb2ee699243c0c937],
PUP.Optional.WebSearch.A, C:\Users\jkmaxfli\AppData\Roaming\Mozilla\Firefox\Profiles\0zx64ihw.default-1360574067865\searchplugins\WebSearch.xml, , [54c996b4216951e5e80a689507fcde22],
PUP.Optional.Incredibar.A, C:\Users\jkmaxfli\AppData\Roaming\Mozilla\Firefox\Profiles\0zx64ihw.default-1360574067865\prefs.js, Dobré: (), Špatné: (user_pref("extensions.incredibar.actvtyRptTime", "1360269565638");), ,[8d9050fa3c4ebf77ee9bd75e11f540c0]
PUP.Optional.Incredibar.A, C:\Users\jkmaxfli\AppData\Roaming\Mozilla\Firefox\Profiles\0zx64ihw.default-1360574067865\prefs.js, Dobré: (), Špatné: (not edit this file.
*
* If you make changes ), ,[fe1f1f2bf298ea4cd7b2e05534d241bf]
PUP.Optional.Incredibar.A, C:\Users\jkmaxfli\AppData\Roaming\Mozilla\Firefox\Profiles\0zx64ihw.default-1360574067865\prefs.js, Dobré: (), Špatné: (ferences

/* Do not edit this file.
*
* If ), ,[a27b6fdbe9a1d363ee9bf441a36358a8]
PUP.Optional.Incredibar.A, C:\Users\jkmaxfli\AppData\Roaming\Mozilla\Firefox\Profiles\0zx64ihw.default-1360574067865\prefs.js, Dobré: (), Špatné: (erences

/* Do not edit this file.
*
* If you make ch), ,[4cd1da70711988aeb2d7fa3bef17ed13]
PUP.Optional.Incredibar.A, C:\Users\jkmaxfli\AppData\Roaming\Mozilla\Firefox\Profiles\0zx64ihw.default-1360574067865\prefs.js, Dobré: (), Špatné: (
/* Do not edit this file.
*
* If you make ), ,[f62765e56525fe38345586af53b3d22e]
PUP.Optional.Incredibar.A, C:\Users\jkmaxfli\AppData\Roaming\Mozilla\Firefox\Profiles\0zx64ihw.default-1360574067865\prefs.js, Dobré: (), Špatné: (eferences

/* Do not edit this file.
*
* If), ,[32eb53f7fc8e91a54148ce678383a55b]
PUP.Optional.Incredibar.A, C:\Users\jkmaxfli\AppData\Roaming\Mozilla\Firefox\Profiles\0zx64ihw.default-1360574067865\prefs.js, Dobré: (), Špatné: (erences

/* Do not edit this file.
*
* If you), ,[1904cc7e8efccc6acbbe6bcace38c13f]
PUP.Optional.Incredibar.A, C:\Users\jkmaxfli\AppData\Roaming\Mozilla\Firefox\Profiles\0zx64ihw.default-1360574067865\prefs.js, Dobré: (), Špatné: (ences

/* Do not edit this file.
*
* If you), ,[35e8a8a2c8c20234b1d834014abca759]
PUP.Optional.Incredibar.A, C:\Users\jkmaxfli\AppData\Roaming\Mozilla\Firefox\Profiles\0zx64ihw.default-1360574067865\prefs.js, Dobré: (), Špatné: (erences

/* Do not edit this file.
*
* If you m), ,[76a7c7830c7ef93d9aef6fc6a0665da3]
PUP.Optional.Incredibar.A, C:\Users\jkmaxfli\AppData\Roaming\Mozilla\Firefox\Profiles\0zx64ihw.default-1360574067865\prefs.js, Dobré: (), Špatné: (ces

/* Do not edit this file.
*
* If you ), ,[e33abf8b6624f93d1b6e70c507ff946c]
PUP.Optional.Incredibar.A, C:\Users\jkmaxfli\AppData\Roaming\Mozilla\Firefox\Profiles\0zx64ihw.default-1360574067865\prefs.js, Dobré: (), Špatné: (ferences

/* Do not edit this file.
*
* If you make), ,[68b578d276148fa70f7a69ccc343fc04]
PUP.Optional.Incredibar.A, C:\Users\jkmaxfli\AppData\Roaming\Mozilla\Firefox\Profiles\0zx64ihw.default-1360574067865\prefs.js, Dobré: (), Špatné: (

/* Do not edit this file.
*
* If you make c), ,[32eb2426a5e5b6803c4d61d4fb0b946c]
PUP.Optional.Incredibar.A, C:\Users\jkmaxfli\AppData\Roaming\Mozilla\Firefox\Profiles\0zx64ihw.default-1360574067865\prefs.js, Dobré: (), Špatné: (rences

/* Do not edit this file.
*
* If you make changes to this file w), ,[f22bb496d5b5d95d2f5adb5af80e56aa]
PUP.Optional.Incredibar.A, C:\Users\jkmaxfli\AppData\Roaming\Mozilla\Firefox\Profiles\0zx64ihw.default-1360574067865\prefs.js, Dobré: (), Špatné: (s file.
*
* If you make changes to this fil), ,[938ab6944c3ea4923f4a7fb67f878080]
PUP.Optional.Incredibar.A, C:\Users\jkmaxfli\AppData\Roaming\Mozilla\Firefox\Profiles\0zx64ihw.default-1360574067865\prefs.js, Dobré: (), Špatné: (eferences

/* Do not edit this file.
*
* If you make changes to this fi), ,[4bd215358a001224c3c61c19a95de41c]
PUP.Optional.Incredibar.A, C:\Users\jkmaxfli\AppData\Roaming\Mozilla\Firefox\Profiles\0zx64ihw.default-1360574067865\prefs.js, Dobré: (), Špatné: (is file.
*
* If you make changes to this file while the application is), ,[45d86fdb6327e6504d3ce55054b2cc34]
PUP.Optional.Incredibar.A, C:\Users\jkmaxfli\AppData\Roaming\Mozilla\Firefox\Profiles\0zx64ihw.default-1360574067865\prefs.js, Dobré: (), Špatné: ( this file.
*
* If you make changes to this file while t), ,[011c72d8abdfc076ccbd36ff6c9aed13]
PUP.Optional.Incredibar.A, C:\Users\jkmaxfli\AppData\Roaming\Mozilla\Firefox\Profiles\0zx64ihw.default-1360574067865\prefs.js, Dobré: (), Špatné: (/* Do not edit this file.
*
* If you make changes), ,[f627fb4f92f81521ddac2f06bc4a0ff1]
PUP.Optional.Incredibar.A, C:\Users\jkmaxfli\AppData\Roaming\Mozilla\Firefox\Profiles\0zx64ihw.default-1360574067865\prefs.js, Dobré: (), Špatné: (ferences

/* Do not edit this file.
*
* If you ), ,[d449da70404ab5815633e64f2ed8aa56]
PUP.Optional.Incredibar.A, C:\Users\jkmaxfli\AppData\Roaming\Mozilla\Firefox\Profiles\0zx64ihw.default-1360574067865\prefs.js, Dobré: (), Špatné: (ferences

/* Do not edit this file.
*
* If you m), ,[67b6b49683074ee8c6c337fe8f77eb15]
PUP.Optional.Incredibar.A, C:\Users\jkmaxfli\AppData\Roaming\Mozilla\Firefox\Profiles\0zx64ihw.default-1360574067865\prefs.js, Dobré: (), Špatné: (es

/* Do not edit this file.
*
* If you make chang), ,[a27bb2980783c6707d0cb0857a8ca55b]
PUP.Optional.Incredibar.A, C:\Users\jkmaxfli\AppData\Roaming\Mozilla\Firefox\Profiles\0zx64ihw.default-1360574067865\prefs.js, Dobré: (), Špatné: (rences

/* Do not edit this file.
*
* If you make changes to ), ,[c954e26819710d29daaf2312c4429a66]
PUP.Optional.Incredibar.A, C:\Users\jkmaxfli\AppData\Roaming\Mozilla\Firefox\Profiles\0zx64ihw.default-1360574067865\prefs.js, Dobré: (), Špatné: (ot edit this file.
*
* If you make changes to thi), ,[bf5ec783652568cef39671c4ba4c926e]
PUP.Optional.Incredibar.A, C:\Users\jkmaxfli\AppData\Roaming\Mozilla\Firefox\Profiles\0zx64ihw.default-1360574067865\prefs.js, Dobré: (), Špatné: (ces

/* Do not edit this file.
*
* If you m), ,[9c81183283078da90f7a231231d5e61a]
PUP.Optional.Incredibar.A, C:\Users\jkmaxfli\AppData\Roaming\Mozilla\Firefox\Profiles\0zx64ihw.default-1360574067865\prefs.js, Dobré: (), Špatné: (erences

/* Do not edit this file.
*
* If you ), ,[55c85eece2a8d0664c3d8aab35d154ac]
PUP.Optional.Incredibar.A, C:\Users\jkmaxfli\AppData\Roaming\Mozilla\Firefox\Profiles\0zx64ihw.default-1360574067865\prefs.js, Dobré: (), Špatné: (nces

/* Do not edit this file.
*
* If), ,[0d10b39728629b9b65242312b94d718f]
PUP.Optional.Incredibar.A, C:\Users\jkmaxfli\AppData\Roaming\Mozilla\Firefox\Profiles\0zx64ihw.default-1360574067865\prefs.js, Dobré: (), Špatné: ( Preferences

/* Do not edit this file.
*
* If yo), ,[f52874d6abdf30060f7a13222dd98779]
PUP.Optional.Incredibar.A, C:\Users\jkmaxfli\AppData\Roaming\Mozilla\Firefox\Profiles\0zx64ihw.default-1360574067865\prefs.js, Dobré: (), Špatné: (s

/* Do not edit this file.
*
* If you make ), ,[c35a0248f09abc7a2663c86de323c23e]
PUP.Optional.Incredibar.A, C:\Users\jkmaxfli\AppData\Roaming\Mozilla\Firefox\Profiles\0zx64ihw.default-1360574067865\prefs.js, Dobré: (), Špatné: (ences

/* Do not edit this file.
*
* If you make ch), ,[df3efd4d8dfd43f3682169cce81e6b95]
PUP.Optional.Incredibar.A, C:\Users\jkmaxfli\AppData\Roaming\Mozilla\Firefox\Profiles\0zx64ihw.default-1360574067865\prefs.js, Dobré: (), Špatné: (

/* Do not edit this file.
*
* If you make changes ), ,[fa230842e4a6b58111782c093fc718e8]
PUP.Optional.Incredibar.A, C:\Users\jkmaxfli\AppData\Roaming\Mozilla\Firefox\Profiles\0zx64ihw.default-1360574067865\prefs.js, Dobré: (), Špatné: (

/* Do not edit this file.
*
* If you ma), ,[2df06ae00684c3730d7cd461d03626da]
PUP.Optional.Incredibar.A, C:\Users\jkmaxfli\AppData\Roaming\Mozilla\Firefox\Profiles\0zx64ihw.default-1360574067865\prefs.js, Dobré: (), Špatné: (references

/* Do not edit this file.
*
* If ), ,[0e0fbd8de6a4ba7c5633a095bd49639d]
PUP.Optional.Incredibar.A, C:\Users\jkmaxfli\AppData\Roaming\Mozilla\Firefox\Profiles\0zx64ihw.default-1360574067865\prefs.js, Dobré: (), Špatné: (ences

/* Do not edit this file.
*
* If you m), ,[e13c78d2e5a50531dbaef540778f9f61]
PUP.Optional.Incredibar.A, C:\Users\jkmaxfli\AppData\Roaming\Mozilla\Firefox\Profiles\0zx64ihw.default-1360574067865\prefs.js, Dobré: (), Špatné: (ences

/* Do not edit this file.
*
* I), ,[110c81c93d4d87af97f29b9a6f9752ae]
PUP.Optional.Incredibar.A, C:\Users\jkmaxfli\AppData\Roaming\Mozilla\Firefox\Profiles\0zx64ihw.default-1360574067865\prefs.js, Dobré: (), Špatné: ( Preferences

/* Do not edit this file.
*
*), ,[4dd0b595aedc93a3a0e9c1748d79d729]
PUP.Optional.Incredibar.A, C:\Users\jkmaxfli\AppData\Roaming\Mozilla\Firefox\Profiles\0zx64ihw.default-1360574067865\prefs.js, Dobré: (), Špatné: (erences

/* Do not edit this file.
*
* If yo), ,[ef2ee5652a608caa6a1f2f0615f1956b]
PUP.Optional.Incredibar.A, C:\Users\jkmaxfli\AppData\Roaming\Mozilla\Firefox\Profiles\0zx64ihw.default-1360574067865\prefs.js, Dobré: (), Špatné: (rences

/* Do not edit this file.
*
* If you make changes to this file while the application is running,
* th), ,[6ab3e268aae0ca6c15743500dc2a7d83]
PUP.Optional.Incredibar.A, C:\Users\jkmaxfli\AppData\Roaming\Mozilla\Firefox\Profiles\0zx64ihw.default-1360574067865\prefs.js, Dobré: (), Špatné: (this file while the application is running,
* th), ,[5bc2f951107afe389beef441e323e41c]
PUP.Optional.Incredibar.A, C:\Users\jkmaxfli\AppData\Roaming\Mozilla\Firefox\Profiles\0zx64ihw.default-1360574067865\prefs.js, Dobré: (), Špatné: (this file while the application is running,
* the ch), ,[a479c08ab4d6251128613401bb4b5ca4]
PUP.Optional.Incredibar.A, C:\Users\jkmaxfli\AppData\Roaming\Mozilla\Firefox\Profiles\0zx64ihw.default-1360574067865\prefs.js, Dobré: (), Špatné: (es

/* Do not edit this file.
*
* If you make changes to), ,[6faea3a71476d95d563302332ed85ca4]
PUP.Optional.Incredibar.A, C:\Users\jkmaxfli\AppData\Roaming\Mozilla\Firefox\Profiles\0zx64ihw.default-1360574067865\prefs.js, Dobré: (), Špatné: ( Do not edit this file.
*
* If you make changes t), ,[2eef78d2d1b91125c7c2320315f19b65]
PUP.Optional.Incredibar.A, C:\Users\jkmaxfli\AppData\Roaming\Mozilla\Firefox\Profiles\0zx64ihw.default-1360574067865\prefs.js, Dobré: (), Špatné: (ces

/* Do not edit this file.
*
* If you make changes to), ,[46d79caec8c2fa3c00890134d72fcc34]
PUP.Optional.Incredibar.A, C:\Users\jkmaxfli\AppData\Roaming\Mozilla\Firefox\Profiles\0zx64ihw.default-1360574067865\prefs.js, Dobré: (), Špatné: (Do not edit this file.
*
* If you make changes to ), ,[b568a6a4573380b6cdbcc86d52b40df3]
PUP.Optional.Incredibar.A, C:\Users\jkmaxfli\AppData\Roaming\Mozilla\Firefox\Profiles\0zx64ihw.default-1360574067865\prefs.js, Dobré: (), Špatné: (es

/* Do not edit this file.
*
* If you make changes to ), ,[09143a10f89205310d7cac8923e355ab]
PUP.Optional.Incredibar.A, C:\Users\jkmaxfli\AppData\Roaming\Mozilla\Firefox\Profiles\0zx64ihw.default-1360574067865\prefs.js, Dobré: (), Špatné: (Do not edit this file.
*
* If you make changes ), ,[61bcef5b92f83afc99f09c99897da15f]
PUP.Optional.Incredibar.A, C:\Users\jkmaxfli\AppData\Roaming\Mozilla\Firefox\Profiles\0zx64ihw.default-1360574067865\prefs.js, Dobré: (), Špatné: (rences

/* Do not edit this file.
*
* If you m), ,[120b19318dfd290df19848edbc4a8c74]
PUP.Optional.Incredibar.A, C:\Users\jkmaxfli\AppData\Roaming\Mozilla\Firefox\Profiles\0zx64ihw.default-1360574067865\prefs.js, Dobré: (), Špatné: (nces

/* Do not edit this file.
*
* If you make changes to this file w), ,[db42e06ab8d20d298ffa082d65a1916f]
PUP.Optional.Incredibar.A, C:\Users\jkmaxfli\AppData\Roaming\Mozilla\Firefox\Profiles\0zx64ihw.default-1360574067865\prefs.js, Dobré: (), Špatné: (his file.
*
* If you make changes to this file while the a), ,[bb62c28866240c2af396e0554abcef11]
PUP.Optional.Incredibar.A, C:\Users\jkmaxfli\AppData\Roaming\Mozilla\Firefox\Profiles\0zx64ihw.default-1360574067865\prefs.js, Dobré: (), Špatné: ( Do not edit this file.
*
* If you make changes to ), ,[61bc4bff5139e74fb5d4bf764bbbca36]
PUP.Optional.Incredibar.A, C:\Users\jkmaxfli\AppData\Roaming\Mozilla\Firefox\Profiles\0zx64ihw.default-1360574067865\prefs.js, Dobré: (), Špatné: (s

/* Do not edit this file.
*
* If you make), ,[a6770941bcce54e2e0a97eb73bcb18e8]
PUP.Optional.Incredibar.A, C:\Users\jkmaxfli\AppData\Roaming\Mozilla\Firefox\Profiles\0zx64ihw.default-1360574067865\prefs.js, Dobré: (), Špatné: (rences

/* Do not edit this file.
*
* If you ), ,[d34a4efcc2c8d36390f9af8656b0e21e]
PUP.Optional.Incredibar.A, C:\Users\jkmaxfli\AppData\Roaming\Mozilla\Firefox\Profiles\0zx64ihw.default-1360574067865\prefs.js, Dobré: (), Špatné: (ences

/* Do not edit this file.
*
* If ), ,[67b699b12367999d8bfe50e5fe08c43c]
PUP.Optional.Incredibar.A, C:\Users\jkmaxfli\AppData\Roaming\Mozilla\Firefox\Profiles\0zx64ihw.default-1360574067865\prefs.js, Dobré: (), Špatné: (references

/* Do not edit this file.
*
* If you ma), ,[db42b7933a50290d0a7fe94c27df1ae6]
PUP.Optional.Incredibar.A, C:\Users\jkmaxfli\AppData\Roaming\Mozilla\Firefox\Profiles\0zx64ihw.default-1360574067865\prefs.js, Dobré: (), Špatné: (

/* Do not edit this file.
*
* If you make chan), ,[1c013911d1b9c86e3c4dd95c798d17e9]
PUP.Optional.Incredibar.A, C:\Users\jkmaxfli\AppData\Roaming\Mozilla\Firefox\Profiles\0zx64ihw.default-1360574067865\prefs.js, Dobré: (), Špatné: (ces

/* Do not edit this file.
*
* If you make change), ,[a776a5a50585f442761366cfd82e916f]
PUP.Optional.Incredibar.A, C:\Users\jkmaxfli\AppData\Roaming\Mozilla\Firefox\Profiles\0zx64ihw.default-1360574067865\prefs.js, Dobré: (), Špatné: (
/* Do not edit this file.
*
* If you make change), ,[c756dc6e3a5046f06e1b1d18f80e9b65]
PUP.Optional.Incredibar.A, C:\Users\jkmaxfli\AppData\Roaming\Mozilla\Firefox\Profiles\0zx64ihw.default-1360574067865\prefs.js, Dobré: (), Špatné: (ces

/* Do not edit this file.
*
* If you make), ,[c9541d2dc5c51125e4a595a0986e4bb5]
PUP.Optional.Incredibar.A, C:\Users\jkmaxfli\AppData\Roaming\Mozilla\Firefox\Profiles\0zx64ihw.default-1360574067865\prefs.js, Dobré: (), Špatné: (nces

/* Do not edit this file.
*
* If you make changes to this file while the application is running,
* the ch), ,[1ffea1a9f29862d4672256dff41238c8]
PUP.Optional.Incredibar.A, C:\Users\jkmaxfli\AppData\Roaming\Mozilla\Firefox\Profiles\0zx64ihw.default-1360574067865\prefs.js, Dobré: (), Špatné: (is file while the application is running,
* the change), ,[8b9221291d6d9a9ced9c062f9f67a45c]
PUP.Optional.Incredibar.A, C:\Users\jkmaxfli\AppData\Roaming\Mozilla\Firefox\Profiles\0zx64ihw.default-1360574067865\prefs.js, Dobré: (), Špatné: (

/* Do not edit this file.
*
* If you make changes to thi), ,[06172d1dccbeb383c8c191a4000612ee]
PUP.Optional.Incredibar.A, C:\Users\jkmaxfli\AppData\Roaming\Mozilla\Firefox\Profiles\0zx64ihw.default-1360574067865\prefs.js, Dobré: (), Špatné: (o not edit this file.
*
* If you make changes to th), ,[e5380c3e8ffb7fb791f8260f7a8ccc34]
PUP.Optional.Incredibar.A, C:\Users\jkmaxfli\AppData\Roaming\Mozilla\Firefox\Profiles\0zx64ihw.default-1360574067865\prefs.js, Dobré: (), Špatné: (s

/* Do not edit this file.
*
* If you make changes to thi), ,[d94454f6c5c5e155a0e95cd92ed8b24e]
PUP.Optional.Incredibar.A, C:\Users\jkmaxfli\AppData\Roaming\Mozilla\Firefox\Profiles\0zx64ihw.default-1360574067865\prefs.js, Dobré: (), Špatné: ( not edit this file.
*
* If you make changes to this), ,[6ab32c1e5e2c62d42465a5905aac7e82]
PUP.Optional.ExitingSearch.A, C:\Users\jkmaxfli\AppData\Roaming\Mozilla\Firefox\Profiles\0zx64ihw.default-1360574067865\prefs.js, Dobré: (), Špatné: (user_pref("keyword.URL", "http://websearch.exitingsearch.info/?pid=924&r=2014/03/10&hid=11410409913330149846&lg=EN&cc=CZ&unqvl=50&l=1&q=");), ,[47d6d872b4d6171fc73d300712f425db]

Fyzické sektory: 0
(Nenalezeny žádné škodlivé položky)

(end)

Příspěvekod **jaro3** » 27 bře 2015 09:51

Spusť znovu AdwCleaner (u Windows Vista či Windows7, klikni na AdwCleaner pravým a vyber „Spustit jako správce“
klikni na „Prohledat-Scan“, po prohledání klikni na „ Vymazat-Clean“

Program provede opravu, po automatickém restartu neukáže log (C:\AdwCleaner [S?].txt) , jeho obsah sem celý vlož.

Stáhni si Junkware Removal Tool by Thisisu

na svojí plochu.

Deaktivuj si svůj antivirový program. Pravým tl. myši klikni na JRT.exe a vyber „spustit jako správce“. Pro pokračování budeš vyzván ke stisknutí jakékoliv klávesy. Na nějakou klikni.
Začne skenování programu. Skenování může trvat dloho , podle množství nákaz. Po ukončení skenu se objeví log (JRT.txt) , který se uloží na ploše.
Zkopíruj sem prosím celý jeho obsah.

. spusť znovu MbAM a dej Skenovat nyní
- po proběhnutí programu se ti objeví hláška tak klikni na „Vše do karantény(smazat vybrané)“ a na „Exportovat záznam“ a vyber „textový soubor“ , soubor nějak pojmenuj a někam ho ulož. Zkopíruj se celý obsah toho logu.

Stáhni si RogueKiller by Adlice Software
32bit.:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
64bit.:
http://www.sur-la-toile.com/RogueKiller ... lerX64.exe
na svojí plochu.
- Zavři všechny ostatní programy a prohlížeče.
- Pro OS Vista a win7 spusť program RogueKiller.exe jako správce , u XP poklepáním.
- počkej až skončí Prescan -vyhledávání škodlivých procesů.
-Potom klikni na „Prohledat“.
- Program skenuje procesy PC. Po proskenování klikni na „Zpráva“celý obsah logu sem zkopíruj.
Pokud je program blokován , zkus ho spustit několikrát. Pokud dále program nepůjde spustit a pracovat, přejmenuj ho na winlogon.exe.

jkmaxfli · Příspěvekod **jkmaxfli** » 27 bře 2015 11:19

# AdwCleaner v4.113 - Logfile created 27/03/2015 at 11:13:22
# Updated 22/03/2015 by Xplode
# Database : 2015-03-26.1 [Server]
# Operating system : Windows 7 Ultimate (x64)
# Username : jkmaxfli - JKMAXFLI-PC
# Running from : D:\Stahování-Internet\adwcleaner_4.113.exe
# Option : Cleaning

***** [ Services ] *****

[#] Service Deleted : 1a34a8e0

***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\NextCoup
Folder Deleted : C:\ProgramData\SNT
Folder Deleted : C:\ProgramData\511a7c8c68d5fb67
Folder Deleted : C:\Users\jkmaxfli\AppData\Local\FreeFixer
Folder Deleted : C:\Users\jkmaxfli\AppData\Local\genienext
Folder Deleted : C:\Users\jkmaxfli\AppData\Local\globalUpdate
Folder Deleted : C:\Users\jkmaxfli\AppData\Local\Microsoft\Silverlight\OutOfBrowser\Speedchecker.PCSpeedUp
Folder Deleted : C:\Users\jkmaxfli\AppData\Local\Mobogenie
Folder Deleted : C:\Users\jkmaxfli\AppData\Local\PackageAware
Folder Deleted : C:\Users\jkmaxfli\AppData\Local\torch
Folder Deleted : C:\Users\jkmaxfli\AppData\Local\DriverToolkit
Folder Deleted : C:\Users\jkmaxfli\AppData\Roaming\DriverCure
Folder Deleted : C:\Users\jkmaxfli\AppData\Roaming\EZDownloader
Folder Deleted : C:\Users\jkmaxfli\AppData\Roaming\FreeFixer
Folder Deleted : C:\Users\jkmaxfli\AppData\Roaming\Optimizer Pro
Folder Deleted : C:\Users\jkmaxfli\AppData\Roaming\ParetoLogic
Folder Deleted : C:\Users\jkmaxfli\AppData\Roaming\PerformerSoft
Folder Deleted : C:\Users\jkmaxfli\AppData\Roaming\Solvusoft
Folder Deleted : C:\Users\jkmaxfli\AppData\Roaming\YourFileDownloader
Folder Deleted : C:\Users\jkmaxfli\AppData\Roaming\etranslator
Folder Deleted : C:\Users\jkmaxfli\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\kigpmgkoelepakabiliblldhdpnidcod
Folder Deleted : C:\Users\jkmaxfli\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hpmcdiephomdkjdpgbbjhnlebeofkdcd
Folder Deleted : C:\Users\jkmaxfli\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kigpmgkoelepakabiliblldhdpnidcod
Folder Deleted : C:\Users\jkmaxfli\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hpmcdiephomdkjdpgbbjhnlebeofkdcd
File Deleted : C:\Windows\System32\roboot64.exe
File Deleted : C:\Users\jkmaxfli\AppData\LocalLow\SkwConfig.bin
File Deleted : C:\Users\jkmaxfli\AppData\Roaming\LiveSupport.exe_log.txt
File Deleted : C:\Users\jkmaxfli\AppData\Roaming\regsvr32.exe_log.txt
File Deleted : C:\Users\jkmaxfli\AppData\Roaming\Mozilla\Firefox\Profiles\0zx64ihw.default-1360574067865\invalidprefs.js
File Deleted : C:\Users\jkmaxfli\AppData\Roaming\Mozilla\Firefox\Profiles\0zx64ihw.default-1360574067865\searchplugins\buenosearch.xml
File Deleted : C:\Users\jkmaxfli\AppData\Roaming\Mozilla\Firefox\Profiles\0zx64ihw.default-1360574067865\searchplugins\smartbar.xml
File Deleted : C:\Users\jkmaxfli\AppData\Roaming\Mozilla\Firefox\Profiles\0zx64ihw.default-1360574067865\searchplugins\WebSearch.xml
File Deleted : C:\Users\jkmaxfli\AppData\Roaming\Mozilla\Firefox\Profiles\0zx64ihw.default-1360574067865\user.js

***** [ Scheduled tasks ] *****

***** [ Shortcuts ] *****

***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.OneClickCtrl.10
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.Update3WebControl.4
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass.1
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass.1
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc.1.0
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=10
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=4
Key Deleted : HKLM\SOFTWARE\Classes\AppID\DownloadProxy.EXE
Key Deleted : HKLM\SOFTWARE\Classes\PCSU.Registry
Key Deleted : HKLM\SOFTWARE\Classes\PCSU.SysUtils
Key Deleted : HKLM\SOFTWARE\Classes\Pcaa3dd4e_4d92_4d1a_9602_62eb5fba7cee_.Pcaa3dd4e_4d92_4d1a_9602_62eb5fba7cee_
Key Deleted : HKLM\SOFTWARE\Classes\Pcaa3dd4e_4d92_4d1a_9602_62eb5fba7cee_.Pcaa3dd4e_4d92_4d1a_9602_62eb5fba7cee_.9
Key Deleted : HKCU\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}
Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0042822.BHO
Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0042822.BHO.1
Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0042822.Sandbox
Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0042822.Sandbox.1
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{51BEE30D-EEC8-4BA3-930B-298B8E759EB1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{02A96331-0CA6-40E2-A87D-C224601985EB}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{059EACC2-1ABE-49E8-928D-DC8BD355B7A9}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3B5702BA-7F4C-4D1A-B026-1E9A01D43978}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{69F256DF-BA98-45E9-86EA-FC3CFECF9D30}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6E87FC94-9866-49B9-8E93-5736D6DE3DD7}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6E993643-8FBC-44FE-BC85-D318495C4D96}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{70DE12EA-79F4-46BC-9812-86DB50A2FD64}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{7E49F793-B3CD-4BF7-8419-B34B8BD30E61}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{834469E3-CA2B-4F21-A5CA-4F6F4DBCDE87}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{8529FAA3-5BFD-43C1-AB35-B53C4B96C6E5}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{ADBC39BE-3D20-4333-8D99-E91EB1B62474}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AF175732-0D59-716D-F757-9F1492D808D9}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B89F5C49-51DB-4974-AB5A-E25901AA339C}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CFC47BB5-5FB5-4AD0-8427-6AA04334A3FC}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E06CA7F5-BA34-4FF6-8D24-B1BDC594D91F}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E0ADB535-D7B5-4D8B-B15D-578BDD20D76A}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E9B5B0D2-D08A-49FC-8B5C-159B60BAA268}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F6421EE5-A5BE-4D31-81D5-C16B7BF48E4C}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FD8E81D0-F5FE-4CB1-9AEA-1E163D2BAB78}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{caa3dd4e-4d92-4d1a-9602-62eb5fba7cee}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{31E3BC75-2A09-4CFF-9C92-8D0ED8D1DC0F}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C66F0B7A-BD67-4982-AF71-C6CA6E7F016F}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{6B3732AA-F6D4-4F16-9E22-49EDC52C9514}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E7270EC6-0113-4A78-B610-E501D0A9E48E}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550455285522}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660466286622}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{E2343056-CC08-46AC-B898-BFC7ACF4E755}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{2105FE20-DEBD-4084-A306-61C5DA001CCA}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{caa3dd4e-4d92-4d1a-9602-62eb5fba7cee}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{31E3BC75-2A09-4CFF-9C92-8D0ED8D1DC0F}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{C66F0B7A-BD67-4982-AF71-C6CA6E7F016F}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{E7270EC6-0113-4A78-B610-E501D0A9E48E}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550455285522}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660466286622}
Key Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Key Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{CB4EEB02-825E-466E-B20A-879427DD5546}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}
Key Deleted : HKCU\Software\BI
Key Deleted : HKCU\Software\GlobalUpdate
Key Deleted : HKCU\Software\IM
Key Deleted : HKCU\Software\ImInstaller
Key Deleted : HKCU\Software\InstalledBrowserExtensions
Key Deleted : HKCU\Software\Optimizer Pro
Key Deleted : HKCU\Software\ParetoLogic
Key Deleted : HKCU\Software\RegisteredApplicationsEx
Key Deleted : HKCU\Software\Softonic
Key Deleted : HKCU\Software\Speedchecker Limited
Key Deleted : HKCU\Software\DriverToolkit
Key Deleted : HKCU\Software\etranslator
Key Deleted : HKCU\Software\AppDataLow\{4A0F38A9-FE55-4B89-B73F-E60FDC0F72E9}
Key Deleted : HKCU\Software\AppDataLow\Software\Crossrider
Key Deleted : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Key Deleted : HKLM\SOFTWARE\{4A0F38A9-FE55-4B89-B73F-E60FDC0F72E9}
Key Deleted : HKLM\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}
Key Deleted : HKLM\SOFTWARE\{77D46E27-0E41-4478-87A6-AABE6FBCF252}
Key Deleted : HKLM\SOFTWARE\Driver-Soft
Key Deleted : HKLM\SOFTWARE\GlobalUpdate
Key Deleted : HKLM\SOFTWARE\InstalledBrowserExtensions
Key Deleted : HKLM\SOFTWARE\ParetoLogic
Key Deleted : HKLM\SOFTWARE\Speedchecker Limited
Key Deleted : HKLM\SOFTWARE\YourFileDownloader
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\MailRuUpdater
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3D0F43D9-C1D7-733C-01F8-4A3001BF8CC3}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{AD11DADE-C597-45D9-D8C5-1D2EB0B89613}
Key Deleted : [x64] HKLM\SOFTWARE\InstalledBrowserExtensions
Key Deleted : [x64] HKLM\SOFTWARE\Speedchecker Limited
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Optimizer Pro_is1

***** [ Web browsers ] *****

-\\ Internet Explorer v8.0.7600.17256

-\\ Mozilla Firefox v35.0.1 (x86 cs)

[0zx64ihw.default-1360574067865\prefs.js] - Line Deleted : user_pref("browser.search.defaultenginename,S", "WebSearch");
[0zx64ihw.default-1360574067865\prefs.js] - Line Deleted : user_pref("browser.search.defaulturl", "hxxp://websearch.exitingsearch.info/?pid=924&r=2014/03/10&hid=11410409913330149846&lg=EN&cc=CZ&unqvl=50&l=1&q=");
[0zx64ihw.default-1360574067865\prefs.js] - Line Deleted : user_pref("browser.search.order.1", "WebSearch");
[0zx64ihw.default-1360574067865\prefs.js] - Line Deleted : user_pref("browser.search.order.1,S", "WebSearch");
[0zx64ihw.default-1360574067865\prefs.js] - Line Deleted : user_pref("browser.search.selectedEngine,S", "WebSearch");
[0zx64ihw.default-1360574067865\prefs.js] - Line Deleted : user_pref("extensions.7QAF.scode", "(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1url.indexOf(\"txtlnkusaolp00000800\")>-1url.indexOf(\"sumoro[...]
[0zx64ihw.default-1360574067865\prefs.js] - Line Deleted : user_pref("extensions.Hyvd3x.scode", "(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1url.indexOf(\"txtlnkusaolp00000800\")>-1url.indexOf(\"sumo[...]
[0zx64ihw.default-1360574067865\prefs.js] - Line Deleted : user_pref("extensions.MdG5Ai.scode", "(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1url.indexOf(\"txtlnkusaolp00000800\")>-1url.indexOf(\"sumo[...]
[0zx64ihw.default-1360574067865\prefs.js] - Line Deleted : user_pref("extensions._OgjBVb.scode", "(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1url.indexOf(\"txtlnkusaolp00000800\")>-1url.indexOf(\"sum[...]
[0zx64ihw.default-1360574067865\prefs.js] - Line Deleted : user_pref("extensions._Umev59.scode", "(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1url.indexOf(\"txtlnkusaolp00000800\")>-1url.indexOf(\"sum[...]
[0zx64ihw.default-1360574067865\prefs.js] - Line Deleted : user_pref("extensions.bcM.scode", "(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1url.indexOf(\"txtlnkusaolp00000800\")>-1url.indexOf(\"sumorob[...]
[0zx64ihw.default-1360574067865\prefs.js] - Line Deleted : user_pref("extensions.epGHuFbXzceu.scode", "(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1url.indexOf(\"txtlnkusaolp00000800\")>-1url.indexOf([...]
[0zx64ihw.default-1360574067865\prefs.js] - Line Deleted : user_pref("extensions.incredibar.actvtyRptTime", "1360269565638");
[0zx64ihw.default-1360574067865\prefs.js] - Line Deleted : user_pref("extensions.incredibar.admin", false);
[0zx64ihw.default-1360574067865\prefs.js] - Line Deleted : user_pref("extensions.incredibar.aflt", "orgnl");
[0zx64ihw.default-1360574067865\prefs.js] - Line Deleted : user_pref("extensions.incredibar.afterInstallRpt", "sent");
[0zx64ihw.default-1360574067865\prefs.js] - Line Deleted : user_pref("extensions.incredibar.cntry", "CZ");
[0zx64ihw.default-1360574067865\prefs.js] - Line Deleted : user_pref("extensions.incredibar.dfltLng", "EN");
[0zx64ihw.default-1360574067865\prefs.js] - Line Deleted : user_pref("extensions.incredibar.dfltSrch", false);
[0zx64ihw.default-1360574067865\prefs.js] - Line Deleted : user_pref("extensions.incredibar.dfltlng", "EN");
[0zx64ihw.default-1360574067865\prefs.js] - Line Deleted : user_pref("extensions.incredibar.dfltsrch", "false");
[0zx64ihw.default-1360574067865\prefs.js] - Line Deleted : user_pref("extensions.incredibar.did", "10643");
[0zx64ihw.default-1360574067865\prefs.js] - Line Deleted : user_pref("extensions.incredibar.envrmnt", "production");
[0zx64ihw.default-1360574067865\prefs.js] - Line Deleted : user_pref("extensions.incredibar.excTlbr", false);
[0zx64ihw.default-1360574067865\prefs.js] - Line Deleted : user_pref("extensions.incredibar.hdrMd5", "F742F7BA4C1D8CD520C29C604F563AAA");
[0zx64ihw.default-1360574067865\prefs.js] - Line Deleted : user_pref("extensions.incredibar.hmpg", false);
[0zx64ihw.default-1360574067865\prefs.js] - Line Deleted : user_pref("extensions.incredibar.hrdid", "88971f29000000000000002100db28d9");
[0zx64ihw.default-1360574067865\prefs.js] - Line Deleted : user_pref("extensions.incredibar.id", "88971f29000000000000002100db28d9");
[0zx64ihw.default-1360574067865\prefs.js] - Line Deleted : user_pref("extensions.incredibar.installerproductid", "26");
[0zx64ihw.default-1360574067865\prefs.js] - Line Deleted : user_pref("extensions.incredibar.instlDay", "15725");
[0zx64ihw.default-1360574067865\prefs.js] - Line Deleted : user_pref("extensions.incredibar.instlRef", "");
[0zx64ihw.default-1360574067865\prefs.js] - Line Deleted : user_pref("extensions.incredibar.instlday", "15725");
[0zx64ihw.default-1360574067865\prefs.js] - Line Deleted : user_pref("extensions.incredibar.instlref", "");
[0zx64ihw.default-1360574067865\prefs.js] - Line Deleted : user_pref("extensions.incredibar.isDcmntCmplt", true);
[0zx64ihw.default-1360574067865\prefs.js] - Line Deleted : user_pref("extensions.incredibar.isdcmntcmplt", "false");
[0zx64ihw.default-1360574067865\prefs.js] - Line Deleted : user_pref("extensions.incredibar.keywordurl", "");
[0zx64ihw.default-1360574067865\prefs.js] - Line Deleted : user_pref("extensions.incredibar.lastVrsnTs", "1.5.11.1416:34:16");
[0zx64ihw.default-1360574067865\prefs.js] - Line Deleted : user_pref("extensions.incredibar.mntrvrsn", "1.2.0");
[0zx64ihw.default-1360574067865\prefs.js] - Line Deleted : user_pref("extensions.incredibar.newTab", false);
[0zx64ihw.default-1360574067865\prefs.js] - Line Deleted : user_pref("extensions.incredibar.newtab", "false");
[0zx64ihw.default-1360574067865\prefs.js] - Line Deleted : user_pref("extensions.incredibar.newtaburl", "");
[0zx64ihw.default-1360574067865\prefs.js] - Line Deleted : user_pref("extensions.incredibar.noFFXTlbr", false);
[0zx64ihw.default-1360574067865\prefs.js] - Line Deleted : user_pref("extensions.incredibar.ppd", "1");
[0zx64ihw.default-1360574067865\prefs.js] - Line Deleted : user_pref("extensions.incredibar.prdct", "incredibar");
[0zx64ihw.default-1360574067865\prefs.js] - Line Deleted : user_pref("extensions.incredibar.productid", "26");
[0zx64ihw.default-1360574067865\prefs.js] - Line Deleted : user_pref("extensions.incredibar.prtnrId", "Incredibar");
[0zx64ihw.default-1360574067865\prefs.js] - Line Deleted : user_pref("extensions.incredibar.prtnrid", "Incredibar");
[0zx64ihw.default-1360574067865\prefs.js] - Line Deleted : user_pref("extensions.incredibar.sg", "none");
[0zx64ihw.default-1360574067865\prefs.js] - Line Deleted : user_pref("extensions.incredibar.smplGrp", "none");
[0zx64ihw.default-1360574067865\prefs.js] - Line Deleted : user_pref("extensions.incredibar.smplgrp", "none");
[0zx64ihw.default-1360574067865\prefs.js] - Line Deleted : user_pref("extensions.incredibar.srch", "");
[0zx64ihw.default-1360574067865\prefs.js] - Line Deleted : user_pref("extensions.incredibar.srchprvdr", "");
[0zx64ihw.default-1360574067865\prefs.js] - Line Deleted : user_pref("extensions.incredibar.tlbrId", "base");
[0zx64ihw.default-1360574067865\prefs.js] - Line Deleted : user_pref("extensions.incredibar.tlbrSrchUrl", "hxxp://mystart.Incredibar.com/?a=6R8RUERTkg&loc=IB_TB&i=26&search=");
[0zx64ihw.default-1360574067865\prefs.js] - Line Deleted : user_pref("extensions.incredibar.tlbrid", "base");
[0zx64ihw.default-1360574067865\prefs.js] - Line Deleted : user_pref("extensions.incredibar.tlbrsrchurl", "hxxp://mystart.Incredibar.com/?a=6R8RUERTkg&loc=IB_TB&i=26&search=");
[0zx64ihw.default-1360574067865\prefs.js] - Line Deleted : user_pref("extensions.incredibar.upn2", "6R8RUERTkg");
[0zx64ihw.default-1360574067865\prefs.js] - Line Deleted : user_pref("extensions.incredibar.upn2n", "92825780110252508");
[0zx64ihw.default-1360574067865\prefs.js] - Line Deleted : user_pref("extensions.incredibar.vrsn", "1.5.11.14");
[0zx64ihw.default-1360574067865\prefs.js] - Line Deleted : user_pref("extensions.incredibar.vrsnTs", "1.5.11.1416:34:16");
[0zx64ihw.default-1360574067865\prefs.js] - Line Deleted : user_pref("extensions.incredibar.vrsni", "1.5.11.14");
[0zx64ihw.default-1360574067865\prefs.js] - Line Deleted : user_pref("extensions.incredibar.vrsnts", "1.5.11.1416:34:16");
[0zx64ihw.default-1360574067865\prefs.js] - Line Deleted : user_pref("extensions.incredibar_i.aflt", "orgnl");
[0zx64ihw.default-1360574067865\prefs.js] - Line Deleted : user_pref("extensions.incredibar_i.dfltLng", "");
[0zx64ihw.default-1360574067865\prefs.js] - Line Deleted : user_pref("extensions.incredibar_i.did", "10643");
[0zx64ihw.default-1360574067865\prefs.js] - Line Deleted : user_pref("extensions.incredibar_i.excTlbr", false);
[0zx64ihw.default-1360574067865\prefs.js] - Line Deleted : user_pref("extensions.incredibar_i.id", "88971f29000000000000002100db28d9");
[0zx64ihw.default-1360574067865\prefs.js] - Line Deleted : user_pref("extensions.incredibar_i.installerproductid", "26");
[0zx64ihw.default-1360574067865\prefs.js] - Line Deleted : user_pref("extensions.incredibar_i.instlDay", "15725");
[0zx64ihw.default-1360574067865\prefs.js] - Line Deleted : user_pref("extensions.incredibar_i.instlRef", "");
[0zx64ihw.default-1360574067865\prefs.js] - Line Deleted : user_pref("extensions.incredibar_i.ms_url_id", "");
[0zx64ihw.default-1360574067865\prefs.js] - Line Deleted : user_pref("extensions.incredibar_i.newTab", false);
[0zx64ihw.default-1360574067865\prefs.js] - Line Deleted : user_pref("extensions.incredibar_i.ppd", "1");
[0zx64ihw.default-1360574067865\prefs.js] - Line Deleted : user_pref("extensions.incredibar_i.prdct", "incredibar");
[0zx64ihw.default-1360574067865\prefs.js] - Line Deleted : user_pref("extensions.incredibar_i.productid", "26");
[0zx64ihw.default-1360574067865\prefs.js] - Line Deleted : user_pref("extensions.incredibar_i.prtnrId", "Incredibar");
[0zx64ihw.default-1360574067865\prefs.js] - Line Deleted : user_pref("extensions.incredibar_i.smplGrp", "none");
[0zx64ihw.default-1360574067865\prefs.js] - Line Deleted : user_pref("extensions.incredibar_i.tlbrId", "base");
[0zx64ihw.default-1360574067865\prefs.js] - Line Deleted : user_pref("extensions.incredibar_i.tlbrSrchUrl", "hxxp://mystart.Incredibar.com/?a=6R8RUERTkg&loc=IB_TB&i=26&search=");
[0zx64ihw.default-1360574067865\prefs.js] - Line Deleted : user_pref("extensions.incredibar_i.upn2", "6R8RUERTkg");
[0zx64ihw.default-1360574067865\prefs.js] - Line Deleted : user_pref("extensions.incredibar_i.upn2n", "92825780110252508");
[0zx64ihw.default-1360574067865\prefs.js] - Line Deleted : user_pref("extensions.incredibar_i.vrsn", "1.5.11.14");
[0zx64ihw.default-1360574067865\prefs.js] - Line Deleted : user_pref("extensions.incredibar_i.vrsnTs", "1.5.11.1416:34:16");
[0zx64ihw.default-1360574067865\prefs.js] - Line Deleted : user_pref("extensions.incredibar_i.vrsni", "1.5.11.14");
[0zx64ihw.default-1360574067865\prefs.js] - Line Deleted : user_pref("extensions.jHrVGoI0aZsA.scode", "(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1url.indexOf(\"txtlnkusaolp00000800\")>-1url.indexOf([...]
[0zx64ihw.default-1360574067865\prefs.js] - Line Deleted : user_pref("keyword.URL", "hxxp://websearch.exitingsearch.info/?pid=924&r=2014/03/10&hid=11410409913330149846&lg=EN&cc=CZ&unqvl=50&l=1&q=");

-\\ Comodo Dragon v

-\\ Chrome Canary v

*************************

AdwCleaner[R0].txt - [24730 bytes] - [26/03/2015 17:46:47]
AdwCleaner[R1].txt - [24790 bytes] - [26/03/2015 17:50:21]
AdwCleaner[R2].txt - [24846 bytes] - [27/03/2015 11:12:18]
AdwCleaner[S0].txt - [24649 bytes] - [27/03/2015 11:13:22]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [24709 bytes] ##########

jkmaxfli · Příspěvekod **jkmaxfli** » 27 bře 2015 11:23

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.4.6 (03.22.2015:1)
OS: Windows 7 Ultimate x64
Ran by jkmaxfli on p 27.03.2015 at 11:21:00,61
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

~~~ Services

~~~ Registry Values

~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{44444444-4444-4444-4444-440444284422}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\TypeLib\{44444444-4444-4444-4444-440444284422}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\TypeLib\{44444444-4444-4444-4444-440444284422}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110411281122}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110411281122}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\TypeLib\{44444444-4444-4444-4444-440444284422}

~~~ Files

~~~ Folders

Successfully deleted: [Folder] "C:\Users\jkmaxfli\AppData\Roaming\tencent"

~~~ FireFox

Successfully deleted the following from C:\Users\jkmaxfli\AppData\Roaming\mozilla\firefox\profiles\0zx64ihw.default-1360574067865\prefs.js

user_pref("extensions._OgjBVb.url", "hxxp://toolkitcomp.in/sync2/?q=hfZ9ofV9CShEAen0rjY4rchTB6lKDzt4okqAtNtVh7n0rjnErHaGrdYGrjw7tMFHhd9FqdaHrdsFqjsEqjrMDMlGojUMAe4UojnGpdgEqda
user_pref("extensions._Umev59.url", "hxxp://extsync.info/sync2/?q=hfZ9ofV9CShEAen0pjs9tMqLDe49CNU0n8OMCMlNhd9FqdaHrjaFrjrHrjYMBzqUojw9rdrFrjw5rjCHrih7hfs0pihPBMn0qdUErdn4qjgFr
user_pref("extensions.personas.lastselected1", "{\"id\":\"44495\",\"name\":\"Generation Fame\",\"category\":null,\"description\":\"A dynamic reinvention of the OscarÂ®-winning
Emptied folder: C:\Users\jkmaxfli\AppData\Roaming\mozilla\firefox\profiles\0zx64ihw.default-1360574067865\minidumps [89 files]

~~~ Event Viewer Logs were cleared

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on p 27.03.2015 at 11:22:47,93
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

jkmaxfli · Příspěvekod **jkmaxfli** » 27 bře 2015 11:33

Malwarebytes Anti-Malware
www.malwarebytes.org

Datum skenování: 27.3.2015
Čas skenování: 11:25:47
Protokol: poslední sken po pročištění Malwarebytes Anti Malware.txt
Správce: Ano

Verze: 2.01.4.1018
Databáze malwaru: v2015.03.27.04
Databáze rootkitů: v2015.03.26.01
Licence: Bezplatná verze
Ochrana proti malwaru: Vypnuto
Ochrana proti škodlivým webovým stránkám: Vypnuto
Ochrana programu: Vypnuto

OS: Windows 7
CPU: x64
Souborový systém: NTFS
Uživatel: jkmaxfli

Typ skenu: Sken hrozeb
Výsledek: Dokončeno
Prohledaných objektů: 397344
Uplynulý čas: 5 min, 57 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Vypnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto

Procesy: 0
(Nenalezeny žádné škodlivé položky)

Moduly: 0
(Nenalezeny žádné škodlivé položky)

Klíče registru: 5
PUP.Optional.Multiplug, HKU\S-1-5-21-1418575231-3307983708-1122877094-1000_Classes\INTERFACE\{3B3F3AAD-FB97-49FF-BFEE-D22869AC4326}, Do karantény, [b0d007433e4c64d2c05480a93ac9f20e],
PUP.Optional.Multiplug, HKU\S-1-5-21-1418575231-3307983708-1122877094-1000_Classes\TypeLib\{157B1AA6-3E5C-404A-9118-C1D91F537040}, Do karantény, [29570941107a8fa751c3101936cd54ac],
PUP.Optional.ShopAndUp.A, HKLM\SOFTWARE\WOW6432NODE\Shop_and _Up_1.2, Do karantény, [81ffa7a3642659ddf234925f36cdc53b],
PUP.Optional.ShopAndUp.A, HKU\S-1-5-18\SOFTWARE\APPDATALOW\SOFTWARE\Shop_and _Up_1.2, Do karantény, [9ee2cb7f662442f479af539e55ae3ac6],
PUP.Optional.ShopAndUp.A, HKU\S-1-5-21-1418575231-3307983708-1122877094-1000\SOFTWARE\APPDATALOW\SOFTWARE\Shop_and _Up_1.2, Do karantény, [3a46a8a2bad055e133f5559cf112e11f],

Hodnoty registru: 0
(Nenalezeny žádné škodlivé položky)

Data registru: 0
(Nenalezeny žádné škodlivé položky)

Složky: 0
(Nenalezeny žádné škodlivé položky)

Soubory: 1
PUP.Optional.Somoto.A, C:\Users\jkmaxfli\AppData\Local\Application Data\Bundled software uninstaller\biclient.exe, Do karantény, [99e787c367235fd7bbd5f35132cf23dd],

Fyzické sektory: 0
(Nenalezeny žádné škodlivé položky)

(end)

jkmaxfli · Příspěvekod **jkmaxfli** » 27 bře 2015 11:44

RogueKiller V10.5.7.0 (x64) [Mar 22 2015] by Adlice Software
mail : http://www.adlice.com/contact/
Feedback : http://forum.adlice.com
Webová stránka : http://www.adlice.com/softwares/roguekiller/
Blog : http://www.adlice.com

Operační systém : Windows 7 (6.1.7600 ) 64 bits version
Spuštěno : Normální režim
Uživatel : jkmaxfli [Práva správce]
Started from : C:\Users\jkmaxfli\Desktop\RogueKillerX64.exe
Mód : Prohledat -- Datum : 03/27/2015 11:41:57

¤¤¤ Procesy : 0 ¤¤¤

¤¤¤ Registry : 28 ¤¤¤
[Suspicious.Path] (X64) HKEY_USERS\S-1-5-21-1418575231-3307983708-1122877094-1000\Software\Microsoft\Windows NT\CurrentVersion\Winlogon | Shell : expstart.exe -> Nalezeno
[Suspicious.Path] (X86) HKEY_USERS\S-1-5-21-1418575231-3307983708-1122877094-1000\Software\Microsoft\Windows NT\CurrentVersion\Winlogon | Shell : expstart.exe -> Nalezeno
[PUM.Policies] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System | ConsentPromptBehaviorAdmin : 0 -> Nalezeno
[PUM.Policies] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System | ConsentPromptBehaviorAdmin : 0 -> Nalezeno
[PUM.StartMenu] (X64) HKEY_USERS\S-1-5-21-1418575231-3307983708-1122877094-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowMyDocs : 2 -> Nalezeno
[PUM.StartMenu] (X64) HKEY_USERS\S-1-5-21-1418575231-3307983708-1122877094-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowMyGames : 0 -> Nalezeno
[PUM.StartMenu] (X64) HKEY_USERS\S-1-5-21-1418575231-3307983708-1122877094-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowMyMusic : 0 -> Nalezeno
[PUM.StartMenu] (X64) HKEY_USERS\S-1-5-21-1418575231-3307983708-1122877094-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowHelp : 0 -> Nalezeno
[PUM.StartMenu] (X64) HKEY_USERS\S-1-5-21-1418575231-3307983708-1122877094-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowMyPics : 0 -> Nalezeno
[PUM.StartMenu] (X64) HKEY_USERS\S-1-5-21-1418575231-3307983708-1122877094-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowUser : 0 -> Nalezeno
[PUM.StartMenu] (X64) HKEY_USERS\S-1-5-21-1418575231-3307983708-1122877094-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowSetProgramAccessAndDefaults : 0 -> Nalezeno
[PUM.StartMenu] (X64) HKEY_USERS\S-1-5-21-1418575231-3307983708-1122877094-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_TrackProgs : 0 -> Nalezeno
[PUM.StartMenu] (X86) HKEY_USERS\S-1-5-21-1418575231-3307983708-1122877094-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowMyDocs : 2 -> Nalezeno
[PUM.StartMenu] (X86) HKEY_USERS\S-1-5-21-1418575231-3307983708-1122877094-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowMyGames : 0 -> Nalezeno
[PUM.StartMenu] (X86) HKEY_USERS\S-1-5-21-1418575231-3307983708-1122877094-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowMyMusic : 0 -> Nalezeno
[PUM.StartMenu] (X86) HKEY_USERS\S-1-5-21-1418575231-3307983708-1122877094-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowHelp : 0 -> Nalezeno
[PUM.StartMenu] (X86) HKEY_USERS\S-1-5-21-1418575231-3307983708-1122877094-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowMyPics : 0 -> Nalezeno
[PUM.StartMenu] (X86) HKEY_USERS\S-1-5-21-1418575231-3307983708-1122877094-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowUser : 0 -> Nalezeno
[PUM.StartMenu] (X86) HKEY_USERS\S-1-5-21-1418575231-3307983708-1122877094-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowSetProgramAccessAndDefaults : 0 -> Nalezeno
[PUM.StartMenu] (X86) HKEY_USERS\S-1-5-21-1418575231-3307983708-1122877094-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_TrackProgs : 0 -> Nalezeno
[PUM.DesktopIcons] (X64) HKEY_USERS\S-1-5-21-1418575231-3307983708-1122877094-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\ClassicStartMenu | {645FF040-5081-101B-9F08-00AA002F954E} : 1 -> Nalezeno
[PUM.DesktopIcons] (X86) HKEY_USERS\S-1-5-21-1418575231-3307983708-1122877094-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\ClassicStartMenu | {645FF040-5081-101B-9F08-00AA002F954E} : 1 -> Nalezeno
[PUM.DesktopIcons] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1 -> Nalezeno
[PUM.DesktopIcons] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {59031a47-3f72-44a7-89c5-5595fe6b30ee} : 1 -> Nalezeno
[PUM.DesktopIcons] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1 -> Nalezeno
[PUM.DesktopIcons] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {59031a47-3f72-44a7-89c5-5595fe6b30ee} : 1 -> Nalezeno
[PUM.DesktopIcons] (X64) HKEY_USERS\S-1-5-21-1418575231-3307983708-1122877094-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {645FF040-5081-101B-9F08-00AA002F954E} : 1 -> Nalezeno
[PUM.DesktopIcons] (X86) HKEY_USERS\S-1-5-21-1418575231-3307983708-1122877094-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {645FF040-5081-101B-9F08-00AA002F954E} : 1 -> Nalezeno

¤¤¤ Úlohy : 0 ¤¤¤

¤¤¤ Soubory : 0 ¤¤¤

¤¤¤ Soubor HOSTS : 3 ¤¤¤
[C:\Windows\System32\drivers\etc\hosts] 127.0.0.1 www.langsoft.cz
[C:\Windows\System32\drivers\etc\hosts] 127.0.0.1 iws.intranet.cz
[C:\Windows\System32\drivers\etc\hosts] 127.0.0.1 www.pctranslator.cz

¤¤¤ Antirootkit : 0 (Driver: Nahrán) ¤¤¤

¤¤¤ Webové prohlížeče : 1 ¤¤¤
[PUM.HomePage][FIREFX:Config] 0zx64ihw.default-1360574067865 : user_pref("browser.startup.homepage", "seznam.cz"); -> Nalezeno

¤¤¤ Kontrola MBR : ¤¤¤
+++++ PhysicalDrive0: ATA WDC WD2500BEVT-6 SCSI Disk Device +++++
--- User ---
[MBR] 808c75498b10a3a60c0d40ac82e816f6
[BSP] 33f7cdd365e413b2ed60f05adf15286d : Unknown MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 238473 MB [Unknown Bootstrap | Unknown Bootloader]
User = LL1 ... OK
User = LL2 ... OK

+++++ PhysicalDrive1: ATA WDC WD2500AAKS-0 SCSI Disk Device +++++
--- User ---
[MBR] c041f823ade59cac000eaa3b0e2717e8
[BSP] 15f7ff38f380a9afdb1507444b739d40 : Unknown MBR Code
Partition table:
0 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 100 MB [Unknown Bootstrap | Unknown Bootloader]
1 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 206848 | Size: 102800 MB [Unknown Bootstrap | Unknown Bootloader]
2 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 210741248 | Size: 135572 MB [Unknown Bootstrap | Unknown Bootloader]
User = LL1 ... OK
User = LL2 ... OK

+++++ PhysicalDrive2: ATA WDC WD5000AAKS-0 SCSI Disk Device +++++
--- User ---
[MBR] 13f002a0dbd7d58ae6dda718009bb35f
[BSP] 3b52d6ad7352884bddb49cc34c89e6e4 : Windows Vista/7/8 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 476937 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
User = LL1 ... OK
User = LL2 ... OK

+++++ PhysicalDrive3: ATA WDC WD6400AADS-0 SCSI Disk Device +++++
--- User ---
[MBR] b7ad58b9a546f725c67845e993a90070
[BSP] 4815ce2e5a079ab8d948e9e6228a1931 : Windows Vista/7/8 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 610478 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
User = LL1 ... OK
User = LL2 ... OK

+++++ PhysicalDrive4: Generic USB CF Reader USB Device +++++
Error reading User MBR! ([15] Za?ízení není p?ipraveno. )
Error reading LL1 MBR! NOT VALID!
Error reading LL2 MBR! ([32] Po?adavek není podporován. )

+++++ PhysicalDrive5: Generic USB SD Reader USB Device +++++
Error reading User MBR! ([15] Za?ízení není p?ipraveno. )
Error reading LL1 MBR! NOT VALID!
Error reading LL2 MBR! ([32] Po?adavek není podporován. )

+++++ PhysicalDrive6: Generic Mini SD Reader USB Device +++++
Error reading User MBR! ([15] Za?ízení není p?ipraveno. )
Error reading LL1 MBR! NOT VALID!
Error reading LL2 MBR! ([32] Po?adavek není podporován. )

+++++ PhysicalDrive7: Generic USB MS Reader USB Device +++++
Error reading User MBR! ([15] Za?ízení není p?ipraveno. )
Error reading LL1 MBR! NOT VALID!
Error reading LL2 MBR! ([32] Po?adavek není podporován. )

+++++ PhysicalDrive8: Generic USB SM Reader USB Device +++++
Error reading User MBR! ([15] Za?ízení není p?ipraveno. )
Error reading LL1 MBR! NOT VALID!
Error reading LL2 MBR! ([32] Po?adavek není podporován. )

jkmaxfli · Příspěvekod **jkmaxfli** » 27 bře 2015 11:48

Teda toho je, těch utilit.
Co dále a děkuji ti za tvůj čas.
Asi tam nějaký škůdci jsou viď, jen pak potřebuji poradit, čím chránit PC, mám jen Windows Defender.
Zatím díky a jsem připraven dnes celý den i večer na tvé další postupy.

Příspěvekod **Orcus** » 27 bře 2015 15:05

Jeden si vyber a nainstaluj:

Avast
Avira
AVG
Bitdefender
Comodo

===================================================

Zavři všechny programy a prohlížeče. Deaktivuj antivir a firewall.
Prosím, odpoj všechny USB nebo externí disky z počítače před spuštěním tohoto programu.
Spusť RogueKiller ( Pro Windows Vista nebo Windows 7, klepni pravým a vyber "Spustit jako správce", ve Windows XP poklepej ke spuštění).
- Počkej, až Prescan dokončí práci...
- Počkej, dokud status okno zobrazuje "Prohledat "
- V záložkách (Registry , Tasks , Web Browser apod.) vše zatrhni (dej zatržítka).
- Klikni na "Smazat"
- Počkej, dokud Status box zobrazuje " Mazání dokončeno "
- Klikni na "Zpráva" a zkopíruj a vlož obsah té zprávy prosím sem. Log je možno nalézt v RKreport [číslo]. txt na ploše.
- Zavři RogueKiller

====================================================

Stáhni
Zoek.exe

a ulož si ho na plochu.
Zavři všechny ostatní programy, okna i prohlížeče.
Spusť Zoek.exe ( u win vista , win7, 8 klikni na něj pravým a vyber : „Spustit jako správce“
- pozor, náběh programu může trvat déle.

Do okna programu vlož skript níže:

Kód: Vybrat vše

autoclean;
emptyclsid;
iedefaults;
FFdefaults;
CHRdefaults;
emptyalltemp;
resethosts;

Klikni na Run Script
Program provede sken, opravu, sken i oprava může trvat i více minut, je třeba posečkat do konce. Do okna neklikej!
Program nabídne restart , potvrď .

Po restartu se může nějaký čas ukázat pouze černá plocha , to je normální. Je třeba počkat až se vytvoří log. Ten si můžeš uložit třeba do dokumentů, jinak se sám ukládá do:
C:\zoek-results.log
Zkopíruj sem celý obsah toho logu.

====================================================

Co problémy? + nový log z HJT

jkmaxfli · Příspěvekod **jkmaxfli** » 27 bře 2015 15:47

Antivir si mám nainstalovat před použitím RogueKilleru,nebo ho mám nainstalovat až po těchto procedurách?
Ty USB i včetně myši a klávesnice?
Disky jsou myšlený jen externí přes USB,nebo i interní přes sata?
Díky a je tam, nebo byla tam nějaká havěť?

Prosím o kontrolu logu

Prosím o kontrolu logu

Re: Prosím o kontrolu logu

Re: Prosím o kontrolu logu

Re: Prosím o kontrolu logu

Re: Prosím o kontrolu logu

Re: Prosím o kontrolu logu

Re: Prosím o kontrolu logu

Re: Prosím o kontrolu logu

Re: Prosím o kontrolu logu

Re: Prosím o kontrolu logu

Re: Prosím o kontrolu logu

Re: Prosím o kontrolu logu

Kdo je online