PC-HELP.CZ

Dobrý den,
posledních několik týdnů se mi často v rohu, nahoře, dole v prohlížeči ukazují reklamy, které ovšem nejsou součástí webu, nýbrž nejspíše z mého počítače. Řeším to poslední dobou vždy vypnutím daných reklam v prohlížeči v rožšíření (jsou to reklamy - UniDeals, NoMoreAds, SalePPlus apod), ale vždy po vypnutí další den se mi ukazují reklamy. Taky se mi párkrát stalo, že mi při hraní her naskočila modrá smrt. Prosil bych vás tedy o analýzu HijackThis, rád bych tento problém vyřešil, protože počítač mám relativně nový.

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:43:35, on 24. 4. 2015
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.17416)

FIREFOX: 36.0.4 (x86 cs)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Users\Dan21\AppData\Local\Akamai\netsession_win.exe
C:\Users\Dan21\AppData\Local\Akamai\netsession_win.exe
C:\Users\Dan21\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
C:\Users\Dan21\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Program Files (x86)\AVG\AVG2015\avgui.exe
C:\Windows\SysWOW64\ctfmon.exe
C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
C:\PROGRA~2\Raptr\raptr_im.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Users\Dan21\Downloads\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.b1.org/?bsrc=hmior&chid=c169741
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O1 - Hosts: ::1 localhost #[IPv6]
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O2 - BHO: AliBar BHO - {E4E012DC-1925-48E9-8010-2D195574642A} - C:\Program Files (x86)\Internet Explorer\alitab.dll
O3 - Toolbar: AVG SafeGuard toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG SafeGuard toolbar\18.3.0.885\AVG SafeGuard toolbar_toolbar.dll
O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files (x86)\AVG\AVG2015\avgui.exe" /TRAYONLY
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [vProt] "C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe"
O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
O4 - HKLM\..\Run: [Aeria Ignite] "C:\Program Files (x86)\Aeria Games\Ignite\aeriaignite.exe" silent
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [Raptr] C:\PROGRA~2\Raptr\raptrstub.exe --startup
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [Akamai NetSession Interface] "C:\Users\Dan21\AppData\Local\Akamai\netsession_win.exe"
O4 - HKCU\..\Run: [MaxigetMasterUpdate] "C:\Users\Dan21\AppData\Roaming\Maxiget\Master\Updater\MasterUpdater.exe" -autorun
O4 - HKCU\..\Run: [cz.seznam.software.autoupdate] "C:\Users\Dan21\AppData\Roaming\Seznam.cz\szninstall.exe" -c
O4 - HKCU\..\Run: [cz.seznam.software.szndesktop] "C:\Users\Dan21\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q
O4 - Startup: Dropbox.lnk = Dan21\AppData\Roaming\Dropbox\bin\Dropbox.exe
O9 - Extra button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: http://*.aeriagames.com
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\18.3.0\ViProtocol.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe
O23 - Service: EasyAntiCheat - EasyAntiCheat Ltd - C:\Windows\system32\EasyAntiCheat.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: LMIGuardianSvc - LogMeIn, Inc. - C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Service KMSELDI - Unknown owner - C:\Program Files\KMSpico\Service_KMS.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: TeamViewer 10 (TeamViewer) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: vToolbarUpdater18.3.0 - Unknown owner - C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.3.0\ToolbarUpdater.exe
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 11240 bytes

Upni prosím soubory ze složky Windows\Minidump na http://www.leteckaposta.cz
Při dalším čištění počítače by pravděpodobně byly smazány.

+
Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected. Poté klikni na Main (hlavní stránku ) a klikni na Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranění historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit dočasné soubory Windows, vysypat koš atd.

- Pokud používáš jen Google Chrome , tak ATF nemusíš použít.


Stáhni si TFC
Otevři soubor a zavři všechny ostatní okna, Klikni na Start k zahájení procesu. Program by neměl trvat dlouho.
Poté by se měl PC restartovat, pokud ne , proveď sám.

Stáhni AdwCleaner (by Xplode)
http://www.bleepingcomputer.com/download/adwcleaner/

Ulož si ho na svojí plochu
Ukonči všechny programy , okna a prohlížeče
Spusť program poklepáním a klikni na „Prohledat-Scan“
Po skenu se objeví log ( jinak je uložen systémovem disku jako AdwCleaner[R?].txt), jeho obsah sem celý vlož.

Stáhni si Malwarebytes' Anti-Malware
- Při instalaci odeber zatržítko u „Povolit bezplatnou zkušební verzi Malwarebytes' Anti-Malware Premium“
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Aktualizace Malwarebytes' Anti-Malware a Spustit aplikaci Malwarebytes' Anti-Malware, pokud jo tak klikni na tlačítko konec
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a klikni na Skenovat nyní a
- po proběhnutí programu se ti objeví hláška vpravo dole tak klikni na b] Kopírovat do schránky [/b]a a vlož sem celý log.

- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).

Pokud budou problémy , spusť v nouz. režimu.

Ve Windows/Minidump žádné souboy nemám.. :( ... Včera jsem se snažil ten počítač trochu pročistit sám skrz různé programy - ccleaner, glary untitles apod. Děje se mi ovšem, že pokud z prohlížeče odstraním veškeré reklamy v rožšíření, tak když zavřu prohlížeč a zase otevřu, tak jsou tam opět..

LOG z Adw:


# AdwCleaner v4.202 - Log vytvořen 25/04/2015 v 11:44:03
# Aktualizováno 23/04/2015 by Xplode
# Databáze : 2015-04-23.2 [Server]
# Operační system : Windows 8.1 Pro (x64)
# Uživatelské jméno : Dan21 - DAN
# Spuštěno z : C:\Users\Dan21\Downloads\adwcleaner_4.202.exe
# Nastavení : Sken

***** [ Služby ] *****

Služba Nalezeno : vToolbarUpdater18.3.0

***** [ Soubory / Složky ] *****

Složka Nalezeno : C:\Program Files (x86)\AVG SafeGuard toolbar
Složka Nalezeno : C:\Program Files (x86)\AVG Security Toolbar
Složka Nalezeno : C:\Program Files (x86)\Common Files\AVG Secure Search
Složka Nalezeno : C:\Program Files (x86)\Ge-Force
Složka Nalezeno : C:\Program Files (x86)\globalUpdate
Složka Nalezeno : C:\Program Files (x86)\Maxiget
Složka Nalezeno : C:\Program Files (x86)\SavePass 1.1
Složka Nalezeno : C:\Program Files (x86)\SavePass 1.1
Složka Nalezeno : C:\Program Files (x86)\Sense
Složka Nalezeno : C:\Program Files (x86)\ShopperPro
Složka Nalezeno : C:\Program Files\AVG SafeGuard toolbar
Složka Nalezeno : C:\ProgramData\{2a83c87c-07aa-9fa1-2a83-3c87c07a21f0}
Složka Nalezeno : C:\ProgramData\{31af9ab5-a512-cbf9-31af-f9ab5a516ad6}
Složka Nalezeno : C:\ProgramData\{370fb8d1-170d-2c7b-370f-fb8d1170e344}
Složka Nalezeno : C:\ProgramData\{85b588eb-e800-9959-85b5-588ebe8023af}
Složka Nalezeno : C:\ProgramData\{a83b47ad-7c9a-e55f-a83b-b47ad7c91eb5}
Složka Nalezeno : C:\ProgramData\{a893a32d-4f26-efa9-a893-3a32d4f28cb5}
Složka Nalezeno : C:\ProgramData\{b46ace11-0a10-6ebb-b46a-ace110a13844}
Složka Nalezeno : C:\ProgramData\{cb5da9d4-2099-2f94-cb5d-da9d4209a750}
Složka Nalezeno : C:\ProgramData\{d9ee53b3-95a1-ac16-d9ee-e53b395a4ece}
Složka Nalezeno : C:\ProgramData\{e6bd2bf0-330d-1d30-e6bd-d2bf0330afc0}
Složka Nalezeno : C:\ProgramData\5a1635af1c9531f7
Složka Nalezeno : C:\ProgramData\6491434939116237303
Složka Nalezeno : C:\ProgramData\AVG SafeGuard toolbar
Složka Nalezeno : C:\ProgramData\AVG Secure Search
Složka Nalezeno : C:\ProgramData\AVG Security Toolbar
Složka Nalezeno : C:\ProgramData\ckdanlhlojgpeaafkickdlmiolofdmbk
Složka Nalezeno : C:\ProgramData\ckdanlhlojgpeaafkickdlmiolofdmbk
Složka Nalezeno : C:\ProgramData\ddmnhgomjpndnmagiohmgekaiiepofki
Složka Nalezeno : C:\ProgramData\ddmnhgomjpndnmagiohmgekaiiepofki
Složka Nalezeno : C:\ProgramData\dhggmjnddlicafhokjhiohogknnebjff
Složka Nalezeno : C:\ProgramData\dhggmjnddlicafhokjhiohogknnebjff
Složka Nalezeno : C:\ProgramData\fbgiodadlnllcegeenpfmomefhhpgkdn
Složka Nalezeno : C:\ProgramData\fbgiodadlnllcegeenpfmomefhhpgkdn
Složka Nalezeno : C:\ProgramData\foikllnolghkepnohfpgfhlmcoemlhoo
Složka Nalezeno : C:\ProgramData\foikllnolghkepnohfpgfhlmcoemlhoo
Složka Nalezeno : C:\ProgramData\gncoabhoellghfnfmkdfpmkgchfkgjpl
Složka Nalezeno : C:\ProgramData\gncoabhoellghfnfmkdfpmkgchfkgjpl
Složka Nalezeno : C:\ProgramData\idbbnnoibjogljoncnmaeiddebdglfff
Složka Nalezeno : C:\ProgramData\idbbnnoibjogljoncnmaeiddebdglfff
Složka Nalezeno : C:\ProgramData\kbdljhdhlkbgnhnpiblbkpanepnhflcg
Složka Nalezeno : C:\ProgramData\kbdljhdhlkbgnhnpiblbkpanepnhflcg
Složka Nalezeno : C:\ProgramData\ShopperPro
Složka Nalezeno : C:\Users\Dan21\AppData\Local\AVG SafeGuard toolbar
Složka Nalezeno : C:\Users\Dan21\AppData\Local\BrowserHelper
Složka Nalezeno : C:\Users\Dan21\AppData\Local\globalUpdate
Složka Nalezeno : C:\Users\Dan21\AppData\Local\Maxiget
Složka Nalezeno : C:\Users\Dan21\AppData\LocalLow\AVG SafeGuard toolbar
Složka Nalezeno : C:\Users\Dan21\AppData\Roaming\Maxiget
Složka Nalezeno : C:\Users\Dan21\AppData\Roaming\Mozilla\Firefox\Profiles\4e2i2mzj.default-1427983688974\Extensions\1uROY2Mj2@I0.edu
Složka Nalezeno : C:\Users\Dan21\AppData\Roaming\Mozilla\Firefox\Profiles\4e2i2mzj.default-1427983688974\Extensions\EtC3v2@w8Bo.net
Složka Nalezeno : C:\Users\Dan21\AppData\Roaming\Mozilla\Firefox\Profiles\4e2i2mzj.default-1427983688974\Extensions\PO@B.com
Složka Nalezeno : C:\Users\Dan21\AppData\Roaming\Mozilla\Firefox\Profiles\4e2i2mzj.default-1427983688974\Extensions\quick_searchff@gmail.com
Složka Nalezeno : C:\Users\Dan21\AppData\Roaming\Mozilla\Firefox\Profiles\4e2i2mzj.default-1427983688974\Extensions\sweetsearch@gmail.com
Soubor Nalezeno : C:\Users\Dan21\AppData\Roaming\Mozilla\Firefox\Profiles\4e2i2mzj.default-1427983688974\user.js

***** [ Naplánované úlohy ] *****

Úloha Nalezeno : ShopperPro
Úloha Nalezeno : ShopperProJSUpd
Úloha Nalezeno : SMupdate1
Úloha Nalezeno : SPDriver
Úloha Nalezeno : YTDownloader
Úloha Nalezeno : YTDownloaderUpd
Úloha Nalezeno : b26aea3e-9ec4-40cd-97f5-734b81352549

***** [ Zástupci ] *****


***** [ Registry ] *****

Data Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - <local>
Hodnota Nalezeno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{95B7759C-8C7F-4BF1-B163-73684A933233}]
Hodnota Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [vProt]
Hodnota Nalezeno : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [Avg@toolbar]
Hodnota Nalezeno : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{95B7759C-8C7F-4BF1-B163-73684A933233}]
Klíč Nalezeno : HKCU\Software\4d8825e45d8b9fa35ac613df0d605f6d
Klíč Nalezeno : HKCU\Software\AppDataLow\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}
Klíč Nalezeno : HKCU\Software\AppDataLow\{4A0F38A9-FE55-4B89-B73F-E60FDC0F72E9}
Klíč Nalezeno : HKCU\Software\AVG SafeGuard toolbar
Klíč Nalezeno : HKCU\Software\AVG Security Toolbar
Klíč Nalezeno : HKCU\Software\GlobalUpdate
Klíč Nalezeno : HKCU\Software\InstalledBrowserExtensions
Klíč Nalezeno : HKCU\Software\MaxiGet
Klíč Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{95B7759C-8C7F-4BF1-B163-73684A933233}
Klíč Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{E4E012DC-1925-48E9-8010-2D195574642A}
Klíč Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}
Klíč Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E4E012DC-1925-48E9-8010-2D195574642A}
Klíč Nalezeno : HKCU\Software\Smart PC Solutions
Klíč Nalezeno : [x64] HKCU\Software\AVG SafeGuard toolbar
Klíč Nalezeno : [x64] HKCU\Software\AVG Security Toolbar
Klíč Nalezeno : [x64] HKCU\Software\GlobalUpdate
Klíč Nalezeno : [x64] HKCU\Software\InstalledBrowserExtensions
Klíč Nalezeno : [x64] HKCU\Software\MaxiGet
Klíč Nalezeno : [x64] HKCU\Software\Smart PC Solutions
Klíč Nalezeno : HKLM\SOFTWARE\{12A61307-94CD-4F8E-94BC-918E511FAA81}
Klíč Nalezeno : HKLM\SOFTWARE\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}
Klíč Nalezeno : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Klíč Nalezeno : HKLM\SOFTWARE\{4A0F38A9-FE55-4B89-B73F-E60FDC0F72E9}
Klíč Nalezeno : HKLM\SOFTWARE\55c65df1-8c47-4329-8549-ecf27311656f
Klíč Nalezeno : HKLM\SOFTWARE\5dc123cb-b3a9-af07-a10c-43d112229049
Klíč Nalezeno : HKLM\SOFTWARE\766ee0b6-227a-45a7-9a60-2f65184529f0
Klíč Nalezeno : HKLM\SOFTWARE\a0beab77-d3c0-4ed3-bd89-eae8bb88f625
Klíč Nalezeno : HKLM\SOFTWARE\AVG SafeGuard toolbar
Klíč Nalezeno : HKLM\SOFTWARE\AVG Security Toolbar
Klíč Nalezeno : HKLM\SOFTWARE\be7d8dc4-7c7d-4063-896c-18d160d8d1ed
Klíč Nalezeno : HKLM\SOFTWARE\Classes\*\shellex\ContextMenuHandlers\SysMenuExt
Klíč Nalezeno : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\AppID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\AppID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\AppID\{58FDA6AF-67D8-4198-B7CD-94B17532C8D5}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\AppID\{D813D5BB-EBC7-45F9-B8A4-36A305168069}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\AppID\ShopperPro.DLL
Klíč Nalezeno : HKLM\SOFTWARE\Classes\AppID\SysMenu.DLL
Klíč Nalezeno : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL
Klíč Nalezeno : HKLM\SOFTWARE\Classes\AVG SafeGuard toolbar.BrowserWndAPI
Klíč Nalezeno : HKLM\SOFTWARE\Classes\AVG SafeGuard toolbar.BrowserWndAPI.1
Klíč Nalezeno : HKLM\SOFTWARE\Classes\AVG SafeGuard toolbar.PugiObj
Klíč Nalezeno : HKLM\SOFTWARE\Classes\AVG SafeGuard toolbar.PugiObj.1
Klíč Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{02A96331-0CA6-40E2-A87D-C224601985EB}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{3B5702BA-7F4C-4D1A-B026-1E9A01D43978}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{69F256DF-BA98-45E9-86EA-FC3CFECF9D30}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{6E87FC94-9866-49B9-8E93-5736D6DE3DD7}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{6E993643-8FBC-44FE-BC85-D318495C4D96}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{7E49F793-B3CD-4BF7-8419-B34B8BD30E61}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{834469E3-CA2B-4F21-A5CA-4F6F4DBCDE87}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{8529FAA3-5BFD-43C1-AB35-B53C4B96C6E5}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{933B95E2-E7B7-4AD9-B952-7AC336682AE3}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{ADBC39BE-3D20-4333-8D99-E91EB1B62474}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{CFC47BB5-5FB5-4AD0-8427-6AA04334A3FC}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{E06CA7F5-BA34-4FF6-8D24-B1BDC594D91F}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{E0ADB535-D7B5-4D8B-B15D-578BDD20D76A}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{E4E012DC-1925-48E9-8010-2D195574642A}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{F6421EE5-A5BE-4D31-81D5-C16B7BF48E4C}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{FD8E81D0-F5FE-4CB1-9AEA-1E163D2BAB78}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\globalUpdate.Update3WebControl.4
Klíč Nalezeno : HKLM\SOFTWARE\Classes\Installer\Features\B696D3C37BD0D6C33A65D38BEC459181
Klíč Nalezeno : HKLM\SOFTWARE\Classes\Installer\Products\B696D3C37BD0D6C33A65D38BEC459181
Klíč Nalezeno : HKLM\SOFTWARE\Classes\Interface\{03C0AC00-86DE-4B55-81BA-2E7CD61C51B1}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\protocols\handler\viprotocol
Klíč Nalezeno : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi
Klíč Nalezeno : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1
Klíč Nalezeno : HKLM\SOFTWARE\Classes\ShopperPro.ShopperProBHO
Klíč Nalezeno : HKLM\SOFTWARE\Classes\ShopperPro.ShopperProBHO.1
Klíč Nalezeno : HKLM\SOFTWARE\Classes\TypeLib\{2105FE20-DEBD-4084-A306-61C5DA001CCA}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\TypeLib\{81FE6D2E-CF13-4E70-88CF-68C16FB0AF4B}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\TypeLib\{8FB1A663-2820-468B-95C4-5060A4C5F413}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\TypeLib\{A0B55F99-F893-4F84-AE82-CAE0E70DFDFA}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE
Klíč Nalezeno : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1
Klíč Nalezeno : HKLM\SOFTWARE\dll-files.com
Klíč Nalezeno : HKLM\SOFTWARE\GlobalUpdate
Klíč Nalezeno : HKLM\SOFTWARE\InstalledBrowserExtensions
Klíč Nalezeno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Klíč Nalezeno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
Klíč Nalezeno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Klíč Nalezeno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Klíč Nalezeno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}
Klíč Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\YTDownloader.exe
Klíč Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E4E012DC-1925-48E9-8010-2D195574642A}
Klíč Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Klíč Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC}
Klíč Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Klíč Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706}
Klíč Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}{f275c174}
Klíč Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG SafeGuard toolbar
Klíč Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ShopperPro
Klíč Nalezeno : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin
Klíč Nalezeno : HKLM\SOFTWARE\Sense
Klíč Nalezeno : HKLM\SOFTWARE\SupDp
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Classes\CLSID\{020B1D4B-5738-4C77-9E19-4F173DD9B486}
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Classes\CLSID\{E4E012DC-1925-48E9-8010-2D195574642A}
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Classes\Interface\{03C0AC00-86DE-4B55-81BA-2E7CD61C51B1}
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Klíč Nalezeno : [x64] HKLM\SOFTWARE\InstalledBrowserExtensions
Klíč Nalezeno : [x64] HKLM\SOFTWARE\MaxiGet
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E4E012DC-1925-48E9-8010-2D195574642A}
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\B696D3C37BD0D6C33A65D38BEC459181
Klíč Nalezeno : [x64] HKLM\SOFTWARE\ShopperPro
Klíč Nalezeno : [x64] HKLM\SOFTWARE\YTDownloader
Klíč Nalezeno : HKU\.DEFAULT\Software\AVG SafeGuard toolbar

***** [ Prohlížeče ] *****

-\\ Internet Explorer v11.0.9600.17416

Nastavení Nalezeno : HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls [Tabs] - hxxp://search.b1.org/?bsrc=ecior&chid=c169741&qq=

-\\ Mozilla Firefox v36.0.4 (x86 cs)

[4e2i2mzj.default-1427983688974] - Řádek Nalezeno : user_pref("browser.search.defaultenginename", "mystartsearch");
[4e2i2mzj.default-1427983688974] - Řádek Nalezeno : user_pref("browser.search.defaultenginename,S", "WebSearch");
[4e2i2mzj.default-1427983688974] - Řádek Nalezeno : user_pref("browser.search.defaulturl", "hxxp://websearch.goodforsearch.info/?pid=2921&r=2015/04/14&hid=1666066915964510041&lg=EN&cc=CZ&unqvl=86&l=1&q=");
[4e2i2mzj.default-1427983688974] - Řádek Nalezeno : user_pref("browser.search.order.1", "WebSearch");
[4e2i2mzj.default-1427983688974] - Řádek Nalezeno : user_pref("browser.search.order.1,S", "WebSearch");
[4e2i2mzj.default-1427983688974] - Řádek Nalezeno : user_pref("browser.search.searchengine.alias", "mystartsearch");
[4e2i2mzj.default-1427983688974] - Řádek Nalezeno : user_pref("browser.search.searchengine.iconURL", "hxxp://www.mystartsearch.com/favicon.ico");
[4e2i2mzj.default-1427983688974] - Řádek Nalezeno : user_pref("browser.search.searchengine.name", "mystartsearch");
[4e2i2mzj.default-1427983688974] - Řádek Nalezeno : user_pref("browser.search.searchengine.url", "hxxp://www.mystartsearch.com/web/?type=ds&ts=1429119078&from=ium6&uid=OCZ-VERTEX4_OCZ-I2IK72G4YZ21Y913&q={searchTerms}");
[4e2i2mzj.default-1427983688974] - Řádek Nalezeno : user_pref("browser.search.selectedEngine", "mystartsearch");
[4e2i2mzj.default-1427983688974] - Řádek Nalezeno : user_pref("browser.search.selectedEngine,S", "WebSearch");
[4e2i2mzj.default-1427983688974] - Řádek Nalezeno : user_pref("extensions.quick_start.enable_search1", false);
[4e2i2mzj.default-1427983688974] - Řádek Nalezeno : user_pref("extensions.quick_start.sd.closeWindowWithLastTab_prev_state", false);

-\\ Google Chrome v42.0.2311.90

[C:\Users\Dan21\AppData\Local\Google\Chrome\User Data\Default\Web data] - Nalezeno [Search Provider] : hxxp://websearch.goodforsearch.info/?l=1&q={searchTerms}&pid=2921&r=2015/04/14&hid=1666066915964510041&lg=EN&cc=CZ&unqvl=86
[C:\Users\Dan21\AppData\Local\Google\Chrome\User Data\Default\Web data] - Nalezeno [Search Provider] : hxxp://www.mystartsearch.com/web/?type= ... Z21Y913&q={searchTerms}
[C:\Users\Dan21\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Nalezeno [Extension] : ckdanlhlojgpeaafkickdlmiolofdmbk
[C:\Users\Dan21\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Nalezeno [Extension] : ddmnhgomjpndnmagiohmgekaiiepofki
[C:\Users\Dan21\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Nalezeno [Extension] : dhggmjnddlicafhokjhiohogknnebjff
[C:\Users\Dan21\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Nalezeno [Extension] : fbgiodadlnllcegeenpfmomefhhpgkdn
[C:\Users\Dan21\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Nalezeno [Default_Search_Provider_Data] : hxxp://www.mystartsearch.com/web/?type= ... Z21Y913&q={searchTerms}

-\\ Chromium v


*************************

AdwCleaner[R0].txt - [19273 bytů] - [25/04/2015 11:44:03]

########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [19332 bytů] ##########


LOG z Malwarebytes


Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 25. 4. 2015
Scan Time: 11:46:20
Logfile: ff.txt
Administrator: Yes

Version: 2.00.4.1028
Malware Database: v2015.04.24.06
Rootkit Database: v2015.04.21.01
License: Free
Malware Protection: Disabled
Malicious Website Protection: Disabled
Self-protection: Disabled

OS: Windows 8.1
CPU: x64
File System: NTFS
User: Dan21

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 344096
Time Elapsed: 5 min, 18 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 1
PUP.Optional.SavePass.A, HKLM\SOFTWARE\WOW6432NODE\SavePass 1.1-nv, , [42246b059ded62d480ea6288c93a8080],

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 49
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update, , [61050d63ee9c4fe79b47d8ce62a1857b],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0, , [61050d63ee9c4fe79b47d8ce62a1857b],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\Download, , [61050d63ee9c4fe79b47d8ce62a1857b],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\Install, , [61050d63ee9c4fe79b47d8ce62a1857b],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\Offline, , [61050d63ee9c4fe79b47d8ce62a1857b],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\Offline\{6976107B-FD1A-4921-A09A-4D7746380AB0}, , [61050d63ee9c4fe79b47d8ce62a1857b],
PUP.Optional.GeForce.A, C:\Program Files (x86)\Ge-Force, , [471fb3bd5634f343bb7f95126b989e62],
PUP.Optional.SavePass.A, C:\Program Files (x86)\SavePass 1.1, , [f373bab61d6d75c12da64268f80b15eb],
PUP.Optional.ShopperPro, C:\ProgramData\ShopperPro, , [c2a4f0801d6df244f803e3c9c63da55b],
PUP.Optional.ShopperPro.A, C:\Users\Public\Documents\ShopperPro, , [b3b35e1295f549ed2b1f5a67867d7789],
PUP.Optional.ShopperPro.A, C:\Users\Public\Documents\ShopperPro\JsDriver, , [b3b35e1295f549ed2b1f5a67867d7789],
PUP.Optional.MetalMaker.A, C:\Program Files (x86)\Metal Maker, , [92d48be5820868ce4141fbc64fb435cb],
PUP.Optional.QuickSearch.A, C:\Users\Dan21\AppData\Roaming\Mozilla\Firefox\Profiles\4e2i2mzj.default-1427983688974\extensions\quick_searchff@gmail.com, , [0b5b373968222610378c853ddd263cc4],
PUP.Optional.QuickSearch.A, C:\Users\Dan21\AppData\Roaming\Mozilla\Firefox\Profiles\4e2i2mzj.default-1427983688974\extensions\quick_searchff@gmail.com\chrome, , [0b5b373968222610378c853ddd263cc4],
PUP.Optional.QuickSearch.A, C:\Users\Dan21\AppData\Roaming\Mozilla\Firefox\Profiles\4e2i2mzj.default-1427983688974\extensions\quick_searchff@gmail.com\chrome\content, , [0b5b373968222610378c853ddd263cc4],
PUP.Optional.QuickSearch.A, C:\Users\Dan21\AppData\Roaming\Mozilla\Firefox\Profiles\4e2i2mzj.default-1427983688974\extensions\quick_searchff@gmail.com\chrome\content\include, , [0b5b373968222610378c853ddd263cc4],
PUP.Optional.QuickSearch.A, C:\Users\Dan21\AppData\Roaming\Mozilla\Firefox\Profiles\4e2i2mzj.default-1427983688974\extensions\quick_searchff@gmail.com\chrome\content\include\tools, , [0b5b373968222610378c853ddd263cc4],
PUP.Optional.QuickSearch.A, C:\Users\Dan21\AppData\Roaming\Mozilla\Firefox\Profiles\4e2i2mzj.default-1427983688974\extensions\quick_searchff@gmail.com\chrome\content\js, , [0b5b373968222610378c853ddd263cc4],
PUP.Optional.QuickSearch.A, C:\Users\Dan21\AppData\Roaming\Mozilla\Firefox\Profiles\4e2i2mzj.default-1427983688974\extensions\quick_searchff@gmail.com\chrome\content\js\lib, , [0b5b373968222610378c853ddd263cc4],
PUP.Optional.QuickSearch.A, C:\Users\Dan21\AppData\Roaming\Mozilla\Firefox\Profiles\4e2i2mzj.default-1427983688974\extensions\quick_searchff@gmail.com\chrome\content\js\module, , [0b5b373968222610378c853ddd263cc4],
PUP.Optional.QuickSearch.A, C:\Users\Dan21\AppData\Roaming\Mozilla\Firefox\Profiles\4e2i2mzj.default-1427983688974\extensions\quick_searchff@gmail.com\chrome\content\js\pack, , [0b5b373968222610378c853ddd263cc4],
PUP.Optional.QuickSearch.A, C:\Users\Dan21\AppData\Roaming\Mozilla\Firefox\Profiles\4e2i2mzj.default-1427983688974\extensions\quick_searchff@gmail.com\chrome\locale, , [0b5b373968222610378c853ddd263cc4],
PUP.Optional.QuickSearch.A, C:\Users\Dan21\AppData\Roaming\Mozilla\Firefox\Profiles\4e2i2mzj.default-1427983688974\extensions\quick_searchff@gmail.com\chrome\locale\en, , [0b5b373968222610378c853ddd263cc4],
PUP.Optional.QuickSearch.A, C:\Users\Dan21\AppData\Roaming\Mozilla\Firefox\Profiles\4e2i2mzj.default-1427983688974\extensions\quick_searchff@gmail.com\chrome\locale\en-US, , [0b5b373968222610378c853ddd263cc4],
PUP.Optional.QuickSearch.A, C:\Users\Dan21\AppData\Roaming\Mozilla\Firefox\Profiles\4e2i2mzj.default-1427983688974\extensions\quick_searchff@gmail.com\chrome\locale\es, , [0b5b373968222610378c853ddd263cc4],
PUP.Optional.QuickSearch.A, C:\Users\Dan21\AppData\Roaming\Mozilla\Firefox\Profiles\4e2i2mzj.default-1427983688974\extensions\quick_searchff@gmail.com\chrome\locale\es-419, , [0b5b373968222610378c853ddd263cc4],
PUP.Optional.QuickSearch.A, C:\Users\Dan21\AppData\Roaming\Mozilla\Firefox\Profiles\4e2i2mzj.default-1427983688974\extensions\quick_searchff@gmail.com\chrome\locale\fr, , [0b5b373968222610378c853ddd263cc4],
PUP.Optional.QuickSearch.A, C:\Users\Dan21\AppData\Roaming\Mozilla\Firefox\Profiles\4e2i2mzj.default-1427983688974\extensions\quick_searchff@gmail.com\chrome\locale\fr-BE, , [0b5b373968222610378c853ddd263cc4],
PUP.Optional.QuickSearch.A, C:\Users\Dan21\AppData\Roaming\Mozilla\Firefox\Profiles\4e2i2mzj.default-1427983688974\extensions\quick_searchff@gmail.com\chrome\locale\fr-CA, , [0b5b373968222610378c853ddd263cc4],
PUP.Optional.QuickSearch.A, C:\Users\Dan21\AppData\Roaming\Mozilla\Firefox\Profiles\4e2i2mzj.default-1427983688974\extensions\quick_searchff@gmail.com\chrome\locale\fr-CH, , [0b5b373968222610378c853ddd263cc4],
PUP.Optional.QuickSearch.A, C:\Users\Dan21\AppData\Roaming\Mozilla\Firefox\Profiles\4e2i2mzj.default-1427983688974\extensions\quick_searchff@gmail.com\chrome\locale\fr-LU, , [0b5b373968222610378c853ddd263cc4],
PUP.Optional.QuickSearch.A, C:\Users\Dan21\AppData\Roaming\Mozilla\Firefox\Profiles\4e2i2mzj.default-1427983688974\extensions\quick_searchff@gmail.com\chrome\locale\it, , [0b5b373968222610378c853ddd263cc4],
PUP.Optional.QuickSearch.A, C:\Users\Dan21\AppData\Roaming\Mozilla\Firefox\Profiles\4e2i2mzj.default-1427983688974\extensions\quick_searchff@gmail.com\chrome\locale\it-CH, , [0b5b373968222610378c853ddd263cc4],
PUP.Optional.QuickSearch.A, C:\Users\Dan21\AppData\Roaming\Mozilla\Firefox\Profiles\4e2i2mzj.default-1427983688974\extensions\quick_searchff@gmail.com\chrome\locale\pl, , [0b5b373968222610378c853ddd263cc4],
PUP.Optional.QuickSearch.A, C:\Users\Dan21\AppData\Roaming\Mozilla\Firefox\Profiles\4e2i2mzj.default-1427983688974\extensions\quick_searchff@gmail.com\chrome\locale\pt-BR, , [0b5b373968222610378c853ddd263cc4],
PUP.Optional.QuickSearch.A, C:\Users\Dan21\AppData\Roaming\Mozilla\Firefox\Profiles\4e2i2mzj.default-1427983688974\extensions\quick_searchff@gmail.com\chrome\locale\ru, , [0b5b373968222610378c853ddd263cc4],
PUP.Optional.QuickSearch.A, C:\Users\Dan21\AppData\Roaming\Mozilla\Firefox\Profiles\4e2i2mzj.default-1427983688974\extensions\quick_searchff@gmail.com\chrome\locale\ru-MO, , [0b5b373968222610378c853ddd263cc4],
PUP.Optional.QuickSearch.A, C:\Users\Dan21\AppData\Roaming\Mozilla\Firefox\Profiles\4e2i2mzj.default-1427983688974\extensions\quick_searchff@gmail.com\chrome\locale\tr, , [0b5b373968222610378c853ddd263cc4],
PUP.Optional.QuickSearch.A, C:\Users\Dan21\AppData\Roaming\Mozilla\Firefox\Profiles\4e2i2mzj.default-1427983688974\extensions\quick_searchff@gmail.com\chrome\locale\vi, , [0b5b373968222610378c853ddd263cc4],
PUP.Optional.QuickSearch.A, C:\Users\Dan21\AppData\Roaming\Mozilla\Firefox\Profiles\4e2i2mzj.default-1427983688974\extensions\quick_searchff@gmail.com\chrome\locale\zh-CN, , [0b5b373968222610378c853ddd263cc4],
PUP.Optional.QuickSearch.A, C:\Users\Dan21\AppData\Roaming\Mozilla\Firefox\Profiles\4e2i2mzj.default-1427983688974\extensions\quick_searchff@gmail.com\chrome\locale\zh-TW, , [0b5b373968222610378c853ddd263cc4],
PUP.Optional.QuickSearch.A, C:\Users\Dan21\AppData\Roaming\Mozilla\Firefox\Profiles\4e2i2mzj.default-1427983688974\extensions\quick_searchff@gmail.com\chrome\skin, , [0b5b373968222610378c853ddd263cc4],
PUP.Optional.QuickSearch.A, C:\Users\Dan21\AppData\Roaming\Mozilla\Firefox\Profiles\4e2i2mzj.default-1427983688974\extensions\quick_searchff@gmail.com\defaults, , [0b5b373968222610378c853ddd263cc4],
PUP.Optional.QuickSearch.A, C:\Users\Dan21\AppData\Roaming\Mozilla\Firefox\Profiles\4e2i2mzj.default-1427983688974\extensions\quick_searchff@gmail.com\defaults\preferences, , [0b5b373968222610378c853ddd263cc4],
PUP.Optional.QuickSearch.A, C:\Users\Dan21\AppData\Roaming\Mozilla\Firefox\Profiles\4e2i2mzj.default-1427983688974\extensions\quick_searchff@gmail.com\modules, , [0b5b373968222610378c853ddd263cc4],
PUP.Optional.SweetSearch.A, C:\Users\Dan21\AppData\Roaming\Mozilla\Firefox\Profiles\4e2i2mzj.default-1427983688974\extensions\sweetsearch@gmail.com, , [b3b3313fa3e7a096467e249e50b355ab],
PUP.Optional.SweetSearch.A, C:\Users\Dan21\AppData\Roaming\Mozilla\Firefox\Profiles\4e2i2mzj.default-1427983688974\extensions\sweetsearch@gmail.com\chrome, , [b3b3313fa3e7a096467e249e50b355ab],
PUP.Optional.SweetSearch.A, C:\Users\Dan21\AppData\Roaming\Mozilla\Firefox\Profiles\4e2i2mzj.default-1427983688974\extensions\sweetsearch@gmail.com\chrome\content, , [b3b3313fa3e7a096467e249e50b355ab],
PUP.Optional.SweetSearch.A, C:\Users\Dan21\AppData\Roaming\Mozilla\Firefox\Profiles\4e2i2mzj.default-1427983688974\extensions\sweetsearch@gmail.com\chrome\skin, , [b3b3313fa3e7a096467e249e50b355ab],

Files: 2
PUP.Optional.SavePass.A, C:\Program Files (x86)\SavePass 1.1\de666d5c-347e-4e1b-bd1b-a6d4a6266daa-6.exe, , [f373bab61d6d75c12da64268f80b15eb],
PUP.Optional.MyStartSearch.A, C:\Users\Dan21\AppData\Roaming\Mozilla\Firefox\Profiles\4e2i2mzj.default-1427983688974\search.json, Good: (), Bad: (), ,[ed79135d0387bc7a4bc5f2526b9bdf21]

Physical Sectors: 0
(No malicious items detected)


(end)

Znovu spusť MbAM a dej Skenovat nyní
Po proběhnutí programu se ti objeví hláška, tak klikni na „Vše do karantény“ -> „Exportovat záznam“ a vyber „textový soubor“ , soubor nějak pojmenuj a ulož na Plochu.
Zkopíruj sem celý obsah toho logu.

====================================================

Spusť znovu AdwCleaner (u Windows Vista či Windows7, klikni na AdwCleaner pravým a vyber „Spustit jako správce“
Klikni na „ Smazat“
Program provede opravu, po automatickém restartu neukáže log (C:\AdwCleaner [S?].txt) , jeho obsah sem celý vlož.

====================================================

Stáhni si Junkware Removal Tool

na svojí plochu.
Deaktivuj si svůj antivirový program.
Pravým tl. myši klikni na JRT.exe a vyber „spustit jako správce“. Pro pokračování budeš vyzván ke stisknutí jakékoliv klávesy. Na nějakou klikni.
Začne skenování programu. Skenování může trvat dloho , podle množství nákaz. Po ukončení skenu se objeví log (JRT.txt) , který se uloží na ploše.
Zkopíruj sem prosím celý jeho obsah.

====================================================

Stáhni si RogueKiller
32bit.:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
64bit.:
http://www.sur-la-toile.com/RogueKiller ... lerX64.exe
na svojí plochu.
- Zavři všechny ostatní programy a prohlížeče.
- Pro OS Vista a win7 spusť program RogueKiller.exe jako správce , u XP poklepáním.
- počkej až skončí Prescan -vyhledávání škodlivých procesů.
- Zkontroluj , zda máš zaškrtnuto:
Kontrola MBR
Kontrola Faked
Antirootkit
-Potom klikni na „Prohledat“.
- Program skenuje procesy PC. Po proskenování klikni na „Zpráva“celý obsah logu sem zkopíruj.
Pokud je program blokován , zkus ho spustit několikrát. Pokud dále program nepůjde spustit a pracovat, přejmenuj ho na winlogon.exe.

Logy příště prosím nevkládej do tagu Code. Děkuji za pochopení

Zavři všechny programy a prohlížeče. Deaktivuj antivir a firewall.
Prosím, odpoj všechny USB (kromě myši s klávesnice) nebo externí disky z počítače před spuštěním tohoto programu.
Spusť znovu RogueKiller ( Pro Windows Vista nebo Windows 7, klepni pravým a vyber "Spustit jako správce", ve Windows XP poklepej ke spuštění).
- Počkej, až Prescan dokončí práci...
- Pak klikni na "Prohledat " ,po jeho skončení:
- V záložkách (Registry , Tasks , Web Browser apod.) vše zatrhni (dej zatržítka)
(musíš dát myší zatržítko do toho čtverečku vlevo od registru ap.)
- Klikni na "Smazat"
- Počkej, dokud Status box nezobrazí " Mazání dokončeno "
- Klikni na "Zpráva " a zkopíruj a vlož obsah té zprávy prosím sem. Log je možno nalézt v RKreport [číslo]. txt na ploše.
- Zavři RogueKiller

Vypni antivir
Stáhni
Zoek.exe

a uloz si ho na plochu.
Zavři všechny ostatní programy , okna i prohlížeče.
Spusť Zoek.exe ( u win vista , win7, 8 klikni na něj pravým a vyber : „Spustit jako správce“
- pozor , náběh programu může trvat déle.

Do okna programu vlož skript níže:


klikni na Run Script
Program provede sken , opravu, sken i oprava může trvat i více minut ,je třeba posečkat do konce. Do okna neklikej!
Program nabídne restart , potvrď .

Po restartu se může nějaký čas ukázat pouze černá plocha , to je normální. Je třeba počkat až se vytvoří log. Ten si můžeš uložit třeba do dokumentů , jinak se sám ukládá do:
C:\zoek-results.log
Zkopíruj sem celý obsah toho logu.

Vlož nový log z HJT + informuj o problémech.