PC-HELP.CZ

České diskuzní fórum o počítačích
https://pc-help.cnews.cz/

Prosím o kontrolu logu

https://pc-help.cnews.cz/viewtopic.php?f=70&t=156054

Stránka 1 z 1

Prosím o kontrolu logu

Napsal: 10 čer 2015 20:10
od mylbl
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:57:23, on 10. 6. 2015
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.17416)

FIREFOX: 38.0.5 (x86 cs)
Boot mode: Normal

Running processes:
c:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgent.exe
C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe
C:\Program Files (x86)\CyberLink\Webcam Sharing Manager\StreamProvider.exe
C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\coreshredder.exe
C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\gmsd_re_262\gmsd_re_262.exe
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Users\Míla\Downloads\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.istartsurf.com/?type=hppp&ts ... RNPKJMRNPX
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.istartsurf.com/web/?type=dsp ... KJMRNPX&q={searchTerms}
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Preserve
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.istartsurf.com/web/?type=dsp ... KJMRNPX&q={searchTerms}
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.istartsurf.com/?type=hppp&ts ... RNPKJMRNPX
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.istartsurf.com/web/?type=ds& ... KJMRNPX&q={searchTerms}
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.istartsurf.com/web/?type=ds& ... KJMRNPX&q={searchTerms}
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.istartsurf.com/?type=hppp&ts ... RNPKJMRNPX
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,First Home Page = http://www.bing.com?pc=CMNTDFJS
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: BHO_Startup - {3134413B-49B4-425C-98A5-893C1F195601} - c:\Program Files (x86)\Hewlett-Packard\File Sanitizer\IEBHO.dll
O2 - BHO: (no name) - {51D26BB4-4D2C-4AE4-9873-5FF41B6DED1F} - (no file)
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL
O2 - BHO: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll
O2 - BHO: SmartBar Helper Object - {FD36FEBE-DBA1-4597-9DD1-B13794B92F68} - (no file)
O4 - HKLM\..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe "C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" 60
O4 - HKLM\..\Run: [PDF Complete] C:\Program Files (x86)\PDF Complete\pdfsty.exe
O4 - HKLM\..\Run: [StartCCC] "c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [QLBController] C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe /start
O4 - HKLM\..\Run: [BtTray] "c:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe"
O4 - HKLM\..\Run: [CLWCSM] "c:\Program Files (x86)\CyberLink\Webcam Sharing Manager\StreamProvider.exe"
O4 - HKLM\..\Run: [AccelerometerSysTrayApplet] C:\Program Files (x86)\Hewlett-Packard\HP 3D DriveGuard\AccelerometerST.exe
O4 - HKLM\..\Run: [File Sanitizer] c:\Program Files (x86)\Hewlett-Packard\File Sanitizer\CoreShredder.exe
O4 - HKLM\..\Run: [YouCam Mirage] "c:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe"
O4 - HKLM\..\Run: [YouCam Tray] "c:\Program Files (x86)\CyberLink\YouCam\YouCamTray.exe" /s
O4 - HKLM\..\Run: [CLMLServer_For_P2G8] "c:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe"
O4 - HKLM\..\Run: [CLVirtualDrive] "c:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe" /R
O4 - HKLM\..\Run: [StartW8Button] C:\Program Files (x86)\StartW8\bin\StartW8Button.exe
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [gmsd_re_262] "C:\Program Files (x86)\gmsd_re_262\gmsd_re_262.exe"
O4 - HKLM\..\RunOnce: [upgmsd_re_262.exe] C:\Users\Míla\AppData\Local\gmsd_re_262\upgmsd_re_262.exe -runonce
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [GoogleChromeAutoLaunch_2ABB695466958159BCECA781241B82DC] "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window
O4 - Global Startup: vpngui.exe.lnk = ?
O9 - Extra button: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-103 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-102 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - res://C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll/204 (file missing)
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - res://C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll/204 (file missing)
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\windows\SysWow64\skype4com.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\WINDOWS\system32\atiesrxx.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: BlueSoleilCS - IVT Corporation - C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: BsHelpCS - IVT Corporation - C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: Cisco Systems, Inc. VPN Service (CVPND) - Cisco Systems, Inc. - C:\Program Files (x86)\Cisco Systems\VPN Client\cvpnd.exe
O23 - Service: DigitalPersona Ověřovací služba (DpHost) - DigitalPersona, Inc. - c:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe
O23 - Service: DraftSight API Service - Dassault Systemes - C:\Program Files\Dassault Systemes\DraftSight\bin\dsHttpApiService.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: HP Device Locking / Auditing (FLCDLOCK) - Hewlett-Packard Company - c:\windows\SysWOW64\flcdlock.exe
O23 - Service: FlexNet Licensing Service - Flexera Software LLC - C:\Program Files (x86)\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService.exe
O23 - Service: FLEXnet Licensing Service 64 - Flexera Software, Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: HP HotSpot 1.0 Service (HotSpotSrv) - Hewlett-Packard Development Company, L.P. - C:\Program Files (x86)\Hewlett-Packard\HP Wireless Hotspot\HotSpotSrv.exe
O23 - Service: HP Support Assistant Service - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
O23 - Service: HP File Sanitizer (HPFSService) - Hewlett-Packard - c:\Program Files (x86)\Hewlett-Packard\File Sanitizer\HPFSService.exe
O23 - Service: hpHotkeyMonitor - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe
O23 - Service: HP Software Framework Service (hpqwmiex) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
O23 - Service: @oem33.inf,%hpservice_desc%;HP Service (hpsrv) - Unknown owner - C:\WINDOWS\system32\Hpservice.exe (file missing)
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: Intel(R) Integrated Clock Controller Service - Intel(R) ICCS (ICCS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService1.0.0.0) - Unknown owner - C:\WINDOWS\system32\igfxCUIService.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - c:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) ME Service - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: PDF Document Manager (pdfcDispatcher) - PDF Complete Inc - C:\Program Files (x86)\PDF Complete\pdfsvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Sentinel Keys Server (SentinelKeysServer) - SafeNet, Inc. - C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe
O23 - Service: Sentinel Protection Server (SentinelProtectionServer) - SafeNet, Inc - C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe
O23 - Service: Sentinel Security Runtime (SentinelSecurityRuntime) - SafeNet, Inc. - C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Security Runtime\sntlsrtsrvr.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\stlang64.dll,-10122 (STacSV) - IDT, Inc. - C:\Program Files\IDT\WDM\STacSV64.exe
O23 - Service: StartW8Service - SODATSW spol. s .r.o. - C:\Program Files (x86)\StartW8\bin\StartW8Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: Update Pine Tree - Unknown owner - C:\Program Files (x86)\Pine Tree\updatePineTree.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Validity VCS Fingerprint Service (vcsFPService) - Validity Sensors, Inc. - C:\windows\system32\vcsFPService.exe
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 16394 bytes

Re: Prosím o kontrolu logu

Napsal: 10 čer 2015 20:14
od jerabina
Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected. Poté klikni na Main (hlavní stránku ) a klikni na Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranění historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit dočasné soubory Windows, vysypat koš atd.

- Pokud používáš jen Google Chrome , tak ATF nemusíš použít.

===================================================

Stáhni si TFC
Otevři soubor a zavři všechny ostatní okna, Klikni na Start k zahájení procesu. Program by neměl trvat dlouho.
Poté by se měl PC restartovat, pokud ne , proveď sám.

===================================================

Stáhni AdwCleaner (by Xplode)

Ulož si ho na svojí plochu
Ukonči všechny programy , okna a prohlížeče
Spusť program poklepáním a klikni na „Prohledat-Scan“
Po skenu se objeví log ( jinak je uložen systémovem disku jako AdwCleaner[R?].txt), jeho obsah sem celý vlož.

===================================================

Stáhni si Malwarebytes' Anti-Malware
- Při instalaci odeber zatržítko u „Povolit bezplatnou zkušební verzi Malwarebytes' Anti-Malware Premium“
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Aktualizace Malwarebytes' Anti-Malware a Spustit aplikaci Malwarebytes' Anti-Malware, pokud jo tak klikni na tlačítko konec
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a klikni na Skenovat nyní a
- po proběhnutí programu se ti objeví hláška vpravo dole tak klikni na Kopírovat do schránky a a vlož sem celý log.

- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).

Pokud budou problémy , spusť v nouz. režimu.

Re: Prosím o kontrolu logu

Napsal: 11 čer 2015 09:47
od mylbl
Předchozí dva způsoby nic neprovedly, zkusil jsem Malwarebytes a tady je log, Předem všem moc děkuju. m

Malwarebytes Anti-Malware
www.malwarebytes.org

Datum skenování: 10. 6. 2015
Čas skenování: 21:03:33
Protokol:
Správce: Ano

Verze: 2.01.6.1022
Databáze malwaru: v2015.06.10.05
Databáze rootkitů: v2015.06.02.01
Licence: Zkušební verze
Ochrana proti malwaru: Zapnuto
Ochrana proti škodlivým webovým stránkám: Zapnuto
Ochrana programu: Vypnuto

OS: Windows 8.1
CPU: x64
Souborový systém: NTFS
Uživatel: Míla

Typ skenu: Sken hrozeb
Výsledek: Dokončeno
Prohledaných objektů: 411757
Uplynulý čas: 28 min, 34 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Vypnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto

Procesy: 2
PUP.Optional.GamesDesktop.A, C:\Program Files (x86)\gmsd_re_262\gmsd_re_262.exe, 5608, , [9cdddd664842a98d4557447133d05ea2]
PUP.Optional.GamesDesktop.A, C:\Users\Míla\AppData\Local\gmsd_re_262\upgmsd_re_262.exe, 4628, , [2158db6805850135cfb53e5a7f8407f9]

Moduly: 0
(Nenalezeny žádné škodlivé položky)

Klíče registru: 77
PUP.Optional.Smartbar.A, HKU\S-1-5-21-556047477-119812697-3251834620-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{FD36FEBE-DBA1-4597-9DD1-B13794B92F68}, , [a4d52b185436c472ba413d176a99b64a],
PUP.Optional.Smartbar.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{FD36FEBE-DBA1-4597-9DD1-B13794B92F68}, , [a4d52b185436c472ba413d176a99b64a],
PUP.Optional.Smartbar.A, HKLM\SOFTWARE\CLASSES\Bechiro.smartbarHlpr, , [a4d52b185436c472ba413d176a99b64a],
PUP.Optional.Smartbar.A, HKLM\SOFTWARE\CLASSES\Bechiro.smartbarHlpr.1, , [a4d52b185436c472ba413d176a99b64a],
PUP.Optional.Smartbar.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Bechiro.smartbarHlpr, , [a4d52b185436c472ba413d176a99b64a],
PUP.Optional.Smartbar.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Bechiro.smartbarHlpr.1, , [a4d52b185436c472ba413d176a99b64a],
PUP.Optional.Smartbar.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\Bechiro.smartbarHlpr, , [a4d52b185436c472ba413d176a99b64a],
PUP.Optional.Smartbar.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\Bechiro.smartbarHlpr.1, , [a4d52b185436c472ba413d176a99b64a],
PUP.Optional.Smartbar.A, HKLM\SOFTWARE\CLASSES\Bechiro.smartbardskBnd, , [423776cdfe8c1d19609a67ed6f9446ba],
PUP.Optional.Smartbar.A, HKLM\SOFTWARE\CLASSES\Bechiro.smartbardskBnd.1, , [3a3fcf743159b581bc3e56feeb1809f7],
PUP.Optional.Smartbar.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Bechiro.smartbardskBnd, , [3a3fcf743159b581bc3e56feeb1809f7],
PUP.Optional.Smartbar.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Bechiro.smartbardskBnd.1, , [3a3fcf743159b581bc3e56feeb1809f7],
PUP.Optional.Smartbar.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\Bechiro.smartbardskBnd, , [3a3fcf743159b581bc3e56feeb1809f7],
PUP.Optional.Smartbar.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\Bechiro.smartbardskBnd.1, , [3a3fcf743159b581bc3e56feeb1809f7],
PUP.Optional.Sanbreel.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\{32f197f9-63ca-4014-aac0-2e905e2a155b}Gw64, , [2f4a340fe5a5cf67cf9af6d602019967],
PUP.Optional.SmartBar.A, HKLM\SOFTWARE\CLASSES\Bechiro.smartbarappCore, , [96e3ae95048655e16cdbd61353b037c9],
PUP.Optional.SmartBar.A, HKLM\SOFTWARE\CLASSES\Bechiro.smartbarappCore.1, , [b8c1e55e3159979fcc7b3aaf2ed54ab6],
PUP.Optional.SmartBar.A, HKLM\SOFTWARE\CLASSES\esrv.smartbarESrvc, , [ff7a340f1d6d072f94b4d81157ac40c0],
PUP.Optional.SmartBar.A, HKLM\SOFTWARE\CLASSES\esrv.smartbarESrvc.1, , [7801fd46ccbe41f598b0757428db08f8],
PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, , [364358eb98f23204455ac650c540dd23],
PUP.Optional.GamesDesktop.A, HKLM\SOFTWARE\WOW6432NODE\GAMESDESKTOP, , [0673cc77dab063d33fe92e87cf3406fa],
PUP.Optional.IHProtect.A, HKLM\SOFTWARE\WOW6432NODE\IHProtect, , [087153f08ffbe056b924456b3cc7e51b],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\Iminent, , [90e983c06426b87e44e306f0e023e020],
PUP.Optional.IStartSurf.A, HKLM\SOFTWARE\WOW6432NODE\istartsurfSoftware, , [a9d064dfdab091a5f55aa72118eb649c],
PUP.Optional.WPM.A, HKLM\SOFTWARE\WOW6432NODE\supWindowsMangerProtect, , [d6a354efaedc2a0cca0b59d1669fd62a],
PUP.Optional.Wajam.A, HKLM\SOFTWARE\WOW6432NODE\WajIntEnhance, , [2e4b073c6e1cce6884423e6ef60d7090],
PUP.Optional.SmartBar.A, HKLM\SOFTWARE\WOW6432NODE\BECHIRO S.L.\smartbar, , [b0c98cb7286206302c19a544f2118d73],
PUP.Optional.SmartBar.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Bechiro.smartbarappCore, , [0079fc47f5953df91e2993565fa46c94],
PUP.Optional.SmartBar.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Bechiro.smartbarappCore.1, , [ceabf94a9eecca6cf552cd1c32d1a25e],
PUP.Optional.SmartBar.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\esrv.smartbarESrvc, , [6514dc67bcce360065e3ce1b19eaf20e],
PUP.Optional.SmartBar.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\esrv.smartbarESrvc.1, , [a2d721224c3e91a552f624c5a65db64a],
PUP.Optional.Qone8, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, , [4138be855535fd39b1eef125b451bd43],
PUP.Optional.GamesDesktop.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\gmsd_re_262_is1, , [255482c18ffb57df9009a90c798ab34d],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\IMBoosterARP, , [b4c5c281880246f0cebc9019ed16b947],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\IminentToolbar, , [0574fb4899f11026c9c0f6b3d72c2ad6],
Adware.SmartBar, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\smartbar, , [d9a02e15a7e39a9cd64eb2d43aca13ed],
PUP.Optional.Vosteran, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Vosteran.com, , [aacffe458cfe2115b86f0eabcd369b65],
PUP.Optional.Wajam.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\WajIntEnhance, , [b4c5bb88117992a4a9de0a9f5ba8857b],
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\SUPTAB, , [de9bd3709feb90a6b9e3d1f5a261fd03],
PUP.Optional.Tuto4Pc.A, HKLM\SOFTWARE\WOW6432NODE\TUTORIALS, , [5227c2816f1b23131263a49305002cd4],
PUP.Optional.WindowsMangerProtect.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\EVENTLOG\APPLICATION\WindowsMangerProtect, , [4831fd46cdbdea4c6176813aa360c937],
PUP.Optional.HomeTab.A, HKU\S-1-5-21-556047477-119812697-3251834620-1002\SOFTWARE\HomeTab, , [babf9da6d7b395a1e55b3e9b4db6aa56],
PUP.Optional.SearchProtect.A, HKU\S-1-5-21-556047477-119812697-3251834620-1002\SOFTWARE\SearchProtectWS, , [156465def7939b9b355871384db617e9],
PUP.Optional.TNT.A, HKU\S-1-5-21-556047477-119812697-3251834620-1002\SOFTWARE\TNT2, , [9fda1d264e3caf871d514764a55e6c94],
PUP.Optional.Tuto4PC.A, HKU\S-1-5-21-556047477-119812697-3251834620-1002\SOFTWARE\TutoTag, , [304946fd7416989e15b14fde21e40af6],
PUP.Optional.Wajam.A, HKU\S-1-5-21-556047477-119812697-3251834620-1002\SOFTWARE\WajIntEnhance, , [4435182b7218de5821a6951714ef5da3],
PUP.Optional.SmartBar.A, HKU\S-1-5-21-556047477-119812697-3251834620-1002\SOFTWARE\BECHIRO S.L.\smartbar, , [4930cc773654f1459bab915823e05aa6],
PUP.Optional.Qone8, HKU\S-1-5-21-556047477-119812697-3251834620-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, , [f6830d363a50092d188673a317eeeb15],
PUP.Optional.Iminent.A, HKU\S-1-5-21-556047477-119812697-3251834620-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\IMBoosterARP, , [e49553f0bcce3bfb29489510976c9070],
PUP.Optional.Iminent.A, HKU\S-1-5-21-556047477-119812697-3251834620-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\IminentToolbar, , [e198093aec9e0531571be7beb54efa06],
PUP.Optional.Linkey.A, HKU\S-1-5-21-556047477-119812697-3251834620-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Linkey, , [27523c077e0c85b1df945f467291bb45],
PUP.Optional.Vosteran.A, HKU\S-1-5-21-556047477-119812697-3251834620-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Vosteran.com, , [fa7f2023b9d17fb793e10f96e0239868],
PUP.Optional.Wajam.A, HKU\S-1-5-21-556047477-119812697-3251834620-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\WajIntEnhance, , [b0c90b38107af244e29301a40bf8df21],
PUP.Optional.Wajam.A, HKU\S-1-5-21-556047477-119812697-3251834620-1002\SOFTWARE\SIMPLYTECH\HomeTabWajIEnhance, , [403958ebbfcba88e0088b8f1699afa06],
PUP.Optional.Tuto4PC.A, HKU\S-1-5-21-556047477-119812697-3251834620-1002\SOFTWARE\TUTORIALS\updatetutorialeshp, , [0277d2715436e94d47abcae0fa0953ad],
PUP.Optional.Tuto4PC.A, HKU\S-1-5-21-556047477-119812697-3251834620-1002\SOFTWARE\TUTORIALS\updatetutorialshp, , [582100436a20d561d3204f5b61a27c84],
PUP.Optional.Tuto4PC.A, HKU\S-1-5-21-556047477-119812697-3251834620-1002\SOFTWARE\TUTORIALS\updv, , [fd7cad96464486b014e0abff42c1d62a],
PUP.Optional.SmartBar.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{51A045FD-9441-41B2-9700-1CBCB7BD0B22}, , [e990251ee2a861d506b4aac51ae9db25],
PUP.Optional.SmartBar.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\Bechiro.smartbarappCore, , [e990251ee2a861d506b4aac51ae9db25],
PUP.Optional.SmartBar.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\Bechiro.smartbarappCore.1, , [e990251ee2a861d506b4aac51ae9db25],
PUP.Optional.SmartBar.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{51A045FD-9441-41B2-9700-1CBCB7BD0B22}, , [e990251ee2a861d506b4aac51ae9db25],
PUP.Optional.SmartBar.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{E00D7C59-1D0B-4427-8742-06C64ADF7D4F}, , [e990251ee2a861d506b4aac51ae9db25],
PUP.Optional.SmartBar.A, HKLM\SOFTWARE\CLASSES\B, , [e990251ee2a861d506b4aac51ae9db25],
PUP.Optional.SmartBar.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\B, , [e990251ee2a861d506b4aac51ae9db25],
PUP.Optional.SmartBar.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\B, , [e990251ee2a861d506b4aac51ae9db25],
PUP.Optional.SmartBar.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{E00D7C59-1D0B-4427-8742-06C64ADF7D4F}, , [e990251ee2a861d506b4aac51ae9db25],
PUP.Optional.SmartBar.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{F1E12282-ECAF-4225-BBD8-B75394A4CE54}, , [e990251ee2a861d506b4aac51ae9db25],
PUP.Optional.SmartBar.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{F1E12282-ECAF-4225-BBD8-B75394A4CE54}, , [e990251ee2a861d506b4aac51ae9db25],
PUP.Optional.SmartBar.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{F1E12282-ECAF-4225-BBD8-B75394A4CE54}, , [e990251ee2a861d506b4aac51ae9db25],
PUP.Optional.SmartBar.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{1581739A-4E37-4453-B6DE-5E50C457329C}, , [e990251ee2a861d506b4aac51ae9db25],
PUP.Optional.SmartBar.A, HKLM\SOFTWARE\CLASSES\escort.escortIEPane.1, , [e990251ee2a861d506b4aac51ae9db25],
PUP.Optional.SmartBar.A, HKLM\SOFTWARE\CLASSES\escort.escortIEPane, , [e990251ee2a861d506b4aac51ae9db25],
PUP.Optional.SmartBar.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\escort.escortIEPane, , [e990251ee2a861d506b4aac51ae9db25],
PUP.Optional.SmartBar.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\escort.escortIEPane, , [e990251ee2a861d506b4aac51ae9db25],
PUP.Optional.SmartBar.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\escort.escortIEPane.1, , [e990251ee2a861d506b4aac51ae9db25],
PUP.Optional.SmartBar.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\escort.escortIEPane.1, , [e990251ee2a861d506b4aac51ae9db25],
PUP.Optional.SmartBar.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{1581739A-4E37-4453-B6DE-5E50C457329C}, , [e990251ee2a861d506b4aac51ae9db25],

Hodnoty registru: 5
PUP.Optional.GamesDesktop.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|gmsd_re_263, , [94e53a098703989e1587bcf9a360758b],
PUP.Optional.GamesDesktop.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|gmsd_re_262, "C:\Program Files (x86)\gmsd_re_262\gmsd_re_262.exe", , [9cdddd664842a98d4557447133d05ea2]
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\SUPTAB|ptid, tugs, , [de9bd3709feb90a6b9e3d1f5a261fd03]
PUP.Optional.Tuto4Pc.A, HKLM\SOFTWARE\WOW6432NODE\TUTORIALS|HostGUID, B7DB1882-0008-4256-A8AC-9C6A29E8DD30, , [5227c2816f1b23131263a49305002cd4]
PUP.Optional.GamesDesktop.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNONCE|upgmsd_re_262.exe, C:\Users\Míla\AppData\Local\gmsd_re_262\upgmsd_re_262.exe -runonce, , [2158db6805850135cfb53e5a7f8407f9]

Data registru: 15
PUP.Optional.IStartSurf.A, HKLM\SOFTWARE\CLIENTS\STARTMENUINTERNET\IEXPLORE.EXE\SHELL\OPEN\COMMAND, C:\Program Files\Internet Explorer\iexplore.exe http://www.istartsurf.com/?type=sc&ts=1 ... RNPKJMRNPX, Dobré: (iexplore.exe), Špatné: (C:\Program Files\Internet Explorer\iexplore.exe http://www.istartsurf.com/?type=sc&ts=1 ... RNPKJMRNPX),,[0673fb480a80a49225979b3b27deaa56]
PUP.Optional.IStartSurf.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, http://www.istartsurf.com/web/?type=ds& ... KJMRNPX&q={searchTerms}, Dobré: (www.google.com), Špatné: (http://www.istartsurf.com/web/?type=ds& ... KJMRNPX&q={searchTerms}),,[2b4e2221cbbfc5711ef8d7fe669fdd23]
PUP.Optional.IStartSurf.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, http://www.istartsurf.com/web/?type=ds& ... KJMRNPX&q={searchTerms}, Dobré: (www.google.com), Špatné: (http://www.istartsurf.com/web/?type=ds& ... KJMRNPX&q={searchTerms}),,[9ddcfc470585300665b101d43ec73cc4]
PUP.Optional.IStartSurf.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, http://www.istartsurf.com/?type=hppp&ts ... RNPKJMRNPX, Dobré: (www.google.com), Špatné: (http://www.istartsurf.com/?type=hppp&ts ... RNPKJMRNPX),,[d0a9ae956e1cee48b660f3e265a003fd]
PUP.Optional.IStartSurf.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, http://www.istartsurf.com/?type=hppp&ts ... RNPKJMRNPX, Dobré: (www.google.com), Špatné: (http://www.istartsurf.com/?type=hppp&ts ... RNPKJMRNPX),,[a5d4162d4149c17558be19bc2fd6ec14]
PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Dobré: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Špatné: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),,[3841340f5139b87ee8b2f5ec1fe64fb1]
PUP.Optional.IStartSurf.A, HKLM\SOFTWARE\WOW6432NODE\CLIENTS\STARTMENUINTERNET\IEXPLORE.EXE\SHELL\OPEN\COMMAND, C:\Program Files\Internet Explorer\iexplore.exe http://www.istartsurf.com/?type=sc&ts=1 ... RNPKJMRNPX, Dobré: (iexplore.exe), Špatné: (C:\Program Files\Internet Explorer\iexplore.exe http://www.istartsurf.com/?type=sc&ts=1 ... RNPKJMRNPX),,[cdac70d396f439fdffbd07cf1ce9a858]
PUP.Optional.IStartSurf.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, http://www.istartsurf.com/web/?type=ds& ... KJMRNPX&q={searchTerms}, Dobré: (www.google.com), Špatné: (http://www.istartsurf.com/web/?type=ds& ... KJMRNPX&q={searchTerms}),,[86f3ba897b0fc37359bd7065ea1b30d0]
PUP.Optional.IStartSurf.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, http://www.istartsurf.com/?type=hppp&ts ... RNPKJMRNPX, Dobré: (www.google.com), Špatné: (http://www.istartsurf.com/?type=hppp&ts ... RNPKJMRNPX),,[b5c43e056e1cd0660115d9fc71941ae6]
PUP.Optional.IStartSurf.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, http://www.istartsurf.com/?type=hppp&ts ... RNPKJMRNPX, Dobré: (www.google.com), Špatné: (http://www.istartsurf.com/?type=hppp&ts ... RNPKJMRNPX),,[b1c8b88bf5950a2cbe58508521e4f50b]
PUP.Optional.IStartSurf.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, http://www.istartsurf.com/web/?type=ds& ... KJMRNPX&q={searchTerms}, Dobré: (www.google.com), Špatné: (http://www.istartsurf.com/web/?type=ds& ... KJMRNPX&q={searchTerms}),,[0f6a53f0c1c9132355c1cd08ea1b09f7]
PUP.Optional.Qone8, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Dobré: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Špatné: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),,[1a5f99aa543637ff0d8d00e175906799]
PUP.Optional.IStartSurf.A, HKU\S-1-5-21-556047477-119812697-3251834620-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, http://www.istartsurf.com/web/?type=dsp ... KJMRNPX&q={searchTerms}, Dobré: (www.google.com), Špatné: (http://www.istartsurf.com/web/?type=dsp ... KJMRNPX&q={searchTerms}),,[73061a29434784b2967e6273957013ed]
PUP.Optional.IStartSurf.A, HKU\S-1-5-21-556047477-119812697-3251834620-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, http://www.istartsurf.com/?type=hppp&ts ... RNPKJMRNPX, Dobré: (www.google.com), Špatné: (http://www.istartsurf.com/?type=hppp&ts ... RNPKJMRNPX),,[2d4c1a294c3e20161ff517be6b9aef11]
PUP.Optional.IStartSurf.A, HKU\S-1-5-21-556047477-119812697-3251834620-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, http://www.istartsurf.com/web/?type=dsp ... KJMRNPX&q={searchTerms}, Dobré: (www.google.com), Špatné: (http://www.istartsurf.com/web/?type=dsp ... KJMRNPX&q={searchTerms}),,[c0b9af94eaa00333bf5506cf798c3bc5]

Složky: 14
PUP.Optional.SmartBar.A, C:\Users\Míla\AppData\Roaming\Bechiro S.L, , [f8818fb40c7e9f97c77ca247ee157d83],
PUP.Optional.SmartBar.A, C:\Users\Míla\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcjcajklmlbpmgckpcmnampagbhhmcp, , [5b1e350ee1a9bd79e1d897d8689bf40c],
PUP.Optional.SmartBar.A, C:\Users\Míla\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcjcajklmlbpmgckpcmnampagbhhmcp\1.0_1, , [5b1e350ee1a9bd79e1d897d8689bf40c],
PUP.Optional.SmartBar.A, C:\Program Files (x86)\Bechiro S.L\smartbar, , [e990251ee2a861d506b4aac51ae9db25],
PUP.Optional.SmartBar.A, C:\Program Files (x86)\Bechiro S.L\smartbar\1.8.8.12, , [e990251ee2a861d506b4aac51ae9db25],
PUP.Optional.SmartBar.A, C:\Program Files (x86)\Bechiro S.L\smartbar\1.8.8.12\bh, , [e990251ee2a861d506b4aac51ae9db25],
PUP.Optional.GamesDesktop.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GAMESDESKTOP, , [403991b2b3d734029fe44f49a85b6b95],
PUP.Optional.GamesDesktop.A, C:\Users\Míla\AppData\Local\gmsd_re_262, , [2158db6805850135cfb53e5a7f8407f9],
PUP.Optional.GamesDesktop.A, C:\Users\Míla\AppData\Local\gmsd_re_262\Download, , [2158db6805850135cfb53e5a7f8407f9],
PUP.Optional.GamesDesktop.A, C:\Users\Míla\AppData\Local\gmsd_re_262\gmsd_re_262, , [2158db6805850135cfb53e5a7f8407f9],
PUP.Optional.GamesDesktop.A, C:\Users\Míla\AppData\Local\gmsd_re_262\gmsd_re_262\1.20, , [2158db6805850135cfb53e5a7f8407f9],
PUP.Optional.GamesDesktop.A, C:\Program Files (x86)\gmsd_re_262, , [09708ab91377a2941075f0a845beec14],
PUP.Optional.IHProtectUpDate.A, C:\ProgramData\IHProtectUpDate, , [a3d60e351d6d71c548ee722bde2547b9],
PUP.Optional.IHProtectUpDate.A, C:\ProgramData\IHProtectUpDate\update, , [a3d60e351d6d71c548ee722bde2547b9],

Soubory: 42
PUP.Optional.Somoto.A, C:\Users\Míla\Downloads\startw8.exe, , [552457ec503abf77d74a97b223e2bb45],
PUP.Optional.OpenCandy, C:\Users\Míla\Downloads\DTLite4491-0356.exe, , [3b3e1a298208e1551613fa0e84829769],
PUP.Optional.IStartSurf.A, C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\istartsurf.xml, , [8aef340f7614db5b24574881c14218e8],
PUP.Optional.Sanbreel.A, C:\Windows\System32\drivers\{32f197f9-63ca-4014-aac0-2e905e2a155b}Gw64.sys, , [2f4a340fe5a5cf67cf9af6d602019967],
PUP.Optional.SmartBar.A, C:\Users\Míla\AppData\Roaming\Bechiro S.L\sqlite3.dll, , [f8818fb40c7e9f97c77ca247ee157d83],
PUP.Optional.SmartBar.A, C:\Users\Míla\AppData\Roaming\Mozilla\Firefox\Profiles\0kpl12k8.default\searchplugins\smartbar.xml, , [41383b080585d56171d39b4eda2926da],
PUP.Optional.IStartSurf.A, C:\Users\Míla\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.istartsurf.com_0.localstorage, , [136677cc5634ae884e161f186f966799],
PUP.Optional.IStartSurf.A, C:\Users\Míla\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.istartsurf.com_0.localstorage-journal, , [9ddc152e513971c57ce8ce692fd626da],
PUP.Optional.GamesDesktop.A, C:\Program Files (x86)\gmsd_re_262\gmsd_re_262.exe, , [9cdddd664842a98d4557447133d05ea2],
PUP.Optional.SmartBar.A, C:\Users\Míla\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcjcajklmlbpmgckpcmnampagbhhmcp\1.0_1\appCntrl.js, , [5b1e350ee1a9bd79e1d897d8689bf40c],
PUP.Optional.SmartBar.A, C:\Users\Míla\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcjcajklmlbpmgckpcmnampagbhhmcp\1.0_1\bg.html, , [5b1e350ee1a9bd79e1d897d8689bf40c],
PUP.Optional.SmartBar.A, C:\Users\Míla\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcjcajklmlbpmgckpcmnampagbhhmcp\1.0_1\bg.js, , [5b1e350ee1a9bd79e1d897d8689bf40c],
PUP.Optional.SmartBar.A, C:\Users\Míla\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcjcajklmlbpmgckpcmnampagbhhmcp\1.0_1\CrmAdpt.dll, , [5b1e350ee1a9bd79e1d897d8689bf40c],
PUP.Optional.SmartBar.A, C:\Users\Míla\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcjcajklmlbpmgckpcmnampagbhhmcp\1.0_1\ct.js, , [5b1e350ee1a9bd79e1d897d8689bf40c],
PUP.Optional.SmartBar.A, C:\Users\Míla\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcjcajklmlbpmgckpcmnampagbhhmcp\1.0_1\CTB.dll, , [5b1e350ee1a9bd79e1d897d8689bf40c],
PUP.Optional.SmartBar.A, C:\Users\Míla\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcjcajklmlbpmgckpcmnampagbhhmcp\1.0_1\dpk.js, , [5b1e350ee1a9bd79e1d897d8689bf40c],
PUP.Optional.SmartBar.A, C:\Users\Míla\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcjcajklmlbpmgckpcmnampagbhhmcp\1.0_1\hprtkMsg.htm, , [5b1e350ee1a9bd79e1d897d8689bf40c],
PUP.Optional.SmartBar.A, C:\Users\Míla\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcjcajklmlbpmgckpcmnampagbhhmcp\1.0_1\hprtkMsg.js, , [5b1e350ee1a9bd79e1d897d8689bf40c],
PUP.Optional.SmartBar.A, C:\Users\Míla\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcjcajklmlbpmgckpcmnampagbhhmcp\1.0_1\json2.min.js, , [5b1e350ee1a9bd79e1d897d8689bf40c],
PUP.Optional.SmartBar.A, C:\Users\Míla\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcjcajklmlbpmgckpcmnampagbhhmcp\1.0_1\logo.png, , [5b1e350ee1a9bd79e1d897d8689bf40c],
PUP.Optional.SmartBar.A, C:\Users\Míla\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcjcajklmlbpmgckpcmnampagbhhmcp\1.0_1\manifest.json, , [5b1e350ee1a9bd79e1d897d8689bf40c],
PUP.Optional.SmartBar.A, C:\Program Files (x86)\Bechiro S.L\smartbar\1.8.8.12\escortShld.dll, , [e990251ee2a861d506b4aac51ae9db25],
PUP.Optional.SmartBar.A, C:\Program Files (x86)\Bechiro S.L\smartbar\1.8.8.12\smartbar.crx, , [e990251ee2a861d506b4aac51ae9db25],
PUP.Optional.SmartBar.A, C:\Program Files (x86)\Bechiro S.L\smartbar\1.8.8.12\smartbarApp.dll, , [e990251ee2a861d506b4aac51ae9db25],
PUP.Optional.SmartBar.A, C:\Program Files (x86)\Bechiro S.L\smartbar\1.8.8.12\smartbarEng.dll, , [e990251ee2a861d506b4aac51ae9db25],
PUP.Optional.SmartBar.A, C:\Program Files (x86)\Bechiro S.L\smartbar\1.8.8.12\smartbarsrv.exe, , [e990251ee2a861d506b4aac51ae9db25],
PUP.Optional.SmartBar.A, C:\Program Files (x86)\Bechiro S.L\smartbar\1.8.8.12\smartbarTlbr.dll, , [e990251ee2a861d506b4aac51ae9db25],
PUP.Optional.SmartBar.A, C:\Program Files (x86)\Bechiro S.L\smartbar\1.8.8.12\uninstall.exe, , [e990251ee2a861d506b4aac51ae9db25],
PUP.Optional.SmartBar.A, C:\Program Files (x86)\Bechiro S.L\smartbar\1.8.8.12\bh\smartbar.dll, , [e990251ee2a861d506b4aac51ae9db25],
PUP.Optional.GamesDesktop.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GAMESDESKTOP\GamesDesktop.lnk, , [403991b2b3d734029fe44f49a85b6b95],
PUP.Optional.GamesDesktop.A, C:\Users\Míla\AppData\Local\gmsd_re_262\upgmsd_re_262.cyl, , [2158db6805850135cfb53e5a7f8407f9],
PUP.Optional.GamesDesktop.A, C:\Users\Míla\AppData\Local\gmsd_re_262\upgmsd_re_262.exe, , [2158db6805850135cfb53e5a7f8407f9],
PUP.Optional.GamesDesktop.A, C:\Users\Míla\AppData\Local\gmsd_re_262\Download\majmp_gentlerow.exe, , [2158db6805850135cfb53e5a7f8407f9],
PUP.Optional.GamesDesktop.A, C:\Users\Míla\AppData\Local\gmsd_re_262\gmsd_re_262\1.20\cnf.cyl, , [2158db6805850135cfb53e5a7f8407f9],
PUP.Optional.GamesDesktop.A, C:\Users\Míla\AppData\Local\gmsd_re_262\gmsd_re_262\1.20\eorezo.cyl, , [2158db6805850135cfb53e5a7f8407f9],
PUP.Optional.GamesDesktop.A, C:\Program Files (x86)\gmsd_re_262\gamesdesktop_widget.exe, , [09708ab91377a2941075f0a845beec14],
PUP.Optional.GamesDesktop.A, C:\Program Files (x86)\gmsd_re_262\predm.exe, , [09708ab91377a2941075f0a845beec14],
PUP.Optional.GamesDesktop.A, C:\Program Files (x86)\gmsd_re_262\unins000.dat, , [09708ab91377a2941075f0a845beec14],
PUP.Optional.GamesDesktop.A, C:\Program Files (x86)\gmsd_re_262\unins000.exe, , [09708ab91377a2941075f0a845beec14],
PUP.Optional.GamesDesktop.A, C:\Program Files (x86)\gmsd_re_262\unins000.msg, , [09708ab91377a2941075f0a845beec14],
PUP.Optional.IHProtectUpDate.A, C:\ProgramData\IHProtectUpDate\update\conf, , [a3d60e351d6d71c548ee722bde2547b9],
PUP.Optional.IStartSurf.A, C:\Users\Míla\AppData\Roaming\Mozilla\Firefox\Profiles\0kpl12k8.default\search.json, Dobré: (), Špatné: (istartsurf), ,[3445380bc7c367cf66294ccf838357a9]

Fyzické sektory: 0
(Nenalezeny žádné škodlivé položky)


(end)

Re: Prosím o kontrolu logu

Napsal: 11 čer 2015 17:22
od jerabina
Co AdwCleaner?

Spusť znovu MbAM a dej Skenovat nyní
- po proběhnutí programu se ti objeví hláška tak klikni na „Vše do karantény(smazat vybrané)“ a na „Exportovat záznam“ a vyber „textový soubor“ , soubor nějak pojmenuj a někam ho ulož. Zkopíruj se celý obsah toho logu.

Stáhni si Junkware Removal Tool by Thisisu

na svojí plochu.

Deaktivuj si svůj antivirový program. Pravým tl. myši klikni na JRT.exe a vyber „spustit jako správce“. Pro pokračování budeš vyzván ke stisknutí jakékoliv klávesy. Na nějakou klikni.
Začne skenování programu. Skenování může trvat dloho , podle množství nákaz. Po ukončení skenu se objeví log (JRT.txt) , který se uloží na ploše.
Zkopíruj sem prosím celý jeho obsah.

Stáhni si RogueKiller
32bit.:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
64bit.:
http://www.sur-la-toile.com/RogueKiller ... lerX64.exe
na svojí plochu.
- Zavři všechny ostatní programy a prohlížeče.
- Pro OS Vista a win7 spusť program RogueKiller.exe jako správce , u XP poklepáním.
- počkej až skončí Prescan -vyhledávání škodlivých procesů.
-Potom klikni na „Prohledat“.
- Program skenuje procesy PC. Po proskenování klikni na „Zpráva“celý obsah logu sem zkopíruj.
Pokud je program blokován , zkus ho spustit několikrát. Pokud dále program nepůjde spustit a pracovat, přejmenuj ho na winlogon.exe.

Prosím o kontrolu logu

Napsal: 14 čer 2015 09:53
od mylbl
Projel jsem znovu MBaM, smazal a tady je log, poradíte mi prosím co dál, díky
Malwarebytes Anti-Malware
www.malwarebytes.org

Datum skenování: 14. 6. 2015
Čas skenování: 9:18:53
Protokol: vypis.txt
Správce: Ano

Verze: 2.01.6.1022
Databáze malwaru: v2015.06.14.01
Databáze rootkitů: v2015.06.02.01
Licence: Zkušební verze
Ochrana proti malwaru: Zapnuto
Ochrana proti škodlivým webovým stránkám: Zapnuto
Ochrana programu: Vypnuto

OS: Windows 8.1
CPU: x64
Souborový systém: NTFS
Uživatel: MA­la

Typ skenu: Sken hrozeb
Výsledek: Dokončeno
Prohledaných objektů: 414820
Uplynulý čas: 25 min, 21 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Vypnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto

Procesy: 0
(Nenalezeny žádné škodlivé položky)

Moduly: 0
(Nenalezeny žádné škodlivé položky)

Klíče registru: 86
PUP.Optional.PineTree.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\{32f197f9-63ca-4014-aac0-2e905e2a155b}Gw64, , [e1b88c2e78125bdbd2a6245957afb749],
PUP.Optional.LuckyTab.A, HKU\S-1-5-21-556047477-119812697-3251834620-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{51D26BB4-4D2C-4AE4-9873-5FF41B6DED1F}, , [d8c12e8c3a5048ee64fca0c67a89c838],
PUP.Optional.LuckyTab.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{51D26BB4-4D2C-4AE4-9873-5FF41B6DED1F}, , [d8c12e8c3a5048ee64fca0c67a89c838],
PUP.Optional.Smartbar.A, HKU\S-1-5-21-556047477-119812697-3251834620-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{FD36FEBE-DBA1-4597-9DD1-B13794B92F68}, , [c2d7902ab8d296a0cfdb564f04ff60a0],
PUP.Optional.Smartbar.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{FD36FEBE-DBA1-4597-9DD1-B13794B92F68}, , [c2d7902ab8d296a0cfdb564f04ff60a0],
PUP.Optional.Smartbar.A, HKLM\SOFTWARE\CLASSES\Bechiro.smartbarHlpr, , [c2d7902ab8d296a0cfdb564f04ff60a0],
PUP.Optional.Smartbar.A, HKLM\SOFTWARE\CLASSES\Bechiro.smartbarHlpr.1, , [c2d7902ab8d296a0cfdb564f04ff60a0],
PUP.Optional.Smartbar.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Bechiro.smartbarHlpr, , [c2d7902ab8d296a0cfdb564f04ff60a0],
PUP.Optional.Smartbar.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Bechiro.smartbarHlpr.1, , [c2d7902ab8d296a0cfdb564f04ff60a0],
PUP.Optional.Smartbar.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\Bechiro.smartbarHlpr, , [c2d7902ab8d296a0cfdb564f04ff60a0],
PUP.Optional.Smartbar.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\Bechiro.smartbarHlpr.1, , [c2d7902ab8d296a0cfdb564f04ff60a0],
PUP.Optional.Smartbar.A, HKLM\SOFTWARE\CLASSES\Bechiro.smartbardskBnd, , [6b2ec4f633572e08a504ecb9d330857b],
PUP.Optional.Smartbar.A, HKLM\SOFTWARE\CLASSES\Bechiro.smartbardskBnd.1, , [3366ceeceb9fbe784168bfe69f6445bb],
PUP.Optional.Smartbar.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Bechiro.smartbardskBnd, , [3366ceeceb9fbe784168bfe69f6445bb],
PUP.Optional.Smartbar.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Bechiro.smartbardskBnd.1, , [3366ceeceb9fbe784168bfe69f6445bb],
PUP.Optional.Smartbar.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\Bechiro.smartbardskBnd, , [3366ceeceb9fbe784168bfe69f6445bb],
PUP.Optional.Smartbar.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\Bechiro.smartbardskBnd.1, , [3366ceeceb9fbe784168bfe69f6445bb],
PUP.Optional.EORezo, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\gmsd_re_262_is1, , [d9c002b8f19956e0c96dc2bbd6302bd5],
PUP.Optional.SmartBar.A, HKLM\SOFTWARE\CLASSES\Bechiro.smartbarappCore, , [badff0ca7f0ba78f04cf65cdfe068779],
PUP.Optional.SmartBar.A, HKLM\SOFTWARE\CLASSES\Bechiro.smartbarappCore.1, , [cfcad6e401896dc9b12271c14db753ad],
PUP.Optional.SmartBar.A, HKLM\SOFTWARE\CLASSES\esrv.smartbarESrvc, , [8c0d9f1b97f389ad7460d1618183e31d],
PUP.Optional.SmartBar.A, HKLM\SOFTWARE\CLASSES\esrv.smartbarESrvc.1, , [f0a976447713b383d8fccf6319eb4bb5],
PUP.Optional.IStartSurf.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, , [9ffa2199a1e9211578aa5031a16454ac],
PUP.Optional.APNToolBar.Gen, HKLM\SOFTWARE\WOW6432NODE\AskPartnerNetwork, , [1485ddddd4b6da5cdeec727cdb289769],
PUP.Optional.GamesDesktop.A, HKLM\SOFTWARE\WOW6432NODE\GAMESDESKTOP, , [960314a63b4feb4b115641c39371d52b],
PUP.Optional.IHProtect.A, HKLM\SOFTWARE\WOW6432NODE\IHProtect, , [f8a1f6c4a7e33df9c7d7c43cb74d9e62],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\Iminent, , [97027e3cef9b8da9c0854df2f2129d63],
PUP.Optional.IStartSurf.A, HKLM\SOFTWARE\WOW6432NODE\istartsurfSoftware, , [c7d21d9ded9d6fc7758fb75ff70d06fa],
PUP.Optional.WPM.A, HKLM\SOFTWARE\WOW6432NODE\supWindowsMangerProtect, , [40592a90dcae66d0867eb3c0f411bc44],
PUP.Optional.Wajam.A, HKLM\SOFTWARE\WOW6432NODE\WajIntEnhance, , [81181d9d444653e3bc9c34c973908b75],
PUP.Optional.SmartBar.A, HKLM\SOFTWARE\WOW6432NODE\BECHIRO S.L.\smartbar, , [90092d8d97f345f1448d5ed4d23232ce],
PUP.Optional.SmartBar.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Bechiro.smartbarappCore, , [3069b604b6d46dc9b320fd35f80c3bc5],
PUP.Optional.SmartBar.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Bechiro.smartbarappCore.1, , [bddc4278147690a63b98d75b36ced62a],
PUP.Optional.SmartBar.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\esrv.smartbarESrvc, , [d9c0d9e1d2b8270f5282949e26ded729],
PUP.Optional.SmartBar.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\esrv.smartbarESrvc.1, , [445503b7eaa02d09f7dd44ee72928779],
PUP.Optional.IStartSurf.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, , [25744b6fbecc6bcb28fab6cb18ed8f71],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\IMBoosterARP, , [217818a2becc96a0007625d5699ada26],
PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\IminentToolbar, , [3d5ccbef4d3d7abc90e556a42fd46997],
Adware.SmartBar, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\smartbar, , [1386c9f15b2f94a2de535c73709420e0],
PUP.Optional.Vosteran, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Vosteran.com, , [adec4377602a31058f9eb05852b23cc4],
PUP.Optional.Wajam.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\WajIntEnhance, , [564307b3dab07cba3f341bdfed1637c9],
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\SUPTAB, , [a5f46e4c74169e985f1a5cb8ec18bf41],
PUP.Optional.Tuto4Pc.A, HKLM\SOFTWARE\WOW6432NODE\TUTORIALS, , [4c4d8f2bafdb8aac63676b13bb4ad030],
PUP.Optional.PineTree.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\Update Pine Tree, , [4950fdbd2961bb7b1fa17e76d52ea25e],
PUP.Optional.WindowsMangerProtect.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\EVENTLOG\APPLICATION\WindowsMangerProtect, , [8b0ed6e4167445f1e9a4b65448bc17e9],
PUP.Optional.HomeTab.A, HKU\S-1-5-21-556047477-119812697-3251834620-1002\SOFTWARE\HomeTab, , [07927b3fdfab86b04131ee3720e421df],
PUP.Optional.SearchProtect.A, HKU\S-1-5-21-556047477-119812697-3251834620-1002\SOFTWARE\SearchProtectWS, , [603937834644ef47fd7b5aa061a2fa06],
PUP.Optional.TNT.A, HKU\S-1-5-21-556047477-119812697-3251834620-1002\SOFTWARE\TNT2, , [ebae5f5b8ffb2d0976b07488c142a858],
PUP.Optional.Tuto4PC.A, HKU\S-1-5-21-556047477-119812697-3251834620-1002\SOFTWARE\TutoTag, , [72271d9df595979fa01676fff510d42c],
PUP.Optional.Wajam.A, HKU\S-1-5-21-556047477-119812697-3251834620-1002\SOFTWARE\WajIntEnhance, , [0693aa10d5b50c2afe5ba15c40c349b7],
PUP.Optional.SmartBar.A, HKU\S-1-5-21-556047477-119812697-3251834620-1002\SOFTWARE\BECHIRO S.L.\smartbar, , [1683c2f82961c86ed101e2508b792dd3],
PUP.Optional.GamesDesktop.A, HKU\S-1-5-21-556047477-119812697-3251834620-1002\SOFTWARE\GAMESDESKTOP, , [40592d8da1e959dde6daef9524e112ee],
PUP.Optional.IStartSurf.A, HKU\S-1-5-21-556047477-119812697-3251834620-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}, , [35643e7ccebc94a2ad74f48d937257a9],
PUP.Optional.IStartSurf.A, HKU\S-1-5-21-556047477-119812697-3251834620-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, , [a3f6e2d8434758dedf42641d000521df],
PUP.Optional.IStartSurf.A, HKU\S-1-5-21-556047477-119812697-3251834620-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{81FF4DE1-3D41-4013-9CD2-287BA169880C}, , [d8c104b6fb8fb086ee330d748184da26],
PUP.Optional.IStartSurf.A, HKU\S-1-5-21-556047477-119812697-3251834620-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{E733165D-CBCF-4FDA-883E-ADEF965B476C}, , [8316b604622869cde43db2cff80d07f9],
PUP.Optional.Iminent.A, HKU\S-1-5-21-556047477-119812697-3251834620-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\IMBoosterARP, , [6f2afdbd107a7cbad836728562a1f010],
PUP.Optional.Iminent.A, HKU\S-1-5-21-556047477-119812697-3251834620-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\IminentToolbar, , [66338733a0ea57df9b74fef947bcb54b],
PUP.Optional.Linkey.A, HKU\S-1-5-21-556047477-119812697-3251834620-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Linkey, , [c8d10dadd1b9ff3756baf502d132669a],
PUP.Optional.SearchProtect.A, HKU\S-1-5-21-556047477-119812697-3251834620-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\SearchProtect, , [c4d5e6d48bff53e371fe275e6b9ad42c],
PUP.Optional.Vosteran.A, HKU\S-1-5-21-556047477-119812697-3251834620-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Vosteran.com, , [cbce83378ffb87af40d1d81fe51e17e9],
PUP.Optional.Wajam.A, HKU\S-1-5-21-556047477-119812697-3251834620-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\WajIntEnhance, , [8415efcb9bef75c1d93925d2ca3918e8],
PUP.Optional.Wajam.A, HKU\S-1-5-21-556047477-119812697-3251834620-1002\SOFTWARE\SIMPLYTECH\HomeTabWajIEnhance, , [1d7cc8f23357c4728de79f5b4fb48a76],
PUP.Optional.Tuto4PC.A, HKU\S-1-5-21-556047477-119812697-3251834620-1002\SOFTWARE\TUTORIALS\updatetutorialeshp, , [b2e7e9d1a4e675c1c2f44ab1d033619f],
PUP.Optional.Tuto4PC.A, HKU\S-1-5-21-556047477-119812697-3251834620-1002\SOFTWARE\TUTORIALS\updatetutorialshp, , [435655659feb10268f28a85341c2768a],
PUP.Optional.Tuto4PC.A, HKU\S-1-5-21-556047477-119812697-3251834620-1002\SOFTWARE\TUTORIALS\updv, , [81186852bdcd072f6a4e4ab19c67847c],
PUP.Optional.SmartBar.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{51A045FD-9441-41B2-9700-1CBCB7BD0B22}, , [603966541d6dfa3c01d5a818b64d659b],
PUP.Optional.SmartBar.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\Bechiro.smartbarappCore, , [603966541d6dfa3c01d5a818b64d659b],
PUP.Optional.SmartBar.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\Bechiro.smartbarappCore.1, , [603966541d6dfa3c01d5a818b64d659b],
PUP.Optional.SmartBar.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{51A045FD-9441-41B2-9700-1CBCB7BD0B22}, , [603966541d6dfa3c01d5a818b64d659b],
PUP.Optional.SmartBar.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{E00D7C59-1D0B-4427-8742-06C64ADF7D4F}, , [603966541d6dfa3c01d5a818b64d659b],
PUP.Optional.SmartBar.A, HKLM\SOFTWARE\CLASSES\B, , [603966541d6dfa3c01d5a818b64d659b],
PUP.Optional.SmartBar.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\B, , [603966541d6dfa3c01d5a818b64d659b],
PUP.Optional.SmartBar.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\B, , [603966541d6dfa3c01d5a818b64d659b],
PUP.Optional.SmartBar.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{E00D7C59-1D0B-4427-8742-06C64ADF7D4F}, , [603966541d6dfa3c01d5a818b64d659b],
PUP.Optional.SmartBar.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{F1E12282-ECAF-4225-BBD8-B75394A4CE54}, , [603966541d6dfa3c01d5a818b64d659b],
PUP.Optional.SmartBar.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{F1E12282-ECAF-4225-BBD8-B75394A4CE54}, , [603966541d6dfa3c01d5a818b64d659b],
PUP.Optional.SmartBar.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{F1E12282-ECAF-4225-BBD8-B75394A4CE54}, , [603966541d6dfa3c01d5a818b64d659b],
PUP.Optional.SmartBar.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{1581739A-4E37-4453-B6DE-5E50C457329C}, , [603966541d6dfa3c01d5a818b64d659b],
PUP.Optional.SmartBar.A, HKLM\SOFTWARE\CLASSES\escort.escortIEPane.1, , [603966541d6dfa3c01d5a818b64d659b],
PUP.Optional.SmartBar.A, HKLM\SOFTWARE\CLASSES\escort.escortIEPane, , [603966541d6dfa3c01d5a818b64d659b],
PUP.Optional.SmartBar.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\escort.escortIEPane, , [603966541d6dfa3c01d5a818b64d659b],
PUP.Optional.SmartBar.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\escort.escortIEPane, , [603966541d6dfa3c01d5a818b64d659b],
PUP.Optional.SmartBar.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\escort.escortIEPane.1, , [603966541d6dfa3c01d5a818b64d659b],
PUP.Optional.SmartBar.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\escort.escortIEPane.1, , [603966541d6dfa3c01d5a818b64d659b],
PUP.Optional.SmartBar.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{1581739A-4E37-4453-B6DE-5E50C457329C}, , [603966541d6dfa3c01d5a818b64d659b],

Hodnoty registru: 16
PUP.Optional.IStartSurf.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}|DisplayName, istartsurf, , [9ffa2199a1e9211578aa5031a16454ac]
PUP.Optional.IStartSurf.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}|URL, http://www.istartsurf.com/web/?type=ds& ... KJMRNPX&q={searchTerms}, , [21784674dfab0c2ad0525b266d98867a]
PUP.Optional.IStartSurf.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}|DisplayName, istartsurf, , [25744b6fbecc6bcb28fab6cb18ed8f71]
PUP.Optional.IStartSurf.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}|URL, http://www.istartsurf.com/web/?type=ds& ... KJMRNPX&q={searchTerms}, , [bbde3486bad066d0869ccab7040149b7]
PUP.Optional.GamesDesktop.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|gmsd_re_263, , [7c1d0cae2763f73f9c3b5ca8f4109b65],
PUP.Optional.GamesDesktop.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|gmsd_re_262, "C:\Program Files (x86)\gmsd_re_262\gmsd_re_262.exe", , [a4f5ead073172c0a77604fb5fd076997]
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\SUPTAB|ptid, tugs, , [a5f46e4c74169e985f1a5cb8ec18bf41]
PUP.Optional.Tuto4Pc.A, HKLM\SOFTWARE\WOW6432NODE\TUTORIALS|HostGUID, B7DB1882-0008-4256-A8AC-9C6A29E8DD30, , [4c4d8f2bafdb8aac63676b13bb4ad030]
PUP.Optional.GamesDesktop.A, HKU\S-1-5-21-556047477-119812697-3251834620-1002\SOFTWARE\GAMESDESKTOP|mj, 15.06.07.0, , [40592d8da1e959dde6daef9524e112ee]
PUP.Optional.IStartSurf.A, HKU\S-1-5-21-556047477-119812697-3251834620-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}|URL, http://www.istartsurf.com/web/?utm_sour ... default&q={searchTerms}, , [35643e7ccebc94a2ad74f48d937257a9]
PUP.Optional.IStartSurf.A, HKU\S-1-5-21-556047477-119812697-3251834620-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}|FaviconURL, http://www.istartsurf.com//favicon.ico, , [17820baf54367bbb4dd470110afb649c]
PUP.Optional.IStartSurf.A, HKU\S-1-5-21-556047477-119812697-3251834620-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}|DisplayName, istartsurf, , [a3f6e2d8434758dedf42641d000521df]
PUP.Optional.IStartSurf.A, HKU\S-1-5-21-556047477-119812697-3251834620-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}|URL, http://www.istartsurf.com/web/?type=dsp ... KJMRNPX&q={searchTerms}, , [4b4ea01a0a80ec4ab26f0a77b352f010]
PUP.Optional.IStartSurf.A, HKU\S-1-5-21-556047477-119812697-3251834620-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}|TopResultURL, http://www.istartsurf.com/web/?type=ds& ... KJMRNPX&q={searchTerms}, , [6336f0ca404af244e53c0a770104c838]
PUP.Optional.IStartSurf.A, HKU\S-1-5-21-556047477-119812697-3251834620-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{81FF4DE1-3D41-4013-9CD2-287BA169880C}|URL, http://www.istartsurf.com/web/?utm_sour ... default&q={searchTerms}, , [d8c104b6fb8fb086ee330d748184da26]
PUP.Optional.IStartSurf.A, HKU\S-1-5-21-556047477-119812697-3251834620-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{E733165D-CBCF-4FDA-883E-ADEF965B476C}|URL, http://www.istartsurf.com/web/?utm_sour ... default&q={searchTerms}, , [8316b604622869cde43db2cff80d07f9]

Data registru: 15
PUP.Optional.IStartSurf.A, HKLM\SOFTWARE\CLIENTS\STARTMENUINTERNET\IEXPLORE.EXE\SHELL\OPEN\COMMAND, C:\Program Files\Internet Explorer\iexplore.exe http://www.istartsurf.com/?type=sc&ts=1 ... RNPKJMRNPX, Dobré: (iexplore.exe), Špatné: (C:\Program Files\Internet Explorer\iexplore.exe http://www.istartsurf.com/?type=sc&ts=1 ... RNPKJMRNPX),,[08911aa0e9a196a09d057cbac73f27d9]
PUP.Optional.IStartSurf.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, http://www.istartsurf.com/web/?type=ds& ... KJMRNPX&q={searchTerms}, Dobré: (www.google.com), Špatné: (http://www.istartsurf.com/web/?type=ds& ... KJMRNPX&q={searchTerms}),,[1584f4c6e7a3ad8983a40b2a4fb74cb4]
PUP.Optional.IStartSurf.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, http://www.istartsurf.com/web/?type=ds& ... KJMRNPX&q={searchTerms}, Dobré: (www.google.com), Špatné: (http://www.istartsurf.com/web/?type=ds& ... KJMRNPX&q={searchTerms}),,[217812a85e2c8bab55d2fe371aec2ed2]
PUP.Optional.HttpBreaker.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, http://www.istartsurf.com/?type=hppp&ts ... RNPKJMRNPX, Dobré: (www.google.com), Špatné: (http://www.istartsurf.com/?type=hppp&ts ... RNPKJMRNPX),,[edac645698f267cfb9069e9674928977]
PUP.Optional.HttpBreaker.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, http://www.istartsurf.com/?type=hppp&ts ... RNPKJMRNPX, Dobré: (www.google.com), Špatné: (http://www.istartsurf.com/?type=hppp&ts ... RNPKJMRNPX),,[940519a1a2e8db5b3788d75d24e20000]
PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Dobré: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Špatné: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),,[099055658a000531c6500e33996d7a86]
PUP.Optional.IStartSurf.A, HKLM\SOFTWARE\WOW6432NODE\CLIENTS\STARTMENUINTERNET\IEXPLORE.EXE\SHELL\OPEN\COMMAND, C:\Program Files\Internet Explorer\iexplore.exe http://www.istartsurf.com/?type=sc&ts=1 ... RNPKJMRNPX, Dobré: (iexplore.exe), Špatné: (C:\Program Files\Internet Explorer\iexplore.exe http://www.istartsurf.com/?type=sc&ts=1 ... RNPKJMRNPX),,[72272c8e751579bdd6cc12243fc70af6]
PUP.Optional.IStartSurf.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, http://www.istartsurf.com/web/?type=ds& ... KJMRNPX&q={searchTerms}, Dobré: (www.google.com), Špatné: (http://www.istartsurf.com/web/?type=ds& ... KJMRNPX&q={searchTerms}),,[821707b3cbbf50e686a166cfc640f40c]
PUP.Optional.HttpBreaker.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, http://www.istartsurf.com/?type=hppp&ts ... RNPKJMRNPX, Dobré: (www.google.com), Špatné: (http://www.istartsurf.com/?type=hppp&ts ... RNPKJMRNPX),,[8d0c7d3d2a609c9a1ba42b095caa5aa6]
PUP.Optional.HttpBreaker.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, http://www.istartsurf.com/?type=hppp&ts ... RNPKJMRNPX, Dobré: (www.google.com), Špatné: (http://www.istartsurf.com/?type=hppp&ts ... RNPKJMRNPX),,[51489723dfab79bdc9f6be76b84eab55]
PUP.Optional.IStartSurf.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, http://www.istartsurf.com/web/?type=ds& ... KJMRNPX&q={searchTerms}, Dobré: (www.google.com), Špatné: (http://www.istartsurf.com/web/?type=ds& ... KJMRNPX&q={searchTerms}),,[32677f3bd5b50f27899e39fc689e44bc]
PUP.Optional.Qone8, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Dobré: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Špatné: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),,[8c0d9e1c305ab08627efd26f1beb53ad]
PUP.Optional.IStartSurf.A, HKU\S-1-5-21-556047477-119812697-3251834620-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, http://www.istartsurf.com/web/?type=dsp ... KJMRNPX&q={searchTerms}, Dobré: (www.google.com), Špatné: (http://www.istartsurf.com/web/?type=dsp ... KJMRNPX&q={searchTerms}),,[bfda2397b2d8290dc362bf769670817f]
PUP.Optional.HttpBreaker.A, HKU\S-1-5-21-556047477-119812697-3251834620-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, http://www.istartsurf.com/?type=hppp&ts ... RNPKJMRNPX, Dobré: (www.google.com), Špatné: (http://www.istartsurf.com/?type=hppp&ts ... RNPKJMRNPX),,[f0a9d4e6dcaeda5ca21a90a49274956b]
PUP.Optional.IStartSurf.A, HKU\S-1-5-21-556047477-119812697-3251834620-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, http://www.istartsurf.com/web/?type=dsp ... KJMRNPX&q={searchTerms}, Dobré: (www.google.com), Špatné: (http://www.istartsurf.com/web/?type=dsp ... KJMRNPX&q={searchTerms}),,[22770caec2c82313d1540c29c046ad53]

Složky: 15
PUP.Optional.SmartBar.A, C:\Users\MA­la\AppData\Roaming\Bechiro S.L, , [9603dae0beccea4c2fa02a08d3315aa6],
PUP.Optional.SmartBar.A, C:\Users\MA­la\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcjcajklmlbpmgckpcmnampagbhhmcp, , [7920dddd76140c2a4c899a260df6d42c],
PUP.Optional.SmartBar.A, C:\Users\MA­la\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcjcajklmlbpmgckpcmnampagbhhmcp\1.0_1, , [7920dddd76140c2a4c899a260df6d42c],
PUP.Optional.SmartBar.A, C:\Program Files (x86)\Bechiro S.L\smartbar, , [603966541d6dfa3c01d5a818b64d659b],
PUP.Optional.SmartBar.A, C:\Program Files (x86)\Bechiro S.L\smartbar\1.8.8.12, , [603966541d6dfa3c01d5a818b64d659b],
PUP.Optional.SmartBar.A, C:\Program Files (x86)\Bechiro S.L\smartbar\1.8.8.12\bh, , [603966541d6dfa3c01d5a818b64d659b],
PUP.Optional.GamesDesktop.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GAMESDESKTOP, , [bbde4476206af541addda738927135cb],
PUP.Optional.GamesDesktop.A, C:\Users\MA­la\AppData\Local\gmsd_re_262, , [5d3c2a906a2031057516bd225ba801ff],
PUP.Optional.GamesDesktop.A, C:\Users\MA­la\AppData\Local\gmsd_re_262\Download, , [5d3c2a906a2031057516bd225ba801ff],
PUP.Optional.GamesDesktop.A, C:\Users\MA­la\AppData\Local\gmsd_re_262\gmsd_re_262, , [5d3c2a906a2031057516bd225ba801ff],
PUP.Optional.GamesDesktop.A, C:\Users\MA­la\AppData\Local\gmsd_re_262\gmsd_re_262\1.20, , [5d3c2a906a2031057516bd225ba801ff],
PUP.Optional.GamesDesktop.A, C:\Program Files (x86)\gmsd_re_262, , [653421996d1da98d8507bd22857eef11],
PUP.Optional.IHProtectUpDate.A, C:\ProgramData\IHProtectUpDate, , [1287e6d4e2a8b48264805390fc0736ca],
PUP.Optional.IHProtectUpDate.A, C:\ProgramData\IHProtectUpDate\update, , [1287e6d4e2a8b48264805390fc0736ca],
PUP.Optional.PineTree.A, C:\Program Files (x86)\Pine Tree, , [b4e56951bcce47ef82f96881b84b33cd],

Soubory: 38
PUP.Optional.PineTree.A, C:\Windows\System32\drivers\{32f197f9-63ca-4014-aac0-2e905e2a155b}Gw64.sys, , [e1b88c2e78125bdbd2a6245957afb749],
PUP.Optional.Tuto4PC.A, C:\Program Files (x86)\gmsd_re_262\predm.exe, , [abeebdfd0981fa3cf92dd4a9f0164cb4],
PUP.Optional.EORezo, C:\Program Files (x86)\gmsd_re_262\unins000.exe, , [d9c002b8f19956e0c96dc2bbd6302bd5],
PUP.Optional.Somoto.A, C:\Users\MA­la\Downloads\startw8.exe, , [c5d45862d5b5df5781658b138e775fa1],
PUP.Optional.OpenCandy, C:\Users\MA­la\Downloads\DTLite4491-0356.exe, , [f6a31d9de2a89a9c69c00b5d0501ee12],
PUP.Optional.IStartSurf.A, C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\istartsurf.xml, , [7b1e8337d4b6d660d049af68a46057a9],
PUP.Optional.SmartBar.A, C:\Users\MA­la\AppData\Roaming\Bechiro S.L\sqlite3.dll, , [9603dae0beccea4c2fa02a08d3315aa6],
PUP.Optional.SmartBar.A, C:\Users\MA­la\AppData\Roaming\Mozilla\Firefox\Profiles\0kpl12k8.default\searchplugins\smartbar.xml, , [fb9e2793f298fd39f5db0c26d92bba46],
PUP.Optional.IStartSurf.A, C:\Users\MA­la\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.istartsurf.com_0.localstorage, , [f9a0c7f34446b2842b8f07774db8dd23],
PUP.Optional.IStartSurf.A, C:\Users\MA­la\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.istartsurf.com_0.localstorage-journal, , [fd9c4c6e1476b185febc2757f70e8c74],
PUP.Optional.SmartBar.A, C:\Users\MA­la\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcjcajklmlbpmgckpcmnampagbhhmcp\1.0_1\appCntrl.js, , [7920dddd76140c2a4c899a260df6d42c],
PUP.Optional.SmartBar.A, C:\Users\MA­la\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcjcajklmlbpmgckpcmnampagbhhmcp\1.0_1\bg.html, , [7920dddd76140c2a4c899a260df6d42c],
PUP.Optional.SmartBar.A, C:\Users\MA­la\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcjcajklmlbpmgckpcmnampagbhhmcp\1.0_1\bg.js, , [7920dddd76140c2a4c899a260df6d42c],
PUP.Optional.SmartBar.A, C:\Users\MA­la\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcjcajklmlbpmgckpcmnampagbhhmcp\1.0_1\CrmAdpt.dll, , [7920dddd76140c2a4c899a260df6d42c],
PUP.Optional.SmartBar.A, C:\Users\MA­la\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcjcajklmlbpmgckpcmnampagbhhmcp\1.0_1\ct.js, , [7920dddd76140c2a4c899a260df6d42c],
PUP.Optional.SmartBar.A, C:\Users\MA­la\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcjcajklmlbpmgckpcmnampagbhhmcp\1.0_1\CTB.dll, , [7920dddd76140c2a4c899a260df6d42c],
PUP.Optional.SmartBar.A, C:\Users\MA­la\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcjcajklmlbpmgckpcmnampagbhhmcp\1.0_1\dpk.js, , [7920dddd76140c2a4c899a260df6d42c],
PUP.Optional.SmartBar.A, C:\Users\MA­la\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcjcajklmlbpmgckpcmnampagbhhmcp\1.0_1\hprtkMsg.htm, , [7920dddd76140c2a4c899a260df6d42c],
PUP.Optional.SmartBar.A, C:\Users\MA­la\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcjcajklmlbpmgckpcmnampagbhhmcp\1.0_1\hprtkMsg.js, , [7920dddd76140c2a4c899a260df6d42c],
PUP.Optional.SmartBar.A, C:\Users\MA­la\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcjcajklmlbpmgckpcmnampagbhhmcp\1.0_1\json2.min.js, , [7920dddd76140c2a4c899a260df6d42c],
PUP.Optional.SmartBar.A, C:\Users\MA­la\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcjcajklmlbpmgckpcmnampagbhhmcp\1.0_1\logo.png, , [7920dddd76140c2a4c899a260df6d42c],
PUP.Optional.SmartBar.A, C:\Users\MA­la\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcjcajklmlbpmgckpcmnampagbhhmcp\1.0_1\manifest.json, , [7920dddd76140c2a4c899a260df6d42c],
PUP.Optional.SmartBar.A, C:\Program Files (x86)\Bechiro S.L\smartbar\1.8.8.12\escortShld.dll, , [603966541d6dfa3c01d5a818b64d659b],
PUP.Optional.SmartBar.A, C:\Program Files (x86)\Bechiro S.L\smartbar\1.8.8.12\smartbar.crx, , [603966541d6dfa3c01d5a818b64d659b],
PUP.Optional.SmartBar.A, C:\Program Files (x86)\Bechiro S.L\smartbar\1.8.8.12\smartbarApp.dll, , [603966541d6dfa3c01d5a818b64d659b],
PUP.Optional.SmartBar.A, C:\Program Files (x86)\Bechiro S.L\smartbar\1.8.8.12\smartbarEng.dll, , [603966541d6dfa3c01d5a818b64d659b],
PUP.Optional.SmartBar.A, C:\Program Files (x86)\Bechiro S.L\smartbar\1.8.8.12\smartbarsrv.exe, , [603966541d6dfa3c01d5a818b64d659b],
PUP.Optional.SmartBar.A, C:\Program Files (x86)\Bechiro S.L\smartbar\1.8.8.12\smartbarTlbr.dll, , [603966541d6dfa3c01d5a818b64d659b],
PUP.Optional.SmartBar.A, C:\Program Files (x86)\Bechiro S.L\smartbar\1.8.8.12\uninstall.exe, , [603966541d6dfa3c01d5a818b64d659b],
PUP.Optional.SmartBar.A, C:\Program Files (x86)\Bechiro S.L\smartbar\1.8.8.12\bh\smartbar.dll, , [603966541d6dfa3c01d5a818b64d659b],
PUP.Optional.GamesDesktop.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GAMESDESKTOP\GamesDesktop.lnk, , [bbde4476206af541addda738927135cb],
PUP.Optional.GamesDesktop.A, C:\Users\MA­la\AppData\Local\gmsd_re_262\upgmsd_re_262.cyl, , [5d3c2a906a2031057516bd225ba801ff],
PUP.Optional.GamesDesktop.A, C:\Users\MA­la\AppData\Local\gmsd_re_262\Download\majmp_gentlerow.exe, , [5d3c2a906a2031057516bd225ba801ff],
PUP.Optional.GamesDesktop.A, C:\Users\MA­la\AppData\Local\gmsd_re_262\gmsd_re_262\1.20\cnf.cyl, , [5d3c2a906a2031057516bd225ba801ff],
PUP.Optional.GamesDesktop.A, C:\Users\MA­la\AppData\Local\gmsd_re_262\gmsd_re_262\1.20\eorezo.cyl, , [5d3c2a906a2031057516bd225ba801ff],
PUP.Optional.GamesDesktop.A, C:\Program Files (x86)\gmsd_re_262\unins000.dat, , [653421996d1da98d8507bd22857eef11],
PUP.Optional.GamesDesktop.A, C:\Program Files (x86)\gmsd_re_262\unins000.msg, , [653421996d1da98d8507bd22857eef11],
PUP.Optional.IHProtectUpDate.A, C:\ProgramData\IHProtectUpDate\update\conf, , [1287e6d4e2a8b48264805390fc0736ca],

Fyzické sektory: 0
(Nenalezeny žádné škodlivé položky)


(end)

Re: Prosím o kontrolu logu

Napsal: 14 čer 2015 10:56
od Orcus
jerabina píše:Co AdwCleaner?

Re: Prosím o kontrolu logu

Napsal: 18 čer 2015 18:54
od mylbl
Projel jsem ho a dávám log, díky

# AdwCleaner v4.206 - Log vytvořen 18/06/2015 v 18:50:02
# Aktualizováno 01/06/2015 by Xplode
# Databáze : 2015-06-17.1 [Server]
# Operační system : Windows 8.1 (x64)
# Uživatelské jméno : Míla - PŮDA
# Spuštěno z : C:\Users\Míla\Desktop\AdwCleaner.exe
# Nastavení : Sken

***** [ Služby ] *****


***** [ Soubory / Složky ] *****

Složka Nalezeno : C:\Program Files (x86)\predm
Složka Nalezeno : C:\Users\Míla\AppData\Local\Google\Chrome\User Data\Default\Extensions\ncffjdbbodifgldkcbhmiiljfcnbgjab
Soubor Nalezeno : C:\Users\Míla\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.istartsurf.com_0.localstorage
Soubor Nalezeno : C:\Users\Míla\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.istartsurf.com_0.localstorage-journal

***** [ Naplánované úlohy ] *****


***** [ Zástupci ] *****

Zástupce Infikováno : C:\Users\Public\Desktop\Google Chrome.lnk
Zástupce Infikováno : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk
Zástupce Infikováno : C:\Users\Míla\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
Zástupce Infikováno : C:\Users\Míla\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
Zástupce Infikováno : C:\Users\Míla\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
Zástupce Infikováno : C:\Users\Míla\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk
Zástupce Infikováno : C:\Users\Míla\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Internet Explorer.lnk

***** [ Registry ] *****

Klíč Nalezeno : HKCU\Software\APN PIP
Klíč Nalezeno : HKCU\Software\Linkey
Klíč Nalezeno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{BC265ABA-8DBA-4618-9BD3-F14417F3D320}
Klíč Nalezeno : HKCU\Software\simplytech
Klíč Nalezeno : HKCU\Software\Tutorials
Klíč Nalezeno : [x64] HKCU\Software\APN PIP
Klíč Nalezeno : [x64] HKCU\Software\Linkey
Klíč Nalezeno : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{BC265ABA-8DBA-4618-9BD3-F14417F3D320}
Klíč Nalezeno : [x64] HKCU\Software\simplytech
Klíč Nalezeno : [x64] HKCU\Software\Tutorials
Klíč Nalezeno : HKLM\SOFTWARE\AIM Toolbar
Klíč Nalezeno : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Klíč Nalezeno : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
Klíč Nalezeno : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
Klíč Nalezeno : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
Klíč Nalezeno : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Klíč Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Klíč Nalezeno : HKLM\SOFTWARE\Conduit
Klíč Nalezeno : HKLM\SOFTWARE\Google\Chrome\Extensions\ncffjdbbodifgldkcbhmiiljfcnbgjab
Klíč Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7ADF667E-E14D-4D2C-827C-B0108F0D93BC}
Klíč Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Linkey
Klíč Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect
Klíč Nalezeno : HKLM\SOFTWARE\SearchProtect
Klíč Nalezeno : HKLM\SOFTWARE\SpeedBit
Klíč Nalezeno : HKLM\SOFTWARE\SupDp
Klíč Nalezeno : HKLM\SOFTWARE\Uniblue
Klíč Nalezeno : HKLM\SOFTWARE\Uniblue\SpeedUpMyPC
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}

***** [ Prohlížeče ] *****

-\\ Internet Explorer v11.0.9600.17840

Nastavení Nalezeno : HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls [Tabs] - hxxp://search.creativetoolbars.com/?src ... martbar&g=

-\\ Mozilla Firefox v38.0.5 (x86 cs)


-\\ Google Chrome v43.0.2357.124

[C:\Users\Míla\AppData\Local\Google\Chrome\User Data\Default\Web data] - Nalezeno [Search Provider] : hxxp://www.istartsurf.com/web/?type=dsp ... KJMRNPX&q={searchTerms}

*************************

AdwCleaner[R0].txt - [4562 bytů] - [18/06/2015 18:50:02]

########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [4620 bytů] ##########

Re: Prosím o kontrolu logu

Napsal: 18 čer 2015 20:29
od mylbl
Funguje to, díky za trpělivost, m

Re: Prosím o kontrolu logu

Napsal: 19 čer 2015 07:33
od Orcus
- Spusť znovu MbAM a dej Skenovat nyní
- Po proběhnutí programu se ti objeví hláška tak klikni na „Vše do karantény(smazat vybrané)“ a na „Exportovat záznam“ a vyber „textový soubor“ , soubor nějak pojmenuj a někam ho ulož. Zkopíruj se celý obsah toho logu.

====================================================

Spusť znovu AdwCleaner (u Windows Vista či Windows7, klikni na AdwCleaner pravým a vyber „Spustit jako správce“
Klikni na „ Smazat“
Program provede opravu, po automatickém restartu neukáže log (C:\AdwCleaner [S?].txt) , jeho obsah sem celý vlož.

====================================================

Stáhni si Junkware Removal Tool by Thisisu

na svojí plochu.

Deaktivuj si svůj antivirový program. Pravým tl. myši klikni na JRT.exe a vyber „spustit jako správce“. Pro pokračování budeš vyzván ke stisknutí jakékoliv klávesy. Na nějakou klikni.
Začne skenování programu. Skenování může trvat dloho , podle množství nákaz. Po ukončení skenu se objeví log (JRT.txt) , který se uloží na ploše.
Zkopíruj sem prosím celý jeho obsah.

====================================================

Stáhni si RogueKiller
32bit.:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
64bit.:
http://www.sur-la-toile.com/RogueKiller ... lerX64.exe
na svojí plochu.
- Zavři všechny ostatní programy a prohlížeče.
- Pro OS Vista a win7 spusť program RogueKiller.exe jako správce , u XP poklepáním.
- počkej až skončí Prescan -vyhledávání škodlivých procesů.
- Zkontroluj , zda máš zaškrtnuto:
Kontrola MBR
Kontrola Faked
Antirootkit
-Potom klikni na „Prohledat“.
- Program skenuje procesy PC. Po proskenování klikni na „Zpráva“celý obsah logu sem zkopíruj.
Pokud je program blokován , zkus ho spustit několikrát. Pokud dále program nepůjde spustit a pracovat, přejmenuj ho na winlogon.exe.
Časové pásmo: UTC+02:00
Stránka 1 z 1
Powered by phpBB® Forum Software © phpBB Limited
https://www.phpbb.com/