PC-HELP.CZ

Dobrý den,

udělal jsem log z HijackThis a toto je výsledek, jak mám postupovat dále? Děkuji

Logfile of Trend Micro HijackThis v2.0.5
Scan saved at 10:59:30, on 25.6.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17840)

FIREFOX: 38.0.5 (x86 cs)
Boot mode: Normal

Running processes:
C:\windows\system32\taskhost.exe
C:\windows\system32\Dwm.exe
C:\windows\Explorer.EXE
C:\Program Files\TuneUp Utilities 2014\TuneUpUtilitiesApp32.exe
C:\ExpressGateUtil\VAWinAgent.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Synaptics\SynTP\SynAsusAcpi.exe
C:\windows\system32\igfxsrvc.exe
C:\windows\system32\wuauclt.exe
C:\Users\PC\Downloads\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://asus.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://eeepc.asus.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = :0
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [GfxServiceInstall] C:\windows\system32\GfxCUIServiceInstall.vbs
O4 - HKLM\..\Run: [HotkeyMon] AsusSender.exe C:\Program Files\ASUS\HotkeyService\HotKeyMon.exe
O4 - HKLM\..\Run: [HotkeyService] AsusSender.exe C:\Program Files\ASUS\HotkeyService\HotkeyService.exe
O4 - HKLM\..\Run: [SuperHybridEngine] AsusSender.exe C:\Program Files\ASUS\SHE\SuperHybridEngine.exe
O4 - HKLM\..\Run: [LiveUpdate] AsusSender.exe C:\Program Files\Asus\LiveUpdate\LiveUpdate.exe auto
O4 - HKLM\..\Run: [CapsHook] AsusSender.exe C:\Program Files\ASUS\CapsHook\CapsHook.exe
O4 - HKLM\..\Run: [Eee Docking] C:\Program Files\ASUS\Eee Docking\Eee Docking.exe autorun
O4 - HKLM\..\Run: [ASUSWebStorage] C:\Program Files\ASUS\ASUS WebStorage\3.0.108.222\AsusWSPanel.exe /S
O4 - HKLM\..\Run: [VAWinAgent] C:\ExpressGateUtil\VAWinAgent.exe
O4 - HKLM\..\Run: [IgfxTray] C:\windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s
O4 - HKLM\..\Run: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [ASUSPRP] C:\Program Files\ASUS\APRP\APRP.EXE
O4 - HKLM\..\Run: [SynAsusAcpi] %ProgramFiles%\Synaptics\SynTP\SynAsusAcpi.exe
O4 - HKCU\..\RunOnce: [FlashPlayerUpdate] C:\windows\system32\Macromed\Flash\FlashUtil32_17_0_0_190_Plugin.exe -update plugin
O4 - Global Startup: AsusVibeLauncher.lnk = C:\Program Files\Asus\AsusVibe\AsusVibeLauncher.exe
O9 - Extra button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: ASUS InstantOn Service (ASUS InstantOn) - ASUS - C:\Program Files\ASUS\InstantOn for EPC\InsOnSrv.exe
O23 - Service: Asus Launcher Service (AsusService) - Unknown owner - C:\windows\system32\AsusService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Program Files\TuneUp Utilities 2014\TuneUpUtilitiesService32.exe
O23 - Service: VideAceWindowsService - Unknown owner - C:\ExpressGateUtil\VAWinService.exe

--
End of file - 5466 bytes

vkládám ještě jednou s právy administrátora, omlouvá se

Logfile of Trend Micro HijackThis v2.0.5
Scan saved at 11:07:30, on 25.6.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17840)

FIREFOX: 38.0.5 (x86 cs)
Boot mode: Normal

Running processes:
C:\windows\system32\taskhost.exe
C:\windows\system32\Dwm.exe
C:\windows\Explorer.EXE
C:\Program Files\TuneUp Utilities 2014\TuneUpUtilitiesApp32.exe
C:\ExpressGateUtil\VAWinAgent.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Synaptics\SynTP\SynAsusAcpi.exe
C:\windows\system32\igfxsrvc.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\windows\system32\wuauclt.exe
C:\windows\system32\taskhost.exe
C:\windows\system32\taskeng.exe
C:\Users\PC\Downloads\HijackThis.exe
C:\windows\system32\SearchFilterHost.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://asus.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://eeepc.asus.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = :0
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [GfxServiceInstall] C:\windows\system32\GfxCUIServiceInstall.vbs
O4 - HKLM\..\Run: [HotkeyMon] AsusSender.exe C:\Program Files\ASUS\HotkeyService\HotKeyMon.exe
O4 - HKLM\..\Run: [HotkeyService] AsusSender.exe C:\Program Files\ASUS\HotkeyService\HotkeyService.exe
O4 - HKLM\..\Run: [SuperHybridEngine] AsusSender.exe C:\Program Files\ASUS\SHE\SuperHybridEngine.exe
O4 - HKLM\..\Run: [LiveUpdate] AsusSender.exe C:\Program Files\Asus\LiveUpdate\LiveUpdate.exe auto
O4 - HKLM\..\Run: [CapsHook] AsusSender.exe C:\Program Files\ASUS\CapsHook\CapsHook.exe
O4 - HKLM\..\Run: [Eee Docking] C:\Program Files\ASUS\Eee Docking\Eee Docking.exe autorun
O4 - HKLM\..\Run: [ASUSWebStorage] C:\Program Files\ASUS\ASUS WebStorage\3.0.108.222\AsusWSPanel.exe /S
O4 - HKLM\..\Run: [VAWinAgent] C:\ExpressGateUtil\VAWinAgent.exe
O4 - HKLM\..\Run: [IgfxTray] C:\windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s
O4 - HKLM\..\Run: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [ASUSPRP] C:\Program Files\ASUS\APRP\APRP.EXE
O4 - HKLM\..\Run: [SynAsusAcpi] %ProgramFiles%\Synaptics\SynTP\SynAsusAcpi.exe
O4 - HKCU\..\RunOnce: [FlashPlayerUpdate] C:\windows\system32\Macromed\Flash\FlashUtil32_17_0_0_190_Plugin.exe -update plugin
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: AsusVibeLauncher.lnk = C:\Program Files\Asus\AsusVibe\AsusVibeLauncher.exe
O9 - Extra button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: ASUS InstantOn Service (ASUS InstantOn) - ASUS - C:\Program Files\ASUS\InstantOn for EPC\InsOnSrv.exe
O23 - Service: Asus Launcher Service (AsusService) - Unknown owner - C:\windows\system32\AsusService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Program Files\TuneUp Utilities 2014\TuneUpUtilitiesService32.exe
O23 - Service: VideAceWindowsService - Unknown owner - C:\ExpressGateUtil\VAWinService.exe

--
End of file - 6053 bytes

Popiš problémy.

Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected. Poté klikni na Main (hlavní stránku ) a klikni na Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranění historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit dočasné soubory Windows, vysypat koš atd.

- Pokud používáš jen Google Chrome , tak ATF nemusíš použít.

===================================================

Stáhni si TFC
Otevři soubor a zavři všechny ostatní okna, Klikni na Start k zahájení procesu. Program by neměl trvat dlouho.
Poté by se měl PC restartovat, pokud ne , proveď sám.

===================================================

Stáhni AdwCleaner (by Xplode)

Ulož si ho na svojí plochu
Ukonči všechny programy , okna a prohlížeče
Spusť program poklepáním a klikni na „Prohledat-Scan“
Po skenu se objeví log ( jinak je uložen systémovem disku jako AdwCleaner[R?].txt), jeho obsah sem celý vlož.

===================================================

Stáhni si Malwarebytes' Anti-Malware
- Při instalaci odeber zatržítko u „Povolit bezplatnou zkušební verzi Malwarebytes' Anti-Malware Premium“
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Aktualizace Malwarebytes' Anti-Malware a Spustit aplikaci Malwarebytes' Anti-Malware, pokud jo tak klikni na tlačítko konec
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a klikni na Skenovat nyní a
- po proběhnutí programu se ti objeví hláška vpravo dole tak klikni na Kopírovat do schránky a a vlož sem celý log.

- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).

Pokud budou problémy , spusť v nouz. režimu.

Počítač je elkově zpomalený a ve Firefoxu často zamrzne třeba na půl minuty než se dá opět do pohyu.

# AdwCleaner v4.207 - Log vytvořen 25/06/2015 v 16:18:22
# Aktualizováno 21/06/2015 by Xplode
# Databáze : 2015-06-23.1 [Server]
# Operační system : Windows 7 Starter Service Pack 1 (x86)
# Uživatelské jméno : PC - PC-PC
# Spuštěno z : C:\Users\PC\Desktop\AdwCleaner.exe
# Nastavení : Sken

***** [ Služby ] *****


***** [ Soubory / Složky ] *****

Složka Nalezeno : C:\Program Files\WebCake
Složka Nalezeno : C:\ProgramData\AVG Security Toolbar
Složka Nalezeno : C:\ProgramData\Avg_Update_0215tb
Složka Nalezeno : C:\ProgramData\Tarma Installer
Složka Nalezeno : C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\chfdnecihphmhljaaejmgoiahnihplgn
Složka Nalezeno : C:\Users\PC\AppData\Local\SwvUpdater
Složka Nalezeno : C:\Users\PC\AppData\Roaming\Betcat
Složka Nalezeno : C:\Users\PC\AppData\Roaming\WebCake
Soubor Nalezeno : C:\Program Files\Mozilla Firefox\browser\searchplugins\wtu-secure-search.xml
Soubor Nalezeno : C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_chfdnecihphmhljaaejmgoiahnihplgn_0.localstorage
Soubor Nalezeno : C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\qk61e97l.default\user.js

***** [ Naplánované úlohy ] *****


***** [ Zástupci ] *****


***** [ Registry ] *****

Data Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyServer] - :0
Hodnota Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [DefaultConnectionSettings]
Hodnota Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [SavedLegacySettings]
Klíč Nalezeno : HKCU\Software\Avg Secure Update
Klíč Nalezeno : HKCU\Software\powerpack
Klíč Nalezeno : HKLM\SOFTWARE\AVG SafeGuard toolbar
Klíč Nalezeno : HKLM\SOFTWARE\Classes\AppID\{7169BBB3-3289-4696-B35D-4A88BCF6FB12}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\AppID\WebCakeIEClient.DLL
Klíč Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{A0B10EBE-4E51-4CAE-949B-E6B9E7D68CEA}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{BB975E58-E769-4E5A-BA12-B765BC559FF3}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{F511AFDB-726E-4458-90E7-1ECB97406544}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{FB684D26-01F4-4D9D-87CB-F486BEBA56DC}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\WebCakeIEClient.Api
Klíč Nalezeno : HKLM\SOFTWARE\Classes\WebCakeIEClient.Layers
Klíč Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{C4ED781C-7394-4906-AAFF-D6AB64FF7C38}
Klíč Nalezeno : HKLM\SOFTWARE\Tarma Installer
Klíč Nalezeno : HKU\.DEFAULT\Software\Avg Secure Update

***** [ Prohlížeče ] *****

-\\ Internet Explorer v11.0.9600.17840


-\\ Mozilla Firefox v38.0.5 (x86 cs)

[qk61e97l.default] - Řádek Nalezeno : user_pref("extentions.webcake.defaultEnableAppsList", "layers,brain/features,newOffers/wc");
[qk61e97l.default] - Řádek Nalezeno : user_pref("extentions.webcake.installId", "0229f938-c70b-411e-ab48-b644481d7aa3");

-\\ Google Chrome v43.0.2357.130


*************************

AdwCleaner[R0].txt - [3025 bytů] - [25/06/2015 16:18:22]

########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [3083 bytů] ##########

Malwarebytes Anti-Malware
www.malwarebytes.org

Datum skenování: 25.6.2015
Čas skenování: 16:26:12
Protokol: mbamlog.txt
Správce: Ano

Verze: 2.01.6.1022
Databáze malwaru: v2015.06.25.04
Databáze rootkitů: v2015.06.22.01
Licence: Bezplatná verze
Ochrana proti malwaru: Vypnuto
Ochrana proti škodlivým webovým stránkám: Vypnuto
Ochrana programu: Vypnuto

OS: Windows 7 Service Pack 1
CPU: x86
Souborový systém: NTFS
Uživatel: PC

Typ skenu: Sken hrozeb
Výsledek: Dokončeno
Prohledaných objektů: 308129
Uplynulý čas: 25 min, 8 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Vypnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto

Procesy: 0
(Nenalezeny žádné škodlivé položky)

Moduly: 0
(Nenalezeny žádné škodlivé položky)

Klíče registru: 6
PUP.Optional.WebCake.A, HKLM\SOFTWARE\CLASSES\APPID\{7169BBB3-3289-4696-B35D-4A88BCF6FB12}, , [ca1ef9c5cac0f93d95afe4c88d760bf5],
PUP.Optional.WebCake.A, HKLM\SOFTWARE\CLASSES\CLSID\{BB975E58-E769-4E5A-BA12-B765BC559FF3}, , [ba2e833b414923137dc6f5b748bb649c],
PUP.Optional.WebCake.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{C4ED781C-7394-4906-AAFF-D6AB64FF7C38}, , [cd1b98262961c57171e8f064ee17f40c],
PUP.Optional.WebCake.A, HKLM\SOFTWARE\CLASSES\WebCakeIEClient.Api, , [f5f34777b5d59a9cca892d27c540d12f],
PUP.Optional.WebCake.A, HKLM\SOFTWARE\CLASSES\WebCakeIEClient.Layers, , [b236d0ee93f74de997bcc09459ac9b65],
PUP.Optional.WebCake.A, HKLM\SOFTWARE\CLASSES\APPID\WebCakeIEClient.DLL, , [0cdcdae4b1d9e0568dc7ff5553b219e7],

Hodnoty registru: 0
(Nenalezeny žádné škodlivé položky)

Data registru: 0
(Nenalezeny žádné škodlivé položky)

Složky: 9
PUP.Optional.WebCake.A, C:\Users\PC\AppData\Roaming\WebCake, , [4c9c4a74c5c5dc5a58fd88cc93725da3],
PUP.Optional.WebCake.A, C:\Users\PC\AppData\Roaming\WebCake\dat, , [4c9c4a74c5c5dc5a58fd88cc93725da3],
PUP.Optional.WebCake.A, C:\Users\PC\AppData\Roaming\WebCake\dat\update, , [4c9c4a74c5c5dc5a58fd88cc93725da3],
PUP.Optional.WebCake.A, C:\Program Files\WebCake, , [a93fcdf12c5e90a6480e78dced18758b],
PUP.Optional.WebCake.A, C:\ProgramData\Tarma Installer\{C4ED781C-7394-4906-AAFF-D6AB64FF7C38}, , [cd1b98262961c57171e8f064ee17f40c],
PUP.Optional.WebCake.A, C:\ProgramData\Tarma Installer\{C4ED781C-7394-4906-AAFF-D6AB64FF7C38}\Cache, , [cd1b98262961c57171e8f064ee17f40c],
PUP.Optional.Betcat.A, C:\Users\PC\AppData\Roaming\Betcat, , [6d7b843a4545310554535d81798a15eb],
PUP.Optional.Betcat.A, C:\Users\PC\AppData\Roaming\Betcat\dat, , [6d7b843a4545310554535d81798a15eb],
PUP.Optional.Betcat.A, C:\Users\PC\AppData\Roaming\Betcat\dat\update, , [6d7b843a4545310554535d81798a15eb],

Soubory: 22
Adware.WebCake, C:\Users\PC\AppData\Roaming\WebCake\WebCakeDesktop.exe, , [8b5d516d06840630192aeb8654b2be42],
PUP.Optional.WebCake.A, C:\Users\PC\AppData\Roaming\WebCake\PlugIns.cache, , [4c9c4a74c5c5dc5a58fd88cc93725da3],
PUP.Optional.WebCake.A, C:\Users\PC\AppData\Roaming\WebCake\WebCakeDesktop.exe, , [4c9c4a74c5c5dc5a58fd88cc93725da3],
PUP.Optional.WebCake.A, C:\Users\PC\AppData\Roaming\WebCake\dat\Dora.dat, , [4c9c4a74c5c5dc5a58fd88cc93725da3],
PUP.Optional.WebCake.A, C:\Users\PC\AppData\Roaming\WebCake\dat\Maintain.dat, , [4c9c4a74c5c5dc5a58fd88cc93725da3],
PUP.Optional.WebCake.A, C:\Users\PC\AppData\Roaming\WebCake\dat\Paladin.dat, , [4c9c4a74c5c5dc5a58fd88cc93725da3],
PUP.Optional.WebCake.A, C:\Users\PC\AppData\Roaming\WebCake\dat\Phoenix.dat, , [4c9c4a74c5c5dc5a58fd88cc93725da3],
PUP.Optional.WebCake.A, C:\Users\PC\AppData\Roaming\WebCake\dat\sqlite3.dll, , [4c9c4a74c5c5dc5a58fd88cc93725da3],
PUP.Optional.WebCake.A, C:\Program Files\WebCake\WebCakeLayers.crx, , [a93fcdf12c5e90a6480e78dced18758b],
PUP.Optional.WebCake.A, C:\ProgramData\Tarma Installer\{C4ED781C-7394-4906-AAFF-D6AB64FF7C38}\Setup.ico, , [cd1b98262961c57171e8f064ee17f40c],
PUP.Optional.WebCake.A, C:\ProgramData\Tarma Installer\{C4ED781C-7394-4906-AAFF-D6AB64FF7C38}\Setup.dat, , [cd1b98262961c57171e8f064ee17f40c],
PUP.Optional.WebCake.A, C:\ProgramData\Tarma Installer\{C4ED781C-7394-4906-AAFF-D6AB64FF7C38}\Setup.exe, , [cd1b98262961c57171e8f064ee17f40c],
PUP.Optional.Betcat.A, C:\Users\PC\AppData\Roaming\Betcat\PlugIns.cache, , [6d7b843a4545310554535d81798a15eb],
PUP.Optional.Betcat.A, C:\Users\PC\AppData\Roaming\Betcat\dat\Desktop.OS.dll, , [6d7b843a4545310554535d81798a15eb],
PUP.Optional.Betcat.A, C:\Users\PC\AppData\Roaming\Betcat\dat\DIBS.dat, , [6d7b843a4545310554535d81798a15eb],
PUP.Optional.Betcat.A, C:\Users\PC\AppData\Roaming\Betcat\dat\Dora.dat, , [6d7b843a4545310554535d81798a15eb],
PUP.Optional.Betcat.A, C:\Users\PC\AppData\Roaming\Betcat\dat\Maintain.dat, , [6d7b843a4545310554535d81798a15eb],
PUP.Optional.Betcat.A, C:\Users\PC\AppData\Roaming\Betcat\dat\Paladin.dat, , [6d7b843a4545310554535d81798a15eb],
PUP.Optional.Betcat.A, C:\Users\PC\AppData\Roaming\Betcat\dat\Phoenix.dat, , [6d7b843a4545310554535d81798a15eb],
PUP.Optional.Betcat.A, C:\Users\PC\AppData\Roaming\Betcat\dat\ProgramMonitor.dat, , [6d7b843a4545310554535d81798a15eb],
PUP.Optional.Betcat.A, C:\Users\PC\AppData\Roaming\Betcat\dat\sqlite3.dll, , [6d7b843a4545310554535d81798a15eb],
PUP.Optional.Betcat.A, C:\Users\PC\AppData\Roaming\Betcat\dat\uninstaller.exe, , [6d7b843a4545310554535d81798a15eb],

Fyzické sektory: 0
(Nenalezeny žádné škodlivé položky)


(end)

Spusť znovu AdwCleaner (u Windows Vista či Windows7, klikni na AdwCleaner pravým a vyber „Spustit jako správce“
klikni na „Prohledat-Scan“, po prohledání klikni na „ Vymazat-Clean“

Program provede opravu, po automatickém restartu neukáže log (C:\AdwCleaner [S?].txt) , jeho obsah sem celý vlož.

Spusť znovu MbAM a dej Skenovat nyní
- po proběhnutí programu se ti objeví hláška tak klikni na „Vše do karantény(smazat vybrané)“ a na „Exportovat záznam“ a vyber „textový soubor“ , soubor nějak pojmenuj a někam ho ulož. Zkopíruj se celý obsah toho logu.

Stáhni si Junkware Removal Tool by Thisisu

na svojí plochu.

Deaktivuj si svůj antivirový program. Pravým tl. myši klikni na JRT.exe a vyber „spustit jako správce“. Pro pokračování budeš vyzván ke stisknutí jakékoliv klávesy. Na nějakou klikni.
Začne skenování programu. Skenování může trvat dloho , podle množství nákaz. Po ukončení skenu se objeví log (JRT.txt) , který se uloží na ploše.
Zkopíruj sem prosím celý jeho obsah.

Stáhni si RogueKiller
32bit.:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
64bit.:
http://www.sur-la-toile.com/RogueKiller ... lerX64.exe
na svojí plochu.
- Zavři všechny ostatní programy a prohlížeče.
- Pro OS Vista a win7 spusť program RogueKiller.exe jako správce , u XP poklepáním.
- počkej až skončí Prescan -vyhledávání škodlivých procesů.
-Potom klikni na „Prohledat“.
- Program skenuje procesy PC. Po proskenování klikni na „Zpráva“celý obsah logu sem zkopíruj.
Pokud je program blokován , zkus ho spustit několikrát. Pokud dále program nepůjde spustit a pracovat, přejmenuj ho na winlogon.exe.

# AdwCleaner v4.207 - Log vytvořen 25/06/2015 v 20:20:30
# Aktualizováno 21/06/2015 by Xplode
# Databáze : 2015-06-23.1 [Server]
# Operační system : Windows 7 Starter Service Pack 1 (x86)
# Uživatelské jméno : PC - PC-PC
# Spuštěno z : C:\Users\PC\Desktop\AdwCleaner.exe
# Nastavení : Čištění

***** [ Služby ] *****


***** [ Soubory / Složky ] *****

Složka Smazáno : C:\ProgramData\AVG Security Toolbar
Složka Smazáno : C:\ProgramData\Tarma Installer
Složka Smazáno : C:\ProgramData\Avg_Update_0215tb
Složka Smazáno : C:\Program Files\WebCake
Složka Smazáno : C:\Users\PC\AppData\Local\SwvUpdater
Složka Smazáno : C:\Users\PC\AppData\Roaming\Betcat
Složka Smazáno : C:\Users\PC\AppData\Roaming\WebCake
Složka Smazáno : C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\chfdnecihphmhljaaejmgoiahnihplgn
Soubor Smazáno : C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_chfdnecihphmhljaaejmgoiahnihplgn_0.localstorage
Soubor Smazáno : C:\Program Files\Mozilla Firefox\browser\searchplugins\wtu-secure-search.xml
Soubor Smazáno : C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\qk61e97l.default\user.js

***** [ Naplánované úlohy ] *****


***** [ Zástupci ] *****


***** [ Registry ] *****

Klíč Smazáno : HKLM\SOFTWARE\Classes\AppID\WebCakeIEClient.DLL
Klíč Smazáno : HKLM\SOFTWARE\Classes\WebCakeIEClient.Api
Klíč Smazáno : HKLM\SOFTWARE\Classes\WebCakeIEClient.Layers
Klíč Smazáno : HKLM\SOFTWARE\Classes\AppID\{7169BBB3-3289-4696-B35D-4A88BCF6FB12}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{A0B10EBE-4E51-4CAE-949B-E6B9E7D68CEA}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{BB975E58-E769-4E5A-BA12-B765BC559FF3}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{F511AFDB-726E-4458-90E7-1ECB97406544}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{FB684D26-01F4-4D9D-87CB-F486BEBA56DC}
Klíč Smazáno : HKCU\Software\powerpack
Klíč Smazáno : HKCU\Software\Avg Secure Update
Klíč Smazáno : HKLM\SOFTWARE\AVG SafeGuard toolbar
Klíč Smazáno : HKLM\SOFTWARE\Tarma Installer
Klíč Smazáno : HKU\.DEFAULT\Software\Avg Secure Update
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{C4ED781C-7394-4906-AAFF-D6AB64FF7C38}
Data Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyServer] - :0

***** [ Prohlížeče ] *****

-\\ Internet Explorer v11.0.9600.17840


-\\ Mozilla Firefox v38.0.5 (x86 cs)

[qk61e97l.default\prefs.js] - Řádek Smazáno : user_pref("extentions.webcake.defaultEnableAppsList", "layers,brain/features,newOffers/wc");
[qk61e97l.default\prefs.js] - Řádek Smazáno : user_pref("extentions.webcake.installId", "0229f938-c70b-411e-ab48-b644481d7aa3");

-\\ Google Chrome v43.0.2357.130


*************************

AdwCleaner[R0].txt - [3161 bytů] - [25/06/2015 16:18:22]
AdwCleaner[R1].txt - [3219 bytů] - [25/06/2015 20:03:09]
AdwCleaner[S0].txt - [2914 bytů] - [25/06/2015 20:20:30]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [2972 bytů] ##########

Ještě dodej zbytek

Malwarebytes Anti-Malware
www.malwarebytes.org

Datum skenování: 25.6.2015
Čas skenování: 23:20:07
Protokol:
Správce: Ano

Verze: 2.01.6.1022
Databáze malwaru: v2015.06.25.06
Databáze rootkitů: v2015.06.22.01
Licence: Bezplatná verze
Ochrana proti malwaru: Vypnuto
Ochrana proti škodlivým webovým stránkám: Vypnuto
Ochrana programu: Vypnuto

OS: Windows 7 Service Pack 1
CPU: x86
Souborový systém: NTFS
Uživatel: PC

Typ skenu: Sken hrozeb
Výsledek: Dokončeno
Prohledaných objektů: 308401
Uplynulý čas: 26 min, 4 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Vypnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto

Procesy: 0
(Nenalezeny žádné škodlivé položky)

Moduly: 0
(Nenalezeny žádné škodlivé položky)

Klíče registru: 0
(Nenalezeny žádné škodlivé položky)

Hodnoty registru: 0
(Nenalezeny žádné škodlivé položky)

Data registru: 0
(Nenalezeny žádné škodlivé položky)

Složky: 0
(Nenalezeny žádné škodlivé položky)

Soubory: 0
(Nenalezeny žádné škodlivé položky)

Fyzické sektory: 0
(Nenalezeny žádné škodlivé položky)


(end)

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 7.1.4 (06.25.2015:1)
OS: Windows 7 Starter x86
Ran by PC on p  26.06.2015 at 5:06:57,15
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Tasks



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders

Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{089B4E5E-E4A1-4DAE-86AC-86D0B0EB7489}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{09911D71-7C6B-4B2B-97CA-737CA8B6112F}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{0A7D8293-EDB8-4163-8D39-2B5C31BF0751}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{0AA911F9-B0E6-43F0-A1E9-5970BBBFF2D0}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{0BC58A6D-C785-4C1F-83C4-94BAFBDE945D}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{15BD8ABE-4E0F-48F1-A43A-F6EF124B36A0}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{18B12F56-4838-4FA9-95CA-3E0E7E5EF30B}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{1A6592B6-2051-4039-83CB-2A6F74C9BFD6}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{1D0F0878-F069-4F84-A59B-9A7642126150}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{1DF92F4F-AA9B-4068-ADDA-44F8A2A5EB55}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{261E8CEC-B9B1-4798-A0EA-83B6E9BFC64F}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{2A6832A1-318E-45C3-B7B7-C277B9C4F8D4}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{2B5867FC-2AD2-410F-B799-E5FEBEF37BD8}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{2CDBB980-5B58-4B97-9C81-0F1CB14552B8}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{2FD78FC9-2580-4948-A814-7E26D24C634E}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{33498BB9-98F8-47B2-BE18-FAD8229CCB55}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{36C3FAC9-9CD4-4A95-BE83-3D8A28E38BBE}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{370AA371-81FD-4492-8BC3-C9E4CABC0C84}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{3971A2C0-F186-40D4-B65B-5122CB58354E}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{3AF1A019-C5C1-48BC-BD8E-F1CC1EB928D3}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{3B3A373E-C3CC-4AF0-94CE-1FEB137FFA16}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{3C26900B-7B2E-4465-B701-2E4947ED6618}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{3D09BCA2-70C6-477B-956D-C1A2D000ABB1}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{429CCF7B-CB49-4F92-9A43-2E0245AA84FB}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{44D091A1-C543-4A07-A0B1-A92C64A7DB41}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{4553B976-C5D3-4B4F-945D-FFE1673946C6}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{459D8070-08C0-483E-9B29-658780C85DB7}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{4799F9DF-C4A8-41E1-A883-C2C38713D77C}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{4DAD38B6-17B1-4634-B016-C33B66BBE8D7}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{4DE5F0E9-61CC-4219-AF7C-C3A94D57D8D1}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{5290DD08-ED59-4AD3-A12B-7B3019CD03F2}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{56EB4971-ADF0-45BC-B600-E8C0FDEEB1CB}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{598C04E2-EA0E-44C6-A51E-9D46734934EA}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{5D079825-543F-45B9-90FB-9AE00DCE5A01}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{612ED940-1FC1-4C83-99B0-BCF213E66829}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{6330BD66-65E2-4FE6-BA65-70214F08E585}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{644F7757-92BE-43E7-B8F0-58F45902B27C}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{6676D46D-9BE7-453F-B7B4-D7D641785AD4}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{692B51E0-CCA0-4EA2-B4A2-CDCFDF6C1A93}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{7117DC5D-3CCC-4B4C-93DD-A1AE91686323}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{762A6D14-E834-4641-AC38-012BDEE7F5C6}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{7926BF6D-191F-4753-899F-83E96210AD43}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{7C7A50A9-49A2-4E24-89F4-A6D9804E41CB}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{7F2D7815-35A6-4A01-BAC7-DCCD7127FEC2}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{7FCE6342-658B-4C05-AB96-F1282FA75649}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{8032C480-6E62-4C4B-831F-A9C197BE2619}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{81D6A115-2B90-4EA9-B51C-7484F9781DD1}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{873491B4-E7A0-474C-9D5C-9319B7B7647B}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{8C7FF23E-3566-4161-95C0-1DCB78F4DBE2}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{8CA8F18B-FD4D-4F4E-A680-F6CAFDBC4722}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{8D3C1EC2-0005-4D1A-8C56-FA4C8A516F12}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{94F0049D-BAEF-420A-B5DC-7817D71BED63}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{964E836B-AAED-4FD0-9A12-32C5B08A4A08}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{98DC2759-683F-4C32-B6FE-7813701EB7C0}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{9BE87CAA-04CE-4D7A-8247-C2DD3560F4A4}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{9E6327FF-39B4-4B41-B682-8E49DB0B5D68}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{A91803FD-9065-4D48-AA61-E563BFFCA4E1}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{AA80DA7B-7096-4D67-8946-FBA7FED42B42}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{AD4468BA-7336-4F54-9D82-5C46AA5FD0C0}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{BCDDD54A-9E33-4E77-9A04-A5357A0640EB}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{BDB92764-C880-4729-A261-E47DBF175E9C}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{C2F8EF3E-5F20-43C3-81EF-766F939CCE7A}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{C315479A-9C9C-4EAD-8EC0-1050C4F69CF7}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{C6F7652E-75D1-418E-AAC4-2719C3532723}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{C7EEFB64-F718-4C2C-8F45-D18D47C877EC}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{CA6F489B-6480-417E-A6A7-A3B587BFAADA}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{CEDA5997-B2E2-4A82-8610-9CF8924CA865}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{D140D748-CF4D-4A70-A9CC-C3DA5AB0A4BB}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{D197454D-FB18-47CA-B430-1E8A62DD21E4}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{D5ECB139-DD55-465D-81BE-422CF481E8C0}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{DBF420FB-8BA6-4C36-883A-E162BAFEF3DE}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{DE390DDB-7E58-4B5A-BC6C-5478AF007207}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{E4DEDB95-30D3-4E3F-82F5-517B1D9A1E82}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{E6D8E656-14EB-4C73-B0D8-566D008C7ACB}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{E8A70484-7CD3-4B2D-89F4-1D8FDAAACBEE}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{EA597A33-A3D6-4075-A6CA-893577918167}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{EB029AAC-CF30-49DD-917A-B52914E4E9EF}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{EDD97F4C-D12C-432C-A720-412763A8D1DE}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{EF93A5BB-4A8F-4559-9BD5-AB7892BD4D2D}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{F06CC36D-C926-4D61-9920-A1BD649F0FBC}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{F4C9C78C-7695-4C81-A437-23BE75D3E54C}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{F8724BB4-4E07-4D29-A50F-93E3CD95B085}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{F9238118-0F0F-43FC-BAD9-AF3159F87C9E}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{F942CE46-5DF8-4833-84B9-E68F1B04D154}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{FC76C3A7-D6F6-4026-AEE3-524789ADEFE6}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{FFBB264D-A864-47A6-BEBC-9287DC9D6EDE}



~~~ FireFox




~~~ Chrome


[C:\Users\PC\appdata\local\Google\Chrome\User Data\Default\Preferences] - default search provider reset

[C:\Users\PC\appdata\local\Google\Chrome\User Data\Default\Preferences] - Extensions Deleted:

[C:\Users\PC\appdata\local\Google\Chrome\User Data\Default\Secure Preferences] - default search provider reset

[C:\Users\PC\appdata\local\Google\Chrome\User Data\Default\Secure Preferences] - Extensions Deleted:
[]





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on p  26.06.2015 at 5:14:49,42
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Ještě RogueKiller prosím