PC-HELP.CZ

Logfile of Trend Micro HijackThis v2.0.5
Scan saved at 21:26:09, on 28.8.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17937)


Boot mode: Normal

Running processes:
C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgent.exe
C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\coreshredder.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\BlueStacks\HD-Agent.exe
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\Common Files\Portrait Displays\Drivers\SDKCOMServer.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Users\admin\Downloads\HijackThis.exe
C:\Users\admin\Downloads\HijackThis (1).exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.seznam.cz/?clid=22668
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.seznam.cz/?sourceid=quicksearch_22668&q={searchTerms}
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.seznam.cz/?clid=22668
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.seznam.cz/?clid=22668
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.seznam.cz/?sourceid=quicksearch_22668&q={searchTerms}
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.seznam.cz/?clid=22668
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O1 - Hosts: 0.0.0.1 mssplus.mcafee.com
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O4 - HKLM\..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe "C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" 60
O4 - HKLM\..\Run: [USB3MON] "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
O4 - HKLM\..\Run: [DTRun] c:\Program Files (x86)\ArcSoft\TotalMedia Suite\TotalMedia Theatre 3\uDTRun.exe
O4 - HKLM\..\Run: [File Sanitizer] c:\Program Files (x86)\Hewlett-Packard\File Sanitizer\CoreShredder.exe
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [BCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [HPConnectionManager] C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe
O4 - HKLM\..\Run: [QLBController] C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe /start
O4 - HKLM\..\Run: [YTDownloader] "C:\Program Files (x86)\YTDownloader\YTDownloader.exe" /boot
O4 - HKLM\..\Run: [BlueStacks Agent] C:\Program Files (x86)\BlueStacks\HD-Agent.exe
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [icq] C:\Users\admin\AppData\Roaming\ICQM\icq.exe -CU
O4 - HKCU\..\Run: [YTDownloader] "C:\Program Files (x86)\YTDownloader\YTDownloader.exe" /boot
O4 - Global Startup: McAfee Security Scan Plus.lnk = C:\Program Files\McAfee Security Scan\3.11.149\SSScheduler.exe
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\windows\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
O9 - Extra button: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-103 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-102 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files (x86)\PokerStars\PokerStarsUpdate.exe
O9 - Extra button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - res://C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll/204 (file missing)
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - res://C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll/204 (file missing)
O9 - Extra button: ICQ - {086C8477-4F71-4550-87FB-AF0AE8DF3E98} - C:\Users\admin\AppData\Roaming\ICQM\icq.exe (HKCU)
O9 - Extra 'Tools' menuitem: ICQ - {086C8477-4F71-4550-87FB-AF0AE8DF3E98} - C:\Users\admin\AppData\Roaming\ICQM\icq.exe (HKCU)
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O17 - HKLM\System\CCS\Services\Tcpip\..\{25B39FAD-7439-4463-8A84-057C0A626907}: NameServer = 199.203.131.150,82.163.143.168
O17 - HKLM\System\CCS\Services\Tcpip\..\{606264CC-4E14-40BE-B3E3-FC9BC5EF0768}: NameServer = 199.203.131.150,82.163.143.168
O17 - HKLM\System\CCS\Services\Tcpip\..\{CBB1981E-811C-4565-82CA-E1F68CFF1CC5}: NameServer = 82.163.143.172,82.163.142.174
O17 - HKLM\System\CS1\Services\Tcpip\..\{25B39FAD-7439-4463-8A84-057C0A626907}: NameServer = 199.203.131.150,82.163.143.168
O17 - HKLM\System\CS2\Services\Tcpip\..\{25B39FAD-7439-4463-8A84-057C0A626907}: NameServer = 199.203.131.150,82.163.143.168
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O20 - AppInit_DLLs:
O20 - Winlogon Notify: DeviceNP - DeviceNP.dll (file missing)
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\windows\System32\alg.exe (file missing)
O23 - Service: AtherosSvc - Qualcomm Atheros Commnucations - C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: BlueStacks Android Service (BstHdAndroidSvc) - BlueStack Systems, Inc. - C:\Program Files (x86)\BlueStacks\HD-Service.exe
O23 - Service: BlueStacks Log Rotator Service (BstHdLogRotatorSvc) - BlueStack Systems, Inc. - C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
O23 - Service: BlueStacks Updater Service (BstHdUpdaterSvc) - BlueStack Systems, Inc. - C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe,-128 (DpHost) - DigitalPersona, Inc. - C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\windows\system32\fxssvc.exe (file missing)
O23 - Service: HP ProtectTools Device Locking / Auditing (FLCDLOCK) - Hewlett-Packard Company - c:\windows\SysWOW64\flcdlock.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Unknown owner - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (file missing)
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Unknown owner - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (file missing)
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP Power Assistant Service - Hewlett-Packard Company - C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Service.exe
O23 - Service: HP Support Assistant Service - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
O23 - Service: HP Connection Manager 4 Service (hpCMSrv) - Hewlett-Packard Development Company, L.P. - C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe
O23 - Service: HP Quick Synchronization Service (HPDrvMntSvc.exe) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe
O23 - Service: File Sanitizer for HP ProtectTools (HPFSService) - Hewlett-Packard - c:\Program Files (x86)\Hewlett-Packard\File Sanitizer\HPFSService.exe
O23 - Service: hpHotkeyMonitor - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe
O23 - Service: HP Software Framework Service (hpqwmiex) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
O23 - Service: HP Service (hpsrv) - Unknown owner - C:\windows\system32\Hpservice.exe (file missing)
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: Intel(R) Integrated Clock Controller Service - Intel(R) ICCS (ICCS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: IePlugin Services (IePluginServices) - Unknown owner - C:\ProgramData\IePluginServices\PluginService.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) ME Service - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: McAfee Endpoint Encryption Agent - Unknown owner - C:\Program Files\Hewlett-Packard\Drive Encryption\EEAgent\MfeEpeHost.exe
O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files\McAfee Security Scan\3.11.149\McCHSvc.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\stlang64.dll,-10122 (STacSV) - IDT, Inc. - C:\Program Files\IDT\WDM\STacSV64.exe
O23 - Service: TeamViewer 8 (TeamViewer8) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
O23 - Service: ArcCapture (uArcCapture) - ArcSoft, Inc. - C:\windows\SysWow64\ArcVCapRender\uArcCapture.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Validity VCS Fingerprint Service (vcsFPService) - Validity Sensors, Inc. - C:\windows\system32\vcsFPService.exe
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: ZAtheros Bt and Wlan Coex Agent - Atheros - C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe

--
End of file - 15735 bytes

Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected. Poté klikni na Main (hlavní stránku ) a klikni na Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranění historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit dočasné soubory Windows, vysypat koš atd.

- Pokud používáš jen Google Chrome , tak ATF nemusíš použít.


Stáhni si TFC
Otevři soubor a zavři všechny ostatní okna, Klikni na Start k zahájení procesu. Program by neměl trvat dlouho.
Poté by se měl PC restartovat, pokud ne , proveď sám.

Stáhni AdwCleaner (by Xplode)
http://www.bleepingcomputer.com/download/adwcleaner/

Ulož si ho na svojí plochu
Ukonči všechny programy , okna a prohlížeče
Spusť program poklepáním a klikni na „Prohledat-Scan“
Po skenu se objeví log ( jinak je uložen systémovem disku jako AdwCleaner[R?].txt), jeho obsah sem celý vlož.

Stáhni si Malwarebytes' Anti-Malware
- Při instalaci odeber zatržítko u „Povolit bezplatnou zkušební verzi Malwarebytes' Anti-Malware Premium“
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Aktualizace Malwarebytes' Anti-Malware a Spustit aplikaci Malwarebytes' Anti-Malware, pokud jo tak klikni na tlačítko konec
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a klikni na Skenovat nyní a
- po proběhnutí programu se ti objeví hláška vpravo dole tak klikni na b] Kopírovat do schránky [/b]a a vlož sem celý log.

- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).

Pokud budou problémy , spusť v nouz. režimu.

# AdwCleaner v5.004 - Logfile created 29/08/2015 at 11:37:17
# Updated 26/08/2015 by Xplode
# Database : 2015-08-25.1 [Server]
# Operating system : Windows 7 Home Premium Service Pack 1 (x64)
# Username : admin - NB01
# Running from : C:\Users\admin\Desktop\AdwCleaner.exe
# Option : Scan
# Support : http://toolslib.net/forum

***** [ Services ] *****

Service Found : IePluginServices

***** [ Folders ] *****

Folder Found : C:\Program Files (x86)\ASP
Folder Found : C:\Program Files (x86)\SoftwareUpdater
Folder Found : C:\Program Files (x86)\topdeal
Folder Found : C:\Program Files (x86)\savinshop
Folder Found : C:\Program Files (x86)\SaverAddon
Folder Found : C:\Program Files (x86)\shopndrop
Folder Found : C:\Program Files (x86)\savingtoyou
Folder Found : C:\Program Files (x86)\Plus500
Folder Found : C:\Program Files (x86)\WowCoupon
Folder Found : C:\Program Files (x86)\DNS Unlocker
Folder Found : C:\Program Files (x86)\AppeToU
Folder Found : C:\Program Files (x86)\AppttooU
Folder Found : C:\Program Files (x86)\AuppptoU
Folder Found : C:\Program Files (x86)\DDeailsFinndEuruPro
Folder Found : C:\Program Files (x86)\ddeal4mue
Folder Found : C:\Program Files (x86)\DeaalsFeindderPrroo
Folder Found : C:\Program Files (x86)\deaL4rreal
Folder Found : C:\Program Files (x86)\DealsFianderrPro
Folder Found : C:\Program Files (x86)\DealsFoiinnderPro
Folder Found : C:\Program Files (x86)\dealsoter
Folder Found : C:\Program Files (x86)\deial22dealit
Folder Found : C:\Program Files (x86)\Laeass2paeye
Folder Found : C:\Program Files (x86)\PoroShOappEr
Folder Found : C:\Program Files (x86)\PricEaDDownlOader
Folder Found : C:\Program Files (x86)\ProShaoppppeR
Folder Found : C:\Program Files (x86)\ProShOOpuper
Folder Found : C:\Program Files (x86)\SaaverPRo
Folder Found : C:\Program Files (x86)\SalesMagnoeat
Folder Found : C:\Program Files (x86)\SaverAddoin
Folder Found : C:\Program Files (x86)\SaverADdon
Folder Found : C:\Program Files (x86)\SaveRoAuddoon
Folder Found : C:\Program Files (x86)\SaverPriOO
Folder Found : C:\Program Files (x86)\SavErPro
Folder Found : C:\Program Files (x86)\savinggtoyoui
Folder Found : C:\Program Files (x86)\savingtoyOu
Folder Found : C:\Program Files (x86)\saviNShop
Folder Found : C:\Program Files (x86)\savionogtoiyou
Folder Found : C:\Program Files (x86)\savoinShop
Folder Found : C:\Program Files (x86)\seaaverrOon
Folder Found : C:\Program Files (x86)\shoPndrop
Folder Found : C:\Program Files (x86)\SmartCoaMparE
Folder Found : C:\Program Files (x86)\SooftCoup
Folder Found : C:\Program Files (x86)\ssaVerniett
Folder Found : C:\Program Files (x86)\ssavinshooP
Folder Found : C:\Program Files (x86)\sshopondarop
Folder Found : C:\Program Files (x86)\ssurfukeaepit
Folder Found : C:\Program Files (x86)\sureffkeEEpit
Folder Found : C:\Program Files (x86)\surffkieeepait
Folder Found : C:\Program Files (x86)\surfkeepiiT
Folder Found : C:\Program Files (x86)\Topddeaal
Folder Found : C:\Program Files (x86)\tOpdeal
Folder Found : C:\Program Files (x86)\tpeerfectcoupoon
Folder Found : C:\Program Files (x86)\tperoFuectcOuupionn
Folder Found : C:\Program Files (x86)\WowCoUpoN
Folder Found : C:\ProgramData\apn
Folder Found : C:\ProgramData\Systweak
Folder Found : C:\ProgramData\CheapCoupon
Folder Found : C:\ProgramData\12754078729275056466
Folder Found : C:\ProgramData\b0ff9707bfce2152
Folder Found : C:\ProgramData\{7f7a2ad4-89fc-2488-7f7a-a2ad489fab52}
Folder Found : C:\ProgramData\{b8753f90-cf08-dfba-b875-53f90cf0fe43}
Folder Found : C:\ProgramData\lkgbnpoanpkbgbfefnfpkgbkmgnhgejj
Folder Found : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Plus500
Folder Found : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced System~Protector
Folder Found : C:\Users\admin\AppData\Local\globalUpdate
Folder Found : C:\Users\admin\AppData\Local\Plus500
Folder Found : C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\odkgihncjgklajjabihpoipfnpcjhdno
Folder Found : C:\Users\admin\AppData\Roaming\FirefoxToolbar
Folder Found : C:\Users\admin\AppData\Roaming\omiga-plus
Folder Found : C:\Users\admin\AppData\Roaming\Systweak
Folder Found : C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Plus500
Folder Found : C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\5tx4661s.default\Extensions\1ZA@qb8K.com
Folder Found : C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\5tx4661s.default\Extensions\4KKc07B@G.net
Folder Found : C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\5tx4661s.default\Extensions\DLYpede@o.net
Folder Found : C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\5tx4661s.default\Extensions\LjG9i@gFpX.org
Folder Found : C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\5tx4661s.default\Extensions\M@U.co.uk
Folder Found : C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\5tx4661s.default\Extensions\pOH0@Ap1.com
Folder Found : C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\5tx4661s.default\Extensions\Yu@bg.edu
Folder Found : C:\Users\Public\Documents\ShopperPro

***** [ Files ] *****

File Found : C:\END
File Found : C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\default-search.xml
File Found : C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\omiga-plus.xml
File Found : C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_odkgihncjgklajjabihpoipfnpcjhdno_0.localstorage
File Found : C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_odkgihncjgklajjabihpoipfnpcjhdno_0.localstorage-journal
File Found : C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_isearch.omiga-plus.com_0.localstorage
File Found : C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_isearch.omiga-plus.com_0.localstorage-journal
File Found : C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_pstatic.bestpriceninja.com_0.localstorage
File Found : C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_pstatic.bestpriceninja.com_0.localstorage-journal
File Found : C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_pstatic.bestpriceninja.com_0.localstorage
File Found : C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_pstatic.bestpriceninja.com_0.localstorage-journal
File Found : C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_isearch.omiga-plus.com_0.localstorage
File Found : C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_isearch.omiga-plus.com_0.localstorage-journal
File Found : C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_st.chatango.com_0.localstorage
File Found : C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_st.chatango.com_0.localstorage-journal
File Found : C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\5tx4661s.default\searchplugins\ask-search.xml
File Found : C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\5tx4661s.default\searchplugins\default-search.xml
File Found : C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\5tx4661s.default\user.js
File Found : C:\Users\Public\Desktop\Advanced System~Protector.lnk
File Found : C:\windows\Sysnative\sasnative64.exe

***** [ Shortcuts ] *****


***** [ Scheduled tasks ] *****

Task Found : LaunchSignup
Task Found : YTDownloader
Task Found : Advanced System~Protector
Task Found : Advanced System~Protector_startup
Task Found : Superclean

***** [ Registry ] *****

Key Found : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\IePluginServices
Key Found : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WindowsMangerProtect
Value Found : HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [YTDownloader]
Key Found : HKCU\Software\Mozilla\Extends
Value Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [YTDownloader]
Key Found : HKLM\SOFTWARE\Classes\AppID\SysMenu.DLL
Key Found : HKLM\SOFTWARE\Classes\P0150A322_E708_480A_89BF_EB2B0BC6E677_.P0150A322_E708_480A_89BF_EB2B0BC6E677_
Key Found : HKLM\SOFTWARE\Classes\P0150A322_E708_480A_89BF_EB2B0BC6E677_.P0150A322_E708_480A_89BF_EB2B0BC6E677_.9
Key Found : HKLM\SOFTWARE\Classes\P073B8186_E9A0_44BF_8CC4_36316C3EEAF9_.P073B8186_E9A0_44BF_8CC4_36316C3EEAF9_
Key Found : HKLM\SOFTWARE\Classes\P073B8186_E9A0_44BF_8CC4_36316C3EEAF9_.P073B8186_E9A0_44BF_8CC4_36316C3EEAF9_.9
Key Found : HKLM\SOFTWARE\Classes\P153D86D6_C382_4185_8AEC_104C98DC8209_.P153D86D6_C382_4185_8AEC_104C98DC8209_
Key Found : HKLM\SOFTWARE\Classes\P153D86D6_C382_4185_8AEC_104C98DC8209_.P153D86D6_C382_4185_8AEC_104C98DC8209_.9
Key Found : HKLM\SOFTWARE\Classes\P285139ED_892E_4C38_9925_5A60BAF3640B_.P285139ED_892E_4C38_9925_5A60BAF3640B_
Key Found : HKLM\SOFTWARE\Classes\P285139ED_892E_4C38_9925_5A60BAF3640B_.P285139ED_892E_4C38_9925_5A60BAF3640B_.9
Key Found : HKLM\SOFTWARE\Classes\P2C878E12_87B6_440E_8D9F_1BA1D819A84C_.P2C878E12_87B6_440E_8D9F_1BA1D819A84C_
Key Found : HKLM\SOFTWARE\Classes\P2C878E12_87B6_440E_8D9F_1BA1D819A84C_.P2C878E12_87B6_440E_8D9F_1BA1D819A84C_.9
Key Found : HKLM\SOFTWARE\Classes\P3334cc4a_3647_4c6a_9e07_d504967080b5_.P3334cc4a_3647_4c6a_9e07_d504967080b5_
Key Found : HKLM\SOFTWARE\Classes\P3334cc4a_3647_4c6a_9e07_d504967080b5_.P3334cc4a_3647_4c6a_9e07_d504967080b5_.9
Key Found : HKLM\SOFTWARE\Classes\P3AD21F2D_D35A_405E_B1AA_A1588F271FC8_.P3AD21F2D_D35A_405E_B1AA_A1588F271FC8_
Key Found : HKLM\SOFTWARE\Classes\P3AD21F2D_D35A_405E_B1AA_A1588F271FC8_.P3AD21F2D_D35A_405E_B1AA_A1588F271FC8_.9
Key Found : HKLM\SOFTWARE\Classes\P3D32FE90_6FB5_408C_9881_EBAF94914B97_.P3D32FE90_6FB5_408C_9881_EBAF94914B97_
Key Found : HKLM\SOFTWARE\Classes\P3D32FE90_6FB5_408C_9881_EBAF94914B97_.P3D32FE90_6FB5_408C_9881_EBAF94914B97_.9
Key Found : HKLM\SOFTWARE\Classes\P480E3573_B6CA_4D81_AEE3_633CFBB51DF8_.P480E3573_B6CA_4D81_AEE3_633CFBB51DF8_
Key Found : HKLM\SOFTWARE\Classes\P480E3573_B6CA_4D81_AEE3_633CFBB51DF8_.P480E3573_B6CA_4D81_AEE3_633CFBB51DF8_.9
Key Found : HKLM\SOFTWARE\Classes\P505212FC_4E90_45CE_AFA1_EB9AC9A1832B_.P505212FC_4E90_45CE_AFA1_EB9AC9A1832B_
Key Found : HKLM\SOFTWARE\Classes\P505212FC_4E90_45CE_AFA1_EB9AC9A1832B_.P505212FC_4E90_45CE_AFA1_EB9AC9A1832B_.9
Key Found : HKLM\SOFTWARE\Classes\P5734563E_699F_44C2_852B_01FE29BFC09A_.P5734563E_699F_44C2_852B_01FE29BFC09A_
Key Found : HKLM\SOFTWARE\Classes\P5734563E_699F_44C2_852B_01FE29BFC09A_.P5734563E_699F_44C2_852B_01FE29BFC09A_.9
Key Found : HKLM\SOFTWARE\Classes\P62C5CA18_BB5D_42D1_9E3C_7CD6B8885EA8_.P62C5CA18_BB5D_42D1_9E3C_7CD6B8885EA8_
Key Found : HKLM\SOFTWARE\Classes\P62C5CA18_BB5D_42D1_9E3C_7CD6B8885EA8_.P62C5CA18_BB5D_42D1_9E3C_7CD6B8885EA8_.9
Key Found : HKLM\SOFTWARE\Classes\P9AAD0AC1_CFA7_4203_B4B6_132A639E5E8A_.P9AAD0AC1_CFA7_4203_B4B6_132A639E5E8A_
Key Found : HKLM\SOFTWARE\Classes\P9AAD0AC1_CFA7_4203_B4B6_132A639E5E8A_.P9AAD0AC1_CFA7_4203_B4B6_132A639E5E8A_.9
Key Found : HKLM\SOFTWARE\Classes\P9b2322f0_3ce1_413f_89ea_2d8929ff5c60_.P9b2322f0_3ce1_413f_89ea_2d8929ff5c60_
Key Found : HKLM\SOFTWARE\Classes\P9b2322f0_3ce1_413f_89ea_2d8929ff5c60_.P9b2322f0_3ce1_413f_89ea_2d8929ff5c60_.9
Key Found : HKLM\SOFTWARE\Classes\P9C88DC42_2938_4196_AE0B_DE901096FA18_.P9C88DC42_2938_4196_AE0B_DE901096FA18_
Key Found : HKLM\SOFTWARE\Classes\P9C88DC42_2938_4196_AE0B_DE901096FA18_.P9C88DC42_2938_4196_AE0B_DE901096FA18_.9
Key Found : HKLM\SOFTWARE\Classes\PB98F8530_2D5A_4BD7_8EA4_8A769B8AE054_.PB98F8530_2D5A_4BD7_8EA4_8A769B8AE054_
Key Found : HKLM\SOFTWARE\Classes\PB98F8530_2D5A_4BD7_8EA4_8A769B8AE054_.PB98F8530_2D5A_4BD7_8EA4_8A769B8AE054_.9
Key Found : HKLM\SOFTWARE\Classes\PCE40AEA9_C382_46A7_A081_D69EBCAF001E_.PCE40AEA9_C382_46A7_A081_D69EBCAF001E_
Key Found : HKLM\SOFTWARE\Classes\PCE40AEA9_C382_46A7_A081_D69EBCAF001E_.PCE40AEA9_C382_46A7_A081_D69EBCAF001E_.9
Key Found : HKLM\SOFTWARE\Classes\Pd0bc5a2a_1226_4e86_905c_8f09610a13e5_.Pd0bc5a2a_1226_4e86_905c_8f09610a13e5_
Key Found : HKLM\SOFTWARE\Classes\Pd0bc5a2a_1226_4e86_905c_8f09610a13e5_.Pd0bc5a2a_1226_4e86_905c_8f09610a13e5_.9
Key Found : HKLM\SOFTWARE\Classes\PD94134E7_2BE9_4B44_9E17_FE801B1D83A2_.PD94134E7_2BE9_4B44_9E17_FE801B1D83A2_
Key Found : HKLM\SOFTWARE\Classes\PD94134E7_2BE9_4B44_9E17_FE801B1D83A2_.PD94134E7_2BE9_4B44_9E17_FE801B1D83A2_.9
Key Found : HKLM\SOFTWARE\Classes\PE63105D9_47CC_439B_BC55_85F14CB07088_.PE63105D9_47CC_439B_BC55_85F14CB07088_
Key Found : HKLM\SOFTWARE\Classes\PE63105D9_47CC_439B_BC55_85F14CB07088_.PE63105D9_47CC_439B_BC55_85F14CB07088_.9
Key Found : HKLM\SOFTWARE\Classes\PEF63B8FF_4C43_42D9_AA8A_F056634CDA2C_.PEF63B8FF_4C43_42D9_AA8A_F056634CDA2C_
Key Found : HKLM\SOFTWARE\Classes\PEF63B8FF_4C43_42D9_AA8A_F056634CDA2C_.PEF63B8FF_4C43_42D9_AA8A_F056634CDA2C_.9
Key Found : HKLM\SOFTWARE\037c04bd-be68-e8e6-f72a-a24051b2c025
Key Found : HKLM\SOFTWARE\5da059a482fd494db3f252126fbc3d5b
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}{763bdca1}
Value Found : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [faststartff@gmail.com]
Key Found : HKLM\SOFTWARE\Classes\AppID\{D813D5BB-EBC7-45F9-B8A4-36A305168069}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{61AB12E1-A5FF-11D1-B2E9-444553540000}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{82351441-9094-11D1-A24B-00A0C932C7DF}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{0150A322-E708-480A-89BF-EB2B0BC6E677}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{073B8186-E9A0-44BF-8CC4-36316C3EEAF9}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{153D86D6-C382-4185-8AEC-104C98DC8209}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{285139ED-892E-4C38-9925-5A60BAF3640B}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{2C878E12-87B6-440E-8D9F-1BA1D819A84C}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{3334cc4a-3647-4c6a-9e07-d504967080b5}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{3AD21F2D-D35A-405E-B1AA-A1588F271FC8}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{3D32FE90-6FB5-408C-9881-EBAF94914B97}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{480E3573-B6CA-4D81-AEE3-633CFBB51DF8}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{505212FC-4E90-45CE-AFA1-EB9AC9A1832B}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{5734563E-699F-44C2-852B-01FE29BFC09A}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{62C5CA18-BB5D-42D1-9E3C-7CD6B8885EA8}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{9AAD0AC1-CFA7-4203-B4B6-132A639E5E8A}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{9b2322f0-3ce1-413f-89ea-2d8929ff5c60}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{9C88DC42-2938-4196-AE0B-DE901096FA18}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{B98F8530-2D5A-4BD7-8EA4-8A769B8AE054}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{CE40AEA9-C382-46A7-A081-D69EBCAF001E}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{d0bc5a2a-1226-4e86-905c-8f09610a13e5}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{D94134E7-2BE9-4B44-9E17-FE801B1D83A2}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{E63105D9-47CC-439B-BC55-85F14CB07088}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{EF63B8FF-4C43-42D9-AA8A-F056634CDA2C}
Key Found : HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Key Found : HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Key Found : HKLM\SOFTWARE\Classes\Interface\{3F97FDF1-DA2B-4579-AD3E-E46641F9DBAB}
Key Found : HKLM\SOFTWARE\Classes\Interface\{A220BAB5-C335-48BA-8A01-309FDA37446F}
Key Found : HKLM\SOFTWARE\Classes\Interface\{0416BDB0-AFB0-4464-952D-1EAB5047B8E6}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{A2D733A7-73B0-4C6B-B0C7-06A432950B66}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{82351433-9094-11D1-A24B-00A0C932C7DF}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{04A0F1FA-CF83-4ECD-9F68-D94D3F8A7622}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{1F831F60-05FB-474D-93A3-42DA68E7EB8F}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{318C7F13-3498-459E-BF35-12865E6D005C}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{330ED369-73D2-49BC-AC43-1E21602F742D}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{38BAB45F-0A8A-48B5-8C46-F2A8C7EEFAEE}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{41F978F3-431A-4464-A789-5C0692D562FB}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{4A917E10-567D-4720-A3EF-FF6C79904954}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{6137A08F-29B1-4E48-B6A1-70CC3ABF50F7}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{96BB8E60-6EF9-47E0-9ED8-4AD477ECF427}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{B83055E5-D13F-4DB9-A034-3B89A4CFE680}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{C7405EEB-2E16-40FE-9E27-1F48CAAB15E1}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{CC6F4F54-6EF8-4E84-BDC6-ABC6F83100BE}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{D553067B-6F4E-4F58-BF46-7ACDBBC50332}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{E0D6077D-7186-48B2-A6C6-2F7C533E8CFF}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{EB559340-3A8F-4456-B24D-160098054EF0}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{4D9101D6-5BA0-4048-BDDE-7E2DF54C8C47}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{54739D49-AC03-4C57-9264-C5195596B3A1}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{0150A322-E708-480A-89BF-EB2B0BC6E677}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{073B8186-E9A0-44BF-8CC4-36316C3EEAF9}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{153D86D6-C382-4185-8AEC-104C98DC8209}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{285139ED-892E-4C38-9925-5A60BAF3640B}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3334cc4a-3647-4c6a-9e07-d504967080b5}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3AD21F2D-D35A-405E-B1AA-A1588F271FC8}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{480E3573-B6CA-4D81-AEE3-633CFBB51DF8}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{505212FC-4E90-45CE-AFA1-EB9AC9A1832B}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5734563E-699F-44C2-852B-01FE29BFC09A}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{62C5CA18-BB5D-42D1-9E3C-7CD6B8885EA8}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{9AAD0AC1-CFA7-4203-B4B6-132A639E5E8A}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{9b2322f0-3ce1-413f-89ea-2d8929ff5c60}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{9C88DC42-2938-4196-AE0B-DE901096FA18}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{B98F8530-2D5A-4BD7-8EA4-8A769B8AE054}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{CE40AEA9-C382-46A7-A081-D69EBCAF001E}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{d0bc5a2a-1226-4e86-905c-8f09610a13e5}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D94134E7-2BE9-4B44-9E17-FE801B1D83A2}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{E63105D9-47CC-439B-BC55-85F14CB07088}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EF63B8FF-4C43-42D9-AA8A-F056634CDA2C}
Value Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}]
Value Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{0150A322-E708-480A-89BF-EB2B0BC6E677}]
Value Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{073B8186-E9A0-44BF-8CC4-36316C3EEAF9}]
Value Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{153D86D6-C382-4185-8AEC-104C98DC8209}]
Value Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{285139ED-892E-4C38-9925-5A60BAF3640B}]
Value Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{2C878E12-87B6-440E-8D9F-1BA1D819A84C}]
Value Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{3334cc4a-3647-4c6a-9e07-d504967080b5}]
Value Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{3AD21F2D-D35A-405E-B1AA-A1588F271FC8}]
Value Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{3D32FE90-6FB5-408C-9881-EBAF94914B97}]
Value Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{480E3573-B6CA-4D81-AEE3-633CFBB51DF8}]
Value Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{505212FC-4E90-45CE-AFA1-EB9AC9A1832B}]
Value Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{5734563E-699F-44C2-852B-01FE29BFC09A}]
Value Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{62C5CA18-BB5D-42D1-9E3C-7CD6B8885EA8}]
Value Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{9AAD0AC1-CFA7-4203-B4B6-132A639E5E8A}]
Value Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{9b2322f0-3ce1-413f-89ea-2d8929ff5c60}]
Value Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{9C88DC42-2938-4196-AE0B-DE901096FA18}]
Value Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{B98F8530-2D5A-4BD7-8EA4-8A769B8AE054}]
Value Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{CE40AEA9-C382-46A7-A081-D69EBCAF001E}]
Value Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{d0bc5a2a-1226-4e86-905c-8f09610a13e5}]
Value Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{D94134E7-2BE9-4B44-9E17-FE801B1D83A2}]
Value Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{E63105D9-47CC-439B-BC55-85F14CB07088}]
Value Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{EF63B8FF-4C43-42D9-AA8A-F056634CDA2C}]
Key Found : [x64] HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
Key Found : [x64] HKLM\SOFTWARE\Classes\CLSID\{020B1D4B-5738-4C77-9E19-4F173DD9B486}
Key Found : [x64] HKLM\SOFTWARE\Classes\CLSID\{0150A322-E708-480A-89BF-EB2B0BC6E677}
Key Found : [x64] HKLM\SOFTWARE\Classes\CLSID\{073B8186-E9A0-44BF-8CC4-36316C3EEAF9}
Key Found : [x64] HKLM\SOFTWARE\Classes\CLSID\{153D86D6-C382-4185-8AEC-104C98DC8209}
Key Found : [x64] HKLM\SOFTWARE\Classes\CLSID\{285139ED-892E-4C38-9925-5A60BAF3640B}
Key Found : [x64] HKLM\SOFTWARE\Classes\CLSID\{3334cc4a-3647-4c6a-9e07-d504967080b5}
Key Found : [x64] HKLM\SOFTWARE\Classes\CLSID\{3AD21F2D-D35A-405E-B1AA-A1588F271FC8}
Key Found : [x64] HKLM\SOFTWARE\Classes\CLSID\{480E3573-B6CA-4D81-AEE3-633CFBB51DF8}
Key Found : [x64] HKLM\SOFTWARE\Classes\CLSID\{505212FC-4E90-45CE-AFA1-EB9AC9A1832B}
Key Found : [x64] HKLM\SOFTWARE\Classes\CLSID\{5734563E-699F-44C2-852B-01FE29BFC09A}
Key Found : [x64] HKLM\SOFTWARE\Classes\CLSID\{62C5CA18-BB5D-42D1-9E3C-7CD6B8885EA8}
Key Found : [x64] HKLM\SOFTWARE\Classes\CLSID\{9AAD0AC1-CFA7-4203-B4B6-132A639E5E8A}
Key Found : [x64] HKLM\SOFTWARE\Classes\CLSID\{9b2322f0-3ce1-413f-89ea-2d8929ff5c60}
Key Found : [x64] HKLM\SOFTWARE\Classes\CLSID\{9C88DC42-2938-4196-AE0B-DE901096FA18}
Key Found : [x64] HKLM\SOFTWARE\Classes\CLSID\{B98F8530-2D5A-4BD7-8EA4-8A769B8AE054}
Key Found : [x64] HKLM\SOFTWARE\Classes\CLSID\{CE40AEA9-C382-46A7-A081-D69EBCAF001E}
Key Found : [x64] HKLM\SOFTWARE\Classes\CLSID\{d0bc5a2a-1226-4e86-905c-8f09610a13e5}
Key Found : [x64] HKLM\SOFTWARE\Classes\CLSID\{D94134E7-2BE9-4B44-9E17-FE801B1D83A2}
Key Found : [x64] HKLM\SOFTWARE\Classes\CLSID\{E63105D9-47CC-439B-BC55-85F14CB07088}
Key Found : [x64] HKLM\SOFTWARE\Classes\CLSID\{EF63B8FF-4C43-42D9-AA8A-F056634CDA2C}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{3F97FDF1-DA2B-4579-AD3E-E46641F9DBAB}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{A220BAB5-C335-48BA-8A01-309FDA37446F}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{0416BDB0-AFB0-4464-952D-1EAB5047B8E6}
Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827}
Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2503}
Key Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827}
Key Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2503}
Key Found : HKU\.DEFAULT\Software\AskPartnerNetwork
Key Found : HKU\.DEFAULT\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
Key Found : HKU\.DEFAULT\Software\AppDataLow\Software\_CrossriderRegNamePlaceHolder_
Key Found : HKCU\Software\Conduit
Key Found : HKCU\Software\GlobalUpdate
Key Found : HKCU\Software\Optimizer Pro
Key Found : HKCU\Software\systweak
Key Found : HKCU\Software\Super Optimizer
Key Found : HKCU\Software\Linkey
Key Found : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
Key Found : HKCU\Software\AppDataLow\Software\Crossrider
Key Found : HKLM\SOFTWARE\AppDataLow\SOFTWARE\Crossrider
Key Found : HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}
Key Found : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Key Found : HKLM\SOFTWARE\{6791A2F3-FC80-475C-A002-C014AF797E9C}
Key Found : HKLM\SOFTWARE\Conduit
Key Found : HKLM\SOFTWARE\GlobalUpdate
Key Found : HKLM\SOFTWARE\omiga-plusSoftware
Key Found : HKLM\SOFTWARE\SmdmF
Key Found : HKLM\SOFTWARE\SoftwareUpdater
Key Found : HKLM\SOFTWARE\systweak
Key Found : HKLM\SOFTWARE\{12A61307-94CD-4F8E-94BC-918E511FAA81}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2D471A31-4FA7-95BA-1880-D441113ED736}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{614925F9-841A-53FE-A28F-DC30FA07239B}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{8B114619-78B7-1CFF-55EF-74266954F883}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{37476589-E48E-439E-A706-56189E2ED4C4}_is1
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{194FED75-9C74-BDB7-53F8-8CFFEF1AFEC9}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{D831E399-50FE-84AE-F5F7-0A63AC282464}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{5E03DFA7-51FC-7C12-CEE5-4D75FBB01E8F}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2FA77785-00C3-A920-6452-D4FE5C9C129F}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{594FD08C-0622-F9B8-CB02-7C1355D33CB8}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{E1527582-8509-4011-B922-29E3FB548882}_is1
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{23B82977-C816-92D2-66E7-BE67DD1E7786}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2D471A31-4FA7-95BA-1880-D441113ED736}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2FA77785-00C3-A920-6452-D4FE5C9C129F}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{37476589-E48E-439E-A706-56189E2ED4C4}_is1
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{594FD08C-0622-F9B8-CB02-7C1355D33CB8}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{5E03DFA7-51FC-7C12-CEE5-4D75FBB01E8F}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{614925F9-841A-53FE-A28F-DC30FA07239B}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{82B558C7-2A69-D3D5-B65A-DCAB3B65AD02}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{94851E46-5E5B-DD67-2593-709E8D27DC4C}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{D831E399-50FE-84AE-F5F7-0A63AC282464}
Key Found : [x64] HKCU\Software\Conduit
Key Found : [x64] HKCU\Software\GlobalUpdate
Key Found : [x64] HKCU\Software\Optimizer Pro
Key Found : [x64] HKCU\Software\systweak
Key Found : [x64] HKCU\Software\Super Optimizer
Key Found : [x64] HKCU\Software\Linkey
Key Found : [x64] HKLM\SOFTWARE\ShopperPro
Key Found : [x64] HKLM\SOFTWARE\YTDownloader
Key Found : HKU\.DEFAULT\Software\AppDataLow\Software\_CrossriderRegNamePlaceHolder_
Key Found : HKU\S-1-5-21-380200912-3961780877-2511125308-1001\Software\AppDataLow\Software\Crossrider
Key Found : HKU\S-1-5-18\Software\AppDataLow\Software\_CrossriderRegNamePlaceHolder_
Data Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL] - hxxp://isearch.omiga-plus.com/web/?type ... GLNRPAX&q={searchTerms}
Data Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL] - hxxp://isearch.omiga-plus.com/?type=hp& ... RPAGLNRPAX
Data Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page] - hxxp://go.microsoft.com/fwlink/?LinkId= ... com/?aff=p
Data Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page] - hxxp://isearch.omiga-plus.com/web/?type ... GLNRPAX&q={searchTerms}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2503}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2503}
Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827}
Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2503}
Key Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827}
Key Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Data Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes [DefaultScope] - {33BB0A4E-99AF-4226-BDF6-49120163DE86}
Key Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2503}
Key Found : HKU\S-1-5-21-380200912-3961780877-2511125308-1001\Software\Microsoft\Internet Explorer\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827}
Key Found : HKU\S-1-5-21-380200912-3961780877-2511125308-1001\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2503}
Data Found : HKLM\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command [] - C:\Program Files\Internet Explorer\iexplore.exe hxxp://isearch.omiga-plus.com/?type=sc& ... RPAGLNRPAX

***** [ Web browsers ] *****

[C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] Found : eu.ask.com
[C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] Found : isearch.omiga-plus.com
[C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] Found : default-search.net
[C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Homepage] Found : 9B8AF8C158BA9EFE841CCCAAF6317016A53545300AA39795DFF8EBE7ABBAC78C","homepage_is_newtabpage":"283E7AD9F0161FD67A6D690277566F3AF228A474523C9FCE856DF0BA790A618A","pinned_tabs":"B31048D54A05229EF9598B87444C356F07395715D2A7239C91F2266B69145707","prefs":{"preference_reset_time":"0A3F879D3B9E8D1FB802E803AF60067C6D8F0348A7083F9FFF640F4CEA9FF82E"},"profile":{"reset_prompt_memento":"C98AA5D688AF1A714AC0FF60DD163AE93BBB33B13F03517808F418D9F5D59C68"},"safebrowsing":{"incidents_sent":"3BFAE4004BD61D040D121FF10EB8989CC3FB44C8E38292D9031BABCFA333B80E"},"search_provider_overrides":"962C890A7AE4170864FED9249C2D517EB87B5E2F2991343D10DA28CBCB9AD9E3","session":{"restore_on_startup":"68DE57DD1041AD5DFB6990C2961A0EAA2F13726BEE84B549538D28B0BEAB6587","startup_urls":"ED9B246EF09C99FCB27275352EA3E180A2492DA682D1C002620F36E844BF11DB"},"software_reporter":{"prompt_reason":"3251690296B48FF741758DBC7E5917DA8CB19D724722B592291A34D6AEB9ADA2","prompt_seed":"375083336A2DE45245C800C5AB38415331100A495B0ED75FEBF1F1AE2BD51F54","prompt_version":"2D921AFDEA2D90C3C6D868AAB9B9D9DBD2E1850F0A3867A4FB74E2E531BE6FB2"},"sync":{"remaining_rollback_tries":"4A7EC609D0CB11E25C989EFD0EF0DBAC77DB877A860978793042C46C5DE0AC30"}},"super_mac":"D18BB64141C90347C51C60D986CC4849382D6ABCB8A0244739F4F43E80FA3E8E"},"session":{"startup_urls":["hxxp://search.gboxapp.com/?aff=p"]},"software_reporter":{"prompt_reason":0,"prompt_seed":"20150601
[C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Startup_URLs] Found : hxxp://search.gboxapp.com/?aff=p

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [33694 bytes] ##########

Malwarebytes Anti-Malware
www.malwarebytes.org


Error, 29.8.2015 11:56, SYSTEM, NB01, Update, Bad md5 or size: akadomains, 11,
Error, 29.8.2015 11:56, SYSTEM, NB01, Update, Bad md5 or size: akaips, 11,
Update, 29.8.2015 11:56, SYSTEM, NB01, Manual, Remediation Database, 2015.5.13.1, 2015.8.28.2,
Update, 29.8.2015 11:56, SYSTEM, NB01, Manual, Rootkit Database, 2015.6.2.1, 2015.8.16.1,
Update, 29.8.2015 11:56, SYSTEM, NB01, Manual, Domain Database, 0.0.0.0, 2015.7.24.2,
Update, 29.8.2015 11:56, SYSTEM, NB01, Manual, IP Database, 0.0.0.0, 2015.7.24.3,
Update, 29.8.2015 11:56, SYSTEM, NB01, Manual, AKA IP Database, 0.0.0.0, 2015.8.29.1,
Update, 29.8.2015 11:56, SYSTEM, NB01, Manual, AKA Domain Database, 0.0.0.0, 2015.8.29.1,
Update, 29.8.2015 11:56, SYSTEM, NB01, Manual, Malware Database, 2015.6.3.3, 2015.8.29.1,

(end)

Nevim zda je tohle ten log toho Malware? Dal jsem ulozit do schranky, ale kopirovat log jsem nasel az v historii pod ZAZNAMY APLIKACE jako Protection log a ten jsem si ulozil Omlouvam se, ze mi to tak trva, ale ty stranjy jsou silene agresivni. Napisu 5hlasek a hned me to prehodi jinam (tohle jsem musel napsat z jineho zarizeni)

Spusť znovu AdwCleaner (u Windows Vista či Windows7, klikni na AdwCleaner pravým a vyber „Spustit jako správce“
klikni na „Prohledat-Scan“, po prohledání klikni na „ Vymazat-Clean“

Program provede opravu, po automatickém restartu neukáže log (C:\AdwCleaner [S?].txt) , jeho obsah sem celý vlož.

Stáhni si Junkware Removal Tool by Thisisu

na svojí plochu.

Deaktivuj si svůj antivirový program. Pravým tl. myši klikni na JRT.exe a vyber „spustit jako správce“. Pro pokračování budeš vyzván ke stisknutí jakékoliv klávesy. Na nějakou klikni.
Začne skenování programu. Skenování může trvat dloho , podle množství nákaz. Po ukončení skenu se objeví log (JRT.txt) , který se uloží na ploše.
Zkopíruj sem prosím celý jeho obsah.

. spusť znovu MbAM a dej Skenovat nyní
- po proběhnutí programu se ti objeví hláška tak klikni na „Vše do karantény(smazat vybrané)“ a na „Exportovat záznam“ a vyber „textový soubor“ , soubor nějak pojmenuj a někam ho ulož. Zkopíruj se celý obsah toho logu.

Stáhni si RogueKiller by Adlice Software
32bit.:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
64bit.:
http://www.sur-la-toile.com/RogueKiller ... lerX64.exe
na svojí plochu.
- Zavři všechny ostatní programy a prohlížeče.
- Pro OS Vista a win7 spusť program RogueKiller.exe jako správce , u XP poklepáním.
- počkej až skončí Prescan -vyhledávání škodlivých procesů.
-Potom klikni na „Prohledat“.
- Program skenuje procesy PC. Po proskenování klikni na „Zpráva“ , v okně na pak na „Open TXT“ a celý obsah logu sem zkopíruj.
Pokud je program blokován , zkus ho spustit několikrát. Pokud dále program nepůjde spustit a pracovat, přejmenuj ho na winlogon.exe.

# AdwCleaner v5.004 - Logfile created 29/08/2015 at 18:05:48
# Updated 26/08/2015 by Xplode
# Database : 2015-08-25.1 [Server]
# Operating system : Windows 7 Home Premium Service Pack 1 (x64)
# Username : admin - NB01
# Running from : C:\Users\admin\Desktop\AdwCleaner.exe
# Option : Cleaning
# Support : http://toolslib.net/forum

***** [ Services ] *****

[-] Service Deleted : IePluginServices

***** [ Folders ] *****

[-] Folder Deleted : C:\Program Files (x86)\ASP
[-] Folder Deleted : C:\Program Files (x86)\SoftwareUpdater
[-] Folder Deleted : C:\Program Files (x86)\topdeal
[-] Folder Deleted : C:\Program Files (x86)\savinshop
[-] Folder Deleted : C:\Program Files (x86)\SaverAddon
[-] Folder Deleted : C:\Program Files (x86)\shopndrop
[-] Folder Deleted : C:\Program Files (x86)\savingtoyou
[-] Folder Deleted : C:\Program Files (x86)\Plus500
[-] Folder Deleted : C:\Program Files (x86)\WowCoupon
[-] Folder Deleted : C:\Program Files (x86)\DNS Unlocker
[-] Folder Deleted : C:\Program Files (x86)\AppeToU
[-] Folder Deleted : C:\Program Files (x86)\AppttooU
[-] Folder Deleted : C:\Program Files (x86)\AuppptoU
[-] Folder Deleted : C:\Program Files (x86)\DDeailsFinndEuruPro
[-] Folder Deleted : C:\Program Files (x86)\ddeal4mue
[-] Folder Deleted : C:\Program Files (x86)\DeaalsFeindderPrroo
[-] Folder Deleted : C:\Program Files (x86)\deaL4rreal
[-] Folder Deleted : C:\Program Files (x86)\DealsFianderrPro
[-] Folder Deleted : C:\Program Files (x86)\DealsFoiinnderPro
[-] Folder Deleted : C:\Program Files (x86)\dealsoter
[-] Folder Deleted : C:\Program Files (x86)\deial22dealit
[-] Folder Deleted : C:\Program Files (x86)\Laeass2paeye
[-] Folder Deleted : C:\Program Files (x86)\PoroShOappEr
[-] Folder Deleted : C:\Program Files (x86)\PricEaDDownlOader
[-] Folder Deleted : C:\Program Files (x86)\ProShaoppppeR
[-] Folder Deleted : C:\Program Files (x86)\ProShOOpuper
[-] Folder Deleted : C:\Program Files (x86)\SaaverPRo
[-] Folder Deleted : C:\Program Files (x86)\SalesMagnoeat
[-] Folder Deleted : C:\Program Files (x86)\SaverAddoin
[!] Folder Not Deleted : C:\Program Files (x86)\SaverADdon
[-] Folder Deleted : C:\Program Files (x86)\SaveRoAuddoon
[-] Folder Deleted : C:\Program Files (x86)\SaverPriOO
[-] Folder Deleted : C:\Program Files (x86)\SavErPro
[-] Folder Deleted : C:\Program Files (x86)\savinggtoyoui
[!] Folder Not Deleted : C:\Program Files (x86)\savingtoyOu
[!] Folder Not Deleted : C:\Program Files (x86)\saviNShop
[-] Folder Deleted : C:\Program Files (x86)\savionogtoiyou
[-] Folder Deleted : C:\Program Files (x86)\savoinShop
[-] Folder Deleted : C:\Program Files (x86)\seaaverrOon
[!] Folder Not Deleted : C:\Program Files (x86)\shoPndrop
[-] Folder Deleted : C:\Program Files (x86)\SmartCoaMparE
[-] Folder Deleted : C:\Program Files (x86)\SooftCoup
[-] Folder Deleted : C:\Program Files (x86)\ssaVerniett
[-] Folder Deleted : C:\Program Files (x86)\ssavinshooP
[-] Folder Deleted : C:\Program Files (x86)\sshopondarop
[-] Folder Deleted : C:\Program Files (x86)\ssurfukeaepit
[-] Folder Deleted : C:\Program Files (x86)\sureffkeEEpit
[-] Folder Deleted : C:\Program Files (x86)\surffkieeepait
[-] Folder Deleted : C:\Program Files (x86)\surfkeepiiT
[-] Folder Deleted : C:\Program Files (x86)\Topddeaal
[!] Folder Not Deleted : C:\Program Files (x86)\tOpdeal
[-] Folder Deleted : C:\Program Files (x86)\tpeerfectcoupoon
[-] Folder Deleted : C:\Program Files (x86)\tperoFuectcOuupionn
[!] Folder Not Deleted : C:\Program Files (x86)\WowCoUpoN
[-] Folder Deleted : C:\ProgramData\apn
[-] Folder Deleted : C:\ProgramData\Systweak
[-] Folder Deleted : C:\ProgramData\CheapCoupon
[-] Folder Deleted : C:\ProgramData\12754078729275056466
[-] Folder Deleted : C:\ProgramData\b0ff9707bfce2152
[-] Folder Deleted : C:\ProgramData\{7f7a2ad4-89fc-2488-7f7a-a2ad489fab52}
[-] Folder Deleted : C:\ProgramData\{b8753f90-cf08-dfba-b875-53f90cf0fe43}
[-] Folder Deleted : C:\ProgramData\lkgbnpoanpkbgbfefnfpkgbkmgnhgejj
[-] Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Plus500
[-] Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced System~Protector
[-] Folder Deleted : C:\Users\admin\AppData\Local\globalUpdate
[-] Folder Deleted : C:\Users\admin\AppData\Local\Plus500
[-] Folder Deleted : C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\odkgihncjgklajjabihpoipfnpcjhdno
[-] Folder Deleted : C:\Users\admin\AppData\Roaming\FirefoxToolbar
[-] Folder Deleted : C:\Users\admin\AppData\Roaming\omiga-plus
[-] Folder Deleted : C:\Users\admin\AppData\Roaming\Systweak
[-] Folder Deleted : C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Plus500
[-] Folder Deleted : C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\5tx4661s.default\Extensions\1ZA@qb8K.com
[-] Folder Deleted : C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\5tx4661s.default\Extensions\4KKc07B@G.net
[-] Folder Deleted : C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\5tx4661s.default\Extensions\DLYpede@o.net
[-] Folder Deleted : C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\5tx4661s.default\Extensions\LjG9i@gFpX.org
[-] Folder Deleted : C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\5tx4661s.default\Extensions\M@U.co.uk
[-] Folder Deleted : C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\5tx4661s.default\Extensions\pOH0@Ap1.com
[-] Folder Deleted : C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\5tx4661s.default\Extensions\Yu@bg.edu
[-] Folder Deleted : C:\Users\Public\Documents\ShopperPro

***** [ Files ] *****

[-] File Deleted : C:\END
[-] File Deleted : C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\default-search.xml
[-] File Deleted : C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\omiga-plus.xml
[-] File Deleted : C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_odkgihncjgklajjabihpoipfnpcjhdno_0.localstorage
[-] File Deleted : C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_odkgihncjgklajjabihpoipfnpcjhdno_0.localstorage-journal
[-] File Deleted : C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_isearch.omiga-plus.com_0.localstorage
[-] File Deleted : C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_isearch.omiga-plus.com_0.localstorage-journal
[-] File Deleted : C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_pstatic.bestpriceninja.com_0.localstorage
[-] File Deleted : C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_pstatic.bestpriceninja.com_0.localstorage-journal
[-] File Deleted : C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_pstatic.bestpriceninja.com_0.localstorage
[-] File Deleted : C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_pstatic.bestpriceninja.com_0.localstorage-journal
[-] File Deleted : C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_isearch.omiga-plus.com_0.localstorage
[-] File Deleted : C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_isearch.omiga-plus.com_0.localstorage-journal
[-] File Deleted : C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_st.chatango.com_0.localstorage
[-] File Deleted : C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_st.chatango.com_0.localstorage-journal
[-] File Deleted : C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\5tx4661s.default\searchplugins\ask-search.xml
[-] File Deleted : C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\5tx4661s.default\searchplugins\default-search.xml
[-] File Deleted : C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\5tx4661s.default\user.js
[-] File Deleted : C:\Users\Public\Desktop\Advanced System~Protector.lnk
[-] File Deleted : C:\windows\Sysnative\sasnative64.exe

***** [ Shortcuts ] *****


***** [ Scheduled tasks ] *****

[-] Task Deleted : LaunchSignup
[-] Task Deleted : YTDownloader
[-] Task Deleted : Advanced System~Protector
[-] Task Deleted : Advanced System~Protector_startup
[-] Task Deleted : Superclean

***** [ Registry ] *****

[-] Key Deleted : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\IePluginServices
[-] Key Deleted : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WindowsMangerProtect
[-] Value Deleted : HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [YTDownloader]
[-] Key Deleted : HKCU\Software\Mozilla\Extends
[-] Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [YTDownloader]
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\SysMenu.DLL
[-] Key Deleted : HKLM\SOFTWARE\Classes\P0150A322_E708_480A_89BF_EB2B0BC6E677_.P0150A322_E708_480A_89BF_EB2B0BC6E677_
[-] Key Deleted : HKLM\SOFTWARE\Classes\P0150A322_E708_480A_89BF_EB2B0BC6E677_.P0150A322_E708_480A_89BF_EB2B0BC6E677_.9
[-] Key Deleted : HKLM\SOFTWARE\Classes\P073B8186_E9A0_44BF_8CC4_36316C3EEAF9_.P073B8186_E9A0_44BF_8CC4_36316C3EEAF9_
[-] Key Deleted : HKLM\SOFTWARE\Classes\P073B8186_E9A0_44BF_8CC4_36316C3EEAF9_.P073B8186_E9A0_44BF_8CC4_36316C3EEAF9_.9
[-] Key Deleted : HKLM\SOFTWARE\Classes\P153D86D6_C382_4185_8AEC_104C98DC8209_.P153D86D6_C382_4185_8AEC_104C98DC8209_
[-] Key Deleted : HKLM\SOFTWARE\Classes\P153D86D6_C382_4185_8AEC_104C98DC8209_.P153D86D6_C382_4185_8AEC_104C98DC8209_.9
[-] Key Deleted : HKLM\SOFTWARE\Classes\P285139ED_892E_4C38_9925_5A60BAF3640B_.P285139ED_892E_4C38_9925_5A60BAF3640B_
[-] Key Deleted : HKLM\SOFTWARE\Classes\P285139ED_892E_4C38_9925_5A60BAF3640B_.P285139ED_892E_4C38_9925_5A60BAF3640B_.9
[-] Key Deleted : HKLM\SOFTWARE\Classes\P2C878E12_87B6_440E_8D9F_1BA1D819A84C_.P2C878E12_87B6_440E_8D9F_1BA1D819A84C_
[-] Key Deleted : HKLM\SOFTWARE\Classes\P2C878E12_87B6_440E_8D9F_1BA1D819A84C_.P2C878E12_87B6_440E_8D9F_1BA1D819A84C_.9
[-] Key Deleted : HKLM\SOFTWARE\Classes\P3334cc4a_3647_4c6a_9e07_d504967080b5_.P3334cc4a_3647_4c6a_9e07_d504967080b5_
[-] Key Deleted : HKLM\SOFTWARE\Classes\P3334cc4a_3647_4c6a_9e07_d504967080b5_.P3334cc4a_3647_4c6a_9e07_d504967080b5_.9
[-] Key Deleted : HKLM\SOFTWARE\Classes\P3AD21F2D_D35A_405E_B1AA_A1588F271FC8_.P3AD21F2D_D35A_405E_B1AA_A1588F271FC8_
[-] Key Deleted : HKLM\SOFTWARE\Classes\P3AD21F2D_D35A_405E_B1AA_A1588F271FC8_.P3AD21F2D_D35A_405E_B1AA_A1588F271FC8_.9
[-] Key Deleted : HKLM\SOFTWARE\Classes\P3D32FE90_6FB5_408C_9881_EBAF94914B97_.P3D32FE90_6FB5_408C_9881_EBAF94914B97_
[-] Key Deleted : HKLM\SOFTWARE\Classes\P3D32FE90_6FB5_408C_9881_EBAF94914B97_.P3D32FE90_6FB5_408C_9881_EBAF94914B97_.9
[-] Key Deleted : HKLM\SOFTWARE\Classes\P480E3573_B6CA_4D81_AEE3_633CFBB51DF8_.P480E3573_B6CA_4D81_AEE3_633CFBB51DF8_
[-] Key Deleted : HKLM\SOFTWARE\Classes\P480E3573_B6CA_4D81_AEE3_633CFBB51DF8_.P480E3573_B6CA_4D81_AEE3_633CFBB51DF8_.9
[-] Key Deleted : HKLM\SOFTWARE\Classes\P505212FC_4E90_45CE_AFA1_EB9AC9A1832B_.P505212FC_4E90_45CE_AFA1_EB9AC9A1832B_
[-] Key Deleted : HKLM\SOFTWARE\Classes\P505212FC_4E90_45CE_AFA1_EB9AC9A1832B_.P505212FC_4E90_45CE_AFA1_EB9AC9A1832B_.9
[-] Key Deleted : HKLM\SOFTWARE\Classes\P5734563E_699F_44C2_852B_01FE29BFC09A_.P5734563E_699F_44C2_852B_01FE29BFC09A_
[-] Key Deleted : HKLM\SOFTWARE\Classes\P5734563E_699F_44C2_852B_01FE29BFC09A_.P5734563E_699F_44C2_852B_01FE29BFC09A_.9
[-] Key Deleted : HKLM\SOFTWARE\Classes\P62C5CA18_BB5D_42D1_9E3C_7CD6B8885EA8_.P62C5CA18_BB5D_42D1_9E3C_7CD6B8885EA8_
[-] Key Deleted : HKLM\SOFTWARE\Classes\P62C5CA18_BB5D_42D1_9E3C_7CD6B8885EA8_.P62C5CA18_BB5D_42D1_9E3C_7CD6B8885EA8_.9
[-] Key Deleted : HKLM\SOFTWARE\Classes\P9AAD0AC1_CFA7_4203_B4B6_132A639E5E8A_.P9AAD0AC1_CFA7_4203_B4B6_132A639E5E8A_
[-] Key Deleted : HKLM\SOFTWARE\Classes\P9AAD0AC1_CFA7_4203_B4B6_132A639E5E8A_.P9AAD0AC1_CFA7_4203_B4B6_132A639E5E8A_.9
[-] Key Deleted : HKLM\SOFTWARE\Classes\P9b2322f0_3ce1_413f_89ea_2d8929ff5c60_.P9b2322f0_3ce1_413f_89ea_2d8929ff5c60_
[-] Key Deleted : HKLM\SOFTWARE\Classes\P9b2322f0_3ce1_413f_89ea_2d8929ff5c60_.P9b2322f0_3ce1_413f_89ea_2d8929ff5c60_.9
[-] Key Deleted : HKLM\SOFTWARE\Classes\P9C88DC42_2938_4196_AE0B_DE901096FA18_.P9C88DC42_2938_4196_AE0B_DE901096FA18_
[-] Key Deleted : HKLM\SOFTWARE\Classes\P9C88DC42_2938_4196_AE0B_DE901096FA18_.P9C88DC42_2938_4196_AE0B_DE901096FA18_.9
[-] Key Deleted : HKLM\SOFTWARE\Classes\PB98F8530_2D5A_4BD7_8EA4_8A769B8AE054_.PB98F8530_2D5A_4BD7_8EA4_8A769B8AE054_
[-] Key Deleted : HKLM\SOFTWARE\Classes\PB98F8530_2D5A_4BD7_8EA4_8A769B8AE054_.PB98F8530_2D5A_4BD7_8EA4_8A769B8AE054_.9
[-] Key Deleted : HKLM\SOFTWARE\Classes\PCE40AEA9_C382_46A7_A081_D69EBCAF001E_.PCE40AEA9_C382_46A7_A081_D69EBCAF001E_
[-] Key Deleted : HKLM\SOFTWARE\Classes\PCE40AEA9_C382_46A7_A081_D69EBCAF001E_.PCE40AEA9_C382_46A7_A081_D69EBCAF001E_.9
[-] Key Deleted : HKLM\SOFTWARE\Classes\Pd0bc5a2a_1226_4e86_905c_8f09610a13e5_.Pd0bc5a2a_1226_4e86_905c_8f09610a13e5_
[-] Key Deleted : HKLM\SOFTWARE\Classes\Pd0bc5a2a_1226_4e86_905c_8f09610a13e5_.Pd0bc5a2a_1226_4e86_905c_8f09610a13e5_.9
[-] Key Deleted : HKLM\SOFTWARE\Classes\PD94134E7_2BE9_4B44_9E17_FE801B1D83A2_.PD94134E7_2BE9_4B44_9E17_FE801B1D83A2_
[-] Key Deleted : HKLM\SOFTWARE\Classes\PD94134E7_2BE9_4B44_9E17_FE801B1D83A2_.PD94134E7_2BE9_4B44_9E17_FE801B1D83A2_.9
[-] Key Deleted : HKLM\SOFTWARE\Classes\PE63105D9_47CC_439B_BC55_85F14CB07088_.PE63105D9_47CC_439B_BC55_85F14CB07088_
[-] Key Deleted : HKLM\SOFTWARE\Classes\PE63105D9_47CC_439B_BC55_85F14CB07088_.PE63105D9_47CC_439B_BC55_85F14CB07088_.9
[-] Key Deleted : HKLM\SOFTWARE\Classes\PEF63B8FF_4C43_42D9_AA8A_F056634CDA2C_.PEF63B8FF_4C43_42D9_AA8A_F056634CDA2C_
[-] Key Deleted : HKLM\SOFTWARE\Classes\PEF63B8FF_4C43_42D9_AA8A_F056634CDA2C_.PEF63B8FF_4C43_42D9_AA8A_F056634CDA2C_.9
[-] Key Deleted : HKLM\SOFTWARE\037c04bd-be68-e8e6-f72a-a24051b2c025
[-] Key Deleted : HKLM\SOFTWARE\5da059a482fd494db3f252126fbc3d5b
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}{763bdca1}
[-] Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [faststartff@gmail.com]
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{D813D5BB-EBC7-45F9-B8A4-36A305168069}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{61AB12E1-A5FF-11D1-B2E9-444553540000}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{82351441-9094-11D1-A24B-00A0C932C7DF}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{0150A322-E708-480A-89BF-EB2B0BC6E677}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{073B8186-E9A0-44BF-8CC4-36316C3EEAF9}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{153D86D6-C382-4185-8AEC-104C98DC8209}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{285139ED-892E-4C38-9925-5A60BAF3640B}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{2C878E12-87B6-440E-8D9F-1BA1D819A84C}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3334cc4a-3647-4c6a-9e07-d504967080b5}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3AD21F2D-D35A-405E-B1AA-A1588F271FC8}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3D32FE90-6FB5-408C-9881-EBAF94914B97}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{480E3573-B6CA-4D81-AEE3-633CFBB51DF8}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{505212FC-4E90-45CE-AFA1-EB9AC9A1832B}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5734563E-699F-44C2-852B-01FE29BFC09A}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{62C5CA18-BB5D-42D1-9E3C-7CD6B8885EA8}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{9AAD0AC1-CFA7-4203-B4B6-132A639E5E8A}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{9b2322f0-3ce1-413f-89ea-2d8929ff5c60}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{9C88DC42-2938-4196-AE0B-DE901096FA18}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B98F8530-2D5A-4BD7-8EA4-8A769B8AE054}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CE40AEA9-C382-46A7-A081-D69EBCAF001E}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{d0bc5a2a-1226-4e86-905c-8f09610a13e5}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D94134E7-2BE9-4B44-9E17-FE801B1D83A2}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E63105D9-47CC-439B-BC55-85F14CB07088}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{EF63B8FF-4C43-42D9-AA8A-F056634CDA2C}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3F97FDF1-DA2B-4579-AD3E-E46641F9DBAB}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A220BAB5-C335-48BA-8A01-309FDA37446F}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{0416BDB0-AFB0-4464-952D-1EAB5047B8E6}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{A2D733A7-73B0-4C6B-B0C7-06A432950B66}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{82351433-9094-11D1-A24B-00A0C932C7DF}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{04A0F1FA-CF83-4ECD-9F68-D94D3F8A7622}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{1F831F60-05FB-474D-93A3-42DA68E7EB8F}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{318C7F13-3498-459E-BF35-12865E6D005C}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{330ED369-73D2-49BC-AC43-1E21602F742D}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{38BAB45F-0A8A-48B5-8C46-F2A8C7EEFAEE}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{41F978F3-431A-4464-A789-5C0692D562FB}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{4A917E10-567D-4720-A3EF-FF6C79904954}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{6137A08F-29B1-4E48-B6A1-70CC3ABF50F7}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{96BB8E60-6EF9-47E0-9ED8-4AD477ECF427}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{B83055E5-D13F-4DB9-A034-3B89A4CFE680}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{C7405EEB-2E16-40FE-9E27-1F48CAAB15E1}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{CC6F4F54-6EF8-4E84-BDC6-ABC6F83100BE}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{D553067B-6F4E-4F58-BF46-7ACDBBC50332}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{E0D6077D-7186-48B2-A6C6-2F7C533E8CFF}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{EB559340-3A8F-4456-B24D-160098054EF0}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{4D9101D6-5BA0-4048-BDDE-7E2DF54C8C47}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{54739D49-AC03-4C57-9264-C5195596B3A1}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{0150A322-E708-480A-89BF-EB2B0BC6E677}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{073B8186-E9A0-44BF-8CC4-36316C3EEAF9}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{153D86D6-C382-4185-8AEC-104C98DC8209}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{285139ED-892E-4C38-9925-5A60BAF3640B}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3334cc4a-3647-4c6a-9e07-d504967080b5}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3AD21F2D-D35A-405E-B1AA-A1588F271FC8}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{480E3573-B6CA-4D81-AEE3-633CFBB51DF8}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{505212FC-4E90-45CE-AFA1-EB9AC9A1832B}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5734563E-699F-44C2-852B-01FE29BFC09A}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{62C5CA18-BB5D-42D1-9E3C-7CD6B8885EA8}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{9AAD0AC1-CFA7-4203-B4B6-132A639E5E8A}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{9b2322f0-3ce1-413f-89ea-2d8929ff5c60}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{9C88DC42-2938-4196-AE0B-DE901096FA18}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{B98F8530-2D5A-4BD7-8EA4-8A769B8AE054}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{CE40AEA9-C382-46A7-A081-D69EBCAF001E}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{d0bc5a2a-1226-4e86-905c-8f09610a13e5}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D94134E7-2BE9-4B44-9E17-FE801B1D83A2}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{E63105D9-47CC-439B-BC55-85F14CB07088}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EF63B8FF-4C43-42D9-AA8A-F056634CDA2C}
[-] Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}]
[-] Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{0150A322-E708-480A-89BF-EB2B0BC6E677}]
[-] Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{073B8186-E9A0-44BF-8CC4-36316C3EEAF9}]
[-] Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{153D86D6-C382-4185-8AEC-104C98DC8209}]
[-] Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{285139ED-892E-4C38-9925-5A60BAF3640B}]
[-] Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{2C878E12-87B6-440E-8D9F-1BA1D819A84C}]
[-] Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{3334cc4a-3647-4c6a-9e07-d504967080b5}]
[-] Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{3AD21F2D-D35A-405E-B1AA-A1588F271FC8}]
[-] Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{3D32FE90-6FB5-408C-9881-EBAF94914B97}]
[-] Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{480E3573-B6CA-4D81-AEE3-633CFBB51DF8}]
[-] Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{505212FC-4E90-45CE-AFA1-EB9AC9A1832B}]
[-] Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{5734563E-699F-44C2-852B-01FE29BFC09A}]
[-] Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{62C5CA18-BB5D-42D1-9E3C-7CD6B8885EA8}]
[-] Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{9AAD0AC1-CFA7-4203-B4B6-132A639E5E8A}]
[-] Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{9b2322f0-3ce1-413f-89ea-2d8929ff5c60}]
[-] Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{9C88DC42-2938-4196-AE0B-DE901096FA18}]
[-] Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{B98F8530-2D5A-4BD7-8EA4-8A769B8AE054}]
[-] Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{CE40AEA9-C382-46A7-A081-D69EBCAF001E}]
[-] Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{d0bc5a2a-1226-4e86-905c-8f09610a13e5}]
[-] Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{D94134E7-2BE9-4B44-9E17-FE801B1D83A2}]
[-] Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{E63105D9-47CC-439B-BC55-85F14CB07088}]
[-] Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{EF63B8FF-4C43-42D9-AA8A-F056634CDA2C}]
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{020B1D4B-5738-4C77-9E19-4F173DD9B486}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{0150A322-E708-480A-89BF-EB2B0BC6E677}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{073B8186-E9A0-44BF-8CC4-36316C3EEAF9}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{153D86D6-C382-4185-8AEC-104C98DC8209}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{285139ED-892E-4C38-9925-5A60BAF3640B}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{3334cc4a-3647-4c6a-9e07-d504967080b5}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{3AD21F2D-D35A-405E-B1AA-A1588F271FC8}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{480E3573-B6CA-4D81-AEE3-633CFBB51DF8}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{505212FC-4E90-45CE-AFA1-EB9AC9A1832B}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{5734563E-699F-44C2-852B-01FE29BFC09A}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{62C5CA18-BB5D-42D1-9E3C-7CD6B8885EA8}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{9AAD0AC1-CFA7-4203-B4B6-132A639E5E8A}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{9b2322f0-3ce1-413f-89ea-2d8929ff5c60}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{9C88DC42-2938-4196-AE0B-DE901096FA18}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{B98F8530-2D5A-4BD7-8EA4-8A769B8AE054}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{CE40AEA9-C382-46A7-A081-D69EBCAF001E}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{d0bc5a2a-1226-4e86-905c-8f09610a13e5}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{D94134E7-2BE9-4B44-9E17-FE801B1D83A2}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{E63105D9-47CC-439B-BC55-85F14CB07088}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{EF63B8FF-4C43-42D9-AA8A-F056634CDA2C}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{3F97FDF1-DA2B-4579-AD3E-E46641F9DBAB}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{A220BAB5-C335-48BA-8A01-309FDA37446F}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{0416BDB0-AFB0-4464-952D-1EAB5047B8E6}
[-] Key Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827}
[-] Key Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2503}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2503}
[-] Key Deleted : HKU\.DEFAULT\Software\AskPartnerNetwork
[-] Key Deleted : HKU\.DEFAULT\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
[-] Key Deleted : HKU\.DEFAULT\Software\AppDataLow\Software\_CrossriderRegNamePlaceHolder_
[-] Key Deleted : HKCU\Software\Conduit
[-] Key Deleted : HKCU\Software\GlobalUpdate
[-] Key Deleted : HKCU\Software\Optimizer Pro
[-] Key Deleted : HKCU\Software\systweak
[-] Key Deleted : HKCU\Software\Super Optimizer
[-] Key Deleted : HKCU\Software\Linkey
[-] Key Deleted : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
[-] Key Deleted : HKCU\Software\AppDataLow\Software\Crossrider
[-] Key Deleted : HKLM\SOFTWARE\AppDataLow\SOFTWARE\Crossrider
[-] Key Deleted : HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}
[-] Key Deleted : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
[-] Key Deleted : HKLM\SOFTWARE\{6791A2F3-FC80-475C-A002-C014AF797E9C}
[-] Key Deleted : HKLM\SOFTWARE\Conduit
[-] Key Deleted : HKLM\SOFTWARE\GlobalUpdate
[-] Key Deleted : HKLM\SOFTWARE\omiga-plusSoftware
[-] Key Deleted : HKLM\SOFTWARE\SmdmF
[-] Key Deleted : HKLM\SOFTWARE\SoftwareUpdater
[-] Key Deleted : HKLM\SOFTWARE\systweak
[-] Key Deleted : HKLM\SOFTWARE\{12A61307-94CD-4F8E-94BC-918E511FAA81}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2D471A31-4FA7-95BA-1880-D441113ED736}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{614925F9-841A-53FE-A28F-DC30FA07239B}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{8B114619-78B7-1CFF-55EF-74266954F883}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{37476589-E48E-439E-A706-56189E2ED4C4}_is1
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{194FED75-9C74-BDB7-53F8-8CFFEF1AFEC9}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{D831E399-50FE-84AE-F5F7-0A63AC282464}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{5E03DFA7-51FC-7C12-CEE5-4D75FBB01E8F}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2FA77785-00C3-A920-6452-D4FE5C9C129F}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{594FD08C-0622-F9B8-CB02-7C1355D33CB8}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{E1527582-8509-4011-B922-29E3FB548882}_is1
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{23B82977-C816-92D2-66E7-BE67DD1E7786}
[!] Key Not Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2D471A31-4FA7-95BA-1880-D441113ED736}
[!] Key Not Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2FA77785-00C3-A920-6452-D4FE5C9C129F}
[!] Key Not Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{37476589-E48E-439E-A706-56189E2ED4C4}_is1
[!] Key Not Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{594FD08C-0622-F9B8-CB02-7C1355D33CB8}
[!] Key Not Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{5E03DFA7-51FC-7C12-CEE5-4D75FBB01E8F}
[!] Key Not Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{614925F9-841A-53FE-A28F-DC30FA07239B}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{82B558C7-2A69-D3D5-B65A-DCAB3B65AD02}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{94851E46-5E5B-DD67-2593-709E8D27DC4C}
[!] Key Not Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{D831E399-50FE-84AE-F5F7-0A63AC282464}
[!] Key Not Deleted : [x64] HKCU\Software\Conduit
[!] Key Not Deleted : [x64] HKCU\Software\GlobalUpdate
[!] Key Not Deleted : [x64] HKCU\Software\Optimizer Pro
[!] Key Not Deleted : [x64] HKCU\Software\systweak
[!] Key Not Deleted : [x64] HKCU\Software\Super Optimizer
[!] Key Not Deleted : [x64] HKCU\Software\Linkey
[-] Key Deleted : [x64] HKLM\SOFTWARE\ShopperPro
[-] Key Deleted : [x64] HKLM\SOFTWARE\YTDownloader
[!] Key Not Deleted : HKU\.DEFAULT\Software\AppDataLow\Software\_CrossriderRegNamePlaceHolder_
[!] Key Not Deleted : HKU\S-1-5-21-380200912-3961780877-2511125308-1001\Software\AppDataLow\Software\Crossrider
[!] Key Not Deleted : HKU\S-1-5-18\Software\AppDataLow\Software\_CrossriderRegNamePlaceHolder_
[-] Data Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
[-] Data Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
[-] Data Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
[-] Data Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
[!] Key Not Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827}
[!] Key Not Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2503}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2503}
[!] Key Not Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827}
[!] Key Not Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2503}
[!] Key Not Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
[-] Data Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes [DefaultScope]
[!] Key Not Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2503}
[!] Key Not Deleted : HKU\S-1-5-21-380200912-3961780877-2511125308-1001\Software\Microsoft\Internet Explorer\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827}
[!] Key Not Deleted : HKU\S-1-5-21-380200912-3961780877-2511125308-1001\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2503}
[-] Data Restored : HKLM\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command []

***** [ Web browsers ] *****

[-] [C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : eu.ask.com
[-] [C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : isearch.omiga-plus.com
[-] [C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : default-search.net
[-] [C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Homepage] Deleted : 9B8AF8C158BA9EFE841CCCAAF6317016A53545300AA39795DFF8EBE7ABBAC78C","homepage_is_newtabpage":"283E7AD9F0161FD67A6D690277566F3AF228A474523C9FCE856DF0BA790A618A","pinned_tabs":"B31048D54A05229EF9598B87444C356F07395715D2A7239C91F2266B69145707","prefs":{"preference_reset_time":"0A3F879D3B9E8D1FB802E803AF60067C6D8F0348A7083F9FFF640F4CEA9FF82E"},"profile":{"reset_prompt_memento":"C98AA5D688AF1A714AC0FF60DD163AE93BBB33B13F03517808F418D9F5D59C68"},"safebrowsing":{"incidents_sent":"3BFAE4004BD61D040D121FF10EB8989CC3FB44C8E38292D9031BABCFA333B80E"},"search_provider_overrides":"962C890A7AE4170864FED9249C2D517EB87B5E2F2991343D10DA28CBCB9AD9E3","session":{"restore_on_startup":"68DE57DD1041AD5DFB6990C2961A0EAA2F13726BEE84B549538D28B0BEAB6587","startup_urls":"ED9B246EF09C99FCB27275352EA3E180A2492DA682D1C002620F36E844BF11DB"},"software_reporter":{"prompt_reason":"3251690296B48FF741758DBC7E5917DA8CB19D724722B592291A34D6AEB9ADA2","prompt_seed":"375083336A2DE45245C800C5AB38415331100A495B0ED75FEBF1F1AE2BD51F54","prompt_version":"2D921AFDEA2D90C3C6D868AAB9B9D9DBD2E1850F0A3867A4FB74E2E531BE6FB2"},"sync":{"remaining_rollback_tries":"4A7EC609D0CB11E25C989EFD0EF0DBAC77DB877A860978793042C46C5DE0AC30"}},"super_mac":"D18BB64141C90347C51C60D986CC4849382D6ABCB8A0244739F4F43E80FA3E8E"},"session":{"startup_urls":["hxxp://search.gboxapp.com/?aff=p"]},"software_reporter":{"prompt_reason":0,"prompt_seed":"20150601
[-] [C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Startup_URLs] Deleted : hxxp://search.gboxapp.com/?aff=p

*************************

:: Winsock settings cleared

########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [35348 bytes] ##########

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 7.5.9 (08.27.2015:1)
OS: Windows 7 Home Premium x64
Ran by admin on so 29.08.2015 at 18:17:53,23
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Tasks

Successfully deleted: [Task] C:\windows\Tasks\Superclean.job



~~~ Registry Values

Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\\Search Page



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{15C4DF55-4B67-495A-A3D3-A497C4A49EE0}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Policies\Google
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{15C4DF55-4B67-495A-A3D3-A497C4A49EE0}



~~~ Files

Successfully deleted: [File] C:\Users\admin\AppData\Roaming\appdataFr2.bin
Successfully deleted: [File] C:\Users\admin\AppData\Roaming\appdataFr25.bin
Successfully deleted: [File] C:\Users\admin\AppData\Roaming\appdataFr3.bin
Successfully deleted: [File] C:\Users\admin\Appdata\Local\google\chrome\user data\default\local storage\chrome-extension_ogminpmldncgcmokldnmmapddoccmhfl_0.localstorage
Successfully deleted: [File] C:\Users\admin\Appdata\Local\google\chrome\user data\default\local storage\chrome-extension_ogminpmldncgcmokldnmmapddoccmhfl_0.localstorage-journal



~~~ Folders

Failed to delete: [Folder] C:\Users\admin\Appdata\Local\com
Successfully deleted: [Folder] C:\Users\admin\Appdata\Local\crashrpt
Successfully deleted: [Folder] C:\Users\admin\Documents\optimizer pro



~~~ FireFox

Emptied folder: C:\Users\admin\AppData\Roaming\mozilla\firefox\profiles\5tx4661s.default\minidumps [646 files]



~~~ Chrome


[C:\Users\admin\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - default search provider reset

[C:\Users\admin\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - Extensions Deleted:

[C:\Users\admin\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - default search provider reset

[C:\Users\admin\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - Extensions Deleted:
[
ogminpmldncgcmokldnmmapddoccmhfl
]





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on so 29.08.2015 at 18:22:10,96
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Malwarebytes Anti-Malware
www.malwarebytes.org


Error, 29.8.2015 11:56, SYSTEM, NB01, Update, Bad md5 or size: akadomains, 11,
Error, 29.8.2015 11:56, SYSTEM, NB01, Update, Bad md5 or size: akaips, 11,
Update, 29.8.2015 11:56, SYSTEM, NB01, Manual, Remediation Database, 2015.5.13.1, 2015.8.28.2,
Update, 29.8.2015 11:56, SYSTEM, NB01, Manual, Rootkit Database, 2015.6.2.1, 2015.8.16.1,
Update, 29.8.2015 11:56, SYSTEM, NB01, Manual, Domain Database, 0.0.0.0, 2015.7.24.2,
Update, 29.8.2015 11:56, SYSTEM, NB01, Manual, IP Database, 0.0.0.0, 2015.7.24.3,
Update, 29.8.2015 11:56, SYSTEM, NB01, Manual, AKA IP Database, 0.0.0.0, 2015.8.29.1,
Update, 29.8.2015 11:56, SYSTEM, NB01, Manual, AKA Domain Database, 0.0.0.0, 2015.8.29.1,
Update, 29.8.2015 11:56, SYSTEM, NB01, Manual, Malware Database, 2015.6.3.3, 2015.8.29.1,
Error, 29.8.2015 17:58, SYSTEM, NB01, Protection, IsLicensed, 13,
Protection, 29.8.2015 17:58, SYSTEM, NB01, Protection, Malware Protection, Stopping,
Protection, 29.8.2015 17:58, SYSTEM, NB01, Protection, Malware Protection, Stopped,
Error, 29.8.2015 18:07, SYSTEM, NB01, Protection, IsLicensed, 13,
Protection, 29.8.2015 18:07, SYSTEM, NB01, Protection, Malware Protection, Stopping,
Protection, 29.8.2015 18:07, SYSTEM, NB01, Protection, Malware Protection, Stopped,
Update, 29.8.2015 18:24, SYSTEM, NB01, Manual, Malware Database, 2015.8.29.1, 2015.8.29.3,
Scan, 29.8.2015 19:02, SYSTEM, NB01, Manual, Začátek: 29.8.2015 18:24, Doba trvání: 23 min 12 sekund, Sken hrozeb, Dokončeno, Detekce malwaru 4, Detekce jiných hrozeb 21,
Error, 29.8.2015 19:03, SYSTEM, NB01, Protection, IsLicensed, 13,
Protection, 29.8.2015 19:03, SYSTEM, NB01, Protection, Malware Protection, Stopping,
Protection, 29.8.2015 19:03, SYSTEM, NB01, Protection, Malware Protection, Stopped,

(end)

RogueKiller V10.10.2.0 (x64) [Aug 24 2015] by Adlice Software
mail : http://www.adlice.com/contact/
Feedback : http://forum.adlice.com
Webová stránka : http://www.adlice.com/softwares/roguekiller/
Blog : http://www.adlice.com

Operační systém : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Spuštěno : Normální režim
Uživatel : admin [Práva správce]
Started from : C:\Users\admin\Downloads\RogueKillerX64.exe
Mód : Prohledat -- Datum : 08/29/2015 19:24:28

¤¤¤ Procesy : 0 ¤¤¤

¤¤¤ Registry : 7 ¤¤¤
[PUM.HomePage] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main | Start Page : https://www.seznam.cz/?clid=22668 -> Nalezeno
[PUM.HomePage] (X64) HKEY_USERS\S-1-5-21-380200912-3961780877-2511125308-1001\Software\Microsoft\Internet Explorer\Main | Start Page : https://www.seznam.cz/?clid=22668 -> Nalezeno
[PUM.HomePage] (X86) HKEY_USERS\S-1-5-21-380200912-3961780877-2511125308-1001\Software\Microsoft\Internet Explorer\Main | Start Page : https://www.seznam.cz/?clid=22668 -> Nalezeno
[PUM.SearchPage] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main | Search Page : http://search.seznam.cz/?sourceid=quicksearch_22668&q={searchTerms} -> Nalezeno
[PUM.SearchPage] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main | Search Bar : https://www.seznam.cz/?clid=22668 -> Nalezeno
[PUM.SearchPage] (X64) HKEY_USERS\S-1-5-21-380200912-3961780877-2511125308-1001\Software\Microsoft\Internet Explorer\Main | Search Bar : https://www.seznam.cz/?clid=22668 -> Nalezeno
[PUM.SearchPage] (X86) HKEY_USERS\S-1-5-21-380200912-3961780877-2511125308-1001\Software\Microsoft\Internet Explorer\Main | Search Bar : https://www.seznam.cz/?clid=22668 -> Nalezeno

¤¤¤ Úlohy : 0 ¤¤¤

¤¤¤ Soubory : 0 ¤¤¤

¤¤¤ Soubor HOSTS : 1 ¤¤¤
[C:\Windows\System32\drivers\etc\hosts] 0.0.0.1 mssplus.mcafee.com

¤¤¤ Antirootkit : 0 (Driver: Nahrán) ¤¤¤

¤¤¤ Webové prohlížeče : 0 ¤¤¤

¤¤¤ Kontrola MBR : ¤¤¤
+++++ PhysicalDrive0: Hitachi HTS727550A9E364 +++++
--- User ---
[MBR] 254ba3fb6a7bfb037f55d2e6bda703b7
[BSP] 257bb7d8b56d9f38c30f9fc578ad2a2f : Windows Vista/7/8 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 300 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
1 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 616448 | Size: 453792 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
2 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 929982464 | Size: 20796 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
3 - [XXXXXX] FAT32-LBA (0xc) [VISIBLE] Offset (sectors): 972572672 | Size: 2043 MB
User = LL1 ... OK
User = LL2 ... OK

Po MbAM, než jsem spustil Rogue, už mě to nikam neodkázalo na žádnej škodlivej web. Píšu už normálně z noťasu. I na ostatních stránkách nic a bez agresivní reklamy. :))

Zavři všechny programy a prohlížeče. Deaktivuj antivir a firewall.
Prosím, odpoj všechny USB (kromě myši s klávesnice) nebo externí disky z počítače před spuštěním tohoto programu.
Spusť znovu RogueKiller ( Pro Windows Vista nebo Windows 7, klepni pravým a vyber "Spustit jako správce", ve Windows XP poklepej ke spuštění).
- Počkej, až Prescan dokončí práci...
- Pak klikni na "Prohledat " ,po jeho skončení:

- V záložkách (Registry , Tasks , Web Browser apod.) vše zatrhni (dej zatržítka)
(musíš dát myší zatržítko do toho čtverečku vlevo od registru ap.)

- Klikni na "Smazat"
- Počkej, dokud Status box nezobrazí " Mazání dokončeno "
- Klikni na "Zpráva " a zkopíruj a vlož obsah té zprávy prosím sem. Log je možno nalézt v RKreport [číslo]. txt na ploše.
- Zavři RogueKiller

Vypni antivir i firewall.
Stáhni
Zoek.exe

a uloz si ho na plochu.
Zavři všechny ostatní programy , okna i prohlížeče.
Spusť Zoek.exe ( u win vista , win7, 8 klikni na něj pravým a vyber : „Spustit jako správce“
- pozor , náběh programu může trvat déle.

Do okna programu vlož skript níže:


klikni na Run Script
Program provede sken , opravu, sken i oprava může trvat i více minut ,je třeba posečkat do konce. Do okna neklikej!
Program nabídne restart , potvrď .

Po restartu se může nějaký čas ukázat pouze černá plocha , to je normální. Je třeba počkat až se vytvoří log. Ten si můžeš uložit třeba do dokumentů , jinak se sám ukládá do:
C:\zoek-results.log
Zkopíruj sem celý obsah toho logu.

Vlož nový log z HJT + informuj o problémech.