PC-HELP.CZ

České diskuzní fórum o počítačích
https://pc-help.cnews.cz/

kontrola logu

https://pc-help.cnews.cz/viewtopic.php?f=70&t=165073

Stránka 1 z 2

kontrola logu

Napsal: 19 lis 2015 23:50
od elvis5
Zdravím,
poslední dobou mi nějak blbne notebook prosil bych o kontrolu logu. Děkuji ;)


Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 23:49:38, on 19.11.2015
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.10586.0000)


Boot mode: Normal

Running processes:
C:\Program Files\WindowsApps\Microsoft.Messaging_1.11.13005.0_x86__8wekyb3d8bbwe\SkypeHost.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Users\Marek\AppData\Roaming\uTorrent\uTorrent.exe
C:\Users\Marek\AppData\Roaming\uTorrent\updates\3.4.5_41202\utorrentie.exe
C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
C:\Users\Marek\AppData\Roaming\uTorrent\updates\3.4.5_41202\utorrentie.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Users\Marek\Downloads\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.buenosearch.com/?babsrc=HP_s ... 6&tsp=5231
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 127.0.0.1:8118
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.141\McAfeeMSS_IE.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~3\Office14\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_51\bin\ssv.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~3\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_51\bin\jp2ssv.dll
O2 - BHO: TOSHIBA Media Controller Plug-in - {F3C88694-EFFA-4d78-B409-54B7B2535B14} - C:\Program Files (x86)\TOSHIBA\TOSHIBA Media Controller Plug-in\TOSHIBAMediaControllerIE.dll
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [USB3MON] "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
O4 - HKLM\..\Run: [ToshibaServiceStation] "C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe" /hide:60
O4 - HKLM\..\Run: [TSleepSrv] %ProgramFiles(x86)%\TOSHIBA\TOSHIBA Sleep Utility\TSleepSrv.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [hgntkdlkml] wscript.exe //B "C:\Users\Marek\AppData\Roaming\hgntkdlkml.vbe"
O4 - HKCU\..\Run: [SystemProc] C:\Users\Public\Other\run_shc.lnk
O4 - HKCU\..\Run: [OneDrive] "C:\Users\Marek\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [Autodesk Sync] C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe
O4 - HKCU\..\Run: [uTorrent] "C:\Users\Marek\AppData\Roaming\uTorrent\uTorrent.exe"
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O4 - .DEFAULT User Startup: TRDCReminder.lnk = C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (User 'Default user')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\Program Files (x86)\Microsoft Office\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll/105
O8 - Extra context menu item: WikiKomentáře Google... - res://C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_43C348BC2E93EB2B.dll/cmsidewiki.html
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\WINDOWS\system32\atiesrxx.exe (file missing)
O23 - Service: Autodesk Content Service - Autodesk, Inc. - C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Flexera Software, Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: FlexNet Licensing Service 64 - Flexera Software LLC - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Sentinel LDK License Manager (hasplms) - Unknown owner - C:\WINDOWS\system32\hasplms.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: lmadmin - Flexera Software, Inc. - C:\Program Files (x86)\Common Files\Scia\LicenceServer\FlexnetServer\lmadmin.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @mqutil.dll,-6102 (MSMQ) - Unknown owner - C:\WINDOWS\system32\mqsvc.exe (file missing)
O23 - Service: Nero Update (NAUpdate) - Nero AG - C:\Program Files (x86)\Nero\Update\NASvc.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Privoxy (PrivoxyService) (PrivoxyService) - The Privoxy team - http://www.privoxy.org - C:\Program Files (x86)\SmartComp Safe Network\privoxy.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: SolidWorks Licensing Service - SolidWorks - C:\Program Files (x86)\Common Files\SolidWorks Shared\Service\SolidWorksLicensing.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: SynTPEnh Caller Service (SynTPEnhService) - Synaptics Incorporated - C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
O23 - Service: TEMPRO Service (TemproMonitoringService) - Toshiba Europe GmbH - C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\WINDOWS\system32\TieringEngineService.exe (file missing)
O23 - Service: TMachInfo - TOSHIBA Corporation - C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe
O23 - Service: TOSHIBA Optical Disc Drive Service (TODDSrv) - Unknown owner - C:\windows\system32\TODDSrv.exe (file missing)
O23 - Service: TOSHIBA Power Saver (TosCoSrv) - TOSHIBA Corporation - C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe
O23 - Service: TOSHIBA eco Utility Service - TOSHIBA Corporation - C:\Program Files\TOSHIBA\TECO\TecoService.exe
O23 - Service: TOSHIBA HDD SSD Alert Service - TOSHIBA Corporation - C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe
O23 - Service: TPCH Service (TPCHSrv) - TOSHIBA Corporation - C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: Wisaroc - Remak - C:\windows\Wisaroc.exe
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 14693 bytes

Re: kontrola logu

Napsal: 20 lis 2015 09:35
od jaro3
Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected. Poté klikni na Main (hlavní stránku ) a klikni na Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranění historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit dočasné soubory Windows, vysypat koš atd.

- Pokud používáš jen Google Chrome , tak ATF nemusíš použít.


Stáhni si TFC
http://www.geekstogo.com/forum/files/fi ... -oldtimer/
Otevři soubor a zavři všechny ostatní okna, Klikni na Start k zahájení procesu. Program by neměl trvat dlouho.
Poté by se měl PC restartovat, pokud ne , proveď sám.

Stáhni AdwCleaner (by Xplode)
http://www.bleepingcomputer.com/download/adwcleaner/

Ulož si ho na svojí plochu
Ukonči všechny programy , okna a prohlížeče
Spusť program poklepáním a klikni na „Prohledat-Scan“
Po skenu klikni na „Logfile“ ,objeví log ( jinak je uložen systémovem disku jako AdwCleaner[C?].txt), jeho obsah sem celý vlož.

Stáhni si Malwarebytes' Anti-Malware
- Při instalaci odeber zatržítko u „Povolit bezplatnou zkušební verzi Malwarebytes' Anti-Malware Premium“
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Aktualizace Malwarebytes' Anti-Malware a Spustit aplikaci Malwarebytes' Anti-Malware, pokud jo tak klikni na tlačítko konec
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a klikni na Skenovat nyní a
- po proběhnutí programu se ti objeví hláška vpravo dole tak klikni na b] Kopírovat do schránky [/b]a a vlož sem celý log.

- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).

Pokud budou problémy , spusť v nouz. režimu.

Re: kontrola logu

Napsal: 21 lis 2015 10:59
od elvis5
# AdwCleaner v5.021 - Logfile created 21/11/2015 at 10:56:41
# Updated 14/11/2015 by Xplode
# Database : 2015-11-19.4 [Server]
# Operating system : Windows 10 Home (x64)
# Username : Marek - PIKACZU
# Running from : C:\Users\Marek\Desktop\adwcleaner_5.021.exe
# Option : Scan
# Support : http://toolslib.net/forum

***** [ Services ] *****

Service Found : PrivoxyService

***** [ Folders ] *****

Folder Found : C:\Program Files (x86)\Conduit
Folder Found : C:\Program Files (x86)\SmartComp Safe Network
Folder Found : C:\ProgramData\Partner
Folder Found : C:\Users\Marek\AppData\Local\Conduit
Folder Found : C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\Extensions\bopakagnckmlgajfccecajhnimjiiedh
Folder Found : C:\Users\Marek\AppData\LocalLow\Conduit
Folder Found : C:\Users\Marek\AppData\Roaming\Updater
Folder Found : C:\Users\Marek\AppData\Roaming\RHEng

***** [ Files ] *****

File Found : C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_lmnbobhffedhdhfpcjkjphcfpeeiocdn_0.localstorage
File Found : C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_lmnbobhffedhdhfpcjkjphcfpeeiocdn_0.localstorage-journal
File Found : C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_lmnbobhffedhdhfpcjkjphcfpeeiocdn_0
File Found : C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lmnbobhffedhdhfpcjkjphcfpeeiocdn
File Found : C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\local storage\hxxp_www.superfish.com_0.localstorage-journal
File Found : C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\local storage\hxxps_www.superfish.com_0.localstorage-journal
File Found : C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_cdncache-a.akamaihd.net_0.localstorage
File Found : C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_cdncache-a.akamaihd.net_0.localstorage-journal
File Found : C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_allin1convert.dl.tb.ask.com_0.localstorage-journal
File Found : C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_plarium.com_0.localstorage
File Found : C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_plarium.com_0.localstorage-journal
File Found : C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_videodownloadconverter.dl.tb.ask.com_0.localstorage-journal
File Found : C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_wlogin.icq.com_0.localstorage-journal
File Found : C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.buenosearch.com_0.localstorage-journal
File Found : C:\Users\Marek\AppData\Roaming\mlwps.exe
File Found : C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\searchplugins\buenosearch.xml
File Found : C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\user.js

***** [ DLL ] *****


***** [ Shortcuts ] *****


***** [ Scheduled tasks ] *****

Task Found : Malware Cleaner
Task Found : Security Update
Task Found : SmartComp Safe Network Viewer
Task Found : Win Installer
Task Found : 00e1002c-7029-4aa8-96af-5a4f99b861b7-1
Task Found : 00e1002c-7029-4aa8-96af-5a4f99b861b7-2
Task Found : 00e1002c-7029-4aa8-96af-5a4f99b861b7-5
Task Found : 3acf9a70-1a99-4e96-962c-fb7ed7f05265-1
Task Found : 3acf9a70-1a99-4e96-962c-fb7ed7f05265-2
Task Found : 3acf9a70-1a99-4e96-962c-fb7ed7f05265-3
Task Found : 3acf9a70-1a99-4e96-962c-fb7ed7f05265-4
Task Found : 3acf9a70-1a99-4e96-962c-fb7ed7f05265-5
Task Found : 00e1002c-7029-4aa8-96af-5a4f99b861b7-1
Task Found : 00e1002c-7029-4aa8-96af-5a4f99b861b7-2
Task Found : 00e1002c-7029-4aa8-96af-5a4f99b861b7-5
Task Found : 3acf9a70-1a99-4e96-962c-fb7ed7f05265-1
Task Found : 3acf9a70-1a99-4e96-962c-fb7ed7f05265-2
Task Found : 3acf9a70-1a99-4e96-962c-fb7ed7f05265-3
Task Found : 3acf9a70-1a99-4e96-962c-fb7ed7f05265-4
Task Found : 3acf9a70-1a99-4e96-962c-fb7ed7f05265-5

***** [ Registry ] *****

Key Found : HKCU\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}
Key Found : HKLM\SOFTWARE\Classes\Toolbar.CT1750559
Key Found : HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}
Key Found : HKLM\SOFTWARE\Classes\AppID\{C007DADD-132A-624C-088E-59EE6CF0711F}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
Key Found : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6d362af4-65ae-4b47-b4ed-4740d465b3a1}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7cbfc949-2735-4fa4-b7c6-cac03629f76f}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Key Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6d362af4-65ae-4b47-b4ed-4740d465b3a1}
Key Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7cbfc949-2735-4fa4-b7c6-cac03629f76f}
Key Found : HKCU\Software\Conduit
Key Found : HKCU\Software\ilivid
Key Found : HKCU\Software\torch
Key Found : HKCU\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}
Key Found : HKCU\Software\AppDataLow\Software\Conduit
Key Found : HKCU\Software\AppDataLow\Software\ConduitSearchScopes
Key Found : HKLM\SOFTWARE\{77D46E27-0E41-4478-87A6-AABE6FBCF252}
Key Found : HKLM\SOFTWARE\SecureWebChannel
Key Found : [x64] HKLM\SOFTWARE\InstalledBrowserExtensions
Key Found : HKU\.DEFAULT\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}
Data Found : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page] - hxxp://www.buenosearch.com/?babsrc=HP_s ... 6&tsp=5231
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{8E1EF5AE-B507-4BAF-9A39-4F56DA90D22C}

***** [ Web browsers ] *****

[C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] Found : hustenovice.cz
[C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] Found : strongdc.en.softonic.com
[C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Found : acfoobbgoakpihljnfedbcfaipcdlfhk
[C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Found : bopakagnckmlgajfccecajhnimjiiedh

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [6924 bytes] ##########

Re: kontrola logu

Napsal: 21 lis 2015 11:14
od jaro3
Spusť znovu AdwCleaner (u Windows Vista či Windows7, klikni na AdwCleaner pravým a vyber „Spustit jako správce“
klikni na „Prohledat-Scan“, po prohledání klikni na „ Cleaning (Vymazat)“

Program provede opravu, po automatickém restartu neukáže log (C:\AdwCleaner [C?].txt) , jeho obsah sem celý vlož.

Stáhni si Junkware Removal Tool by Thisisu
http://www.bleepingcomputer.com/downloa ... oval-tool/
na svojí plochu.

Deaktivuj si svůj antivirový program. Pravým tl. myši klikni na JRT.exe a vyber „spustit jako správce“. Pro pokračování budeš vyzván ke stisknutí jakékoliv klávesy. Na nějakou klikni.
Začne skenování programu. Skenování může trvat dloho , podle množství nákaz. Po ukončení skenu se objeví log (JRT.txt) , který se uloží na ploše.
Zkopíruj sem prosím celý jeho obsah.

+
Malwarebytes' Anti-Malware

Re: kontrola logu

Napsal: 21 lis 2015 13:01
od elvis5
# AdwCleaner v5.021 - Logfile created 21/11/2015 at 11:56:07
# Updated 14/11/2015 by Xplode
# Database : 2015-11-19.4 [Server]
# Operating system : Windows 10 Home (x64)
# Username : Marek - PIKACZU
# Running from : C:\Users\Marek\Desktop\adwcleaner_5.021.exe
# Option : Cleaning
# Support : http://toolslib.net/forum

***** [ Services ] *****

[-] Service Deleted : PrivoxyService

***** [ Folders ] *****

[-] Folder Deleted : C:\Program Files (x86)\Conduit
[-] Folder Deleted : C:\Program Files (x86)\SmartComp Safe Network
[-] Folder Deleted : C:\ProgramData\Partner
[-] Folder Deleted : C:\Users\Marek\AppData\Local\Conduit
[-] Folder Deleted : C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\Extensions\bopakagnckmlgajfccecajhnimjiiedh
[-] Folder Deleted : C:\Users\Marek\AppData\LocalLow\Conduit
[-] Folder Deleted : C:\Users\Marek\AppData\Roaming\Updater
[-] Folder Deleted : C:\Users\Marek\AppData\Roaming\RHEng

***** [ Files ] *****

[-] File Deleted : C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_lmnbobhffedhdhfpcjkjphcfpeeiocdn_0.localstorage
[-] File Deleted : C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_lmnbobhffedhdhfpcjkjphcfpeeiocdn_0.localstorage-journal
[-] File Deleted : C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_lmnbobhffedhdhfpcjkjphcfpeeiocdn_0
[-] File Deleted : C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lmnbobhffedhdhfpcjkjphcfpeeiocdn
[-] File Deleted : C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\local storage\hxxp_www.superfish.com_0.localstorage-journal
[-] File Deleted : C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\local storage\hxxps_www.superfish.com_0.localstorage-journal
[-] File Deleted : C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_cdncache-a.akamaihd.net_0.localstorage
[-] File Deleted : C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_cdncache-a.akamaihd.net_0.localstorage-journal
[-] File Deleted : C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_allin1convert.dl.tb.ask.com_0.localstorage-journal
[-] File Deleted : C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_plarium.com_0.localstorage
[-] File Deleted : C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_plarium.com_0.localstorage-journal
[-] File Deleted : C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_videodownloadconverter.dl.tb.ask.com_0.localstorage-journal
[-] File Deleted : C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_wlogin.icq.com_0.localstorage-journal
[-] File Deleted : C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.buenosearch.com_0.localstorage-journal
[-] File Deleted : C:\Users\Marek\AppData\Roaming\mlwps.exe
[-] File Deleted : C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\searchplugins\buenosearch.xml
[-] File Deleted : C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\user.js

***** [ DLLs ] *****


***** [ Shortcuts ] *****


***** [ Scheduled tasks ] *****

[-] Task Deleted : Malware Cleaner
[-] Task Deleted : Security Update
[-] Task Deleted : SmartComp Safe Network Viewer
[-] Task Deleted : Win Installer
[-] Task Deleted : 00e1002c-7029-4aa8-96af-5a4f99b861b7-1
[-] Task Deleted : 00e1002c-7029-4aa8-96af-5a4f99b861b7-2
[-] Task Deleted : 00e1002c-7029-4aa8-96af-5a4f99b861b7-5
[-] Task Deleted : 3acf9a70-1a99-4e96-962c-fb7ed7f05265-1
[-] Task Deleted : 3acf9a70-1a99-4e96-962c-fb7ed7f05265-2
[-] Task Deleted : 3acf9a70-1a99-4e96-962c-fb7ed7f05265-3
[-] Task Deleted : 3acf9a70-1a99-4e96-962c-fb7ed7f05265-4
[-] Task Deleted : 3acf9a70-1a99-4e96-962c-fb7ed7f05265-5
[-] Task Deleted : 00e1002c-7029-4aa8-96af-5a4f99b861b7-1
[-] Task Deleted : 00e1002c-7029-4aa8-96af-5a4f99b861b7-2
[-] Task Deleted : 00e1002c-7029-4aa8-96af-5a4f99b861b7-5
[-] Task Deleted : 3acf9a70-1a99-4e96-962c-fb7ed7f05265-1
[-] Task Deleted : 3acf9a70-1a99-4e96-962c-fb7ed7f05265-2
[-] Task Deleted : 3acf9a70-1a99-4e96-962c-fb7ed7f05265-3
[-] Task Deleted : 3acf9a70-1a99-4e96-962c-fb7ed7f05265-4
[-] Task Deleted : 3acf9a70-1a99-4e96-962c-fb7ed7f05265-5

***** [ Registry ] *****

[-] Key Deleted : HKCU\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT1750559
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{C007DADD-132A-624C-088E-59EE6CF0711F}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6d362af4-65ae-4b47-b4ed-4740d465b3a1}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7cbfc949-2735-4fa4-b7c6-cac03629f76f}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6d362af4-65ae-4b47-b4ed-4740d465b3a1}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7cbfc949-2735-4fa4-b7c6-cac03629f76f}
[-] Key Deleted : HKCU\Software\Conduit
[-] Key Deleted : HKCU\Software\ilivid
[-] Key Deleted : HKCU\Software\torch
[!] Key Not Deleted : HKCU\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}
[-] Key Deleted : HKCU\Software\AppDataLow\Software\Conduit
[-] Key Deleted : HKCU\Software\AppDataLow\Software\ConduitSearchScopes
[-] Key Deleted : HKLM\SOFTWARE\{77D46E27-0E41-4478-87A6-AABE6FBCF252}
[-] Key Deleted : HKLM\SOFTWARE\SecureWebChannel
[-] Key Deleted : [x64] HKLM\SOFTWARE\InstalledBrowserExtensions
[-] Key Deleted : HKU\.DEFAULT\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}
[-] Data Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]
[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{8E1EF5AE-B507-4BAF-9A39-4F56DA90D22C}

***** [ Web browsers ] *****

[-] [C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : hustenovice.cz
[-] [C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : strongdc.en.softonic.com
[-] [C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Deleted : acfoobbgoakpihljnfedbcfaipcdlfhk
[-] [C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Deleted : bopakagnckmlgajfccecajhnimjiiedh

*************************

:: "Tracing" keys removed
:: Winsock settings cleared

########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [7375 bytes] ##########

Re: kontrola logu

Napsal: 21 lis 2015 13:02
od elvis5
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.0.0 (11.12.2015)
Operating System: Windows 10 Home x64
Ran by Marek (Administrator) on so 21.11.2015 at 12:50:09,80
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




File System: 7

Successfully deleted: C:\Users\Marek\AppData\Local\{38A7EDB6-993D-46C5-BFDF-38106E925CF1} (Empty Folder)
Successfully deleted: C:\Users\Marek\AppData\Local\{D0BBFFA9-E769-45DF-BE7D-FA72524D6B13} (Empty Folder)
Successfully deleted: C:\Users\Marek\AppData\Local\{F41F36C0-6BD4-4304-A3D8-43C9DDEA9864} (Empty Folder)
Successfully deleted: C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_static.audienceinsights.net_0.localstorage-journal (File)
Successfully deleted: C:\Users\Marek\AppData\Roaming\getprivate vpn (Folder)
Successfully deleted: C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com (Folder)
Successfully deleted: C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com (Folder)



Registry: 2

Successfully deleted: HKLM\Software\Google\Chrome\Extensions\acfoobbgoakpihljnfedbcfaipcdlfhk (Registry Key)
Successfully deleted: HKLM\Software\Google\Chrome\Extensions\bopakagnckmlgajfccecajhnimjiiedh (Registry Key)




~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on so 21.11.2015 at 12:52:17,98
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Re: kontrola logu

Napsal: 21 lis 2015 13:09
od elvis5
malware 1 část:


Malwarebytes Anti-Malware
www.malwarebytes.org

Datum skenování: 21.11.2015
Čas skenování: 11:06
Protokol: aojfsh.txt
Správce: Ano

Verze: 2.2.0.1024
Databáze malwaru: v2015.11.21.02
Databáze rootkitů: v2015.11.14.01
Licence: Bezplatná verze
Ochrana proti malwaru: Vypnuto
Ochrana proti škodlivým webovým stránkám: Vypnuto
Ochrana programu: Vypnuto

OS: Windows 10
CPU: x64
Souborový systém: NTFS
Uživatel: Marek

Typ skenu: Sken hrozeb
Výsledek: Dokončeno
Prohledaných objektů: 463562
Uplynulý čas: 35 min, 33 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Vypnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto

Procesy: 1
PUP.Optional.PrxySvrRST, C:\Program Files (x86)\SmartComp Safe Network\privoxy.exe, 2420, , [c7dfbac65a31979f688f1a4453af3ec2]

Moduly: 1
PUP.Optional.PrxySvrRST, C:\Program Files (x86)\SmartComp Safe Network\mgwz.dll, , [c7dfbac65a31979f688f1a4453af3ec2],

Klíče registru: 54
PUP.Optional.Babylon, HKU\S-1-5-21-2790705977-2588249919-3448850516-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}, , [b7ef9fe1cac13105535b75c35ea4d030],
PUP.Optional.ConduitTB.Gen, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{3c471948-f874-49f5-b338-4f214a2ee0b1}, , [188e99e7eba070c62214b9b763a011ef],
PUP.Optional.ConduitTB.Gen, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}, , [188e99e7eba070c62214b9b763a011ef],
PUP.Optional.ConduitTB.Gen, HKLM\SOFTWARE\CLASSES\Toolbar.CT1750559, , [c7dfaad6404b61d5154e19456c974fb1],
PUP.Optional.CrossRider, HKLM\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\3874, , [5d49f38da5e6bb7b4e5f2a4a7d86ba46],
PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{006A4FEA-BEB5-4088-8A7C-C9EDAFDEE1B2}, , [d8ceb0d08b00a78ffeb1f87cf013a45c],
PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{048BEE96-9110-48F9-AABF-749391CF0F16}, , [6a3c037d206b6fc7406f8ce81be803fd],
PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2FF9696A-D071-4724-8DF3-70023AC634B7}, , [8521b7c9c6c53afcdad6344044bffa06],
PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{35C8E407-9D9E-4993-8D6D-D9622EDC1CC1}, , [871f4e32ee9dac8ac1efaec6669dd52b],
PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6D362AF4-65AE-4B47-B4ED-4740D465B3A1}, , [862039478308ea4cfeb3a2d2e91af50b],
PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7CBFC949-2735-4FA4-B7C6-CAC03629F76F}, , [673f4040513a003609a8c1b3b44f8d73],
PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\00e1002c-7029-4aa8-96af-5a4f99b861b7-1, , [c2e42957d5b6270fcbe7571d15ee8c74],
PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\00e1002c-7029-4aa8-96af-5a4f99b861b7-2, , [d7cfdca4117ab581139f7004b64d7d83],
PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\00e1002c-7029-4aa8-96af-5a4f99b861b7-5, , [c1e5cdb3e5a6171f5d5594e0cd36768a],
PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\3acf9a70-1a99-4e96-962c-fb7ed7f05265-1, , [584e88f819720f278d25373dd13251af],
PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\3acf9a70-1a99-4e96-962c-fb7ed7f05265-2, , [bee8522ef09b979fd9d9581c7c8735cb],
PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\3acf9a70-1a99-4e96-962c-fb7ed7f05265-3, , [56501769c0cba49202b02d47e221cc34],
PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\3acf9a70-1a99-4e96-962c-fb7ed7f05265-4, , [3e6891ef27643600e7cba8cc2ed59967],
PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\3acf9a70-1a99-4e96-962c-fb7ed7f05265-5, , [c3e3225e12790135efc380f471927e82],
PUP.Optional.MalwareCleaner, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\Malware Cleaner, , [bde9433d90fb89ad2f535737ba48ad53],
PUP.Optional.PrxySvrRST, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\SmartComp Safe Network Viewer, , [6442dea2305bea4cfaed622f659dd62a],
PUP.Optional.GoPhoto, HKLM\SOFTWARE\WOW6432NODE\GoPhoto.it V9.0, , [5c4a681894f7de58466291ec986bec14],
PUP.Optional.TornTV, HKLM\SOFTWARE\WOW6432NODE\Torntv V9.0, , [297d2a56c1cac86e6bf0950bf80b738d],
PUP.Optional.ConduitTB.Gen, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Toolbar.CT1750559, , [3f67720e5437280ed390b4aa14ef05fb],
PUP.Optional.BuenoSearch, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\acfoobbgoakpihljnfedbcfaipcdlfhk, , [7b2b2d532e5d7db95430ec8060a3ac54],
PUP.Optional.CrossRider, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{006A4FEA-BEB5-4088-8A7C-C9EDAFDEE1B2}, , [7135206037544fe70ba4e094e3208b75],
PUP.Optional.CrossRider, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{048BEE96-9110-48F9-AABF-749391CF0F16}, , [6f374937eaa152e42887c5af38cba35d],
PUP.Optional.CrossRider, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2FF9696A-D071-4724-8DF3-70023AC634B7}, , [11959de3a1ea87af773981f3d92a1ce4],
PUP.Optional.CrossRider, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{35C8E407-9D9E-4993-8D6D-D9622EDC1CC1}, , [f3b37f014a410d29f0c0beb624dfee12],
PUP.Optional.CrossRider, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6D362AF4-65AE-4B47-B4ED-4740D465B3A1}, , [aafc4b35fc8fc175228f60146f9430d0],
PUP.Optional.CrossRider, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7CBFC949-2735-4FA4-B7C6-CAC03629F76F}, , [abfb0a766625ac8a3978fb79c83bbf41],
PUP.Optional.GoPhoto, HKU\S-1-5-18\SOFTWARE\APPDATALOW\SOFTWARE\GoPhoto.it V9.0, , [a6008df31b700e28e0c26e0fc043da26],
PUP.Optional.TornTV, HKU\S-1-5-18\SOFTWARE\APPDATALOW\SOFTWARE\Torntv V9.0, , [adf9225e3e4d2e08a9a1168ade2517e9],
PUP.Optional.Conduit, HKU\S-1-5-21-2790705977-2588249919-3448850516-1000\SOFTWARE\APPDATALOW\SOFTWARE\ConduitSearchScopes, , [e4c26c14d9b20f2732e5d29e07fc51af],
PUP.Optional.GoPhoto, HKU\S-1-5-21-2790705977-2588249919-3448850516-1000\SOFTWARE\APPDATALOW\SOFTWARE\GoPhoto.it V9.0, , [268093ed0685092d554d0d705da6857b],
PUP.Optional.TornTV, HKU\S-1-5-21-2790705977-2588249919-3448850516-1000\SOFTWARE\APPDATALOW\SOFTWARE\Torntv V9.0, , [8521ed935c2f2e0851f99d037f847e82],
PUP.Optional.ConduitTB.Gen, HKU\S-1-5-21-2790705977-2588249919-3448850516-1000\SOFTWARE\CONDUIT\DistributionEngine, , [e5c17e02b3d89b9b600d35293cc7a957],
PUP.Optional.CrossRider, HKU\S-1-5-21-2790705977-2588249919-3448850516-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{006A4FEA-BEB5-4088-8A7C-C9EDAFDEE1B2}, , [7b2be49c9eed092da1edfd77877c817f],
PUP.Optional.CrossRider, HKU\S-1-5-21-2790705977-2588249919-3448850516-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{048BEE96-9110-48F9-AABF-749391CF0F16}, , [02a485fb1477f1450f7f89ebba494eb2],
PUP.Optional.CrossRider, HKU\S-1-5-21-2790705977-2588249919-3448850516-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{27C47844-2F4A-4630-B0CE-1396FA47CBE3}, , [e6c0760a8cff75c1612e8ee6d2316799],
PUP.Optional.CrossRider, HKU\S-1-5-21-2790705977-2588249919-3448850516-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2FF9696A-D071-4724-8DF3-70023AC634B7}, , [881e5a2632595ed8fd92f67e9d669f61],
PUP.Optional.CrossRider, HKU\S-1-5-21-2790705977-2588249919-3448850516-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{35C8E407-9D9E-4993-8D6D-D9622EDC1CC1}, , [54521c6476158caa622dd89cfa099070],
PUP.Optional.CrossRider, HKU\S-1-5-21-2790705977-2588249919-3448850516-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{449A96E1-26FB-4046-9D55-84D539A67824}, , [eabc6c14f992cb6b246bcfa55ba86799],
PUP.Optional.CrossRider, HKU\S-1-5-21-2790705977-2588249919-3448850516-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6D362AF4-65AE-4B47-B4ED-4740D465B3A1}, , [9214d2ae6d1e15214947ef859b68a35d],
PUP.Optional.CrossRider, HKU\S-1-5-21-2790705977-2588249919-3448850516-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{77AF9CBE-979D-49A8-B1D1-AB7876105247}, , [84222c548803c86ea6ea650fc73c1ee2],
PUP.Optional.CrossRider, HKU\S-1-5-21-2790705977-2588249919-3448850516-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7CBFC949-2735-4FA4-B7C6-CAC03629F76F}, , [ecba93edc3c8171fcec2bbb9bf4421df],
PUP.Optional.CrossRider, HKU\S-1-5-21-2790705977-2588249919-3448850516-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8229F8AC-C8BD-4164-A6B6-6683E2A0F2C2}, , [cadcc5bb4d3e9c9aa4ec4133f3106898],
PUP.Optional.CrossRider, HKU\S-1-5-21-2790705977-2588249919-3448850516-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C71B9E37-F8E1-4682-A46C-BFAEB3691BA0}, , [dbcbc1bfe5a6e74f454a1064bb4804fc],
PUP.Optional.CrossRider, HKU\S-1-5-21-2790705977-2588249919-3448850516-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CC5785EB-F675-4416-84C5-1085F5EF1E72}, , [c1e594ecf79492a42e61482cbc4750b0],
PUP.Optional.CrossRider, HKU\S-1-5-21-2790705977-2588249919-3448850516-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D9FE9234-C796-4BBE-9AEC-EF811BBFF9F8}, , [5551d5abed9e979f4b459adacf34d828],
PUP.Optional.CrossRider, HKU\S-1-5-21-2790705977-2588249919-3448850516-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E2EB65C9-A481-4CA0-BE10-1EBCAEA26219}, , [c8dec3bdfb90ca6ce1af4232d3308080],
PUP.Optional.CrossRider, HKU\S-1-5-21-2790705977-2588249919-3448850516-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{EA35EA52-309C-42F9-A1A0-A6ED2E1B5824}, , [cdd9126eb4d7aa8cc5cb4d27b053926e],
PUP.Optional.Conduit, HKU\S-1-5-21-2790705977-2588249919-3448850516-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{8E1EF5AE-B507-4BAF-9A39-4F56DA90D22C}, , [5650a2de92f95bdb9e7fb2be0ef544bc],
PUP.Optional.PrxySvrRST, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\PrivoxyService, , [c7dfbac65a31979f688f1a4453af3ec2],

Hodnoty registru: 30
PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{006a4fea-beb5-4088-8a7c-c9edafdee1b2}|AppName, Torntv V9.0-bg.exe, , [d8ceb0d08b00a78ffeb1f87cf013a45c]
PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{048bee96-9110-48f9-aabf-749391cf0f16}|AppName, GoPhoto.it V9.0-bg.exe, , [6a3c037d206b6fc7406f8ce81be803fd]
PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2ff9696a-d071-4724-8df3-70023ac634b7}|AppName, Torntv V9.0-buttonutil.exe, , [8521b7c9c6c53afcdad6344044bffa06]
PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{35c8e407-9d9e-4993-8d6d-d9622edc1cc1}|AppName, GoPhoto.it V9.0-buttonutil.exe, , [871f4e32ee9dac8ac1efaec6669dd52b]
PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6d362af4-65ae-4b47-b4ed-4740d465b3a1}|AppName, GoPhoto.it V9.0-codedownloader.exe, , [862039478308ea4cfeb3a2d2e91af50b]
PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7cbfc949-2735-4fa4-b7c6-cac03629f76f}|AppName, Torntv V9.0-codedownloader.exe, , [673f4040513a003609a8c1b3b44f8d73]
PUP.Optional.CrossRider, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{006a4fea-beb5-4088-8a7c-c9edafdee1b2}|AppName, Torntv V9.0-bg.exe, , [7135206037544fe70ba4e094e3208b75]
PUP.Optional.CrossRider, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{048bee96-9110-48f9-aabf-749391cf0f16}|AppName, GoPhoto.it V9.0-bg.exe, , [6f374937eaa152e42887c5af38cba35d]
PUP.Optional.CrossRider, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2ff9696a-d071-4724-8df3-70023ac634b7}|AppName, Torntv V9.0-buttonutil.exe, , [11959de3a1ea87af773981f3d92a1ce4]
PUP.Optional.CrossRider, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{35c8e407-9d9e-4993-8d6d-d9622edc1cc1}|AppName, GoPhoto.it V9.0-buttonutil.exe, , [f3b37f014a410d29f0c0beb624dfee12]
PUP.Optional.CrossRider, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6d362af4-65ae-4b47-b4ed-4740d465b3a1}|AppName, GoPhoto.it V9.0-codedownloader.exe, , [aafc4b35fc8fc175228f60146f9430d0]
PUP.Optional.CrossRider, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7cbfc949-2735-4fa4-b7c6-cac03629f76f}|AppName, Torntv V9.0-codedownloader.exe, , [abfb0a766625ac8a3978fb79c83bbf41]
PUP.Optional.CrossRider, HKU\S-1-5-21-2790705977-2588249919-3448850516-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{006a4fea-beb5-4088-8a7c-c9edafdee1b2}|AppName, Torntv V9.0-bg.exe, , [7b2be49c9eed092da1edfd77877c817f]
PUP.Optional.CrossRider, HKU\S-1-5-21-2790705977-2588249919-3448850516-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{048bee96-9110-48f9-aabf-749391cf0f16}|AppName, GoPhoto.it V9.0-bg.exe, , [02a485fb1477f1450f7f89ebba494eb2]
PUP.Optional.CrossRider, HKU\S-1-5-21-2790705977-2588249919-3448850516-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{27C47844-2F4A-4630-B0CE-1396FA47CBE3}|AppName, 00e1002c-7029-4aa8-96af-5a4f99b861b7-2.exe-buttonutil.exe, , [e6c0760a8cff75c1612e8ee6d2316799]
PUP.Optional.CrossRider, HKU\S-1-5-21-2790705977-2588249919-3448850516-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2ff9696a-d071-4724-8df3-70023ac634b7}|AppName, Torntv V9.0-buttonutil.exe, , [881e5a2632595ed8fd92f67e9d669f61]
PUP.Optional.CrossRider, HKU\S-1-5-21-2790705977-2588249919-3448850516-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{35c8e407-9d9e-4993-8d6d-d9622edc1cc1}|AppName, GoPhoto.it V9.0-buttonutil.exe, , [54521c6476158caa622dd89cfa099070]
PUP.Optional.CrossRider, HKU\S-1-5-21-2790705977-2588249919-3448850516-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{449A96E1-26FB-4046-9D55-84D539A67824}|AppName, 00e1002c-7029-4aa8-96af-5a4f99b861b7-2.exe-buttonutil.exe, , [eabc6c14f992cb6b246bcfa55ba86799]
PUP.Optional.CrossRider, HKU\S-1-5-21-2790705977-2588249919-3448850516-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6d362af4-65ae-4b47-b4ed-4740d465b3a1}|AppName, GoPhoto.it V9.0-codedownloader.exe, , [9214d2ae6d1e15214947ef859b68a35d]
PUP.Optional.CrossRider, HKU\S-1-5-21-2790705977-2588249919-3448850516-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{77AF9CBE-979D-49A8-B1D1-AB7876105247}|AppName, 00e1002c-7029-4aa8-96af-5a4f99b861b7-2.exe-codedownloader.exe, , [84222c548803c86ea6ea650fc73c1ee2]
PUP.Optional.CrossRider, HKU\S-1-5-21-2790705977-2588249919-3448850516-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7cbfc949-2735-4fa4-b7c6-cac03629f76f}|AppName, Torntv V9.0-codedownloader.exe, , [ecba93edc3c8171fcec2bbb9bf4421df]
PUP.Optional.CrossRider, HKU\S-1-5-21-2790705977-2588249919-3448850516-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8229F8AC-C8BD-4164-A6B6-6683E2A0F2C2}|AppName, 3acf9a70-1a99-4e96-962c-fb7ed7f05265-2.exe-codedownloader.exe, , [cadcc5bb4d3e9c9aa4ec4133f3106898]
PUP.Optional.CrossRider, HKU\S-1-5-21-2790705977-2588249919-3448850516-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C71B9E37-F8E1-4682-A46C-BFAEB3691BA0}|AppName, 00e1002c-7029-4aa8-96af-5a4f99b861b7-2.exe-buttonutil.exe, , [dbcbc1bfe5a6e74f454a1064bb4804fc]
PUP.Optional.CrossRider, HKU\S-1-5-21-2790705977-2588249919-3448850516-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CC5785EB-F675-4416-84C5-1085F5EF1E72}|AppName, 3acf9a70-1a99-4e96-962c-fb7ed7f05265-2.exe-buttonutil.exe, , [c1e594ecf79492a42e61482cbc4750b0]
PUP.Optional.CrossRider, HKU\S-1-5-21-2790705977-2588249919-3448850516-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D9FE9234-C796-4BBE-9AEC-EF811BBFF9F8}|AppName, 00e1002c-7029-4aa8-96af-5a4f99b861b7-2.exe-codedownloader.exe, , [5551d5abed9e979f4b459adacf34d828]
PUP.Optional.CrossRider, HKU\S-1-5-21-2790705977-2588249919-3448850516-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E2EB65C9-A481-4CA0-BE10-1EBCAEA26219}|AppName, 3acf9a70-1a99-4e96-962c-fb7ed7f05265-2.exe-codedownloader.exe, , [c8dec3bdfb90ca6ce1af4232d3308080]
PUP.Optional.CrossRider, HKU\S-1-5-21-2790705977-2588249919-3448850516-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{EA35EA52-309C-42F9-A1A0-A6ED2E1B5824}|AppName, 00e1002c-7029-4aa8-96af-5a4f99b861b7-2.exe-codedownloader.exe, , [cdd9126eb4d7aa8cc5cb4d27b053926e]
PUP.Optional.Conduit, HKU\S-1-5-21-2790705977-2588249919-3448850516-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{8E1EF5AE-B507-4BAF-9A39-4F56DA90D22C}|URL, http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT1750559&CUI=UN17542014064981006, , [5650a2de92f95bdb9e7fb2be0ef544bc]
PUP.Optional.Conduit, HKU\S-1-5-21-2790705977-2588249919-3448850516-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{8E1EF5AE-B507-4BAF-9A39-4F56DA90D22C}|FaviconURL, http://search.conduit.com/favicon.ico, , [a9fd08783259f2440e0f125e9370eb15]
PUM.Optional.ProxyHijacker, HKU\S-1-5-21-2790705977-2588249919-3448850516-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS|ProxyServer, 127.0.0.1:8118, , [e0c63050395294a2fe432d9e699a7789]

Data registru: 1
Hijack.StartPage, HKU\S-1-5-21-2790705977-2588249919-3448850516-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, http://www.buenosearch.com/?babsrc=HP_s ... 6&tsp=5231, Dobré: (www.google.com), Špatné: (http://www.buenosearch.com/?babsrc=HP_s ... 6&tsp=5231),,[72340e726a2164d27af298c5c14341bf]

Složky: 45
PUP.Optional.ConduitTB.Gen, C:\Users\Marek\AppData\LocalLow\Conduit\Community Alerts, , [1f876f11e8a3979f598a672a33cfa060],
PUP.Optional.ConduitTB.Gen, C:\Users\Marek\AppData\LocalLow\Conduit\Community Alerts\Dialogs, , [1f876f11e8a3979f598a672a33cfa060],
PUP.Optional.ConduitTB.Gen, C:\Users\Marek\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog, , [1f876f11e8a3979f598a672a33cfa060],
PUP.Optional.ConduitTB.Gen, C:\Users\Marek\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images, , [1f876f11e8a3979f598a672a33cfa060],
PUP.Optional.ConduitTB.Gen, C:\Users\Marek\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\dark, , [1f876f11e8a3979f598a672a33cfa060],
PUP.Optional.ConduitTB.Gen, C:\Users\Marek\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\light, , [1f876f11e8a3979f598a672a33cfa060],
PUP.Optional.ConduitTB.Gen, C:\Users\Marek\AppData\LocalLow\Conduit\Community Alerts\Feeds, , [1f876f11e8a3979f598a672a33cfa060],
PUP.Optional.ConduitTB.Gen, C:\Users\Marek\AppData\LocalLow\Conduit\Community Alerts\LanguagePacks, , [1f876f11e8a3979f598a672a33cfa060],
PUP.Optional.ConduitTB.Gen, C:\Users\Marek\AppData\LocalLow\Conduit\Community Alerts\Log, , [1f876f11e8a3979f598a672a33cfa060],
PUP.Optional.ConduitTB.Gen, C:\Users\Marek\AppData\LocalLow\Conduit, , [1f876f11e8a3979f598a672a33cfa060],
PUP.Optional.PrxySvrRST, C:\Users\Marek\AppData\Roaming\Updater, , [e7bfc9b72c5f989e1db3de800cf7b24e],
PUP.Optional.ConduitTB.Gen, C:\Program Files (x86)\Conduit\Community Alerts, , [188e99e7eba070c62214b9b763a011ef],
PUP.Optional.ConduitTB.Gen, C:\Program Files (x86)\Conduit, , [188e99e7eba070c62214b9b763a011ef],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\skin, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\chrome, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\chrome\content, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\chrome\content\api, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\chrome\content\core, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\defaults, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\defaults\preferences, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\extensionData, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\extensionData\plugins, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\extensionData\userCode, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\locale, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\locale\en-US, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\skin, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\api, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\core, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\defaults, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\defaults\preferences, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\extensionData, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\extensionData\plugins, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\extensionData\userCode, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\locale, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\locale\en-US, , [d6d0e799c2c9f343d706135e44bfa957],
Trojan.StolenData, C:\Users\Marek\AppData\Roaming\dclogs, , [a204ccb43d4e15218c138246fe05c739],
PUP.Optional.PrxySvrRST, C:\Program Files (x86)\SmartComp Safe Network, , [c7dfbac65a31979f688f1a4453af3ec2],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_ccfjbdjailljfihgkoccfbiljjapiijb_0, , [8d199ee2f89353e3a55c70f87a881ce4],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_lmnbobhffedhdhfpcjkjphcfpeeiocdn_0, , [32746a168ffc4cea789f5e0b3bc70bf5],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ccfjbdjailljfihgkoccfbiljjapiijb, , [7f276c14becdab8bfabe096218eaaa56],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lmnbobhffedhdhfpcjkjphcfpeeiocdn, , [3a6c3b45c4c70b2b14b98ce004fe29d7],

Re: kontrola logu

Napsal: 21 lis 2015 13:12
od elvis5
malware 2 část


Soubory: 340

PUP.Optional.BitCoinMiner, C:\Windows\SysWOW64\acumnctgfjl.exe, , [e1c5a1dfb9d20a2ca4c804f2ce3345bb],
Trojan.BitCoinMiner, C:\Windows\SysWOW64\dcgmnctgfjl.exe, , [881e5f21513ab185cbc321d5af520ff1],
Trojan.Agent.BCM, C:\Windows\SysWOW64\lcpmnctgfjl.exe, , [f4b25b2546455adcc1014a564cb4ce32],
RiskWare.BitCoinMiner, C:\Users\Public\Other\minerd.exe, , [dfc77c04b7d450e6a22ca38008f9d32d],
PUP.Optional.ProxyHijacker.BCM, C:\Users\Public\Other\mining_proxy.exe, , [4f575d231f6cdb5b29ea3317eb158878],
PUP.Optional.MalwareCleaner, C:\Windows\System32\Tasks\Malware Cleaner, , [3d69dba590fbd85eee93bad437cbed13],
PUP.Optional.ConduitTB.Gen, C:\Users\Marek\AppData\LocalLow\Conduit\Community Alerts\DynamicDialogs.zip, , [1f876f11e8a3979f598a672a33cfa060],
PUP.Optional.ConduitTB.Gen, C:\Users\Marek\AppData\LocalLow\Conduit\Community Alerts\Dialogs\DialogsAPI.js, , [1f876f11e8a3979f598a672a33cfa060],
PUP.Optional.ConduitTB.Gen, C:\Users\Marek\AppData\LocalLow\Conduit\Community Alerts\Dialogs\PIE.htc, , [1f876f11e8a3979f598a672a33cfa060],
PUP.Optional.ConduitTB.Gen, C:\Users\Marek\AppData\LocalLow\Conduit\Community Alerts\Dialogs\settings.js, , [1f876f11e8a3979f598a672a33cfa060],
PUP.Optional.ConduitTB.Gen, C:\Users\Marek\AppData\LocalLow\Conduit\Community Alerts\Dialogs\version.txt, , [1f876f11e8a3979f598a672a33cfa060],
PUP.Optional.ConduitTB.Gen, C:\Users\Marek\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\AppNotification.js, , [1f876f11e8a3979f598a672a33cfa060],
PUP.Optional.ConduitTB.Gen, C:\Users\Marek\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\initialNotification.html, , [1f876f11e8a3979f598a672a33cfa060],
PUP.Optional.ConduitTB.Gen, C:\Users\Marek\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\main.html, , [1f876f11e8a3979f598a672a33cfa060],
PUP.Optional.ConduitTB.Gen, C:\Users\Marek\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\NotificationDialogStyle.css, , [1f876f11e8a3979f598a672a33cfa060],
PUP.Optional.ConduitTB.Gen, C:\Users\Marek\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\sampleNotification.html, , [1f876f11e8a3979f598a672a33cfa060],
PUP.Optional.ConduitTB.Gen, C:\Users\Marek\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\close.png, , [1f876f11e8a3979f598a672a33cfa060],
PUP.Optional.ConduitTB.Gen, C:\Users\Marek\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\like.png, , [1f876f11e8a3979f598a672a33cfa060],
PUP.Optional.ConduitTB.Gen, C:\Users\Marek\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\Next.png, , [1f876f11e8a3979f598a672a33cfa060],
PUP.Optional.ConduitTB.Gen, C:\Users\Marek\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\Next_hover.png, , [1f876f11e8a3979f598a672a33cfa060],
PUP.Optional.ConduitTB.Gen, C:\Users\Marek\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\powered-by.png, , [1f876f11e8a3979f598a672a33cfa060],
PUP.Optional.ConduitTB.Gen, C:\Users\Marek\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\Prev.png, , [1f876f11e8a3979f598a672a33cfa060],
PUP.Optional.ConduitTB.Gen, C:\Users\Marek\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\Prev_hover.png, , [1f876f11e8a3979f598a672a33cfa060],
PUP.Optional.ConduitTB.Gen, C:\Users\Marek\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\settings.png, , [1f876f11e8a3979f598a672a33cfa060],
PUP.Optional.ConduitTB.Gen, C:\Users\Marek\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\Thumbs.db, , [1f876f11e8a3979f598a672a33cfa060],
PUP.Optional.ConduitTB.Gen, C:\Users\Marek\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\dark\close.png, , [1f876f11e8a3979f598a672a33cfa060],
PUP.Optional.ConduitTB.Gen, C:\Users\Marek\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\dark\Next.png, , [1f876f11e8a3979f598a672a33cfa060],
PUP.Optional.ConduitTB.Gen, C:\Users\Marek\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\dark\Next_hover.png, , [1f876f11e8a3979f598a672a33cfa060],
PUP.Optional.ConduitTB.Gen, C:\Users\Marek\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\dark\powered-by.png, , [1f876f11e8a3979f598a672a33cfa060],
PUP.Optional.ConduitTB.Gen, C:\Users\Marek\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\dark\Prev.png, , [1f876f11e8a3979f598a672a33cfa060],
PUP.Optional.ConduitTB.Gen, C:\Users\Marek\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\dark\Prev_hover.png, , [1f876f11e8a3979f598a672a33cfa060],
PUP.Optional.ConduitTB.Gen, C:\Users\Marek\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\dark\settings.png, , [1f876f11e8a3979f598a672a33cfa060],
PUP.Optional.ConduitTB.Gen, C:\Users\Marek\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\light\close.png, , [1f876f11e8a3979f598a672a33cfa060],
PUP.Optional.ConduitTB.Gen, C:\Users\Marek\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\light\Next.png, , [1f876f11e8a3979f598a672a33cfa060],
PUP.Optional.ConduitTB.Gen, C:\Users\Marek\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\light\Next_hover.png, , [1f876f11e8a3979f598a672a33cfa060],
PUP.Optional.ConduitTB.Gen, C:\Users\Marek\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\light\powered-by.png, , [1f876f11e8a3979f598a672a33cfa060],
PUP.Optional.ConduitTB.Gen, C:\Users\Marek\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\light\Prev.png, , [1f876f11e8a3979f598a672a33cfa060],
PUP.Optional.ConduitTB.Gen, C:\Users\Marek\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\light\Prev_hover.png, , [1f876f11e8a3979f598a672a33cfa060],
PUP.Optional.ConduitTB.Gen, C:\Users\Marek\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\light\settings.png, , [1f876f11e8a3979f598a672a33cfa060],
PUP.Optional.ConduitTB.Gen, C:\Users\Marek\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\light\Thumbs.db, , [1f876f11e8a3979f598a672a33cfa060],
PUP.Optional.ConduitTB.Gen, C:\Users\Marek\AppData\LocalLow\Conduit\Community Alerts\Feeds\http___alerts_conduit-services_com_root_31130_30609_CZ.xml, , [1f876f11e8a3979f598a672a33cfa060],
PUP.Optional.ConduitTB.Gen, C:\Users\Marek\AppData\LocalLow\Conduit\Community Alerts\LanguagePacks\en.xml, , [1f876f11e8a3979f598a672a33cfa060],
PUP.Optional.PrxySvrRST, C:\Windows\System32\Tasks\SmartComp Safe Network Viewer, , [dacc176977143df95b8a850c17eb26da],
PUP.Optional.PrxySvrRST, C:\Users\Marek\AppData\Roaming\Updater\winupd.exe, , [e7bfc9b72c5f989e1db3de800cf7b24e],
PUP.Optional.CrossRider, C:\Windows\System32\Tasks\00e1002c-7029-4aa8-96af-5a4f99b861b7-1, , [3571b4cc4b4058decc1e184c4db6ac54],
PUP.Optional.CrossRider, C:\Windows\System32\Tasks\00e1002c-7029-4aa8-96af-5a4f99b861b7-2, , [c0e6d6aaed9e999dedfd412314efad53],
PUP.Optional.CrossRider, C:\Windows\System32\Tasks\00e1002c-7029-4aa8-96af-5a4f99b861b7-5, , [06a060204348ce683eac40243cc7669a],
PUP.Optional.CrossRider, C:\Windows\System32\Tasks\3acf9a70-1a99-4e96-962c-fb7ed7f05265-1, , [61453d437219e056de0c66feea19c13f],
PUP.Optional.CrossRider, C:\Windows\System32\Tasks\3acf9a70-1a99-4e96-962c-fb7ed7f05265-2, , [8f17730d1d6e5ed8ca202a3a52b1f20e],
PUP.Optional.CrossRider, C:\Windows\System32\Tasks\3acf9a70-1a99-4e96-962c-fb7ed7f05265-3, , [9f0757296b2043f3af3bc3a154af6997],
PUP.Optional.CrossRider, C:\Windows\System32\Tasks\3acf9a70-1a99-4e96-962c-fb7ed7f05265-4, , [2284512fbecd5cda8d5d0f5507fcfa06],
PUP.Optional.CrossRider, C:\Windows\System32\Tasks\3acf9a70-1a99-4e96-962c-fb7ed7f05265-5, , [85213947bfcc6ec817d31e46f013d12f],
PUP.Optional.CrossRider, C:\Windows\Tasks\00e1002c-7029-4aa8-96af-5a4f99b861b7-1.job, , [9214eb95a9e264d23eada2c2c3409d63],
PUP.Optional.CrossRider, C:\Windows\Tasks\00e1002c-7029-4aa8-96af-5a4f99b861b7-2.job, , [5254ee92563595a12dbecf95669d3ec2],
PUP.Optional.CrossRider, C:\Windows\Tasks\00e1002c-7029-4aa8-96af-5a4f99b861b7-5.job, , [d5d11f61147738fef8f3570d5ba84fb1],
PUP.Optional.CrossRider, C:\Windows\Tasks\3acf9a70-1a99-4e96-962c-fb7ed7f05265-1.job, , [594d235d8a01181ee209e77dfe0523dd],
PUP.Optional.CrossRider, C:\Windows\Tasks\3acf9a70-1a99-4e96-962c-fb7ed7f05265-2.job, , [6c3aacd4eba0f54156959bc91de6f50b],
PUP.Optional.CrossRider, C:\Windows\Tasks\3acf9a70-1a99-4e96-962c-fb7ed7f05265-3.job, , [a2041070b1da60d623c8e87c16edd52b],
PUP.Optional.CrossRider, C:\Windows\Tasks\3acf9a70-1a99-4e96-962c-fb7ed7f05265-4.job, , [ebbb81ffec9f40f637b4f86c4ab909f7],
PUP.Optional.CrossRider, C:\Windows\Tasks\3acf9a70-1a99-4e96-962c-fb7ed7f05265-5.job, , [3d6988f8bccfd3636289b8ace320f709],
PUP.Optional.BuenoSearch, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\searchplugins\buenosearch.xml, , [089ea4dc1774f73fa4d2561633d0eb15],
PUP.Optional.BuenoSearch, C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.buenosearch.com_0.localstorage-journal, , [fda9126e1d6e75c12a4d284423e020e0],
PUP.Optional.ConduitTB.Gen, C:\Program Files (x86)\Conduit\Community Alerts\Alert.dll, , [188e99e7eba070c62214b9b763a011ef],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\skin\crossrider_statusbar.png, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\skin\button1.png, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\skin\button2.png, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\skin\button3.png, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\skin\button4.png, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\skin\button5.png, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\skin\icon128.png, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\skin\icon16.png, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\skin\icon24.png, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\skin\icon48.png, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\skin\panelarrow-up.png, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\skin\popup.html, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\skin\skin.css, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\skin\update.css, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\chrome.manifest, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\install.rdf, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\chrome\content\api.js, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\chrome\content\background.html, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\chrome\content\baseObject.js, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\chrome\content\browser.xul, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\chrome\content\dialog.js, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\chrome\content\ffCoreFilesIndex.txt, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\chrome\content\main.js, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\chrome\content\options.js, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\chrome\content\options.xul, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\chrome\content\platformVersion.js, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\chrome\content\search_dialog.xul, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\chrome\content\api\asyncDB.js, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\chrome\content\api\background.js, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\chrome\content\api\browserAction.js, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\chrome\content\api\contextMenu.js, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\chrome\content\api\dbManager.js, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\chrome\content\api\dom_bg.js, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\chrome\content\api\fileManager.js, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\chrome\content\api\firefox.js, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\chrome\content\api\firefoxNotifications.js, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\chrome\content\api\firefoxOmnibox.js, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\chrome\content\api\message.js, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\chrome\content\api\pageAction.js, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\chrome\content\api\request.js, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\chrome\content\api\tabs.js, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\chrome\content\api\webRequest.js, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\chrome\content\api\windowsMessagingHandler.js, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\chrome\content\core\addressBarChangeObserver.js, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\chrome\content\core\console.js, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\chrome\content\core\consts.js, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\chrome\content\core\delegate.js, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\chrome\content\core\extensionDataStore.js, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\chrome\content\core\folderIOWrapper.js, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\chrome\content\core\httpObserver.js, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\chrome\content\core\IDBWrapper.js, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\chrome\content\core\installer.js, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\chrome\content\core\logFile.js, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\chrome\content\core\prefs.js, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\chrome\content\core\progressListenerObserver.js, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\chrome\content\core\registry.js, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\chrome\content\core\reloadObserver.js, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\chrome\content\core\reports.js, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\chrome\content\core\requestObject.js, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\chrome\content\core\searchSettings.js, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\chrome\content\core\uninstallObserver.js, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\chrome\content\core\updateManager.js, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\chrome\content\core\utils.js, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\chrome\content\core\xhr.js, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\defaults\preferences\prefs.js, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\extensionData\manifest.xml, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\extensionData\plugins.json, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\extensionData\plugins\1.js, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\extensionData\plugins\1000020.js, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\extensionData\plugins\1000025.js, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\extensionData\plugins\1000030.js, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\extensionData\plugins\102.js, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\extensionData\plugins\103.js, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\extensionData\plugins\104.js, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\extensionData\plugins\123.js, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\extensionData\plugins\13.js, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\extensionData\plugins\14.js, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\extensionData\plugins\155.js, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\extensionData\plugins\16.js, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\extensionData\plugins\17.js, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\extensionData\plugins\175.js, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\extensionData\plugins\177.js, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\extensionData\plugins\180.js, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\extensionData\plugins\182.js, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\extensionData\plugins\183.js, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\extensionData\plugins\190.js, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\extensionData\plugins\193.js, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\extensionData\plugins\195.js, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\extensionData\plugins\207.js, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\extensionData\plugins\21.js, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\extensionData\plugins\22.js, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\extensionData\plugins\220.js, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\extensionData\plugins\223.js, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\extensionData\plugins\246.js, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\extensionData\plugins\28.js, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\extensionData\plugins\4.js, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\extensionData\plugins\47.js, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\extensionData\plugins\64.js, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\extensionData\plugins\7.js, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\extensionData\plugins\72.js, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\extensionData\plugins\78.js, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\extensionData\plugins\9.js, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\extensionData\plugins\91.js, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\extensionData\plugins\93.js, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\extensionData\plugins\98.js, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\extensionData\userCode\background.js, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\extensionData\userCode\extension.js, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\2ea36bf1-0877-4aaa-882c-ff78f7d9d95c@dfb1672d-116a-4eb4-8be0-44786bd1d3dd.com\locale\en-US\translations.dtd, , [7135037d4348a1957964145da85b8b75],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\skin\crossrider_statusbar.png, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\skin\button1.png, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\skin\button2.png, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\skin\button3.png, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\skin\button4.png, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\skin\button5.png, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\skin\icon128.png, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\skin\icon16.png, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\skin\icon24.png, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\skin\icon48.png, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\skin\panelarrow-up.png, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\skin\popup.html, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\skin\skin.css, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\skin\update.css, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome.manifest, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\install.rdf, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\api.js, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\background.html, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\baseObject.js, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\browser.xul, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\dialog.js, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\ffCoreFilesIndex.txt, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\main.js, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\options.js, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\options.xul, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\platformVersion.js, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\search_dialog.xul, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\api\asyncDB.js, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\api\background.js, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\api\browserAction.js, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\api\contextMenu.js, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\api\dbManager.js, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\api\dom_bg.js, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\api\fileManager.js, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\api\firefox.js, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\api\firefoxNotifications.js, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\api\firefoxOmnibox.js, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\api\message.js, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\api\pageAction.js, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\api\request.js, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\api\tabs.js, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\api\webRequest.js, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\api\windowsMessagingHandler.js, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\core\addressBarChangeObserver.js, , [d6d0e799c2c9f343d706135e44bfa957],

Re: kontrola logu

Napsal: 21 lis 2015 13:13
od elvis5
malware 3 část


tent\core\console.js, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\core\consts.js, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\core\delegate.js, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\core\extensionDataStore.js, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\core\folderIOWrapper.js, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\core\httpObserver.js, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\core\IDBWrapper.js, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\core\installer.js, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\core\logFile.js, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\core\prefs.js, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\core\progressListenerObserver.js, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\core\registry.js, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\core\reloadObserver.js, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\core\reports.js, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\core\requestObject.js, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\core\searchSettings.js, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\core\uninstallObserver.js, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\core\updateManager.js, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\core\utils.js, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\chrome\content\core\xhr.js, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\defaults\preferences\prefs.js, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\extensionData\manifest.xml, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\extensionData\plugins.json, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\extensionData\plugins\1.js, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\extensionData\plugins\1000020.js, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\extensionData\plugins\1000025.js, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\extensionData\plugins\1000030.js, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\extensionData\plugins\102.js, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\extensionData\plugins\103.js, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\extensionData\plugins\104.js, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\extensionData\plugins\123.js, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\extensionData\plugins\13.js, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\extensionData\plugins\14.js, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\extensionData\plugins\155.js, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\extensionData\plugins\16.js, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\extensionData\plugins\17.js, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\extensionData\plugins\175.js, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\extensionData\plugins\177.js, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\extensionData\plugins\180.js, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\extensionData\plugins\182.js, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\extensionData\plugins\183.js, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\extensionData\plugins\190.js, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\extensionData\plugins\193.js, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\extensionData\plugins\195.js, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\extensionData\plugins\207.js, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\extensionData\plugins\21.js, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\extensionData\plugins\22.js, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\extensionData\plugins\220.js, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\extensionData\plugins\223.js, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\extensionData\plugins\246.js, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\extensionData\plugins\28.js, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\extensionData\plugins\4.js, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\extensionData\plugins\47.js, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\extensionData\plugins\64.js, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\extensionData\plugins\7.js, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\extensionData\plugins\72.js, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\extensionData\plugins\78.js, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\extensionData\plugins\9.js, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\extensionData\plugins\91.js, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\extensionData\plugins\93.js, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\extensionData\plugins\98.js, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\extensionData\userCode\background.js, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\extensionData\userCode\extension.js, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com\locale\en-US\translations.dtd, , [d6d0e799c2c9f343d706135e44bfa957],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_ccfjbdjailljfihgkoccfbiljjapiijb_0.localstorage, , [9b0b70103b5071c5997e363c6f949c64],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_ccfjbdjailljfihgkoccfbiljjapiijb_0.localstorage-journal, , [bbebb3cdc7c43204918674febe459a66],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_lmnbobhffedhdhfpcjkjphcfpeeiocdn_0.localstorage, , [ecbaf28ea9e23df9f909c8ab3bc8d030],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_lmnbobhffedhdhfpcjkjphcfpeeiocdn_0.localstorage-journal, , [76304d331f6cf83e3bc790e3d033827e],
PUP.Optional.MindSpark, C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_allin1convert.dl.tb.ask.com_0.localstorage-journal, , [7c2aa9d72566ea4cc796681f020159a7],
PUP.Optional.MindSpark, C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_videodownloadconverter.dl.tb.ask.com_0.localstorage-journal, , [3d692b552665d2648bd21e69d03308f8],
Trojan.StolenData, C:\Users\Marek\AppData\Roaming\dclogs\2014-04-28-2.dc, , [a204ccb43d4e15218c138246fe05c739],
Trojan.StolenData, C:\Users\Marek\AppData\Roaming\dclogs\2014-04-29-3.dc, , [a204ccb43d4e15218c138246fe05c739],
Trojan.StolenData, C:\Users\Marek\AppData\Roaming\dclogs\2014-04-30-4.dc, , [a204ccb43d4e15218c138246fe05c739],
PUP.Optional.PrxySvrRST, C:\Program Files (x86)\SmartComp Safe Network\checkproxy.exe, , [c7dfbac65a31979f688f1a4453af3ec2],
PUP.Optional.PrxySvrRST, C:\Program Files (x86)\SmartComp Safe Network\config.txt, , [c7dfbac65a31979f688f1a4453af3ec2],
PUP.Optional.PrxySvrRST, C:\Program Files (x86)\SmartComp Safe Network\default.action, , [c7dfbac65a31979f688f1a4453af3ec2],
PUP.Optional.PrxySvrRST, C:\Program Files (x86)\SmartComp Safe Network\default.filter, , [c7dfbac65a31979f688f1a4453af3ec2],
PUP.Optional.PrxySvrRST, C:\Program Files (x86)\SmartComp Safe Network\jpchromium.exe, , [c7dfbac65a31979f688f1a4453af3ec2],
PUP.Optional.PrxySvrRST, C:\Program Files (x86)\SmartComp Safe Network\jpchromium64.exe, , [c7dfbac65a31979f688f1a4453af3ec2],
PUP.Optional.PrxySvrRST, C:\Program Files (x86)\SmartComp Safe Network\jpweb.dll, , [c7dfbac65a31979f688f1a4453af3ec2],
PUP.Optional.PrxySvrRST, C:\Program Files (x86)\SmartComp Safe Network\jpweb64.dll, , [c7dfbac65a31979f688f1a4453af3ec2],
PUP.Optional.PrxySvrRST, C:\Program Files (x86)\SmartComp Safe Network\mgwz.dll, , [c7dfbac65a31979f688f1a4453af3ec2],
PUP.Optional.PrxySvrRST, C:\Program Files (x86)\SmartComp Safe Network\msnworker.exe, , [c7dfbac65a31979f688f1a4453af3ec2],
PUP.Optional.PrxySvrRST, C:\Program Files (x86)\SmartComp Safe Network\privoxy.exe, , [c7dfbac65a31979f688f1a4453af3ec2],
PUP.Optional.PrxySvrRST, C:\Program Files (x86)\SmartComp Safe Network\privoxy.log, , [c7dfbac65a31979f688f1a4453af3ec2],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_ccfjbdjailljfihgkoccfbiljjapiijb_0\244, , [8d199ee2f89353e3a55c70f87a881ce4],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_lmnbobhffedhdhfpcjkjphcfpeeiocdn_0\243, , [32746a168ffc4cea789f5e0b3bc70bf5],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ccfjbdjailljfihgkoccfbiljjapiijb\000525.ldb, , [7f276c14becdab8bfabe096218eaaa56],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ccfjbdjailljfihgkoccfbiljjapiijb\000530.ldb, , [7f276c14becdab8bfabe096218eaaa56],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ccfjbdjailljfihgkoccfbiljjapiijb\000531.log, , [7f276c14becdab8bfabe096218eaaa56],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ccfjbdjailljfihgkoccfbiljjapiijb\CURRENT, , [7f276c14becdab8bfabe096218eaaa56],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ccfjbdjailljfihgkoccfbiljjapiijb\LOCK, , [7f276c14becdab8bfabe096218eaaa56],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ccfjbdjailljfihgkoccfbiljjapiijb\LOG, , [7f276c14becdab8bfabe096218eaaa56],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ccfjbdjailljfihgkoccfbiljjapiijb\LOG.old, , [7f276c14becdab8bfabe096218eaaa56],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ccfjbdjailljfihgkoccfbiljjapiijb\MANIFEST-000529, , [7f276c14becdab8bfabe096218eaaa56],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lmnbobhffedhdhfpcjkjphcfpeeiocdn\000525.ldb, , [3a6c3b45c4c70b2b14b98ce004fe29d7],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lmnbobhffedhdhfpcjkjphcfpeeiocdn\000527.ldb, , [3a6c3b45c4c70b2b14b98ce004fe29d7],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lmnbobhffedhdhfpcjkjphcfpeeiocdn\000533.ldb, , [3a6c3b45c4c70b2b14b98ce004fe29d7],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lmnbobhffedhdhfpcjkjphcfpeeiocdn\000534.log, , [3a6c3b45c4c70b2b14b98ce004fe29d7],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lmnbobhffedhdhfpcjkjphcfpeeiocdn\CURRENT, , [3a6c3b45c4c70b2b14b98ce004fe29d7],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lmnbobhffedhdhfpcjkjphcfpeeiocdn\LOCK, , [3a6c3b45c4c70b2b14b98ce004fe29d7],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lmnbobhffedhdhfpcjkjphcfpeeiocdn\LOG, , [3a6c3b45c4c70b2b14b98ce004fe29d7],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lmnbobhffedhdhfpcjkjphcfpeeiocdn\LOG.old, , [3a6c3b45c4c70b2b14b98ce004fe29d7],
PUP.Optional.CrossRider, C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lmnbobhffedhdhfpcjkjphcfpeeiocdn\MANIFEST-000532, , [3a6c3b45c4c70b2b14b98ce004fe29d7],
PUP.Optional.BuenoSearch, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\user.js, Dobré: (), Špatné: (user_pref("extensions.buenosearch.tlbrSrchUrl", "http://www.buenosearch.com/?q={searchTerms}&babsrc=TB_ss&mntrId=2688E0CA94E1F447&affID=128403&tt=240414_16&tsp=5231");), ,[a402bdc3761555e1a75eaada33d134cc]
PUP.Optional.BuenoSearch, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\user.js, Dobré: (), Špatné: (128403&tt=240414_16&tsp=5231");
user_pref("extensions.buenosearch.tb_url", "http://www.buenosearch.com/?q={searchTerms}&babsrc=TB_ss&mntrId=2688E0CA94E1F447&affI), ,[dcca5b251e6d1a1cb94ca9db17ed7c84]
PUP.Optional.BuenoSearch, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\user.js, Dobré: (), Špatné: (ffID=128403&tt=240414_16&tsp=5231");
user_pref("extensions.buenosearch.tb_), ,[f0b6a0e0d8b3fe3844c1e1a334d011ef]
PUP.Optional.BuenoSearch, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\user.js, Dobré: (), Špatné: (l", "http://www.buenosearch.com/?q={searchTerms}&babsrc=TB_ss&mntrId=2688E0CA94E1F44), ,[fea8ed934f3cdd59bd48aed62dd78878]
PUP.Optional.BuenoSearch, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\user.js, Dobré: (), Špatné: (://www.buenosearch.com/?q={searchTerms}&babsrc=TB_ss&m), ,[4f57ea961d6e2115dc295b2947bd0000]
PUP.Optional.BuenoSearch, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\user.js, Dobré: (), Špatné: (uenosearch.tlbrSrchUrl", "http://www.buenosearch.com/), ,[8f173a464a4193a3d3327113c83c4fb1]
PUP.Optional.BuenoSearch, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\user.js, Dobré: (), Špatné: (buenosearch.tlbrSrchUrl", "http://www.buenosearch.com/), ,[9f07ccb4d2b978be7095cdb7c1432bd5]
PUP.Optional.BuenoSearch, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\user.js, Dobré: (), Špatné: (uenosearch.tlbrSrchUrl", "http://www.buenosearch.com/?q={search), ,[4b5b4d337912f73fbb4a1c68768ec23e]
PUP.Optional.BuenoSearch, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\user.js, Dobré: (), Špatné: (h.tlbrSrchUrl", "http://www.buenosearch.com/?q={searchTerms), ,[72342b5557347fb7ce3770148183768a]
PUP.Optional.BuenoSearch, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\user.js, Dobré: (), Špatné: (earch.tlbrSrchUrl", "http://www.buenosearch.com/?q={searc), ,[7a2c166a810a1c1a858098ec10f49b65]
PUP.Optional.BuenoSearch, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\user.js, Dobré: (), Špatné: (osearch.tlbrSrchUrl", "http://www.buenosearch.com/?), ,[b1f55a26c5c6989eff063a4ac63ef40c]
PUP.Optional.BuenoSearch, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\user.js, Dobré: (), Špatné: (s.buenosearch.tlbrSrchUrl", "http://www.buenosearch.), ,[2a7cd7a98209c274858082027e861ce4]
PUP.Optional.BuenoSearch, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\user.js, Dobré: (), Špatné: (.buenosearch.tlbrSrchUrl", "http://www.buenosearch.), ,[2e78add33a5173c3e81d0e7635cf4ab6]
PUP.Optional.BuenoSearch, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\user.js, Dobré: (), Špatné: (.buenosearch.tlbrSrchUrl", "http://www.buenosearch), ,[624470100a8103333dc85a2a7094c53b]
PUP.Optional.BuenoSearch, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\user.js, Dobré: (), Špatné: (ns.buenosearch.tlbrSrchUrl", "http://www.buenosearc), ,[e1c52d5391facd6939cce3a130d4d030]
PUP.Optional.BuenoSearch, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\user.js, Dobré: (), Špatné: (s.buenosearch.tlbrSrchUrl", "http://www.buenosearch.co), ,[fbab6c140a816acc1bea7a0a6f95ac54]
PUP.Optional.BuenoSearch, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\user.js, Dobré: (), Špatné: (uenosearch.tlbrSrchUrl", "http://www.buenosearch.), ,[3a6c631dee9dee4814f1513335cf28d8]
PUP.Optional.BuenoSearch, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\user.js, Dobré: (), Špatné: (ons.buenosearch.tlbrSrchUrl", "http://www.buenosearch.), ,[8a1c8bf5adde5bdb2dd8a1e3e91b3cc4]
PUP.Optional.BuenoSearch, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\user.js, Dobré: (), Špatné: (uenosearch.tlbrSrchUrl", "http://www.buenosearch.c), ,[693dc3bd1a712214c4410381857f3bc5]
PUP.Optional.BuenoSearch, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\user.js, Dobré: (), Špatné: (ns.buenosearch.tlbrSrchUrl", "http://www.buenosear), ,[970f90f0414aaf8727de9de7788ce020]
PUP.Optional.BuenoSearch, C:\Users\Marek\AppData\Roaming\Mozilla\Firefox\Profiles\gyik28xc.default\user.js, Dobré: (), Špatné: (absrc=TB_ss&mntrId=2688E0CA94E1F447&affID=128403&tt=240414_16&tsp=5231");
user_pref("extensions.buenosearch.tb_url", "http://www.buenosearch.com/?q={searchTerms}), ,[adf92a56e0ab2c0a0c502c58fe0601ff]

Fyzické sektory: 0
(Nenalezeny žádné škodlivé položky)


(end)

Re: kontrola logu

Napsal: 21 lis 2015 15:51
od elvis5
nastal jeden problém nemůžu se připojit k internetu, nejde mi od doby co jsem v AdwCleaner dal clean poté se noteobook restartoval a pak se už nešlo připojit.

Re: kontrola logu

Napsal: 22 lis 2015 07:41
od Orcus
Tak zatím stahovat na jiném PC přip v nouzovém režimu s prací v síti.

- Spusť znovu MbAM a dej Skenovat nyní
- Po proběhnutí programu, se ti objeví hláška, tak klikni na „Vše do karantény(smazat vybrané)“ a na „Exportovat záznam“ a vyber „textový soubor“ , soubor nějak pojmenuj a někam ho ulož. Zkopíruj se celý obsah toho logu.

====================================================

Stáhni si RogueKiller
32bit.:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
64bit.:
http://www.sur-la-toile.com/RogueKiller ... lerX64.exe
na svojí plochu.
- Zavři všechny ostatní programy a prohlížeče.
- Pro OS Vista a win7 spusť program RogueKiller.exe jako správce , u XP poklepáním.
- Počkej až skončí Prescan -vyhledávání škodlivých procesů.
- Potom klikni na „Prohledat“.
- Program skenuje procesy PC. Po proskenování klikni na „Zpráva“celý obsah logu sem zkopíruj.
Pokud je program blokován , zkus ho spustit několikrát. Pokud dále program nepůjde spustit a pracovat, přejmenuj ho na winlogon.exe.

Re: kontrola logu

Napsal: 22 lis 2015 13:52
od elvis5
RogueKiller V10.11.6.0 (x64) [Nov 16 2015] (Free) by Adlice Software
mail : http://www.adlice.com/contact/
Feedback : http://forum.adlice.com
Webová stránka : http://www.adlice.com/software/roguekiller/
Blog : http://www.adlice.com

Operační systém : Windows 10 (10.0.10586) 64 bits version
Spuštěno : Normální režim
Uživatel : Marek [Práva správce]
Started from : C:\Users\Marek\Desktop\RogueKillerX64.exe
Mód : Prohledat -- Datum : 11/22/2015 13:45:48

¤¤¤ Procesy : 1 ¤¤¤
[Proc.RunPE] hasplms.exe(2240) -- C:\Windows\System32\hasplms.exe[7] -> Zastaveno [TermProc]

¤¤¤ Registry : 2 ¤¤¤
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{a9746c0c-63a2-42fe-ba98-081ca6eef670} | DhcpNameServer : 147.229.190.143 147.229.191.143 ([CZECH REPUBLIC (CZ)][CZECH REPUBLIC (CZ)]) -> Nalezeno
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters\Interfaces\{a9746c0c-63a2-42fe-ba98-081ca6eef670} | DhcpNameServer : 147.229.190.143 147.229.191.143 ([CZECH REPUBLIC (CZ)][CZECH REPUBLIC (CZ)]) -> Nalezeno

¤¤¤ Úlohy : 0 ¤¤¤

¤¤¤ Soubory : 1 ¤¤¤
[PUP][Složka] C:\ProgramData\{CC71B1CB-A2E4-4CF7-8EDB-A0E290BA1604} -> Nalezeno

¤¤¤ Soubor HOSTS : 0 ¤¤¤

¤¤¤ Antirootkit : 0 (Driver: Nahrán) ¤¤¤

¤¤¤ Webové prohlížeče : 0 ¤¤¤

¤¤¤ Kontrola MBR : ¤¤¤
+++++ PhysicalDrive0: +++++
--- User ---
[MBR] db28d02e64d107e9f6970566c7cf49ad
[BSP] 4303733f38eedbe0918864f99346ae07 : HP|VT.Unknown MBR Code
Partition table:
0 - [ACTIVE] ACER (0x27) [VISIBLE] Offset (sectors): 2048 | Size: 1500 MB
1 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 3074048 | Size: 592592 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
2 - [XXXXXX] ACER (0x27) [VISIBLE] Offset (sectors): 1216704512 | Size: 826 MB
3 - [XXXXXX] NTFS (0x17) [HIDDEN!] Offset (sectors): 1218396160 | Size: 15560 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
User = LL1 ... OK
User = LL2 ... OK
Časové pásmo: UTC+02:00
Stránka 1 z 2
Powered by phpBB® Forum Software © phpBB Limited
https://www.phpbb.com/