PC-HELP.CZ

České diskuzní fórum o počítačích
https://pc-help.cnews.cz/

Prosím o kontrolu HijackThis, Network service, TrustedInstallerjednotka DVD RW

https://pc-help.cnews.cz/viewtopic.php?f=70&t=168435

Stránka 1 z 6

Prosím o kontrolu HijackThis, Network service, TrustedInstallerjednotka DVD RW

Napsal: 12 led 2016 14:58
od Telda
Dobrý den, jsem tady poprvé a mám s PC několik problémů.
Nevím kam mám níže uvedené problémy uvést, tak je vkládám sem i s logem HiJackThis .
Vložil jsem i do obsahu fóra hardware.
Děkuji všem za pomoc a rady.

1) Jakmile chci něco smazat, odstranit nebo přejmenovat v "D", tak mě to upozorňuje níže uvedeno, i když jsem správce.

a) K provedení této akce je nutné oprávnění. Pokud chcete tuto složku měnit, obraťte se na "Network service", aby vám byla přidělena příslušná oprávnění. (složku, kterou jsem chtěl přejmenovat, tak se uzamkla - nevím a nechápu proč tomu tak je). v "D" se mi objevila složka " ac38c7ae4b97e9ebc99edfc6e2", která je rovněž uzamčena. V této složce je "MPSigStub" z 23.6.2015.
b) jestliže chci měnit soubor, tak to zase upozorňuje: K provedení této akce je nutné oprávnění. Pokud chcete tento soubor měnit, obraťte se na "TrustedInstaller" , by vám byla přidělena příslušná oprávnění.

Od této doby, mi nejde jednotka DVD RW, nelze načíst jakékoliv DVD nebo CD. Mám HL-DT-ST DVD-RAM GSA-H55N ATA device.

Můžete mi prosím Vás pomoct, co s tím. Jsem laik přes PC a nerad bych se pouštěl do větších akcí, kterým nerozumím. Děkuji.
Raději hned zasílám log z HijackThis


Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:03:39, on 11.1.2016
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18124)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\System32\mjcm\dnkt.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Windows\V0330Mon.exe
C:\Program Files\Pinnacle\Shared Files\Programs\USBTip\USBTip.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\Program Files\daugava\Ejemidvlf.exe
C:\Program Files\D-Link\DWA-140 revB\AirNCFG.exe
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ArcCon.ac
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\SanDisk\SanDisk Media Manager\SanDiskMediaManager-Launcher.EXE
C:\Program Files\MSI\TotalMedia 3.5\TMMonitor.exe
C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
C:\Windows\system32\DllHost.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files\Common Files\Java\Java Update\jucheck.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\Macromed\Flash\FlashUtil32_20_0_0_270_ActiveX.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Users\MINA\Desktop\hijackthis.exe
C:\Windows\system32\SearchProtocolHost.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://atlas.centrum.cz/?utm_source=ch- ... nt=default
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.centrum.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {687578b9-7132-4a7a-80e4-30ee31099e03} - (no file)
O2 - BHO: Complitly - {0FB6A909-6086-458F-BD92-1F8EE10042A0} - C:\Users\MINA\AppData\Roaming\Complitly\Complitly.dll
O2 - BHO: Web Assistant Helper - {336D0C35-8A85-403a-B9D2-65C292C39087} - C:\Program Files\Web Assistant\Extension32.dll
O2 - BHO: Lišta Centrum.cz - {5D9C17C6-093D-43E5-BF3D-4A13D162AB74} - C:\PROGRA~1\CENTRU~1.O\LITACE~1.CZ\cenbho32.dll
O2 - BHO: Incredibar.com Helper Object - {6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99} - C:\Program Files\Incredibar.com\incredibar\1.5.11.14\bh\incredibar.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.8.0_51\bin\ssv.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files\Windows Live\Companion\companioncore.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - "C:\Program Files\Microsoft\BingBar\BingExt.dll" (file missing)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre1.8.0_51\bin\jp2ssv.dll
O3 - Toolbar: Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files\Microsoft\BingBar\BingExt.dll" (file missing)
O3 - Toolbar: Incredibar Toolbar - {F9639E4A-801B-4843-AEE3-03D9DA199E77} - C:\Program Files\Incredibar.com\incredibar\1.5.11.14\incredibarTlbr.dll
O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [V0330Mon.exe] C:\Windows\V0330Mon.exe
O4 - HKLM\..\Run: [BrMfcWnd] C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe /AUTORUN
O4 - HKLM\..\Run: [USBToolTip] C:\PROGRA~1\Pinnacle\SHARED~1\Programs\USBTip\USBTip.exe
O4 - HKLM\..\Run: [MSC] "C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
O4 - HKLM\..\Run: [D-Link D-Link DWA-140] C:\Program Files\D-Link\DWA-140 revB\AirNCFG.exe
O4 - HKLM\..\Run: [UVS10 Preload] C:\Program Files\Ulead Systems\Ulead VideoStudio SE DVD\uvPL.exe
O4 - HKLM\..\Run: [ArcSoft Connection Service] C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [daugava] C:\Program Files\daugava\Ejemidvlf.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
O4 - HKCU\..\Run: [NextLive] C:\Windows\system32\rundll32.exe "C:\Users\MINA\AppData\Roaming\newnext.me\nengine.dll",EntryPoint -m l
O4 - Startup: Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
O4 - Global Startup: SanDisk Media Manager.lnk = ?
O4 - Global Startup: TMMonitor.lnk = C:\Program Files\MSI\TotalMedia 3.5\TMMonitor.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: @C:\Program Files\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files\Windows Live\Companion\companioncore.dll
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)
O9 - Extra button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {1C11B948-582A-433F-A98D-A8C4D5CC64F2} (20-20 3D Viewer) - http://kitchenplanner.ikea.com/CZ/Core/ ... _Win32.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: 65f825de-0adc-4791-a1e5-209aa6f7ea76 - Unknown owner - C:\Program Files\daugava\Upbgbeie.exe
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe
O23 - Service: csrcc - Unknown owner - C:\Program Files\daugava\csrcc.exe
O23 - Service: daugava Updater - Unknown owner - C:\Program Files\daugava\Weekfqwb.exe
O23 - Service: D_Link_DWA-140_WPS Service (D_Link_DWA-140_WPS) - Unknown owner - C:\Program Files\D-Link\DWA-140 revB\ANIWConnService.exe
O23 - Service: ES lite Service for program management. (ES lite Service) - Unknown owner - C:\Program Files\Gigabyte\EasySaver\ESSVR.EXE
O23 - Service: FsUsbExService - Teruten - C:\Windows\system32\FsUsbExService.Exe
O23 - Service: IBUpdaterService - Unknown owner - C:\Windows\system32\dmwu.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Internet Pass-Through Service (PassThru Service) - Unknown owner - C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
O23 - Service: Web Assistant - Unknown owner - C:\Program Files\Web Assistant\ExtensionUpdaterService.exe

--
End of file - 10820 bytes

Re: Prosím o kontrolu HijackThis, Network service, TrustedInstallerjednotka DVD RW

Napsal: 12 led 2016 16:03
od jaro3
Jdou otevírat složky a soubory?

to druhé , stejné téma smaž!

Pokud ano:
Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected. Poté klikni na Main (hlavní stránku ) a klikni na Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranění historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit dočasné soubory Windows, vysypat koš atd.

- Pokud používáš jen Google Chrome , tak ATF nemusíš použít.


Stáhni si TFC
http://www.geekstogo.com/forum/files/fi ... -oldtimer/
Otevři soubor a zavři všechny ostatní okna, Klikni na Start k zahájení procesu. Program by neměl trvat dlouho.
Poté by se měl PC restartovat, pokud ne , proveď sám.

Stáhni AdwCleaner (by Xplode)
http://www.bleepingcomputer.com/download/adwcleaner/

Ulož si ho na svojí plochu
Ukonči všechny programy , okna a prohlížeče
Spusť program poklepáním a klikni na „Prohledat-Scan“
Po skenu klikni na „Logfile“ ,objeví log ( jinak je uložen systémovem disku jako AdwCleaner[C?].txt), jeho obsah sem celý vlož.

Stáhni si Malwarebytes' Anti-Malware
- Při instalaci odeber zatržítko u „Povolit bezplatnou zkušební verzi Malwarebytes' Anti-Malware Premium“
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Aktualizace Malwarebytes' Anti-Malware a Spustit aplikaci Malwarebytes' Anti-Malware, pokud jo tak klikni na tlačítko konec
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a klikni na Skenovat nyní a
- po proběhnutí programu se ti objeví hláška vpravo dole tak klikni na Kopírovat do schránky a vlož sem celý log.

- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).

Pokud budou problémy , spusť v nouz. režimu.

Re: Prosím o kontrolu HijackThis, Network service, TrustedInstallerjednotka DVD RW

Napsal: 13 led 2016 16:31
od Telda
Složky a soubory jdou otevírat, kromě dvou jak jsem výše uvedl. Na "D" se mi objevila složka " ac38c7ae4b97e9ebc99edfc6e2", která je uzamčena, nejde smazat, ostranit atd. V této složce je "MPSigStub" z 23.6.2015.

Re: Prosím o kontrolu HijackThis, Network service, TrustedInstallerjednotka DVD RW

Napsal: 13 led 2016 16:42
od jerabina
Dobře, pokračuj tedy instrukcemi.

Re: Prosím o kontrolu HijackThis, Network service, TrustedInstallerjednotka DVD RW

Napsal: 13 led 2016 17:01
od Telda
Zasílám Logfile


# AdwCleaner v5.029 - Logfile created 13/01/2016 at 17:05:31
# Updated 11/01/2016 by Xplode
# Database : 2016-01-12.1 [Server]
# Operating system : Windows 7 Enterprise Service Pack 1 (x86)
# Username : MINA - TELDA-PC
# Running from : C:\Users\MINA\Desktop\3. adwcleaner_5.029.exe
# Option : Scan
# Support : http://toolslib.net/forum

***** [ Services ] *****

Service Found : cherimoya
Service Found : csrcc
Service Found : IBUpdaterService
Service Found : Web Assistant
Service Found : daugava Updater
Service Found : 65f825de-0adc-4791-a1e5-209aa6f7ea76
Service Found : csrcc
Service Found : daugava Updater
Service Found : 65f825de-0adc-4791-a1e5-209aa6f7ea76

***** [ Folders ] *****

Folder Found : C:\Program Files\Complitly
Folder Found : C:\Program Files\Conduit
Folder Found : C:\Program Files\incredibar.com
Folder Found : C:\Program Files\Web Assistant
Folder Found : C:\Program Files\daugava
Folder Found : C:\Program Files\myfree codec
Folder Found : C:\Program Files\daugava
Folder Found : C:\ProgramData\Premium
Folder Found : C:\ProgramData\Tarma Installer
Folder Found : C:\ProgramData\ADDICT-THING
Folder Found : C:\ProgramData\TheBflixUpdater
Folder Found : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\myfree codec
Folder Found : C:\Users\MINA\AppData\Local\Conduit
Folder Found : C:\Users\MINA\AppData\Local\genienext
Folder Found : C:\Users\MINA\AppData\Local\Mobogenie
Folder Found : C:\Users\MINA\AppData\Local\slimware utilities inc
Folder Found : C:\Users\MINA\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlfienamagdnkekbbbocojppncdambda
Folder Found : C:\Users\MINA\AppData\LocalLow\Conduit
Folder Found : C:\Users\MINA\AppData\LocalLow\PriceGong
Folder Found : C:\Users\MINA\AppData\LocalLow\TheBflix
Folder Found : C:\Users\MINA\AppData\LocalLow\{D2020D47-707D-4E26-B4D9-739C4F4C2E9A}
Folder Found : C:\Users\MINA\AppData\Roaming\Complitly
Folder Found : C:\Users\MINA\AppData\Roaming\ExpressFiles
Folder Found : C:\Users\MINA\AppData\Roaming\newnext.me
Folder Found : C:\Users\MINA\AppData\Roaming\Systweak
Folder Found : C:\Users\MINA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BitGuard
Folder Found : C:\Users\MINA\Documents\Mobogenie
Folder Found : C:\Windows\system32\ARFC
Folder Found : C:\Windows\system32\jmdp
Folder Found : C:\Windows\system32\WNLT
Folder Found : C:\Windows\system32\mjcm

***** [ Files ] *****

File Found : C:\END
File Found : C:\Program Files\Mozilla Firefox\user.js
File Found : C:\Users\MINA\AppData\Local\Google\Chrome\User Data\Default\bprotectorpreferences
File Found : C:\Users\MINA\AppData\LocalLow\SkwConfig.bin
File Found : C:\Windows\system32\dmwu.exe
File Found : C:\Windows\system32\ImhxxpComm.dll
File Found : C:\Windows\system32\roboot.exe
File Found : C:\Windows\system32\drivers\cherimoya.sys

***** [ DLL ] *****


***** [ Shortcuts ] *****


***** [ Scheduled tasks ] *****

Task Found : Express FilesUpdate
Task Found : Start Registry Reviver
Task Found : Cawlez
Task Found : TheBflixUpdaterTask{46BAB2DD-95BC-49FE-BFC0-166C8BFFA8C9}
Task Found : TheBflixUpdaterTask{46BAB2DD-95BC-49FE-BFC0-166C8BFFA8C9}
Task Found : Cawlez
Task Found : Start Registry Reviver
Task Found : Start Registry Reviver_Defrag

***** [ Registry ] *****

Value Found : HKCU\Software\Microsoft\Internet Explorer\Main [bprotector start page]
Value Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [bProtectorDefaultScope]
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettings
Value Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [NextLive]
Key Found : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Key Found : HKLM\SOFTWARE\Classes\AppID\Complitly.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Key Found : HKLM\SOFTWARE\Classes\AppID\Extension.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\TbCommonUtils.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\TbHelper.EXE
Key Found : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr
Key Found : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr.1
Key Found : HKLM\SOFTWARE\Classes\escort.escortIEPane
Key Found : HKLM\SOFTWARE\Classes\escort.escortIEPane.1
Key Found : HKLM\SOFTWARE\Classes\esrv.IncredibarESrvc
Key Found : HKLM\SOFTWARE\Classes\esrv.IncredibarESrvc.1
Key Found : HKLM\SOFTWARE\Classes\Extension.ExtensionHelperObject
Key Found : HKLM\SOFTWARE\Classes\Extension.ExtensionHelperObject.1
Key Found : HKLM\SOFTWARE\Classes\I
Key Found : HKLM\SOFTWARE\Classes\Incredibar.dskBnd
Key Found : HKLM\SOFTWARE\Classes\Incredibar.dskBnd.1
Key Found : HKLM\SOFTWARE\Classes\Incredibar.IncredibarHlpr
Key Found : HKLM\SOFTWARE\Classes\Incredibar.IncredibarHlpr.1
Key Found : HKLM\SOFTWARE\Classes\IncredibarApp.appCore
Key Found : HKLM\SOFTWARE\Classes\IncredibarApp.appCore.1
Key Found : HKLM\SOFTWARE\Classes\Prod.cap
Key Found : HKLM\SOFTWARE\Classes\SuggestMeYes.SuggestMeYesBHO
Key Found : HKLM\SOFTWARE\Classes\SuggestMeYes.SuggestMeYesBHO.1
Key Found : HKLM\SOFTWARE\Classes\TbCommonUtils.CommonUtils
Key Found : HKLM\SOFTWARE\Classes\TbCommonUtils.CommonUtils.1
Key Found : HKLM\SOFTWARE\Classes\TbHelper.TbDownloadManager
Key Found : HKLM\SOFTWARE\Classes\TbHelper.TbDownloadManager.1
Key Found : HKLM\SOFTWARE\Classes\TbHelper.TbPropertyManager
Key Found : HKLM\SOFTWARE\Classes\TbHelper.TbPropertyManager.1
Key Found : HKLM\SOFTWARE\Classes\TbHelper.TbRequest
Key Found : HKLM\SOFTWARE\Classes\TbHelper.TbRequest.1
Key Found : HKLM\SOFTWARE\Classes\TbHelper.TbTask
Key Found : HKLM\SOFTWARE\Classes\TbHelper.TbTask.1
Key Found : HKLM\SOFTWARE\Classes\TbHelper.ToolbarHelper
Key Found : HKLM\SOFTWARE\Classes\TbHelper.ToolbarHelper.1
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd
Value Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [daugava]
Key Found : HKCU\SOFTWARE\SYSTWEAK\RegClean Pro
Value Found : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [daugava]
Key Found : HKCU\Software\f55dedde538be42
Key Found : HKLM\SOFTWARE\f55dedde538be42
Value Found : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{336D0C35-8A85-403a-B9D2-65C292C39087}]
Value Found : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{FE1DEEEA-DB6D-44B8-83F0-34FC0F9D1052}]
Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\dlfienamagdnkekbbbocojppncdambda
Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd
Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc
Key Found : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Key Found : HKLM\SOFTWARE\Classes\AppID\{442F13BC-2031-42D5-9520-437F65271153}
Key Found : HKLM\SOFTWARE\Classes\AppID\{4CE516A7-F7AC-4628-B411-8F886DC5733E}
Key Found : HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}
Key Found : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Key Found : HKLM\SOFTWARE\Classes\AppID\{608D3067-77E8-463D-9084-908966806826}
Key Found : HKLM\SOFTWARE\Classes\AppID\{628F3201-34D0-49C0-BB9A-82A26AEFB291}
Key Found : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Key Found : HKLM\SOFTWARE\Classes\AppID\{B302A1BD-0157-49FA-90F1-4E94F22C7B4B}
Key Found : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Key Found : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Key Found : HKLM\SOFTWARE\Classes\AppID\{CFE8AAFD-A0F3-4329-84E9-6B679EC93EC2}
Key Found : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Key Found : HKLM\SOFTWARE\Classes\AppID\{425F4ABF-B8E4-402D-9E49-06E494EB8DBF}
Key Found : HKCU\Software\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{336D0C35-8A85-403A-B9D2-65C292C39087}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{C01315C7-B4E2-4864-B43D-5FAFC414D179}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{C1545464-C77C-4130-A572-1C619E2895FE}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{ED0E67AD-926C-4008-87E5-03CF72AA2A7E}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{EF7FEC6D-451B-4452-9D26-7E10C6B5DB6E}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{F9639E4A-801B-4843-AEE3-03D9DA199E77}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{459DD0F7-0D55-D3DC-67BC-E6BE37E9D762}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{7D8DAE88-BC05-4578-8C29-E541FFBA5757}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{3CCC052E-BDEE-408A-BEA7-90914EF2964B}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{61F47056-E400-43D3-AF1E-AB7DFFD4C4AD}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{E2B98EEA-EE55-4E9B-A8C1-6E5288DF785A}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{5C3B5DAA-0AFF-4808-90FB-0F2F2D760E36}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{7D8DAE88-BC05-4578-8C29-E541FFBA5757}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{ecc63d53-62ce-46ca-b6a5-8a0a6de1107f}
Key Found : HKLM\SOFTWARE\Classes\Interface\{22B0769F-794B-4422-AC84-47B123C8986D}
Key Found : HKLM\SOFTWARE\Classes\Interface\{255E0B2A-D747-4EEF-B7CE-159D73A3656D}
Key Found : HKLM\SOFTWARE\Classes\Interface\{28ED590D-F5ED-4E05-A87F-1D759F1C6169}
Key Found : HKLM\SOFTWARE\Classes\Interface\{45D5B93F-E2ED-4AF2-915E-DCDDBDA8C33C}
Key Found : HKLM\SOFTWARE\Classes\Interface\{771B99AB-636F-4A11-9039-8DFEB927B061}
Key Found : HKLM\SOFTWARE\Classes\Interface\{A36867C6-302D-49FC-9D8E-1EB037B5F1AB}
Key Found : HKLM\SOFTWARE\Classes\Interface\{A8321AA2-2227-40C7-8525-6C2F4E1B0EBE}
Key Found : HKLM\SOFTWARE\Classes\Interface\{AA41A731-6814-4A70-A6F1-C0A20FBBFBD5}
Key Found : HKLM\SOFTWARE\Classes\Interface\{ABBB8A9E-D8AF-40D1-94BE-5175077465FC}
Key Found : HKLM\SOFTWARE\Classes\Interface\{BF737694-56F6-46FA-9FDC-FA99A5B25FAD}
Key Found : HKLM\SOFTWARE\Classes\Interface\{C9AE652B-8C99-4AC2-B556-8B501182874E}
Key Found : HKLM\SOFTWARE\Classes\Interface\{CFCD164E-8AC9-478E-9ECC-B616A932016C}
Key Found : HKLM\SOFTWARE\Classes\Interface\{D5961CC0-B442-4567-8030-67E241EF4CC2}
Key Found : HKLM\SOFTWARE\Classes\Interface\{E450067F-1C93-41A7-928E-07E5C2EEC680}
Key Found : HKLM\SOFTWARE\Classes\Interface\{F977D9F2-4BDC-44A6-B508-7C0284C61EED}
Key Found : HKLM\SOFTWARE\Classes\Interface\{A9582D7B-F24A-441D-9D26-450D58F3CD17}
Key Found : HKLM\SOFTWARE\Classes\Interface\{EE0D8859-2ED4-4B0D-9812-16865B9AFD65}
Key Found : HKLM\SOFTWARE\Classes\Interface\{59B83B12-7660-4FED-9E5F-DD67B4B8264C}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{01BCB858-2F62-4F06-A8F4-48F927C15333}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{1D5A4199-956E-49BC-B89F-6A35C57C0D13}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{48C9C8B0-A546-46C1-A81F-47A31E623E9D}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{CFE8AAFD-A0F3-4329-84E9-6B679EC93EC2}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{14EF423E-3EE8-44AE-9337-07AC3F27B744}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{14EF423E-3EE8-44AE-9337-07AC3F27B744}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{6265CAFB-2688-4AED-A8CD-9B1E7B451C85}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{336D0C35-8A85-403A-B9D2-65C292C39087}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2974C985-8151-4DE5-B23C-B875F0A8522F}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{336D0C35-8A85-403A-B9D2-65C292C39087}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F9639E4A-801B-4843-AEE3-03D9DA199E77}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{336D0C35-8A85-403A-B9D2-65C292C39087}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{F9639E4A-801B-4843-AEE3-03D9DA199E77}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{8567A644-E36C-470C-86CF-9C5B4F37DB81}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D3D233D5-9F6D-436C-B6C7-E63F77503B30}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D7E97865-918F-41E4-9CD0-25AB1C574CE8}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{2974C985-8151-4DE5-B23C-B875F0A8522F}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D3D233D5-9F6D-436C-B6C7-E63F77503B30}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D7E97865-918F-41E4-9CD0-25AB1C574CE8}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{74C36554-31F0-49DD-8857-ED6A64DF45BE}
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{F9639E4A-801B-4843-AEE3-03D9DA199E77}]
Value Found : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{687578B9-7132-4A7A-80E4-30EE31099E03}]
Value Found : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D7E97865-918F-41E4-9CD0-25AB1C574CE8}]
Key Found : HKCU\Software\BABSOLUTION
Key Found : HKCU\Software\Complitly
Key Found : HKCU\Software\DataMngr
Key Found : HKCU\Software\ExpressFiles
Key Found : HKCU\Software\filescout
Key Found : HKCU\Software\Headlight
Key Found : HKCU\Software\IM
Key Found : HKCU\Software\ImInstaller
Key Found : HKCU\Software\InstallCore
Key Found : HKCU\Software\Myfree Codec
Key Found : HKCU\Software\Softonic
Key Found : HKCU\Software\SweetIM
Key Found : HKCU\Software\WNLT
Key Found : HKCU\Software\AppDataLow\Software\Conduit
Key Found : HKCU\Software\AppDataLow\Software\ConduitSearchScopes
Key Found : HKCU\Software\AppDataLow\Software\PriceGong
Key Found : HKLM\SOFTWARE\Babylon
Key Found : HKLM\SOFTWARE\Conduit
Key Found : HKLM\SOFTWARE\DataMngr
Key Found : HKLM\SOFTWARE\ExpressFiles
Key Found : HKLM\SOFTWARE\incredibar.com
Key Found : HKLM\SOFTWARE\Myfree Codec
Key Found : HKLM\SOFTWARE\SimplyGen
Key Found : HKLM\SOFTWARE\SweetIM
Key Found : HKLM\SOFTWARE\Tarma Installer
Key Found : HKLM\SOFTWARE\Web Assistant
Key Found : HKLM\SOFTWARE\WNLT
Key Found : HKLM\SOFTWARE\daugava
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\MyFreeCodec
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{336D0C35-8A85-403a-B9D2-65C292C39087}_is1
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{4FFBB818-B13C-11E0-931D-B2664824019B}_is1
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\incredibar
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WNLT
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{f179b4aa-3249-4e0e-a45a-8519d6bcd424}_is1
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\TheBflixUpdater
Key Found : HKU\.DEFAULT\Software\IM
Key Found : HKU\.DEFAULT\Software\ImInstaller
Key Found : HKU\.DEFAULT\Software\SweetIM
Key Found : HKU\.DEFAULT\Software\WNLT
Data Found : HKCU\Software\Microsoft\Internet Explorer\Main [bProtector Start Page] - hxxp://www1.delta-search.com/?affID=122 ... 94E4F83EA4
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{7DFD8268-7357-4CF2-A6BE-DB119A97B1B5}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{C04B7D22-5AEC-4561-8F49-27F6269208F6}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A}
Data Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [DefaultScope] - {CFF4DB9B-135F-47c0-9269-B4C6572FD61A}

***** [ Web browsers ] *****


########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [17383 bytes] ##########

Re: Prosím o kontrolu HijackThis, Network service, TrustedInstallerjednotka DVD RW

Napsal: 13 led 2016 17:25
od Telda
Malwarebytes Anti-Malware
www.malwarebytes.org

Datum skenování: 13.1.2016
Čas skenování: 17:15
Protokol: výsledek malwa.txt
Správce: Ano

Verze: 2.2.0.1024
Databáze malwaru: v2016.01.13.05
Databáze rootkitů: v2016.01.09.01
Licence: Bezplatná verze
Ochrana proti malwaru: Vypnuto
Ochrana proti škodlivým webovým stránkám: Vypnuto
Ochrana programu: Vypnuto

OS: Windows 7 Service Pack 1
CPU: x86
Souborový systém: NTFS
Uživatel: MINA

Typ skenu: Sken hrozeb
Výsledek: Dokončeno
Prohledaných objektů: 323299
Uplynulý čas: 15 min, 6 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Vypnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto

Procesy: 6
PUP.Optional.Perion, C:\Program Files\daugava\Upbgbeie.exe, 1808, , [250464d5e5b48da9b7020823bf42a25e]
PUP.Optional.Perion, C:\Program Files\daugava\csrcc.exe, 1904, , [b376b58441581521d2e2e9427889837d]
PUP.Optional.SweetPacks, C:\Program Files\Web Assistant\ExtensionUpdaterService.exe, 2244, , [50d9b88159406dc97e6cf83db051a759]
PUP.Optional.Perion, C:\Program Files\daugava\Ejemidvlf.exe, 3524, , [7eab61d859400f27d9df75b67889a65a]
PUP.Optional.Shopperz.BrwsrFlsh, C:\Program Files\daugava\Weekfqwb.exe, 1932, , [e24722174257181efd7cccd527dcc937]
Adware.InstallBrain, C:\Windows\System32\dmwu.exe, 1160, , [9099e9508c0d2a0cc6497ff34fb4659b]

Moduly: 1
PUP.Optional.NextLive, C:\Users\MINA\AppData\Roaming\newnext.me\nengine.dll, , [101985b41188c96d18117cb814ed6a96],

Klíče registru: 98
PUP.Optional.Perion, HKLM\SOFTWARE\CLASSES\TYPELIB\{6265CAFB-2688-4AED-A8CD-9B1E7B451C85}, , [250464d5e5b48da9b7020823bf42a25e],
PUP.Optional.Perion, HKLM\SOFTWARE\CLASSES\INTERFACE\{59B83B12-7660-4FED-9E5F-DD67B4B8264C}, , [250464d5e5b48da9b7020823bf42a25e],
PUP.Optional.Perion, HKLM\SOFTWARE\CLASSES\INTERFACE\{CA83D815-E9CB-4790-9363-AAE02A9DB18E}, , [250464d5e5b48da9b7020823bf42a25e],
PUP.Optional.Perion, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\65f825de-0adc-4791-a1e5-209aa6f7ea76, , [250464d5e5b48da9b7020823bf42a25e],
PUP.Optional.Perion, HKLM\SOFTWARE\CLASSES\TYPELIB\{14EF423E-3EE8-44AE-9337-07AC3F27B744}, , [b376b58441581521d2e2e9427889837d],
PUP.Optional.Perion, HKLM\SOFTWARE\CLASSES\INTERFACE\{A9582D7B-F24A-441D-9D26-450D58F3CD17}, , [b376b58441581521d2e2e9427889837d],
PUP.Optional.Perion, HKLM\SOFTWARE\CLASSES\INTERFACE\{EE0D8859-2ED4-4B0D-9812-16865B9AFD65}, , [b376b58441581521d2e2e9427889837d],
PUP.Optional.Perion, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\csrcc, , [b376b58441581521d2e2e9427889837d],
PUP.Optional.SweetPacks, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\Web Assistant, , [50d9b88159406dc97e6cf83db051a759],
PUP.Optional.Cherimoya, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\cherimoya, , [7faab0893a5f91a53c88597814f0e41c],
PUP.Optional.Montera, HKLM\SOFTWARE\CLASSES\CLSID\{6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99}, , [02273207eaafc472be08f14204fd5ba5],
PUP.Optional.Montera, HKLM\SOFTWARE\CLASSES\Incredibar.IncredibarHlpr.1, , [02273207eaafc472be08f14204fd5ba5],
PUP.Optional.Montera, HKLM\SOFTWARE\CLASSES\Incredibar.IncredibarHlpr, , [02273207eaafc472be08f14204fd5ba5],
PUP.Optional.Montera, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99}, , [02273207eaafc472be08f14204fd5ba5],
PUP.Optional.Montera, HKU\S-1-5-21-3376985173-22173787-2728888509-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99}, , [02273207eaafc472be08f14204fd5ba5],
PUP.Optional.Montera, HKU\S-1-5-21-3376985173-22173787-2728888509-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99}, , [02273207eaafc472be08f14204fd5ba5],
PUP.Optional.Montera, HKLM\SOFTWARE\CLASSES\CLSID\{ED0E67AD-926C-4008-87E5-03CF72AA2A7E}, , [02273207eaafc472be08f14204fd5ba5],
PUP.Optional.Montera, HKLM\SOFTWARE\CLASSES\escort.escortIEPane.1, , [02273207eaafc472be08f14204fd5ba5],
PUP.Optional.Montera, HKLM\SOFTWARE\CLASSES\escort.escortIEPane, , [02273207eaafc472be08f14204fd5ba5],
PUP.Optional.Montera, HKLM\SOFTWARE\CLASSES\CLSID\{6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99}\INPROCSERVER32, , [02273207eaafc472be08f14204fd5ba5],
PUP.Optional.VBates, HKLM\SOFTWARE\CLASSES\APPID\{425F4ABF-B8E4-402D-9E49-06E494EB8DBF}, , [f33654e550499f970b4c7ed17e8404fc],
PUP.Optional.CouponBar, HKLM\SOFTWARE\CLASSES\APPID\{4CE516A7-F7AC-4628-B411-8F886DC5733E}, , [4edb73c6564371c57f550a65ea1851af],
PUP.Optional.Incredibar, HKLM\SOFTWARE\CLASSES\APPID\{608D3067-77E8-463D-9084-908966806826}, , [7faa72c7019877bf5da3364d60a218e8],
PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\CLASSES\APPID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}, , [86a37abf1e7b072fd69bd39b0ff38a76],
PUP.Optional.Complitly, HKLM\SOFTWARE\CLASSES\CLSID\{0FB6A909-6086-458F-BD92-1F8EE10042A0}, , [0623ff3ab1e826105a604a38b64ca55b],
PUP.Optional.Complitly, HKLM\SOFTWARE\CLASSES\TYPELIB\{01BCB858-2F62-4F06-A8F4-48F927C15333}, , [0623ff3ab1e826105a604a38b64ca55b],
PUP.Optional.Complitly, HKLM\SOFTWARE\CLASSES\INTERFACE\{C9AE652B-8C99-4AC2-B556-8B501182874E}, , [0623ff3ab1e826105a604a38b64ca55b],
PUP.Optional.Complitly, HKLM\SOFTWARE\CLASSES\CLSID\{0FB6A909-6086-458F-BD92-1F8EE10042A0}\INPROCSERVER32, , [0623ff3ab1e826105a604a38b64ca55b],
PUP.Optional.Complitly, HKLM\SOFTWARE\CLASSES\SuggestMeYes.SuggestMeYesBHO.1, , [0623ff3ab1e826105a604a38b64ca55b],
PUP.Optional.Complitly, HKLM\SOFTWARE\CLASSES\SuggestMeYes.SuggestMeYesBHO, , [0623ff3ab1e826105a604a38b64ca55b],
PUP.Optional.Complitly, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{0FB6A909-6086-458F-BD92-1F8EE10042A0}, , [0623ff3ab1e826105a604a38b64ca55b],
PUP.Optional.Complitly, HKU\S-1-5-21-3376985173-22173787-2728888509-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{0FB6A909-6086-458F-BD92-1F8EE10042A0}, , [0623ff3ab1e826105a604a38b64ca55b],
PUP.Optional.Complitly, HKU\S-1-5-21-3376985173-22173787-2728888509-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{0FB6A909-6086-458F-BD92-1F8EE10042A0}, , [0623ff3ab1e826105a604a38b64ca55b],
PUP.Optional.StartPage, HKLM\SOFTWARE\CLASSES\CLSID\{336D0C35-8A85-403a-B9D2-65C292C39087}, , [9099b386b2e7c67069cec5b3b74b50b0],
PUP.Optional.StartPage, HKLM\SOFTWARE\CLASSES\TYPELIB\{1D5A4199-956E-49BC-B89F-6A35C57C0D13}, , [9099b386b2e7c67069cec5b3b74b50b0],
PUP.Optional.StartPage, HKLM\SOFTWARE\CLASSES\INTERFACE\{A36867C6-302D-49FC-9D8E-1EB037B5F1AB}, , [9099b386b2e7c67069cec5b3b74b50b0],
PUP.Optional.StartPage, HKLM\SOFTWARE\CLASSES\CLSID\{336D0C35-8A85-403A-B9D2-65C292C39087}\INPROCSERVER32, , [9099b386b2e7c67069cec5b3b74b50b0],
PUP.Optional.StartPage, HKLM\SOFTWARE\CLASSES\Extension.ExtensionHelperObject.1, , [9099b386b2e7c67069cec5b3b74b50b0],
PUP.Optional.StartPage, HKLM\SOFTWARE\CLASSES\Extension.ExtensionHelperObject, , [9099b386b2e7c67069cec5b3b74b50b0],
PUP.Optional.StartPage, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{336D0C35-8A85-403A-B9D2-65C292C39087}, , [9099b386b2e7c67069cec5b3b74b50b0],
PUP.Optional.StartPage, HKU\S-1-5-21-3376985173-22173787-2728888509-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{336D0C35-8A85-403A-B9D2-65C292C39087}, , [9099b386b2e7c67069cec5b3b74b50b0],
PUP.Optional.StartPage, HKU\S-1-5-21-3376985173-22173787-2728888509-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{336D0C35-8A85-403A-B9D2-65C292C39087}, , [9099b386b2e7c67069cec5b3b74b50b0],
PUP.Optional.VBates, HKLM\SOFTWARE\CLASSES\CLSID\{7D8DAE88-BC05-4578-8C29-E541FFBA5757}, , [fc2de554eaaf082eb4a69bb4d72bdc24],
PUP.Optional.Incredibar, HKLM\SOFTWARE\CLASSES\CLSID\{F9639E4A-801B-4843-AEE3-03D9DA199E77}, , [3cedc77278215adc5dbade91867c6c94],
PUP.Optional.Incredibar, HKLM\SOFTWARE\CLASSES\Incredibar.dskBnd.1, , [3cedc77278215adc5dbade91867c6c94],
PUP.Optional.Incredibar, HKLM\SOFTWARE\CLASSES\Incredibar.dskBnd, , [3cedc77278215adc5dbade91867c6c94],
PUP.Optional.Incredibar, HKU\S-1-5-21-3376985173-22173787-2728888509-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{F9639E4A-801B-4843-AEE3-03D9DA199E77}, , [3cedc77278215adc5dbade91867c6c94],
PUP.Optional.Incredibar, HKU\S-1-5-21-3376985173-22173787-2728888509-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{F9639E4A-801B-4843-AEE3-03D9DA199E77}, , [3cedc77278215adc5dbade91867c6c94],
PUP.Optional.OnlineSharing, HKU\S-1-5-21-3376985173-22173787-2728888509-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{8567A644-E36C-470C-86CF-9C5B4F37DB81}, , [1019c475257464d21f42c5b17b87ad53],
PUP.Optional.Yontoo, HKU\S-1-5-21-3376985173-22173787-2728888509-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}, , [b772b58416836bcb68e2caaf738f22de],
PUP.Optional.FunWebProducts, HKU\S-1-5-21-3376985173-22173787-2728888509-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB}, , [e445fb3e7029e65043bcd49e7d85867a],
PUP.Optional.FunWebProducts, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB}, , [e445fb3e7029e65043bcd49e7d85867a],
PUP.Optional.InboxToolBar, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{D3D233D5-9F6D-436C-B6C7-E63F77503B30}, , [59d0e950e2b79c9a006ff97a0af8d927],
PUP.Optional.InboxToolBar, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{D7E97865-918F-41E4-9CD0-25AB1C574CE8}, , [69c0de5b81182b0b7df384efbc463ac6],
Rootkit.Agent.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\cherimoya, , [2bfe3efbdfbade5892237e556e94f10f],
PUP.Optional.Complitly, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{4FFBB818-B13C-11E0-931D-B2664824019B}_is1, , [bf6ae356bcdd8babe365fdaf8083c937],
PUP.Optional.ConduitTB.Gen, HKLM\SOFTWARE\CLASSES\CLSID\{3c471948-f874-49f5-b338-4f214a2ee0b1}, , [250489b0eaafaf87204059547f8441bf],
PUP.Optional.WebAssistant, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{336D0C35-8A85-403a-B9D2-65C292C39087}_is1, , [0128e7521e7bbc7a17f0677a4fb414ec],
PUP.Optional.DataMngr.AppFlsh, HKLM\SOFTWARE\DataMngr, , [74b52f0a8712290dcd1161bf6b9911ef],
PUP.Optional.Shopperz.BrwsrFlsh, HKLM\SOFTWARE\daugava, , [42e70a2f6b2e8da9113d158c6a99a35d],
PUP.Optional.Incredibar, HKLM\SOFTWARE\Incredibar.com, , [fa2f9f9ad9c0a4926037556953b0b947],
PUP.Optional.SweetIM, HKLM\SOFTWARE\SweetIM, , [f633a1980d8cfb3bc3f49842857e9967],
PUP.Optional.Incredibar, HKLM\SOFTWARE\CLASSES\esrv.IncredibarESrvc, , [e247ec4d8217b482d1bf2d91e02316ea],
PUP.Optional.Incredibar, HKLM\SOFTWARE\CLASSES\esrv.IncredibarESrvc.1, , [69c0ca6f7c1de65020708c32e91a09f7],
PUP.Optional.Complitly, HKLM\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\dlfienamagdnkekbbbocojppncdambda, , [b87181b8a6f3fd393515eebe31d2738d],
PUP.Optional.Incredibar, HKLM\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\dlnembnfbcpjnepmfjmngjenhhajpdfd, , [0d1cce6bb9e066d0a2f337873bc8629e],
PUP.Optional.Shopperz.BrwsrFlsh, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\Cawlez, , [ad7cff3a7623b87eaba40998d52e50b0],
PUP.Optional.ExpressFiles, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\Express FilesUpdate, , [54d57abf0d8cda5c3792f7d333cfc33d],
PUP.Optional.RegistryReviver, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\Start Registry Reviver, , [ea3fa99009903afc8e0abe12996a619f],
PUP.Optional.RegistryReviver, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\Start Registry Reviver_Defrag, , [1b0e58e1f4a53df99206923e02019a66],
PUP.Optional.Shopperz.BrwsrFlsh, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{F179B4AA-3249-4E0E-A45A-8519D6BCD424}_IS1, , [41e8db5ef2a7320408581e831ee5f709],
PUP.Optional.InstallBrain, HKLM\SOFTWARE\WNLT, , [1217d36661384ceabf6cb10e7093d62a],
PUP.Optional.Shopperz.BrwsrFlsh, HKLM\SOFTWARE\WOW6432NODE\daugava, , [c2673ffa9cfd76c092d929787c8731cf],
PUP.Optional.Shopperz.BrwsrFlsh, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\daugava Updater, , [e24722174257181efd7cccd527dcc937],
Adware.InstallBrain, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\IBUpdaterService, , [9099e9508c0d2a0cc6497ff34fb4659b],
PUP.Optional.SweetIM, HKU\S-1-5-18\SOFTWARE\SweetIM, , [b9703900adecc472d4dec9113ac93cc4],
PUP.Optional.InstallBrain, HKU\S-1-5-18\SOFTWARE\WNLT, , [40e9c67389101620a4851ea144bf9d63],
PUP.Optional.DataMngr.AppFlsh, HKU\S-1-5-21-3376985173-22173787-2728888509-1000\SOFTWARE\DataMngr, , [f93072c7c9d0d56102dab868af553fc1],
PUP.Optional.FileScout, HKU\S-1-5-21-3376985173-22173787-2728888509-1000\SOFTWARE\FileScout, , [89a0ed4c5a3f7abc6deb8d2a758eec14],
PUP.Optional.InstallCore, HKU\S-1-5-21-3376985173-22173787-2728888509-1000\SOFTWARE\InstallCore, , [9099d564bedb01357db2615e59aaeb15],
PUP.Optional.SweetIM, HKU\S-1-5-21-3376985173-22173787-2728888509-1000\SOFTWARE\SweetIM, , [53d67fba960380b69220f6e42fd4e719],
PUP.Optional.Conduit, HKU\S-1-5-21-3376985173-22173787-2728888509-1000\SOFTWARE\APPDATALOW\SOFTWARE\ConduitSearchScopes, , [d1581f1a663340f670d18429cf3432ce],
PUP.Optional.PriceGong, HKU\S-1-5-21-3376985173-22173787-2728888509-1000\SOFTWARE\APPDATALOW\SOFTWARE\PriceGong, , [e5443ffae0b90234264fbf0f18ebd62a],
PUP.Optional.Babylon, HKU\S-1-5-21-3376985173-22173787-2728888509-1000\SOFTWARE\BABSOLUTION\Updater, , [2dfc7dbc7a1fa29494c6d7ce83805da3],
PUP.Optional.Conduit, HKU\S-1-5-21-3376985173-22173787-2728888509-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{7DFD8268-7357-4CF2-A6BE-DB119A97B1B5}, , [e445cb6e64351c1a5cebc0ed9c677789],
PUP.Optional.Incredibar, HKU\S-1-5-21-3376985173-22173787-2728888509-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{CFF4DB9B-135F-47C0-9269-B4C6572FD61A}, , [2dfc2e0bcccd7db94f440bb31be8bd43],
PUP.Optional.BProtector, HKU\S-1-5-21-3376985173-22173787-2728888509-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\bProtectSettings, , [e54457e21b7eba7c562e2f78f70c3ac6],
PUP.Optional.RegCleanerPro, HKU\S-1-5-21-3376985173-22173787-2728888509-1000\SOFTWARE\SYSTWEAK\RegClean Pro, , [32f70b2e11881a1ca8e519b7887b9d63],
PUP.Optional.InstallBrain, HKU\S-1-5-21-3376985173-22173787-2728888509-1000\SOFTWARE\WNLT, , [83a605341d7cc86ee247c6f9ad569a66],
PUP.Optional.Incredibar, HKLM\SOFTWARE\CLASSES\CLSID\{EF7FEC6D-451B-4452-9D26-7E10C6B5DB6E}, , [a58424150b8e60d67da4c8c8cd3506fa],
PUP.Optional.Incredibar, HKLM\SOFTWARE\CLASSES\IncredibarApp.appCore.1, , [a58424150b8e60d67da4c8c8cd3506fa],
PUP.Optional.Incredibar, HKLM\SOFTWARE\CLASSES\IncredibarApp.appCore, , [a58424150b8e60d67da4c8c8cd3506fa],
PUP.Optional.Incredibar, HKLM\SOFTWARE\CLASSES\CLSID\{C1545464-C77C-4130-A572-1C619E2895FE}, , [a58424150b8e60d67da4c8c8cd3506fa],
PUP.Optional.Incredibar, HKLM\SOFTWARE\CLASSES\I, , [a58424150b8e60d67da4c8c8cd3506fa],
PUP.Optional.Incredibar, HKLM\SOFTWARE\CLASSES\TYPELIB\{CFE8AAFD-A0F3-4329-84E9-6B679EC93EC2}, , [a58424150b8e60d67da4c8c8cd3506fa],
PUP.Optional.Incredibar, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\incredibar, , [a58424150b8e60d67da4c8c8cd3506fa],
PUP.Optional.InstallBrain, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\WNLT, , [6fba45f4c6d33204d39a06a7b34fe917],
PUP.Optional.TheBflixUpdater, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\TheBflixUpdater, , [3feaac8d5d3c290d757bcfedc240da26],

Hodnoty registru: 45
PUP.Optional.Perion, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|daugava, C:\Program Files\daugava\Ejemidvlf.exe, , [7eab61d859400f27d9df75b67889a65a]
PUP.Optional.NextLive, HKU\S-1-5-21-3376985173-22173787-2728888509-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|NextLive, C:\Windows\system32\rundll32.exe "C:\Users\MINA\AppData\Roaming\newnext.me\nengine.dll",EntryPoint -m l, , [101985b41188c96d18117cb814ed6a96]
PUP.Optional.StartPage, HKLM\SOFTWARE\MOZILLA\FIREFOX\EXTENSIONS|{336D0C35-8A85-403A-B9D2-65C292C39087}, C:\Program Files\Web Assistant\Firefox, , [9099b386b2e7c67069cec5b3b74b50b0]
PUP.Optional.Incredibar, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR|{F9639E4A-801B-4843-AEE3-03D9DA199E77}, Incredibar Toolbar, , [3cedc77278215adc5dbade91867c6c94]
PUP.Optional.InboxToolBar, HKU\S-1-5-21-3376985173-22173787-2728888509-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\WEBBROWSER|{D7E97865-918F-41E4-9CD0-25AB1C574CE8}, exé׏‘äAśĐ%« WLč, , [69c0de5b81182b0b7df384efbc463ac6]
PUP.Optional.InboxToolBar, HKU\S-1-5-21-3376985173-22173787-2728888509-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\WEBBROWSER\{D7E97865-918F-41E4-9CD0-25AB1C574CE8}, , [250444f52574c57149279cd76f930cf4],
PUP.Optional.uTorrentTB, HKU\S-1-5-21-3376985173-22173787-2728888509-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\WEBBROWSER\{687578B9-7132-4A7A-80E4-30EE31099E03}, , [eb3e73c62970191decc76f0932d06a96],
PUP.Optional.uTorrentTB, HKU\S-1-5-21-3376985173-22173787-2728888509-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\WEBBROWSER|{687578B9-7132-4A7A-80E4-30EE31099E03}, ąxuh2qzJ€ä0î1 ž , , [eb3e73c62970191decc76f0932d06a96]
PUP.Optional.uTorrentTB, HKU\S-1-5-21-3376985173-22173787-2728888509-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\URLSEARCHHOOKS|{687578B9-7132-4A7A-80E4-30EE31099E03}, , [eb3e73c62970191decc76f0932d06a96],
PUP.Optional.uTorrentTB, HKU\S-1-5-21-3376985173-22173787-2728888509-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\URLSEARCHHOOKS\{687578b9-7132-4a7a-80e4-30ee31099e03}, , [ef3a5adfaeebc373eac96513d52d926e],
PUP.Optional.Incredibar, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\{F9639E4A-801B-4843-AEE3-03D9DA199E77}, , [dd4c8dac8e0b94a20f083639c042b947],
PUP.Optional.StartPage, HKLM\SOFTWARE\MOZILLA\FIREFOX\EXTENSIONS\{336D0C35-8A85-403a-B9D2-65C292C39087}, , [79b076c3acede05610271f599072e61a],
PUP.Optional.WebAssistant, HKLM\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\dlnembnfbcpjnepmfjmngjenhhajpdfd|path, C:\Program Files\Web Assistant\source.crx, , [e049ed4c8217360088a2993216ece11f]
PUP.Optional.Shopperz.BrwsrFlsh, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{f179b4aa-3249-4e0e-a45a-8519d6bcd424}_is1|Inno Setup: App Path, C:\Program Files\daugava, , [41e8db5ef2a7320408581e831ee5f709]
PUP.Optional.Shopperz.BrwsrFlsh, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{f179b4aa-3249-4e0e-a45a-8519d6bcd424}_is1|InstallLocation, C:\Program Files\daugava\, , [fe2b3bfed3c6f93d243cced3877c11ef]
PUP.Optional.Shopperz.BrwsrFlsh, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{f179b4aa-3249-4e0e-a45a-8519d6bcd424}_is1|Inno Setup: Icon Group, daugava, , [fb2e66d38e0b2e083f214c550bf814ec]
PUP.Optional.Shopperz.BrwsrFlsh, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{f179b4aa-3249-4e0e-a45a-8519d6bcd424}_is1|DisplayName, daugava 2.0.0.701, , [fe2b5ddc1782c2742d33752c4ab913ed]
PUP.Optional.Shopperz.BrwsrFlsh, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{f179b4aa-3249-4e0e-a45a-8519d6bcd424}_is1|UninstallString, "C:\Program Files\daugava\unins000.exe", , [50d90e2b5247f34373ed08990ff45ca4]
PUP.Optional.Shopperz.BrwsrFlsh, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{f179b4aa-3249-4e0e-a45a-8519d6bcd424}_is1|QuietUninstallString, "C:\Program Files\daugava\unins000.exe" /SILENT, , [7dacd663d5c415215709425f23e0619f]
PUP.Optional.Shopperz.BrwsrFlsh, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{f179b4aa-3249-4e0e-a45a-8519d6bcd424}_is1|Publisher, daugava, , [c3660a2f287103330957821fb54eca36]
PUP.Optional.WebAssistant, HKLM\SOFTWARE\MOZILLA\FIREFOX\EXTENSIONS|{FE1DEEEA-DB6D-44b8-83F0-34FC0F9D1052}, C:\Program Files\Web Assistant\Firefox, , [999063d6099038fee91f459c26ddc838]
PUP.Optional.InstallBrain, HKLM\SOFTWARE\WNLT|PDV, [BLACKLIST=1], , [1217d36661384ceabf6cb10e7093d62a]
PUP.Optional.Shopperz.BrwsrFlsh, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\65f825de-0adc-4791-a1e5-209aa6f7ea76|ImagePath, "C:\Program Files\daugava\Upbgbeie.exe", , [db4eff3a0891dd59bfb4c5dcc53e39c7]
PUP.Optional.Shopperz.BrwsrFlsh, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\CSRCC|ImagePath, "C:\Program Files\daugava\csrcc.exe", , [a38664d5a4f5f4421464752c44bfa15f]
PUP.Optional.Perion, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SHAREDACCESS\PARAMETERS\FIREWALLPOLICY\FIREWALLRULES|{2DFA5B8D-DF50-4A74-BFD3-F7B9F3146A1C}, v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Private|App=C:\Windows\System32\dmwu.exe|Name=dmwu|, , [cf5aaf8ab9e0dc5ab87d001b48bcaa56]
PUP.Optional.Perion, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SHAREDACCESS\PARAMETERS\FIREWALLPOLICY\FIREWALLRULES|{F8D5B115-B14D-4981-8F9A-C9CE0D7EEBF5}, v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|App=C:\Windows\System32\dmwu.exe|Name=dmwu|, , [54d53bfec7d2d85e13220b10030133cd]
PUP.Optional.Perion, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SHAREDACCESS\PARAMETERS\FIREWALLPOLICY\FIREWALLRULES|{DB79E06B-B27B-4FB7-9BB4-CB7BF92F4EA1}, v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Private|App=C:\Windows\System32\ARFC\wrtc.exe|Name=wrtc|, , [86a378c1cdccd2641af58894ab5934cc]
PUP.Optional.Perion, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SHAREDACCESS\PARAMETERS\FIREWALLPOLICY\FIREWALLRULES|{BC781991-E6D2-4538-B9C0-3168AE532D72}, v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|App=C:\Windows\System32\ARFC\wrtc.exe|Name=wrtc|, , [b574e0596b2ebd791ef175a7679df60a]
PUP.Optional.Perion, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SHAREDACCESS\PARAMETERS\FIREWALLPOLICY\FIREWALLRULES|{57AFED0E-0297-4648-8519-DDA2E0407F83}, v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Public|App=C:\Windows\System32\dmwu.exe|Name=dmwu|, , [f4352514cfca7cbaf0459f7c9d67aa56]
PUP.Optional.Perion, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SHAREDACCESS\PARAMETERS\FIREWALLPOLICY\FIREWALLRULES|{DF654534-44C2-4B84-B83C-DEC653122E9E}, v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Public|App=C:\Windows\System32\dmwu.exe|Name=dmwu|, , [73b6e752ebae8fa7dd585cbf8d7714ec]
PUP.Optional.Perion, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SHAREDACCESS\PARAMETERS\FIREWALLPOLICY\FIREWALLRULES|{FE96ED0D-FAA6-4BC1-A64A-0C9ADD77784E}, v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Public|App=C:\Windows\System32\ARFC\wrtc.exe|Name=wrtc|, , [66c3c1786f2ac76f000f1705d82c34cc]
PUP.Optional.Perion, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SHAREDACCESS\PARAMETERS\FIREWALLPOLICY\FIREWALLRULES|{46DDAC1B-1CE6-4C8D-BF99-D7986F6328BD}, v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Public|App=C:\Windows\System32\ARFC\wrtc.exe|Name=wrtc|, , [e1482e0b30692c0aec23ce4e14f006fa]
PUP.Optional.WebAssistant, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\WEB ASSISTANT|ImagePath, C:\Program Files\Web Assistant\ExtensionUpdaterService.exe, , [3aef83b6f5a43bfb922e0fde02014bb5]
PUP.Optional.InstallBrain, HKU\S-1-5-18\SOFTWARE\WNLT|URL, MYSTART, , [40e9c67389101620a4851ea144bf9d63]
PUP.Optional.BProtector, HKU\S-1-5-21-3376985173-22173787-2728888509-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|bProtector Start Page, http://www1.delta-search.com/?affID=122 ... 94E4F83EA4, , [e148bd7c6c2d2e08bdc631e26a9a9e62]
PUP.Optional.BProtector, HKU\S-1-5-21-3376985173-22173787-2728888509-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|bProtectorDefaultScope, {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}, , [4ddc9e9bbcdd9a9cd1b3060dc04438c8]
PUP.Optional.Conduit, HKU\S-1-5-21-3376985173-22173787-2728888509-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{7DFD8268-7357-4CF2-A6BE-DB119A97B1B5}|URL, http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT1210541&CUI=UN59033917212712210&UM=1, , [e445cb6e64351c1a5cebc0ed9c677789]
PUP.Optional.Conduit, HKU\S-1-5-21-3376985173-22173787-2728888509-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{7DFD8268-7357-4CF2-A6BE-DB119A97B1B5}|FaviconURL, http://search.conduit.com/favicon.ico, , [47e266d3eaaf7abc2a1dbfeef70cd52b]
PUP.Optional.Conduit, HKU\S-1-5-21-3376985173-22173787-2728888509-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{7DFD8268-7357-4CF2-A6BE-DB119A97B1B5}|SuggestionsURL_JSON, http://suggest.search.conduit.com/CSugg ... hx?prefix={searchTerms}, , [e841d16895045ed853f46a43aa59f20e]
PUP.Optional.Incredibar, HKU\S-1-5-21-3376985173-22173787-2728888509-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A}|FaviconURL, http://mystart.incredibar.com/favicon.ico, , [2dfc2e0bcccd7db94f440bb31be8bd43]
PUP.Optional.Incredibar, HKU\S-1-5-21-3376985173-22173787-2728888509-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A}|FaviconURLFallback, http://mystart.incredibar.com/favicon.ico, , [2dfca5941d7cfe38345f3d8125dea15f]
PUP.Optional.Incredibar, HKU\S-1-5-21-3376985173-22173787-2728888509-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A}|TopResultURL, http://mystart.incredibar.com/?a=6PQXER ... kw&search={searchTerms}&i=26&did=10963, , [e7422b0e84155bdb2c67e4da9b68ec14]
PUP.Optional.Incredibar, HKU\S-1-5-21-3376985173-22173787-2728888509-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A}|TopResultURLFallback, http://mystart.incredibar.com/?a=6PQXER ... kw&search={searchTerms}&i=26&did=10963, , [c267d3665b3e04320c87833ba45f0df3]
PUP.Optional.Incredibar, HKU\S-1-5-21-3376985173-22173787-2728888509-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A}|URL, http://mystart.incredibar.com/?a=6PQXER ... kw&search={searchTerms}&i=26&did=10963, , [60c9e2573366aa8c9ff43688e023bb45]
PUP.Optional.InstallBrain, HKU\S-1-5-21-3376985173-22173787-2728888509-1000\SOFTWARE\WNLT|URL, MYSTART, , [83a605341d7cc86ee247c6f9ad569a66]

Data registru: 1
PUP.Optional.StartPage, HKU\S-1-5-21-3376985173-22173787-2728888509-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|bProtector Start Page, http://www1.delta-search.com/?affID=122 ... 94E4F83EA4, Dobré: (www.google.com), Špatné: (http://www1.delta-search.com/?affID=122 ... 94E4F83EA4),,[c5642316fd9c3ef865e66e3e3fc58878]

Složky: 67
PUP.Optional.Complitly, C:\Program Files\Complitly, , [bf6ae356bcdd8babe365fdaf8083c937],
PUP.Optional.Complitly, C:\Program Files\Complitly\chrome, , [bf6ae356bcdd8babe365fdaf8083c937],
PUP.Optional.Complitly, C:\Program Files\Complitly\support@Complitly.com, , [bf6ae356bcdd8babe365fdaf8083c937],
PUP.Optional.Complitly, C:\Program Files\Complitly\support@Complitly.com\chrome, , [bf6ae356bcdd8babe365fdaf8083c937],
PUP.Optional.Complitly, C:\Program Files\Complitly\support@Complitly.com\chrome\content, , [bf6ae356bcdd8babe365fdaf8083c937],
PUP.Optional.Complitly, C:\Program Files\Complitly\support@Complitly.com\defaults, , [bf6ae356bcdd8babe365fdaf8083c937],
PUP.Optional.Complitly, C:\Program Files\Complitly\support@Complitly.com\defaults\preferences, , [bf6ae356bcdd8babe365fdaf8083c937],
PUP.Optional.ConduitTB.Gen, C:\Program Files\Conduit\Community Alerts, , [250489b0eaafaf87204059547f8441bf],
PUP.Optional.ConduitTB.Gen, C:\Program Files\Conduit, , [250489b0eaafaf87204059547f8441bf],
PUP.Optional.WebAssistant, C:\Program Files\Web Assistant\Firefox, , [0128e7521e7bbc7a17f0677a4fb414ec],
PUP.Optional.WebAssistant, C:\Program Files\Web Assistant\Firefox\chrome, , [0128e7521e7bbc7a17f0677a4fb414ec],
PUP.Optional.WebAssistant, C:\Program Files\Web Assistant\Firefox\chrome\content, , [0128e7521e7bbc7a17f0677a4fb414ec],
PUP.Optional.WebAssistant, C:\Program Files\Web Assistant\Firefox\chrome\content\libraries, , [0128e7521e7bbc7a17f0677a4fb414ec],
PUP.Optional.WebAssistant, C:\Program Files\Web Assistant\Firefox\chrome\content\resources, , [0128e7521e7bbc7a17f0677a4fb414ec],
PUP.Optional.WebAssistant, C:\Program Files\Web Assistant\Firefox\chrome\locale, , [0128e7521e7bbc7a17f0677a4fb414ec],
PUP.Optional.WebAssistant, C:\Program Files\Web Assistant\Firefox\chrome\locale\en-US, , [0128e7521e7bbc7a17f0677a4fb414ec],
PUP.Optional.WebAssistant, C:\Program Files\Web Assistant\Firefox\chrome\skin, , [0128e7521e7bbc7a17f0677a4fb414ec],
PUP.Optional.WebAssistant, C:\Program Files\Web Assistant\Firefox\defaults, , [0128e7521e7bbc7a17f0677a4fb414ec],
PUP.Optional.WebAssistant, C:\Program Files\Web Assistant\Firefox\defaults\preferences, , [0128e7521e7bbc7a17f0677a4fb414ec],
PUP.Optional.WebAssistant, C:\Program Files\Web Assistant, , [0128e7521e7bbc7a17f0677a4fb414ec],
PUP.Optional.WebAssistant, C:\Program Files\Web Assistant\libraries, , [0128e7521e7bbc7a17f0677a4fb414ec],
PUP.Optional.WebAssistant, C:\Program Files\Web Assistant\resources, , [0128e7521e7bbc7a17f0677a4fb414ec],
PUP.Optional.VBates, C:\Windows\System32\config\systemprofile\AppData\LocalLow\Company\Product\1.0, , [01282a0fe0b90f27bd5068877e856b95],
PUP.Optional.VBates, C:\Windows\System32\config\systemprofile\AppData\LocalLow\Company\Product, , [01282a0fe0b90f27bd5068877e856b95],
PUP.Optional.Incredibar, C:\Program Files\Incredibar.com, , [a58424150b8e60d67da4c8c8cd3506fa],
PUP.Optional.Incredibar, C:\Program Files\Incredibar.com\incredibar, , [a58424150b8e60d67da4c8c8cd3506fa],
PUP.Optional.Incredibar, C:\Program Files\Incredibar.com\incredibar\1.5.11.14, , [a58424150b8e60d67da4c8c8cd3506fa],
PUP.Optional.Incredibar, C:\Program Files\Incredibar.com\incredibar\1.5.11.14\bh, , [a58424150b8e60d67da4c8c8cd3506fa],
PUP.Optional.Shopperz.BrwsrFlsh, C:\Program Files\daugava, , [22079c9d3861d95dd56addbb0101aa56],
PUP.Optional.Shopperz.BrwsrFlsh, C:\Program Files\daugava\Firefox, , [22079c9d3861d95dd56addbb0101aa56],
PUP.Optional.Shopperz.BrwsrFlsh, C:\Program Files\daugava\Firefox\chrome, , [22079c9d3861d95dd56addbb0101aa56],
PUP.Optional.Shopperz.BrwsrFlsh, C:\Program Files\daugava\Firefox\chrome\content, , [22079c9d3861d95dd56addbb0101aa56],
PUP.Optional.Shopperz.BrwsrFlsh, C:\Program Files\daugava\Firefox\chrome\content\libraries, , [22079c9d3861d95dd56addbb0101aa56],
PUP.Optional.Shopperz.BrwsrFlsh, C:\Program Files\daugava\Firefox\chrome\content\resources, , [22079c9d3861d95dd56addbb0101aa56],
PUP.Optional.Shopperz.BrwsrFlsh, C:\Program Files\daugava\Firefox\chrome\locale, , [22079c9d3861d95dd56addbb0101aa56],
PUP.Optional.Shopperz.BrwsrFlsh, C:\Program Files\daugava\Firefox\chrome\locale\en-US, , [22079c9d3861d95dd56addbb0101aa56],
PUP.Optional.Shopperz.BrwsrFlsh, C:\Program Files\daugava\Firefox\chrome\skin, , [22079c9d3861d95dd56addbb0101aa56],
PUP.Optional.Shopperz.BrwsrFlsh, C:\Program Files\daugava\Firefox\defaults, , [22079c9d3861d95dd56addbb0101aa56],
PUP.Optional.Shopperz.BrwsrFlsh, C:\Program Files\daugava\Firefox\defaults\preferences, , [22079c9d3861d95dd56addbb0101aa56],
PUP.Optional.Shopperz.BrwsrFlsh, C:\Program Files\daugava\libraries, , [22079c9d3861d95dd56addbb0101aa56],
PUP.Optional.Shopperz.BrwsrFlsh, C:\Program Files\daugava\resources, , [22079c9d3861d95dd56addbb0101aa56],
PUP.Optional.InstallMate, C:\ProgramData\InstallMate\{B01A9061-55EF-4AEF-9983-6BD5B2D76491}, , [0821b6832a6f8aace86e6236ff035aa6],
PUP.Optional.InstallMate, C:\ProgramData\InstallMate\{B01A9061-55EF-4AEF-9983-6BD5B2D76491}\7723387C8593EA63, , [0821b6832a6f8aace86e6236ff035aa6],
PUP.Optional.AddictThing, C:\ProgramData\ADDICT-THING, , [9396af8a68310a2c3d9780187f836c94],
PUP.Optional.Complitly, C:\Users\MINA\AppData\Roaming\Complitly, , [70b94ced5f3a191df1085d404db5cd33],
PUP.Optional.Complitly, C:\Users\MINA\AppData\Roaming\Complitly\64, , [70b94ced5f3a191df1085d404db5cd33],
PUP.Optional.Complitly, C:\Users\MINA\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlfienamagdnkekbbbocojppncdambda, , [f6331425afea87afaf4da2fba75b8977],
PUP.Optional.Complitly, C:\Users\MINA\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlfienamagdnkekbbbocojppncdambda\1.1_0, , [f6331425afea87afaf4da2fba75b8977],
PUP.Optional.Complitly, C:\Users\MINA\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlfienamagdnkekbbbocojppncdambda\1.1_0\icons, , [f6331425afea87afaf4da2fba75b8977],
PUP.Optional.InstallBrain, C:\Windows\System32\WNLT\Installation, , [6fba45f4c6d33204d39a06a7b34fe917],
PUP.Optional.InstallBrain, C:\Windows\System32\WNLT\Installation\Uninstall, , [6fba45f4c6d33204d39a06a7b34fe917],
PUP.Optional.NextLive, C:\Users\MINA\AppData\Roaming\newnext.me, , [b37653e6d0c98aac9ce1e2d1679b4fb1],
PUP.Optional.NextLive, C:\Users\MINA\AppData\Roaming\newnext.me\cache, , [b37653e6d0c98aac9ce1e2d1679b4fb1],
PUP.Optional.PriceGong, C:\Users\MINA\AppData\LocalLow\PriceGong, , [b970e653adec1323e0a9674e2ad853ad],
PUP.Optional.PriceGong, C:\Users\MINA\AppData\LocalLow\PriceGong\Data, , [b970e653adec1323e0a9674e2ad853ad],
PUP.Optional.TheBflix, C:\Users\MINA\AppData\LocalLow\TheBflix, , [72b7fa3fbfdae5518d627448c24054ac],
PUP.Optional.TheBflixUpdater, C:\ProgramData\TheBflixUpdater, , [3feaac8d5d3c290d757bcfedc240da26],
PUP.Optional.TheBflixUpdater, C:\ProgramData\TheBflixUpdater\downloads, , [3feaac8d5d3c290d757bcfedc240da26],
PUP.Optional.VBates, C:\Users\MINA\AppData\LocalLow\{D2020D47-707D-4E26-B4D9-739C4F4C2E9A}, , [42e7ee4b5c3d4fe7028b883a9a6836ca],
PUP.Optional.VBates, C:\Users\MINA\AppData\LocalLow\{D2020D47-707D-4E26-B4D9-739C4F4C2E9A}\{FBC0652C-7B29-4FB6-8ADA-91F54B267AD4}, , [42e7ee4b5c3d4fe7028b883a9a6836ca],
PUP.Optional.VBates, C:\Users\MINA\AppData\LocalLow\{D2020D47-707D-4E26-B4D9-739C4F4C2E9A}\{FBC0652C-7B29-4FB6-8ADA-91F54B267AD4}\1.5, , [42e7ee4b5c3d4fe7028b883a9a6836ca],
PUP.Optional.VBates, C:\Windows\System32\config\systemprofile\AppData\LocalLow\{D2020D47-707D-4E26-B4D9-739C4F4C2E9A}, , [d653e455c4d563d3a8e508baf40e6898],
PUP.Optional.VBates, C:\Windows\System32\config\systemprofile\AppData\LocalLow\{D2020D47-707D-4E26-B4D9-739C4F4C2E9A}\{FBC0652C-7B29-4FB6-8ADA-91F54B267AD4}, , [d653e455c4d563d3a8e508baf40e6898],
PUP.Optional.VBates, C:\Windows\System32\config\systemprofile\AppData\LocalLow\{D2020D47-707D-4E26-B4D9-739C4F4C2E9A}\{FBC0652C-7B29-4FB6-8ADA-91F54B267AD4}\1.5, , [d653e455c4d563d3a8e508baf40e6898],
PUP.Optional.Yontoo, C:\ProgramData\Tarma Installer, , [f732b485d1c8f3436deabb0b60a2b54b],
PUP.Optional.Yontoo, C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}, , [f732b485d1c8f3436deabb0b60a2b54b],
PUP.Optional.Yontoo, C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\Cache, , [f732b485d1c8f3436deabb0b60a2b54b],

Soubory: 136
PUP.Optional.Perion, C:\Program Files\daugava\Upbgbeie.exe, , [250464d5e5b48da9b7020823bf42a25e],
PUP.Optional.Perion, C:\Program Files\daugava\csrcc.exe, , [b376b58441581521d2e2e9427889837d],
PUP.Optional.SweetPacks, C:\Program Files\Web Assistant\ExtensionUpdaterService.exe, , [50d9b88159406dc97e6cf83db051a759],
PUP.Optional.Perion, C:\Program Files\daugava\Ejemidvlf.exe, , [7eab61d859400f27d9df75b67889a65a],
PUP.Optional.NextLive, C:\Users\MINA\AppData\Roaming\newnext.me\nengine.dll, , [101985b41188c96d18117cb814ed6a96],
PUP.Optional.Cherimoya, C:\Windows\System32\drivers\cherimoya.sys, , [7faab0893a5f91a53c88597814f0e41c],
PUP.Optional.Montera, C:\Program Files\Incredibar.com\incredibar\1.5.11.14\bh\incredibar.dll, , [02273207eaafc472be08f14204fd5ba5],
PUP.Optional.Complitly, C:\Users\MINA\AppData\Roaming\Complitly\Complitly.dll, , [0623ff3ab1e826105a604a38b64ca55b],
PUP.Optional.StartPage, C:\Program Files\Web Assistant\Extension32.dll, , [9099b386b2e7c67069cec5b3b74b50b0],
PUP.Optional.Incredibar, C:\Program Files\Incredibar.com\incredibar\1.5.11.14\incredibarTlbr.dll, , [3cedc77278215adc5dbade91867c6c94],
PUP.Optional.Yontoo, C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\_Setupx.dll, , [2bfeff3a4752ab8b642a03accd34a45c],
PUP.Optional.Perion, C:\Program Files\daugava\Dpfvedc.dll, , [49e0e158a5f47eb87a3c5ecd05fce917],
PUP.Optional.Perion, C:\Program Files\daugava\Dpfvedc64.dll, , [a881ac8db0e9251127b6aa81639e9e62],
PUP.Optional.Perion, C:\Program Files\daugava\Ejemidvlf64.exe, , [0128f74234650b2bb3aec47c60a1629e],
PUP.Optional.Perion, C:\Program Files\daugava\Eqxlolnp.dll, , [ea3f7cbd7c1d072fbdfaff2c4eb3be42],
PUP.Optional.Perion, C:\Program Files\daugava\Esrqqdf.dll, , [36f3d762960350e63aa679b2847d758b],
PUP.Optional.Perion, C:\Program Files\daugava\Esrqqdf64.dll, , [a9806bce5742ce68cf128ba0f60bcc34],
PUP.Optional.Perion, C:\Program Files\daugava\nfregdrv32.exe, , [73b697a2792053e3d38f4df3907120e0],
PUP.Optional.Perion, C:\Program Files\daugava\Tuugvuiog.dll, , [b376d069f2a762d4ac3259d25ba6b749],
PUP.Optional.Perion, C:\Program Files\daugava\Tuugvuiog64.dll, , [6fbad16835648aac0cd389a20ef3b050],
PUP.Optional.Perion, C:\Program Files\daugava\Wqzaon.dll, , [8a9f3603c5d4cf67169f8ba026db867a],
PUP.Optional.Perion, C:\Program Files\daugava\Wqzaon64.dll, , [7bae74c5b4e551e56775e447e819fe02],
PUP.Optional.RegCleanPro, C:\Windows\System32\roboot.exe, , [b47589b00d8cb97d5ee034975ea646ba],
PUP.Optional.NextLive, C:\Users\MINA\AppData\Local\genienext\nengine.dll, , [7bae3ffa138683b3cb5e072d16ebb14f],
PUP.Optional.ExpressFiles, C:\Windows\System32\Tasks\Express FilesUpdate, , [0f1a4aefd0c967cffacd0ebc25ddf50b],
Rootkit.Agent.A, C:\Windows\System32\drivers\cherimoya.sys, , [2bfe3efbdfbade5892237e556e94f10f],
PUP.Optional.Shopperz.BrwsrFlsh, C:\Windows\System32\Tasks\Cawlez, , [eb3e63d6dabf75c147e401a0986b6d93],
PUP.Optional.BProtector, C:\Users\MINA\AppData\Local\Google\Chrome\User Data\Default\bProtectorPreferences, , [52d72217d2c7b383641f208781824fb1],
PUP.Optional.Complitly, C:\Program Files\Complitly\unins000.dat, , [bf6ae356bcdd8babe365fdaf8083c937],
PUP.Optional.Complitly, C:\Program Files\Complitly\FireFoxExtensionWithFF8Fix.exe, , [bf6ae356bcdd8babe365fdaf8083c937],
PUP.Optional.Complitly, C:\Program Files\Complitly\FireFoxUninstaller.exe, , [bf6ae356bcdd8babe365fdaf8083c937],
PUP.Optional.Complitly, C:\Program Files\Complitly\InstTracker.exe, , [bf6ae356bcdd8babe365fdaf8083c937],
PUP.Optional.Complitly, C:\Program Files\Complitly\System.Data.SQLite.dll, , [bf6ae356bcdd8babe365fdaf8083c937],
PUP.Optional.Complitly, C:\Program Files\Complitly\unins000.exe, , [bf6ae356bcdd8babe365fdaf8083c937],
PUP.Optional.Complitly, C:\Program Files\Complitly\chrome\ComplitlyChrome.crx, , [bf6ae356bcdd8babe365fdaf8083c937],
PUP.Optional.Complitly, C:\Program Files\Complitly\support@Complitly.com\chrome.manifest, , [bf6ae356bcdd8babe365fdaf8083c937],
PUP.Optional.Complitly, C:\Program Files\Complitly\support@Complitly.com\install.rdf, , [bf6ae356bcdd8babe365fdaf8083c937],
PUP.Optional.Complitly, C:\Program Files\Complitly\support@Complitly.com\chrome\content\appIcon.png, , [bf6ae356bcdd8babe365fdaf8083c937],
PUP.Optional.Complitly, C:\Program Files\Complitly\support@Complitly.com\chrome\content\browserOverlay.xul, , [bf6ae356bcdd8babe365fdaf8083c937],
PUP.Optional.Complitly, C:\Program Files\Complitly\support@Complitly.com\chrome\content\options.js, , [bf6ae356bcdd8babe365fdaf8083c937],
PUP.Optional.Complitly, C:\Program Files\Complitly\support@Complitly.com\chrome\content\options.xul, , [bf6ae356bcdd8babe365fdaf8083c937],
PUP.Optional.Complitly, C:\Program Files\Complitly\support@Complitly.com\defaults\preferences\predictad.js, , [bf6ae356bcdd8babe365fdaf8083c937],
PUP.Optional.ConduitTB.Gen, C:\Program Files\Conduit\Community Alerts\Alert.dll, , [250489b0eaafaf87204059547f8441bf],
PUP.Optional.Perion, C:\Windows\System32\ARFC\wrtc.exe, , [26033dfc8e0bdb5b5e0f4e7e16ed5aa6],
PUP.Optional.RegistryReviver, C:\Windows\System32\Tasks\Start Registry Reviver, , [57d29c9d3069f4425046923e54afb34d],
PUP.Optional.RegistryReviver, C:\Windows\System32\Tasks\Start Registry Reviver_Defrag, , [171261d8ecadf2440f8701cf7c876997],
PUP.Optional.WebAssistant, C:\Program Files\Web Assistant\Firefox\chrome.manifest, , [0128e7521e7bbc7a17f0677a4fb414ec],
PUP.Optional.WebAssistant, C:\Program Files\Web Assistant\Firefox\install.rdf, , [0128e7521e7bbc7a17f0677a4fb414ec],
PUP.Optional.WebAssistant, C:\Program Files\Web Assistant\Firefox\chrome\content\main.js, , [0128e7521e7bbc7a17f0677a4fb414ec],
PUP.Optional.WebAssistant, C:\Program Files\Web Assistant\Firefox\chrome\content\main.xul, , [0128e7521e7bbc7a17f0677a4fb414ec],
PUP.Optional.WebAssistant, C:\Program Files\Web Assistant\Firefox\chrome\content\libraries\DataExchangeScript.js, , [0128e7521e7bbc7a17f0677a4fb414ec],
PUP.Optional.WebAssistant, C:\Program Files\Web Assistant\Firefox\chrome\content\resources\localscript.js, , [0128e7521e7bbc7a17f0677a4fb414ec],
PUP.Optional.WebAssistant, C:\Program Files\Web Assistant\Firefox\defaults\preferences\defaults.js, , [0128e7521e7bbc7a17f0677a4fb414ec],
PUP.Optional.WebAssistant, C:\Program Files\Web Assistant\DGChrome.exe, , [0128e7521e7bbc7a17f0677a4fb414ec],
PUP.Optional.WebAssistant, C:\Program Files\Web Assistant\InstallerHelper.dll, , [0128e7521e7bbc7a17f0677a4fb414ec],
PUP.Optional.WebAssistant, C:\Program Files\Web Assistant\source.crx, , [0128e7521e7bbc7a17f0677a4fb414ec],
PUP.Optional.WebAssistant, C:\Program Files\Web Assistant\unins000.dat, , [0128e7521e7bbc7a17f0677a4fb414ec],
PUP.Optional.WebAssistant, C:\Program Files\Web Assistant\unins000.exe, , [0128e7521e7bbc7a17f0677a4fb414ec],
PUP.Optional.WebAssistant, C:\Program Files\Web Assistant\libraries\DataExchangeScript.js, , [0128e7521e7bbc7a17f0677a4fb414ec],
PUP.Optional.WebAssistant, C:\Program Files\Web Assistant\resources\localscript.js, , [0128e7521e7bbc7a17f0677a4fb414ec],
PUP.Optional.VBates, C:\Windows\System32\config\systemprofile\AppData\LocalLow\Company\Product\1.0\localStorageIE.txt, , [01282a0fe0b90f27bd5068877e856b95],
PUP.Optional.VBates, C:\Windows\System32\config\systemprofile\AppData\LocalLow\Company\Product\1.0\localStorageIE_backup.txt, , [01282a0fe0b90f27bd5068877e856b95],
PUP.Optional.Shopperz.BrwsrFlsh, C:\Program Files\daugava\Weekfqwb.exe, , [e24722174257181efd7cccd527dcc937],
Adware.InstallBrain, C:\Windows\System32\dmwu.exe, , [9099e9508c0d2a0cc6497ff34fb4659b],
PUP.Optional.Incredibar, C:\Program Files\Incredibar.com\incredibar\1.5.11.14\incredibarApp.dll, , [a58424150b8e60d67da4c8c8cd3506fa],
PUP.Optional.Incredibar, C:\Program Files\Incredibar.com\incredibar\1.5.11.14\incredibarEng.dll, , [a58424150b8e60d67da4c8c8cd3506fa],
PUP.Optional.Incredibar, C:\Program Files\Incredibar.com\incredibar\1.5.11.14\incredibarsrv.exe, , [a58424150b8e60d67da4c8c8cd3506fa],
PUP.Optional.Incredibar, C:\Program Files\Incredibar.com\incredibar\1.5.11.14\uninstall.exe, , [a58424150b8e60d67da4c8c8cd3506fa],
PUP.Optional.Shopperz.BrwsrFlsh, C:\Program Files\daugava\gcpum.dll, , [22079c9d3861d95dd56addbb0101aa56],
PUP.Optional.Shopperz.BrwsrFlsh, C:\Program Files\daugava\Irosioe.bat, , [22079c9d3861d95dd56addbb0101aa56],
PUP.Optional.Shopperz.BrwsrFlsh, C:\Program Files\daugava\tree.js, , [22079c9d3861d95dd56addbb0101aa56],
PUP.Optional.Shopperz.BrwsrFlsh, C:\Program Files\daugava\unins000.dat, , [22079c9d3861d95dd56addbb0101aa56],
PUP.Optional.Shopperz.BrwsrFlsh, C:\Program Files\daugava\unins000.exe, , [22079c9d3861d95dd56addbb0101aa56],
PUP.Optional.Shopperz.BrwsrFlsh, C:\Program Files\daugava\Firefox\chrome.manifest, , [22079c9d3861d95dd56addbb0101aa56],
PUP.Optional.Shopperz.BrwsrFlsh, C:\Program Files\daugava\Firefox\icon.png, , [22079c9d3861d95dd56addbb0101aa56],
PUP.Optional.Shopperz.BrwsrFlsh, C:\Program Files\daugava\Firefox\install.rdf, , [22079c9d3861d95dd56addbb0101aa56],
PUP.Optional.Shopperz.BrwsrFlsh, C:\Program Files\daugava\Firefox\{f179b4aa-3249-4e0e-a45a-8519d6bcd424}.xpi, , [22079c9d3861d95dd56addbb0101aa56],
PUP.Optional.Shopperz.BrwsrFlsh, C:\Program Files\daugava\Firefox\chrome\content\main.js, , [22079c9d3861d95dd56addbb0101aa56],
PUP.Optional.Shopperz.BrwsrFlsh, C:\Program Files\daugava\Firefox\chrome\content\main.xul, , [22079c9d3861d95dd56addbb0101aa56],
PUP.Optional.Shopperz.BrwsrFlsh, C:\Program Files\daugava\Firefox\chrome\content\libraries\DataExchangeScript.js, , [22079c9d3861d95dd56addbb0101aa56],
PUP.Optional.Shopperz.BrwsrFlsh, C:\Program Files\daugava\Firefox\chrome\content\resources\LocalScript.js, , [22079c9d3861d95dd56addbb0101aa56],
PUP.Optional.Shopperz.BrwsrFlsh, C:\Program Files\daugava\Firefox\chrome\locale\en-US\overlay.dtd, , [22079c9d3861d95dd56addbb0101aa56],
PUP.Optional.Shopperz.BrwsrFlsh, C:\Program Files\daugava\Firefox\chrome\skin\overlay.css, , [22079c9d3861d95dd56addbb0101aa56],
PUP.Optional.Shopperz.BrwsrFlsh, C:\Program Files\daugava\Firefox\defaults\preferences\defaults.js, , [22079c9d3861d95dd56addbb0101aa56],
PUP.Optional.Shopperz.BrwsrFlsh, C:\Program Files\daugava\libraries\DataExchangeScript.js, , [22079c9d3861d95dd56addbb0101aa56],
PUP.Optional.Shopperz.BrwsrFlsh, C:\Program Files\daugava\resources\LocalScript.js, , [22079c9d3861d95dd56addbb0101aa56],
PUP.Optional.InstallMate, C:\ProgramData\InstallMate\{B01A9061-55EF-4AEF-9983-6BD5B2D76491}\0.ini, , [0821b6832a6f8aace86e6236ff035aa6],
PUP.Optional.InstallMate, C:\ProgramData\InstallMate\{B01A9061-55EF-4AEF-9983-6BD5B2D76491}\20120312144700.log, , [0821b6832a6f8aace86e6236ff035aa6],
PUP.Optional.InstallMate, C:\ProgramData\InstallMate\{B01A9061-55EF-4AEF-9983-6BD5B2D76491}\Setup.dat, , [0821b6832a6f8aace86e6236ff035aa6],
PUP.Optional.InstallMate, C:\ProgramData\InstallMate\{B01A9061-55EF-4AEF-9983-6BD5B2D76491}\Setup.exe, , [0821b6832a6f8aace86e6236ff035aa6],
PUP.Optional.InstallMate, C:\ProgramData\InstallMate\{B01A9061-55EF-4AEF-9983-6BD5B2D76491}\Setup.ico, , [0821b6832a6f8aace86e6236ff035aa6],
PUP.Optional.InstallMate, C:\ProgramData\InstallMate\{B01A9061-55EF-4AEF-9983-6BD5B2D76491}\TsuDll.dll, , [0821b6832a6f8aace86e6236ff035aa6],
PUP.Optional.InstallMate, C:\ProgramData\InstallMate\{B01A9061-55EF-4AEF-9983-6BD5B2D76491}\_Setup.dll, , [0821b6832a6f8aace86e6236ff035aa6],
PUP.Optional.InstallMate, C:\ProgramData\InstallMate\{B01A9061-55EF-4AEF-9983-6BD5B2D76491}\_Setupx.dll, , [0821b6832a6f8aace86e6236ff035aa6],
PUP.Optional.AddictThing, C:\ProgramData\ADDICT-THING\background.html, , [9396af8a68310a2c3d9780187f836c94],
PUP.Optional.AddictThing, C:\ProgramData\ADDICT-THING\cmnacgnjmapegpfbmihljfnfklipfhdn.crx, , [9396af8a68310a2c3d9780187f836c94],
PUP.Optional.Complitly, C:\Users\MINA\AppData\Roaming\Complitly\KeepMeUpdated.exe, , [70b94ced5f3a191df1085d404db5cd33],
PUP.Optional.Complitly, C:\Users\MINA\AppData\Roaming\Complitly\64\Complitly64.dll, , [70b94ced5f3a191df1085d404db5cd33],
PUP.Optional.Complitly, C:\Users\MINA\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlfienamagdnkekbbbocojppncdambda\1.1_0\bg.html, , [f6331425afea87afaf4da2fba75b8977],
PUP.Optional.Complitly, C:\Users\MINA\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlfienamagdnkekbbbocojppncdambda\1.1_0\contentscript.js, , [f6331425afea87afaf4da2fba75b8977],
PUP.Optional.Complitly, C:\Users\MINA\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlfienamagdnkekbbbocojppncdambda\1.1_0\manifest.json, , [f6331425afea87afaf4da2fba75b8977],
PUP.Optional.Complitly, C:\Users\MINA\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlfienamagdnkekbbbocojppncdambda\1.1_0\icons\128.png, , [f6331425afea87afaf4da2fba75b8977],
PUP.Optional.Complitly, C:\Users\MINA\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlfienamagdnkekbbbocojppncdambda\1.1_0\icons\16.png, , [f6331425afea87afaf4da2fba75b8977],
PUP.Optional.Complitly, C:\Users\MINA\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlfienamagdnkekbbbocojppncdambda\1.1_0\icons\256.png, , [f6331425afea87afaf4da2fba75b8977],
PUP.Optional.Complitly, C:\Users\MINA\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlfienamagdnkekbbbocojppncdambda\1.1_0\icons\32.png, , [f6331425afea87afaf4da2fba75b8977],
PUP.Optional.Complitly, C:\Users\MINA\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlfienamagdnkekbbbocojppncdambda\1.1_0\icons\48.png, , [f6331425afea87afaf4da2fba75b8977],
PUP.Optional.Complitly, C:\Users\MINA\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlfienamagdnkekbbbocojppncdambda\1.1_0\icons\64.png, , [f6331425afea87afaf4da2fba75b8977],
PUP.Optional.InstallBrain, C:\Windows\System32\WNLT\Installation\Config.bin, , [6fba45f4c6d33204d39a06a7b34fe917],
PUP.Optional.InstallBrain, C:\Windows\System32\WNLT\Installation\HSChromeRegSetup.exe, , [6fba45f4c6d33204d39a06a7b34fe917],
PUP.Optional.InstallBrain, C:\Windows\System32\WNLT\Installation\NTSetup.exe, , [6fba45f4c6d33204d39a06a7b34fe917],
PUP.Optional.InstallBrain, C:\Windows\System32\WNLT\Installation\SKSetup.exe, , [6fba45f4c6d33204d39a06a7b34fe917],
PUP.Optional.InstallBrain, C:\Windows\System32\WNLT\Installation\SWDS.bin, , [6fba45f4c6d33204d39a06a7b34fe917],
PUP.Optional.InstallBrain, C:\Windows\System32\WNLT\Installation\uninstaller.exe, , [6fba45f4c6d33204d39a06a7b34fe917],
PUP.Optional.InstallBrain, C:\Windows\System32\WNLT\Installation\WSSetup.exe, , [6fba45f4c6d33204d39a06a7b34fe917],
PUP.Optional.InstallBrain, C:\Windows\System32\WNLT\Installation\Uninstall\msvcp100.dll, , [6fba45f4c6d33204d39a06a7b34fe917],
PUP.Optional.InstallBrain, C:\Windows\System32\WNLT\Installation\Uninstall\msvcr100.dll, , [6fba45f4c6d33204d39a06a7b34fe917],
PUP.Optional.InstallBrain, C:\Windows\System32\WNLT\Installation\Uninstall\uninstaller.exe, , [6fba45f4c6d33204d39a06a7b34fe917],
PUP.Optional.InstallBrain, C:\Windows\System32\WNLT\Installation\Uninstall\UninstallerLauncher.exe, , [6fba45f4c6d33204d39a06a7b34fe917],
PUP.Optional.NextLive, C:\Users\MINA\AppData\Roaming\newnext.me\nengine.cookie, , [b37653e6d0c98aac9ce1e2d1679b4fb1],
PUP.Optional.NextLive, C:\Users\MINA\AppData\Roaming\newnext.me\cache\spark.bin, , [b37653e6d0c98aac9ce1e2d1679b4fb1],
PUP.Optional.TheBflix, C:\Users\MINA\AppData\LocalLow\TheBflix\content.js, , [72b7fa3fbfdae5518d627448c24054ac],
PUP.Optional.TheBflix, C:\Users\MINA\AppData\LocalLow\TheBflix\jsondb.js, , [72b7fa3fbfdae5518d627448c24054ac],
PUP.Optional.TheBflixUpdater, C:\ProgramData\TheBflixUpdater\ix_updater.exe, , [3feaac8d5d3c290d757bcfedc240da26],
PUP.Optional.TheBflixUpdater, C:\ProgramData\TheBflixUpdater\profile.ini, , [3feaac8d5d3c290d757bcfedc240da26],
PUP.Optional.TheBflixUpdater, C:\ProgramData\TheBflixUpdater\runtime.dll, , [3feaac8d5d3c290d757bcfedc240da26],
PUP.Optional.VBates, C:\Users\MINA\AppData\LocalLow\{D2020D47-707D-4E26-B4D9-739C4F4C2E9A}\{FBC0652C-7B29-4FB6-8ADA-91F54B267AD4}\1.5\config.js, , [42e7ee4b5c3d4fe7028b883a9a6836ca],
PUP.Optional.VBates, C:\Users\MINA\AppData\LocalLow\{D2020D47-707D-4E26-B4D9-739C4F4C2E9A}\{FBC0652C-7B29-4FB6-8ADA-91F54B267AD4}\1.5\tree.js, , [42e7ee4b5c3d4fe7028b883a9a6836ca],
PUP.Optional.VBates, C:\Users\MINA\AppData\LocalLow\{D2020D47-707D-4E26-B4D9-739C4F4C2E9A}\{FBC0652C-7B29-4FB6-8ADA-91F54B267AD4}\1.5\wlist.js, , [42e7ee4b5c3d4fe7028b883a9a6836ca],
PUP.Optional.VBates, C:\Windows\System32\config\systemprofile\AppData\LocalLow\{D2020D47-707D-4E26-B4D9-739C4F4C2E9A}\{FBC0652C-7B29-4FB6-8ADA-91F54B267AD4}\1.5\config.js, , [d653e455c4d563d3a8e508baf40e6898],
PUP.Optional.VBates, C:\Windows\System32\config\systemprofile\AppData\LocalLow\{D2020D47-707D-4E26-B4D9-739C4F4C2E9A}\{FBC0652C-7B29-4FB6-8ADA-91F54B267AD4}\1.5\tree.js, , [d653e455c4d563d3a8e508baf40e6898],
PUP.Optional.VBates, C:\Windows\System32\config\systemprofile\AppData\LocalLow\{D2020D47-707D-4E26-B4D9-739C4F4C2E9A}\{FBC0652C-7B29-4FB6-8ADA-91F54B267AD4}\1.5\wlist.js, , [d653e455c4d563d3a8e508baf40e6898],
PUP.Optional.Yontoo, C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\Setup.dat, , [f732b485d1c8f3436deabb0b60a2b54b],
PUP.Optional.Yontoo, C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\Setup.exe, , [f732b485d1c8f3436deabb0b60a2b54b],
PUP.Optional.Yontoo, C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\Setup.ico, , [f732b485d1c8f3436deabb0b60a2b54b],
PUP.Optional.Yontoo, C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\_Setup.dll, , [f732b485d1c8f3436deabb0b60a2b54b],
Trojan.Injector.BHO, C:\settings.ini, , [b2770a2fe7b248ee5e5ff4e506fe49b7],

Fyzické sektory: 0
(Nenalezeny žádné škodlivé položky)


(end)

Re: Prosím o kontrolu HijackThis, Network service, TrustedInstallerjednotka DVD RW

Napsal: 13 led 2016 17:27
od Telda
Instrukce jsou splněny.

Re: Prosím o kontrolu HijackThis, Network service, TrustedInstallerjednotka DVD RW

Napsal: 13 led 2016 17:32
od Telda
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:39:01, on 13.1.2016
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18124)


Boot mode: Normal

Running processes:
C:\Windows\Explorer.EXE
C:\Windows\system32\Dwm.exe
C:\Windows\System32\mjcm\dnkt.exe
C:\Program Files\daugava\Ejemidvlf.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Windows\V0330Mon.exe
C:\Program Files\Pinnacle\Shared Files\Programs\USBTip\USBTip.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\Program Files\D-Link\DWA-140 revB\AirNCFG.exe
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ArcCon.ac
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\SanDisk\SanDisk Media Manager\SanDiskMediaManager-Launcher.EXE
C:\Program Files\MSI\TotalMedia 3.5\TMMonitor.exe
C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Windows\system32\DllHost.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files\Common Files\Java\Java Update\jucheck.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\Macromed\Flash\FlashUtil32_20_0_0_270_ActiveX.exe
C:\Windows\System32\MsSpellCheckingFacility.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Users\MINA\Desktop\hijackthis\HijackThis.exe
C:\Windows\system32\DllHost.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://atlas.centrum.cz/?utm_source=ch- ... nt=default
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.centrum.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {687578b9-7132-4a7a-80e4-30ee31099e03} - (no file)
O2 - BHO: Complitly - {0FB6A909-6086-458F-BD92-1F8EE10042A0} - C:\Users\MINA\AppData\Roaming\Complitly\Complitly.dll
O2 - BHO: Web Assistant Helper - {336D0C35-8A85-403a-B9D2-65C292C39087} - C:\Program Files\Web Assistant\Extension32.dll
O2 - BHO: Lišta Centrum.cz - {5D9C17C6-093D-43E5-BF3D-4A13D162AB74} - C:\PROGRA~1\CENTRU~1.O\LITACE~1.CZ\cenbho32.dll
O2 - BHO: Incredibar.com Helper Object - {6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99} - C:\Program Files\Incredibar.com\incredibar\1.5.11.14\bh\incredibar.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.8.0_51\bin\ssv.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files\Windows Live\Companion\companioncore.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - "C:\Program Files\Microsoft\BingBar\BingExt.dll" (file missing)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre1.8.0_51\bin\jp2ssv.dll
O3 - Toolbar: Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files\Microsoft\BingBar\BingExt.dll" (file missing)
O3 - Toolbar: Incredibar Toolbar - {F9639E4A-801B-4843-AEE3-03D9DA199E77} - C:\Program Files\Incredibar.com\incredibar\1.5.11.14\incredibarTlbr.dll
O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [V0330Mon.exe] C:\Windows\V0330Mon.exe
O4 - HKLM\..\Run: [BrMfcWnd] C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe /AUTORUN
O4 - HKLM\..\Run: [USBToolTip] C:\PROGRA~1\Pinnacle\SHARED~1\Programs\USBTip\USBTip.exe
O4 - HKLM\..\Run: [MSC] "C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
O4 - HKLM\..\Run: [D-Link D-Link DWA-140] C:\Program Files\D-Link\DWA-140 revB\AirNCFG.exe
O4 - HKLM\..\Run: [UVS10 Preload] C:\Program Files\Ulead Systems\Ulead VideoStudio SE DVD\uvPL.exe
O4 - HKLM\..\Run: [ArcSoft Connection Service] C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [daugava] C:\Program Files\daugava\Ejemidvlf.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
O4 - HKCU\..\Run: [NextLive] C:\Windows\system32\rundll32.exe "C:\Users\MINA\AppData\Roaming\newnext.me\nengine.dll",EntryPoint -m l
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
O4 - Global Startup: SanDisk Media Manager.lnk = ?
O4 - Global Startup: TMMonitor.lnk = C:\Program Files\MSI\TotalMedia 3.5\TMMonitor.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: @C:\Program Files\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files\Windows Live\Companion\companioncore.dll
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)
O9 - Extra button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {1C11B948-582A-433F-A98D-A8C4D5CC64F2} (20-20 3D Viewer) - http://kitchenplanner.ikea.com/CZ/Core/ ... _Win32.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: 65f825de-0adc-4791-a1e5-209aa6f7ea76 - Unknown owner - C:\Program Files\daugava\Upbgbeie.exe
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe
O23 - Service: csrcc - Unknown owner - C:\Program Files\daugava\csrcc.exe
O23 - Service: daugava Updater - Unknown owner - C:\Program Files\daugava\Weekfqwb.exe
O23 - Service: D_Link_DWA-140_WPS Service (D_Link_DWA-140_WPS) - Unknown owner - C:\Program Files\D-Link\DWA-140 revB\ANIWConnService.exe
O23 - Service: ES lite Service for program management. (ES lite Service) - Unknown owner - C:\Program Files\Gigabyte\EasySaver\ESSVR.EXE
O23 - Service: FsUsbExService - Teruten - C:\Windows\system32\FsUsbExService.Exe
O23 - Service: IBUpdaterService - Unknown owner - C:\Windows\system32\dmwu.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: MBAMService - Malwarebytes - C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: Internet Pass-Through Service (PassThru Service) - Unknown owner - C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
O23 - Service: Web Assistant - Unknown owner - C:\Program Files\Web Assistant\ExtensionUpdaterService.exe

--
End of file - 11524 bytes

Re: Prosím o kontrolu HijackThis, Network service, TrustedInstallerjednotka DVD RW

Napsal: 13 led 2016 17:42
od jerabina
Spusť znovu AdwCleaner (u Windows Vista či Windows7, klikni na AdwCleaner pravým a vyber „Spustit jako správce“
klikni na „Prohledat-Scan“, po prohledání klikni na „ Vymazat-Clean“

Program provede opravu, po automatickém restartu neukáže log (C:\AdwCleaner [C?].txt) , jeho obsah sem celý vlož.

Spusť znovu MbAM a dej Skenovat nyní
- po proběhnutí programu se ti objeví hláška tak klikni na „Vše do karantény(smazat vybrané)“ a na „Exportovat záznam“ a vyber „textový soubor“ , soubor nějak pojmenuj a někam ho ulož. Zkopíruj se celý obsah toho logu.

Stáhni si Junkware Removal Tool by Thisisu

na svojí plochu.

Deaktivuj si svůj antivirový program. Pravým tl. myši klikni na JRT.exe a vyber „spustit jako správce“. Pro pokračování budeš vyzván ke stisknutí jakékoliv klávesy. Na nějakou klikni.
Začne skenování programu. Skenování může trvat dloho , podle množství nákaz. Po ukončení skenu se objeví log (JRT.txt) , který se uloží na ploše.
Zkopíruj sem prosím celý jeho obsah.

Stáhni si RogueKiller
32bit.:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
64bit.:
http://www.sur-la-toile.com/RogueKiller ... lerX64.exe
na svojí plochu.
- Zavři všechny ostatní programy a prohlížeče.
- Pro OS Vista a win7 spusť program RogueKiller.exe jako správce , u XP poklepáním.
- počkej až skončí Prescan -vyhledávání škodlivých procesů.
-Potom klikni na „Prohledat“.
- Program skenuje procesy PC. Po proskenování klikni na „Zpráva“celý obsah logu sem zkopíruj.
Pokud je program blokován , zkus ho spustit několikrát. Pokud dále program nepůjde spustit a pracovat, přejmenuj ho na winlogon.exe.

Re: Prosím o kontrolu HijackThis, Network service, TrustedInstallerjednotka DVD RW

Napsal: 13 led 2016 19:40
od Telda
# AdwCleaner v5.029 - Logfile created 13/01/2016 at 19:45:32
# Updated 11/01/2016 by Xplode
# Database : 2016-01-12.1 [Server]
# Operating system : Windows 7 Enterprise Service Pack 1 (x86)
# Username : MINA - TELDA-PC
# Running from : C:\Users\MINA\Desktop\3. adwcleaner_5.029.exe
# Option : Cleaning
# Support : http://toolslib.net/forum

***** [ Services ] *****

[-] Service Deleted : cherimoya
[-] Service Deleted : csrcc
[-] Service Deleted : IBUpdaterService
[-] Service Deleted : Web Assistant
[-] Service Deleted : daugava Updater
[-] Service Deleted : 65f825de-0adc-4791-a1e5-209aa6f7ea76
[!] Service Not Deleted : csrcc
[!] Service Not Deleted : daugava Updater
[!] Service Not Deleted : 65f825de-0adc-4791-a1e5-209aa6f7ea76

***** [ Folders ] *****

[-] Folder Deleted : C:\Program Files\Complitly
[-] Folder Deleted : C:\Program Files\Conduit
[-] Folder Deleted : C:\Program Files\incredibar.com
[-] Folder Deleted : C:\Program Files\Web Assistant
[-] Folder Deleted : C:\Program Files\daugava
[-] Folder Deleted : C:\Program Files\myfree codec
[!] Folder Not Deleted : C:\Program Files\daugava
[-] Folder Deleted : C:\ProgramData\Premium
[-] Folder Deleted : C:\ProgramData\Tarma Installer
[-] Folder Deleted : C:\ProgramData\ADDICT-THING
[-] Folder Deleted : C:\ProgramData\TheBflixUpdater
[-] Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\myfree codec
[-] Folder Deleted : C:\Users\MINA\AppData\Local\Conduit
[-] Folder Deleted : C:\Users\MINA\AppData\Local\genienext
[-] Folder Deleted : C:\Users\MINA\AppData\Local\Mobogenie
[-] Folder Deleted : C:\Users\MINA\AppData\Local\slimware utilities inc
[-] Folder Deleted : C:\Users\MINA\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlfienamagdnkekbbbocojppncdambda
[-] Folder Deleted : C:\Users\MINA\AppData\LocalLow\Conduit
[-] Folder Deleted : C:\Users\MINA\AppData\LocalLow\PriceGong
[-] Folder Deleted : C:\Users\MINA\AppData\LocalLow\TheBflix
[-] Folder Deleted : C:\Users\MINA\AppData\LocalLow\{D2020D47-707D-4E26-B4D9-739C4F4C2E9A}
[-] Folder Deleted : C:\Users\MINA\AppData\Roaming\Complitly
[-] Folder Deleted : C:\Users\MINA\AppData\Roaming\ExpressFiles
[-] Folder Deleted : C:\Users\MINA\AppData\Roaming\newnext.me
[-] Folder Deleted : C:\Users\MINA\AppData\Roaming\Systweak
[-] Folder Deleted : C:\Users\MINA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BitGuard
[-] Folder Deleted : C:\Users\MINA\Documents\Mobogenie
[-] Folder Deleted : C:\Windows\system32\ARFC
[-] Folder Deleted : C:\Windows\system32\jmdp
[-] Folder Deleted : C:\Windows\system32\WNLT
[-] Folder Deleted : C:\Windows\system32\mjcm

***** [ Files ] *****

[-] File Deleted : C:\END
[-] File Deleted : C:\Program Files\Mozilla Firefox\user.js
[-] File Deleted : C:\Users\MINA\AppData\Local\Google\Chrome\User Data\Default\bprotectorpreferences
[-] File Deleted : C:\Users\MINA\AppData\LocalLow\SkwConfig.bin
[-] File Deleted : C:\Windows\system32\dmwu.exe
[-] File Deleted : C:\Windows\system32\ImhxxpComm.dll
[-] File Deleted : C:\Windows\system32\roboot.exe
[-] File Deleted : C:\Windows\system32\drivers\cherimoya.sys

***** [ DLLs ] *****


***** [ Shortcuts ] *****


***** [ Scheduled tasks ] *****

[-] Task Deleted : Express FilesUpdate
[-] Task Deleted : Start Registry Reviver
[-] Task Deleted : Cawlez
[-] Task Deleted : TheBflixUpdaterTask{46BAB2DD-95BC-49FE-BFC0-166C8BFFA8C9}
[-] Task Deleted : TheBflixUpdaterTask{46BAB2DD-95BC-49FE-BFC0-166C8BFFA8C9}
[-] Task Deleted : Cawlez
[-] Task Deleted : Start Registry Reviver
[-] Task Deleted : Start Registry Reviver_Defrag

***** [ Registry ] *****

[-] Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Main [bprotector start page]
[-] Value Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [bProtectorDefaultScope]
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettings
[-] Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [NextLive]
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\Complitly.DLL
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\escort.DLL
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\Extension.DLL
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\TbCommonUtils.DLL
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\TbHelper.EXE
[-] Key Deleted : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr
[-] Key Deleted : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\escort.escortIEPane
[-] Key Deleted : HKLM\SOFTWARE\Classes\escort.escortIEPane.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\esrv.IncredibarESrvc
[-] Key Deleted : HKLM\SOFTWARE\Classes\esrv.IncredibarESrvc.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\Extension.ExtensionHelperObject
[-] Key Deleted : HKLM\SOFTWARE\Classes\Extension.ExtensionHelperObject.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\I
[-] Key Deleted : HKLM\SOFTWARE\Classes\Incredibar.dskBnd
[-] Key Deleted : HKLM\SOFTWARE\Classes\Incredibar.dskBnd.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\Incredibar.IncredibarHlpr
[-] Key Deleted : HKLM\SOFTWARE\Classes\Incredibar.IncredibarHlpr.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\IncredibarApp.appCore
[-] Key Deleted : HKLM\SOFTWARE\Classes\IncredibarApp.appCore.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\Prod.cap
[-] Key Deleted : HKLM\SOFTWARE\Classes\SuggestMeYes.SuggestMeYesBHO
[-] Key Deleted : HKLM\SOFTWARE\Classes\SuggestMeYes.SuggestMeYesBHO.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\TbCommonUtils.CommonUtils
[-] Key Deleted : HKLM\SOFTWARE\Classes\TbCommonUtils.CommonUtils.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.TbDownloadManager
[-] Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.TbDownloadManager.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.TbPropertyManager
[-] Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.TbPropertyManager.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.TbRequest
[-] Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.TbRequest.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.TbTask
[-] Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.TbTask.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.ToolbarHelper
[-] Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.ToolbarHelper.1
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd
[-] Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [daugava]
[-] Key Deleted : HKCU\SOFTWARE\SYSTWEAK\RegClean Pro
[!] Value Not Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [daugava]
[-] Key Deleted : HKCU\Software\f55dedde538be42
[-] Key Deleted : HKLM\SOFTWARE\f55dedde538be42
[-] Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{336D0C35-8A85-403a-B9D2-65C292C39087}]
[-] Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{FE1DEEEA-DB6D-44B8-83F0-34FC0F9D1052}]
[-] Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\dlfienamagdnkekbbbocojppncdambda
[-] Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd
[-] Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{442F13BC-2031-42D5-9520-437F65271153}
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{4CE516A7-F7AC-4628-B411-8F886DC5733E}
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{608D3067-77E8-463D-9084-908966806826}
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{628F3201-34D0-49C0-BB9A-82A26AEFB291}
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{B302A1BD-0157-49FA-90F1-4E94F22C7B4B}
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
[!] Key Not Deleted : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{CFE8AAFD-A0F3-4329-84E9-6B679EC93EC2}
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{425F4ABF-B8E4-402D-9E49-06E494EB8DBF}
[-] Key Deleted : HKCU\Software\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{336D0C35-8A85-403A-B9D2-65C292C39087}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{C01315C7-B4E2-4864-B43D-5FAFC414D179}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{C1545464-C77C-4130-A572-1C619E2895FE}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{ED0E67AD-926C-4008-87E5-03CF72AA2A7E}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{EF7FEC6D-451B-4452-9D26-7E10C6B5DB6E}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F9639E4A-801B-4843-AEE3-03D9DA199E77}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{459DD0F7-0D55-D3DC-67BC-E6BE37E9D762}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{7D8DAE88-BC05-4578-8C29-E541FFBA5757}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3CCC052E-BDEE-408A-BEA7-90914EF2964B}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{61F47056-E400-43D3-AF1E-AB7DFFD4C4AD}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E2B98EEA-EE55-4E9B-A8C1-6E5288DF785A}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5C3B5DAA-0AFF-4808-90FB-0F2F2D760E36}
[!] Key Not Deleted : HKLM\SOFTWARE\Classes\CLSID\{7D8DAE88-BC05-4578-8C29-E541FFBA5757}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{ecc63d53-62ce-46ca-b6a5-8a0a6de1107f}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{22B0769F-794B-4422-AC84-47B123C8986D}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{255E0B2A-D747-4EEF-B7CE-159D73A3656D}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{28ED590D-F5ED-4E05-A87F-1D759F1C6169}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{45D5B93F-E2ED-4AF2-915E-DCDDBDA8C33C}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{771B99AB-636F-4A11-9039-8DFEB927B061}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A36867C6-302D-49FC-9D8E-1EB037B5F1AB}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A8321AA2-2227-40C7-8525-6C2F4E1B0EBE}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{AA41A731-6814-4A70-A6F1-C0A20FBBFBD5}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{ABBB8A9E-D8AF-40D1-94BE-5175077465FC}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{BF737694-56F6-46FA-9FDC-FA99A5B25FAD}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C9AE652B-8C99-4AC2-B556-8B501182874E}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{CFCD164E-8AC9-478E-9ECC-B616A932016C}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D5961CC0-B442-4567-8030-67E241EF4CC2}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E450067F-1C93-41A7-928E-07E5C2EEC680}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{F977D9F2-4BDC-44A6-B508-7C0284C61EED}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A9582D7B-F24A-441D-9D26-450D58F3CD17}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{EE0D8859-2ED4-4B0D-9812-16865B9AFD65}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{59B83B12-7660-4FED-9E5F-DD67B4B8264C}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{01BCB858-2F62-4F06-A8F4-48F927C15333}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{1D5A4199-956E-49BC-B89F-6A35C57C0D13}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{48C9C8B0-A546-46C1-A81F-47A31E623E9D}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{CFE8AAFD-A0F3-4329-84E9-6B679EC93EC2}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{14EF423E-3EE8-44AE-9337-07AC3F27B744}
[!] Key Not Deleted : HKLM\SOFTWARE\Classes\TypeLib\{14EF423E-3EE8-44AE-9337-07AC3F27B744}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{6265CAFB-2688-4AED-A8CD-9B1E7B451C85}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{336D0C35-8A85-403A-B9D2-65C292C39087}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2974C985-8151-4DE5-B23C-B875F0A8522F}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{336D0C35-8A85-403A-B9D2-65C292C39087}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F9639E4A-801B-4843-AEE3-03D9DA199E77}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{336D0C35-8A85-403A-B9D2-65C292C39087}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{F9639E4A-801B-4843-AEE3-03D9DA199E77}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{8567A644-E36C-470C-86CF-9C5B4F37DB81}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D3D233D5-9F6D-436C-B6C7-E63F77503B30}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D7E97865-918F-41E4-9CD0-25AB1C574CE8}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{2974C985-8151-4DE5-B23C-B875F0A8522F}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D3D233D5-9F6D-436C-B6C7-E63F77503B30}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D7E97865-918F-41E4-9CD0-25AB1C574CE8}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{74C36554-31F0-49DD-8857-ED6A64DF45BE}
[-] Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{F9639E4A-801B-4843-AEE3-03D9DA199E77}]
[-] Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{687578B9-7132-4A7A-80E4-30EE31099E03}]
[-] Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D7E97865-918F-41E4-9CD0-25AB1C574CE8}]
[-] Key Deleted : HKCU\Software\BABSOLUTION
[-] Key Deleted : HKCU\Software\Complitly
[-] Key Deleted : HKCU\Software\DataMngr
[-] Key Deleted : HKCU\Software\ExpressFiles
[-] Key Deleted : HKCU\Software\filescout
[-] Key Deleted : HKCU\Software\Headlight
[-] Key Deleted : HKCU\Software\IM
[-] Key Deleted : HKCU\Software\ImInstaller
[-] Key Deleted : HKCU\Software\InstallCore
[-] Key Deleted : HKCU\Software\Myfree Codec
[-] Key Deleted : HKCU\Software\Softonic
[-] Key Deleted : HKCU\Software\SweetIM
[-] Key Deleted : HKCU\Software\WNLT
[-] Key Deleted : HKCU\Software\AppDataLow\Software\Conduit
[-] Key Deleted : HKCU\Software\AppDataLow\Software\ConduitSearchScopes
[-] Key Deleted : HKCU\Software\AppDataLow\Software\PriceGong
[-] Key Deleted : HKLM\SOFTWARE\Babylon
[-] Key Deleted : HKLM\SOFTWARE\Conduit
[-] Key Deleted : HKLM\SOFTWARE\DataMngr
[-] Key Deleted : HKLM\SOFTWARE\ExpressFiles
[-] Key Deleted : HKLM\SOFTWARE\incredibar.com
[-] Key Deleted : HKLM\SOFTWARE\Myfree Codec
[-] Key Deleted : HKLM\SOFTWARE\SimplyGen
[-] Key Deleted : HKLM\SOFTWARE\SweetIM
[-] Key Deleted : HKLM\SOFTWARE\Tarma Installer
[-] Key Deleted : HKLM\SOFTWARE\Web Assistant
[-] Key Deleted : HKLM\SOFTWARE\WNLT
[-] Key Deleted : HKLM\SOFTWARE\daugava
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\MyFreeCodec
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{336D0C35-8A85-403a-B9D2-65C292C39087}_is1
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{4FFBB818-B13C-11E0-931D-B2664824019B}_is1
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\incredibar
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WNLT
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{f179b4aa-3249-4e0e-a45a-8519d6bcd424}_is1
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\TheBflixUpdater
[-] Key Deleted : HKU\.DEFAULT\Software\IM
[-] Key Deleted : HKU\.DEFAULT\Software\ImInstaller
[-] Key Deleted : HKU\.DEFAULT\Software\SweetIM
[-] Key Deleted : HKU\.DEFAULT\Software\WNLT
[!] Data Not Restored : HKCU\Software\Microsoft\Internet Explorer\Main [bProtector Start Page]
[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{7DFD8268-7357-4CF2-A6BE-DB119A97B1B5}
[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{C04B7D22-5AEC-4561-8F49-27F6269208F6}
[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A}
[-] Data Restored : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [DefaultScope]

***** [ Web browsers ] *****


*************************

:: "Tracing" keys removed
:: Winsock settings cleared

########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [18835 bytes] ##########

Re: Prosím o kontrolu HijackThis, Network service, TrustedInstallerjednotka DVD RW

Napsal: 13 led 2016 20:03
od Telda
Malwarebytes Anti-Malware
www.malwarebytes.org

Datum skenování: 13.1.2016
Čas skenování: 19:50
Protokol: 13.1.2016 - log malwa.txt
Správce: Ano

Verze: 2.2.0.1024
Databáze malwaru: v2016.01.13.05
Databáze rootkitů: v2016.01.09.01
Licence: Bezplatná verze
Ochrana proti malwaru: Vypnuto
Ochrana proti škodlivým webovým stránkám: Vypnuto
Ochrana programu: Vypnuto

OS: Windows 7 Service Pack 1
CPU: x86
Souborový systém: NTFS
Uživatel: MINA

Typ skenu: Sken hrozeb
Výsledek: Dokončeno
Prohledaných objektů: 322531
Uplynulý čas: 14 min, 52 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Vypnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto

Procesy: 0
(Nenalezeny žádné škodlivé položky)

Moduly: 0
(Nenalezeny žádné škodlivé položky)

Klíče registru: 1
PUP.Optional.Shopperz.BrwsrFlsh, HKLM\SOFTWARE\WOW6432NODE\daugava, Do karantény, [022788b15f3aec4adb907f2213f04fb1],

Hodnoty registru: 10
PUP.Optional.uTorrentTB, HKU\S-1-5-21-3376985173-22173787-2728888509-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\URLSEARCHHOOKS\{687578b9-7132-4a7a-80e4-30ee31099e03}, Do karantény, [0c1d3aff7524be7812a14c2c27db916f],
PUP.Optional.uTorrentTB, HKU\S-1-5-21-3376985173-22173787-2728888509-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\URLSEARCHHOOKS|{687578B9-7132-4A7A-80E4-30EE31099E03}, Do karantény, [0c1d3aff7524be7812a14c2c27db916f],
PUP.Optional.Perion, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SHAREDACCESS\PARAMETERS\FIREWALLPOLICY\FIREWALLRULES|{2DFA5B8D-DF50-4A74-BFD3-F7B9F3146A1C}, v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Private|App=C:\Windows\System32\dmwu.exe|Name=dmwu|, Do karantény, [9c8db089d6c3c373bc7916056c98649c]
PUP.Optional.Perion, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SHAREDACCESS\PARAMETERS\FIREWALLPOLICY\FIREWALLRULES|{F8D5B115-B14D-4981-8F9A-C9CE0D7EEBF5}, v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|App=C:\Windows\System32\dmwu.exe|Name=dmwu|, Do karantény, [0a1f1d1c3a5fa096161fc85316ee5ca4]
PUP.Optional.Perion, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SHAREDACCESS\PARAMETERS\FIREWALLPOLICY\FIREWALLRULES|{DB79E06B-B27B-4FB7-9BB4-CB7BF92F4EA1}, v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Private|App=C:\Windows\System32\ARFC\wrtc.exe|Name=wrtc|, Do karantény, [f1384aefd1c88caae52ae53770948b75]
PUP.Optional.Perion, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SHAREDACCESS\PARAMETERS\FIREWALLPOLICY\FIREWALLRULES|{BC781991-E6D2-4538-B9C0-3168AE532D72}, v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|App=C:\Windows\System32\ARFC\wrtc.exe|Name=wrtc|, Do karantény, [9396c277c6d3e84e43cc8d8f867e53ad]
PUP.Optional.Perion, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SHAREDACCESS\PARAMETERS\FIREWALLPOLICY\FIREWALLRULES|{57AFED0E-0297-4648-8519-DDA2E0407F83}, v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Public|App=C:\Windows\System32\dmwu.exe|Name=dmwu|, Do karantény, [d752f346cfcae551ed485ac1f01436ca]
PUP.Optional.Perion, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SHAREDACCESS\PARAMETERS\FIREWALLPOLICY\FIREWALLRULES|{DF654534-44C2-4B84-B83C-DEC653122E9E}, v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Public|App=C:\Windows\System32\dmwu.exe|Name=dmwu|, Do karantény, [38f10138aeeb9f9786af8a9109fbf709]
PUP.Optional.Perion, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SHAREDACCESS\PARAMETERS\FIREWALLPOLICY\FIREWALLRULES|{FE96ED0D-FAA6-4BC1-A64A-0C9ADD77784E}, v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Public|App=C:\Windows\System32\ARFC\wrtc.exe|Name=wrtc|, Do karantény, [ae7ba1987f1a58de4cc356c6eb191de3]
PUP.Optional.Perion, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SHAREDACCESS\PARAMETERS\FIREWALLPOLICY\FIREWALLRULES|{46DDAC1B-1CE6-4C8D-BF99-D7986F6328BD}, v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Public|App=C:\Windows\System32\ARFC\wrtc.exe|Name=wrtc|, Do karantény, [77b24ced7c1d58ded03f4fcd8183e818]

Data registru: 0
(Nenalezeny žádné škodlivé položky)

Složky: 7
PUP.Optional.VBates, C:\Windows\System32\config\systemprofile\AppData\LocalLow\Company\Product\1.0, Do karantény, [ce5be35670295adc6f9e36b9fd06bc44],
PUP.Optional.VBates, C:\Windows\System32\config\systemprofile\AppData\LocalLow\Company\Product, Do karantény, [ce5be35670295adc6f9e36b9fd06bc44],
PUP.Optional.InstallMate, C:\ProgramData\InstallMate\{B01A9061-55EF-4AEF-9983-6BD5B2D76491}, Do karantény, [44e51c1de7b2bb7b0551257379892ed2],
PUP.Optional.InstallMate, C:\ProgramData\InstallMate\{B01A9061-55EF-4AEF-9983-6BD5B2D76491}\7723387C8593EA63, Do karantény, [44e51c1de7b2bb7b0551257379892ed2],
PUP.Optional.VBates, C:\Windows\System32\config\systemprofile\AppData\LocalLow\{D2020D47-707D-4E26-B4D9-739C4F4C2E9A}, Do karantény, [45e42f0a1d7cb482a1ec6161ab5735cb],
PUP.Optional.VBates, C:\Windows\System32\config\systemprofile\AppData\LocalLow\{D2020D47-707D-4E26-B4D9-739C4F4C2E9A}\{FBC0652C-7B29-4FB6-8ADA-91F54B267AD4}, Do karantény, [45e42f0a1d7cb482a1ec6161ab5735cb],
PUP.Optional.VBates, C:\Windows\System32\config\systemprofile\AppData\LocalLow\{D2020D47-707D-4E26-B4D9-739C4F4C2E9A}\{FBC0652C-7B29-4FB6-8ADA-91F54B267AD4}\1.5, Do karantény, [45e42f0a1d7cb482a1ec6161ab5735cb],

Soubory: 14
PUP.Optional.VBates, C:\Windows\System32\config\systemprofile\AppData\LocalLow\Company\Product\1.0\localStorageIE.txt, Do karantény, [ce5be35670295adc6f9e36b9fd06bc44],
PUP.Optional.VBates, C:\Windows\System32\config\systemprofile\AppData\LocalLow\Company\Product\1.0\localStorageIE_backup.txt, Do karantény, [ce5be35670295adc6f9e36b9fd06bc44],
PUP.Optional.InstallMate, C:\ProgramData\InstallMate\{B01A9061-55EF-4AEF-9983-6BD5B2D76491}\0.ini, Do karantény, [44e51c1de7b2bb7b0551257379892ed2],
PUP.Optional.InstallMate, C:\ProgramData\InstallMate\{B01A9061-55EF-4AEF-9983-6BD5B2D76491}\20120312144700.log, Do karantény, [44e51c1de7b2bb7b0551257379892ed2],
PUP.Optional.InstallMate, C:\ProgramData\InstallMate\{B01A9061-55EF-4AEF-9983-6BD5B2D76491}\Setup.dat, Do karantény, [44e51c1de7b2bb7b0551257379892ed2],
PUP.Optional.InstallMate, C:\ProgramData\InstallMate\{B01A9061-55EF-4AEF-9983-6BD5B2D76491}\Setup.exe, Do karantény, [44e51c1de7b2bb7b0551257379892ed2],
PUP.Optional.InstallMate, C:\ProgramData\InstallMate\{B01A9061-55EF-4AEF-9983-6BD5B2D76491}\Setup.ico, Do karantény, [44e51c1de7b2bb7b0551257379892ed2],
PUP.Optional.InstallMate, C:\ProgramData\InstallMate\{B01A9061-55EF-4AEF-9983-6BD5B2D76491}\TsuDll.dll, Do karantény, [44e51c1de7b2bb7b0551257379892ed2],
PUP.Optional.InstallMate, C:\ProgramData\InstallMate\{B01A9061-55EF-4AEF-9983-6BD5B2D76491}\_Setup.dll, Do karantény, [44e51c1de7b2bb7b0551257379892ed2],
PUP.Optional.InstallMate, C:\ProgramData\InstallMate\{B01A9061-55EF-4AEF-9983-6BD5B2D76491}\_Setupx.dll, Do karantény, [44e51c1de7b2bb7b0551257379892ed2],
PUP.Optional.VBates, C:\Windows\System32\config\systemprofile\AppData\LocalLow\{D2020D47-707D-4E26-B4D9-739C4F4C2E9A}\{FBC0652C-7B29-4FB6-8ADA-91F54B267AD4}\1.5\config.js, Do karantény, [45e42f0a1d7cb482a1ec6161ab5735cb],
PUP.Optional.VBates, C:\Windows\System32\config\systemprofile\AppData\LocalLow\{D2020D47-707D-4E26-B4D9-739C4F4C2E9A}\{FBC0652C-7B29-4FB6-8ADA-91F54B267AD4}\1.5\tree.js, Do karantény, [45e42f0a1d7cb482a1ec6161ab5735cb],
PUP.Optional.VBates, C:\Windows\System32\config\systemprofile\AppData\LocalLow\{D2020D47-707D-4E26-B4D9-739C4F4C2E9A}\{FBC0652C-7B29-4FB6-8ADA-91F54B267AD4}\1.5\wlist.js, Do karantény, [45e42f0a1d7cb482a1ec6161ab5735cb],
Trojan.Injector.BHO, C:\settings.ini, Do karantény, [77b246f3ecad76c0c9f439a093719769],

Fyzické sektory: 0
(Nenalezeny žádné škodlivé položky)


(end)

Re: Prosím o kontrolu HijackThis, Network service, TrustedInstallerjednotka DVD RW

Napsal: 13 led 2016 20:08
od Telda
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.0.2 (01.06.2016)
Operating System: Windows 7 Enterprise x86
Ran by MINA (Administrator) on st 13.01.2016 at 20:13:00,22
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




File System: 70

Successfully deleted: C:\ProgramData\reviversoft (Folder)
Successfully deleted: C:\ProgramData\summersoft (Folder)
Successfully deleted: C:\user.js (File)
Successfully deleted: C:\Users\MINA\AppData\Local\{027D0994-051A-4A1E-8AF5-A2FE0506F41F} (Empty Folder)
Successfully deleted: C:\Users\MINA\AppData\Local\{05A74C1F-CEF8-478E-B506-E3B772E84F74} (Empty Folder)
Successfully deleted: C:\Users\MINA\AppData\Local\{09CE3668-371B-4CB0-AB03-4B62069AAFF6} (Empty Folder)
Successfully deleted: C:\Users\MINA\AppData\Local\{0C3E92A5-1728-4AF8-B242-5FDB515F9531} (Empty Folder)
Successfully deleted: C:\Users\MINA\AppData\Local\{14725A37-17F0-4BDF-90D8-6538BFD93564} (Empty Folder)
Successfully deleted: C:\Users\MINA\AppData\Local\{154EC483-B048-4503-8106-7D5F0E9B4BE1} (Empty Folder)
Successfully deleted: C:\Users\MINA\AppData\Local\{1CD85241-E79B-44F8-9F3F-025CBED3E3E2} (Empty Folder)
Successfully deleted: C:\Users\MINA\AppData\Local\{243A5597-67AC-4371-A773-4FB119176DDF} (Empty Folder)
Successfully deleted: C:\Users\MINA\AppData\Local\{2593C881-DF1F-4FD6-A6C1-B6F79B234D6E} (Empty Folder)
Successfully deleted: C:\Users\MINA\AppData\Local\{29387CEF-A0EB-4D33-8213-79AB06E4BDCF} (Empty Folder)
Successfully deleted: C:\Users\MINA\AppData\Local\{2E902BA3-1959-4B4E-8E03-F5E160A9B9AE} (Empty Folder)
Successfully deleted: C:\Users\MINA\AppData\Local\{3817EB72-048A-4BB2-A2D7-7D8B586194B1} (Empty Folder)
Successfully deleted: C:\Users\MINA\AppData\Local\{385A4937-1693-4F42-9640-3788F0AC8280} (Empty Folder)
Successfully deleted: C:\Users\MINA\AppData\Local\{38D80735-45E7-4330-B527-3C6DDEED8A0D} (Empty Folder)
Successfully deleted: C:\Users\MINA\AppData\Local\{411DA1F1-8EB1-42E7-98BF-CE01E868BD80} (Empty Folder)
Successfully deleted: C:\Users\MINA\AppData\Local\{41958332-863A-42DC-BB4A-B7B84C860C42} (Empty Folder)
Successfully deleted: C:\Users\MINA\AppData\Local\{459C5A50-F8D7-4E86-926A-CEFD7740926A} (Empty Folder)
Successfully deleted: C:\Users\MINA\AppData\Local\{4A60713C-A5FA-4FF6-84B2-20B35229066E} (Empty Folder)
Successfully deleted: C:\Users\MINA\AppData\Local\{5594F019-4BC0-4CA6-AAA4-1DBEC1A49F9F} (Empty Folder)
Successfully deleted: C:\Users\MINA\AppData\Local\{56F5FCD1-18B0-43B5-8C05-07D52129BCE5} (Empty Folder)
Successfully deleted: C:\Users\MINA\AppData\Local\{5B652DD4-E91E-4E1A-AB4D-0E9159575D33} (Empty Folder)
Successfully deleted: C:\Users\MINA\AppData\Local\{5C6EF9C9-D2AE-4975-AF4E-4351E580F5B7} (Empty Folder)
Successfully deleted: C:\Users\MINA\AppData\Local\{5E23BDC7-0D88-4EB0-89C1-932EB562EFEF} (Empty Folder)
Successfully deleted: C:\Users\MINA\AppData\Local\{607EBD5D-40F7-4DB5-B6F1-82B8DC37872D} (Empty Folder)
Successfully deleted: C:\Users\MINA\AppData\Local\{62982CCE-5A6D-4EB5-A2DE-764CDB67FE36} (Empty Folder)
Successfully deleted: C:\Users\MINA\AppData\Local\{65058341-03B6-43FF-A276-357B4DC2B0CB} (Empty Folder)
Successfully deleted: C:\Users\MINA\AppData\Local\{6716547F-B1B6-425A-A6F0-FF9A4DD8926E} (Empty Folder)
Successfully deleted: C:\Users\MINA\AppData\Local\{69D8A215-0A03-4275-9012-E1EC75CE8154} (Empty Folder)
Successfully deleted: C:\Users\MINA\AppData\Local\{6EA6D8E9-CE5C-4E95-8EAE-3EB6C643A965} (Empty Folder)
Successfully deleted: C:\Users\MINA\AppData\Local\{720DF769-4D96-4B3B-925C-9164717AB49D} (Empty Folder)
Successfully deleted: C:\Users\MINA\AppData\Local\{727B393D-AB4D-4152-B827-7D57FD761F33} (Empty Folder)
Successfully deleted: C:\Users\MINA\AppData\Local\{76ECD558-F025-4CD5-9521-2EBE4977D3D4} (Empty Folder)
Successfully deleted: C:\Users\MINA\AppData\Local\{7A419462-6E1B-4617-A0A8-FF2A89EA7474} (Empty Folder)
Successfully deleted: C:\Users\MINA\AppData\Local\{7AF9716D-82A1-41CD-88BB-C2AC548BF6CF} (Empty Folder)
Successfully deleted: C:\Users\MINA\AppData\Local\{7BFF4BB4-D6B6-44D5-B9D0-0596C8E56731} (Empty Folder)
Successfully deleted: C:\Users\MINA\AppData\Local\{7C41A4B5-8453-414A-A9EA-34F277B4BC96} (Empty Folder)
Successfully deleted: C:\Users\MINA\AppData\Local\{811E9C9B-AFDD-4D42-92EF-5A039891DC04} (Empty Folder)
Successfully deleted: C:\Users\MINA\AppData\Local\{92DDB585-2F12-4649-9202-55910C40022A} (Empty Folder)
Successfully deleted: C:\Users\MINA\AppData\Local\{95AC9166-1328-4AA3-9C71-BE069EC27544} (Empty Folder)
Successfully deleted: C:\Users\MINA\AppData\Local\{98FAF17E-DB1C-48BF-B6ED-EA15F36700E1} (Empty Folder)
Successfully deleted: C:\Users\MINA\AppData\Local\{9AB20FCC-C094-469E-B741-BFAE069410D0} (Empty Folder)
Successfully deleted: C:\Users\MINA\AppData\Local\{9BFED6E4-CD66-4600-A627-FF404BB406B9} (Empty Folder)
Successfully deleted: C:\Users\MINA\AppData\Local\{9FC0DB00-9585-4763-B657-300EA2D8ED14} (Empty Folder)
Successfully deleted: C:\Users\MINA\AppData\Local\{A2184AB0-B351-4DAE-B1AA-4D1210BD31A0} (Empty Folder)
Successfully deleted: C:\Users\MINA\AppData\Local\{A24FDD4B-31B8-4CB1-9400-1A29B0ABFF86} (Empty Folder)
Successfully deleted: C:\Users\MINA\AppData\Local\{AFCAC304-1336-46DD-8CD4-2860A397E7AC} (Empty Folder)
Successfully deleted: C:\Users\MINA\AppData\Local\{B487090F-56F3-4E2A-B58B-8DFF7D6C8554} (Empty Folder)
Successfully deleted: C:\Users\MINA\AppData\Local\{B4D42248-7F1C-4853-AB5C-CD299A76BBFB} (Empty Folder)
Successfully deleted: C:\Users\MINA\AppData\Local\{BA8CF095-6D57-449A-8F1D-70ECADE3E750} (Empty Folder)
Successfully deleted: C:\Users\MINA\AppData\Local\{C57D0DF8-3665-4D90-9F01-DBCD852AF4AD} (Empty Folder)
Successfully deleted: C:\Users\MINA\AppData\Local\{C907707C-E414-44B0-88FB-8B831EC33A1A} (Empty Folder)
Successfully deleted: C:\Users\MINA\AppData\Local\{CC6C8113-846C-447F-992A-A5D5AAE856BF} (Empty Folder)
Successfully deleted: C:\Users\MINA\AppData\Local\{CD4DDCA8-7B75-41F7-9294-570EC47B4E6A} (Empty Folder)
Successfully deleted: C:\Users\MINA\AppData\Local\{CF2DB98C-73EE-4041-8288-F9B247D4A7F1} (Empty Folder)
Successfully deleted: C:\Users\MINA\AppData\Local\{E9D205C7-3330-493C-8232-BB2726E571E7} (Empty Folder)
Successfully deleted: C:\Users\MINA\AppData\Local\{EC01EB2B-6B4E-4F1B-AA0D-BB150EE1D671} (Empty Folder)
Successfully deleted: C:\Users\MINA\AppData\Local\{EF3C9D2E-CC24-484B-81D2-B45F9C382273} (Empty Folder)
Successfully deleted: C:\Users\MINA\AppData\Local\{F45A0B81-1D14-4310-865F-5751DD6BBF7A} (Empty Folder)
Successfully deleted: C:\Users\MINA\AppData\Local\{FA12CF7A-7640-4958-89B4-06EA6863C896} (Empty Folder)
Successfully deleted: C:\Users\MINA\AppData\Local\{FB8C1659-EDE9-481B-A5FB-02B6D9C31FBC} (Empty Folder)
Successfully deleted: C:\Users\MINA\AppData\Roaming\getrighttogo (Folder)
Successfully deleted: C:\Users\MINA\AppData\Roaming\reviversoft (Folder)
Successfully deleted: C:\Windows\System32\Tasks\? (Task)
Successfully deleted: C:\Users\MINA\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8N1IHONX (Folder)
Successfully deleted: C:\Users\MINA\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\CBZ39SYJ (Folder)
Successfully deleted: C:\Users\MINA\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\MR3ADURO (Folder)
Successfully deleted: C:\Users\MINA\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WF51T3SK (Folder)



Registry: 3

Successfully deleted: HKLM\Software\Wow6432Node\Google\Chrome\Extensions\dlfienamagdnkekbbbocojppncdambda (Registry Key)
Successfully deleted: HKLM\Software\Wow6432Node\Google\Chrome\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd (Registry Key)
Successfully deleted: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{88BACB19-2DFD-4957-A6F8-0AE7E70CAF6A} (Registry Key)




~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on st 13.01.2016 at 20:14:42,28
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Časové pásmo: UTC+02:00
Stránka 1 z 6
Powered by phpBB® Forum Software © phpBB Limited
https://www.phpbb.com/