Prosím o kontrolu HJT

Místo pro vaše HiJackThis logy a logy z dalších programů…

Moderátoři: Mods_senior, Security team

Odpovědět
kamil_3
nováček
Příspěvky: 36
Registrován: červenec 16
Pohlaví: Nespecifikováno
Stav:
Offline

Prosím o kontrolu HJT

Příspěvekod kamil_3 » 06 črc 2016 17:41

Dobrý den, na NTB přítelkyně při kopírování souborů vždy vyskočí hláška: průzkumník přestal pracovat a nic se nepřekopíruje. Měl jsem podezření na vir, prošel jsem to antivirem (AVG) - 3 problémy odstaněny, dále jsem to nechal projít CCleanerem, vyčištěno. Také jsem systém nechal ověřit příkazovým řádkem - cmd.exe - sfc/scannow, to nenašlo žádnou závadu, ale kopírování stále nefunguje a již nevím co zkusit.
Předem děkuji za případné rady. Přikládám log z HJT.

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:16:12, on 6.7.2016
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18347)

FIREFOX: 47.0 (x86 cs)
Boot mode: Normal

Running processes:
C:\ProgramData\Avg_Update_0616tb\AVG-Secure-Search-Update_0616tb.exe
C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe
C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe
C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe
C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe
C:\Program Files (x86)\EgisTec Egis Software Update\EgisUpdate.exe
C:\Program Files (x86)\Launch Manager\LManager.exe
C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe
C:\Program Files (x86)\Acer Arcade Deluxe\PlayMovie\PMVService.exe
C:\Program Files (x86)\Winamp\winampa.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\AVG\Framework\Common\avguix.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Users\Michaela\Downloads\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/rdr.aspx?b=ACA ... 5t58k1a778
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://mysearch.avg.com/?cid={BC12DF1A-2413-4E3C-B4BB-97566A87268A}&mid=c7bde46bd20747d2895dd16f6b80bb8b-4a520fd13ecf848fd337564c18852775df9813c5&lang=cs&ds=AVG&coid=avgtbavg&cmpid=1214tb&pr=fr&d=2014-11-06 03:57:09&v=4.1.0.411&pid=wtu&sg=&sap=hp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Winamp Search Class - {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - C:\Program Files (x86)\Winamp Toolbar\winamptb.dll (file missing)
R3 - URLSearchHook: (no name) - - (no file)
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Winamp Toolbar Loader - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files (x86)\Winamp Toolbar\winamptb.dll (file missing)
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Pomocná služba pro přihlášení ke službě Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: AVG Web TuneUp - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Web TuneUp\4.3.1.831\AVG Web TuneUp.dll
O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~2\Office14\URLREDIR.DLL
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files (x86)\Winamp Toolbar\winamptb.dll (file missing)
O3 - Toolbar: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [BackupManagerTray] "C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe" -h -k
O4 - HKLM\..\Run: [EgisTecLiveUpdate] "C:\Program Files (x86)\EgisTec Egis Software Update\EgisUpdate.exe"
O4 - HKLM\..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe
O4 - HKLM\..\Run: [ArcadeDeluxeAgent] "C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe"
O4 - HKLM\..\Run: [PlayMovie] "C:\Program Files (x86)\Acer Arcade Deluxe\PlayMovie\PMVService.exe"
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files (x86)\Winamp\winampa.exe"
O4 - HKLM\..\Run: [ApnUpdater] "C:\Program Files (x86)\Ask.com\Updater\Updater.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [BCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files (x86)\AVG\Av\avuirunnerx.exe" C:\Program Files (x86)\AVG\Av\avgui.exe
O4 - HKLM\..\Run: [AvgUi] "C:\Program Files (x86)\AVG\Framework\Common\avguirnx.exe" /lps=fmw
O4 - HKCU\..\Run: [Global Registration] "C:\Program Files (x86)\Acer\Registration\GREG.exe" BOOT
O4 - HKCU\..\Run: [Sony PC Companion] "C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe" /Background
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'Default user')
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: &Winamp Search - C:\ProgramData\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Odeslat obrázek do zařízení &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Odeslat stránku do zařízení &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Send To Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: Send to &Bluetooth Device... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/200 ... ader55.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\18.2.0\ViProtocol.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - LSI Corporation - C:\Program Files\LSI SoftModem\agr64svc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AvgAMPS - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\Av\avgamps.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\Av\avgidsagenta.exe
O23 - Service: AVG Service (avgsvc) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\Av\avgwdsvca.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: GRegService (Greg_Service) - Acer Incorporated - C:\Program Files (x86)\Acer\Registration\GregHSRW.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: MyWinLocker Service (MWLService) - Egis Technology Inc. - C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\\MWLService.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NTI IScheduleSvc - NewTech Infosystems, Inc. - C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe
O23 - Service: NTI Backup Now 5 Backup Service (NTIBackupSvc) - NewTech InfoSystems, Inc. - C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe
O23 - Service: NTI Backup Now 5 Scheduler Service (NTISchedulerSvc) - NewTech Infosystems, Inc. - C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: Sony PC Companion - Avanquest Software - C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Updater Service - Acer - C:\Program Files\Acer\Acer Updater\UpdaterService.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: vToolbarUpdater40.3.1 - Unknown owner - C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\40.3.1\ToolbarUpdater.exe
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: WtuSystemSupport - Unknown owner - C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe

--
End of file - 15617 bytes
Nahoru
Reklama
Top
Uživatelský avatar
jaro3
člen Security týmu
Guru Level 15
Guru Level 15
Příspěvky: 43298
Registrován: červen 07
Bydliště: Jižní Čechy
Pohlaví: Muž
Stav:
Offline

Re: Prosím o kontrolu HJT

Příspěvekod jaro3 » 06 črc 2016 19:42

Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected. Poté klikni na Main (hlavní stránku ) a klikni na Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranění historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit dočasné soubory Windows, vysypat koš atd.
- Pokud používáš jen Google Chrome , tak ATF nemusíš použít.


Stáhni si TFC
http://www.geekstogo.com/forum/files/fi ... -oldtimer/
Otevři soubor a zavři všechny ostatní okna, Klikni na Start k zahájení procesu. Program by neměl trvat dlouho.
Poté by se měl PC restartovat, pokud ne , proveď sám.

Stáhni AdwCleaner (by Xplode)
http://www.bleepingcomputer.com/download/adwcleaner/

Ulož si ho na svojí plochu
Ukonči všechny programy , okna a prohlížeče
Spusť program poklepáním a klikni na „Prohledat-Scan“
Po skenu klikni na „Logfile“ ,objeví log ( jinak je uložen systémovem disku jako AdwCleaner[C?].txt), jeho obsah sem celý vlož.

Stáhni si Malwarebytes' Anti-Malware
- Při instalaci odeber zatržítko u „Povolit bezplatnou zkušební verzi Malwarebytes' Anti-Malware Premium“
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Aktualizace Malwarebytes' Anti-Malware a Spustit aplikaci Malwarebytes' Anti-Malware, pokud jo tak klikni na tlačítko konec
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a klikni na Skenovat nyní a
- po proběhnutí programu se ti objeví hláška vpravo dole tak klikni na Uložit výsledky a vyber zkopírovat do schránky a vlož sem celý log.
-jinak se log nachází zde: C:\ProgramData\Malwarebytes\Malwarebytes Anti-Malware\Logs

- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).

Pokud budou problémy , spusť v nouz. režimu.
Při práci s programy HJT, ComboFix,MbAM, SDFix aj. zavřete všechny ostatní aplikace a prohlížeče!
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
Nahoru
kamil_3
nováček
Příspěvky: 36
Registrován: červenec 16
Pohlaví: Nespecifikováno
Stav:
Offline

Re: Prosím o kontrolu HJT

Příspěvekod kamil_3 » 06 črc 2016 21:49

Log z ADW

# AdwCleaner v5.201 - Log vytvořen 06/07/2016 v 21:44:26
# Aktualizováno 30/06/2016 by ToolsLib
# Databáze : 2016-07-06.1 [Server]
# Operační system : Windows 7 Home Premium Service Pack 1 (X64)
# Uživatelské jméno : Michaela - MICHAELA-PC
# Spuštěno z : C:\Users\Michaela\Desktop\adwcleaner_5.201.exe
# Nastavení : Sken
# Podpora : https://toolslib.net/forum

***** [ Služby ] *****

Služba Nalezeno : WtuSystemSupport
Služba Nalezeno : vToolbarUpdater40.3.1

***** [ Složky ] *****

Složka Nalezeno : C:\ProgramData\AVG Secure Search
Složka Nalezeno : C:\ProgramData\AVG Security Toolbar
Složka Nalezeno : C:\ProgramData\ICQ\ICQToolbar
Složka Nalezeno : C:\ProgramData\Partner
Složka Nalezeno : C:\ProgramData\Winamp Toolbar
Složka Nalezeno : C:\ProgramData\avg web tuneup
Složka Nalezeno : C:\ProgramData\Avg_Update_0215tb
Složka Nalezeno : C:\ProgramData\Avg_Update_0616tb
Složka Nalezeno : C:\ProgramData\Avg_Update_1214tb
Složka Nalezeno : C:\ProgramData\Application Data\AVG Secure Search
Složka Nalezeno : C:\ProgramData\Application Data\AVG Security Toolbar
Složka Nalezeno : C:\ProgramData\Application Data\ICQ\ICQToolbar
Složka Nalezeno : C:\ProgramData\Application Data\Partner
Složka Nalezeno : C:\ProgramData\Application Data\Winamp Toolbar
Složka Nalezeno : C:\ProgramData\Application Data\avg web tuneup
Složka Nalezeno : C:\ProgramData\Application Data\Avg_Update_0215tb
Složka Nalezeno : C:\ProgramData\Application Data\Avg_Update_0616tb
Složka Nalezeno : C:\ProgramData\Application Data\Avg_Update_1214tb
Složka Nalezeno : C:\Program Files (x86)\Ask.com
Složka Nalezeno : C:\Program Files (x86)\DAEMON Tools Toolbar
Složka Nalezeno : C:\Program Files (x86)\ICQ6Toolbar
Složka Nalezeno : C:\Program Files (x86)\avg web tuneup
Složka Nalezeno : C:\Program Files (x86)\Common Files\AVG Secure Search
Složka Nalezeno : C:\Windows\installer\{86d4b82a-abed-442a-be86-96357b70f4fe}
Složka Nalezeno : C:\Windows\SysWOW64\C2MP
Složka Nalezeno : C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\avg web tuneup
Složka Nalezeno : C:\Users\Michaela\AppData\Local\FileViewPro
Složka Nalezeno : C:\Users\Michaela\AppData\Local\SoftonicAssistant
Složka Nalezeno : C:\Users\Michaela\AppData\Local\avg web tuneup
Složka Nalezeno : C:\Users\Michaela\AppData\LocalLow\AskToolbar
Složka Nalezeno : C:\Users\Michaela\AppData\LocalLow\avg web tuneup
Složka Nalezeno : C:\Users\Michaela\AppData\Roaming\Solvusoft
Složka Nalezeno : C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\extensions\DTToolbar@toolbarnet.com
Složka Nalezeno : C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\extensions\_gcMembers_@www.weatherblink.com
Složka Nalezeno : C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\extensions\_gcMembers_@www.weatherblink.com
Složka Nalezeno : C:\Program Files\Common Files\AVG Secure Search

***** [ Soubory ] *****

Soubor Nalezeno : C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\wtu-secure-search.xml
Soubor Nalezeno : C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\extensions\Avg@toolbar.xpi
Soubor Nalezeno : C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\searchplugins\avg-secure-search.xml
Soubor Nalezeno : C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\WeatherBlink
Soubor Nalezeno : C:\Windows\SysNative\roboot64.exe

***** [ DLL ] *****


***** [ WMI ] *****


***** [ Zástupci ] *****


***** [ Naplánované úlohy ] *****

Úloha Nalezeno : Scheduled Update for Ask Toolbar

***** [ Registry ] *****

Hodnota Nalezeno : HKCU\Software\Microsoft\Internet Explorer\Main [ICQ Search]
Klíč Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\Search\ask.com
Klíč Nalezeno : HKLM\SOFTWARE\Classes\AppID\GenericAskToolbar.DLL
Klíč Nalezeno : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL
Klíč Nalezeno : HKLM\SOFTWARE\Classes\AppID\winamptbServer.exe
Klíč Nalezeno : HKLM\SOFTWARE\Classes\PROTOCOLS\handler\viprotocol
Klíč Nalezeno : HKLM\SOFTWARE\Google\Chrome\NativeMessagingHosts\avgsh
Klíč Nalezeno : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin
Klíč Nalezeno : HKLM\SOFTWARE\Classes\s
Klíč Nalezeno : HKLM\SOFTWARE\Classes\protocols\handler\viprotocol
Klíč Nalezeno : HKLM\SOFTWARE\Classes\DTToolbar.ToolBandObj
Klíč Nalezeno : HKLM\SOFTWARE\Classes\DTToolbar.ToolBandObj.1
Klíč Nalezeno : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd
Klíč Nalezeno : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd.1
Klíč Nalezeno : HKLM\SOFTWARE\Classes\protector_dll.Protector
Klíč Nalezeno : HKLM\SOFTWARE\Classes\protector_dll.Protector.1
Klíč Nalezeno : HKLM\SOFTWARE\Classes\protector_dll.ProtectorBho
Klíč Nalezeno : HKLM\SOFTWARE\Classes\protector_dll.ProtectorBho.1
Klíč Nalezeno : HKLM\SOFTWARE\Classes\protector_dll.ProtectorLib
Klíč Nalezeno : HKLM\SOFTWARE\Classes\protector_dll.ProtectorLib.1
Klíč Nalezeno : HKLM\SOFTWARE\Classes\ScriptHelper.GenericWnd
Klíč Nalezeno : HKLM\SOFTWARE\Classes\ScriptHelper.GenericWnd.1
Klíč Nalezeno : HKLM\SOFTWARE\Classes\ScriptHelper.NativeApi
Klíč Nalezeno : HKLM\SOFTWARE\Classes\ScriptHelper.NativeApi.1
Klíč Nalezeno : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi
Klíč Nalezeno : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1
Klíč Nalezeno : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE
Klíč Nalezeno : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1
Klíč Nalezeno : HKLM\SOFTWARE\Classes\WINAMPTB.AOLTBSearch
Klíč Nalezeno : HKLM\SOFTWARE\Classes\WINAMPTB.AOLTBSearch.1
Klíč Nalezeno : HKLM\SOFTWARE\Classes\WINAMPTB.AOLToolBand
Klíč Nalezeno : HKLM\SOFTWARE\Classes\WINAMPTB.AOLToolBand.1
Klíč Nalezeno : HKLM\SOFTWARE\Classes\WINAMPTB.Downloader
Klíč Nalezeno : HKLM\SOFTWARE\Classes\WINAMPTB.Downloader.1
Klíč Nalezeno : HKLM\SOFTWARE\Classes\WINAMPTB.ToolbarInfo
Klíč Nalezeno : HKLM\SOFTWARE\Classes\WINAMPTB.ToolbarInfo.1
Klíč Nalezeno : HKLM\SOFTWARE\Classes\WINAMPTB.ToolbarParams
Klíč Nalezeno : HKLM\SOFTWARE\Classes\WINAMPTB.ToolbarParams.1
Klíč Nalezeno : HKLM\SOFTWARE\Classes\WinampTbServer.AolToolbarHelper
Klíč Nalezeno : HKLM\SOFTWARE\Classes\WinampTbServer.AolToolbarHelper.1
Klíč Nalezeno : HKLM\SOFTWARE\Classes\WtuServer.WtuServerObj
Klíč Nalezeno : HKLM\SOFTWARE\Classes\WtuServer.WtuServerObj.1
Klíč Nalezeno : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\AppID\{B27D9527-3762-4D71-963D-FB7A94FDD678}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{25CEE8EC-5730-41BC-8B58-22DDC8AB8C20}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{32099AAC-C132-4136-9E9A-4E364A424E17}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{57BCA5FA-5DBB-45A2-B558-1755C3F6253B}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{6EF4E91D-DDD5-4478-BCA7-DA04435934C0}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{841FD004-57A2-4B49-BBDB-5897394619DB}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{933B95E2-E7B7-4AD9-B952-7AC336682AE3}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{B38D6EDE-390B-4620-8365-29E16459EBDA}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{E1164984-B567-47BD-A7FF-240C2594404A}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{EBF2BA02-9094-4C5A-858B-BB198F3D8DE2}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{F20F11FD-203E-45A9-B7BB-AFC1B4FEA7A6}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{FE178B09-C8AA-4734-804D-1849BCCA0C29}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{B2BC04DF-EFBD-409A-95CA-36874E5AB92A}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{CA3A5461-96B5-46DD-9341-5350D3C94615}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\Interface\{0F54B66A-21CF-4548-AE59-A6B83EE6676F}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\Interface\{51A971CA-D36E-4D13-A799-2CF0A491D04D}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\Interface\{56FBEA9F-EF93-4318-B75F-A96FC7C7BD7B}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\Interface\{78B3C85E-44FF-4DC8-B3AD-156F39DC75E5}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\Interface\{841FD004-57A2-4B49-BBDB-5897394619DB}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\Interface\{E1164984-B567-47BD-A7FF-240C2594404A}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\Interface\{E19FDA06-5BDF-43C2-B794-BCD8A4C2051F}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\Interface\{FAB076F5-E4DD-4EA4-AFEE-F18BF972B057}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\TypeLib\{3E288F79-03E4-4983-A48E-0D879B51FF19}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\TypeLib\{538CD77C-BFDD-49B0-9562-77419CAB89D1}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\TypeLib\{E716F183-5AD7-11DC-9670-00508DC0D496}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\TypeLib\{4BC8AD89-AC5F-4DBD-A38F-C355C7DD33D7}
Klíč Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{25CEE8EC-5730-41BC-8B58-22DDC8AB8C20}
Klíč Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}
Klíč Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}
Klíč Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{25CEE8EC-5730-41BC-8B58-22DDC8AB8C20}
Klíč Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{32099AAC-C132-4136-9E9A-4E364A424E17}
Klíč Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{57BCA5FA-5DBB-45A2-B558-1755C3F6253B}
Klíč Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}
Klíč Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
Klíč Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EBF2BA02-9094-4C5A-858B-BB198F3D8DE2}
Klíč Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{B2BC04DF-EFBD-409A-95CA-36874E5AB92A}
Klíč Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{25CEE8EC-5730-41BC-8B58-22DDC8AB8C20}
Klíč Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{32099AAC-C132-4136-9E9A-4E364A424E17}
Klíč Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{95B7759C-8C7F-4BF1-B163-73684A933233}
Klíč Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}
Klíč Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{B2BC04DF-EFBD-409A-95CA-36874E5AB92A}
Hodnota Nalezeno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{32099AAC-C132-4136-9E9A-4E364A424E17}]
Hodnota Nalezeno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Hodnota Nalezeno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{EBF2BA02-9094-4C5A-858B-BB198F3D8DE2}]
Hodnota Nalezeno : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Hodnota Nalezeno : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{57BCA5FA-5DBB-45A2-B558-1755C3F6253B}]
Hodnota Nalezeno : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{57BCA5FA-5DBB-45A2-B558-1755C3F6253B}]
Hodnota Nalezeno : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{855F3B16-6D32-4FE6-8A56-BBB695989046}]
Hodnota Nalezeno : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{32099AAC-C132-4136-9E9A-4E364A424E17}]
Klíč Nalezeno : HKCU\Software\APN
Klíč Nalezeno : HKCU\Software\Ask.com
Klíč Nalezeno : HKCU\Software\Softonic
Klíč Nalezeno : HKCU\Software\Winamp Toolbar
Klíč Nalezeno : HKCU\Software\AVG Tuneup
Klíč Nalezeno : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\ICQ\ICQToolbar
Klíč Nalezeno : HKCU\Software\AppDataLow\AskToolbarInfo
Klíč Nalezeno : HKCU\Software\AppDataLow\Software\AskToolbar
Klíč Nalezeno : HKLM\SOFTWARE\APN
Klíč Nalezeno : HKLM\SOFTWARE\AskToolbar
Klíč Nalezeno : HKLM\SOFTWARE\dt soft\daemon tools toolbar
Klíč Nalezeno : HKLM\SOFTWARE\ICQ\ICQToolbar
Klíč Nalezeno : HKLM\SOFTWARE\Winamp Toolbar
Klíč Nalezeno : HKLM\SOFTWARE\AVG Tuneup
Klíč Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\{79A765E1-C399-405B-85AF-466F52E918B0}
Klíč Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\SoftonicAssistant
Klíč Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
Klíč Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{EE171732-BEB4-4576-887D-CB62727F01CA}
Klíč Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\daemon tools toolbar
Klíč Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Winamp Toolbar
Klíč Nalezeno : HKU\.DEFAULT\Software\AskToolbar
Klíč Nalezeno : HKU\S-1-5-21-568773745-2282064293-1094968495-1000\Software\APN
Klíč Nalezeno : HKU\S-1-5-21-568773745-2282064293-1094968495-1000\Software\Ask.com
Klíč Nalezeno : HKU\S-1-5-21-568773745-2282064293-1094968495-1000\Software\Softonic
Klíč Nalezeno : HKU\S-1-5-21-568773745-2282064293-1094968495-1000\Software\Winamp Toolbar
Klíč Nalezeno : HKU\S-1-5-21-568773745-2282064293-1094968495-1000\Software\AVG Tuneup
Klíč Nalezeno : HKU\S-1-5-21-568773745-2282064293-1094968495-1000\Software\AppDataLow\AskToolbarInfo
Klíč Nalezeno : HKU\S-1-5-21-568773745-2282064293-1094968495-1000\Software\AppDataLow\Software\AskToolbar
Klíč Nalezeno : HKU\S-1-5-21-568773745-2282064293-1094968495-1000\Software\Microsoft\Windows\CurrentVersion\Uninstall\{79A765E1-C399-405B-85AF-466F52E918B0}
Klíč Nalezeno : HKU\S-1-5-21-568773745-2282064293-1094968495-1000\Software\Microsoft\Windows\CurrentVersion\Uninstall\SoftonicAssistant
Klíč Nalezeno : HKCU\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-568773745-2282064293-1094968495-1000\Software\ICQ\ICQToolbar
Klíč Nalezeno : HKU\S-1-5-18\Software\AskToolbar
Klíč Nalezeno : HKLM\SOFTWARE\Classes\Installer\Features\A28B4D68DEBAA244EB686953B7074FEF
Klíč Nalezeno : HKLM\SOFTWARE\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF
Klíč Nalezeno : HKLM\SOFTWARE\Classes\Installer\UpgradeCodes\F928123A039649549966D4C29D35B1C9
Klíč Nalezeno : HKLM\SOFTWARE\Classes\Installer\UpgradeCodes\F928123A039649549966d4C29D35B1C9
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0CFE535C35F99574E8340BFA75BF92C2
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\261F213D1F55267499B1F87D0CC3BCF7
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\741B4ADF27276464790022C965AB6DA8
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7DE196B10195F5647A2B21B761F3DE01
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9D4F5849367142E4685ED8C25E44C5ED
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A5875B04372C19545BEB90D4D606C472
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A876D9E80B896EC44A8620248CC79296
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B66FFAB725B92594C986DE826A867888
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\120DFADEB50841F408F04D2A278F9509
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B5BAE2ED018083A4C8DA86D6E3F4B024
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\F928123A039649549966D4C29D35B1C9
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\F928123A039649549966d4C29D35B1C9
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF
Data Nalezeno : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page] - hxxps://mysearch.avg.com/?cid={BC12DF1A-2413-4E3C-B4BB-97566A87268A}&mid=c7bde46bd20747d2895dd16f6b80bb8b-4a520fd13ecf848fd337564c18852775df9813c5&lang=cs&ds=AVG&coid=avgtbavg&cmpid=1214tb&pr=fr&d=2014-11-06 03:57:09&v=4.1.0.411&pid=wtu&sg=&sap=hp
Data Nalezeno : HKCU\Software\Microsoft\Internet Explorer\Main [ICQ Search] - hxxp://www.icq.com/search/results.php?q={searchTerms}&ch_id=osd
Data Nalezeno : HKU\S-1-5-21-568773745-2282064293-1094968495-1000\Software\Microsoft\Internet Explorer\Main [Start Page] - hxxps://mysearch.avg.com/?cid={BC12DF1A-2413-4E3C-B4BB-97566A87268A}&mid=c7bde46bd20747d2895dd16f6b80bb8b-4a520fd13ecf848fd337564c18852775df9813c5&lang=cs&ds=AVG&coid=avgtbavg&cmpid=1214tb&pr=fr&d=2014-11-06 03:57:09&v=4.1.0.411&pid=wtu&sg=&sap=hp
Data Nalezeno : HKU\S-1-5-21-568773745-2282064293-1094968495-1000\Software\Microsoft\Internet Explorer\Main [ICQ Search] - hxxp://www.icq.com/search/results.php?q={searchTerms}&ch_id=osd
Klíč Nalezeno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}
Klíč Nalezeno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
Klíč Nalezeno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C}
Klíč Nalezeno : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C}
Klíč Nalezeno : HKU\S-1-5-21-568773745-2282064293-1094968495-1000\Software\Microsoft\Internet Explorer\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}
Klíč Nalezeno : HKU\S-1-5-21-568773745-2282064293-1094968495-1000\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
Klíč Nalezeno : HKU\S-1-5-21-568773745-2282064293-1094968495-1000\Software\Microsoft\Internet Explorer\SearchScopes\{EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C}
Hodnota Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [ApnUpdater]
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Microsoft\Shared Tools\MsConfig\StartupReg\vProt

***** [ Prohlížeče ] *****

[C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Nalezeno : user_pref("avg.wtu.ext.extParams", "{\"action\":\"extParams\",\"data\":{\"searchParams\":{\"pid\":\"wtu\",\"cid\":\"{0687dcda-8288-4f7c-a5ac-257f92d3746b}\",\"mid\":\"c7bde46bd20747d2895dd16f6b80bb8b-[...]
[C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Nalezeno : user_pref("avg.wtu.ext.setting_hp_list", "[{\"name\":\"AVG Secure Search\",\"value\":\"hxxps://mysearch.avg.com\"},{\"name\":\"Google\",\"value\":\"hxxp://www.google.com\"},{\"name\":\"Yahoo\",\"value[...]
[C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Nalezeno : user_pref("browser.search.selectedEngine", "AVG Secure Search");
[C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Nalezeno : user_pref("browser.startup.homepage", "hxxp://home.tb.ask.com/index.jhtml?n=7829e753");
[C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Nalezeno : user_pref("extensions.toolbar.mindspark._4zMembers_.BUTTON_STRUCTURE", "[{\"b\":224542617,\"c\":\"mindspark.magnify\",\"p\":\"L.0\"},{\"b\":224542618,\"c\":\"mindspark.entersearchterms\",\"p\":\"L.0.0[...]
[C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Nalezeno : user_pref("extensions.toolbar.mindspark._4zMembers_.browser.version.last", "43.0");
[C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Nalezeno : user_pref("extensions.toolbar.mindspark._4zMembers_.firstKnownVersion", "6.66.4.38450");
[C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Nalezeno : user_pref("extensions.toolbar.mindspark._4zMembers_.homepage", "hxxp://home.tb.ask.com/index.jhtml?ptb=83366A34-587E-4A02-B23C-977A3E691A02&n=780c762c&p2=^HJ^xdm073^S10570^cz&si=pconvFF");
[C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Nalezeno : user_pref("extensions.toolbar.mindspark._4zMembers_.hp.enabled", true);
[C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Nalezeno : user_pref("extensions.toolbar.mindspark._4zMembers_.hp.guardType", "HPR");
[C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Nalezeno : user_pref("extensions.toolbar.mindspark._4zMembers_.hp.user.defined", true);
[C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Nalezeno : user_pref("extensions.toolbar.mindspark._4zMembers_.initialized", true);
[C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Nalezeno : user_pref("extensions.toolbar.mindspark._4zMembers_.installKeysSource", "LocalStorage");
[C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Nalezeno : user_pref("extensions.toolbar.mindspark._4zMembers_.installType", "XPI");
[C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Nalezeno : user_pref("extensions.toolbar.mindspark._4zMembers_.installation.contextKey", "");
[C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Nalezeno : user_pref("extensions.toolbar.mindspark._4zMembers_.installation.dlpCountryCode", "CZ");
[C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Nalezeno : user_pref("extensions.toolbar.mindspark._4zMembers_.installation.installDate", "2014082604");
[C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Nalezeno : user_pref("extensions.toolbar.mindspark._4zMembers_.installation.partnerId", "^HJ^xdm073^S10570^cz");
[C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Nalezeno : user_pref("extensions.toolbar.mindspark._4zMembers_.installation.partnerSubId", "pconvFF");
[C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Nalezeno : user_pref("extensions.toolbar.mindspark._4zMembers_.installation.pixelUrl", "hxxp://videodownloadconverter.dl.tb.ask.com/install_pixels.jhtml?partner=^HJ^xdm073^S10570^cz&coId=df8e902e11a04a80a1b532b0[...]
[C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Nalezeno : user_pref("extensions.toolbar.mindspark._4zMembers_.installation.success", true);
[C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Nalezeno : user_pref("extensions.toolbar.mindspark._4zMembers_.installation.toolbarId", "83366A34-587E-4A02-B23C-977A3E691A02");
[C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Nalezeno : user_pref("extensions.toolbar.mindspark._4zMembers_.isCompliantUninstallImplementation", true);
[C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Nalezeno : user_pref("extensions.toolbar.mindspark._4zMembers_.lastActivePing", "1453331025416");
[C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Nalezeno : user_pref("extensions.toolbar.mindspark._4zMembers_.lastKnownVersion", "7.38.8.45267");
[C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Nalezeno : user_pref("extensions.toolbar.mindspark._4zMembers_.lssState", "{\"previousLocales\":[\"cs\",\"en-US\",\"en\"],\"supportedLocales\":[\"de\",\"es\",\"pt\",\"ja\",\"en\"],\"defaultLocale\":\"en\",\"supp[...]
[C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Nalezeno : user_pref("extensions.toolbar.mindspark._4zMembers_.options.defaultSearch", false);
[C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Nalezeno : user_pref("extensions.toolbar.mindspark._4zMembers_.options.homePageEnabled", false);
[C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Nalezeno : user_pref("extensions.toolbar.mindspark._4zMembers_.options.keywordEnabled", false);
[C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Nalezeno : user_pref("extensions.toolbar.mindspark._4zMembers_.options.tabEnabled", false);
[C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Nalezeno : user_pref("extensions.toolbar.mindspark._4zMembers_.partnerPixelFired", true);
[C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Nalezeno : user_pref("extensions.toolbar.mindspark._4zMembers_.productDeliveryOption.language", "en");
[C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Nalezeno : user_pref("extensions.toolbar.mindspark._4zMembers_.productDeliveryOption.type", "Toolbar");
[C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Nalezeno : user_pref("extensions.toolbar.mindspark._4zMembers_.successUrl", "hxxp://pconverter.com/thankyou.php");
[C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Nalezeno : user_pref("extensions.toolbar.mindspark._4zMembers_.toolbar.versionChanged", false);
[C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Nalezeno : user_pref("extensions.toolbar.mindspark._4zMembers_.toolbarCollapsed", true);
[C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Nalezeno : user_pref("extensions.toolbar.mindspark._4zMembers_.uninstallTasks", "{\"prefBranchesToDelete\":[\"extensions.toolbar.mindspark._4zMembers_.\"],\"filesToDelete\":[\"C:\\\\Users\\\\Michaela\\\\AppData\[...]
[C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Nalezeno : user_pref("extensions.toolbar.mindspark._4zMembers_.weather.location", "10001");
[C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Nalezeno : user_pref("extensions.toolbar.mindspark._gcMembers_.BUTTON_STRUCTURE", "[{\"b\":224547468,\"c\":\"mindspark.magnify\",\"p\":\"L.0\"},{\"b\":224547469,\"c\":\"mindspark.entersearchterms\",\"p\":\"L.0.0[...]
[C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Nalezeno : user_pref("extensions.toolbar.mindspark._gcMembers_.browser.startup.homepage.prev", "hxxps://mysearch.avg.com/?cid={BC12DF1A-2413-4E3C-B4BB-97566A87268A}&mid=c7bde46bd20747d2895dd16f6b80bb8b-4a520fd13[...]
[C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Nalezeno : user_pref("extensions.toolbar.mindspark._gcMembers_.browser.startup.homepage.savedPrev", "true");
[C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Nalezeno : user_pref("extensions.toolbar.mindspark._gcMembers_.browser.startup.homepage.tb", "hxxp://home.tb.ask.com/index.jhtml?n=7829e753");
[C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Nalezeno : user_pref("extensions.toolbar.mindspark._gcMembers_.browser.startup.page.savedPrev", 1);
[C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Nalezeno : user_pref("extensions.toolbar.mindspark._gcMembers_.browser.startup.page.tb", 1);
[C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Nalezeno : user_pref("extensions.toolbar.mindspark._gcMembers_.browser.version.last", "47.0");
[C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Nalezeno : user_pref("extensions.toolbar.mindspark._gcMembers_.firstKnownVersion", "7.38.8.56523");
[C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Nalezeno : user_pref("extensions.toolbar.mindspark._gcMembers_.homepage", "hxxp://home.tb.ask.com/index.jhtml?n=7829e753");
[C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Nalezeno : user_pref("extensions.toolbar.mindspark._gcMembers_.hp.enabled", true);
[C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Nalezeno : user_pref("extensions.toolbar.mindspark._gcMembers_.hp.guardType", "HPR");
[C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Nalezeno : user_pref("extensions.toolbar.mindspark._gcMembers_.hp.user.defined", false);
[C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Nalezeno : user_pref("extensions.toolbar.mindspark._gcMembers_.initialized", true);
[C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Nalezeno : user_pref("extensions.toolbar.mindspark._gcMembers_.installation.dlpCountryCode", "CZ");
[C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Nalezeno : user_pref("extensions.toolbar.mindspark._gcMembers_.installation.installDate", "2016012115");
[C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Nalezeno : user_pref("extensions.toolbar.mindspark._gcMembers_.installation.success", true);
[C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Nalezeno : user_pref("extensions.toolbar.mindspark._gcMembers_.lastActivePing", "1467863151504");
[C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Nalezeno : user_pref("extensions.toolbar.mindspark._gcMembers_.lastKnownVersion", "7.38.8.56523");
[C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Nalezeno : user_pref("extensions.toolbar.mindspark._gcMembers_.lssState", "{\"previousLocales\":[\"cs\",\"en-US\",\"en\"],\"supportedLocales\":[\"de\",\"es\",\"pt\",\"ja\",\"en\"],\"defaultLocale\":\"en\",\"supp[...]
[C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Nalezeno : user_pref("extensions.toolbar.mindspark._gcMembers_.options.defaultSearch", false);
[C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Nalezeno : user_pref("extensions.toolbar.mindspark._gcMembers_.options.homePageEnabled", false);
[C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Nalezeno : user_pref("extensions.toolbar.mindspark._gcMembers_.options.keywordEnabled", false);
[C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Nalezeno : user_pref("extensions.toolbar.mindspark._gcMembers_.options.tabEnabled", false);
[C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Nalezeno : user_pref("extensions.toolbar.mindspark._gcMembers_.productDeliveryOption.language", "en");
[C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Nalezeno : user_pref("extensions.toolbar.mindspark._gcMembers_.productDeliveryOption.type", "Toolbar");
[C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Nalezeno : user_pref("extensions.toolbar.mindspark._gcMembers_.searchHistory", "perní\rky k výo\rí||KameHák 5||vinaYství atpánek rulandské aedé||aablony frozen");
[C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Nalezeno : user_pref("extensions.toolbar.mindspark._gcMembers_.successUrl", "hxxp://weatherblink.dl.tb.ask.com/installComplete.jhtml");
[C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Nalezeno : user_pref("extensions.toolbar.mindspark._gcMembers_.toolbar.versionChanged", false);
[C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Nalezeno : user_pref("extensions.toolbar.mindspark._gcMembers_.toolbarCollapsed", false);
[C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Nalezeno : user_pref("extensions.toolbar.mindspark._gcMembers_.uninstallTasks", "{\"prefBranchesToDelete\":[\"extensions.toolbar.mindspark._gcMembers_.\"],\"filesToDelete\":[\"C:\\\\Users\\\\Michaela\\\\AppData\[...]
[C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Nalezeno : user_pref("extensions.toolbar.mindspark.hp.enabled", true);
[C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Nalezeno : user_pref("extensions.toolbar.mindspark.hp.enabled.guid", "weatherblink@mindspark.com");
[C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Nalezeno : user_pref("extensions.toolbar.mindspark.lastInstalled", "weatherblink@mindspark.com");

*************************

C:\AdwCleaner\AdwCleaner[S1].txt - [34809 bytů] - [06/07/2016 21:44:26]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [34883 bytů] ##########
Nahoru
Uživatelský avatar
jaro3
člen Security týmu
Guru Level 15
Guru Level 15
Příspěvky: 43298
Registrován: červen 07
Bydliště: Jižní Čechy
Pohlaví: Muž
Stav:
Offline

Re: Prosím o kontrolu HJT

Příspěvekod jaro3 » 06 črc 2016 23:20

A Malwarebytes' Anti-Malware?

Spusť znovu AdwCleaner (u Windows Vista či Windows7, klikni na AdwCleaner pravým a vyber „Spustit jako správce“
klikni na „Prohledat-Scan“, po prohledání klikni na „ Cleaning (Vymazat)“

Program provede opravu, po automatickém restartu neukáže log (C:\AdwCleaner [C?].txt) , jeho obsah sem celý vlož.

Stáhni si Junkware Removal Tool by Thisisu
http://www.bleepingcomputer.com/downloa ... oval-tool/
na svojí plochu.

Deaktivuj si svůj antivirový program. Pravým tl. myši klikni na JRT.exe a vyber „spustit jako správce“. Pro pokračování budeš vyzván ke stisknutí jakékoliv klávesy. Na nějakou klikni.
Začne skenování programu. Skenování může trvat dloho , podle množství nákaz. Po ukončení skenu se objeví log (JRT.txt) , který se uloží na ploše.
Zkopíruj sem prosím celý jeho obsah.
Při práci s programy HJT, ComboFix,MbAM, SDFix aj. zavřete všechny ostatní aplikace a prohlížeče!
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
Nahoru
kamil_3
nováček
Příspěvky: 36
Registrován: červenec 16
Pohlaví: Nespecifikováno
Stav:
Offline

Re: Prosím o kontrolu HJT

Příspěvekod kamil_3 » 07 črc 2016 11:17

Po provedení bodu1 a restartu:
Následující bude v druhé zprávě.

# AdwCleaner v5.201 - Log vytvořen 07/07/2016 v 11:08:25
# Aktualizováno 30/06/2016 by ToolsLib
# Databáze : 2016-07-06.1 [Server]
# Operační system : Windows 7 Home Premium Service Pack 1 (X64)
# Uživatelské jméno : Michaela - MICHAELA-PC
# Spuštěno z : C:\Users\Michaela\Desktop\adwcleaner_5.201.exe
# Nastavení : Čištění
# Podpora : https://toolslib.net/forum

***** [ Služby ] *****

[-] Služba Smazáno : WtuSystemSupport
[-] Služba Smazáno : vToolbarUpdater40.3.1

***** [ Složky ] *****

[-] Složka Smazáno : C:\ProgramData\AVG Secure Search
[-] Složka Smazáno : C:\ProgramData\AVG Security Toolbar
[-] Složka Smazáno : C:\ProgramData\ICQ\ICQToolbar
[-] Složka Smazáno : C:\ProgramData\Partner
[-] Složka Smazáno : C:\ProgramData\Winamp Toolbar
[-] Složka Smazáno : C:\ProgramData\avg web tuneup
[-] Složka Smazáno : C:\ProgramData\Avg_Update_0215tb
[-] Složka Smazáno : C:\ProgramData\Avg_Update_0616tb
[-] Složka Smazáno : C:\ProgramData\Avg_Update_1214tb
[#] Složka Smazáno : C:\ProgramData\Application Data\AVG Secure Search
[#] Složka Smazáno : C:\ProgramData\Application Data\AVG Security Toolbar
[#] Složka Smazáno : C:\ProgramData\Application Data\ICQ\ICQToolbar
[#] Složka Smazáno : C:\ProgramData\Application Data\Partner
[#] Složka Smazáno : C:\ProgramData\Application Data\Winamp Toolbar
[#] Složka Smazáno : C:\ProgramData\Application Data\avg web tuneup
[#] Složka Smazáno : C:\ProgramData\Application Data\Avg_Update_0215tb
[#] Složka Smazáno : C:\ProgramData\Application Data\Avg_Update_0616tb
[#] Složka Smazáno : C:\ProgramData\Application Data\Avg_Update_1214tb
[-] Složka Smazáno : C:\Program Files (x86)\Ask.com
[-] Složka Smazáno : C:\Program Files (x86)\DAEMON Tools Toolbar
[-] Složka Smazáno : C:\Program Files (x86)\ICQ6Toolbar
[-] Složka Smazáno : C:\Program Files (x86)\avg web tuneup
[-] Složka Smazáno : C:\Program Files (x86)\Common Files\AVG Secure Search
[-] Složka Smazáno : C:\Windows\installer\{86d4b82a-abed-442a-be86-96357b70f4fe}
[-] Složka Smazáno : C:\Windows\SysWOW64\C2MP
[-] Složka Smazáno : C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\avg web tuneup
[-] Složka Smazáno : C:\Users\Michaela\AppData\Local\FileViewPro
[-] Složka Smazáno : C:\Users\Michaela\AppData\Local\SoftonicAssistant
[-] Složka Smazáno : C:\Users\Michaela\AppData\Local\avg web tuneup
[-] Složka Smazáno : C:\Users\Michaela\AppData\LocalLow\AskToolbar
[-] Složka Smazáno : C:\Users\Michaela\AppData\LocalLow\avg web tuneup
[-] Složka Smazáno : C:\Users\Michaela\AppData\Roaming\Solvusoft
[-] Složka Smazáno : C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\extensions\DTToolbar@toolbarnet.com
[-] Složka Smazáno : C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\extensions\_gcMembers_@www.weatherblink.com
[#] Složka Smazáno : C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\extensions\_gcMembers_@www.weatherblink.com
[-] Složka Smazáno : C:\Program Files\Common Files\AVG Secure Search

***** [ Soubory ] *****

[-] Soubor Smazáno : C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\wtu-secure-search.xml
[-] Soubor Smazáno : C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\extensions\Avg@toolbar.xpi
[-] Soubor Smazáno : C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\searchplugins\avg-secure-search.xml
[-] Soubor Smazáno : C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\WeatherBlink
[-] Soubor Smazáno : C:\Windows\SysNative\roboot64.exe

***** [ DLLs ] *****


***** [ WMI ] *****


***** [ Zástupci ] *****


***** [ Naplánované úlohy ] *****

[-] Úloha Smazáno : Scheduled Update for Ask Toolbar

***** [ Registry ] *****

[-] Hodnota Smazáno : HKCU\Software\Microsoft\Internet Explorer\Main [ICQ Search]
[-] Klíč Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\Search\ask.com
[-] Klíč Smazáno : HKLM\SOFTWARE\Classes\AppID\GenericAskToolbar.DLL
[-] Klíč Smazáno : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL
[-] Klíč Smazáno : HKLM\SOFTWARE\Classes\AppID\winamptbServer.exe
[-] Klíč Smazáno : HKLM\SOFTWARE\Classes\PROTOCOLS\handler\viprotocol
[-] Klíč Smazáno : HKLM\SOFTWARE\Google\Chrome\NativeMessagingHosts\avgsh
[-] Klíč Smazáno : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin
[-] Klíč Smazáno : HKLM\SOFTWARE\Classes\s
[-] Klíč Smazáno : HKLM\SOFTWARE\Classes\DTToolbar.ToolBandObj
[-] Klíč Smazáno : HKLM\SOFTWARE\Classes\DTToolbar.ToolBandObj.1
[-] Klíč Smazáno : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd
[-] Klíč Smazáno : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd.1
[-] Klíč Smazáno : HKLM\SOFTWARE\Classes\protector_dll.Protector
[-] Klíč Smazáno : HKLM\SOFTWARE\Classes\protector_dll.Protector.1
[-] Klíč Smazáno : HKLM\SOFTWARE\Classes\protector_dll.ProtectorBho
[-] Klíč Smazáno : HKLM\SOFTWARE\Classes\protector_dll.ProtectorBho.1
[-] Klíč Smazáno : HKLM\SOFTWARE\Classes\protector_dll.ProtectorLib
[-] Klíč Smazáno : HKLM\SOFTWARE\Classes\protector_dll.ProtectorLib.1
[-] Klíč Smazáno : HKLM\SOFTWARE\Classes\ScriptHelper.GenericWnd
[-] Klíč Smazáno : HKLM\SOFTWARE\Classes\ScriptHelper.GenericWnd.1
[-] Klíč Smazáno : HKLM\SOFTWARE\Classes\ScriptHelper.NativeApi
[-] Klíč Smazáno : HKLM\SOFTWARE\Classes\ScriptHelper.NativeApi.1
[-] Klíč Smazáno : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi
[-] Klíč Smazáno : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1
[-] Klíč Smazáno : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE
[-] Klíč Smazáno : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1
[-] Klíč Smazáno : HKLM\SOFTWARE\Classes\WINAMPTB.AOLTBSearch
[-] Klíč Smazáno : HKLM\SOFTWARE\Classes\WINAMPTB.AOLTBSearch.1
[-] Klíč Smazáno : HKLM\SOFTWARE\Classes\WINAMPTB.AOLToolBand
[-] Klíč Smazáno : HKLM\SOFTWARE\Classes\WINAMPTB.AOLToolBand.1
[-] Klíč Smazáno : HKLM\SOFTWARE\Classes\WINAMPTB.Downloader
[-] Klíč Smazáno : HKLM\SOFTWARE\Classes\WINAMPTB.Downloader.1
[-] Klíč Smazáno : HKLM\SOFTWARE\Classes\WINAMPTB.ToolbarInfo
[-] Klíč Smazáno : HKLM\SOFTWARE\Classes\WINAMPTB.ToolbarInfo.1
[-] Klíč Smazáno : HKLM\SOFTWARE\Classes\WINAMPTB.ToolbarParams
[-] Klíč Smazáno : HKLM\SOFTWARE\Classes\WINAMPTB.ToolbarParams.1
[-] Klíč Smazáno : HKLM\SOFTWARE\Classes\WinampTbServer.AolToolbarHelper
[-] Klíč Smazáno : HKLM\SOFTWARE\Classes\WinampTbServer.AolToolbarHelper.1
[-] Klíč Smazáno : HKLM\SOFTWARE\Classes\WtuServer.WtuServerObj
[-] Klíč Smazáno : HKLM\SOFTWARE\Classes\WtuServer.WtuServerObj.1
[-] Klíč Smazáno : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}
[-] Klíč Smazáno : HKLM\SOFTWARE\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
[-] Klíč Smazáno : HKLM\SOFTWARE\Classes\AppID\{B27D9527-3762-4D71-963D-FB7A94FDD678}
[-] Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}
[-] Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{25CEE8EC-5730-41BC-8B58-22DDC8AB8C20}
[-] Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{32099AAC-C132-4136-9E9A-4E364A424E17}
[-] Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
[-] Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{57BCA5FA-5DBB-45A2-B558-1755C3F6253B}
[-] Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{6EF4E91D-DDD5-4478-BCA7-DA04435934C0}
[-] Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{841FD004-57A2-4B49-BBDB-5897394619DB}
[-] Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{933B95E2-E7B7-4AD9-B952-7AC336682AE3}
[-] Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}
[-] Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{B38D6EDE-390B-4620-8365-29E16459EBDA}
[-] Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}
[-] Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}
[-] Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{E1164984-B567-47BD-A7FF-240C2594404A}
[-] Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{EBF2BA02-9094-4C5A-858B-BB198F3D8DE2}
[-] Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{F20F11FD-203E-45A9-B7BB-AFC1B4FEA7A6}
[-] Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{FE178B09-C8AA-4734-804D-1849BCCA0C29}
[-] Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{B2BC04DF-EFBD-409A-95CA-36874E5AB92A}
[-] Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{CA3A5461-96B5-46DD-9341-5350D3C94615}
[-] Klíč Smazáno : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
[-] Klíč Smazáno : HKLM\SOFTWARE\Classes\Interface\{0F54B66A-21CF-4548-AE59-A6B83EE6676F}
[-] Klíč Smazáno : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
[-] Klíč Smazáno : HKLM\SOFTWARE\Classes\Interface\{51A971CA-D36E-4D13-A799-2CF0A491D04D}
[-] Klíč Smazáno : HKLM\SOFTWARE\Classes\Interface\{56FBEA9F-EF93-4318-B75F-A96FC7C7BD7B}
[-] Klíč Smazáno : HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
[-] Klíč Smazáno : HKLM\SOFTWARE\Classes\Interface\{78B3C85E-44FF-4DC8-B3AD-156F39DC75E5}
[-] Klíč Smazáno : HKLM\SOFTWARE\Classes\Interface\{841FD004-57A2-4B49-BBDB-5897394619DB}
[-] Klíč Smazáno : HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
[-] Klíč Smazáno : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
[-] Klíč Smazáno : HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
[-] Klíč Smazáno : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
[-] Klíč Smazáno : HKLM\SOFTWARE\Classes\Interface\{E1164984-B567-47BD-A7FF-240C2594404A}
[-] Klíč Smazáno : HKLM\SOFTWARE\Classes\Interface\{E19FDA06-5BDF-43C2-B794-BCD8A4C2051F}
[-] Klíč Smazáno : HKLM\SOFTWARE\Classes\Interface\{FAB076F5-E4DD-4EA4-AFEE-F18BF972B057}
[-] Klíč Smazáno : HKLM\SOFTWARE\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}
[-] Klíč Smazáno : HKLM\SOFTWARE\Classes\TypeLib\{3E288F79-03E4-4983-A48E-0D879B51FF19}
[-] Klíč Smazáno : HKLM\SOFTWARE\Classes\TypeLib\{538CD77C-BFDD-49B0-9562-77419CAB89D1}
[-] Klíč Smazáno : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}
[-] Klíč Smazáno : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
[-] Klíč Smazáno : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}
[-] Klíč Smazáno : HKLM\SOFTWARE\Classes\TypeLib\{E716F183-5AD7-11DC-9670-00508DC0D496}
[-] Klíč Smazáno : HKLM\SOFTWARE\Classes\TypeLib\{4BC8AD89-AC5F-4DBD-A38F-C355C7DD33D7}
[-] Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{25CEE8EC-5730-41BC-8B58-22DDC8AB8C20}
[-] Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}
[-] Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}
[-] Klíč Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{25CEE8EC-5730-41BC-8B58-22DDC8AB8C20}
[-] Klíč Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{32099AAC-C132-4136-9E9A-4E364A424E17}
[-] Klíč Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{57BCA5FA-5DBB-45A2-B558-1755C3F6253B}
[-] Klíč Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}
[-] Klíč Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
[-] Klíč Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EBF2BA02-9094-4C5A-858B-BB198F3D8DE2}
[-] Klíč Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{B2BC04DF-EFBD-409A-95CA-36874E5AB92A}
[-] Klíč Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{25CEE8EC-5730-41BC-8B58-22DDC8AB8C20}
[-] Klíč Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{32099AAC-C132-4136-9E9A-4E364A424E17}
[-] Klíč Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{95B7759C-8C7F-4BF1-B163-73684A933233}
[-] Klíč Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}
[-] Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{B2BC04DF-EFBD-409A-95CA-36874E5AB92A}
[-] Hodnota Smazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{32099AAC-C132-4136-9E9A-4E364A424E17}]
[-] Hodnota Smazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{D4027C7F-154A-4066-A1AD-4243D8127440}]
[-] Hodnota Smazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{EBF2BA02-9094-4C5A-858B-BB198F3D8DE2}]
[-] Hodnota Smazáno : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
[-] Hodnota Smazáno : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{57BCA5FA-5DBB-45A2-B558-1755C3F6253B}]
[-] Hodnota Smazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{57BCA5FA-5DBB-45A2-B558-1755C3F6253B}]
[-] Hodnota Smazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{855F3B16-6D32-4FE6-8A56-BBB695989046}]
[-] Hodnota Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{32099AAC-C132-4136-9E9A-4E364A424E17}]
[-] Klíč Smazáno : HKCU\Software\APN
[-] Klíč Smazáno : HKCU\Software\Ask.com
[-] Klíč Smazáno : HKCU\Software\Softonic
[-] Klíč Smazáno : HKCU\Software\Winamp Toolbar
[-] Klíč Smazáno : HKCU\Software\AVG Tuneup
[-] Klíč Smazáno : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\ICQ\ICQToolbar
[-] Klíč Smazáno : HKCU\Software\AppDataLow\AskToolbarInfo
[-] Klíč Smazáno : HKCU\Software\AppDataLow\Software\AskToolbar
[-] Klíč Smazáno : HKLM\SOFTWARE\APN
[-] Klíč Smazáno : HKLM\SOFTWARE\AskToolbar
[-] Klíč Smazáno : HKLM\SOFTWARE\dt soft\daemon tools toolbar
[-] Klíč Smazáno : HKLM\SOFTWARE\ICQ\ICQToolbar
[-] Klíč Smazáno : HKLM\SOFTWARE\Winamp Toolbar
[-] Klíč Smazáno : HKLM\SOFTWARE\AVG Tuneup
[-] Klíč Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\{79A765E1-C399-405B-85AF-466F52E918B0}
[-] Klíč Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\SoftonicAssistant
[-] Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
[-] Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{EE171732-BEB4-4576-887D-CB62727F01CA}
[-] Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\daemon tools toolbar
[-] Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Winamp Toolbar
[-] Klíč Smazáno : HKU\.DEFAULT\Software\AskToolbar
[-] Klíč Smazáno : HKCU\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-568773745-2282064293-1094968495-1000\Software\ICQ\ICQToolbar
[-] Klíč Smazáno : HKLM\SOFTWARE\Classes\Installer\Features\A28B4D68DEBAA244EB686953B7074FEF
[-] Klíč Smazáno : HKLM\SOFTWARE\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF
[-] Klíč Smazáno : HKLM\SOFTWARE\Classes\Installer\UpgradeCodes\F928123A039649549966D4C29D35B1C9
[-] Klíč Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0CFE535C35F99574E8340BFA75BF92C2
[-] Klíč Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\261F213D1F55267499B1F87D0CC3BCF7
[-] Klíč Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\741B4ADF27276464790022C965AB6DA8
[-] Klíč Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7DE196B10195F5647A2B21B761F3DE01
[-] Klíč Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9D4F5849367142E4685ED8C25E44C5ED
[-] Klíč Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A5875B04372C19545BEB90D4D606C472
[-] Klíč Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A876D9E80B896EC44A8620248CC79296
[-] Klíč Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B66FFAB725B92594C986DE826A867888
[-] Klíč Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\120DFADEB50841F408F04D2A278F9509
[-] Klíč Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B5BAE2ED018083A4C8DA86D6E3F4B024
[-] Klíč Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF
[-] Klíč Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\F928123A039649549966D4C29D35B1C9
[-] Data Obnoveno : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]
[-] Data Obnoveno : HKCU\Software\Microsoft\Internet Explorer\Main [ICQ Search]
[-] Data Obnoveno : HKU\S-1-5-21-568773745-2282064293-1094968495-1000\Software\Microsoft\Internet Explorer\Main [Start Page]
[-] Data Obnoveno : HKU\S-1-5-21-568773745-2282064293-1094968495-1000\Software\Microsoft\Internet Explorer\Main [ICQ Search]
[-] Klíč Smazáno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}
[-] Klíč Smazáno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
[-] Klíč Smazáno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C}
[-] Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C}
[-] Hodnota Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [ApnUpdater]
[-] Klíč Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Shared Tools\MsConfig\StartupReg\vProt

***** [ Prohlížeče ] *****

[-] [C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Smazáno : user_pref("avg.wtu.ext.extParams", "{\"action\":\"extParams\",\"data\":{\"searchParams\":{\"pid\":\"wtu\",\"cid\":\"{0687dcda-8288-4f7c-a5ac-257f92d3746b}\",\"mid\":\"c7bde46bd20747d2895dd16f6b80bb8b-[...]
[-] [C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Smazáno : user_pref("avg.wtu.ext.setting_hp_list", "[{\"name\":\"AVG Secure Search\",\"value\":\"hxxps://mysearch.avg.com\"},{\"name\":\"Google\",\"value\":\"hxxp://www.google.com\"},{\"name\":\"Yahoo\",\"value[...]
[-] [C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Smazáno : user_pref("browser.search.selectedEngine", "AVG Secure Search");
[-] [C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Smazáno : user_pref("browser.startup.homepage", "hxxp://home.tb.ask.com/index.jhtml?n=7829e753");
[-] [C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Smazáno : user_pref("extensions.toolbar.mindspark._4zMembers_.BUTTON_STRUCTURE", "[{\"b\":224542617,\"c\":\"mindspark.magnify\",\"p\":\"L.0\"},{\"b\":224542618,\"c\":\"mindspark.entersearchterms\",\"p\":\"L.0.0[...]
[-] [C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Smazáno : user_pref("extensions.toolbar.mindspark._4zMembers_.browser.version.last", "43.0");
[-] [C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Smazáno : user_pref("extensions.toolbar.mindspark._4zMembers_.firstKnownVersion", "6.66.4.38450");
[-] [C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Smazáno : user_pref("extensions.toolbar.mindspark._4zMembers_.homepage", "hxxp://home.tb.ask.com/index.jhtml?ptb=83366A34-587E-4A02-B23C-977A3E691A02&n=780c762c&p2=^HJ^xdm073^S10570^cz&si=pconvFF");
[-] [C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Smazáno : user_pref("extensions.toolbar.mindspark._4zMembers_.hp.enabled", true);
[-] [C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Smazáno : user_pref("extensions.toolbar.mindspark._4zMembers_.hp.guardType", "HPR");
[-] [C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Smazáno : user_pref("extensions.toolbar.mindspark._4zMembers_.hp.user.defined", true);
[-] [C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Smazáno : user_pref("extensions.toolbar.mindspark._4zMembers_.initialized", true);
[-] [C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Smazáno : user_pref("extensions.toolbar.mindspark._4zMembers_.installKeysSource", "LocalStorage");
[-] [C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Smazáno : user_pref("extensions.toolbar.mindspark._4zMembers_.installType", "XPI");
[-] [C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Smazáno : user_pref("extensions.toolbar.mindspark._4zMembers_.installation.contextKey", "");
[-] [C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Smazáno : user_pref("extensions.toolbar.mindspark._4zMembers_.installation.dlpCountryCode", "CZ");
[-] [C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Smazáno : user_pref("extensions.toolbar.mindspark._4zMembers_.installation.installDate", "2014082604");
[-] [C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Smazáno : user_pref("extensions.toolbar.mindspark._4zMembers_.installation.partnerId", "^HJ^xdm073^S10570^cz");
[-] [C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Smazáno : user_pref("extensions.toolbar.mindspark._4zMembers_.installation.partnerSubId", "pconvFF");
[-] [C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Smazáno : user_pref("extensions.toolbar.mindspark._4zMembers_.installation.pixelUrl", "hxxp://videodownloadconverter.dl.tb.ask.com/install_pixels.jhtml?partner=^HJ^xdm073^S10570^cz&coId=df8e902e11a04a80a1b532b0[...]
[-] [C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Smazáno : user_pref("extensions.toolbar.mindspark._4zMembers_.installation.success", true);
[-] [C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Smazáno : user_pref("extensions.toolbar.mindspark._4zMembers_.installation.toolbarId", "83366A34-587E-4A02-B23C-977A3E691A02");
[-] [C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Smazáno : user_pref("extensions.toolbar.mindspark._4zMembers_.isCompliantUninstallImplementation", true);
[-] [C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Smazáno : user_pref("extensions.toolbar.mindspark._4zMembers_.lastActivePing", "1453331025416");
[-] [C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Smazáno : user_pref("extensions.toolbar.mindspark._4zMembers_.lastKnownVersion", "7.38.8.45267");
[-] [C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Smazáno : user_pref("extensions.toolbar.mindspark._4zMembers_.lssState", "{\"previousLocales\":[\"cs\",\"en-US\",\"en\"],\"supportedLocales\":[\"de\",\"es\",\"pt\",\"ja\",\"en\"],\"defaultLocale\":\"en\",\"supp[...]
[-] [C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Smazáno : user_pref("extensions.toolbar.mindspark._4zMembers_.options.defaultSearch", false);
[-] [C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Smazáno : user_pref("extensions.toolbar.mindspark._4zMembers_.options.homePageEnabled", false);
[-] [C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Smazáno : user_pref("extensions.toolbar.mindspark._4zMembers_.options.keywordEnabled", false);
[-] [C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Smazáno : user_pref("extensions.toolbar.mindspark._4zMembers_.options.tabEnabled", false);
[-] [C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Smazáno : user_pref("extensions.toolbar.mindspark._4zMembers_.partnerPixelFired", true);
[-] [C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Smazáno : user_pref("extensions.toolbar.mindspark._4zMembers_.productDeliveryOption.language", "en");
[-] [C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Smazáno : user_pref("extensions.toolbar.mindspark._4zMembers_.productDeliveryOption.type", "Toolbar");
[-] [C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Smazáno : user_pref("extensions.toolbar.mindspark._4zMembers_.successUrl", "hxxp://pconverter.com/thankyou.php");
[-] [C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Smazáno : user_pref("extensions.toolbar.mindspark._4zMembers_.toolbar.versionChanged", false);
[-] [C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Smazáno : user_pref("extensions.toolbar.mindspark._4zMembers_.toolbarCollapsed", true);
[-] [C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Smazáno : user_pref("extensions.toolbar.mindspark._4zMembers_.uninstallTasks", "{\"prefBranchesToDelete\":[\"extensions.toolbar.mindspark._4zMembers_.\"],\"filesToDelete\":[\"C:\\\\Users\\\\Michaela\\\\AppData\[...]
[-] [C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Smazáno : user_pref("extensions.toolbar.mindspark._4zMembers_.weather.location", "10001");
[-] [C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Smazáno : user_pref("extensions.toolbar.mindspark._gcMembers_.BUTTON_STRUCTURE", "[{\"b\":224547468,\"c\":\"mindspark.magnify\",\"p\":\"L.0\"},{\"b\":224547469,\"c\":\"mindspark.entersearchterms\",\"p\":\"L.0.0[...]
[-] [C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Smazáno : user_pref("extensions.toolbar.mindspark._gcMembers_.browser.startup.homepage.prev", "hxxps://mysearch.avg.com/?cid={BC12DF1A-2413-4E3C-B4BB-97566A87268A}&mid=c7bde46bd20747d2895dd16f6b80bb8b-4a520fd13[...]
[-] [C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Smazáno : user_pref("extensions.toolbar.mindspark._gcMembers_.browser.startup.homepage.savedPrev", "true");
[-] [C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Smazáno : user_pref("extensions.toolbar.mindspark._gcMembers_.browser.startup.homepage.tb", "hxxp://home.tb.ask.com/index.jhtml?n=7829e753");
[-] [C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Smazáno : user_pref("extensions.toolbar.mindspark._gcMembers_.browser.startup.page.savedPrev", 1);
[-] [C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Smazáno : user_pref("extensions.toolbar.mindspark._gcMembers_.browser.startup.page.tb", 1);
[-] [C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Smazáno : user_pref("extensions.toolbar.mindspark._gcMembers_.browser.version.last", "47.0");
[-] [C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Smazáno : user_pref("extensions.toolbar.mindspark._gcMembers_.firstKnownVersion", "7.38.8.56523");
[-] [C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Smazáno : user_pref("extensions.toolbar.mindspark._gcMembers_.homepage", "hxxp://home.tb.ask.com/index.jhtml?n=7829e753");
[-] [C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Smazáno : user_pref("extensions.toolbar.mindspark._gcMembers_.hp.enabled", true);
[-] [C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Smazáno : user_pref("extensions.toolbar.mindspark._gcMembers_.hp.guardType", "HPR");
[-] [C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Smazáno : user_pref("extensions.toolbar.mindspark._gcMembers_.hp.user.defined", false);
[-] [C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Smazáno : user_pref("extensions.toolbar.mindspark._gcMembers_.initialized", true);
[-] [C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Smazáno : user_pref("extensions.toolbar.mindspark._gcMembers_.installation.dlpCountryCode", "CZ");
[-] [C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Smazáno : user_pref("extensions.toolbar.mindspark._gcMembers_.installation.installDate", "2016012115");
[-] [C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Smazáno : user_pref("extensions.toolbar.mindspark._gcMembers_.installation.success", true);
[-] [C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Smazáno : user_pref("extensions.toolbar.mindspark._gcMembers_.lastActivePing", "1467931113188");
[-] [C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Smazáno : user_pref("extensions.toolbar.mindspark._gcMembers_.lastKnownVersion", "7.38.8.56523");
[-] [C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Smazáno : user_pref("extensions.toolbar.mindspark._gcMembers_.lssState", "{\"previousLocales\":[\"cs\",\"en-US\",\"en\"],\"supportedLocales\":[\"de\",\"es\",\"pt\",\"ja\",\"en\"],\"defaultLocale\":\"en\",\"supp[...]
[-] [C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Smazáno : user_pref("extensions.toolbar.mindspark._gcMembers_.options.defaultSearch", false);
[-] [C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Smazáno : user_pref("extensions.toolbar.mindspark._gcMembers_.options.homePageEnabled", false);
[-] [C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Smazáno : user_pref("extensions.toolbar.mindspark._gcMembers_.options.keywordEnabled", false);
[-] [C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Smazáno : user_pref("extensions.toolbar.mindspark._gcMembers_.options.tabEnabled", false);
[-] [C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Smazáno : user_pref("extensions.toolbar.mindspark._gcMembers_.productDeliveryOption.language", "en");
[-] [C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Smazáno : user_pref("extensions.toolbar.mindspark._gcMembers_.productDeliveryOption.type", "Toolbar");
[-] [C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Smazáno : user_pref("extensions.toolbar.mindspark._gcMembers_.searchHistory", "perní\rky k výo\ríKameHák 5vinaYství atpánek rulandské aedéaablony frozen");
[-] [C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Smazáno : user_pref("extensions.toolbar.mindspark._gcMembers_.successUrl", "hxxp://weatherblink.dl.tb.ask.com/installComplete.jhtml");
[-] [C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Smazáno : user_pref("extensions.toolbar.mindspark._gcMembers_.toolbar.versionChanged", false);
[-] [C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Smazáno : user_pref("extensions.toolbar.mindspark._gcMembers_.toolbarCollapsed", false);
[-] [C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Smazáno : user_pref("extensions.toolbar.mindspark._gcMembers_.uninstallTasks", "{\"prefBranchesToDelete\":[\"extensions.toolbar.mindspark._gcMembers_.\"],\"filesToDelete\":[\"C:\\\\Users\\\\Michaela\\\\AppData\[...]
[-] [C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Smazáno : user_pref("extensions.toolbar.mindspark.hp.enabled", true);
[-] [C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Smazáno : user_pref("extensions.toolbar.mindspark.hp.enabled.guid", "weatherblink@mindspark.com");
[-] [C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js] Smazáno : user_pref("extensions.toolbar.mindspark.lastInstalled", "weatherblink@mindspark.com");

*************************

:: "Tracing" klíče smazány
:: Nastavení Winsock vyčištěno

*************************

C:\AdwCleaner\AdwCleaner[C1].txt - [33496 bytů] - [07/07/2016 11:08:25]
C:\AdwCleaner\AdwCleaner[S1].txt - [35027 bytů] - [06/07/2016 21:44:26]
C:\AdwCleaner\AdwCleaner[S2].txt - [35101 bytů] - [07/07/2016 11:06:50]

########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [33718 bytů] ##########
Nahoru
kamil_3
nováček
Příspěvky: 36
Registrován: červenec 16
Pohlaví: Nespecifikováno
Stav:
Offline

Re: Prosím o kontrolu HJT

Příspěvekod kamil_3 » 07 črc 2016 11:27

Bod2 - JRT log:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.0.6 (04.25.2016)
Operating System: Windows 7 Home Premium x64
Ran by Michaela (Administrator) on źt 07.07.2016 at 11:22:22,18
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




File System: 178

Successfully deleted: C:\Users\Michaela\AppData\Local\{001CD927-C7F2-4E3D-A6AC-A8F9EEEF0B73} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{051FE10D-0DA8-4A6E-BC07-59377E6AC001} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{06046438-D100-432A-B7D3-2EB4D1CBE7AC} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{06652CBF-3737-496D-93CE-74C70D15C5C5} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{0755D585-52C1-403F-BAD8-DF3B52008FBF} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{07B4CF2B-1C24-4FB3-98DB-3015C123984F} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{09F1FA62-3934-4D48-BE58-EB4001E565CD} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{0A0AC6DE-B610-4908-B3D0-7F7751BF67CF} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{0A0D085B-D8F8-45E4-AE2D-9AFF4EC27494} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{0B053DEB-E339-4B05-9EC3-81C25A7AD371} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{0DDF6C38-ADA2-4CFA-A4CE-64C6A5326515} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{0FF007F3-6E15-4B22-8061-A9F744EF02F5} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{14E9BE22-C6C8-41DE-8BBE-90B44A76BB5D} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{15D2C4AA-837B-4431-A7B1-10171F151A52} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{17170E9C-B5C2-41EF-B099-91D6CD5598E1} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{18FDD7EE-0259-4C70-81C7-BCAB196AA3BB} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{19E7DC3D-62E9-4FBB-AF79-94565E28E075} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{1B388434-D800-4261-8E68-8DA919668976} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{1D695F36-75BC-4EB5-A50A-2BAAAC3D69E9} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{1E86ADDE-91D5-436F-B6CF-9DA33F311370} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{1F31F18E-6E73-481B-84BB-3443800ABE42} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{234484A8-425A-418C-A7CC-3B1C6FA1D32E} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{2352EC0D-8F60-461A-A255-084C8E5FAD7D} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{2736560D-693B-49B3-9CA5-E8FF48C80EC5} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{2758862C-1C17-4C0E-BD60-ACF838F13A92} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{27CB0BBC-EFBC-4D78-9E4C-1FE15100931F} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{29809490-0C76-4810-9704-1A28D75519BE} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{2BF7C6D2-A23F-46AE-88C1-3309E03784FD} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{2C6AA0D6-92D6-48A9-A276-7CD39EB1E81F} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{2E575CA4-38F1-46DD-8473-69DB259C14DF} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{2F39FC8B-5A83-4377-A931-A31729165723} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{2F3EF294-88A6-4455-B4DC-B1CBB60C4F8C} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{309D6F4F-7D2F-4425-A020-785C937463A7} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{32201F0E-9E6C-41B6-9879-AEE8AB1668AF} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{341A46F0-3739-481D-BC49-2E8D71FE1A91} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{34B29B70-AAA1-44FC-A763-C8E0EC36F13C} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{352BEBE5-30CD-46CA-B35D-42C03926B5C5} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{367A42A8-07E4-4286-BC60-AC6D9FCA1AAC} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{37723731-E3CC-47B6-849A-72127BFE0989} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{3AF63918-ACEA-4BE8-BE48-0F58E3E8F5CE} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{3B637C88-2B2A-4275-B6EE-B57EC94595BF} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{3BB626C8-DDD9-4C3A-A0A0-8DADEDCC71E6} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{3D22ED06-92FB-4378-BC79-66997CCF844D} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{3D2DC0D0-D412-44FA-9FD3-42C60DDDDA34} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{3DA61156-9A60-4864-B3A8-5CAB7F58F805} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{4023534A-4263-4EFB-8911-A2C8445847DE} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{40F8B7C8-2327-4444-B5FE-4E3A5A58F44F} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{422D2312-BDD9-428B-A293-3793725F3697} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{428FE627-B48D-4A12-B081-C4573ED07BC6} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{42D62B56-FC87-4466-86C3-1E230E93C1C7} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{43988A8D-0073-454E-8990-2CF373AB5AF4} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{479171D3-96DD-4436-9A2F-534261951178} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{4AB4FADF-3CA9-41FE-97FD-2B66788FB37C} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{4BBB39C2-9150-4EAF-B6C5-39713761A5FE} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{4C787B7D-9D72-464A-B4F2-D3EEDEB26631} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{4D394963-9FD2-4F99-83EC-154B64D7C2DE} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{4FB6A3EF-9355-4A96-BC3D-516B0F3F710D} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{503D4645-82FA-4D43-AF96-ED1EC820F0C8} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{5074CBC9-398E-4D72-8437-7D480A19C5E3} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{55CA85D0-1C6A-451C-BDFF-006E67964B12} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{5678092F-F002-4651-BED4-D9FE9CB1609F} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{5948FE06-FC20-46CB-89F4-44FAE5DDEA71} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{5BDDD637-44F7-4D27-B8DE-4E832B354973} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{5E840C1B-D4E2-4069-8EF4-6D0E088392A2} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{5EE33C23-5D8A-4B99-AC27-96E241ABCCAD} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{5F6BD3EF-282D-43DD-825F-F846B764DB0E} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{63044FC9-AFA7-4AE2-929B-73F1E5796B3F} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{638DF9B7-6340-4AD6-BD9B-F1CC393B9764} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{645898C5-A2A0-4E2D-A1AA-3FB31DE18622} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{66C65232-AB8B-444B-AAFE-CD621422D6E3} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{68E4A79F-1710-4DF7-BE4E-B8E5515DEA68} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{6BCEAFB7-EE50-46BD-8954-10701111D6DA} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{6CBB0011-00BD-4017-AB8D-AAD4813795F3} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{6E31D9C9-9D54-4224-8DF8-5F94700AD5D5} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{6E47C1B7-2EF9-4635-A100-191663455838} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{6E80A3E8-4047-4E20-A158-FFE111ECE312} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{72213B58-9CF3-4DCD-967B-40B2C28E03A7} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{738C7EF5-CF26-4600-BAD1-E9AF414B04C2} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{739E170A-71DC-4B6D-B090-2FE08419CE59} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{753C88F1-B218-44A8-874D-F4BDD16EDC31} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{77973A88-8EBE-4BDF-A041-204892C14D4C} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{78016B7F-4549-47C4-8548-EBFB95E74429} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{7864C5E4-9B90-4C38-9732-E32FA09A7BB5} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{7ABC6927-744D-41CE-BEFD-BA31E2E5B2A9} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{7ECC1E4A-F752-4B1E-8AA9-C75CCBDF14F1} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{7F08A858-FFB1-4483-BD7D-B5E6B7268D95} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{7F2147DA-BA23-43C5-B9A9-97F8FA8D1830} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{86086A7C-3DB3-44FD-A50C-154FF0790AB2} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{86E5B16B-24C0-4806-8CFF-4E276CC8923C} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{874180C9-EEBB-4CC9-AA56-C8EC33751F59} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{89136196-C1B6-4BE7-8247-67A233BD392A} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{8C3AAD54-C002-4113-9F54-E98D2045DDEB} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{900B4636-BF94-4C05-9E6A-DE5F79BCC294} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{92CFBF65-E373-420E-A7EC-6974130F317F} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{94E3DB73-056F-41AE-A019-59CA4E5A3766} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{968F7EA9-9EC8-47AA-9B63-8FC3F9442B21} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{96F00289-1629-4D1F-A650-5629F89A06FC} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{9A28D687-E461-437D-B405-57C76EBBF89B} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{9AD79ECD-454F-49BA-91F6-3487E4DC9615} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{9B4E4FED-E4A9-4E11-A914-8AAFE433D884} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{9BAD2712-654E-4CE0-9E42-6DCD10BF5C8A} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{9BB30A20-F3F3-436B-A3F2-0FC87B7AA0D3} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{9BCF5049-4CB1-4D14-889B-6E92610D522D} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{9C34C4D2-627B-4B94-85FA-720597CAD84C} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{9C356146-882B-4837-8193-FEAA8138EC56} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{9EE64B29-2173-4990-ACD0-5F8CB61FF356} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{A2ACF9B8-B83F-44E6-A736-395BB3668B63} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{A6DDFE35-2AAC-4E67-B6C8-711F825D3851} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{A7DD8B42-8EDC-4336-A517-D3B0B51DEF01} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{AD2262B7-B4A1-4058-86D4-731016D19754} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{AD7315B8-AA8E-4CAA-9AAC-13A4EA0B7934} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{ADDC3930-1FF8-4EE9-996D-BB68E9A10FBA} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{AE601705-294D-4A53-8B17-FF18DC29F3D4} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{AEBB5472-DE5D-4FE5-95AE-FFC81012BC52} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{B151AFE9-6CB6-4BF1-A4AB-43A16042D0B8} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{B60C8D62-7AA1-4CF0-8D85-4357DE369253} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{B673A4AA-05AA-40E6-95C5-E1BDA306275E} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{B8E5D59C-5E69-42FB-B51C-DF5BF9F6AC4E} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{B93A3969-FA6E-4D59-A210-29F94B31F9A1} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{B9F33552-1E88-4B27-923B-9022352E5F00} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{BE08D51E-7CA8-48A6-9CA7-BF831377336A} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{C0119AAA-1AD1-4AF3-A952-609F44722700} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{C012400C-9A58-428B-AB9C-638C29609838} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{C0C0BB31-5D80-46B1-B889-D19F4F0A0EB3} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{C262BF79-5485-4A88-B25D-474ACDF3CAB5} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{C53C06E8-DBDF-4F19-995D-A3052D22959D} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{C7057A2C-0FB0-42F1-A749-D5C0A8F4783C} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{C7BC35E4-96C9-4802-8CAC-9E24A0BB31CD} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{CA8CDCFD-5BC8-4351-B287-81D7D5A1D48B} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{CAA1CF43-5622-4694-A057-6689C222A7FC} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{CBB16673-914B-45C5-99BB-A5AF755C256D} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{CE8BFDD0-1A2C-4522-A58B-E1A91C118847} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{D254B85D-2E65-4ECD-A122-6FDB35AE4403} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{D373C2A9-C965-4429-AC2A-F084841D5421} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{D4197042-D855-47FC-86E9-9091B6ACBB6F} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{D4B3D838-483D-47CC-B62E-71FBB96AD10B} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{D6D4DE66-6AE3-4596-8911-C95EAEC6832C} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{D91301EB-0271-43C3-9BA8-18397619D83A} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{D9404913-12D9-49F8-9AB5-D2D85C29F42A} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{D9662DDD-CC8F-4CAA-A88B-652BEB81E25F} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{D978F53A-9961-45A5-864F-E8757BF7B47B} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{DAC6E1B3-E618-437F-8ED1-342E7783286D} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{E3CD6467-80D9-4CD6-8B2F-7E281B56D6C1} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{E400E234-5871-4B03-A692-7CCAACFD039A} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{E50C0106-7E48-4F0B-9B54-FE928E9EE56B} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{E54FED0B-6736-45E1-AF49-560624A8DB82} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{E62DCB1C-9869-49AB-B56C-3CBD17DE725D} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{E6815EF5-3934-4F23-BD0C-C33566F18936} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{E7EA52CA-647B-4F82-AB53-B73907150843} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{E8202D08-D6F9-4284-8626-D369A8FC76D1} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{EA17200D-8927-4BDF-BBC6-05AEC8756AC5} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{EC55C404-1B8C-418D-BF38-53C6A86E1DFD} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{EC633812-3746-4307-8F5D-759F23DC5368} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{ECFC0D5C-014B-4FEB-9B41-3E203DF36815} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{EEC7BFCA-871C-49A9-852E-43F714F5237D} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{EF37CDA2-E703-4ACF-A004-F5CCF6EA30A8} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{EFB6DE8D-E6A0-4961-BBA2-EE695B49C490} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{F042C31F-3D40-473E-979F-6596142F4B84} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{F07BA365-FCB0-4A51-B79D-654C4128B98E} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{F30BEAC1-8A60-4017-9136-92B654048324} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{F53495DD-7604-48A2-B8BD-292ADC7CDF04} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{F730885E-41F6-4510-A4A7-8361C8026459} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{F8590CE6-E85B-4E9C-81E3-96EF3773B8A2} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{F984F7A7-0256-4EAA-A3FA-9A413F8F7FDA} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{FC3F6454-FDC6-4443-BFC2-C00D82F9910B} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{FC8EFA16-DAB5-4F0F-A255-24C48C7A1487} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{FCEC322A-F50D-4D8D-9E12-5029AD3277EE} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{FE85AE20-2A61-43B9-B5DF-BABEC80C45BC} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\{FFF09C7C-C759-4F8A-A9AD-699AF250F97A} (Empty Folder)
Successfully deleted: C:\Users\Michaela\AppData\Roaming\pdfforge (Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8EKECKYP (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DVNLV7U3 (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\EA26JU4H (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Michaela\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\UU0SBVZI (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8EKECKYP (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DVNLV7U3 (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\EA26JU4H (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\UU0SBVZI (Temporary Internet Files Folder)

Deleted the following from C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\prefs.js
user_pref(avg.wtu.ext.dnsWhiteList, toolbarhome.com,avg.com);



Registry: 1

Successfully deleted: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E} (Registry Key)




~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on źt 07.07.2016 at 11:24:37,78
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Nahoru
Uživatelský avatar
Orcus
člen Security týmu
Elite Level 10.5
Elite Level 10.5
Příspěvky: 10645
Registrován: duben 10
Bydliště: Okolo rostou 3 růže =o)
Pohlaví: Muž
Stav:
Offline

Re: Prosím o kontrolu HJT

Příspěvekod Orcus » 07 črc 2016 12:40

jaro3 píše:A Malwarebytes' Anti-Malware?
Láska hřeje, ale uhlí je uhlí. :fire:


Log z HJT vkládejte do HJT sekce. Je-li moc dlouhý, rozděl jej do více zpráv.

Pár rad k bezpečnosti PC.

Po dobu mé nepřítomnosti mě zastupuje memphisto, jaro3 a Diallix

Pokud budete spokojeni , můžete podpořit naše fórum.
Nahoru
kamil_3
nováček
Příspěvky: 36
Registrován: červenec 16
Pohlaví: Nespecifikováno
Stav:
Offline

Re: Prosím o kontrolu HJT

Příspěvekod kamil_3 » 07 črc 2016 15:32

Tentokrát log z Malware:

Malwarebytes Anti-Malware
www.malwarebytes.org

Datum skenování: 7.7.2016
Čas skenování: 15:16
Protokol:
Správce: Ano

Verze: 2.2.1.1043
Databáze malwaru: v2016.07.07.02
Databáze rootkitů: v2016.05.27.01
Licence: Zkušební verze
Ochrana proti malwaru: Zapnuto
Ochrana proti škodlivým webovým stránkám: Zapnuto
Ochrana programu: Vypnuto

OS: Windows 7 Service Pack 1
CPU: x64
Souborový systém: NTFS
Uživatel: Michaela

Typ skenu: Sken hrozeb
Výsledek: Dokončeno
Prohledaných objektů: 302833
Uplynulý čas: 14 min, 0 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Vypnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto

Procesy: 0
(Nenalezeny žádné škodlivé položky)

Moduly: 0
(Nenalezeny žádné škodlivé položky)

Klíče registru: 0
(Nenalezeny žádné škodlivé položky)

Hodnoty registru: 0
(Nenalezeny žádné škodlivé položky)

Data registru: 0
(Nenalezeny žádné škodlivé položky)

Složky: 1
PUP.Optional.MindSpark, C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\VideoDownloadConverter_4z, , [c06e63be2773e650dba2dfcbef14b54b],

Soubory: 2
PUP.Optional.ASK, C:\Windows\Installer\1e559b.msi, , [b47abb66cfcba98dc8b982dbd82c50b0],
PUP.Optional.MindSpark, C:\Users\Michaela\AppData\Roaming\Mozilla\Firefox\Profiles\s0638nh1.default\VideoDownloadConverter_4z\83366A34-587E-4A02-B23C-977A3E691A02.sqlite, , [c06e63be2773e650dba2dfcbef14b54b],

Fyzické sektory: 0
(Nenalezeny žádné škodlivé položky)


(end)
Nahoru
Uživatelský avatar
jaro3
člen Security týmu
Guru Level 15
Guru Level 15
Příspěvky: 43298
Registrován: červen 07
Bydliště: Jižní Čechy
Pohlaví: Muž
Stav:
Offline

Re: Prosím o kontrolu HJT

Příspěvekod jaro3 » 08 črc 2016 09:02

Zavři všechny programy a prohlížeče. Deaktivuj antivir a firewall.
Prosím, odpoj všechny USB (kromě myši s klávesnice) nebo externí disky z počítače před spuštěním tohoto programu.
Spusť znovu RogueKiller ( Pro Windows Vista nebo Windows 7, klepni pravým a vyber "Spustit jako správce", ve Windows XP poklepej ke spuštění).
- klikni na „Start Scan“. V novém okně nic neměň a klikni dole na „Start Scan
- Pak klikni na "Prohledat " ,po jeho skončení:
- V záložkách (Registry , Tasks , Web Browser apod.) vše zatrhni (dej zatržítka)
(musíš dát myší zatržítko do toho čtverečku vlevo od registru ap.)

- Klikni na "Smazat"
- Počkej, dokud Status box nezobrazí " Mazání dokončeno "
- Klikni na "Zpráva " a zkopíruj a vlož obsah té zprávy prosím sem. Log je možno nalézt v RKreport [číslo]. txt na ploše.
- Zavři RogueKiller

Vypni antivir i firewall.
Stáhni
Zoek.exe

a uloz si ho na plochu.
Zavři všechny ostatní programy , okna i prohlížeče.
Spusť Zoek.exe ( u win vista , win7, 8 klikni na něj pravým a vyber : „Spustit jako správce“
- pozor , náběh programu může trvat déle.

Do okna programu vlož skript níže:

Kód: Vybrat vše

autoclean;
emptyclsid;
iedefaults;
FFdefaults;
CHRdefaults;
emptyalltemp;
resethosts;


klikni na Run Script
Program provede sken , opravu, sken i oprava může trvat i více minut ,je třeba posečkat do konce. Do okna neklikej!
Program nabídne restart , potvrď .

Po restartu se může nějaký čas ukázat pouze černá plocha , to je normální. Je třeba počkat až se vytvoří log. Ten si můžeš uložit třeba do dokumentů , jinak se sám ukládá do:
C:\zoek-results.log
Zkopíruj sem celý obsah toho logu.

Vypni rez. ochranu u antiviru a antispywaru,příp. firewall..

Stáhni si ComboFix (by sUBs)
a ulož si ho na plochu.
Ukonči všechna aktivní okna a spusť ho.
- Po spuštění se zobrazí podmínky užití, potvrď je stiskem tlačítka Ano
- Dále postupuj dle pokynů, během aplikování ComboFixu neklikej do zobrazujícího se okna
- Po dokončení skenování by měl program vytvořit log - C:\ComboFix.txt - zkopíruj sem prosím celý jeho obsah
Pokud budou problémy , spusť ho v nouz. režimu.

Upozornění : Může se stát, že po aplikaci Combofixu a restartu počítače, Windows nenaběhnou , nebo nenajede plocha , budou problémy s připojením, pak znovu restartuj počítač, pokud to nepomůže , po restartu mačkej klávesu F8 a pak zvol poslední známou funkční konfiguraci. , či použij bod obnovy.
Při práci s programy HJT, ComboFix,MbAM, SDFix aj. zavřete všechny ostatní aplikace a prohlížeče!
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
Nahoru
kamil_3
nováček
Příspěvky: 36
Registrován: červenec 16
Pohlaví: Nespecifikováno
Stav:
Offline

Re: Prosím o kontrolu HJT

Příspěvekod kamil_3 » 09 črc 2016 13:22

Nebude jednoduší dát defragmentaci disku nebo něco takové? Vše nutné jsem z PC dal pryč. Je to na dlouho:)
Nahoru
Uživatelský avatar
Orcus
člen Security týmu
Elite Level 10.5
Elite Level 10.5
Příspěvky: 10645
Registrován: duben 10
Bydliště: Okolo rostou 3 růže =o)
Pohlaví: Muž
Stav:
Offline

Re: Prosím o kontrolu HJT

Příspěvekod Orcus » 09 črc 2016 15:56

Pokud by bylo, tak bychom Ti to navrhli.
Láska hřeje, ale uhlí je uhlí. :fire:


Log z HJT vkládejte do HJT sekce. Je-li moc dlouhý, rozděl jej do více zpráv.

Pár rad k bezpečnosti PC.

Po dobu mé nepřítomnosti mě zastupuje memphisto, jaro3 a Diallix

Pokud budete spokojeni , můžete podpořit naše fórum.
Nahoru
kamil_3
nováček
Příspěvky: 36
Registrován: červenec 16
Pohlaví: Nespecifikováno
Stav:
Offline

Re: Prosím o kontrolu HJT

Příspěvekod kamil_3 » 09 črc 2016 21:39

Takže co mám dělat?:) mám se vrátit k původní variantě co jste navrhovali nebo ....? Jen se bojím, že to bude složitější s rozjetím PC (nemám od toho instalační CD, atd....).
Nahoru
Odpovědět

Zpět na “HiJackThis”

Kdo je online

Uživatelé prohlížející si toto fórum: Žádní registrovaní uživatelé a 97 hostů