Kontrola Logu HJT

Místo pro vaše HiJackThis logy a logy z dalších programů…

Moderátoři: memphisto, Mods_senior, Security team

Uživatelský avatar
Smile
Level 2.5
Level 2.5
Příspěvky: 311
Registrován: leden 09
Bydliště: Zlín
Pohlaví: Muž

Re: Kontrola Logu HJT

Příspěvekod Smile » 22 lis 2018 14:05

PUP.Optional.AdvancedSystemCare, HKLM\SOFTWARE\CLASSES\INTERFACE\{172ABF99-1426-47CA-895B-092E23728E8A}, V karanténě, [3801], [380352],1.0.7969
PUP.Optional.AdvancedSystemCare, HKLM\SOFTWARE\CLASSES\INTERFACE\{66328184-6592-46BE-B950-4FDA4417DF2E}, V karanténě, [3801], [380352],1.0.7969
PUP.Optional.AdvancedSystemCare, HKLM\SOFTWARE\CLASSES\INTERFACE\{7F95C137-46FC-42FB-A66A-F0482F3C749C}, V karanténě, [3801], [380352],1.0.7969
PUP.Optional.AdvancedSystemCare, HKLM\SOFTWARE\CLASSES\INTERFACE\{9CFA1689-38D3-4AE9-B1E8-B039EB7AD988}, V karanténě, [3801], [380352],1.0.7969
PUP.Optional.AdvancedSystemCare, HKLM\SOFTWARE\CLASSES\INTERFACE\{C0CEAFA7-4F65-418C-8A61-92B2048115EE}, V karanténě, [3801], [380352],1.0.7969
PUP.Optional.AdvancedSystemCare, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{172ABF99-1426-47CA-895B-092E23728E8A}, V karanténě, [3801], [380352],1.0.7969
PUP.Optional.AdvancedSystemCare, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{66328184-6592-46BE-B950-4FDA4417DF2E}, V karanténě, [3801], [380352],1.0.7969
PUP.Optional.AdvancedSystemCare, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{7F95C137-46FC-42FB-A66A-F0482F3C749C}, V karanténě, [3801], [380352],1.0.7969
PUP.Optional.AdvancedSystemCare, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{9CFA1689-38D3-4AE9-B1E8-B039EB7AD988}, V karanténě, [3801], [380352],1.0.7969
PUP.Optional.AdvancedSystemCare, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{C0CEAFA7-4F65-418C-8A61-92B2048115EE}, V karanténě, [3801], [380352],1.0.7969
PUP.Optional.AdvancedSystemCare, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{172ABF99-1426-47CA-895B-092E23728E8A}, V karanténě, [3801], [380352],1.0.7969
PUP.Optional.AdvancedSystemCare, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{66328184-6592-46BE-B950-4FDA4417DF2E}, V karanténě, [3801], [380352],1.0.7969
PUP.Optional.AdvancedSystemCare, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{7F95C137-46FC-42FB-A66A-F0482F3C749C}, V karanténě, [3801], [380352],1.0.7969
PUP.Optional.AdvancedSystemCare, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{9CFA1689-38D3-4AE9-B1E8-B039EB7AD988}, V karanténě, [3801], [380352],1.0.7969
PUP.Optional.AdvancedSystemCare, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{C0CEAFA7-4F65-418C-8A61-92B2048115EE}, V karanténě, [3801], [380352],1.0.7969
PUP.Optional.AdvancedSystemCare, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{F5BCAC7E-75E7-4971-B3F3-B197A510F495}, V karanténě, [3801], [380352],1.0.7969
PUP.Optional.AdvancedSystemCare, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{F5BCAC7E-75E7-4971-B3F3-B197A510F495}, V karanténě, [3801], [380352],1.0.7969
PUP.Optional.AdvancedSystemCare, HKLM\SOFTWARE\CLASSES\TYPELIB\{F844CB30-D8B9-4AA5-8B0D-B2229285B4AE}, V karanténě, [3801], [380352],1.0.7969
PUP.Optional.AdvancedSystemCare, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{F844CB30-D8B9-4AA5-8B0D-B2229285B4AE}, V karanténě, [3801], [380352],1.0.7969
PUP.Optional.AdvancedSystemCare, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{F844CB30-D8B9-4AA5-8B0D-B2229285B4AE}, V karanténě, [3801], [380352],1.0.7969
PUP.Optional.AdvancedSystemCare, HKLM\SOFTWARE\CLASSES\TYPELIB\{FFB94DF8-FC15-411C-B443-E937085E2AC1}, V karanténě, [3801], [380352],1.0.7969
PUP.Optional.AdvancedSystemCare, HKLM\SOFTWARE\CLASSES\INTERFACE\{18C5830A-FF78-4172-9DFB-E4016D1C1F31}, V karanténě, [3801], [380352],1.0.7969
PUP.Optional.AdvancedSystemCare, HKLM\SOFTWARE\CLASSES\INTERFACE\{1A173904-D20F-4872-93D5-CBC1336AE0D6}, V karanténě, [3801], [380352],1.0.7969
PUP.Optional.AdvancedSystemCare, HKLM\SOFTWARE\CLASSES\INTERFACE\{2846D47E-9B85-4836-B883-6A7B493E2D6A}, V karanténě, [3801], [380352],1.0.7969
PUP.Optional.AdvancedSystemCare, HKLM\SOFTWARE\CLASSES\INTERFACE\{76AD4430-9C5C-4FC2-A15F-4E16ACD735AC}, V karanténě, [3801], [380352],1.0.7969
PUP.Optional.AdvancedSystemCare, HKLM\SOFTWARE\CLASSES\INTERFACE\{7C710FA9-862A-40CF-9F54-063EF8FC8438}, V karanténě, [3801], [380352],1.0.7969
PUP.Optional.AdvancedSystemCare, HKLM\SOFTWARE\CLASSES\INTERFACE\{7E96FEF0-48F7-4ECB-B010-501044575477}, V karanténě, [3801], [380352],1.0.7969
PUP.Optional.AdvancedSystemCare, HKLM\SOFTWARE\CLASSES\INTERFACE\{834906DC-FA0F-4F61-BC62-24B0BEB3769C}, V karanténě, [3801], [380352],1.0.7969
PUP.Optional.AdvancedSystemCare, HKLM\SOFTWARE\CLASSES\INTERFACE\{83D0C30B-ECF4-40C5-80EC-21BB47F898A9}, V karanténě, [3801], [380352],1.0.7969
PUP.Optional.AdvancedSystemCare, HKLM\SOFTWARE\CLASSES\INTERFACE\{8A574BA8-3535-41F9-AB73-FA93F8A7DC3B}, V karanténě, [3801], [380352],1.0.7969
PUP.Optional.AdvancedSystemCare, HKLM\SOFTWARE\CLASSES\INTERFACE\{A10434E2-CAA7-48C4-9770-E9F215C51ECC}, V karanténě, [3801], [380352],1.0.7969
PUP.Optional.AdvancedSystemCare, HKLM\SOFTWARE\CLASSES\INTERFACE\{A3D482C3-B037-469B-9C35-2EF7F81C5BED}, V karanténě, [3801], [380352],1.0.7969
PUP.Optional.AdvancedSystemCare, HKLM\SOFTWARE\CLASSES\INTERFACE\{A993F934-6341-4D52-AB17-F93184A624E4}, V karanténě, [3801], [380352],1.0.7969
PUP.Optional.AdvancedSystemCare, HKLM\SOFTWARE\CLASSES\INTERFACE\{E2870643-0645-41F9-BCCB-F5969386162C}, V karanténě, [3801], [380352],1.0.7969
PUP.Optional.AdvancedSystemCare, HKLM\SOFTWARE\CLASSES\INTERFACE\{FC34538A-37CB-44B4-9264-533E9347BB40}, V karanténě, [3801], [380352],1.0.7969
PUP.Optional.AdvancedSystemCare, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{18C5830A-FF78-4172-9DFB-E4016D1C1F31}, V karanténě, [3801], [380352],1.0.7969
PUP.Optional.AdvancedSystemCare, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{1A173904-D20F-4872-93D5-CBC1336AE0D6}, V karanténě, [3801], [380352],1.0.7969
PUP.Optional.AdvancedSystemCare, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{2846D47E-9B85-4836-B883-6A7B493E2D6A}, V karanténě, [3801], [380352],1.0.7969
PUP.Optional.AdvancedSystemCare, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{76AD4430-9C5C-4FC2-A15F-4E16ACD735AC}, V karanténě, [3801], [380352],1.0.7969
PUP.Optional.AdvancedSystemCare, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{7C710FA9-862A-40CF-9F54-063EF8FC8438}, V karanténě, [3801], [380352],1.0.7969
PUP.Optional.AdvancedSystemCare, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{7E96FEF0-48F7-4ECB-B010-501044575477}, V karanténě, [3801], [380352],1.0.7969
PUP.Optional.AdvancedSystemCare, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{834906DC-FA0F-4F61-BC62-24B0BEB3769C}, V karanténě, [3801], [380352],1.0.7969
PUP.Optional.AdvancedSystemCare, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{83D0C30B-ECF4-40C5-80EC-21BB47F898A9}, V karanténě, [3801], [380352],1.0.7969
PUP.Optional.AdvancedSystemCare, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{8A574BA8-3535-41F9-AB73-FA93F8A7DC3B}, V karanténě, [3801], [380352],1.0.7969
PUP.Optional.AdvancedSystemCare, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{A10434E2-CAA7-48C4-9770-E9F215C51ECC}, V karanténě, [3801], [380352],1.0.7969
PUP.Optional.AdvancedSystemCare, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{A3D482C3-B037-469B-9C35-2EF7F81C5BED}, V karanténě, [3801], [380352],1.0.7969
PUP.Optional.AdvancedSystemCare, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{A993F934-6341-4D52-AB17-F93184A624E4}, V karanténě, [3801], [380352],1.0.7969
PUP.Optional.AdvancedSystemCare, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{E2870643-0645-41F9-BCCB-F5969386162C}, V karanténě, [3801], [380352],1.0.7969
PUP.Optional.AdvancedSystemCare, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{FC34538A-37CB-44B4-9264-533E9347BB40}, V karanténě, [3801], [380352],1.0.7969
PUP.Optional.AdvancedSystemCare, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{18C5830A-FF78-4172-9DFB-E4016D1C1F31}, V karanténě, [3801], [380352],1.0.7969
PUP.Optional.AdvancedSystemCare, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{1A173904-D20F-4872-93D5-CBC1336AE0D6}, V karanténě, [3801], [380352],1.0.7969
PUP.Optional.AdvancedSystemCare, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{2846D47E-9B85-4836-B883-6A7B493E2D6A}, V karanténě, [3801], [380352],1.0.7969
PUP.Optional.AdvancedSystemCare, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{76AD4430-9C5C-4FC2-A15F-4E16ACD735AC}, V karanténě, [3801], [380352],1.0.7969
PUP.Optional.AdvancedSystemCare, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{7C710FA9-862A-40CF-9F54-063EF8FC8438}, V karanténě, [3801], [380352],1.0.7969
PUP.Optional.AdvancedSystemCare, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{7E96FEF0-48F7-4ECB-B010-501044575477}, V karanténě, [3801], [380352],1.0.7969
PUP.Optional.AdvancedSystemCare, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{834906DC-FA0F-4F61-BC62-24B0BEB3769C}, V karanténě, [3801], [380352],1.0.7969
PUP.Optional.AdvancedSystemCare, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{83D0C30B-ECF4-40C5-80EC-21BB47F898A9}, V karanténě, [3801], [380352],1.0.7969
PUP.Optional.AdvancedSystemCare, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{8A574BA8-3535-41F9-AB73-FA93F8A7DC3B}, V karanténě, [3801], [380352],1.0.7969
PUP.Optional.AdvancedSystemCare, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{A10434E2-CAA7-48C4-9770-E9F215C51ECC}, V karanténě, [3801], [380352],1.0.7969
PUP.Optional.AdvancedSystemCare, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{A3D482C3-B037-469B-9C35-2EF7F81C5BED}, V karanténě, [3801], [380352],1.0.7969
PUP.Optional.AdvancedSystemCare, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{A993F934-6341-4D52-AB17-F93184A624E4}, V karanténě, [3801], [380352],1.0.7969
PUP.Optional.AdvancedSystemCare, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{E2870643-0645-41F9-BCCB-F5969386162C}, V karanténě, [3801], [380352],1.0.7969
PUP.Optional.AdvancedSystemCare, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{FC34538A-37CB-44B4-9264-533E9347BB40}, V karanténě, [3801], [380352],1.0.7969
PUP.Optional.AdvancedSystemCare, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{FFB94DF8-FC15-411C-B443-E937085E2AC1}, V karanténě, [3801], [380352],1.0.7969
PUP.Optional.AdvancedSystemCare, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{FFB94DF8-FC15-411C-B443-E937085E2AC1}, V karanténě, [3801], [380352],1.0.7969
PUP.Optional.AdvancedSystemCare, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\CrystalSysInfo, V karanténě, [3801], [380352],1.0.7969
PUP.Optional.AdvancedSystemCare, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\GGSAFERDriver, V karanténě, [3801], [380352],1.0.7969
PUP.Optional.AdvancedSystemCare, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\LiveUpdateSvc, V karanténě, [3801], [380352],1.0.7969
PUP.Optional.AdvancedSystemCare, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\ACTIVE SETUP\INSTALLED COMPONENTS\{8A69D345-D564-463c-AFF1-A69D9E530F96}, V karanténě, [3801], [380352],1.0.7969
PUP.Optional.AdvancedSystemCare, HKLM\SOFTWARE\MICROSOFT\ACTIVE SETUP\INSTALLED COMPONENTS\{8A69D345-D564-463C-AFF1-A69D9E530F96}, V karanténě, [3801], [380352],1.0.7969
PUP.Optional.AdvancedSystemCare, HKU\S-1-5-21-2486248661-3588290573-681466345-1000\SOFTWARE\MICROSOFT\ACTIVE SETUP\INSTALLED COMPONENTS\{8A69D345-D564-463C-AFF1-A69D9E530F96}, V karanténě, [3801], [380352],1.0.7969
PUP.Optional.AdvancedSystemCare, HKU\S-1-5-21-2486248661-3588290573-681466345-1000\SOFTWARE\WOW6432NODE\MICROSOFT\ACTIVE SETUP\INSTALLED COMPONENTS\{8A69D345-D564-463C-AFF1-A69D9E530F96}, V karanténě, [3801], [380352],1.0.7969
PUP.Optional.AdvancedSystemCare, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\{D58BCE10-E934-4AE9-9632-78903CE88A8E}, V karanténě, [3801], [380352],1.0.7969
PUP.Optional.AdvancedSystemCare, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{11C801C3-A3B6-458F-A1B5-3C3D9FF036A6}, V karanténě, [3801], [380352],1.0.7969
PUP.Optional.AdvancedSystemCare, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\PLAIN\{11C801C3-A3B6-458F-A1B5-3C3D9FF036A6}, V karanténě, [3801], [380352],1.0.7969
PUP.Optional.AdvancedSystemCare, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\AdvancedSystemCareService8, V karanténě, [3801], [380352],1.0.7969
PUP.Optional.Spigot, HKU\S-1-5-21-2486248661-3588290573-681466345-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{34A0D84B-CDDC-4EC4-AFDD-4F1DDE1D14E5}, V karanténě, [168], [161091],1.0.7969
PUP.Optional.Spigot, HKU\S-1-5-21-2486248661-3588290573-681466345-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{34A0D84B-CDDC-4EC4-AFDD-4F1DDE1D14E5}, V karanténě, [168], [161091],1.0.7969

Hodnota v registru: 7
PUP.Optional.AdvancedSystemCare, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|MSC, V karanténě, [3801], [380352],1.0.7969
PUP.Optional.AdvancedSystemCare, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|SunJavaUpdateSched, V karanténě, [3801], [380352],1.0.7969
PUP.Optional.AdvancedSystemCare, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|AMD AVT, V karanténě, [3801], [380352],1.0.7969
PUP.Optional.AdvancedSystemCare, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|TrueImageMonitor.exe, V karanténě, [3801], [380352],1.0.7969
PUP.Optional.AdvancedSystemCare, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\SHAREDDLLS|C:\PROGRAM FILES (X86)\ACRONIS\TRUEIMAGEHOME\TRUEIMAGEMONITOR.EXE, V karanténě, [3801], [380352],1.0.7969
PUP.Optional.AdvancedSystemCare, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|VICTORY Gaming Keyboard, V karanténě, [3801], [380352],1.0.7969
PUP.Optional.AdvancedSystemCare, HKU\S-1-5-21-2486248661-3588290573-681466345-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|CCleaner Smart Cleaning, V karanténě, [3801], [380352],1.0.7969

Data registrů: 0
(Nebyly zjištěny žádné škodlivé položky)

Datové proudy: 0
(Nebyly zjištěny žádné škodlivé položky)

Adresář: 16
PUP.Optional.InternetSpeedChecker, C:\Users\Jindra\AppData\Roaming\Mozilla\Firefox\Profiles\t3lq6k73.default\extensions\sepherdwilbur@aol.com\extensionData\userCode, V karanténě, [1867], [174277],1.0.7969
PUP.Optional.InternetSpeedChecker, C:\Users\Jindra\AppData\Roaming\Mozilla\Firefox\Profiles\t3lq6k73.default\extensions\sepherdwilbur@aol.com\chrome\content, V karanténě, [1867], [174277],1.0.7969
PUP.Optional.InternetSpeedChecker, C:\Users\Jindra\AppData\Roaming\Mozilla\Firefox\Profiles\t3lq6k73.default\extensions\sepherdwilbur@aol.com\extensionData, V karanténě, [1867], [174277],1.0.7969
PUP.Optional.InternetSpeedChecker, C:\Users\Jindra\AppData\Roaming\Mozilla\Firefox\Profiles\t3lq6k73.default\extensions\sepherdwilbur@aol.com\locale\en-US, V karanténě, [1867], [174277],1.0.7969
PUP.Optional.InternetSpeedChecker, C:\Users\Jindra\AppData\Roaming\Mozilla\Firefox\Profiles\t3lq6k73.default\extensions\sepherdwilbur@aol.com\chrome, V karanténě, [1867], [174277],1.0.7969
PUP.Optional.InternetSpeedChecker, C:\Users\Jindra\AppData\Roaming\Mozilla\Firefox\Profiles\t3lq6k73.default\extensions\sepherdwilbur@aol.com\locale, V karanténě, [1867], [174277],1.0.7969
PUP.Optional.InternetSpeedChecker, C:\Users\Jindra\AppData\Roaming\Mozilla\Firefox\Profiles\t3lq6k73.default\extensions\sepherdwilbur@aol.com\skin, V karanténě, [1867], [174277],1.0.7969
PUP.Optional.InternetSpeedChecker, C:\USERS\JINDRA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\T3LQ6K73.DEFAULT\EXTENSIONS\SEPHERDWILBUR@AOL.COM, V karanténě, [1867], [174277],1.0.7969
PUP.Optional.CrossRider, C:\Users\Jindra\AppData\Roaming\Mozilla\Firefox\Profiles\t3lq6k73.default\extensions\VJKPXI46039420@JMZUIOB85844870.com\chrome\content\api, V karanténě, [412], [237118],1.0.7969
PUP.Optional.CrossRider, C:\Users\Jindra\AppData\Roaming\Mozilla\Firefox\Profiles\t3lq6k73.default\extensions\VJKPXI46039420@JMZUIOB85844870.com\chrome\content, V karanténě, [412], [237118],1.0.7969
PUP.Optional.CrossRider, C:\Users\Jindra\AppData\Roaming\Mozilla\Firefox\Profiles\t3lq6k73.default\extensions\VJKPXI46039420@JMZUIOB85844870.com\extensionData, V karanténě, [412], [237118],1.0.7969
PUP.Optional.CrossRider, C:\Users\Jindra\AppData\Roaming\Mozilla\Firefox\Profiles\t3lq6k73.default\extensions\VJKPXI46039420@JMZUIOB85844870.com\locale\en-US, V karanténě, [412], [237118],1.0.7969
PUP.Optional.CrossRider, C:\Users\Jindra\AppData\Roaming\Mozilla\Firefox\Profiles\t3lq6k73.default\extensions\VJKPXI46039420@JMZUIOB85844870.com\chrome, V karanténě, [412], [237118],1.0.7969
PUP.Optional.CrossRider, C:\Users\Jindra\AppData\Roaming\Mozilla\Firefox\Profiles\t3lq6k73.default\extensions\VJKPXI46039420@JMZUIOB85844870.com\locale, V karanténě, [412], [237118],1.0.7969
PUP.Optional.CrossRider, C:\Users\Jindra\AppData\Roaming\Mozilla\Firefox\Profiles\t3lq6k73.default\extensions\VJKPXI46039420@JMZUIOB85844870.com\skin, V karanténě, [412], [237118],1.0.7969
PUP.Optional.CrossRider, C:\USERS\JINDRA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\T3LQ6K73.DEFAULT\EXTENSIONS\VJKPXI46039420@JMZUIOB85844870.com, V karanténě, [412], [237118],1.0.7969

Soubor: 58
PUP.Optional.InternetSpeedChecker, C:\Users\Jindra\AppData\Roaming\Mozilla\Firefox\Profiles\t3lq6k73.default\extensions\sepherdwilbur@aol.com\chrome\content\background.html, V karanténě, [1867], [174277],1.0.7969
PUP.Optional.InternetSpeedChecker, C:\Users\Jindra\AppData\Roaming\Mozilla\Firefox\Profiles\t3lq6k73.default\extensions\sepherdwilbur@aol.com\chrome\content\browser.xul, V karanténě, [1867], [174277],1.0.7969
PUP.Optional.InternetSpeedChecker, C:\Users\Jindra\AppData\Roaming\Mozilla\Firefox\Profiles\t3lq6k73.default\extensions\sepherdwilbur@aol.com\chrome\content\ffCoreFilesIndex.txt, V karanténě, [1867], [174277],1.0.7969
PUP.Optional.InternetSpeedChecker, C:\Users\Jindra\AppData\Roaming\Mozilla\Firefox\Profiles\t3lq6k73.default\extensions\sepherdwilbur@aol.com\chrome\content\options.xul, V karanténě, [1867], [174277],1.0.7969
PUP.Optional.InternetSpeedChecker, C:\Users\Jindra\AppData\Roaming\Mozilla\Firefox\Profiles\t3lq6k73.default\extensions\sepherdwilbur@aol.com\chrome\content\search_dialog.xul, V karanténě, [1867], [174277],1.0.7969
PUP.Optional.InternetSpeedChecker, C:\Users\Jindra\AppData\Roaming\Mozilla\Firefox\Profiles\t3lq6k73.default\extensions\sepherdwilbur@aol.com\extensionData\manifest.xml, V karanténě, [1867], [174277],1.0.7969
PUP.Optional.InternetSpeedChecker, C:\Users\Jindra\AppData\Roaming\Mozilla\Firefox\Profiles\t3lq6k73.default\extensions\sepherdwilbur@aol.com\extensionData\plugins.json, V karanténě, [1867], [174277],1.0.7969
PUP.Optional.InternetSpeedChecker, C:\Users\Jindra\AppData\Roaming\Mozilla\Firefox\Profiles\t3lq6k73.default\extensions\sepherdwilbur@aol.com\locale\en-US\translations.dtd, V karanténě, [1867], [174277],1.0.7969
PUP.Optional.InternetSpeedChecker, C:\Users\Jindra\AppData\Roaming\Mozilla\Firefox\Profiles\t3lq6k73.default\extensions\sepherdwilbur@aol.com\skin\button1.png, V karanténě, [1867], [174277],1.0.7969
PUP.Optional.InternetSpeedChecker, C:\Users\Jindra\AppData\Roaming\Mozilla\Firefox\Profiles\t3lq6k73.default\extensions\sepherdwilbur@aol.com\skin\button2.png, V karanténě, [1867], [174277],1.0.7969
PUP.Optional.InternetSpeedChecker, C:\Users\Jindra\AppData\Roaming\Mozilla\Firefox\Profiles\t3lq6k73.default\extensions\sepherdwilbur@aol.com\skin\button3.png, V karanténě, [1867], [174277],1.0.7969
PUP.Optional.InternetSpeedChecker, C:\Users\Jindra\AppData\Roaming\Mozilla\Firefox\Profiles\t3lq6k73.default\extensions\sepherdwilbur@aol.com\skin\button4.png, V karanténě, [1867], [174277],1.0.7969
PUP.Optional.InternetSpeedChecker, C:\Users\Jindra\AppData\Roaming\Mozilla\Firefox\Profiles\t3lq6k73.default\extensions\sepherdwilbur@aol.com\skin\button5.png, V karanténě, [1867], [174277],1.0.7969
PUP.Optional.InternetSpeedChecker, C:\Users\Jindra\AppData\Roaming\Mozilla\Firefox\Profiles\t3lq6k73.default\extensions\sepherdwilbur@aol.com\skin\crossrider_statusbar.png, V karanténě, [1867], [174277],1.0.7969
PUP.Optional.InternetSpeedChecker, C:\Users\Jindra\AppData\Roaming\Mozilla\Firefox\Profiles\t3lq6k73.default\extensions\sepherdwilbur@aol.com\skin\icon128.png, V karanténě, [1867], [174277],1.0.7969
PUP.Optional.InternetSpeedChecker, C:\Users\Jindra\AppData\Roaming\Mozilla\Firefox\Profiles\t3lq6k73.default\extensions\sepherdwilbur@aol.com\skin\icon16.png, V karanténě, [1867], [174277],1.0.7969
PUP.Optional.InternetSpeedChecker, C:\Users\Jindra\AppData\Roaming\Mozilla\Firefox\Profiles\t3lq6k73.default\extensions\sepherdwilbur@aol.com\skin\icon24.png, V karanténě, [1867], [174277],1.0.7969
PUP.Optional.InternetSpeedChecker, C:\Users\Jindra\AppData\Roaming\Mozilla\Firefox\Profiles\t3lq6k73.default\extensions\sepherdwilbur@aol.com\skin\icon48.png, V karanténě, [1867], [174277],1.0.7969
PUP.Optional.InternetSpeedChecker, C:\Users\Jindra\AppData\Roaming\Mozilla\Firefox\Profiles\t3lq6k73.default\extensions\sepherdwilbur@aol.com\skin\panelarrow-up.png, V karanténě, [1867], [174277],1.0.7969
PUP.Optional.InternetSpeedChecker, C:\Users\Jindra\AppData\Roaming\Mozilla\Firefox\Profiles\t3lq6k73.default\extensions\sepherdwilbur@aol.com\skin\popup.html, V karanténě, [1867], [174277],1.0.7969
PUP.Optional.InternetSpeedChecker, C:\Users\Jindra\AppData\Roaming\Mozilla\Firefox\Profiles\t3lq6k73.default\extensions\sepherdwilbur@aol.com\skin\skin.css, V karanténě, [1867], [174277],1.0.7969
PUP.Optional.InternetSpeedChecker, C:\Users\Jindra\AppData\Roaming\Mozilla\Firefox\Profiles\t3lq6k73.default\extensions\sepherdwilbur@aol.com\skin\update.css, V karanténě, [1867], [174277],1.0.7969
PUP.Optional.InternetSpeedChecker, C:\Users\Jindra\AppData\Roaming\Mozilla\Firefox\Profiles\t3lq6k73.default\extensions\sepherdwilbur@aol.com\install.rdf, V karanténě, [1867], [174277],1.0.7969
PUP.Optional.CrossRider, C:\USERS\JINDRA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\T3LQ6K73.DEFAULT\EXTENSIONS\VJKPXI46039420@JMZUIOB85844870.com\SKIN\crossrider_statusbar.png, V karanténě, [412], [237118],1.0.7969
PUP.Optional.CrossRider, C:\Users\Jindra\AppData\Roaming\Mozilla\Firefox\Profiles\t3lq6k73.default\extensions\VJKPXI46039420@JMZUIOB85844870.com\chrome\content\api\565ca352cbf7679469f96cf45b89ef04.js, V karanténě, [412], [237118],1.0.7969
PUP.Optional.CrossRider, C:\Users\Jindra\AppData\Roaming\Mozilla\Firefox\Profiles\t3lq6k73.default\extensions\VJKPXI46039420@JMZUIOB85844870.com\chrome\content\background.html, V karanténě, [412], [237118],1.0.7969
PUP.Optional.CrossRider, C:\Users\Jindra\AppData\Roaming\Mozilla\Firefox\Profiles\t3lq6k73.default\extensions\VJKPXI46039420@JMZUIOB85844870.com\chrome\content\browser.xul, V karanténě, [412], [237118],1.0.7969
PUP.Optional.CrossRider, C:\Users\Jindra\AppData\Roaming\Mozilla\Firefox\Profiles\t3lq6k73.default\extensions\VJKPXI46039420@JMZUIOB85844870.com\chrome\content\ffCoreFilesIndex.txt, V karanténě, [412], [237118],1.0.7969
PUP.Optional.CrossRider, C:\Users\Jindra\AppData\Roaming\Mozilla\Firefox\Profiles\t3lq6k73.default\extensions\VJKPXI46039420@JMZUIOB85844870.com\chrome\content\options.xul, V karanténě, [412], [237118],1.0.7969
PUP.Optional.CrossRider, C:\Users\Jindra\AppData\Roaming\Mozilla\Firefox\Profiles\t3lq6k73.default\extensions\VJKPXI46039420@JMZUIOB85844870.com\chrome\content\search_dialog.xul, V karanténě, [412], [237118],1.0.7969
PUP.Optional.CrossRider, C:\Users\Jindra\AppData\Roaming\Mozilla\Firefox\Profiles\t3lq6k73.default\extensions\VJKPXI46039420@JMZUIOB85844870.com\extensionData\manifest.xml, V karanténě, [412], [237118],1.0.7969
PUP.Optional.CrossRider, C:\Users\Jindra\AppData\Roaming\Mozilla\Firefox\Profiles\t3lq6k73.default\extensions\VJKPXI46039420@JMZUIOB85844870.com\extensionData\plugins.json, V karanténě, [412], [237118],1.0.7969
PUP.Optional.CrossRider, C:\Users\Jindra\AppData\Roaming\Mozilla\Firefox\Profiles\t3lq6k73.default\extensions\VJKPXI46039420@JMZUIOB85844870.com\locale\en-US\translations.dtd, V karanténě, [412], [237118],1.0.7969
PUP.Optional.CrossRider, C:\Users\Jindra\AppData\Roaming\Mozilla\Firefox\Profiles\t3lq6k73.default\extensions\VJKPXI46039420@JMZUIOB85844870.com\skin\button1.png, V karanténě, [412], [237118],1.0.7969
PUP.Optional.CrossRider, C:\Users\Jindra\AppData\Roaming\Mozilla\Firefox\Profiles\t3lq6k73.default\extensions\VJKPXI46039420@JMZUIOB85844870.com\skin\button2.png, V karanténě, [412], [237118],1.0.7969
PUP.Optional.CrossRider, C:\Users\Jindra\AppData\Roaming\Mozilla\Firefox\Profiles\t3lq6k73.default\extensions\VJKPXI46039420@JMZUIOB85844870.com\skin\button3.png, V karanténě, [412], [237118],1.0.7969
PUP.Optional.CrossRider, C:\Users\Jindra\AppData\Roaming\Mozilla\Firefox\Profiles\t3lq6k73.default\extensions\VJKPXI46039420@JMZUIOB85844870.com\skin\button4.png, V karanténě, [412], [237118],1.0.7969
PUP.Optional.CrossRider, C:\Users\Jindra\AppData\Roaming\Mozilla\Firefox\Profiles\t3lq6k73.default\extensions\VJKPXI46039420@JMZUIOB85844870.com\skin\button5.png, V karanténě, [412], [237118],1.0.7969
PUP.Optional.CrossRider, C:\Users\Jindra\AppData\Roaming\Mozilla\Firefox\Profiles\t3lq6k73.default\extensions\VJKPXI46039420@JMZUIOB85844870.com\skin\icon128.png, V karanténě, [412], [237118],1.0.7969
PUP.Optional.CrossRider, C:\Users\Jindra\AppData\Roaming\Mozilla\Firefox\Profiles\t3lq6k73.default\extensions\VJKPXI46039420@JMZUIOB85844870.com\skin\icon16.png, V karanténě, [412], [237118],1.0.7969
PUP.Optional.CrossRider, C:\Users\Jindra\AppData\Roaming\Mozilla\Firefox\Profiles\t3lq6k73.default\extensions\VJKPXI46039420@JMZUIOB85844870.com\skin\icon24.png, V karanténě, [412], [237118],1.0.7969
PUP.Optional.CrossRider, C:\Users\Jindra\AppData\Roaming\Mozilla\Firefox\Profiles\t3lq6k73.default\extensions\VJKPXI46039420@JMZUIOB85844870.com\skin\icon48.png, V karanténě, [412], [237118],1.0.7969
PUP.Optional.CrossRider, C:\Users\Jindra\AppData\Roaming\Mozilla\Firefox\Profiles\t3lq6k73.default\extensions\VJKPXI46039420@JMZUIOB85844870.com\skin\panelarrow-up.png, V karanténě, [412], [237118],1.0.7969
PUP.Optional.CrossRider, C:\Users\Jindra\AppData\Roaming\Mozilla\Firefox\Profiles\t3lq6k73.default\extensions\VJKPXI46039420@JMZUIOB85844870.com\skin\popup.html, V karanténě, [412], [237118],1.0.7969
PUP.Optional.CrossRider, C:\Users\Jindra\AppData\Roaming\Mozilla\Firefox\Profiles\t3lq6k73.default\extensions\VJKPXI46039420@JMZUIOB85844870.com\skin\skin.css, V karanténě, [412], [237118],1.0.7969
PUP.Optional.CrossRider, C:\Users\Jindra\AppData\Roaming\Mozilla\Firefox\Profiles\t3lq6k73.default\extensions\VJKPXI46039420@JMZUIOB85844870.com\skin\update.css, V karanténě, [412], [237118],1.0.7969
PUP.Optional.CrossRider, C:\Users\Jindra\AppData\Roaming\Mozilla\Firefox\Profiles\t3lq6k73.default\extensions\VJKPXI46039420@JMZUIOB85844870.com\install.rdf, V karanténě, [412], [237118],1.0.7969
PUP.Optional.AdvancedSystemCare, C:\PROGRAM, V karanténě, [3801], [380352],1.0.7969
PUP.Optional.AdvancedSystemCare, C:\PROGRAM FILES\JAVA\JRE6\BIN\JUSCHED.EXE, V karanténě, [3801], [380352],1.0.7969
PUP.Optional.AdvancedSystemCare, C:\PROGRAM FILES (X86)\AMD AVT\BIN\KDBSYNC.EXE, V karanténě, [3801], [380352],1.0.7969
PUP.Optional.AdvancedSystemCare, C:\PROGRAM FILES (X86)\ACRONIS\TRUEIMAGEHOME\TRUEIMAGEMONITOR.EXE, V karanténě, [3801], [380352],1.0.7969
PUP.Optional.AdvancedSystemCare, C:\PROGRAM FILES (X86)\GAMING KEYBOARD\MONITOR.EXE, V karanténě, [3801], [380352],1.0.7969
PUP.Optional.AdvancedSystemCare, C:\PROGRAM FILES\CCLEANER\CCLEANER64.EXE, V karanténě, [3801], [380352],1.0.7969
PUP.Optional.AdvancedSystemCare, C:\DOCUMENTS AND SETTINGS\PUBLIC\Desktop\CCleaner.lnk, V karanténě, [3801], [380352],1.0.7969
PUP.Optional.AdvancedSystemCare, C:\USERS\PUBLIC\DESKTOP\CCleaner.lnk, V karanténě, [3801], [380352],1.0.7969
PUP.Optional.AdvancedSystemCare, C:\WINDOWS\SYSTEM32\TASKS\{D58BCE10-E934-4AE9-9632-78903CE88A8E}, V karanténě, [3801], [380352],1.0.7969
PUP.Optional.Spigot, C:\USERS\JINDRA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\TOCS60ZR.DEFAULT\PREFS.JS, Nahrazen, [168], [301667],1.0.7969
PUP.Optional.OpenCandy, C:\USERS\JINDRA\DOWNLOADS\ATUBE_CATCHER.EXE, V karanténě, [1087], [297667],1.0.7969

Fyzický sektor: 0
(Nebyly zjištěny žádné škodlivé položky)

WMI: 0
(Nebyly zjištěny žádné škodlivé položky)


(end)


Intel Core i3-4160 / ATI MSI R9 270 Gaming 2G / RAM 8GB DDR3 1600MHz CL10 / 1TB HDD
iPhone 6s

Reklama
Uživatelský avatar
jaro3
člen Security týmu
Guru Level 15
Guru Level 15
Příspěvky: 38960
Registrován: červen 07
Bydliště: Jižní Čechy
Pohlaví: Muž

Re: Kontrola Logu HJT

Příspěvekod jaro3 » 22 lis 2018 18:35

ještě to další.
Při práci s programy HJT, ComboFix,MbAM, SDFix aj. zavřete všechny ostatní aplikace a prohlížeče!
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra

Uživatelský avatar
Smile
Level 2.5
Level 2.5
Příspěvky: 311
Registrován: leden 09
Bydliště: Zlín
Pohlaví: Muž

Re: Kontrola Logu HJT

Příspěvekod Smile » 23 lis 2018 01:06

RogueKiller Anti-Malware V13.0.12.0 (x64) [Nov 21 2018] (Free) by Adlice Software
mail : https://adlice.com/contact/
Website : https://adlice.com/download/roguekiller/
Operating System : Windows 7 (6.1.7601 Service Pack 1) 64 bits
Started in : Normal mode
User : Jindra [Administrator]
Started from : C:\Users\Jindra\Desktop\RogueKiller_portable64.exe
Mode : Standard Scan, Scan -- Date : 2018/11/22 17:32:58 (Duration : 00:19:23)

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Processes ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Process Modules ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Services ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Tasks ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤
[Hj.Shortcut (Malicious)] (Microsoft Corporation) \{46862743-3F55-43ED-9538-7DD224BBE41C} -- "c:\program files (x86)\internet explorer\iexplore.exe" [http://ui.skype.com/ui/0/5.3.0.120/en/abandoninstall?page=tsChrome&installinfo=google-toolbar:notoffered;userdeclined,google-chrome:offered-installed;madedefault] -> Found
[Suspicious.Path (Potentially Malicious)] (Microsoft Windows) \{AC009398-F9DF-4D0B-9DE0-67D62EC57553} -- C:\Windows\system32\pcalua.exe [-a "C:\Users\Jindra\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\KDA1JNW1\farmmania[1].exe" -d C:\Users\Jindra\Desktop] -> Found
[Hj.Shortcut (Malicious)] (Microsoft Corporation) \{F8ACB6A8-688F-4879-ACDC-04CCB04F4EED} -- "c:\program files (x86)\internet explorer\iexplore.exe" [http://ui.skype.com/ui/0/5.3.0.111/en/abandoninstall?page=tsGoogle&installinfo=google-toolbar:offered-installed,google-chrome:notoffered;toolbaroffered] -> Found

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Registry ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤
>>>>>> XX - Explorer Advanced
[PUM.StartMenu (Potentially Malicious)] (X64) HKEY_USERS\S-1-5-21-2486248661-3588290573-681466345-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced|Start_ShowMyDocs -- 2 -> Found
[PUM.StartMenu (Potentially Malicious)] (X64) HKEY_USERS\S-1-5-21-2486248661-3588290573-681466345-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced|Start_ShowMyMusic -- 2 -> Found
[PUM.StartMenu (Potentially Malicious)] (X64) HKEY_USERS\S-1-5-21-2486248661-3588290573-681466345-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced|Start_ShowMyGames -- 2 -> Found
[PUM.StartMenu (Potentially Malicious)] (X64) HKEY_USERS\S-1-5-21-2486248661-3588290573-681466345-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced|Start_ShowControlPanel -- 2 -> Found
[PUM.StartMenu (Potentially Malicious)] (X64) HKEY_USERS\S-1-5-21-2486248661-3588290573-681466345-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced|Start_ShowMyPics -- 2 -> Found
[PUM.StartMenu (Potentially Malicious)] (X64) HKEY_USERS\S-1-5-21-2486248661-3588290573-681466345-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced|Start_ShowUser -- 2 -> Found
[PUM.StartMenu (Potentially Malicious)] (X64) HKEY_USERS\S-1-5-21-2486248661-3588290573-681466345-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced|Start_ShowMyComputer -- 2 -> Found
[PUM.StartMenu (Potentially Malicious)] (X64) HKEY_USERS\S-1-5-21-2486248661-3588290573-681466345-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced|Start_ShowDownloads -- 2 -> Found
[PUM.StartMenu (Potentially Malicious)] (X64) HKEY_USERS\S-1-5-21-2486248661-3588290573-681466345-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced|Start_ShowVideos -- 2 -> Found
[PUM.StartMenu (Potentially Malicious)] (X86) HKEY_USERS\S-1-5-21-2486248661-3588290573-681466345-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced|Start_ShowMyGames -- 2 -> Found
[PUM.StartMenu (Potentially Malicious)] (X86) HKEY_USERS\S-1-5-21-2486248661-3588290573-681466345-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced|Start_ShowMyMusic -- 2 -> Found
[PUM.StartMenu (Potentially Malicious)] (X86) HKEY_USERS\S-1-5-21-2486248661-3588290573-681466345-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced|Start_ShowMyDocs -- 2 -> Found
[PUM.StartMenu (Potentially Malicious)] (X86) HKEY_USERS\S-1-5-21-2486248661-3588290573-681466345-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced|Start_ShowMyPics -- 2 -> Found
[PUM.StartMenu (Potentially Malicious)] (X86) HKEY_USERS\S-1-5-21-2486248661-3588290573-681466345-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced|Start_ShowUser -- 2 -> Found
[PUM.StartMenu (Potentially Malicious)] (X86) HKEY_USERS\S-1-5-21-2486248661-3588290573-681466345-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced|Start_ShowControlPanel -- 2 -> Found
[PUM.StartMenu (Potentially Malicious)] (X86) HKEY_USERS\S-1-5-21-2486248661-3588290573-681466345-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced|Start_ShowMyComputer -- 2 -> Found
[PUM.StartMenu (Potentially Malicious)] (X86) HKEY_USERS\S-1-5-21-2486248661-3588290573-681466345-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced|Start_ShowDownloads -- 2 -> Found
[PUM.StartMenu (Potentially Malicious)] (X86) HKEY_USERS\S-1-5-21-2486248661-3588290573-681466345-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced|Start_ShowVideos -- 2 -> Found

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ WMI ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Hosts File ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Files ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤
[PUP.Gen0 (Potentially Malicious)] (shortcut) Flvto CENZURA.lnk -- C:\Users\Jindra\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Flvto CENZURA.lnk => C:\Users\Jindra\AppData\Local\Flvto CENZURA\FlvtoYoutubeDownloader.Redesign.exe -> Found
[PUP.Gen0 (Potentially Malicious)] (folder) Flvto CENZURA -- C:\Users\Jindra\AppData\Local\Flvto CENZURA -> Found
[PUP.Gen0 (Potentially Malicious)] (folder) Flvto CENZURA -- C:\Users\Jindra\AppData\Local\Flvto CENZURA -> Found

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Web browsers ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤
>>>>>> Firefox Config
[PUM.SearchEngine (Potentially Malicious)] browser.search.defaultenginename (C:\Users\Jindra\AppData\Roaming\Mozilla\Firefox\Profiles\tocs60zr.default\prefs.js) -- Yahoo! -> Found
[PUM.SearchEngine (Potentially Malicious)] browser.search.selectedEngine (C:\Users\Jindra\AppData\Roaming\Mozilla\Firefox\Profiles\tocs60zr.default\prefs.js) -- Yahoo! -> Found
Intel Core i3-4160 / ATI MSI R9 270 Gaming 2G / RAM 8GB DDR3 1600MHz CL10 / 1TB HDD
iPhone 6s

Uživatelský avatar
Smile
Level 2.5
Level 2.5
Příspěvky: 311
Registrován: leden 09
Bydliště: Zlín
Pohlaví: Muž

Re: Kontrola Logu HJT

Příspěvekod Smile » 23 lis 2018 15:43

Sophos nic nenašel :)
Intel Core i3-4160 / ATI MSI R9 270 Gaming 2G / RAM 8GB DDR3 1600MHz CL10 / 1TB HDD
iPhone 6s

Uživatelský avatar
jaro3
člen Security týmu
Guru Level 15
Guru Level 15
Příspěvky: 38960
Registrován: červen 07
Bydliště: Jižní Čechy
Pohlaví: Muž

Re: Kontrola Logu HJT

Příspěvekod jaro3 » 23 lis 2018 17:53

Zavři všechny programy a prohlížeče. Deaktivuj antivir a firewall.
Prosím, odpoj všechny USB (kromě myši s klávesnice) nebo externí disky z počítače před spuštěním tohoto programu.
Spusť znovu RogueKiller ( Pro Windows Vista nebo Windows 7, klepni pravým a vyber "Spustit jako správce", ve Windows XP poklepej ke spuštění).
- klikni na „Start Scan“. V novém okně nic neměň a klikni dole na „Start Scan“,
po jeho skončení - vše zatrhni (dej zatržítka vlevo od nálezů , do bílých políček)
- pak klikni na "Remove Selected"
- Počkej, dokud Status box nezobrazí " Removal finished, please review result "
- Klikni na "Open report " a pak na " Open TXT“ a zkopíruj ten log a vlož obsah té zprávy prosím sem. Log je možno nalézt v C:\ProgramData\RogueKiller\Logs - Zavři RogueKiller.

Vypni antivir i firewall.
Stáhni Zoek.exe
http://download.bleepingcomputer.com/smeenk/zoek.exe

Zavři všechny ostatní programy , okna i prohlížeče.
Spusť Zoek.exe ( u win vista , win7, 8 klikni na něj pravým a vyber : „Spustit jako správce“
-pozor , náběh programu může trvat déle.
Do okna programu vlož skript níže:

Kód: Vybrat vše

autoclean;
emptyclsid;
iedefaults;
FFdefaults;
CHRdefaults;
emptyalltemp;
resethosts;

klikni na Run Script
Program provede sken , opravu, sken i oprava může trvat i více minut ,je třeba posečkat do konce. Do okna neklikej!
Program nabídne restart , potvrď .
Po restartu se může nějaký čas ukázat pouze černá plocha , to je normální. Je třeba počkat až se vytvoří log. Ten si můžeš uložit třeba do dokumentů , jinak se sám ukládá do:
C:\zoek-results.log Zkopíruj sem celý obsah toho logu.
Pokud budou problémy , spusť zoek v nouz. režimu.

Stáhni si Zemana AntiMalware Free z tohoto odkazu:
https://www.zemana.com/Download/AntiMal ... .Setup.exe
a ulož si ho na plochu.
Poklepej na tento soubor na ploše a postupuj podle pokynů k instalaci programu.
Přijmi licenci k používání programu EULA , pokud se nabídne.
Pokud je k dispozici aktualizace programu , klepni na tlačítko „Update now“ ( aktualizovat nyní).
Můžeš si zatrhnout i vytvoření bodu obnovy:
Klikni na ozubené kolečko , poté na „Skenování“ a zatrhni „vytvářet body obnovy“.
Vrať se zpět ( klikni na domeček).
Zavři všechny otevřené soubory, složky a prohlížeče
Neměň žádné nastavení. Klikni na „Skenovat“.
Po skenu lze vidět , zda jsou nějaké nákazy. Klikni na „Další“. Nákazy budou přemístěny do karantény.
Když je skenování dokončeno, objeví se tisková zpráva , zkopíruj sem celý obsah té zprávy.
Jinak můžeš zprávy vidět , když klikneš vpravo nahoře na „ zprávy“.


Vypni rez. ochranu u antiviru a antispywaru,příp. firewall..

Stáhni si ComboFix (by sUBs)
a ulož si ho na plochu.
Ukonči všechna aktivní okna a spusť ho.
- Po spuštění se zobrazí podmínky užití, potvrď je stiskem tlačítka Ano
- Dále postupuj dle pokynů, během aplikování ComboFixu neklikej do zobrazujícího se okna
- Po dokončení skenování by měl program vytvořit log - C:\ComboFix.txt - zkopíruj sem prosím celý jeho obsah
Pokud budou problémy , spusť ho v nouz. režimu.

Upozornění : Může se stát, že po aplikaci Combofixu a restartu počítače, Windows nenaběhnou , nebo nenajede plocha , budou problémy s připojením, pak znovu restartuj počítač, pokud to nepomůže , po restartu mačkej klávesu F8 a pak zvol poslední známou funkční konfiguraci. , či použij bod obnovy.
Při práci s programy HJT, ComboFix,MbAM, SDFix aj. zavřete všechny ostatní aplikace a prohlížeče!
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra

Uživatelský avatar
Smile
Level 2.5
Level 2.5
Příspěvky: 311
Registrován: leden 09
Bydliště: Zlín
Pohlaví: Muž

Re: Kontrola Logu HJT

Příspěvekod Smile » 26 lis 2018 21:42

RogueKiller Anti-Malware V13.0.12.0 (x64) [Nov 21 2018] (Free) by Adlice Software
mail : https://adlice.com/contact/
Website : https://adlice.com/download/roguekiller/
Operating System : Windows 7 (6.1.7601 Service Pack 1) 64 bits
Started in : Normal mode
User : Jindra [Administrator]
Started from : C:\Users\Jindra\Desktop\RogueKiller_portable64.exe
Mode : Standard Scan, Delete -- Date : 2018/11/26 21:40:54 (Duration : 00:45:42)

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Delete ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤
[Hj.Shortcut (Malicious)] \{46862743-3F55-43ED-9538-7DD224BBE41C} -- "c:\program files (x86)\internet explorer\iexplore.exe" (http://ui.skype.com/ui/0/5.3.0.120/en/a ... adedefault) -> Deleted
[Suspicious.Path (Potentially Malicious)] \{AC009398-F9DF-4D0B-9DE0-67D62EC57553} -- C:\Windows\system32\pcalua.exe (-a "C:\Users\Jindra\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\KDA1JNW1\farmmania[1].exe" -d C:\Users\Jindra\Desktop) -> Deleted
[Hj.Shortcut (Malicious)] \{F8ACB6A8-688F-4879-ACDC-04CCB04F4EED} -- "c:\program files (x86)\internet explorer\iexplore.exe" (http://ui.skype.com/ui/0/5.3.0.111/en/a ... baroffered) -> Deleted
[PUM.StartMenu (Potentially Malicious)] HKEY_USERS\S-1-5-21-2486248661-3588290573-681466345-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced|Start_ShowMyDocs -- -> Replaced (1)
[PUM.StartMenu (Potentially Malicious)] HKEY_USERS\S-1-5-21-2486248661-3588290573-681466345-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced|Start_ShowMyMusic -- -> Replaced (1)
[PUM.StartMenu (Potentially Malicious)] HKEY_USERS\S-1-5-21-2486248661-3588290573-681466345-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced|Start_ShowMyGames -- -> Replaced (1)
[PUM.StartMenu (Potentially Malicious)] HKEY_USERS\S-1-5-21-2486248661-3588290573-681466345-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced|Start_ShowUser -- -> Replaced (1)
[PUM.StartMenu (Potentially Malicious)] HKEY_USERS\S-1-5-21-2486248661-3588290573-681466345-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced|Start_ShowMyPics -- -> Replaced (1)
[PUM.StartMenu (Potentially Malicious)] HKEY_USERS\S-1-5-21-2486248661-3588290573-681466345-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced|Start_ShowControlPanel -- -> Replaced (1)
[PUM.StartMenu (Potentially Malicious)] HKEY_USERS\S-1-5-21-2486248661-3588290573-681466345-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced|Start_ShowMyComputer -- -> Replaced (1)
[PUM.StartMenu (Potentially Malicious)] HKEY_USERS\S-1-5-21-2486248661-3588290573-681466345-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced|Start_ShowDownloads -- -> Replaced (1)
[PUM.StartMenu (Potentially Malicious)] HKEY_USERS\S-1-5-21-2486248661-3588290573-681466345-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced|Start_ShowVideos -- -> Replaced (1)
[PUM.StartMenu (Potentially Malicious)] HKEY_USERS\S-1-5-21-2486248661-3588290573-681466345-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced|Start_ShowMyDocs -- -> Replaced (1)
[PUM.StartMenu (Potentially Malicious)] HKEY_USERS\S-1-5-21-2486248661-3588290573-681466345-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced|Start_ShowMyGames -- -> Replaced (1)
[PUM.StartMenu (Potentially Malicious)] HKEY_USERS\S-1-5-21-2486248661-3588290573-681466345-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced|Start_ShowMyMusic -- -> Replaced (1)
[PUM.StartMenu (Potentially Malicious)] HKEY_USERS\S-1-5-21-2486248661-3588290573-681466345-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced|Start_ShowMyPics -- -> Replaced (1)
[PUM.StartMenu (Potentially Malicious)] HKEY_USERS\S-1-5-21-2486248661-3588290573-681466345-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced|Start_ShowControlPanel -- -> Replaced (1)
[PUM.StartMenu (Potentially Malicious)] HKEY_USERS\S-1-5-21-2486248661-3588290573-681466345-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced|Start_ShowUser -- -> Replaced (1)
[PUM.StartMenu (Potentially Malicious)] HKEY_USERS\S-1-5-21-2486248661-3588290573-681466345-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced|Start_ShowMyComputer -- -> Replaced (1)
[PUM.StartMenu (Potentially Malicious)] HKEY_USERS\S-1-5-21-2486248661-3588290573-681466345-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced|Start_ShowDownloads -- -> Replaced (1)
[PUM.StartMenu (Potentially Malicious)] HKEY_USERS\S-1-5-21-2486248661-3588290573-681466345-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced|Start_ShowVideos -- -> Replaced (1)
[PUP.Gen0 (Potentially Malicious)] Flvto CENZURA -- %localappdata%\Flvto CENZURA -> Deleted
[PUP.Gen0 (Potentially Malicious)] Flvto CENZURA -- %localappdata%\Flvto CENZURA -> Removed at reboot [2]
[PUM.SearchEngine (Potentially Malicious)] browser.search.defaultenginename -- Yahoo! -> Deleted
[PUM.SearchEngine (Potentially Malicious)] browser.search.selectedEngine -- Yahoo! -> Deleted
Intel Core i3-4160 / ATI MSI R9 270 Gaming 2G / RAM 8GB DDR3 1600MHz CL10 / 1TB HDD
iPhone 6s

Uživatelský avatar
jaro3
člen Security týmu
Guru Level 15
Guru Level 15
Příspěvky: 38960
Registrován: červen 07
Bydliště: Jižní Čechy
Pohlaví: Muž

Re: Kontrola Logu HJT

Příspěvekod jaro3 » 26 lis 2018 23:40

ještě to další , zítra.
Při práci s programy HJT, ComboFix,MbAM, SDFix aj. zavřete všechny ostatní aplikace a prohlížeče!
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra

Uživatelský avatar
Smile
Level 2.5
Level 2.5
Příspěvky: 311
Registrován: leden 09
Bydliště: Zlín
Pohlaví: Muž

Re: Kontrola Logu HJT

Příspěvekod Smile » 27 lis 2018 18:50

Zoek.exe v5.0.0.2 Updated 03-May-2018(Online Version)
Tool run by Jindra on Łt 27.11.2018 at 18:25:51,25.
Microsoft Windows 7 Ultimate 6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Jindra\Desktop\zoek (1).exe [Scan all users] [Script inserted]

==== Older Logs ======================

C:\zoek-results2018-11-27-172153.log 1243 bytes

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

# localhost name resolution is handled within DNS itself.
127.0.0.1 localhost
::1 localhost

==== Empty Folders Check ======================

C:\PROGRA~2\DsNET Corp deleted successfully
C:\PROGRA~2\Mozilla Maintenance Service deleted successfully
C:\PROGRA~2\MSXML 4.0 deleted successfully
C:\PROGRA~2\PC Connectivity Solution deleted successfully
C:\PROGRA~2\Webteh deleted successfully
C:\PROGRA~2\COMMON~1\Eye 312 deleted successfully
C:\PROGRA~3\AWEM deleted successfully
C:\PROGRA~3\Ralink deleted successfully
C:\PROGRA~3\{3C5CBD7B-3D1D-411E-96C2-513FFCA84D2D} deleted successfully
C:\PROGRA~3\{BAF091CA-86C4-4627-ADA1-897E2621C1B0} deleted successfully
C:\PROGRA~3\{BE2ACE5C-32B7-4777-9BDF-ECF87CDAB705} deleted successfully
C:\PROGRA~3\{CED89F1A-945F-46EC-B23C-5EAF6D2DB12A} deleted successfully
C:\PROGRA~3\{FD6F83C0-EC70-4581-8361-C70CD1AA4B98} deleted successfully
C:\Users\Jindra\AppData\Roaming\Opera Software deleted successfully
C:\Users\Jindra\AppData\Local\GameSpy deleted successfully
C:\Users\Jindra\AppData\Local\Oblivion deleted successfully
C:\Users\Jindra\AppData\Local\Opera Software deleted successfully
C:\Users\Jindra\AppData\Local\Samsung deleted successfully
C:\Users\Jindra\AppData\Local\WarThunder deleted successfully

==== Deleting CLSID Registry Keys ======================


==== Deleting CLSID Registry Values ======================


==== Deleting Services ======================


==== FireFox Fix ======================

Deleted from C:\Users\Jindra\AppData\Roaming\Mozilla\Firefox\Profiles\tocs60zr.default\prefs.js:
user_pref("browser.startup.homepage", "https://www.google.com/");
user_pref("browser.search.useDBForOrder", true);

Added to C:\Users\Jindra\AppData\Roaming\Mozilla\Firefox\Profiles\tocs60zr.default\prefs.js:
user_pref("browser.startup.homepage", "about:home");
user_pref("browser.newtab.url", "about:newtab");

Deleted from C:\Users\Jindra\AppData\Roaming\Mozilla\Firefox\Profiles\t3lq6k73.default\prefs.js:

Added to C:\Users\Jindra\AppData\Roaming\Mozilla\Firefox\Profiles\t3lq6k73.default\prefs.js:
user_pref("browser.startup.homepage", "about:home");
user_pref("browser.newtab.url", "about:newtab");

ProfilePath: C:\Users\Jindra\AppData\Roaming\Mozilla\Firefox\Profiles\tocs60zr.default

user.js not found
---- Lines inbox.com modified from prefs.js ----

user_pref("extensions.enabledItems", "{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24,{e4a8a97b-f2ed-450b-b12d-ee082ba24781}:0.9.2,{82AF8DCA-6DE9-405D-B
---- Lines ask.com modified from prefs.js ----

user_pref("extensions.enabledItems", "{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24,{e4a8a97b-f2ed-450b-b12d-ee082ba24781}:0.9.2,{82AF8DCA-6DE9-405D-B
---- FireFox user.js and prefs.js backups ----

prefs_27.11.2018_1841_.backup

ProfilePath: C:\Users\Jindra\AppData\Roaming\Mozilla\Firefox\Profiles\t3lq6k73.default

user.js not found
---- FireFox user.js and prefs.js backups ----


==== Deleting Files \ Folders ======================

C:\PROGRA~2\DsNET Corp not found
C:\PROGRA~2\Mozilla Maintenance Service not found
C:\PROGRA~2\PC Connectivity Solution not found
C:\PROGRA~2\Webteh not found
C:\PROGRA~3\{3C5CBD7B-3D1D-411E-96C2-513FFCA84D2D} not found
C:\PROGRA~3\{BAF091CA-86C4-4627-ADA1-897E2621C1B0} not found
C:\PROGRA~3\{BE2ACE5C-32B7-4777-9BDF-ECF87CDAB705} not found
C:\PROGRA~3\{CED89F1A-945F-46EC-B23C-5EAF6D2DB12A} not found
C:\PROGRA~3\{FD6F83C0-EC70-4581-8361-C70CD1AA4B98} not found
C:\wt_launcher_1.0.1.361.exe deleted
C:\LOGFILE.TXT deleted
C:\PROGRA~3\Package Cache deleted
C:\Users\Jindra\AppData\Local\GLF526E.tmp deleted
C:\Users\Jindra\AppData\Local\Unity deleted
C:\Users\Jindra\AppData\Local\AVAST Software deleted
C:\Users\Jindra\AppData\Local\CrashRpt deleted
C:\Users\Jindra\AppData\LocalLow\Unity deleted
C:\windows\SysNative\tasks\ASC8_PerformanceMonitor deleted
"C:\Users\Jindra\AppData\Roaming\Printer Icons" deleted
"C:\Users\Jindra\AppData\Roaming\Printers" deleted
"C:\Users\Jindra\AppData\Roaming\PrintingModule" deleted
"C:\Users\Jindra\AppData\Roaming\Rock" deleted
"C:\ProgramData\Profiles" deleted
"C:\ProgramData\Project Templates" deleted
"C:\ProgramData\Quartz Composer" deleted
"C:\ProgramData\Sampler" deleted

==== Orphaned Tasks deleted from Registry ======================

ASC8_PerformanceMonitor deleted
Opera N deleted
Opera N Saturday deleted
Opera N Sunday deleted

==== Firefox Start and Search pages ======================

ProfilePath: C:\Users\Jindra\AppData\Roaming\Mozilla\Firefox\Profiles\tocs60zr.default
user_pref("browser.startup.homepage", "about:home");
user_pref("browser.newtab.url", "about:newtab");

ProfilePath: C:\Users\Jindra\AppData\Roaming\Mozilla\Firefox\Profiles\t3lq6k73.default
user_pref("browser.startup.homepage", "about:home");
user_pref("browser.newtab.url", "about:newtab");

==== Firefox Extensions ======================

ProfilePath: C:\Users\Jindra\AppData\Roaming\Mozilla\Firefox\Profiles\tocs60zr.default
- Undetermined - %ProfilePath%\extensions\{58d2a791-6199-482f-a9aa-9b725ec61362}
- Undetermined - %ProfilePath%\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}

ProfilePath: C:\Users\Jindra\AppData\Roaming\Mozilla\Firefox\Profiles\t3lq6k73.default
- EXT_NAME - %ProfilePath%\extensions\addictive_typing_lessons@tomkennedy.net

AppDir: C:\Program Files (x86)\Mozilla Firefox
- Undetermined - %AppDir%\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
- Undetermined - %AppDir%\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
- Undetermined - %AppDir%\extensions\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}
- Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

==== Firefox Plugins ======================

Profilepath: C:\Users\Jindra\AppData\Roaming\Mozilla\Firefox\Profiles\t3lq6k73.default
- C:\Program Files x86\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll - [?]
- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll - [?]
- C:\Program Files x86\Google\Update\1.3.24.15\npGoogleUpdate3.dll - [?]
- C:\Program Files x86\Microsoft Silverlight\5.1.30214.0\npctrl.dll - [?]
- C:\Program Files x86\Google\Google Earth\plugin\npgeplugin.dll - [?]
- C:\Program Files x86\Java\jre6\bin\new_plugin\npdeployJava1.dll - [?]
- C:\Program Files x86\Java\jre6\bin\new_plugin\npjp2.dll - [?]
- C:\Program Files x86\Adobe\Reader 9.0\Reader\browser\nppdf32.dll - [?]
- C:\Program Files x86\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll - [?]
- C:\Users\Jindra\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll - [?]
- C:\Program Files x86\Windows Live\Photo Gallery\NPWLPG.dll - [?]
- C:\PROGRA2\Microsoft Office\Office14\NPSPWRAP.DLL - [?]
- C:\PROGRA2\Microsoft Office\Office14\NPAUTHZ.DLL - [?]
- C:\Program Files x86\Microsoft Silverlight\5.1.30214.0\npctrlui.dll - [?]


==== Chromium Look ======================

Google Chrome Version: 70.0.3538.110


Chrome Media Router - Jindra\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/?LinkID=617911&ResetID=131346221113876953&GUID=51ACC3A9-CB1C-4290-9054-D3E35E59A07E"

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/?LinkID=617911&ResetID=131346221113876953&GUID=51ACC3A9-CB1C-4290-9054-D3E35E59A07E"

==== All HKLM and HKCU SearchScopes ======================

HKLM\SearchScopes "DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
HKLM\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
HKLM\Wow6432Node\SearchScopes "DefaultScope"="{96bd48dd-741b-41ae-ac4a-aff96ba00f7e}"
HKLM\Wow6432Node\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
HKLM\Wow6432Node\SearchScopes\{96bd48dd-741b-41ae-ac4a-aff96ba00f7e} - http://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
HKCU\SearchScopes "DefaultScope"="{A9C39792-EEA5-4494-B4AF-BF01D3549BED}"
HKCU\SearchScopes\{012E1000-F331-11DB-8314-0800200C9A66} - http://www.google.com/search?q={searchTerms}
HKCU\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
HKCU\SearchScopes\{A9C39792-EEA5-4494-B4AF-BF01D3549BED} - http://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE

==== Reset Google Chrome ======================

C:\Users\Jindra\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\Jindra\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences was reset successfully
C:\Users\Jindra\AppData\Local\Google\Chrome\User Data\Guest Profile\Preferences was reset successfully
C:\Users\Jindra\AppData\Local\Google\Chrome\User Data\Guest Profile\Secure Preferences was reset successfully
C:\Users\Jindra\AppData\Local\Google\Chrome\User Data\System Profile\Preferences was reset successfully
C:\Users\Jindra\AppData\Local\Google\Chrome\User Data\System Profile\Secure Preferences was reset successfully
C:\Users\Jindra\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully
C:\Users\Jindra\AppData\Local\Google\Chrome\User Data\Default\Web Data-journal was reset successfully
C:\Users\Jindra\AppData\Local\Google\Chrome\User Data\Guest Profile\Web Data was reset successfully
C:\Users\Jindra\AppData\Local\Google\Chrome\User Data\Guest Profile\Web Data-journal was reset successfully
C:\Users\Jindra\AppData\Local\Google\Chrome\User Data\System Profile\Web Data was reset successfully
C:\Users\Jindra\AppData\Local\Google\Chrome\User Data\System Profile\Web Data-journal was reset successfully

==== Deleting Registry Keys ======================

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\UnityWebPlayer deleted successfully
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\FlashPlayerUpdate deleted successfully
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Flvto CENZURA deleted successfully
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update deleted successfully
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task deleted successfully

==== Empty IE Cache ======================

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Jindra\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Jindra\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot

==== Empty FireFox Cache ======================

No FireFox Cache found

==== Empty Chrome Cache ======================

C:\Users\Jindra\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully
C:\Users\Jindra\AppData\Local\Google\Chrome\User Data\Guest Profile\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== C:\zoek_backup content ======================


==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\Jindra\AppData\Local\Temp will be emptied at reboot
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied
C:\Users\Jindra\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== Deleting Files / Folders ======================

"C:\Users\Jindra\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" not deleted

==== EOF on Łt 27.11.2018 at 18:49:07,32 ======================
Intel Core i3-4160 / ATI MSI R9 270 Gaming 2G / RAM 8GB DDR3 1600MHz CL10 / 1TB HDD
iPhone 6s

Uživatelský avatar
Smile
Level 2.5
Level 2.5
Příspěvky: 311
Registrován: leden 09
Bydliště: Zlín
Pohlaví: Muž

Re: Kontrola Logu HJT

Příspěvekod Smile » 27 lis 2018 19:08

Zemana AntiMalware 2.74.2.150 (instalační verze)

-------------------------------------------------------
Scan Result : Dokončeno
Scan Date : 2018.11.27
Operating System : Windows 7 64-bit
Processor : 4X AMD Phenom(tm) II X4 940 Processor
BIOS Mode : Legacy
CUID : 121C4D12CD32C6383E130C
Scan Type : Skenování systému
Duration : 13m 10s
Scanned Objects : 86651
Detected Objects : 0
Excluded Objects : 0
Read Level : SCSI
Auto Upload : Zapnuto
Detect All Extensions : Vypnuto
Scan Documents : Vypnuto
Domain Info : HOME,0,2

Detected Objects
-------------------------------------------------------

Nebyly zjištěny žádné hrozby
Intel Core i3-4160 / ATI MSI R9 270 Gaming 2G / RAM 8GB DDR3 1600MHz CL10 / 1TB HDD
iPhone 6s

Uživatelský avatar
Smile
Level 2.5
Level 2.5
Příspěvky: 311
Registrován: leden 09
Bydliště: Zlín
Pohlaví: Muž

Re: Kontrola Logu HJT

Příspěvekod Smile » 27 lis 2018 19:25

ComboFix 18-08-08.01 - Jindra 27.11.2018 19:11:01.1.4 - x64
Microsoft Windows 7 Ultimate 6.1.7601.1.1250.420.1029.18.6142.4249 [GMT 1:00]
Spuštěný z: c:\users\Jindra\Desktop\ComboFix.exe
AV: Microsoft Security Essentials *Disabled/Updated* {641105E6-77ED-3F35-A304-765193BCB75F}
SP: Microsoft Security Essentials *Disabled/Updated* {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\19994B0C4F.sys
c:\windows\pkunzip.pif
c:\windows\pkzip.pif
c:\windows\SysWow64\system
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2018-10-27 do 2018-11-27 )))))))))))))))))))))))))))))))
.
.
2018-11-27 17:52 . 2018-11-27 17:52 203680 ----a-w- c:\windows\system32\drivers\zam64.sys
2018-11-27 17:52 . 2018-11-27 17:52 203680 ----a-w- c:\windows\system32\drivers\zamguard64.sys
2018-11-27 17:52 . 2018-11-27 17:52 -------- d-----w- c:\program files (x86)\Zemana AntiMalware
2018-11-27 17:51 . 2018-11-27 17:51 -------- d-----w- c:\users\Jindra\AppData\Local\Zemana
2018-11-27 17:49 . 2018-11-27 17:49 -------- d-----w- c:\programdata\Ralink
2018-11-27 17:45 . 2018-11-27 18:19 -------- d-----w- c:\users\Jindra\AppData\Local\Temp
2018-11-27 17:45 . 2014-02-13 22:59 24064 ----a-w- c:\windows\zoek-delete.exe
2018-11-27 17:24 . 2018-11-27 17:24 -------- d-----w- c:\users\Jindra\AppData\Local\CrashDumps
2018-11-27 17:17 . 2018-11-27 17:41 -------- d-----w- C:\zoek_backup
2018-11-26 19:52 . 2018-11-06 00:01 14700824 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{9E342575-829E-4234-B728-57E755253908}\mpengine.dll
2018-11-24 10:32 . 2018-11-06 00:01 14700824 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2018-11-22 16:32 . 2018-11-26 20:43 -------- d-----w- c:\programdata\RogueKiller
2018-11-22 13:21 . 2018-11-22 13:21 -------- d-----w- c:\programdata\Sophos
2018-11-22 13:20 . 2018-11-22 13:20 -------- d-----w- c:\program files (x86)\Sophos
2018-11-22 12:53 . 2018-11-22 12:53 -------- d-----w- c:\users\Jindra\AppData\Local\mbam
2018-11-22 12:53 . 2018-11-22 12:57 200232 ----a-w- c:\windows\system32\drivers\MbamChameleon.sys
2018-11-15 22:52 . 2018-09-11 12:18 152688 ----a-w- c:\windows\system32\drivers\mbae64.sys
2018-11-15 22:52 . 2018-11-15 22:52 -------- d-----w- c:\programdata\Malwarebytes
2018-11-15 22:52 . 2018-11-15 22:52 -------- d-----w- c:\program files\Malwarebytes
2018-11-15 22:31 . 2018-11-22 12:36 -------- d-----w- C:\AdwCleaner
2018-11-15 09:40 . 2018-11-15 09:40 -------- d-----w- c:\program files\Common Files\AVAST Software
2018-11-15 09:30 . 2018-11-15 15:55 -------- d-----w- c:\programdata\AVAST Software
2018-11-15 09:30 . 2018-11-22 13:03 -------- d-----w- c:\program files\CCleaner
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2018-11-26 19:47 . 2009-12-24 14:36 30528 ----a-w- c:\windows\GVTDrv64.sys
2018-11-26 19:47 . 2009-12-24 14:27 25640 ----a-w- c:\windows\gdrv.sys
2018-11-21 14:27 . 2012-09-16 15:03 842240 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2018-11-21 14:27 . 2012-03-01 19:39 175104 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2018-10-15 21:48 . 2009-12-24 11:21 559880 ------w- c:\windows\system32\MpSigStub.exe
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CCleaner Smart Cleaning"="c:\program files\CCleaner\CCleaner.exe" [2018-11-06 14554696]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"CTxfiHlp"="CTXFIHLP.EXE" [2009-06-03 25600]
"EasyTuneVI"="c:\program files (x86)\GIGABYTE\ET6\ETcall.exe" [2007-07-26 20480]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Wireless Utility.lnk - c:\program files (x86)\Edimax\Common\RaUI.exe -s [2010-12-14 1617920]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"NoResolveTrack"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
R1 prodrv03;Star Force copy protection driver v3;c:\windows\System32\drivers\prodrv03.sys;c:\windows\SYSNATIVE\drivers\prodrv03.sys [x]
R1 VD_FileDisk;VD_FileDisk; [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R2 SSPORT;SSPORT;c:\windows\system32\Drivers\SSPORT.sys;c:\windows\SYSNATIVE\Drivers\SSPORT.sys [x]
R3 amdiox64;AMD IO Driver;c:\windows\system32\DRIVERS\amdiox64.sys;c:\windows\SYSNATIVE\DRIVERS\amdiox64.sys [x]
R3 AODDriver;AODDriver;c:\program files (x86)\GIGABYTE\ET6\amd64\AODDriver.sys;c:\program files (x86)\GIGABYTE\ET6\amd64\AODDriver.sys [x]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x]
R3 cpuz137;cpuz137;c:\users\Jindra\AppData\Local\Temp\cpuz137\cpuz137_x64.sys;c:\users\Jindra\AppData\Local\Temp\cpuz137\cpuz137_x64.sys [x]
R3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service;c:\program files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe;c:\program files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [x]
R3 CT20XUT;CT20XUT;c:\windows\system32\drivers\CT20XUT.SYS;c:\windows\SYSNATIVE\drivers\CT20XUT.SYS [x]
R3 CTEXFIFX;CTEXFIFX;c:\windows\system32\drivers\CTEXFIFX.SYS;c:\windows\SYSNATIVE\drivers\CTEXFIFX.SYS [x]
R3 CTHWIUT;CTHWIUT;c:\windows\system32\drivers\CTHWIUT.SYS;c:\windows\SYSNATIVE\drivers\CTHWIUT.SYS [x]
R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudbus.sys;c:\windows\SYSNATIVE\DRIVERS\ssudbus.sys [x]
R3 dgderdrv;dgderdrv;c:\windows\system32\drivers\dgderdrv.sys;c:\windows\SYSNATIVE\drivers\dgderdrv.sys [x]
R3 etdrv;etdrv;c:\windows\etdrv.sys;c:\windows\etdrv.sys [x]
R3 GVTDrv64;GVTDrv64;c:\windows\GVTDrv64.sys;c:\windows\GVTDrv64.sys [x]
R3 MSHUSBVideo;NX6000/NX3000/VX2000/VX5000/VX5500/VX7000/Cinema Filter Driver;c:\windows\system32\Drivers\nx6000.sys;c:\windows\SYSNATIVE\Drivers\nx6000.sys [x]
R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys;c:\windows\SYSNATIVE\DRIVERS\NisDrvWFP.sys [x]
R3 NisSrv;Kontrola sítě Microsoft;c:\program files\Microsoft Security Client\NisSrv.exe;c:\program files\Microsoft Security Client\NisSrv.exe [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudmdm.sys;c:\windows\SYSNATIVE\DRIVERS\ssudmdm.sys [x]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys;c:\windows\SYSNATIVE\drivers\synth3dvsc.sys [x]
R3 TFsExDisk;TFsExDisk;c:\windows\System32\Drivers\TFsExDisk.sys;c:\windows\SYSNATIVE\Drivers\TFsExDisk.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys;c:\windows\SYSNATIVE\drivers\tsusbhub.sys [x]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys;c:\windows\SYSNATIVE\drivers\rdvgkmd.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R3 xhunter1;xhunter1;c:\windows\xhunter1.sys;c:\windows\xhunter1.sys [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x]
S0 amdide64;amdide64;c:\windows\system32\DRIVERS\amdide64.sys;c:\windows\SYSNATIVE\DRIVERS\amdide64.sys [x]
S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys;c:\windows\SYSNATIVE\Drivers\sptd.sys [x]
S0 tdrpman258;Acronis Try&Decide and Restore Points filter (build 258);c:\windows\system32\DRIVERS\tdrpm258.sys;c:\windows\SYSNATIVE\DRIVERS\tdrpm258.sys [x]
S1 HWiNFO32;HWiNFO32/64 Kernel Driver;c:\windows\SysWOW64\drivers\HWiNFO64A.SYS;c:\windows\SysWOW64\drivers\HWiNFO64A.SYS [x]
S1 ZAM;ZAM Helper Driver;c:\windows\System32\drivers\zam64.sys;c:\windows\SYSNATIVE\drivers\zam64.sys [x]
S1 ZAM_Guard;ZAM Guard Driver;c:\windows\System32\drivers\zamguard64.sys;c:\windows\SYSNATIVE\drivers\zamguard64.sys [x]
S2 afcdpsrv;Acronis Nonstop Backup service;c:\program files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe;c:\program files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 HuaweiHiSuiteService64.exe;HuaweiHiSuiteService64.exe;c:\program files (x86)\HiSuite\HandSetService\HuaweiHiSuiteService64.exe;c:\program files (x86)\HiSuite\HandSetService\HuaweiHiSuiteService64.exe [x]
S2 MBAMChameleon;MBAMChameleon;c:\windows\System32\Drivers\MbamChameleon.sys;c:\windows\SYSNATIVE\Drivers\MbamChameleon.sys [x]
S2 MBAMService;Malwarebytes Service;c:\program files\Malwarebytes\Anti-Malware\mbamservice.exe;c:\program files\Malwarebytes\Anti-Malware\mbamservice.exe [x]
S2 RalinkRegistryWriter64;Ralink Registry Writer 64;c:\program files (x86)\Edimax\Common\RaRegistry64.exe;c:\program files (x86)\Edimax\Common\RaRegistry64.exe [x]
S2 ZAMSvc;ZAM Controller Service;c:\program files (x86)\Zemana AntiMalware\ZAM.exe;c:\program files (x86)\Zemana AntiMalware\ZAM.exe [x]
S3 afcdp;afcdp;c:\windows\system32\DRIVERS\afcdp.sys;c:\windows\SYSNATIVE\DRIVERS\afcdp.sys [x]
S3 CT20XUT.SYS;CT20XUT.SYS;c:\windows\System32\drivers\CT20XUT.SYS;c:\windows\SYSNATIVE\drivers\CT20XUT.SYS [x]
S3 CTEXFIFX.SYS;CTEXFIFX.SYS;c:\windows\System32\drivers\CTEXFIFX.SYS;c:\windows\SYSNATIVE\drivers\CTEXFIFX.SYS [x]
S3 CTHWIUT.SYS;CTHWIUT.SYS;c:\windows\System32\drivers\CTHWIUT.SYS;c:\windows\SYSNATIVE\drivers\CTHWIUT.SYS [x]
S3 rt61x64;RT61 Extensible Wireless Driver;c:\windows\system32\DRIVERS\netr6164.sys;c:\windows\SYSNATIVE\DRIVERS\netr6164.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
S3 usbfilter;AMD USB Filter Driver;c:\windows\system32\DRIVERS\usbfilter.sys;c:\windows\SYSNATIVE\DRIVERS\usbfilter.sys [x]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - WS2IFSL
.
Obsah adresáře 'Naplánované úlohy'
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ZAM"="c:\program files (x86)\Zemana AntiMalware\ZAM.exe" [2017-08-09 15775888]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\Microsoft Office\Office14\EXCEL.EXE/3000
IE: Od&eslat do aplikace OneNote - c:\progra~1\Microsoft Office\Office14\ONBttnIE.dll/105
Trusted Zone: samsungsetup.com\www
TCP: DhcpNameServer = 213.46.172.37 213.46.172.36
DPF: {DE625294-70E6-45ED-B895-CFFA13AEB044} - hxxp://gate2.delfinub.cz:85/activex/AMC.cab
FF - ProfilePath - c:\users\Jindra\AppData\Roaming\Mozilla\Firefox\Profiles\t3lq6k73.default\
FF - prefs.js: browser.startup.homepage - about:home
.
.
------- Asociace souborů -------
.
.scr=scr
.txt=txt
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
ShellIconOverlayIdentifiers-{472083B0-C522-11CF-8763-00608CC02F24} - (no file)
AddRemove-{2e085fd2-a3e4-4b39-8e10-6b8d35f55244} - c:\programdata\Package Cache\{2e085fd2-a3e4-4b39-8e10-6b8d35f55244}\VC_redist.x86.exe
AddRemove-{323dad84-0974-4d90-a1c1-e006c7fdbb7d} - c:\programdata\Package Cache\{323dad84-0974-4d90-a1c1-e006c7fdbb7d}\VC_redist.x64.exe
AddRemove-{f65db027-aff3-4070-886a-0d87064aabb1} - c:\programdata\Package Cache\{f65db027-aff3-4070-886a-0d87064aabb1}\vcredist_x86.exe
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-2486248661-3588290573-681466345-1000\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
"??"=hex:46,0e,68,a8,30,eb,07,98,d6,a3,12,ce,b6,a9,da,b1,cd,32,43,22,89,ed,ae,
c6,ca,f2,38,d2,df,6a,fc,0d,86,aa,b2,72,09,76,2c,ac,40,22,23,25,cd,a7,4b,fc,\
"??"=hex:4f,69,f9,26,b8,a8,13,8e,9d,e2,eb,b4,5b,50,e3,45
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_31_0_0_153_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_31_0_0_153_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_31_0_0_153_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_31_0_0_153_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_31_0_0_153.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.31"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_31_0_0_153.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_31_0_0_153.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_31_0_0_153.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files (x86)\Creative\Shared Files\CTAudSvc.exe
c:\program files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
c:\program files (x86)\Edimax\Common\RaRegistry.exe
c:\program files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
c:\program files (x86)\Google\Update\1.3.33.17\GoogleCrashHandler.exe
.
**************************************************************************
.
Celkový čas: 2018-11-27 19:24:29 - počítač byl restartován
ComboFix-quarantined-files.txt 2018-11-27 18:24
.
Před spuštěním: Volných bajtů: 23 988 858 880
Po spuštění: Volných bajtů: 23 693 131 776
.
- - End Of File - - 75BD0033C1C43F0827AA2195C31AF7BA
E6119111E308B890F4C080F0CF7B345F
Intel Core i3-4160 / ATI MSI R9 270 Gaming 2G / RAM 8GB DDR3 1600MHz CL10 / 1TB HDD
iPhone 6s

Uživatelský avatar
jaro3
člen Security týmu
Guru Level 15
Guru Level 15
Příspěvky: 38960
Registrován: červen 07
Bydliště: Jižní Čechy
Pohlaví: Muž

Re: Kontrola Logu HJT

Příspěvekod jaro3 » 27 lis 2018 19:57

Vypni rez. ochranu u antiviru a antispywaru,příp. firewall..

Otevři si Poznámkový blok (Start -> Spustit... a napiš do okna Notepad a dej Ok.
Zkopíruj do něj následující celý text označený zeleně:

Kód: Vybrat vše

ClearJavaCache::
File::
c:\users\Jindra\AppData\Local\Temp\cpuz137\cpuz137_x64.sys
c:\windows\xhunter1.sys

Folder::
c:\program files (x86)\Skype\Updater

Driver::
SkypeUpdate
cpuz137
xhunter1

RegLock::
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_31_0_0_153_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_31_0_0_153_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_31_0_0_153_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_31_0_0_153_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_31_0_0_153.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.31"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_31_0_0_153.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_31_0_0_153.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_31_0_0_153.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)


Zvol možnost Soubor -> Uložit jako... a nastav tyto parametry:
Název souboru: zde napiš: CFScript.txt
Uložit jako typ: tak tam vyber Všechny soubory
Ulož soubor na plochu.
Ukonči všechna aktivní okna.

Uchop myší vytvořený skript CFScript.txt, přemísti ho nad stažený program ComboFix.exe a když se oba soubory překryjí, skript upusť.
- Automaticky se spustí ComboFix
- Vlož sem log, který vyběhne v závěru čistícího procesu + nový log z HJT

Upozornění : Může se stát, že po aplikaci Combofixu a restartu počítače, Windows nenaběhnou , nebo nenajede plocha , budou problémy s připojením, pak znovu restartuj počítač, pokud to nepomůže , po restartu mačkej klávesu F8 a pak zvol poslední známou funkční konfiguraci. , či použij bod obnovy.
Při práci s programy HJT, ComboFix,MbAM, SDFix aj. zavřete všechny ostatní aplikace a prohlížeče!
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra

Uživatelský avatar
Smile
Level 2.5
Level 2.5
Příspěvky: 311
Registrován: leden 09
Bydliště: Zlín
Pohlaví: Muž

Re: Kontrola Logu HJT

Příspěvekod Smile » 27 lis 2018 22:07

ComboFix 18-08-08.01 - Jindra 27.11.2018 21:01:35.2.4 - x64
Microsoft Windows 7 Ultimate 6.1.7601.1.1250.420.1029.18.6142.4612 [GMT 1:00]
Spuštěný z: c:\users\Jindra\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\Jindra\Desktop\CFScript.txt
AV: Microsoft Security Essentials *Disabled/Updated* {641105E6-77ED-3F35-A304-765193BCB75F}
SP: Microsoft Security Essentials *Disabled/Updated* {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
FILE ::
"c:\users\Jindra\AppData\Local\Temp\cpuz137\cpuz137_x64.sys"
"c:\windows\xhunter1.sys"
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\Skype\Updater
c:\program files (x86)\Skype\Updater\Updater.dll
c:\program files (x86)\Skype\Updater\Updater.exe
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_CPUZ137
-------\Legacy_XHUNTER1
-------\Service_cpuz137
-------\Service_SkypeUpdate
-------\Service_xhunter1
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2018-10-27 do 2018-11-27 )))))))))))))))))))))))))))))))
.
.
2018-11-27 20:06 . 2018-11-27 20:06 -------- d-----w- c:\users\Default\AppData\Local\temp
2018-11-27 18:25 . 2018-11-06 00:01 14700824 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{42EFEB3E-0176-4DBE-A486-CDCDFFB5ED68}\mpengine.dll
2018-11-27 17:52 . 2018-11-27 17:52 203680 ----a-w- c:\windows\system32\drivers\zam64.sys
2018-11-27 17:52 . 2018-11-27 17:52 203680 ----a-w- c:\windows\system32\drivers\zamguard64.sys
2018-11-27 17:52 . 2018-11-27 17:52 -------- d-----w- c:\program files (x86)\Zemana AntiMalware
2018-11-27 17:51 . 2018-11-27 17:51 -------- d-----w- c:\users\Jindra\AppData\Local\Zemana
2018-11-27 17:49 . 2018-11-27 17:49 -------- d-----w- c:\programdata\Ralink
2018-11-27 17:45 . 2018-11-27 20:11 -------- d-----w- c:\users\Jindra\AppData\Local\Temp
2018-11-27 17:45 . 2014-02-13 22:59 24064 ----a-w- c:\windows\zoek-delete.exe
2018-11-27 17:24 . 2018-11-27 17:24 -------- d-----w- c:\users\Jindra\AppData\Local\CrashDumps
2018-11-27 17:17 . 2018-11-27 17:41 -------- d-----w- C:\zoek_backup
2018-11-24 10:32 . 2018-11-06 00:01 14700824 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2018-11-22 16:32 . 2018-11-26 20:43 -------- d-----w- c:\programdata\RogueKiller
2018-11-22 13:21 . 2018-11-22 13:21 -------- d-----w- c:\programdata\Sophos
2018-11-22 13:20 . 2018-11-22 13:20 -------- d-----w- c:\program files (x86)\Sophos
2018-11-22 12:53 . 2018-11-22 12:53 -------- d-----w- c:\users\Jindra\AppData\Local\mbam
2018-11-22 12:53 . 2018-11-22 12:57 200232 ----a-w- c:\windows\system32\drivers\MbamChameleon.sys
2018-11-15 22:52 . 2018-09-11 12:18 152688 ----a-w- c:\windows\system32\drivers\mbae64.sys
2018-11-15 22:52 . 2018-11-15 22:52 -------- d-----w- c:\programdata\Malwarebytes
2018-11-15 22:52 . 2018-11-15 22:52 -------- d-----w- c:\program files\Malwarebytes
2018-11-15 22:31 . 2018-11-22 12:36 -------- d-----w- C:\AdwCleaner
2018-11-15 09:40 . 2018-11-15 09:40 -------- d-----w- c:\program files\Common Files\AVAST Software
2018-11-15 09:30 . 2018-11-15 15:55 -------- d-----w- c:\programdata\AVAST Software
2018-11-15 09:30 . 2018-11-22 13:03 -------- d-----w- c:\program files\CCleaner
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2018-11-26 19:47 . 2009-12-24 14:36 30528 ----a-w- c:\windows\GVTDrv64.sys
2018-11-26 19:47 . 2009-12-24 14:27 25640 ----a-w- c:\windows\gdrv.sys
2018-11-21 14:27 . 2012-09-16 15:03 842240 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2018-11-21 14:27 . 2012-03-01 19:39 175104 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2018-10-15 21:48 . 2009-12-24 11:21 559880 ------w- c:\windows\system32\MpSigStub.exe
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CCleaner Smart Cleaning"="c:\program files\CCleaner\CCleaner.exe" [2018-11-06 14554696]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"CTxfiHlp"="CTXFIHLP.EXE" [2009-06-03 25600]
"EasyTuneVI"="c:\program files (x86)\GIGABYTE\ET6\ETcall.exe" [2007-07-26 20480]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Wireless Utility.lnk - c:\program files (x86)\Edimax\Common\RaUI.exe -s [2010-12-14 1617920]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"NoResolveTrack"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
R1 prodrv03;Star Force copy protection driver v3;c:\windows\System32\drivers\prodrv03.sys;c:\windows\SYSNATIVE\drivers\prodrv03.sys [x]
R1 VD_FileDisk;VD_FileDisk; [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 SSPORT;SSPORT;c:\windows\system32\Drivers\SSPORT.sys;c:\windows\SYSNATIVE\Drivers\SSPORT.sys [x]
R3 amdiox64;AMD IO Driver;c:\windows\system32\DRIVERS\amdiox64.sys;c:\windows\SYSNATIVE\DRIVERS\amdiox64.sys [x]
R3 AODDriver;AODDriver;c:\program files (x86)\GIGABYTE\ET6\amd64\AODDriver.sys;c:\program files (x86)\GIGABYTE\ET6\amd64\AODDriver.sys [x]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x]
R3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service;c:\program files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe;c:\program files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [x]
R3 CT20XUT;CT20XUT;c:\windows\system32\drivers\CT20XUT.SYS;c:\windows\SYSNATIVE\drivers\CT20XUT.SYS [x]
R3 CTEXFIFX;CTEXFIFX;c:\windows\system32\drivers\CTEXFIFX.SYS;c:\windows\SYSNATIVE\drivers\CTEXFIFX.SYS [x]
R3 CTHWIUT;CTHWIUT;c:\windows\system32\drivers\CTHWIUT.SYS;c:\windows\SYSNATIVE\drivers\CTHWIUT.SYS [x]
R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudbus.sys;c:\windows\SYSNATIVE\DRIVERS\ssudbus.sys [x]
R3 dgderdrv;dgderdrv;c:\windows\system32\drivers\dgderdrv.sys;c:\windows\SYSNATIVE\drivers\dgderdrv.sys [x]
R3 etdrv;etdrv;c:\windows\etdrv.sys;c:\windows\etdrv.sys [x]
R3 GVTDrv64;GVTDrv64;c:\windows\GVTDrv64.sys;c:\windows\GVTDrv64.sys [x]
R3 MSHUSBVideo;NX6000/NX3000/VX2000/VX5000/VX5500/VX7000/Cinema Filter Driver;c:\windows\system32\Drivers\nx6000.sys;c:\windows\SYSNATIVE\Drivers\nx6000.sys [x]
R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys;c:\windows\SYSNATIVE\DRIVERS\NisDrvWFP.sys [x]
R3 NisSrv;Kontrola sítě Microsoft;c:\program files\Microsoft Security Client\NisSrv.exe;c:\program files\Microsoft Security Client\NisSrv.exe [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudmdm.sys;c:\windows\SYSNATIVE\DRIVERS\ssudmdm.sys [x]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys;c:\windows\SYSNATIVE\drivers\synth3dvsc.sys [x]
R3 TFsExDisk;TFsExDisk;c:\windows\System32\Drivers\TFsExDisk.sys;c:\windows\SYSNATIVE\Drivers\TFsExDisk.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys;c:\windows\SYSNATIVE\drivers\tsusbhub.sys [x]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys;c:\windows\SYSNATIVE\drivers\rdvgkmd.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x]
S0 amdide64;amdide64;c:\windows\system32\DRIVERS\amdide64.sys;c:\windows\SYSNATIVE\DRIVERS\amdide64.sys [x]
S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys;c:\windows\SYSNATIVE\Drivers\sptd.sys [x]
S0 tdrpman258;Acronis Try&Decide and Restore Points filter (build 258);c:\windows\system32\DRIVERS\tdrpm258.sys;c:\windows\SYSNATIVE\DRIVERS\tdrpm258.sys [x]
S1 HWiNFO32;HWiNFO32/64 Kernel Driver;c:\windows\SysWOW64\drivers\HWiNFO64A.SYS;c:\windows\SysWOW64\drivers\HWiNFO64A.SYS [x]
S1 ZAM;ZAM Helper Driver;c:\windows\System32\drivers\zam64.sys;c:\windows\SYSNATIVE\drivers\zam64.sys [x]
S1 ZAM_Guard;ZAM Guard Driver;c:\windows\System32\drivers\zamguard64.sys;c:\windows\SYSNATIVE\drivers\zamguard64.sys [x]
S2 afcdpsrv;Acronis Nonstop Backup service;c:\program files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe;c:\program files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 HuaweiHiSuiteService64.exe;HuaweiHiSuiteService64.exe;c:\program files (x86)\HiSuite\HandSetService\HuaweiHiSuiteService64.exe;c:\program files (x86)\HiSuite\HandSetService\HuaweiHiSuiteService64.exe [x]
S2 MBAMChameleon;MBAMChameleon;c:\windows\System32\Drivers\MbamChameleon.sys;c:\windows\SYSNATIVE\Drivers\MbamChameleon.sys [x]
S2 MBAMService;Malwarebytes Service;c:\program files\Malwarebytes\Anti-Malware\mbamservice.exe;c:\program files\Malwarebytes\Anti-Malware\mbamservice.exe [x]
S2 RalinkRegistryWriter64;Ralink Registry Writer 64;c:\program files (x86)\Edimax\Common\RaRegistry64.exe;c:\program files (x86)\Edimax\Common\RaRegistry64.exe [x]
S2 ZAMSvc;ZAM Controller Service;c:\program files (x86)\Zemana AntiMalware\ZAM.exe;c:\program files (x86)\Zemana AntiMalware\ZAM.exe [x]
S3 afcdp;afcdp;c:\windows\system32\DRIVERS\afcdp.sys;c:\windows\SYSNATIVE\DRIVERS\afcdp.sys [x]
S3 CT20XUT.SYS;CT20XUT.SYS;c:\windows\System32\drivers\CT20XUT.SYS;c:\windows\SYSNATIVE\drivers\CT20XUT.SYS [x]
S3 CTEXFIFX.SYS;CTEXFIFX.SYS;c:\windows\System32\drivers\CTEXFIFX.SYS;c:\windows\SYSNATIVE\drivers\CTEXFIFX.SYS [x]
S3 CTHWIUT.SYS;CTHWIUT.SYS;c:\windows\System32\drivers\CTHWIUT.SYS;c:\windows\SYSNATIVE\drivers\CTHWIUT.SYS [x]
S3 rt61x64;RT61 Extensible Wireless Driver;c:\windows\system32\DRIVERS\netr6164.sys;c:\windows\SYSNATIVE\DRIVERS\netr6164.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
S3 usbfilter;AMD USB Filter Driver;c:\windows\system32\DRIVERS\usbfilter.sys;c:\windows\SYSNATIVE\DRIVERS\usbfilter.sys [x]
.
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ZAM"="c:\program files (x86)\Zemana AntiMalware\ZAM.exe" [2017-08-09 15775888]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\Microsoft Office\Office14\EXCEL.EXE/3000
IE: Od&eslat do aplikace OneNote - c:\progra~1\Microsoft Office\Office14\ONBttnIE.dll/105
Trusted Zone: samsungsetup.com\www
TCP: DhcpNameServer = 213.46.172.37 213.46.172.36
DPF: {DE625294-70E6-45ED-B895-CFFA13AEB044} - hxxp://gate2.delfinub.cz:85/activex/AMC.cab
FF - ProfilePath - c:\users\Jindra\AppData\Roaming\Mozilla\Firefox\Profiles\t3lq6k73.default\
FF - prefs.js: browser.startup.homepage - about:home
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
ShellIconOverlayIdentifiers-{472083B0-C522-11CF-8763-00608CC02F24} - (no file)
AddRemove-{2e085fd2-a3e4-4b39-8e10-6b8d35f55244} - c:\programdata\Package Cache\{2e085fd2-a3e4-4b39-8e10-6b8d35f55244}\VC_redist.x86.exe
AddRemove-{323dad84-0974-4d90-a1c1-e006c7fdbb7d} - c:\programdata\Package Cache\{323dad84-0974-4d90-a1c1-e006c7fdbb7d}\VC_redist.x64.exe
AddRemove-{f65db027-aff3-4070-886a-0d87064aabb1} - c:\programdata\Package Cache\{f65db027-aff3-4070-886a-0d87064aabb1}\vcredist_x86.exe
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-2486248661-3588290573-681466345-1000\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
"??"=hex:46,0e,68,a8,30,eb,07,98,d6,a3,12,ce,b6,a9,da,b1,cd,32,43,22,89,ed,ae,
c6,ca,f2,38,d2,df,6a,fc,0d,86,aa,b2,72,09,76,2c,ac,40,22,23,25,cd,a7,4b,fc,\
"??"=hex:4f,69,f9,26,b8,a8,13,8e,9d,e2,eb,b4,5b,50,e3,45
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_31_0_0_153_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_31_0_0_153_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files (x86)\Creative\Shared Files\CTAudSvc.exe
c:\program files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
c:\program files (x86)\Edimax\Common\RaRegistry.exe
c:\program files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
c:\program files (x86)\Google\Update\1.3.33.17\GoogleCrashHandler.exe
.
**************************************************************************
.
Celkový čas: 2018-11-27 21:15:53 - počítač byl restartován
ComboFix-quarantined-files.txt 2018-11-27 20:15
ComboFix2.txt 2018-11-27 18:24
.
Před spuštěním: Volných bajtů: 22 441 033 728
Po spuštění: Volných bajtů: 21 898 620 928
.
- - End Of File - - 767E951E99F7CEEFCD30DE5ADFC010F6
E6119111E308B890F4C080F0CF7B345F
Intel Core i3-4160 / ATI MSI R9 270 Gaming 2G / RAM 8GB DDR3 1600MHz CL10 / 1TB HDD
iPhone 6s


Zpět na “HiJackThis”

Kdo je online

Uživatelé prohlížející si toto fórum: CommonCrawl [Bot] a 4 hosti