Dobrý večer, žádám o kontrolu, jelikož se mi hodně zpomalil internet a počítač také není tak rychlý, co býval. Děkuji za jakoukoli pomoc.
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:35:26, on 25.8.2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17239)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Users\Mirek\AppData\Local\Akamai\netsession_win.exe
C:\Program Files (x86)\ShopperPro\JSDriver\Unknown\jsdrv.exe
C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe
C:\Users\Mirek\AppData\Local\Akamai\netsession_win.exe
C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
C:\Program Files (x86)\MSI\Super-Charger\Super-Charger.exe
C:\Program Files (x86)\Gaming Keyboard\Monitor.EXE
C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Gaming Keyboard\OSD.exe
C:\Program Files (x86)\Steam\Steam.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Users\Mirek\Downloads\hijackthis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: ShopperProBHO - {A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C} - C:\ProgramData\ShopperPro\ShopperPro.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [IMSS] "C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe"
O4 - HKLM\..\Run: [USB3MON] "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
O4 - HKLM\..\Run: [Super-Charger] C:\Program Files (x86)\MSI\Super-Charger\Super-Charger.exe
O4 - HKLM\..\Run: [VICTORY Gaming Keyboard] "C:\Program Files (x86)\Gaming Keyboard\Monitor.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [SPDriver] C:\Program Files (x86)\ShopperPro\JSDriver\Unknown\jsdrv.exe
O4 - HKLM\..\Run: [Avira Systray] C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [Akamai NetSession Interface] "C:\Users\Mirek\AppData\Local\Akamai\netsession_win.exe"
O4 - HKCU\..\Run: [SPDriver] C:\Program Files (x86)\ShopperPro\JSDriver\Unknown\jsdrv.exe
O4 - HKCU\..\RunOnce: [FlashPlayerUpdate] C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_14_0_0_145_Plugin.exe -update plugin
O4 - Global Startup: iSCTsysTray.lnk = C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe
O8 - Extra context menu item: WikiKomentáře Google... - res://C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_6CE5017F567343CA.dll/cmsidewiki.html
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - (no file)
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Avira Scheduler (AntiVirSchedulerService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira Real-Time Protection (AntiVirService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Avira Service Host (Avira.OE.ServiceHost) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
O23 - Service: Distributed Computing Experiment (DCE) - Unknown owner - C:\Program Files\DCE\dce.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
O23 - Service: Intel(R) Small Business Advantage (intelsba) - Intel Corporation - C:\Program Files\Intel\Intel(R) Small Business Advantage\Service\Intel.SmallBusinessAdvantage.WindowsService.exe
O23 - Service: Intel(R) Smart Connect Technology Agent (ISCTAgent) - Unknown owner - C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: MSI_SuperCharger - MSI - C:\Program Files (x86)\MSI\Super-Charger\ChargeService.exe
O23 - Service: MSI_Trigger_Service - MICRO-STAR INTERNATIONAL CO., LTD. - C:\Program Files (x86)\MSI\MSITrigger\MSI_Trigger_Service.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: ShopperPro Update (SPBIUpd) - ShopperPro - C:\Program Files\Common Files\ShopperPro\spbiu.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 10541 bytes
Prosím o kontrolu logu
Prosím o kontrolu logu
Intel Core i7-7700K, Noctua D15, Corsair Vengeance LPX 3000MHz 16GB, ASRock Z170 Extreme4, MSI GeForce GTX 1080 GAMING X 8G, Samsung SSD 960 EVO (M.2) - 250GB, Seagate SV35.5 - 1TB, Corsair RMx Series RM650x 650W, Fractal DEFINE R4 Black Pearl
- jaro3
- člen Security týmu
-
Guru Level 15
- Příspěvky: 43298
- Registrován: červen 07
- Bydliště: Jižní Čechy
- Pohlaví:
- Stav:
Offline
Re: Prosím o kontrolu logu
Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected. Poté klikni na Main (hlavní stránku ) a klikni na Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranění historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit dočasné soubory Windows, vysypat koš atd.
- Pokud používáš jen Google Chrome , tak ATF nemusíš použít.
Stáhni si TFC
Otevři soubor a zavři všechny ostatní okna, Klikni na Start k zahájení procesu. Program by neměl trvat dlouho.
Poté by se měl PC restartovat, pokud ne , proveď sám.
Stáhni AdwCleaner (by Xplode)
http://www.bleepingcomputer.com/download/adwcleaner/
Ulož si ho na svojí plochu
Ukonči všechny programy , okna a prohlížeče
Spusť program poklepáním a klikni na „Prohledat-Scan“
Po skenu se objeví log ( jinak je uložen systémovem disku jako AdwCleaner[R?].txt), jeho obsah sem celý vlož.
Stáhni si Malwarebytes' Anti-Malware
- Při instalaci odeber zatržítko u „Povolit bezplatnou zkušební verzi Malwarebytes' Anti-Malware Premium“
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Aktualizace Malwarebytes' Anti-Malware a Spustit aplikaci Malwarebytes' Anti-Malware, pokud jo tak klikni na tlačítko konec
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a klikni na Skenovat nyní a
- po proběhnutí programu se ti objeví hláška vpravo dole tak klikni na b] Kopírovat do schránky [/b]a a vlož sem celý log.
- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).
Pokud budou problémy , spusť v nouz. režimu.
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected. Poté klikni na Main (hlavní stránku ) a klikni na Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranění historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit dočasné soubory Windows, vysypat koš atd.
- Pokud používáš jen Google Chrome , tak ATF nemusíš použít.
Stáhni si TFC
Otevři soubor a zavři všechny ostatní okna, Klikni na Start k zahájení procesu. Program by neměl trvat dlouho.
Poté by se měl PC restartovat, pokud ne , proveď sám.
Stáhni AdwCleaner (by Xplode)
http://www.bleepingcomputer.com/download/adwcleaner/
Ulož si ho na svojí plochu
Ukonči všechny programy , okna a prohlížeče
Spusť program poklepáním a klikni na „Prohledat-Scan“
Po skenu se objeví log ( jinak je uložen systémovem disku jako AdwCleaner[R?].txt), jeho obsah sem celý vlož.
Stáhni si Malwarebytes' Anti-Malware
- Při instalaci odeber zatržítko u „Povolit bezplatnou zkušební verzi Malwarebytes' Anti-Malware Premium“
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Aktualizace Malwarebytes' Anti-Malware a Spustit aplikaci Malwarebytes' Anti-Malware, pokud jo tak klikni na tlačítko konec
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a klikni na Skenovat nyní a
- po proběhnutí programu se ti objeví hláška vpravo dole tak klikni na b] Kopírovat do schránky [/b]a a vlož sem celý log.
- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).
Pokud budou problémy , spusť v nouz. režimu.
Při práci s programy HJT, ComboFix,MbAM, SDFix aj. zavřete všechny ostatní aplikace a prohlížeče!
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
Re: Prosím o kontrolu logu
log z AdwCleaneru
# AdwCleaner v3.308 - Report created 26/08/2014 at 11:20:48
# Updated 20/08/2014 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : Mirek - MIREK-PC
# Running from : C:\Users\Mirek\Downloads\adwcleaner_3.308.exe
# Option : Scan
***** [ Services ] *****
Service Found : SPBIUpd
Service Found : SPBIUpdd
***** [ Files / Folders ] *****
File Found : C:\Program Files (x86)\Mozilla Firefox\.autoreg
File Found : C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage
File Found : C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage-journal
Folder Found : C:\Program Files (x86)\ShopperPro
Folder Found : C:\Program Files\DCE
Folder Found : C:\ProgramData\ShopperPro
Folder Found : C:\Users\Public\Documents\Goobzo
Folder Found : C:\Users\Public\Documents\ShopperPro
***** [ Scheduled Tasks ] *****
Task Found : Sense-codedownloader
Task Found : Sense-enabler
Task Found : Sense-updater
Task Found : ShopperPro
Task Found : ShopperProJSUpd
Task Found : SPDriver
***** [ Shortcuts ] *****
***** [ Registry ] *****
Key Found : HKCU\Software\Goobzo
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}
Key Found : [x64] HKCU\Software\Goobzo
Key Found : HKLM\SOFTWARE\Classes\AppID\{58FDA6AF-67D8-4198-B7CD-94B17532C8D5}
Key Found : HKLM\SOFTWARE\Classes\AppID\ShopperPro.DLL
Key Found : HKLM\SOFTWARE\Classes\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}
Key Found : HKLM\SOFTWARE\Classes\ShopperPro.ShopperProBHO
Key Found : HKLM\SOFTWARE\Classes\ShopperPro.ShopperProBHO.1
Key Found : HKLM\SOFTWARE\Goobzo
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{74F475FA-6C75-43BD-AAB9-ECDA6184F600}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}
Key Found : [x64] HKLM\SOFTWARE\Classes\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}
Key Found : [x64] HKLM\SOFTWARE\Goobzo
Key Found : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}
Value Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [SPDriver]
***** [ Browsers ] *****
-\\ Internet Explorer v11.0.9600.17239
-\\ Mozilla Firefox v
-\\ Google Chrome v36.0.1985.143
[ File : C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Default\preferences ]
Found [Extension] : dfohdbmjdkfijghgklbickfnaepghgba
Found [Extension] : pljcgbedjplidkdjahbaalanadmjfgop
*************************
AdwCleaner[R0].txt - [6132 octets] - [08/01/2014 17:52:18]
AdwCleaner[R1].txt - [4304 octets] - [08/01/2014 18:25:25]
AdwCleaner[R2].txt - [3051 octets] - [26/08/2014 11:20:48]
AdwCleaner[S0].txt - [3185 octets] - [08/01/2014 18:25:46]
########## EOF - C:\AdwCleaner\AdwCleaner[R2].txt - [3171 octets] ##########
# AdwCleaner v3.308 - Report created 26/08/2014 at 11:20:48
# Updated 20/08/2014 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : Mirek - MIREK-PC
# Running from : C:\Users\Mirek\Downloads\adwcleaner_3.308.exe
# Option : Scan
***** [ Services ] *****
Service Found : SPBIUpd
Service Found : SPBIUpdd
***** [ Files / Folders ] *****
File Found : C:\Program Files (x86)\Mozilla Firefox\.autoreg
File Found : C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage
File Found : C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage-journal
Folder Found : C:\Program Files (x86)\ShopperPro
Folder Found : C:\Program Files\DCE
Folder Found : C:\ProgramData\ShopperPro
Folder Found : C:\Users\Public\Documents\Goobzo
Folder Found : C:\Users\Public\Documents\ShopperPro
***** [ Scheduled Tasks ] *****
Task Found : Sense-codedownloader
Task Found : Sense-enabler
Task Found : Sense-updater
Task Found : ShopperPro
Task Found : ShopperProJSUpd
Task Found : SPDriver
***** [ Shortcuts ] *****
***** [ Registry ] *****
Key Found : HKCU\Software\Goobzo
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}
Key Found : [x64] HKCU\Software\Goobzo
Key Found : HKLM\SOFTWARE\Classes\AppID\{58FDA6AF-67D8-4198-B7CD-94B17532C8D5}
Key Found : HKLM\SOFTWARE\Classes\AppID\ShopperPro.DLL
Key Found : HKLM\SOFTWARE\Classes\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}
Key Found : HKLM\SOFTWARE\Classes\ShopperPro.ShopperProBHO
Key Found : HKLM\SOFTWARE\Classes\ShopperPro.ShopperProBHO.1
Key Found : HKLM\SOFTWARE\Goobzo
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{74F475FA-6C75-43BD-AAB9-ECDA6184F600}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}
Key Found : [x64] HKLM\SOFTWARE\Classes\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}
Key Found : [x64] HKLM\SOFTWARE\Goobzo
Key Found : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}
Value Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [SPDriver]
***** [ Browsers ] *****
-\\ Internet Explorer v11.0.9600.17239
-\\ Mozilla Firefox v
-\\ Google Chrome v36.0.1985.143
[ File : C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Default\preferences ]
Found [Extension] : dfohdbmjdkfijghgklbickfnaepghgba
Found [Extension] : pljcgbedjplidkdjahbaalanadmjfgop
*************************
AdwCleaner[R0].txt - [6132 octets] - [08/01/2014 17:52:18]
AdwCleaner[R1].txt - [4304 octets] - [08/01/2014 18:25:25]
AdwCleaner[R2].txt - [3051 octets] - [26/08/2014 11:20:48]
AdwCleaner[S0].txt - [3185 octets] - [08/01/2014 18:25:46]
########## EOF - C:\AdwCleaner\AdwCleaner[R2].txt - [3171 octets] ##########
Intel Core i7-7700K, Noctua D15, Corsair Vengeance LPX 3000MHz 16GB, ASRock Z170 Extreme4, MSI GeForce GTX 1080 GAMING X 8G, Samsung SSD 960 EVO (M.2) - 250GB, Seagate SV35.5 - 1TB, Corsair RMx Series RM650x 650W, Fractal DEFINE R4 Black Pearl
Re: Prosím o kontrolu logu
log z anti-malware
Malwarebytes Anti-Malware
www.malwarebytes.org
Scan Date: 26.8.2014
Scan Time: 11:29:14
Logfile: log z anti-malware.txt
Administrator: Yes
Version: 2.00.2.1012
Malware Database: v2014.08.26.01
Rootkit Database: v2014.08.21.01
License: Free
Malware Protection: Disabled
Malicious Website Protection: Disabled
Self-protection: Disabled
OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: Mirek
Scan Type: Threat Scan
Result: Completed
Objects Scanned: 291666
Time Elapsed: 6 min, 34 sec
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled
Processes: 5
PUP.Optional.Goobzo, C:\Program Files\Common Files\ShopperPro\spbiu.exe, 3028, , [d059b219cead65d174dc28a6758fbd43]
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\ShopperPro.exe, 1844, , [9d8c4b80e19a7db91c86c922c63c07f9]
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\Updater.exe, 5060, , [9d8c4b80e19a7db91c86c922c63c07f9]
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\Updater.exe, 808, , [9d8c4b80e19a7db91c86c922c63c07f9]
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\JSDriver\Unknown\jsdrv.exe, 4924, , [9d8c4b80e19a7db91c86c922c63c07f9]
Modules: 0
(No malicious items detected)
Registry Keys: 23
PUP.Optional.Goobzo, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SPBIUpd, , [d059b219cead65d174dc28a6758fbd43],
PUP.Optional.ShopperPro, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\ShopperPro, , [9d8c4b80e19a7db91c86c922c63c07f9],
PUP.Optional.ShopperPro, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SPDRIVER_Unknown, , [9d8c4b80e19a7db91c86c922c63c07f9],
PUP.Optional.Spigot.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\cflheckfmhopnialghigdlggahiomebp, , [052428a38dee50e67664c430a65cb44c],
PUP.Optional.ShopperPro, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SPBIUpdd, , [3bee9d2e205b6acc0e852bb926dc36ca],
PUP.Optional.ShopperPro, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}, , [2306a625cdaeb28479a6499d7f83aa56],
PUP.Optional.ShopperPro, HKLM\SOFTWARE\CLASSES\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}, , [2306a625cdaeb28479a6499d7f83aa56],
PUP.Optional.ShopperPro, HKLM\SOFTWARE\CLASSES\TYPELIB\{8FB1A663-2820-468B-95C4-5060A4C5F413}, , [2306a625cdaeb28479a6499d7f83aa56],
PUP.Optional.ShopperPro, HKLM\SOFTWARE\CLASSES\INTERFACE\{03C0AC00-86DE-4B55-81BA-2E7CD61C51B1}, , [2306a625cdaeb28479a6499d7f83aa56],
PUP.Optional.ShopperPro, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{03C0AC00-86DE-4B55-81BA-2E7CD61C51B1}, , [2306a625cdaeb28479a6499d7f83aa56],
PUP.Optional.ShopperPro, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{8FB1A663-2820-468B-95C4-5060A4C5F413}, , [2306a625cdaeb28479a6499d7f83aa56],
PUP.Optional.ShopperPro, HKLM\SOFTWARE\CLASSES\ShopperPro.ShopperProBHO.1, , [2306a625cdaeb28479a6499d7f83aa56],
PUP.Optional.ShopperPro, HKLM\SOFTWARE\CLASSES\ShopperPro.ShopperProBHO, , [2306a625cdaeb28479a6499d7f83aa56],
PUP.Optional.ShopperPro, HKLM\SOFTWARE\WOW6432NODE\CLASSES\ShopperPro.ShopperProBHO, , [2306a625cdaeb28479a6499d7f83aa56],
PUP.Optional.ShopperPro, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}, , [2306a625cdaeb28479a6499d7f83aa56],
PUP.Optional.ShopperPro, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}, , [2306a625cdaeb28479a6499d7f83aa56],
PUP.Optional.ShopperPro, HKLM\SOFTWARE\WOW6432NODE\CLASSES\ShopperPro.ShopperProBHO.1, , [2306a625cdaeb28479a6499d7f83aa56],
PUP.Optional.ShopperPro, HKU\S-1-5-21-3749819595-3351042766-3069755680-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}, , [2306a625cdaeb28479a6499d7f83aa56],
PUP.Optional.ShopperPro, HKU\S-1-5-21-3749819595-3351042766-3069755680-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}, , [2306a625cdaeb28479a6499d7f83aa56],
PUP.Optional.ShopperPro, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}, , [2306a625cdaeb28479a6499d7f83aa56],
PUP.Optional.ShopperPro, HKLM\SOFTWARE\CLASSES\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}\INPROCSERVER32, , [2306a625cdaeb28479a6499d7f83aa56],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{11111111-1111-1111-1111-110411821192}, , [cd5cc902fe7d6fc7e1a05b8ada2a768a],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\CLASSES\CLSID\{11111111-1111-1111-1111-110411821192}, , [cd5cc902fe7d6fc7e1a05b8ada2a768a],
Registry Values: 2
PUP.Optional.ShopperPro, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|SPDriver, C:\Program Files (x86)\ShopperPro\JSDriver\Unknown\jsdrv.exe, , [9d8c4b80e19a7db91c86c922c63c07f9]
PUP.Optional.ShopperPro, HKU\S-1-5-21-3749819595-3351042766-3069755680-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|SPDriver, C:\Program Files (x86)\ShopperPro\JSDriver\Unknown\jsdrv.exe, , [9d8c4b80e19a7db91c86c922c63c07f9]
Registry Data: 0
(No malicious items detected)
Folders: 8
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro, , [9d8c4b80e19a7db91c86c922c63c07f9],
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\FireFox, , [9d8c4b80e19a7db91c86c922c63c07f9],
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\FireFox\content, , [9d8c4b80e19a7db91c86c922c63c07f9],
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\JSDriver, , [9d8c4b80e19a7db91c86c922c63c07f9],
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\JSDriver\1.0.0.24, , [9d8c4b80e19a7db91c86c922c63c07f9],
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\JSDriver\Unknown, , [9d8c4b80e19a7db91c86c922c63c07f9],
PUP.Optional.ShopperPro, C:\Program Files\Common Files\ShopperPro, , [3bee9d2e205b6acc0e852bb926dc36ca],
PUP.Optional.ShopperPro, C:\ProgramData\ShopperPro, , [2306a625cdaeb28479a6499d7f83aa56],
Files: 44
PUP.Optional.Goobzo, C:\Program Files\Common Files\ShopperPro\spbiu.exe, , [d059b219cead65d174dc28a6758fbd43],
PUP.Optional.ScramblePacker.A, C:\Users\Mirek\AppData\Local\Installer\Install_31073\sense.exe, , [f6330cbfa2d9b581dea6751352afc43c],
PUP.Optional.ShopperPro, C:\Windows\System32\Tasks\SPBIW_UpdateTask_Time_313034313638303036382d37785545412a503457324a57, , [1613c605fc7f55e130ed3aad36cc768a],
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\ShopperPro.exe, , [9d8c4b80e19a7db91c86c922c63c07f9],
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\Config.json, , [9d8c4b80e19a7db91c86c922c63c07f9],
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\database1_0_0.json, , [9d8c4b80e19a7db91c86c922c63c07f9],
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\manifest.json, , [9d8c4b80e19a7db91c86c922c63c07f9],
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\ShopperPro.crx, , [9d8c4b80e19a7db91c86c922c63c07f9],
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\ShopperPro.dll, , [9d8c4b80e19a7db91c86c922c63c07f9],
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\ShopperPro.zip, , [9d8c4b80e19a7db91c86c922c63c07f9],
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\ShopperPro64.dll, , [9d8c4b80e19a7db91c86c922c63c07f9],
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\SPRemove.exe, , [9d8c4b80e19a7db91c86c922c63c07f9],
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\Updater.exe, , [9d8c4b80e19a7db91c86c922c63c07f9],
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\FireFox\chrome.manifest, , [9d8c4b80e19a7db91c86c922c63c07f9],
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\FireFox\install.rdf, , [9d8c4b80e19a7db91c86c922c63c07f9],
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\FireFox\content\overlay.js, , [9d8c4b80e19a7db91c86c922c63c07f9],
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\FireFox\content\overlay.xul, , [9d8c4b80e19a7db91c86c922c63c07f9],
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\FireFox\content\shopperpro_128.png, , [9d8c4b80e19a7db91c86c922c63c07f9],
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\JSDriver\jsdrv.exe, , [9d8c4b80e19a7db91c86c922c63c07f9],
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\JSDriver\jsdrv.sys, , [9d8c4b80e19a7db91c86c922c63c07f9],
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\JSDriver\1.0.0.24\config.json, , [9d8c4b80e19a7db91c86c922c63c07f9],
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\JSDriver\1.0.0.24\database1_0_0.json, , [9d8c4b80e19a7db91c86c922c63c07f9],
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\JSDriver\1.0.0.24\jsdrv.exe, , [9d8c4b80e19a7db91c86c922c63c07f9],
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\JSDriver\1.0.0.24\jsdrv.sys, , [9d8c4b80e19a7db91c86c922c63c07f9],
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\JSDriver\Unknown\config.json, , [9d8c4b80e19a7db91c86c922c63c07f9],
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\JSDriver\Unknown\database1_0_0.json, , [9d8c4b80e19a7db91c86c922c63c07f9],
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\JSDriver\Unknown\jsdrv.exe, , [9d8c4b80e19a7db91c86c922c63c07f9],
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\JSDriver\Unknown\jsdrv.sys, , [9d8c4b80e19a7db91c86c922c63c07f9],
PUP.Optional.ShopperPro, C:\Windows\System32\Tasks\ShopperPro, , [c168953683f81422a30a3caf13efff01],
PUP.Optional.ShopperPro, C:\Windows\System32\Tasks\ShopperProJSUpd, , [a089f5d697e4ad893d71d912a35f39c7],
PUP.Optional.ShopperPro, C:\Windows\System32\Tasks\SPDriver, , [c366deedbebd2115a609f2f9bc46e21e],
PUP.Optional.Superfish.A, C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.superfish.com_0.localstorage, , [33f674579be074c2bad6847b56ac36ca],
PUP.Optional.Superfish.A, C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.superfish.com_0.localstorage-journal, , [96934a811368cd69a3edea15e31fa35d],
PUP.Optional.ShopperPro, C:\Program Files\Common Files\ShopperPro\spbia.exe, , [3bee9d2e205b6acc0e852bb926dc36ca],
PUP.Optional.ShopperPro, C:\Program Files\Common Files\ShopperPro\spbici32.dll, , [3bee9d2e205b6acc0e852bb926dc36ca],
PUP.Optional.ShopperPro, C:\Program Files\Common Files\ShopperPro\spbici64.dll, , [3bee9d2e205b6acc0e852bb926dc36ca],
PUP.Optional.ShopperPro, C:\Program Files\Common Files\ShopperPro\spbii32.exe, , [3bee9d2e205b6acc0e852bb926dc36ca],
PUP.Optional.ShopperPro, C:\Program Files\Common Files\ShopperPro\spbii64.exe, , [3bee9d2e205b6acc0e852bb926dc36ca],
PUP.Optional.ShopperPro, C:\Program Files\Common Files\ShopperPro\spbiw.sys, , [3bee9d2e205b6acc0e852bb926dc36ca],
PUP.Optional.ShopperPro, C:\ProgramData\ShopperPro\config.json, , [2306a625cdaeb28479a6499d7f83aa56],
PUP.Optional.ShopperPro, C:\ProgramData\ShopperPro\database1_0_0.json, , [2306a625cdaeb28479a6499d7f83aa56],
PUP.Optional.ShopperPro, C:\ProgramData\ShopperPro\ShopperPro.dll, , [2306a625cdaeb28479a6499d7f83aa56],
PUP.Optional.ShopperPro, C:\ProgramData\ShopperPro\ShopperPro64.dll, , [2306a625cdaeb28479a6499d7f83aa56],
PUP.Optional.ShopperPro, C:\ProgramData\ShopperPro\spbihe.js, , [2306a625cdaeb28479a6499d7f83aa56],
Physical Sectors: 0
(No malicious items detected)
(end)
Malwarebytes Anti-Malware
www.malwarebytes.org
Scan Date: 26.8.2014
Scan Time: 11:29:14
Logfile: log z anti-malware.txt
Administrator: Yes
Version: 2.00.2.1012
Malware Database: v2014.08.26.01
Rootkit Database: v2014.08.21.01
License: Free
Malware Protection: Disabled
Malicious Website Protection: Disabled
Self-protection: Disabled
OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: Mirek
Scan Type: Threat Scan
Result: Completed
Objects Scanned: 291666
Time Elapsed: 6 min, 34 sec
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled
Processes: 5
PUP.Optional.Goobzo, C:\Program Files\Common Files\ShopperPro\spbiu.exe, 3028, , [d059b219cead65d174dc28a6758fbd43]
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\ShopperPro.exe, 1844, , [9d8c4b80e19a7db91c86c922c63c07f9]
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\Updater.exe, 5060, , [9d8c4b80e19a7db91c86c922c63c07f9]
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\Updater.exe, 808, , [9d8c4b80e19a7db91c86c922c63c07f9]
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\JSDriver\Unknown\jsdrv.exe, 4924, , [9d8c4b80e19a7db91c86c922c63c07f9]
Modules: 0
(No malicious items detected)
Registry Keys: 23
PUP.Optional.Goobzo, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SPBIUpd, , [d059b219cead65d174dc28a6758fbd43],
PUP.Optional.ShopperPro, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\ShopperPro, , [9d8c4b80e19a7db91c86c922c63c07f9],
PUP.Optional.ShopperPro, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SPDRIVER_Unknown, , [9d8c4b80e19a7db91c86c922c63c07f9],
PUP.Optional.Spigot.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\cflheckfmhopnialghigdlggahiomebp, , [052428a38dee50e67664c430a65cb44c],
PUP.Optional.ShopperPro, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SPBIUpdd, , [3bee9d2e205b6acc0e852bb926dc36ca],
PUP.Optional.ShopperPro, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}, , [2306a625cdaeb28479a6499d7f83aa56],
PUP.Optional.ShopperPro, HKLM\SOFTWARE\CLASSES\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}, , [2306a625cdaeb28479a6499d7f83aa56],
PUP.Optional.ShopperPro, HKLM\SOFTWARE\CLASSES\TYPELIB\{8FB1A663-2820-468B-95C4-5060A4C5F413}, , [2306a625cdaeb28479a6499d7f83aa56],
PUP.Optional.ShopperPro, HKLM\SOFTWARE\CLASSES\INTERFACE\{03C0AC00-86DE-4B55-81BA-2E7CD61C51B1}, , [2306a625cdaeb28479a6499d7f83aa56],
PUP.Optional.ShopperPro, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{03C0AC00-86DE-4B55-81BA-2E7CD61C51B1}, , [2306a625cdaeb28479a6499d7f83aa56],
PUP.Optional.ShopperPro, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{8FB1A663-2820-468B-95C4-5060A4C5F413}, , [2306a625cdaeb28479a6499d7f83aa56],
PUP.Optional.ShopperPro, HKLM\SOFTWARE\CLASSES\ShopperPro.ShopperProBHO.1, , [2306a625cdaeb28479a6499d7f83aa56],
PUP.Optional.ShopperPro, HKLM\SOFTWARE\CLASSES\ShopperPro.ShopperProBHO, , [2306a625cdaeb28479a6499d7f83aa56],
PUP.Optional.ShopperPro, HKLM\SOFTWARE\WOW6432NODE\CLASSES\ShopperPro.ShopperProBHO, , [2306a625cdaeb28479a6499d7f83aa56],
PUP.Optional.ShopperPro, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}, , [2306a625cdaeb28479a6499d7f83aa56],
PUP.Optional.ShopperPro, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}, , [2306a625cdaeb28479a6499d7f83aa56],
PUP.Optional.ShopperPro, HKLM\SOFTWARE\WOW6432NODE\CLASSES\ShopperPro.ShopperProBHO.1, , [2306a625cdaeb28479a6499d7f83aa56],
PUP.Optional.ShopperPro, HKU\S-1-5-21-3749819595-3351042766-3069755680-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}, , [2306a625cdaeb28479a6499d7f83aa56],
PUP.Optional.ShopperPro, HKU\S-1-5-21-3749819595-3351042766-3069755680-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}, , [2306a625cdaeb28479a6499d7f83aa56],
PUP.Optional.ShopperPro, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}, , [2306a625cdaeb28479a6499d7f83aa56],
PUP.Optional.ShopperPro, HKLM\SOFTWARE\CLASSES\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}\INPROCSERVER32, , [2306a625cdaeb28479a6499d7f83aa56],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{11111111-1111-1111-1111-110411821192}, , [cd5cc902fe7d6fc7e1a05b8ada2a768a],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\CLASSES\CLSID\{11111111-1111-1111-1111-110411821192}, , [cd5cc902fe7d6fc7e1a05b8ada2a768a],
Registry Values: 2
PUP.Optional.ShopperPro, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|SPDriver, C:\Program Files (x86)\ShopperPro\JSDriver\Unknown\jsdrv.exe, , [9d8c4b80e19a7db91c86c922c63c07f9]
PUP.Optional.ShopperPro, HKU\S-1-5-21-3749819595-3351042766-3069755680-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|SPDriver, C:\Program Files (x86)\ShopperPro\JSDriver\Unknown\jsdrv.exe, , [9d8c4b80e19a7db91c86c922c63c07f9]
Registry Data: 0
(No malicious items detected)
Folders: 8
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro, , [9d8c4b80e19a7db91c86c922c63c07f9],
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\FireFox, , [9d8c4b80e19a7db91c86c922c63c07f9],
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\FireFox\content, , [9d8c4b80e19a7db91c86c922c63c07f9],
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\JSDriver, , [9d8c4b80e19a7db91c86c922c63c07f9],
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\JSDriver\1.0.0.24, , [9d8c4b80e19a7db91c86c922c63c07f9],
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\JSDriver\Unknown, , [9d8c4b80e19a7db91c86c922c63c07f9],
PUP.Optional.ShopperPro, C:\Program Files\Common Files\ShopperPro, , [3bee9d2e205b6acc0e852bb926dc36ca],
PUP.Optional.ShopperPro, C:\ProgramData\ShopperPro, , [2306a625cdaeb28479a6499d7f83aa56],
Files: 44
PUP.Optional.Goobzo, C:\Program Files\Common Files\ShopperPro\spbiu.exe, , [d059b219cead65d174dc28a6758fbd43],
PUP.Optional.ScramblePacker.A, C:\Users\Mirek\AppData\Local\Installer\Install_31073\sense.exe, , [f6330cbfa2d9b581dea6751352afc43c],
PUP.Optional.ShopperPro, C:\Windows\System32\Tasks\SPBIW_UpdateTask_Time_313034313638303036382d37785545412a503457324a57, , [1613c605fc7f55e130ed3aad36cc768a],
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\ShopperPro.exe, , [9d8c4b80e19a7db91c86c922c63c07f9],
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\Config.json, , [9d8c4b80e19a7db91c86c922c63c07f9],
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\database1_0_0.json, , [9d8c4b80e19a7db91c86c922c63c07f9],
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\manifest.json, , [9d8c4b80e19a7db91c86c922c63c07f9],
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\ShopperPro.crx, , [9d8c4b80e19a7db91c86c922c63c07f9],
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\ShopperPro.dll, , [9d8c4b80e19a7db91c86c922c63c07f9],
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\ShopperPro.zip, , [9d8c4b80e19a7db91c86c922c63c07f9],
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\ShopperPro64.dll, , [9d8c4b80e19a7db91c86c922c63c07f9],
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\SPRemove.exe, , [9d8c4b80e19a7db91c86c922c63c07f9],
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\Updater.exe, , [9d8c4b80e19a7db91c86c922c63c07f9],
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\FireFox\chrome.manifest, , [9d8c4b80e19a7db91c86c922c63c07f9],
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\FireFox\install.rdf, , [9d8c4b80e19a7db91c86c922c63c07f9],
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\FireFox\content\overlay.js, , [9d8c4b80e19a7db91c86c922c63c07f9],
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\FireFox\content\overlay.xul, , [9d8c4b80e19a7db91c86c922c63c07f9],
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\FireFox\content\shopperpro_128.png, , [9d8c4b80e19a7db91c86c922c63c07f9],
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\JSDriver\jsdrv.exe, , [9d8c4b80e19a7db91c86c922c63c07f9],
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\JSDriver\jsdrv.sys, , [9d8c4b80e19a7db91c86c922c63c07f9],
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\JSDriver\1.0.0.24\config.json, , [9d8c4b80e19a7db91c86c922c63c07f9],
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\JSDriver\1.0.0.24\database1_0_0.json, , [9d8c4b80e19a7db91c86c922c63c07f9],
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\JSDriver\1.0.0.24\jsdrv.exe, , [9d8c4b80e19a7db91c86c922c63c07f9],
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\JSDriver\1.0.0.24\jsdrv.sys, , [9d8c4b80e19a7db91c86c922c63c07f9],
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\JSDriver\Unknown\config.json, , [9d8c4b80e19a7db91c86c922c63c07f9],
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\JSDriver\Unknown\database1_0_0.json, , [9d8c4b80e19a7db91c86c922c63c07f9],
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\JSDriver\Unknown\jsdrv.exe, , [9d8c4b80e19a7db91c86c922c63c07f9],
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\JSDriver\Unknown\jsdrv.sys, , [9d8c4b80e19a7db91c86c922c63c07f9],
PUP.Optional.ShopperPro, C:\Windows\System32\Tasks\ShopperPro, , [c168953683f81422a30a3caf13efff01],
PUP.Optional.ShopperPro, C:\Windows\System32\Tasks\ShopperProJSUpd, , [a089f5d697e4ad893d71d912a35f39c7],
PUP.Optional.ShopperPro, C:\Windows\System32\Tasks\SPDriver, , [c366deedbebd2115a609f2f9bc46e21e],
PUP.Optional.Superfish.A, C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.superfish.com_0.localstorage, , [33f674579be074c2bad6847b56ac36ca],
PUP.Optional.Superfish.A, C:\Users\Mirek\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.superfish.com_0.localstorage-journal, , [96934a811368cd69a3edea15e31fa35d],
PUP.Optional.ShopperPro, C:\Program Files\Common Files\ShopperPro\spbia.exe, , [3bee9d2e205b6acc0e852bb926dc36ca],
PUP.Optional.ShopperPro, C:\Program Files\Common Files\ShopperPro\spbici32.dll, , [3bee9d2e205b6acc0e852bb926dc36ca],
PUP.Optional.ShopperPro, C:\Program Files\Common Files\ShopperPro\spbici64.dll, , [3bee9d2e205b6acc0e852bb926dc36ca],
PUP.Optional.ShopperPro, C:\Program Files\Common Files\ShopperPro\spbii32.exe, , [3bee9d2e205b6acc0e852bb926dc36ca],
PUP.Optional.ShopperPro, C:\Program Files\Common Files\ShopperPro\spbii64.exe, , [3bee9d2e205b6acc0e852bb926dc36ca],
PUP.Optional.ShopperPro, C:\Program Files\Common Files\ShopperPro\spbiw.sys, , [3bee9d2e205b6acc0e852bb926dc36ca],
PUP.Optional.ShopperPro, C:\ProgramData\ShopperPro\config.json, , [2306a625cdaeb28479a6499d7f83aa56],
PUP.Optional.ShopperPro, C:\ProgramData\ShopperPro\database1_0_0.json, , [2306a625cdaeb28479a6499d7f83aa56],
PUP.Optional.ShopperPro, C:\ProgramData\ShopperPro\ShopperPro.dll, , [2306a625cdaeb28479a6499d7f83aa56],
PUP.Optional.ShopperPro, C:\ProgramData\ShopperPro\ShopperPro64.dll, , [2306a625cdaeb28479a6499d7f83aa56],
PUP.Optional.ShopperPro, C:\ProgramData\ShopperPro\spbihe.js, , [2306a625cdaeb28479a6499d7f83aa56],
Physical Sectors: 0
(No malicious items detected)
(end)
Intel Core i7-7700K, Noctua D15, Corsair Vengeance LPX 3000MHz 16GB, ASRock Z170 Extreme4, MSI GeForce GTX 1080 GAMING X 8G, Samsung SSD 960 EVO (M.2) - 250GB, Seagate SV35.5 - 1TB, Corsair RMx Series RM650x 650W, Fractal DEFINE R4 Black Pearl
- jaro3
- člen Security týmu
-
Guru Level 15
- Příspěvky: 43298
- Registrován: červen 07
- Bydliště: Jižní Čechy
- Pohlaví:
- Stav:
Offline
Re: Prosím o kontrolu logu
Spusť znovu AdwCleaner (u Windows Vista či Windows7, klikni na AdwCleaner pravým a vyber „Spustit jako správce“
klikni na „Prohledat-Scan“, po prohledání klikni na „ Vymazat-Clean“
Program provede opravu, po automatickém restartu neukáže log (C:\AdwCleaner [S?].txt) , jeho obsah sem celý vlož.
Stáhni si Junkware Removal Tool by Thisisu
na svojí plochu.
Deaktivuj si svůj antivirový program. Pravým tl. myši klikni na JRT.exe a vyber „spustit jako správce“. Pro pokračování budeš vyzván ke stisknutí jakékoliv klávesy. Na nějakou klikni.
Začne skenování programu. Skenování může trvat dloho , podle množství nákaz. Po ukončení skenu se objeví log (JRT.txt) , který se uloží na ploše.
Zkopíruj sem prosím celý jeho obsah.
. spusť znovu MbAM a dej Skenovat nyní
- po proběhnutí programu se ti objeví hláška tak klikni na „Vše do karantény(smazat vybrané)“ a na „Exportovat záznam“ a vyber „textový soubor“ , soubor nějak pojmenuj a někam ho ulož. Zkopíruj se celý obsah toho logu.
Stáhni si RogueKiller by Adlice Software
32bit.:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
64bit.:
http://www.sur-la-toile.com/RogueKiller ... lerX64.exe
na svojí plochu.
- Zavři všechny ostatní programy a prohlížeče.
- Pro OS Vista a win7 spusť program RogueKiller.exe jako správce , u XP poklepáním.
- počkej až skončí Prescan -vyhledávání škodlivých procesů.
- Zkontroluj , zda máš zaškrtnuto:
Kontrola MBR
Kontrola Faked
Antirootkit
-Potom klikni na „Prohledat“.
- Program skenuje procesy PC. Po proskenování klikni na „Zpráva“celý obsah logu sem zkopíruj.
Pokud je program blokován , zkus ho spustit několikrát. Pokud dále program nepůjde spustit a pracovat, přejmenuj ho na winlogon.exe.
klikni na „Prohledat-Scan“, po prohledání klikni na „ Vymazat-Clean“
Program provede opravu, po automatickém restartu neukáže log (C:\AdwCleaner [S?].txt) , jeho obsah sem celý vlož.
Stáhni si Junkware Removal Tool by Thisisu
na svojí plochu.
Deaktivuj si svůj antivirový program. Pravým tl. myši klikni na JRT.exe a vyber „spustit jako správce“. Pro pokračování budeš vyzván ke stisknutí jakékoliv klávesy. Na nějakou klikni.
Začne skenování programu. Skenování může trvat dloho , podle množství nákaz. Po ukončení skenu se objeví log (JRT.txt) , který se uloží na ploše.
Zkopíruj sem prosím celý jeho obsah.
. spusť znovu MbAM a dej Skenovat nyní
- po proběhnutí programu se ti objeví hláška tak klikni na „Vše do karantény(smazat vybrané)“ a na „Exportovat záznam“ a vyber „textový soubor“ , soubor nějak pojmenuj a někam ho ulož. Zkopíruj se celý obsah toho logu.
Stáhni si RogueKiller by Adlice Software
32bit.:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
64bit.:
http://www.sur-la-toile.com/RogueKiller ... lerX64.exe
na svojí plochu.
- Zavři všechny ostatní programy a prohlížeče.
- Pro OS Vista a win7 spusť program RogueKiller.exe jako správce , u XP poklepáním.
- počkej až skončí Prescan -vyhledávání škodlivých procesů.
- Zkontroluj , zda máš zaškrtnuto:
Kontrola MBR
Kontrola Faked
Antirootkit
-Potom klikni na „Prohledat“.
- Program skenuje procesy PC. Po proskenování klikni na „Zpráva“celý obsah logu sem zkopíruj.
Pokud je program blokován , zkus ho spustit několikrát. Pokud dále program nepůjde spustit a pracovat, přejmenuj ho na winlogon.exe.
Při práci s programy HJT, ComboFix,MbAM, SDFix aj. zavřete všechny ostatní aplikace a prohlížeče!
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
Kdo je online
Uživatelé prohlížející si toto fórum: Žádní registrovaní uživatelé a 106 hostů