prosím o kontrolu logu Vyřešeno

[kesudj]

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:21:06, on 22.2.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17631)

FIREFOX: 26.0 (cs)
Boot mode: Normal

Running processes:
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files (x86)\ScanSoft\OmniPageSE4\OpWareSE4.exe
C:\ProgramData\{d5e28e25-36ca-1754-d5e2-28e2536c3894}\Scorpions - Return to Forever [Deluxe Edition] (2015) (1).exe
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbarUser_32.exe
C:\Users\doma\Downloads\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId= ... kId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files (x86)\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
O4 - HKLM\..\Run: [OpwareSE4] "C:\Program Files (x86)\ScanSoft\OmniPageSE4\OpwareSE4.exe"
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - Startup: AutorunsDisabled
O4 - Startup: Scorpions - Return to Forever [Deluxe Edition] (2015) (1).lnk = C:\ProgramData\{d5e28e25-36ca-1754-d5e2-28e2536c3894}\Scorpions - Return to Forever [Deluxe Edition] (2015) (1).exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files (x86)\Microsoft Office\Office\OSA9.EXE
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O20 - AppInit_DLLs:
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: ioloToolService (ioloService) - Unknown owner - C:\Program Files (x86)\SafePCRepair\ioloToolService.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: SmdmF Service (SmdmFService) - Aztec Media Inc - C:\Program Files (x86)\Assets Manager\smdmf\SmdmFService.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 6913 bytes

[Reklama]

[Orcus]

Problémy?

Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected. Poté klikni na Main (hlavní stránku ) a klikni na Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranění historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit dočasné soubory Windows, vysypat koš atd.

- Pokud používáš jen Google Chrome , tak ATF nemusíš použít.

===================================================

Stáhni si TFC
Otevři soubor a zavři všechny ostatní okna, Klikni na Start k zahájení procesu. Program by neměl trvat dlouho.
Poté by se měl PC restartovat, pokud ne , proveď sám.

===================================================

Stáhni AdwCleaner (by Xplode)

Ulož si ho na svojí plochu
Ukonči všechny programy , okna a prohlížeče
Spusť program poklepáním a klikni na „Prohledat-Scan“
Po skenu se objeví log ( jinak je uložen systémovem disku jako AdwCleaner[R?].txt), jeho obsah sem celý vlož.

===================================================

Stáhni si Malwarebytes' Anti-Malware
- Při instalaci odeber zatržítko u „Povolit bezplatnou zkušební verzi Malwarebytes' Anti-Malware Premium“
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Aktualizace Malwarebytes' Anti-Malware a Spustit aplikaci Malwarebytes' Anti-Malware, pokud jo tak klikni na tlačítko konec
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a klikni na Skenovat nyní a
- po proběhnutí programu se ti objeví hláška vpravo dole tak klikni na b] Kopírovat do schránky [/b]a a vlož sem celý log.

- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).

Pokud budou problémy , spusť v nouz. režimu.

[kesudj]

problémy: v prohlížeči firefox, mi neustále vyskakuje okno avast antivir,že byla zablokována nebezpečná stránka,třeba v IE to nedělá

# AdwCleaner v4.111 - Logfile created 22/02/2015 at 19:30:57
# Updated 18/02/2015 by Xplode
# Database : 2015-02-18.3 [Server]
# Operating system : Windows 7 Ultimate Service Pack 1 (x64)
# Username : doma - DOMA-PC
# Running from : C:\Users\doma\Downloads\AdwCleaner.exe
# Option : Scan

***** [ Services ] *****

Service Found : F06DEFF2-5B9C-490D-910F-35D3A91196222
Service Found : SmdmFService
Service Found : ioloService

***** [ Files / Folders ] *****

File Found : C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\default-search.xml
File Found : C:\Users\doma\AppData\Roaming\Mozilla\Firefox\Profiles\5uye4eqh.default\invalidprefs.js
File Found : C:\Users\doma\AppData\Roaming\Mozilla\Firefox\Profiles\5uye4eqh.default\searchplugins\default-search.xml
File Found : C:\Users\doma\Desktop\77zip.lnk
Folder Found : C:\Program Files (x86)\77zip
Folder Found : C:\Program Files (x86)\advanced system optimizer 3
Folder Found : C:\Program Files (x86)\Assets Manager
Folder Found : C:\Program Files (x86)\SafePCRepair_89
Folder Found : C:\Program Files (x86)\Settings Manager
Folder Found : C:\Program Files (x86)\UniDaeAls
Folder Found : C:\Program Files (x86)\UniDeals
Folder Found : C:\Program Files (x86)\wiebesavee
Folder Found : C:\Program Files (x86)\wiebesavee
Folder Found : C:\Program Files (x86)\youtubeadblocker
Folder Found : C:\ProgramData\7597452813637679732
Folder Found : C:\ProgramData\smdmf
Folder Found : C:\ProgramData\wiebesavee
Folder Found : C:\ProgramData\wiebesavee
Folder Found : C:\Users\doma\AppData\Local\torch
Folder Found : C:\Users\doma\AppData\Roaming\FirefoxToolbar
Folder Found : C:\Users\doma\AppData\Roaming\IHlpr
Folder Found : C:\Users\doma\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\77zip
Folder Found : C:\Users\doma\AppData\Roaming\Mozilla\Firefox\Profiles\5uye4eqh.default\Extensions\{ea614400-e918-4741-9a97-7a972ff7c30b}
Folder Found : C:\Users\doma\AppData\Roaming\Mozilla\Firefox\Profiles\5uye4eqh.default\Extensions\09KOLz@AI.org
Folder Found : C:\Users\doma\AppData\Roaming\Mozilla\Firefox\Profiles\5uye4eqh.default\Extensions\E@RC.net
Folder Found : C:\Users\doma\AppData\Roaming\OpenCandy
Folder Found : C:\Users\doma\AppData\Roaming\SafePCRepair_89
Folder Found : C:\Users\doma\AppData\Roaming\Systweak

***** [ Scheduled tasks ] *****

Task Found : BackgroundContainer Startup Task

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Found : HKCU\Software\AppDataLow\Software\BackgroundContainer
Key Found : HKCU\Software\AppDataLow\Software\Conduit
Key Found : HKCU\Software\AppDataLow\Software\ConduitSearchScopes
Key Found : HKCU\Software\AppDataLow\Software\Mindspark
Key Found : HKCU\Software\AppDataLow\Software\SafePCRepair_89
Key Found : HKCU\Software\AppDataLow\Toolbar
Key Found : HKCU\Software\Conduit
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2503}
Key Found : HKCU\Software\RegisteredApplicationsEx
Key Found : HKCU\Software\SafePCRepair_89
Key Found : HKCU\Software\SmdmF
Key Found : [x64] HKCU\Software\Conduit
Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2503}
Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2503}
Key Found : [x64] HKCU\Software\RegisteredApplicationsEx
Key Found : [x64] HKCU\Software\SafePCRepair_89
Key Found : [x64] HKCU\Software\SmdmF
Key Found : HKLM\SOFTWARE\Classes\AppID\{CFBE264C-912E-4DA5-B67B-790B27D6D338}
Key Found : HKLM\SOFTWARE\Classes\AppID\ioloToolService.exe
Key Found : HKLM\SOFTWARE\CLASSES\SafePCRepair_89.SettingsPlugin
Key Found : HKLM\SOFTWARE\CLASSES\SafePCRepair_89.SettingsPlugin.1
Key Found : HKLM\SOFTWARE\Classes\Toolbar.CT2504091
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{DD1CFE82-CC89-497D-9573-B8B1867DDA09}
Key Found : HKLM\SOFTWARE\Conduit
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2503}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{11F6D5AB-263F-388E-74DE-E3DECD390E3F}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{4820778D-AB0D-6D18-C316-52A6A0E1D507}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{4820778D-AB0D-6D18-C316-52A6A0E1D507}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\77zip
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SafePCRepair_89bar Uninstall Firefox
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Settings Manager
Key Found : HKLM\SOFTWARE\SafePCRepair_89
Key Found : HKLM\SOFTWARE\SmdmF
Key Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2503}
Key Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2503}

***** [ Web browsers ] *****

-\\ Internet Explorer v11.0.9600.17631


-\\ Mozilla Firefox v26.0 (cs)

[5uye4eqh.default] - Line Found : user_pref("browser.search.defaultenginename", "default-search.net");
[5uye4eqh.default] - Line Found : user_pref("browser.search.order.1", "default-search.net");
[5uye4eqh.default] - Line Found : user_pref("browser.search.selectedEngine", "default-search.net");
[5uye4eqh.default] - Line Found : user_pref("keyword.URL", "hxxp://www.default-search.net/search?sid=503&aid=100&itype=a&ver=15511&tm=554&src=ds&p=");

-\\ Google Chrome v


-\\ Chrome Canary v

*************************

AdwCleaner[R0].txt - [5568 bytes] - [22/02/2015 19:30:57]

########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [5627 bytes] ##########





Malwarebytes Anti-Malware
www.malwarebytes.org

Datum skenování: 22.2.2015
Čas skenování: 19:49:32
Protokol: malware.txt
Správce: Ano

Verze: 2.00.4.1028
Databáze malwaru: v2015.02.22.05
Databáze rootkitů: v2015.02.22.01
Licence: Bezplatná verze
Ochrana proti malwaru: Vypnuto
Ochrana proti škodlivým webovým stránkám: Vypnuto
Sebeobrany: Vypnuto

OS: Windows 7 Service Pack 1
CPU: x64
Souborový systém: NTFS
Uživatel: doma

Typ skenu: Sken hrozeb
Výsledek: Dokončeno
Prohledaných objektů: 375835
Uplynulý čas: 22 min, 40 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Vypnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto

Procesy: 2
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Assets Manager\smdmf\SmdmFService.exe, 1568, , [0f6ee140b9d1b87ec346fdc2b44d718f]
PUP.Optional.MultiPlug, C:\ProgramData\{d5e28e25-36ca-1754-d5e2-28e2536c3894}\Scorpions - Return to Forever [Deluxe Edition] (2015) (1).exe, 2920, , [611c0819d9b15ed8cb917aac5ea4fb05]

Moduly: 0
(Žádné zákerné zjištěny položek)

Klíče registru: 163
PUP.Optional.SettingsManager.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SmdmFService, , [0f6ee140b9d1b87ec346fdc2b44d718f],
PUP.Optional.DefaultSearch, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2503}, , [601d55ccf298d85e485d21fb15f0a65a],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\SafePCRepair_89, , [3e3f76ab8a003cfa0e8621aef112ca36],
PUP.Optional.SettingsManager.A, HKLM\SOFTWARE\WOW6432NODE\SmdmF, , [19643de4bbcf6cca99df615307fc9d63],
PUP.Optional.DefaultSearch, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2503}, , [5627c45d0c7eed49b9ec9f7da5601de3],
PUP.Optional.MultiPlug, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{4820778D-AB0D-6D18-C316-52A6A0E1D507}, , [0875849dd2b81d19b12d397743c038c8],
PUP.Optional.SettingsManager.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\F06DEFF2-5B9C-490D-910F-35D3A91196222, , [8af3da47e1a9ec4a4652c1dbb251b14f],
PUP.Optional.MindSpark.A, HKU\S-1-5-21-1903781126-3492851964-680616090-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SafePCRepair_89, , [cfaea180d1b96dc90a81646b25deb54b],
PUP.Optional.SettingsManager.A, HKU\S-1-5-21-1903781126-3492851964-680616090-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SmdmF, , [1f5ed64bf19966d0581fc0f4a55e1ce4],
PUP.Optional.Conduit.A, HKU\S-1-5-21-1903781126-3492851964-680616090-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\ConduitSearchScopes, , [c5b8d150deac56e0870cb4f07b88ae52],
PUP.Optional.MindSpark.A, HKU\S-1-5-21-1903781126-3492851964-680616090-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Mindspark, , [2855d34edab0280e861a7ba39273f10f],
PUP.Optional.MindSpark.A, HKU\S-1-5-21-1903781126-3492851964-680616090-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\SafePCRepair_89, , [17666db40e7c6ccab9680abdc1427f81],
PUP.Optional.DefaultSearch, HKU\S-1-5-21-1903781126-3492851964-680616090-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2503}, , [f489df4293f7270ffbab0e0e39cc6b95],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\TYPELIB\{DD1CFE82-CC89-497D-9573-B8B1867DDA09}, , [2f4e9988d9b1b680ad6e7fded033649c],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\INTERFACE\{74972EDF-A814-4507-8DD0-7A8C56A7DDBF}, , [2f4e9988d9b1b680ad6e7fded033649c],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\INTERFACE\{CEEAE576-EBDB-4824-929F-273454600785}, , [2f4e9988d9b1b680ad6e7fded033649c],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\INTERFACE\{FB9A7BD0-EE09-427E-AB13-C54EE0C4EF86}, , [2f4e9988d9b1b680ad6e7fded033649c],
PUP.Optional.Multiplug, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{74972EDF-A814-4507-8DD0-7A8C56A7DDBF}, , [2f4e9988d9b1b680ad6e7fded033649c],
PUP.Optional.Multiplug, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{CEEAE576-EBDB-4824-929F-273454600785}, , [2f4e9988d9b1b680ad6e7fded033649c],
PUP.Optional.Multiplug, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{FB9A7BD0-EE09-427E-AB13-C54EE0C4EF86}, , [2f4e9988d9b1b680ad6e7fded033649c],
PUP.Optional.Multiplug, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{DD1CFE82-CC89-497D-9573-B8B1867DDA09}, , [2f4e9988d9b1b680ad6e7fded033649c],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\CLSID\{a56daccf-0235-4cd9-847b-2b193c94f351}, , [2f4e9988d9b1b680ad6e7fded033649c],
PUP.Optional.Multiplug, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{A56DACCF-0235-4CD9-847B-2B193C94F351}, , [2f4e9988d9b1b680ad6e7fded033649c],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\Pa56daccf_0235_4cd9_847b_2b193c94f351_.Pa56daccf_0235_4cd9_847b_2b193c94f351_, , [2f4e9988d9b1b680ad6e7fded033649c],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\Pa56daccf_0235_4cd9_847b_2b193c94f351_.Pa56daccf_0235_4cd9_847b_2b193c94f351_.9, , [2f4e9988d9b1b680ad6e7fded033649c],
PUP.Optional.Multiplug, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Pa56daccf_0235_4cd9_847b_2b193c94f351_.Pa56daccf_0235_4cd9_847b_2b193c94f351_, , [2f4e9988d9b1b680ad6e7fded033649c],
PUP.Optional.Multiplug, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Pa56daccf_0235_4cd9_847b_2b193c94f351_.Pa56daccf_0235_4cd9_847b_2b193c94f351_.9, , [2f4e9988d9b1b680ad6e7fded033649c],
PUP.Optional.Multiplug, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{A56DACCF-0235-4CD9-847B-2B193C94F351}, , [2f4e9988d9b1b680ad6e7fded033649c],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\CLSID\{A56DACCF-0235-4CD9-847B-2B193C94F351}\INPROCSERVER32, , [2f4e9988d9b1b680ad6e7fded033649c],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{e81003f0-8f21-4a23-8142-403d821198ac}, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{0bc5607d-dc04-410a-b137-73f2ee733596}, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{2438F6B7-0532-4C8C-9C5C-B34935DD3D70}, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{34930B93-003D-4FF8-BF64-6A6F27547B0E}, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{535062C7-0E84-4CD0-BEB2-59F41DD1A8F5}, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{A5935A23-63D1-4216-B6B3-7B392880EB21}, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{A983B26D-76CB-41C6-947E-4EEFF0906747}, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{B98BE44D-266A-45FE-814D-DB708279E238}, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{2438F6B7-0532-4C8C-9C5C-B34935DD3D70}, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{34930B93-003D-4FF8-BF64-6A6F27547B0E}, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{535062C7-0E84-4CD0-BEB2-59F41DD1A8F5}, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{A5935A23-63D1-4216-B6B3-7B392880EB21}, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{A983B26D-76CB-41C6-947E-4EEFF0906747}, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{B98BE44D-266A-45FE-814D-DB708279E238}, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{0bc5607d-dc04-410a-b137-73f2ee733596}, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\SafePCRepair_89.SettingsPlugin.1, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\SafePCRepair_89.SettingsPlugin, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\SafePCRepair_89.SettingsPlugin, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\SafePCRepair_89.SettingsPlugin.1, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKU\S-1-5-21-1903781126-3492851964-680616090-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{E81003F0-8F21-4A23-8142-403D821198AC}, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{E81003F0-8F21-4A23-8142-403D821198AC}, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\SafePCRepair_89bar Uninstall Firefox, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{b6de1d4c-f21b-4056-a99c-1727fd6400ce}, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{63498647-b3ef-4a8a-8c98-163ecf8048fe}, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{356E8E19-4DEB-4F01-8DB4-1A0C99129CE7}, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{5AB21B6C-9EAA-465D-9C21-A1F75981773C}, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{C62485E9-50DB-4F12-AE49-5D0A9B8BAC2C}, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{356E8E19-4DEB-4F01-8DB4-1A0C99129CE7}, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{5AB21B6C-9EAA-465D-9C21-A1F75981773C}, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{C62485E9-50DB-4F12-AE49-5D0A9B8BAC2C}, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{63498647-b3ef-4a8a-8c98-163ecf8048fe}, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\SafePCRepair_89.ToolbarProtector.1, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\SafePCRepair_89.ToolbarProtector, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\SafePCRepair_89.ToolbarProtector, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\SafePCRepair_89.ToolbarProtector.1, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{fe617740-9986-4a5b-a4a8-a66d64ce5e7d}, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{f7b9f27c-2e1a-429c-972a-da83f1165b74}, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{2E685A5C-6D12-4C22-AA7B-32E7467FD7A0}, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{590CFF64-4C98-4B32-887C-4F6BC8C89899}, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{6E2A759A-C5FC-45BA-92B8-85A6131B1324}, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{2E685A5C-6D12-4C22-AA7B-32E7467FD7A0}, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{590CFF64-4C98-4B32-887C-4F6BC8C89899}, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{6E2A759A-C5FC-45BA-92B8-85A6131B1324}, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{f7b9f27c-2e1a-429c-972a-da83f1165b74}, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{79223c67-251e-4447-94fe-762be858d73e}, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{b2a921d8-e831-468f-bbc6-16416342c0a7}, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{B4BCF535-178F-43C9-98B3-1C5447AAF153}, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{B4BCF535-178F-43C9-98B3-1C5447AAF153}, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{b2a921d8-e831-468f-bbc6-16416342c0a7}, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{76816fb7-2009-45ec-a3d7-0d45c67d5bd7}, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{c78cce0d-f991-44f4-b450-33c4fd189e38}, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{41A55DD5-AF6C-482F-9FED-0F3326D71800}, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{E07DD2E8-0B35-4F00-B311-1F079B94A1B4}, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{41A55DD5-AF6C-482F-9FED-0F3326D71800}, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{E07DD2E8-0B35-4F00-B311-1F079B94A1B4}, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{c78cce0d-f991-44f4-b450-33c4fd189e38}, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\SafePCRepair_89.FeedManager.1, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\SafePCRepair_89.FeedManager, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\SafePCRepair_89.FeedManager, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\SafePCRepair_89.FeedManager.1, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{816098C9-EC16-4106-9FF7-E19580B2C338}, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\SafePCRepair_89.HTMLMenu.1, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\SafePCRepair_89.HTMLMenu, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\SafePCRepair_89.HTMLMenu, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\SafePCRepair_89.HTMLMenu.1, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{816098C9-EC16-4106-9FF7-E19580B2C338}, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{43223489-51e1-4e5c-bbc4-3645dce39afe}, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{ccb31621-e2c6-43e7-b5d8-2b161973d5c3}, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{35C03DE9-8BA0-4B87-B3D1-51944C349FF1}, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{7E84E65B-E911-4DC3-B316-E2E854343D1B}, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{35C03DE9-8BA0-4B87-B3D1-51944C349FF1}, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{7E84E65B-E911-4DC3-B316-E2E854343D1B}, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{ccb31621-e2c6-43e7-b5d8-2b161973d5c3}, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{2accb327-7218-4979-8eb7-0e653bc0ea66}, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\SafePCRepair_89.MultipleButton.1, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\SafePCRepair_89.MultipleButton, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\SafePCRepair_89.MultipleButton, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\SafePCRepair_89.MultipleButton.1, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{a8d7fcf9-a855-449b-aa9f-230ba62c4b4e}, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\SafePCRepair_89.ScriptButton.1, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\SafePCRepair_89.ScriptButton, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\SafePCRepair_89.ScriptButton, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\SafePCRepair_89.ScriptButton.1, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{10019e3c-1039-4c6a-8231-0c657afc4bc4}, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{95cd0b4b-5782-435e-993d-ba07b30710a6}, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{565ABC73-E8CB-4261-8FDE-C281445CA53D}, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{59B4F810-41AC-40F0-9FF1-703EAD14C290}, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{A42FD199-B78F-452F-B31F-5755D6105704}, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{B24F3E66-6E22-456F-85F0-43BEF5784F6C}, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{565ABC73-E8CB-4261-8FDE-C281445CA53D}, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{59B4F810-41AC-40F0-9FF1-703EAD14C290}, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{A42FD199-B78F-452F-B31F-5755D6105704}, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{B24F3E66-6E22-456F-85F0-43BEF5784F6C}, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{95cd0b4b-5782-435e-993d-ba07b30710a6}, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{5ed1334e-4e55-40cd-accb-05ce52ad981d}, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5ED1334E-4E55-40CD-ACCB-05CE52AD981D}, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{fe97fe9a-ef03-47e0-9df9-8ebb728c5d93}, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\SafePCRepair_89.PseudoTransparentPlugin.1, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\SafePCRepair_89.PseudoTransparentPlugin, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\SafePCRepair_89.PseudoTransparentPlugin, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\SafePCRepair_89.PseudoTransparentPlugin.1, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{FE97FE9A-EF03-47E0-9DF9-8EBB728C5D93}, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{50066dbf-71b9-4489-b62e-4188d3048db2}, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{6c227856-d369-4b3f-a317-89e4b1cd1a83}, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{394E9A2F-F433-43F1-9A2E-EAC2C6BB8D80}, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{E07714D8-5006-492B-A2B1-B433949D6B1D}, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{394E9A2F-F433-43F1-9A2E-EAC2C6BB8D80}, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{E07714D8-5006-492B-A2B1-B433949D6B1D}, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{6c227856-d369-4b3f-a317-89e4b1cd1a83}, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\SafePCRepair_89.ThirdPartyInstaller.1, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\SafePCRepair_89.ThirdPartyInstaller, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\SafePCRepair_89.ThirdPartyInstaller, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\SafePCRepair_89.ThirdPartyInstaller.1, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{50066DBF-71B9-4489-B62E-4188D3048DB2}, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{5806dc83-95c8-4120-a305-cbce6260adf1}, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{154690a0-7778-41b5-a3ab-eb51e2482b74}, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{3C6E6F5A-8105-423A-AD2C-892FDAC11F49}, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{499616EC-7C3D-499E-95ED-5D37D7FC7A3F}, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{3C6E6F5A-8105-423A-AD2C-892FDAC11F49}, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{499616EC-7C3D-499E-95ED-5D37D7FC7A3F}, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{154690a0-7778-41b5-a3ab-eb51e2482b74}, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\SafePCRepair_89.HTMLPanel.1, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\CLASSES\SafePCRepair_89.HTMLPanel, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\SafePCRepair_89.HTMLPanel, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\SafePCRepair_89.HTMLPanel.1, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{5806DC83-95C8-4120-A305-CBCE6260ADF1}, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.UniDeals.A, HKLM\SOFTWARE\CLASSES\CLSID\{0ae1bf9c-11db-40e2-a359-05d71c863880}, , [ea933ce5b9d19d995f208bfa768d926e],
PUP.Optional.UniDeals.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{0AE1BF9C-11DB-40E2-A359-05D71C863880}, , [ea933ce5b9d19d995f208bfa768d926e],
PUP.Optional.UniDeals.A, HKLM\SOFTWARE\CLASSES\P0ae1bf9c_11db_40e2_a359_05d71c863880_.P0ae1bf9c_11db_40e2_a359_05d71c863880_, , [ea933ce5b9d19d995f208bfa768d926e],
PUP.Optional.UniDeals.A, HKLM\SOFTWARE\CLASSES\P0ae1bf9c_11db_40e2_a359_05d71c863880_.P0ae1bf9c_11db_40e2_a359_05d71c863880_.9, , [ea933ce5b9d19d995f208bfa768d926e],
PUP.Optional.UniDeals.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\P0ae1bf9c_11db_40e2_a359_05d71c863880_.P0ae1bf9c_11db_40e2_a359_05d71c863880_, , [ea933ce5b9d19d995f208bfa768d926e],
PUP.Optional.UniDeals.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\P0ae1bf9c_11db_40e2_a359_05d71c863880_.P0ae1bf9c_11db_40e2_a359_05d71c863880_.9, , [ea933ce5b9d19d995f208bfa768d926e],
PUP.Optional.UniDeals.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{0AE1BF9C-11DB-40E2-A359-05D71C863880}, , [ea933ce5b9d19d995f208bfa768d926e],
PUP.Optional.UniDeals.A, HKLM\SOFTWARE\CLASSES\CLSID\{0AE1BF9C-11DB-40E2-A359-05D71C863880}\INPROCSERVER32, , [ea933ce5b9d19d995f208bfa768d926e],

Hodnoty registru: 3
PUP.Optional.DefaultSearch, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2503}|DisplayName, default-search.net, , [601d55ccf298d85e485d21fb15f0a65a]
PUP.Optional.DefaultSearch, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2503}|DisplayName, default-search.net, , [5627c45d0c7eed49b9ec9f7da5601de3]
PUP.Optional.DefaultSearch, HKU\S-1-5-21-1903781126-3492851964-680616090-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2503}|DisplayName, default-search.net, , [f489df4293f7270ffbab0e0e39cc6b95]

Data registru: 0
(Žádné zákerné zjištěny položek)

Složky: 22
PUP.Optional.OpenCandy, C:\Users\doma\AppData\Roaming\OpenCandy, , [cbb259c888021026b85f213aef14d927],
PUP.Optional.OpenCandy, C:\Users\doma\AppData\Roaming\OpenCandy\9F8E8E1206544EA380DA0008474D1C12, , [cbb259c888021026b85f213aef14d927],
PUP.Optional.Multiplug, C:\Program Files (x86)\youtubeadblocker, , [2f4e9988d9b1b680ad6e7fded033649c],
PUP.Optional.Datamngr.A, C:\Users\doma\AppData\LocalLow\DataMngr, , [6617cd54fb8fd4625cf01e43ba4907f9],
PUP.Optional.MindSpark.A, C:\Users\doma\AppData\Roaming\SafePCRepair_89, , [98e58a97a6e4b482b32abfa6ef149a66],
PUP.Optional.MindSpark.A, C:\Users\doma\AppData\Roaming\SafePCRepair_89\bar, , [98e58a97a6e4b482b32abfa6ef149a66],
PUP.Optional.MindSpark.A, C:\Users\doma\AppData\Roaming\SafePCRepair_89\bar\Settings, , [98e58a97a6e4b482b32abfa6ef149a66],
PUP.Optional.MindSpark.A, C:\Program Files (x86)\SafePCRepair_89, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, C:\Program Files (x86)\SafePCRepair_89\bar, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, C:\Program Files (x86)\SafePCRepair_89\bar\1.bin, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, C:\Program Files (x86)\SafePCRepair_89\bar\1.bin\assists, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, C:\Program Files (x86)\SafePCRepair_89\bar\1.bin\assists\ie_default_search_provider, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, C:\Program Files (x86)\SafePCRepair_89\bar\1.bin\assists\ie_enable, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\smdmf, , [a5d878a9a5e5af87c7263b3ab350c040],
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\smdmf\x64, , [a5d878a9a5e5af87c7263b3ab350c040],
PUP.Optional.SettingsManager.A, C:\ProgramData\smdmf, , [324b25fc1278072fda09700a3dc6ec14],
PUP.Optional.SettingsManager.A, C:\Users\doma\AppData\Roaming\FirefoxToolbar\Settings Manager, , [9ce13fe29bef90a6e301cab0d62da45c],
PUP.Optional.SettingsManager.A, C:\Users\doma\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf, , [9ce13fe29bef90a6e301cab0d62da45c],
PUP.Optional.SettingsManager.A, C:\Users\doma\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components, , [9ce13fe29bef90a6e301cab0d62da45c],
PUP.Optional.SettingsManager.A, C:\Users\doma\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\content, , [9ce13fe29bef90a6e301cab0d62da45c],
PUP.Optional.UniDeals.A, C:\Program Files (x86)\UniDeals, , [ea933ce5b9d19d995f208bfa768d926e],
PUP.Optional.IHlpr.A, C:\Users\doma\AppData\Roaming\IHlpr\9F8E8E1206544EA380DA0008474D1C12, , [5b22b9680684a98d1fed1775e221c43c],

Soubory: 120
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Assets Manager\smdmf\SmdmFService.exe, , [0f6ee140b9d1b87ec346fdc2b44d718f],
PUP.Optional.MultiPlug, C:\ProgramData\{d5e28e25-36ca-1754-d5e2-28e2536c3894}\Scorpions - Return to Forever [Deluxe Edition] (2015) (1).exe, , [611c0819d9b15ed8cb917aac5ea4fb05],
PUP.Optional.Linkey.A, C:\Users\doma\AppData\Roaming\IHlpr\9F8E8E1206544EA380DA0008474D1C12\SettingsManagerSetup.exe, , [b4c9ea37e7a38bab7b43406fdf22b64a],
PUP.Optional.DefaultSearch.A, C:\Users\doma\AppData\Roaming\Mozilla\Firefox\Profiles\5uye4eqh.default\searchplugins\default-search.xml, , [d3aaa47d860493a378036c6854aff30d],
PUP.Optional.DefaultSearch.A, C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\default-search.xml, , [fb82b76a4347ae887804e4f017ecb64a],
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Assets Manager\smdmf\x64\smdmfmgrc3.cfg, , [8af3da47e1a9ec4a4652c1dbb251b14f],
PUP.Optional.Multiplug, C:\Program Files (x86)\youtubeadblocker\dvQLoeRQgXR8xD.dat, , [2f4e9988d9b1b680ad6e7fded033649c],
PUP.Optional.Multiplug, C:\Program Files (x86)\youtubeadblocker\dvQLoeRQgXR8xD.tlb, , [2f4e9988d9b1b680ad6e7fded033649c],
PUP.Optional.Multiplug, C:\Program Files (x86)\youtubeadblocker\dvQLoeRQgXR8xD.x64.dll, , [2f4e9988d9b1b680ad6e7fded033649c],
PUP.Optional.Datamngr.A, C:\Users\doma\AppData\LocalLow\DataMngr\{99BB1406-1CFB-488C-90D1-2D978E04F707}64, , [6617cd54fb8fd4625cf01e43ba4907f9],
PUP.Optional.MindSpark.A, C:\Program Files (x86)\SafePCRepair_89\bar\1.bin\89regiet.dll, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, C:\Program Files (x86)\SafePCRepair_89\bar\1.bin\89bar.dll, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, C:\Program Files (x86)\SafePCRepair_89\bar\1.bin\89barsvc.exe, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, C:\Program Files (x86)\SafePCRepair_89\bar\1.bin\89bprtct.dll, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, C:\Program Files (x86)\SafePCRepair_89\bar\1.bin\89datact.dll, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, C:\Program Files (x86)\SafePCRepair_89\bar\1.bin\89dlghk.dll, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, C:\Program Files (x86)\SafePCRepair_89\bar\1.bin\89dlghk64.dll, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, C:\Program Files (x86)\SafePCRepair_89\bar\1.bin\89feedmg.dll, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, C:\Program Files (x86)\SafePCRepair_89\bar\1.bin\89highin.exe, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, C:\Program Files (x86)\SafePCRepair_89\bar\1.bin\89hkstub.dll, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, C:\Program Files (x86)\SafePCRepair_89\bar\1.bin\89htmlmu.dll, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, C:\Program Files (x86)\SafePCRepair_89\bar\1.bin\89httpct.dll, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, C:\Program Files (x86)\SafePCRepair_89\bar\1.bin\89idle.dll, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, C:\Program Files (x86)\SafePCRepair_89\bar\1.bin\89medint.exe, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, C:\Program Files (x86)\SafePCRepair_89\bar\1.bin\89mlbtn.dll, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, C:\Program Files (x86)\SafePCRepair_89\bar\1.bin\89Plugin.dll, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, C:\Program Files (x86)\SafePCRepair_89\bar\1.bin\89regfft.dll, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, C:\Program Files (x86)\SafePCRepair_89\bar\1.bin\89reghk.dll, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, C:\Program Files (x86)\SafePCRepair_89\bar\1.bin\89script.dll, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, C:\Program Files (x86)\SafePCRepair_89\bar\1.bin\89skin.dll, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, C:\Program Files (x86)\SafePCRepair_89\bar\1.bin\89skplay.exe, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, C:\Program Files (x86)\SafePCRepair_89\bar\1.bin\89SrcAs.dll, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, C:\Program Files (x86)\SafePCRepair_89\bar\1.bin\89tpinst.dll, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, C:\Program Files (x86)\SafePCRepair_89\bar\1.bin\APPINTEGRATOR.EXE, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, C:\Program Files (x86)\SafePCRepair_89\bar\1.bin\AppIntegrator64.exe, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, C:\Program Files (x86)\SafePCRepair_89\bar\1.bin\APPINTEGRATORSTUB.DLL, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, C:\Program Files (x86)\SafePCRepair_89\bar\1.bin\AppIntegratorStub64.dll, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, C:\Program Files (x86)\SafePCRepair_89\bar\1.bin\ASSISTMONITOR.DLL, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, C:\Program Files (x86)\SafePCRepair_89\bar\1.bin\ASSISTMONITOR64.DLL, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, C:\Program Files (x86)\SafePCRepair_89\bar\1.bin\BOOTSTRAP.JS, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, C:\Program Files (x86)\SafePCRepair_89\bar\1.bin\CHROME.MANIFEST, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, C:\Program Files (x86)\SafePCRepair_89\bar\1.bin\CREXT.DLL, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, C:\Program Files (x86)\SafePCRepair_89\bar\1.bin\CrExtP89.exe, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, C:\Program Files (x86)\SafePCRepair_89\bar\1.bin\DPNMNGR.DLL, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, C:\Program Files (x86)\SafePCRepair_89\bar\1.bin\FF-NativeMessagingDispatcher.dll, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, C:\Program Files (x86)\SafePCRepair_89\bar\1.bin\HKFXMGR.DLL, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, C:\Program Files (x86)\SafePCRepair_89\bar\1.bin\HKFXMGR64.DLL, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, C:\Program Files (x86)\SafePCRepair_89\bar\1.bin\HPG.DLL, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, C:\Program Files (x86)\SafePCRepair_89\bar\1.bin\Hpg64.dll, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, C:\Program Files (x86)\SafePCRepair_89\bar\1.bin\installKeys.js, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, C:\Program Files (x86)\SafePCRepair_89\bar\1.bin\T8EPMSUP.DLL, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, C:\Program Files (x86)\SafePCRepair_89\bar\1.bin\T8EXTEX.DLL, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, C:\Program Files (x86)\SafePCRepair_89\bar\1.bin\T8EXTPEX.DLL, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, C:\Program Files (x86)\SafePCRepair_89\bar\1.bin\T8HTML.DLL, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, C:\Program Files (x86)\SafePCRepair_89\bar\1.bin\T8RES.DLL, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, C:\Program Files (x86)\SafePCRepair_89\bar\1.bin\T8TICKER.DLL, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, C:\Program Files (x86)\SafePCRepair_89\bar\1.bin\TOOLBARGUARD.DLL, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, C:\Program Files (x86)\SafePCRepair_89\bar\1.bin\TOOLBARGUARD64.DLL, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, C:\Program Files (x86)\SafePCRepair_89\bar\1.bin\TPIMANAGERCONSOLE.EXE, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, C:\Program Files (x86)\SafePCRepair_89\bar\1.bin\VERIFY.DLL, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, C:\Program Files (x86)\SafePCRepair_89\bar\1.bin\assists\ie_default_search_provider\ARBITER.DLL, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, C:\Program Files (x86)\SafePCRepair_89\bar\1.bin\assists\ie_default_search_provider\ARBITER64.DLL, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, C:\Program Files (x86)\SafePCRepair_89\bar\1.bin\assists\ie_default_search_provider\ASSIST.EXE, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, C:\Program Files (x86)\SafePCRepair_89\bar\1.bin\assists\ie_enable\ARBITER.DLL, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.MindSpark.A, C:\Program Files (x86)\SafePCRepair_89\bar\1.bin\assists\ie_enable\ARBITER64.DLL, , [b5c852cf2a60152104e8fc69877c1fe1],
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\smdmf\del_DM_LL_nsvAFA7.dll, , [a5d878a9a5e5af87c7263b3ab350c040],
PUP.Optional.SettingsManager.A, C:\Program Files (x86)\Settings Manager\smdmf\x64\del_DM_LL_nsvAFA7.dll, , [a5d878a9a5e5af87c7263b3ab350c040],
PUP.Optional.SettingsManager.A, C:\ProgramData\smdmf\coordinator.cfg, , [324b25fc1278072fda09700a3dc6ec14],
PUP.Optional.SettingsManager.A, C:\ProgramData\smdmf\general.cfg, , [324b25fc1278072fda09700a3dc6ec14],
PUP.Optional.SettingsManager.A, C:\ProgramData\smdmf\S-1-5-21-1903781126-3492851964-680616090-1001.cfg, , [324b25fc1278072fda09700a3dc6ec14],
PUP.Optional.SettingsManager.A, C:\Users\doma\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\chrome.manifest, , [9ce13fe29bef90a6e301cab0d62da45c],
PUP.Optional.SettingsManager.A, C:\Users\doma\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\install.rdf, , [9ce13fe29bef90a6e301cab0d62da45c],
PUP.Optional.SettingsManager.A, C:\Users\doma\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF15.dll, , [9ce13fe29bef90a6e301cab0d62da45c],
PUP.Optional.SettingsManager.A, C:\Users\doma\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF.xpt, , [9ce13fe29bef90a6e301cab0d62da45c],
PUP.Optional.SettingsManager.A, C:\Users\doma\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF10.dll, , [9ce13fe29bef90a6e301cab0d62da45c],
PUP.Optional.SettingsManager.A, C:\Users\doma\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF11.dll, , [9ce13fe29bef90a6e301cab0d62da45c],
PUP.Optional.SettingsManager.A, C:\Users\doma\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF12.dll, , [9ce13fe29bef90a6e301cab0d62da45c],
PUP.Optional.SettingsManager.A, C:\Users\doma\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF13.dll, , [9ce13fe29bef90a6e301cab0d62da45c],
PUP.Optional.SettingsManager.A, C:\Users\doma\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF14.dll, , [9ce13fe29bef90a6e301cab0d62da45c],
PUP.Optional.SettingsManager.A, C:\Users\doma\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF16.dll, , [9ce13fe29bef90a6e301cab0d62da45c],
PUP.Optional.SettingsManager.A, C:\Users\doma\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF17.dll, , [9ce13fe29bef90a6e301cab0d62da45c],
PUP.Optional.SettingsManager.A, C:\Users\doma\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF18.dll, , [9ce13fe29bef90a6e301cab0d62da45c],
PUP.Optional.SettingsManager.A, C:\Users\doma\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF19.dll, , [9ce13fe29bef90a6e301cab0d62da45c],
PUP.Optional.SettingsManager.A, C:\Users\doma\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF2.dll, , [9ce13fe29bef90a6e301cab0d62da45c],
PUP.Optional.SettingsManager.A, C:\Users\doma\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF20.dll, , [9ce13fe29bef90a6e301cab0d62da45c],
PUP.Optional.SettingsManager.A, C:\Users\doma\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF21.dll, , [9ce13fe29bef90a6e301cab0d62da45c],
PUP.Optional.SettingsManager.A, C:\Users\doma\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF22.dll, , [9ce13fe29bef90a6e301cab0d62da45c],
PUP.Optional.SettingsManager.A, C:\Users\doma\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF23.dll, , [9ce13fe29bef90a6e301cab0d62da45c],
PUP.Optional.SettingsManager.A, C:\Users\doma\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF24.dll, , [9ce13fe29bef90a6e301cab0d62da45c],
PUP.Optional.SettingsManager.A, C:\Users\doma\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF25.dll, , [9ce13fe29bef90a6e301cab0d62da45c],
PUP.Optional.SettingsManager.A, C:\Users\doma\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF26.dll, , [9ce13fe29bef90a6e301cab0d62da45c],
PUP.Optional.SettingsManager.A, C:\Users\doma\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF27.dll, , [9ce13fe29bef90a6e301cab0d62da45c],
PUP.Optional.SettingsManager.A, C:\Users\doma\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF28.dll, , [9ce13fe29bef90a6e301cab0d62da45c],
PUP.Optional.SettingsManager.A, C:\Users\doma\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF29.dll, , [9ce13fe29bef90a6e301cab0d62da45c],
PUP.Optional.SettingsManager.A, C:\Users\doma\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF30.dll, , [9ce13fe29bef90a6e301cab0d62da45c],
PUP.Optional.SettingsManager.A, C:\Users\doma\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF31.dll, , [9ce13fe29bef90a6e301cab0d62da45c],
PUP.Optional.SettingsManager.A, C:\Users\doma\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF32.dll, , [9ce13fe29bef90a6e301cab0d62da45c],
PUP.Optional.SettingsManager.A, C:\Users\doma\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF4.dll, , [9ce13fe29bef90a6e301cab0d62da45c],
PUP.Optional.SettingsManager.A, C:\Users\doma\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF5.dll, , [9ce13fe29bef90a6e301cab0d62da45c],
PUP.Optional.SettingsManager.A, C:\Users\doma\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF6.dll, , [9ce13fe29bef90a6e301cab0d62da45c],
PUP.Optional.SettingsManager.A, C:\Users\doma\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF7.dll, , [9ce13fe29bef90a6e301cab0d62da45c],
PUP.Optional.SettingsManager.A, C:\Users\doma\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF8.dll, , [9ce13fe29bef90a6e301cab0d62da45c],
PUP.Optional.SettingsManager.A, C:\Users\doma\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\components\SmdmFHlpFF9.dll, , [9ce13fe29bef90a6e301cab0d62da45c],
PUP.Optional.SettingsManager.A, C:\Users\doma\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\content\DnsBHO.js, , [9ce13fe29bef90a6e301cab0d62da45c],
PUP.Optional.SettingsManager.A, C:\Users\doma\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\content\Error404BHO.js, , [9ce13fe29bef90a6e301cab0d62da45c],
PUP.Optional.SettingsManager.A, C:\Users\doma\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\content\MainBHO.js, , [9ce13fe29bef90a6e301cab0d62da45c],
PUP.Optional.SettingsManager.A, C:\Users\doma\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\content\NativeHelper.js, , [9ce13fe29bef90a6e301cab0d62da45c],
PUP.Optional.SettingsManager.A, C:\Users\doma\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\content\NewTabBHO.js, , [9ce13fe29bef90a6e301cab0d62da45c],
PUP.Optional.SettingsManager.A, C:\Users\doma\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\content\overlay.js, , [9ce13fe29bef90a6e301cab0d62da45c],
PUP.Optional.SettingsManager.A, C:\Users\doma\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\content\overlay.xul, , [9ce13fe29bef90a6e301cab0d62da45c],
PUP.Optional.SettingsManager.A, C:\Users\doma\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\content\RelatedSearch.js, , [9ce13fe29bef90a6e301cab0d62da45c],
PUP.Optional.SettingsManager.A, C:\Users\doma\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\content\RequestPreserver.js, , [9ce13fe29bef90a6e301cab0d62da45c],
PUP.Optional.SettingsManager.A, C:\Users\doma\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\content\SearchBHO.js, , [9ce13fe29bef90a6e301cab0d62da45c],
PUP.Optional.SettingsManager.A, C:\Users\doma\AppData\Roaming\FirefoxToolbar\Settings Manager\smdmf\content\SettingManager.js, , [9ce13fe29bef90a6e301cab0d62da45c],
PUP.Optional.UniDeals.A, C:\Program Files (x86)\UniDeals\KD20LHXg4Zk1pj.dat, , [ea933ce5b9d19d995f208bfa768d926e],
PUP.Optional.UniDeals.A, C:\Program Files (x86)\UniDeals\KD20LHXg4Zk1pj.tlb, , [ea933ce5b9d19d995f208bfa768d926e],
PUP.Optional.UniDeals.A, C:\Program Files (x86)\UniDeals\KD20LHXg4Zk1pj.x64.dll, , [ea933ce5b9d19d995f208bfa768d926e],
PUP.Optional.DefaultSearch, C:\Users\doma\AppData\Roaming\Mozilla\Firefox\Profiles\5uye4eqh.default\prefs.js, Dobré: (), Špatné: (user_pref("browser.search.defaultenginename", "default-search.net");), ,[17661f0231596bcb1e86ff0753b33bc5]
PUP.Optional.DefaultSearch, C:\Users\doma\AppData\Roaming\Mozilla\Firefox\Profiles\5uye4eqh.default\prefs.js, Dobré: (), Špatné: (user_pref("browser.search.selectedEngine", "default-search.net");), ,[0f6ec859d1b9e74fe7be040218ee9070]
PUP.Optional.DefaultSearch.A, C:\Users\doma\AppData\Roaming\Mozilla\Firefox\Profiles\5uye4eqh.default\prefs.js, Dobré: (), Špatné: (user_pref("keyword.URL", "http://www.default-search.net/search?sid=503&aid=100&itype=a&ver=15511&tm=554&src=ds&p=");), ,[6a1358c93d4d37ff900ee423b254b14f]

Fyzické sektory: 0
(Žádné zákerné zjištěny položek)


(end

[jaro3]

Spusť znovu AdwCleaner (u Windows Vista či Windows7, klikni na AdwCleaner pravým a vyber „Spustit jako správce“
klikni na „Prohledat-Scan“, po prohledání klikni na „ Vymazat-Clean“

Program provede opravu, po automatickém restartu neukáže log (C:\AdwCleaner [S?].txt) , jeho obsah sem celý vlož.

Stáhni si Junkware Removal Tool by Thisisu

na svojí plochu.

Deaktivuj si svůj antivirový program. Pravým tl. myši klikni na JRT.exe a vyber „spustit jako správce“. Pro pokračování budeš vyzván ke stisknutí jakékoliv klávesy. Na nějakou klikni.
Začne skenování programu. Skenování může trvat dloho , podle množství nákaz. Po ukončení skenu se objeví log (JRT.txt) , který se uloží na ploše.
Zkopíruj sem prosím celý jeho obsah.

. spusť znovu MbAM a dej Skenovat nyní
- po proběhnutí programu se ti objeví hláška tak klikni na „Vše do karantény(smazat vybrané)“ a na „Exportovat záznam“ a vyber „textový soubor“ , soubor nějak pojmenuj a někam ho ulož. Zkopíruj se celý obsah toho logu.

Stáhni si RogueKiller by Adlice Software
32bit.:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
64bit.:
http://www.sur-la-toile.com/RogueKiller ... lerX64.exe
na svojí plochu.
- Zavři všechny ostatní programy a prohlížeče.
- Pro OS Vista a win7 spusť program RogueKiller.exe jako správce , u XP poklepáním.
- počkej až skončí Prescan -vyhledávání škodlivých procesů.
- Zkontroluj , zda máš zaškrtnuto:
Kontrola MBR
Offline Reg
Antirootkit
-Potom klikni na „Prohledat“.
- Program skenuje procesy PC. Po proskenování klikni na „Zpráva“celý obsah logu sem zkopíruj.
Pokud je program blokován , zkus ho spustit několikrát. Pokud dále program nepůjde spustit a pracovat, přejmenuj ho na winlogon.exe.

[kesudj]

# AdwCleaner v4.111 - Logfile created 23/02/2015 at 11:57:42
# Updated 18/02/2015 by Xplode
# Database : 2015-02-18.3 [Server]
# Operating system : Windows 7 Ultimate Service Pack 1 (x64)
# Username : doma - DOMA-PC
# Running from : C:\Users\doma\Downloads\AdwCleaner.exe
# Option : Cleaning

***** [ Services ] *****

Service Deleted : F06DEFF2-5B9C-490D-910F-35D3A91196222
[#] Service Deleted : SmdmFService
[#] Service Deleted : ioloService

***** [ Files / Folders ] *****

[!] Folder Deleted : C:\ProgramData\smdmf
Folder Deleted : C:\ProgramData\wiebesavee
Folder Deleted : C:\ProgramData\7597452813637679732
Folder Deleted : C:\Program Files (x86)\SafePCRepair_89
Folder Deleted : C:\Program Files (x86)\Settings Manager
Folder Deleted : C:\Program Files (x86)\77zip
Folder Deleted : C:\Program Files (x86)\advanced system optimizer 3
[!] Folder Deleted : C:\Program Files (x86)\Assets Manager
Folder Deleted : C:\Program Files (x86)\wiebesavee
Folder Deleted : C:\Program Files (x86)\UniDaeAls
Folder Deleted : C:\Program Files (x86)\UniDeals
Folder Deleted : C:\Program Files (x86)\youtubeadblocker
Folder Deleted : C:\Users\doma\AppData\Local\torch
Folder Deleted : C:\Users\doma\AppData\Roaming\FirefoxToolbar
Folder Deleted : C:\Users\doma\AppData\Roaming\OpenCandy
Folder Deleted : C:\Users\doma\AppData\Roaming\SafePCRepair_89
Folder Deleted : C:\Users\doma\AppData\Roaming\Systweak
Folder Deleted : C:\Users\doma\AppData\Roaming\IHlpr
Folder Deleted : C:\Users\doma\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\77zip
Folder Deleted : C:\Users\doma\AppData\Roaming\Mozilla\Firefox\Profiles\5uye4eqh.default\Extensions\{ea614400-e918-4741-9a97-7a972ff7c30b}
Folder Deleted : C:\Users\doma\AppData\Roaming\Mozilla\Firefox\Profiles\5uye4eqh.default\Extensions\09KOLz@AI.org
Folder Deleted : C:\Users\doma\AppData\Roaming\Mozilla\Firefox\Profiles\5uye4eqh.default\Extensions\E@RC.net
File Deleted : C:\Users\doma\Desktop\77zip.lnk
File Deleted : C:\Users\doma\AppData\Roaming\Mozilla\Firefox\Profiles\5uye4eqh.default\invalidprefs.js
File Deleted : C:\Users\doma\AppData\Roaming\Mozilla\Firefox\Profiles\5uye4eqh.default\searchplugins\default-search.xml
File Deleted : C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\default-search.xml

***** [ Scheduled tasks ] *****

Task Deleted : BackgroundContainer Startup Task

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Classes\AppID\ioloToolService.exe
Key Deleted : HKLM\SOFTWARE\CLASSES\SafePCRepair_89.SettingsPlugin
Key Deleted : HKLM\SOFTWARE\CLASSES\SafePCRepair_89.SettingsPlugin.1
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT2504091
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{CFBE264C-912E-4DA5-B67B-790B27D6D338}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{DD1CFE82-CC89-497D-9573-B8B1867DDA09}
Key Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2503}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2503}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2503}
Key Deleted : HKCU\Software\Conduit
Key Deleted : HKCU\Software\RegisteredApplicationsEx
Key Deleted : HKCU\Software\SmdmF
Key Deleted : HKCU\Software\SafePCRepair_89
Key Deleted : HKCU\Software\AppDataLow\Toolbar
Key Deleted : HKCU\Software\AppDataLow\Software\BackgroundContainer
Key Deleted : HKCU\Software\AppDataLow\Software\Conduit
Key Deleted : HKCU\Software\AppDataLow\Software\ConduitSearchScopes
Key Deleted : HKCU\Software\AppDataLow\Software\Mindspark
Key Deleted : HKCU\Software\AppDataLow\Software\SafePCRepair_89
Key Deleted : HKLM\SOFTWARE\Conduit
Key Deleted : HKLM\SOFTWARE\SmdmF
Key Deleted : HKLM\SOFTWARE\SafePCRepair_89
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{4820778D-AB0D-6D18-C316-52A6A0E1D507}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Settings Manager
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\77zip
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SafePCRepair_89bar Uninstall Firefox
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{11F6D5AB-263F-388E-74DE-E3DECD390E3F}

***** [ Web browsers ] *****

-\\ Internet Explorer v11.0.9600.17631


-\\ Mozilla Firefox v26.0 (cs)

[5uye4eqh.default\prefs.js] - Line Deleted : user_pref("browser.search.defaultenginename", "default-search.net");
[5uye4eqh.default\prefs.js] - Line Deleted : user_pref("browser.search.order.1", "default-search.net");
[5uye4eqh.default\prefs.js] - Line Deleted : user_pref("browser.search.selectedEngine", "default-search.net");
[5uye4eqh.default\prefs.js] - Line Deleted : user_pref("keyword.URL", "hxxp://www.default-search.net/search?sid=503&aid=100&itype=a&ver=15511&tm=554&src=ds&p=");

-\\ Google Chrome v


-\\ Chrome Canary v


*************************

AdwCleaner[R1].txt - [5738 bytes] - [23/02/2015 11:53:55]
AdwCleaner[S0].txt - [5110 bytes] - [23/02/2015 11:57:42]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [5169 bytes] ##########


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.4.2 (02.02.2015:1)
OS: Windows 7 Ultimate x64
Ran by doma on po 23.02.2015 at 12:17:25,86
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\SafePCRepair_89.FeedManager
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\SafePCRepair_89.FeedManager.1
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\SafePCRepair_89.HTMLMenu
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\SafePCRepair_89.HTMLMenu.1
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\SafePCRepair_89.HTMLPanel
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\SafePCRepair_89.HTMLPanel.1
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\SafePCRepair_89.MultipleButton
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\SafePCRepair_89.MultipleButton.1
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\SafePCRepair_89.PseudoTransparentPlugin
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\SafePCRepair_89.PseudoTransparentPlugin.1
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\SafePCRepair_89.ScriptButton
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\SafePCRepair_89.ScriptButton.1
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\SafePCRepair_89.ThirdPartyInstaller
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\SafePCRepair_89.ThirdPartyInstaller.1
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\SafePCRepair_89.ToolbarProtector
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\SafePCRepair_89.ToolbarProtector.1



~~~ Files

Successfully deleted: [File] C:\Windows\prefetch\GOOGLETOOLBARUSER_32.EXE-34B1B1C5.pf



~~~ Folders

Successfully deleted: [Folder] "C:\Users\doma\appdata\locallow\datamngr"



~~~ FireFox

Successfully deleted the following from C:\Users\doma\AppData\Roaming\mozilla\firefox\profiles\5uye4eqh.default\prefs.js

user_pref("extensions.3MpTnFbTaw6JxKyM.url", "hxxp://jobboxcenterdriver.info/sync/?q=C6qUojn4pjwFqjw7rHwGqda8qTU8qdkMAyVUojw7rTrErTr8qjsEpdk9qdkHrjrFtNtVh7n0rjkErTsGrjrHqHw9tN
user_pref("extensions.foxcub.config.encodedConfig", "{\"core\":{\"configUrl\":\"hxxp://download.seznam.cz/software/conf/\",\"updateUrl\":\"hxxp://download.seznam.cz/software/c
Emptied folder: C:\Users\doma\AppData\Roaming\mozilla\firefox\profiles\5uye4eqh.default\minidumps [7 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on po 23.02.2015 at 12:24:48,87
End of JRT log


Malwarebytes Anti-Malware
www.malwarebytes.org

Datum skenování: 23.2.2015
Čas skenování: 12:28:35
Protokol: MBAM.txt
Správce: Ano

Verze: 2.00.4.1028
Databáze malwaru: v2015.02.23.03
Databáze rootkitů: v2015.02.22.01
Licence: Bezplatná verze
Ochrana proti malwaru: Vypnuto
Ochrana proti škodlivým webovým stránkám: Vypnuto
Sebeobrany: Vypnuto

OS: Windows 7 Service Pack 1
CPU: x64
Souborový systém: NTFS
Uživatel: doma

Typ skenu: Sken hrozeb
Výsledek: Dokončeno
Prohledaných objektů: 376177
Uplynulý čas: 22 min, 19 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Vypnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto

Procesy: 1
PUP.Optional.MultiPlug, C:\ProgramData\{d5e28e25-36ca-1754-d5e2-28e2536c3894}\Scorpions - Return to Forever [Deluxe Edition] (2015) (1).exe, 2184, Smazat při restartu, [f1ee78a98208c274afc3e244df239070]

Moduly: 0
(Žádné zákerné zjištěny položek)

Klíče registru: 1
PUP.Optional.SettingsManager.A, HKLM\SOFTWARE\WOW6432NODE\SmdmF, Do karantény, [f2ed859cbecc52e480946352aa59e719],

Hodnoty registru: 0
(Žádné zákerné zjištěny položek)

Data registru: 0
(Žádné zákerné zjištěny položek)

Složky: 0
(Žádné zákerné zjištěny položek)

Soubory: 1
PUP.Optional.MultiPlug, C:\ProgramData\{d5e28e25-36ca-1754-d5e2-28e2536c3894}\Scorpions - Return to Forever [Deluxe Edition] (2015) (1).exe, Smazat při restartu, [f1ee78a98208c274afc3e244df239070],

Fyzické sektory: 0
(Žádné zákerné zjištěny položek)


(end)

ještě udělám ten Roguekiller

[kesudj]

RogueKiller V10.4.2.0 (x64) [Feb 23 2015] by Adlice Software
mail : http://www.adlice.com/contact/
Feedback : http://forum.adlice.com
Webová stránka : http://www.adlice.com/softwares/roguekiller/
Blog : http://www.adlice.com

Operační systém : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Spuštěno : Normální režim
Uživatel : doma [Práva správce]
Mód : Prohledat -- Datum : 02/23/2015 13:04:48

¤¤¤ Procesy : 1 ¤¤¤
[Suspicious.Path] Scorpions - Return to Forever [Deluxe Edition] (2015) (1).exe(2184) -- C:\ProgramData\{d5e28e25-36ca-1754-d5e2-28e2536c3894}\Scorpions - Return to Forever [Deluxe Edition] (2015) (1).exe[7] -> Zastaveno [TermProc]

¤¤¤ Registry : 5 ¤¤¤
[Suspicious.Path] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce | Malwarebytes Anti-Malware (cleanup) : "C:\ProgramData\Malwarebytes\Malwarebytes Anti-Malware\mbamdor.exe" "C:\ProgramData\Malwarebytes\Malwarebytes Anti-Malware" -> Nalezeno
[Hidden.From.SCM] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\blngjiks (System32\drivers\nqwk.sys) -> Nalezeno
[Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\System\ControlSet002\Services\BFE (.) -> Nalezeno
[PUM.HomePage] (X64) HKEY_USERS\S-1-5-21-1903781126-3492851964-680616090-1001\Software\Microsoft\Internet Explorer\Main | Start Page : http://www.seznam.cz/ -> Nalezeno
[PUM.HomePage] (X86) HKEY_USERS\S-1-5-21-1903781126-3492851964-680616090-1001\Software\Microsoft\Internet Explorer\Main | Start Page : http://www.seznam.cz/ -> Nalezeno

¤¤¤ Úlohy : 0 ¤¤¤

¤¤¤ Soubory : 1 ¤¤¤
[Suspicious.Path][Soubor] Scorpions - Return to Forever [Deluxe Edition] (2015) (1).lnk -- C:\Users\doma\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Scorpions - Return to Forever [Deluxe Edition] (2015) (1).lnk [LNK@] C:\PROGRA~3\{D5E28~1\SCORPI~1.EXE --startup=1 -> Nalezeno

¤¤¤ Soubor HOSTS : 1 ¤¤¤
[C:\Windows\System32\drivers\etc\hosts] 127.0.0.1 localhost

¤¤¤ Antirootkit : 0 (Driver: Nahrán) ¤¤¤

¤¤¤ Webové prohlížeče : 1 ¤¤¤
[PUM.HomePage][FIREFX:Config] 5uye4eqh.default : user_pref("browser.startup.homepage", "http://www.seznam.cz/"); -> Nalezeno

¤¤¤ Kontrola MBR : ¤¤¤
+++++ PhysicalDrive0: WDC WD2500BEVS-26UST0 ATA Device +++++
--- User ---
[MBR] 9047451fc88ee44fdc4c9fa6a02603c0
[BSP] b44d1e7b92a1d6040ff244c40fed5c3e : Windows Vista/7/8 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 100 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
1 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 206848 | Size: 238373 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
User = LL1 ... OK
User = LL2 ... OK

+++++ PhysicalDrive1: Generic- Multi-Card USB Device +++++
Error reading User MBR! ([15] Za?ízení není p?ipraveno. )
Error reading LL1 MBR! NOT VALID!
Error reading LL2 MBR! ([32] Po?adavek není podporován. )


============================================
RKreport_DEL_11022014_131157.log - RKreport_SCN_10302014_195508.log - RKreport_SCN_11022014_130929.log

[jaro3]

Zavři všechny programy a prohlížeče. Deaktivuj antivir a firewall.
Prosím, odpoj všechny USB (kromě myši s klávesnice) nebo externí disky z počítače před spuštěním tohoto programu.
Spusť znovu RogueKiller ( Pro Windows Vista nebo Windows 7, klepni pravým a vyber "Spustit jako správce", ve Windows XP poklepej ke spuštění).
- Počkej, až Prescan dokončí práci...
- Pak klikni na "Prohledat " ,po jeho skončení:


- V záložkách (Registry , Tasks , Web Browser apod.) vše zatrhni (dej zatržítka)
(musíš dát myší zatržítko do toho čtverečku vlevo od registru ap.)

- Klikni na "Smazat"
- Počkej, dokud Status box nezobrazí " Mazání dokončeno "
- Klikni na "Zpráva " a zkopíruj a vlož obsah té zprávy prosím sem. Log je možno nalézt v RKreport [číslo]. txt na ploše.
- Zavři RogueKiller

Vypni antivir
Stáhni
Zoek.exe

a uloz si ho na plochu.
Zavři všechny ostatní programy , okna i prohlížeče.
Spusť Zoek.exe ( u win vista , win7, 8 klikni na něj pravým a vyber : „Spustit jako správce“
- pozor , náběh programu může trvat déle.

Do okna programu vlož skript níže:

Kód: Vybrat vše

autoclean;
emptyclsid;
iedefaults;
FFdefaults;
CHRdefaults;
emptyalltemp;
resethosts;

klikni na Run Script
Program provede sken , opravu, sken i oprava může trvat i více minut ,je třeba posečkat do konce. Do okna neklikej!
Program nabídne restart , potvrď .

Po restartu se může nějaký čas ukázat pouze černá plocha , to je normální. Je třeba počkat až se vytvoří log. Ten si můžeš uložit třeba do dokumentů , jinak se sám ukládá do:
C:\zoek-results.log
Zkopíruj sem celý obsah toho logu.

[kesudj]

RogueKiller V10.4.2.0 (x64) [Feb 23 2015] by Adlice Software
mail : http://www.adlice.com/contact/
Feedback : http://forum.adlice.com
Webová stránka : http://www.adlice.com/softwares/roguekiller/
Blog : http://www.adlice.com

Operační systém : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Spuštěno : Normální režim
Uživatel : doma [Práva správce]
Mód : Smazat -- Datum : 02/24/2015 11:39:24

¤¤¤ Procesy : 0 ¤¤¤

¤¤¤ Registry : 3 ¤¤¤
[Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\System\ControlSet002\Services\BFE (.) -> Nevybráno
[PUM.HomePage] (X64) HKEY_USERS\S-1-5-21-1903781126-3492851964-680616090-1001\Software\Microsoft\Internet Explorer\Main | Start Page : http://www.seznam.cz/ -> Nevybráno
[PUM.HomePage] (X86) HKEY_USERS\S-1-5-21-1903781126-3492851964-680616090-1001\Software\Microsoft\Internet Explorer\Main | Start Page : http://www.seznam.cz/ -> Nevybráno

¤¤¤ Úlohy : 0 ¤¤¤

¤¤¤ Soubory : 1 ¤¤¤
[Suspicious.Path][Soubor] Scorpions - Return to Forever [Deluxe Edition] (2015) (1).lnk -- C:\Users\doma\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Scorpions - Return to Forever [Deluxe Edition] (2015) (1).lnk [LNK@] C:\ProgramData\{d5e28e25-36ca-1754-d5e2-28e2536c3894}\Scorpions - Return to Forever [Deluxe Edition] (2015) (1).exe --startup=1 -> Odstraněno při restartu [2]

¤¤¤ Soubor HOSTS : 1 ¤¤¤
[C:\Windows\System32\drivers\etc\hosts] 127.0.0.1 localhost

¤¤¤ Antirootkit : 0 (Driver: Nahrán) ¤¤¤

¤¤¤ Webové prohlížeče : 1 ¤¤¤
[PUM.HomePage][FIREFX:Config] 5uye4eqh.default : user_pref("browser.startup.homepage", "http://www.seznam.cz/"); -> Nevybráno

¤¤¤ Kontrola MBR : ¤¤¤
+++++ PhysicalDrive0: WDC WD2500BEVS-26UST0 ATA Device +++++
--- User ---
[MBR] 9047451fc88ee44fdc4c9fa6a02603c0
[BSP] b44d1e7b92a1d6040ff244c40fed5c3e : Windows Vista/7/8 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 100 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
1 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 206848 | Size: 238373 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
User = LL1 ... OK
User = LL2 ... OK

+++++ PhysicalDrive1: Generic- Multi-Card USB Device +++++
Error reading User MBR! ([15] Za?ízení není p?ipraveno. )
Error reading LL1 MBR! NOT VALID!
Error reading LL2 MBR! ([32] Po?adavek není podporován. )


============================================
RKreport_DEL_11022014_131157.log - RKreport_SCN_02232015_130448.log - RKreport_SCN_10302014_195508.log - RKreport_SCN_11022014_130929.log
RKreport_SCN_02242015_113725.log - RKreport_DEL_02242015_113805.log - RKreport_DEL_02242015_113914.log



Zoek.exe v5.0.0.0 Updated 23-February-2015
Tool run by doma on Łt 24.02.2015 at 11:45:11,07.
Microsoft Windows 7 Ultimate 6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\doma\Downloads\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

24.2.2015 11:47:19 Zoek.exe System Restore Point Created Succesfully.

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

# localhost name resolution is handle within DNS itself.
127.0.0.1 localhost
::1 localhost

==== Empty Folders Check ======================

C:\PROGRA~2\Fenrir Inc deleted successfully
C:\PROGRA~2\MSXML 4.0 deleted successfully
C:\PROGRA~2\Telltale Games deleted successfully
C:\PROGRA~3\Oracle deleted successfully

==== Deleting CLSID Registry Keys ======================


==== Deleting CLSID Registry Values ======================


==== Deleting Services ======================


==== FireFox Fix ======================

Deleted from C:\Users\doma\AppData\Roaming\Mozilla\Firefox\Profiles\5uye4eqh.default\prefs.js:
user_pref("browser.startup.homepage", "http://www.seznam.cz/");
user_pref("browser.search.defaulturl", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.newtab.url", "http://www.google.com/");
user_pref("browser.search.defaultengine", "Google");
user_pref("browser.search.useDBForOrder", true);

Added to C:\Users\doma\AppData\Roaming\Mozilla\Firefox\Profiles\5uye4eqh.default\prefs.js:
user_pref("browser.startup.homepage", "about:home");
user_pref("browser.newtab.url", "about:newtab");

ProfilePath: C:\Users\doma\AppData\Roaming\Mozilla\Firefox\Profiles\5uye4eqh.default

user.js not found
---- Lines extensions.3MpTnFbTaw6JxKyM removed from prefs.js ----
user_pref("extensions.3MpTnFbTaw6JxKyM.epoch", "1");
user_pref("extensions.3MpTnFbTaw6JxKyM.scode", "void(0);");
---- Lines extensions.kTd1Csgu4RwywzmF removed from prefs.js ----
user_pref("extensions.kTd1Csgu4RwywzmF.epoch", "1");
user_pref("extensions.kTd1Csgu4RwywzmF.scode", "void(0);");
user_pref("extensions.kTd1Csgu4RwywzmF.url", "http://filehelper.co.il/sync/?q=C6qUojn4pjwFqjw7rHwGqda8qTU8qdkMAyVUojw7rTrErTr8qjsEpdk9qdkHrjrFtNtVh7n0
---- FireFox user.js and prefs.js backups ----

prefs_24.02.2015_1205_.backup

==== Deleting Files \ Folders ======================

C:\PROGRA~2\Fenrir Inc not found
C:\PROGRA~2\MSXML 4.0 not found
C:\PROGRA~2\Telltale Games not found
C:\PROGRA~2\Temp deleted
C:\PROGRA~2\Uninstall Information deleted
C:\PROGRA~3\{d5e28e25-36ca-1754-d5e2-28e2536c3894} deleted
C:\found.000 deleted
C:\Windows\SysNative\config\systemprofile\Searches deleted

==== Firefox Start and Search pages ======================

ProfilePath: C:\Users\doma\AppData\Roaming\Mozilla\Firefox\Profiles\5uye4eqh.default
user_pref("browser.startup.homepage", "about:home");
user_pref("browser.newtab.url", "about:newtab");

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]
"wrc@avast.com"="C:\Program Files\AVAST Software\Avast\WebRep\FF" [02.02.2015 15:29]

==== Firefox Extensions ======================

AppDir: C:\Program Files (x86)\Mozilla Firefox
- Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

==== Firefox Plugins ======================

Profilepath: C:\Users\doma\AppData\Roaming\Mozilla\Firefox\Profiles\5uye4eqh.default
C62322C77D1AAB77B1CF1130FCC3673A - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll - Shockwave Flash


==== Fake Chromium Profiles Check ======================

Fake profile C:\Users\doma\AppData\Local\Google\Chrome deleted
Fake profile C:\Users\doma\AppData\Local\Google\Chrome SxS deleted

==== Chromium Look ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
gomekmidlodglbbmalcneegieacbdmki - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx[16.01.2015 14:36]

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.seznam.cz/"

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.seznam.cz/"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
{012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC"

==== Reset Google Chrome ======================

Nothing found to reset

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\Software\wow6432node\Policies\Google deleted successfully

==== Empty IE Cache ======================

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\doma\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\doma\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

==== Empty FireFox Cache ======================

C:\Users\doma\AppData\Local\Mozilla\Firefox\Profiles\5uye4eqh.default\Cache emptied successfully

==== Empty Chrome Cache ======================

No Chrome Cache found

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

No Java Cache Found

==== C:\zoek_backup content ======================

C:\zoek_backup (files=11 folders=5 4340080 bytes)

==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local\temp emptied successfully
C:\Users\Default User\AppData\Local\temp emptied successfully
C:\Users\doma\AppData\Local\Temp will be emptied at reboot
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied
C:\Users\doma\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== EOF on Łt 24.02.2015 at 12:13:44,21 =====================

[Orcus]

RogueKiller znovu podle návodu od jara. Neoznačil si všechny položky.

[kesudj]

nepochopil jsem ,že musím odkliknout tu záložku jednu po druhé a v každé dát zatržítka, tak snad ted to bude správně...


RogueKiller V10.4.2.0 (x64) [Feb 23 2015] by Adlice Software
mail : http://www.adlice.com/contact/
Feedback : http://forum.adlice.com
Webová stránka : http://www.adlice.com/softwares/roguekiller/
Blog : http://www.adlice.com

Operační systém : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Spuštěno : Normální režim
Uživatel : doma [Práva správce]
Mód : Smazat -- Datum : 02/24/2015 16:47:42

¤¤¤ Procesy : 0 ¤¤¤

¤¤¤ Registry : 3 ¤¤¤
[Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\System\ControlSet002\Services\BFE (.) -> ERROR [5]
[PUM.HomePage] (X64) HKEY_USERS\S-1-5-21-1903781126-3492851964-680616090-1001\Software\Microsoft\Internet Explorer\Main | Start Page : http://www.seznam.cz/ -> Nahrazeno (http://go.microsoft.com/fwlink/p/?LinkId=255141)
[PUM.HomePage] (X86) HKEY_USERS\S-1-5-21-1903781126-3492851964-680616090-1001\Software\Microsoft\Internet Explorer\Main | Start Page : http://www.seznam.cz/ -> Nahrazeno (http://go.microsoft.com/fwlink/p/?LinkId=255141)

¤¤¤ Úlohy : 0 ¤¤¤

¤¤¤ Soubory : 0 ¤¤¤

¤¤¤ Soubor HOSTS : 2 ¤¤¤
[C:\Windows\System32\drivers\etc\hosts] 127.0.0.1 localhost -> Smazáno
[C:\Windows\System32\drivers\etc\hosts] ::1 localhost -> Smazáno

¤¤¤ Antirootkit : 0 (Driver: Nahrán) ¤¤¤

¤¤¤ Webové prohlížeče : 5 ¤¤¤
[IE:Addon] System : Google Toolbar [{2318C2B1-4965-11d4-9B18-009027A5CD4F}] -> Smazáno
[FIREFX:Addon] 5uye4eqh.default : Seznam lištička [{ea614400-e918-4741-9a97-7a972ff7c30b}] -> Smazáno
[FIREFX:Addon] 5uye4eqh.default : UniDaeAls [E@RC.net] -> Smazáno
[FIREFX:Addon] 5uye4eqh.default : youtubeadblocker [09KOLz@AI.org] -> Smazáno
[FIREFX:Addon] 5uye4eqh.default : Avast Online Security [wrc@avast.com] -> Smazáno

¤¤¤ Kontrola MBR : ¤¤¤
+++++ PhysicalDrive0: WDC WD2500BEVS-26UST0 ATA Device +++++
--- User ---
[MBR] 9047451fc88ee44fdc4c9fa6a02603c0
[BSP] b44d1e7b92a1d6040ff244c40fed5c3e : Windows Vista/7/8 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 100 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
1 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 206848 | Size: 238373 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
User = LL1 ... OK
User = LL2 ... OK

+++++ PhysicalDrive1: Generic- Multi-Card USB Device +++++
Error reading User MBR! ([15] Za?ízení není p?ipraveno. )
Error reading LL1 MBR! NOT VALID!
Error reading LL2 MBR! ([32] Po?adavek není podporován. )


============================================
RKreport_DEL_02242015_113805.log - RKreport_DEL_02242015_113914.log - RKreport_DEL_02242015_113924.log - RKreport_DEL_11022014_131157.log
RKreport_SCN_02232015_130448.log - RKreport_SCN_02242015_113725.log - RKreport_SCN_10302014_195508.log - RKreport_SCN_11022014_130929.log
RKreport_SCN_02242015_164530.log

[jaro3]

Vlož nový log z HJT + informuj o problémech.

[kesudj]

ve firefoxu ,přestaly okna avastu o zablokování oken vyskakovat ,tak to vypadá že je vše v pohodě


Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:05:56, on 24.2.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17631)

FIREFOX: 35.0.1 (x86 cs)
Boot mode: Normal

Running processes:
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files (x86)\ScanSoft\OmniPageSE4\OpWareSE4.exe
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbarUser_32.exe
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Users\doma\Downloads\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId= ... kId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files (x86)\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
O4 - HKLM\..\Run: [OpwareSE4] "C:\Program Files (x86)\ScanSoft\OmniPageSE4\OpwareSE4.exe"
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - Startup: AutorunsDisabled
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files (x86)\Microsoft Office\Office\OSA9.EXE
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 6476 bytes