kontrola logu

[Wrozer]

strejda mi doporučil tuto akci provést pro zrychlení pc (plný harddisk, seká se, nepotřebné programy..)
PROSÍM O KONTROLU LOGU

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:09:18, on 14.3.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17689)

FIREFOX: 6.0.2 (cs)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Norton Internet Security\Engine\19.9.1.14\ccSvcHst.exe
C:\Program Files (x86)\Uniblue\DriverScanner\dsmonitor.exe
C:\Program Files (x86)\IObit\Advanced SystemCare 6\Monitor.exe
C:\Program Files (x86)\Smart Driver Updater\SDUTray.exe
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files (x86)\Benzul\Activator\ascwx.exe
C:\Program Files (x86)\Elex-tech\YAC\iSafeTray.exe
C:\Users\Jirka\AppData\Roaming\Genieo\Application\Updater\bin\genupdater.exe
C:\Users\Jirka\AppData\Roaming\Genieo\Application\TrayUi\bin\gentray.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\Java\jre7\bin\javaw.exe
C:\Users\Jirka\AppData\Local\FilesFrog Update Checker\update_checker.exe
C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASC.exe
C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCTray.exe
C:\Program Files (x86)\Opera\28.0.1750.40\opera.exe
C:\Program Files (x86)\Opera\28.0.1750.40\opera_crashreporter.exe
C:\Program Files (x86)\Opera\28.0.1750.40\opera.exe
C:\Program Files (x86)\Opera\28.0.1750.40\opera.exe
C:\Program Files (x86)\Opera\28.0.1750.40\opera.exe
C:\Program Files (x86)\Opera\28.0.1750.40\opera.exe
C:\Program Files (x86)\Opera\28.0.1750.40\opera.exe
C:\Program Files (x86)\Smart PC Cleaner\SPCSmartScan.exe
C:\Program Files (x86)\TeamViewer\TeamViewer.exe
C:\Program Files (x86)\Opera\28.0.1750.40\opera.exe
C:\Program Files (x86)\Opera\28.0.1750.40\opera.exe
C:\Users\Jirka\Downloads\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.delta-homes.com/?type=hp&ts= ... 9921999219
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.delta-homes.com/web/?type ... 1999219&q={searchTerms}
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.seznam.cz/?clid=22668
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.delta-homes.com/web/?type ... 1999219&q={searchTerms}
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.gboxapp.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.delta-homes.com/?type=hp&ts= ... 9921999219
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.delta-homes.com/web/?type ... 1999219&q={searchTerms}
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.seznam.cz/?clid=22668
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.delta-homes.com/web/?type ... 1999219&q={searchTerms}
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.gboxapp.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=;ftp=;https=;
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {03EB0E9C-7A91-4381-A220-9B52B641CDB1} - (no file)
R3 - URLSearchHook: (no name) - {00000000-6E41-4FD3-8538-502F5495E5FC} - (no file)
R3 - URLSearchHook: UsProvider Class - {539F76FD-084E-4858-86D5-62F02F54AE86} - C:\Program Files (x86)\Minibar\Minibar.dll
F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe
O2 - BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\19.9.1.14\coIEPlg.dll
O2 - BHO: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\19.9.1.14\IPS\IPSBHO.DLL
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~4\Office14\URLREDIR.DLL
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [AdobeCS5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [AdobeCS6ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [Lightshot] C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe
O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
O4 - HKCU\..\Run: [Realtek Audio Manager] "C:\ProgramData\Realtek0\iuznffnsd.exe"
O4 - HKCU\..\Run: [HKCU] C:\Users\Jirka\AppData\Roaming\Win32\notepad.exe
O4 - HKCU\..\Run: [uTorrent] "C:\Users\Jirka\AppData\Roaming\uTorrent\utorrent.exe" /MINIMIZED
O4 - HKCU\..\Run: [Raptr] C:\PROGRA~2\Raptr\raptrstub.exe --startup
O4 - HKCU\..\Run: [PCSpeedUp] C:\Program Files (x86)\Zrychleni Pocitace\PCSUNotifier.exe
O4 - HKCU\..\Run: [Benzul Activator] "C:\Program Files (x86)\Benzul\Activator\ascwx.exe" -tray
O4 - HKCU\..\Run: [GenieoUpdaterService] "C:\Users\Jirka\AppData\Roaming\Genieo\Application\Updater\bin\genupdater.exe" -wait 5
O4 - HKCU\..\Run: [GenieoSystemTray] "C:\Users\Jirka\AppData\Roaming\Genieo\Application\TrayUi\bin\gentray.exe"
O4 - HKCU\..\RunOnce: [FlashPlayerUpdate] C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_16_0_0_305_Plugin.exe -update plugin
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [Exetender] "C:\Program Files (x86)\Free Ride Games\GPlayer.exe" /runonstartup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [Samsung.PCSync] "C:\Program Files (x86)\Samsung\Samsung PC Studio 7\PcSync2.exe" /NoDialog (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Samsung.PCSync] "C:\Program Files (x86)\Samsung\Samsung PC Studio 7\PcSync2.exe" /NoDialog (User 'Default user')
O8 - Extra context menu item: &Download with &DAP - C:\Program Files (x86)\DAP\dapextie.htm
O8 - Extra context menu item: &Verify with DAP - C:\Program Files (x86)\DAP\dapverify.htm
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: Download &all with DAP - C:\Program Files (x86)\DAP\dapextie2.htm
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~4\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~2\MICROS~4\Office14\ONBttnIE.dll/105
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: Visit AppsHat.com - {AAA38851-3CFF-475F-B5E0-720D3645E4A5} - C:\Program Files (x86)\Minibar\Minibar.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\youtube accelerator\ytalsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\youtube accelerator\ytalsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\youtube accelerator\ytalsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\youtube accelerator\ytalsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\youtube accelerator\ytalsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\youtube accelerator\ytalsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\youtube accelerator\ytalsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\youtube accelerator\ytalsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\youtube accelerator\ytalsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\youtube accelerator\ytalsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\youtube accelerator\ytalsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: *.clonewarsadventures.com
O15 - Trusted Zone: *.freerealms.com
O15 - Trusted Zone: *.soe.com
O15 - Trusted Zone: *.sony.com
O16 - DPF: {6A060448-60F9-11D5-A6CD-0002B31F7455} (ExentInf Class) -
O16 - DPF: {C8BC46C7-921C-4102-B67D-F1F7E65FB0BE} (Battlefield Play4Free Updater) - https://battlefield.play4free.com/stati ... 0.96.0.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O20 - AppInit_DLLs: c:\progra~2\optimi~1\optpro~1.dll c:\progra~2\sk-enh~1\psupport.dll c:\progra~2\sshelp~1\psupport.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Advanced SystemCare Service 6 (AdvancedSystemCareService6) - IObit - C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AppleChargerSrv - Unknown owner - C:\Windows\system32\AppleChargerSrv.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Computer Backup (MyPC Backup) (BackupStack) - Just Develop It - C:\Program Files (x86)\MyPC Backup\BackupStack.exe
O23 - Service: BitRaider Mini-Support Service (BRSptSvc) - BitRaider, LLC - C:\ProgramData\BitRaider\BRSptSvc.exe
O23 - Service: BlueStacks Android Service (BstHdAndroidSvc) - BlueStack Systems, Inc. - C:\Program Files (x86)\BlueStacks\HD-Service.exe
O23 - Service: BlueStacks Log Rotator Service (BstHdLogRotatorSvc) - BlueStack Systems, Inc. - C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
O23 - Service: BlueStacks Updater Service (BstHdUpdaterSvc) - BlueStack Systems, Inc. - C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe
O23 - Service: DefaultTabUpdate - Unknown owner - C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\defaulttab\defaulttab\dtupdate.exe
O23 - Service: EasyAntiCheat - EasyAntiCheat Ltd - C:\Windows\system32\EasyAntiCheat.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Flexera Software, Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: Hi-Rez Studios Authenticate and Update Service (HiPatchService) - Hi-Rez Studios - C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe
O23 - Service: Intel(R) Integrated Clock Controller Service - Intel(R) ICCS (ICCS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: IePlugin Services (IePluginServices) - Cherished Technololgy LIMITED - C:\ProgramData\IePluginServices\PluginService.exe
O23 - Service: Canon Inkjet Printer/Scanner/Fax Extended Survey Program (IJPLMSVC) - Unknown owner - C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE
O23 - Service: YAC Service (iSafeService) - Elex do Brasil Participaçoes Ltda - C:\Program Files (x86)\Elex-tech\YAC\iSafeSvc.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: LMIGuardianSvc - LogMeIn, Inc. - C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Norton Internet Security (NIS) - Symantec Corporation - C:\Program Files (x86)\Norton Internet Security\Engine\19.9.1.14\ccSvcHst.exe
O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\Windows\system32\GameMon.des.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: Internet Pass-Through Service (PassThru Service) - Unknown owner - C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
O23 - Service: PC Speed Up Service (PCSUService) - Unknown owner - C:\Program Files (x86)\Zrychleni Pocitace\PCSUService.exe
O23 - Service: PDF Architect Helper Service - pdfforge GmbH - C:\Program Files (x86)\PDF Architect\HelperService.exe
O23 - Service: PDF Architect Service - pdfforge GmbH - C:\Program Files (x86)\PDF Architect\ConversionService.exe
O23 - Service: PinnacleUpdate Service (PinnacleUpdateSvc) - PowerUp Software, LLC - C:\Program Files (x86)\PowerUp Software\Pinnacle Game Profiler\pinnacle_updater.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Reimage Real Time Protector (ReimageRealTimeProtector) - Reimage® - C:\Program Files\Reimage\Reimage Protector\ReiGuard.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: SMART Helper Service (SMARTHelperService) - SMART Technologies - C:\Program Files (x86)\SMART Technologies\Education Software\SMARTHelperService.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: TeamViewer 10 (TeamViewer) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
O23 - Service: AVG PC TuneUp Service (TuneUp.UtilitiesSvc) - AVG - C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe
O23 - Service: TunngleService - Tunngle.net GmbH - C:\Program Files (x86)\Tunngle\TnglCtrl.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: WinZiper service (winzipersvc) - Taiwan Shui Mu Chih Ching Technology Limited. - C:\Program Files (x86)\WinZipper\winzipersvc.exe
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: YouTubeAcceleratorService - GOOBZO - C:\PROGRA~2\YOUTUB~2\YouTubeAcceleratorService.exe

--
End of file - 19063 bytes

[Reklama]

[Orcus]

Uvolni místo na disku.

===================================================

Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected. Poté klikni na Main (hlavní stránku ) a klikni na Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranění historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit dočasné soubory Windows, vysypat koš atd.

- Pokud používáš jen Google Chrome , tak ATF nemusíš použít.

===================================================

Stáhni si TFC
Otevři soubor a zavři všechny ostatní okna, Klikni na Start k zahájení procesu. Program by neměl trvat dlouho.
Poté by se měl PC restartovat, pokud ne , proveď sám.

===================================================

Stáhni AdwCleaner (by Xplode)

Ulož si ho na svojí plochu
Ukonči všechny programy , okna a prohlížeče
Spusť program poklepáním a klikni na „Prohledat-Scan“
Po skenu se objeví log ( jinak je uložen systémovem disku jako AdwCleaner[R?].txt), jeho obsah sem celý vlož.

===================================================

Stáhni si Malwarebytes' Anti-Malware
- Při instalaci odeber zatržítko u „Povolit bezplatnou zkušební verzi Malwarebytes' Anti-Malware Premium“
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Aktualizace Malwarebytes' Anti-Malware a Spustit aplikaci Malwarebytes' Anti-Malware, pokud jo tak klikni na tlačítko konec
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a klikni na Skenovat nyní a
- po proběhnutí programu se ti objeví hláška vpravo dole tak klikni na b] Kopírovat do schránky [/b]a a vlož sem celý log.

- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).

Pokud budou problémy , spusť v nouz. režimu.

[Wrozer]

Prosim o co nejrychlejsi odpoved!!!!! Vcera jsem provedl 3/4 akci výš uvedené a vypnul jsem pc, dnes ho zapnu a nefunguje internet, jak ho zprovoznim? :( jinak wifi A vsechno doma v pohode jenom na pc ne[anchor][/anchor]

[jaro3]

Odinstaluj:
Advanced SystemCare 6
Minibar
AVG PC TuneUp
Norton Internet Security nebo Avast


Zkouščel si víckrát restartovat PC?

[Wrozer]

Potrebuji pomoc a ti s tim ze mi nejde odstranit zadny antivirus... Co s tim, jak ? :(

[jaro3]

Zkus to v nouz. režimu.

[Orcus]

Provedl jsi 3/4 akcí, ale logy nedodal. Potom potřebujem křišťálovou kouli, abychom věděli, co programy dělaly.

https://www.avast.com/cs-cz/uninstall-utility
https://support.norton.com/sp/cs/cz/hom ... file_en_us

[Wrozer]

Jinak dodavam teda logy radsi znovu z hijacku i adw cleaneru, jen chci podotknout ze pri minulem scaanovanji v adw jsem dal CLEANING, a jeste ze normalne mi to we windowsech ukazuje ze jsem pripojen a nenajde problema win aktualizace se stahuji...

[Wrozer]

# AdwCleaner v4.112 - Logfile created 21/03/2015 at 15:24:07
# Updated 09/03/2015 by Xplode
# Database : 2015-03-05.1 [Local]
# Operating system : Windows 7 Home Premium Service Pack 1 (x64)
# Username : Jirka - LUKAS-PC
# Running from : C:\Users\Jirka\Desktop\AdwCleaner.exe
# Option : Scan

***** [ Services ] *****

Service Found : iSafeKrnl
Service Found : iSafeKrnlBoot
Service Found : iSafeKrnlKit
Service Found : iSafeKrnlR3
Service Found : iSafeNetFilter
Service Found : iSafeService

***** [ Files / Folders ] *****

Folder Found : C:\Program Files (x86)\Elex-tech
Folder Found : C:\Users\Jirka\AppData\Local\Google\Chrome\User Data\Default\Extensions\nfengeggddojhakldhlpjdlddgkkjkdd
Folder Found : C:\Users\Jirka\AppData\Roaming\Elex-tech

***** [ Scheduled tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****

Data Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyServer] - hxxp=;ftp=;hxxps=;
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{425ED333-6083-428a-92C9-0CFC28B9D1BF}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{8E161EAD-E496-4540-B055-9EF5A0911490}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{8EA432CA-1A84-4E81-98BC-C133208DECB9}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{FD273240-2119-476B-80D0-AF0A148568F4}
Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{425ED333-6083-428A-92C9-0CFC28B9D1BF}
Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{425ED333-6083-428a-92C9-0CFC28B9D1BF}
Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{8E161EAD-E496-4540-B055-9EF5A0911490}
Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{8EA432CA-1A84-4E81-98BC-C133208DECB9}
Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}
Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}
Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{FD273240-2119-476B-80D0-AF0A148568F4}
Key Found : HKLM\SOFTWARE\Elex-tech
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{425ED333-6083-428a-92C9-0CFC28B9D1BF}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\iSafe
Key Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}

***** [ Web browsers ] *****

-\\ Internet Explorer v11.0.9600.17689

Setting Found : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page] - hxxp://search.gboxapp.com/
Setting Found : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL] - hxxp://www.delta-homes.com/?type=hp&ts= ... 9921999219
Setting Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page] - hxxp://search.gboxapp.com/
Setting Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL] - hxxp://www.delta-homes.com/?type=hp&ts= ... 9921999219
Setting Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL] - hxxp://www.delta-homes.com/?type=hp&ts= ... 9921999219
Setting Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page] - hxxp://search.gboxapp.com/

-\\ Mozilla Firefox v6.0.2 (cs)


-\\ Google Chrome v35.0.1916.153

[C:\Users\Jirka\AppData\Local\Google\Chrome\User Data\Default\Web data] - Found [Search Provider] : hxxp://search.ividi.org/?q={searchTerms}&src=tbsp&id=8c078ef100000000000094de802c567e&affilt=3
[C:\Users\Jirka\AppData\Local\Google\Chrome\User Data\Default\Web data] - Found [Search Provider] : hxxp://www.delta-search.com/?q={searchTerms}&affID=119654&babsrc=SP_ss&mntrId=8C0794DE802C567E
[C:\Users\Jirka\AppData\Local\Google\Chrome\User Data\Default\Web data] - Found [Search Provider] : hxxp://websearch.ask.com/redirect?clien ... 000YYCZ&q={searchTerms}
[C:\Users\Jirka\AppData\Local\Google\Chrome\User Data\Default\Web data] - Found [Search Provider] : hxxp://websearch.ask.com/redirect?clien ... 000YYCZ&q={searchTerms}
[C:\Users\Jirka\AppData\Local\Google\Chrome\User Data\Default\Web data] - Found [Search Provider] : hxxp://websearch.searchguru.info/?l=1&q={searchTerms}&pid=1387&r=2013/12/07&hid=6071959203234007588&lg=EN&cc=CZ&unqvl=43
[C:\Users\Jirka\AppData\Local\Google\Chrome\User Data\Default\preferences] - Found [Extension] : cdihkdldaicijakhchgojcokhpamkibi
[C:\Users\Jirka\AppData\Local\Google\Chrome\User Data\Default\preferences] - Found [Extension] : nfengeggddojhakldhlpjdlddgkkjkdd
[C:\Users\Jirka\AppData\Local\Google\Chrome\User Data\Default\preferences] - Found [Homepage] : hxxp://search.gboxapp.com/
[C:\Users\Jirka\AppData\Local\Google\Chrome\User Data\Default\preferences] - Found [Startup_URLs] : hxxp://search.gboxapp.com/
[C:\Users\lukas\AppData\Local\Google\Chrome\User Data\Default\Web data] - Found [Search Provider] : hxxp://www1.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=8C0794DE802C567E&affID=121564&tt=230713_18215&tsp=4953
[C:\Users\lukas\AppData\Local\Google\Chrome\User Data\Default\Web data] - Found [Search Provider] : hxxp://search.qvo6.com/web/?utm_source= ... default&q={searchTerms}
[C:\Users\lukas\AppData\Local\Google\Chrome\User Data\Default\Web data] - Found [Search Provider] : hxxp://websearch.ask.com/redirect?clien ... CZ&psv=&q={searchTerms}
[C:\Users\lukas\AppData\Local\Google\Chrome\User Data\Default\Web data] - Found [Search Provider] : hxxp://websearch.ask.com/redirect?clien ... CZ&psv=&q={searchTerms}
[C:\Users\lukas\AppData\Local\Google\Chrome\User Data\Default\Web data] - Found [Search Provider] : hxxp://websearch.searchbomb.info/?l=1&q={searchTerms}&pid=625&r=2013/12/01&hid=17994644435790481169&lg=EN&cc=CZ&unqvl=42
[C:\Users\lukas\AppData\Local\Google\Chrome\User Data\Default\Web data] - Found [Search Provider] : hxxp://en.softonic.com/s/{searchTerms}
[C:\Users\lukas\AppData\Local\Google\Chrome\User Data\Default\Web data] - Found [Search Provider] : hxxp://www.v9.com/web?type=ds&ts=142184 ... 1999219&q={searchTerms}&ref=d2Vic2VhcmNoLmFzay5jb20=
[C:\Users\lukas\AppData\Local\Google\Chrome\User Data\Default\preferences] - Found [Extension] : cdihkdldaicijakhchgojcokhpamkibi
[C:\Users\Veronika.lukas-PC\AppData\Local\Google\Chrome\User Data\Default\preferences] - Found [Extension] : dbpebffoameokfhnaaedmefjncfboino
[C:\Users\Veronika.lukas-PC\AppData\Local\Google\Chrome\User Data\Default\preferences] - Found [Extension] : hbcennhacfaagdopikcegfcobcadeocj
[C:\Users\Veronika.lukas-PC\AppData\Local\Google\Chrome\User Data\Default\preferences] - Found [Extension] : hmhfbmpdiffkamakhdbcgojfnbnlcenm
[C:\Users\Veronika.lukas-PC\AppData\Local\Google\Chrome\User Data\Default\preferences] - Found [Extension] : icdlfehblmklkikfigmjhbmmpmkmpooj
[C:\Users\Veronika.lukas-PC\AppData\Local\Google\Chrome\User Data\Default\preferences] - Found [Extension] : kpdhgpkkloealnjnmepfhanpcleldbef
[C:\Users\Veronika.lukas-PC\AppData\Local\Google\Chrome\User Data\Default\preferences] - Found [Extension] : mhkaekfpcppmmioggniknbnbdbcigpkk
[C:\Users\Veronika.lukas-PC\AppData\Local\Google\Chrome\User Data\Default\preferences] - Found [Extension] : pfmopbbadnfoelckkcmjjeaaegjpjjbk
[C:\Users\Veronika.lukas-PC\AppData\Local\Google\Chrome\User Data\Default\preferences] - Found [Extension] : pfndaklgolladniicklehhancnlgocpp
[C:\Users\Veronika.lukas-PC\AppData\Local\Google\Chrome\User Data\Default\preferences] - Found [Extension] : nfengeggddojhakldhlpjdlddgkkjkdd
[C:\Users\Veronika.lukas-PC\AppData\Local\Google\Chrome\User Data\Default\preferences] - Found [Extension] : ffdcfjdljhbehggjdkdioajnknjcpbjb
[C:\Users\Veronika.lukas-PC\AppData\Local\Google\Chrome\User Data\Default\preferences] - Found [Homepage] : hxxp://search.gboxapp.com/
[C:\Users\Veronika.lukas-PC\AppData\Local\Google\Chrome\User Data\Default\preferences] - Found [Startup_URLs] : hxxp://search.gboxapp.com/

-\\ Chromium v


-\\ Comodo Dragon v


-\\ Opera v28.0.1750.40

*************************

AdwCleaner[R0].txt - [104112 bytes] - [14/03/2015 20:50:53]
AdwCleaner[R1].txt - [301 bytes] - [18/03/2015 18:12:50]
AdwCleaner[R2].txt - [301 bytes] - [18/03/2015 18:13:16]
AdwCleaner[R3].txt - [10348 bytes] - [21/03/2015 15:24:07]
AdwCleaner[S0].txt - [110492 bytes] - [14/03/2015 21:02:01]

########## EOF - C:\AdwCleaner\AdwCleaner[R3].txt - [10469 bytes] ##########

[Wrozer]

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 16:09:41, on 21.3.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17689)

FIREFOX: 6.0.2 (cs)
Boot mode: Normal

Running processes:
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Users\Jirka\Desktop\HijackThis.exe
C:\Program Files (x86)\SMART Technologies\Education Software\Office\SMARTInk-SBSDKProxy.exe
C:\Program Files (x86)\Opera\28.0.1750.40\opera_autoupdate.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.delta-homes.com/?type=hp&ts= ... 9921999219
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.seznam.cz/?clid=22668
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.gboxapp.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.delta-homes.com/?type=hp&ts= ... 9921999219
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.seznam.cz/?clid=22668
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.gboxapp.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=;ftp=;https=;
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe
O2 - BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\19.9.1.14\coIEPlg.dll
O2 - BHO: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\19.9.1.14\IPS\IPSBHO.DLL
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~4\Office14\URLREDIR.DLL
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKCU\..\Run: [Realtek Audio Manager] "C:\ProgramData\Realtek0\iuznffnsd.exe"
O4 - HKCU\..\Run: [HKCU] C:\Users\Jirka\AppData\Roaming\Win32\notepad.exe
O4 - HKCU\..\Run: [uTorrent] "C:\Users\Jirka\AppData\Roaming\uTorrent\utorrent.exe" /MINIMIZED
O4 - HKUS\S-1-5-18\..\Run: [Samsung.PCSync] "C:\Program Files (x86)\Samsung\Samsung PC Studio 7\PcSync2.exe" /NoDialog (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [Exetender] "C:\Program Files (x86)\Free Ride Games\GPlayer.exe" /runonstartup (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Samsung.PCSync] "C:\Program Files (x86)\Samsung\Samsung PC Studio 7\PcSync2.exe" /NoDialog (User 'Default user')
O8 - Extra context menu item: &Download with &DAP - C:\Program Files (x86)\DAP\dapextie.htm
O8 - Extra context menu item: &Verify with DAP - C:\Program Files (x86)\DAP\dapverify.htm
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: Download &all with DAP - C:\Program Files (x86)\DAP\dapextie2.htm
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~4\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~2\MICROS~4\Office14\ONBttnIE.dll/105
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Broken Internet access because of LSP provider 'c:\program files (x86)\youtube accelerator\ytalsp.dll' missing
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: *.clonewarsadventures.com
O15 - Trusted Zone: *.freerealms.com
O15 - Trusted Zone: *.soe.com
O15 - Trusted Zone: *.sony.com
O16 - DPF: {6A060448-60F9-11D5-A6CD-0002B31F7455} (ExentInf Class) -
O16 - DPF: {C8BC46C7-921C-4102-B67D-F1F7E65FB0BE} (Battlefield Play4Free Updater) - https://battlefield.play4free.com/stati ... 0.96.0.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O20 - AppInit_DLLs:
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AppleChargerSrv - Unknown owner - C:\Windows\system32\AppleChargerSrv.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: BitRaider Mini-Support Service (BRSptSvc) - BitRaider, LLC - C:\ProgramData\BitRaider\BRSptSvc.exe
O23 - Service: BlueStacks Android Service (BstHdAndroidSvc) - BlueStack Systems, Inc. - C:\Program Files (x86)\BlueStacks\HD-Service.exe
O23 - Service: BlueStacks Log Rotator Service (BstHdLogRotatorSvc) - BlueStack Systems, Inc. - C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
O23 - Service: BlueStacks Updater Service (BstHdUpdaterSvc) - BlueStack Systems, Inc. - C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe
O23 - Service: EasyAntiCheat - EasyAntiCheat Ltd - C:\Windows\system32\EasyAntiCheat.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Flexera Software, Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: Hi-Rez Studios Authenticate and Update Service (HiPatchService) - Hi-Rez Studios - C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe
O23 - Service: Intel(R) Integrated Clock Controller Service - Intel(R) ICCS (ICCS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: Canon Inkjet Printer/Scanner/Fax Extended Survey Program (IJPLMSVC) - Unknown owner - C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE
O23 - Service: YAC Service (iSafeService) - Unknown owner - C:\Program Files (x86)\Elex-tech\YAC\iSafeSvc.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: LMIGuardianSvc - LogMeIn, Inc. - C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Norton Internet Security (NIS) - Symantec Corporation - C:\Program Files (x86)\Norton Internet Security\Engine\19.9.1.14\ccSvcHst.exe
O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\Windows\system32\GameMon.des.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: Internet Pass-Through Service (PassThru Service) - Unknown owner - C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
O23 - Service: PDF Architect Helper Service - pdfforge GmbH - C:\Program Files (x86)\PDF Architect\HelperService.exe
O23 - Service: PDF Architect Service - pdfforge GmbH - C:\Program Files (x86)\PDF Architect\ConversionService.exe
O23 - Service: PinnacleUpdate Service (PinnacleUpdateSvc) - PowerUp Software, LLC - C:\Program Files (x86)\PowerUp Software\Pinnacle Game Profiler\pinnacle_updater.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: SMART Helper Service (SMARTHelperService) - SMART Technologies - C:\Program Files (x86)\SMART Technologies\Education Software\SMARTHelperService.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: TeamViewer 10 (TeamViewer) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
O23 - Service: TunngleService - Tunngle.net GmbH - C:\Program Files (x86)\Tunngle\TnglCtrl.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbe

[Orcus]

Stáhni si Malwarebytes' Anti-Malware
- Při instalaci odeber zatržítko u „Povolit bezplatnou zkušební verzi Malwarebytes' Anti-Malware Premium“
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Aktualizace Malwarebytes' Anti-Malware a Spustit aplikaci Malwarebytes' Anti-Malware, pokud jo tak klikni na tlačítko konec
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a klikni na Skenovat nyní a
- po proběhnutí programu se ti objeví hláška vpravo dole tak klikni na b] Kopírovat do schránky [/b]a a vlož sem celý log.

- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).

Pokud budou problémy , spusť v nouz. režimu.

====================================================

Spusť znovu AdwCleaner (u Windows Vista či Windows7, klikni na AdwCleaner pravým a vyber „Spustit jako správce“
Klikni na „ Smazat“
Program provede opravu, po automatickém restartu neukáže log (C:\AdwCleaner [S?].txt) , jeho obsah sem celý vlož.

====================================================

Stáhni si Junkware Removal Tool

na svojí plochu.
Deaktivuj si svůj antivirový program.
Pravým tl. myši klikni na JRT.exe a vyber „spustit jako správce“. Pro pokračování budeš vyzván ke stisknutí jakékoliv klávesy. Na nějakou klikni.
Začne skenování programu. Skenování může trvat dloho , podle množství nákaz. Po ukončení skenu se objeví log (JRT.txt) , který se uloží na ploše.
Zkopíruj sem prosím celý jeho obsah.

[Wrozer]

Malwarebytes Anti-Malware
www.malwarebytes.org

Datum skenování: 22.3.2015
Čas skenování: 13:20:18
Protokol: log malwarebytes.txt
Správce: Ano

Verze: 2.01.4.1018
Databáze malwaru: v2015.03.09.05
Databáze rootkitů: v2015.02.25.01
Licence: Bezplatná verze
Ochrana proti malwaru: Vypnuto
Ochrana proti škodlivým webovým stránkám: Vypnuto
Ochrana programu: Vypnuto

OS: Windows 7 Service Pack 1
CPU: x64
Souborový systém: NTFS
Uživatel: Jirka

Typ skenu: Sken hrozeb
Výsledek: Dokončeno
Prohledaných objektů: 551194
Uplynulý čas: 26 min, 32 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Vypnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto

Procesy: 0
(Nenalezeny žádné škodlivé položky)

Moduly: 0
(Nenalezeny žádné škodlivé položky)

Klíče registru: 119
FraudTool.YAC, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\iSafeKrnlKit, , [f4852f1411798aac9c6082aeba48be42],
FraudTool.YAC, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\iSafeKrnlR3, , [82f7c182800a72c40eee71bfca38b34d],
FraudTool.YAC, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\iSafeKrnl, , [c9b0f152f59584b207f5e64a32d010f0],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\CLSID\{e6ae1292-4ab8-49ef-a904-88ace8f619fd}, , [5c1d44ff1377bd790f687cb46e94f808],
PUP.Optional.Multiplug, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{E6AE1292-4AB8-49EF-A904-88ACE8F619FD}, , [5c1d44ff1377bd790f687cb46e94f808],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\Pe6ae1292_4ab8_49ef_a904_88ace8f619fd_.Pe6ae1292_4ab8_49ef_a904_88ace8f619fd_, , [5c1d44ff1377bd790f687cb46e94f808],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\Pe6ae1292_4ab8_49ef_a904_88ace8f619fd_.Pe6ae1292_4ab8_49ef_a904_88ace8f619fd_.10, , [5c1d44ff1377bd790f687cb46e94f808],
PUP.Optional.Multiplug, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Pe6ae1292_4ab8_49ef_a904_88ace8f619fd_.Pe6ae1292_4ab8_49ef_a904_88ace8f619fd_, , [5c1d44ff1377bd790f687cb46e94f808],
PUP.Optional.Multiplug, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Pe6ae1292_4ab8_49ef_a904_88ace8f619fd_.Pe6ae1292_4ab8_49ef_a904_88ace8f619fd_.10, , [5c1d44ff1377bd790f687cb46e94f808],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\WOW6432NODE\Pe6ae1292_4ab8_49ef_a904_88ace8f619fd_.Pe6ae1292_4ab8_49ef_a904_88ace8f619fd_, , [5c1d44ff1377bd790f687cb46e94f808],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\WOW6432NODE\Pe6ae1292_4ab8_49ef_a904_88ace8f619fd_.Pe6ae1292_4ab8_49ef_a904_88ace8f619fd_.10, , [5c1d44ff1377bd790f687cb46e94f808],
PUP.Optional.Multiplug, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{E6AE1292-4AB8-49EF-A904-88ACE8F619FD}, , [5c1d44ff1377bd790f687cb46e94f808],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\CLSID\{E6AE1292-4AB8-49EF-A904-88ACE8F619FD}\INPROCSERVER32, , [5c1d44ff1377bd790f687cb46e94f808],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\CLSID\{a748e29d-d2cf-45da-b71c-f44fb09336bf}, , [fc7d81c281093ff79cdb220e4cb6d927],
PUP.Optional.Multiplug, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{A748E29D-D2CF-45DA-B71C-F44FB09336BF}, , [fc7d81c281093ff79cdb220e4cb6d927],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\Pa748e29d_d2cf_45da_b71c_f44fb09336bf_.Pa748e29d_d2cf_45da_b71c_f44fb09336bf_, , [fc7d81c281093ff79cdb220e4cb6d927],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\Pa748e29d_d2cf_45da_b71c_f44fb09336bf_.Pa748e29d_d2cf_45da_b71c_f44fb09336bf_.10, , [fc7d81c281093ff79cdb220e4cb6d927],
PUP.Optional.Multiplug, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Pa748e29d_d2cf_45da_b71c_f44fb09336bf_.Pa748e29d_d2cf_45da_b71c_f44fb09336bf_, , [fc7d81c281093ff79cdb220e4cb6d927],
PUP.Optional.Multiplug, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Pa748e29d_d2cf_45da_b71c_f44fb09336bf_.Pa748e29d_d2cf_45da_b71c_f44fb09336bf_.10, , [fc7d81c281093ff79cdb220e4cb6d927],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\WOW6432NODE\Pa748e29d_d2cf_45da_b71c_f44fb09336bf_.Pa748e29d_d2cf_45da_b71c_f44fb09336bf_, , [fc7d81c281093ff79cdb220e4cb6d927],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\WOW6432NODE\Pa748e29d_d2cf_45da_b71c_f44fb09336bf_.Pa748e29d_d2cf_45da_b71c_f44fb09336bf_.10, , [fc7d81c281093ff79cdb220e4cb6d927],
PUP.Optional.Multiplug, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{A748E29D-D2CF-45DA-B71C-F44FB09336BF}, , [fc7d81c281093ff79cdb220e4cb6d927],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\CLSID\{A748E29D-D2CF-45DA-B71C-F44FB09336BF}\INPROCSERVER32, , [fc7d81c281093ff79cdb220e4cb6d927],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\TYPELIB\{157B1AA6-3E5C-404A-9118-C1D91F537040}, , [c1b8b1929af076c0d5fc92883ac914ec],
PUP.Optional.Multiplug, HKU\S-1-5-21-2121263484-1352607103-1728601742-1004_Classes\INTERFACE\{3B3F3AAD-FB97-49FF-BFEE-D22869AC4326}, , [c1b8b1929af076c0d5fc92883ac914ec],
PUP.Optional.Multiplug, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{157B1AA6-3E5C-404A-9118-C1D91F537040}, , [c1b8b1929af076c0d5fc92883ac914ec],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{157B1AA6-3E5C-404A-9118-C1D91F537040}, , [c1b8b1929af076c0d5fc92883ac914ec],
PUP.Optional.Babylon.A, HKU\S-1-5-21-2121263484-1352607103-1728601742-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}, , [700976cd0585bc7ad91463b80300e41c],
PUP.Optional.Babylon.A, HKU\S-1-5-21-2121263484-1352607103-1728601742-1004\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}, , [700976cd0585bc7ad91463b80300e41c],
PUP.Optional.Babylon.A, HKU\S-1-5-21-2121263484-1352607103-1728601742-1005\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}, , [700976cd0585bc7ad91463b80300e41c],
PUP.Optional.SweetPacks.A, HKU\S-1-5-21-2121263484-1352607103-1728601742-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{EEE6C360-6118-11DC-9C72-001320C79847}, , [96e3ef5455353bfb4b949cbc0ff43cc4],
PUP.Optional.SweetPacks.A, HKU\S-1-5-21-2121263484-1352607103-1728601742-1004\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{EEE6C360-6118-11DC-9C72-001320C79847}, , [96e3ef5455353bfb4b949cbc0ff43cc4],
PUP.Optional.SweetPacks.A, HKU\S-1-5-21-2121263484-1352607103-1728601742-1005\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{EEE6C360-6118-11DC-9C72-001320C79847}, , [96e3ef5455353bfb4b949cbc0ff43cc4],
PUP.Optional.SweetPacks.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{EEE6C360-6118-11DC-9C72-001320C79847}, , [96e3ef5455353bfb4b949cbc0ff43cc4],
PUP.Optional.DefaultTab.A, HKU\S-1-5-18\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{7F6AFBF1-E065-4627-A2FD-810366367D01}, , [d3a650f37713e84e7d42101235cee917],
PUP.Optional.DefaultTab.A, HKU\S-1-5-21-2121263484-1352607103-1728601742-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{7F6AFBF1-E065-4627-A2FD-810366367D01}, , [d3a650f37713e84e7d42101235cee917],
PUP.Optional.DefaultTab.A, HKU\S-1-5-21-2121263484-1352607103-1728601742-1004\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{7F6AFBF1-E065-4627-A2FD-810366367D01}, , [d3a650f37713e84e7d42101235cee917],
PUP.Optional.DefaultTab.A, HKU\S-1-5-21-2121263484-1352607103-1728601742-1005\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{7F6AFBF1-E065-4627-A2FD-810366367D01}, , [d3a650f37713e84e7d42101235cee917],
PUP.Optional.DefaultTab.A, HKU\S-1-5-21-2121263484-1352607103-1728601742-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{7F6AFBF1-E065-4627-A2FD-810366367D01}, , [d3a650f37713e84e7d42101235cee917],
PUP.Optional.SecretSauce.A, HKU\S-1-5-21-2121263484-1352607103-1728601742-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{0FFD0EF2-DBE9-483A-80C4-D2C331DA1CE4}, , [05747fc4c1c9ae888080958de02346ba],
PUP.Optional.SecretSauce.A, HKU\S-1-5-21-2121263484-1352607103-1728601742-1005\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{0FFD0EF2-DBE9-483A-80C4-D2C331DA1CE4}, , [05747fc4c1c9ae888080958de02346ba],
PUP.Optional.SecretSauce.A, HKU\S-1-5-21-2121263484-1352607103-1728601742-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{0FFD0EF2-DBE9-483A-80C4-D2C331DA1CE4}, , [05747fc4c1c9ae888080958de02346ba],
PUP.Optional.SecretSauce.A, HKU\S-1-5-21-2121263484-1352607103-1728601742-1005\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{0FFD0EF2-DBE9-483A-80C4-D2C331DA1CE4}, , [05747fc4c1c9ae888080958de02346ba],
PUP.Optional.SupTab.A, HKU\S-1-5-21-2121263484-1352607103-1728601742-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, , [dc9d1c27f89215219cd3db45f50eea16],
PUP.Optional.SupTab.A, HKU\S-1-5-21-2121263484-1352607103-1728601742-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, , [dc9d1c27f89215219cd3db45f50eea16],
PUP.Optional.Kango.A, HKU\S-1-5-21-2121263484-1352607103-1728601742-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{A88DE8D3-9C38-4F0D-8981-A4C17F7677A1}, , [cfaa98ab7416fd3922bda4b3f40fe020],
PUP.Optional.Kango.A, HKU\S-1-5-21-2121263484-1352607103-1728601742-1005\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{A88DE8D3-9C38-4F0D-8981-A4C17F7677A1}, , [cfaa98ab7416fd3922bda4b3f40fe020],
PUP.Optional.Kango.A, HKU\S-1-5-21-2121263484-1352607103-1728601742-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{A88DE8D3-9C38-4F0D-8981-A4C17F7677A1}, , [cfaa98ab7416fd3922bda4b3f40fe020],
PUP.Optional.Kango.A, HKU\S-1-5-21-2121263484-1352607103-1728601742-1005\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{A88DE8D3-9C38-4F0D-8981-A4C17F7677A1}, , [cfaa98ab7416fd3922bda4b3f40fe020],
PUP.Optional.SpeedAnalysis.A, HKU\S-1-5-21-2121263484-1352607103-1728601742-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{18DBB6CE-3148-4FEC-B481-103CB3290427}, , [473284bf8efcb482f9979bb91ae9a957],
PUP.Optional.Multiplug, HKU\S-1-5-21-2121263484-1352607103-1728601742-1004_Classes\TypeLib\{157B1AA6-3E5C-404A-9118-C1D91F537040}, , [da9fd56eaddd85b1626fe13991724ab6],
PUP.Optional.Multiplug.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{AD11DADE-C597-45D9-D8C5-1D2EB0B89613}, , [f08993b03f4b9e98d1a78ba2bc46fe02],
PUP.Optional.Amonetize.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{3A8C08FC-AFB9-4CC1-999C-119667210ED7}, , [fe7b52f1800abe786646f85333cdaa56],
PUP.Optional.Amonetize.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{3A8C08FC-AFB9-4CC1-999C-119667210ED7}, , [fe7b52f1800abe786646f85333cdaa56],
PUP.Optional.Amonetize.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{3A8C08FC-AFB9-4CC1-999C-119667210ED7}, , [fe7b52f1800abe786646f85333cdaa56],
PUP.Optional.iVIDI.A, HKLM\SOFTWARE\CLASSES\esrv.ividiESrvc, , [2059192ac2c869cd7ee601f1788b916f],
PUP.Optional.iVIDI.A, HKLM\SOFTWARE\CLASSES\esrv.ividiESrvc.1, , [334677cc434733036df7bf33e023fb05],
PUP.Optional.Ividi.A, HKLM\SOFTWARE\CLASSES\ividi.ividiappCore, , [0b6ef152e6a448ee84066a8b43c06d93],
PUP.Optional.Ividi.A, HKLM\SOFTWARE\CLASSES\ividi.ividiappCore.1, , [4b2e90b39bef83b3e2a803f237ccab55],
PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, , [0e6ba1a2eb9f989ed8c75fb7cf3638c8],
PUP.Optional.PlusHD.A, HKLM\SOFTWARE\WOW6432NODE\HD-V1.8, , [126789ba82082214f0a3a0368a7903fd],
PUP.Optional.MediaView.A, HKLM\SOFTWARE\WOW6432NODE\MediaViewV1alpha1303, , [1f5ad0731476e74f036c8568c73c8b75],
PUP.Optional.MediaWatch.A, HKLM\SOFTWARE\WOW6432NODE\MediaWatchV1home67, , [b3c652f1424859ddba36de4641c4629e],
PUP.Optional.RichMediaView.A, HKLM\SOFTWARE\WOW6432NODE\RichMediaViewV1release2233, , [9cdddf64f298d75f0cdfb42735ce0df3],
PUP.Optional.GoPhotoIT.A, HKLM\SOFTWARE\WOW6432NODE\TheGoPhoto.it V10, , [3d3ce65df694d85e6368476dcd368b75],
PUP.Optional.WhiteSmoke.A, HKLM\SOFTWARE\WOW6432NODE\WhiteSmoke Search, , [1861291accbebb7bb0af2fc86b9802fe],
PUP.Optional.iVIDI.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\esrv.ividiESrvc, , [d8a1c77c15753bfb96ce4ba7946f8f71],
PUP.Optional.iVIDI.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\esrv.ividiESrvc.1, , [68113310aae048ee7be924ce857e15eb],
PUP.Optional.Ividi.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\ividi.ividiappCore, , [3346152ee0aa4ee83852e411679ccd33],
PUP.Optional.Ividi.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\ividi.ividiappCore.1, , [83f64af90f7b62d4a6e4cc295ba841bf],
Trojan.Agent.CR, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\godimpbmfohihoaikgfknnnmlncabkkp, , [67124cf74a40fe3882a76966a45f6f91],
PUP.Optional.Qone8, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, , [cbae053e820880b62a7546d00ef76f91],
PUP.Optional.FastSearchings, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}, , [6613ef543357a294ec54c26a81849d63],
PUP.Optional.DefaultTab.A, HKU\S-1-5-18\SOFTWARE\Default tab, , [94e567dcc2c8013536cf6a4c0102c53b],
PUP.Optional.DefaultTab.A, HKU\S-1-5-18\SOFTWARE\DefaultTab, , [43361033b5d5191d3525d8df3cc745bb],
PUP.Optional.DefaultTab.A, HKU\S-1-5-18\SOFTWARE\APPDATALOW\SOFTWARE\DefaultTab, , [f08951f22862e353ee2edf19c24109f7],
PUP.Optional.TornTV.A, HKU\S-1-5-18\SOFTWARE\APPDATALOW\SOFTWARE\TheTorntv V10, , [abce7bc8d7b3b77fbff748762ed5d030],
PUP.Optional.1ClickDownload.A, HKU\S-1-5-21-2121263484-1352607103-1728601742-1000\SOFTWARE\1ClickDownload, , [f881d56e672386b0481cbf4de91c8e72],
PUP.Optional.DataMngr.A, HKU\S-1-5-21-2121263484-1352607103-1728601742-1000\SOFTWARE\DataMngr, , [0a6fdd665f2b66d0e3101feb80855ca4],
PUP.Optional.DataMngr.A, HKU\S-1-5-21-2121263484-1352607103-1728601742-1000\SOFTWARE\DataMngr_Toolbar, , [9fdabf84c2c84fe77a782cdeb3529b65],
PUP.Optional.Ividi.A, HKU\S-1-5-21-2121263484-1352607103-1728601742-1000\SOFTWARE\iVIDI Plugin, , [70090d363f4bd0660887569f798af10f],
PUP.Optional.Ividi.A, HKU\S-1-5-21-2121263484-1352607103-1728601742-1000\SOFTWARE\iVIDI.org, , [cdacfa492b5fbc7a9cf4975ed42fbb45],
PUP.Optional.SweetIM.A, HKU\S-1-5-21-2121263484-1352607103-1728601742-1000\SOFTWARE\SweetIM, , [c7b20043c5c5b6806261248f748f7f81],
PUP.Optional.SProtector.A, HKU\S-1-5-21-2121263484-1352607103-1728601742-1000\SOFTWARE\APPDATALOW\SProtector, , [a5d4e95acfbbe84ef497917cdd28e719],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-2121263484-1352607103-1728601742-1000\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, , [c1b879ca6a203cfaf6428b94d134f010],
PUP.Optional.DefaultTab.A, HKU\S-1-5-21-2121263484-1352607103-1728601742-1000\SOFTWARE\APPDATALOW\SOFTWARE\DefaultTab, , [c2b7f94aa5e5d85e36e65b9d25deac54],
PUP.Optional.PlusHD.A, HKU\S-1-5-21-2121263484-1352607103-1728601742-1000\SOFTWARE\APPDATALOW\SOFTWARE\HD-V1.8, , [ceabad96a0ea9b9beea346907f849c64],
PUP.Optional.Spigot.A, HKU\S-1-5-21-2121263484-1352607103-1728601742-1000\SOFTWARE\APPDATALOW\SOFTWARE\Search Settings, , [a1d849fabbcfcb6bbd19ff2b00051fe1],
PUP.Optional.TornTV.A, HKU\S-1-5-21-2121263484-1352607103-1728601742-1000\SOFTWARE\APPDATALOW\SOFTWARE\TheTorntv V10, , [8dec014274166cca7046d3eb689bec14],
PUP.Optional.TornTV.A, HKU\S-1-5-21-2121263484-1352607103-1728601742-1000\SOFTWARE\APPDATALOW\SOFTWARE\Torntv 2, , [04757ec52466f046a840774cf112ce32],
PUP.Optional.Conduit.A, HKU\S-1-5-21-2121263484-1352607103-1728601742-1000\SOFTWARE\CONDUIT\FF, , [5b1ed073d8b2cd697f01bf51de2748b8],
PUP.Optional.Delta.A, HKU\S-1-5-21-2121263484-1352607103-1728601742-1000\SOFTWARE\DELTA\DELTA, , [80f9182b503af145ba2667aab94c08f8],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-2121263484-1352607103-1728601742-1000\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\installdaddy, , [32473013800ab4820eee67a47293748c],
PUP.Optional.Qone8, HKU\S-1-5-21-2121263484-1352607103-1728601742-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, , [cbae331018720c2a623c160038cd817f],
PUP.Optional.WebSearchInfo, HKU\S-1-5-21-2121263484-1352607103-1728601742-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}, , [5d1c97ac414942f4ea3c54c505007f81],
PUP.Optional.BProtector.A, HKU\S-1-5-21-2121263484-1352607103-1728601742-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\bProtectSettings, , [f18867dc4941b97dbb7efd11b55056aa],
PUP.Optional.PCPerformer.A, HKU\S-1-5-21-2121263484-1352607103-1728601742-1000\SOFTWARE\PERFORMERSOFT\PC Performer, , [eb8e063dbcce0d298188d63612f31be5],
PUP.Optional.Spigot.A, HKU\S-1-5-21-2121263484-1352607103-1728601742-1000\SOFTWARE\SEARCH SETTINGS, , [097089ba7d0d171f56df7251669d16ea],
PUP.Optional.AdvancedSystemProtector.A, HKU\S-1-5-21-2121263484-1352607103-1728601742-1000\SOFTWARE\SYSTWEAK\Advanced-System Protector, , [4f2a6bd8404a58de0e39dfe7c53ee11f],
PUP.Optional.RegCleanerPro.A, HKU\S-1-5-21-2121263484-1352607103-1728601742-1000\SOFTWARE\SYSTWEAK\RegClean Pro, , [8feaa49fd9b167cf327fa0703acb1ee2],
PUP.Optional.Ividi.A, HKU\S-1-5-21-2121263484-1352607103-1728601742-1000\SOFTWARE\UNITECH LLC\ividi, , [99e04201fc8e8ea80c820aeb62a1bc44],
PUP.Optional.Ividi.A, HKU\S-1-5-21-2121263484-1352607103-1728601742-1004\SOFTWARE\iVIDI.org, , [84f5c57e39511125d0c03eb7b84bae52],
PUP.Optional.PlusHD.A, HKU\S-1-5-21-2121263484-1352607103-1728601742-1004\SOFTWARE\APPDATALOW\SOFTWARE\HD-V1.8, , [7207f152395173c3d0c1e2f425dedc24],
PUP.Optional.TidyNetwork.A, HKU\S-1-5-21-2121263484-1352607103-1728601742-1004\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\DRAGDROP\{70BC1CDB-0744-4172-BDA0-B5A487D00C3A}, , [cdac86bd256545f113d9802ede2522de],
PUP.Optional.Qone8, HKU\S-1-5-21-2121263484-1352607103-1728601742-1004\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, , [245558eb93f713232c7266b036cfa25e],
PUP.Optional.WebSearchInfo, HKU\S-1-5-21-2121263484-1352607103-1728601742-1004\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}, , [6217a1a2d3b75fd77da9f7229174d42c],
PUP.Optional.TidyNetwork.A, HKU\S-1-5-21-2121263484-1352607103-1728601742-1004\SOFTWARE\MOZILLAPLUGINS\@tnt2npapi.com/Plugin, , [99e045fe1674d85eb2d3dc18ad565aa6],
PUP.Optional.SProtector.A, HKU\S-1-5-21-2121263484-1352607103-1728601742-1005\SOFTWARE\APPDATALOW\SProtector, , [f980152e4f3bd75f0784e12c8d781be5],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-2121263484-1352607103-1728601742-1005\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, , [d2a7cf74741605318fa9a778ce37837d],
PUP.Optional.DefaultTab.A, HKU\S-1-5-21-2121263484-1352607103-1728601742-1005\SOFTWARE\APPDATALOW\SOFTWARE\DefaultTab, , [c1b8dc6728629b9ba9736a8e34cf57a9],
PUP.Optional.PlusHD.A, HKU\S-1-5-21-2121263484-1352607103-1728601742-1005\SOFTWARE\APPDATALOW\SOFTWARE\HD-V1.8, , [3b3e88bb27633df9c0d13a9c788b31cf],
PUP.Optional.Spigot.A, HKU\S-1-5-21-2121263484-1352607103-1728601742-1005\SOFTWARE\APPDATALOW\SOFTWARE\Search Settings, , [e891e261a8e2c27436a0e743d82d22de],
PUP.Optional.TornTV.A, HKU\S-1-5-21-2121263484-1352607103-1728601742-1005\SOFTWARE\APPDATALOW\SOFTWARE\TheTorntv V10, , [f881ef54d2b8e056377f4777e22123dd],
PUP.Optional.Qone8, HKU\S-1-5-21-2121263484-1352607103-1728601742-1005\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, , [7bfea89b90fa6fc72876908651b456aa],
PUP.Optional.WebSearchInfo, HKU\S-1-5-21-2121263484-1352607103-1728601742-1005\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}, , [4831ba890a80e74fde481504d82d21df],
PUP.Optional.BProtector.A, HKU\S-1-5-21-2121263484-1352607103-1728601742-1005\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\bProtectSettings, , [4d2cd56e7a10f93d2b0e8d8184816f91],
PUP.Optional.AdvancedSystemProtector.A, HKU\S-1-5-21-2121263484-1352607103-1728601742-1005\SOFTWARE\SYSTWEAK\Advanced-System Protector, , [d0a98cb7ff8bdc5a1b2c715520e31fe1],
PUP.Optional.RegCleanerPro.A, HKU\S-1-5-21-2121263484-1352607103-1728601742-1005\SOFTWARE\SYSTWEAK\RegClean Pro, , [6217142fdcaed95d535eb65a5aabb14f],
FraudTool.YAC, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\iSafe, , [ee8b5ee55a30b680a9a5544f50b3c838],

Hodnoty registru: 15
PUP.Optional.WebExpEnhanced.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS|ext@WebexpEnhancedV1alpha463.net, C:\Program Files (x86)\WebexpEnhancedV1\WebexpEnhancedV1alpha463\ff, , [cdac5ae98dfd8ea8072b6d85b25149b7]
PUP.Optional.VideoPlayer.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS|ext@VideoPlayerV3beta364.net, C:\Program Files (x86)\VideoPlayerV3\VideoPlayerV3beta364\ff, , [a0d95ce795f53bfb2ac6c42441c226da]
PUP.Optional.MediaView.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS|ext@MediaViewV1alpha1303.net, C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha1303\ff, , [c6b3b58ee1a9989eff7125c8ff045ba5]
PUP.Optional.MediaWatch.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS|ext@MediaWatchV1home67.net, C:\Program Files (x86)\MediaWatchV1\MediaWatchV1home67\ff, , [8dec5be87b0fff37529f2bf9699cd729]
PUP.Optional.RichMediaView.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS|ext@RichMediaViewV1release2233.net, C:\Program Files (x86)\RichMediaViewV1\RichMediaViewV1release2233\ff, , [6019db6899f160d6df0b4d8e1fe4da26]
PUP.Optional.Delta.A, HKU\S-1-5-21-2121263484-1352607103-1728601742-1000\SOFTWARE\DELTA\DELTA|lastB, http://www.seznam.cz/?clid=12454, , [80f9182b503af145ba2667aab94c08f8]
PUP.BProtector, HKU\S-1-5-21-2121263484-1352607103-1728601742-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|bProtector Start Page, http://www.delta-search.com/?affID=1195 ... DE802C567E, , [eb8e251e305a3402e3117d8d5ea70ef2]
PUP.BProtector, HKU\S-1-5-21-2121263484-1352607103-1728601742-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|bProtectorDefaultScope, {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}, , [651473d0a8e22412ca2b808ac73e0af6]
Backdoor.Agent.RLTE, HKU\S-1-5-21-2121263484-1352607103-1728601742-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|Realtek Audio Manager, "C:\ProgramData\Realtek0\iuznffnsd.exe", , [f683bb881c6ea88ee4927a859272cd33]
Backdoor.Agent.RLTE, HKU\S-1-5-21-2121263484-1352607103-1728601742-1004\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|Realtek Audio Manager, "C:\ProgramData\Realtek0\iuznffnsd.exe", , [f683bb881c6ea88ee4927a859272cd33]
Backdoor.Agent.RLTE, HKU\S-1-5-21-2121263484-1352607103-1728601742-1005\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|Realtek Audio Manager, "C:\ProgramData\Realtek0\iuznffnsd.exe", , [f683bb881c6ea88ee4927a859272cd33]
PUP.Optional.Spigot.A, HKU\S-1-5-21-2121263484-1352607103-1728601742-1000\SOFTWARE\SEARCH SETTINGS|GCProtected, 0, , [097089ba7d0d171f56df7251669d16ea]
Backdoor.HMCPol.Gen, HKU\S-1-5-21-2121263484-1352607103-1728601742-1004\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|HKCU, C:\Users\Jirka\AppData\Roaming\Win32\notepad.exe, , [d7a2e3606b1fe4520e9accd12cd834cc]
PUP.BProtector, HKU\S-1-5-21-2121263484-1352607103-1728601742-1005\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|bProtector Start Page, http://www.delta-search.com/?affID=1195 ... DE802C567E, , [ef8a6bd8cebcc86e975d3bcf25e0e41c]
PUP.BProtector, HKU\S-1-5-21-2121263484-1352607103-1728601742-1005\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|bProtectorDefaultScope, {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}, , [ea8f370c0d7dc47222d30dfd4db89868]

Data registru: 10
PUP.Optional.Freshy.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\ABOUTURLS|Tabs, http://services.freshy.com/general/newh ... 1147&guid={084EE187-B928-4BF5-A2F9-0CA2FC0C356C}&i=, Dobré: (www.google.com), Špatné: (http://services.freshy.com/general/newh ... 1147&guid={084EE187-B928-4BF5-A2F9-0CA2FC0C356C}&i=),,[aecbcc7792f893a354ffc4112cd9df21]
PUP.Optional.Delta.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, http://www.delta-homes.com/?type=hp&ts= ... 9921999219, Dobré: (www.google.com), Špatné: (http://www.delta-homes.com/?type=hp&ts= ... 9921999219),,[fd7c76cd5931280e0e8bd012ae575ba5]
PUP.Optional.GboxApp.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, http://search.gboxapp.com/, Dobré: (www.google.com), Špatné: (http://search.gboxapp.com/),,[fa7f192a305a83b3ad96b620030240c0]
PUP.Optional.GboxApp.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, http://search.gboxapp.com/, Dobré: (www.google.com), Špatné: (http://search.gboxapp.com/),,[caaf1d2614762a0c2c177f5772932dd3]
PUP.Optional.Delta.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, http://www.delta-homes.com/?type=hp&ts= ... 9921999219, Dobré: (www.google.com), Špatné: (http://www.delta-homes.com/?type=hp&ts= ... 9921999219),,[136660e3206af442b5e4c81abf468080]
Hijack.StartPage, HKU\S-1-5-21-2121263484-1352607103-1728601742-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, http://www.qvo6.com/?utm_source=b&utm_m ... 1375704761, Dobré: (www.google.com), Špatné: (http://www.qvo6.com/?utm_source=b&utm_m ... 1375704761),,[3841f94ab0da49edb98b58897c890ff1]
PUP.Optional.GboxApp.A, HKU\S-1-5-21-2121263484-1352607103-1728601742-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, http://search.gboxapp.com/, Dobré: (www.google.com), Špatné: (http://search.gboxapp.com/),,[47323c070189162022228353ac5937c9]
PUP.Optional.GboxApp.A, HKU\S-1-5-21-2121263484-1352607103-1728601742-1004\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, http://search.gboxapp.com/, Dobré: (www.google.com), Špatné: (http://search.gboxapp.com/),,[f58463e068223bfbde66498d52b3b947]
PUP.Optional.Delta.A, HKU\S-1-5-21-2121263484-1352607103-1728601742-1004\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, http://www.delta-homes.com/?type=hp&ts= ... 9921999219, Dobré: (www.google.com), Špatné: (http://www.delta-homes.com/?type=hp&ts= ... 9921999219),,[2455e95a3c4ef6408e0cda08e61f827e]
Hijack.StartPage, HKU\S-1-5-21-2121263484-1352607103-1728601742-1005\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, http://www.qvo6.com/?utm_source=b&utm_m ... 1375704761, Dobré: (www.google.com), Špatné: (http://www.qvo6.com/?utm_source=b&utm_m ... 1375704761),,[2f4a66dd1c6eff3770d4edf43fc67c84]

Složky: 236
PUP.Optional.OffersWizard.A, C:\Program Files (x86)\Common Files\Config, , [3049fa49395178befdd33b93fa09ec14],
PUP.Optional.SearchNewTab.A, C:\Program Files (x86)\SearchNewTab, , [b7c28fb40a809a9c27181ef7679e8e72],
PUP.Optional.SearchNewTab, C:\ProgramData\SearchNewTab, , [2a4f0e35c5c530061a4c4a1f29daac54],
PUP.Optional.WhiteSmoke.A, C:\Program Files (x86)\WhiteSmoke Search, , [a2d74ff48802c4723fa16cfe768ded13],
PUP.Optional.WhiteSmoke.A, C:\Program Files (x86)\WhiteSmoke Search\icons, , [a2d74ff48802c4723fa16cfe768ded13],
Trojan.Agent.BCM, C:\Windows\inf\mncvuoirj, , [28514cf7e7a3a294d9dd42294ab98d73],
Trojan.Agent.BCM, C:\Windows\inf\mncvuoirj\bitstreams, , [28514cf7e7a3a294d9dd42294ab98d73],
PUP.Optional.CrossRider.A, C:\Users\Jirka\AppData\Roaming\Mozilla\Firefox\Profiles\c1lpdf30.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com, , [f188e65d7a103303f6dcd69836cd817f],
PUP.Optional.CrossRider.A, C:\Users\Jirka\AppData\Roaming\Mozilla\Firefox\Profiles\c1lpdf30.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\chrome, , [f188e65d7a103303f6dcd69836cd817f],
PUP.Optional.CrossRider.A, C:\Users\Jirka\AppData\Roaming\Mozilla\Firefox\Profiles\c1lpdf30.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\chrome\content, , [f188e65d7a103303f6dcd69836cd817f],
PUP.Optional.CrossRider.A, C:\Users\Jirka\AppData\Roaming\Mozilla\Firefox\Profiles\c1lpdf30.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\chrome\content\api, , [f188e65d7a103303f6dcd69836cd817f],
PUP.Optional.CrossRider.A, C:\Users\Jirka\AppData\Roaming\Mozilla\Firefox\Profiles\c1lpdf30.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\chrome\content\core, , [f188e65d7a103303f6dcd69836cd817f],
PUP.Optional.CrossRider.A, C:\Users\Jirka\AppData\Roaming\Mozilla\Firefox\Profiles\c1lpdf30.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\defaults, , [f188e65d7a103303f6dcd69836cd817f],
PUP.Optional.CrossRider.A, C:\Users\Jirka\AppData\Roaming\Mozilla\Firefox\Profiles\c1lpdf30.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\defaults\preferences, , [f188e65d7a103303f6dcd69836cd817f],
PUP.Optional.CrossRider.A, C:\Users\Jirka\AppData\Roaming\Mozilla\Firefox\Profiles\c1lpdf30.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\extensionData, , [f188e65d7a103303f6dcd69836cd817f],
PUP.Optional.CrossRider.A, C:\Users\Jirka\AppData\Roaming\Mozilla\Firefox\Profiles\c1lpdf30.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\extensionData\plugins, , [f188e65d7a103303f6dcd69836cd817f],
PUP.Optional.CrossRider.A, C:\Users\Jirka\AppData\Roaming\Mozilla\Firefox\Profiles\c1lpdf30.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\extensionData\userCode, , [f188e65d7a103303f6dcd69836cd817f],
PUP.Optional.CrossRider.A, C:\Users\Jirka\AppData\Roaming\Mozilla\Firefox\Profiles\c1lpdf30.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\locale, , [f188e65d7a103303f6dcd69836cd817f],
PUP.Optional.CrossRider.A, C:\Users\Jirka\AppData\Roaming\Mozilla\Firefox\Profiles\c1lpdf30.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\locale\en-US, , [f188e65d7a103303f6dcd69836cd817f],
PUP.Optional.CrossRider.A, C:\Users\Jirka\AppData\Roaming\Mozilla\Firefox\Profiles\c1lpdf30.default\extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\skin, , [f188e65d7a103303f6dcd69836cd817f],
PUP.Optional.CrossRider.A, C:\Users\lukas\AppData\Roaming\Mozilla\Firefox\Profiles\b4dn6zje.default\Extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com, , [6f0af3508109f73f9c36214db3500cf4],
PUP.Optional.CrossRider.A, C:\Users\lukas\AppData\Roaming\Mozilla\Firefox\Profiles\b4dn6zje.default\Extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\chrome, , [6f0af3508109f73f9c36214db3500cf4],
PUP.Optional.CrossRider.A, C:\Users\lukas\AppData\Roaming\Mozilla\Firefox\Profiles\b4dn6zje.default\Extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\chrome\content, , [6f0af3508109f73f9c36214db3500cf4],
PUP.Optional.CrossRider.A, C:\Users\lukas\AppData\Roaming\Mozilla\Firefox\Profiles\b4dn6zje.default\Extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\chrome\content\api, , [6f0af3508109f73f9c36214db3500cf4],
PUP.Optional.CrossRider.A, C:\Users\lukas\AppData\Roaming\Mozilla\Firefox\Profiles\b4dn6zje.default\Extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\chrome\content\core, , [6f0af3508109f73f9c36214db3500cf4],
PUP.Optional.CrossRider.A, C:\Users\lukas\AppData\Roaming\Mozilla\Firefox\Profiles\b4dn6zje.default\Extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\defaults, , [6f0af3508109f73f9c36214db3500cf4],
PUP.Optional.CrossRider.A, C:\Users\lukas\AppData\Roaming\Mozilla\Firefox\Profiles\b4dn6zje.default\Extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\defaults\preferences, , [6f0af3508109f73f9c36214db3500cf4],
PUP.Optional.CrossRider.A, C:\Users\lukas\AppData\Roaming\Mozilla\Firefox\Profiles\b4dn6zje.default\Extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\extensionData, , [6f0af3508109f73f9c36214db3500cf4],
PUP.Optional.CrossRider.A, C:\Users\lukas\AppData\Roaming\Mozilla\Firefox\Profiles\b4dn6zje.default\Extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\extensionData\plugins, , [6f0af3508109f73f9c36214db3500cf4],
PUP.Optional.CrossRider.A, C:\Users\lukas\AppData\Roaming\Mozilla\Firefox\Profiles\b4dn6zje.default\Extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\extensionData\userCode, , [6f0af3508109f73f9c36214db3500cf4],
PUP.Optional.CrossRider.A, C:\Users\lukas\AppData\Roaming\Mozilla\Firefox\Profiles\b4dn6zje.default\Extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\locale, , [6f0af3508109f73f9c36214db3500cf4],
PUP.Optional.CrossRider.A, C:\Users\lukas\AppData\Roaming\Mozilla\Firefox\Profiles\b4dn6zje.default\Extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\locale\en-US, , [6f0af3508109f73f9c36214db3500cf4],
PUP.Optional.CrossRider.A, C:\Users\lukas\AppData\Roaming\Mozilla\Firefox\Profiles\b4dn6zje.default\Extensions\f80af4ec-42b9-429d-99b0-4078ec7cf864@44882d20-8865-4b13-b79e-ae8470d9a955.com\skin, , [6f0af3508109f73f9c36214db3500cf4],
PUP.Optional.CrossRider.A, C:\Users\Jirka\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kfgaibfbmkjgmimhbbaikfnpkkjkpoan, , [bfbaaf940c7edd59c05ab1c1d132cb35],
PUP.Optional.CrossRider.A, C:\Users\lukas\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kfgaibfbmkjgmimhbbaikfnpkkjkpoan, , [e396063d07838ea81109165cad5609f7],
PUP.Optional.CrossRider.A, C:\Users\Veronika.lukas-PC\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kfgaibfbmkjgmimhbbaikfnpkkjkpoan, , [4f2afe45c8c20e28dd3d640e43c08e72],
PUP.Optional.Spigot.A, C:\Users\Veronika.lukas-PC\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hbcennhacfaagdopikcegfcobcadeocj, , [0574b2914248c0769a95126ab35042be],
PUP.Optional.Spigot.A, C:\Users\Veronika.lukas-PC\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pfndaklgolladniicklehhancnlgocpp, , [abce79ca0c7e81b531ffeb91996a6c94],
PUP.Optional.CrossRider.A, C:\Users\Jirka\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cdihkdldaicijakhchgojcokhpamkibi, , [fc7d6bd85f2b85b1c866c0c037cc1ae6],
PUP.Optional.CrossRider.A, C:\Users\lukas\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cdihkdldaicijakhchgojcokhpamkibi, , [7efb53f0e1a9e452e94590f0a95afc04],
PUP.Optional.CrossRider.A, C:\Users\Jirka\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_cdihkdldaicijakhchgojcokhpamkibi_0, , [433699aa99f14de9f639710fe41f47b9],
PUP.Optional.CrossRider.A, C:\Users\lukas\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_cdihkdldaicijakhchgojcokhpamkibi_0, , [3544f54e7515ee480827245cfc07d22e],
Trojan.Agent.CR, C:\Windows\KBD2341Update-godimpbmfohihoaikgfknnnmlncabkkp, , [d2a75ee52862f343cc39b9c9c3404eb2],
PUP.Optional.AdsRemover.A, C:\ProgramData\Ads Remover, , [43360a39177363d3baf7b8d927dce818],
PUP.Optional.ExtremeBlocker.A, C:\ProgramData\Extreme Blocker, , [4c2d94afdcae82b4a2289bf658ab14ec],
PUP.Optional.Spigot.A, C:\Users\Veronika.lukas-PC\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mhkaekfpcppmmioggniknbnbdbcigpkk, , [2c4ddb689bef3204e55fcdce34cfa759],
PUP.Optional.Spigot.A, C:\Users\Veronika.lukas-PC\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\icdlfehblmklkikfigmjhbmmpmkmpooj, , [b2c751f23f4b59ddf74f3a6150b3c937],
PUP.Optional.BlockTheAds.A, C:\ProgramData\Block The Ads, , [05748cb70585f640afe19ffcda293bc5],
PUP.Optional.Babylon.A, C:\Program Files (x86)\Mozilla Firefox\Extensions\ffxtlbr@babylon.com, , [b3c6cf74424862d4ba5b0c9261a22cd4],
PUP.Optional.Babylon.A, C:\Program Files (x86)\Mozilla Firefox\Extensions\ffxtlbr@babylon.com\defaults, , [b3c6cf74424862d4ba5b0c9261a22cd4],
PUP.Optional.Babylon.A, C:\Program Files (x86)\Mozilla Firefox\Extensions\ffxtlbr@babylon.com\defaults\preferences, , [b3c6cf74424862d4ba5b0c9261a22cd4],
PUP.Optional.SpeedAnalysis.A, C:\Users\Jirka\AppData\Roaming\Mozilla\Extensions\speedanalysis02@SpeedAnalysis.com, , [324755eeff8b072fb7c42b7462a1c937],
PUP.Optional.SpeedAnalysis.A, C:\Users\Jirka\AppData\Roaming\Mozilla\Extensions\speedanalysis02@SpeedAnalysis.com\chrome, , [324755eeff8b072fb7c42b7462a1c937],
PUP.Optional.SpeedAnalysis.A, C:\Users\Jirka\AppData\Roaming\Mozilla\Extensions\speedanalysis02@SpeedAnalysis.com\chrome\content, , [324755eeff8b072fb7c42b7462a1c937],
PUP.Optional.SpeedAnalysis.A, C:\Users\Jirka\AppData\Roaming\Mozilla\Extensions\speedanalysis02@SpeedAnalysis.com\chrome\content\mz, , [324755eeff8b072fb7c42b7462a1c937],
PUP.Optional.SpeedAnalysis.A, C:\Users\Jirka\AppData\Roaming\Mozilla\Extensions\speedanalysis02@SpeedAnalysis.com\chrome\skin, , [324755eeff8b072fb7c42b7462a1c937],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\cfg, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\data, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\engine, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\engine\cache, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\engine\defs, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\engine\quarantine, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\engine\trustzone, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\font, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\log, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\pfdatapfdata, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\pfdatapfdata\SSL, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\AdBlock, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\AdBlock\image, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\AdBlock\image\default, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\AdBlock\layout, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\AdBlock\layout\default, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\AdBlock\style, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\app, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\exam, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\app\layout, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\app\layout\new, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\app\style, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\bugreport, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\bugreport\image, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\bugreport\image\default, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\bugreport\image\default\res, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\bugreport\layout, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\bugreport\layout\default, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\bugreport\style, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\clean, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\clean\image, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\clean\image\default, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\clean\layout, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\clean\layout\default, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\clean\style, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\common, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\common\image, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\common\image\default, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\common\layout, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\common\style, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\fbSkin, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\fbSkin\image, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\fbSkin\image\default, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\fbSkin\layout, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\fbSkin\layout\default, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\fbSkin\style, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\HistoryRecord, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\HistoryRecord\image, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\HistoryRecord\image\default, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\HistoryRecord\layout, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\HistoryRecord\layout\default, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\HistoryRecord\style, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\desk_bkg, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\foldericon, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\arrangedesktop, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\tip, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\layout, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\layout\default, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\style, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\iSafeSet, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\iSafeSet\image, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\iSafeSet\image\default, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\iSafeSet\layout, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\iSafeSet\layout\default, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\iSafeSet\style, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\Lottery, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\Lottery\layout, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\Lottery\layout\default, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\Lottery\resouce, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\Lottery\resouce\default, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\Lottery\style, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\NewClean, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\NewClean\image, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\NewClean\image\newclean, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\NewClean\layout, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\NewClean\layout\newclean, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\NewClean\style, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\optimize, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\optimize\image, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\optimize\image\default, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\optimize\layout, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\optimize\layout\default, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\optimize\style, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\plugin, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\plugin\image, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\plugin\image\default, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\plugin\layout, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\plugin\layout\default, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\plugin\style, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\SafeProtect, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\SafeProtect\image, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\SafeProtect\image\default, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\SafeProtect\layout, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\SafeProtect\layout\default, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\SafeProtect\style, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\softmgr, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\softmgr\image, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\softmgr\image\default, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\softmgr\layout, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\softmgr\layout\default, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\softmgr\style, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\TaskHelper, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\TaskHelper\image, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\TaskHelper\image\default, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\TaskHelper\image\default\res, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\TaskHelper\layout, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\TaskHelper\layout\default, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\TaskHelper\style, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\tray2, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\tray2\image, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\tray2\layout, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\tray2\layout\pop, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\tray2\style, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Appstore, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Feedback, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Feedback\image, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Feedback\layout, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Feedback\style, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\image, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\image\float, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\layout, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\style, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\iDesk, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\iDesk\foldericon, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\iDesk\image, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\iDesk\image\arrangedesktop, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\iDesk\layout, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\iDesk\style, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\MsgCenter, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\MsgCenter\layout, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\MsgCenter\layout\default, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\MsgCenter\resouce, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\MsgCenter\resouce\default, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\MsgCenter\style, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Nodisturb, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Nodisturb\image, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Nodisturb\layout, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Nodisturb\style, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Protect, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Protect\image, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Protect\layout, , [ee8b5ee55a30b680a9a5544f50b3c838],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Protect\style, , [ee8b5ee55a30b680a9a5544f50b3c838],