Presmerovavanie na rôzne surveye a pod Vyřešeno

Místo pro vaše HiJackThis logy a logy z dalších programů…

Moderátoři: Mods_senior, Security team

BananekSK
nováček
Příspěvky: 29
Registrován: březen 15
Pohlaví: Muž
Stav:
Offline

Presmerovavanie na rôzne surveye a pod

Příspěvekod BananekSK » 29 bře 2015 17:44

Zdravím.
Tak na základe jedného z vašich kolegov som sa dozvedel o tomto programe a spravil som log z neho...
A problém? Nuž idem napr na nejakú stránku ( napr. aj na Vaše fórum ) a občas ( skoro vždy ) ma to redirectne na nejakú stránku zo surveyom alebo nejakú hru prehliadačovu napr divoké kme... apod... ( nechcem im robit reklamy :D )
Takže tu je log :
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:40:45, on 29. 3. 2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17689)


Boot mode: Normal

Running processes:
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\ProgramData\Battle.net\Agent\Agent.3885\Agent.exe
C:\Program Files (x86)\Battle.net\Battle.net.5621\Battle.net.exe
C:\Program Files (x86)\Hearthstone\Hearthstone.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Users\patrik\Downloads\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.mystartsearch.com/?type=hp&t ... XXS3PEA1TP
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.mystartsearch.com/web/?type= ... 3PEA1TP&q={searchTerms}
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.mystartsearch.com/web/?type= ... 3PEA1TP&q={searchTerms}
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: ExastraSaeVingss - {27a0d9a1-e05d-4f18-b91c-50d8e388ff19} - C:\Program Files (x86)\ExastraSaeVingss\QhhpCllYWCIEey.dll
O2 - BHO: DOwnSoave - {49b8376d-1c43-4755-bc7c-9a76bf0cdbed} - C:\Program Files (x86)\DOwnSoave\GoPXucbN9BnsUG.dll
O2 - BHO: 50CooupoNs - {ee54eb22-76d6-46cc-849e-c53d868e99af} - C:\Program Files (x86)\50CooupoNs\jvYMUKovQTNEUV.dll
O4 - HKLM\..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
O4 - HKLM\..\Run: [Dolby Advanced Audio v2] "C:\Dolby PCEE4\pcee4.exe" -autostart
O4 - HKLM\..\Run: [BCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
O4 - HKLM\..\Run: [MSStp] C:\Windows\inf\msstp.vbe
O4 - HKLM\..\Run: [mncdyyaahSrv] C:\Windows\system32\mncdyyaah.vbe
O4 - HKLM\..\Run: [VirtualCloneDrive] "C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - Startup: worms 4 mayhem game.lnk = C:\ProgramData\{b1dbff56-2d0d-8e29-b1db-bff562d0fd58}\worms 4 mayhem game.exe
O4 - Global Startup: LINKMAGIC.lnk = ?
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&oslať do programu OneNote - res://C:\PROGRA~2\MICROS~2\Office14\ONBttnIE.dll/105
O9 - Extra button: Odoslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&oslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: &Prepojené poznámky programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: &Prepojené poznámky programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O20 - AppInit_DLLs: C:\Windows\SysWOW64\nvinit.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: globalUpdate Update Service (globalUpdate) (globalUpdate) - globalUpdate - C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe
O23 - Service: globalUpdate Update Service (globalUpdatem) (globalUpdatem) - globalUpdate - C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: LMIGuardianSvc - LogMeIn, Inc. - C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Wireless PAN DHCP Server (MyWiFiDHCPDNS) - Unknown owner - C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: ShopperPro Update (SPBIUpd) - ShopperPro - C:\Program Files\Common Files\ShopperPro\spbiu.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: Survarium Update Service - Unknown owner - C:\Program Files (x86)\Survarium\game\binaries\x86\survarium_service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 10282 bytes
------------------------------------
Prosím o rýchlu odpoveď a ešte raz ďakujem :)

Reklama
Uživatelský avatar
Orcus
člen Security týmu
Elite Level 10.5
Elite Level 10.5
Příspěvky: 10645
Registrován: duben 10
Bydliště: Okolo rostou 3 růže =o)
Pohlaví: Muž
Stav:
Offline

Re: Presmerovavanie na rôzne surveye a pod

Příspěvekod Orcus » 30 bře 2015 06:11

Nevidím antivir.

V HJT fixni:

Kód: Vybrat vše

O4 - HKLM\..\Run: [MSStp] C:\Windows\inf\msstp.vbe
O4 - HKLM\..\Run: [mncdyyaahSrv] C:\Windows\system32\mncdyyaah.vbe


Ručně smaž tyto soubory:
C:\Windows\system32\mncdyyaah.vbe
C:\Windows\inf\msstp.vbe

===================================================

Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected. Poté klikni na Main (hlavní stránku ) a klikni na Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranění historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit dočasné soubory Windows, vysypat koš atd.

- Pokud používáš jen Google Chrome , tak ATF nemusíš použít.

===================================================

Stáhni si TFC
Otevři soubor a zavři všechny ostatní okna, Klikni na Start k zahájení procesu. Program by neměl trvat dlouho.
Poté by se měl PC restartovat, pokud ne , proveď sám.

===================================================

Stáhni AdwCleaner (by Xplode)

Ulož si ho na svojí plochu
Ukonči všechny programy , okna a prohlížeče
Spusť program poklepáním a klikni na „Prohledat-Scan“
Po skenu se objeví log ( jinak je uložen systémovem disku jako AdwCleaner[R?].txt), jeho obsah sem celý vlož.

===================================================

Stáhni si Malwarebytes' Anti-Malware
- Při instalaci odeber zatržítko u „Povolit bezplatnou zkušební verzi Malwarebytes' Anti-Malware Premium“
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Aktualizace Malwarebytes' Anti-Malware a Spustit aplikaci Malwarebytes' Anti-Malware, pokud jo tak klikni na tlačítko konec
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a klikni na Skenovat nyní a
- po proběhnutí programu se ti objeví hláška vpravo dole tak klikni na b] Kopírovat do schránky [/b]a a vlož sem celý log.

- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).

Pokud budou problémy , spusť v nouz. režimu.
Láska hřeje, ale uhlí je uhlí. :fire:



Log z HJT vkládejte do HJT sekce. Je-li moc dlouhý, rozděl jej do více zpráv.

Pár rad k bezpečnosti PC.

Po dobu mé nepřítomnosti mě zastupuje memphisto, jaro3 a Diallix

Pokud budete spokojeni , můžete podpořit naše fórum.

BananekSK
nováček
Příspěvky: 29
Registrován: březen 15
Pohlaví: Muž
Stav:
Offline

Re: Presmerovavanie na rôzne surveye a pod

Příspěvekod BananekSK » 30 bře 2015 15:37

Zdravím je tu jeden menší problém... Ten súbor ako ste mi písali čo sa nachádza v system32 som nenašiel pritom v Hijackovi mi ho našlo tak som ho vypol ale neviem neviem ako čo..
No a ďalej tu je LOG z Malwarebytes Anti-Malware :
Malwarebytes Anti-Malware
www.malwarebytes.org

Dátum skenovania: 30. 3. 2015
Scan �?as: 15:18:57
Logfile:
Správca: áno

Verzia: 2.01.4.1018
Malware databázy: v2015.03.30.05
Rootkit databázy: v2015.03.26.01
Licencia: Zadarmo
Ochrana pred škodlivým softvérom: Telesne
Škodlivých webových stránok Ochrana: Telesne
Sebaobrany: Telesne

OS: Windows 7 Service Pack 1
CPU: x64
Systém súborov: NTFS
Používateľ: patrik

Typ skenu: Hrozba Scan
Výsledok: Dokon�?ené
Objekty naskenované: 369599
Uplynulý �?as: 15 min, 16 sec

Pamäť: Povolené
Pri spustení: Povolené
Súborový systém: Povolené
Archív: Povolené
Rootkity: Telesne
Heuristiky: Povolené
ŠTEŇA: Povolené
VYKUROVAC: Povolené

Procesy: 0
(Žiadne zákernej položky neboli zistené)

Moduly: 1
PUP.Optional.DeltaFix.A, C:\Program Files (x86)\DeltaFix\DeltaFix.dll, , [89243f0c355572c41debfdcc7b88738d],

Kľú�?e databázy Registry: 168
PUP.Optional.Goobzo, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SPBIUpd, , [456853f8b3d7c274be4832965baa1ae6],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\CLSID\{27a0d9a1-e05d-4f18-b91c-50d8e388ff19}, , [713c3a111a70e94d2f8a26121be71fe1],
PUP.Optional.Multiplug, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{27A0D9A1-E05D-4F18-B91C-50D8E388FF19}, , [713c3a111a70e94d2f8a26121be71fe1],
PUP.Optional.Multiplug, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{27A0D9A1-E05D-4F18-B91C-50D8E388FF19}, , [713c3a111a70e94d2f8a26121be71fe1],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\P27a0d9a1_e05d_4f18_b91c_50d8e388ff19_.P27a0d9a1_e05d_4f18_b91c_50d8e388ff19_, , [713c3a111a70e94d2f8a26121be71fe1],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\P27a0d9a1_e05d_4f18_b91c_50d8e388ff19_.P27a0d9a1_e05d_4f18_b91c_50d8e388ff19_.9, , [713c3a111a70e94d2f8a26121be71fe1],
PUP.Optional.Multiplug, HKLM\SOFTWARE\WOW6432NODE\CLASSES\P27a0d9a1_e05d_4f18_b91c_50d8e388ff19_.P27a0d9a1_e05d_4f18_b91c_50d8e388ff19_, , [713c3a111a70e94d2f8a26121be71fe1],
PUP.Optional.Multiplug, HKLM\SOFTWARE\WOW6432NODE\CLASSES\P27a0d9a1_e05d_4f18_b91c_50d8e388ff19_.P27a0d9a1_e05d_4f18_b91c_50d8e388ff19_.9, , [713c3a111a70e94d2f8a26121be71fe1],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\WOW6432NODE\P27a0d9a1_e05d_4f18_b91c_50d8e388ff19_.P27a0d9a1_e05d_4f18_b91c_50d8e388ff19_, , [713c3a111a70e94d2f8a26121be71fe1],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\WOW6432NODE\P27a0d9a1_e05d_4f18_b91c_50d8e388ff19_.P27a0d9a1_e05d_4f18_b91c_50d8e388ff19_.9, , [713c3a111a70e94d2f8a26121be71fe1],
PUP.Optional.Multiplug, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{27A0D9A1-E05D-4F18-B91C-50D8E388FF19}, , [713c3a111a70e94d2f8a26121be71fe1],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{27a0d9a1-e05d-4f18-b91c-50d8e388ff19}, , [713c3a111a70e94d2f8a26121be71fe1],
PUP.Optional.Multiplug, HKU\S-1-5-21-1819284140-3831816572-1499321633-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{27A0D9A1-E05D-4F18-B91C-50D8E388FF19}, , [713c3a111a70e94d2f8a26121be71fe1],
PUP.Optional.Multiplug, HKU\S-1-5-21-1819284140-3831816572-1499321633-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{27A0D9A1-E05D-4F18-B91C-50D8E388FF19}, , [713c3a111a70e94d2f8a26121be71fe1],
PUP.Optional.Multiplug, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{27A0D9A1-E05D-4F18-B91C-50D8E388FF19}, , [713c3a111a70e94d2f8a26121be71fe1],
PUP.Optional.Multiplug, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{27A0D9A1-E05D-4F18-B91C-50D8E388FF19}, , [713c3a111a70e94d2f8a26121be71fe1],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\CLSID\{27A0D9A1-E05D-4F18-B91C-50D8E388FF19}\INPROCSERVER32, , [713c3a111a70e94d2f8a26121be71fe1],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\CLSID\{49b8376d-1c43-4755-bc7c-9a76bf0cdbed}, , [1499d3784545f145febbdf59a1615ea2],
PUP.Optional.Multiplug, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{49B8376D-1C43-4755-BC7C-9A76BF0CDBED}, , [1499d3784545f145febbdf59a1615ea2],
PUP.Optional.Multiplug, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{49B8376D-1C43-4755-BC7C-9A76BF0CDBED}, , [1499d3784545f145febbdf59a1615ea2],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\P49b8376d_1c43_4755_bc7c_9a76bf0cdbed_.P49b8376d_1c43_4755_bc7c_9a76bf0cdbed_, , [1499d3784545f145febbdf59a1615ea2],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\P49b8376d_1c43_4755_bc7c_9a76bf0cdbed_.P49b8376d_1c43_4755_bc7c_9a76bf0cdbed_.9, , [1499d3784545f145febbdf59a1615ea2],
PUP.Optional.Multiplug, HKLM\SOFTWARE\WOW6432NODE\CLASSES\P49b8376d_1c43_4755_bc7c_9a76bf0cdbed_.P49b8376d_1c43_4755_bc7c_9a76bf0cdbed_, , [1499d3784545f145febbdf59a1615ea2],
PUP.Optional.Multiplug, HKLM\SOFTWARE\WOW6432NODE\CLASSES\P49b8376d_1c43_4755_bc7c_9a76bf0cdbed_.P49b8376d_1c43_4755_bc7c_9a76bf0cdbed_.9, , [1499d3784545f145febbdf59a1615ea2],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\WOW6432NODE\P49b8376d_1c43_4755_bc7c_9a76bf0cdbed_.P49b8376d_1c43_4755_bc7c_9a76bf0cdbed_, , [1499d3784545f145febbdf59a1615ea2],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\WOW6432NODE\P49b8376d_1c43_4755_bc7c_9a76bf0cdbed_.P49b8376d_1c43_4755_bc7c_9a76bf0cdbed_.9, , [1499d3784545f145febbdf59a1615ea2],
PUP.Optional.Multiplug, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{49B8376D-1C43-4755-BC7C-9A76BF0CDBED}, , [1499d3784545f145febbdf59a1615ea2],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{49b8376d-1c43-4755-bc7c-9a76bf0cdbed}, , [1499d3784545f145febbdf59a1615ea2],
PUP.Optional.Multiplug, HKU\S-1-5-21-1819284140-3831816572-1499321633-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{49B8376D-1C43-4755-BC7C-9A76BF0CDBED}, , [1499d3784545f145febbdf59a1615ea2],
PUP.Optional.Multiplug, HKU\S-1-5-21-1819284140-3831816572-1499321633-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{49B8376D-1C43-4755-BC7C-9A76BF0CDBED}, , [1499d3784545f145febbdf59a1615ea2],
PUP.Optional.Multiplug, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{49B8376D-1C43-4755-BC7C-9A76BF0CDBED}, , [1499d3784545f145febbdf59a1615ea2],
PUP.Optional.Multiplug, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{49B8376D-1C43-4755-BC7C-9A76BF0CDBED}, , [1499d3784545f145febbdf59a1615ea2],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\CLSID\{49B8376D-1C43-4755-BC7C-9A76BF0CDBED}\INPROCSERVER32, , [1499d3784545f145febbdf59a1615ea2],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\CLSID\{ee54eb22-76d6-46cc-849e-c53d868e99af}, , [bdf0f2590d7de551d4e59b9ddd25c937],
PUP.Optional.Multiplug, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{EE54EB22-76D6-46CC-849E-C53D868E99AF}, , [bdf0f2590d7de551d4e59b9ddd25c937],
PUP.Optional.Multiplug, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{EE54EB22-76D6-46CC-849E-C53D868E99AF}, , [bdf0f2590d7de551d4e59b9ddd25c937],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\Pee54eb22_76d6_46cc_849e_c53d868e99af_.Pee54eb22_76d6_46cc_849e_c53d868e99af_, , [bdf0f2590d7de551d4e59b9ddd25c937],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\Pee54eb22_76d6_46cc_849e_c53d868e99af_.Pee54eb22_76d6_46cc_849e_c53d868e99af_.9, , [bdf0f2590d7de551d4e59b9ddd25c937],
PUP.Optional.Multiplug, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Pee54eb22_76d6_46cc_849e_c53d868e99af_.Pee54eb22_76d6_46cc_849e_c53d868e99af_, , [bdf0f2590d7de551d4e59b9ddd25c937],
PUP.Optional.Multiplug, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Pee54eb22_76d6_46cc_849e_c53d868e99af_.Pee54eb22_76d6_46cc_849e_c53d868e99af_.9, , [bdf0f2590d7de551d4e59b9ddd25c937],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\WOW6432NODE\Pee54eb22_76d6_46cc_849e_c53d868e99af_.Pee54eb22_76d6_46cc_849e_c53d868e99af_, , [bdf0f2590d7de551d4e59b9ddd25c937],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\WOW6432NODE\Pee54eb22_76d6_46cc_849e_c53d868e99af_.Pee54eb22_76d6_46cc_849e_c53d868e99af_.9, , [bdf0f2590d7de551d4e59b9ddd25c937],
PUP.Optional.Multiplug, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{EE54EB22-76D6-46CC-849E-C53D868E99AF}, , [bdf0f2590d7de551d4e59b9ddd25c937],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{ee54eb22-76d6-46cc-849e-c53d868e99af}, , [bdf0f2590d7de551d4e59b9ddd25c937],
PUP.Optional.Multiplug, HKU\S-1-5-21-1819284140-3831816572-1499321633-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{EE54EB22-76D6-46CC-849E-C53D868E99AF}, , [bdf0f2590d7de551d4e59b9ddd25c937],
PUP.Optional.Multiplug, HKU\S-1-5-21-1819284140-3831816572-1499321633-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{EE54EB22-76D6-46CC-849E-C53D868E99AF}, , [bdf0f2590d7de551d4e59b9ddd25c937],
PUP.Optional.Multiplug, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{EE54EB22-76D6-46CC-849E-C53D868E99AF}, , [bdf0f2590d7de551d4e59b9ddd25c937],
PUP.Optional.Multiplug, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{EE54EB22-76D6-46CC-849E-C53D868E99AF}, , [bdf0f2590d7de551d4e59b9ddd25c937],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\CLSID\{EE54EB22-76D6-46CC-849E-C53D868E99AF}\INPROCSERVER32, , [bdf0f2590d7de551d4e59b9ddd25c937],
PUP.Optional.Multiplug, HKU\S-1-5-21-1819284140-3831816572-1499321633-1000_Classes\TYPELIB\{157B1AA6-3E5C-404A-9118-C1D91F537040}, , [34791d2e90fa90a69ce59c8f9172cf31],
PUP.Optional.Multiplug, HKU\S-1-5-21-1819284140-3831816572-1499321633-1000_Classes\INTERFACE\{3B3F3AAD-FB97-49FF-BFEE-D22869AC4326}, , [34791d2e90fa90a69ce59c8f9172cf31],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\CLSID\{ca37100e-900a-4607-8dcf-be66a0fdbdb3}, , [9b1274d71179d6601c9b4ce607fb23dd],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\Pca37100e_900a_4607_8dcf_be66a0fdbdb3_.Pca37100e_900a_4607_8dcf_be66a0fdbdb3_, , [9b1274d71179d6601c9b4ce607fb23dd],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\Pca37100e_900a_4607_8dcf_be66a0fdbdb3_.Pca37100e_900a_4607_8dcf_be66a0fdbdb3_.9, , [9b1274d71179d6601c9b4ce607fb23dd],
PUP.Optional.Multiplug, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Pca37100e_900a_4607_8dcf_be66a0fdbdb3_.Pca37100e_900a_4607_8dcf_be66a0fdbdb3_, , [9b1274d71179d6601c9b4ce607fb23dd],
PUP.Optional.Multiplug, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Pca37100e_900a_4607_8dcf_be66a0fdbdb3_.Pca37100e_900a_4607_8dcf_be66a0fdbdb3_.9, , [9b1274d71179d6601c9b4ce607fb23dd],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\WOW6432NODE\Pca37100e_900a_4607_8dcf_be66a0fdbdb3_.Pca37100e_900a_4607_8dcf_be66a0fdbdb3_, , [9b1274d71179d6601c9b4ce607fb23dd],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\WOW6432NODE\Pca37100e_900a_4607_8dcf_be66a0fdbdb3_.Pca37100e_900a_4607_8dcf_be66a0fdbdb3_.9, , [9b1274d71179d6601c9b4ce607fb23dd],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\CLSID\{b9caf9cf-f11c-4175-b272-b7d11d3e57e1}, , [169777d48703db5b2196d75bd32fde22],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\Pb9caf9cf_f11c_4175_b272_b7d11d3e57e1_.Pb9caf9cf_f11c_4175_b272_b7d11d3e57e1_, , [169777d48703db5b2196d75bd32fde22],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\Pb9caf9cf_f11c_4175_b272_b7d11d3e57e1_.Pb9caf9cf_f11c_4175_b272_b7d11d3e57e1_.9, , [169777d48703db5b2196d75bd32fde22],
PUP.Optional.Multiplug, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Pb9caf9cf_f11c_4175_b272_b7d11d3e57e1_.Pb9caf9cf_f11c_4175_b272_b7d11d3e57e1_, , [169777d48703db5b2196d75bd32fde22],
PUP.Optional.Multiplug, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Pb9caf9cf_f11c_4175_b272_b7d11d3e57e1_.Pb9caf9cf_f11c_4175_b272_b7d11d3e57e1_.9, , [169777d48703db5b2196d75bd32fde22],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\WOW6432NODE\Pb9caf9cf_f11c_4175_b272_b7d11d3e57e1_.Pb9caf9cf_f11c_4175_b272_b7d11d3e57e1_, , [169777d48703db5b2196d75bd32fde22],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\WOW6432NODE\Pb9caf9cf_f11c_4175_b272_b7d11d3e57e1_.Pb9caf9cf_f11c_4175_b272_b7d11d3e57e1_.9, , [169777d48703db5b2196d75bd32fde22],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\CLSID\{3f7556de-050a-45f4-bef9-f54ffc43ca9a}, , [0ca1c8837e0c201690275bd7f012bd43],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\P3f7556de_050a_45f4_bef9_f54ffc43ca9a_.P3f7556de_050a_45f4_bef9_f54ffc43ca9a_, , [0ca1c8837e0c201690275bd7f012bd43],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\P3f7556de_050a_45f4_bef9_f54ffc43ca9a_.P3f7556de_050a_45f4_bef9_f54ffc43ca9a_.9, , [0ca1c8837e0c201690275bd7f012bd43],
PUP.Optional.Multiplug, HKLM\SOFTWARE\WOW6432NODE\CLASSES\P3f7556de_050a_45f4_bef9_f54ffc43ca9a_.P3f7556de_050a_45f4_bef9_f54ffc43ca9a_, , [0ca1c8837e0c201690275bd7f012bd43],
PUP.Optional.Multiplug, HKLM\SOFTWARE\WOW6432NODE\CLASSES\P3f7556de_050a_45f4_bef9_f54ffc43ca9a_.P3f7556de_050a_45f4_bef9_f54ffc43ca9a_.9, , [0ca1c8837e0c201690275bd7f012bd43],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\WOW6432NODE\P3f7556de_050a_45f4_bef9_f54ffc43ca9a_.P3f7556de_050a_45f4_bef9_f54ffc43ca9a_, , [0ca1c8837e0c201690275bd7f012bd43],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\WOW6432NODE\P3f7556de_050a_45f4_bef9_f54ffc43ca9a_.P3f7556de_050a_45f4_bef9_f54ffc43ca9a_.9, , [0ca1c8837e0c201690275bd7f012bd43],
Trojan.Agent, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{AD11DADE-C597-45D9-D8C5-1D2EB0B89613}, , [68451c2f404a55e13186907b4cb602fe],
Trojan.Agent, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{4CEE92A3-9F0C-51AB-ADC0-34EC24AD7B7E}, , [ecc182c998f2092d259258b348ba9070],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\CLSID\{b146f4f8-eb84-4a32-b423-3172e127e3fa}, , [931a56f5404a6fc70ea92a08d92933cd],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\Pb146f4f8_eb84_4a32_b423_3172e127e3fa_.Pb146f4f8_eb84_4a32_b423_3172e127e3fa_, , [931a56f5404a6fc70ea92a08d92933cd],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\Pb146f4f8_eb84_4a32_b423_3172e127e3fa_.Pb146f4f8_eb84_4a32_b423_3172e127e3fa_.9, , [931a56f5404a6fc70ea92a08d92933cd],
PUP.Optional.Multiplug, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Pb146f4f8_eb84_4a32_b423_3172e127e3fa_.Pb146f4f8_eb84_4a32_b423_3172e127e3fa_, , [931a56f5404a6fc70ea92a08d92933cd],
PUP.Optional.Multiplug, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Pb146f4f8_eb84_4a32_b423_3172e127e3fa_.Pb146f4f8_eb84_4a32_b423_3172e127e3fa_.9, , [931a56f5404a6fc70ea92a08d92933cd],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\WOW6432NODE\Pb146f4f8_eb84_4a32_b423_3172e127e3fa_.Pb146f4f8_eb84_4a32_b423_3172e127e3fa_, , [931a56f5404a6fc70ea92a08d92933cd],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\WOW6432NODE\Pb146f4f8_eb84_4a32_b423_3172e127e3fa_.Pb146f4f8_eb84_4a32_b423_3172e127e3fa_.9, , [931a56f5404a6fc70ea92a08d92933cd],
Trojan.Agent, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{4820778D-AB0D-6D18-C316-52A6A0E1D507}, , [cae39caf414935012097709b7f8346ba],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\CLSID\{2942405a-deb0-4ada-989f-0bd45ef1f85f}, , [8a239dae35559b9b783f9d957d859868],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\P2942405a_deb0_4ada_989f_0bd45ef1f85f_.P2942405a_deb0_4ada_989f_0bd45ef1f85f_, , [8a239dae35559b9b783f9d957d859868],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\P2942405a_deb0_4ada_989f_0bd45ef1f85f_.P2942405a_deb0_4ada_989f_0bd45ef1f85f_.9, , [8a239dae35559b9b783f9d957d859868],
PUP.Optional.Multiplug, HKLM\SOFTWARE\WOW6432NODE\CLASSES\P2942405a_deb0_4ada_989f_0bd45ef1f85f_.P2942405a_deb0_4ada_989f_0bd45ef1f85f_, , [8a239dae35559b9b783f9d957d859868],
PUP.Optional.Multiplug, HKLM\SOFTWARE\WOW6432NODE\CLASSES\P2942405a_deb0_4ada_989f_0bd45ef1f85f_.P2942405a_deb0_4ada_989f_0bd45ef1f85f_.9, , [8a239dae35559b9b783f9d957d859868],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\WOW6432NODE\P2942405a_deb0_4ada_989f_0bd45ef1f85f_.P2942405a_deb0_4ada_989f_0bd45ef1f85f_, , [8a239dae35559b9b783f9d957d859868],
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\WOW6432NODE\P2942405a_deb0_4ada_989f_0bd45ef1f85f_.P2942405a_deb0_4ada_989f_0bd45ef1f85f_.9, , [8a239dae35559b9b783f9d957d859868],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\20891, , [f3baad9ed8b2f541b562b34a37cca35d],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\21836, , [01ac76d597f36bcb7c9b7a8342c1dd23],
PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, , [5954a9a271196ec83e4e09216b9a6b95],
PUP.Optional.iWebar.A, HKLM\SOFTWARE\WOW6432NODE\iWebar, , [2d802625c6c46acc4efd437fac57dc24],
PUP.Optional.iWebar.A, HKLM\SOFTWARE\WOW6432NODE\iWebar-nv, , [832ab596fa90013577d44f7339cab947],
PUP.Optional.MyStartSearch.A, HKLM\SOFTWARE\WOW6432NODE\mystartsearchSoftware, , [6a43ad9eec9e77bf9cd8e2eb3dc614ec],
PUP.Optional.Senses.A, HKLM\SOFTWARE\WOW6432NODE\Senses-nv, , [cde0af9c682274c2a89391bb7d88c040],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\GLOBALUPDATE\UPDATE, , [228b56f5f199bb7b913440a27a898d73],
PUP.Optional.GlobalUpdate.C, HKLM\SOFTWARE\WOW6432NODE\GLOBALUPDATE\UPDATEDEV, , [1e8fcf7caedc84b2f1c7dcd99b687d83],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\INSTALLEDBROWSEREXTENSIONS\20891, , [c5e896b5e4a62f0744d350ada75c34cc],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\INSTALLEDBROWSEREXTENSIONS\21836, , [86274902ddadaa8c26f1a75630d3f907],
PUP.Optional.Qone8, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, , [f9b40744ec9e290d3d4ff931c441926e],
PUP.Optional.MultiPlug, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{4820778D-AB0D-6D18-C316-52A6A0E1D507}, , [efbed17a305a70c6361c6a6f877c18e8],
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLAPLUGINS\@staging.google.com/globalUpdate Update;version=10, , [cce1252663276bcb90dd320f33d243bd],
PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLAPLUGINS\@staging.google.com/globalUpdate Update;version=4, , [7c314b001e6c1d195519e55cc14429d7],
PUP.Optional.ShopperPro.A, HKLM\SOFTWARE\WOW6432NODE\SHOPPERPRO, , [664796b53c4e62d45bec9832699a06fa],
PUP.Optional.DeltaFix.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\fc67e7a0, , [5e4f90bbbdcd47ef70977851c73c2dd3],
PUP.Optional.iWebar.A, HKU\S-1-5-18\SOFTWARE\APPDATALOW\SOFTWARE\iWebar, , [139a2724b8d21f17ca83d7eb2fd454ac],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1819284140-3831816572-1499321633-1000\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, , [0e9f1b308ffb88aec85d55ded4317090],
PUP.Optional.iWebar.A, HKU\S-1-5-21-1819284140-3831816572-1499321633-1000\SOFTWARE\APPDATALOW\SOFTWARE\iWebar, , [02ab7fcc8a0096a0a1aca919e61dbc44],
PUP.Optional.GlobalUpdate.C, HKU\S-1-5-21-1819284140-3831816572-1499321633-1000\SOFTWARE\GLOBALUPDATE\UPDATE\PROXY, , [1b92e16ad1b9b87effa2298cff04dd23],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1819284140-3831816572-1499321633-1000\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\20891, , [5459a8a3434789ad2c3ae5f207fc9c64],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1819284140-3831816572-1499321633-1000\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\21836, , [1a933417c4c6f73fa6c028afb44fe21e],
PUP.Optional.iWebar.A, HKU\S-1-5-21-1819284140-3831816572-1499321633-1000\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\iWebar, , [03aa7ccfa3e7e353efa1616437cc0cf4],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-1819284140-3831816572-1499321633-1000\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\Object Browser, , [4e5f0645abdff343c9981aa917ec22de],
PUP.Optional.Qone8, HKU\S-1-5-21-1819284140-3831816572-1499321633-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, , [a508fd4ef09a1f17dbb02cfe7491bf41],
PUP.Optional.GlobalUpdate.T, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\globalUpdate, , [3a73ed5e5a30b77f9efdf999a360b24e],
PUP.Optional.GlobalUpdate.T, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\globalUpdatem, , [3a73ed5e5a30b77f9efdf999a360b24e],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\GOOGLEUPDATE.EXE, , [3a73ed5e5a30b77f9efdf999a360b24e],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\GOOGLEUPDATE.EXE, , [3a73ed5e5a30b77f9efdf999a360b24e],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{5645E0E7-FC12-43BF-A6E4-F9751942B298}, , [3a73ed5e5a30b77f9efdf999a360b24e],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\CLASSES\globalUpdate.OneClickCtrl.10, , [3a73ed5e5a30b77f9efdf999a360b24e],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdate.OneClickCtrl.10, , [3a73ed5e5a30b77f9efdf999a360b24e],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\CLASSES\WOW6432NODE\globalUpdate.OneClickCtrl.10, , [3a73ed5e5a30b77f9efdf999a360b24e],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{5645E0E7-FC12-43BF-A6E4-F9751942B298}, , [3a73ed5e5a30b77f9efdf999a360b24e],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5645E0E7-FC12-43BF-A6E4-F9751942B298}, , [3a73ed5e5a30b77f9efdf999a360b24e],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{5645E0E7-FC12-43BF-A6E4-F9751942B298}, , [3a73ed5e5a30b77f9efdf999a360b24e],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}, , [3a73ed5e5a30b77f9efdf999a360b24e],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\CLASSES\globalUpdate.Update3WebControl.4, , [3a73ed5e5a30b77f9efdf999a360b24e],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\CLASSES\globalUpdate.Update3WebControl.4, , [3a73ed5e5a30b77f9efdf999a360b24e],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\CLASSES\WOW6432NODE\globalUpdate.Update3WebControl.4, , [3a73ed5e5a30b77f9efdf999a360b24e],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}, , [3a73ed5e5a30b77f9efdf999a360b24e],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}, , [3a73ed5e5a30b77f9efdf999a360b24e],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}, , [3a73ed5e5a30b77f9efdf999a360b24e],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{CFC47BB5-5FB5-4AD0-8427-6AA04334A3FC}, , [3a73ed5e5a30b77f9efdf999a360b24e],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{CFC47BB5-5FB5-4AD0-8427-6AA04334A3FC}, , [3a73ed5e5a30b77f9efdf999a360b24e],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{E0ADB535-D7B5-4D8B-B15D-578BDD20D76A}, , [3a73ed5e5a30b77f9efdf999a360b24e],
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{E0ADB535-D7B5-4D8B-B15D-578BDD20D76A}, , [3a73ed5e5a30b77f9efdf999a360b24e],
PUP.Optional.MinimumPrice.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{079E2F0F-FCA0-4163-BC82-5355B879E86E}, , [1b925cefe6a4a393da5f8f07f70c48b8],
PUP.Optional.MinimumPrice.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{4CA94303-9DBE-40E2-ACDD-AE966657FD91}, , [1b925cefe6a4a393da5f8f07f70c48b8],
PUP.Optional.MinimumPrice.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{66A9AAEF-9AD3-4336-A8C2-BDF384CCB553}, , [1b925cefe6a4a393da5f8f07f70c48b8],
PUP.Optional.MinimumPrice.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{F0F6B50E-100C-4839-A519-D812A5A57EA1}, , [1b925cefe6a4a393da5f8f07f70c48b8],
PUP.Optional.MinimumPrice.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{4CA94303-9DBE-40E2-ACDD-AE966657FD91}, , [1b925cefe6a4a393da5f8f07f70c48b8],
PUP.Optional.MinimumPrice.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{66A9AAEF-9AD3-4336-A8C2-BDF384CCB553}, , [1b925cefe6a4a393da5f8f07f70c48b8],
PUP.Optional.MinimumPrice.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{F0F6B50E-100C-4839-A519-D812A5A57EA1}, , [1b925cefe6a4a393da5f8f07f70c48b8],
PUP.Optional.MinimumPrice.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{4CA94303-9DBE-40E2-ACDD-AE966657FD91}, , [1b925cefe6a4a393da5f8f07f70c48b8],
PUP.Optional.MinimumPrice.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{66A9AAEF-9AD3-4336-A8C2-BDF384CCB553}, , [1b925cefe6a4a393da5f8f07f70c48b8],
PUP.Optional.MinimumPrice.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{F0F6B50E-100C-4839-A519-D812A5A57EA1}, , [1b925cefe6a4a393da5f8f07f70c48b8],
PUP.Optional.MinimumPrice.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{079E2F0F-FCA0-4163-BC82-5355B879E86E}, , [1b925cefe6a4a393da5f8f07f70c48b8],
PUP.Optional.MinimumPrice.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{079E2F0F-FCA0-4163-BC82-5355B879E86E}, , [1b925cefe6a4a393da5f8f07f70c48b8],
PUP.Optional.ShopperPro, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}, , [15985bf0f09ac67025161488976c8e72],
PUP.Optional.ShopperPro, HKLM\SOFTWARE\CLASSES\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}, , [15985bf0f09ac67025161488976c8e72],
PUP.Optional.ShopperPro, HKLM\SOFTWARE\CLASSES\TYPELIB\{8FB1A663-2820-468B-95C4-5060A4C5F413}, , [15985bf0f09ac67025161488976c8e72],
PUP.Optional.ShopperPro, HKLM\SOFTWARE\CLASSES\INTERFACE\{03C0AC00-86DE-4B55-81BA-2E7CD61C51B1}, , [15985bf0f09ac67025161488976c8e72],
PUP.Optional.ShopperPro, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{03C0AC00-86DE-4B55-81BA-2E7CD61C51B1}, , [15985bf0f09ac67025161488976c8e72],
PUP.Optional.ShopperPro, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{03C0AC00-86DE-4B55-81BA-2E7CD61C51B1}, , [15985bf0f09ac67025161488976c8e72],
PUP.Optional.ShopperPro, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{8FB1A663-2820-468B-95C4-5060A4C5F413}, , [15985bf0f09ac67025161488976c8e72],
PUP.Optional.ShopperPro, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{8FB1A663-2820-468B-95C4-5060A4C5F413}, , [15985bf0f09ac67025161488976c8e72],
PUP.Optional.ShopperPro, HKLM\SOFTWARE\CLASSES\ShopperPro.ShopperProBHO.1, , [15985bf0f09ac67025161488976c8e72],
PUP.Optional.ShopperPro, HKLM\SOFTWARE\CLASSES\ShopperPro.ShopperProBHO, , [15985bf0f09ac67025161488976c8e72],
PUP.Optional.ShopperPro, HKLM\SOFTWARE\WOW6432NODE\CLASSES\ShopperPro.ShopperProBHO, , [15985bf0f09ac67025161488976c8e72],
PUP.Optional.ShopperPro, HKLM\SOFTWARE\CLASSES\WOW6432NODE\ShopperPro.ShopperProBHO, , [15985bf0f09ac67025161488976c8e72],
PUP.Optional.ShopperPro, HKLM\SOFTWARE\WOW6432NODE\CLASSES\ShopperPro.ShopperProBHO.1, , [15985bf0f09ac67025161488976c8e72],
PUP.Optional.ShopperPro, HKLM\SOFTWARE\CLASSES\WOW6432NODE\ShopperPro.ShopperProBHO.1, , [15985bf0f09ac67025161488976c8e72],
PUP.Optional.ShopperPro, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}, , [15985bf0f09ac67025161488976c8e72],
PUP.Optional.ShopperPro, HKU\S-1-5-21-1819284140-3831816572-1499321633-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}, , [15985bf0f09ac67025161488976c8e72],
PUP.Optional.ShopperPro, HKU\S-1-5-21-1819284140-3831816572-1499321633-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}, , [15985bf0f09ac67025161488976c8e72],
PUP.Optional.ShopperPro, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}, , [15985bf0f09ac67025161488976c8e72],
PUP.Optional.SupremeAdblocker.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{37476589-E48E-439E-A706-56189E2ED4C4}_is1, , [a50880cb404a56e053687d25798af10f],

Hodnoty databázy Registry: 5
PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\WOW6432NODE\GLOBALUPDATE\UPDATE|path, C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe, , [228b56f5f199bb7b913440a27a898d73]
PUP.Optional.GlobalUpdate.C, HKLM\SOFTWARE\WOW6432NODE\GLOBALUPDATE\UPDATEDEV|AuCheckPeriodMs, 21600000, , [1e8fcf7caedc84b2f1c7dcd99b687d83]
PUP.Optional.ShopperPro.A, HKLM\SOFTWARE\WOW6432NODE\SHOPPERPRO|aff, smtycl, , [664796b53c4e62d45bec9832699a06fa]
PUP.Optional.GlobalUpdate.C, HKU\S-1-5-21-1819284140-3831816572-1499321633-1000\SOFTWARE\GLOBALUPDATE\UPDATE\PROXY|source, direct, , [1b92e16ad1b9b87effa2298cff04dd23]
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-1819284140-3831816572-1499321633-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}|URL, http://www.mystartsearch.com/web/?type= ... 3PEA1TP&q={searchTerms}, , [783566e51b6f7db9309d5df03cc901ff]

Údaje databázy Registry: 7
PUP.Optional.MyStartSearch.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, http://www.mystartsearch.com/web/?type= ... 3PEA1TP&q={searchTerms}, Dobrá:)www.google.com), Zlá:)http://www.mystartsearch.com/web/?type=ds&ts=1421242715&from=wpc&uid=ST500LT012-1DG142_S3PEA1TPXXXXS3PEA1TP&q={searchTerms}),,[dad368e3bcce0333d856f5f865a0cf31]
PUP.Optional.MyStartSearch.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, http://www.mystartsearch.com/web/?type= ... 3PEA1TP&q={searchTerms}, Dobrá:)www.google.com), Zlá:)http://www.mystartsearch.com/web/?type=ds&ts=1421242715&from=wpc&uid=ST500LT012-1DG142_S3PEA1TPXXXXS3PEA1TP&q={searchTerms}),,[723bba917119da5c141a5895b64fe41c]
PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Dobrá:){0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Zlá:){33BB0A4E-99AF-4226-BDF6-49120163DE86}),,[d3daad9e8505c5719099f3063ec7758b]
PUP.Optional.MyStartSearch.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, http://www.mystartsearch.com/web/?type= ... 3PEA1TP&q={searchTerms}, Dobrá:)www.google.com), Zlá:)http://www.mystartsearch.com/web/?type=ds&ts=1421242715&from=wpc&uid=ST500LT012-1DG142_S3PEA1TPXXXXS3PEA1TP&q={searchTerms}),,[1d901833464466d0969846a7a65fdf21]
PUP.Optional.MyStartSearch.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, http://www.mystartsearch.com/web/?type= ... 3PEA1TP&q={searchTerms}, Dobrá:)www.google.com), Zlá:)http://www.mystartsearch.com/web/?type=ds&ts=1421242715&from=wpc&uid=ST500LT012-1DG142_S3PEA1TPXXXXS3PEA1TP&q={searchTerms}),,[d8d5c784503ae84ec6687d707c893ac6]
PUP.Optional.Qone8, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Dobrá:){0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Zlá:){33BB0A4E-99AF-4226-BDF6-49120163DE86}),,[8825400b6e1c191d15145c9d8184a45c]
PUP.Optional.MyStartSearch.A, HKU\S-1-5-21-1819284140-3831816572-1499321633-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, http://www.mystartsearch.com/?type=hp&t ... XXS3PEA1TP, Dobrá:)www.google.com), Zlá:)http://www.mystartsearch.com/?type=hp&ts=1421242715&from=wpc&uid=ST500LT012-1DG142_S3PEA1TPXXXXS3PEA1TP),,[e3cacb800e7ce551230c05e8a065da26]

Prie�?inky: 20
PUP.Optional.DeltaFix.A, C:\Program Files (x86)\DeltaFix, , [89243f0c355572c41debfdcc7b88738d],
PUP.Optional.MultiPlug.A, C:\ProgramData\jiafdmiaegapnnkflljcolklnfpanjli, , [3776c784cac02f07536dfb527194db25],
PUP.Optional.MultiPlug.A, C:\ProgramData\kipllpmkpbgndkafpbliaoiekmdioflm, , [74391536e3a7ea4c813f6de0da2b9868],
PUP.Optional.OpenCandy, C:\Users\patrik\AppData\Roaming\OpenCandy, , [2a832b20117957df1c222951a55e6b95],
PUP.Optional.OpenCandy, C:\Users\patrik\AppData\Roaming\OpenCandy\1E8D562A560D4DF1B08E3B34A77898BB, , [2a832b20117957df1c222951a55e6b95],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update, , [3a73ed5e5a30b77f9efdf999a360b24e],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0, , [3a73ed5e5a30b77f9efdf999a360b24e],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\Download, , [3a73ed5e5a30b77f9efdf999a360b24e],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\Install, , [3a73ed5e5a30b77f9efdf999a360b24e],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\Offline, , [3a73ed5e5a30b77f9efdf999a360b24e],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\Offline\{D4CB7CD5-0E46-4E27-A73B-40FEBCDC8D1E}, , [3a73ed5e5a30b77f9efdf999a360b24e],
PUP.Optional.MinimumPrice.A, C:\Program Files (x86)\MinimumPRice, , [1b925cefe6a4a393da5f8f07f70c48b8],
PUP.Optional.ShopperPro, C:\Program Files\Common Files\ShopperPro, , [47664209e0aa46f074902e6dc53e768a],
PUP.Optional.ShopperPro, C:\ProgramData\ShopperPro, , [15985bf0f09ac67025161488976c8e72],
PUP.Optional.SupremeAdblocker.A, C:\ProgramData\Supreme AdBlocker, , [a50880cb404a56e053687d25798af10f],
PUP.Optional.IHlpr.A, C:\Users\patrik\AppData\Roaming\IHlpr\1E8D562A560D4DF1B08E3B34A77898BB, , [d5d8fa518bff072f2167b4f653b0f60a],
PUP.Optional.EzDownloader.A, C:\Users\patrik\AppData\Roaming\EZDownloader, , [44690b4099f147ef45c94b62758ec739],
PUP.Optional.EzDownloader.A, C:\Users\patrik\AppData\Roaming\EZDownloader\Errors, , [44690b4099f147ef45c94b62758ec739],
PUP.Optional.ShopperPro.A, C:\Users\Public\Documents\ShopperPro, , [98154209167424123f0a40752ad905fb],
PUP.Optional.ShopperPro.A, C:\Users\Public\Documents\ShopperPro\JsDriver, , [98154209167424123f0a40752ad905fb],

Súbory: 104
PUP.Optional.Goobzo, C:\Program Files\Common Files\ShopperPro\spbiu.exe, , [456853f8b3d7c274be4832965baa1ae6],
PUP.Optional.Multiplug, C:\Program Files (x86)\ExastraSaeVingss\QhhpCllYWCIEey.x64.dll, , [713c3a111a70e94d2f8a26121be71fe1],
PUP.Optional.Multiplug, C:\Program Files (x86)\ExastraSaeVingss\QhhpCllYWCIEey.dll, , [713c3a111a70e94d2f8a26121be71fe1],
PUP.Optional.Multiplug, C:\Program Files (x86)\DOwnSoave\GoPXucbN9BnsUG.x64.dll, , [1499d3784545f145febbdf59a1615ea2],
PUP.Optional.Multiplug, C:\Program Files (x86)\DOwnSoave\GoPXucbN9BnsUG.dll, , [1499d3784545f145febbdf59a1615ea2],
PUP.Optional.Multiplug, C:\Program Files (x86)\50CooupoNs\jvYMUKovQTNEUV.x64.dll, , [bdf0f2590d7de551d4e59b9ddd25c937],
PUP.Optional.Multiplug, C:\Program Files (x86)\50CooupoNs\jvYMUKovQTNEUV.dll, , [bdf0f2590d7de551d4e59b9ddd25c937],
PUP.Optional.Multiplug, C:\ProgramData\DeiaLExpress\L7r3r8yvdsoJ8k.x64.dll, , [9b1274d71179d6601c9b4ce607fb23dd],
PUP.Optional.Multiplug, C:\ProgramData\TakeTheCouppon\Mbv3nm1FahH93c.x64.dll, , [169777d48703db5b2196d75bd32fde22],
PUP.Optional.Multiplug, C:\ProgramData\EnjOyCCoupon\00OKcVtG4eHTMR.x64.dll, , [0ca1c8837e0c201690275bd7f012bd43],
PUP.Optional.Senses.A, C:\Users\patrik\AppData\Roaming\GGRL.exe, , [7c3181ca1575999db730d2fc16eb9b65],
PUP.Optional.Senses.A, C:\Users\patrik\AppData\Roaming\WTXFAN.exe, , [c8e57bd06822bc7a7d6a19b5c93856aa],
PUP.Optional.Nova.A, C:\Program Files (x86)\49b819f2-0025-4d11-9056-990abe883fe0\d898ca22-d2b3-4c8e-a25c-60fb8cfc429a.dll, , [7c3180cb028891a53fdd0a035aa84fb1],
PUP.Optional.Nova.A, C:\Program Files (x86)\ab330b76-4930-4f03-8af3-514be6bb433c\aa1343a4-c32a-4b97-8bd5-17a656b147d1.dll, , [2e7fd07b84067fb750cce82559a917e9],
PUP.Optional.Nova.A, C:\Program Files (x86)\Ashampoo\4e3e436c-e134-4343-bf86-ea607218f8e6.dll, , [05a8fa51dcaefb3b67b5a26b43bf08f8],
PUP.Optional.Nova.A, C:\Program Files (x86)\Atheros\79992455-c5ec-4bc8-8bc9-d25076733dfd.dll, , [7e2f0f3c93f749edb963f518c83a12ee],
Trojan.Agent, C:\Program Files (x86)\Sticky Notes Just popped up\Sticky Notes Just popped up.exe, , [68451c2f404a55e13186907b4cb602fe],
Trojan.Agent, C:\Program Files (x86)\unisaleeS\FI5an4rtx6KiQf.exe, , [ecc182c998f2092d259258b348ba9070],
PUP.Optional.Multiplug, C:\Program Files (x86)\unisaleeS\FI5an4rtx6KiQf.x64.dll, , [931a56f5404a6fc70ea92a08d92933cd],
Trojan.Agent, C:\Program Files (x86)\unisoales\unisoales.exe, , [aeff400b4f3b072f962146c5976b8f71],
Trojan.Agent, C:\Program Files (x86)\youtubeadblocker\rSXmtXtiVbx6Q7.exe, , [cae39caf414935012097709b7f8346ba],
PUP.Optional.Multiplug, C:\Program Files (x86)\youtubeadblocker\rSXmtXtiVbx6Q7.x64.dll, , [8a239dae35559b9b783f9d957d859868],
PUP.Optional.Bitcoin, C:\Windows\SysWOW64\acumncdyyaah.exe, , [77360942b5d5be7892bee375d32fb14f],
Trojan.BitMiner, C:\Windows\SysWOW64\dcgmncdyyaah.exe, , [1994a8a35b2f88aef6554821af53827e],
PUP.BitCoinMiner, C:\Windows\SysWOW64\lcpmncdyyaah.exe, , [614c6ae13159b87e0bfe67d4857c1ee2],
PUP.Optional.ShopperPro.A, C:\Windows\System32\Tasks\SPBIW_UpdateTask_Time_323936313535373430352d2d55506c2a5a55576c412334, , [8b22202bc4c631050e6bdae7c93afa06],
PUP.Optional.DeltaFix.A, C:\Program Files (x86)\DeltaFix\DeltaFix.dll, , [89243f0c355572c41debfdcc7b88738d],
PUP.Optional.ShopperPro, C:\Windows\System32\Tasks\ShopperPro, , [2f7e76d546440a2c687df2ec689b1ce4],
PUP.Optional.ShopperPro, C:\Windows\System32\Tasks\ShopperProJSUpd, , [48657dceacde6dc98e58607e18eb52ae],
PUP.Optional.ShopperPro, C:\Windows\System32\Tasks\SPDriver, , [8e1f5af14a40e84e81666e703bc88a76],
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\9e31030c-85ed-4ccc-b386-3443d41d2ad6-1, , [02ab78d36d1dbe78ba06edf534cfb14f],
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\9e31030c-85ed-4ccc-b386-3443d41d2ad6-11, , [08a5084323672a0c00c0edf5d62d10f0],
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\9e31030c-85ed-4ccc-b386-3443d41d2ad6-2, , [ad006dde4e3c6fc7f2cede040003b34d],
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\9e31030c-85ed-4ccc-b386-3443d41d2ad6-4, , [7934fa51d0ba14226858b131946fd52b],
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\9e31030c-85ed-4ccc-b386-3443d41d2ad6-5, , [327bbf8c37533afcb60acf13ab58f010],
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\9e31030c-85ed-4ccc-b386-3443d41d2ad6-5_user, , [86270d3e9cee181ecef2eff311f201ff],
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\9e31030c-85ed-4ccc-b386-3443d41d2ad6-6, , [fab383c8f991a78f8b35f3ef1fe4b749],
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\9e31030c-85ed-4ccc-b386-3443d41d2ad6-7, , [2c81b09b01892016fac6c81aba494db3],
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\bc523f1c-adb1-4145-8f23-3852ad0fafe7-1, , [1e8f93b87119c96d7e42b03245be966a],
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\bc523f1c-adb1-4145-8f23-3852ad0fafe7-11, , [1c91f3581b6fe84e912fc220cc3752ae],
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\bc523f1c-adb1-4145-8f23-3852ad0fafe7-2, , [7c31d5765436dc5a4878bd258c778b75],
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\bc523f1c-adb1-4145-8f23-3852ad0fafe7-3, , [f9b4d07b6e1c13234977489ae51e41bf],
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\bc523f1c-adb1-4145-8f23-3852ad0fafe7-4, , [e0cd68e35e2c1f1706bad70ba45f60a0],
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\bc523f1c-adb1-4145-8f23-3852ad0fafe7-5, , [3b722c1f6525bb7b4d738959ae55936d],
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\bc523f1c-adb1-4145-8f23-3852ad0fafe7-5_user, , [b7f649021a7037ff912fc0224bb852ae],
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\bc523f1c-adb1-4145-8f23-3852ad0fafe7-6, , [9b128ebdc7c3e74f0db3a83a996a21df],
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\bc523f1c-adb1-4145-8f23-3852ad0fafe7-7, , [edc01f2c7317d660f3cdb032fd067090],
PUP.Optional.CrossRider.T, C:\Windows\Tasks\9e31030c-85ed-4ccc-b386-3443d41d2ad6-1.job, , [e6c78ebd206a5ed87bd276c90ef7768a],
PUP.Optional.CrossRider.T, C:\Windows\Tasks\9e31030c-85ed-4ccc-b386-3443d41d2ad6-11.job, , [416c113af09ada5ce16cdc6323e25ba5],
PUP.Optional.CrossRider.T, C:\Windows\Tasks\9e31030c-85ed-4ccc-b386-3443d41d2ad6-2.job, , [6d40b09be5a5f83e3c119ca352b36f91],
PUP.Optional.CrossRider.T, C:\Windows\Tasks\9e31030c-85ed-4ccc-b386-3443d41d2ad6-4.job, , [3776a8a3d0ba71c5123bc8772cd951af],
PUP.Optional.CrossRider.T, C:\Windows\Tasks\9e31030c-85ed-4ccc-b386-3443d41d2ad6-5.job, , [fab37ecd3a5090a698b56ed1c63f8b75],
PUP.Optional.CrossRider.T, C:\Windows\Tasks\9e31030c-85ed-4ccc-b386-3443d41d2ad6-5_user.job, , [edc0311adeac191d034a5be4aa5bfc04],
PUP.Optional.CrossRider.T, C:\Windows\Tasks\9e31030c-85ed-4ccc-b386-3443d41d2ad6-6.job, , [35783d0ebfcb9b9b7bd2c37cbc497f81],
PUP.Optional.CrossRider.T, C:\Windows\Tasks\9e31030c-85ed-4ccc-b386-3443d41d2ad6-7.job, , [9d10a6a55832a39325287fc00bfa8f71],
PUP.Optional.CrossRider.T, C:\Windows\Tasks\bc523f1c-adb1-4145-8f23-3852ad0fafe7-1.job, , [911c52f9f89263d30746300f1aeb1ce4],
PUP.Optional.CrossRider.T, C:\Windows\Tasks\bc523f1c-adb1-4145-8f23-3852ad0fafe7-11.job, , [9914c8835d2d02343f0e61de39cc55ab],
PUP.Optional.CrossRider.T, C:\Windows\Tasks\bc523f1c-adb1-4145-8f23-3852ad0fafe7-2.job, , [872677d41674a294f35ac47bb64f9769],
PUP.Optional.CrossRider.T, C:\Windows\Tasks\bc523f1c-adb1-4145-8f23-3852ad0fafe7-3.job, , [27862d1e286221152b22221d966f0000],
PUP.Optional.CrossRider.T, C:\Windows\Tasks\bc523f1c-adb1-4145-8f23-3852ad0fafe7-4.job, , [0e9f8fbcb9d14bebe86576c9ef16946c],
PUP.Optional.CrossRider.T, C:\Windows\Tasks\bc523f1c-adb1-4145-8f23-3852ad0fafe7-5.job, , [614cc5860585d6607dd0053ad332bb45],
PUP.Optional.CrossRider.T, C:\Windows\Tasks\bc523f1c-adb1-4145-8f23-3852ad0fafe7-5_user.job, , [3e6fb89305851a1c52fb1926c5404ab6],
PUP.Optional.CrossRider.T, C:\Windows\Tasks\bc523f1c-adb1-4145-8f23-3852ad0fafe7-6.job, , [1c91aba03c4e2313292491aef411a15f],
PUP.Optional.CrossRider.T, C:\Windows\Tasks\bc523f1c-adb1-4145-8f23-3852ad0fafe7-7.job, , [e6c72f1cfe8c47ef75d8c47b8a7b639d],
PUP.Optional.GlobalUpdate.A, C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job, , [e6c7ed5e2a60ed49ce8e043b1ee78878],
PUP.Optional.GlobalUpdate.A, C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineCore, , [06a7a5a629610e288dd0a29d7f862ed2],
PUP.Optional.GlobalUpdate.A, C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job, , [a10c9ab11971350184da2817f90c14ec],
PUP.Optional.GlobalUpdate.A, C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineUA, , [3e6f301beaa09e98b9a6c976c0456e92],
PUP.Optional.MultiPlug.A, C:\ProgramData\jiafdmiaegapnnkflljcolklnfpanjli\lsdb.js, , [3776c784cac02f07536dfb527194db25],
PUP.Optional.MultiPlug.A, C:\ProgramData\jiafdmiaegapnnkflljcolklnfpanjli\background.html, , [3776c784cac02f07536dfb527194db25],
PUP.Optional.MultiPlug.A, C:\ProgramData\jiafdmiaegapnnkflljcolklnfpanjli\content.js, , [3776c784cac02f07536dfb527194db25],
PUP.Optional.MultiPlug.A, C:\ProgramData\jiafdmiaegapnnkflljcolklnfpanjli\F.js, , [3776c784cac02f07536dfb527194db25],
PUP.Optional.MultiPlug.A, C:\ProgramData\jiafdmiaegapnnkflljcolklnfpanjli\manifest.json, , [3776c784cac02f07536dfb527194db25],
PUP.Optional.MultiPlug.A, C:\ProgramData\kipllpmkpbgndkafpbliaoiekmdioflm\lsdb.js, , [74391536e3a7ea4c813f6de0da2b9868],
PUP.Optional.MultiPlug.A, C:\ProgramData\kipllpmkpbgndkafpbliaoiekmdioflm\background.html, , [74391536e3a7ea4c813f6de0da2b9868],
PUP.Optional.MultiPlug.A, C:\ProgramData\kipllpmkpbgndkafpbliaoiekmdioflm\content.js, , [74391536e3a7ea4c813f6de0da2b9868],
PUP.Optional.MultiPlug.A, C:\ProgramData\kipllpmkpbgndkafpbliaoiekmdioflm\manifest.json, , [74391536e3a7ea4c813f6de0da2b9868],
PUP.Optional.MultiPlug.A, C:\ProgramData\kipllpmkpbgndkafpbliaoiekmdioflm\wUk.js, , [74391536e3a7ea4c813f6de0da2b9868],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe, , [3a73ed5e5a30b77f9efdf999a360b24e],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\GoogleCrashHandler.exe, , [3a73ed5e5a30b77f9efdf999a360b24e],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\GoogleUpdate.exe, , [3a73ed5e5a30b77f9efdf999a360b24e],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\GoogleUpdateBroker.exe, , [3a73ed5e5a30b77f9efdf999a360b24e],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\GoogleUpdateHelper.msi, , [3a73ed5e5a30b77f9efdf999a360b24e],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\GoogleUpdateOnDemand.exe, , [3a73ed5e5a30b77f9efdf999a360b24e],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\goopdate.dll, , [3a73ed5e5a30b77f9efdf999a360b24e],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\goopdateres_en.dll, , [3a73ed5e5a30b77f9efdf999a360b24e],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll, , [3a73ed5e5a30b77f9efdf999a360b24e],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\psmachine.dll, , [3a73ed5e5a30b77f9efdf999a360b24e],
PUP.Optional.GlobalUpdate.T, C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\psuser.dll, , [3a73ed5e5a30b77f9efdf999a360b24e],
PUP.Optional.MinimumPrice.A, C:\Program Files (x86)\MinimumPRice\5LEKsnhjH6dfSt.dat, , [1b925cefe6a4a393da5f8f07f70c48b8],
PUP.Optional.MinimumPrice.A, C:\Program Files (x86)\MinimumPRice\5LEKsnhjH6dfSt.tlb, , [1b925cefe6a4a393da5f8f07f70c48b8],
PUP.Optional.ShopperPro, C:\Program Files\Common Files\ShopperPro\spbia.exe, , [47664209e0aa46f074902e6dc53e768a],
PUP.Optional.ShopperPro, C:\Program Files\Common Files\ShopperPro\spbici64.dll, , [47664209e0aa46f074902e6dc53e768a],
PUP.Optional.ShopperPro, C:\Program Files\Common Files\ShopperPro\spbii32.exe, , [47664209e0aa46f074902e6dc53e768a],
PUP.Optional.ShopperPro, C:\Program Files\Common Files\ShopperPro\spbii64.exe, , [47664209e0aa46f074902e6dc53e768a],
PUP.Optional.ShopperPro, C:\Program Files\Common Files\ShopperPro\spbiw.sys, , [47664209e0aa46f074902e6dc53e768a],
PUP.Optional.ShopperPro, C:\ProgramData\ShopperPro\config.json, , [15985bf0f09ac67025161488976c8e72],
PUP.Optional.ShopperPro, C:\ProgramData\ShopperPro\database1_0_0.json, , [15985bf0f09ac67025161488976c8e72],
PUP.Optional.ShopperPro, C:\ProgramData\ShopperPro\ShopperPro.dll, , [15985bf0f09ac67025161488976c8e72],
PUP.Optional.ShopperPro, C:\ProgramData\ShopperPro\ShopperPro64.dll, , [15985bf0f09ac67025161488976c8e72],
PUP.Optional.ShopperPro, C:\ProgramData\ShopperPro\spbihe.js, , [15985bf0f09ac67025161488976c8e72],
PUP.Optional.SupremeAdblocker.A, C:\ProgramData\Supreme AdBlocker\Supreme AdBlocker.exe, , [a50880cb404a56e053687d25798af10f],
PUP.Optional.IHlpr.A, C:\Users\patrik\AppData\Roaming\IHlpr\1E8D562A560D4DF1B08E3B34A77898BB\TuneUpUtilities2014WORLDW15D_en-US.exe, , [d5d8fa518bff072f2167b4f653b0f60a],
PUP.Optional.ShopperPro.A, C:\Users\Public\Documents\ShopperPro\JsDriver\Config.xml, , [98154209167424123f0a40752ad905fb],

Fyzický sektory: 0
(Žiadne zákernej položky neboli zistené)


(end)
---------------------------------------------------------
A ochvíľku poskytnem z toho druhého programu

BananekSK
nováček
Příspěvky: 29
Registrován: březen 15
Pohlaví: Muž
Stav:
Offline

Re: Presmerovavanie na rôzne surveye a pod

Příspěvekod BananekSK » 30 bře 2015 15:41

Už len nerozumiem u toho Adwcleaneru či mám ten log spraviť z každej položky tj. Služby, Priečinky... alebo len z konkrétneho a tak vložiť tu ten LOG?

Uživatelský avatar
jerabina
člen Security týmu
Level 6
Level 6
Příspěvky: 3647
Registrován: březen 13
Bydliště: Litoměřice
Pohlaví: Muž
Stav:
Offline

Re: Presmerovavanie na rôzne surveye a pod

Příspěvekod jerabina » 30 bře 2015 15:49

Ahoj, dovolím si ti poradit ohledně toho, že nemůžeš ten soubor najít.

Otevři si složku C:\Windows\System32\
Klikni pravým do prázdného a dej Vlastnosti.
V Atributy zaškrtni Skrytý a dej Použít, OK, OK

Poté by jsi tam měl daný soubor najít :)

A k tomu AdwCleaneru, když si ho stáhneš normálně na plochu, spustíš ho jako správce, tak tam vidíš tlačítko Sken-Scan, na to klikni a počkej, dokud se neukáže, že sken byl dokončen. Poté klikni na tlačítko Log a celý obsah textového souboru sem zkopíruj.
Když nevíš jak dál, přichází na řadu prostudovat manuál!
HJT návod

Pokud neodpovídám do vašich témat v sekci HJT když jsem online, tak je to jen proto, že jsem na mobilu kde je studování logů a psaní skriptů nemožné. Neberte to tedy prosím jako ignoraci.

BananekSK
nováček
Příspěvky: 29
Registrován: březen 15
Pohlaví: Muž
Stav:
Offline

Re: Presmerovavanie na rôzne surveye a pod

Příspěvekod BananekSK » 30 bře 2015 15:58

Ano len som nevedel či to oskenuje rovno všetky záložky alebo iba tu jednu :) inakšie díky ale nepomohlo to ... stále ho tam nemám :/

BananekSK
nováček
Příspěvky: 29
Registrován: březen 15
Pohlaví: Muž
Stav:
Offline

Re: Presmerovavanie na rôzne surveye a pod

Příspěvekod BananekSK » 30 bře 2015 16:05

No tu dávam z toho Adwaru :
# AdwCleaner v4.200 - Log vytvorený 30/03/2015 at 16:04:40
# Aktualizované 29/03/2015 by Xplode
# Databáza : 2015-03-29.1 [Server]
# Operaený systém : Windows 7 Home Premium Service Pack 1 (x64)
# Uživate3ské meno : patrik - PATRIK-PC
# Spustené z : C:\Users\patrik\Downloads\AdwCleaner.exe
# Nastavenia : Skenova?

***** [ Služby ] *****

Služba Nájdené : globalUpdate
Služba Nájdené : globalUpdatem
Služba Nájdené : SPBIUpd
Služba Nájdené : fc67e7a0
Služba Nájdené : SPDRIVER_1.37.0.1405

***** [ Súbory / Prieeinky ] *****

Prieeinok Nájdené : C:\Program Files (x86)\50CooupoNs
Prieeinok Nájdené : C:\Program Files (x86)\BeSTSaveForoYou
Prieeinok Nájdené : C:\Program Files (x86)\BitSauvvera
Prieeinok Nájdené : C:\Program Files (x86)\DeltaFix
Prieeinok Nájdené : C:\Program Files (x86)\doLllaarrkEeper
Prieeinok Nájdené : C:\Program Files (x86)\DOwnSoave
Prieeinok Nájdené : C:\Program Files (x86)\EaXstraCuoupon
Prieeinok Nájdené : C:\Program Files (x86)\ExastraSaeVingss
Prieeinok Nájdené : C:\Program Files (x86)\globalUpdate
Prieeinok Nájdené : C:\Program Files (x86)\JJoniCoupion
Prieeinok Nájdené : C:\Program Files (x86)\MinimumPRice
Prieeinok Nájdené : C:\Program Files (x86)\RanDuomPPriicce
Prieeinok Nájdené : C:\Program Files (x86)\SaaverExtensoion
Prieeinok Nájdené : C:\Program Files (x86)\takesahop
Prieeinok Nájdené : C:\Program Files (x86)\tAkoeshop
Prieeinok Nájdené : C:\Program Files (x86)\unisaleeS
Prieeinok Nájdené : C:\Program Files (x86)\unisoales
Prieeinok Nájdené : C:\Program Files (x86)\youtubeadblocker
Prieeinok Nájdené : C:\ProgramData\8f05992daac90e43
Prieeinok Nájdené : C:\ProgramData\ShopperPro
Prieeinok Nájdené : C:\Users\patrik\AppData\Local\globalUpdate
Prieeinok Nájdené : C:\Users\patrik\AppData\Roaming\EZDownloader
Prieeinok Nájdené : C:\Users\patrik\AppData\Roaming\IHlpr
Prieeinok Nájdené : C:\Users\patrik\AppData\Roaming\OpenCandy
Súbor Nájdené : C:\Users\UpdatusUser\Desktop\YouTube Accelerator.lnk
Súbor Nájdené : C:\Windows\System32\roboot64.exe

***** [ Naplánované úlohy ] *****

Úloha Nájdené : globalUpdateUpdateTaskMachineCore
Úloha Nájdené : globalUpdateUpdateTaskMachineUA
Úloha Nájdené : ShopperPro
Úloha Nájdené : ShopperProJSUpd
Úloha Nájdené : SPDriver
Úloha Nájdené : 9e31030c-85ed-4ccc-b386-3443d41d2ad6-1
Úloha Nájdené : 9e31030c-85ed-4ccc-b386-3443d41d2ad6-11
Úloha Nájdené : 9e31030c-85ed-4ccc-b386-3443d41d2ad6-2
Úloha Nájdené : 9e31030c-85ed-4ccc-b386-3443d41d2ad6-4
Úloha Nájdené : 9e31030c-85ed-4ccc-b386-3443d41d2ad6-5
Úloha Nájdené : 9e31030c-85ed-4ccc-b386-3443d41d2ad6-5_user
Úloha Nájdené : 9e31030c-85ed-4ccc-b386-3443d41d2ad6-6
Úloha Nájdené : 9e31030c-85ed-4ccc-b386-3443d41d2ad6-7
Úloha Nájdené : bc523f1c-adb1-4145-8f23-3852ad0fafe7-1
Úloha Nájdené : bc523f1c-adb1-4145-8f23-3852ad0fafe7-11
Úloha Nájdené : bc523f1c-adb1-4145-8f23-3852ad0fafe7-2
Úloha Nájdené : bc523f1c-adb1-4145-8f23-3852ad0fafe7-3
Úloha Nájdené : bc523f1c-adb1-4145-8f23-3852ad0fafe7-4
Úloha Nájdené : bc523f1c-adb1-4145-8f23-3852ad0fafe7-5
Úloha Nájdené : bc523f1c-adb1-4145-8f23-3852ad0fafe7-5_user
Úloha Nájdené : bc523f1c-adb1-4145-8f23-3852ad0fafe7-6
Úloha Nájdené : bc523f1c-adb1-4145-8f23-3852ad0fafe7-7

***** [ Zástupcovia ] *****


***** [ Registre ] *****

K3úe registra Nájdené : HKCU\Software\AppDataLow\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}
K3úe registra Nájdené : HKCU\Software\AppDataLow\Software\Crossrider
K3úe registra Nájdené : HKCU\Software\AppDataLow\Software\iWebar
K3úe registra Nájdené : HKCU\Software\GlobalUpdate
K3úe registra Nájdené : HKCU\Software\Goobzo
K3úe registra Nájdené : HKCU\Software\InstalledBrowserExtensions
K3úe registra Nájdené : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
K3úe registra Nájdené : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{27a0d9a1-e05d-4f18-b91c-50d8e388ff19}
K3úe registra Nájdené : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{49b8376d-1c43-4755-bc7c-9a76bf0cdbed}
K3úe registra Nájdené : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}
K3úe registra Nájdené : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{ee54eb22-76d6-46cc-849e-c53d868e99af}
K3úe registra Nájdené : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{27a0d9a1-e05d-4f18-b91c-50d8e388ff19}
K3úe registra Nájdené : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{49b8376d-1c43-4755-bc7c-9a76bf0cdbed}
K3úe registra Nájdené : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}
K3úe registra Nájdené : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{ee54eb22-76d6-46cc-849e-c53d868e99af}
K3úe registra Nájdené : HKCU\Software\ShopperPro
K3úe registra Nájdené : [x64] HKCU\Software\GlobalUpdate
K3úe registra Nájdené : [x64] HKCU\Software\Goobzo
K3úe registra Nájdené : [x64] HKCU\Software\InstalledBrowserExtensions
K3úe registra Nájdené : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
K3úe registra Nájdené : [x64] HKCU\Software\ShopperPro
K3úe registra Nájdené : HKLM\SOFTWARE\{12A61307-94CD-4F8E-94BC-918E511FAA81}
K3úe registra Nájdené : HKLM\SOFTWARE\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}
K3úe registra Nájdené : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
K3úe registra Nájdené : HKLM\SOFTWARE\093eea05-a86f-4912-9e98-431aa2a3c275
K3úe registra Nájdené : HKLM\SOFTWARE\1ad5db96-2ed3-4b9f-8a4c-9e40263dfba4
K3úe registra Nájdené : HKLM\SOFTWARE\Classes\AppID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
K3úe registra Nájdené : HKLM\SOFTWARE\Classes\AppID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
K3úe registra Nájdené : HKLM\SOFTWARE\Classes\AppID\{58FDA6AF-67D8-4198-B7CD-94B17532C8D5}
K3úe registra Nájdené : HKLM\SOFTWARE\Classes\AppID\ShopperPro.DLL
K3úe registra Nájdené : HKLM\SOFTWARE\Classes\CLSID\{02A96331-0CA6-40E2-A87D-C224601985EB}
K3úe registra Nájdené : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
K3úe registra Nájdené : HKLM\SOFTWARE\Classes\CLSID\{27a0d9a1-e05d-4f18-b91c-50d8e388ff19}
K3úe registra Nájdené : HKLM\SOFTWARE\Classes\CLSID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
K3úe registra Nájdené : HKLM\SOFTWARE\Classes\CLSID\{3B5702BA-7F4C-4D1A-B026-1E9A01D43978}
K3úe registra Nájdené : HKLM\SOFTWARE\Classes\CLSID\{49b8376d-1c43-4755-bc7c-9a76bf0cdbed}
K3úe registra Nájdené : HKLM\SOFTWARE\Classes\CLSID\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
K3úe registra Nájdené : HKLM\SOFTWARE\Classes\CLSID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
K3úe registra Nájdené : HKLM\SOFTWARE\Classes\CLSID\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
K3úe registra Nájdené : HKLM\SOFTWARE\Classes\CLSID\{69F256DF-BA98-45E9-86EA-FC3CFECF9D30}
K3úe registra Nájdené : HKLM\SOFTWARE\Classes\CLSID\{6E87FC94-9866-49B9-8E93-5736D6DE3DD7}
K3úe registra Nájdené : HKLM\SOFTWARE\Classes\CLSID\{7E49F793-B3CD-4BF7-8419-B34B8BD30E61}
K3úe registra Nájdené : HKLM\SOFTWARE\Classes\CLSID\{834469E3-CA2B-4F21-A5CA-4F6F4DBCDE87}
K3úe registra Nájdené : HKLM\SOFTWARE\Classes\CLSID\{8529FAA3-5BFD-43C1-AB35-B53C4B96C6E5}
K3úe registra Nájdené : HKLM\SOFTWARE\Classes\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}
K3úe registra Nájdené : HKLM\SOFTWARE\Classes\CLSID\{ADBC39BE-3D20-4333-8D99-E91EB1B62474}
K3úe registra Nájdené : HKLM\SOFTWARE\Classes\CLSID\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
K3úe registra Nájdené : HKLM\SOFTWARE\Classes\CLSID\{CFC47BB5-5FB5-4AD0-8427-6AA04334A3FC}
K3úe registra Nájdené : HKLM\SOFTWARE\Classes\CLSID\{E06CA7F5-BA34-4FF6-8D24-B1BDC594D91F}
K3úe registra Nájdené : HKLM\SOFTWARE\Classes\CLSID\{E0ADB535-D7B5-4D8B-B15D-578BDD20D76A}
K3úe registra Nájdené : HKLM\SOFTWARE\Classes\CLSID\{ee54eb22-76d6-46cc-849e-c53d868e99af}
K3úe registra Nájdené : HKLM\SOFTWARE\Classes\CLSID\{F6421EE5-A5BE-4D31-81D5-C16B7BF48E4C}
K3úe registra Nájdené : HKLM\SOFTWARE\Classes\CLSID\{FD8E81D0-F5FE-4CB1-9AEA-1E163D2BAB78}
K3úe registra Nájdené : HKLM\SOFTWARE\Classes\globalUpdate.OneClickCtrl.10
K3úe registra Nájdené : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine
K3úe registra Nájdené : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine.1.0
K3úe registra Nájdené : HKLM\SOFTWARE\Classes\globalUpdate.Update3WebControl.4
K3úe registra Nájdené : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync
K3úe registra Nájdené : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync.1.0
K3úe registra Nájdené : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass
K3úe registra Nájdené : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass.1
K3úe registra Nájdené : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass
K3úe registra Nájdené : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass.1
K3úe registra Nájdené : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine
K3úe registra Nájdené : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine.1.0
K3úe registra Nájdené : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine
K3úe registra Nájdené : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine.1.0
K3úe registra Nájdené : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback
K3úe registra Nájdené : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback.1.0
K3úe registra Nájdené : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc
K3úe registra Nájdené : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc.1.0
K3úe registra Nájdené : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher
K3úe registra Nájdené : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher.1.0
K3úe registra Nájdené : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService
K3úe registra Nájdené : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService.1.0
K3úe registra Nájdené : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine
K3úe registra Nájdené : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine.1.0
K3úe registra Nájdené : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback
K3úe registra Nájdené : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback.1.0
K3úe registra Nájdené : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc
K3úe registra Nájdené : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc.1.0
K3úe registra Nájdené : HKLM\SOFTWARE\Classes\Interface\{03C0AC00-86DE-4B55-81BA-2E7CD61C51B1}
K3úe registra Nájdené : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550655195515}
K3úe registra Nájdené : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550655515523}
K3úe registra Nájdené : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660666196615}
K3úe registra Nájdené : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660666516623}
K3úe registra Nájdené : HKLM\SOFTWARE\Classes\P27a0d9a1_e05d_4f18_b91c_50d8e388ff19_.P27a0d9a1_e05d_4f18_b91c_50d8e388ff19_
K3úe registra Nájdené : HKLM\SOFTWARE\Classes\P27a0d9a1_e05d_4f18_b91c_50d8e388ff19_.P27a0d9a1_e05d_4f18_b91c_50d8e388ff19_.9
K3úe registra Nájdené : HKLM\SOFTWARE\Classes\P49b8376d_1c43_4755_bc7c_9a76bf0cdbed_.P49b8376d_1c43_4755_bc7c_9a76bf0cdbed_
K3úe registra Nájdené : HKLM\SOFTWARE\Classes\P49b8376d_1c43_4755_bc7c_9a76bf0cdbed_.P49b8376d_1c43_4755_bc7c_9a76bf0cdbed_.9
K3úe registra Nájdené : HKLM\SOFTWARE\Classes\Pee54eb22_76d6_46cc_849e_c53d868e99af_.Pee54eb22_76d6_46cc_849e_c53d868e99af_
K3úe registra Nájdené : HKLM\SOFTWARE\Classes\Pee54eb22_76d6_46cc_849e_c53d868e99af_.Pee54eb22_76d6_46cc_849e_c53d868e99af_.9
K3úe registra Nájdené : HKLM\SOFTWARE\Classes\ShopperPro.ShopperProBHO
K3úe registra Nájdené : HKLM\SOFTWARE\Classes\ShopperPro.ShopperProBHO.1
K3úe registra Nájdené : HKLM\SOFTWARE\Classes\TypeLib\{079E2F0F-FCA0-4163-BC82-5355B879E86E}
K3úe registra Nájdené : HKLM\SOFTWARE\Classes\TypeLib\{230332DF-D235-47EE-BC42-60860EF144CD}
K3úe registra Nájdené : HKLM\SOFTWARE\Classes\TypeLib\{41F978F3-431A-4464-A789-5C0692D562FB}
K3úe registra Nájdené : HKLM\SOFTWARE\Classes\TypeLib\{89310413-97E0-4F09-AA75-390A7F4D4918}
K3úe registra Nájdené : HKLM\SOFTWARE\Classes\TypeLib\{8FB1A663-2820-468B-95C4-5060A4C5F413}
K3úe registra Nájdené : HKLM\SOFTWARE\Classes\TypeLib\{E0D6077D-7186-48B2-A6C6-2F7C533E8CFF}
K3úe registra Nájdené : HKLM\SOFTWARE\GlobalUpdate
K3úe registra Nájdené : HKLM\SOFTWARE\InstalledBrowserExtensions
K3úe registra Nájdené : HKLM\SOFTWARE\iWebar
K3úe registra Nájdené : HKLM\SOFTWARE\iWebar-nv
K3úe registra Nájdené : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
K3úe registra Nájdené : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
K3úe registra Nájdené : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
K3úe registra Nájdené : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{27a0d9a1-e05d-4f18-b91c-50d8e388ff19}
K3úe registra Nájdené : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{49b8376d-1c43-4755-bc7c-9a76bf0cdbed}
K3úe registra Nájdené : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ee54eb22-76d6-46cc-849e-c53d868e99af}
K3úe registra Nájdené : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{27a0d9a1-e05d-4f18-b91c-50d8e388ff19}
K3úe registra Nájdené : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{49b8376d-1c43-4755-bc7c-9a76bf0cdbed}
K3úe registra Nájdené : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
K3úe registra Nájdené : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}
K3úe registra Nájdené : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
K3úe registra Nájdené : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{ee54eb22-76d6-46cc-849e-c53d868e99af}
K3úe registra Nájdené : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{FCE3FA8B-BA81-467C-81D8-E43C00D1BC71}
K3úe registra Nájdené : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}{fc67e7a0}
K3úe registra Nájdené : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}{fc67e7a0}
K3úe registra Nájdené : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{37476589-E48E-439E-A706-56189E2ED4C4}_is1
K3úe registra Nájdené : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{37476589-E48E-439E-A706-56189E2ED4C4}_is1
K3úe registra Nájdené : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{4820778D-AB0D-6D18-C316-52A6A0E1D507}
K3úe registra Nájdené : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{4820778D-AB0D-6D18-C316-52A6A0E1D507}
K3úe registra Nájdené : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{4CEE92A3-9F0C-51AB-ADC0-34EC24AD7B7E}
K3úe registra Nájdené : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{AD11DADE-C597-45D9-D8C5-1D2EB0B89613}
K3úe registra Nájdené : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=10
K3úe registra Nájdené : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=4
K3úe registra Nájdené : HKLM\SOFTWARE\mystartsearchSoftware
K3úe registra Nájdené : HKLM\SOFTWARE\Senses-nv
K3úe registra Nájdené : HKLM\SOFTWARE\ShopperPro
K3úe registra Nájdené : [x64] HKLM\SOFTWARE\Classes\CLSID\{27a0d9a1-e05d-4f18-b91c-50d8e388ff19}
K3úe registra Nájdené : [x64] HKLM\SOFTWARE\Classes\CLSID\{49b8376d-1c43-4755-bc7c-9a76bf0cdbed}
K3úe registra Nájdené : [x64] HKLM\SOFTWARE\Classes\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}
K3úe registra Nájdené : [x64] HKLM\SOFTWARE\Classes\CLSID\{ee54eb22-76d6-46cc-849e-c53d868e99af}
K3úe registra Nájdené : [x64] HKLM\SOFTWARE\Classes\Interface\{03C0AC00-86DE-4B55-81BA-2E7CD61C51B1}
K3úe registra Nájdené : [x64] HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550655195515}
K3úe registra Nájdené : [x64] HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550655515523}
K3úe registra Nájdené : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660666196615}
K3úe registra Nájdené : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660666516623}
K3úe registra Nájdené : [x64] HKLM\SOFTWARE\InstalledBrowserExtensions
K3úe registra Nájdené : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{27a0d9a1-e05d-4f18-b91c-50d8e388ff19}
K3úe registra Nájdené : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{49b8376d-1c43-4755-bc7c-9a76bf0cdbed}
K3úe registra Nájdené : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ee54eb22-76d6-46cc-849e-c53d868e99af}
K3úe registra Nájdené : [x64] HKLM\SOFTWARE\ShopperPro

***** [ Webové prehliadaee ] *****

-\\ Internet Explorer v11.0.9600.17689

Nastavenie Nájdené : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL] - hxxp://www.mystartsearch.com/?type=hp&t ... XXS3PEA1TP
Nastavenie Nájdené : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL] - hxxp://www.mystartsearch.com/web/?type= ... 3PEA1TP&q={searchTerms}
Nastavenie Nájdené : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page] - hxxp://www.mystartsearch.com/web/?type= ... 3PEA1TP&q={searchTerms}
Nastavenie Nájdené : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL] - hxxp://www.mystartsearch.com/web/?type= ... 3PEA1TP&q={searchTerms}
Nastavenie Nájdené : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page] - hxxp://www.mystartsearch.com/web/?type= ... 3PEA1TP&q={searchTerms}

-\\ Google Chrome v39.0.2171.95

[C:\Users\patrik\AppData\Local\Google\Chrome\User Data\Default\Web data] - Nájdené [Search Provider] : hxxp://www.search.ask.com/web?tpid=CLM- ... =&crxv=&q={searchTerms}
[C:\Users\patrik\AppData\Local\Google\Chrome\User Data\Default\Web data] - Nájdené [Search Provider] : hxxp://websearch.pu-result.info/?l=1&q={searchTerms}&pid=726&r=2013/06/22&hid=4094022626&lg=EN&cc=SK
[C:\Users\patrik\AppData\Local\Google\Chrome\User Data\Default\Web data] - Nájdené [Search Provider] : hxxp://www.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=FC989439E567BB6F&affID=44444&tsp=4920
[C:\Users\patrik\AppData\Local\Google\Chrome\User Data\Default\Web data] - Nájdené [Search Provider] : hxxp://www.mystartsearch.com/web/?type= ... 3PEA1TP&q={searchTerms}
[C:\Users\patrik\AppData\Local\Google\Chrome\User Data\Default\Web data] - Nájdené [Search Provider] : hxxp://www.mystartsearch.com/web/?type= ... 3PEA1TP&q={searchTerms}
[C:\Users\patrik\AppData\Local\Google\Chrome\User Data\Default\Preferences] - Nájdené [Extension] : oiokahphinmbmakkehgelkmpolmnbkdh

*************************

AdwCleaner[R0].txt - [19943 bajtov] - [30/03/2015 15:39:04]
AdwCleaner[R1].txt - [19778 bajtov] - [30/03/2015 16:04:40]

########## EOF - C:\AdwCleaner\AdwCleaner[R1].txt - [19839 bajtov] ##########

BananekSK
nováček
Příspěvky: 29
Registrován: březen 15
Pohlaví: Muž
Stav:
Offline

Re: Presmerovavanie na rôzne surveye a pod

Příspěvekod BananekSK » 30 bře 2015 16:06

Spravil som snaď všetko čo som mal tak nechám to na Vás :D

Uživatelský avatar
jerabina
člen Security týmu
Level 6
Level 6
Příspěvky: 3647
Registrován: březen 13
Bydliště: Litoměřice
Pohlaví: Muž
Stav:
Offline

Re: Presmerovavanie na rôzne surveye a pod

Příspěvekod jerabina » 30 bře 2015 16:32

Ahoj, pokud stále nevidíš ten soubor, tak zkus ještě tento postup:

Otevři Ovládací panely
Otevři Vzhled a přizpůsobení
Otevři Možnosti složky
Klikni na záložku Zobrazení
Odškrtni Skrýt chráněné soubory operačního systému
Zaškrtni Zobrazovat skryté soubory, složky a jednotky

Poté zkus daný soubor nalézt znova.
Když nevíš jak dál, přichází na řadu prostudovat manuál!
HJT návod

Pokud neodpovídám do vašich témat v sekci HJT když jsem online, tak je to jen proto, že jsem na mobilu kde je studování logů a psaní skriptů nemožné. Neberte to tedy prosím jako ignoraci.

BananekSK
nováček
Příspěvky: 29
Registrován: březen 15
Pohlaví: Muž
Stav:
Offline

Re: Presmerovavanie na rôzne surveye a pod

Příspěvekod BananekSK » 30 bře 2015 17:13

Bohužial ani teraz som to nenašiel :/ To snaď navrhoval sám satan ten moj PC :D

Uživatelský avatar
jaro3
člen Security týmu
Guru Level 15
Guru Level 15
Příspěvky: 43292
Registrován: červen 07
Bydliště: Jižní Čechy
Pohlaví: Muž
Stav:
Offline

Re: Presmerovavanie na rôzne surveye a pod

Příspěvekod jaro3 » 30 bře 2015 18:21

V možnostech složky si povol zobrazování skrytých souborů a složek+ odškrtni zatržítko skrýt chráněné soubory operačního systému

Spusť znovu AdwCleaner (u Windows Vista či Windows7, klikni na AdwCleaner pravým a vyber „Spustit jako správce
klikni na „Prohledat-Scan“, po prohledání klikni na „ Vymazat-Clean

Program provede opravu, po automatickém restartu neukáže log (C:\AdwCleaner [S?].txt) , jeho obsah sem celý vlož.

Stáhni si Junkware Removal Tool by Thisisu

na svojí plochu.

Deaktivuj si svůj antivirový program. Pravým tl. myši klikni na JRT.exe a vyber „spustit jako správce“. Pro pokračování budeš vyzván ke stisknutí jakékoliv klávesy. Na nějakou klikni.
Začne skenování programu. Skenování může trvat dloho , podle množství nákaz. Po ukončení skenu se objeví log (JRT.txt) , který se uloží na ploše.
Zkopíruj sem prosím celý jeho obsah.

. spusť znovu MbAM a dej Skenovat nyní
- po proběhnutí programu se ti objeví hláška tak klikni na „Vše do karantény(smazat vybrané)“ a na „Exportovat záznam“ a vyber „textový soubor“ , soubor nějak pojmenuj a někam ho ulož. Zkopíruj se celý obsah toho logu.

Stáhni si RogueKiller by Adlice Software
32bit.:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
64bit.:
http://www.sur-la-toile.com/RogueKiller ... lerX64.exe
na svojí plochu.
- Zavři všechny ostatní programy a prohlížeče.
- Pro OS Vista a win7 spusť program RogueKiller.exe jako správce , u XP poklepáním.
- počkej až skončí Prescan -vyhledávání škodlivých procesů.
-Potom klikni na „Prohledat“.
- Program skenuje procesy PC. Po proskenování klikni na „Zpráva“celý obsah logu sem zkopíruj.
Pokud je program blokován , zkus ho spustit několikrát. Pokud dále program nepůjde spustit a pracovat, přejmenuj ho na winlogon.exe.
Při práci s programy HJT, ComboFix,MbAM, SDFix aj. zavřete všechny ostatní aplikace a prohlížeče!
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra

BananekSK
nováček
Příspěvky: 29
Registrován: březen 15
Pohlaví: Muž
Stav:
Offline

Re: Presmerovavanie na rôzne surveye a pod

Příspěvekod BananekSK » 30 bře 2015 19:05

Po vyčistení z AdwCleanerom tu je log :
# AdwCleaner v4.200 - Log vytvorený 30/03/2015 at 19:02:38
# Aktualizované 29/03/2015 by Xplode
# Databáza : 2015-03-29.1 [Server]
# Operaený systém : Windows 7 Home Premium Service Pack 1 (x64)
# Uživate3ské meno : patrik - PATRIK-PC
# Spustené z : C:\Users\patrik\Downloads\AdwCleaner.exe
# Nastavenia : Eistenie

***** [ Služby ] *****

[#] Služba Zmazané : globalUpdate
[#] Služba Zmazané : globalUpdatem
[#] Služba Zmazané : SPBIUpd
[#] Služba Zmazané : fc67e7a0
[#] Služba Zmazané : SPDRIVER_1.37.0.1405

***** [ Súbory / Prieeinky ] *****

Prieeinok Zmazané : C:\ProgramData\ShopperPro
Prieeinok Zmazané : C:\ProgramData\8f05992daac90e43
Prieeinok Zmazané : C:\Program Files (x86)\globalUpdate
Prieeinok Zmazané : C:\Program Files (x86)\DeltaFix
Prieeinok Zmazané : C:\Program Files (x86)\50CooupoNs
Prieeinok Zmazané : C:\Program Files (x86)\BeSTSaveForoYou
Prieeinok Zmazané : C:\Program Files (x86)\BitSauvvera
Prieeinok Zmazané : C:\Program Files (x86)\doLllaarrkEeper
Prieeinok Zmazané : C:\Program Files (x86)\DOwnSoave
Prieeinok Zmazané : C:\Program Files (x86)\EaXstraCuoupon
Prieeinok Zmazané : C:\Program Files (x86)\ExastraSaeVingss
Prieeinok Zmazané : C:\Program Files (x86)\JJoniCoupion
Prieeinok Zmazané : C:\Program Files (x86)\MinimumPRice
Prieeinok Zmazané : C:\Program Files (x86)\RanDuomPPriicce
Prieeinok Zmazané : C:\Program Files (x86)\SaaverExtensoion
Prieeinok Zmazané : C:\Program Files (x86)\takesahop
Prieeinok Zmazané : C:\Program Files (x86)\tAkoeshop
Prieeinok Zmazané : C:\Program Files (x86)\unisaleeS
Prieeinok Zmazané : C:\Program Files (x86)\unisoales
Prieeinok Zmazané : C:\Program Files (x86)\youtubeadblocker
Prieeinok Zmazané : C:\Users\patrik\AppData\Local\globalUpdate
Prieeinok Zmazané : C:\Users\patrik\AppData\Roaming\EZDownloader
Prieeinok Zmazané : C:\Users\patrik\AppData\Roaming\OpenCandy
Prieeinok Zmazané : C:\Users\patrik\AppData\Roaming\IHlpr
Súbor Zmazané : C:\Windows\System32\roboot64.exe
Súbor Zmazané : C:\Users\UpdatusUser\Desktop\YouTube Accelerator.lnk

***** [ Naplánované úlohy ] *****

Úloha Zmazané : globalUpdateUpdateTaskMachineCore
Úloha Zmazané : globalUpdateUpdateTaskMachineUA
Úloha Zmazané : ShopperPro
Úloha Zmazané : ShopperProJSUpd
Úloha Zmazané : SPDriver
Úloha Zmazané : 9e31030c-85ed-4ccc-b386-3443d41d2ad6-1
Úloha Zmazané : 9e31030c-85ed-4ccc-b386-3443d41d2ad6-11
Úloha Zmazané : 9e31030c-85ed-4ccc-b386-3443d41d2ad6-2
Úloha Zmazané : 9e31030c-85ed-4ccc-b386-3443d41d2ad6-4
Úloha Zmazané : 9e31030c-85ed-4ccc-b386-3443d41d2ad6-5
Úloha Zmazané : 9e31030c-85ed-4ccc-b386-3443d41d2ad6-5_user
Úloha Zmazané : 9e31030c-85ed-4ccc-b386-3443d41d2ad6-6
Úloha Zmazané : 9e31030c-85ed-4ccc-b386-3443d41d2ad6-7
Úloha Zmazané : bc523f1c-adb1-4145-8f23-3852ad0fafe7-1
Úloha Zmazané : bc523f1c-adb1-4145-8f23-3852ad0fafe7-11
Úloha Zmazané : bc523f1c-adb1-4145-8f23-3852ad0fafe7-2
Úloha Zmazané : bc523f1c-adb1-4145-8f23-3852ad0fafe7-3
Úloha Zmazané : bc523f1c-adb1-4145-8f23-3852ad0fafe7-4
Úloha Zmazané : bc523f1c-adb1-4145-8f23-3852ad0fafe7-5
Úloha Zmazané : bc523f1c-adb1-4145-8f23-3852ad0fafe7-5_user
Úloha Zmazané : bc523f1c-adb1-4145-8f23-3852ad0fafe7-6
Úloha Zmazané : bc523f1c-adb1-4145-8f23-3852ad0fafe7-7

***** [ Zástupcovia ] *****


***** [ Registre ] *****

K3úe registra Zmazané : HKLM\SOFTWARE\Classes\AppID\ShopperPro.DLL
K3úe registra Zmazané : HKLM\SOFTWARE\Classes\globalUpdate.OneClickCtrl.10
K3úe registra Zmazané : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine
K3úe registra Zmazané : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine.1.0
K3úe registra Zmazané : HKLM\SOFTWARE\Classes\globalUpdate.Update3WebControl.4
K3úe registra Zmazané : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync
K3úe registra Zmazané : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync.1.0
K3úe registra Zmazané : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass
K3úe registra Zmazané : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass.1
K3úe registra Zmazané : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass
K3úe registra Zmazané : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass.1
K3úe registra Zmazané : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine
K3úe registra Zmazané : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine.1.0
K3úe registra Zmazané : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine
K3úe registra Zmazané : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine.1.0
K3úe registra Zmazané : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback
K3úe registra Zmazané : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback.1.0
K3úe registra Zmazané : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc
K3úe registra Zmazané : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc.1.0
K3úe registra Zmazané : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher
K3úe registra Zmazané : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher.1.0
K3úe registra Zmazané : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService
K3úe registra Zmazané : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService.1.0
K3úe registra Zmazané : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine
K3úe registra Zmazané : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine.1.0
K3úe registra Zmazané : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback
K3úe registra Zmazané : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback.1.0
K3úe registra Zmazané : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc
K3úe registra Zmazané : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc.1.0
K3úe registra Zmazané : HKLM\SOFTWARE\Classes\ShopperPro.ShopperProBHO
K3úe registra Zmazané : HKLM\SOFTWARE\Classes\ShopperPro.ShopperProBHO.1
K3úe registra Zmazané : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=10
K3úe registra Zmazané : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=4
K3úe registra Zmazané : HKLM\SOFTWARE\Classes\P27a0d9a1_e05d_4f18_b91c_50d8e388ff19_.P27a0d9a1_e05d_4f18_b91c_50d8e388ff19_
K3úe registra Zmazané : HKLM\SOFTWARE\Classes\P27a0d9a1_e05d_4f18_b91c_50d8e388ff19_.P27a0d9a1_e05d_4f18_b91c_50d8e388ff19_.9
K3úe registra Zmazané : HKLM\SOFTWARE\Classes\P49b8376d_1c43_4755_bc7c_9a76bf0cdbed_.P49b8376d_1c43_4755_bc7c_9a76bf0cdbed_
K3úe registra Zmazané : HKLM\SOFTWARE\Classes\P49b8376d_1c43_4755_bc7c_9a76bf0cdbed_.P49b8376d_1c43_4755_bc7c_9a76bf0cdbed_.9
K3úe registra Zmazané : HKLM\SOFTWARE\Classes\Pee54eb22_76d6_46cc_849e_c53d868e99af_.Pee54eb22_76d6_46cc_849e_c53d868e99af_
K3úe registra Zmazané : HKLM\SOFTWARE\Classes\Pee54eb22_76d6_46cc_849e_c53d868e99af_.Pee54eb22_76d6_46cc_849e_c53d868e99af_.9
K3úe registra Zmazané : HKLM\SOFTWARE\093eea05-a86f-4912-9e98-431aa2a3c275
K3úe registra Zmazané : HKLM\SOFTWARE\1ad5db96-2ed3-4b9f-8a4c-9e40263dfba4
K3úe registra Zmazané : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}{fc67e7a0}
K3úe registra Zmazané : HKLM\SOFTWARE\Classes\AppID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
K3úe registra Zmazané : HKLM\SOFTWARE\Classes\AppID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
K3úe registra Zmazané : HKLM\SOFTWARE\Classes\AppID\{58FDA6AF-67D8-4198-B7CD-94B17532C8D5}
K3úe registra Zmazané : HKLM\SOFTWARE\Classes\CLSID\{02A96331-0CA6-40E2-A87D-C224601985EB}
K3úe registra Zmazané : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
K3úe registra Zmazané : HKLM\SOFTWARE\Classes\CLSID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
K3úe registra Zmazané : HKLM\SOFTWARE\Classes\CLSID\{3B5702BA-7F4C-4D1A-B026-1E9A01D43978}
K3úe registra Zmazané : HKLM\SOFTWARE\Classes\CLSID\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
K3úe registra Zmazané : HKLM\SOFTWARE\Classes\CLSID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
K3úe registra Zmazané : HKLM\SOFTWARE\Classes\CLSID\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
K3úe registra Zmazané : HKLM\SOFTWARE\Classes\CLSID\{69F256DF-BA98-45E9-86EA-FC3CFECF9D30}
K3úe registra Zmazané : HKLM\SOFTWARE\Classes\CLSID\{6E87FC94-9866-49B9-8E93-5736D6DE3DD7}
K3úe registra Zmazané : HKLM\SOFTWARE\Classes\CLSID\{7E49F793-B3CD-4BF7-8419-B34B8BD30E61}
K3úe registra Zmazané : HKLM\SOFTWARE\Classes\CLSID\{834469E3-CA2B-4F21-A5CA-4F6F4DBCDE87}
K3úe registra Zmazané : HKLM\SOFTWARE\Classes\CLSID\{8529FAA3-5BFD-43C1-AB35-B53C4B96C6E5}
K3úe registra Zmazané : HKLM\SOFTWARE\Classes\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}
K3úe registra Zmazané : HKLM\SOFTWARE\Classes\CLSID\{ADBC39BE-3D20-4333-8D99-E91EB1B62474}
K3úe registra Zmazané : HKLM\SOFTWARE\Classes\CLSID\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
K3úe registra Zmazané : HKLM\SOFTWARE\Classes\CLSID\{CFC47BB5-5FB5-4AD0-8427-6AA04334A3FC}
K3úe registra Zmazané : HKLM\SOFTWARE\Classes\CLSID\{E06CA7F5-BA34-4FF6-8D24-B1BDC594D91F}
K3úe registra Zmazané : HKLM\SOFTWARE\Classes\CLSID\{E0ADB535-D7B5-4D8B-B15D-578BDD20D76A}
K3úe registra Zmazané : HKLM\SOFTWARE\Classes\CLSID\{F6421EE5-A5BE-4D31-81D5-C16B7BF48E4C}
K3úe registra Zmazané : HKLM\SOFTWARE\Classes\CLSID\{FD8E81D0-F5FE-4CB1-9AEA-1E163D2BAB78}
K3úe registra Zmazané : HKLM\SOFTWARE\Classes\CLSID\{27a0d9a1-e05d-4f18-b91c-50d8e388ff19}
K3úe registra Zmazané : HKLM\SOFTWARE\Classes\CLSID\{49b8376d-1c43-4755-bc7c-9a76bf0cdbed}
K3úe registra Zmazané : HKLM\SOFTWARE\Classes\CLSID\{ee54eb22-76d6-46cc-849e-c53d868e99af}
K3úe registra Zmazané : HKLM\SOFTWARE\Classes\Interface\{03C0AC00-86DE-4B55-81BA-2E7CD61C51B1}
K3úe registra Zmazané : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550655195515}
K3úe registra Zmazané : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550655515523}
K3úe registra Zmazané : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660666196615}
K3úe registra Zmazané : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660666516623}
K3úe registra Zmazané : HKLM\SOFTWARE\Classes\TypeLib\{8FB1A663-2820-468B-95C4-5060A4C5F413}
K3úe registra Zmazané : HKLM\SOFTWARE\Classes\TypeLib\{079E2F0F-FCA0-4163-BC82-5355B879E86E}
K3úe registra Zmazané : HKLM\SOFTWARE\Classes\TypeLib\{230332DF-D235-47EE-BC42-60860EF144CD}
K3úe registra Zmazané : HKLM\SOFTWARE\Classes\TypeLib\{41F978F3-431A-4464-A789-5C0692D562FB}
K3úe registra Zmazané : HKLM\SOFTWARE\Classes\TypeLib\{89310413-97E0-4F09-AA75-390A7F4D4918}
K3úe registra Zmazané : HKLM\SOFTWARE\Classes\TypeLib\{E0D6077D-7186-48B2-A6C6-2F7C533E8CFF}
K3úe registra Zmazané : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{27a0d9a1-e05d-4f18-b91c-50d8e388ff19}
K3úe registra Zmazané : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{49b8376d-1c43-4755-bc7c-9a76bf0cdbed}
K3úe registra Zmazané : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ee54eb22-76d6-46cc-849e-c53d868e99af}
K3úe registra Zmazané : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}
K3úe registra Zmazané : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{27a0d9a1-e05d-4f18-b91c-50d8e388ff19}
K3úe registra Zmazané : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{49b8376d-1c43-4755-bc7c-9a76bf0cdbed}
K3úe registra Zmazané : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{ee54eb22-76d6-46cc-849e-c53d868e99af}
K3úe registra Zmazané : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}
K3úe registra Zmazané : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{27a0d9a1-e05d-4f18-b91c-50d8e388ff19}
K3úe registra Zmazané : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{49b8376d-1c43-4755-bc7c-9a76bf0cdbed}
K3úe registra Zmazané : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{ee54eb22-76d6-46cc-849e-c53d868e99af}
K3úe registra Zmazané : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
K3úe registra Zmazané : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}
K3úe registra Zmazané : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
K3úe registra Zmazané : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{FCE3FA8B-BA81-467C-81D8-E43C00D1BC71}
K3úe registra Zmazané : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{27a0d9a1-e05d-4f18-b91c-50d8e388ff19}
K3úe registra Zmazané : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{49b8376d-1c43-4755-bc7c-9a76bf0cdbed}
K3úe registra Zmazané : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{ee54eb22-76d6-46cc-849e-c53d868e99af}
K3úe registra Zmazané : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
K3úe registra Zmazané : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
K3úe registra Zmazané : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
K3úe registra Zmazané : [x64] HKLM\SOFTWARE\Classes\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}
K3úe registra Zmazané : [x64] HKLM\SOFTWARE\Classes\CLSID\{27a0d9a1-e05d-4f18-b91c-50d8e388ff19}
K3úe registra Zmazané : [x64] HKLM\SOFTWARE\Classes\CLSID\{49b8376d-1c43-4755-bc7c-9a76bf0cdbed}
K3úe registra Zmazané : [x64] HKLM\SOFTWARE\Classes\CLSID\{ee54eb22-76d6-46cc-849e-c53d868e99af}
K3úe registra Zmazané : [x64] HKLM\SOFTWARE\Classes\Interface\{03C0AC00-86DE-4B55-81BA-2E7CD61C51B1}
K3úe registra Zmazané : [x64] HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550655195515}
K3úe registra Zmazané : [x64] HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550655515523}
K3úe registra Zmazané : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660666196615}
K3úe registra Zmazané : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660666516623}
K3úe registra Zmazané : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{27a0d9a1-e05d-4f18-b91c-50d8e388ff19}
K3úe registra Zmazané : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{49b8376d-1c43-4755-bc7c-9a76bf0cdbed}
K3úe registra Zmazané : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ee54eb22-76d6-46cc-849e-c53d868e99af}
K3úe registra Zmazané : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
K3úe registra Zmazané : HKCU\Software\GlobalUpdate
K3úe registra Zmazané : HKCU\Software\Goobzo
K3úe registra Zmazané : HKCU\Software\InstalledBrowserExtensions
K3úe registra Zmazané : HKCU\Software\ShopperPro
K3úe registra Zmazané : HKCU\Software\AppDataLow\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}
K3úe registra Zmazané : HKCU\Software\AppDataLow\Software\Crossrider
K3úe registra Zmazané : HKCU\Software\AppDataLow\Software\iWebar
K3úe registra Zmazané : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
K3úe registra Zmazané : HKLM\SOFTWARE\GlobalUpdate
K3úe registra Zmazané : HKLM\SOFTWARE\InstalledBrowserExtensions
K3úe registra Zmazané : HKLM\SOFTWARE\iWebar
K3úe registra Zmazané : HKLM\SOFTWARE\iWebar-nv
K3úe registra Zmazané : HKLM\SOFTWARE\Senses-nv
K3úe registra Zmazané : HKLM\SOFTWARE\ShopperPro
K3úe registra Zmazané : HKLM\SOFTWARE\mystartsearchSoftware
K3úe registra Zmazané : HKLM\SOFTWARE\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}
K3úe registra Zmazané : HKLM\SOFTWARE\{12A61307-94CD-4F8E-94BC-918E511FAA81}
K3úe registra Zmazané : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{4820778D-AB0D-6D18-C316-52A6A0E1D507}
K3úe registra Zmazané : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{37476589-E48E-439E-A706-56189E2ED4C4}_is1
K3úe registra Zmazané : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{AD11DADE-C597-45D9-D8C5-1D2EB0B89613}
K3úe registra Zmazané : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{4CEE92A3-9F0C-51AB-ADC0-34EC24AD7B7E}
K3úe registra Zmazané : [x64] HKLM\SOFTWARE\InstalledBrowserExtensions
K3úe registra Zmazané : [x64] HKLM\SOFTWARE\ShopperPro

***** [ Webové prehliadaee ] *****

-\\ Internet Explorer v11.0.9600.17689

Nastavenie Obnovené : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL]
Nastavenie Obnovené : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Nastavenie Obnovené : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
Nastavenie Obnovené : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Nastavenie Obnovené : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]

-\\ Google Chrome v39.0.2171.95

[C:\Users\patrik\AppData\Local\Google\Chrome\User Data\Default\Preferences] - Zmazané [Extension] : oiokahphinmbmakkehgelkmpolmnbkdh

*************************

AdwCleaner[R0].txt - [19943 bajtov] - [30/03/2015 15:39:04]
AdwCleaner[R1].txt - [20004 bajtov] - [30/03/2015 16:04:40]
AdwCleaner[R2].txt - [18812 bajtov] - [30/03/2015 19:01:57]
AdwCleaner[S0].txt - [17342 bajtov] - [30/03/2015 19:02:38]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [17403 bajtov] ##########
-------------------------
Ochvíľku dodám ostatné


Zpět na “HiJackThis”

Kdo je online

Uživatelé prohlížející si toto fórum: Žádní registrovaní uživatelé a 90 hostů