Prosím o kontrolu logu Vyřešeno

[J_JERY]

Ahoj moje PC mi poslední dobou přijde strašně pomalí, a nejen to ... hry mi hážou velký pingy a podobně ... prosím koukněte mi někdo na log ...
Děkuji mnohokrát


Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 2:48:46, on 8. 7. 2015
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v10.0 (10.00.9200.17377)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgent.exe
C:\Program Files (x86)\HP HD Webcam Driver\Monitor.exe
C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe
C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Users\Shaggy\AppData\Local\Temp\xmqb7thp9x86.exe
C:\Users\Shaggy\AppData\Local\Temp\tor.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Users\Shaggy\Downloads\hijackthis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com?pc=CMNTDFJS
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com?pc=CMNTDFJS
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com?pc=CMNTDFJS
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: IB Updater Helper - {336D0C35-8A85-403a-B9D2-65C292C39087} - C:\Program Files\IB Updater\Extension32.dll
O2 - BHO: Incredibar.com Helper Object - {6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99} - C:\Program Files (x86)\Incredibar.com\incredibar\1.5.11.14\bh\incredibar.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: ZoneAlarm Security Engine Registrar - {8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3} - C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker\bin\TrustCheckerIEPlugin.dll
O2 - BHO: (no name) - {A7DF592F-6E2A-45C4-9A87-4BD217D714ED} - (no file)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O2 - BHO: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll
O3 - Toolbar: Incredibar Toolbar - {F9639E4A-801B-4843-AEE3-03D9DA199E77} - C:\Program Files (x86)\Incredibar.com\incredibar\1.5.11.14\incredibarTlbr.dll
O3 - Toolbar: ZoneAlarm Security Engine - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker\bin\TrustCheckerIEPlugin.dll
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [HP HD Webcam Driver_Monitor] C:\Program Files (x86)\HP HD Webcam Driver\monitor.exe
O4 - HKLM\..\Run: [CLMLServer_For_P2G8] "c:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe"
O4 - HKLM\..\Run: [CLVirtualDrive] "c:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe" /R
O4 - HKLM\..\Run: [RemoteControl10] "c:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe"
O4 - HKLM\..\Run: [KiesTrayAgent] C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
O4 - HKLM\..\Run: [BtTray] "C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe"
O4 - HKLM\..\Run: [ZoneAlarm] "C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [PDF Complete] C:\Program Files (x86)\PDF Complete\pdfsty.exe
O4 - HKLM\..\Run: [QLBController] C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe /start
O4 - HKCU\..\Run: [Facebook Update] "C:\Users\Shaggy\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
O4 - HKCU\..\Run: [KiesPreload] C:\Program Files (x86)\Samsung\Kies\Kies.exe /preload
O4 - HKCU\..\Run: [KiesAirMessage] C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe -startup
O4 - HKCU\..\Run: [] C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
O4 - HKCU\..\Run: [Steam] "C:\Hry\Steam\Steam.exe" -silent
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\RunOnce: [bjfalo4a] C:\Users\Shaggy\AppData\Local\Temp\xmqb7thp9x86.exe
O8 - Extra context menu item: Add to Evernote 4.0 - res://C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll/204
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\Program Files (x86)\Microsoft Office\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll/105
O9 - Extra button: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-103 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-102 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files (x86)\Microsoft Office\Office12\REFIEBAR.DLL
O9 - Extra button: Rich Media Downloader - {A7DF592F-6E2A-45C4-9A87-4BD217D714ED} - (no file)
O9 - Extra button: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - res://C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll/204 (file missing)
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - res://C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll/204 (file missing)
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: *.clonewarsadventures.com
O15 - Trusted Zone: *.freerealms.com
O15 - Trusted Zone: *.soe.com
O15 - Trusted Zone: *.sony.com
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Windows\SysWow64\skype4com.dll
O20 - Winlogon Notify: DeviceNP - DeviceNP.dll (file missing)
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: awqpfakidihyhj - Company (R) - c:\windows\SysWOW64\joqfgxzc.exe
O23 - Service: BlueSoleilCS - IVT Corporation - C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: BsHelpCS - IVT Corporation - C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe,-128 (DpHost) - DigitalPersona, Inc. - C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: HP ProtectTools Device Locking / Auditing (FLCDLOCK) - Hewlett-Packard Company - c:\Windows\SysWOW64\flcdlock.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: HP Support Assistant Service - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
O23 - Service: hpHotkeyMonitor - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe
O23 - Service: HP Software Framework Service (hpqwmiex) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
O23 - Service: @oem7.inf,%hpservice_desc%;HP Service (hpsrv) - Unknown owner - C:\Windows\system32\Hpservice.exe (file missing)
O23 - Service: IB Updater - Unknown owner - C:\Program Files\IB Updater\ExtensionUpdaterService.exe
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - c:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) ME Service - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
O23 - Service: ZoneAlarm LTD Toolbar IswSvc (IswSvc) - Check Point Software Technologies - C:\Program Files\CheckPoint\ZAForceField\IswSvc.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: MSSQL$SONY_MEDIAMGR - Unknown owner - C:\Program Files (x86)\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlservr.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NIHardwareService - Native Instruments GmbH - C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe
O23 - Service: PDF Document Manager (pdfcDispatcher) - PDF Complete Inc - C:\Program Files (x86)\PDF Complete\pdfsvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: SQLAgent$SONY_MEDIAMGR - Unknown owner - C:\Program Files (x86)\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlagent.EXE (file missing)
O23 - Service: @%SystemRoot%\system32\stlang64.dll,-10122 (STacSV) - IDT, Inc. - C:\Program Files\IDT\WDM\STacSV64.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Validity VCS Fingerprint Service (vcsFPService) - Validity Sensors, Inc. - C:\Windows\system32\vcsFPService.exe
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: TrueVector Internet Monitor (vsmon) - Check Point Software Technologies LTD - C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 14857 bytes

[Reklama]

[memphisto]

Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranìní historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit doèasné soubory Windows, vysypat koš atd.
- Pokud používáš jen Google Chrome , tak ATF nemusíš použít.

Stáhni si TFC
Otevři soubor a zavři všechny ostatní okna, Klikni na Start k zahájení procesu. Program by neměl trvat dlouho.
Poté by se měl PC restartovat, pokud ne , proveď sám.

Stáhni AdwCleaner
Ulož si ho na svojí plochu
Ukonči všechny programy, okna a prohlížeče
Spusť program poklepáním a klikni na „Search“
Po skenu se objeví log (jinak je uložen systémovem disku jako AdwCleaner[R?].txt), jeho obsah sem celý vlož.


Stáhni si Malwarebytes' Anti-Malware
- Při instalaci odeber zatržítko u „Povolit bezplatnou zkušební verzi Malwarebytes' Anti-Malware Premium“
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Aktualizace Malwarebytes' Anti-Malware a Spustit aplikaci Malwarebytes' Anti-Malware, pokud jo tak klikni na tlačítko konec
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a klikni na Skenovat nyní a
- po proběhnutí programu se ti objeví hláška vpravo dole tak klikni na Kopírovat do schránky a a vlož sem celý log.

- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).

Pokud budou problémy , spusť v nouz. režimu.

[J_JERY]

ADW cleaner Log:

# AdwCleaner v4.208 - Log vytvořen 10/07/2015 v 01:25:45
# Aktualizováno 09/07/2015 by Xplode
# Databáze : 2015-07-09.2 [Server]
# Operační system : Windows 8 (x64)
# Uživatelské jméno : Shaggy - HENKELEN
# Spuštěno z : C:\Users\Shaggy\Downloads\adwcleaner_4.208.exe
# Nastavení : Sken

***** [ Služby ] *****

Služba Nalezeno : IB Updater

***** [ Soubory / Složky ] *****

Složka Nalezeno : C:\Program Files (x86)\iMesh Applications
Složka Nalezeno : C:\Program Files (x86)\incredibar.com
Složka Nalezeno : C:\Program Files (x86)\WinZip Registry Optimizer
Složka Nalezeno : C:\Program Files\IB Updater
Složka Nalezeno : C:\ProgramData\Ask
Složka Nalezeno : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rich Media Player
Složka Nalezeno : C:\Users\Shaggy\AppData\Local\apn
Složka Nalezeno : C:\Users\Shaggy\AppData\LocalLow\incredibar.com
Složka Nalezeno : C:\Users\Shaggy\AppData\Roaming\CheckPoint\ZoneAlarm LTD Toolbar
Složka Nalezeno : C:\Users\Shaggy\AppData\Roaming\OpenCandy
Složka Nalezeno : C:\Users\Shaggy\AppData\Roaming\RHEng
Složka Nalezeno : C:\Windows\System32\ARFC
Složka Nalezeno : C:\Windows\SysWOW64\WNLT
Soubor Nalezeno : C:\Windows\System32\roboot64.exe

***** [ Naplánované úlohy ] *****


***** [ Zástupci ] *****


***** [ Registry ] *****

Hodnota Nalezeno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{F9639E4A-801B-4843-AEE3-03D9DA199E77}]
Klíč Nalezeno : HKCU\Software\APN PIP
Klíč Nalezeno : HKCU\Software\IM
Klíč Nalezeno : HKCU\Software\ImInstaller
Klíč Nalezeno : HKCU\Software\incredibar.com
Klíč Nalezeno : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\incredibar.com
Klíč Nalezeno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A}
Klíč Nalezeno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{ED476D9B-4A18-4390-A27C-73B642A9C804}
Klíč Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{336D0C35-8A85-403A-B9D2-65C292C39087}
Klíč Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99}
Klíč Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A7DF592F-6E2A-45C4-9A87-4BD217D714ED}
Klíč Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{F9639E4A-801B-4843-AEE3-03D9DA199E77}
Klíč Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{336D0C35-8A85-403A-B9D2-65C292C39087}
Klíč Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99}
Klíč Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A7DF592F-6E2A-45C4-9A87-4BD217D714ED}
Klíč Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F9639E4A-801B-4843-AEE3-03D9DA199E77}
Klíč Nalezeno : HKCU\Software\WNLT
Klíč Nalezeno : [x64] HKCU\Software\APN PIP
Klíč Nalezeno : [x64] HKCU\Software\IM
Klíč Nalezeno : [x64] HKCU\Software\ImInstaller
Klíč Nalezeno : [x64] HKCU\Software\incredibar.com
Klíč Nalezeno : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A}
Klíč Nalezeno : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{CFF4DB9B-135F-47C0-9269-B4C6572FD61A}
Klíč Nalezeno : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{ED476D9B-4A18-4390-A27C-73B642A9C804}
Klíč Nalezeno : [x64] HKCU\Software\WNLT
Klíč Nalezeno : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\AppID\{608D3067-77E8-463D-9084-908966806826}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\AppID\{B302A1BD-0157-49FA-90F1-4E94F22C7B4B}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\AppID\{CFE8AAFD-A0F3-4329-84E9-6B679EC93EC2}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Klíč Nalezeno : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
Klíč Nalezeno : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
Klíč Nalezeno : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
Klíč Nalezeno : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Klíč Nalezeno : HKLM\SOFTWARE\Classes\AppID\Extension.DLL
Klíč Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{336D0C35-8A85-403A-B9D2-65C292C39087}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{C01315C7-B4E2-4864-B43D-5FAFC414D179}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{C1545464-C77C-4130-A572-1C619E2895FE}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{ED0E67AD-926C-4008-87E5-03CF72AA2A7E}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{EF7FEC6D-451B-4452-9D26-7E10C6B5DB6E}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{F9639E4A-801B-4843-AEE3-03D9DA199E77}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\escort.escortIEPane
Klíč Nalezeno : HKLM\SOFTWARE\Classes\escort.escortIEPane.1
Klíč Nalezeno : HKLM\SOFTWARE\Classes\esrv.IncredibarESrvc
Klíč Nalezeno : HKLM\SOFTWARE\Classes\esrv.IncredibarESrvc.1
Klíč Nalezeno : HKLM\SOFTWARE\Classes\Extension.ExtensionHelperObject
Klíč Nalezeno : HKLM\SOFTWARE\Classes\Extension.ExtensionHelperObject.1
Klíč Nalezeno : HKLM\SOFTWARE\Classes\I
Klíč Nalezeno : HKLM\SOFTWARE\Classes\Incredibar.dskBnd
Klíč Nalezeno : HKLM\SOFTWARE\Classes\Incredibar.dskBnd.1
Klíč Nalezeno : HKLM\SOFTWARE\Classes\Incredibar.IncredibarHlpr
Klíč Nalezeno : HKLM\SOFTWARE\Classes\Incredibar.IncredibarHlpr.1
Klíč Nalezeno : HKLM\SOFTWARE\Classes\IncredibarApp.appCore
Klíč Nalezeno : HKLM\SOFTWARE\Classes\IncredibarApp.appCore.1
Klíč Nalezeno : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\Interface\{22B0769F-794B-4422-AC84-47B123C8986D}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\Interface\{255E0B2A-D747-4EEF-B7CE-159D73A3656D}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\Interface\{28ED590D-F5ED-4E05-A87F-1D759F1C6169}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\Interface\{45D5B93F-E2ED-4AF2-915E-DCDDBDA8C33C}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\Interface\{771B99AB-636F-4A11-9039-8DFEB927B061}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\Interface\{A36867C6-302D-49FC-9D8E-1EB037B5F1AB}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\Interface\{A8321AA2-2227-40C7-8525-6C2F4E1B0EBE}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\Interface\{AA41A731-6814-4A70-A6F1-C0A20FBBFBD5}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\Interface\{ABBB8A9E-D8AF-40D1-94BE-5175077465FC}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\Interface\{BF737694-56F6-46FA-9FDC-FA99A5B25FAD}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\Interface\{CFCD164E-8AC9-478E-9ECC-B616A932016C}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\Interface\{D5961CC0-B442-4567-8030-67E241EF4CC2}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\Interface\{E450067F-1C93-41A7-928E-07E5C2EEC680}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\Interface\{F977D9F2-4BDC-44A6-B508-7C0284C61EED}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\Interface\{FFB96CC1-7EB3-449D-B827-DB661701C6BB}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\SDP
Klíč Nalezeno : HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\TypeLib\{1D5A4199-956E-49BC-B89F-6A35C57C0D13}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\TypeLib\{48C9C8B0-A546-46C1-A81F-47A31E623E9D}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\TypeLib\{CFE8AAFD-A0F3-4329-84E9-6B679EC93EC2}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Klíč Nalezeno : HKLM\SOFTWARE\Google\Chrome\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd
Klíč Nalezeno : HKLM\SOFTWARE\Google\Chrome\Extensions\ncffjdbbodifgldkcbhmiiljfcnbgjab
Klíč Nalezeno : HKLM\SOFTWARE\IB Updater
Klíč Nalezeno : HKLM\SOFTWARE\incredibar.com
Klíč Nalezeno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{A7DF592F-6E2A-45C4-9A87-4BD217D714ED}
Klíč Nalezeno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{74C36554-31F0-49DD-8857-ED6A64DF45BE}
Klíč Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{336D0C35-8A85-403A-B9D2-65C292C39087}
Klíč Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99}
Klíč Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A7DF592F-6E2A-45C4-9A87-4BD217D714ED}
Klíč Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\incredibar
Klíč Nalezeno : HKLM\SOFTWARE\MozillaPlugins\@checkpoint.com/FFApi
Klíč Nalezeno : HKLM\SOFTWARE\PIP
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Classes\CLSID\{336D0C35-8A85-403A-B9D2-65C292C39087}
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Classes\Interface\{22B0769F-794B-4422-AC84-47B123C8986D}
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Classes\Interface\{255E0B2A-D747-4EEF-B7CE-159D73A3656D}
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Classes\Interface\{28ED590D-F5ED-4E05-A87F-1D759F1C6169}
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Classes\Interface\{45D5B93F-E2ED-4AF2-915E-DCDDBDA8C33C}
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Classes\Interface\{771B99AB-636F-4A11-9039-8DFEB927B061}
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Classes\Interface\{A36867C6-302D-49FC-9D8E-1EB037B5F1AB}
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Classes\Interface\{A8321AA2-2227-40C7-8525-6C2F4E1B0EBE}
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Classes\Interface\{AA41A731-6814-4A70-A6F1-C0A20FBBFBD5}
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Classes\Interface\{ABBB8A9E-D8AF-40D1-94BE-5175077465FC}
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Classes\Interface\{BF737694-56F6-46FA-9FDC-FA99A5B25FAD}
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Classes\Interface\{CFCD164E-8AC9-478E-9ECC-B616A932016C}
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Classes\Interface\{D5961CC0-B442-4567-8030-67E241EF4CC2}
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Classes\Interface\{E450067F-1C93-41A7-928E-07E5C2EEC680}
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Classes\Interface\{F977D9F2-4BDC-44A6-B508-7C0284C61EED}
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Classes\Interface\{FFB96CC1-7EB3-449D-B827-DB661701C6BB}
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Google\Chrome\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd
Klíč Nalezeno : [x64] HKLM\SOFTWARE\IB Updater
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{336D0C35-8A85-403A-B9D2-65C292C39087}
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{336D0C35-8A85-403a-B9D2-65C292C39087}_is1
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ZoneAlarm LTD Toolbar
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ZoneAlarm Toolbar
Klíč Nalezeno : HKU\.DEFAULT\Software\ImInstaller

***** [ Prohlížeče ] *****

-\\ Internet Explorer v10.0.9200.17377


-\\ Google Chrome v43.0.2357.132

[C:\Users\Shaggy\AppData\Local\Google\Chrome\User Data\Default\Web data] - Nalezeno [Search Provider] : hxxp://websearch.ask.com/redirect?clien ... 000YYCZ&q={searchTerms}
[C:\Users\Shaggy\AppData\Local\Google\Chrome\User Data\Default\Web data] - Nalezeno [Search Provider] : hxxp://en.softonic.com/s/{searchTerms}

*************************

AdwCleaner[R0].txt - [12419 bytů] - [10/07/2015 01:25:45]

########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [12478 bytů] ##########

[J_JERY]

Malwarebytes Anti-Malware
www.malwarebytes.org

Datum skenování: 10. 7. 2015
Čas skenování: 1:30
Protokol:
Správce: Ano

Verze: 2.1.8.1057
Databáze malwaru: v2015.07.09.06
Databáze rootkitů: v2015.07.09.01
Licence: Bezplatná verze
Ochrana proti malwaru: Vypnuto
Ochrana proti škodlivým webovým stránkám: Vypnuto
Ochrana programu: Vypnuto

OS: Windows 8
CPU: x64
Souborový systém: NTFS
Uživatel: Shaggy

Typ skenu: Sken hrozeb
Výsledek: Dokončeno
Prohledaných objektů: 361534
Uplynulý čas: 38 min, 9 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Vypnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto

Procesy: 1
PUP.Optional.SweetPacks.A, C:\Program Files\IB Updater\ExtensionUpdaterService.exe, 2296, , [1b9ffce3206a56e0f9320ed7d62ae21e]

Moduly: 0
(Nenalezeny žádné škodlivé položky)

Klíče registru: 80
PUP.Optional.SweetPacks.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\IB Updater, , [1b9ffce3206a56e0f9320ed7d62ae21e],
PUP.Optional.StartPage.A, HKLM\SOFTWARE\CLASSES\CLSID\{336D0C35-8A85-403a-B9D2-65C292C39087}, , [a614eef1becc36004590abd5e12102fe],
PUP.Optional.StartPage.A, HKLM\SOFTWARE\CLASSES\CLSID\{336D0C35-8A85-403A-B9D2-65C292C39087}\INPROCSERVER32, , [a614eef1becc36004590abd5e12102fe],
PUP.Optional.StartPage.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{336D0C35-8A85-403a-B9D2-65C292C39087}, , [a614eef1becc36004590abd5e12102fe],
PUP.Optional.StartPage.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{1D5A4199-956E-49BC-B89F-6A35C57C0D13}, , [a614eef1becc36004590abd5e12102fe],
PUP.Optional.StartPage.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{A36867C6-302D-49FC-9D8E-1EB037B5F1AB}, , [a614eef1becc36004590abd5e12102fe],
PUP.Optional.StartPage.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{A36867C6-302D-49FC-9D8E-1EB037B5F1AB}, , [a614eef1becc36004590abd5e12102fe],
PUP.Optional.StartPage.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{A36867C6-302D-49FC-9D8E-1EB037B5F1AB}, , [a614eef1becc36004590abd5e12102fe],
PUP.Optional.StartPage.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{1D5A4199-956E-49BC-B89F-6A35C57C0D13}, , [a614eef1becc36004590abd5e12102fe],
PUP.Optional.StartPage.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{1D5A4199-956E-49BC-B89F-6A35C57C0D13}, , [a614eef1becc36004590abd5e12102fe],
PUP.Optional.StartPage.A, HKLM\SOFTWARE\CLASSES\Extension.ExtensionHelperObject.1, , [a614eef1becc36004590abd5e12102fe],
PUP.Optional.StartPage.A, HKLM\SOFTWARE\CLASSES\Extension.ExtensionHelperObject, , [a614eef1becc36004590abd5e12102fe],
PUP.Optional.StartPage.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Extension.ExtensionHelperObject, , [a614eef1becc36004590abd5e12102fe],
PUP.Optional.StartPage.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\Extension.ExtensionHelperObject, , [a614eef1becc36004590abd5e12102fe],
PUP.Optional.StartPage.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{336D0C35-8A85-403A-B9D2-65C292C39087}, , [a614eef1becc36004590abd5e12102fe],
PUP.Optional.StartPage.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{336D0C35-8A85-403A-B9D2-65C292C39087}, , [a614eef1becc36004590abd5e12102fe],
PUP.Optional.StartPage.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Extension.ExtensionHelperObject.1, , [a614eef1becc36004590abd5e12102fe],
PUP.Optional.StartPage.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\Extension.ExtensionHelperObject.1, , [a614eef1becc36004590abd5e12102fe],
PUP.Optional.StartPage.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{336D0C35-8A85-403A-B9D2-65C292C39087}, , [a614eef1becc36004590abd5e12102fe],
PUP.Optional.StartPage.A, HKU\S-1-5-21-1312245101-2466051487-2751029402-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{336D0C35-8A85-403A-B9D2-65C292C39087}, , [a614eef1becc36004590abd5e12102fe],
PUP.Optional.StartPage.A, HKU\S-1-5-21-1312245101-2466051487-2751029402-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{336D0C35-8A85-403A-B9D2-65C292C39087}, , [a614eef1becc36004590abd5e12102fe],
PUP.Optional.Incredibar, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99}, , [427828b73357aa8c02163f7c936f1ce4],
PUP.Optional.Incredibar, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{ED0E67AD-926C-4008-87E5-03CF72AA2A7E}, , [427828b73357aa8c02163f7c936f1ce4],
PUP.Optional.Incredibar, HKLM\SOFTWARE\CLASSES\escort.escortIEPane.1, , [427828b73357aa8c02163f7c936f1ce4],
PUP.Optional.Incredibar, HKLM\SOFTWARE\CLASSES\escort.escortIEPane, , [427828b73357aa8c02163f7c936f1ce4],
PUP.Optional.Incredibar, HKLM\SOFTWARE\WOW6432NODE\CLASSES\escort.escortIEPane, , [427828b73357aa8c02163f7c936f1ce4],
PUP.Optional.Incredibar, HKLM\SOFTWARE\CLASSES\WOW6432NODE\escort.escortIEPane, , [427828b73357aa8c02163f7c936f1ce4],
PUP.Optional.Incredibar, HKLM\SOFTWARE\WOW6432NODE\CLASSES\escort.escortIEPane.1, , [427828b73357aa8c02163f7c936f1ce4],
PUP.Optional.Incredibar, HKLM\SOFTWARE\CLASSES\WOW6432NODE\escort.escortIEPane.1, , [427828b73357aa8c02163f7c936f1ce4],
PUP.Optional.Incredibar, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{ED0E67AD-926C-4008-87E5-03CF72AA2A7E}, , [427828b73357aa8c02163f7c936f1ce4],
PUP.Optional.Incredibar, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99}, , [427828b73357aa8c02163f7c936f1ce4],
PUP.Optional.Incredibar, HKLM\SOFTWARE\CLASSES\Incredibar.IncredibarHlpr.1, , [427828b73357aa8c02163f7c936f1ce4],
PUP.Optional.Incredibar, HKLM\SOFTWARE\CLASSES\Incredibar.IncredibarHlpr, , [427828b73357aa8c02163f7c936f1ce4],
PUP.Optional.Incredibar, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Incredibar.IncredibarHlpr, , [427828b73357aa8c02163f7c936f1ce4],
PUP.Optional.Incredibar, HKLM\SOFTWARE\CLASSES\WOW6432NODE\Incredibar.IncredibarHlpr, , [427828b73357aa8c02163f7c936f1ce4],
PUP.Optional.Incredibar, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99}, , [427828b73357aa8c02163f7c936f1ce4],
PUP.Optional.Incredibar, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Incredibar.IncredibarHlpr.1, , [427828b73357aa8c02163f7c936f1ce4],
PUP.Optional.Incredibar, HKLM\SOFTWARE\CLASSES\WOW6432NODE\Incredibar.IncredibarHlpr.1, , [427828b73357aa8c02163f7c936f1ce4],
PUP.Optional.Incredibar, HKU\S-1-5-21-1312245101-2466051487-2751029402-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99}, , [427828b73357aa8c02163f7c936f1ce4],
PUP.Optional.Incredibar, HKU\S-1-5-21-1312245101-2466051487-2751029402-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99}, , [427828b73357aa8c02163f7c936f1ce4],
PUP.Optional.Incredibar, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{F9639E4A-801B-4843-AEE3-03D9DA199E77}, , [c8f213cc672374c29b7e893262a05da3],
PUP.Optional.Incredibar, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{F9639E4A-801B-4843-AEE3-03D9DA199E77}, , [c8f213cc672374c29b7e893262a05da3],
PUP.Optional.Incredibar, HKLM\SOFTWARE\CLASSES\Incredibar.dskBnd.1, , [c8f213cc672374c29b7e893262a05da3],
PUP.Optional.Incredibar, HKLM\SOFTWARE\CLASSES\Incredibar.dskBnd, , [c8f213cc672374c29b7e893262a05da3],
PUP.Optional.Incredibar, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Incredibar.dskBnd, , [c8f213cc672374c29b7e893262a05da3],
PUP.Optional.Incredibar, HKLM\SOFTWARE\CLASSES\WOW6432NODE\Incredibar.dskBnd, , [c8f213cc672374c29b7e893262a05da3],
PUP.Optional.Incredibar, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Incredibar.dskBnd.1, , [c8f213cc672374c29b7e893262a05da3],
PUP.Optional.Incredibar, HKLM\SOFTWARE\CLASSES\WOW6432NODE\Incredibar.dskBnd.1, , [c8f213cc672374c29b7e893262a05da3],
PUP.Optional.Incredibar, HKU\S-1-5-21-1312245101-2466051487-2751029402-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{F9639E4A-801B-4843-AEE3-03D9DA199E77}, , [c8f213cc672374c29b7e893262a05da3],
PUP.Optional.Incredibar, HKU\S-1-5-21-1312245101-2466051487-2751029402-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{F9639E4A-801B-4843-AEE3-03D9DA199E77}, , [c8f213cc672374c29b7e893262a05da3],
PUP.Optional.Incredibar.A, HKLM\SOFTWARE\IB Updater, , [c1f99b4442486dc9bf4da7934bb821df],
PUP.Optional.Incredibar.A, HKLM\SOFTWARE\CLASSES\esrv.IncredibarESrvc, , [c2f8a33cc1c9c5713e30b38882813fc1],
PUP.Optional.Incredibar.A, HKLM\SOFTWARE\CLASSES\esrv.IncredibarESrvc.1, , [704acd12e8a23303224c55e6897a0ef2],
PUP.Optional.Incredibar.A, HKLM\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\dlnembnfbcpjnepmfjmngjenhhajpdfd, , [a119449bd4b6dd599f6c78c2b25117e9],
PUP.Optional.Incredibar.A, HKLM\SOFTWARE\WOW6432NODE\IB Updater, , [b604b72897f39a9c3cd040fa966d9d63],
PUP.Optional.Incredibar.A, HKLM\SOFTWARE\WOW6432NODE\Incredibar.com, , [04b622bd9af07cbaf13878b1946f946c],
PUP.Optional.Incredibar.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\esrv.IncredibarESrvc, , [9327eff0c3c79b9b5915ca714eb5bb45],
PUP.Optional.Incredibar.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\esrv.IncredibarESrvc.1, , [4773924dbad0f046006eff3c9e65f907],
PUP.Optional.Incredibar.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\dlnembnfbcpjnepmfjmngjenhhajpdfd, , [ad0d9e411575b97d38d3f84207fc936d],
PUP.Optional.Incredibar.A, HKU\S-1-5-21-1312245101-2466051487-2751029402-1002\SOFTWARE\Incredibar.com, , [803a9847a2e8bb7bd357012837cc36ca],
PUP.Optional.Incredibar.A, HKU\S-1-5-21-1312245101-2466051487-2751029402-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{CFF4DB9B-135F-47C0-9269-B4C6572FD61A}, , [27937e6166243df976cca1e6b45016ea],
PUP.Optional.Ask.A, HKU\S-1-5-21-1312245101-2466051487-2751029402-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{ED476D9B-4A18-4390-A27C-73B642A9C804}, , [bbffd10e25652d094f675b32a0642ed2],
PUP.Optional.Incredibar, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{EF7FEC6D-451B-4452-9D26-7E10C6B5DB6E}, , [caf06c732b5f42f48637bc1252b036ca],
PUP.Optional.Incredibar, HKLM\SOFTWARE\CLASSES\IncredibarApp.appCore.1, , [caf06c732b5f42f48637bc1252b036ca],
PUP.Optional.Incredibar, HKLM\SOFTWARE\CLASSES\IncredibarApp.appCore, , [caf06c732b5f42f48637bc1252b036ca],
PUP.Optional.Incredibar, HKLM\SOFTWARE\WOW6432NODE\CLASSES\IncredibarApp.appCore, , [caf06c732b5f42f48637bc1252b036ca],
PUP.Optional.Incredibar, HKLM\SOFTWARE\CLASSES\WOW6432NODE\IncredibarApp.appCore, , [caf06c732b5f42f48637bc1252b036ca],
PUP.Optional.Incredibar, HKLM\SOFTWARE\WOW6432NODE\CLASSES\IncredibarApp.appCore.1, , [caf06c732b5f42f48637bc1252b036ca],
PUP.Optional.Incredibar, HKLM\SOFTWARE\CLASSES\WOW6432NODE\IncredibarApp.appCore.1, , [caf06c732b5f42f48637bc1252b036ca],
PUP.Optional.Incredibar, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{EF7FEC6D-451B-4452-9D26-7E10C6B5DB6E}, , [caf06c732b5f42f48637bc1252b036ca],
PUP.Optional.Incredibar, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{C1545464-C77C-4130-A572-1C619E2895FE}, , [caf06c732b5f42f48637bc1252b036ca],
PUP.Optional.Incredibar, HKLM\SOFTWARE\CLASSES\I, , [caf06c732b5f42f48637bc1252b036ca],
PUP.Optional.Incredibar, HKLM\SOFTWARE\WOW6432NODE\CLASSES\I, , [caf06c732b5f42f48637bc1252b036ca],
PUP.Optional.Incredibar, HKLM\SOFTWARE\CLASSES\WOW6432NODE\I, , [caf06c732b5f42f48637bc1252b036ca],
PUP.Optional.Incredibar, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{C1545464-C77C-4130-A572-1C619E2895FE}, , [caf06c732b5f42f48637bc1252b036ca],
PUP.Optional.Incredibar, HKLM\SOFTWARE\CLASSES\TYPELIB\{CFE8AAFD-A0F3-4329-84E9-6B679EC93EC2}, , [caf06c732b5f42f48637bc1252b036ca],
PUP.Optional.Incredibar, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{CFE8AAFD-A0F3-4329-84E9-6B679EC93EC2}, , [caf06c732b5f42f48637bc1252b036ca],
PUP.Optional.Incredibar, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{CFE8AAFD-A0F3-4329-84E9-6B679EC93EC2}, , [caf06c732b5f42f48637bc1252b036ca],
PUP.Optional.Incredibar, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\incredibar, , [caf06c732b5f42f48637bc1252b036ca],
PUP.Optional.IBUpdater, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{336D0C35-8A85-403a-B9D2-65C292C39087}_is1, , [b109a33c1b6fec4acbda23b9ee145da3],

Hodnoty registru: 11
PUP.Optional.StartPage.A, HKLM\SOFTWARE\MOZILLA\FIREFOX\EXTENSIONS|{336D0C35-8A85-403A-B9D2-65C292C39087}, C:\Program Files\IB Updater\Firefox, , [a614eef1becc36004590abd5e12102fe]
PUP.Optional.StartPage.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS|{336D0C35-8A85-403A-B9D2-65C292C39087}, C:\Program Files\IB Updater\Firefox, , [a614eef1becc36004590abd5e12102fe]
PUP.Optional.Incredibar, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\TOOLBAR|{F9639E4A-801B-4843-AEE3-03D9DA199E77}, Incredibar Toolbar, , [c8f213cc672374c29b7e893262a05da3]
PUP.Optional.Incredibar, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\{F9639E4A-801B-4843-AEE3-03D9DA199E77}, , [2892637c701a74c2e930fbc0e81ac23e],
PUP.Optional.StartPage.A, HKLM\SOFTWARE\MOZILLA\FIREFOX\EXTENSIONS\{336D0C35-8A85-403a-B9D2-65C292C39087}, , [89319946642682b4419450304cb6dc24],
PUP.Optional.StartPage.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS\{336D0C35-8A85-403a-B9D2-65C292C39087}, , [3e7c08d7cfbb6bcb4e876917bd45e11f],
PUP.Optional.IBUpdater.A, HKLM\SOFTWARE\MOZILLA\FIREFOX\EXTENSIONS|{FE1DEEEA-DB6D-44b8-83F0-34FC0F9D1052}, C:\Program Files\IB Updater\Firefox, , [49719649cebcce6858a3d1bd7490bb45]
PUP.Optional.IBUpdater.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS|{FE1DEEEA-DB6D-44b8-83F0-34FC0F9D1052}, C:\Program Files\IB Updater\Firefox, , [00ba26b97c0e1a1c9269dab4f014b848]
PUP.Optional.IBUpdater, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\IB UPDATER|ImagePath, C:\Program Files\IB Updater\ExtensionUpdaterService.exe, , [6c4e647b127856e04b904521ad571ae6]
PUP.Optional.Incredibar.A, HKU\S-1-5-21-1312245101-2466051487-2751029402-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A}|URL, http://mystart.incredibar.com/mb201/?search={searchTerms}&loc=IB_DS&a=6Oz1ze1yZm&i=26, , [27937e6166243df976cca1e6b45016ea]
PUP.Optional.Ask.A, HKU\S-1-5-21-1312245101-2466051487-2751029402-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{ED476D9B-4A18-4390-A27C-73B642A9C804}|URL, http://websearch.ask.com/redirect?clien ... &src=kw&q={searchTerms}&locale=&apn_ptnrs=U3&apn_dtid=OSJ000YYCZ&apn_uid=83769728-C30E-411B-9BA4-7327953F9279&apn_sauid=B4C68011-1EB4-49E7-BB7C-120CB0788BC1, , [bbffd10e25652d094f675b32a0642ed2]

Data registru: 0
(Nenalezeny žádné škodlivé položky)

Složky: 22
PUP.Optional.OpenCandy, C:\Users\Shaggy\AppData\Roaming\OpenCandy, , [d0ea459a90fa9c9ac7d7cc018280a55b],
PUP.Optional.OpenCandy, C:\Users\Shaggy\AppData\Roaming\OpenCandy\B9676AAC8202446B8559E13976C9B05F, , [d0ea459a90fa9c9ac7d7cc018280a55b],
PUP.Optional.OpenCandy, C:\Users\Shaggy\AppData\Roaming\OpenCandy\F0FF0479B6B842FE9D9DD726797BB54A, , [d0ea459a90fa9c9ac7d7cc018280a55b],
PUP.Optional.Incredibar, C:\Program Files (x86)\Incredibar.com, , [caf06c732b5f42f48637bc1252b036ca],
PUP.Optional.Incredibar, C:\Program Files (x86)\Incredibar.com\incredibar, , [caf06c732b5f42f48637bc1252b036ca],
PUP.Optional.Incredibar, C:\Program Files (x86)\Incredibar.com\incredibar\1.5.11.14, , [caf06c732b5f42f48637bc1252b036ca],
PUP.Optional.Incredibar, C:\Program Files (x86)\Incredibar.com\incredibar\1.5.11.14\bh, , [caf06c732b5f42f48637bc1252b036ca],
PUP.Optional.IBUpdater, C:\Program Files\IB Updater, , [b109a33c1b6fec4acbda23b9ee145da3],
PUP.Optional.IBUpdater, C:\Program Files\IB Updater\Firefox, , [b109a33c1b6fec4acbda23b9ee145da3],
PUP.Optional.IBUpdater, C:\Program Files\IB Updater\Firefox\chrome, , [b109a33c1b6fec4acbda23b9ee145da3],
PUP.Optional.IBUpdater, C:\Program Files\IB Updater\Firefox\chrome\content, , [b109a33c1b6fec4acbda23b9ee145da3],
PUP.Optional.IBUpdater, C:\Program Files\IB Updater\Firefox\chrome\content\libraries, , [b109a33c1b6fec4acbda23b9ee145da3],
PUP.Optional.IBUpdater, C:\Program Files\IB Updater\Firefox\chrome\content\resources, , [b109a33c1b6fec4acbda23b9ee145da3],
PUP.Optional.IBUpdater, C:\Program Files\IB Updater\Firefox\chrome\locale, , [b109a33c1b6fec4acbda23b9ee145da3],
PUP.Optional.IBUpdater, C:\Program Files\IB Updater\Firefox\chrome\locale\en-US, , [b109a33c1b6fec4acbda23b9ee145da3],
PUP.Optional.IBUpdater, C:\Program Files\IB Updater\Firefox\chrome\skin, , [b109a33c1b6fec4acbda23b9ee145da3],
PUP.Optional.IBUpdater, C:\Program Files\IB Updater\Firefox\defaults, , [b109a33c1b6fec4acbda23b9ee145da3],
PUP.Optional.IBUpdater, C:\Program Files\IB Updater\Firefox\defaults\preferences, , [b109a33c1b6fec4acbda23b9ee145da3],
PUP.Optional.IBUpdater, C:\Program Files\IB Updater\libraries, , [b109a33c1b6fec4acbda23b9ee145da3],
PUP.Optional.IBUpdater, C:\Program Files\IB Updater\resources, , [b109a33c1b6fec4acbda23b9ee145da3],
PUP.Optional.Incredibar.A, C:\Users\Shaggy\AppData\LocalLow\Incredibar.com, , [2397f8e7f29882b436aa27ba58aa2ed2],
PUP.Optional.Incredibar.A, C:\Users\Shaggy\AppData\LocalLow\Incredibar.com\incredibar, , [2397f8e7f29882b436aa27ba58aa2ed2],

Soubory: 26
PUP.Optional.SweetPacks.A, C:\Program Files\IB Updater\ExtensionUpdaterService.exe, , [1b9ffce3206a56e0f9320ed7d62ae21e],
PUP.Optional.StartPage.A, C:\Program Files\IB Updater\Extension64.dll, , [a614eef1becc36004590abd5e12102fe],
PUP.Optional.StartPage.A, C:\Program Files\IB Updater\Extension32.dll, , [a614eef1becc36004590abd5e12102fe],
PUP.Optional.Incredibar, C:\Program Files (x86)\Incredibar.com\incredibar\1.5.11.14\bh\incredibar.dll, , [427828b73357aa8c02163f7c936f1ce4],
PUP.Optional.Incredibar, C:\Program Files (x86)\Incredibar.com\incredibar\1.5.11.14\incredibarTlbr.dll, , [c8f213cc672374c29b7e893262a05da3],
PUP.Optional.OpenCandy, C:\Users\Shaggy\AppData\Roaming\OpenCandy\F0FF0479B6B842FE9D9DD726797BB54A\avg_tuht_stf_cs_2014_295_19.exe, , [d0ea459a90fa9c9ac7d7cc018280a55b],
PUP.Optional.Incredibar, C:\Program Files (x86)\Incredibar.com\incredibar\1.5.11.14\incredibarApp.dll, , [caf06c732b5f42f48637bc1252b036ca],
PUP.Optional.Incredibar, C:\Program Files (x86)\Incredibar.com\incredibar\1.5.11.14\incredibarEng.dll, , [caf06c732b5f42f48637bc1252b036ca],
PUP.Optional.Incredibar, C:\Program Files (x86)\Incredibar.com\incredibar\1.5.11.14\incredibarsrv.exe, , [caf06c732b5f42f48637bc1252b036ca],
PUP.Optional.Incredibar, C:\Program Files (x86)\Incredibar.com\incredibar\1.5.11.14\uninstall.exe, , [caf06c732b5f42f48637bc1252b036ca],
PUP.Optional.IBUpdater, C:\Program Files\IB Updater\DGChrome.exe, , [b109a33c1b6fec4acbda23b9ee145da3],
PUP.Optional.IBUpdater, C:\Program Files\IB Updater\InstallerHelper.dll, , [b109a33c1b6fec4acbda23b9ee145da3],
PUP.Optional.IBUpdater, C:\Program Files\IB Updater\source.crx, , [b109a33c1b6fec4acbda23b9ee145da3],
PUP.Optional.IBUpdater, C:\Program Files\IB Updater\unins000.dat, , [b109a33c1b6fec4acbda23b9ee145da3],
PUP.Optional.IBUpdater, C:\Program Files\IB Updater\unins000.exe, , [b109a33c1b6fec4acbda23b9ee145da3],
PUP.Optional.IBUpdater, C:\Program Files\IB Updater\Firefox\chrome.manifest, , [b109a33c1b6fec4acbda23b9ee145da3],
PUP.Optional.IBUpdater, C:\Program Files\IB Updater\Firefox\install.rdf, , [b109a33c1b6fec4acbda23b9ee145da3],
PUP.Optional.IBUpdater, C:\Program Files\IB Updater\Firefox\chrome\content\main.js, , [b109a33c1b6fec4acbda23b9ee145da3],
PUP.Optional.IBUpdater, C:\Program Files\IB Updater\Firefox\chrome\content\main.xul, , [b109a33c1b6fec4acbda23b9ee145da3],
PUP.Optional.IBUpdater, C:\Program Files\IB Updater\Firefox\chrome\content\libraries\DataExchangeScript.js, , [b109a33c1b6fec4acbda23b9ee145da3],
PUP.Optional.IBUpdater, C:\Program Files\IB Updater\Firefox\chrome\content\resources\localscript.js, , [b109a33c1b6fec4acbda23b9ee145da3],
PUP.Optional.IBUpdater, C:\Program Files\IB Updater\Firefox\chrome\locale\en-US\overlay.dtd, , [b109a33c1b6fec4acbda23b9ee145da3],
PUP.Optional.IBUpdater, C:\Program Files\IB Updater\Firefox\chrome\skin\overlay.css, , [b109a33c1b6fec4acbda23b9ee145da3],
PUP.Optional.IBUpdater, C:\Program Files\IB Updater\Firefox\defaults\preferences\defaults.js, , [b109a33c1b6fec4acbda23b9ee145da3],
PUP.Optional.IBUpdater, C:\Program Files\IB Updater\libraries\DataExchangeScript.js, , [b109a33c1b6fec4acbda23b9ee145da3],
PUP.Optional.IBUpdater, C:\Program Files\IB Updater\resources\localscript.js, , [b109a33c1b6fec4acbda23b9ee145da3],

Fyzické sektory: 0
(Nenalezeny žádné škodlivé položky)


(end)

[memphisto]

V Adw a Mbam nech vše smazat a dodej logy po smazání

Stáhni si RogueKiller
32bit.:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
64bit.:
http://www.sur-la-toile.com/RogueKiller ... lerX64.exe
na svojí plochu.
- Zavři všechny ostatní programy a prohlížeče.
- Pro OS Vista a win7 spusť program RogueKiller.exe jako správce , u XP poklepáním.
- počkej až skončí Prescan -vyhledávání škodlivých procesů.
- Zkontroluj , zda máš zaškrtnuto:
Kontrola MBR
Kontrola Faked
Antirootkit
-Potom klikni na „Prohledat“.
- Program skenuje procesy PC. Po proskenování klikni na „Zpráva“celý obsah logu sem zkopíruj.
Pokud je program blokován , zkus ho spustit několikrát. Pokud dále program nepůjde spustit a pracovat, přejmenuj ho na winlogon.exe.

Stáhni si Junkware Removal Tool

na svojí plochu.
Deaktivuj si svůj antivirový program.
Pravým tl. myši klikni na JRT.exe a vyber „spustit jako správce“. Pro pokračování budeš vyzván ke stisknutí jakékoliv klávesy. Na nějakou klikni.
Začne skenování programu. Skenování může trvat dloho , podle množství nákaz. Po ukončení skenu se objeví log (JRT.txt) , který se uloží na ploše.
Zkopíruj sem prosím celý jeho obsah.

[J_JERY]

# AdwCleaner v4.208 - Log vytvořen 10/07/2015 v 12:37:22
# Aktualizováno 09/07/2015 by Xplode
# Databáze : 2015-07-10.1 [Server]
# Operační system : Windows 8 (x64)
# Uživatelské jméno : Shaggy - HENKELEN
# Spuštěno z : C:\Users\Shaggy\Downloads\adwcleaner_4.208.exe
# Nastavení : Čištění

***** [ Služby ] *****

[#] Služba Smazáno : IB Updater

***** [ Soubory / Složky ] *****

Složka Smazáno : C:\ProgramData\Ask
Složka Smazáno : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rich Media Player
Složka Smazáno : C:\Program Files (x86)\iMesh Applications
Složka Smazáno : C:\Program Files (x86)\incredibar.com
Složka Smazáno : C:\Program Files (x86)\WinZip Registry Optimizer
Složka Smazáno : C:\Windows\SysWOW64\WNLT
Složka Smazáno : C:\Program Files\IB Updater
Složka Smazáno : C:\Windows\System32\ARFC
Složka Smazáno : C:\Users\Shaggy\AppData\Local\apn
Složka Smazáno : C:\Users\Shaggy\AppData\LocalLow\incredibar.com
Složka Smazáno : C:\Users\Shaggy\AppData\Roaming\CheckPoint\ZoneAlarm LTD Toolbar
Složka Smazáno : C:\Users\Shaggy\AppData\Roaming\OpenCandy
Složka Smazáno : C:\Users\Shaggy\AppData\Roaming\RHEng
Soubor Smazáno : C:\Windows\System32\roboot64.exe

***** [ Naplánované úlohy ] *****


***** [ Zástupci ] *****


***** [ Registry ] *****

Klíč Smazáno : HKLM\SOFTWARE\Google\Chrome\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd
Klíč Smazáno : [x64] HKLM\SOFTWARE\Google\Chrome\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd
Klíč Smazáno : HKLM\SOFTWARE\Google\Chrome\Extensions\ncffjdbbodifgldkcbhmiiljfcnbgjab
Klíč Smazáno : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Klíč Smazáno : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
Klíč Smazáno : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
Klíč Smazáno : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
Klíč Smazáno : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Klíč Smazáno : HKLM\SOFTWARE\Classes\AppID\Extension.DLL
Klíč Smazáno : HKLM\SOFTWARE\Classes\escort.escortIEPane
Klíč Smazáno : HKLM\SOFTWARE\Classes\escort.escortIEPane.1
Klíč Smazáno : HKLM\SOFTWARE\Classes\esrv.IncredibarESrvc
Klíč Smazáno : HKLM\SOFTWARE\Classes\esrv.IncredibarESrvc.1
Klíč Smazáno : HKLM\SOFTWARE\Classes\Extension.ExtensionHelperObject
Klíč Smazáno : HKLM\SOFTWARE\Classes\Extension.ExtensionHelperObject.1
Klíč Smazáno : HKLM\SOFTWARE\Classes\I
Klíč Smazáno : HKLM\SOFTWARE\Classes\Incredibar.dskBnd
Klíč Smazáno : HKLM\SOFTWARE\Classes\Incredibar.dskBnd.1
Klíč Smazáno : HKLM\SOFTWARE\Classes\Incredibar.IncredibarHlpr
Klíč Smazáno : HKLM\SOFTWARE\Classes\Incredibar.IncredibarHlpr.1
Klíč Smazáno : HKLM\SOFTWARE\Classes\IncredibarApp.appCore
Klíč Smazáno : HKLM\SOFTWARE\Classes\IncredibarApp.appCore.1
Klíč Smazáno : HKLM\SOFTWARE\MozillaPlugins\@checkpoint.com/FFApi
Klíč Smazáno : HKLM\SOFTWARE\Classes\SDP
Klíč Smazáno : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Klíč Smazáno : HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}
Klíč Smazáno : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Klíč Smazáno : HKLM\SOFTWARE\Classes\AppID\{608D3067-77E8-463D-9084-908966806826}
Klíč Smazáno : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Klíč Smazáno : HKLM\SOFTWARE\Classes\AppID\{B302A1BD-0157-49FA-90F1-4E94F22C7B4B}
Klíč Smazáno : HKLM\SOFTWARE\Classes\AppID\{CFE8AAFD-A0F3-4329-84E9-6B679EC93EC2}
Klíč Smazáno : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{336D0C35-8A85-403A-B9D2-65C292C39087}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{C01315C7-B4E2-4864-B43D-5FAFC414D179}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{C1545464-C77C-4130-A572-1C619E2895FE}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{ED0E67AD-926C-4008-87E5-03CF72AA2A7E}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{EF7FEC6D-451B-4452-9D26-7E10C6B5DB6E}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{F9639E4A-801B-4843-AEE3-03D9DA199E77}
Klíč Smazáno : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Klíč Smazáno : HKLM\SOFTWARE\Classes\Interface\{22B0769F-794B-4422-AC84-47B123C8986D}
Klíč Smazáno : HKLM\SOFTWARE\Classes\Interface\{255E0B2A-D747-4EEF-B7CE-159D73A3656D}
Klíč Smazáno : HKLM\SOFTWARE\Classes\Interface\{28ED590D-F5ED-4E05-A87F-1D759F1C6169}
Klíč Smazáno : HKLM\SOFTWARE\Classes\Interface\{45D5B93F-E2ED-4AF2-915E-DCDDBDA8C33C}
Klíč Smazáno : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Klíč Smazáno : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Klíč Smazáno : HKLM\SOFTWARE\Classes\Interface\{771B99AB-636F-4A11-9039-8DFEB927B061}
Klíč Smazáno : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Klíč Smazáno : HKLM\SOFTWARE\Classes\Interface\{A36867C6-302D-49FC-9D8E-1EB037B5F1AB}
Klíč Smazáno : HKLM\SOFTWARE\Classes\Interface\{A8321AA2-2227-40C7-8525-6C2F4E1B0EBE}
Klíč Smazáno : HKLM\SOFTWARE\Classes\Interface\{AA41A731-6814-4A70-A6F1-C0A20FBBFBD5}
Klíč Smazáno : HKLM\SOFTWARE\Classes\Interface\{ABBB8A9E-D8AF-40D1-94BE-5175077465FC}
Klíč Smazáno : HKLM\SOFTWARE\Classes\Interface\{BF737694-56F6-46FA-9FDC-FA99A5B25FAD}
Klíč Smazáno : HKLM\SOFTWARE\Classes\Interface\{CFCD164E-8AC9-478E-9ECC-B616A932016C}
Klíč Smazáno : HKLM\SOFTWARE\Classes\Interface\{D5961CC0-B442-4567-8030-67E241EF4CC2}
Klíč Smazáno : HKLM\SOFTWARE\Classes\Interface\{E450067F-1C93-41A7-928E-07E5C2EEC680}
Klíč Smazáno : HKLM\SOFTWARE\Classes\Interface\{F977D9F2-4BDC-44A6-B508-7C0284C61EED}
Klíč Smazáno : HKLM\SOFTWARE\Classes\Interface\{FFB96CC1-7EB3-449D-B827-DB661701C6BB}
Klíč Smazáno : HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}
Klíč Smazáno : HKLM\SOFTWARE\Classes\TypeLib\{1D5A4199-956E-49BC-B89F-6A35C57C0D13}
Klíč Smazáno : HKLM\SOFTWARE\Classes\TypeLib\{48C9C8B0-A546-46C1-A81F-47A31E623E9D}
Klíč Smazáno : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Klíč Smazáno : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Klíč Smazáno : HKLM\SOFTWARE\Classes\TypeLib\{CFE8AAFD-A0F3-4329-84E9-6B679EC93EC2}
Klíč Smazáno : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{336D0C35-8A85-403A-B9D2-65C292C39087}
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99}
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A7DF592F-6E2A-45C4-9A87-4BD217D714ED}
Klíč Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{336D0C35-8A85-403A-B9D2-65C292C39087}
Klíč Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99}
Klíč Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A7DF592F-6E2A-45C4-9A87-4BD217D714ED}
Klíč Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F9639E4A-801B-4843-AEE3-03D9DA199E77}
Klíč Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{336D0C35-8A85-403A-B9D2-65C292C39087}
Klíč Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99}
Klíč Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A7DF592F-6E2A-45C4-9A87-4BD217D714ED}
Klíč Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{F9639E4A-801B-4843-AEE3-03D9DA199E77}
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{A7DF592F-6E2A-45C4-9A87-4BD217D714ED}
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{74C36554-31F0-49DD-8857-ED6A64DF45BE}
Hodnota Smazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{F9639E4A-801B-4843-AEE3-03D9DA199E77}]
Klíč Smazáno : [x64] HKLM\SOFTWARE\Classes\CLSID\{336D0C35-8A85-403A-B9D2-65C292C39087}
Klíč Smazáno : [x64] HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Klíč Smazáno : [x64] HKLM\SOFTWARE\Classes\Interface\{22B0769F-794B-4422-AC84-47B123C8986D}
Klíč Smazáno : [x64] HKLM\SOFTWARE\Classes\Interface\{255E0B2A-D747-4EEF-B7CE-159D73A3656D}
Klíč Smazáno : [x64] HKLM\SOFTWARE\Classes\Interface\{28ED590D-F5ED-4E05-A87F-1D759F1C6169}
Klíč Smazáno : [x64] HKLM\SOFTWARE\Classes\Interface\{45D5B93F-E2ED-4AF2-915E-DCDDBDA8C33C}
Klíč Smazáno : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Klíč Smazáno : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Klíč Smazáno : [x64] HKLM\SOFTWARE\Classes\Interface\{771B99AB-636F-4A11-9039-8DFEB927B061}
Klíč Smazáno : [x64] HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Klíč Smazáno : [x64] HKLM\SOFTWARE\Classes\Interface\{A36867C6-302D-49FC-9D8E-1EB037B5F1AB}
Klíč Smazáno : [x64] HKLM\SOFTWARE\Classes\Interface\{A8321AA2-2227-40C7-8525-6C2F4E1B0EBE}
Klíč Smazáno : [x64] HKLM\SOFTWARE\Classes\Interface\{AA41A731-6814-4A70-A6F1-C0A20FBBFBD5}
Klíč Smazáno : [x64] HKLM\SOFTWARE\Classes\Interface\{ABBB8A9E-D8AF-40D1-94BE-5175077465FC}
Klíč Smazáno : [x64] HKLM\SOFTWARE\Classes\Interface\{BF737694-56F6-46FA-9FDC-FA99A5B25FAD}
Klíč Smazáno : [x64] HKLM\SOFTWARE\Classes\Interface\{CFCD164E-8AC9-478E-9ECC-B616A932016C}
Klíč Smazáno : [x64] HKLM\SOFTWARE\Classes\Interface\{D5961CC0-B442-4567-8030-67E241EF4CC2}
Klíč Smazáno : [x64] HKLM\SOFTWARE\Classes\Interface\{E450067F-1C93-41A7-928E-07E5C2EEC680}
Klíč Smazáno : [x64] HKLM\SOFTWARE\Classes\Interface\{F977D9F2-4BDC-44A6-B508-7C0284C61EED}
Klíč Smazáno : [x64] HKLM\SOFTWARE\Classes\Interface\{FFB96CC1-7EB3-449D-B827-DB661701C6BB}
Klíč Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{336D0C35-8A85-403A-B9D2-65C292C39087}
Klíč Smazáno : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{CFF4DB9B-135F-47C0-9269-B4C6572FD61A}
Klíč Smazáno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{ED476D9B-4A18-4390-A27C-73B642A9C804}
Klíč Smazáno : HKCU\Software\APN PIP
Klíč Smazáno : HKCU\Software\IM
Klíč Smazáno : HKCU\Software\ImInstaller
Klíč Smazáno : HKCU\Software\incredibar.com
Klíč Smazáno : HKCU\Software\WNLT
Klíč Smazáno : HKLM\SOFTWARE\IB Updater
Klíč Smazáno : HKLM\SOFTWARE\incredibar.com
Klíč Smazáno : HKLM\SOFTWARE\PIP
Klíč Smazáno : HKU\.DEFAULT\Software\ImInstaller
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\incredibar
Klíč Smazáno : [x64] HKLM\SOFTWARE\IB Updater
Klíč Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{336D0C35-8A85-403a-B9D2-65C292C39087}_is1
Klíč Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ZoneAlarm LTD Toolbar
Klíč Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ZoneAlarm Toolbar
Klíč Smazáno : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\incredibar.com

***** [ Prohlížeče ] *****

-\\ Internet Explorer v10.0.9200.17377


-\\ Google Chrome v43.0.2357.132


*************************

AdwCleaner[R0].txt - [12693 bytů] - [10/07/2015 01:25:45]
AdwCleaner[R1].txt - [12293 bytů] - [10/07/2015 12:36:02]
AdwCleaner[S0].txt - [11406 bytů] - [10/07/2015 12:37:22]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [11465 bytů] ##########

[J_JERY]

Malwarebytes Anti-Malware
www.malwarebytes.org

Datum skenování: 10. 7. 2015
Čas skenování: 12:46
Protokol:
Správce: Ano

Verze: 2.1.8.1057
Databáze malwaru: v2015.07.10.03
Databáze rootkitů: v2015.07.09.01
Licence: Bezplatná verze
Ochrana proti malwaru: Vypnuto
Ochrana proti škodlivým webovým stránkám: Vypnuto
Ochrana programu: Vypnuto

OS: Windows 8
CPU: x64
Souborový systém: NTFS
Uživatel: Shaggy

Typ skenu: Sken hrozeb
Výsledek: Dokončeno
Prohledaných objektů: 361169
Uplynulý čas: 15 min, 42 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Vypnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto

Procesy: 0
(Nenalezeny žádné škodlivé položky)

Moduly: 0
(Nenalezeny žádné škodlivé položky)

Klíče registru: 0
(Nenalezeny žádné škodlivé položky)

Hodnoty registru: 6
PUP.Optional.StartPage.A, HKLM\SOFTWARE\MOZILLA\FIREFOX\EXTENSIONS\{336D0C35-8A85-403a-B9D2-65C292C39087}, Do karantény, [78a325bbe8a295a181a9ee9334cedb25],
PUP.Optional.StartPage.A, HKLM\SOFTWARE\MOZILLA\FIREFOX\EXTENSIONS|{336D0C35-8A85-403A-B9D2-65C292C39087}, C:\Program Files\IB Updater\Firefox, Do karantény, [78a325bbe8a295a181a9ee9334cedb25]
PUP.Optional.StartPage.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS|{336D0C35-8A85-403A-B9D2-65C292C39087}, C:\Program Files\IB Updater\Firefox, Do karantény, [78a325bbe8a295a181a9ee9334cedb25]
PUP.Optional.StartPage.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS\{336D0C35-8A85-403a-B9D2-65C292C39087}, Do karantény, [8d8e736d6426ef47959584fd22e0dc24],
PUP.Optional.IBUpdater.A, HKLM\SOFTWARE\MOZILLA\FIREFOX\EXTENSIONS|{FE1DEEEA-DB6D-44b8-83F0-34FC0F9D1052}, C:\Program Files\IB Updater\Firefox, Do karantény, [2eed568af892092d331d048ba55f6997]
PUP.Optional.IBUpdater.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS|{FE1DEEEA-DB6D-44b8-83F0-34FC0F9D1052}, C:\Program Files\IB Updater\Firefox, Do karantény, [d04b3ea2f6940630420ee3acc63e9a66]

Data registru: 0
(Nenalezeny žádné škodlivé položky)

Složky: 0
(Nenalezeny žádné škodlivé položky)

Soubory: 0
(Nenalezeny žádné škodlivé položky)

Fyzické sektory: 0
(Nenalezeny žádné škodlivé položky)


(end)

[J_JERY]

RogueKiller V10.9.1.0 (x64) [Jul 9 2015] by Adlice Software
mail : http://www.adlice.com/contact/
Feedback : http://forum.adlice.com
Webová stránka : http://www.adlice.com/softwares/roguekiller/
Blog : http://www.adlice.com

Opera?ní systém : Windows 8 (6.2.9200 ) 64 bits version
Spu?t?no : Normální re?im
U?ivatel : Shaggy [Práva správce]
Started from : C:\Users\Shaggy\Downloads\RogueKillerX64.exe
Mód : Prohledat -- Datum : 07/10/2015 13:21:07

¤¤¤ Procesy : 1 ¤¤¤
[VT.Unknown] joqfgxzc.exe(924) -- c:\Windows\SysWOW64\joqfgxzc.exe[-] -> Zastaveno [TermProc]

¤¤¤ Registry : 10 ¤¤¤
[PUM.HomePage] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main | Start Page : http://www.bing.com?pc=CMNTDFJS -> Nalezeno
[PUM.HomePage] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main | Start Page : http://www.bing.com?pc=CMNTDFJS -> Nalezeno
[PUM.HomePage] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main | Default_Page_URL : http://www.bing.com?pc=CMNTDFJS -> Nalezeno
[PUM.HomePage] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main | Default_Page_URL : http://www.bing.com?pc=CMNTDFJS -> Nalezeno
[PUM.HomePage] (X64) HKEY_USERS\S-1-5-21-1312245101-2466051487-2751029402-1002\Software\Microsoft\Internet Explorer\Main | Default_Page_URL : http://www.bing.com?pc=CMNTDFJS -> Nalezeno
[PUM.HomePage] (X86) HKEY_USERS\S-1-5-21-1312245101-2466051487-2751029402-1002\Software\Microsoft\Internet Explorer\Main | Default_Page_URL : http://www.bing.com?pc=CMNTDFJS -> Nalezeno
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters | DhcpNameServer : 10.255.255.10 10.255.255.20 192.168.1.1 ([(Private Address) (XX)][(Private Address) (XX)][-]) -> Nalezeno
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters | DhcpNameServer : 10.255.255.10 10.255.255.20 192.168.1.1 ([(Private Address) (XX)][(Private Address) (XX)][-]) -> Nalezeno
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{BDE28C21-AC91-40D1-9076-5FF773A1FAEF} | DhcpNameServer : 10.255.255.10 10.255.255.20 192.168.1.1 ([(Private Address) (XX)][(Private Address) (XX)][-]) -> Nalezeno
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters\Interfaces\{BDE28C21-AC91-40D1-9076-5FF773A1FAEF} | DhcpNameServer : 10.255.255.10 10.255.255.20 192.168.1.1 ([(Private Address) (XX)][(Private Address) (XX)][-]) -> Nalezeno

¤¤¤ Úlohy : 0 ¤¤¤

¤¤¤ Soubory : 0 ¤¤¤

¤¤¤ Soubor HOSTS : 0 ¤¤¤

¤¤¤ Antirootkit : 0 (Driver: Nahrán) ¤¤¤

¤¤¤ Webové prohlí?e?e : 0 ¤¤¤

¤¤¤ Kontrola MBR : ¤¤¤
+++++ PhysicalDrive0: ST750LM022 HN-M750MBB +++++
--- User ---
[MBR] 5563ee86216a1c21e78cfa8297c1cea8
[BSP] 6a3125a7f090a24988d63ba5cae1a61d : Unknown MBR Code
Partition table:
0 - [SYSTEM][MAN-MOUNT] | Offset (sectors): 2048 | Size: 1000 MB
1 - [MAN-MOUNT] EFI system partition | Offset (sectors): 2050048 | Size: 100 MB
2 - [MAN-MOUNT] Microsoft reserved partition | Offset (sectors): 2254848 | Size: 128 MB
3 - Basic data partition | Offset (sectors): 2516992 | Size: 698856 MB
4 - [SYSTEM] Basic data partition | Offset (sectors): 1433774080 | Size: 13269 MB
5 - [SYSTEM] Basic data partition | Offset (sectors): 1460948992 | Size: 2044 MB
User = LL1 ... OK
User = LL2 ... OK

[J_JERY]

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 7.4.0 (07.10.2015:1)
OS: Windows 8 x64
Ran by Shaggy on p  10. 07. 2015 at 13:23:45,91
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Tasks



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders

Successfully deleted: [Folder] C:\Users\Shaggy\AppData\Roaming\nico mak computing



~~~ Chrome


[C:\Users\Shaggy\appdata\local\Google\Chrome\User Data\Default\Preferences] - default search provider reset

[C:\Users\Shaggy\appdata\local\Google\Chrome\User Data\Default\Preferences] - Extensions Deleted:

[C:\Users\Shaggy\appdata\local\Google\Chrome\User Data\Default\Secure Preferences] - default search provider reset

[C:\Users\Shaggy\appdata\local\Google\Chrome\User Data\Default\Secure Preferences] - Extensions Deleted:
[
dlnembnfbcpjnepmfjmngjenhhajpdfd,
ndibdjnfmopecpmkdieinmbadjfpblof
]





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on p  10. 07. 2015 at 13:26:26,84
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

[jaro3]

Zavři všechny programy a prohlížeče. Deaktivuj antivir a firewall.
Prosím, odpoj všechny USB (kromě myši s klávesnice) nebo externí disky z počítače před spuštěním tohoto programu.
Spusť znovu RogueKiller ( Pro Windows Vista nebo Windows 7, klepni pravým a vyber "Spustit jako správce", ve Windows XP poklepej ke spuštění).
- Počkej, až Prescan dokončí práci...
- Pak klikni na "Prohledat " ,po jeho skončení:

- V záložkách (Registry , Tasks , Web Browser apod.) vše zatrhni (dej zatržítka)
(musíš dát myší zatržítko do toho čtverečku vlevo od registru ap.)

- Klikni na "Smazat"
- Počkej, dokud Status box nezobrazí " Mazání dokončeno "
- Klikni na "Zpráva " a zkopíruj a vlož obsah té zprávy prosím sem. Log je možno nalézt v RKreport [číslo]. txt na ploše.
- Zavři RogueKiller

Vypni antivir i firewall.
Stáhni
Zoek.exe

a uloz si ho na plochu.
Zavři všechny ostatní programy , okna i prohlížeče.
Spusť Zoek.exe ( u win vista , win7, 8 klikni na něj pravým a vyber : „Spustit jako správce“
- pozor , náběh programu může trvat déle.

Do okna programu vlož skript níže:

Kód: Vybrat vše

autoclean;
emptyclsid;
iedefaults;
FFdefaults;
CHRdefaults;
emptyalltemp;
resethosts;

klikni na Run Script
Program provede sken , opravu, sken i oprava může trvat i více minut ,je třeba posečkat do konce. Do okna neklikej!
Program nabídne restart , potvrď .

Po restartu se může nějaký čas ukázat pouze černá plocha , to je normální. Je třeba počkat až se vytvoří log. Ten si můžeš uložit třeba do dokumentů , jinak se sám ukládá do:
C:\zoek-results.log
Zkopíruj sem celý obsah toho logu.

Vypni rez. ochranu u antiviru a antispywaru,příp. firewall..

Stáhni si ComboFix (by sUBs)
a ulož si ho na plochu.
Ukonči všechna aktivní okna a spusť ho.
- Po spuštění se zobrazí podmínky užití, potvrď je stiskem tlačítka Ano
- Dále postupuj dle pokynů, během aplikování ComboFixu neklikej do zobrazujícího se okna
- Po dokončení skenování by měl program vytvořit log - C:\ComboFix.txt - zkopíruj sem prosím celý jeho obsah
Pokud budou problémy , spusť ho v nouz. režimu.

Upozornění : Může se stát, že po aplikaci Combofixu a restartu počítače, Windows nenaběhnou , nebo nenajede plocha , budou problémy s připojením, pak znovu restartuj počítač, pokud to nepomůže , po restartu mačkej klávesu F8 a pak zvol poslední známou funkční konfiguraci. , či použij bod obnovy.

[J_JERY]

RogueKiller V10.9.1.0 (x64) [Jul 9 2015] by Adlice Software
mail : http://www.adlice.com/contact/
Feedback : http://forum.adlice.com
Webová stránka : http://www.adlice.com/softwares/roguekiller/
Blog : http://www.adlice.com

Opera?ní systém : Windows 8 (6.2.9200 ) 64 bits version
Spu?t?no : Normální re?im
U?ivatel : Shaggy [Práva správce]
Started from : C:\Users\Shaggy\Downloads\RogueKillerX64.exe
Mód : Smazat -- Datum : 07/10/2015 21:49:28

¤¤¤ Procesy : 0 ¤¤¤

¤¤¤ Registry : 10 ¤¤¤
[PUM.HomePage] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main | Start Page : http://www.bing.com?pc=CMNTDFJS -> Nahrazeno (http://go.microsoft.com/fwlink/p/?LinkId=255141)
[PUM.HomePage] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main | Start Page : http://www.bing.com?pc=CMNTDFJS -> Nahrazeno (http://go.microsoft.com/fwlink/p/?LinkId=255141)
[PUM.HomePage] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main | Default_Page_URL : http://www.bing.com?pc=CMNTDFJS -> Nahrazeno (http://www.microsoft.com/isapi/redir.dl ... ar=msnhome)
[PUM.HomePage] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main | Default_Page_URL : http://www.bing.com?pc=CMNTDFJS -> Nahrazeno (http://www.microsoft.com/isapi/redir.dl ... ar=msnhome)
[PUM.HomePage] (X64) HKEY_USERS\S-1-5-21-1312245101-2466051487-2751029402-1002\Software\Microsoft\Internet Explorer\Main | Default_Page_URL : http://www.bing.com?pc=CMNTDFJS -> Nahrazeno (http://www.microsoft.com/isapi/redir.dl ... ar=msnhome)
[PUM.HomePage] (X86) HKEY_USERS\S-1-5-21-1312245101-2466051487-2751029402-1002\Software\Microsoft\Internet Explorer\Main | Default_Page_URL : http://www.bing.com?pc=CMNTDFJS -> Nahrazeno (http://www.microsoft.com/isapi/redir.dl ... ar=msnhome)
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters | DhcpNameServer : 10.255.255.10 10.255.255.20 192.168.1.1 ([(Private Address) (XX)][(Private Address) (XX)][-]) -> Nahrazeno ()
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters | DhcpNameServer : 10.255.255.10 10.255.255.20 192.168.1.1 ([(Private Address) (XX)][(Private Address) (XX)][-]) -> Nahrazeno ()
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{BDE28C21-AC91-40D1-9076-5FF773A1FAEF} | DhcpNameServer : 10.255.255.10 10.255.255.20 192.168.1.1 ([(Private Address) (XX)][(Private Address) (XX)][-]) -> Nahrazeno ()
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters\Interfaces\{BDE28C21-AC91-40D1-9076-5FF773A1FAEF} | DhcpNameServer : 10.255.255.10 10.255.255.20 192.168.1.1 ([(Private Address) (XX)][(Private Address) (XX)][-]) -> Nahrazeno ()

¤¤¤ Úlohy : 0 ¤¤¤

¤¤¤ Soubory : 0 ¤¤¤

¤¤¤ Soubor HOSTS : 0 ¤¤¤

¤¤¤ Antirootkit : 0 (Driver: Nahrán) ¤¤¤

¤¤¤ Webové prohlí?e?e : 0 ¤¤¤

¤¤¤ Kontrola MBR : ¤¤¤
+++++ PhysicalDrive0: ST750LM022 HN-M750MBB +++++
--- User ---
[MBR] 5563ee86216a1c21e78cfa8297c1cea8
[BSP] 6a3125a7f090a24988d63ba5cae1a61d : Unknown MBR Code
Partition table:
0 - [SYSTEM][MAN-MOUNT] | Offset (sectors): 2048 | Size: 1000 MB
1 - [MAN-MOUNT] EFI system partition | Offset (sectors): 2050048 | Size: 100 MB
2 - [MAN-MOUNT] Microsoft reserved partition | Offset (sectors): 2254848 | Size: 128 MB
3 - Basic data partition | Offset (sectors): 2516992 | Size: 698856 MB
4 - [SYSTEM] Basic data partition | Offset (sectors): 1433774080 | Size: 13269 MB
5 - [SYSTEM] Basic data partition | Offset (sectors): 1460948992 | Size: 2044 MB
User = LL1 ... OK
User = LL2 ... OK

[Orcus]

Ještě Zoek.