Prosim o kontrolu logu

Místo pro vaše HiJackThis logy a logy z dalších programů…

Moderátoři: Mods_senior, Security team

Syki7
Level 1.5
Level 1.5
Příspěvky: 145
Registrován: říjen 14
Pohlaví: Muž
Stav:
Offline

Prosim o kontrolu logu

Příspěvekod Syki7 » 13 črc 2015 20:01

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:59:52, on 13. 7. 2015
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.17840)


Boot mode: Normal

Running processes:
C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe
C:\Program Files (x86)\Bloody5\Bloody5\Bloody5.exe
C:\Program Files (x86)\Avira\Antivirus\avgnt.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\WINDOWS\SysWOW64\cmd.exe
C:\Program Files (x86)\McAfee\SiteAdvisor\McChHost.exe
c:\PROGRA~2\mcafee\siteadvisor\saui.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
C:\Users\Michal\Desktop\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
O4 - HKLM\..\Run: [PWRISOVM.EXE] C:\Program Files\PowerISO\PWRISOVM.EXE -startup
O4 - HKLM\..\Run: [BCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
O4 - HKLM\..\Run: [Avira Systray] C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files (x86)\Avira\Antivirus\avgnt.exe" /min
O4 - HKCU\..\Run: [Steam] "C:\Program Files (x86)\Steam\steam.exe" -silent
O4 - HKCU\..\Run: [Bloody2] "C:\Program Files (x86)\Bloody5\Bloody5\Bloody5.exe" Minimum
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MICROS~1\Office14\ONBttnIE.dll/105
O8 - Extra context menu item: SafeKey Fill Forms - file://C:\Users\Michal\AppData\LocalLow\SafeKey\context.html?cmd=fillforms
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)
O9 - Extra button: Odoslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - c:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&oslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - c:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: &Prepojené poznámky programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - c:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: &Prepojené poznámky programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - c:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\siteadvisor\mcieplg.dll
O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\siteadvisor\mcieplg.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: Avira Mail Protection (AntiVirMailService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\Antivirus\avmailc7.exe
O23 - Service: Avira Scheduler (AntiVirSchedulerService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\Antivirus\sched.exe
O23 - Service: Avira Real-Time Protection (AntiVirService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\Antivirus\avguard.exe
O23 - Service: Avira Web Protection (AntiVirWebService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\Antivirus\avwebg7.exe
O23 - Service: Apple Mobile Device Service - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: AtherosSvc - Qualcomm Atheros Commnucations - C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
O23 - Service: Avira Service Host (Avira.ServiceHost) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Unknown owner - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (file missing)
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Unknown owner - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (file missing)
O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: IconMan_R - Realsil Microelectronics Inc. - C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) ME Service - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: iSafeService - Unknown owner - C:\Program Files (x86)\Elex-tech\YAC\iSafeSvc.exe (file missing)
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: LMIGuardianSvc - LogMeIn, Inc. - C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: McAfee SiteAdvisor Service - McAfee, Inc. - C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\WINDOWS\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: Origin Client Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginClientService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: SInstalátor (ssinstall) - PS Media s.r.o. - C:\windows\SysWOW64\ssins.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: TeamViewer 10 (TeamViewer) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
O23 - Service: Tor Win32 Service (tor) - Unknown owner - C:\Program Files (x86)\Tor\tor.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: ZAtheros Bt&Wlan Coex Agent - Atheros - C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe

--
End of file - 11728 bytes

Reklama
Uživatelský avatar
jerabina
člen Security týmu
Level 6
Level 6
Příspěvky: 3647
Registrován: březen 13
Bydliště: Litoměřice
Pohlaví: Muž
Stav:
Offline

Re: Prosim o kontrolu logu

Příspěvekod jerabina » 13 črc 2015 20:06

Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected. Poté klikni na Main (hlavní stránku ) a klikni na Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranění historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit dočasné soubory Windows, vysypat koš atd.

- Pokud používáš jen Google Chrome , tak ATF nemusíš použít.

===================================================

Stáhni si TFC
Otevři soubor a zavři všechny ostatní okna, Klikni na Start k zahájení procesu. Program by neměl trvat dlouho.
Poté by se měl PC restartovat, pokud ne , proveď sám.

===================================================

Stáhni AdwCleaner (by Xplode)

Ulož si ho na svojí plochu
Ukonči všechny programy , okna a prohlížeče
Spusť program poklepáním a klikni na „Prohledat-Scan“
Po skenu se objeví log ( jinak je uložen systémovem disku jako AdwCleaner[R?].txt), jeho obsah sem celý vlož.

===================================================

Stáhni si Malwarebytes' Anti-Malware
- Při instalaci odeber zatržítko u „Povolit bezplatnou zkušební verzi Malwarebytes' Anti-Malware Premium“
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Aktualizace Malwarebytes' Anti-Malware a Spustit aplikaci Malwarebytes' Anti-Malware, pokud jo tak klikni na tlačítko konec
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a klikni na Skenovat nyní a
- po proběhnutí programu se ti objeví hláška vpravo dole tak klikni na Kopírovat do schránky a a vlož sem celý log.

- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).

Pokud budou problémy , spusť v nouz. režimu.
Když nevíš jak dál, přichází na řadu prostudovat manuál!
HJT návod

Pokud neodpovídám do vašich témat v sekci HJT když jsem online, tak je to jen proto, že jsem na mobilu kde je studování logů a psaní skriptů nemožné. Neberte to tedy prosím jako ignoraci.

Syki7
Level 1.5
Level 1.5
Příspěvky: 145
Registrován: říjen 14
Pohlaví: Muž
Stav:
Offline

Re: Prosim o kontrolu logu

Příspěvekod Syki7 » 13 črc 2015 21:25

ATF - pozivam jenom chrome

Malwarebytes Anti-Malware


www.malwarebytes.org

Datum skenování: 13. 7. 2015
Čas skenování: 20:11
Protokol: mbam.txt
Správce: Ano

Verze: 2.1.8.1057
Databáze malwaru: v2015.07.13.04
Databáze rootkitů: v2015.07.10.01
Licence: Bezplatná verze
Ochrana proti malwaru: Vypnuto
Ochrana proti škodlivým webovým stránkám: Vypnuto
Ochrana programu: Vypnuto

OS: Windows 8.1
CPU: x64
Souborový systém: NTFS
Uživatel: Michal

Typ skenu: Sken hrozeb
Výsledek: Dokončeno
Prohledaných objektů: 470275
Uplynulý čas: 1 hod, 5 min, 3 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Vypnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto

Procesy: 0
(Nenalezeny žádné škodlivé položky)

Moduly: 0
(Nenalezeny žádné škodlivé položky)

Klíče registru: 62
FraudTool.YAC, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\iSafeNetFilter, , [2e1a756cf397e650a90a90ed4eb3649c],
PUP.Optional.Bundler, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\PowerISO, , [b098538e038739fd450937e90ff619e7],
PUP.Optional.GeForce.A, HKLM\SOFTWARE\Ge-Force-nv, , [1d2bf2efe9a1af87f844b1d23dc7c53b],
PUP.Optional.IMPI.A, HKLM\SOFTWARE\IMPI, , [4cfca33ed0ba3204c0a32fddb05338c8],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{0ABA392C-EA54-4C82-8470-8E8D614C07C5}, , [c583b82975151d1916342a6259ab6a96],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{0E8F7359-4B8E-44F9-A745-E00A39C20BA0}, , [0048e3fee4a62d09fe4a6c20f70ddb25],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{36671F63-60A0-4B4F-8889-6FC18952C6DB}, , [d078e8f99eec3bfbed5d4e3e31d305fb],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7171097F-9C9D-4466-9D70-63E42BBD0F07}, , [b692c21f0387b87edd6dc8c40afa9769],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{AD432262-ACC0-427D-8AC5-18EF5268E55B}, , [36122fb24f3b92a43e0acac2897b4eb2],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CA04DCEF-2FED-49BA-BEA6-F532E03DD0C7}, , [71d7964b048647ef0e3b8efe5ea6fe02],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E574B19D-DEF7-434F-9234-DF5BF22A8714}, , [1c2c1dc49ded23138abf0587887c1ee2],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F3605943-DF42-4535-AB54-FFEC76C5157E}, , [d870a33ecac04ee85deb4f3d26de6a96],
PUM.Security.Hijack.DisableChromeUpdates, HKLM\SOFTWARE\POLICIES\GOOGLE\UPDATE, , [1236d40daae03bfb67c24d4259abe11f],
PUP.Optional.GeForce.A, HKLM\SOFTWARE\WOW6432NODE\Ge-Force-nv, , [a0a87a67593191a5b587a6dda65e0000],
PUP.Optional.ObjectBrowser.A, HKLM\SOFTWARE\WOW6432NODE\Object Browser-nv, , [0741578ad9b11026993332d900039a66],
PUP.Optional.ObjectBrowser.A, HKLM\SOFTWARE\WOW6432NODE\Object Browser-nv-ie, , [cc7c23be42481f174686f81344bfd12f],
PUP.Optional.IMPI.A, HKLM\SOFTWARE\WOW6432NODE\IMPI, , [e95f994824668caa75ee8a82b15201ff],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{0ABA392C-EA54-4C82-8470-8E8D614C07C5}, , [af99eef3acde59dd4505315bf80cea16],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{0E8F7359-4B8E-44F9-A745-E00A39C20BA0}, , [3b0d439eb2d81125c2867f0d4cb85ea2],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{36671F63-60A0-4B4F-8889-6FC18952C6DB}, , [3216a839dfab999d8ac019732dd7817f],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7171097F-9C9D-4466-9D70-63E42BBD0F07}, , [d078fbe6cbbf340293b7e3a9ca3a37c9],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{AD432262-ACC0-427D-8AC5-18EF5268E55B}, , [ed5ba63b5535de5802465f2d53b1cf31],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CA04DCEF-2FED-49BA-BEA6-F532E03DD0C7}, , [f751a63b1f6ba393de6b602ca65ec937],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E574B19D-DEF7-434F-9234-DF5BF22A8714}, , [59effae7ff8b7eb8044566260cf8619f],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F3605943-DF42-4535-AB54-FFEC76C5157E}, , [aa9ec51c4d3d61d5f553e7a5b0548080],
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}{8338240e}, , [9cac0fd2cdbdc571dba4bcd17f85d32d],
PUM.Security.Hijack.DisableChromeUpdates, HKLM\SOFTWARE\WOW6432NODE\POLICIES\GOOGLE\UPDATE, , [8bbde2ff71192d09e9402669e3218a76],
PUP.Optional.PCSpeedUp.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\PCSUUCDRV, , [6ddb469b4b3f251196cbf29e699b14ec],
PUP.Optional.ObjectBrowser.A, HKU\S-1-5-18\SOFTWARE\Object Browser-nv, , [2523ba278ffb48ee735ada312cd76799],
PUP.Optional.ObjectBrowser.A, HKU\S-1-5-18\SOFTWARE\Object Browser-nv-ie, , [6ddbc41dff8be65002cb1bf0798a946c],
PUP.Optional.Crossrider.C, HKU\S-1-5-18\SOFTWARE\APPDATALOW\SOFTWARE\_CrossriderRegNamePlaceHolder_, , [8abe31b04f3b60d6dc08c1c838ccbf41],
PUP.Optional.ObjectBrowser.A, HKU\S-1-5-21-253112895-946898586-2958512260-1002\SOFTWARE\Object Browser-nv, , [103840a18ffb4ceadcf1b853689b1de3],
PUP.Optional.ObjectBrowser.A, HKU\S-1-5-21-253112895-946898586-2958512260-1002\SOFTWARE\Object Browser-nv-ie, , [0147667b4f3ba4923d909a71b350ee12],
PUP.Optional.YorkNewCin.A, HKU\S-1-5-21-253112895-946898586-2958512260-1002\SOFTWARE\YorkNewCin, , [341420c1494153e3bb51870742c2bd43],
PUP.Optional.ConduitTB.Gen, HKU\S-1-5-21-253112895-946898586-2958512260-1002\SOFTWARE\GOOGLE\CHROME\NATIVEMESSAGINGHOSTS\nmhostct3289075, , [a1a7f6ebc9c1290d846b0bf544bf50b0],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-253112895-946898586-2958512260-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{0ABA392C-EA54-4C82-8470-8E8D614C07C5}, , [291f33aeb8d2a09679ce6527a460966a],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-253112895-946898586-2958512260-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{0E8F7359-4B8E-44F9-A745-E00A39C20BA0}, , [f355855c4842979fc085cbc16c98be42],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-253112895-946898586-2958512260-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2A6A68B3-E158-4540-82D0-1DAB7DD53D9D}, , [d078cc1517730d290146cfbd659f6997],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-253112895-946898586-2958512260-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{36671F63-60A0-4B4F-8889-6FC18952C6DB}, , [55f371700387f541b5920a82f21250b0],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-253112895-946898586-2958512260-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{427563BA-92CE-4C79-BFB9-B5E610B89CD8}, , [8cbcf0f1d9b1ba7c1d2ad7b58b79f010],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-253112895-946898586-2958512260-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{43644536-472C-45F4-9F6B-89EEF2226636}, , [de6a99487812ea4c5fe75735aa5a2dd3],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-253112895-946898586-2958512260-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6148AE47-F7A2-4266-A540-72C8889A41D1}, , [dd6bf8e922687bbb2f178a028282926e],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-253112895-946898586-2958512260-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7171097F-9C9D-4466-9D70-63E42BBD0F07}, , [98b0528f5a303ef83116ace0917333cd],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-253112895-946898586-2958512260-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{780383BD-FFE8-47AE-A46D-69BBD7F03247}, , [79cf22bf62283bfbe85ffa92e81c52ae],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-253112895-946898586-2958512260-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{89B4C72D-D22B-44BF-AC3B-9D15A9C52641}, , [cd7b558c602a3bfb4dfab5d72dd7a15f],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-253112895-946898586-2958512260-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8DF702C0-1185-4104-AFED-57E9C9AF2D59}, , [95b3b62b3852c175b393d0bc38ccb44c],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-253112895-946898586-2958512260-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{939E71CB-EAB3-42AE-BE17-B7E8EDA1E6B9}, , [2a1e934ebdcda88ea2a48efe39cb9b65],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-253112895-946898586-2958512260-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{AD432262-ACC0-427D-8AC5-18EF5268E55B}, , [d474b9289feb91a5d1748c00a163a55b],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-253112895-946898586-2958512260-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{AEC76BE7-C5E1-4129-A491-25E7B35BEEE5}, , [72d68a57f89291a51c2b17759c6851af],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-253112895-946898586-2958512260-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B79F8165-3290-4A7E-A198-C375727087B3}, , [24246f721c6e44f298ae96f69e6609f7],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-253112895-946898586-2958512260-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BDD41DC6-80A4-4F33-9D1E-8DDFE324583E}, , [3018b32e6a20cd697acc6329010353ad],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-253112895-946898586-2958512260-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CA04DCEF-2FED-49BA-BEA6-F532E03DD0C7}, , [d375d20f3d4d2d090c3a8ffd14f0a060],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-253112895-946898586-2958512260-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D93EDD49-9076-4892-BDDD-1B7277CA2366}, , [97b189585a3042f44afc79133fc517e9],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-253112895-946898586-2958512260-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{DCA7541C-AA64-4B63-ACB2-4F7A31F73E17}, , [1e2aeef33b4fb680b98ef4984bb9f40c],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-253112895-946898586-2958512260-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E574B19D-DEF7-434F-9234-DF5BF22A8714}, , [be8ad50c5b2f1e180f378309f80c4eb2],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-253112895-946898586-2958512260-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E576F6CA-CDE6-48E9-978B-435CA999761A}, , [e95f8a57acdea88e66e00f7d3dc7946c],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-253112895-946898586-2958512260-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E88CA433-19E6-4CC6-BF80-DCB91D967B81}, , [1137568b9cee5cda7bccdcb027ddb947],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-253112895-946898586-2958512260-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E8DF5304-2011-4B41-A398-C9A2DC9F2E5B}, , [2325b72aacdec670dc6a672510f4aa56],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-253112895-946898586-2958512260-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F3605943-DF42-4535-AB54-FFEC76C5157E}, , [f2568a575b2f3204a1a45438c1438d73],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-253112895-946898586-2958512260-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F45406A4-DCFF-4E6C-B961-55DF7716EE8D}, , [97b19c45e0aabd791136fb919a6aa35d],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-253112895-946898586-2958512260-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F8C90190-E1CB-48B5-8999-9DD88CB1AE57}, , [8abe7a67a3e76bcb84c26527c83c0000],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-253112895-946898586-2958512260-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F973AD02-ADCB-478B-84BD-331DEA7D9719}, , [ae9ad60b8109f442f15693f92adacb35],

Hodnoty registru: 47
PUP.Optional.IMPI.A, HKLM\SOFTWARE\IMPI|ToolbarID, cff5470523e342cf919218bdd43e40db, , [4cfca33ed0ba3204c0a32fddb05338c8]
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{0aba392c-ea54-4c82-8470-8e8d614c07c5}|AppName, Ge-Force-codedownloader.exe, , [c583b82975151d1916342a6259ab6a96]
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{0e8f7359-4b8e-44f9-a745-e00a39c20ba0}|AppName, Ge-Force-bg.exe, , [0048e3fee4a62d09fe4a6c20f70ddb25]
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{36671f63-60a0-4b4f-8889-6fc18952c6db}|AppName, Sense-codedownloader.exe, , [d078e8f99eec3bfbed5d4e3e31d305fb]
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7171097f-9c9d-4466-9d70-63e42bbd0f07}|AppName, SavePass 1.1-codedownloader.exe, , [b692c21f0387b87edd6dc8c40afa9769]
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{ad432262-acc0-427d-8ac5-18ef5268e55b}|AppName, SavePass 1.1-bg.exe, , [36122fb24f3b92a43e0acac2897b4eb2]
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{ca04dcef-2fed-49ba-bea6-f532e03dd0c7}|AppName, Sense-buttonutil.exe, , [71d7964b048647ef0e3b8efe5ea6fe02]
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{e574b19d-def7-434f-9234-df5bf22a8714}|AppName, Ge-Force-buttonutil.exe, , [1c2c1dc49ded23138abf0587887c1ee2]
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{f3605943-df42-4535-ab54-ffec76c5157e}|AppName, Sense-bg.exe, , [d870a33ecac04ee85deb4f3d26de6a96]
PUM.Security.Hijack.DisableChromeUpdates, HKLM\SOFTWARE\POLICIES\GOOGLE\UPDATE|DisableAutoUpdateChecksCheckboxValue, 1, , [1236d40daae03bfb67c24d4259abe11f]
PUP.Optional.IMPI.A, HKLM\SOFTWARE\WOW6432NODE\IMPI|ToolbarID, cff5470523e342cf919218bdd43e40db, , [e95f994824668caa75ee8a82b15201ff]
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{0aba392c-ea54-4c82-8470-8e8d614c07c5}|AppName, Ge-Force-codedownloader.exe, , [af99eef3acde59dd4505315bf80cea16]
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{0e8f7359-4b8e-44f9-a745-e00a39c20ba0}|AppName, Ge-Force-bg.exe, , [3b0d439eb2d81125c2867f0d4cb85ea2]
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{36671f63-60a0-4b4f-8889-6fc18952c6db}|AppName, Sense-codedownloader.exe, , [3216a839dfab999d8ac019732dd7817f]
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7171097f-9c9d-4466-9d70-63e42bbd0f07}|AppName, SavePass 1.1-codedownloader.exe, , [d078fbe6cbbf340293b7e3a9ca3a37c9]
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{ad432262-acc0-427d-8ac5-18ef5268e55b}|AppName, SavePass 1.1-bg.exe, , [ed5ba63b5535de5802465f2d53b1cf31]
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{ca04dcef-2fed-49ba-bea6-f532e03dd0c7}|AppName, Sense-buttonutil.exe, , [f751a63b1f6ba393de6b602ca65ec937]
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{e574b19d-def7-434f-9234-df5bf22a8714}|AppName, Ge-Force-buttonutil.exe, , [59effae7ff8b7eb8044566260cf8619f]
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{f3605943-df42-4535-ab54-ffec76c5157e}|AppName, Sense-bg.exe, , [aa9ec51c4d3d61d5f553e7a5b0548080]
PUM.Security.Hijack.DisableChromeUpdates, HKLM\SOFTWARE\WOW6432NODE\POLICIES\GOOGLE\UPDATE|DisableAutoUpdateChecksCheckboxValue, 1, , [8bbde2ff71192d09e9402669e3218a76]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-253112895-946898586-2958512260-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{0aba392c-ea54-4c82-8470-8e8d614c07c5}|AppName, Ge-Force-codedownloader.exe, , [291f33aeb8d2a09679ce6527a460966a]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-253112895-946898586-2958512260-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{0e8f7359-4b8e-44f9-a745-e00a39c20ba0}|AppName, Ge-Force-bg.exe, , [f355855c4842979fc085cbc16c98be42]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-253112895-946898586-2958512260-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2A6A68B3-E158-4540-82D0-1DAB7DD53D9D}|AppName, 6fe9931a-f2a5-4563-a8ad-0ffb0525aaba-2.exe-codedownloader.exe, , [d078cc1517730d290146cfbd659f6997]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-253112895-946898586-2958512260-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{36671f63-60a0-4b4f-8889-6fc18952c6db}|AppName, Sense-codedownloader.exe, , [55f371700387f541b5920a82f21250b0]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-253112895-946898586-2958512260-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{427563BA-92CE-4C79-BFB9-B5E610B89CD8}|AppName, 6fe9931a-f2a5-4563-a8ad-0ffb0525aaba-2.exe-codedownloader.exe, , [8cbcf0f1d9b1ba7c1d2ad7b58b79f010]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-253112895-946898586-2958512260-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{43644536-472C-45F4-9F6B-89EEF2226636}|AppName, 81090ca9-980d-4c76-a917-62fc7271e058-2.exe-buttonutil.exe, , [de6a99487812ea4c5fe75735aa5a2dd3]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-253112895-946898586-2958512260-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6148AE47-F7A2-4266-A540-72C8889A41D1}|AppName, 81090ca9-980d-4c76-a917-62fc7271e058-2.exe-buttonutil.exe, , [dd6bf8e922687bbb2f178a028282926e]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-253112895-946898586-2958512260-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7171097f-9c9d-4466-9d70-63e42bbd0f07}|AppName, SavePass 1.1-codedownloader.exe, , [98b0528f5a303ef83116ace0917333cd]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-253112895-946898586-2958512260-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{780383BD-FFE8-47AE-A46D-69BBD7F03247}|AppName, 81090ca9-980d-4c76-a917-62fc7271e058-2.exe-codedownloader.exe, , [79cf22bf62283bfbe85ffa92e81c52ae]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-253112895-946898586-2958512260-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{89B4C72D-D22B-44BF-AC3B-9D15A9C52641}|AppName, 10bb981d-cf8d-4e3a-b808-ecbfa333c4fe-2.exe-codedownloader.exe, , [cd7b558c602a3bfb4dfab5d72dd7a15f]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-253112895-946898586-2958512260-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8DF702C0-1185-4104-AFED-57E9C9AF2D59}|AppName, 10bb981d-cf8d-4e3a-b808-ecbfa333c4fe-2.exe-buttonutil.exe, , [95b3b62b3852c175b393d0bc38ccb44c]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-253112895-946898586-2958512260-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{939E71CB-EAB3-42AE-BE17-B7E8EDA1E6B9}|AppName, 6fe9931a-f2a5-4563-a8ad-0ffb0525aaba-2.exe-buttonutil.exe, , [2a1e934ebdcda88ea2a48efe39cb9b65]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-253112895-946898586-2958512260-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{ad432262-acc0-427d-8ac5-18ef5268e55b}|AppName, SavePass 1.1-bg.exe, , [d474b9289feb91a5d1748c00a163a55b]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-253112895-946898586-2958512260-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{AEC76BE7-C5E1-4129-A491-25E7B35BEEE5}|AppName, 10bb981d-cf8d-4e3a-b808-ecbfa333c4fe-2.exe-codedownloader.exe, , [72d68a57f89291a51c2b17759c6851af]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-253112895-946898586-2958512260-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B79F8165-3290-4A7E-A198-C375727087B3}|AppName, 6fe9931a-f2a5-4563-a8ad-0ffb0525aaba-2.exe-buttonutil.exe, , [24246f721c6e44f298ae96f69e6609f7]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-253112895-946898586-2958512260-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BDD41DC6-80A4-4F33-9D1E-8DDFE324583E}|AppName, 81090ca9-980d-4c76-a917-62fc7271e058-2.exe-buttonutil.exe, , [3018b32e6a20cd697acc6329010353ad]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-253112895-946898586-2958512260-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{ca04dcef-2fed-49ba-bea6-f532e03dd0c7}|AppName, Sense-buttonutil.exe, , [d375d20f3d4d2d090c3a8ffd14f0a060]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-253112895-946898586-2958512260-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D93EDD49-9076-4892-BDDD-1B7277CA2366}|AppName, 6fe9931a-f2a5-4563-a8ad-0ffb0525aaba-2.exe-buttonutil.exe, , [97b189585a3042f44afc79133fc517e9]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-253112895-946898586-2958512260-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{DCA7541C-AA64-4B63-ACB2-4F7A31F73E17}|AppName, 6fe9931a-f2a5-4563-a8ad-0ffb0525aaba-2.exe-codedownloader.exe, , [1e2aeef33b4fb680b98ef4984bb9f40c]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-253112895-946898586-2958512260-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{e574b19d-def7-434f-9234-df5bf22a8714}|AppName, Ge-Force-buttonutil.exe, , [be8ad50c5b2f1e180f378309f80c4eb2]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-253112895-946898586-2958512260-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E576F6CA-CDE6-48E9-978B-435CA999761A}|AppName, 10bb981d-cf8d-4e3a-b808-ecbfa333c4fe-2.exe-buttonutil.exe, , [e95f8a57acdea88e66e00f7d3dc7946c]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-253112895-946898586-2958512260-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E88CA433-19E6-4CC6-BF80-DCB91D967B81}|AppName, 10bb981d-cf8d-4e3a-b808-ecbfa333c4fe-2.exe-codedownloader.exe, , [1137568b9cee5cda7bccdcb027ddb947]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-253112895-946898586-2958512260-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E8DF5304-2011-4B41-A398-C9A2DC9F2E5B}|AppName, 10bb981d-cf8d-4e3a-b808-ecbfa333c4fe-2.exe-buttonutil.exe, , [2325b72aacdec670dc6a672510f4aa56]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-253112895-946898586-2958512260-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{f3605943-df42-4535-ab54-ffec76c5157e}|AppName, Sense-bg.exe, , [f2568a575b2f3204a1a45438c1438d73]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-253112895-946898586-2958512260-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F45406A4-DCFF-4E6C-B961-55DF7716EE8D}|AppName, 10bb981d-cf8d-4e3a-b808-ecbfa333c4fe-2.exe-codedownloader.exe, , [97b19c45e0aabd791136fb919a6aa35d]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-253112895-946898586-2958512260-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F8C90190-E1CB-48B5-8999-9DD88CB1AE57}|AppName, 6fe9931a-f2a5-4563-a8ad-0ffb0525aaba-2.exe-buttonutil.exe, , [8abe7a67a3e76bcb84c26527c83c0000]

Syki7
Level 1.5
Level 1.5
Příspěvky: 145
Registrován: říjen 14
Pohlaví: Muž
Stav:
Offline

Re: Prosim o kontrolu logu

Příspěvekod Syki7 » 13 črc 2015 21:26

PUP.Optional.CrossRider.A, HKU\S-1-5-21-253112895-946898586-2958512260-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F973AD02-ADCB-478B-84BD-331DEA7D9719}|AppName, 81090ca9-980d-4c76-a917-62fc7271e058-2.exe-codedownloader.exe, , [ae9ad60b8109f442f15693f92adacb35]

Data registru: 0
(Nenalezeny žádné škodlivé položky)

Složky: 33
PUP.Optional.MultiPlug.A, C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo\1.0, , [70d8dd04f09af83edfc724622ed608f8],
PUP.Optional.MultiPlug.A, C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo, , [70d8dd04f09af83edfc724622ed608f8],
PUP.Optional.MultiPlug.A, C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli\238, , [90b818c9cdbdc670b6f0186ef80cce32],
PUP.Optional.MultiPlug.A, C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli, , [90b818c9cdbdc670b6f0186ef80cce32],
PUP.Optional.MultiPlug.A, C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo\1.0, , [dc6c58897a103303fea83452a3615da3],
PUP.Optional.MultiPlug.A, C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo, , [dc6c58897a103303fea83452a3615da3],
PUP.Optional.MultiPlug.A, C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli\238, , [8dbbbf224545b87e396d4145887cbe42],
PUP.Optional.MultiPlug.A, C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli, , [8dbbbf224545b87e396d4145887cbe42],
PUP.Optional.MultiPlug.A, C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo\1.0, , [f3559c453b4fc86eb2f42f5717edf20e],
PUP.Optional.MultiPlug.A, C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo, , [f3559c453b4fc86eb2f42f5717edf20e],
PUP.Optional.MultiPlug.A, C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli\238, , [68e015cc0a80d066b9edff879b69db25],
PUP.Optional.MultiPlug.A, C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli, , [68e015cc0a80d066b9edff879b69db25],
PUP.Optional.MultiPlug.A, C:\Users\UpdatusUser\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo\1.0, , [ca7e25bc71192d094c5adbabe1231ce4],
PUP.Optional.MultiPlug.A, C:\Users\UpdatusUser\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo, , [ca7e25bc71192d094c5adbabe1231ce4],
PUP.Optional.MultiPlug.A, C:\Users\UpdatusUser\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli\238, , [1a2e9f422e5c989ef6b0790dce36c23e],
PUP.Optional.MultiPlug.A, C:\Users\UpdatusUser\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli, , [1a2e9f422e5c989ef6b0790dce36c23e],
PUP.Optional.Multiplug.Gen, C:\ProgramData\{1f0e4329-eb67-5e43-1f0e-e4329eb60ca7}, , [7bcd8f52b4d679bd65447d09d62e3dc3],
PUP.Optional.MultiPlug, C:\ProgramData\beooadpobokiheaolngahnakhjgmjdml, , [64e4538e870340f6e60d0780a75d8d73],
PUP.Optional.MultiPlug, C:\ProgramData\iclnmlbajnhaegddaimjephnnhfpcmde, , [c880915072187bbb6d86cfb808fcb44c],
PUP.Optional.CoupExtension.A, C:\Program Files (x86)\COupExtensiionn, , [4cfcbc252c5e8babd9c72b5d07fd827e],
PUP.Optional.Skypemoticons.A, C:\Program Files (x86)\SKeypEmotiicons, , [99af568b147603334066fb9818ec5ca4],
PUP.Optional.GlobalUpdate.A, C:\Users\Michal\AppData\Local\Temp\comh.314427, , [4efa35ac187294a2ade682609072de22],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC, , [52f6e4fd5e2c3ef831dbfdfd42c011ef],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0\js, , [ca7e01e04248af878f948fd5cd3826da],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0\js\api, , [ca7e01e04248af878f948fd5cd3826da],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0\js\lib, , [ca7e01e04248af878f948fd5cd3826da],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0\js\lib\popupResource, , [ca7e01e04248af878f948fd5cd3826da],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0, , [ca7e01e04248af878f948fd5cd3826da],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0\extensionData, , [ca7e01e04248af878f948fd5cd3826da],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0\extensionData\plugins, , [ca7e01e04248af878f948fd5cd3826da],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0\extensionData\userCode, , [ca7e01e04248af878f948fd5cd3826da],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0\icons, , [ca7e01e04248af878f948fd5cd3826da],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0\icons\actions, , [ca7e01e04248af878f948fd5cd3826da],

Soubory: 176
FraudTool.YAC, C:\Windows\System32\drivers\ISAFENETFILTER.SYS, , [2e1a756cf397e650a90a90ed4eb3649c],
PUP.Optional.Bundler, C:\Program Files\PowerISO\uninstall.exe, , [b098538e038739fd450937e90ff619e7],
PUP.Optional.Crossrider, C:\Program Files (x86)\Adobe\e5674085-d5e1-4705-9f07-9f81ddd94548.dll, , [fc4c934ec9c1d0660e96f7b5e21fd828],
PUP.Optional.Nova.A, C:\Program Files (x86)\Adobe\e87b4c49-7fc8-4393-84ef-42a2baf7afcf.dll, , [ea5ecd1490fa55e190981f3adf22718f],
PUP.Optional.Multiplug.A, C:\Program Files (x86)\COupExtensiionn\baRsPZX2fumGWL.exe, , [2a1e34adb8d21521fa66a9d1649d2bd5],
PUP.Optional.Multiplug.A, C:\Program Files (x86)\COupEXTuenssioNe\E11fyVACA6wM6A.exe, , [0a3eb32e58328aaccb956f0b33ce41bf],
PUP.Optional.Multiplug.A, C:\Program Files (x86)\CouupoExtenSion\CouupoExtenSion.exe, , [66e2ebf691f9999d1749de9c0100d42c],
PUP.Optional.MultiPlug, C:\Program Files (x86)\Download Plus\Download Plus.exe, , [60e8bd244e3cc76f45dd543d7e834bb5],
PUP.Optional.Crossrider, C:\Program Files (x86)\e5674085-d5e1-4705-9f07-9f81ddd94548\bbaf395d-ac9b-4f27-953e-6dcfbbd3ff5f.dll, , [f850e9f85139b581069e654758a95aa6],
PUP.Optional.Nova.A, C:\Program Files (x86)\e5674085-d5e1-4705-9f07-9f81ddd94548\db33cd0a-8f3d-4e05-8c68-75d5e20be2a0.dll, , [2d1bfbe651399e988f99cd8c9d64aa56],
PUP.Optional.MultiPlug, C:\Program Files (x86)\Gom VPN Turbocharge your internet\Gom VPN Turbocharge your internet.exe, , [b69219c8d7b300364fd3dcb5b74a49b7],
PUP.Optional.ELEX, C:\$Recycle.Bin\S-1-5-21-253112895-946898586-2958512260-1002\$RXAZGH0.exe, , [4dfb5f82751555e1d65866f9b35229d7],
FraudTool.YAC, C:\Windows\System32\drivers\iSafeKrnlBoot.sys, , [d573f5ece3a71c1a159ee895ed141be5],
PUP.Optional.Goobzo, C:\Users\Michal\AppData\Local\Temp\ytd_sysmenu_setup.exe, , [ed5b548d7c0e47efd10c37cfe5202cd4],
PUP.Optional.ObjectBrowser.A, C:\Users\Michal\AppData\Local\Temp\Install_29689\cr.exe, , [94b4fbe65e2c3303fe4e684061a043bd],
PUP.Optional.Mypcbackup, C:\Users\Michal\AppData\Local\Temp\Install_29689\jd.exe, , [173109d85b2fa294e9384f12e520b749],
PUP.Optional.ModGoog, C:\Users\Michal\AppData\Local\Temp\comh.314427\globalupdate.exe, , [252359883753f145fc294c43d62b14ec],
PUP.Optional.ModGoog, C:\Users\Michal\AppData\Local\Temp\comh.314427\globalupdateBroker.exe, , [0a3e0ed31872043272b38e01728f9b65],
PUP.Optional.ModGoog, C:\Users\Michal\AppData\Local\Temp\comh.314427\globalupdateCrashHandler.exe, , [30185190e1a96acc869fe3ac9968d12f],
PUP.Optional.ModGoog, C:\Users\Michal\AppData\Local\Temp\comh.314427\globalupdateOnDemand.exe, , [fa4ea53c375377bf9095533cf50c728e],
PUP.Optional.ModGoog, C:\Users\Michal\AppData\Local\Temp\comh.314427\goopdate.dll, , [c97f59882e5c24127fa6e5aa31d06e92],
PUP.Optional.ModGoog, C:\Users\Michal\AppData\Local\Temp\comh.314427\goopdateres_en.dll, , [2c1ce8f9c5c58bab7ea75639ed14837d],
PUP.Optional.ModGoog, C:\Users\Michal\AppData\Local\Temp\comh.314427\npglobalupdateUpdate4.dll, , [d276f8e9107aed494cd998f78c757090],
PUP.Optional.ModGoog, C:\Users\Michal\AppData\Local\Temp\comh.314427\psmachine.dll, , [fe4ac81997f367cfcd582867b74a6d93],
PUP.Optional.ModGoog, C:\Users\Michal\AppData\Local\Temp\comh.314427\psuser.dll, , [9fa916cb4c3e0630f332632c35ccbb45],
PUP.Optional.Downloader, C:\Users\Michal\Downloads\MINECRAFT-GIFT-CODE-GENERATOR-NO-SURVEY-OR_downloader.exe, , [3612ba2718723501e5cc4ff258a84cb4],
PUP.Optional.OpenCandy, C:\Users\Michal\Downloads\DTLite4491-0356.exe, , [6eda8e5315752d09738e4a0a4bba728e],
PUP.Optional.Jelbrus.A, C:\Users\Michal\Downloads\Zoo_Tycoon_2.exe, , [b3955e83404ad75f8300aeb3f60fd729],
PUP.Optional.AppDataFR.A, C:\Users\Michal\AppData\Roaming\APPDATAFR25.BIN, , [e860d50c9befd95dde32728f0201d828],
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\CCF00E2B-042D-45A8-9173-63DFA4076CBE-5, , [113720c1c8c2c86eaf436dbfe3204fb1],
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\CCF00E2B-042D-45A8-9173-63DFA4076CBE-5_USER, , [79cf6a77cdbd0135579beb41de257c84],
PUP.Optional.CrossRider.T, C:\Windows\Tasks\CCF00E2B-042D-45A8-9173-63DFA4076CBE-5.JOB, , [d37519c8bcce2d09d8147bfd689c1de3],
PUP.Optional.CrossRider.T, C:\Windows\Tasks\CCF00E2B-042D-45A8-9173-63DFA4076CBE-5_USER.JOB, , [5fe9cf124842b38333b9e69220e42bd5],
PUP.Optional.MultiPlug.A, C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo\1.0\lsdb.js, , [70d8dd04f09af83edfc724622ed608f8],
PUP.Optional.MultiPlug.A, C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo\1.0\background.html, , [70d8dd04f09af83edfc724622ed608f8],
PUP.Optional.MultiPlug.A, C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo\1.0\content.js, , [70d8dd04f09af83edfc724622ed608f8],
PUP.Optional.MultiPlug.A, C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo\1.0\manifest.json, , [70d8dd04f09af83edfc724622ed608f8],
PUP.Optional.MultiPlug.A, C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo\1.0\S8.js, , [70d8dd04f09af83edfc724622ed608f8],
PUP.Optional.MultiPlug.A, C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli\238\lsdb.js, , [90b818c9cdbdc670b6f0186ef80cce32],
PUP.Optional.MultiPlug.A, C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli\238\background.html, , [90b818c9cdbdc670b6f0186ef80cce32],
PUP.Optional.MultiPlug.A, C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli\238\content.js, , [90b818c9cdbdc670b6f0186ef80cce32],
PUP.Optional.MultiPlug.A, C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli\238\manifest.json, , [90b818c9cdbdc670b6f0186ef80cce32],
PUP.Optional.MultiPlug.A, C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli\238\VPC.js, , [90b818c9cdbdc670b6f0186ef80cce32],
PUP.Optional.MultiPlug.A, C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo\1.0\lsdb.js, , [dc6c58897a103303fea83452a3615da3],
PUP.Optional.MultiPlug.A, C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo\1.0\background.html, , [dc6c58897a103303fea83452a3615da3],
PUP.Optional.MultiPlug.A, C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo\1.0\content.js, , [dc6c58897a103303fea83452a3615da3],
PUP.Optional.MultiPlug.A, C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo\1.0\manifest.json, , [dc6c58897a103303fea83452a3615da3],
PUP.Optional.MultiPlug.A, C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo\1.0\S8.js, , [dc6c58897a103303fea83452a3615da3],
PUP.Optional.MultiPlug.A, C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli\238\lsdb.js, , [8dbbbf224545b87e396d4145887cbe42],
PUP.Optional.MultiPlug.A, C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli\238\background.html, , [8dbbbf224545b87e396d4145887cbe42],
PUP.Optional.MultiPlug.A, C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli\238\content.js, , [8dbbbf224545b87e396d4145887cbe42],
PUP.Optional.MultiPlug.A, C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli\238\manifest.json, , [8dbbbf224545b87e396d4145887cbe42],
PUP.Optional.MultiPlug.A, C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli\238\VPC.js, , [8dbbbf224545b87e396d4145887cbe42],
PUP.Optional.MultiPlug.A, C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo\1.0\lsdb.js, , [f3559c453b4fc86eb2f42f5717edf20e],
PUP.Optional.MultiPlug.A, C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo\1.0\background.html, , [f3559c453b4fc86eb2f42f5717edf20e],
PUP.Optional.MultiPlug.A, C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo\1.0\content.js, , [f3559c453b4fc86eb2f42f5717edf20e],
PUP.Optional.MultiPlug.A, C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo\1.0\manifest.json, , [f3559c453b4fc86eb2f42f5717edf20e],
PUP.Optional.MultiPlug.A, C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo\1.0\S8.js, , [f3559c453b4fc86eb2f42f5717edf20e],
PUP.Optional.MultiPlug.A, C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli\238\lsdb.js, , [68e015cc0a80d066b9edff879b69db25],
PUP.Optional.MultiPlug.A, C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli\238\background.html, , [68e015cc0a80d066b9edff879b69db25],
PUP.Optional.MultiPlug.A, C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli\238\content.js, , [68e015cc0a80d066b9edff879b69db25],
PUP.Optional.MultiPlug.A, C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli\238\manifest.json, , [68e015cc0a80d066b9edff879b69db25],
PUP.Optional.MultiPlug.A, C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli\238\VPC.js, , [68e015cc0a80d066b9edff879b69db25],
PUP.Optional.MultiPlug.A, C:\Users\UpdatusUser\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo\1.0\lsdb.js, , [ca7e25bc71192d094c5adbabe1231ce4],
PUP.Optional.MultiPlug.A, C:\Users\UpdatusUser\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo\1.0\background.html, , [ca7e25bc71192d094c5adbabe1231ce4],
PUP.Optional.MultiPlug.A, C:\Users\UpdatusUser\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo\1.0\content.js, , [ca7e25bc71192d094c5adbabe1231ce4],
PUP.Optional.MultiPlug.A, C:\Users\UpdatusUser\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo\1.0\manifest.json, , [ca7e25bc71192d094c5adbabe1231ce4],
PUP.Optional.MultiPlug.A, C:\Users\UpdatusUser\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo\1.0\S8.js, , [ca7e25bc71192d094c5adbabe1231ce4],
PUP.Optional.MultiPlug.A, C:\Users\UpdatusUser\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli\238\lsdb.js, , [1a2e9f422e5c989ef6b0790dce36c23e],
PUP.Optional.MultiPlug.A, C:\Users\UpdatusUser\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli\238\background.html, , [1a2e9f422e5c989ef6b0790dce36c23e],
PUP.Optional.MultiPlug.A, C:\Users\UpdatusUser\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli\238\content.js, , [1a2e9f422e5c989ef6b0790dce36c23e],
PUP.Optional.MultiPlug.A, C:\Users\UpdatusUser\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli\238\manifest.json, , [1a2e9f422e5c989ef6b0790dce36c23e],
PUP.Optional.MultiPlug.A, C:\Users\UpdatusUser\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli\238\VPC.js, , [1a2e9f422e5c989ef6b0790dce36c23e],
PUP.Optional.Multiplug.Gen, C:\ProgramData\{1f0e4329-eb67-5e43-1f0e-e4329eb60ca7}\download.dat, , [7bcd8f52b4d679bd65447d09d62e3dc3],
PUP.Optional.Multiplug.Gen, C:\ProgramData\{1f0e4329-eb67-5e43-1f0e-e4329eb60ca7}\5d8de207d3b64f4f, , [7bcd8f52b4d679bd65447d09d62e3dc3],
PUP.Optional.Multiplug.Gen, C:\ProgramData\{1f0e4329-eb67-5e43-1f0e-e4329eb60ca7}\90704452f462a89b, , [7bcd8f52b4d679bd65447d09d62e3dc3],
PUP.Optional.MultiPlug, C:\ProgramData\beooadpobokiheaolngahnakhjgmjdml\lsdb.js, , [64e4538e870340f6e60d0780a75d8d73],
PUP.Optional.MultiPlug, C:\ProgramData\beooadpobokiheaolngahnakhjgmjdml\background.html, , [64e4538e870340f6e60d0780a75d8d73],
PUP.Optional.MultiPlug, C:\ProgramData\beooadpobokiheaolngahnakhjgmjdml\content.js, , [64e4538e870340f6e60d0780a75d8d73],
PUP.Optional.MultiPlug, C:\ProgramData\beooadpobokiheaolngahnakhjgmjdml\hBrLf.js, , [64e4538e870340f6e60d0780a75d8d73],
PUP.Optional.MultiPlug, C:\ProgramData\beooadpobokiheaolngahnakhjgmjdml\manifest.json, , [64e4538e870340f6e60d0780a75d8d73],
PUP.Optional.MultiPlug, C:\ProgramData\iclnmlbajnhaegddaimjephnnhfpcmde\lsdb.js, , [c880915072187bbb6d86cfb808fcb44c],
PUP.Optional.MultiPlug, C:\ProgramData\iclnmlbajnhaegddaimjephnnhfpcmde\background.html, , [c880915072187bbb6d86cfb808fcb44c],
PUP.Optional.MultiPlug, C:\ProgramData\iclnmlbajnhaegddaimjephnnhfpcmde\content.js, , [c880915072187bbb6d86cfb808fcb44c],
PUP.Optional.MultiPlug, C:\ProgramData\iclnmlbajnhaegddaimjephnnhfpcmde\Hy.js, , [c880915072187bbb6d86cfb808fcb44c],
PUP.Optional.MultiPlug, C:\ProgramData\iclnmlbajnhaegddaimjephnnhfpcmde\manifest.json, , [c880915072187bbb6d86cfb808fcb44c],
PUP.Optional.CoupExtension.A, C:\Program Files (x86)\COupExtensiionn\BARSPZX2FUMGWL.TLB, , [4cfcbc252c5e8babd9c72b5d07fd827e],
PUP.Optional.CoupExtension.A, C:\Program Files (x86)\COupExtensiionn\baRsPZX2fumGWL.dat, , [4cfcbc252c5e8babd9c72b5d07fd827e],
PUP.Optional.Skypemoticons.A, C:\Program Files (x86)\SKeypEmotiicons\A12DDETCFM2OBR.TLB, , [99af568b147603334066fb9818ec5ca4],
PUP.Optional.Skypemoticons.A, C:\Program Files (x86)\SKeypEmotiicons\a12ddetCFM2oBr.dat, , [99af568b147603334066fb9818ec5ca4],
PUP.Optional.GlobalUpdate.A, C:\Users\Michal\AppData\Local\Temp\comh.314427\globalupdateHelper.msi, , [4efa35ac187294a2ade682609072de22],
FraudTool.YAC, C:\Program Files (x86)\Elex-tech\YAC\eDelayinfo.edb, , [52f6e4fd5e2c3ef831dbfdfd42c011ef],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0\js\f793b94c6c99c859b4c04c9ff3dae72e.js, , [ca7e01e04248af878f948fd5cd3826da],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0\js\53415fb7076a4edeb3e5c7c38c4f0570.js, , [ca7e01e04248af878f948fd5cd3826da],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0\js\main.js, , [ca7e01e04248af878f948fd5cd3826da],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0\js\api\6aa392b67d215f4cf371481f117c79e3.js, , [ca7e01e04248af878f948fd5cd3826da],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0\js\api\81317388c8e3bfec3221c6de1ec1fa64.js, , [ca7e01e04248af878f948fd5cd3826da],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0\js\api\8d92163a4f7e16f877fa8f4a26e754ce.js, , [ca7e01e04248af878f948fd5cd3826da],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0\js\api\e52877c6312c41d16be690991c8b938a.js, , [ca7e01e04248af878f948fd5cd3826da],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0\js\api\ec9caf2fb43f4f1acb70a52ffc693b7b.js, , [ca7e01e04248af878f948fd5cd3826da],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0\js\api\pageAction.js, , [ca7e01e04248af878f948fd5cd3826da],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0\js\lib\019c1b16a91ad30633694ed25768ed37.js, , [ca7e01e04248af878f948fd5cd3826da],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0\js\lib\024e74d7ae761a6eb79c2ccc3517645b.js, , [ca7e01e04248af878f948fd5cd3826da],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0\js\lib\06f18a1a86c719906ba630b1c8ae3a25.js, , [ca7e01e04248af878f948fd5cd3826da],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0\js\lib\0711f033cb43e1c48cf1c165a0019838.js, , [ca7e01e04248af878f948fd5cd3826da],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0\js\lib\48d8918c877da875f78c4338053a217a.js, , [ca7e01e04248af878f948fd5cd3826da],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0\js\lib\4f15bea1991d7618f2ac4ca68a0bccfd.js, , [ca7e01e04248af878f948fd5cd3826da],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0\js\lib\6369c3cb78aa7735368e194553180fb5.js, , [ca7e01e04248af878f948fd5cd3826da],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0\js\lib\652b2322ae0e792ce0e811296664c124.js, , [ca7e01e04248af878f948fd5cd3826da],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0\js\lib\690920e169b12aeb7e6509dbcc4f9afd.js, , [ca7e01e04248af878f948fd5cd3826da],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0\js\lib\7d488c73531d7ab7bf9368803d3df9fb.js, , [ca7e01e04248af878f948fd5cd3826da],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0\js\lib\9a421126e63f2207b694828b82adf0ca.js, , [ca7e01e04248af878f948fd5cd3826da],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0\js\lib\a6d60bc33aada8f176c3f3fc53a361d1.js, , [ca7e01e04248af878f948fd5cd3826da],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0\js\lib\app_api.js, , [ca7e01e04248af878f948fd5cd3826da],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0\js\lib\cbbb1c6bb338e8cba005b5111b134524.js, , [ca7e01e04248af878f948fd5cd3826da],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0\js\lib\ecbf2a5626fc3b8fa1c9b8c0ede33810.js, , [ca7e01e04248af878f948fd5cd3826da],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0\js\lib\installer.js, , [ca7e01e04248af878f948fd5cd3826da],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0\js\lib\popupResource\newPopup.js, , [ca7e01e04248af878f948fd5cd3826da],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0\js\lib\popupResource\popup.js, , [ca7e01e04248af878f948fd5cd3826da],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0\background.html, , [ca7e01e04248af878f948fd5cd3826da],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0\chromeCoreFilesIndex.txt, , [ca7e01e04248af878f948fd5cd3826da],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0\manifest.json, , [ca7e01e04248af878f948fd5cd3826da],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0\popup.html, , [ca7e01e04248af878f948fd5cd3826da],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0\Settings.json, , [ca7e01e04248af878f948fd5cd3826da],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0\extensionData\manifest.xml, , [ca7e01e04248af878f948fd5cd3826da],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0\extensionData\plugins.json, , [ca7e01e04248af878f948fd5cd3826da],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0\extensionData\plugins\242.js, , [ca7e01e04248af878f948fd5cd3826da],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0\extensionData\plugins\1.js, , [ca7e01e04248af878f948fd5cd3826da],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0\extensionData\plugins\102.js, , [ca7e01e04248af878f948fd5cd3826da],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0\extensionData\plugins\13.js, , [ca7e01e04248af878f948fd5cd3826da],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0\extensionData\plugins\14.js, , [ca7e01e04248af878f948fd5cd3826da],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0\extensionData\plugins\17.js, , [ca7e01e04248af878f948fd5cd3826da],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0\extensionData\plugins\177.js, , [ca7e01e04248af878f948fd5cd3826da],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0\extensionData\plugins\180.js, , [ca7e01e04248af878f948fd5cd3826da],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0\extensionData\plugins\182.js, , [ca7e01e04248af878f948fd5cd3826da],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0\extensionData\plugins\183.js, , [ca7e01e04248af878f948fd5cd3826da],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0\extensionData\plugins\184.js, , [ca7e01e04248af878f948fd5cd3826da],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0\extensionData\plugins\19.js, , [ca7e01e04248af878f948fd5cd3826da],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0\extensionData\plugins\200.js, , [ca7e01e04248af878f948fd5cd3826da],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0\extensionData\plugins\207.js, , [ca7e01e04248af878f948fd5cd3826da],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0\extensionData\plugins\21.js, , [ca7e01e04248af878f948fd5cd3826da],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0\extensionData\plugins\211.js, , [ca7e01e04248af878f948fd5cd3826da],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0\extensionData\plugins\22.js, , [ca7e01e04248af878f948fd5cd3826da],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0\extensionData\plugins\220.js, , [ca7e01e04248af878f948fd5cd3826da],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0\extensionData\plugins\221.js, , [ca7e01e04248af878f948fd5cd3826da],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0\extensionData\plugins\223.js, , [ca7e01e04248af878f948fd5cd3826da],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0\extensionData\plugins\226.js, , [ca7e01e04248af878f948fd5cd3826da],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0\extensionData\plugins\230.js, , [ca7e01e04248af878f948fd5cd3826da],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0\extensionData\plugins\233.js, , [ca7e01e04248af878f948fd5cd3826da],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0\extensionData\plugins\246.js, , [ca7e01e04248af878f948fd5cd3826da],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0\extensionData\plugins\253.js, , [ca7e01e04248af878f948fd5cd3826da],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0\extensionData\plugins\263.js, , [ca7e01e04248af878f948fd5cd3826da],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0\extensionData\plugins\28.js, , [ca7e01e04248af878f948fd5cd3826da],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0\extensionData\plugins\281.js, , [ca7e01e04248af878f948fd5cd3826da],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0\extensionData\plugins\288.js, , [ca7e01e04248af878f948fd5cd3826da],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0\extensionData\plugins\306.js, , [ca7e01e04248af878f948fd5cd3826da],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0\extensionData\plugins\345.js, , [ca7e01e04248af878f948fd5cd3826da],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0\extensionData\plugins\354.js, , [ca7e01e04248af878f948fd5cd3826da],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0\extensionData\plugins\376.js, , [ca7e01e04248af878f948fd5cd3826da],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0\extensionData\plugins\385.js, , [ca7e01e04248af878f948fd5cd3826da],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0\extensionData\plugins\4.js, , [ca7e01e04248af878f948fd5cd3826da],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0\extensionData\plugins\47.js, , [ca7e01e04248af878f948fd5cd3826da],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0\extensionData\plugins\64.js, , [ca7e01e04248af878f948fd5cd3826da],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0\extensionData\plugins\7.js, , [ca7e01e04248af878f948fd5cd3826da],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0\extensionData\plugins\72.js, , [ca7e01e04248af878f948fd5cd3826da],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0\extensionData\plugins\78.js, , [ca7e01e04248af878f948fd5cd3826da],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0\extensionData\plugins\80.js, , [ca7e01e04248af878f948fd5cd3826da],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0\extensionData\plugins\9.js, , [ca7e01e04248af878f948fd5cd3826da],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0\extensionData\plugins\91.js, , [ca7e01e04248af878f948fd5cd3826da],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0\extensionData\plugins\97.js, , [ca7e01e04248af878f948fd5cd3826da],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0\extensionData\userCode\background.js, , [ca7e01e04248af878f948fd5cd3826da],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0\extensionData\userCode\extension.js, , [ca7e01e04248af878f948fd5cd3826da],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0\icons\icon128.png, , [ca7e01e04248af878f948fd5cd3826da],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0\icons\icon16.png, , [ca7e01e04248af878f948fd5cd3826da],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0\icons\icon48.png, , [ca7e01e04248af878f948fd5cd3826da],
PUP.Optional.CrossRider.A, C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan\1.26.280_0\icons\actions\1.png, , [ca7e01e04248af878f948fd5cd3826da],

Fyzické sektory: 0
(Nenalezeny žádné škodlivé položky)


(end)

Musel jsem to rozdělit.. to ostatní hned dodám

Syki7
Level 1.5
Level 1.5
Příspěvky: 145
Registrován: říjen 14
Pohlaví: Muž
Stav:
Offline

Re: Prosim o kontrolu logu

Příspěvekod Syki7 » 13 črc 2015 21:32

# AdwCleaner v4.208 - Log vytvořen 13/07/2015 v 21:27:23
# Aktualizováno 09/07/2015 by Xplode
# Databáze : 2015-07-11.1 [Server]
# Operační system : Windows 8.1 (x64)
# Uživatelské jméno : Michal - SYKI
# Spuštěno z : C:\Users\Michal\Desktop\AdwCleaner.exe
# Nastavení : Sken

***** [ Služby ] *****

Služba Nalezeno : iSafeKrnlKit
Služba Nalezeno : iSafeKrnlMon
Služba Nalezeno : iSafeNetFilter
Služba Nalezeno : iSafeService
Služba Nalezeno : 8338240e

***** [ Soubory / Složky ] *****

Složka Nalezeno : C:\Program Files (x86)\COupExtensiionn
Složka Nalezeno : C:\Program Files (x86)\COupEXTuenssioNe
Složka Nalezeno : C:\Program Files (x86)\CouupoExtenSion
Složka Nalezeno : C:\Program Files (x86)\Elex-tech
Složka Nalezeno : C:\ProgramData\{1f0e4329-eb67-5e43-1f0e-e4329eb60ca7}
Složka Nalezeno : C:\ProgramData\2025880978246997
Složka Nalezeno : C:\ProgramData\beooadpobokiheaolngahnakhjgmjdml
Složka Nalezeno : C:\ProgramData\beooadpobokiheaolngahnakhjgmjdml
Složka Nalezeno : C:\ProgramData\beooadpobokiheaolngahnakhjgmjdml
Složka Nalezeno : C:\ProgramData\beooadpobokiheaolngahnakhjgmjdml
Složka Nalezeno : C:\ProgramData\beooadpobokiheaolngahnakhjgmjdml
Složka Nalezeno : C:\ProgramData\iclnmlbajnhaegddaimjephnnhfpcmde
Složka Nalezeno : C:\ProgramData\iclnmlbajnhaegddaimjephnnhfpcmde
Složka Nalezeno : C:\ProgramData\iclnmlbajnhaegddaimjephnnhfpcmde
Složka Nalezeno : C:\ProgramData\iclnmlbajnhaegddaimjephnnhfpcmde
Složka Nalezeno : C:\ProgramData\iclnmlbajnhaegddaimjephnnhfpcmde
Složka Nalezeno : C:\Users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo
Složka Nalezeno : C:\Users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo
Složka Nalezeno : C:\Users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo
Složka Nalezeno : C:\Users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo
Složka Nalezeno : C:\Users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli
Složka Nalezeno : C:\Users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli
Složka Nalezeno : C:\Users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli
Složka Nalezeno : C:\Users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli
Složka Nalezeno : C:\Users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo
Složka Nalezeno : C:\Users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo
Složka Nalezeno : C:\Users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo
Složka Nalezeno : C:\Users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo
Složka Nalezeno : C:\Users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli
Složka Nalezeno : C:\Users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli
Složka Nalezeno : C:\Users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli
Složka Nalezeno : C:\Users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli
Složka Nalezeno : C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo
Složka Nalezeno : C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo
Složka Nalezeno : C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo
Složka Nalezeno : C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo
Složka Nalezeno : C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli
Složka Nalezeno : C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli
Složka Nalezeno : C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli
Složka Nalezeno : C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli
Složka Nalezeno : C:\Users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo
Složka Nalezeno : C:\Users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo
Složka Nalezeno : C:\Users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo
Složka Nalezeno : C:\Users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo
Složka Nalezeno : C:\Users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli
Složka Nalezeno : C:\Users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli
Složka Nalezeno : C:\Users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli
Složka Nalezeno : C:\Users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli
Složka Nalezeno : C:\Users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo
Složka Nalezeno : C:\Users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo
Složka Nalezeno : C:\Users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo
Složka Nalezeno : C:\Users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo
Složka Nalezeno : C:\Users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli
Složka Nalezeno : C:\Users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli
Složka Nalezeno : C:\Users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli
Složka Nalezeno : C:\Users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli
Složka Nalezeno : C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo
Složka Nalezeno : C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo
Složka Nalezeno : C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo
Složka Nalezeno : C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo
Složka Nalezeno : C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli
Složka Nalezeno : C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli
Složka Nalezeno : C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli
Složka Nalezeno : C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli
Složka Nalezeno : C:\Users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo
Složka Nalezeno : C:\Users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo
Složka Nalezeno : C:\Users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo
Složka Nalezeno : C:\Users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo
Složka Nalezeno : C:\Users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli
Složka Nalezeno : C:\Users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli
Složka Nalezeno : C:\Users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli
Složka Nalezeno : C:\Users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli
Složka Nalezeno : C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo
Složka Nalezeno : C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo
Složka Nalezeno : C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo
Složka Nalezeno : C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo
Složka Nalezeno : C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli
Složka Nalezeno : C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli
Složka Nalezeno : C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli
Složka Nalezeno : C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli
Složka Nalezeno : C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo
Složka Nalezeno : C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo
Složka Nalezeno : C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo
Složka Nalezeno : C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo
Složka Nalezeno : C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli
Složka Nalezeno : C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli
Složka Nalezeno : C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli
Složka Nalezeno : C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli
Složka Nalezeno : C:\Users\Michal\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo
Složka Nalezeno : C:\Users\Michal\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo
Složka Nalezeno : C:\Users\Michal\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo
Složka Nalezeno : C:\Users\Michal\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo
Složka Nalezeno : C:\Users\Michal\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan
Složka Nalezeno : C:\Users\Michal\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli
Složka Nalezeno : C:\Users\Michal\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli
Složka Nalezeno : C:\Users\Michal\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli
Složka Nalezeno : C:\Users\Michal\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli
Složka Nalezeno : C:\Users\Michal\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo
Složka Nalezeno : C:\Users\Michal\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo
Složka Nalezeno : C:\Users\Michal\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo
Složka Nalezeno : C:\Users\Michal\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo
Složka Nalezeno : C:\Users\Michal\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan
Složka Nalezeno : C:\Users\Michal\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli
Složka Nalezeno : C:\Users\Michal\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli
Složka Nalezeno : C:\Users\Michal\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli
Složka Nalezeno : C:\Users\Michal\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli
Složka Nalezeno : C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan
Složka Nalezeno : C:\Users\UpdatusUser\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo
Složka Nalezeno : C:\Users\UpdatusUser\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo
Složka Nalezeno : C:\Users\UpdatusUser\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo
Složka Nalezeno : C:\Users\UpdatusUser\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo
Složka Nalezeno : C:\Users\UpdatusUser\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli
Složka Nalezeno : C:\Users\UpdatusUser\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli
Složka Nalezeno : C:\Users\UpdatusUser\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli
Složka Nalezeno : C:\Users\UpdatusUser\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli
Složka Nalezeno : C:\Users\UpdatusUser\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo
Složka Nalezeno : C:\Users\UpdatusUser\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo
Složka Nalezeno : C:\Users\UpdatusUser\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo
Složka Nalezeno : C:\Users\UpdatusUser\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo
Složka Nalezeno : C:\Users\UpdatusUser\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli
Složka Nalezeno : C:\Users\UpdatusUser\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli
Složka Nalezeno : C:\Users\UpdatusUser\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli
Složka Nalezeno : C:\Users\UpdatusUser\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli
Složka Nalezeno : C:\Users\UpdatusUser\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo
Složka Nalezeno : C:\Users\UpdatusUser\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo
Složka Nalezeno : C:\Users\UpdatusUser\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo
Složka Nalezeno : C:\Users\UpdatusUser\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo
Složka Nalezeno : C:\Users\UpdatusUser\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli
Složka Nalezeno : C:\Users\UpdatusUser\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli
Složka Nalezeno : C:\Users\UpdatusUser\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli
Složka Nalezeno : C:\Users\UpdatusUser\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli
Soubor Nalezeno : C:\Program Files\Common Files\System\SysMenu.dll
Soubor Nalezeno : C:\ProgramData\Microsoft\Windows\Start Menu\YAC.lnk
Soubor Nalezeno : C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cflheckfmhopnialghigdlggahiomebp
Soubor Nalezeno : C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_olakgnkoldmagdblaalodobkmeokmgjj_0.localstorage
Soubor Nalezeno : C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Local Storage\hxxp_www.mystartsearch.com_0.localstorage
Soubor Nalezeno : C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Local Storage\hxxp_www.mystartsearch.com_0.localstorage-journal
Soubor Nalezeno : C:\Users\Michal\AppData\Roaming\QHCRPUZU
Soubor Nalezeno : C:\WINDOWS\System32\drivers\iSafeKrnlBoot.sys
Soubor Nalezeno : C:\WINDOWS\System32\drivers\iSafeNetFilter.sys

***** [ Naplánované úlohy ] *****

Úloha Nalezeno : amiupdaterExd
Úloha Nalezeno : amiupdaterExi
Úloha Nalezeno : ccf00e2b-042d-45a8-9173-63dfa4076cbe-5
Úloha Nalezeno : ccf00e2b-042d-45a8-9173-63dfa4076cbe-5_user
Úloha Nalezeno : ccf00e2b-042d-45a8-9173-63dfa4076cbe-5
Úloha Nalezeno : ccf00e2b-042d-45a8-9173-63dfa4076cbe-5_user

***** [ Zástupci ] *****


***** [ Registry ] *****

Klíč Nalezeno : HKCU\Software\InstalledBrowserExtensions
Klíč Nalezeno : HKCU\Software\YorkNewCin
Klíč Nalezeno : [x64] HKCU\Software\InstalledBrowserExtensions
Klíč Nalezeno : [x64] HKCU\Software\YorkNewCin
Klíč Nalezeno : HKLM\SOFTWARE\0dde3234-9a7d-44bb-ba6c-97bce589e36a
Klíč Nalezeno : HKLM\SOFTWARE\4129df72-3a52-406d-b494-d755c843ce40
Klíč Nalezeno : HKLM\SOFTWARE\6ea1f875-ecd3-4eb5-99c7-e99999c06876
Klíč Nalezeno : HKLM\SOFTWARE\9bfcbca5-b411-41ec-a305-149a9f21bea6
Klíč Nalezeno : HKLM\SOFTWARE\b791c2e0-c8a3-4acd-853d-21d5e2accac1
Klíč Nalezeno : HKLM\SOFTWARE\c885b5d1-f099-445e-9b80-768e1902fe00
Klíč Nalezeno : HKLM\SOFTWARE\Classes\TypeLib\{4DDEC9FF-96A3-4B1B-ADCA-0B31EC700151}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\TypeLib\{D109FD35-ED23-483B-87F3-9160F08B53B8}
Klíč Nalezeno : HKLM\SOFTWARE\d183acd3-b400-80e6-b945-7ee34c1715e8
Klíč Nalezeno : HKLM\SOFTWARE\Elex-tech
Klíč Nalezeno : HKLM\SOFTWARE\ff4c0499-a522-44dd-b82e-f9c51381035e
Klíč Nalezeno : HKLM\SOFTWARE\InstalledBrowserExtensions
Klíč Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}{8338240e}
Klíč Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\iSafe
Klíč Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Your Software Deals_is1
Klíč Nalezeno : [x64] HKLM\SOFTWARE\InstalledBrowserExtensions
Klíč Nalezeno : HKU\.DEFAULT\Software\AVG SafeGuard toolbar
Klíč Nalezeno : HKU\.DEFAULT\Software\Elex-tech

***** [ Prohlížeče ] *****

-\\ Internet Explorer v11.0.9600.17840


-\\ Mozilla Firefox v


-\\ Google Chrome v43.0.2357.124

[C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\Web data] - Nalezeno [Search Provider] : hxxp://websearch.searchfix.info/?unqvl= ... /22&l=1&q={searchTerms}
[C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\Web data] - Nalezeno [Search Provider] : hxxp://www.mystartsearch.com/web/?type= ... CA12875&q={searchTerms}

-\\ Chromium v


-\\ Comodo Dragon v


-\\ Opera v30.0.1835.88


-\\ Chrome Canary v


*************************

AdwCleaner[R0].txt - [34567 bytů] - [20/10/2014 20:11:45]
AdwCleaner[R1].txt - [12222 bytů] - [20/12/2014 12:34:56]
AdwCleaner[R2].txt - [4796 bytů] - [07/07/2015 19:36:53]
AdwCleaner[R3].txt - [20223 bytů] - [13/07/2015 21:27:23]
AdwCleaner[S0].txt - [32478 bytů] - [20/10/2014 20:14:06]
AdwCleaner[S1].txt - [3896 bytů] - [07/07/2015 19:38:49]

########## EOF - C:\AdwCleaner\AdwCleaner[R3].txt - [20399 bytů] ##########

Syki7
Level 1.5
Level 1.5
Příspěvky: 145
Registrován: říjen 14
Pohlaví: Muž
Stav:
Offline

Re: Prosim o kontrolu logu

Příspěvekod Syki7 » 13 črc 2015 21:42

Ok ... uz jsem udelal i TFC ale nedalo mi to zadnej log :)

Uživatelský avatar
jerabina
člen Security týmu
Level 6
Level 6
Příspěvky: 3647
Registrován: březen 13
Bydliště: Litoměřice
Pohlaví: Muž
Stav:
Offline

Re: Prosim o kontrolu logu

Příspěvekod jerabina » 13 črc 2015 21:47

Odinstaluj vše od McAfee.

Spusť znovu AdwCleaner (u Windows Vista či Windows7, klikni na AdwCleaner pravým a vyber „Spustit jako správce
klikni na „Prohledat-Scan“, po prohledání klikni na „ Vymazat-Clean

Program provede opravu, po automatickém restartu neukáže log (C:\AdwCleaner [S?].txt) , jeho obsah sem celý vlož.

Spusť znovu MbAM a dej Skenovat nyní
- po proběhnutí programu se ti objeví hláška tak klikni na „Vše do karantény(smazat vybrané)“ a na „Exportovat záznam“ a vyber „textový soubor“ , soubor nějak pojmenuj a někam ho ulož. Zkopíruj se celý obsah toho logu.

Stáhni si Junkware Removal Tool by Thisisu

na svojí plochu.

Deaktivuj si svůj antivirový program. Pravým tl. myši klikni na JRT.exe a vyber „spustit jako správce“. Pro pokračování budeš vyzván ke stisknutí jakékoliv klávesy. Na nějakou klikni.
Začne skenování programu. Skenování může trvat dloho , podle množství nákaz. Po ukončení skenu se objeví log (JRT.txt) , který se uloží na ploše.
Zkopíruj sem prosím celý jeho obsah.

Stáhni si RogueKiller
32bit.:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
64bit.:
http://www.sur-la-toile.com/RogueKiller ... lerX64.exe
na svojí plochu.
- Zavři všechny ostatní programy a prohlížeče.
- Pro OS Vista a win7 spusť program RogueKiller.exe jako správce , u XP poklepáním.
- počkej až skončí Prescan -vyhledávání škodlivých procesů.
-Potom klikni na „Prohledat“.
- Program skenuje procesy PC. Po proskenování klikni na „Zpráva“celý obsah logu sem zkopíruj.
Pokud je program blokován , zkus ho spustit několikrát. Pokud dále program nepůjde spustit a pracovat, přejmenuj ho na winlogon.exe.
Když nevíš jak dál, přichází na řadu prostudovat manuál!
HJT návod

Pokud neodpovídám do vašich témat v sekci HJT když jsem online, tak je to jen proto, že jsem na mobilu kde je studování logů a psaní skriptů nemožné. Neberte to tedy prosím jako ignoraci.

Syki7
Level 1.5
Level 1.5
Příspěvky: 145
Registrován: říjen 14
Pohlaví: Muž
Stav:
Offline

Re: Prosim o kontrolu logu

Příspěvekod Syki7 » 13 črc 2015 22:29

Vše od McAfee odinstalováno ...

# AdwCleaner v4.208 - Log vytvořen 13/07/2015 v 22:18:23
# Aktualizováno 09/07/2015 by Xplode
# Databáze : 2015-07-11.1 [Server]
# Operační system : Windows 8.1 (x64)
# Uživatelské jméno : Michal - SYKI
# Spuštěno z : C:\Users\Michal\Desktop\AdwCleaner.exe
# Nastavení : Čištění

***** [ Služby ] *****

[#] Služba Smazáno : iSafeKrnlKit
Služba Smazáno : iSafeKrnlMon
Služba Smazáno : iSafeNetFilter
[#] Služba Smazáno : iSafeService
[#] Služba Smazáno : 8338240e

***** [ Soubory / Složky ] *****

Složka Smazáno : C:\ProgramData\2025880978246997
Složka Smazáno : C:\ProgramData\{1f0e4329-eb67-5e43-1f0e-e4329eb60ca7}
Složka Smazáno : C:\Program Files (x86)\Elex-tech
Složka Smazáno : C:\Program Files (x86)\COupExtensiionn
Složka Smazáno : C:\Program Files (x86)\COupEXTuenssioNe
Složka Smazáno : C:\Program Files (x86)\CouupoExtenSion
Složka Smazáno : C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo
Složka Smazáno : C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo
Složka Smazáno : C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo
Složka Smazáno : C:\Users\UpdatusUser\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo
Složka Smazáno : C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli
Složka Smazáno : C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli
Složka Smazáno : C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli
Složka Smazáno : C:\Users\UpdatusUser\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli
[/!\] Ne Smazáno ( Junction ) : C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo
[/!\] Ne Smazáno ( Junction ) : C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo
[/!\] Ne Smazáno ( Junction ) : C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo
[/!\] Ne Smazáno ( Junction ) : C:\Users\UpdatusUser\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo
[/!\] Ne Smazáno ( Junction ) : C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli
[/!\] Ne Smazáno ( Junction ) : C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli
[/!\] Ne Smazáno ( Junction ) : C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli
[/!\] Ne Smazáno ( Junction ) : C:\Users\UpdatusUser\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli
[/!\] Ne Smazáno ( Junction ) : C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo
[/!\] Ne Smazáno ( Junction ) : C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo
[/!\] Ne Smazáno ( Junction ) : C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo
[/!\] Ne Smazáno ( Junction ) : C:\Users\UpdatusUser\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo
[/!\] Ne Smazáno ( Junction ) : C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli
[/!\] Ne Smazáno ( Junction ) : C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli
[/!\] Ne Smazáno ( Junction ) : C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli
[/!\] Ne Smazáno ( Junction ) : C:\Users\UpdatusUser\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli
[/!\] Ne Smazáno ( Junction ) : C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo
[/!\] Ne Smazáno ( Junction ) : C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo
[/!\] Ne Smazáno ( Junction ) : C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo
[/!\] Ne Smazáno ( Junction ) : C:\Users\UpdatusUser\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo
[/!\] Ne Smazáno ( Junction ) : C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli
[/!\] Ne Smazáno ( Junction ) : C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli
[/!\] Ne Smazáno ( Junction ) : C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli
[/!\] Ne Smazáno ( Junction ) : C:\Users\UpdatusUser\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli
Složka Smazáno : C:\ProgramData\beooadpobokiheaolngahnakhjgmjdml
Složka Smazáno : C:\ProgramData\iclnmlbajnhaegddaimjephnnhfpcmde
Složka Smazáno : C:\Users\Michal\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan
Složka Smazáno : C:\Users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo
Složka Smazáno : C:\Users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo
Složka Smazáno : C:\Users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo
Složka Smazáno : C:\Users\Michal\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo
Složka Smazáno : C:\Users\UpdatusUser\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo
Složka Smazáno : C:\Users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli
Složka Smazáno : C:\Users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli
Složka Smazáno : C:\Users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli
Složka Smazáno : C:\Users\Michal\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli
Složka Smazáno : C:\Users\UpdatusUser\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli
Složka Smazáno : C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan
Složka Smazáno : C:\Users\Michal\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kfgaibfbmkjgmimhbbaikfnpkkjkpoan
Složka Smazáno : C:\Users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo
Složka Smazáno : C:\Users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo
Složka Smazáno : C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo
Složka Smazáno : C:\Users\Michal\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo
Složka Smazáno : C:\Users\UpdatusUser\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\dlcbmcgkdpeghfjjknjblhilechlhhoo
Složka Smazáno : C:\Users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli
Složka Smazáno : C:\Users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli
Složka Smazáno : C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli
Složka Smazáno : C:\Users\Michal\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli
Složka Smazáno : C:\Users\UpdatusUser\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\nlfgnnlnfbpcammlnibfkplpnbbbdeli
Soubor Smazáno : C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_olakgnkoldmagdblaalodobkmeokmgjj_0.localstorage
Soubor Smazáno : C:\Users\Michal\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cflheckfmhopnialghigdlggahiomebp
Soubor Smazáno : C:\ProgramData\Microsoft\Windows\Start Menu\YAC.lnk
Soubor Smazáno : C:\Program Files\Common Files\System\SysMenu.dll
Soubor Smazáno : C:\WINDOWS\System32\drivers\iSafeKrnlBoot.sys
Soubor Smazáno : C:\WINDOWS\System32\drivers\iSafeNetFilter.sys
Soubor Smazáno : C:\Users\Michal\AppData\Roaming\QHCRPUZU
Soubor Smazáno : C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Local Storage\hxxp_www.mystartsearch.com_0.localstorage
Soubor Smazáno : C:\Users\Michal\AppData\Roaming\Opera Software\Opera Stable\Local Storage\hxxp_www.mystartsearch.com_0.localstorage-journal

***** [ Naplánované úlohy ] *****

Úloha Smazáno : amiupdaterExd
Úloha Smazáno : amiupdaterExi
Úloha Smazáno : ccf00e2b-042d-45a8-9173-63dfa4076cbe-5
Úloha Smazáno : ccf00e2b-042d-45a8-9173-63dfa4076cbe-5_user

***** [ Zástupci ] *****


***** [ Registry ] *****

Klíč Smazáno : HKLM\SOFTWARE\0dde3234-9a7d-44bb-ba6c-97bce589e36a
Klíč Smazáno : HKLM\SOFTWARE\4129df72-3a52-406d-b494-d755c843ce40
Klíč Smazáno : HKLM\SOFTWARE\6ea1f875-ecd3-4eb5-99c7-e99999c06876
Klíč Smazáno : HKLM\SOFTWARE\9bfcbca5-b411-41ec-a305-149a9f21bea6
Klíč Smazáno : HKLM\SOFTWARE\b791c2e0-c8a3-4acd-853d-21d5e2accac1
Klíč Smazáno : HKLM\SOFTWARE\c885b5d1-f099-445e-9b80-768e1902fe00
Klíč Smazáno : HKLM\SOFTWARE\d183acd3-b400-80e6-b945-7ee34c1715e8
Klíč Smazáno : HKLM\SOFTWARE\ff4c0499-a522-44dd-b82e-f9c51381035e
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}{8338240e}
Klíč Smazáno : HKLM\SOFTWARE\Classes\TypeLib\{4DDEC9FF-96A3-4B1B-ADCA-0B31EC700151}
Klíč Smazáno : HKLM\SOFTWARE\Classes\TypeLib\{D109FD35-ED23-483B-87F3-9160F08B53B8}
Klíč Smazáno : HKCU\Software\InstalledBrowserExtensions
Klíč Smazáno : HKCU\Software\YorkNewCin
Klíč Smazáno : HKLM\SOFTWARE\InstalledBrowserExtensions
Klíč Smazáno : HKLM\SOFTWARE\Elex-tech
Klíč Smazáno : HKU\.DEFAULT\Software\AVG SafeGuard toolbar
Klíč Smazáno : HKU\.DEFAULT\Software\Elex-tech
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\iSafe
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Your Software Deals_is1
Klíč Smazáno : [x64] HKLM\SOFTWARE\InstalledBrowserExtensions

***** [ Prohlížeče ] *****

-\\ Internet Explorer v11.0.9600.17840


-\\ Mozilla Firefox v


-\\ Google Chrome v43.0.2357.124


-\\ Chromium v


-\\ Comodo Dragon v


-\\ Opera v30.0.1835.88


-\\ Chrome Canary v


*************************

AdwCleaner[R0].txt - [34567 bytů] - [20/10/2014 20:11:45]
AdwCleaner[R1].txt - [12222 bytů] - [20/12/2014 12:34:56]
AdwCleaner[R2].txt - [4796 bytů] - [07/07/2015 19:36:53]
AdwCleaner[R3].txt - [20490 bytů] - [13/07/2015 21:28:46]
AdwCleaner[R4].txt - [20092 bytů] - [13/07/2015 22:17:52]
AdwCleaner[S0].txt - [32478 bytů] - [20/10/2014 20:14:06]
AdwCleaner[S1].txt - [3896 bytů] - [07/07/2015 19:38:49]
AdwCleaner[S2].txt - [11668 bytů] - [13/07/2015 22:18:23]

########## EOF - C:\AdwCleaner\AdwCleaner[S2].txt - [11727 bytů] ##########

Uživatelský avatar
jaro3
člen Security týmu
Guru Level 15
Guru Level 15
Příspěvky: 43298
Registrován: červen 07
Bydliště: Jižní Čechy
Pohlaví: Muž
Stav:
Offline

Re: Prosim o kontrolu logu

Příspěvekod jaro3 » 14 črc 2015 09:27

Avira i Eset , jeden odinstaluj.

+
RK
Při práci s programy HJT, ComboFix,MbAM, SDFix aj. zavřete všechny ostatní aplikace a prohlížeče!
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra

Syki7
Level 1.5
Level 1.5
Příspěvky: 145
Registrován: říjen 14
Pohlaví: Muž
Stav:
Offline

Re: Prosim o kontrolu logu

Příspěvekod Syki7 » 14 črc 2015 10:12

Eset nejde odinstalovat .. píše to "Zadaný účet již existuje" ... když kliknu na OK tak se odinstalace vrátí a nic se neodinstaluje ..

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 7.4.7 (07.13.2015:1)
OS: Windows 8.1 x64
Ran by Michal on Łt 14. 07. 2015 at 9:12:26,35
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Tasks



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Eventlog\Application\Update Dolphin Deals
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Eventlog\Application\Util Dolphin Deals



~~~ Files

Successfully deleted: [File] C:\Users\Michal\appdata\local\google\chrome\user data\default\local storage\chrome-extension_bgjpfhpjcgdppjbgnpnjllokbmcdllig_0.localstorage
Successfully deleted: [File] C:\Users\Michal\appdata\local\google\chrome\user data\default\local storage\chrome-extension_blmojkbhnkkphngknkmgccmlenfaelkd_0.localstorage
Successfully deleted: [File] C:\Users\Michal\appdata\local\google\chrome\user data\default\local storage\chrome-extension_ogminpmldncgcmokldnmmapddoccmhfl_0.localstorage
Successfully deleted: [File] C:\Users\Michal\appdata\local\google\chrome\user data\default\local storage\chrome-extension_olfeabkoenfaoljndfecamgilllcpiak_0.localstorage



~~~ Folders

Successfully deleted: [Folder] C:\Users\Michal\appdata\local\crashrpt
Successfully deleted: [Folder] C:\Users\Michal\AppData\Roaming\IObit\Driver Booster



~~~ Chrome


[C:\Users\Michal\appdata\local\Google\Chrome\User Data\Default\Preferences] - default search provider reset

[C:\Users\Michal\appdata\local\Google\Chrome\User Data\Default\Preferences] - Extensions Deleted:

[C:\Users\Michal\appdata\local\Google\Chrome\User Data\Default\Secure Preferences] - default search provider reset

[C:\Users\Michal\appdata\local\Google\Chrome\User Data\Default\Secure Preferences] - Extensions Deleted:
[
aaaaojmikegpiepcfdkkjaplodkpfmlo,
boipimhfjpakfgckhbljjengakjhkcbp,
bopakagnckmlgajfccecajhnimjiiedh,
gkcefkcdkepgkpbgncjchhbjgoanleod,
hbcennhacfaagdopikcegfcobcadeocj,
icdlfehblmklkikfigmjhbmmpmkmpooj,
mhkaekfpcppmmioggniknbnbdbcigpkk,
pfndaklgolladniicklehhancnlgocpp
]





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Łt 14. 07. 2015 at 9:14:27,56
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~


RK hned dodám

Syki7
Level 1.5
Level 1.5
Příspěvky: 145
Registrován: říjen 14
Pohlaví: Muž
Stav:
Offline

Re: Prosim o kontrolu logu

Příspěvekod Syki7 » 14 črc 2015 10:33

RogueKiller V10.9.1.0 (x64) [Jul 9 2015] by Adlice Software
mail : http://www.adlice.com/contact/
Feedback : http://forum.adlice.com
Webová stránka : http://www.adlice.com/softwares/roguekiller/
Blog : http://www.adlice.com

Opera?ní systém : Windows 8.1 (6.3.9200 ) 64 bits version
Spu?t?no : Normální re?im
U?ivatel : Michal [Práva správce]
Started from : C:\Users\Michal\Desktop\RogueKillerX64 (3).exe
Mód : Prohledat -- Datum : 07/14/2015 10:32:17

¤¤¤ Procesy : 0 ¤¤¤

¤¤¤ Registry : 9 ¤¤¤
[PUP] (X64) HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser | {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} : -> Nalezeno
[PUP] (X86) HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser | {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} : -> Nalezeno
[PUP] (X64) HKEY_USERS\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser | {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} : -> Nalezeno
[PUP] (X86) HKEY_USERS\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser | {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} : -> Nalezeno
[PUP] (X64) HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser | {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} : -> Nalezeno
[PUP] (X86) HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser | {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} : -> Nalezeno
[Hidden.From.SCM] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\dtojxa (System32\drivers\afwdwlux.sys) -> Nalezeno
[Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\FairplayKD (\??\C:\ProgramData\MTA San Andreas All\Common\temp\FairplayKD.sys) -> Nalezeno
[Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\FairplayKD (\??\C:\ProgramData\MTA San Andreas All\Common\temp\FairplayKD.sys) -> Nalezeno

¤¤¤ Úlohy : 1 ¤¤¤
[Suspicious.Path] \CatalinaGroupUpdateTaskUserS-1-5-21-253112895-946898586-2958512260-1002UA -- C:\Users\Michal\AppData\Local\CatalinaGroup\Update\CatalinaUpdate.exe (/ua /installsource scheduler) -> Nalezeno

¤¤¤ Soubory : 0 ¤¤¤

¤¤¤ Soubor HOSTS : 0 ¤¤¤

¤¤¤ Antirootkit : 0 (Driver: Nahrán) ¤¤¤

¤¤¤ Webové prohlí?e?e : 0 ¤¤¤

¤¤¤ Kontrola MBR : ¤¤¤
+++++ PhysicalDrive0: ST1000LM024 HN-M101MBB +++++
--- User ---
[MBR] f66c7a1b36e54a6b5a76c87716c68bb4
[BSP] b142cdf3ad05668969364a7aa0458f89 : Empty|VT.Unknown MBR Code
Partition table:
0 - [SYSTEM][MAN-MOUNT] Basic data partition | Offset (sectors): 2048 | Size: 1000 MB
1 - [SYSTEM][MAN-MOUNT] EFI system partition | Offset (sectors): 2050048 | Size: 260 MB
2 - [SYSTEM][MAN-MOUNT] Basic data partition | Offset (sectors): 2582528 | Size: 1000 MB
3 - [MAN-MOUNT] Microsoft reserved partition | Offset (sectors): 4630528 | Size: 128 MB
4 - Basic data partition | Offset (sectors): 4892672 | Size: 904950 MB
5 - [SYSTEM][MAN-MOUNT] | Offset (sectors): 1858230272 | Size: 450 MB
6 - Basic data partition | Offset (sectors): 1859151872 | Size: 25600 MB
7 - [SYSTEM][MAN-MOUNT] Basic data partition | Offset (sectors): 1911580672 | Size: 20480 MB
User = LL1 ... OK
User = LL2 ... OK

Uživatelský avatar
jaro3
člen Security týmu
Guru Level 15
Guru Level 15
Příspěvky: 43298
Registrován: červen 07
Bydliště: Jižní Čechy
Pohlaví: Muž
Stav:
Offline

Re: Prosim o kontrolu logu

Příspěvekod jaro3 » 14 črc 2015 11:37

Zkus tohle:
http://kb.eset.com/esetkb/index?page=co ... raft=false

Zavři všechny programy a prohlížeče. Deaktivuj antivir a firewall.
Prosím, odpoj všechny USB (kromě myši s klávesnice) nebo externí disky z počítače před spuštěním tohoto programu.
Spusť znovu RogueKiller ( Pro Windows Vista nebo Windows 7, klepni pravým a vyber "Spustit jako správce", ve Windows XP poklepej ke spuštění).
- Počkej, až Prescan dokončí práci...
- Pak klikni na "Prohledat " ,po jeho skončení:

- V záložkách (Registry , Tasks , Web Browser apod.) vše zatrhni (dej zatržítka)
(musíš dát myší zatržítko do toho čtverečku vlevo od registru ap.)


- Klikni na "Smazat"
- Počkej, dokud Status box nezobrazí " Mazání dokončeno "
- Klikni na "Zpráva " a zkopíruj a vlož obsah té zprávy prosím sem. Log je možno nalézt v RKreport [číslo]. txt na ploše.
- Zavři RogueKiller

Vypni antivir i firewall.
Stáhni
Zoek.exe

a uloz si ho na plochu.
Zavři všechny ostatní programy , okna i prohlížeče.
Spusť Zoek.exe ( u win vista , win7, 8 klikni na něj pravým a vyber : „Spustit jako správce“
- pozor , náběh programu může trvat déle.

Do okna programu vlož skript níže:

Kód: Vybrat vše

autoclean;
emptyclsid;
iedefaults;
FFdefaults;
CHRdefaults;
emptyalltemp;
resethosts;


klikni na Run Script
Program provede sken , opravu, sken i oprava může trvat i více minut ,je třeba posečkat do konce. Do okna neklikej!
Program nabídne restart , potvrď .

Po restartu se může nějaký čas ukázat pouze černá plocha , to je normální. Je třeba počkat až se vytvoří log. Ten si můžeš uložit třeba do dokumentů , jinak se sám ukládá do:
C:\zoek-results.log
Zkopíruj sem celý obsah toho logu.
Při práci s programy HJT, ComboFix,MbAM, SDFix aj. zavřete všechny ostatní aplikace a prohlížeče!
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra


Zpět na “HiJackThis”

Kdo je online

Uživatelé prohlížející si toto fórum: Žádní registrovaní uživatelé a 78 hostů