pomoc.. podezření na hacknutí počítače Vyřešeno

Místo pro vaše HiJackThis logy a logy z dalších programů…

Moderátoři: Mods_senior, Security team

Zamčeno
lehyn
nováček
Příspěvky: 33
Registrován: červenec 15
Pohlaví: Nespecifikováno
Stav:
Offline

pomoc.. podezření na hacknutí počítače

Příspěvekod lehyn » 25 črc 2015 22:31

Zdravím.
Po stažení filmu na uložto mi vyskočilo malé okno s online chatem.. osoba jménem lovely mi psala něco jako: ahoj, prosím napiš mi, jsem z us, je mi 40 let, ok, ahoj" všechno v angličtině. Hýbal se mi kurzor myši, zavřelo se okno pro restart, zavřel se mi antivirus s puštěnou kontrolou. Jako by někdo viděl a ovládal můj monitor. Pomohlo až vypnutí natvrdo. Ted po opětovném zapnutí vše vypadá normálně, antivirus nic nenašel. Bojím se, abych neměla v pc nainstalováno něco na sledování počítače. Stáhla sem Advanced IP Scanner, projela to, ale nerozumím výsledku - PrtSc v příloze.
Prosím o radu!

Z mailu a fb jsem se odhlásila přes mobil a změnila hesla.
Přílohy
IPscanner.jpg
Nahoru
Reklama
Top
Uživatelský avatar
jaro3
člen Security týmu
Guru Level 15
Guru Level 15
Příspěvky: 43298
Registrován: červen 07
Bydliště: Jižní Čechy
Pohlaví: Muž
Stav:
Offline

Re: pomoc.. podezření na hacknutí počítače

Příspěvekod jaro3 » 26 črc 2015 09:26

Obrázek je v pořádku.

Vlož log z HJT:
viewtopic.php?f=70&t=5119

Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected. Poté klikni na Main (hlavní stránku ) a klikni na Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranění historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit dočasné soubory Windows, vysypat koš atd.

- Pokud používáš jen Google Chrome , tak ATF nemusíš použít.


Stáhni si TFC
Otevři soubor a zavři všechny ostatní okna, Klikni na Start k zahájení procesu. Program by neměl trvat dlouho.
Poté by se měl PC restartovat, pokud ne , proveď sám.

Stáhni AdwCleaner (by Xplode)
http://www.bleepingcomputer.com/download/adwcleaner/

Ulož si ho na svojí plochu
Ukonči všechny programy , okna a prohlížeče
Spusť program poklepáním a klikni na „Prohledat-Scan“
Po skenu se objeví log ( jinak je uložen systémovem disku jako AdwCleaner[R?].txt), jeho obsah sem celý vlož.

Stáhni si Malwarebytes' Anti-Malware
- Při instalaci odeber zatržítko u „Povolit bezplatnou zkušební verzi Malwarebytes' Anti-Malware Premium“
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Aktualizace Malwarebytes' Anti-Malware a Spustit aplikaci Malwarebytes' Anti-Malware, pokud jo tak klikni na tlačítko konec
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a klikni na Skenovat nyní a
- po proběhnutí programu se ti objeví hláška vpravo dole tak klikni na b] Kopírovat do schránky [/b]a a vlož sem celý log.

- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).

Pokud budou problémy , spusť v nouz. režimu.
Při práci s programy HJT, ComboFix,MbAM, SDFix aj. zavřete všechny ostatní aplikace a prohlížeče!
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
Nahoru
lehyn
nováček
Příspěvky: 33
Registrován: červenec 15
Pohlaví: Nespecifikováno
Stav:
Offline

Re: pomoc.. podezření na hacknutí počítače

Příspěvekod lehyn » 26 črc 2015 12:03

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:02:43, on 26.7.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17910)


Boot mode: Normal

Running processes:
C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files (x86)\Clarus\Samsung Drive Manager\ABRTMon.exe
C:\Program Files (x86)\Automatické vypnutí počítače\avp.exe
C:\Users\F1-CARL\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
C:\Program Files (x86)\Launch Manager\LManager.EXE
C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
C:\Program Files (x86)\Clarus\Samsung Drive Manager\Drive Manager.exe
C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe
C:\Program Files (x86)\Opera\opera.exe
C:\Users\F1-CARL\Desktop\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/rdr.aspx?b=ACA ... 5i48m2v774
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.certified-toolbar.com?si= ... bs=true&q=
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.certified-toolbar.com?si= ... bs=true&q=
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.certified-toolbar.com?si= ... bs=true&q=
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://mysearch.avg.com?cid={6A84D6A8-BF0C-4388-849A-B6B7E853A72C}&mid=e6b09b20341f47cda814d16fd8623831-6295f148f75b9bbfc1cc1c933a48e0211b726cd0&lang=en&ds=sc011&coid=avgtbdissc&cmpid=&pr=sa&d=2015-05-24 13:05:27&v=18.7.0.147&pid=safeguard&sg=&sap=hp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.certified-toolbar.com?si= ... bs=true&q=
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.certified-toolbar.com?si= ... bs=true&q=
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.certified-toolbar.com?si= ... bs=true&q=
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://search.certified-toolbar.com?si= ... bs=true&q=
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://search.certified-toolbar.com?si= ... bs=true&q=
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Ask Toolbar BHO - {5347542D-5637-006A-76A7-7A786E7484D7} - "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-V7\Passport.dll" (file missing)
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
O2 - BHO: Pomocník pro přihlášení ke službě Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: SWEETIE - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
O3 - Toolbar: SweetPacks Toolbar for Internet Explorer - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
O3 - Toolbar: Ask Toolbar - {5347542D-5637-006A-76A7-7A786E7484D7} - "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-V7\Passport.dll" (file missing)
O3 - Toolbar: AVG SafeGuard toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG SafeGuard toolbar\18.7.0.147\AVG SafeGuard toolbar_toolbar.dll
O4 - HKLM\..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe
O4 - HKLM\..\Run: [BCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
O4 - HKLM\..\Run: [YTDownloader] "C:\Program Files (x86)\YTDownloader\YTDownloader.exe" /boot
O4 - HKLM\..\Run: [mobilegeni daemon] C:\Program Files (x86)\Mobogenie\DaemonProcess.exe
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [ACSW17EN] "C:\Program Files (x86)\ACD Systems\ACDSee\17.0\acdIDInTouch2.exe"
O4 - HKLM\..\Run: [ApnTBMon] "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe"
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [AdobeCS5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [Clarus Drive Manager] C:\Program Files (x86)\Clarus\Samsung Drive Manager\Drive Manager.exe -Hide
O4 - HKLM\..\Run: [vProt] "C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe"
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKCU\..\Run: [SpeedItupFree] "C:\Program Files (x86)\SpeedItup Free\speeditupfree.exe"
O4 - HKCU\..\Run: [NextLive] C:\Windows\SysWOW64\rundll32.exe "C:\Users\F1-CARL\AppData\Roaming\newnext.me\nengine.dll",EntryPoint -m l
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [1856d4342daa8b40c9c882c73b68ebd6] "C:\Users\F1-CARL\AppData\Local\Temp\server.exe" ..
O4 - HKCU\..\Run: [cz.seznam.software.autoupdate] "C:\Users\F1-CARL\AppData\Roaming\Seznam.cz\szninstall.exe" -c
O4 - HKCU\..\Run: [cz.seznam.software.szndesktop] "C:\Users\F1-CARL\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'Default user')
O4 - Startup: Automatické vypnutí počítače.lnk = ?
O4 - Global Startup: CineForm Status.lnk = C:\Program Files (x86)\CineForm\Tools\GoProCineFormStatusViewer.exe
O4 - Global Startup: Samsung Drive Manager Real-Time.lnk = ?
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105
O8 - Extra context menu item: Odeslat obrázek do zařízení &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Odeslat stránku do zařízení &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Přidat na blog - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Přidat na blog Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: Odeslat do zařízení Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: Odeslat do zařízení &Bluetooth... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - (no file)
O18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\18.7.0\ViProtocol.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Ask Update Service (APNMCP) - APN LLC. - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
O23 - Service: Acer ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Flexera Software, Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: GRegService (Greg_Service) - Acer Incorporated - C:\Program Files (x86)\Acer\Registration\GregHSRW.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NTI Backup Now 5 Backup Service (NTIBackupSvc) - NewTech InfoSystems, Inc. - C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe
O23 - Service: NTI Backup Now 5 Scheduler Service (NTISchedulerSvc) - NewTech Infosystems, Inc. - C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: Raw Socket Service (RS_Service) - Acer Incorporated - C:\Program Files (x86)\Acer\Acer VCM\RS_Service.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: Samsung Drive Manager Service (SZDrvSvc) - Clarus, Inc. - C:\Program Files (x86)\Clarus\Samsung Drive Manager\SZDrvSvc.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Updater Service - Acer - C:\Program Files\Acer\Acer Updater\UpdaterService.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: vToolbarUpdater18.7.0 - Unknown owner - C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.7.0\ToolbarUpdater.exe
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: WinProxy - M&M hist - C:\WinProxy\WinProxy.exe
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 14913 bytes
Nahoru
lehyn
nováček
Příspěvky: 33
Registrován: červenec 15
Pohlaví: Nespecifikováno
Stav:
Offline

Re: pomoc.. podezření na hacknutí počítače

Příspěvekod lehyn » 26 črc 2015 12:18

# AdwCleaner v4.208 - Log vytvořen 26/07/2015 v 12:14:40
# Aktualizováno 09/07/2015 by Xplode
# Databáze : 2015-07-26.1 [Server]
# Operační system : Windows 7 Home Premium Service Pack 1 (x64)
# Uživatelské jméno : F1-CARL - F1-CARL-PC
# Spuštěno z : C:\Users\F1-CARL\Desktop\AdwCleaner.exe
# Nastavení : Sken

***** [ Služby ] *****

Služba Nalezeno : APNMCP
Služba Nalezeno : vToolbarUpdater18.7.0

***** [ Soubory / Složky ] *****

Složka Nalezeno : C:\Program Files (x86)\AskPartnerNetwork
Složka Nalezeno : C:\Program Files (x86)\ASP
Složka Nalezeno : C:\Program Files (x86)\AVG SafeGuard toolbar
Složka Nalezeno : C:\Program Files (x86)\Common Files\AVG Secure Search
Složka Nalezeno : C:\Program Files (x86)\Conduit
Složka Nalezeno : C:\Program Files (x86)\Coupons
Složka Nalezeno : C:\Program Files (x86)\Coupons
Složka Nalezeno : C:\Program Files (x86)\goforfiles
Složka Nalezeno : C:\Program Files (x86)\GreenTree Applications
Složka Nalezeno : C:\Program Files (x86)\Mobogenie
Složka Nalezeno : C:\Program Files (x86)\Protected Search
Složka Nalezeno : C:\Program Files (x86)\RCP
Složka Nalezeno : C:\Program Files (x86)\Red Sky
Složka Nalezeno : C:\Program Files (x86)\ShopperPro
Složka Nalezeno : C:\Program Files (x86)\SpeedItup Free
Složka Nalezeno : C:\Program Files (x86)\SpeedItup Free
Složka Nalezeno : C:\Program Files (x86)\SweetIM
Složka Nalezeno : C:\Program Files (x86)\Yontoo
Složka Nalezeno : C:\Program Files (x86)\Zrychleni Pocitace
Složka Nalezeno : C:\ProgramData\apn
Složka Nalezeno : C:\ProgramData\AskPartnerNetwork
Složka Nalezeno : C:\ProgramData\AVG SafeGuard toolbar
Složka Nalezeno : C:\ProgramData\AVG Secure Search
Složka Nalezeno : C:\ProgramData\Babylon
Složka Nalezeno : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced System~Protector
Složka Nalezeno : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Coupons
Složka Nalezeno : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Coupons
Složka Nalezeno : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RegClean Pro
Složka Nalezeno : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ytd video downloader
Složka Nalezeno : C:\ProgramData\Partner
Složka Nalezeno : C:\ProgramData\Systweak
Složka Nalezeno : C:\ProgramData\Tarma Installer
Složka Nalezeno : C:\ProgramData\ytd video downloader
Složka Nalezeno : C:\Users\F1-CARL\AppData\Local\AskPartnerNetwork
Složka Nalezeno : C:\Users\F1-CARL\AppData\Local\AVG SafeGuard toolbar
Složka Nalezeno : C:\Users\F1-CARL\AppData\Local\Conduit
Složka Nalezeno : C:\Users\F1-CARL\AppData\Local\DownTango
Složka Nalezeno : C:\Users\F1-CARL\AppData\Local\genienext
Složka Nalezeno : C:\Users\F1-CARL\AppData\Local\Mobogenie
Složka Nalezeno : C:\Users\F1-CARL\AppData\Local\Temp\apn
Složka Nalezeno : C:\Users\F1-CARL\AppData\LocalLow\AVG SafeGuard toolbar
Složka Nalezeno : C:\Users\F1-CARL\AppData\LocalLow\Conduit
Složka Nalezeno : C:\Users\F1-CARL\AppData\LocalLow\PriceGong
Složka Nalezeno : C:\Users\F1-CARL\AppData\LocalLow\SimplyTech
Složka Nalezeno : C:\Users\F1-CARL\AppData\LocalLow\SweetIM
Složka Nalezeno : C:\Users\F1-CARL\AppData\Roaming\Babylon
Složka Nalezeno : C:\Users\F1-CARL\AppData\Roaming\ExpressFiles
Složka Nalezeno : C:\Users\F1-CARL\AppData\Roaming\goforfiles
Složka Nalezeno : C:\Users\F1-CARL\AppData\Roaming\newnext.me
Složka Nalezeno : C:\Users\F1-CARL\AppData\Roaming\OpenCandy
Složka Nalezeno : C:\Users\F1-CARL\AppData\Roaming\Systweak
Složka Nalezeno : C:\Users\F1-CARL\Documents\Mobogenie
Soubor Nalezeno : C:\Program Files\Common Files\System\SysMenu.dll
Soubor Nalezeno : C:\Program Files\Common Files\System\SysMenu64.dll
Soubor Nalezeno : C:\Users\F1-CARL\daemonprocess.txt
Soubor Nalezeno : C:\Windows\SpeedItup Free Setup Log.txt
Soubor Nalezeno : C:\Windows\System32\roboot64.exe
Soubor Nalezeno : C:\Windows\System32\sasnative64.exe

***** [ Naplánované úlohy ] *****

Úloha Nalezeno : Express FilesUpdate
Úloha Nalezeno : Go for FilesUpdate
Úloha Nalezeno : RegClean Pro
Úloha Nalezeno : RegClean Pro_DEFAULT
Úloha Nalezeno : RegClean Pro_UPDATES
Úloha Nalezeno : SMupdate1
Úloha Nalezeno : Advanced System~Protector
Úloha Nalezeno : Advanced System~Protector_startup

***** [ Zástupci ] *****


***** [ Registry ] *****

Hodnota Nalezeno : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{32099AAC-C132-4136-9E9A-4E364A424E17}]
Hodnota Nalezeno : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{EEE6C35B-6118-11DC-9C72-001320C79847}]
Hodnota Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [NextLive]
Hodnota Nalezeno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{5347542D-5637-006A-76A7-7A786E7484D7}]
Hodnota Nalezeno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{95B7759C-8C7F-4BF1-B163-73684A933233}]
Hodnota Nalezeno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{EEE6C35B-6118-11DC-9C72-001320C79847}]
Hodnota Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [ApnTbMon]
Hodnota Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [mobilegeni daemon]
Hodnota Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [vProt]
Hodnota Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [YTDownloader]
Hodnota Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs [C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgHelperApp.exe]
Hodnota Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs [C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarProxy.dll]
Hodnota Nalezeno : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{32099AAC-C132-4136-9E9A-4E364A424E17}]
Hodnota Nalezeno : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{5347542D-5637-006A-76A7-7A786E7484D7}]
Klíč Nalezeno : HKCU\Software\1856d4342daa8b40c9c882c73b68ebd6
Klíč Nalezeno : HKCU\Software\APN PIP
Klíč Nalezeno : HKCU\Software\AppDataLow\Software\Conduit
Klíč Nalezeno : HKCU\Software\AppDataLow\Software\ConduitSearchScopes
Klíč Nalezeno : HKCU\Software\AppDataLow\Software\Crossrider
Klíč Nalezeno : HKCU\Software\AppDataLow\Software\PriceGong
Klíč Nalezeno : HKCU\Software\AppDataLow\Software\simplytech
Klíč Nalezeno : HKCU\Software\AskPartnerNetwork
Klíč Nalezeno : HKCU\Software\AVG SafeGuard toolbar
Klíč Nalezeno : HKCU\Software\Avg Secure Update
Klíč Nalezeno : HKCU\Software\Classes\pokki
Klíč Nalezeno : HKCU\Software\Conduit
Klíč Nalezeno : HKCU\Software\CToolbar
Klíč Nalezeno : HKCU\Software\DownLite
Klíč Nalezeno : HKCU\Software\ExpressFiles
Klíč Nalezeno : HKCU\Software\GoforFiles
Klíč Nalezeno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
Klíč Nalezeno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{3808185D-57AC-45DE-AD14-B17B6BF57BA1}
Klíč Nalezeno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB8}
Klíč Nalezeno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{ED0DE4BA-3B8E-4C02-B42E-29EC9BFA5AC4}
Klíč Nalezeno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Klíč Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{6F6A5334-78E9-4D9B-8182-8B41EA8C39EF}
Klíč Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{5347542D-5637-006A-76A7-7A786E7484D7}
Klíč Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35B-6118-11DC-9C72-001320C79847}
Klíč Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35C-6118-11DC-9C72-001320C79847}
Klíč Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{5347542D-5637-006A-76A7-7A786E7484D7}
Klíč Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}
Klíč Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{CC99A798-FD3D-4AB4-969E-6071612524F9}
Klíč Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35B-6118-11DC-9C72-001320C79847}
Klíč Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35C-6118-11DC-9C72-001320C79847}
Klíč Nalezeno : HKCU\Software\PIP
Klíč Nalezeno : HKCU\Software\Softonic
Klíč Nalezeno : HKCU\Software\SweetIM
Klíč Nalezeno : HKCU\Software\systweak
Klíč Nalezeno : [x64] HKCU\Software\APN PIP
Klíč Nalezeno : [x64] HKCU\Software\AskPartnerNetwork
Klíč Nalezeno : [x64] HKCU\Software\AVG SafeGuard toolbar
Klíč Nalezeno : [x64] HKCU\Software\Avg Secure Update
Klíč Nalezeno : [x64] HKCU\Software\Conduit
Klíč Nalezeno : [x64] HKCU\Software\CToolbar
Klíč Nalezeno : [x64] HKCU\Software\DownLite
Klíč Nalezeno : [x64] HKCU\Software\ExpressFiles
Klíč Nalezeno : [x64] HKCU\Software\GoforFiles
Klíč Nalezeno : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Klíč Nalezeno : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
Klíč Nalezeno : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{3808185D-57AC-45DE-AD14-B17B6BF57BA1}
Klíč Nalezeno : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
Klíč Nalezeno : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB8}
Klíč Nalezeno : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AD22EBAF-0D18-4FC7-90CC-5EA0ABBE9EB8}
Klíč Nalezeno : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{ED0DE4BA-3B8E-4C02-B42E-29EC9BFA5AC4}
Klíč Nalezeno : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Klíč Nalezeno : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Klíč Nalezeno : [x64] HKCU\Software\PIP
Klíč Nalezeno : [x64] HKCU\Software\Softonic
Klíč Nalezeno : [x64] HKCU\Software\SweetIM
Klíč Nalezeno : [x64] HKCU\Software\systweak
Klíč Nalezeno : HKLM\SOFTWARE\AskPartnerNetwork
Klíč Nalezeno : HKLM\SOFTWARE\AVG SafeGuard toolbar
Klíč Nalezeno : HKLM\SOFTWARE\AVG Security Toolbar
Klíč Nalezeno : HKLM\SOFTWARE\Babylon
Klíč Nalezeno : HKLM\SOFTWARE\Classes\*\shellex\ContextMenuHandlers\SysMenuExt
Klíč Nalezeno : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\AppID\{D813D5BB-EBC7-45F9-B8A4-36A305168069}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\AppID\SysMenu.DLL
Klíč Nalezeno : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL
Klíč Nalezeno : HKLM\SOFTWARE\Classes\AVG SafeGuard toolbar.BrowserWndAPI
Klíč Nalezeno : HKLM\SOFTWARE\Classes\AVG SafeGuard toolbar.BrowserWndAPI.1
Klíč Nalezeno : HKLM\SOFTWARE\Classes\AVG SafeGuard toolbar.PugiObj
Klíč Nalezeno : HKLM\SOFTWARE\Classes\AVG SafeGuard toolbar.PugiObj.1
Klíč Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{44CBC005-6243-4502-8A02-3A096A282664}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{459DD0F7-0D55-D3DC-67BC-E6BE37E9D762}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{5347542D-5637-006A-76A7-7A786E7484D7}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{80703783-E415-4EE3-AB60-D36981C5A6F1}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{933B95E2-E7B7-4AD9-B952-7AC336682AE3}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{CC99A798-FD3D-4AB4-969E-6071612524F9}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{D8278076-BC68-4484-9233-6E7F1628B56C}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{EEE6C35B-6118-11DC-9C72-001320C79847}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{EEE6C35C-6118-11DC-9C72-001320C79847}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{EEE6C35D-6118-11DC-9C72-001320C79847}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{F297534D-7B06-459D-BC19-2DD8EF69297B}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\Installer\Features\9EE58E3C298524145B73CBBED3CAC4D3
Klíč Nalezeno : HKLM\SOFTWARE\Classes\Installer\Products\9EE58E3C298524145B73CBBED3CAC4D3
Klíč Nalezeno : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\Interface\{80703783-E415-4EE3-AB60-D36981C5A6F1}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\Interface\{EEE6C358-6118-11DC-9C72-001320C79847}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\Interface\{EEE6C359-6118-11DC-9C72-001320C79847}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\Interface\{EEE6C35A-6118-11DC-9C72-001320C79847}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\Prod.cap
Klíč Nalezeno : HKLM\SOFTWARE\Classes\protocols\handler\viprotocol
Klíč Nalezeno : HKLM\SOFTWARE\Classes\S
Klíč Nalezeno : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi
Klíč Nalezeno : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1
Klíč Nalezeno : HKLM\SOFTWARE\Classes\SWEETIE.IEToolbar
Klíč Nalezeno : HKLM\SOFTWARE\Classes\SWEETIE.IEToolbar.1
Klíč Nalezeno : HKLM\SOFTWARE\Classes\sweetim_urlsearchhook.toolbarurlsearchhook
Klíč Nalezeno : HKLM\SOFTWARE\Classes\sweetim_urlsearchhook.toolbarurlsearchhook.1
Klíč Nalezeno : HKLM\SOFTWARE\Classes\Toolbar3.sweetie
Klíč Nalezeno : HKLM\SOFTWARE\Classes\Toolbar3.sweetie.1
Klíč Nalezeno : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\TypeLib\{9945959C-AAD8-4312-8B57-2DE11927E770}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\TypeLib\{EEA63863-87BC-4DCA-A5B5-EB97E3B04806}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\TypeLib\{EEE6C35E-6118-11DC-9C72-001320C79847}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\TypeLib\{EEE6C35F-6118-11DC-9C72-001320C79847}
Klíč Nalezeno : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE
Klíč Nalezeno : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1
Klíč Nalezeno : HKLM\SOFTWARE\Conduit
Klíč Nalezeno : HKLM\SOFTWARE\CToolbar
Klíč Nalezeno : HKLM\SOFTWARE\ExpressFiles
Klíč Nalezeno : HKLM\SOFTWARE\GoforFiles
Klíč Nalezeno : HKLM\SOFTWARE\Google\Chrome\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn
Klíč Nalezeno : HKLM\SOFTWARE\Google\Chrome\Extensions\ogccgbmabaphcakpiclgcnmcnimhokcj
Klíč Nalezeno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6978F29A-3493-40B2-8CDC-9C13A02F85A4}
Klíč Nalezeno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CFD485F0-96BD-47CD-BB6D-CD7DDA95F102}
Klíč Nalezeno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D7949A66-D936-4028-9552-14F7DC50F38D}
Klíč Nalezeno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Klíč Nalezeno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EEE6C367-6118-11DC-9C72-001320C79847}
Klíč Nalezeno : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}
Klíč Nalezeno : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Klíč Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd
Klíč Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5347542D-5637-006A-76A7-7A786E7484D7}
Klíč Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}
Klíč Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{6F6A5334-78E9-4D9B-8182-8B41EA8C39EF}
Klíč Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}
Klíč Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC}
Klíč Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{1a413f37-ed88-4fec-9666-5c48dc4b7bb7}
Klíč Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{c3e85ee9-5892-4142-b537-bceb3dac4c3d}
Klíč Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{EE171732-BEB4-4576-887D-CB62727F01CA}
Klíč Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG SafeGuard toolbar
Klíč Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Coupon Printer for Windows5.0.0.0
Klíč Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\RegClean Pro_is1
Klíč Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\RegClean-Pro_is1
Klíč Nalezeno : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin
Klíč Nalezeno : HKLM\SOFTWARE\PIP
Klíč Nalezeno : HKLM\SOFTWARE\SweetIM
Klíč Nalezeno : HKLM\SOFTWARE\systweak
Klíč Nalezeno : [x64] HKLM\SOFTWARE\AskPartnerNetwork
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Classes\CLSID\{020B1D4B-5738-4C77-9E19-4F173DD9B486}
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Classes\CLSID\{5347542D-5637-006A-76A7-7A786E7484D7}
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Classes\CLSID\{A75BE48D-BF58-4A8B-B96C-F9A09DFB9844}
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Classes\Interface\{EEE6C358-6118-11DC-9C72-001320C79847}
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Classes\Interface\{EEE6C359-6118-11DC-9C72-001320C79847}
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Classes\Interface\{EEE6C35A-6118-11DC-9C72-001320C79847}
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6978F29A-3493-40B2-8CDC-9C13A02F85A4}
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D7949A66-D936-4028-9552-14F7DC50F38D}
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5347542D-5637-006A-76A7-7A786E7484D7}
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\7AB5857A57A0687786597A857BFFFFFF
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\A97CEC23332751B47BA4B95BAA50C9D0
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\02F47BF73B948514FAACADD8CBBDF37D
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\080D9F5E1E95FEE4794CE438E635239E
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1E264E0A5959A1C46BA9175A878B12EA
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2E6768B6932D112438F047C54D180635
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\351716A953E21214898904032EAE2E81
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\397C771A7BCAC904697C3EC629ED33ED
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\69D6A6B2ED56AF24EA6335EAD6E91CA4
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7FFA128C2B0FF414D805FC5627883401
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\86EDC790504E1834DBC20C9A04328FD2
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\97C3D0F82E712E241A2F969F45E3351C
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\98CC8BF5A4A6E6C4ABF7051DDAB8B058
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9E7F556BF224D804D96A96F0F6344789
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A189D17A469616C4688D23E192996267
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BF4F885EDEE45644EB1E0C99E0162399
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CE21F3FD57B244142880EF15A165A156
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D15DAF33C220F91468A1D7D57C31ACD7
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D3BA76A44C779424889063D5098ED2D6
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D6D0EB9FDBD90C04D92A7E729058F10D
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E4748F9A4181FCE46A23C13B517B9420
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\9EE58E3C298524145B73CBBED3CAC4D3
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Speedchecker Limited
Klíč Nalezeno : [x64] HKLM\SOFTWARE\Tarma Installer
Klíč Nalezeno : [x64] HKLM\SOFTWARE\YTDownloader
Klíč Nalezeno : HKU\.DEFAULT\Software\AskPartnerNetwork
Klíč Nalezeno : HKU\.DEFAULT\Software\AVG SafeGuard toolbar
Klíč Nalezeno : HKU\.DEFAULT\Software\Avg Secure Update

***** [ Prohlížeče ] *****

-\\ Internet Explorer v11.0.9600.17909

Nastavení Nalezeno : HKCU\Software\Microsoft\Internet Explorer\Main [Search Page] - hxxp://search.certified-toolbar.com?si= ... bs=true&q=
Nastavení Nalezeno : HKCU\Software\Microsoft\Internet Explorer\Main [Start Default_Page_URL] - hxxp://search.certified-toolbar.com?si= ... e&tid=3231
Nastavení Nalezeno : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Search_URL] - hxxp://search.certified-toolbar.com?si= ... bs=true&q=
Nastavení Nalezeno : HKCU\Software\Microsoft\Internet Explorer\Main [Search Bar] - hxxp://search.certified-toolbar.com?si= ... bs=true&q=
Nastavení Nalezeno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL] - hxxp://search.certified-toolbar.com?si= ... bs=true&q=
Nastavení Nalezeno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page] - hxxp://search.certified-toolbar.com?si= ... bs=true&q=
Nastavení Nalezeno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Default_Page_URL] - hxxp://search.certified-toolbar.com?si= ... e&tid=3231
Nastavení Nalezeno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Bar] - hxxp://search.certified-toolbar.com?si= ... bs=true&q=
Nastavení Nalezeno : HKCU\Software\Microsoft\Internet Explorer\Search [Start Page] - hxxp://search.certified-toolbar.com?si= ... e&tid=3231
Nastavení Nalezeno : HKCU\Software\Microsoft\Internet Explorer\Search [Start Default_Page_URL] - hxxp://search.certified-toolbar.com?si= ... e&tid=3231
Nastavení Nalezeno : HKCU\Software\Microsoft\Internet Explorer\Search [Default_Search_URL] - hxxp://search.certified-toolbar.com?si= ... bs=true&q=
Nastavení Nalezeno : HKCU\Software\Microsoft\Internet Explorer\Search [Search Bar] - hxxp://search.certified-toolbar.com?si= ... bs=true&q=
Nastavení Nalezeno : HKCU\Software\Microsoft\Internet Explorer\Search [Search Page] - hxxp://search.certified-toolbar.com?si= ... bs=true&q=
Nastavení Nalezeno : HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls [Tabs] - hxxp://newtab.certified-toolbar.com/nie ... 1&new=true
Nastavení Nalezeno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Search [Start Page] - hxxp://search.certified-toolbar.com?si= ... e&tid=3231
Nastavení Nalezeno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Search [Start Default_Page_URL] - hxxp://search.certified-toolbar.com?si= ... e&tid=3231
Nastavení Nalezeno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Search [Default_Search_URL] - hxxp://search.certified-toolbar.com?si= ... bs=true&q=
Nastavení Nalezeno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Search [Search Bar] - hxxp://search.certified-toolbar.com?si= ... bs=true&q=
Nastavení Nalezeno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Search [Search Page] - hxxp://search.certified-toolbar.com?si= ... bs=true&q=
Nastavení Nalezeno : HKCU\Software\Microsoft\Internet Explorer\SearchUrl [(Default)] - hxxp://search.certified-toolbar.com?si= ... id=3231&q=%s
Nastavení Nalezeno : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchUrl [(Default)] - hxxp://search.certified-toolbar.com?si= ... id=3231&q=%s

-\\ Google Chrome v


-\\ Opera v30.0.1835.125


*************************

AdwCleaner[R0].txt - [25856 bytů] - [26/07/2015 12:14:40]

########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [25915 bytů] ##########
Nahoru
lehyn
nováček
Příspěvky: 33
Registrován: červenec 15
Pohlaví: Nespecifikováno
Stav:
Offline

Re: pomoc.. podezření na hacknutí počítače

Příspěvekod lehyn » 26 črc 2015 12:52

Malwarebytes Anti-Malware
www.malwarebytes.org

Datum skenování: 26.7.2015
Čas skenování: 12:22
Protokol:
Správce: Ano

Verze: 2.1.8.1057
Databáze malwaru: v2015.07.26.03
Databáze rootkitů: v2015.07.22.01
Licence: Bezplatná verze
Ochrana proti malwaru: Vypnuto
Ochrana proti škodlivým webovým stránkám: Vypnuto
Ochrana programu: Vypnuto

OS: Windows 7 Service Pack 1
CPU: x64
Souborový systém: NTFS
Uživatel: F1-CARL

Typ skenu: Sken hrozeb
Výsledek: Dokončeno
Prohledaných objektů: 377129
Uplynulý čas: 21 min, 9 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Vypnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto

Procesy: 3
Backdoor.NJRat, C:\Users\F1-CARL\AppData\Local\Temp\server.exe, 2092, , [e07b7e688ffbea4cf81f1f8906fba25e]
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe, 2192, , [f665f4f2870364d257e430dcb0536a96]
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe, 1624, , [0b50b23494f6f83e5ddfe82417ec5da3]

Moduly: 0
(Nenalezeny žádné škodlivé položky)

Klíče registru: 102
PUP.Optional.SweetPacks.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{EEE6C35B-6118-11DC-9C72-001320C79847}, , [9cbf63831e6c78be48c08206f60c8d73],
PUP.Optional.SweetPacks.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{EEE6C35C-6118-11DC-9C72-001320C79847}, , [9cbf63831e6c78be48c08206f60c8d73],
PUP.Optional.SweetPacks.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{EEE6C35E-6118-11DC-9C72-001320C79847}, , [9cbf63831e6c78be48c08206f60c8d73],
PUP.Optional.SweetPacks.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{EEE6C358-6118-11DC-9C72-001320C79847}, , [9cbf63831e6c78be48c08206f60c8d73],
PUP.Optional.SweetPacks.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{EEE6C359-6118-11DC-9C72-001320C79847}, , [9cbf63831e6c78be48c08206f60c8d73],
PUP.Optional.SweetPacks.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{EEE6C358-6118-11DC-9C72-001320C79847}, , [9cbf63831e6c78be48c08206f60c8d73],
PUP.Optional.SweetPacks.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{EEE6C359-6118-11DC-9C72-001320C79847}, , [9cbf63831e6c78be48c08206f60c8d73],
PUP.Optional.SweetPacks.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{EEE6C358-6118-11DC-9C72-001320C79847}, , [9cbf63831e6c78be48c08206f60c8d73],
PUP.Optional.SweetPacks.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{EEE6C359-6118-11DC-9C72-001320C79847}, , [9cbf63831e6c78be48c08206f60c8d73],
PUP.Optional.SweetPacks.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{EEE6C35E-6118-11DC-9C72-001320C79847}, , [9cbf63831e6c78be48c08206f60c8d73],
PUP.Optional.SweetPacks.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{EEE6C35E-6118-11DC-9C72-001320C79847}, , [9cbf63831e6c78be48c08206f60c8d73],
PUP.Optional.SweetPacks.A, HKLM\SOFTWARE\CLASSES\Toolbar3.SWEETIE.1, , [9cbf63831e6c78be48c08206f60c8d73],
PUP.Optional.SweetPacks.A, HKLM\SOFTWARE\CLASSES\Toolbar3.SWEETIE, , [9cbf63831e6c78be48c08206f60c8d73],
PUP.Optional.SweetPacks.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Toolbar3.SWEETIE, , [9cbf63831e6c78be48c08206f60c8d73],
PUP.Optional.SweetPacks.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\Toolbar3.SWEETIE, , [9cbf63831e6c78be48c08206f60c8d73],
PUP.Optional.SweetPacks.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{EEE6C35C-6118-11DC-9C72-001320C79847}, , [9cbf63831e6c78be48c08206f60c8d73],
PUP.Optional.SweetPacks.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Toolbar3.SWEETIE.1, , [9cbf63831e6c78be48c08206f60c8d73],
PUP.Optional.SweetPacks.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\Toolbar3.SWEETIE.1, , [9cbf63831e6c78be48c08206f60c8d73],
PUP.Optional.SweetPacks.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{EEE6C35C-6118-11DC-9C72-001320C79847}, , [9cbf63831e6c78be48c08206f60c8d73],
PUP.Optional.SweetPacks.A, HKU\S-1-5-21-645724224-2103063020-886836242-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{EEE6C35C-6118-11DC-9C72-001320C79847}, , [9cbf63831e6c78be48c08206f60c8d73],
PUP.Optional.SweetPacks.A, HKU\S-1-5-21-645724224-2103063020-886836242-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{EEE6C35C-6118-11DC-9C72-001320C79847}, , [9cbf63831e6c78be48c08206f60c8d73],
PUP.Optional.SweetPacks.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{EEE6C35B-6118-11DC-9C72-001320C79847}, , [9cbf63831e6c78be48c08206f60c8d73],
PUP.Optional.SweetPacks.A, HKLM\SOFTWARE\CLASSES\SWEETIE.IEToolbar.1, , [9cbf63831e6c78be48c08206f60c8d73],
PUP.Optional.SweetPacks.A, HKLM\SOFTWARE\CLASSES\SWEETIE.IEToolbar, , [9cbf63831e6c78be48c08206f60c8d73],
PUP.Optional.SweetPacks.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\SWEETIE.IEToolbar, , [9cbf63831e6c78be48c08206f60c8d73],
PUP.Optional.SweetPacks.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\SWEETIE.IEToolbar, , [9cbf63831e6c78be48c08206f60c8d73],
PUP.Optional.SweetPacks.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\SWEETIE.IEToolbar.1, , [9cbf63831e6c78be48c08206f60c8d73],
PUP.Optional.SweetPacks.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\SWEETIE.IEToolbar.1, , [9cbf63831e6c78be48c08206f60c8d73],
PUP.Optional.SweetPacks.A, HKU\S-1-5-21-645724224-2103063020-886836242-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{EEE6C35B-6118-11DC-9C72-001320C79847}, , [9cbf63831e6c78be48c08206f60c8d73],
PUP.Optional.SweetPacks.A, HKU\S-1-5-21-645724224-2103063020-886836242-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{EEE6C35B-6118-11DC-9C72-001320C79847}, , [9cbf63831e6c78be48c08206f60c8d73],
PUP.Optional.Babylon.A, HKU\S-1-5-21-645724224-2103063020-886836242-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}, , [0e4de303ef9b67cfb0f5b1da5ca6827e],
PUP.Optional.SweetPacks.A, HKU\S-1-5-21-645724224-2103063020-886836242-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{EEE6C360-6118-11DC-9C72-001320C79847}, , [90cb0adce1a9d75f526d982ec24033cd],
PUP.Optional.SweetPacks.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{EEE6C360-6118-11DC-9C72-001320C79847}, , [90cb0adce1a9d75f526d982ec24033cd],
PUP.Optional.AppGraffiti.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{6F6A5334-78E9-4D9B-8182-8B41EA8C39EF}, , [8fcc707663270c2a1276269cd32f2ed2],
PUP.Optional.AdvancedSystemProtector.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\00212D92-C5D8-4ff4-AE50-B20F0F85C40A_Systweak_Ad~9338DF9D_is1, , [293252948802989e122e87fdfc08d32d],
PUP.Optional.RegCleanPro.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\RegClean Pro_is1, , [4a113caa9eece254093988fc30d48878],
PUP.Optional.RegCleanPro.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\RegClean-Pro_is1, , [4a113caa9eece254093988fc30d48878],
PUP.Optional.ConduitTB.Gen.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{3c471948-f874-49f5-b338-4f214a2ee0b1}, , [7be00cda2f5b0531e191dbbd5da7669a],
PUP.Optional.ConduitTB.Gen.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}, , [7be00cda2f5b0531e191dbbd5da7669a],
PUP.Optional.APNToolBar.Gen, HKLM\SOFTWARE\AskPartnerNetwork, , [f06b5e88355572c48ab0c745da2915eb],
PUP.Optional.SpeedChecker.A, HKLM\SOFTWARE\Speedchecker Limited, , [243712d4fa90f14525fdfe2346bd3fc1],
PUP.Optional.SweetIM.A, HKLM\SOFTWARE\CLASSES\SweetIM_URLSearchHook.ToolbarURLSearchHook, , [abb090561674ef47e05828452bd9d42c],
PUP.Optional.SweetIM.A, HKLM\SOFTWARE\CLASSES\SweetIM_URLSearchHook.ToolbarURLSearchHook.1, , [5efd598de6a4ab8b50e85617ff05728e],
PUP.Optional.APNToolBar.Gen, HKLM\SOFTWARE\WOW6432NODE\AskPartnerNetwork, , [74e77f67880244f20634e42819eaf709],
PUP.Optional.SweetIM.A, HKLM\SOFTWARE\WOW6432NODE\SweetIM, , [0952d610404a46f0173cc45ccb380bf5],
PUP.Optional.SweetIM.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\SweetIM_URLSearchHook.ToolbarURLSearchHook, , [1645578f0288e74fe652d29b9371f907],
PUP.Optional.SweetIM.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\SweetIM_URLSearchHook.ToolbarURLSearchHook.1, , [e5768c5aff8ba393d860aebf887c1de3],
PUP.Optional.SweetIM.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\jcdgjdiieiljkfkdcloehkohchhpekkn, , [aead786e3c4e5fd73c9a70cb8a798080],
PUP.Optional.Widdit.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}, , [332805e10a808fa7ceee5541eb19d62a],
PUP.Optional.AskAPN.Gen, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{5347542D-5637-006A-76A7-A758B70C1D00}, , [213a65811b6f88ae62a103081ee551af],
PUP.Optional.AdvancedSystemProtector.A, HKLM\SOFTWARE\WOW6432NODE\SYSTWEAK\Advanced System~Protector, , [cf8c8a5ca2e879bdbdb44ee27291946c],
PUP.Optional.RegCleanPro.A, HKLM\SOFTWARE\WOW6432NODE\SYSTWEAK\RegClean Pro, , [e774fbeb7614999d6742ba7e2bd825db],
PUP.Optional.SystemSpeedup, HKLM\SOFTWARE\WOW6432NODE\SYSTWEAK\ssd, , [481309dda2e8360048adae8ab94aff01],
PUP.Optional.APNToolBar.Gen, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\APNMCP, , [0b50b23494f6f83e5ddfe82417ec5da3],
PUP.Optional.APNToolBar.Gen, HKU\S-1-5-18\SOFTWARE\AskPartnerNetwork, , [302bd90d9febbc7ab980f6165fa4a55b],
PUP.Optional.APNToolBar.Gen, HKU\S-1-5-21-645724224-2103063020-886836242-1000\SOFTWARE\AskPartnerNetwork, , [0b50db0bed9d73c35cdd34d8be45a35d],
PUP.Optional.SweetIM.A, HKU\S-1-5-21-645724224-2103063020-886836242-1000\SOFTWARE\SweetIM, , [e972db0baddd5ed876dcf52b778c60a0],
PUP.Optional.Conduit.A, HKU\S-1-5-21-645724224-2103063020-886836242-1000\SOFTWARE\APPDATALOW\SOFTWARE\ConduitSearchScopes, , [81dad90dacdeed497f12cd578d766e92],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-645724224-2103063020-886836242-1000\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, , [f06b34b2c4c6270f344d2556e81c53ad],
PUP.Optional.PriceGong.A, HKU\S-1-5-21-645724224-2103063020-886836242-1000\SOFTWARE\APPDATALOW\SOFTWARE\PriceGong, , [025921c59ceea98df02e4fd67b88df21],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-645724224-2103063020-886836242-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{20DE8E2B-4C7B-4412-AE9F-DAC645242472}, , [005b885edeaca19523495f37fb09956b],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-645724224-2103063020-886836242-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C837F91C-4927-4F9B-BF57-BC6338D136B0}, , [4219e1050b7f33033f2cff97ee16b54b],
PUP.Optional.Ask.A, HKU\S-1-5-21-645724224-2103063020-886836242-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{3808185D-57AC-45DE-AD14-B17B6BF57BA1}, , [5407f3f32f5b0b2b2da79cfd31d3d828],
PUP.Optional.Widdit.A, HKU\S-1-5-21-645724224-2103063020-886836242-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{AD22EBAF-0D18-4FC7-90CC-5EA0ABBE9EB8}, , [4a1125c1becc42f4a3186f27768e2cd4],
PUP.Optional.Conduit.A, HKU\S-1-5-21-645724224-2103063020-886836242-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{ED0DE4BA-3B8E-4C02-B42E-29EC9BFA5AC4}, , [77e47d69157524122a8f4cc43bc806fa],
PUP.Optional.AdvancedSystemProtector.A, HKU\S-1-5-21-645724224-2103063020-886836242-1000\SOFTWARE\SYSTWEAK\Advanced System~Protector, , [104bd21475151620b0c20729af540000],
PUP.Optional.RegCleanerPro.A, HKU\S-1-5-21-645724224-2103063020-886836242-1000\SOFTWARE\SYSTWEAK\RegClean Pro, , [bc9ffcea34565adc80e13736689c8e72],
PUP.Optional.SystemSpeedup, HKU\S-1-5-21-645724224-2103063020-886836242-1000\SOFTWARE\SYSTWEAK\ssd, , [4f0c73737a10b581f004a593f70c40c0],
PUP.Optional.SweetIM.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{EEE6C35D-6118-11DC-9C72-001320C79847}, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{EEE6C35F-6118-11DC-9C72-001320C79847}, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{EEE6C35A-6118-11DC-9C72-001320C79847}, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{EEE6C35A-6118-11DC-9C72-001320C79847}, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{EEE6C35A-6118-11DC-9C72-001320C79847}, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{EEE6C35F-6118-11DC-9C72-001320C79847}, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{EEE6C35F-6118-11DC-9C72-001320C79847}, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\SweetIM_URLSearchHook.ToolbarURLSearchHook, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\SweetIM_URLSearchHook.ToolbarURLSearchHook.1, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{EEE6C35D-6118-11DC-9C72-001320C79847}, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.APNToolBar.Gen, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{D8278076-BC68-4484-9233-6E7F1628B56C}, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{D8278076-BC68-4484-9233-6E7F1628B56C}, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, HKLM\SOFTWARE\CLASSES\TYPELIB\{9945959C-AAD8-4312-8B57-2DE11927E770}, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{BD125908-5F10-409F-9C01-F2207CA18887}, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{BD125908-5F10-409F-9C01-F2207CA18887}, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{9945959C-AAD8-4312-8B57-2DE11927E770}, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{9945959C-AAD8-4312-8B57-2DE11927E770}, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, HKLM\SOFTWARE\CLASSES\TYPELIB\{EEA63863-87BC-4DCA-A5B5-EB97E3B04806}, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{80703783-E415-4EE3-AB60-D36981C5A6F1}, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{80703783-E415-4EE3-AB60-D36981C5A6F1}, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{EEA63863-87BC-4DCA-A5B5-EB97E3B04806}, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{EEA63863-87BC-4DCA-A5B5-EB97E3B04806}, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{80703783-E415-4EE3-AB60-D36981C5A6F1}, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{80703783-E415-4EE3-AB60-D36981C5A6F1}, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{5347542D-5637-006A-76A7-7A786E7484D7}, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{5347542D-5637-006A-76A7-7A786E7484D7}, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{5347542D-5637-006A-76A7-7A786E7484D7}, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, HKLM\SOFTWARE\CLASSES\CLSID\{5347542D-5637-006A-76A7-7A786E7484D7}, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, HKLM\SOFTWARE\CLASSES\CLSID\{5347542D-5637-006A-76A7-7A786E7484D7}\INPROCSERVER32, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{5347542D-5637-006A-76A7-7A786E7484D7}, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, HKU\S-1-5-21-645724224-2103063020-886836242-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{5347542D-5637-006A-76A7-7A786E7484D7}, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, HKU\S-1-5-21-645724224-2103063020-886836242-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{5347542D-5637-006A-76A7-7A786E7484D7}, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.ShopperPro, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}, , [2437d016b0da9d9998781f239b6ade22],
PUP.Optional.ShopperPro, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}, , [2437d016b0da9d9998781f239b6ade22],

Hodnoty registru: 28
Backdoor.NJRat, HKU\S-1-5-21-645724224-2103063020-886836242-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|1856d4342daa8b40c9c882c73b68ebd6, "C:\Users\F1-CARL\AppData\Local\Temp\server.exe" .., , [e07b7e688ffbea4cf81f1f8906fba25e]
PUP.Optional.NextLive.A, HKU\S-1-5-21-645724224-2103063020-886836242-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|NextLive, C:\Windows\SysWOW64\rundll32.exe "C:\Users\F1-CARL\AppData\Roaming\newnext.me\nengine.dll",EntryPoint -m l, , [b6a523c32664350136c61203df22926e]
PUP.Optional.SweetPacks.A, HKU\S-1-5-21-645724224-2103063020-886836242-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\WEBBROWSER|{EEE6C35B-6118-11DC-9C72-001320C79847}, 썛愘ᇜ犜ጀ유䞘, , [9cbf63831e6c78be48c08206f60c8d73]
PUP.Optional.SweetPacks.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\TOOLBAR|{EEE6C35B-6118-11DC-9C72-001320C79847}, , [9cbf63831e6c78be48c08206f60c8d73],
PUP.Optional.SweetPacks.A, HKU\S-1-5-21-645724224-2103063020-886836242-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\WEBBROWSER\{EEE6C35B-6118-11DC-9C72-001320C79847}, , [5b0063837317de588880e2a6fe0412ee],
PUP.Optional.SweetPacks.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\{EEE6C35B-6118-11DC-9C72-001320C79847}, , [4a1135b14c3e1a1c4cbcd6b2c0429769],
PUP.Optional.SearchCertified.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCH|Search Bar, http://search.certified-toolbar.com?si= ... bs=true&q=, , [c19af8eee0aa072f30abb3897f84ca36]
PUP.Optional.Widdit.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}|SuggestionsURL_JSON, http://api.widdit.com/suggestions/?form ... 1&command={searchTerms}, , [332805e10a808fa7ceee5541eb19d62a]
PUP.Optional.SweetIM.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{EEE6C360-6118-11DC-9C72-001320C79847}|URL, http://search.sweetim.com/search.asp?src=6&q={searchTerms}&crg=3.1010000.10009&barid={AC0DF7E4-56DE-11E2-B4F8-00269E86D1C2}, , [7cdfe402266437ffb60545c71ae958a8]
PUP.Optional.CertifiedToolBar.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHURI|(Default), http://search.certified-toolbar.com?si= ... id=3231&q=%s, , [6eed5e8822685fd73bceaf8d18ebd22e]
PUP.Optional.CertifiedToolBar.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHURL|(Default), http://search.certified-toolbar.com?si= ... id=3231&q=%s, , [8ccfa73fc0ca30062ae0003c669dc739]
PUP.Optional.APNToolBar.Gen, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|ApnTBMon, "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe", , [f665f4f2870364d257e430dcb0536a96]
PUP.Optional.AskAPN.Gen, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{5347542D-5637-006A-76A7-A758B70C1D00}|InstallSource, C:\ProgramData\APN\APN-Stub\SGT-V7\, , [213a65811b6f88ae62a103081ee551af]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-645724224-2103063020-886836242-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{20DE8E2B-4C7B-4412-AE9F-DAC645242472}|AppName, Sense-enabler.exe-codedownloader.exe, , [005b885edeaca19523495f37fb09956b]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-645724224-2103063020-886836242-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C837F91C-4927-4F9B-BF57-BC6338D136B0}|AppName, Sense-enabler.exe-buttonutil.exe, , [4219e1050b7f33033f2cff97ee16b54b]
PUP.Optional.SearchCertified.A, HKU\S-1-5-21-645724224-2103063020-886836242-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|Search Bar, http://search.certified-toolbar.com?si= ... bs=true&q=, , [0d4ee9fde1a9ce685882d6668d769a66]
PUP.Optional.Babylon.A, HKU\S-1-5-21-645724224-2103063020-886836242-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}|DisplayName, Search the web (Babylon), , [d388da0c1b6f4aeca2259cf306fe27d9]
PUP.Optional.Babylon.A, HKU\S-1-5-21-645724224-2103063020-886836242-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}|URL, http://search.babylon.com/?q={searchTerms}&affID=116987&tt=0113_1&babsrc=SP_ss&mntrId=265dd4ad0000000000000c6076b5e73f, , [8dcee4029feb46f0abc345c7d23131cf]
PUP.Optional.Ask.A, HKU\S-1-5-21-645724224-2103063020-886836242-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{3808185D-57AC-45DE-AD14-B17B6BF57BA1}|SuggestionsURL_JSON, http://ss.websearch.ask.com/query?qsrc= ... =prefix&q={searchTerms}, , [5407f3f32f5b0b2b2da79cfd31d3d828]
PUP.Optional.Widdit.A, HKU\S-1-5-21-645724224-2103063020-886836242-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB8}|SuggestionsURL_JSON, http://api.widdit.com/suggestions/?form ... 1&command={searchTerms}, , [4a1125c1becc42f4a3186f27768e2cd4]
PUP.Optional.Conduit.A, HKU\S-1-5-21-645724224-2103063020-886836242-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{ED0DE4BA-3B8E-4C02-B42E-29EC9BFA5AC4}|URL, http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3289075&CUI=UN17597930032036815&UM=1, , [77e47d69157524122a8f4cc43bc806fa]
PUP.Optional.Conduit.A, HKU\S-1-5-21-645724224-2103063020-886836242-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{ED0DE4BA-3B8E-4C02-B42E-29EC9BFA5AC4}|FaviconURL, http://search.conduit.com/favicon.ico, , [74e780664941b4829722f719976cd62a]
PUP.Optional.Conduit.A, HKU\S-1-5-21-645724224-2103063020-886836242-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{ED0DE4BA-3B8E-4C02-B42E-29EC9BFA5AC4}|SuggestionsURL_JSON, http://suggest.search.conduit.com/CSugg ... hx?prefix={searchTerms}, , [4d0ea93d51396ec84a6fe42cbd46a25e]
PUP.Optional.SweetIM.A, HKU\S-1-5-21-645724224-2103063020-886836242-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{EEE6C360-6118-11DC-9C72-001320C79847}|URL, http://search.sweetim.com/search.asp?src=6&q={searchTerms}&crg=3.1010000.10009&barid={AC0DF7E4-56DE-11E2-B4F8-00269E86D1C2}, , [4f0c2fb795f58aac4f6be3292ad9c63a]
PUP.Optional.SweetIM.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\SHAREDDLLS|C:\PROGRAM FILES (X86)\SWEETIM\TOOLBARS\INTERNET EXPLORER\MGHELPERAPP.EXE, 1, , [64f7a73fef9bcb6b77d666985ea4ff01]
PUP.Optional.SweetIM.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\SHAREDDLLS|C:\PROGRAM FILES (X86)\SWEETIM\TOOLBARS\INTERNET EXPLORER\MGTOOLBARPROXY.DLL, 1, , [64f7a73fef9bcb6b77d666985ea4ff01]
PUP.Optional.APNToolBar.Gen, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR|{5347542D-5637-006A-76A7-7A786E7484D7}, 0, , [23389b4b563471c52090a166a85bf10f]
PUP.Optional.APNToolBar.Gen, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\TOOLBAR|{5347542D-5637-006A-76A7-7A786E7484D7}, 0, , [23389b4b563471c52090a166a85bf10f]

Data registru: 30
Hijack.StartPage, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, http://search.certified-toolbar.com?si= ... bs=true&q=, Dobré: (http://www.google.com), Špatné: (http://search.certified-toolbar.com?si= ... bs=true&q=),,[cb9072745f2b70c62fac3703ad58d729]
Hijack.StartPage, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, http://search.certified-toolbar.com?si= ... bs=true&q=, Dobré: (http://www.google.com), Špatné: (http://search.certified-toolbar.com?si= ... bs=true&q=),,[1744b234f595c3738b502c0e58ad08f8]
Hijack.StartPage, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Default_Page_URL, http://search.certified-toolbar.com?si= ... e&tid=3231, Dobré: (http://www.google.com), Špatné: (http://search.certified-toolbar.com?si= ... e&tid=3231),,[c497fcea1278132304d79c9eb94c53ad]
Hijack.StartPage, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Bar, http://search.certified-toolbar.com?si= ... bs=true&q=, Dobré: (http://www.google.com), Špatné: (http://search.certified-toolbar.com?si= ... bs=true&q=),,[9ac130b61b6f3105aa31d06a09fcce32]
PUP.Optional.CertifiedToolBar.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCH|Start Page, http://search.certified-toolbar.com?si= ... e&tid=3231, Dobré: (www.google.com), Špatné: (http://search.certified-toolbar.com?si= ... e&tid=3231),,[5cffecfac6c44beba580b28043c2ad53]
Hijack.SearchPage, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCH|Start Page, http://search.certified-toolbar.com?si= ... e&tid=3231, Dobré: (http://www.google.com/), Špatné: (http://search.certified-toolbar.com?si= ... e&tid=3231),,[b2a9fde9eaa0fe38a438aa90b84d01ff]
PUP.Optional.CertifiedToolBar.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCH|Start Default_Page_URL, http://search.certified-toolbar.com?si= ... e&tid=3231, Dobré: (www.google.com), Špatné: (http://search.certified-toolbar.com?si= ... e&tid=3231),,[4b1044a244467fb754d182b02bdaba46]
Hijack.SearchPage, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCH|Start Default_Page_URL, http://search.certified-toolbar.com?si= ... e&tid=3231, Dobré: (http://www.google.com/), Špatné: (http://search.certified-toolbar.com?si= ... e&tid=3231),,[9fbcda0c8ffb7abc56862f0b1ee7cd33]
PUP.Optional.CertifiedToolBar.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCH|Default_Search_URL, http://search.certified-toolbar.com?si= ... bs=true&q=, Dobré: (www.google.com), Špatné: (http://search.certified-toolbar.com?si= ... bs=true&q=),,[5ffc28be692142f45ec7f04255b0f50b]
Hijack.SearchPage, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCH|Default_Search_URL, http://search.certified-toolbar.com?si= ... bs=true&q=, Dobré: (http://www.google.com/), Špatné: (http://search.certified-toolbar.com?si= ... bs=true&q=),,[fa61df07652540f6d507e25855b056aa]
PUP.Optional.CertifiedToolBar.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCH|Search Bar, http://search.certified-toolbar.com?si= ... bs=true&q=, Dobré: (www.google.com), Špatné: (http://search.certified-toolbar.com?si= ... bs=true&q=),,[12490fd79feb1d1936efa989fa0be11f]
Hijack.SearchPage, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCH|Search Bar, http://search.certified-toolbar.com?si= ... bs=true&q=, Dobré: (http://www.google.com/), Špatné: (http://search.certified-toolbar.com?si= ... bs=true&q=),,[96c5a145177393a34498063401043bc5]
PUP.Optional.CertifiedToolBar.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCH|Search Page, http://search.certified-toolbar.com?si= ... bs=true&q=, Dobré: (www.google.com), Špatné: (http://search.certified-toolbar.com?si= ... bs=true&q=),,[213a6d792d5de353d5505dd56a9b8779]
Hijack.SearchPage, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCH|Search Page, http://search.certified-toolbar.com?si= ... bs=true&q=, Dobré: (http://www.google.com/), Špatné: (http://search.certified-toolbar.com?si= ... bs=true&q=),,[fb6021c5e7a32d0954885fdbee17827e]
Hijack.StartPage, HKU\S-1-5-21-645724224-2103063020-886836242-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, http://search.certified-toolbar.com?si= ... bs=true&q=, Dobré: (http://www.google.com), Špatné: (http://search.certified-toolbar.com?si= ... bs=true&q=),,[7be0ab3b1d6d54e231a9c278e2236d93]
Hijack.StartPage, HKU\S-1-5-21-645724224-2103063020-886836242-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Default_Page_URL, http://search.certified-toolbar.com?si= ... e&tid=3231, Dobré: (http://www.google.com), Špatné: (http://search.certified-toolbar.com?si= ... e&tid=3231),,[ee6d20c6e6a48fa72eac8dad8f76669a]
Hijack.StartPage, HKU\S-1-5-21-645724224-2103063020-886836242-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, http://search.certified-toolbar.com?si= ... bs=true&q=, Dobré: (http://www.google.com), Špatné: (http://search.certified-toolbar.com?si= ... bs=true&q=),,[acafcc1aff8b64d201d95cdea560a957]
Hijack.StartPage, HKU\S-1-5-21-645724224-2103063020-886836242-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Bar, http://search.certified-toolbar.com?si= ... bs=true&q=, Dobré: (http://www.google.com), Špatné: (http://search.certified-toolbar.com?si= ... bs=true&q=),,[c99245a16822a591defc5ae0bd48ca36]
PUP.Optional.CertifiedToolBar.ShrtCln, HKU\S-1-5-21-645724224-2103063020-886836242-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|Start Page, http://search.certified-toolbar.com?si= ... e&tid=3231, Dobré: (www.google.com), Špatné: (http://search.certified-toolbar.com?si= ... e&tid=3231),,[62f942a492f859dd64c0e44edd28e719]
Hijack.SearchPage, HKU\S-1-5-21-645724224-2103063020-886836242-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|Start Page, http://search.certified-toolbar.com?si= ... e&tid=3231, Dobré: (http://www.google.com/), Špatné: (http://search.certified-toolbar.com?si= ... e&tid=3231),,[ff5c9f470882340296472713a164659b]
PUP.Optional.CertifiedToolBar.ShrtCln, HKU\S-1-5-21-645724224-2103063020-886836242-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|Start Default_Page_URL, http://search.certified-toolbar.com?si= ... e&tid=3231, Dobré: (www.google.com), Špatné: (http://search.certified-toolbar.com?si= ... e&tid=3231),,[4b10bc2a0387b185859fdc566f96ad53]
Hijack.SearchPage, HKU\S-1-5-21-645724224-2103063020-886836242-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|Start Default_Page_URL, http://search.certified-toolbar.com?si= ... e&tid=3231, Dobré: (http://www.google.com/), Špatné: (http://search.certified-toolbar.com?si= ... e&tid=3231),,[80db08ded3b7bb7bf0edfd3db15455ab]
PUP.Optional.CertifiedToolBar.ShrtCln, HKU\S-1-5-21-645724224-2103063020-886836242-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|Default_Search_URL, http://search.certified-toolbar.com?si= ... bs=true&q=, Dobré: (www.google.com), Špatné: (http://search.certified-toolbar.com?si= ... bs=true&q=),,[67f4b72fd4b68da92400ad857b8a3ac6]
Hijack.SearchPage, HKU\S-1-5-21-645724224-2103063020-886836242-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|Default_Search_URL, http://search.certified-toolbar.com?si= ... bs=true&q=, Dobré: (http://www.google.com/), Špatné: (http://search.certified-toolbar.com?si= ... bs=true&q=),,[94c7697ddab064d231acf743966f1be5]
PUP.Optional.CertifiedToolBar.ShrtCln, HKU\S-1-5-21-645724224-2103063020-886836242-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|Search Bar, http://search.certified-toolbar.com?si= ... bs=true&q=, Dobré: (www.google.com), Špatné: (http://search.certified-toolbar.com?si= ... bs=true&q=),,[104b6680008a44f27ba99a98bb4a0000]
Hijack.SearchPage, HKU\S-1-5-21-645724224-2103063020-886836242-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|Search Bar, http://search.certified-toolbar.com?si= ... bs=true&q=, Dobré: (http://www.google.com/), Špatné: (http://search.certified-toolbar.com?si= ... bs=true&q=),,[e873db0ba6e4b086637aed4def169c64]
PUP.Optional.CertifiedToolBar.ShrtCln, HKU\S-1-5-21-645724224-2103063020-886836242-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|Search Page, http://search.certified-toolbar.com?si= ... bs=true&q=, Dobré: (www.google.com), Špatné: (http://search.certified-toolbar.com?si= ... bs=true&q=),,[a8b3f1f5e7a360d6fe2642f0c83d34cc]
Hijack.SearchPage, HKU\S-1-5-21-645724224-2103063020-886836242-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|Search Page, http://search.certified-toolbar.com?si= ... bs=true&q=, Dobré: (http://www.google.com/), Špatné: (http://search.certified-toolbar.com?si= ... bs=true&q=),,[124940a65a30be78657861d9c93cd030]
PUP.Optional.SearchCertifiedTB.A, HKU\S-1-5-21-645724224-2103063020-886836242-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHURI|(Default), http://search.certified-toolbar.com?si= ... id=3231&q=%s, Dobré: (www.google.com), Špatné: (http://search.certified-toolbar.com?si= ... id=3231&q=%s),,[19420fd7a1e96fc7059368d42bda8d73]
PUP.Optional.SearchCertifiedTB.A, HKU\S-1-5-21-645724224-2103063020-886836242-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHURL|(Default), http://search.certified-toolbar.com?si= ... id=3231&q=%s, Dobré: (www.google.com/), Špatné: (http://search.certified-toolbar.com?si= ... id=3231&q=%s),,[ea710adcf9919a9ce1b8fc4019ec51af]
Nahoru
lehyn
nováček
Příspěvky: 33
Registrován: červenec 15
Pohlaví: Nespecifikováno
Stav:
Offline

Re: pomoc.. podezření na hacknutí počítače

Příspěvekod lehyn » 26 črc 2015 12:53

Složky: 79
PUP.Optional.RegCleanPro.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RegClean Pro, , [491244a2b5d5da5cb2f4b2906e959967],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP, , [293252948802989e122e87fdfc08d32d],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\clamunpack, , [293252948802989e122e87fdfc08d32d],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP, , [4a113caa9eece254093988fc30d48878],
PUP.Optional.ConduitTB.Gen.A, C:\Program Files (x86)\Conduit\Community Alerts, , [7be00cda2f5b0531e191dbbd5da7669a],
PUP.Optional.ConduitTB.Gen.A, C:\Program Files (x86)\Conduit, , [7be00cda2f5b0531e191dbbd5da7669a],
PUP.Optional.OpenCandy, C:\Users\F1-CARL\AppData\Roaming\OpenCandy, , [7be03caa95f579bdda7f3f99ac563cc4],
PUP.Optional.OpenCandy, C:\Users\F1-CARL\AppData\Roaming\OpenCandy\364491437F9047828B8304E8FB513C7A, , [7be03caa95f579bdda7f3f99ac563cc4],
PUP.Optional.OpenCandy, C:\Users\F1-CARL\AppData\Roaming\OpenCandy\3C6317F999434CD3A54DB4BEF1F67CC6, , [7be03caa95f579bdda7f3f99ac563cc4],
PUP.Optional.OpenCandy, C:\Users\F1-CARL\AppData\Roaming\OpenCandy\3FD822BCC5694FF6951EB7A84D9C41BF, , [7be03caa95f579bdda7f3f99ac563cc4],
PUP.Optional.RegCleanerPro.A, C:\Users\F1-CARL\AppData\Roaming\Systweak\RegClean Pro, , [c6954b9bc9c16acc6163805858aa7f81],
PUP.Optional.RegCleanerPro.A, C:\Users\F1-CARL\AppData\Roaming\Systweak\RegClean Pro\Version 6.1, , [c6954b9bc9c16acc6163805858aa7f81],
PUP.Optional.RegCleanerPro.A, C:\Users\F1-CARL\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\Partial Backups, , [c6954b9bc9c16acc6163805858aa7f81],
PUP.Optional.NextLive.A, C:\Users\F1-CARL\AppData\Roaming\newnext.me, , [f665e60009815adcebeaf1e89f63e61a],
PUP.Optional.NextLive.A, C:\Users\F1-CARL\AppData\Roaming\newnext.me\cache, , [f665e60009815adcebeaf1e89f63e61a],
PUP.Optional.PriceGong.A, C:\Users\F1-CARL\AppData\LocalLow\PriceGong, , [213a7274fe8cc4727edac01b748e0cf4],
PUP.Optional.PriceGong.A, C:\Users\F1-CARL\AppData\LocalLow\PriceGong\Data, , [213a7274fe8cc4727edac01b748e0cf4],
PUP.Optional.SweetIM.A, C:\Users\F1-CARL\AppData\LocalLow\SweetIM, , [8dce62846d1d69cd0487b9221ae85ba5],
PUP.Optional.SweetIM.A, C:\Users\F1-CARL\AppData\LocalLow\SweetIM\Toolbars, , [8dce62846d1d69cd0487b9221ae85ba5],
PUP.Optional.SweetIM.A, C:\Users\F1-CARL\AppData\LocalLow\SweetIM\Toolbars\Internet Explorer, , [8dce62846d1d69cd0487b9221ae85ba5],
PUP.Optional.SweetIM.A, C:\Users\F1-CARL\AppData\LocalLow\SweetIM\Toolbars\Internet Explorer\cache, , [8dce62846d1d69cd0487b9221ae85ba5],
PUP.Optional.Yontoo.A, C:\Program Files (x86)\Yontoo, , [b4a764823555a0961b630dd7cc36e11f],
PUP.Optional.DownTango.A, C:\Program Files (x86)\Red Sky\DownTango, , [2239598d7b0fb383095240af7b87bc44],
PUP.Optional.DownTango.A, C:\Users\F1-CARL\AppData\Local\DownTango, , [065500e63753df57f16bf3fcfa08f40c],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System~Protector, , [75e61ccab7d3d0665fd82ac67b87aa56],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System~Protector\signatures, , [75e61ccab7d3d0665fd82ac67b87aa56],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System~Protector\updates, , [75e61ccab7d3d0665fd82ac67b87aa56],
PUP.Optional.AdvancedSystemProtector.A, C:\Users\F1-CARL\AppData\Roaming\Systweak\Advanced System~Protector, , [a3b8d4121773d85efe39ae420101e818],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\conf, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\Microsoft.VC90.CRT, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\blue, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\green, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\orange, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.APNToolBar.Gen, C:\ProgramData\APN\APN-Stub, , [9bc0af37385259dd1994ca3d6d9626da],
PUP.Optional.APNToolBar.Gen, C:\ProgramData\AskPartnerNetwork, , [203b509608820f27c5e91ee90bf88977],
PUP.Optional.APNToolBar.Gen, C:\ProgramData\AskPartnerNetwork\Toolbar, , [203b509608820f27c5e91ee90bf88977],
PUP.Optional.APNToolBar.Gen, C:\ProgramData\AskPartnerNetwork\Toolbar\SGT-V7, , [203b509608820f27c5e91ee90bf88977],
PUP.Optional.APNToolBar.Gen, C:\ProgramData\AskPartnerNetwork\Toolbar\SGT-V7\CRX, , [203b509608820f27c5e91ee90bf88977],
PUP.Optional.APNToolBar.Gen, C:\ProgramData\AskPartnerNetwork\Toolbar\SGT-V7\CRX\109.20, , [203b509608820f27c5e91ee90bf88977],
PUP.Optional.APNToolBar.Gen, C:\ProgramData\AskPartnerNetwork\Toolbar\SGT-V7\Updater, , [203b509608820f27c5e91ee90bf88977],
PUP.Optional.APNToolBar.Gen, C:\ProgramData\AskPartnerNetwork\Toolbar\SGT-V7\Updater\Config, , [203b509608820f27c5e91ee90bf88977],
PUP.Optional.APNToolBar.Gen, C:\ProgramData\AskPartnerNetwork\Toolbar\SGT-V7\Updater\Response, , [203b509608820f27c5e91ee90bf88977],
PUP.Optional.APNToolBar.Gen, C:\Users\F1-CARL\AppData\Local\AskPartnerNetwork, , [6fec21c5dbaf2a0c634c1bec12f1e51b],
PUP.Optional.APNToolBar.Gen, C:\Users\F1-CARL\AppData\Local\AskPartnerNetwork\Toolbar, , [6fec21c5dbaf2a0c634c1bec12f1e51b],
PUP.Optional.APNToolBar.Gen, C:\Users\F1-CARL\AppData\Local\AskPartnerNetwork\Toolbar\Updater, , [6fec21c5dbaf2a0c634c1bec12f1e51b],
PUP.Optional.APNToolBar.Gen, C:\Users\F1-CARL\AppData\Local\AskPartnerNetwork\Toolbar\Updater\IDC, , [6fec21c5dbaf2a0c634c1bec12f1e51b],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-V7, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-V7\CRX, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-V7\Source, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-V7\Source\appdata, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-V7\Source\appdata\Mozilla, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-V7\Source\appdata\Mozilla\Firefox, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-V7\Source\appdata\Mozilla\Firefox\Profiles, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-V7\Source\appdata\Mozilla\Firefox\Profiles\{DefaultProfilesFolder}, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-V7\Source\appdata\Mozilla\Firefox\Profiles\{DefaultProfilesFolder}\extensions, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-V7\Source\common appdata, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-V7\Source\common appdata\AskPartnerNetwork, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-V7\Source\common appdata\AskPartnerNetwork\Toolbar, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-V7\Source\common appdata\AskPartnerNetwork\Toolbar\{PartnerID}, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-V7\Source\common appdata\AskPartnerNetwork\Toolbar\{PartnerID}\CRX, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-V7\Source\common appdata\AskPartnerNetwork\Toolbar\{PartnerID}\CRX\{Crx_Version}, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-V7\Source\program files, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-V7\Source\program files\AskPartnerNetwork, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-V7\Source\program files\AskPartnerNetwork\ChromeUtils, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-V7\Source\program files\AskPartnerNetwork\Toolbar, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-V7\Source\program files\AskPartnerNetwork\Toolbar\Updater, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-V7\Source\program files\AskPartnerNetwork\Toolbar\Updater\IDC, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-V7\Source\program files\AskPartnerNetwork\Toolbar\Updater\{PartnerID}, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-V7\Source\program files\AskPartnerNetwork\Toolbar\{PartnerID}, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-V7\Source\program files\VNT, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\SGT-V7, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced System~Protector, , [0b50d511701a082eecaf25e457ac58a8],

Soubory: 394
Backdoor.NJRat, C:\Users\F1-CARL\AppData\Local\Temp\server.exe, , [e07b7e688ffbea4cf81f1f8906fba25e],
PUP.Optional.NextLive.A, C:\Users\F1-CARL\AppData\Roaming\newnext.me\nengine.dll, , [b6a523c32664350136c61203df22926e],
PUP.Optional.SweetPacks.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll, , [9cbf63831e6c78be48c08206f60c8d73],
PUP.Optional.NextLive.A, C:\Users\F1-CARL\AppData\Roaming\OpenCandy\364491437F9047828B8304E8FB513C7A\Mobogenie_Setup_2.1.35_507.exe, , [c49707df98f230068a72d83d04fd39c7],
PUP.Optional.APNToolBar.A, C:\Program Files\youtube-downloader_4.7.exe, , [afac707698f2dc5a73e0e6c210f1f40c],
PUP.Optional.NextLive.A, C:\Program Files (x86)\Mobogenie\nengine.dll, , [ea71dd0959312b0bfa02769f8180a759],
PUP.Optional.OptChrome.A, C:\Program Files (x86)\Yontoo\OptChrome.exe, , [12495591dab0d85ed3c4d74917e925db],
PUP.Optional.GoForFiles.A, C:\Program Files (x86)\GoforFiles\uninstall.exe, , [0853e204b5d571c52371cd277e82c838],
PUP.Optional.NextLive.A, C:\Users\F1-CARL\AppData\Local\genienext\nengine.dll, , [22394d99612952e41ddfd045ad543fc1],
PUP.Optional.SweetIM, C:\Windows\Installer\3d82b22.msi, , [3b200bdb21692016e7f16ef3ab5a1ae6],
PUP.Optional.RegCleanerPro, C:\Windows\System32\Tasks\RegClean Pro, , [4b1009dd7218c274da0d5dd5ff0442be],
PUP.Optional.RegCleanPro.A, C:\Windows\System32\Tasks\RegClean Pro_DEFAULT, , [70ebc4220585fa3ced2775c6e023a15f],
PUP.Optional.RegCleanPro.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RegClean Pro\Register RegClean Pro.lnk, , [491244a2b5d5da5cb2f4b2906e959967],
PUP.Optional.RegCleanPro.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RegClean Pro\RegClean Pro.lnk, , [491244a2b5d5da5cb2f4b2906e959967],
PUP.Optional.RegCleanPro.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RegClean Pro\Uninstall RegClean Pro.lnk, , [491244a2b5d5da5cb2f4b2906e959967],
PUP.Optional.RegCleanerPro.J, C:\Windows\Tasks\RegClean Pro_UPDATES.job, , [72e94b9bbfcbe3538a1efa5b679c47b9],
PUP.Optional.RegCleanPro.A, C:\Windows\Tasks\RegClean Pro_DEFAULT.job, , [22398165a0ea79bd4435f86e2ed63ec2],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\AdvancedSystemProtector.exe.config, , [293252948802989e122e87fdfc08d32d],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\norwegian_asp_NO.ini, , [293252948802989e122e87fdfc08d32d],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\AdvancedSystemProtector.exe, , [293252948802989e122e87fdfc08d32d],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\AppResource.dll, , [293252948802989e122e87fdfc08d32d],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\asp.ico, , [293252948802989e122e87fdfc08d32d],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\AspManager.exe, , [293252948802989e122e87fdfc08d32d],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\aspsys.dll, , [293252948802989e122e87fdfc08d32d],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\ASPUninstall.exe, , [293252948802989e122e87fdfc08d32d],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\categories.ini, , [293252948802989e122e87fdfc08d32d],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\Chinese_asp_ZH-CN.ini, , [293252948802989e122e87fdfc08d32d],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\Chinese_uninst.ini, , [293252948802989e122e87fdfc08d32d],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\Communication.dll, , [293252948802989e122e87fdfc08d32d],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\danish_asp_DA.ini, , [293252948802989e122e87fdfc08d32d],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\Danish_uninst.ini, , [293252948802989e122e87fdfc08d32d],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\dutch_asp_NL.ini, , [293252948802989e122e87fdfc08d32d],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\Dutch_uninst.ini, , [293252948802989e122e87fdfc08d32d],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\eng_asp_en.ini, , [293252948802989e122e87fdfc08d32d],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\eng_uninst.ini, , [293252948802989e122e87fdfc08d32d],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\filetypehelper.exe, , [293252948802989e122e87fdfc08d32d],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\Finnish_asp_FI.ini, , [293252948802989e122e87fdfc08d32d],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\Finnish_uninst_fi.ini, , [293252948802989e122e87fdfc08d32d],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\french_asp_FR.ini, , [293252948802989e122e87fdfc08d32d],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\French_uninst.ini, , [293252948802989e122e87fdfc08d32d],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\german_asp_DE.ini, , [293252948802989e122e87fdfc08d32d],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\German_uninst.ini, , [293252948802989e122e87fdfc08d32d],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\Norwegian_uninst.ini, , [293252948802989e122e87fdfc08d32d],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\polish_uninst_pl.ini, , [293252948802989e122e87fdfc08d32d],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\portugese_uninst_pt.ini, , [293252948802989e122e87fdfc08d32d],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\portuguese_asp_PT-BR.ini, , [293252948802989e122e87fdfc08d32d],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\Portuguese_uninst.ini, , [293252948802989e122e87fdfc08d32d],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\russian_asp_ru.ini, , [293252948802989e122e87fdfc08d32d],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\russian_uninst_ru.ini, , [293252948802989e122e87fdfc08d32d],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\scandll.dll, , [293252948802989e122e87fdfc08d32d],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\spanish_asp_ES.ini, , [293252948802989e122e87fdfc08d32d],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\spanish_uninst.ini, , [293252948802989e122e87fdfc08d32d],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\greek_uninst_el.ini, , [293252948802989e122e87fdfc08d32d],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\Interop.IWshRuntimeLibrary.dll, , [293252948802989e122e87fdfc08d32d],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\italian_asp_IT.ini, , [293252948802989e122e87fdfc08d32d],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\Italian_uninst.ini, , [293252948802989e122e87fdfc08d32d],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\japanese_asp_JA.ini, , [293252948802989e122e87fdfc08d32d],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\Japanese_uninst.ini, , [293252948802989e122e87fdfc08d32d],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\korean_uninst_ko.ini, , [293252948802989e122e87fdfc08d32d],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\loading_withWhiteBG.avi, , [293252948802989e122e87fdfc08d32d],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\Microsoft.Win32.TaskScheduler.DLL, , [293252948802989e122e87fdfc08d32d],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\swedish_asp_SV.ini, , [293252948802989e122e87fdfc08d32d],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\swedish_uninst.ini, , [293252948802989e122e87fdfc08d32d],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\System.Core.dll, , [293252948802989e122e87fdfc08d32d],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\System.Data.SQLite.dll, , [293252948802989e122e87fdfc08d32d],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\TPS.ico, , [293252948802989e122e87fdfc08d32d],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\traditionalcn_uninst_zh-tw.ini, , [293252948802989e122e87fdfc08d32d],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\Turkish_uninst_tr.ini, , [293252948802989e122e87fdfc08d32d],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\unins000.dat, , [293252948802989e122e87fdfc08d32d],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\unins000.exe, , [293252948802989e122e87fdfc08d32d],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\unins000.msg, , [293252948802989e122e87fdfc08d32d],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\unrar.dll, , [293252948802989e122e87fdfc08d32d],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\Xceed.Compression.dll, , [293252948802989e122e87fdfc08d32d],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\Xceed.Compression.Formats.dll, , [293252948802989e122e87fdfc08d32d],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\Xceed.FileSystem.dll, , [293252948802989e122e87fdfc08d32d],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\Xceed.Zip.dll, , [293252948802989e122e87fdfc08d32d],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\clamunpack\clamscan.exe, , [293252948802989e122e87fdfc08d32d],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\clamunpack\libclamav.dll, , [293252948802989e122e87fdfc08d32d],
PUP.Optional.AdvancedSystemProtector.A, C:\Program Files (x86)\ASP\clamunpack\readme.txt, , [293252948802989e122e87fdfc08d32d],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\Chinese_rcp.ini, , [4a113caa9eece254093988fc30d48878],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\FileList.rcp, , [4a113caa9eece254093988fc30d48878],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\Chinese_uninst.ini, , [4a113caa9eece254093988fc30d48878],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\CleanSchedule.exe, , [4a113caa9eece254093988fc30d48878],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\Danish_rcp.ini, , [4a113caa9eece254093988fc30d48878],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\Danish_uninst.ini, , [4a113caa9eece254093988fc30d48878],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\Dutch_rcp.ini, , [4a113caa9eece254093988fc30d48878],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\Dutch_uninst.ini, , [4a113caa9eece254093988fc30d48878],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\eng_rcp.ini, , [4a113caa9eece254093988fc30d48878],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\eng_uninst.ini, , [4a113caa9eece254093988fc30d48878],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\Japanese_rcp.ini, , [4a113caa9eece254093988fc30d48878],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\Japanese_uninst.ini, , [4a113caa9eece254093988fc30d48878],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\korean_rcp_ko.ini, , [4a113caa9eece254093988fc30d48878],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\korean_uninst_ko.ini, , [4a113caa9eece254093988fc30d48878],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\LicMgr.dll, , [4a113caa9eece254093988fc30d48878],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\Norwegian_rcp.ini, , [4a113caa9eece254093988fc30d48878],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\Norwegian_uninst.ini, , [4a113caa9eece254093988fc30d48878],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\polish_rcp_pl.ini, , [4a113caa9eece254093988fc30d48878],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\polish_uninst_pl.ini, , [4a113caa9eece254093988fc30d48878],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\portugese_rcp_pt.ini, , [4a113caa9eece254093988fc30d48878],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\portugese_uninst_pt.ini, , [4a113caa9eece254093988fc30d48878],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\Portuguese_rcp.ini, , [4a113caa9eece254093988fc30d48878],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\Portuguese_uninst.ini, , [4a113caa9eece254093988fc30d48878],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\RCPUninstall.exe, , [4a113caa9eece254093988fc30d48878],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\Finnish_rcp_fi.ini, , [4a113caa9eece254093988fc30d48878],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\Finnish_uninst_fi.ini, , [4a113caa9eece254093988fc30d48878],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\French_rcp.ini, , [4a113caa9eece254093988fc30d48878],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\French_uninst.ini, , [4a113caa9eece254093988fc30d48878],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\German_rcp.ini, , [4a113caa9eece254093988fc30d48878],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\German_uninst.ini, , [4a113caa9eece254093988fc30d48878],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\greek_rcp_el.ini, , [4a113caa9eece254093988fc30d48878],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\greek_uninst_el.ini, , [4a113caa9eece254093988fc30d48878],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\install_left_image.bmp, , [4a113caa9eece254093988fc30d48878],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\isxdl.dll, , [4a113caa9eece254093988fc30d48878],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\Italian_rcp.ini, , [4a113caa9eece254093988fc30d48878],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\Italian_uninst.ini, , [4a113caa9eece254093988fc30d48878],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\RegCleanPro.exe, , [4a113caa9eece254093988fc30d48878],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\RegList.rcp, , [4a113caa9eece254093988fc30d48878],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\russian_rcp_ru.ini, , [4a113caa9eece254093988fc30d48878],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\russian_uninst_ru.ini, , [4a113caa9eece254093988fc30d48878],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\Spanish_rcp.ini, , [4a113caa9eece254093988fc30d48878],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\spanish_uninst.ini, , [4a113caa9eece254093988fc30d48878],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\Swedish_rcp.ini, , [4a113caa9eece254093988fc30d48878],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\swedish_uninst.ini, , [4a113caa9eece254093988fc30d48878],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\systweakasp.exe, , [4a113caa9eece254093988fc30d48878],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\TPS.ico, , [4a113caa9eece254093988fc30d48878],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\TraditionalCn_rcp_zh-tw.ini, , [4a113caa9eece254093988fc30d48878],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\traditionalcn_uninst_zh-tw.ini, , [4a113caa9eece254093988fc30d48878],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\turkish_rcp_tr.ini, , [4a113caa9eece254093988fc30d48878],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\Turkish_uninst_tr.ini, , [4a113caa9eece254093988fc30d48878],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\unins000.dat, , [4a113caa9eece254093988fc30d48878],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\unins000.exe, , [4a113caa9eece254093988fc30d48878],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\unins000.msg, , [4a113caa9eece254093988fc30d48878],
PUP.Optional.RegCleanPro.A, C:\Program Files (x86)\RCP\xmllite.dll, , [4a113caa9eece254093988fc30d48878],
PUP.Optional.Goobzo.A, C:\Windows\System32\Tasks\SMupdate1, , [fc5f06e0305acc6ae7ca03918480e818],
PUP.Optional.ConduitTB.Gen.A, C:\Program Files (x86)\Conduit\Community Alerts\Alert.dll, , [7be00cda2f5b0531e191dbbd5da7669a],
PUP.Optional.AdvancedSystemProtector.A, C:\Windows\System32\Tasks\Advanced System~Protector, , [3625ad39cebc0d29453faef237cdf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe, , [f665f4f2870364d257e430dcb0536a96],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe, , [0b50b23494f6f83e5ddfe82417ec5da3],
PUP.Optional.OpenCandy, C:\Users\F1-CARL\AppData\Roaming\OpenCandy\3C6317F999434CD3A54DB4BEF1F67CC6\pokkiInstaller.exe, , [7be03caa95f579bdda7f3f99ac563cc4],
PUP.Optional.OpenCandy, C:\Users\F1-CARL\AppData\Roaming\OpenCandy\3FD822BCC5694FF6951EB7A84D9C41BF\AppGraffitiSetup.exe, , [7be03caa95f579bdda7f3f99ac563cc4],
PUP.Optional.RegCleanerPro.A, C:\Users\F1-CARL\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\backup0.bin, , [c6954b9bc9c16acc6163805858aa7f81],
PUP.Optional.RegCleanerPro.A, C:\Users\F1-CARL\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\backup3.bin, , [c6954b9bc9c16acc6163805858aa7f81],
PUP.Optional.RegCleanerPro.A, C:\Users\F1-CARL\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\backup4.bin, , [c6954b9bc9c16acc6163805858aa7f81],
PUP.Optional.RegCleanerPro.A, C:\Users\F1-CARL\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\backup6.bin, , [c6954b9bc9c16acc6163805858aa7f81],
PUP.Optional.RegCleanerPro.A, C:\Users\F1-CARL\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\eng_rcp.dat, , [c6954b9bc9c16acc6163805858aa7f81],
PUP.Optional.RegCleanerPro.A, C:\Users\F1-CARL\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\ExcludeList.rcp, , [c6954b9bc9c16acc6163805858aa7f81],
PUP.Optional.RegCleanerPro.A, C:\Users\F1-CARL\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\log_07-26-2015.log, , [c6954b9bc9c16acc6163805858aa7f81],
PUP.Optional.RegCleanerPro.A, C:\Users\F1-CARL\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\rcpupdate.ini, , [c6954b9bc9c16acc6163805858aa7f81],
PUP.Optional.RegCleanerPro.A, C:\Users\F1-CARL\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\results.rcp, , [c6954b9bc9c16acc6163805858aa7f81],
PUP.Optional.RegCleanerPro.A, C:\Users\F1-CARL\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\TempHLList.rcp, , [c6954b9bc9c16acc6163805858aa7f81],
PUP.Optional.RegCleanerPro.A, C:\Users\F1-CARL\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\Partial Backups\00000001.rmx, , [c6954b9bc9c16acc6163805858aa7f81],
PUP.Optional.RegCleanerPro.A, C:\Users\F1-CARL\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\Partial Backups\00000001.rxb, , [c6954b9bc9c16acc6163805858aa7f81],
Nahoru
lehyn
nováček
Příspěvky: 33
Registrován: červenec 15
Pohlaví: Nespecifikováno
Stav:
Offline

Re: pomoc.. podezření na hacknutí počítače

Příspěvekod lehyn » 26 črc 2015 12:53

PUP.Optional.NextLive.A, C:\Users\F1-CARL\AppData\Roaming\newnext.me\nengine.cookie, , [f665e60009815adcebeaf1e89f63e61a],
PUP.Optional.NextLive.A, C:\Users\F1-CARL\AppData\Roaming\newnext.me\cache\spark.bin, , [f665e60009815adcebeaf1e89f63e61a],
PUP.Optional.PriceGong.A, C:\Users\F1-CARL\AppData\LocalLow\PriceGong\Data\1.txt, , [213a7274fe8cc4727edac01b748e0cf4],
PUP.Optional.PriceGong.A, C:\Users\F1-CARL\AppData\LocalLow\PriceGong\Data\a.txt, , [213a7274fe8cc4727edac01b748e0cf4],
PUP.Optional.PriceGong.A, C:\Users\F1-CARL\AppData\LocalLow\PriceGong\Data\b.txt, , [213a7274fe8cc4727edac01b748e0cf4],
PUP.Optional.PriceGong.A, C:\Users\F1-CARL\AppData\LocalLow\PriceGong\Data\c.txt, , [213a7274fe8cc4727edac01b748e0cf4],
PUP.Optional.PriceGong.A, C:\Users\F1-CARL\AppData\LocalLow\PriceGong\Data\d.txt, , [213a7274fe8cc4727edac01b748e0cf4],
PUP.Optional.PriceGong.A, C:\Users\F1-CARL\AppData\LocalLow\PriceGong\Data\e.txt, , [213a7274fe8cc4727edac01b748e0cf4],
PUP.Optional.PriceGong.A, C:\Users\F1-CARL\AppData\LocalLow\PriceGong\Data\f.txt, , [213a7274fe8cc4727edac01b748e0cf4],
PUP.Optional.PriceGong.A, C:\Users\F1-CARL\AppData\LocalLow\PriceGong\Data\g.txt, , [213a7274fe8cc4727edac01b748e0cf4],
PUP.Optional.PriceGong.A, C:\Users\F1-CARL\AppData\LocalLow\PriceGong\Data\h.txt, , [213a7274fe8cc4727edac01b748e0cf4],
PUP.Optional.PriceGong.A, C:\Users\F1-CARL\AppData\LocalLow\PriceGong\Data\i.txt, , [213a7274fe8cc4727edac01b748e0cf4],
PUP.Optional.PriceGong.A, C:\Users\F1-CARL\AppData\LocalLow\PriceGong\Data\j.txt, , [213a7274fe8cc4727edac01b748e0cf4],
PUP.Optional.PriceGong.A, C:\Users\F1-CARL\AppData\LocalLow\PriceGong\Data\k.txt, , [213a7274fe8cc4727edac01b748e0cf4],
PUP.Optional.PriceGong.A, C:\Users\F1-CARL\AppData\LocalLow\PriceGong\Data\l.txt, , [213a7274fe8cc4727edac01b748e0cf4],
PUP.Optional.PriceGong.A, C:\Users\F1-CARL\AppData\LocalLow\PriceGong\Data\m.txt, , [213a7274fe8cc4727edac01b748e0cf4],
PUP.Optional.PriceGong.A, C:\Users\F1-CARL\AppData\LocalLow\PriceGong\Data\n.txt, , [213a7274fe8cc4727edac01b748e0cf4],
PUP.Optional.PriceGong.A, C:\Users\F1-CARL\AppData\LocalLow\PriceGong\Data\o.txt, , [213a7274fe8cc4727edac01b748e0cf4],
PUP.Optional.PriceGong.A, C:\Users\F1-CARL\AppData\LocalLow\PriceGong\Data\p.txt, , [213a7274fe8cc4727edac01b748e0cf4],
PUP.Optional.PriceGong.A, C:\Users\F1-CARL\AppData\LocalLow\PriceGong\Data\q.txt, , [213a7274fe8cc4727edac01b748e0cf4],
PUP.Optional.PriceGong.A, C:\Users\F1-CARL\AppData\LocalLow\PriceGong\Data\r.txt, , [213a7274fe8cc4727edac01b748e0cf4],
PUP.Optional.PriceGong.A, C:\Users\F1-CARL\AppData\LocalLow\PriceGong\Data\s.txt, , [213a7274fe8cc4727edac01b748e0cf4],
PUP.Optional.PriceGong.A, C:\Users\F1-CARL\AppData\LocalLow\PriceGong\Data\t.txt, , [213a7274fe8cc4727edac01b748e0cf4],
PUP.Optional.PriceGong.A, C:\Users\F1-CARL\AppData\LocalLow\PriceGong\Data\u.txt, , [213a7274fe8cc4727edac01b748e0cf4],
PUP.Optional.PriceGong.A, C:\Users\F1-CARL\AppData\LocalLow\PriceGong\Data\v.txt, , [213a7274fe8cc4727edac01b748e0cf4],
PUP.Optional.PriceGong.A, C:\Users\F1-CARL\AppData\LocalLow\PriceGong\Data\w.txt, , [213a7274fe8cc4727edac01b748e0cf4],
PUP.Optional.PriceGong.A, C:\Users\F1-CARL\AppData\LocalLow\PriceGong\Data\x.txt, , [213a7274fe8cc4727edac01b748e0cf4],
PUP.Optional.PriceGong.A, C:\Users\F1-CARL\AppData\LocalLow\PriceGong\Data\y.txt, , [213a7274fe8cc4727edac01b748e0cf4],
PUP.Optional.PriceGong.A, C:\Users\F1-CARL\AppData\LocalLow\PriceGong\Data\z.txt, , [213a7274fe8cc4727edac01b748e0cf4],
PUP.Optional.SweetIM.A, C:\Users\F1-CARL\AppData\LocalLow\SweetIM\Toolbars\Internet Explorer\cache\473d5c007e793590a1db512a6ef4eb57.games2.png, , [8dce62846d1d69cd0487b9221ae85ba5],
PUP.Optional.SweetIM.A, C:\Users\F1-CARL\AppData\LocalLow\SweetIM\Toolbars\Internet Explorer\cache\53b597b55d8412d563b720d3585c1af8.facebook.png, , [8dce62846d1d69cd0487b9221ae85ba5],
PUP.Optional.SweetIM.A, C:\Users\F1-CARL\AppData\LocalLow\SweetIM\Toolbars\Internet Explorer\cache\7c1329c14e8f09f2e97e3522bcd7e126.toolbar46.xml, , [8dce62846d1d69cd0487b9221ae85ba5],
PUP.Optional.SweetIM.A, C:\Users\F1-CARL\AppData\LocalLow\SweetIM\Toolbars\Internet Explorer\cache\8d03c0783b1e34c2b403cee25e4f3d73.options_remote44b_no_fb.html, , [8dce62846d1d69cd0487b9221ae85ba5],
PUP.Optional.SweetIM.A, C:\Users\F1-CARL\AppData\LocalLow\SweetIM\Toolbars\Internet Explorer\cache\ccbd8b558f1d599e360b3dc00c89e1b1.facebook2.png, , [8dce62846d1d69cd0487b9221ae85ba5],
PUP.Optional.SweetIM.A, C:\Users\F1-CARL\AppData\LocalLow\SweetIM\Toolbars\Internet Explorer\cache\d7663980840977888075cdf06da9e63d.facebook2_hover.png, , [8dce62846d1d69cd0487b9221ae85ba5],
PUP.Optional.SweetIM.A, C:\Users\F1-CARL\AppData\LocalLow\SweetIM\Toolbars\Internet Explorer\cache\dda5971490977d5465f836a12522f1a1.games3.png, , [8dce62846d1d69cd0487b9221ae85ba5],
PUP.Optional.DownTango.A, C:\Program Files (x86)\Red Sky\DownTango\qgif4.dll, , [2239598d7b0fb383095240af7b87bc44],
PUP.Optional.DownTango.A, C:\Program Files (x86)\Red Sky\DownTango\qico4.dll, , [2239598d7b0fb383095240af7b87bc44],
PUP.Optional.DownTango.A, C:\Program Files (x86)\Red Sky\DownTango\qjpeg4.dll, , [2239598d7b0fb383095240af7b87bc44],
PUP.Optional.DownTango.A, C:\Users\F1-CARL\AppData\Local\DownTango\application.log, , [065500e63753df57f16bf3fcfa08f40c],
PUP.Optional.DownTango.A, C:\Users\F1-CARL\AppData\Local\DownTango\config.db, , [065500e63753df57f16bf3fcfa08f40c],
PUP.Optional.DownTango.A, C:\Users\F1-CARL\AppData\Local\DownTango\files.db, , [065500e63753df57f16bf3fcfa08f40c],
PUP.Optional.DownTango.A, C:\Users\F1-CARL\AppData\Local\DownTango\pyload.conf, , [065500e63753df57f16bf3fcfa08f40c],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System~Protector\AddonSafelist, , [75e61ccab7d3d0665fd82ac67b87aa56],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Systweak\Advanced System~Protector\log.xslt, , [75e61ccab7d3d0665fd82ac67b87aa56],
PUP.Optional.AdvancedSystemProtector.A, C:\Users\F1-CARL\AppData\Roaming\Systweak\Advanced System~Protector\ASPLog.txt, , [a3b8d4121773d85efe39ae420101e818],
PUP.Optional.AdvancedSystemProtector.A, C:\Users\F1-CARL\AppData\Roaming\Systweak\Advanced System~Protector\Settings.db, , [a3b8d4121773d85efe39ae420101e818],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\ClearHist.exe, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\default.xml, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgcommon.dll, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgconfig.dll, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgHelper.dll, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgHelperApp.exe, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mghooking.dll, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mglogger.dll, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgsimcommon.dll, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarProxy.dll, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgxml_wrapper.dll, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\conf\logger.xml, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\Microsoft.VC90.CRT\Microsoft.VC90.CRT.manifest, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\Microsoft.VC90.CRT\msvcm90.dll, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\Microsoft.VC90.CRT\msvcp90.dll, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\Microsoft.VC90.CRT\msvcr90.dll, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\eye_icon.png, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\logo_32x32.png, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\about.html, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\affid.dat, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\basis.xml, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\bing.png, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\clear-history.png, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\content-notifier-anim-over.gif, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\content-notifier-anim.gif, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\content-notifier.js, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\dating.png, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\dictionary.png, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\eye_icon_over.png, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\e_cards.png, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\find.png, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\free_stuff.png, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\games.png, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\glitter.png, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\google.png, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\help.png, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\highlight.png, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\locales.xml, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\logo_16x16.png, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\logo_21x18.png, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\logo_about.png, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\MenuExt.html, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\more-search-providers.png, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\music.png, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\news.png, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\options.html, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\photos.png, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\search-current-site.png, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\shopping.png, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\SmileySmile.png, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\SmileyWink.png, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\sweetim_text.png, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\toolbar.xml, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\video.png, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\web-search.png, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\web-toolbar.js, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\yahoo.png, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\blue\search_button.png, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\blue\search_button_bing.png, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\blue\search_button_current.png, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\blue\search_button_dictionary.png, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\blue\search_button_google.png, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\blue\search_button_hover.png, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\blue\search_button_left.png, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\blue\search_button_photo.png, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\blue\search_button_video.png, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\blue\search_button_web.png, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\blue\search_button_yahoo.png, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\green\search_button.png, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\green\search_button_bing.png, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\green\search_button_current.png, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\green\search_button_dictionary.png, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\green\search_button_google.png, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\green\search_button_hover.png, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\green\search_button_left.png, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\green\search_button_photo.png, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\green\search_button_video.png, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\green\search_button_web.png, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\green\search_button_yahoo.png, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\orange\search_button.png, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\orange\search_button_bing.png, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\orange\search_button_current.png, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\orange\search_button_dictionary.png, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\orange\search_button_google.png, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\orange\search_button_hover.png, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\orange\search_button_left.png, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\orange\search_button_photo.png, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\orange\search_button_video.png, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\orange\search_button_web.png, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.SweetIM.A, C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\orange\search_button_yahoo.png, , [64f7a73fef9bcb6b77d666985ea4ff01],
PUP.Optional.APNToolBar.Gen, C:\ProgramData\AskPartnerNetwork\Toolbar\SGT-V7\CRX\109.20\Toolbar.crx, , [203b509608820f27c5e91ee90bf88977],
PUP.Optional.APNToolBar.Gen, C:\ProgramData\AskPartnerNetwork\Toolbar\SGT-V7\Updater\Config\Config.31.13.0.0-2.xml, , [203b509608820f27c5e91ee90bf88977],
PUP.Optional.APNToolBar.Gen, C:\ProgramData\AskPartnerNetwork\Toolbar\SGT-V7\Updater\Config\Config.31.10.0.0-3.xml, , [203b509608820f27c5e91ee90bf88977],
PUP.Optional.APNToolBar.Gen, C:\ProgramData\AskPartnerNetwork\Toolbar\SGT-V7\Updater\Config\Config.31.10.1.0-3.xml, , [203b509608820f27c5e91ee90bf88977],
PUP.Optional.APNToolBar.Gen, C:\ProgramData\AskPartnerNetwork\Toolbar\SGT-V7\Updater\Config\Config.31.10.2.0-2.xml, , [203b509608820f27c5e91ee90bf88977],
PUP.Optional.APNToolBar.Gen, C:\ProgramData\AskPartnerNetwork\Toolbar\SGT-V7\Updater\Config\Config.31.10.3.0-2.xml, , [203b509608820f27c5e91ee90bf88977],
PUP.Optional.APNToolBar.Gen, C:\ProgramData\AskPartnerNetwork\Toolbar\SGT-V7\Updater\Config\Config.31.12.0.0-2.xml, , [203b509608820f27c5e91ee90bf88977],
PUP.Optional.APNToolBar.Gen, C:\ProgramData\AskPartnerNetwork\Toolbar\SGT-V7\Updater\Config\Config.31.13.0.0-3.xml, , [203b509608820f27c5e91ee90bf88977],
PUP.Optional.APNToolBar.Gen, C:\ProgramData\AskPartnerNetwork\Toolbar\SGT-V7\Updater\Config\Config.31.15.1.0-3.xml, , [203b509608820f27c5e91ee90bf88977],
PUP.Optional.APNToolBar.Gen, C:\ProgramData\AskPartnerNetwork\Toolbar\SGT-V7\Updater\Config\Config.31.15.1.0-4.xml, , [203b509608820f27c5e91ee90bf88977],
PUP.Optional.APNToolBar.Gen, C:\ProgramData\AskPartnerNetwork\Toolbar\SGT-V7\Updater\Config\Config.31.18.0.0-4.xml, , [203b509608820f27c5e91ee90bf88977],
PUP.Optional.APNToolBar.Gen, C:\ProgramData\AskPartnerNetwork\Toolbar\SGT-V7\Updater\Config\Config.31.18.0.0-5.xml, , [203b509608820f27c5e91ee90bf88977],
PUP.Optional.APNToolBar.Gen, C:\ProgramData\AskPartnerNetwork\Toolbar\SGT-V7\Updater\Config\Config.31.20.0.0-5.xml, , [203b509608820f27c5e91ee90bf88977],
PUP.Optional.APNToolBar.Gen, C:\ProgramData\AskPartnerNetwork\Toolbar\SGT-V7\Updater\Config\Config.31.6.3.0-2.xml, , [203b509608820f27c5e91ee90bf88977],
PUP.Optional.APNToolBar.Gen, C:\ProgramData\AskPartnerNetwork\Toolbar\SGT-V7\Updater\Config\Config.31.6.3.0-4.xml, , [203b509608820f27c5e91ee90bf88977],
PUP.Optional.APNToolBar.Gen, C:\ProgramData\AskPartnerNetwork\Toolbar\SGT-V7\Updater\Config\Config.31.6.6.0-4.xml, , [203b509608820f27c5e91ee90bf88977],
PUP.Optional.APNToolBar.Gen, C:\ProgramData\AskPartnerNetwork\Toolbar\SGT-V7\Updater\Config\Config.31.9.0.0-2.xml, , [203b509608820f27c5e91ee90bf88977],
PUP.Optional.APNToolBar.Gen, C:\ProgramData\AskPartnerNetwork\Toolbar\SGT-V7\Updater\Config\Config.31.9.0.0-3.xml, , [203b509608820f27c5e91ee90bf88977],
PUP.Optional.APNToolBar.Gen, C:\ProgramData\AskPartnerNetwork\Toolbar\SGT-V7\Updater\Config\Config.31.9.2.0-3.xml, , [203b509608820f27c5e91ee90bf88977],
PUP.Optional.APNToolBar.Gen, C:\ProgramData\AskPartnerNetwork\Toolbar\SGT-V7\Updater\Config\Config.31.9.3.0-3.xml, , [203b509608820f27c5e91ee90bf88977],
PUP.Optional.APNToolBar.Gen, C:\ProgramData\AskPartnerNetwork\Toolbar\SGT-V7\Updater\Response\Response.31.20.0.0-36.xml, , [203b509608820f27c5e91ee90bf88977],
PUP.Optional.APNToolBar.Gen, C:\ProgramData\AskPartnerNetwork\Toolbar\SGT-V7\Updater\Response\Response.31.20.0.0-37.xml, , [203b509608820f27c5e91ee90bf88977],
PUP.Optional.APNToolBar.Gen, C:\Users\F1-CARL\AppData\Local\AskPartnerNetwork\Toolbar\Updater\IDC\IDC382.tmp, , [6fec21c5dbaf2a0c634c1bec12f1e51b],
PUP.Optional.APNToolBar.Gen, C:\Users\F1-CARL\AppData\Local\AskPartnerNetwork\Toolbar\Updater\IDC\IDC402.tmp, , [6fec21c5dbaf2a0c634c1bec12f1e51b],
PUP.Optional.APNToolBar.Gen, C:\Users\F1-CARL\AppData\Local\AskPartnerNetwork\Toolbar\Updater\IDC\IDC48DC.tmp, , [6fec21c5dbaf2a0c634c1bec12f1e51b],
PUP.Optional.APNToolBar.Gen, C:\Users\F1-CARL\AppData\Local\AskPartnerNetwork\Toolbar\Updater\IDC\IDC4B11.tmp, , [6fec21c5dbaf2a0c634c1bec12f1e51b],
PUP.Optional.APNToolBar.Gen, C:\Users\F1-CARL\AppData\Local\AskPartnerNetwork\Toolbar\Updater\IDC\IDCBCA8.tmp, , [6fec21c5dbaf2a0c634c1bec12f1e51b],
PUP.Optional.APNToolBar.Gen, C:\Users\F1-CARL\AppData\Local\AskPartnerNetwork\Toolbar\Updater\IDC\IDCBCD9.tmp, , [6fec21c5dbaf2a0c634c1bec12f1e51b],
PUP.Optional.APNToolBar.Gen, C:\Users\F1-CARL\AppData\Local\AskPartnerNetwork\Toolbar\Updater\IDC\IdcLdr.exe, , [6fec21c5dbaf2a0c634c1bec12f1e51b],
PUP.Optional.APNToolBar.Gen, C:\Users\F1-CARL\AppData\Local\AskPartnerNetwork\Toolbar\Updater\IDC\IdcLdr_x64.exe, , [6fec21c5dbaf2a0c634c1bec12f1e51b],
PUP.Optional.APNToolBar.Gen, C:\Users\F1-CARL\AppData\Local\AskPartnerNetwork\Toolbar\Updater\IDC\IdcSrv.dll, , [6fec21c5dbaf2a0c634c1bec12f1e51b],
PUP.Optional.APNToolBar.Gen, C:\Users\F1-CARL\AppData\Local\AskPartnerNetwork\Toolbar\Updater\IDC\IdcSrvStub.dll, , [6fec21c5dbaf2a0c634c1bec12f1e51b],
PUP.Optional.APNToolBar.Gen, C:\Users\F1-CARL\AppData\Local\AskPartnerNetwork\Toolbar\Updater\IDC\IdcSrvStub_x64.dll, , [6fec21c5dbaf2a0c634c1bec12f1e51b],
PUP.Optional.APNToolBar.Gen, C:\Users\F1-CARL\AppData\Local\AskPartnerNetwork\Toolbar\Updater\IDC\IdcSrv_x64.dll, , [6fec21c5dbaf2a0c634c1bec12f1e51b],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\APNSetup.exe, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\searchhook.dll, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\ServiceLocator.exe, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SO.dll, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\toolbar.dll, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Toolbar.exe, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\ToolbarPS.dll, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\toolbar_x64.dll, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\UpdateManager.exe, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-V7\Passport.dll, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-V7\Passport_x64.dll, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-V7\Source\AskToolbarInstaller-12.10.6_SGT-V7.msi, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-V7\Source\1031.mst, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-V7\Source\1033.mst, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-V7\Source\1034.mst, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-V7\Source\1036.mst, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-V7\Source\1040.mst, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-V7\Source\1041.mst, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-V7\Source\1043.mst, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-V7\Source\1045.mst, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-V7\Source\1049.mst, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-V7\Source\2070.mst, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-V7\Source\AskToolbarInstaller-12.10.3_SGT-V7.msi, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-V7\Source\AskToolbarInstaller-12.15.0_SGT-V7.msi, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-V7\Source\AskToolbarInstaller-12.15.3_SGT-V7.msi, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-V7\Source\AskToolbarInstaller-12.15.5_SGT-V7.msi, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-V7\Source\AskToolbarInstaller-12.16.0_SGT-V7.msi, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-V7\Source\AskToolbarInstaller-12.16.1_SGT-V7.msi, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-V7\Source\AskToolbarInstaller-12.16.2_SGT-V7.msi, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-V7\Source\AskToolbarInstaller-12.17.1_SGT-V7.msi, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-V7\Source\AskToolbarInstaller-12.18.0_SGT-V7.msi, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-V7\Source\AskToolbarInstaller-12.19.0_SGT-V7.msi, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-V7\Source\AskToolbarInstaller-12.21.0_SGT-V7.msi, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-V7\Source\AskToolbarInstaller-12.22.0_SGT-V7.msi, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-V7\Source\AskToolbarInstaller-12.24.1_SGT-V7.msi, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-V7\Source\AskToolbarInstaller-12.27.0_SGT-V7.msi, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-V7\Source\AskToolbarInstaller-12.29.0_SGT-V7.msi, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-V7\Source\appdata\Mozilla\Firefox\Profiles\{DefaultProfilesFolder}\extensions\toolbar_SGT-V7@apn.ask.com.xpi, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-V7\Source\common appdata\AskPartnerNetwork\Toolbar\{PartnerID}\CRX\ToolbarCR.crx, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-V7\Source\common appdata\AskPartnerNetwork\Toolbar\{PartnerID}\CRX\Update.xml, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-V7\Source\common appdata\AskPartnerNetwork\Toolbar\{PartnerID}\CRX\{Crx_Version}\Toolbar.crx, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-V7\Source\program files\AskPartnerNetwork\ChromeUtils\APNNativeMsgHost.exe, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-V7\Source\program files\AskPartnerNetwork\ChromeUtils\com.apn.native_messaging_host_aaaailpifkkekipiachodfkfmgmiapmp.json, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-V7\Source\program files\AskPartnerNetwork\Toolbar\apnmcp.exe, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-V7\Source\program files\AskPartnerNetwork\Toolbar\searchhook.dll, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-V7\Source\program files\AskPartnerNetwork\Toolbar\ServiceLocator.exe, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-V7\Source\program files\AskPartnerNetwork\Toolbar\SO.dll, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-V7\Source\program files\AskPartnerNetwork\Toolbar\toolbar.dll, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-V7\Source\program files\AskPartnerNetwork\Toolbar\Toolbar.exe, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-V7\Source\program files\AskPartnerNetwork\Toolbar\ToolbarPS.dll, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-V7\Source\program files\AskPartnerNetwork\Toolbar\toolbar_x64.dll, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-V7\Source\program files\AskPartnerNetwork\Toolbar\UpdateManager.exe, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-V7\Source\program files\AskPartnerNetwork\Toolbar\Updater\ask-search.xml, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-V7\Source\program files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-V7\Source\program files\AskPartnerNetwork\Toolbar\Updater\IDC\IdcLdr.exe, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-V7\Source\program files\AskPartnerNetwork\Toolbar\Updater\IDC\IdcLdr_x64.exe, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-V7\Source\program files\AskPartnerNetwork\Toolbar\Updater\IDC\IdcSrv.dll, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-V7\Source\program files\AskPartnerNetwork\Toolbar\Updater\IDC\IdcSrvStub.dll, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-V7\Source\program files\AskPartnerNetwork\Toolbar\Updater\IDC\IdcSrvStub_x64.dll, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-V7\Source\program files\AskPartnerNetwork\Toolbar\Updater\IDC\IdcSrv_x64.dll, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-V7\Source\program files\AskPartnerNetwork\Toolbar\Updater\{PartnerID}\config.xml, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-V7\Source\program files\AskPartnerNetwork\Toolbar\{PartnerID}\Passport.dll, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-V7\Source\program files\AskPartnerNetwork\Toolbar\{PartnerID}\Passport_x64.dll, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-V7\Source\program files\VNT\content.zip, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-V7\Source\program files\VNT\vntldr.exe, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\SGT-V7\Source\program files\VNT\vntsrv.dll, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\ask-search.xml, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.APNToolBar.Gen, C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\SGT-V7\config.xml, , [23389b4b563471c52090a166a85bf10f],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced System~Protector\Advanced System~Protector.lnk, , [0b50d511701a082eecaf25e457ac58a8],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced System~Protector\Register Advanced System~Protector.lnk, , [0b50d511701a082eecaf25e457ac58a8],
PUP.Optional.AdvancedSystemProtector.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced System~Protector\Uninstall Advanced System~Protector.lnk, , [0b50d511701a082eecaf25e457ac58a8],

Fyzické sektory: 0
(Nenalezeny žádné škodlivé položky)


(end)
Nahoru
lehyn
nováček
Příspěvky: 33
Registrován: červenec 15
Pohlaví: Nespecifikováno
Stav:
Offline

Re: pomoc.. podezření na hacknutí počítače

Příspěvekod lehyn » 26 črc 2015 12:54

HOTOVO.. CO TED´ ??
Nahoru
Uživatelský avatar
Orcus
člen Security týmu
Elite Level 10.5
Elite Level 10.5
Příspěvky: 10645
Registrován: duben 10
Bydliště: Okolo rostou 3 růže =o)
Pohlaví: Muž
Stav:
Offline

Re: pomoc.. podezření na hacknutí počítače

Příspěvekod Orcus » 26 črc 2015 13:43

Hezký, pěkná sbírka balastu. :-)

====================================================

- Spusť znovu MbAM a dej Skenovat nyní
- Po proběhnutí programu se ti objeví hláška tak klikni na „Vše do karantény(smazat vybrané)“ a na „Exportovat záznam“ a vyber „textový soubor“ , soubor nějak pojmenuj a někam ho ulož. Zkopíruj se celý obsah toho logu.

====================================================

Spusť znovu AdwCleaner (u Windows Vista či Windows7, klikni na AdwCleaner pravým a vyber „Spustit jako správce“
Klikni na „ Smazat“
Program provede opravu, po automatickém restartu neukáže log (C:\AdwCleaner [S?].txt) , jeho obsah sem celý vlož.

====================================================

Stáhni si Junkware Removal Tool by Thisisu

na svojí plochu.

Deaktivuj si svůj antivirový program. Pravým tl. myši klikni na JRT.exe a vyber „spustit jako správce“. Pro pokračování budeš vyzván ke stisknutí jakékoliv klávesy. Na nějakou klikni.
Začne skenování programu. Skenování může trvat dloho , podle množství nákaz. Po ukončení skenu se objeví log (JRT.txt) , který se uloží na ploše.
Zkopíruj sem prosím celý jeho obsah.

====================================================

Stáhni si RogueKiller
32bit.:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
64bit.:
http://www.sur-la-toile.com/RogueKiller ... lerX64.exe
na svojí plochu.
- Zavři všechny ostatní programy a prohlížeče.
- Pro OS Vista a win7 spusť program RogueKiller.exe jako správce , u XP poklepáním.
- počkej až skončí Prescan -vyhledávání škodlivých procesů.
- Zkontroluj , zda máš zaškrtnuto:
Kontrola MBR
Kontrola Faked
Antirootkit
-Potom klikni na „Prohledat“.
- Program skenuje procesy PC. Po proskenování klikni na „Zpráva“celý obsah logu sem zkopíruj.
Pokud je program blokován , zkus ho spustit několikrát. Pokud dále program nepůjde spustit a pracovat, přejmenuj ho na winlogon.exe.
Láska hřeje, ale uhlí je uhlí. :fire:


Log z HJT vkládejte do HJT sekce. Je-li moc dlouhý, rozděl jej do více zpráv.

Pár rad k bezpečnosti PC.

Po dobu mé nepřítomnosti mě zastupuje memphisto, jaro3 a Diallix

Pokud budete spokojeni , můžete podpořit naše fórum.
Nahoru
lehyn
nováček
Příspěvky: 33
Registrován: červenec 15
Pohlaví: Nespecifikováno
Stav:
Offline

Re: pomoc.. podezření na hacknutí počítače

Příspěvekod lehyn » 26 črc 2015 14:43

# AdwCleaner v4.208 - Log vytvořen 26/07/2015 v 14:37:52
# Aktualizováno 09/07/2015 by Xplode
# Databáze : 2015-07-26.1 [Server]
# Operační system : Windows 7 Home Premium Service Pack 1 (x64)
# Uživatelské jméno : F1-CARL - F1-CARL-PC
# Spuštěno z : C:\Users\F1-CARL\Desktop\AdwCleaner.exe
# Nastavení : Čištění

***** [ Služby ] *****

Služba Smazáno : APNMCP
[#] Služba Smazáno : vToolbarUpdater18.7.0

***** [ Soubory / Složky ] *****

Složka Smazáno : C:\ProgramData\apn
Složka Smazáno : C:\ProgramData\AVG SafeGuard toolbar
Složka Smazáno : C:\ProgramData\AVG Secure Search
Složka Smazáno : C:\ProgramData\Babylon
Složka Smazáno : C:\ProgramData\Partner
Složka Smazáno : C:\ProgramData\Systweak
Složka Smazáno : C:\ProgramData\Tarma Installer
Složka Smazáno : C:\ProgramData\ytd video downloader
Složka Smazáno : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ytd video downloader
Složka Smazáno : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Coupons
Složka Smazáno : C:\Program Files (x86)\AskPartnerNetwork
Složka Smazáno : C:\Program Files (x86)\AVG SafeGuard toolbar
Složka Smazáno : C:\Program Files (x86)\goforfiles
Složka Smazáno : C:\Program Files (x86)\GreenTree Applications
Složka Smazáno : C:\Program Files (x86)\Mobogenie
Složka Smazáno : C:\Program Files (x86)\Protected Search
Složka Smazáno : C:\Program Files (x86)\Red Sky
Složka Smazáno : C:\Program Files (x86)\ShopperPro
Složka Smazáno : C:\Program Files (x86)\SpeedItup Free
Složka Smazáno : C:\Program Files (x86)\Zrychleni Pocitace
Složka Smazáno : C:\Program Files (x86)\Coupons
Složka Smazáno : C:\Program Files (x86)\Common Files\AVG Secure Search
Složka Smazáno : C:\Users\F1-CARL\AppData\Local\Temp\apn
Složka Smazáno : C:\Users\F1-CARL\AppData\Local\AVG SafeGuard toolbar
Složka Smazáno : C:\Users\F1-CARL\AppData\Local\Conduit
Složka Smazáno : C:\Users\F1-CARL\AppData\Local\genienext
Složka Smazáno : C:\Users\F1-CARL\AppData\Local\Mobogenie
Složka Smazáno : C:\Users\F1-CARL\AppData\LocalLow\AVG SafeGuard toolbar
Složka Smazáno : C:\Users\F1-CARL\AppData\LocalLow\Conduit
Složka Smazáno : C:\Users\F1-CARL\AppData\LocalLow\SimplyTech
Složka Smazáno : C:\Users\F1-CARL\AppData\Roaming\Babylon
Složka Smazáno : C:\Users\F1-CARL\AppData\Roaming\ExpressFiles
Složka Smazáno : C:\Users\F1-CARL\AppData\Roaming\goforfiles
Složka Smazáno : C:\Users\F1-CARL\AppData\Roaming\Systweak
Složka Smazáno : C:\Users\F1-CARL\Documents\Mobogenie
Soubor Smazáno : C:\Windows\SpeedItup Free Setup Log.txt
Soubor Smazáno : C:\Program Files\Common Files\System\SysMenu.dll
Soubor Smazáno : C:\Program Files\Common Files\System\SysMenu64.dll
Soubor Smazáno : C:\Windows\System32\roboot64.exe
Soubor Smazáno : C:\Windows\System32\sasnative64.exe
Soubor Smazáno : C:\Users\F1-CARL\daemonprocess.txt

***** [ Naplánované úlohy ] *****

Úloha Smazáno : Express FilesUpdate
Úloha Smazáno : Go for FilesUpdate
Úloha Smazáno : RegClean Pro
Úloha Smazáno : SMupdate1
Úloha Smazáno : Advanced System~Protector
Úloha Smazáno : Advanced System~Protector_startup

***** [ Zástupci ] *****


***** [ Registry ] *****

Klíč Smazáno : HKLM\SOFTWARE\Google\Chrome\Extensions\ogccgbmabaphcakpiclgcnmcnimhokcj
Klíč Smazáno : HKCU\Software\Classes\pokki
Klíč Smazáno : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL
Klíč Smazáno : HKLM\SOFTWARE\Classes\AVG SafeGuard toolbar.BrowserWndAPI
Klíč Smazáno : HKLM\SOFTWARE\Classes\AVG SafeGuard toolbar.BrowserWndAPI.1
Klíč Smazáno : HKLM\SOFTWARE\Classes\AVG SafeGuard toolbar.PugiObj
Klíč Smazáno : HKLM\SOFTWARE\Classes\AVG SafeGuard toolbar.PugiObj.1
Klíč Smazáno : HKLM\SOFTWARE\Classes\Prod.cap
Klíč Smazáno : HKLM\SOFTWARE\Classes\protocols\handler\viprotocol
Klíč Smazáno : HKLM\SOFTWARE\Classes\S
Klíč Smazáno : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi
Klíč Smazáno : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1
Klíč Smazáno : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE
Klíč Smazáno : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd
Hodnota Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [ApnTbMon]
Hodnota Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [mobilegeni daemon]
Hodnota Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [vProt]
Klíč Smazáno : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin
Hodnota Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [YTDownloader]
Klíč Smazáno : HKLM\SOFTWARE\Classes\*\shellex\ContextMenuHandlers\SysMenuExt
Klíč Smazáno : HKLM\SOFTWARE\Classes\AppID\SysMenu.DLL
Klíč Smazáno : HKCU\Software\1856d4342daa8b40c9c882c73b68ebd6
Klíč Smazáno : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}
Klíč Smazáno : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Klíč Smazáno : HKLM\SOFTWARE\Classes\AppID\{D813D5BB-EBC7-45F9-B8A4-36A305168069}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{44CBC005-6243-4502-8A02-3A096A282664}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{933B95E2-E7B7-4AD9-B952-7AC336682AE3}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{CC99A798-FD3D-4AB4-969E-6071612524F9}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{F297534D-7B06-459D-BC19-2DD8EF69297B}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{459DD0F7-0D55-D3DC-67BC-E6BE37E9D762}
Klíč Smazáno : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Klíč Smazáno : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Klíč Smazáno : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Klíč Smazáno : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Klíč Smazáno : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}
Klíč Smazáno : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Klíč Smazáno : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}
Klíč Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}
Klíč Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{CC99A798-FD3D-4AB4-969E-6071612524F9}
Klíč Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{6F6A5334-78E9-4D9B-8182-8B41EA8C39EF}
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC}
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6978F29A-3493-40B2-8CDC-9C13A02F85A4}
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CFD485F0-96BD-47CD-BB6D-CD7DDA95F102}
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D7949A66-D936-4028-9552-14F7DC50F38D}
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EEE6C367-6118-11DC-9C72-001320C79847}
Hodnota Smazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{95B7759C-8C7F-4BF1-B163-73684A933233}]
Hodnota Smazáno : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{32099AAC-C132-4136-9E9A-4E364A424E17}]
Klíč Smazáno : [x64] HKLM\SOFTWARE\Classes\CLSID\{A75BE48D-BF58-4A8B-B96C-F9A09DFB9844}
Klíč Smazáno : [x64] HKLM\SOFTWARE\Classes\CLSID\{020B1D4B-5738-4C77-9E19-4F173DD9B486}
Klíč Smazáno : [x64] HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Klíč Smazáno : [x64] HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Klíč Smazáno : [x64] HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Klíč Smazáno : [x64] HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Hodnota Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{32099AAC-C132-4136-9E9A-4E364A424E17}]
Klíč Smazáno : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
Klíč Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6978F29A-3493-40B2-8CDC-9C13A02F85A4}
Klíč Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D7949A66-D936-4028-9552-14F7DC50F38D}
Klíč Smazáno : HKCU\Software\APN PIP
Klíč Smazáno : HKCU\Software\AVG SafeGuard toolbar
Klíč Smazáno : HKCU\Software\Conduit
Klíč Smazáno : HKCU\Software\CToolbar
Klíč Smazáno : HKCU\Software\ExpressFiles
Klíč Smazáno : HKCU\Software\GoforFiles
Klíč Smazáno : HKCU\Software\PIP
Klíč Smazáno : HKCU\Software\Softonic
Klíč Smazáno : HKCU\Software\systweak
Klíč Smazáno : HKCU\Software\DownLite
Klíč Smazáno : HKCU\Software\Avg Secure Update
Klíč Smazáno : HKCU\Software\AppDataLow\Software\Conduit
Klíč Smazáno : HKCU\Software\AppDataLow\Software\simplytech
Klíč Smazáno : HKLM\SOFTWARE\AVG SafeGuard toolbar
Klíč Smazáno : HKLM\SOFTWARE\AVG Security Toolbar
Klíč Smazáno : HKLM\SOFTWARE\Babylon
Klíč Smazáno : HKLM\SOFTWARE\Conduit
Klíč Smazáno : HKLM\SOFTWARE\CToolbar
Klíč Smazáno : HKLM\SOFTWARE\ExpressFiles
Klíč Smazáno : HKLM\SOFTWARE\GoforFiles
Klíč Smazáno : HKLM\SOFTWARE\PIP
Klíč Smazáno : HKLM\SOFTWARE\systweak
Klíč Smazáno : HKU\.DEFAULT\Software\AVG SafeGuard toolbar
Klíč Smazáno : HKU\.DEFAULT\Software\Avg Secure Update
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{c3e85ee9-5892-4142-b537-bceb3dac4c3d}
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG SafeGuard toolbar
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{1a413f37-ed88-4fec-9666-5c48dc4b7bb7}
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{EE171732-BEB4-4576-887D-CB62727F01CA}
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Coupon Printer for Windows5.0.0.0
Klíč Smazáno : [x64] HKLM\SOFTWARE\Tarma Installer
Klíč Smazáno : [x64] HKLM\SOFTWARE\YTDownloader
Klíč Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}
Klíč Smazáno : HKLM\SOFTWARE\Classes\Installer\Features\9EE58E3C298524145B73CBBED3CAC4D3
Klíč Smazáno : HKLM\SOFTWARE\Classes\Installer\Products\9EE58E3C298524145B73CBBED3CAC4D3
Klíč Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\02F47BF73B948514FAACADD8CBBDF37D
Klíč Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\080D9F5E1E95FEE4794CE438E635239E
Klíč Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1E264E0A5959A1C46BA9175A878B12EA
Klíč Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2E6768B6932D112438F047C54D180635
Klíč Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\351716A953E21214898904032EAE2E81
Klíč Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\397C771A7BCAC904697C3EC629ED33ED
Klíč Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\69D6A6B2ED56AF24EA6335EAD6E91CA4
Klíč Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7FFA128C2B0FF414D805FC5627883401
Klíč Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\86EDC790504E1834DBC20C9A04328FD2
Klíč Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\97C3D0F82E712E241A2F969F45E3351C
Klíč Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\98CC8BF5A4A6E6C4ABF7051DDAB8B058
Klíč Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9E7F556BF224D804D96A96F0F6344789
Klíč Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A189D17A469616C4688D23E192996267
Klíč Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BF4F885EDEE45644EB1E0C99E0162399
Klíč Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CE21F3FD57B244142880EF15A165A156
Klíč Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D15DAF33C220F91468A1D7D57C31ACD7
Klíč Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D3BA76A44C779424889063D5098ED2D6
Klíč Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D6D0EB9FDBD90C04D92A7E729058F10D
Klíč Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E4748F9A4181FCE46A23C13B517B9420
Klíč Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\9EE58E3C298524145B73CBBED3CAC4D3
Klíč Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\A97CEC23332751B47BA4B95BAA50C9D0
Klíč Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\7AB5857A57A0687786597A857BFFFFFF

***** [ Prohlížeče ] *****

-\\ Internet Explorer v11.0.9600.17909

Nastavení Obnoveno : HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls [Tabs]

-\\ Google Chrome v


-\\ Opera v30.0.1835.125


*************************

AdwCleaner[R0].txt - [26254 bytů] - [26/07/2015 12:14:40]
AdwCleaner[R1].txt - [15285 bytů] - [26/07/2015 14:36:34]
AdwCleaner[S0].txt - [14121 bytů] - [26/07/2015 14:37:52]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [14180 bytů] ##########
Nahoru
lehyn
nováček
Příspěvky: 33
Registrován: červenec 15
Pohlaví: Nespecifikováno
Stav:
Offline

Re: pomoc.. podezření na hacknutí počítače

Příspěvekod lehyn » 26 črc 2015 14:54

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 7.5.1 (07.16.2015:1)
OS: Windows 7 Home Premium x64
Ran by F1-CARL on ne 26.07.2015 at 14:45:35,06
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Tasks



~~~ Registry Values

Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-19\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-20\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-21-645724224-2103063020-886836242-1000\Software\Microsoft\Internet Explorer\Main\\Start Page



~~~ Registry Keys



~~~ Files



~~~ Folders

Successfully deleted: [Folder] C:\ProgramData\google
Successfully deleted: [Folder] C:\Users\F1-CARL\Appdata\Local\crashrpt



~~~ Chrome


[C:\Users\F1-CARL\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - default search provider reset

[C:\Users\F1-CARL\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - Extensions Deleted:

[C:\Users\F1-CARL\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - default search provider reset

[C:\Users\F1-CARL\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - Extensions Deleted:





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on ne 26.07.2015 at 14:52:39,71
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Nahoru
lehyn
nováček
Příspěvky: 33
Registrován: červenec 15
Pohlaví: Nespecifikováno
Stav:
Offline

Re: pomoc.. podezření na hacknutí počítače

Příspěvekod lehyn » 26 črc 2015 15:09

RogueKiller V10.9.3.0 [Jul 21 2015] by Adlice Software
mail : http://www.adlice.com/contact/
Feedback : http://forum.adlice.com
Webová stránka : http://www.adlice.com/softwares/roguekiller/
Blog : http://www.adlice.com

Operační systém : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Spuštěno : Normální režim
Uživatel : F1-CARL [Práva správce]
Started from : C:\Users\F1-CARL\Desktop\RogueKiller.exe
Mód : Prohledat -- Datum : 07/26/2015 15:06:27

¤¤¤ Procesy : 0 ¤¤¤

¤¤¤ Registry : 8 ¤¤¤
[PUM.HomePage] (X64) HKEY_USERS\S-1-5-21-645724224-2103063020-886836242-1000\Software\Microsoft\Internet Explorer\Main | Default_Page_URL : http://homepage.acer.com/rdr.aspx?b=ACA ... 5i48m2v774 -> Nalezeno
[PUM.HomePage] (X86) HKEY_USERS\S-1-5-21-645724224-2103063020-886836242-1000\Software\Microsoft\Internet Explorer\Main | Default_Page_URL : http://homepage.acer.com/rdr.aspx?b=ACA ... 5i48m2v774 -> Nalezeno
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters | DhcpNameServer : 10.0.0.138 ([(Private Address) (XX)]) -> Nalezeno
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters | DhcpNameServer : 10.0.0.138 ([(Private Address) (XX)]) -> Nalezeno
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet002\Services\Tcpip\Parameters | DhcpNameServer : 10.0.0.138 ([(Private Address) (XX)]) -> Nalezeno
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{2A337A60-5207-4762-86D7-2C696B868A35} | DhcpNameServer : 10.0.0.138 ([(Private Address) (XX)]) -> Nalezeno
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters\Interfaces\{2A337A60-5207-4762-86D7-2C696B868A35} | DhcpNameServer : 10.0.0.138 ([(Private Address) (XX)]) -> Nalezeno
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet002\Services\Tcpip\Parameters\Interfaces\{2A337A60-5207-4762-86D7-2C696B868A35} | DhcpNameServer : 10.0.0.138 ([(Private Address) (XX)]) -> Nalezeno

¤¤¤ Úlohy : 0 ¤¤¤

¤¤¤ Soubory : 0 ¤¤¤

¤¤¤ Soubor HOSTS : 0 ¤¤¤

¤¤¤ Antirootkit : 0 (Driver: Nenahrán [0xc000036b]) ¤¤¤

¤¤¤ Webové prohlížeče : 0 ¤¤¤

¤¤¤ Kontrola MBR : ¤¤¤
+++++ PhysicalDrive0: Hitachi HTS545050B9A300 +++++
--- User ---
[MBR] 0b49a1e0f289972964b3dbbee70aa911
[BSP] 0d269c411a2fb64bd8c5357cdbeecfdb : Windows Vista/7/8|VT.Unknown MBR Code
Partition table:
0 - [XXXXXX] ACER (0x27) [VISIBLE] Offset (sectors): 2048 | Size: 12288 MB
1 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 25167872 | Size: 100 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
2 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 25372672 | Size: 464550 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
User = LL1 ... OK
User = LL2 ... OK
Nahoru
Zamčeno

Zpět na “HiJackThis”

Kdo je online

Uživatelé prohlížející si toto fórum: Žádní registrovaní uživatelé a 122 hostů