Prosím o kontrolu logu - zpomalený, přehřívající se a zasekaný ntb Vyřešeno

[Yanyc]

Ahojte,

prosím o kontrolu. Ntb se strašně přehřívá, vypíná, vše se otvírá pomalu a dost to trvá. Na C nemám už moc místa, nevím co bych mohla ještě vymazat kromě fotek. (Což samozřejmě můžu, jen na cestách mám pouze jeden ex. disk, tak to nechci nechávat jen tam. Děkuji za pomoc


Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:31:39, on 6.9.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17910)

FIREFOX: 40.0.3 (x86 cs)
Boot mode: Normal

Running processes:
C:\Users\Yanycca\AppData\Local\Google\Update\GoogleUpdate.exe
C:\Users\Yanycca\AppData\Local\Programs\Google\Google Photos Backup\Google Photos Backup.exe
C:\Program Files\Zoner\Photo Studio 15\Program32\ZPSTray.exe
C:\ProgramData\{b08bb391-6254-1d44-b08b-bb391625ce45}\superoptimizersetup.exe
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\Microsoft Office\Office12\WINWORD.EXE
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Picasa3\PicasaPhotoViewer.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Users\Yanycca\Desktop\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.delta-homes.com/?type=hp&ts= ... S_6VDCW339
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.delta-homes.com/web/?type ... VDCW339&q={searchTerms}
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.delta-homes.com/web/?type ... VDCW339&q={searchTerms}
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.delta-homes.com/?type=hp&ts= ... S_6VDCW339
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.delta-homes.com/?type=hp&ts= ... S_6VDCW339
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.mystartsearch.com/web/?type= ... VDCW339&q={searchTerms}
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.mystartsearch.com/web/?type= ... VDCW339&q={searchTerms}
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.delta-homes.com/?type=hp&ts= ... S_6VDCW339
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigURL = file://C:\Program Files (x86)\ConstaSurf\bin\Pac8807.js
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O1 - Hosts: ::1 localhost
O2 - BHO: saLEprIIzese - {6EE2F4BF-7A3F-4ADA-BA9F-4C0F2372C365} - C:\Program Files (x86)\saLEprIIzese\jn9Er9QO5IGJ6w.dll
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
O4 - HKLM\..\Run: [PDF Complete] C:\Program Files (x86)\PDF Complete\pdfsty.exe
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [SafeQ Client] "C:\Program Files (x86)\Y Soft\SafeQ Client\Client\SafeQ Client.exe"
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [HP Quick Launch] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
O4 - HKLM\..\Run: [HPOSD] C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [AdobeCS5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QT Lite\QTTask.exe" -atboottime
O4 - HKCU\..\Run: [Facebook Update] "C:\Users\Yanycca\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
O4 - HKCU\..\Run: [Google Update] "C:\Users\Yanycca\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [Google Photos Backup] "C:\Users\Yanycca\AppData\Local\Programs\Google\Google Photos Backup\Google Photos Backup.exe" /autostart
O4 - HKCU\..\Run: [Zoner Photo Studio Autoupdate] C:\Program Files\Zoner\Photo Studio 15\Program32\ZPSTRAY.EXE
O4 - Startup: superoptimizersetup.lnk = C:\ProgramData\{b08bb391-6254-1d44-b08b-bb391625ce45}\superoptimizersetup.exe
O4 - Global Startup: CineForm Status.lnk = C:\Program Files (x86)\CineForm\Tools\GoProCineFormStatusViewer.exe
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-103 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-102 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: (no name) - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
O9 - Extra 'Tools' menuitem: Send by Bluetooth to - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O20 - AppInit_DLLs: c:\progra~3\keepnb~1\keepnb~1.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Advanced SystemCare Service 5 (AdvancedSystemCareService5) - IObit - C:\Program Files (x86)\IObit\Advanced SystemCare 5\ASCService.exe
O23 - Service: Andrea RT Filters Service (AERTFilters) - Andrea Electronics Corporation - C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Apple Mobile Device Service - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Atheros Bt&Wlan Coex Agent - Atheros - C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
O23 - Service: AtherosSvc - Atheros Commnucations - C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
O23 - Service: Avast Antivirus (avast! Antivirus) - Avast Software s.r.o. - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP Support Assistant Service - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
O23 - Service: HP Wireless Assistant Service - Hewlett-Packard Company - C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe
O23 - Service: HP Software Framework Service (hpqwmiex) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
O23 - Service: HPWMISVC - Hewlett-Packard Development Company, L.P. - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
O23 - Service: Úložná technologie Intel(R) Rapid (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: IconMan_R - Realsil Microelectronics Inc. - C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: IHProtect Service - XTab system - C:\Program Files (x86)\XTab\ProtectService.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Norton Internet Security (NIS) - Symantec Corporation - C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\ccSvcHst.exe
O23 - Service: PDF Document Manager (pdfcDispatcher) - PDF Complete Inc - C:\Program Files (x86)\PDF Complete\pdfsvc.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management & Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: XobniService - Xobni Corporation - C:\Program Files (x86)\Xobni\XobniService.exe

--
End of file - 16096 bytes

[Reklama]

[jerabina]

Je tam toho dost.

Na systémovém disku C by mělo být volných alespoň 50GB místa.

Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected. Poté klikni na Main (hlavní stránku ) a klikni na Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranění historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit dočasné soubory Windows, vysypat koš atd.

- Pokud používáš jen Google Chrome , tak ATF nemusíš použít.

===================================================

Stáhni si TFC
Otevři soubor a zavři všechny ostatní okna, Klikni na Start k zahájení procesu. Program by neměl trvat dlouho.
Poté by se měl PC restartovat, pokud ne , proveď sám.

===================================================

Stáhni AdwCleaner (by Xplode)

Ulož si ho na svojí plochu
Ukonči všechny programy , okna a prohlížeče
Spusť program poklepáním a klikni na „Prohledat-Scan“
Po skenu se objeví log ( jinak je uložen systémovem disku jako AdwCleaner[R?].txt), jeho obsah sem celý vlož.

===================================================

Stáhni si Malwarebytes' Anti-Malware
- Při instalaci odeber zatržítko u „Povolit bezplatnou zkušební verzi Malwarebytes' Anti-Malware Premium“
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Aktualizace Malwarebytes' Anti-Malware a Spustit aplikaci Malwarebytes' Anti-Malware, pokud jo tak klikni na tlačítko konec
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a klikni na Skenovat nyní a
- po proběhnutí programu se ti objeví hláška vpravo dole tak klikni na Kopírovat do schránky a a vlož sem celý log.

- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).

Pokud budou problémy , spusť v nouz. režimu.

[Yanyc]

# AdwCleaner v5.005 - Logfile created 06/09/2015 at 19:41:33
# Updated 31/08/2015 by Xplode
# Database : 2015-09-04.4 [Server]
# Operating system : Windows 7 Home Premium Service Pack 1 (x64)
# Username : Yanycca - YANYCCA-HP
# Running from : C:\Users\Yanycca\Desktop\AdwCleaner.exe
# Option : Scan
# Support : http://toolslib.net/forum

***** [ Services ] *****

Service Found : IHProtect Service

***** [ Folders ] *****

Folder Found : C:\Program Files (x86)\XTab
Folder Found : C:\Program Files (x86)\saLEprIIzese
Folder Found : C:\ProgramData\WindowsMangerProtect
Folder Found : C:\ProgramData\IHProtectUpDate
Folder Found : C:\ProgramData\3429229179002711462
Folder Found : C:\ProgramData\b9db3071000011d5
Folder Found : C:\ProgramData\{6ecc695d-aa65-e263-6ecc-c695daa6a576}
Folder Found : C:\ProgramData\{a4f45e19-3b51-822c-a4f4-45e193b57864}
Folder Found : C:\ProgramData\{b08bb391-6254-1d44-b08b-bb391625ce45}
Folder Found : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PepperZip
Folder Found : C:\Users\Yanycca\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghmjkjhkpmbkkkdegidkaelddbhjmmgi
Folder Found : C:\Users\Yanycca\AppData\Roaming\Mozilla\Firefox\Profiles\pl7hbiog.default-1412367705961\Extensions\6jN@TJF.edu

***** [ Files ] *****

File Found : C:\Users\Yanycca\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_wlogin.icq.com_0.localstorage-journal
File Found : C:\Users\Yanycca\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.ask.com_0.localstorage-journal
File Found : C:\Users\Yanycca\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.delta-homes.com_0.localstorage-journal
File Found : C:\Users\Yanycca\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.mystartsearch.com_0.localstorage-journal
File Found : C:\Users\Yanycca\AppData\Roaming\Mozilla\Firefox\Profiles\pl7hbiog.default-1412367705961\invalidprefs.js
File Found : C:\Users\Yanycca\AppData\Roaming\Mozilla\Firefox\Profiles\pl7hbiog.default-1412367705961\searchplugins\delta-homes.xml
File Found : C:\Windows\Sysnative\roboot64.exe

***** [ Shortcuts ] *****

Shortcut Infected : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games\Crush the Castle 2.lnk ( hxxp://www.delta-homes.com/?type=sc&ts= ... S_6VDCW339 )

***** [ Scheduled tasks ] *****

Task Found : ASP
Task Found : PostPoneInstall
Task Found : Run_Bobby_Browser

***** [ Registry ] *****

Key Found : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WindowsMangerProtect
Key Found : HKCU\Software\Classes\keepmysearch
Key Found : HKCU\Software\Mozilla\Extends
Key Found : HKCU\Software\Classes\MF
Key Found : HKLM\SOFTWARE\Classes\P6EE2F4BF_7A3F_4ADA_BA9F_4C0F2372C365_.P6EE2F4BF_7A3F_4ADA_BA9F_4C0F2372C365_
Key Found : HKLM\SOFTWARE\Classes\P6EE2F4BF_7A3F_4ADA_BA9F_4C0F2372C365_.P6EE2F4BF_7A3F_4ADA_BA9F_4C0F2372C365_.9
Value Found : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [searchengine@gmail.com]
Value Found : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [sweetsearch@gmail.com]
Value Found : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [quick_searchff@gmail.com]
Key Found : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{459DD0F7-0D55-D3DC-67BC-E6BE37E9D762}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{51D26BB4-4D2C-4AE4-9873-5FF41B6DED1F}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{6EE2F4BF-7A3F-4ADA-BA9F-4C0F2372C365}
Key Found : HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{7D3C47ED-E0BE-4940-9DDA-A7A097AEBD88}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{A993BCA4-1E58-474D-A36E-057CC6AC9CE5}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EE2F4BF-7A3F-4ADA-BA9F-4C0F2372C365}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{51D26BB4-4D2C-4AE4-9873-5FF41B6DED1F}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{51D26BB4-4D2C-4AE4-9873-5FF41B6DED1F}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{6EE2F4BF-7A3F-4ADA-BA9F-4C0F2372C365}
Value Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{6EE2F4BF-7A3F-4ADA-BA9F-4C0F2372C365}]
Key Found : [x64] HKLM\SOFTWARE\Classes\CLSID\{6EE2F4BF-7A3F-4ADA-BA9F-4C0F2372C365}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}
Key Found : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EE2F4BF-7A3F-4ADA-BA9F-4C0F2372C365}
Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EC29EDF6-AD3C-4E1C-A087-D6CB81400C43}
Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}
Key Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EC29EDF6-AD3C-4E1C-A087-D6CB81400C43}
Key Found : HKU\.DEFAULT\Software\AskPartnerNetwork
Key Found : HKU\.DEFAULT\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
Key Found : HKU\.DEFAULT\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}
Key Found : HKCU\Software\Conduit
Key Found : HKCU\Software\systweak
Key Found : HKCU\Software\TutoTag
Key Found : HKCU\Software\BoBrowser
Key Found : HKCU\Software\Super Optimizer
Key Found : HKCU\Software\DownLite
Key Found : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
Key Found : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Key Found : HKLM\SOFTWARE\{6791A2F3-FC80-475C-A002-C014AF797E9C}
Key Found : HKLM\SOFTWARE\Conduit
Key Found : HKLM\SOFTWARE\delta-homesSoftware
Key Found : HKLM\SOFTWARE\SupDp
Key Found : HKLM\SOFTWARE\SupTab
Key Found : HKLM\SOFTWARE\systweak
Key Found : HKLM\SOFTWARE\Tutorials
Key Found : HKLM\SOFTWARE\Clara
Key Found : HKLM\SOFTWARE\mystartsearchSoftware
Key Found : HKLM\SOFTWARE\IHProtect
Key Found : HKLM\SOFTWARE\FFPluginHp
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{450F78BE-2B5E-C81D-0656-897759985405}
Key Found : [x64] HKCU\Software\Conduit
Key Found : [x64] HKCU\Software\systweak
Key Found : [x64] HKCU\Software\TutoTag
Key Found : [x64] HKCU\Software\BoBrowser
Key Found : [x64] HKCU\Software\Super Optimizer
Key Found : [x64] HKCU\Software\DownLite
Data Found : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page] - hxxp://www.delta-homes.com/?type=hp&ts= ... S_6VDCW339
Data Found : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL] - hxxp://www.delta-homes.com/?type=hp&ts= ... S_6VDCW339
Data Found : HKCU\Software\Microsoft\Internet Explorer\Main [Search Page] - hxxp://search.delta-homes.com/web/?type ... VDCW339&q={searchTerms}
Data Found : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Search_URL] - hxxp://search.delta-homes.com/web/?type ... VDCW339&q={searchTerms}
Data Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL] - hxxp://www.mystartsearch.com/web/?type= ... VDCW339&q={searchTerms}
Data Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL] - hxxp://www.delta-homes.com/?type=hp&ts= ... S_6VDCW339
Data Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page] - hxxp://www.delta-homes.com/?type=hp&ts= ... S_6VDCW339
Data Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page] - hxxp://www.mystartsearch.com/web/?type= ... VDCW339&q={searchTerms}
Data Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL] - hxxp://www.mystartsearch.com/web/?type= ... VDCW339&q={searchTerms}
Data Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL] - hxxp://www.delta-homes.com/?type=hp&ts= ... S_6VDCW339
Data Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page] - hxxp://www.delta-homes.com/?type=hp&ts= ... S_6VDCW339
Data Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page] - hxxp://www.mystartsearch.com/web/?type= ... VDCW339&q={searchTerms}
Data Found : HKU\S-1-5-21-699516785-416719656-4019490680-1000\Software\Microsoft\Internet Explorer\Main [Start Page] - hxxp://www.delta-homes.com/?type=hp&ts= ... S_6VDCW339
Data Found : HKU\S-1-5-21-699516785-416719656-4019490680-1000\Software\Microsoft\Internet Explorer\Main [Default_Page_URL] - hxxp://www.delta-homes.com/?type=hp&ts= ... S_6VDCW339
Data Found : HKU\S-1-5-21-699516785-416719656-4019490680-1000\Software\Microsoft\Internet Explorer\Main [Search Page] - hxxp://search.delta-homes.com/web/?type ... VDCW339&q={searchTerms}
Data Found : HKU\S-1-5-21-699516785-416719656-4019490680-1000\Software\Microsoft\Internet Explorer\Main [Default_Search_URL] - hxxp://search.delta-homes.com/web/?type ... VDCW339&q={searchTerms}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{012E1000-F331-11DB-8314-0800200C9A66}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}
Data Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [DefaultScope] - {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{23CD58F5-757E-49C0-BFD0-5EE9507885FD}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{E733165D-CBCF-4FDA-883E-ADEF965B476C}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{ec29edf6-ad3c-4e1c-a087-d6cb81400c43}
Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{012E1000-F331-11DB-8314-0800200C9A66}
Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}
Data Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes [DefaultScope] - {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}
Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{23CD58F5-757E-49C0-BFD0-5EE9507885FD}
Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}
Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{E733165D-CBCF-4FDA-883E-ADEF965B476C}
Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{ec29edf6-ad3c-4e1c-a087-d6cb81400c43}
Key Found : HKU\S-1-5-21-699516785-416719656-4019490680-1000\Software\Microsoft\Internet Explorer\SearchScopes\{012E1000-F331-11DB-8314-0800200C9A66}
Key Found : HKU\S-1-5-21-699516785-416719656-4019490680-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
Key Found : HKU\S-1-5-21-699516785-416719656-4019490680-1000\Software\Microsoft\Internet Explorer\SearchScopes\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}
Data Found : HKU\S-1-5-21-699516785-416719656-4019490680-1000\Software\Microsoft\Internet Explorer\SearchScopes [DefaultScope] - {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}
Key Found : HKU\S-1-5-21-699516785-416719656-4019490680-1000\Software\Microsoft\Internet Explorer\SearchScopes\{23CD58F5-757E-49C0-BFD0-5EE9507885FD}
Key Found : HKU\S-1-5-21-699516785-416719656-4019490680-1000\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Key Found : HKU\S-1-5-21-699516785-416719656-4019490680-1000\Software\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}
Key Found : HKU\S-1-5-21-699516785-416719656-4019490680-1000\Software\Microsoft\Internet Explorer\SearchScopes\{E733165D-CBCF-4FDA-883E-ADEF965B476C}
Key Found : HKU\S-1-5-21-699516785-416719656-4019490680-1000\Software\Microsoft\Internet Explorer\SearchScopes\{ec29edf6-ad3c-4e1c-a087-d6cb81400c43}
Data Found : HKLM\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command [] - C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.mystartsearch.com/?type=sc&t ... S_6VDCW339

***** [ Web browsers ] *****

[C:\Users\Yanycca\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] Found : cyberlinkpowerdirector.en.softonic.com
[C:\Users\Yanycca\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Startup_URLs] Found : hxxp://www.delta-homes.com/?type=hp&ts= ... S_6VDCW339
[C:\Users\Yanycca\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Default_Search_Provider] Found : hxxp://search.delta-homes.com/webfavicon.ico
[C:\Users\Yanycca\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Found : ghmjkjhkpmbkkkdegidkaelddbhjmmgi

########## EOF - C:\AdwCleaner\AdwCleaner[S4].txt - [14309 bytes] ##########

[jaro3]

A Malwarebytes??

Spusť znovu AdwCleaner (u Windows Vista či Windows7, klikni na AdwCleaner pravým a vyber „Spustit jako správce“
klikni na „Prohledat-Scan“, po prohledání klikni na „ Vymazat-Clean“

Program provede opravu, po automatickém restartu neukáže log (C:\AdwCleaner [S?].txt) , jeho obsah sem celý vlož.

Stáhni si Junkware Removal Tool by Thisisu
http://www.bleepingcomputer.com/downloa ... oval-tool/
na svojí plochu.

Deaktivuj si svůj antivirový program. Pravým tl. myši klikni na JRT.exe a vyber „spustit jako správce“. Pro pokračování budeš vyzván ke stisknutí jakékoliv klávesy. Na nějakou klikni.
Začne skenování programu. Skenování může trvat dloho , podle množství nákaz. Po ukončení skenu se objeví log (JRT.txt) , který se uloží na ploše.
Zkopíruj sem prosím celý jeho obsah.

[Yanyc]

Pardon, myslela jsem si, že už jsem to poslala, ale jak říkám, jede to hodně pomalu a za tu dobu se už několikrát přehřál, takže mi to dost trvá... :(
Malwarebytes Anti-Malware
www.malwarebytes.org

Datum skenování: 6.9.2015
Čas skenování: 19:55
Protokol:
Správce: Ano

Verze: 2.1.8.1057
Databáze malwaru: v2015.09.06.05
Databáze rootkitů: v2015.06.02.01
Licence: Zkušební verze
Ochrana proti malwaru: Zapnuto
Ochrana proti škodlivým webovým stránkám: Zapnuto
Ochrana programu: Vypnuto

OS: Windows 7 Service Pack 1
CPU: x64
Souborový systém: NTFS
Uživatel: Yanycca

Typ skenu: Sken hrozeb
Výsledek: Dokončeno
Prohledaných objektů: 385535
Uplynulý čas: 54 min, 25 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Vypnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto

Procesy: 2
PUP.Optional.SuperOptimizer, C:\ProgramData\{b08bb391-6254-1d44-b08b-bb391625ce45}\superoptimizersetup.exe, 2488, , [f1bcf9337a11a88e4cd498275da415eb]
PUP.Optional.XTab, C:\Program Files (x86)\XTab\ProtectService.exe, 2976, , [337a71bbdbb0ad89d314ccf3d8297a86]

Moduly: 2
PUP.Optional.XTab, C:\Program Files (x86)\XTab\msvcp110.dll, , [7f2e1814f893b18521c2e4d8897b39c7],
PUP.Optional.XTab, C:\Program Files (x86)\XTab\msvcr110.dll, , [7f2e1814f893b18521c2e4d8897b39c7],

Klíče registru: 59
PUP.Optional.XTab, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\IHProtect Service, , [337a71bbdbb0ad89d314ccf3d8297a86],
PUP.Optional.MultiPlug.BHO64, HKLM\SOFTWARE\CLASSES\CLSID\{6EE2F4BF-7A3F-4ADA-BA9F-4C0F2372C365}, , [cae3dc509bf074c2b77e10ad21e0867a],
PUP.Optional.MultiPlug.BHO64, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{6EE2F4BF-7A3F-4ADA-BA9F-4C0F2372C365}, , [cae3dc509bf074c2b77e10ad21e0867a],
PUP.Optional.MultiPlug.BHO64, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{6EE2F4BF-7A3F-4ADA-BA9F-4C0F2372C365}, , [cae3dc509bf074c2b77e10ad21e0867a],
PUP.Optional.MultiPlug.BHO64, HKLM\SOFTWARE\CLASSES\P6EE2F4BF_7A3F_4ADA_BA9F_4C0F2372C365_.P6EE2F4BF_7A3F_4ADA_BA9F_4C0F2372C365_, , [cae3dc509bf074c2b77e10ad21e0867a],
PUP.Optional.MultiPlug.BHO64, HKLM\SOFTWARE\CLASSES\P6EE2F4BF_7A3F_4ADA_BA9F_4C0F2372C365_.P6EE2F4BF_7A3F_4ADA_BA9F_4C0F2372C365_.9, , [cae3dc509bf074c2b77e10ad21e0867a],
PUP.Optional.MultiPlug.BHO64, HKLM\SOFTWARE\WOW6432NODE\CLASSES\P6EE2F4BF_7A3F_4ADA_BA9F_4C0F2372C365_.P6EE2F4BF_7A3F_4ADA_BA9F_4C0F2372C365_, , [cae3dc509bf074c2b77e10ad21e0867a],
PUP.Optional.MultiPlug.BHO64, HKLM\SOFTWARE\WOW6432NODE\CLASSES\P6EE2F4BF_7A3F_4ADA_BA9F_4C0F2372C365_.P6EE2F4BF_7A3F_4ADA_BA9F_4C0F2372C365_.9, , [cae3dc509bf074c2b77e10ad21e0867a],
PUP.Optional.MultiPlug.BHO64, HKLM\SOFTWARE\CLASSES\WOW6432NODE\P6EE2F4BF_7A3F_4ADA_BA9F_4C0F2372C365_.P6EE2F4BF_7A3F_4ADA_BA9F_4C0F2372C365_, , [cae3dc509bf074c2b77e10ad21e0867a],
PUP.Optional.MultiPlug.BHO64, HKLM\SOFTWARE\CLASSES\WOW6432NODE\P6EE2F4BF_7A3F_4ADA_BA9F_4C0F2372C365_.P6EE2F4BF_7A3F_4ADA_BA9F_4C0F2372C365_.9, , [cae3dc509bf074c2b77e10ad21e0867a],
PUP.Optional.MultiPlug.BHO64, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{6EE2F4BF-7A3F-4ADA-BA9F-4C0F2372C365}, , [cae3dc509bf074c2b77e10ad21e0867a],
PUP.Optional.MultiPlug.BHO64, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{6EE2F4BF-7A3F-4ADA-BA9F-4C0F2372C365}, , [cae3dc509bf074c2b77e10ad21e0867a],
PUP.Optional.MultiPlug.BHO64, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{6EE2F4BF-7A3F-4ADA-BA9F-4C0F2372C365}, , [cae3dc509bf074c2b77e10ad21e0867a],
PUP.Optional.MultiPlug.BHO64, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{6EE2F4BF-7A3F-4ADA-BA9F-4C0F2372C365}, , [cae3dc509bf074c2b77e10ad21e0867a],
PUP.Optional.MultiPlug.BHO64, HKLM\SOFTWARE\CLASSES\CLSID\{6EE2F4BF-7A3F-4ADA-BA9F-4C0F2372C365}\INPROCSERVER32, , [cae3dc509bf074c2b77e10ad21e0867a],
PUP.Optional.LuckyTab, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{51D26BB4-4D2C-4AE4-9873-5FF41B6DED1F}, , [901dc369206b0036ae45815914ee8b75],
PUP.Optional.LuckyTab, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{51D26BB4-4D2C-4AE4-9873-5FF41B6DED1F}, , [901dc369206b0036ae45815914ee8b75],
PUP.Optional.LuckyTab, HKLM\SOFTWARE\CLASSES\TYPELIB\{7D3C47ED-E0BE-4940-9DDA-A7A097AEBD88}, , [901dc369206b0036ae45815914ee8b75],
PUP.Optional.LuckyTab, HKLM\SOFTWARE\CLASSES\INTERFACE\{917CAAE9-DD47-4025-936E-1414F07DF5B8}, , [901dc369206b0036ae45815914ee8b75],
PUP.Optional.LuckyTab, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{917CAAE9-DD47-4025-936E-1414F07DF5B8}, , [901dc369206b0036ae45815914ee8b75],
PUP.Optional.LuckyTab, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{917CAAE9-DD47-4025-936E-1414F07DF5B8}, , [901dc369206b0036ae45815914ee8b75],
PUP.Optional.LuckyTab, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{7D3C47ED-E0BE-4940-9DDA-A7A097AEBD88}, , [901dc369206b0036ae45815914ee8b75],
PUP.Optional.LuckyTab, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{7D3C47ED-E0BE-4940-9DDA-A7A097AEBD88}, , [901dc369206b0036ae45815914ee8b75],
PUP.Optional.LuckyTab, HKU\S-1-5-21-699516785-416719656-4019490680-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{51D26BB4-4D2C-4AE4-9873-5FF41B6DED1F}, , [901dc369206b0036ae45815914ee8b75],
PUP.Optional.LuckyTab, HKU\S-1-5-21-699516785-416719656-4019490680-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{51D26BB4-4D2C-4AE4-9873-5FF41B6DED1F}, , [901dc369206b0036ae45815914ee8b75],
PUP.Optional.MultiPlug, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{450F78BE-2B5E-C81D-0656-897759985405}, , [a20bd7555635c175759b407d4db4ca36],
PUP.Optional.RegCleanerPro, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\ASP, , [d7d6de4ea9e29e9831650f15b44f9b65],
PUP.Optional.BoBrowser, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\Run_Bobby_Browser, , [3479d9532e5daa8cb354dca1c34121df],
PUM.Security.Hijack.DisableChromeUpdates, HKLM\SOFTWARE\POLICIES\GOOGLE\UPDATE, , [5f4e25079fecbf771a1dd897679d32ce],
PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\delta-homesSoftware, , [cce1cf5df596ce68393449ec13f0ca36],
PUP.Optional.FFPluginHp, HKLM\SOFTWARE\WOW6432NODE\FFPluginHp, , [08a53fed612a46f00fe00d80897b5ea2],
PUP.Optional.IHProtect, HKLM\SOFTWARE\WOW6432NODE\IHProtect, , [2885c3690b80c670e262dfb600041ae6],
PUP.Optional.MyStartSearch.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\mystartsearchSoftware, , [f5b879b3e8a35bdb8325ee3f7d86fc04],
PUP.Optional.SuperOptimizer, HKLM\SOFTWARE\WOW6432NODE\{6791A2F3-FC80-475C-A002-C014AF797E9C}, , [c0ed0d1fa1ea2a0c27f0833029dbca36],
PUP.Optional.MultiPlug, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{1146AC44-2F03-4431-B4FD-889BC837521F}{cae99edb}, , [01ac33f94b403303d08e851b966e41bf],
PUM.Security.Hijack.DisableChromeUpdates, HKLM\SOFTWARE\WOW6432NODE\POLICIES\GOOGLE\UPDATE, , [0aa32dff8efd2c0a4cebcda2df25629e],
PUP.Optional.SupTab, HKLM\SOFTWARE\WOW6432NODE\SUPTAB, , [bcf142ea5e2db185251df2c1ab59e917],
PUP.Optional.SystemSpeedup, HKLM\SOFTWARE\WOW6432NODE\SYSTWEAK\ssd, , [b2fb32fa9af1092d71e0f443679cdc24],
PUP.Optional.Tuto4PC, HKLM\SOFTWARE\WOW6432NODE\TUTORIALS, , [a20bbe6e3a5181b51b20298ec341f808],
PUP.Optional.PCSpeedUp, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\PCSUUCDRV, , [e8c5e7455f2cf1458d0000a49a6abd43],
PUP.Optional.WindowsMangerProtect, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\EVENTLOG\APPLICATION\WindowsMangerProtect, , [baf35bd10685fd397d8d3389b252d42c],
PUP.Optional.APNToolBar.Gen, HKU\S-1-5-18\SOFTWARE\AskPartnerNetwork, , [e8c5e5477d0e61d5a896fd286f94857b],
PUP.Optional.SuperOptimizer, HKU\S-1-5-18\SOFTWARE\APPDATALOW\{1146AC44-2F03-4431-B4FD-889BC837521F}, , [f6b739f3c3c842f45cb6c0f338ccb44c],
PUP.Optional.BoBrowser, HKU\S-1-5-21-699516785-416719656-4019490680-1000\SOFTWARE\BoBrowser, , [bcf178b455369e9813f1651892726799],
PUP.Optional.Tuto4PC, HKU\S-1-5-21-699516785-416719656-4019490680-1000\SOFTWARE\TutoTag, , [8b22a4883853b5819c9b6156a06416ea],
PUP.Optional.SuperOptimizer, HKU\S-1-5-21-699516785-416719656-4019490680-1000\SOFTWARE\APPDATALOW\{1146AC44-2F03-4431-B4FD-889BC837521F}, , [d5d8c36914773303a76bb7fc1de709f7],
PUP.Optional.DoSearch.ShrtCln, HKU\S-1-5-21-699516785-416719656-4019490680-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{012E1000-F331-11DB-8314-0800200C9A66}, , [e9c447e5206b95a141df32f4e51e6799],
PUP.Optional.DoSearch.ShrtCln, HKU\S-1-5-21-699516785-416719656-4019490680-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472F-A0FF-E1416B8B2E3A}, , [3a7333f9d1ba88ae36ea06209271f907],
PUP.Optional.DoSearch.ShrtCln, HKU\S-1-5-21-699516785-416719656-4019490680-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}, , [7f2e1b11e1aa4cead24ed94d867d3dc3],
PUP.Optional.DoSearch.ShrtCln, HKU\S-1-5-21-699516785-416719656-4019490680-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{23CD58F5-757E-49C0-BFD0-5EE9507885FD}, , [3d700a22b4d7a69074ace4428c77837d],
PUP.Optional.Delta.ShrtCln, HKU\S-1-5-21-699516785-416719656-4019490680-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, , [3a73a785602bf54193969690c63d45bb],
PUP.Optional.DoSearch.ShrtCln, HKU\S-1-5-21-699516785-416719656-4019490680-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}, , [7c31ca62c8c350e6fd238e9817ecdd23],
PUP.Optional.DoSearch.ShrtCln, HKU\S-1-5-21-699516785-416719656-4019490680-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{E733165D-CBCF-4FDA-883E-ADEF965B476C}, , [aeff40eccdbe5dd957c9e541976c53ad],
PUP.Optional.DoSearch.ShrtCln, HKU\S-1-5-21-699516785-416719656-4019490680-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{EC29EDF6-AD3C-4E1C-A087-D6CB81400C43}, , [b0fdf03c16754de9aa76d353fc077b85],
PUP.Optional.QuickSearch, HKU\S-1-5-21-699516785-416719656-4019490680-1000\SOFTWARE\MOZILLA\EXTENDS, , [aeffea428b006acc0d09139555afe719],
PUP.Optional.OutBrowse, HKU\S-1-5-21-699516785-416719656-4019490680-1000\SOFTWARE\OB, , [218c1c101e6d74c2880a891a3cc8e41c],
PUP.Optional.SuperOptimizer, HKU\S-1-5-21-699516785-416719656-4019490680-1000\SOFTWARE\SUPER OPTIMIZER, , [b5f86cc0216a0f2725f05b582ed6966a],
PUP.Optional.SystemSpeedup, HKU\S-1-5-21-699516785-416719656-4019490680-1000\SOFTWARE\SYSTWEAK\ssd, , [decf79b3bfccc670f858dc5b15ee7d83],
PUP.Optional.KeepMySearch, HKU\S-1-5-21-699516785-416719656-4019490680-1000_Classes\keepmysearch, , [1499909c2e5d3bfb701ce5b2c73d47b9],

Hodnoty registru: 23
PUM.Security.Hijack.DisableChromeUpdates, HKLM\SOFTWARE\POLICIES\GOOGLE\UPDATE|DisableAutoUpdateChecksCheckboxValue, 1, , [5f4e25079fecbf771a1dd897679d32ce]
PUP.Optional.GamesDesktop, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|gmsd_it_232, , [05a8d3590487f442e6848709ef154bb5],
PUP.Optional.SearchEngine, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS|searchengine@gmail.com, C:\Users\Yanycca\AppData\Roaming\Mozilla\Firefox\Profiles\pl7hbiog.default-1412367705961\extensions\searchengine@gmail.com, , [466765c7117ac5714b95a407a460df21]
PUP.Optional.QuickSearch, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS|quick_searchff@gmail.com, C:\Users\Yanycca\AppData\Roaming\Mozilla\Firefox\Profiles\pl7hbiog.default-1412367705961\extensions\quick_searchff@gmail.com, , [feafde4e93f8a49237e0ccdc8c780bf5]
PUP.Optional.SweetSearch, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS|sweetsearch@gmail.com, C:\Users\Yanycca\AppData\Roaming\Mozilla\Firefox\Profiles\pl7hbiog.default-1412367705961\extensions\sweetsearch@gmail.com, , [218c43e9e0abb2849a28c9ea669ec040]
PUM.Security.Hijack.DisableChromeUpdates, HKLM\SOFTWARE\WOW6432NODE\POLICIES\GOOGLE\UPDATE|DisableAutoUpdateChecksCheckboxValue, 1, , [0aa32dff8efd2c0a4cebcda2df25629e]
PUP.Optional.SupTab, HKLM\SOFTWARE\WOW6432NODE\SUPTAB|ptid, wpm05203, , [bcf142ea5e2db185251df2c1ab59e917]
PUP.Optional.Tuto4PC, HKLM\SOFTWARE\WOW6432NODE\TUTORIALS|HostGUID, 99205957-705F-4ECA-B77B-F8C9DC58ECA5, , [a20bbe6e3a5181b51b20298ec341f808]
PUP.Optional.DoSearch.ShrtCln, HKU\S-1-5-21-699516785-416719656-4019490680-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{012E1000-F331-11DB-8314-0800200C9A66}|URL, http://do-search.com/web/?utm_source=b& ... default&q={searchTerms}, , [e9c447e5206b95a141df32f4e51e6799]
PUP.Optional.DoSearch.ShrtCln, HKU\S-1-5-21-699516785-416719656-4019490680-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}|URL, http://do-search.com/web/?utm_source=b& ... default&q={searchTerms}, , [3a7333f9d1ba88ae36ea06209271f907]
PUP.Optional.DoSearch.ShrtCln, HKU\S-1-5-21-699516785-416719656-4019490680-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}|URL, http://do-search.com/web/?utm_source=b& ... default&q={searchTerms}, , [7f2e1b11e1aa4cead24ed94d867d3dc3]
PUP.Optional.DoSearch.ShrtCln, HKU\S-1-5-21-699516785-416719656-4019490680-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}|FaviconURL, http://do-search.com//favicon.ico, , [2c811814ef9c43f358c84fd7eb1843bd]
PUP.Optional.DoSearch.ShrtCln, HKU\S-1-5-21-699516785-416719656-4019490680-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{23CD58F5-757E-49C0-BFD0-5EE9507885FD}|URL, http://do-search.com/web/?utm_source=b& ... default&q={searchTerms}, , [3d700a22b4d7a69074ace4428c77837d]
PUP.Optional.Delta.ShrtCln, HKU\S-1-5-21-699516785-416719656-4019490680-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}|DisplayName, delta-homes, , [3a73a785602bf54193969690c63d45bb]
PUP.Optional.DoSearch.ShrtCln, HKU\S-1-5-21-699516785-416719656-4019490680-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}|URL, http://do-search.com/web/?utm_source=b& ... default&q={searchTerms}, , [5855ea427a11d95dc759f13542c13bc5]
PUP.Optional.Delta.ShrtCln, HKU\S-1-5-21-699516785-416719656-4019490680-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}|TopResultURL, http://search.delta-homes.com/web/?type ... VDCW339&q={searchTerms}, , [6c41c963692279bd8d9c032301029070]
PUP.Optional.DoSearch.ShrtCln, HKU\S-1-5-21-699516785-416719656-4019490680-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}|URL, http://do-search.com/web/?utm_source=b& ... default&q={searchTerms}, , [7c31ca62c8c350e6fd238e9817ecdd23]
PUP.Optional.DoSearch.ShrtCln, HKU\S-1-5-21-699516785-416719656-4019490680-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{E733165D-CBCF-4FDA-883E-ADEF965B476C}|URL, http://do-search.com/web/?utm_source=b& ... default&q={searchTerms}, , [aeff40eccdbe5dd957c9e541976c53ad]
PUP.Optional.DoSearch.ShrtCln, HKU\S-1-5-21-699516785-416719656-4019490680-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{ec29edf6-ad3c-4e1c-a087-d6cb81400c43}|URL, http://do-search.com/web/?utm_source=b& ... default&q={searchTerms}, , [b0fdf03c16754de9aa76d353fc077b85]
PUP.Optional.QuickSearch, HKU\S-1-5-21-699516785-416719656-4019490680-1000\SOFTWARE\MOZILLA\EXTENDS|appid, quick_searchff@gmail.com, , [aeffea428b006acc0d09139555afe719]
PUP.Optional.OutBrowse, HKU\S-1-5-21-699516785-416719656-4019490680-1000\SOFTWARE\OB|monitype6, 6/17/14 19:0:21, , [218c1c101e6d74c2880a891a3cc8e41c]
PUP.Optional.SuperOptimizer, HKU\S-1-5-21-699516785-416719656-4019490680-1000\SOFTWARE\SUPER OPTIMIZER|SetupName, C:\Users\Yanycca\AppData\Local\Temp\13ae9681-ac9a-4954-a13a-9c8de565651e\superoptimizersetup.exe, , [b5f86cc0216a0f2725f05b582ed6966a]
PUP.Optional.SuperOptimizer, HKU\S-1-5-21-699516785-416719656-4019490680-1000\SOFTWARE\SUPER OPTIMIZER|AdsBuyNowURL, http://supc3.superpctools.revenuewire.n ... 500920E31B, , [7a33d6566922ab8bca4a1a992fd5ce32]

Data registru: 14
PUP.Optional.MyStartSearch.ShrtCln, HKLM\SOFTWARE\CLIENTS\STARTMENUINTERNET\IEXPLORE.EXE\SHELL\OPEN\COMMAND, C:\Program Files\Internet Explorer\iexplore.exe http://www.mystartsearch.com/?type=sc&t ... S_6VDCW339, Dobré: (iexplore.exe), Špatné: (C:\Program Files\Internet Explorer\iexplore.exe http://www.mystartsearch.com/?type=sc&t ... S_6VDCW339),,[763737f5a3e887af1bcbf86007fec33d]
PUP.Optional.MyStartSearch.ShrtCln, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, http://www.mystartsearch.com/web/?type= ... VDCW339&q={searchTerms}, Dobré: (www.google.com), Špatné: (http://www.mystartsearch.com/web/?type= ... VDCW339&q={searchTerms}),,[64496ac2b6d56fc74183e47494718f71]
PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, http://www.delta-homes.com/?type=hp&ts= ... S_6VDCW339, Dobré: (www.google.com), Špatné: (http://www.delta-homes.com/?type=hp&ts= ... S_6VDCW339),,[f6b74ae263284ee867853f23f11416ea]
PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, http://www.delta-homes.com/?type=hp&ts= ... S_6VDCW339, Dobré: (www.google.com), Špatné: (http://www.delta-homes.com/?type=hp&ts= ... S_6VDCW339),,[96177ab2d0bb6ccaae3e4e14ef1602fe]
PUP.Optional.MyStartSearch.ShrtCln, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, http://www.mystartsearch.com/web/?type= ... VDCW339&q={searchTerms}, Dobré: (www.google.com), Špatné: (http://www.mystartsearch.com/web/?type= ... VDCW339&q={searchTerms}),,[c1ece646f69532044480c7911de804fc]
PUP.Optional.MyStartSearch.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\CLIENTS\STARTMENUINTERNET\IEXPLORE.EXE\SHELL\OPEN\COMMAND, C:\Program Files\Internet Explorer\iexplore.exe http://www.mystartsearch.com/?type=sc&t ... S_6VDCW339, Dobré: (iexplore.exe), Špatné: (C:\Program Files\Internet Explorer\iexplore.exe http://www.mystartsearch.com/?type=sc&t ... S_6VDCW339),,[ffaead7f64277abc9a4c0850af56ec14]
PUP.Optional.MyStartSearch.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, http://www.mystartsearch.com/web/?type= ... VDCW339&q={searchTerms}, Dobré: (www.google.com), Špatné: (http://www.mystartsearch.com/web/?type= ... VDCW339&q={searchTerms}),,[bdf071bb0685ce68269ef86050b504fc]
PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, http://www.delta-homes.com/?type=hp&ts= ... S_6VDCW339, Dobré: (www.google.com), Špatné: (http://www.delta-homes.com/?type=hp&ts= ... S_6VDCW339),,[585537f5701b65d18c60c1a1b64fc838]
PUP.Optional.Delta.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, http://www.delta-homes.com/?type=hp&ts= ... S_6VDCW339, Dobré: (www.google.com), Špatné: (http://www.delta-homes.com/?type=hp&ts= ... S_6VDCW339),,[8e1f8aa2028943f3bf2dc39f4bba5da3]
PUP.Optional.MyStartSearch.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, http://www.mystartsearch.com/web/?type= ... VDCW339&q={searchTerms}, Dobré: (www.google.com), Špatné: (http://www.mystartsearch.com/web/?type= ... VDCW339&q={searchTerms}),,[6b427fad7219cb6b972dc494c93c7b85]
PUP.Optional.Delta.ShrtCln, HKU\S-1-5-21-699516785-416719656-4019490680-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, http://www.delta-homes.com/?type=hp&ts= ... S_6VDCW339, Dobré: (www.google.com), Špatné: (http://www.delta-homes.com/?type=hp&ts= ... S_6VDCW339),,[dad346e67e0d6ec86786471bf213ca36]
PUP.Optional.Delta.ShrtCln, HKU\S-1-5-21-699516785-416719656-4019490680-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, http://www.delta-homes.com/?type=hp&ts= ... S_6VDCW339, Dobré: (www.google.com), Špatné: (http://www.delta-homes.com/?type=hp&ts= ... S_6VDCW339),,[e7c630fc127949ed56972c367095fe02]
PUP.Optional.Delta.ShrtCln, HKU\S-1-5-21-699516785-416719656-4019490680-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, http://search.delta-homes.com/web/?type ... VDCW339&q={searchTerms}, Dobré: (www.google.com), Špatné: (http://search.delta-homes.com/web/?type ... VDCW339&q={searchTerms}),,[cfde919b82092115fcf16200768ff907]
PUP.Optional.Delta.ShrtCln, HKU\S-1-5-21-699516785-416719656-4019490680-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, http://search.delta-homes.com/web/?type ... VDCW339&q={searchTerms}, Dobré: (www.google.com), Špatné: (http://search.delta-homes.com/web/?type ... VDCW339&q={searchTerms}),,[37764ae2008bf83e0ce17de5d72ec43c]

Složky: 36
PUP.Optional.MultiPlug.Gen, C:\ProgramData\3429229179002711462, , [beefaf7df695dc5ad146eb8761a3d52b],
PUP.Optional.MultiPlug, C:\Users\Yanycca\AppData\Roaming\Mozilla\Firefox\Profiles\pl7hbiog.default-1412367705961\extensions\6jN@TJF.edu\content, , [e7c635f7b2d9b97d1c11930d50b4847c],
PUP.Optional.MultiPlug, C:\Users\Yanycca\AppData\Roaming\Mozilla\Firefox\Profiles\pl7hbiog.default-1412367705961\extensions\6jN@TJF.edu, , [e7c635f7b2d9b97d1c11930d50b4847c],
PUP.Optional.MultiPlug, C:\Users\Yanycca\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghmjkjhkpmbkkkdegidkaelddbhjmmgi\1.2, , [b5f82309f992ce68b57fb1ef709417e9],
PUP.Optional.MultiPlug, C:\Users\Yanycca\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghmjkjhkpmbkkkdegidkaelddbhjmmgi, , [b5f82309f992ce68b57fb1ef709417e9],
PUP.Optional.XTab, C:\Program Files (x86)\XTab, , [7f2e1814f893b18521c2e4d8897b39c7],
PUP.Optional.XTab, C:\Program Files (x86)\XTab\skin, , [7f2e1814f893b18521c2e4d8897b39c7],
PUP.Optional.XTab, C:\Program Files (x86)\XTab\skin\image, , [7f2e1814f893b18521c2e4d8897b39c7],
PUP.Optional.XTab, C:\Program Files (x86)\XTab\web, , [7f2e1814f893b18521c2e4d8897b39c7],
PUP.Optional.XTab, C:\Program Files (x86)\XTab\web\img, , [7f2e1814f893b18521c2e4d8897b39c7],
PUP.Optional.XTab, C:\Program Files (x86)\XTab\web\js, , [7f2e1814f893b18521c2e4d8897b39c7],
PUP.Optional.XTab, C:\Program Files (x86)\XTab\web\_locales, , [7f2e1814f893b18521c2e4d8897b39c7],
PUP.Optional.XTab, C:\Program Files (x86)\XTab\web\_locales\en-US, , [7f2e1814f893b18521c2e4d8897b39c7],
PUP.Optional.XTab, C:\Program Files (x86)\XTab\web\_locales\es-419, , [7f2e1814f893b18521c2e4d8897b39c7],
PUP.Optional.XTab, C:\Program Files (x86)\XTab\web\_locales\es-ES, , [7f2e1814f893b18521c2e4d8897b39c7],
PUP.Optional.XTab, C:\Program Files (x86)\XTab\web\_locales\fr-BE, , [7f2e1814f893b18521c2e4d8897b39c7],
PUP.Optional.XTab, C:\Program Files (x86)\XTab\web\_locales\fr-CA, , [7f2e1814f893b18521c2e4d8897b39c7],
PUP.Optional.XTab, C:\Program Files (x86)\XTab\web\_locales\fr-CH, , [7f2e1814f893b18521c2e4d8897b39c7],
PUP.Optional.XTab, C:\Program Files (x86)\XTab\web\_locales\fr-FR, , [7f2e1814f893b18521c2e4d8897b39c7],
PUP.Optional.XTab, C:\Program Files (x86)\XTab\web\_locales\fr-LU, , [7f2e1814f893b18521c2e4d8897b39c7],
PUP.Optional.XTab, C:\Program Files (x86)\XTab\web\_locales\it-CH, , [7f2e1814f893b18521c2e4d8897b39c7],
PUP.Optional.XTab, C:\Program Files (x86)\XTab\web\_locales\it-IT, , [7f2e1814f893b18521c2e4d8897b39c7],
PUP.Optional.XTab, C:\Program Files (x86)\XTab\web\_locales\pl, , [7f2e1814f893b18521c2e4d8897b39c7],
PUP.Optional.XTab, C:\Program Files (x86)\XTab\web\_locales\pt, , [7f2e1814f893b18521c2e4d8897b39c7],
PUP.Optional.XTab, C:\Program Files (x86)\XTab\web\_locales\pt-BR, , [7f2e1814f893b18521c2e4d8897b39c7],
PUP.Optional.XTab, C:\Program Files (x86)\XTab\web\_locales\ru, , [7f2e1814f893b18521c2e4d8897b39c7],
PUP.Optional.XTab, C:\Program Files (x86)\XTab\web\_locales\ru-MO, , [7f2e1814f893b18521c2e4d8897b39c7],
PUP.Optional.XTab, C:\Program Files (x86)\XTab\web\_locales\tr-TR, , [7f2e1814f893b18521c2e4d8897b39c7],
PUP.Optional.XTab, C:\Program Files (x86)\XTab\web\_locales\vi-VI, , [7f2e1814f893b18521c2e4d8897b39c7],
PUP.Optional.XTab, C:\Program Files (x86)\XTab\web\_locales\zh-CN, , [7f2e1814f893b18521c2e4d8897b39c7],
PUP.Optional.XTab, C:\Program Files (x86)\XTab\web\_locales\zh-TW, , [7f2e1814f893b18521c2e4d8897b39c7],
PUP.Optional.IHProtectUpDate, C:\ProgramData\IHProtectUpDate, , [fbb2d05c3c4fe94d58b7997559aa758b],
PUP.Optional.IHProtectUpDate, C:\ProgramData\IHProtectUpDate\update, , [fbb2d05c3c4fe94d58b7997559aa758b],
PUP.Optional.KeepNBrowse, C:\ProgramData\KeepnBrowse, , [a00d75b7454658de4eb758b707fc56aa],
PUP.Optional.WPM, C:\ProgramData\WindowsMangerProtect, , [07a6ec40d7b47db9b6fa978a867d1de3],
PUP.Optional.WPM, C:\ProgramData\WindowsMangerProtect\update, , [07a6ec40d7b47db9b6fa978a867d1de3],

Soubory: 84
PUP.Optional.SuperOptimizer, C:\ProgramData\{b08bb391-6254-1d44-b08b-bb391625ce45}\superoptimizersetup.exe, , [f1bcf9337a11a88e4cd498275da415eb],
PUP.Optional.XTab, C:\Program Files (x86)\XTab\ProtectService.exe, , [337a71bbdbb0ad89d314ccf3d8297a86],
PUP.Optional.MultiPlug.BHO64, C:\Program Files (x86)\saLEprIIzese\jn9Er9QO5IGJ6w.x64.dll, , [cae3dc509bf074c2b77e10ad21e0867a],
PUP.Optional.MultiPlug.BHO64, C:\Program Files (x86)\saLEprIIzese\jn9Er9QO5IGJ6w.dll, , [cae3dc509bf074c2b77e10ad21e0867a],
PUP.Optional.LuckyTab, C:\Program Files (x86)\XTab\SupTab.dll, , [901dc369206b0036ae45815914ee8b75],
PUP.Optional.MultiPlug, C:\ProgramData\{6ecc695d-aa65-e263-6ecc-c695daa6a576}\8291839985947442647c.exe, , [c3ea32fa5437a49290404457bf42df21],
PUP.Optional.MultiPlug, C:\Program Files (x86)\saLEprIIzese\jn9Er9QO5IGJ6w.exe, , [a20bd7555635c175759b407d4db4ca36],
PUP.Optional.MyStartSearch.ShrtCln, C:\Users\Yanycca\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.mystartsearch.com_0.localstorage-journal, , [3b72002c6f1cae8898cd0129857e9c64],
PUP.Optional.RegCleanerPro, C:\Windows\System32\Tasks\ASP, , [cde0ac801b703501c189df55c043cb35],
PUP.Optional.Delta.ShrtCln, C:\Users\Yanycca\AppData\Roaming\Mozilla\Firefox\Profiles\pl7hbiog.default-1412367705961\searchplugins\delta-homes.xml, , [2d802efe27646cca1c622d0bdb28a35d],
PUP.Optional.MultiPlug.Gen, C:\ProgramData\3429229179002711462\90e6cd77db3059f9ab3de279321b9148.ini, , [beefaf7df695dc5ad146eb8761a3d52b],
PUP.Optional.BoBrowser, C:\Windows\System32\Tasks\Run_Bobby_Browser, , [d7d6fd2fc4c7d660c0428bf2d430c23e],
PUP.Optional.DeltaHomes, C:\Users\Yanycca\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.delta-homes.com_0.localstorage-journal, , [3a73b379b0db1d197e1384057c88cd33],
PUP.Optional.MultiPlug, C:\Users\Yanycca\AppData\Roaming\Mozilla\Firefox\Profiles\pl7hbiog.default-1412367705961\extensions\6jN@TJF.edu\content\bg.js, , [e7c635f7b2d9b97d1c11930d50b4847c],
PUP.Optional.MultiPlug, C:\Users\Yanycca\AppData\Roaming\Mozilla\Firefox\Profiles\pl7hbiog.default-1412367705961\extensions\6jN@TJF.edu\bootstrap.js, , [e7c635f7b2d9b97d1c11930d50b4847c],
PUP.Optional.MultiPlug, C:\Users\Yanycca\AppData\Roaming\Mozilla\Firefox\Profiles\pl7hbiog.default-1412367705961\extensions\6jN@TJF.edu\chrome.manifest, , [e7c635f7b2d9b97d1c11930d50b4847c],
PUP.Optional.MultiPlug, C:\Users\Yanycca\AppData\Roaming\Mozilla\Firefox\Profiles\pl7hbiog.default-1412367705961\extensions\6jN@TJF.edu\install.rdf, , [e7c635f7b2d9b97d1c11930d50b4847c],
PUP.Optional.MultiPlug, C:\Users\Yanycca\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghmjkjhkpmbkkkdegidkaelddbhjmmgi\1.2\lsdb.js, , [b5f82309f992ce68b57fb1ef709417e9],
PUP.Optional.MultiPlug, C:\Users\Yanycca\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghmjkjhkpmbkkkdegidkaelddbhjmmgi\1.2\background.html, , [b5f82309f992ce68b57fb1ef709417e9],
PUP.Optional.MultiPlug, C:\Users\Yanycca\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghmjkjhkpmbkkkdegidkaelddbhjmmgi\1.2\bHPODXa.js, , [b5f82309f992ce68b57fb1ef709417e9],
PUP.Optional.MultiPlug, C:\Users\Yanycca\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghmjkjhkpmbkkkdegidkaelddbhjmmgi\1.2\content.js, , [b5f82309f992ce68b57fb1ef709417e9],
PUP.Optional.MultiPlug, C:\Users\Yanycca\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghmjkjhkpmbkkkdegidkaelddbhjmmgi\1.2\manifest.json, , [b5f82309f992ce68b57fb1ef709417e9],
PUP.Optional.XTab, C:\Program Files (x86)\XTab\uninstall.exe, , [7f2e1814f893b18521c2e4d8897b39c7],
PUP.Optional.XTab, C:\Program Files (x86)\XTab\ffsearch_toolbar!1.0.0.1031.xpi, , [7f2e1814f893b18521c2e4d8897b39c7],
PUP.Optional.XTab, C:\Program Files (x86)\XTab\install.data, , [7f2e1814f893b18521c2e4d8897b39c7],
PUP.Optional.XTab, C:\Program Files (x86)\XTab\msvcp110.dll, , [7f2e1814f893b18521c2e4d8897b39c7],
PUP.Optional.XTab, C:\Program Files (x86)\XTab\msvcr110.dll, , [7f2e1814f893b18521c2e4d8897b39c7],
PUP.Optional.XTab, C:\Program Files (x86)\XTab\searchProvider.xml, , [7f2e1814f893b18521c2e4d8897b39c7],
PUP.Optional.XTab, C:\Program Files (x86)\XTab\skin\about.png, , [7f2e1814f893b18521c2e4d8897b39c7],
PUP.Optional.XTab, C:\Program Files (x86)\XTab\skin\about_bk.png, , [7f2e1814f893b18521c2e4d8897b39c7],
PUP.Optional.XTab, C:\Program Files (x86)\XTab\skin\btn.png, , [7f2e1814f893b18521c2e4d8897b39c7],
PUP.Optional.XTab, C:\Program Files (x86)\XTab\skin\btn_apply.png, , [7f2e1814f893b18521c2e4d8897b39c7],
PUP.Optional.XTab, C:\Program Files (x86)\XTab\skin\close.png, , [7f2e1814f893b18521c2e4d8897b39c7],
PUP.Optional.XTab, C:\Program Files (x86)\XTab\skin\conf.xml, , [7f2e1814f893b18521c2e4d8897b39c7],
PUP.Optional.XTab, C:\Program Files (x86)\XTab\skin\conf_back.png, , [7f2e1814f893b18521c2e4d8897b39c7],
PUP.Optional.XTab, C:\Program Files (x86)\XTab\skin\input_bk.png, , [7f2e1814f893b18521c2e4d8897b39c7],
PUP.Optional.XTab, C:\Program Files (x86)\XTab\skin\logo.png, , [7f2e1814f893b18521c2e4d8897b39c7],
PUP.Optional.XTab, C:\Program Files (x86)\XTab\skin\main.xml, , [7f2e1814f893b18521c2e4d8897b39c7],
PUP.Optional.XTab, C:\Program Files (x86)\XTab\skin\radio_1.png, , [7f2e1814f893b18521c2e4d8897b39c7],
PUP.Optional.XTab, C:\Program Files (x86)\XTab\skin\radio_2.png, , [7f2e1814f893b18521c2e4d8897b39c7],
PUP.Optional.XTab, C:\Program Files (x86)\XTab\skin\rigth_arrow.png, , [7f2e1814f893b18521c2e4d8897b39c7],
PUP.Optional.XTab, C:\Program Files (x86)\XTab\skin\settings.png, , [7f2e1814f893b18521c2e4d8897b39c7],
PUP.Optional.XTab, C:\Program Files (x86)\XTab\web\data.html, , [7f2e1814f893b18521c2e4d8897b39c7],
PUP.Optional.XTab, C:\Program Files (x86)\XTab\web\indexIE.html, , [7f2e1814f893b18521c2e4d8897b39c7],
PUP.Optional.XTab, C:\Program Files (x86)\XTab\web\indexIE8.html, , [7f2e1814f893b18521c2e4d8897b39c7],
PUP.Optional.XTab, C:\Program Files (x86)\XTab\web\main.css, , [7f2e1814f893b18521c2e4d8897b39c7],
PUP.Optional.XTab, C:\Program Files (x86)\XTab\web\img\google_trends.png, , [7f2e1814f893b18521c2e4d8897b39c7],
PUP.Optional.XTab, C:\Program Files (x86)\XTab\web\img\icon128.png, , [7f2e1814f893b18521c2e4d8897b39c7],
PUP.Optional.XTab, C:\Program Files (x86)\XTab\web\img\icon16.png, , [7f2e1814f893b18521c2e4d8897b39c7],
PUP.Optional.XTab, C:\Program Files (x86)\XTab\web\img\icon48.png, , [7f2e1814f893b18521c2e4d8897b39c7],
PUP.Optional.XTab, C:\Program Files (x86)\XTab\web\img\loading.gif, , [7f2e1814f893b18521c2e4d8897b39c7],
PUP.Optional.XTab, C:\Program Files (x86)\XTab\web\img\logo32.ico, , [7f2e1814f893b18521c2e4d8897b39c7],
PUP.Optional.XTab, C:\Program Files (x86)\XTab\web\js\common.js, , [7f2e1814f893b18521c2e4d8897b39c7],
PUP.Optional.XTab, C:\Program Files (x86)\XTab\web\js\ga.js, , [7f2e1814f893b18521c2e4d8897b39c7],
PUP.Optional.XTab, C:\Program Files (x86)\XTab\web\js\jquery-1.11.0.min.js, , [7f2e1814f893b18521c2e4d8897b39c7],
PUP.Optional.XTab, C:\Program Files (x86)\XTab\web\js\jquery.autocomplete.js, , [7f2e1814f893b18521c2e4d8897b39c7],
PUP.Optional.XTab, C:\Program Files (x86)\XTab\web\js\jquery.xdomainrequest.min.js, , [7f2e1814f893b18521c2e4d8897b39c7],
PUP.Optional.XTab, C:\Program Files (x86)\XTab\web\js\js.js, , [7f2e1814f893b18521c2e4d8897b39c7],
PUP.Optional.XTab, C:\Program Files (x86)\XTab\web\js\library.js, , [7f2e1814f893b18521c2e4d8897b39c7],
PUP.Optional.XTab, C:\Program Files (x86)\XTab\web\js\xagainit-ie8.js, , [7f2e1814f893b18521c2e4d8897b39c7],
PUP.Optional.XTab, C:\Program Files (x86)\XTab\web\js\xagainit2.0.js, , [7f2e1814f893b18521c2e4d8897b39c7],
PUP.Optional.XTab, C:\Program Files (x86)\XTab\web\js\xdomain.min.js, , [7f2e1814f893b18521c2e4d8897b39c7],
PUP.Optional.XTab, C:\Program Files (x86)\XTab\web\_locales\en-US\messages.json, , [7f2e1814f893b18521c2e4d8897b39c7],
PUP.Optional.XTab, C:\Program Files (x86)\XTab\web\_locales\es-419\messages.json, , [7f2e1814f893b18521c2e4d8897b39c7],
PUP.Optional.XTab, C:\Program Files (x86)\XTab\web\_locales\es-ES\messages.json, , [7f2e1814f893b18521c2e4d8897b39c7],
PUP.Optional.XTab, C:\Program Files (x86)\XTab\web\_locales\fr-BE\messages.json, , [7f2e1814f893b18521c2e4d8897b39c7],
PUP.Optional.XTab, C:\Program Files (x86)\XTab\web\_locales\fr-CA\messages.json, , [7f2e1814f893b18521c2e4d8897b39c7],
PUP.Optional.XTab, C:\Program Files (x86)\XTab\web\_locales\fr-CH\messages.json, , [7f2e1814f893b18521c2e4d8897b39c7],
PUP.Optional.XTab, C:\Program Files (x86)\XTab\web\_locales\fr-FR\messages.json, , [7f2e1814f893b18521c2e4d8897b39c7],
PUP.Optional.XTab, C:\Program Files (x86)\XTab\web\_locales\fr-LU\messages.json, , [7f2e1814f893b18521c2e4d8897b39c7],
PUP.Optional.XTab, C:\Program Files (x86)\XTab\web\_locales\it-CH\messages.json, , [7f2e1814f893b18521c2e4d8897b39c7],
PUP.Optional.XTab, C:\Program Files (x86)\XTab\web\_locales\it-IT\messages.json, , [7f2e1814f893b18521c2e4d8897b39c7],
PUP.Optional.XTab, C:\Program Files (x86)\XTab\web\_locales\pl\messages.json, , [7f2e1814f893b18521c2e4d8897b39c7],
PUP.Optional.XTab, C:\Program Files (x86)\XTab\web\_locales\pt\messages.json, , [7f2e1814f893b18521c2e4d8897b39c7],
PUP.Optional.XTab, C:\Program Files (x86)\XTab\web\_locales\pt-BR\messages.json, , [7f2e1814f893b18521c2e4d8897b39c7],
PUP.Optional.XTab, C:\Program Files (x86)\XTab\web\_locales\ru\messages.json, , [7f2e1814f893b18521c2e4d8897b39c7],
PUP.Optional.XTab, C:\Program Files (x86)\XTab\web\_locales\ru-MO\messages.json, , [7f2e1814f893b18521c2e4d8897b39c7],
PUP.Optional.XTab, C:\Program Files (x86)\XTab\web\_locales\tr-TR\messages.json, , [7f2e1814f893b18521c2e4d8897b39c7],
PUP.Optional.XTab, C:\Program Files (x86)\XTab\web\_locales\vi-VI\messages.json, , [7f2e1814f893b18521c2e4d8897b39c7],
PUP.Optional.XTab, C:\Program Files (x86)\XTab\web\_locales\zh-CN\messages.json, , [7f2e1814f893b18521c2e4d8897b39c7],
PUP.Optional.XTab, C:\Program Files (x86)\XTab\web\_locales\zh-TW\messages.json, , [7f2e1814f893b18521c2e4d8897b39c7],
PUP.Optional.IHProtectUpDate, C:\ProgramData\IHProtectUpDate\update\conf, , [fbb2d05c3c4fe94d58b7997559aa758b],
PUP.Optional.WPM, C:\ProgramData\WindowsMangerProtect\update\conf, , [07a6ec40d7b47db9b6fa978a867d1de3],
PUP.Optional.WPM, C:\ProgramData\WindowsMangerProtect\update\update.exe, , [07a6ec40d7b47db9b6fa978a867d1de3],

Fyzické sektory: 0
(Nenalezeny žádné škodlivé položky)


(end)

[jaro3]

Spusť znovu AdwCleaner (u Windows Vista či Windows7, klikni na AdwCleaner pravým a vyber „Spustit jako správce“
klikni na „Prohledat-Scan“, po prohledání klikni na „ Vymazat-Clean“

Program provede opravu, po automatickém restartu neukáže log (C:\AdwCleaner [S?].txt) , jeho obsah sem celý vlož.

Stáhni si Junkware Removal Tool by Thisisu
http://www.bleepingcomputer.com/downloa ... oval-tool/
na svojí plochu.

Deaktivuj si svůj antivirový program. Pravým tl. myši klikni na JRT.exe a vyber „spustit jako správce“. Pro pokračování budeš vyzván ke stisknutí jakékoliv klávesy. Na nějakou klikni.
Začne skenování programu. Skenování může trvat dloho , podle množství nákaz. Po ukončení skenu se objeví log (JRT.txt) , který se uloží na ploše.
Zkopíruj sem prosím celý jeho obsah.

Stáhni si Malwarebytes' Anti-Malware
- Při instalaci odeber zatržítko u „Povolit bezplatnou zkušební verzi Malwarebytes' Anti-Malware Premium“
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Aktualizace Malwarebytes' Anti-Malware a Spustit aplikaci Malwarebytes' Anti-Malware, pokud jo tak klikni na tlačítko konec
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a klikni na Skenovat nyní a
- po proběhnutí programu se ti objeví hláška vpravo dole tak klikni na b] Kopírovat do schránky [/b]a a vlož sem celý log.

- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).

Pokud budou problémy , spusť v nouz. režimu.

Stáhni si RogueKiller by Adlice Software
32bit.:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
64bit.:
http://www.sur-la-toile.com/RogueKiller ... lerX64.exe
na svojí plochu.
- Zavři všechny ostatní programy a prohlížeče.
- Pro OS Vista a win7 spusť program RogueKiller.exe jako správce , u XP poklepáním.
- počkej až skončí Prescan -vyhledávání škodlivých procesů.
-Potom klikni na „Prohledat“.
- Program skenuje procesy PC. Po proskenování klikni na „Zpráva“ , v okně na pak na „Open TXT“ a celý obsah logu sem zkopíruj.
Pokud je program blokován , zkus ho spustit několikrát. Pokud dále program nepůjde spustit a pracovat, přejmenuj ho na winlogon.exe.

[Yanyc]

# AdwCleaner v5.005 - Logfile created 07/09/2015 at 07:53:00
# Updated 31/08/2015 by Xplode
# Database : 2015-09-04.4 [Server]
# Operating system : Windows 7 Home Premium Service Pack 1 (x64)
# Username : Yanycca - YANYCCA-HP
# Running from : C:\Users\Yanycca\Desktop\AdwCleaner.exe
# Option : Cleaning
# Support : http://toolslib.net/forum

***** [ Services ] *****

[-] Service Deleted : IHProtect Service

***** [ Folders ] *****

[-] Folder Deleted : C:\Program Files (x86)\XTab
[-] Folder Deleted : C:\Program Files (x86)\saLEprIIzese
[-] Folder Deleted : C:\ProgramData\WindowsMangerProtect
[-] Folder Deleted : C:\ProgramData\IHProtectUpDate
[-] Folder Deleted : C:\ProgramData\3429229179002711462
[-] Folder Deleted : C:\ProgramData\b9db3071000011d5
[-] Folder Deleted : C:\ProgramData\{6ecc695d-aa65-e263-6ecc-c695daa6a576}
[-] Folder Deleted : C:\ProgramData\{a4f45e19-3b51-822c-a4f4-45e193b57864}
[-] Folder Deleted : C:\ProgramData\{b08bb391-6254-1d44-b08b-bb391625ce45}
[-] Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PepperZip
[-] Folder Deleted : C:\Users\Yanycca\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghmjkjhkpmbkkkdegidkaelddbhjmmgi
[-] Folder Deleted : C:\Users\Yanycca\AppData\Roaming\Mozilla\Firefox\Profiles\pl7hbiog.default-1412367705961\Extensions\6jN@TJF.edu

***** [ Files ] *****

[-] File Deleted : C:\Users\Yanycca\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_wlogin.icq.com_0.localstorage-journal
[-] File Deleted : C:\Users\Yanycca\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.ask.com_0.localstorage-journal
[-] File Deleted : C:\Users\Yanycca\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.delta-homes.com_0.localstorage-journal
[-] File Deleted : C:\Users\Yanycca\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.mystartsearch.com_0.localstorage-journal
[-] File Deleted : C:\Users\Yanycca\AppData\Roaming\Mozilla\Firefox\Profiles\pl7hbiog.default-1412367705961\invalidprefs.js
[-] File Deleted : C:\Users\Yanycca\AppData\Roaming\Mozilla\Firefox\Profiles\pl7hbiog.default-1412367705961\searchplugins\delta-homes.xml
[-] File Deleted : C:\Windows\Sysnative\roboot64.exe

***** [ Shortcuts ] *****

[-] Shortcut Disinfected : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games\Crush the Castle 2.lnk

***** [ Scheduled tasks ] *****

[-] Task Deleted : ASP
[-] Task Deleted : PostPoneInstall
[-] Task Deleted : Run_Bobby_Browser

***** [ Registry ] *****

[-] Key Deleted : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WindowsMangerProtect
[-] Key Deleted : HKCU\Software\Classes\keepmysearch
[-] Key Deleted : HKCU\Software\Mozilla\Extends
[-] Key Deleted : HKCU\Software\Classes\MF
[-] Key Deleted : HKLM\SOFTWARE\Classes\P6EE2F4BF_7A3F_4ADA_BA9F_4C0F2372C365_.P6EE2F4BF_7A3F_4ADA_BA9F_4C0F2372C365_
[-] Key Deleted : HKLM\SOFTWARE\Classes\P6EE2F4BF_7A3F_4ADA_BA9F_4C0F2372C365_.P6EE2F4BF_7A3F_4ADA_BA9F_4C0F2372C365_.9
[-] Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [searchengine@gmail.com]
[-] Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [sweetsearch@gmail.com]
[-] Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [quick_searchff@gmail.com]
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{459DD0F7-0D55-D3DC-67BC-E6BE37E9D762}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{51D26BB4-4D2C-4AE4-9873-5FF41B6DED1F}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6EE2F4BF-7A3F-4ADA-BA9F-4C0F2372C365}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{7D3C47ED-E0BE-4940-9DDA-A7A097AEBD88}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{A993BCA4-1E58-474D-A36E-057CC6AC9CE5}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EE2F4BF-7A3F-4ADA-BA9F-4C0F2372C365}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{51D26BB4-4D2C-4AE4-9873-5FF41B6DED1F}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{51D26BB4-4D2C-4AE4-9873-5FF41B6DED1F}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{6EE2F4BF-7A3F-4ADA-BA9F-4C0F2372C365}
[-] Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{6EE2F4BF-7A3F-4ADA-BA9F-4C0F2372C365}]
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{6EE2F4BF-7A3F-4ADA-BA9F-4C0F2372C365}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EE2F4BF-7A3F-4ADA-BA9F-4C0F2372C365}
[-] Key Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EC29EDF6-AD3C-4E1C-A087-D6CB81400C43}
[-] Key Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EC29EDF6-AD3C-4E1C-A087-D6CB81400C43}
[-] Key Deleted : HKU\.DEFAULT\Software\AskPartnerNetwork
[-] Key Deleted : HKU\.DEFAULT\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
[-] Key Deleted : HKU\.DEFAULT\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}
[-] Key Deleted : HKCU\Software\Conduit
[-] Key Deleted : HKCU\Software\systweak
[-] Key Deleted : HKCU\Software\TutoTag
[-] Key Deleted : HKCU\Software\BoBrowser
[-] Key Deleted : HKCU\Software\Super Optimizer
[-] Key Deleted : HKCU\Software\DownLite
[-] Key Deleted : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
[-] Key Deleted : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
[-] Key Deleted : HKLM\SOFTWARE\{6791A2F3-FC80-475C-A002-C014AF797E9C}
[-] Key Deleted : HKLM\SOFTWARE\Conduit
[-] Key Deleted : HKLM\SOFTWARE\delta-homesSoftware
[-] Key Deleted : HKLM\SOFTWARE\SupDp
[-] Key Deleted : HKLM\SOFTWARE\SupTab
[-] Key Deleted : HKLM\SOFTWARE\systweak
[-] Key Deleted : HKLM\SOFTWARE\Tutorials
[-] Key Deleted : HKLM\SOFTWARE\Clara
[-] Key Deleted : HKLM\SOFTWARE\mystartsearchSoftware
[-] Key Deleted : HKLM\SOFTWARE\IHProtect
[-] Key Deleted : HKLM\SOFTWARE\FFPluginHp
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{450F78BE-2B5E-C81D-0656-897759985405}
[!] Key Not Deleted : [x64] HKCU\Software\Conduit
[!] Key Not Deleted : [x64] HKCU\Software\systweak
[!] Key Not Deleted : [x64] HKCU\Software\TutoTag
[!] Key Not Deleted : [x64] HKCU\Software\BoBrowser
[!] Key Not Deleted : [x64] HKCU\Software\Super Optimizer
[!] Key Not Deleted : [x64] HKCU\Software\DownLite
[-] Data Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]
[-] Data Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL]
[-] Data Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Search Page]
[-] Data Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Search_URL]
[-] Data Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
[-] Data Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
[-] Data Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
[-] Data Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
[-] Data Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
[-] Data Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
[-] Data Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
[-] Data Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
[-] Data Restored : HKU\S-1-5-21-699516785-416719656-4019490680-1000\Software\Microsoft\Internet Explorer\Main [Start Page]
[-] Data Restored : HKU\S-1-5-21-699516785-416719656-4019490680-1000\Software\Microsoft\Internet Explorer\Main [Default_Page_URL]
[-] Data Restored : HKU\S-1-5-21-699516785-416719656-4019490680-1000\Software\Microsoft\Internet Explorer\Main [Search Page]
[-] Data Restored : HKU\S-1-5-21-699516785-416719656-4019490680-1000\Software\Microsoft\Internet Explorer\Main [Default_Search_URL]
[-] Data Restored : HKU\S-1-5-21-699516785-416719656-4019490680-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main [Start Page]
[-] Data Restored : HKU\S-1-5-21-699516785-416719656-4019490680-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main [Default_Page_URL]
[-] Data Restored : HKU\S-1-5-21-699516785-416719656-4019490680-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main [Search Page]
[-] Data Restored : HKU\S-1-5-21-699516785-416719656-4019490680-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main [Default_Search_URL]
[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{012E1000-F331-11DB-8314-0800200C9A66}
[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[!] Key Not Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}
[-] Data Restored : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [DefaultScope]
[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{23CD58F5-757E-49C0-BFD0-5EE9507885FD}
[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}
[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{E733165D-CBCF-4FDA-883E-ADEF965B476C}
[!] Key Not Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{ec29edf6-ad3c-4e1c-a087-d6cb81400c43}
[!] Key Not Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{012E1000-F331-11DB-8314-0800200C9A66}
[!] Key Not Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[!] Key Not Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}
[-] Data Restored : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes [DefaultScope]
[!] Key Not Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{23CD58F5-757E-49C0-BFD0-5EE9507885FD}
[!] Key Not Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
[!] Key Not Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}
[!] Key Not Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{E733165D-CBCF-4FDA-883E-ADEF965B476C}
[!] Key Not Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{ec29edf6-ad3c-4e1c-a087-d6cb81400c43}
[!] Key Not Deleted : HKU\S-1-5-21-699516785-416719656-4019490680-1000\Software\Microsoft\Internet Explorer\SearchScopes\{012E1000-F331-11DB-8314-0800200C9A66}
[!] Key Not Deleted : HKU\S-1-5-21-699516785-416719656-4019490680-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[!] Key Not Deleted : HKU\S-1-5-21-699516785-416719656-4019490680-1000\Software\Microsoft\Internet Explorer\SearchScopes\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}
[-] Data Restored : HKU\S-1-5-21-699516785-416719656-4019490680-1000\Software\Microsoft\Internet Explorer\SearchScopes [DefaultScope]
[!] Key Not Deleted : HKU\S-1-5-21-699516785-416719656-4019490680-1000\Software\Microsoft\Internet Explorer\SearchScopes\{23CD58F5-757E-49C0-BFD0-5EE9507885FD}
[!] Key Not Deleted : HKU\S-1-5-21-699516785-416719656-4019490680-1000\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
[!] Key Not Deleted : HKU\S-1-5-21-699516785-416719656-4019490680-1000\Software\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}
[!] Key Not Deleted : HKU\S-1-5-21-699516785-416719656-4019490680-1000\Software\Microsoft\Internet Explorer\SearchScopes\{E733165D-CBCF-4FDA-883E-ADEF965B476C}
[!] Key Not Deleted : HKU\S-1-5-21-699516785-416719656-4019490680-1000\Software\Microsoft\Internet Explorer\SearchScopes\{ec29edf6-ad3c-4e1c-a087-d6cb81400c43}
[-] Key Deleted : HKU\S-1-5-21-699516785-416719656-4019490680-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\SearchScopes\{012E1000-F331-11DB-8314-0800200C9A66}
[-] Key Deleted : HKU\S-1-5-21-699516785-416719656-4019490680-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[-] Key Deleted : HKU\S-1-5-21-699516785-416719656-4019490680-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\SearchScopes\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}
[-] Data Restored : HKU\S-1-5-21-699516785-416719656-4019490680-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\SearchScopes [DefaultScope]
[-] Key Deleted : HKU\S-1-5-21-699516785-416719656-4019490680-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\SearchScopes\{23CD58F5-757E-49C0-BFD0-5EE9507885FD}
[-] Key Deleted : HKU\S-1-5-21-699516785-416719656-4019490680-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
[-] Key Deleted : HKU\S-1-5-21-699516785-416719656-4019490680-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}
[-] Key Deleted : HKU\S-1-5-21-699516785-416719656-4019490680-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\SearchScopes\{E733165D-CBCF-4FDA-883E-ADEF965B476C}
[-] Key Deleted : HKU\S-1-5-21-699516785-416719656-4019490680-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\SearchScopes\{ec29edf6-ad3c-4e1c-a087-d6cb81400c43}
[-] Data Restored : HKLM\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command []

***** [ Web browsers ] *****

[-] [C:\Users\Yanycca\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : cyberlinkpowerdirector.en.softonic.com
[-] [C:\Users\Yanycca\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Startup_URLs] Deleted : hxxp://www.delta-homes.com/?type=hp&ts= ... S_6VDCW339
[-] [C:\Users\Yanycca\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Default_Search_Provider] Deleted : hxxp://search.delta-homes.com/webfavicon.ico
[-] [C:\Users\Yanycca\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Deleted : ghmjkjhkpmbkkkdegidkaelddbhjmmgi

*************************

:: Winsock settings cleared

########## EOF - C:\AdwCleaner\AdwCleaner[C2].txt - [15139 bytes] ##########

[jerabina]

Pokračuj dále podle instrukcí, není to vše

[Yanyc]

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 7.6.0 (08.31.2015:1)
OS: Windows 7 Home Premium x64
Ran by Yanycca on po 07.09.2015 at 12:13:38,86
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services

Successfully deleted: [Service] pcsuucdrv [Reboot required]



~~~ Tasks



~~~ Registry Values

Successfully deleted: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\gmsd_it_232
Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search\\SearchAssistant



~~~ Registry Keys



~~~ Files

Successfully deleted: [File] C:\Users\Yanycca\Appdata\Local\google\chrome\user data\default\local storage\hxxp_static.ak.facebook.com_0.localstorage-journal
Successfully deleted: [File] C:\Users\Yanycca\Appdata\Local\google\chrome\user data\default\local storage\hxxp_static.audienceinsights.net_0.localstorage-journal



~~~ Folders

Successfully deleted: [Empty Folder] C:\Users\Yanycca\Appdata\Local\{0DE8D6FC-F672-4D0B-88AA-317AE9F48543}
Successfully deleted: [Empty Folder] C:\Users\Yanycca\Appdata\Local\{2E946EB6-61C2-4361-A291-4FAA2EB0CBE8}
Successfully deleted: [Empty Folder] C:\Users\Yanycca\Appdata\Local\{2F1A29E4-A9F2-4EA5-A367-CE123EA5B8D9}
Successfully deleted: [Empty Folder] C:\Users\Yanycca\Appdata\Local\{715318A6-06E2-41FE-A7A0-8909E9844BB7}
Successfully deleted: [Empty Folder] C:\Users\Yanycca\Appdata\Local\{9FFD48A7-42BF-467A-AA18-76D529B5B0B5}
Successfully deleted: [Empty Folder] C:\Users\Yanycca\Appdata\Local\{B13F487B-FD8A-46F6-B6E6-2493CCF5D92D}
Successfully deleted: [Empty Folder] C:\Users\Yanycca\Appdata\Local\{B35E70A6-C656-4942-A662-9C3EE758E0B2}
Successfully deleted: [Empty Folder] C:\Users\Yanycca\Appdata\Local\{C19508E1-302A-4222-A3AA-6216B64DB5E8}
Successfully deleted: [Empty Folder] C:\Users\Yanycca\Appdata\Local\{C2F30EE3-51C0-44B0-9AD7-93F42DB5F907}
Successfully deleted: [Empty Folder] C:\Users\Yanycca\Appdata\Local\{D13707A8-F945-4D37-8350-9D0CB24717DD}
Successfully deleted: [Empty Folder] C:\Users\Yanycca\Appdata\Local\{D5997FF1-9A90-4868-AD09-BC2697C31F0D}
Successfully deleted: [Empty Folder] C:\Users\Yanycca\Appdata\Local\{E7C1B6FA-C490-4B61-9345-B406C6C8ACE3}
Successfully deleted: [Empty Folder] C:\Users\Yanycca\Appdata\Local\{F20323B6-ECDF-465D-9EC0-74707CA4A8D9}



~~~ FireFox

Failed to delete: [File] C:\Users\Yanycca\AppData\Roaming\mozilla\firefox\profiles\pl7hbiog.default-1412367705961\invalidprefs.js
Emptied folder: C:\Users\Yanycca\AppData\Roaming\mozilla\firefox\profiles\pl7hbiog.default-1412367705961\minidumps [4 files]



~~~ Chrome


[C:\Users\Yanycca\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - default search provider reset

[C:\Users\Yanycca\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - Extensions Deleted:

[C:\Users\Yanycca\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - default search provider reset

[C:\Users\Yanycca\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - Extensions Deleted:
[]





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on po 07.09.2015 at 12:24:44,92
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

[Yanyc]

Anti malwer jsem posílala včera, mám ještě jednou??? Jdu na Killera, omlouvám, se že mi to tak trvá... (Posun času a práce)

[Yanyc]

Malwarebytes Anti-Malware
www.malwarebytes.org

Datum skenování: 7.9.2015
Čas skenování: 16:16
Protokol:
Správce: Ano

Verze: 2.1.8.1057
Databáze malwaru: v2015.09.07.02
Databáze rootkitů: v2015.08.16.01
Licence: Zkušební verze
Ochrana proti malwaru: Zapnuto
Ochrana proti škodlivým webovým stránkám: Zapnuto
Ochrana programu: Vypnuto

OS: Windows 7 Service Pack 1
CPU: x64
Souborový systém: NTFS
Uživatel: Yanycca

Typ skenu: Sken hrozeb
Výsledek: Dokončeno
Prohledaných objektů: 384548
Uplynulý čas: 36 min, 35 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Vypnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto

Procesy: 0
(Nenalezeny žádné škodlivé položky)

Moduly: 0
(Nenalezeny žádné škodlivé položky)

Klíče registru: 4
PUM.Security.Hijack.DisableChromeUpdates, HKLM\SOFTWARE\POLICIES\GOOGLE\UPDATE, , [f01eed40088385b1e38b4728e02428d8],
PUP.Optional.MultiPlug, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{1146AC44-2F03-4431-B4FD-889BC837521F}{cae99edb}, , [6ba3eb42f497181e6b2a58488f75ab55],
PUM.Security.Hijack.DisableChromeUpdates, HKLM\SOFTWARE\WOW6432NODE\POLICIES\GOOGLE\UPDATE, , [4dc1bb72ed9eca6c036b6c03af55857b],
PUP.Optional.OutBrowse, HKU\S-1-5-21-699516785-416719656-4019490680-1000\SOFTWARE\OB, , [11fd8ca1216a1323ccfd584b956f38c8],

Hodnoty registru: 3
PUM.Security.Hijack.DisableChromeUpdates, HKLM\SOFTWARE\POLICIES\GOOGLE\UPDATE|DisableAutoUpdateChecksCheckboxValue, 1, , [f01eed40088385b1e38b4728e02428d8]
PUM.Security.Hijack.DisableChromeUpdates, HKLM\SOFTWARE\WOW6432NODE\POLICIES\GOOGLE\UPDATE|DisableAutoUpdateChecksCheckboxValue, 1, , [4dc1bb72ed9eca6c036b6c03af55857b]
PUP.Optional.OutBrowse, HKU\S-1-5-21-699516785-416719656-4019490680-1000\SOFTWARE\OB|monitype6, 6/17/14 19:0:21, , [11fd8ca1216a1323ccfd584b956f38c8]

Data registru: 0
(Nenalezeny žádné škodlivé položky)

Složky: 1
PUP.Optional.KeepNBrowse, C:\ProgramData\KeepnBrowse, , [32dc65c80f7c6bcb6bc00d0224df4eb2],

Soubory: 0
(Nenalezeny žádné škodlivé položky)

Fyzické sektory: 0
(Nenalezeny žádné škodlivé položky)


(end)

[jerabina]

V pohodě, potom jenom dodej ještě ten RogueKiller a vyčistíme to.