Prosím o kontrolu logu HJT

hollca · Příspěvekod **hollca** » 11 dub 2016 16:19

Prosím o kontrolu

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 16:18:24, on 11.4.2016
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.10586.0020)

Boot mode: Normal

Running processes:
C:\Program Files (x86)\Google\Drive\googledrivesync.exe
C:\Program Files (x86)\Google\Drive\googledrivesync.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\PROGRA~2\RAPTRI~1\Raptr\raptr.exe
C:\PROGRA~2\RAPTRI~1\Raptr\raptr_im.exe
C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkypeHost.exe
C:\Program Files\Sony\VAIO Care\listener.exe
C:\Users\holan_000\Documents\SW\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?trackid=sp-006
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~2\Office14\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~2\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: (no name) - {00011268-E188-40DF-A514-835FCD78B1BF} - (no file)
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [Raptr] "C:\Program Files (x86)\Raptr Inc\Raptr\raptrstub.exe" --startup
O4 - HKCU\..\Run: [GoogleDriveSync] "C:\Program Files (x86)\Google\Drive\googledrivesync.exe" /autostart
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\RunOnce: [Uninstall C:\Users\holan_000\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\amd64] C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\holan_000\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\amd64"
O4 - HKCU\..\RunOnce: [Uninstall C:\Users\holan_000\AppData\Local\Microsoft\OneDrive\17.3.6201.1019_1\amd64] C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\holan_000\AppData\Local\Microsoft\OneDrive\17.3.6201.1019_1\amd64"
O4 - HKLM\..\Policies\Explorer\Run: [BtvStack] "C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe"
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\Program Files (x86)\Microsoft Office\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\freeytmp3downloader.htm
O10 - Unknown file in Winsock LSP: c:\windows\syswow64\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\syswow64\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\WINDOWS\system32\atiesrxx.exe (file missing)
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: Energy Server Service (ESRV_SVC) - Intel Corporation - C:\Program Files\Sony\VAIO Care\ESRV\esrv_svc.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) Wireless Bluetooth(R) 4.0 Radio Management - Intel Corporation - C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Origin Client Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginClientService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: Intel(R) System Behavior Tracker Collector Service (SampleCollector) - Intel Corporation - C:\Program Files\Sony\VAIO Care\VCPerfService.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\WINDOWS\system32\TieringEngineService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: User Energy Server Service (USER_ESRV_SVC) - Intel Corporation - C:\Program Files\Sony\VAIO Care\ESRV\esrv_svc.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: VCService - Sony Corporation - C:\Program Files\Sony\VAIO Care\VCService.exe
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: ZAtheros Bt and Wlan Coex Agent - Atheros - C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe

--
End of file - 10040 bytes

Reklama

Příspěvekod **jaro3** » 12 dub 2016 09:07

Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected. Poté klikni na Main (hlavní stránku ) a klikni na Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranění historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit dočasné soubory Windows, vysypat koš atd.

- Pokud používáš jen Google Chrome , tak ATF nemusíš použít.

Stáhni si TFC
http://www.geekstogo.com/forum/files/fi ... -oldtimer/
Otevři soubor a zavři všechny ostatní okna, Klikni na Start k zahájení procesu. Program by neměl trvat dlouho.
Poté by se měl PC restartovat, pokud ne , proveď sám.

Stáhni AdwCleaner (by Xplode)
http://www.bleepingcomputer.com/download/adwcleaner/

Ulož si ho na svojí plochu
Ukonči všechny programy , okna a prohlížeče
Spusť program poklepáním a klikni na „Prohledat-Scan“
Po skenu klikni na „Logfile“ ,objeví log ( jinak je uložen systémovem disku jako AdwCleaner[C?].txt), jeho obsah sem celý vlož.

Stáhni si Malwarebytes' Anti-Malware
- Při instalaci odeber zatržítko u „Povolit bezplatnou zkušební verzi Malwarebytes' Anti-Malware Premium“
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Aktualizace Malwarebytes' Anti-Malware a Spustit aplikaci Malwarebytes' Anti-Malware, pokud jo tak klikni na tlačítko konec
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a klikni na Skenovat nyní a
- po proběhnutí programu se ti objeví hláška vpravo dole tak klikni na Kopírovat do schránky a vlož sem celý log.

- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).

Pokud budou problémy , spusť v nouz. režimu.

hollca · Příspěvekod **hollca** » 12 dub 2016 20:32

ADW log:

# AdwCleaner v5.110 - Log soubor vytvořen 12/04/2016 o 19:38:04
# Aktualizováno 10/04/2016 by Xplode
# Databáze : 2016-04-11.4 [Server]
# Operační systém : Windows 10 Pro (X64)
# Jméno uživatele : holan_000 - VAIO
# Spuštěno z : C:\Users\holan_000\Desktop\adwcleaner_5.110.exe
# Volba : Skenovat
# Podpora : http://toolslib.net/forum

***** [ Služby ] *****

***** [ Složky ] *****

Složka nalezeno : C:\Program Files (x86)\TNT2
Složka nalezeno : C:\ProgramData\simplitec
Složka nalezeno : C:\Users\Host\AppData\Local\TNT2

***** [ Soubory ] *****

Soubor nalezeno : C:\Users\holan_000\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_st.chatango.com_0.localstorage
Soubor nalezeno : C:\Users\holan_000\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_st.chatango.com_0.localstorage-journal
Soubor nalezeno : C:\Users\holan_000\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_st.chatango.com_0.localstorage
Soubor nalezeno : C:\Users\holan_000\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_st.chatango.com_0.localstorage-journal
Soubor nalezeno : C:\Users\Host\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_dsms0mj1bbhn4.cloudfront.net_0.localstorage
Soubor nalezeno : C:\Users\Host\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_dsms0mj1bbhn4.cloudfront.net_0.localstorage-journal
Soubor nalezeno : C:\Users\Host\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_st.chatango.com_0.localstorage
Soubor nalezeno : C:\Users\Host\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_st.chatango.com_0.localstorage-journal
Soubor nalezeno : C:\Users\Host\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_vlc-media-player.en.softonic.com_0.localstorage
Soubor nalezeno : C:\Users\Host\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_vlc-media-player.en.softonic.com_0.localstorage-journal
Soubor nalezeno : C:\Users\Host\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_st.chatango.com_0.localstorage
Soubor nalezeno : C:\Users\Host\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_st.chatango.com_0.localstorage-journal

***** [ DLL ] *****

***** [ Zástupci ] *****

***** [ Naplánované úkoly ] *****

***** [ Registr ] *****

Hodnota nalezeno : HKLM\SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION [App Lid-bg.exe]
Hodnota nalezeno : HKCU\Software\Mozilla\Firefox\Extensions [{b64d9b05-48e1-4ceb-bf58-e0643994e900}]
Klávesa nalezeno : HKLM\SOFTWARE\Classes\CLSID\{0FEB2313-F89B-4AC6-8153-84025604A06A}
Klávesa nalezeno : HKLM\SOFTWARE\Classes\CLSID\{8BF0126F-A5B7-4720-ABB2-2414A0AF5474}
Klávesa nalezeno : HKLM\SOFTWARE\Classes\Interface\{0FEB2313-F89B-4AC6-8153-84025604A06A}
Klávesa nalezeno : HKLM\SOFTWARE\Classes\Interface\{02F878DF-E2BE-4B85-8CB4-A0D2D4E2ED7F}
Klávesa nalezeno : HKLM\SOFTWARE\Classes\Interface\{2AF343DD-3102-4F9D-AC95-DCA4C95382C7}
Klávesa nalezeno : HKLM\SOFTWARE\Classes\Interface\{3137BC14-D8D7-4B67-8FFA-2E0B2E9D541B}
Klávesa nalezeno : HKLM\SOFTWARE\Classes\Interface\{4CA2AC92-971B-47B1-ACB6-357B552155AC}
Klávesa nalezeno : HKLM\SOFTWARE\Classes\Interface\{52C5395B-1FCD-47FA-A834-FD830701C2D5}
Klávesa nalezeno : HKLM\SOFTWARE\Classes\Interface\{5D3DCC39-9233-4330-94E9-DA92BE49CA1A}
Klávesa nalezeno : HKLM\SOFTWARE\Classes\Interface\{615FACDF-DADB-440D-AC91-8AAB0AE9E3AD}
Klávesa nalezeno : HKLM\SOFTWARE\Classes\Interface\{762D463B-C45A-456D-A80D-8689C297C91E}
Klávesa nalezeno : HKLM\SOFTWARE\Classes\Interface\{7A6BE473-7960-44D0-BD54-D23DA76353DF}
Klávesa nalezeno : HKLM\SOFTWARE\Classes\Interface\{803F550E-BAAE-42BB-8917-64BA0006AB17}
Klávesa nalezeno : HKLM\SOFTWARE\Classes\Interface\{8D5BC51D-C9D3-43B9-B728-B30677B7C7E8}
Klávesa nalezeno : HKLM\SOFTWARE\Classes\Interface\{991C9D8D-A789-4DB9-BDFC-5F33398B04BF}
Klávesa nalezeno : HKLM\SOFTWARE\Classes\Interface\{A5ACC874-D943-483F-A2D1-14598D51F872}
Klávesa nalezeno : HKLM\SOFTWARE\Classes\Interface\{B0474212-0D9D-4361-90B3-B89D1A44275D}
Klávesa nalezeno : HKLM\SOFTWARE\Classes\Interface\{BFDE183A-C6FE-41D2-80F9-586C29210AC2}
Klávesa nalezeno : HKLM\SOFTWARE\Classes\Interface\{D83C83BF-3EDD-4410-ADAB-5295116DD8C7}
Klávesa nalezeno : HKLM\SOFTWARE\Classes\Interface\{DD260902-9420-4055-A956-9152EB4F3E6A}
Klávesa nalezeno : HKLM\SOFTWARE\Classes\Interface\{EB1F9F3C-5526-4DAE-BD4B-3EAA7715DA9F}
Klávesa nalezeno : HKLM\SOFTWARE\Classes\Interface\{F1912128-469A-4138-AA26-9699C15BB13E}
Klávesa nalezeno : HKLM\SOFTWARE\Classes\Interface\{F68DC16C-9C2B-455B-8853-7E4D34BAA3F4}
Klávesa nalezeno : HKLM\SOFTWARE\Classes\Interface\{FBA8498F-B3A0-4942-A2BF-E0CB7BC7E000}
Klávesa nalezeno : HKLM\SOFTWARE\Classes\Interface\{A8F7D0A5-7074-40B8-9BDC-1174BDD0A132}
Klávesa nalezeno : HKLM\SOFTWARE\Classes\Interface\{D14D64BC-A0E4-42E3-BB72-FB41EA43C198}
Klávesa nalezeno : HKLM\SOFTWARE\Classes\Interface\{DD1F043F-ABC8-4643-8B95-D2C5B22BB019}
Klávesa nalezeno : HKLM\SOFTWARE\Classes\Interface\{E3F3E8F9-F747-4DD6-BA6B-82A6CE1E0860}
Klávesa nalezeno : HKLM\SOFTWARE\Classes\Interface\{ED0B64D4-BF27-4521-AD27-190F49BF5EA7}
Klávesa nalezeno : HKLM\SOFTWARE\Classes\Interface\{023E9EC8-B147-40EB-B0B3-DF90618FB371}
Klávesa nalezeno : HKLM\SOFTWARE\Classes\Interface\{0522D9A4-4D57-437D-978D-E5B3B6C9005D}
Klávesa nalezeno : HKLM\SOFTWARE\Classes\Interface\{07F41522-AF7D-4F26-B394-094F059FDB8A}
Klávesa nalezeno : HKLM\SOFTWARE\Classes\Interface\{0C40F472-7407-4467-8914-1DEA7C326972}
Klávesa nalezeno : HKLM\SOFTWARE\Classes\Interface\{212E6D43-6062-492A-B8CC-144669FF11ED}
Klávesa nalezeno : HKLM\SOFTWARE\Classes\Interface\{224FE662-1E6D-4BC0-AEBB-9E2FB4057BE9}
Klávesa nalezeno : HKLM\SOFTWARE\Classes\Interface\{3A807417-B46D-4D37-8C9A-19AC6DE204F9}
Klávesa nalezeno : HKLM\SOFTWARE\Classes\Interface\{3CC60715-D6C5-429D-830E-43FA3F86C61D}
Klávesa nalezeno : HKLM\SOFTWARE\Classes\Interface\{4517D94C-19BA-46FA-BE66-2A30CEAC4A85}
Klávesa nalezeno : HKLM\SOFTWARE\Classes\Interface\{555D7146-94A8-4C94-AE76-C39CDC7F7705}
Klávesa nalezeno : HKLM\SOFTWARE\Classes\Interface\{59D188FA-757A-424E-8C93-F58FFD896BD7}
Klávesa nalezeno : HKLM\SOFTWARE\Classes\Interface\{8120D9D6-785C-4413-9C0C-DF2028C56FAD}
Klávesa nalezeno : HKLM\SOFTWARE\Classes\Interface\{823AE2EB-E62C-4847-B192-C99B91B92416}
Klávesa nalezeno : HKLM\SOFTWARE\Classes\Interface\{9B4F7CFE-987D-410E-A8E4-20182E0B3C24}
Klávesa nalezeno : HKLM\SOFTWARE\Classes\Interface\{9B9A45F4-18FC-484A-BACA-076D78273D8E}
Klávesa nalezeno : HKLM\SOFTWARE\Classes\Interface\{A6D54287-7939-466A-8579-92546D946C8C}
Klávesa nalezeno : HKLM\SOFTWARE\Classes\Interface\{A78EDAFB-926F-4D93-AB13-8232D7378EB1}
Klávesa nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Klávesa nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Klávesa nalezeno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{72A6AB0F-2FA8-4C73-9FCB-1E62A608F001}
Klávesa nalezeno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2b601e8c-eed0-4593-ab22-c195303569ab}
Klávesa nalezeno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{cedf6338-389b-41a3-96c9-1093e60189e8}
Klávesa nalezeno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{d0e9d4ae-3d7e-4920-8ab6-640a14100009}
Hodnota nalezeno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{00011268-E188-40DF-A514-835FCD78B1BF}]
Klávesa nalezeno : [x64] HKLM\SOFTWARE\Classes\CLSID\{0FEB2313-F89B-4AC6-8153-84025604A06A}
Klávesa nalezeno : [x64] HKLM\SOFTWARE\Classes\Interface\{0FEB2313-F89B-4AC6-8153-84025604A06A}
Klávesa nalezeno : [x64] HKLM\SOFTWARE\Classes\Interface\{02F878DF-E2BE-4B85-8CB4-A0D2D4E2ED7F}
Klávesa nalezeno : [x64] HKLM\SOFTWARE\Classes\Interface\{2AF343DD-3102-4F9D-AC95-DCA4C95382C7}
Klávesa nalezeno : [x64] HKLM\SOFTWARE\Classes\Interface\{3137BC14-D8D7-4B67-8FFA-2E0B2E9D541B}
Klávesa nalezeno : [x64] HKLM\SOFTWARE\Classes\Interface\{4CA2AC92-971B-47B1-ACB6-357B552155AC}
Klávesa nalezeno : [x64] HKLM\SOFTWARE\Classes\Interface\{52C5395B-1FCD-47FA-A834-FD830701C2D5}
Klávesa nalezeno : [x64] HKLM\SOFTWARE\Classes\Interface\{5D3DCC39-9233-4330-94E9-DA92BE49CA1A}
Klávesa nalezeno : [x64] HKLM\SOFTWARE\Classes\Interface\{615FACDF-DADB-440D-AC91-8AAB0AE9E3AD}
Klávesa nalezeno : [x64] HKLM\SOFTWARE\Classes\Interface\{762D463B-C45A-456D-A80D-8689C297C91E}
Klávesa nalezeno : [x64] HKLM\SOFTWARE\Classes\Interface\{7A6BE473-7960-44D0-BD54-D23DA76353DF}
Klávesa nalezeno : [x64] HKLM\SOFTWARE\Classes\Interface\{803F550E-BAAE-42BB-8917-64BA0006AB17}
Klávesa nalezeno : [x64] HKLM\SOFTWARE\Classes\Interface\{8D5BC51D-C9D3-43B9-B728-B30677B7C7E8}
Klávesa nalezeno : [x64] HKLM\SOFTWARE\Classes\Interface\{991C9D8D-A789-4DB9-BDFC-5F33398B04BF}
Klávesa nalezeno : [x64] HKLM\SOFTWARE\Classes\Interface\{A5ACC874-D943-483F-A2D1-14598D51F872}
Klávesa nalezeno : [x64] HKLM\SOFTWARE\Classes\Interface\{B0474212-0D9D-4361-90B3-B89D1A44275D}
Klávesa nalezeno : [x64] HKLM\SOFTWARE\Classes\Interface\{BFDE183A-C6FE-41D2-80F9-586C29210AC2}
Klávesa nalezeno : [x64] HKLM\SOFTWARE\Classes\Interface\{D83C83BF-3EDD-4410-ADAB-5295116DD8C7}
Klávesa nalezeno : [x64] HKLM\SOFTWARE\Classes\Interface\{DD260902-9420-4055-A956-9152EB4F3E6A}
Klávesa nalezeno : [x64] HKLM\SOFTWARE\Classes\Interface\{EB1F9F3C-5526-4DAE-BD4B-3EAA7715DA9F}
Klávesa nalezeno : [x64] HKLM\SOFTWARE\Classes\Interface\{F1912128-469A-4138-AA26-9699C15BB13E}
Klávesa nalezeno : [x64] HKLM\SOFTWARE\Classes\Interface\{F68DC16C-9C2B-455B-8853-7E4D34BAA3F4}
Klávesa nalezeno : [x64] HKLM\SOFTWARE\Classes\Interface\{FBA8498F-B3A0-4942-A2BF-E0CB7BC7E000}
Hodnota nalezeno : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{00011268-E188-40DF-A514-835FCD78B1BF}]
Klávesa nalezeno : HKCU\Software\WEBAPP
Klávesa nalezeno : HKLM\SOFTWARE\simplitec
Klávesa nalezeno : HKU\S-1-5-21-300859844-1961672170-2238026608-1007\Software\WEBAPP
Klávesa nalezeno : HKU\S-1-5-21-300859844-1961672170-2238026608-1007\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\App Lid
Klávesa nalezeno : HKU\S-1-5-21-300859844-1961672170-2238026608-1007\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\Crossrider
Hodnota nalezeno : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules [{19A47F34-B035-47BF-91A3-B0FD93252926}]

***** [ Webové prohlížeče ] *****

[C:\Users\holan_000\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] nalezeno : webssearches
[C:\Users\holan_000\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] nalezeno : game-for-windows-live.en.softonic.com
[C:\Users\holan_000\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] nalezeno : delta-search.com
[C:\Users\holan_000\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] nalezeno : dts.search-results.com
[C:\Users\holan_000\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] nalezeno : istart.webssearches.com
[C:\Users\holan_000\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] nalezeno : r
[C:\Users\holan_000\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] nalezeno : yahoo.com

*************************

C:\AdwCleaner\AdwCleaner[S1].txt - [11649 bytes] - [12/04/2016 19:38:04]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [11723 bytes] ##########

Mbam log:

Malwarebytes Anti-Malware
www.malwarebytes.org

Datum skenování: 12.4.2016
Čas skenování: 19:49
Protokol:
Správce: Ano

Verze: 2.2.1.1043
Databáze malwaru: v2016.04.12.06
Databáze rootkitů: v2016.04.09.01
Licence: Bezplatná verze
Ochrana proti malwaru: Vypnuto
Ochrana proti škodlivým webovým stránkám: Vypnuto
Ochrana programu: Vypnuto

OS: Windows 10
CPU: x64
Souborový systém: NTFS
Uživatel: holan_000

Typ skenu: Sken hrozeb
Výsledek: Dokončeno
Prohledaných objektů: 461858
Uplynulý čas: 39 min, 35 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Vypnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto

Procesy: 0
(Nenalezeny žádné škodlivé položky)

Moduly: 0
(Nenalezeny žádné škodlivé položky)

Klíče registru: 43
PUP.Optional.FindWide, HKLM\SOFTWARE\CLASSES\CLSID\{0FEB2313-F89B-4AC6-8153-84025604A06A}, , [da1c3b72efaaeb4bfca05193d72b54ac],
PUP.Optional.FindWide, HKLM\SOFTWARE\CLASSES\INTERFACE\{0FEB2313-F89B-4AC6-8153-84025604A06A}, , [da1c3b72efaaeb4bfca05193d72b54ac],
PUP.Optional.FindWide, HKU\S-1-5-21-300859844-1961672170-2238026608-1006_Classes\INTERFACE\{0FEB2313-F89B-4AC6-8153-84025604A06A}, , [da1c3b72efaaeb4bfca05193d72b54ac],
PUP.Optional.FindWide, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{0FEB2313-F89B-4AC6-8153-84025604A06A}, , [da1c3b72efaaeb4bfca05193d72b54ac],
PUP.Optional.FindWide, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{0FEB2313-F89B-4AC6-8153-84025604A06A}, , [da1c3b72efaaeb4bfca05193d72b54ac],
PUP.Optional.FindWide, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{0FEB2313-F89B-4AC6-8153-84025604A06A}, , [da1c3b72efaaeb4bfca05193d72b54ac],
PUP.Optional.FindWide, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{0FEB2313-F89B-4AC6-8153-84025604A06A}, , [da1c3b72efaaeb4bfca05193d72b54ac],
PUP.Optional.SweetIM, HKU\S-1-5-21-300859844-1961672170-2238026608-1006\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{DEDAF650-12B8-48F5-A843-BBA100716106}, , [f7ff4d60a5f4dc5aaef1f9e9c63cd42c],
PUP.Optional.TidyNetwork, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{72A6AB0F-2FA8-4C73-9FCB-1E62A608F001}, , [16e0d6d7f8a185b1963180622dd5be42],
PUP.Optional.TNT2, HKU\S-1-5-21-300859844-1961672170-2238026608-1006_Classes\TYPELIB\{ABB8A8A5-FF98-40F6-B573-5841B063EA37}, , [2ec8feaf475258deff781de38e7455ab],
PUP.Optional.TNT2, HKU\S-1-5-21-300859844-1961672170-2238026608-1006_Classes\INTERFACE\{02F878DF-E2BE-4B85-8CB4-A0D2D4E2ED7F}, , [2ec8feaf475258deff781de38e7455ab],
PUP.Optional.TNT2, HKU\S-1-5-21-300859844-1961672170-2238026608-1006_Classes\INTERFACE\{30510474-98B5-11CF-BB82-00AA00BDCE0B}, , [2ec8feaf475258deff781de38e7455ab],
PUP.Optional.TNT2, HKU\S-1-5-21-300859844-1961672170-2238026608-1006_Classes\INTERFACE\{52C5395B-1FCD-47FA-A834-FD830701C2D5}, , [2ec8feaf475258deff781de38e7455ab],
PUP.Optional.TNT2, HKU\S-1-5-21-300859844-1961672170-2238026608-1006_Classes\INTERFACE\{762D463B-C45A-456D-A80D-8689C297C91E}, , [2ec8feaf475258deff781de38e7455ab],
PUP.Optional.TNT2, HKU\S-1-5-21-300859844-1961672170-2238026608-1006_Classes\INTERFACE\{7A6BE473-7960-44D0-BD54-D23DA76353DF}, , [2ec8feaf475258deff781de38e7455ab],
PUP.Optional.TNT2, HKU\S-1-5-21-300859844-1961672170-2238026608-1006_Classes\INTERFACE\{803F550E-BAAE-42BB-8917-64BA0006AB17}, , [2ec8feaf475258deff781de38e7455ab],
PUP.Optional.TNT2, HKU\S-1-5-21-300859844-1961672170-2238026608-1006_Classes\INTERFACE\{8D5BC51D-C9D3-43B9-B728-B30677B7C7E8}, , [2ec8feaf475258deff781de38e7455ab],
PUP.Optional.TNT2, HKU\S-1-5-21-300859844-1961672170-2238026608-1006_Classes\INTERFACE\{991C9D8D-A789-4DB9-BDFC-5F33398B04BF}, , [2ec8feaf475258deff781de38e7455ab],
PUP.Optional.TNT2, HKU\S-1-5-21-300859844-1961672170-2238026608-1006_Classes\INTERFACE\{D83C83BF-3EDD-4410-ADAB-5295116DD8C7}, , [2ec8feaf475258deff781de38e7455ab],
PUP.Optional.TNT2, HKU\S-1-5-21-300859844-1961672170-2238026608-1006_Classes\INTERFACE\{EB1F9F3C-5526-4DAE-BD4B-3EAA7715DA9F}, , [2ec8feaf475258deff781de38e7455ab],
PUP.Optional.TNT2, HKU\S-1-5-21-300859844-1961672170-2238026608-1006_Classes\INTERFACE\{EBBC143E-44AC-4B9C-BCCE-9A0E42921F2A}, , [2ec8feaf475258deff781de38e7455ab],
PUP.Optional.TNT2, HKU\S-1-5-21-300859844-1961672170-2238026608-1006_Classes\INTERFACE\{F1912128-469A-4138-AA26-9699C15BB13E}, , [2ec8feaf475258deff781de38e7455ab],
PUP.Optional.TNT2, HKU\S-1-5-21-300859844-1961672170-2238026608-1006_Classes\INTERFACE\{F68DC16C-9C2B-455B-8853-7E4D34BAA3F4}, , [2ec8feaf475258deff781de38e7455ab],
PUP.Optional.TNT2, HKU\S-1-5-21-300859844-1961672170-2238026608-1006\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{6EC39021-0EEE-4734-BF95-3AF29806A5D0}, , [2ec8feaf475258deff781de38e7455ab],
PUP.Optional.eShield, HKLM\SOFTWARE\GOOGLE\CHROME\NATIVEMESSAGINGHOSTS\com.eshield.extension_host, , [0aec08a56f2a56e0efe1dd9cb3513ac6],
PUP.Optional.eShield, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\dkmjljdbbgogihjcapfhgkonfmccbffp, , [6393ac010f8a7eb8d14e87993ec6a858],
PUP.Optional.CrossRider, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2B601E8C-EED0-4593-AB22-C195303569AB}, , [e11518951980211503efc75438cc936d],
PUP.Optional.CrossRider, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CEDF6338-389B-41A3-96C9-1093E60189E8}, , [ab4bfdb0d4c562d43ab939e2f113bf41],
PUP.Optional.CrossRider, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D0E9D4AE-3D7E-4920-8AB6-640A14100009}, , [34c2317cd5c4ec4a1dd7fe1d8d7741bf],
PUP.Optional.TNT, HKU\S-1-5-21-300859844-1961672170-2238026608-1006\SOFTWARE\TNT2, , [6492feaf6f2a87aff35e370f54b0d42c],
PUP.Optional.TidyNetwork, HKU\S-1-5-21-300859844-1961672170-2238026608-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\DRAGDROP\{70BC1CDB-0744-4172-BDA0-B5A487D00C3A}, , [d323733a9efb122484a11531e222cc34],
PUP.Optional.TNT, HKU\S-1-5-21-300859844-1961672170-2238026608-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{72A6AB0F-2FA8-4C73-9FCB-1E62A608F001}, , [579f832a9efbb383c58a6cdaa55f17e9],
PUP.Optional.CrossRider, HKU\S-1-5-21-300859844-1961672170-2238026608-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{816184C1-CC29-4F27-A099-B5AC591A947C}, , [1bdbdecf970283b3c61057c407fd0af6],
PUP.Optional.CrossRider, HKU\S-1-5-21-300859844-1961672170-2238026608-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{93470BF0-7D1B-437F-8C6A-70857A79BBA8}, , [9660ac0149501b1bc01763b8669e6b95],
PUP.Optional.CrossRider, HKU\S-1-5-21-300859844-1961672170-2238026608-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A9024087-3672-44FA-93D3-2B2AD85258D7}, , [2cca515c871200368e4950cba16321df],
PUP.Optional.CrossRider, HKU\S-1-5-21-300859844-1961672170-2238026608-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E9324081-24DC-4401-8F4A-FF9247616AB9}, , [8175119cddbc7eb8894d0417df25ea16],
PUP.Optional.TNT, HKU\S-1-5-21-300859844-1961672170-2238026608-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{452A7604-C8E8-4C53-B8EA-91A106478EFE}, , [41b56449f6a32b0b123eef5742c26997],
PUP.Optional.TNT, HKU\S-1-5-21-300859844-1961672170-2238026608-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{5EFC2918-29AE-401B-9A8B-53BBBA97378A}, , [886e3677fb9e88ae52fe271f33d110f0],
PUP.Optional.TidyNetwork, HKU\S-1-5-21-300859844-1961672170-2238026608-1006\SOFTWARE\MOZILLAPLUGINS\@tnt2npapi.com/Plugin, , [f9fd337a3069c472fa302521ef15738d],
PUP.Optional.CrossRider, HKU\S-1-5-21-300859844-1961672170-2238026608-1006_Classes\LOCAL SETTINGS\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\APPCONTAINER\STORAGE\WINDOWS_IE_AC_001\SOFTWARE\Crossrider, , [3abce9c4f2a75dd99d9c5d2856aeca36],
PUP.Optional.CrossRider, HKU\S-1-5-21-300859844-1961672170-2238026608-1007_Classes\LOCAL SETTINGS\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\APPCONTAINER\STORAGE\WINDOWS_IE_AC_001\SOFTWARE\Crossrider, , [27cfc2ebbbde3afc8eabc8bd3aca7888],
PUP.Optional.TidyNetwork, HKU\S-1-5-21-300859844-1961672170-2238026608-1006_Classes\CLSID\{00011268-E188-40DF-A514-835FCD78B1BF}, , [80765c51afeabd7947ca869b80837a86],
PUP.Optional.TidyNetwork, HKU\S-1-5-21-300859844-1961672170-2238026608-1006\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{00011268-E188-40DF-A514-835FCD78B1BF}, , [80765c51afeabd7947ca869b80837a86],

Hodnoty registru: 17
PUP.Optional.CrossRider, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2b601e8c-eed0-4593-ab22-c195303569ab}|AppName, App Lid-bg.exe, , [e11518951980211503efc75438cc936d]
PUP.Optional.CrossRider, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{cedf6338-389b-41a3-96c9-1093e60189e8}|AppName, App Lid-buttonutil.exe, , [ab4bfdb0d4c562d43ab939e2f113bf41]
PUP.Optional.CrossRider, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{d0e9d4ae-3d7e-4920-8ab6-640a14100009}|AppName, App Lid-codedownloader.exe, , [34c2317cd5c4ec4a1dd7fe1d8d7741bf]
PUP.Optional.CrossRider.Generic, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN\FEATURECONTROL\FEATURE_BROWSER_EMULATION|App Lid-bg.exe, 8000, , [ee08703d6237cd69d905812193713fc1]
PUP.Optional.TNT2, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SHAREDACCESS\PARAMETERS\FIREWALLPOLICY\FIREWALLRULES|{19A47F34-B035-47BF-91A3-B0FD93252926}, v2.24|Action=Allow|Active=TRUE|Dir=In|App=C:\Users\Host\AppData\Local\TNT2\2.0.0.2010\TNT2User.exe|Name=TNT2|, , [47af05a84c4df4425162efa9c34122de]
PUP.Optional.TNT, HKU\S-1-5-21-300859844-1961672170-2238026608-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{72A6AB0F-2FA8-4C73-9FCB-1E62A608F001}|AppName, TNT2User.exe, , [579f832a9efbb383c58a6cdaa55f17e9]
PUP.Optional.CrossRider, HKU\S-1-5-21-300859844-1961672170-2238026608-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{816184C1-CC29-4F27-A099-B5AC591A947C}|AppName, 86bb6895-eb89-45b7-9675-174898fb35af-2.exe-buttonutil.exe, , [1bdbdecf970283b3c61057c407fd0af6]
PUP.Optional.CrossRider, HKU\S-1-5-21-300859844-1961672170-2238026608-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{93470BF0-7D1B-437F-8C6A-70857A79BBA8}|AppName, 86bb6895-eb89-45b7-9675-174898fb35af-2.exe-codedownloader.exe, , [9660ac0149501b1bc01763b8669e6b95]
PUP.Optional.CrossRider, HKU\S-1-5-21-300859844-1961672170-2238026608-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A9024087-3672-44FA-93D3-2B2AD85258D7}|AppName, 86bb6895-eb89-45b7-9675-174898fb35af-2.exe-codedownloader.exe, , [2cca515c871200368e4950cba16321df]
PUP.Optional.CrossRider, HKU\S-1-5-21-300859844-1961672170-2238026608-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E9324081-24DC-4401-8F4A-FF9247616AB9}|AppName, 86bb6895-eb89-45b7-9675-174898fb35af-2.exe-buttonutil.exe, , [8175119cddbc7eb8894d0417df25ea16]
PUP.Optional.TNT, HKU\S-1-5-21-300859844-1961672170-2238026608-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{452A7604-C8E8-4C53-B8EA-91A106478EFE}|OSDFileURL, file:///C:/Users/Host/AppData/Local/TNT2/Profiles/11467/yah11467.xml, , [41b56449f6a32b0b123eef5742c26997]
PUP.Optional.TNT, HKU\S-1-5-21-300859844-1961672170-2238026608-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{452A7604-C8E8-4C53-B8EA-91A106478EFE}|FaviconURL, http://mirror.mirror-files.com/tnt2/1/Y1404.ico, , [b93defbe6336979f1e328bbb848057a9]
PUP.Optional.TNT, HKU\S-1-5-21-300859844-1961672170-2238026608-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{5EFC2918-29AE-401B-9A8B-53BBBA97378A}|OSDFileURL, file:///C:/Users/Host/AppData/Local/TNT2/Profiles/11467/os11467.xml, , [886e3677fb9e88ae52fe271f33d110f0]
PUP.Optional.TNT, HKU\S-1-5-21-300859844-1961672170-2238026608-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{5EFC2918-29AE-401B-9A8B-53BBBA97378A}|FaviconURL, http://mirror.mirror-files.com/tnt2/109 ... eld_16.ico, , [06f0624b0693f6402d239aac2ada8080]
PUP.Optional.eShield, HKU\S-1-5-21-300859844-1961672170-2238026608-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{5EFC2918-29AE-401B-9A8B-53BBBA97378A}|URL, http://search.eshield.com/serp?guid={6EC39021-0EEE-4734-BF95-3AF29806A5D0}&action=default_search&k={searchTerms}, , [f0066f3e3a5f67cffb235ac6df254eb2]
PUP.Optional.TidyNetwork, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR|{00011268-E188-40DF-A514-835FCD78B1BF}, , [80765c51afeabd7947ca869b80837a86],
PUP.Optional.TidyNetwork, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\TOOLBAR|{00011268-E188-40DF-A514-835FCD78B1BF}, , [80765c51afeabd7947ca869b80837a86],

Data registru: 2
PUP.Optional.eShield, HKU\S-1-5-21-300859844-1961672170-2238026608-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, http://services.eshield.com/general/new ... 1467&guid={6EC39021-0EEE-4734-BF95-3AF29806A5D0}&i=, Dobré: (www.google.com), Špatné: (http://services.eshield.com/general/new ... 1467&guid={6EC39021-0EEE-4734-BF95-3AF29806A5D0}&i=),,[985e327bf8a133030d4cca6ac5408f71]
PUP.Optional.eShield, HKU\S-1-5-21-300859844-1961672170-2238026608-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, http://services.eshield.com/general/new ... 1467&guid={6EC39021-0EEE-4734-BF95-3AF29806A5D0}&i=, Dobré: (www.google.com), Špatné: (http://services.eshield.com/general/new ... 1467&guid={6EC39021-0EEE-4734-BF95-3AF29806A5D0}&i=),,[e90d37769dfc1620471290a48c79f010]

Složky: 12
PUP.Optional.TidyNetwork, C:\Users\Host\AppData\Local\TNT2, , [09ed6b422f6ade582ce40120a45fc43c],
PUP.Optional.TidyNetwork, C:\Users\Host\AppData\Local\TNT2\2.0.0.2010, , [09ed6b422f6ade582ce40120a45fc43c],
PUP.Optional.TidyNetwork, C:\Users\Host\AppData\Local\TNT2\Common, , [09ed6b422f6ade582ce40120a45fc43c],
PUP.Optional.TidyNetwork, C:\Users\Host\AppData\Local\TNT2\Profiles, , [09ed6b422f6ade582ce40120a45fc43c],
PUP.Optional.TidyNetwork, C:\Users\Host\AppData\Local\TNT2\Profiles\11467, , [09ed6b422f6ade582ce40120a45fc43c],
PUP.Optional.TidyNetwork, C:\Program Files (x86)\TNT2, , [80765c51afeabd7947ca869b80837a86],
PUP.Optional.TidyNetwork, C:\Program Files (x86)\TNT2\2.0.0.2010, , [80765c51afeabd7947ca869b80837a86],
PUP.Optional.TidyNetwork, C:\Program Files (x86)\TNT2\Profiles, , [80765c51afeabd7947ca869b80837a86],
PUP.Optional.TidyNetwork, C:\Program Files (x86)\TNT2\Profiles\11467, , [80765c51afeabd7947ca869b80837a86],
PUP.Optional.eShield, C:\Users\holan_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkmjljdbbgogihjcapfhgkonfmccbffp, , [06f01d9008917eb8af9c46e609fa30d0],
PUP.Optional.eShield, C:\Users\holan_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkmjljdbbgogihjcapfhgkonfmccbffp\1.5_0, , [06f01d9008917eb8af9c46e609fa30d0],
PUP.Optional.eShield, C:\Users\holan_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkmjljdbbgogihjcapfhgkonfmccbffp\1.5_0\_metadata, , [06f01d9008917eb8af9c46e609fa30d0],

Soubory: 71
PUP.Optional.FindWide, C:\Program Files (x86)\TNT2\TNT2UserPS64.dll, , [da1c3b72efaaeb4bfca05193d72b54ac],
PUP.Optional.FindWide, C:\Program Files (x86)\TNT2\TNT2UserPS.dll, , [da1c3b72efaaeb4bfca05193d72b54ac],
PUP.Optional.TNT2, C:\Users\Host\AppData\Local\TNT2\2.0.0.2010\TNT2User.exe, , [2ec8feaf475258deff781de38e7455ab],
PUP.Optional.TidyNetwork, C:\Users\Host\AppData\Local\TNT2\2.0.0.2010\Autorun.inf, , [09ed6b422f6ade582ce40120a45fc43c],
PUP.Optional.TidyNetwork, C:\Users\Host\AppData\Local\TNT2\2.0.0.2010\chromeinst.1.dll, , [09ed6b422f6ade582ce40120a45fc43c],
PUP.Optional.TidyNetwork, C:\Users\Host\AppData\Local\TNT2\2.0.0.2010\crx.tar, , [09ed6b422f6ade582ce40120a45fc43c],
PUP.Optional.TidyNetwork, C:\Users\Host\AppData\Local\TNT2\2.0.0.2010\GLOBALUNINSTALL.TNT, , [09ed6b422f6ade582ce40120a45fc43c],
PUP.Optional.TidyNetwork, C:\Users\Host\AppData\Local\TNT2\2.0.0.2010\hmac.1.dll, , [09ed6b422f6ade582ce40120a45fc43c],
PUP.Optional.TidyNetwork, C:\Users\Host\AppData\Local\TNT2\2.0.0.2010\iestage2.1.dll, , [09ed6b422f6ade582ce40120a45fc43c],
PUP.Optional.TidyNetwork, C:\Users\Host\AppData\Local\TNT2\2.0.0.2010\IEToolbar.dll, , [09ed6b422f6ade582ce40120a45fc43c],
PUP.Optional.TidyNetwork, C:\Users\Host\AppData\Local\TNT2\2.0.0.2010\IEToolbar64.dll, , [09ed6b422f6ade582ce40120a45fc43c],
PUP.Optional.TidyNetwork, C:\Users\Host\AppData\Local\TNT2\2.0.0.2010\INSTALL.TNT, , [09ed6b422f6ade582ce40120a45fc43c],
PUP.Optional.TidyNetwork, C:\Users\Host\AppData\Local\TNT2\2.0.0.2010\LastSession.log, , [09ed6b422f6ade582ce40120a45fc43c],
PUP.Optional.TidyNetwork, C:\Users\Host\AppData\Local\TNT2\2.0.0.2010\log.dll, , [09ed6b422f6ade582ce40120a45fc43c],
PUP.Optional.TidyNetwork, C:\Users\Host\AppData\Local\TNT2\2.0.0.2010\npTNT2.dll, , [09ed6b422f6ade582ce40120a45fc43c],
PUP.Optional.TidyNetwork, C:\Users\Host\AppData\Local\TNT2\2.0.0.2010\PARTNER.TNT, , [09ed6b422f6ade582ce40120a45fc43c],
PUP.Optional.TidyNetwork, C:\Users\Host\AppData\Local\TNT2\2.0.0.2010\passport.dll, , [09ed6b422f6ade582ce40120a45fc43c],
PUP.Optional.TidyNetwork, C:\Users\Host\AppData\Local\TNT2\2.0.0.2010\passport64.dll, , [09ed6b422f6ade582ce40120a45fc43c],
PUP.Optional.TidyNetwork, C:\Users\Host\AppData\Local\TNT2\2.0.0.2010\pinnedSearch.htm, , [09ed6b422f6ade582ce40120a45fc43c],
PUP.Optional.TidyNetwork, C:\Users\Host\AppData\Local\TNT2\2.0.0.2010\pinnedSearch_FindWide.htm, , [09ed6b422f6ade582ce40120a45fc43c],
PUP.Optional.TidyNetwork, C:\Users\Host\AppData\Local\TNT2\2.0.0.2010\pinnedSearch_Freshy.htm, , [09ed6b422f6ade582ce40120a45fc43c],
PUP.Optional.TidyNetwork, C:\Users\Host\AppData\Local\TNT2\2.0.0.2010\progress.1.dll, , [09ed6b422f6ade582ce40120a45fc43c],
PUP.Optional.TidyNetwork, C:\Users\Host\AppData\Local\TNT2\2.0.0.2010\regsvr.1.dll, , [09ed6b422f6ade582ce40120a45fc43c],
PUP.Optional.TidyNetwork, C:\Users\Host\AppData\Local\TNT2\2.0.0.2010\RemoteSkin.wms, , [09ed6b422f6ade582ce40120a45fc43c],
PUP.Optional.TidyNetwork, C:\Users\Host\AppData\Local\TNT2\2.0.0.2010\sqlite.1.dll, , [09ed6b422f6ade582ce40120a45fc43c],
PUP.Optional.TidyNetwork, C:\Users\Host\AppData\Local\TNT2\2.0.0.2010\tnt2chrome.dll, , [09ed6b422f6ade582ce40120a45fc43c],
PUP.Optional.TidyNetwork, C:\Users\Host\AppData\Local\TNT2\2.0.0.2010\tnt2chrome64.dll, , [09ed6b422f6ade582ce40120a45fc43c],
PUP.Optional.TidyNetwork, C:\Users\Host\AppData\Local\TNT2\2.0.0.2010\TNT2UserPS.dll, , [09ed6b422f6ade582ce40120a45fc43c],
PUP.Optional.TidyNetwork, C:\Users\Host\AppData\Local\TNT2\2.0.0.2010\TNT2UserPS64.dll, , [09ed6b422f6ade582ce40120a45fc43c],
PUP.Optional.TidyNetwork, C:\Users\Host\AppData\Local\TNT2\2.0.0.2010\TntMagicDel.dll, , [09ed6b422f6ade582ce40120a45fc43c],
PUP.Optional.TidyNetwork, C:\Users\Host\AppData\Local\TNT2\2.0.0.2010\UnInjLib.dll, , [09ed6b422f6ade582ce40120a45fc43c],
PUP.Optional.TidyNetwork, C:\Users\Host\AppData\Local\TNT2\2.0.0.2010\UnInjLib64.dll, , [09ed6b422f6ade582ce40120a45fc43c],
PUP.Optional.TidyNetwork, C:\Users\Host\AppData\Local\TNT2\2.0.0.2010\UNINSTALL.TNT, , [09ed6b422f6ade582ce40120a45fc43c],
PUP.Optional.TidyNetwork, C:\Users\Host\AppData\Local\TNT2\2.0.0.2010\UninstallDlg.1.dll, , [09ed6b422f6ade582ce40120a45fc43c],
PUP.Optional.TidyNetwork, C:\Users\Host\AppData\Local\TNT2\2.0.0.2010\untar.1.dll, , [09ed6b422f6ade582ce40120a45fc43c],
PUP.Optional.TidyNetwork, C:\Users\Host\AppData\Local\TNT2\2.0.0.2010\UPDATE.TNT, , [09ed6b422f6ade582ce40120a45fc43c],
PUP.Optional.TidyNetwork, C:\Users\Host\AppData\Local\TNT2\2.0.0.2010\xpi.tar, , [09ed6b422f6ade582ce40120a45fc43c],
PUP.Optional.TidyNetwork, C:\Users\Host\AppData\Local\TNT2\2.0.0.2010\zipunzip.1.dll, , [09ed6b422f6ade582ce40120a45fc43c],
PUP.Optional.TidyNetwork, C:\Users\Host\AppData\Local\TNT2\Common\extension_host-manifest.json, , [09ed6b422f6ade582ce40120a45fc43c],
PUP.Optional.TidyNetwork, C:\Users\Host\AppData\Local\TNT2\Common\extension_host.exe, , [09ed6b422f6ade582ce40120a45fc43c],
PUP.Optional.TidyNetwork, C:\Users\Host\AppData\Local\TNT2\Common\extension_host.ini, , [09ed6b422f6ade582ce40120a45fc43c],
PUP.Optional.TidyNetwork, C:\Users\Host\AppData\Local\TNT2\Profiles\11467\icon.ico, , [09ed6b422f6ade582ce40120a45fc43c],
PUP.Optional.TidyNetwork, C:\Users\Host\AppData\Local\TNT2\Profiles\11467\inst.ini, , [09ed6b422f6ade582ce40120a45fc43c],
PUP.Optional.TidyNetwork, C:\Users\Host\AppData\Local\TNT2\Profiles\11467\INSTALL.TNT, , [09ed6b422f6ade582ce40120a45fc43c],
PUP.Optional.TidyNetwork, C:\Users\Host\AppData\Local\TNT2\Profiles\11467\os11467.xml, , [09ed6b422f6ade582ce40120a45fc43c],
PUP.Optional.TidyNetwork, C:\Users\Host\AppData\Local\TNT2\Profiles\11467\PARTNER.145.TNT, , [09ed6b422f6ade582ce40120a45fc43c],
PUP.Optional.TidyNetwork, C:\Users\Host\AppData\Local\TNT2\Profiles\11467\partner.dat, , [09ed6b422f6ade582ce40120a45fc43c],
PUP.Optional.TidyNetwork, C:\Users\Host\AppData\Local\TNT2\Profiles\11467\runt.ini, , [09ed6b422f6ade582ce40120a45fc43c],
PUP.Optional.TidyNetwork, C:\Users\Host\AppData\Local\TNT2\Profiles\11467\tnt_32x32.png, , [09ed6b422f6ade582ce40120a45fc43c],
PUP.Optional.TidyNetwork, C:\Users\Host\AppData\Local\TNT2\Profiles\11467\yah11467.xml, , [09ed6b422f6ade582ce40120a45fc43c],
PUP.Optional.TidyNetwork, C:\Users\Host\AppData\Local\TNT2\Profiles\11467\{cf15270e-cf08-4def-b4ea-6a5ac23f3bca}.xpi, , [09ed6b422f6ade582ce40120a45fc43c],
PUP.Optional.TidyNetwork, C:\Program Files (x86)\TNT2\2.0.0.2010\IEToolbar.dll, , [80765c51afeabd7947ca869b80837a86],
PUP.Optional.TidyNetwork, C:\Program Files (x86)\TNT2\2.0.0.2010\IEToolbar64.dll, , [80765c51afeabd7947ca869b80837a86],
PUP.Optional.TidyNetwork, C:\Program Files (x86)\TNT2\Profiles\11467\passport.dll, , [80765c51afeabd7947ca869b80837a86],
PUP.Optional.TidyNetwork, C:\Program Files (x86)\TNT2\Profiles\11467\passport64.dll, , [80765c51afeabd7947ca869b80837a86],
PUP.Optional.eShield, C:\Users\holan_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkmjljdbbgogihjcapfhgkonfmccbffp\1.5_0\background.html, , [06f01d9008917eb8af9c46e609fa30d0],
PUP.Optional.eShield, C:\Users\holan_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkmjljdbbgogihjcapfhgkonfmccbffp\1.5_0\background.js, , [06f01d9008917eb8af9c46e609fa30d0],
PUP.Optional.eShield, C:\Users\holan_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkmjljdbbgogihjcapfhgkonfmccbffp\1.5_0\eshield.nmf, , [06f01d9008917eb8af9c46e609fa30d0],
PUP.Optional.eShield, C:\Users\holan_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkmjljdbbgogihjcapfhgkonfmccbffp\1.5_0\eShield_128.png, , [06f01d9008917eb8af9c46e609fa30d0],
PUP.Optional.eShield, C:\Users\holan_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkmjljdbbgogihjcapfhgkonfmccbffp\1.5_0\eShield_16.png, , [06f01d9008917eb8af9c46e609fa30d0],
PUP.Optional.eShield, C:\Users\holan_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkmjljdbbgogihjcapfhgkonfmccbffp\1.5_0\eShield_48.png, , [06f01d9008917eb8af9c46e609fa30d0],
PUP.Optional.eShield, C:\Users\holan_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkmjljdbbgogihjcapfhgkonfmccbffp\1.5_0\eshield_arm.nexe, , [06f01d9008917eb8af9c46e609fa30d0],
PUP.Optional.eShield, C:\Users\holan_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkmjljdbbgogihjcapfhgkonfmccbffp\1.5_0\eshield_x86_32.nexe, , [06f01d9008917eb8af9c46e609fa30d0],
PUP.Optional.eShield, C:\Users\holan_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkmjljdbbgogihjcapfhgkonfmccbffp\1.5_0\eshield_x86_64.nexe, , [06f01d9008917eb8af9c46e609fa30d0],
PUP.Optional.eShield, C:\Users\holan_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkmjljdbbgogihjcapfhgkonfmccbffp\1.5_0\manifest.json, , [06f01d9008917eb8af9c46e609fa30d0],
PUP.Optional.eShield, C:\Users\holan_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkmjljdbbgogihjcapfhgkonfmccbffp\1.5_0\newtab.html, , [06f01d9008917eb8af9c46e609fa30d0],
PUP.Optional.eShield, C:\Users\holan_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkmjljdbbgogihjcapfhgkonfmccbffp\1.5_0\newtab.js, , [06f01d9008917eb8af9c46e609fa30d0],
PUP.Optional.eShield, C:\Users\holan_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkmjljdbbgogihjcapfhgkonfmccbffp\1.5_0\off.png, , [06f01d9008917eb8af9c46e609fa30d0],
PUP.Optional.eShield, C:\Users\holan_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkmjljdbbgogihjcapfhgkonfmccbffp\1.5_0\on.png, , [06f01d9008917eb8af9c46e609fa30d0],
PUP.Optional.eShield, C:\Users\holan_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkmjljdbbgogihjcapfhgkonfmccbffp\1.5_0\_metadata\verified_contents.json, , [06f01d9008917eb8af9c46e609fa30d0],
PUP.Optional.TerraClicks.ShrtCln, C:\Users\holan_000\AppData\Local\Google\Chrome\User Data\Default\Preferences, Dobré: (), Špatné: (www.terraclicks.com), ,[fbfbb1fca9f0bc7a619b72f2ca3ba15f]

Fyzické sektory: 0
(Nenalezeny žádné škodlivé položky)

(end)

Příspěvekod **Orcus** » 12 dub 2016 22:40

- Spusť znovu MbAM a dej Skenovat nyní
- Po proběhnutí programu, se ti objeví hláška, tak klikni na „Vše do karantény(smazat vybrané)“ a na „Exportovat záznam“ a vyber „textový soubor“ , soubor nějak pojmenuj a někam ho ulož. Zkopíruj se celý obsah toho logu.

====================================================

- Spusť znovu AdwCleaner (u Windows Vista či Windows7, klikni na AdwCleaner pravým a vyber „Spustit jako správce“
- Klikni na „ Smazat“
- Program provede opravu, po automatickém restartu neukáže log (C:\AdwCleaner [C?].txt) , jeho obsah sem celý vlož.

====================================================

Stáhni si Junkware Removal Tool by Thisisu
http://www.bleepingcomputer.com/downloa ... oval-tool/
na svojí plochu.

Deaktivuj si svůj antivirový program. Pravým tl. myši klikni na JRT.exe a vyber „spustit jako správce“. Pro pokračování budeš vyzván ke stisknutí jakékoliv klávesy. Na nějakou klikni.
Začne skenování programu. Skenování může trvat dloho , podle množství nákaz. Po ukončení skenu se objeví log (JRT.txt) , který se uloží na ploše.
Zkopíruj sem prosím celý jeho obsah.

====================================================

Stáhni si RogueKiller
32bit.:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
64bit.:
http://www.sur-la-toile.com/RogueKiller ... lerX64.exe
na svojí plochu.
- Zavři všechny ostatní programy a prohlížeče.
- Pro OS Vista a win7 spusť program RogueKiller.exe jako správce , u XP poklepáním.
- Počkej až skončí Prescan -vyhledávání škodlivých procesů.
- Potom klikni na „Prohledat“.
- Program skenuje procesy PC. Po proskenování klikni na „Zpráva“celý obsah logu sem zkopíruj.
Pokud je program blokován , zkus ho spustit několikrát. Pokud dále program nepůjde spustit a pracovat, přejmenuj ho na winlogon.exe.

hollca · Příspěvekod **hollca** » 14 dub 2016 20:39

Mbam:

<?xml version="1.0" encoding="UTF-16" ?>
<mbam-log>
<header>
<date>2016/04/14 18:53:45 +0200</date>
<logfile>mbam-log-2016-04-14 (18-53-37).xml</logfile>
<isadmin>yes</isadmin>
</header>
<engine>
<version>2.2.1.1043</version>
<malware-database>v2016.04.14.05</malware-database>
<rootkit-database>v2016.04.09.01</rootkit-database>
<license>free</license>
<file-protection>disabled</file-protection>
<web-protection>disabled</web-protection>
<self-protection>disabled</self-protection>
</engine>
<system>
<hostname>VAIO</hostname>
<ip>192.168.88.214</ip>
<osversion>Windows 10</osversion>
<arch>x64</arch>
<username>holan_000</username>
<filesys>NTFS</filesys>
</system>
<summary>
<type>threat</type>
<result>completed</result>
<objects>462073</objects>
<time>2170</time>
<processes>0</processes>
<modules>0</modules>
<keys>43</keys>
<values>17</values>
<datas>2</datas>
<folders>12</folders>
<files>71</files>
<sectors>0</sectors>
</summary>
<options>
<memory>enabled</memory>
<startup>enabled</startup>
<filesystem>enabled</filesystem>
<archives>enabled</archives>
<rootkits>disabled</rootkits>
<deeprootkit>disabled</deeprootkit>
<heuristics>enabled</heuristics>
<pup>enabled</pup>
<pum>enabled</pum>
</options>
<items>
<key><path>HKLM\SOFTWARE\CLASSES\CLSID\{0FEB2313-F89B-4AC6-8153-84025604A06A}</path><vendor>PUP.Optional.FindWide</vendor><action>success</action><hash>3c819618b7e2fa3ca0556f77b44e13ed</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\INTERFACE\{0FEB2313-F89B-4AC6-8153-84025604A06A}</path><vendor>PUP.Optional.FindWide</vendor><action>success</action><hash>3c819618b7e2fa3ca0556f77b44e13ed</hash></key>
<key><path>HKU\S-1-5-21-300859844-1961672170-2238026608-1006_Classes\INTERFACE\{0FEB2313-F89B-4AC6-8153-84025604A06A}</path><vendor>PUP.Optional.FindWide</vendor><action>success</action><hash>3c819618b7e2fa3ca0556f77b44e13ed</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{0FEB2313-F89B-4AC6-8153-84025604A06A}</path><vendor>PUP.Optional.FindWide</vendor><action>success</action><hash>3c819618b7e2fa3ca0556f77b44e13ed</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{0FEB2313-F89B-4AC6-8153-84025604A06A}</path><vendor>PUP.Optional.FindWide</vendor><action>success</action><hash>3c819618b7e2fa3ca0556f77b44e13ed</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{0FEB2313-F89B-4AC6-8153-84025604A06A}</path><vendor>PUP.Optional.FindWide</vendor><action>success</action><hash>3c819618b7e2fa3ca0556f77b44e13ed</hash></key>
<key><path>HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{0FEB2313-F89B-4AC6-8153-84025604A06A}</path><vendor>PUP.Optional.FindWide</vendor><action>success</action><hash>3c819618b7e2fa3ca0556f77b44e13ed</hash></key>
<key><path>HKU\S-1-5-21-300859844-1961672170-2238026608-1006\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{DEDAF650-12B8-48F5-A843-BBA100716106}</path><vendor>PUP.Optional.SweetIM</vendor><action>success</action><hash>bffe6648f7a2dd59d820ad3718ea2bd5</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{72A6AB0F-2FA8-4C73-9FCB-1E62A608F001}</path><vendor>PUP.Optional.TidyNetwork</vendor><action>success</action><hash>eecfe1cd8712f046b769d70e6d9503fd</hash></key>
<key><path>HKU\S-1-5-21-300859844-1961672170-2238026608-1006_Classes\TYPELIB\{ABB8A8A5-FF98-40F6-B573-5841B063EA37}</path><vendor>PUP.Optional.TNT2</vendor><action>success</action><hash>1e9f38763a5fd16553faf60b13ef7d83</hash></key>
<key><path>HKU\S-1-5-21-300859844-1961672170-2238026608-1006_Classes\INTERFACE\{02F878DF-E2BE-4B85-8CB4-A0D2D4E2ED7F}</path><vendor>PUP.Optional.TNT2</vendor><action>success</action><hash>1e9f38763a5fd16553faf60b13ef7d83</hash></key>
<key><path>HKU\S-1-5-21-300859844-1961672170-2238026608-1006_Classes\INTERFACE\{30510474-98B5-11CF-BB82-00AA00BDCE0B}</path><vendor>PUP.Optional.TNT2</vendor><action>success</action><hash>1e9f38763a5fd16553faf60b13ef7d83</hash></key>
<key><path>HKU\S-1-5-21-300859844-1961672170-2238026608-1006_Classes\INTERFACE\{52C5395B-1FCD-47FA-A834-FD830701C2D5}</path><vendor>PUP.Optional.TNT2</vendor><action>success</action><hash>1e9f38763a5fd16553faf60b13ef7d83</hash></key>
<key><path>HKU\S-1-5-21-300859844-1961672170-2238026608-1006_Classes\INTERFACE\{762D463B-C45A-456D-A80D-8689C297C91E}</path><vendor>PUP.Optional.TNT2</vendor><action>success</action><hash>1e9f38763a5fd16553faf60b13ef7d83</hash></key>
<key><path>HKU\S-1-5-21-300859844-1961672170-2238026608-1006_Classes\INTERFACE\{7A6BE473-7960-44D0-BD54-D23DA76353DF}</path><vendor>PUP.Optional.TNT2</vendor><action>success</action><hash>1e9f38763a5fd16553faf60b13ef7d83</hash></key>
<key><path>HKU\S-1-5-21-300859844-1961672170-2238026608-1006_Classes\INTERFACE\{803F550E-BAAE-42BB-8917-64BA0006AB17}</path><vendor>PUP.Optional.TNT2</vendor><action>success</action><hash>1e9f38763a5fd16553faf60b13ef7d83</hash></key>
<key><path>HKU\S-1-5-21-300859844-1961672170-2238026608-1006_Classes\INTERFACE\{8D5BC51D-C9D3-43B9-B728-B30677B7C7E8}</path><vendor>PUP.Optional.TNT2</vendor><action>success</action><hash>1e9f38763a5fd16553faf60b13ef7d83</hash></key>
<key><path>HKU\S-1-5-21-300859844-1961672170-2238026608-1006_Classes\INTERFACE\{991C9D8D-A789-4DB9-BDFC-5F33398B04BF}</path><vendor>PUP.Optional.TNT2</vendor><action>success</action><hash>1e9f38763a5fd16553faf60b13ef7d83</hash></key>
<key><path>HKU\S-1-5-21-300859844-1961672170-2238026608-1006_Classes\INTERFACE\{D83C83BF-3EDD-4410-ADAB-5295116DD8C7}</path><vendor>PUP.Optional.TNT2</vendor><action>success</action><hash>1e9f38763a5fd16553faf60b13ef7d83</hash></key>
<key><path>HKU\S-1-5-21-300859844-1961672170-2238026608-1006_Classes\INTERFACE\{EB1F9F3C-5526-4DAE-BD4B-3EAA7715DA9F}</path><vendor>PUP.Optional.TNT2</vendor><action>success</action><hash>1e9f38763a5fd16553faf60b13ef7d83</hash></key>
<key><path>HKU\S-1-5-21-300859844-1961672170-2238026608-1006_Classes\INTERFACE\{EBBC143E-44AC-4B9C-BCCE-9A0E42921F2A}</path><vendor>PUP.Optional.TNT2</vendor><action>success</action><hash>1e9f38763a5fd16553faf60b13ef7d83</hash></key>
<key><path>HKU\S-1-5-21-300859844-1961672170-2238026608-1006_Classes\INTERFACE\{F1912128-469A-4138-AA26-9699C15BB13E}</path><vendor>PUP.Optional.TNT2</vendor><action>success</action><hash>1e9f38763a5fd16553faf60b13ef7d83</hash></key>
<key><path>HKU\S-1-5-21-300859844-1961672170-2238026608-1006_Classes\INTERFACE\{F68DC16C-9C2B-455B-8853-7E4D34BAA3F4}</path><vendor>PUP.Optional.TNT2</vendor><action>success</action><hash>1e9f38763a5fd16553faf60b13ef7d83</hash></key>
<key><path>HKU\S-1-5-21-300859844-1961672170-2238026608-1006\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{6EC39021-0EEE-4734-BF95-3AF29806A5D0}</path><vendor>PUP.Optional.TNT2</vendor><action>success</action><hash>1e9f38763a5fd16553faf60b13ef7d83</hash></key>
<key><path>HKLM\SOFTWARE\GOOGLE\CHROME\NATIVEMESSAGINGHOSTS\com.eshield.extension_host</path><vendor>PUP.Optional.eShield</vendor><action>success</action><hash>0ab3bcf26f2a9b9be349384438cc4db3</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\dkmjljdbbgogihjcapfhgkonfmccbffp</path><vendor>PUP.Optional.eShield</vendor><action>success</action><hash>427bc7e7c7d20d29bbc064bee51f1ae6</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2B601E8C-EED0-4593-AB22-C195303569AB}</path><vendor>PUP.Optional.CrossRider</vendor><action>success</action><hash>c1fcedc1c7d204322c22c05eec18cd33</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CEDF6338-389B-41A3-96C9-1093E60189E8}</path><vendor>PUP.Optional.CrossRider</vendor><action>success</action><hash>89349a14bbdeb581cc8366b8b64e15eb</hash></key>
<key><path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D0E9D4AE-3D7E-4920-8AB6-640A14100009}</path><vendor>PUP.Optional.CrossRider</vendor><action>success</action><hash>7a43248a4d4c85b184cc140a867ef20e</hash></key>
<key><path>HKU\S-1-5-21-300859844-1961672170-2238026608-1006\SOFTWARE\TNT2</path><vendor>PUP.Optional.TNT</vendor><action>success</action><hash>7e3f5c52f3a60630d9d4b09855af768a</hash></key>
<key><path>HKU\S-1-5-21-300859844-1961672170-2238026608-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\DRAGDROP\{70BC1CDB-0744-4172-BDA0-B5A487D00C3A}</path><vendor>PUP.Optional.TidyNetwork</vendor><action>success</action><hash>aa13713d900961d5740d5deba75de31d</hash></key>
<key><path>HKU\S-1-5-21-300859844-1961672170-2238026608-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{72A6AB0F-2FA8-4C73-9FCB-1E62A608F001}</path><vendor>PUP.Optional.TNT</vendor><action>success</action><hash>1e9f743a3465b87e5853291fb054cc34</hash></key>
<key><path>HKU\S-1-5-21-300859844-1961672170-2238026608-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{816184C1-CC29-4F27-A099-B5AC591A947C}</path><vendor>PUP.Optional.CrossRider</vendor><action>success</action><hash>536ad9d5a8f1cc6afa38bf5fbc48639d</hash></key>
<key><path>HKU\S-1-5-21-300859844-1961672170-2238026608-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{93470BF0-7D1B-437F-8C6A-70857A79BBA8}</path><vendor>PUP.Optional.CrossRider</vendor><action>success</action><hash>2994a00e7d1cb28461d255c9ef15e917</hash></key>
<key><path>HKU\S-1-5-21-300859844-1961672170-2238026608-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A9024087-3672-44FA-93D3-2B2AD85258D7}</path><vendor>PUP.Optional.CrossRider</vendor><action>success</action><hash>0ab3f0beb4e5d36361d222fcd2320000</hash></key>
<key><path>HKU\S-1-5-21-300859844-1961672170-2238026608-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E9324081-24DC-4401-8F4A-FF9247616AB9}</path><vendor>PUP.Optional.CrossRider</vendor><action>success</action><hash>fcc1cae4fb9ee056999962bce12335cb</hash></key>
<key><path>HKU\S-1-5-21-300859844-1961672170-2238026608-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{452A7604-C8E8-4C53-B8EA-91A106478EFE}</path><vendor>PUP.Optional.TNT</vendor><action>success</action><hash>ceef03abeeab39fdf0bc58f0699b8977</hash></key>
<key><path>HKU\S-1-5-21-300859844-1961672170-2238026608-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{5EFC2918-29AE-401B-9A8B-53BBBA97378A}</path><vendor>PUP.Optional.TNT</vendor><action>success</action><hash>f4c90ca22a6fd264e9c34afe9b691ce4</hash></key>
<key><path>HKU\S-1-5-21-300859844-1961672170-2238026608-1006\SOFTWARE\MOZILLAPLUGINS\@tnt2npapi.com/Plugin</path><vendor>PUP.Optional.TidyNetwork</vendor><action>success</action><hash>209d3e70c2d71b1ba5e1341403019b65</hash></key>
<key><path>HKU\S-1-5-21-300859844-1961672170-2238026608-1006_Classes\LOCAL SETTINGS\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\APPCONTAINER\STORAGE\WINDOWS_IE_AC_001\SOFTWARE\Crossrider</path><vendor>PUP.Optional.CrossRider</vendor><action>success</action><hash>c7f67f2ff2a7e452078ed0b77a8ab848</hash></key>
<key><path>HKU\S-1-5-21-300859844-1961672170-2238026608-1007_Classes\LOCAL SETTINGS\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\APPCONTAINER\STORAGE\WINDOWS_IE_AC_001\SOFTWARE\Crossrider</path><vendor>PUP.Optional.CrossRider</vendor><action>success</action><hash>3e7fecc2a4f5989ef5a090f73bc95ea2</hash></key>
<key><path>HKU\S-1-5-21-300859844-1961672170-2238026608-1006_Classes\CLSID\{00011268-E188-40DF-A514-835FCD78B1BF}</path><vendor>PUP.Optional.TidyNetwork</vendor><action>success</action><hash>fbc2238ba7f2e155c4a7c65d966d8878</hash></key>
<key><path>HKU\S-1-5-21-300859844-1961672170-2238026608-1006\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{00011268-E188-40DF-A514-835FCD78B1BF}</path><vendor>PUP.Optional.TidyNetwork</vendor><action>success</action><hash>fbc2238ba7f2e155c4a7c65d966d8878</hash></key>
<value><path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2b601e8c-eed0-4593-ab22-c195303569ab}</path><valuename>AppName</valuename><vendor>PUP.Optional.CrossRider</vendor><action>success</action><valuedata>App Lid-bg.exe</valuedata><hash>c1fcedc1c7d204322c22c05eec18cd33</hash></value>
<value><path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{cedf6338-389b-41a3-96c9-1093e60189e8}</path><valuename>AppName</valuename><vendor>PUP.Optional.CrossRider</vendor><action>success</action><valuedata>App Lid-buttonutil.exe</valuedata><hash>89349a14bbdeb581cc8366b8b64e15eb</hash></value>
<value><path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{d0e9d4ae-3d7e-4920-8ab6-640a14100009}</path><valuename>AppName</valuename><vendor>PUP.Optional.CrossRider</vendor><action>success</action><valuedata>App Lid-codedownloader.exe</valuedata><hash>7a43248a4d4c85b184cc140a867ef20e</hash></value>
<value><path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN\FEATURECONTROL\FEATURE_BROWSER_EMULATION</path><valuename>App Lid-bg.exe</valuename><vendor>PUP.Optional.CrossRider.Generic</vendor><action>success</action><valuedata>8000</valuedata><hash>506dab039dfc290d3bf6475ec83c20e0</hash></value>
<value><path>HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SHAREDACCESS\PARAMETERS\FIREWALLPOLICY\FIREWALLRULES</path><valuename>{19A47F34-B035-47BF-91A3-B0FD93252926}</valuename><vendor>PUP.Optional.TNT2</vendor><action>success</action><valuedata>v2.24|Action=Allow|Active=TRUE|Dir=In|App=C:\Users\Host\AppData\Local\TNT2\2.0.0.2010\TNT2User.exe|Name=TNT2|</valuedata><hash>605d9915c3d62c0a828d415ad72daa56</hash></value>
<value><path>HKU\S-1-5-21-300859844-1961672170-2238026608-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{72A6AB0F-2FA8-4C73-9FCB-1E62A608F001}</path><valuename>AppName</valuename><vendor>PUP.Optional.TNT</vendor><action>success</action><valuedata>TNT2User.exe</valuedata><hash>1e9f743a3465b87e5853291fb054cc34</hash></value>
<value><path>HKU\S-1-5-21-300859844-1961672170-2238026608-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{816184C1-CC29-4F27-A099-B5AC591A947C}</path><valuename>AppName</valuename><vendor>PUP.Optional.CrossRider</vendor><action>success</action><valuedata>86bb6895-eb89-45b7-9675-174898fb35af-2.exe-buttonutil.exe</valuedata><hash>536ad9d5a8f1cc6afa38bf5fbc48639d</hash></value>
<value><path>HKU\S-1-5-21-300859844-1961672170-2238026608-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{93470BF0-7D1B-437F-8C6A-70857A79BBA8}</path><valuename>AppName</valuename><vendor>PUP.Optional.CrossRider</vendor><action>success</action><valuedata>86bb6895-eb89-45b7-9675-174898fb35af-2.exe-codedownloader.exe</valuedata><hash>2994a00e7d1cb28461d255c9ef15e917</hash></value>
<value><path>HKU\S-1-5-21-300859844-1961672170-2238026608-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A9024087-3672-44FA-93D3-2B2AD85258D7}</path><valuename>AppName</valuename><vendor>PUP.Optional.CrossRider</vendor><action>success</action><valuedata>86bb6895-eb89-45b7-9675-174898fb35af-2.exe-codedownloader.exe</valuedata><hash>0ab3f0beb4e5d36361d222fcd2320000</hash></value>
<value><path>HKU\S-1-5-21-300859844-1961672170-2238026608-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E9324081-24DC-4401-8F4A-FF9247616AB9}</path><valuename>AppName</valuename><vendor>PUP.Optional.CrossRider</vendor><action>success</action><valuedata>86bb6895-eb89-45b7-9675-174898fb35af-2.exe-buttonutil.exe</valuedata><hash>fcc1cae4fb9ee056999962bce12335cb</hash></value>
<value><path>HKU\S-1-5-21-300859844-1961672170-2238026608-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{452A7604-C8E8-4C53-B8EA-91A106478EFE}</path><valuename>OSDFileURL</valuename><vendor>PUP.Optional.TNT</vendor><action>success</action><valuedata>file:///C:/Users/Host/AppData/Local/TNT2/Profiles/11467/yah11467.xml</valuedata><hash>ceef03abeeab39fdf0bc58f0699b8977</hash></value>
<value><path>HKU\S-1-5-21-300859844-1961672170-2238026608-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{452A7604-C8E8-4C53-B8EA-91A106478EFE}</path><valuename>FaviconURL</valuename><vendor>PUP.Optional.TNT</vendor><action>success</action><valuedata>http://mirror.mirror-files.com/tnt2/1/Y1404.ico</valuedata><hash>b9046c429603a2940aa2e95f29dbda26</hash></value>
<value><path>HKU\S-1-5-21-300859844-1961672170-2238026608-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{5EFC2918-29AE-401B-9A8B-53BBBA97378A}</path><valuename>OSDFileURL</valuename><vendor>PUP.Optional.TNT</vendor><action>success</action><valuedata>file:///C:/Users/Host/AppData/Local/TNT2/Profiles/11467/os11467.xml</valuedata><hash>f4c90ca22a6fd264e9c34afe9b691ce4</hash></value>
<value><path>HKU\S-1-5-21-300859844-1961672170-2238026608-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{5EFC2918-29AE-401B-9A8B-53BBBA97378A}</path><valuename>FaviconURL</valuename><vendor>PUP.Optional.TNT</vendor><action>success</action><valuedata>http://mirror.mirror-files.com/tnt2/10999/eShield_16.ico</valuedata><hash>625bcbe32b6ef83ebbf1a7a1f11301ff</hash></value>
<value><path>HKU\S-1-5-21-300859844-1961672170-2238026608-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{5EFC2918-29AE-401B-9A8B-53BBBA97378A}</path><valuename>URL</valuename><vendor>PUP.Optional.eShield</vendor><action>success</action><valuedata>http://search.eshield.com/serp?guid={6EC39021-0EEE-4734-BF95-3AF29806A5D0}&action=default_search&k={searchTerms}</valuedata><hash>b20b8628cfca2412a3d768ba5fa5d52b</hash></value>
<value><path>HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR</path><valuename>{00011268-E188-40DF-A514-835FCD78B1BF}</valuename><vendor>PUP.Optional.TidyNetwork</vendor><action>success</action><valuedata></valuedata><hash>fbc2238ba7f2e155c4a7c65d966d8878</hash></value>
<value><path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\TOOLBAR</path><valuename>{00011268-E188-40DF-A514-835FCD78B1BF}</valuename><vendor>PUP.Optional.TidyNetwork</vendor><action>success</action><valuedata></valuedata><hash>fbc2238ba7f2e155c4a7c65d966d8878</hash></value>
<data><path>HKU\S-1-5-21-300859844-1961672170-2238026608-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN</path><valuename>Start Page</valuename><vendor>PUP.Optional.eShield</vendor><action>replaced</action><valuedata>http://services.eshield.com/general/newhometab.php?hometab=home&partner=11467&guid={6EC39021-0EEE-4734-BF95-3AF29806A5D0}&i=</valuedata><baddata>http://services.eshield.com/general/newhometab.php?hometab=home&partner=11467&guid={6EC39021-0EEE-4734-BF95-3AF29806A5D0}&i=</baddata><gooddata>www.google.com</gooddata><hash>0db086282178082e6aefa98eb352758b</hash></data>
<data><path>HKU\S-1-5-21-300859844-1961672170-2238026608-1006\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN</path><valuename>Default_Page_URL</valuename><vendor>PUP.Optional.eShield</vendor><action>replaced</action><valuedata>http://services.eshield.com/general/newhometab.php?hometab=home&partner=11467&guid={6EC39021-0EEE-4734-BF95-3AF29806A5D0}&i=</valuedata><baddata>http://services.eshield.com/general/newhometab.php?hometab=home&partner=11467&guid={6EC39021-0EEE-4734-BF95-3AF29806A5D0}&i=</baddata><gooddata>www.google.com</gooddata><hash>a11c6b432f6a2f07e7722e0925e0dc24</hash></data>
<folder><path>C:\Users\Host\AppData\Local\TNT2</path><vendor>PUP.Optional.TidyNetwork</vendor><action>success</action><hash>516cab035e3b02341456ab7807fcc63a</hash></folder>
<folder><path>C:\Users\Host\AppData\Local\TNT2\2.0.0.2010</path><vendor>PUP.Optional.TidyNetwork</vendor><action>success</action><hash>516cab035e3b02341456ab7807fcc63a</hash></folder>
<folder><path>C:\Users\Host\AppData\Local\TNT2\Common</path><vendor>PUP.Optional.TidyNetwork</vendor><action>success</action><hash>516cab035e3b02341456ab7807fcc63a</hash></folder>
<folder><path>C:\Users\Host\AppData\Local\TNT2\Profiles</path><vendor>PUP.Optional.TidyNetwork</vendor><action>success</action><hash>516cab035e3b02341456ab7807fcc63a</hash></folder>
<folder><path>C:\Users\Host\AppData\Local\TNT2\Profiles\11467</path><vendor>PUP.Optional.TidyNetwork</vendor><action>success</action><hash>516cab035e3b02341456ab7807fcc63a</hash></folder>
<folder><path>C:\Program Files (x86)\TNT2</path><vendor>PUP.Optional.TidyNetwork</vendor><action>success</action><hash>fbc2238ba7f2e155c4a7c65d966d8878</hash></folder>
<folder><path>C:\Program Files (x86)\TNT2\2.0.0.2010</path><vendor>PUP.Optional.TidyNetwork</vendor><action>success</action><hash>fbc2238ba7f2e155c4a7c65d966d8878</hash></folder>
<folder><path>C:\Program Files (x86)\TNT2\Profiles</path><vendor>PUP.Optional.TidyNetwork</vendor><action>success</action><hash>fbc2238ba7f2e155c4a7c65d966d8878</hash></folder>
<folder><path>C:\Program Files (x86)\TNT2\Profiles\11467</path><vendor>PUP.Optional.TidyNetwork</vendor><action>success</action><hash>fbc2238ba7f2e155c4a7c65d966d8878</hash></folder>
<folder><path>C:\Users\holan_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkmjljdbbgogihjcapfhgkonfmccbffp</path><vendor>PUP.Optional.eShield</vendor><action>success</action><hash>d1ec8f1f8613fe38d5d0e44ab0539a66</hash></folder>
<folder><path>C:\Users\holan_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkmjljdbbgogihjcapfhgkonfmccbffp\1.5_0</path><vendor>PUP.Optional.eShield</vendor><action>success</action><hash>d1ec8f1f8613fe38d5d0e44ab0539a66</hash></folder>
<folder><path>C:\Users\holan_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkmjljdbbgogihjcapfhgkonfmccbffp\1.5_0\_metadata</path><vendor>PUP.Optional.eShield</vendor><action>success</action><hash>d1ec8f1f8613fe38d5d0e44ab0539a66</hash></folder>
<file><path>C:\Program Files (x86)\TNT2\TNT2UserPS64.dll</path><vendor>PUP.Optional.FindWide</vendor><action>success</action><hash>3c819618b7e2fa3ca0556f77b44e13ed</hash></file>
<file><path>C:\Program Files (x86)\TNT2\TNT2UserPS.dll</path><vendor>PUP.Optional.FindWide</vendor><action>success</action><hash>3c819618b7e2fa3ca0556f77b44e13ed</hash></file>
<file><path>C:\Users\Host\AppData\Local\TNT2\2.0.0.2010\TNT2User.exe</path><vendor>PUP.Optional.TNT2</vendor><action>success</action><hash>1e9f38763a5fd16553faf60b13ef7d83</hash></file>
<file><path>C:\Users\Host\AppData\Local\TNT2\2.0.0.2010\Autorun.inf</path><vendor>PUP.Optional.TidyNetwork</vendor><action>success</action><hash>516cab035e3b02341456ab7807fcc63a</hash></file>
<file><path>C:\Users\Host\AppData\Local\TNT2\2.0.0.2010\chromeinst.1.dll</path><vendor>PUP.Optional.TidyNetwork</vendor><action>success</action><hash>516cab035e3b02341456ab7807fcc63a</hash></file>
<file><path>C:\Users\Host\AppData\Local\TNT2\2.0.0.2010\crx.tar</path><vendor>PUP.Optional.TidyNetwork</vendor><action>success</action><hash>516cab035e3b02341456ab7807fcc63a</hash></file>
<file><path>C:\Users\Host\AppData\Local\TNT2\2.0.0.2010\GLOBALUNINSTALL.TNT</path><vendor>PUP.Optional.TidyNetwork</vendor><action>success</action><hash>516cab035e3b02341456ab7807fcc63a</hash></file>
<file><path>C:\Users\Host\AppData\Local\TNT2\2.0.0.2010\hmac.1.dll</path><vendor>PUP.Optional.TidyNetwork</vendor><action>success</action><hash>516cab035e3b02341456ab7807fcc63a</hash></file>
<file><path>C:\Users\Host\AppData\Local\TNT2\2.0.0.2010\iestage2.1.dll</path><vendor>PUP.Optional.TidyNetwork</vendor><action>success</action><hash>516cab035e3b02341456ab7807fcc63a</hash></file>
<file><path>C:\Users\Host\AppData\Local\TNT2\2.0.0.2010\IEToolbar.dll</path><vendor>PUP.Optional.TidyNetwork</vendor><action>success</action><hash>516cab035e3b02341456ab7807fcc63a</hash></file>
<file><path>C:\Users\Host\AppData\Local\TNT2\2.0.0.2010\IEToolbar64.dll</path><vendor>PUP.Optional.TidyNetwork</vendor><action>success</action><hash>516cab035e3b02341456ab7807fcc63a</hash></file>
<file><path>C:\Users\Host\AppData\Local\TNT2\2.0.0.2010\INSTALL.TNT</path><vendor>PUP.Optional.TidyNetwork</vendor><action>success</action><hash>516cab035e3b02341456ab7807fcc63a</hash></file>
<file><path>C:\Users\Host\AppData\Local\TNT2\2.0.0.2010\LastSession.log</path><vendor>PUP.Optional.TidyNetwork</vendor><action>success</action><hash>516cab035e3b02341456ab7807fcc63a</hash></file>
<file><path>C:\Users\Host\AppData\Local\TNT2\2.0.0.2010\log.dll</path><vendor>PUP.Optional.TidyNetwork</vendor><action>success</action><hash>516cab035e3b02341456ab7807fcc63a</hash></file>
<file><path>C:\Users\Host\AppData\Local\TNT2\2.0.0.2010\npTNT2.dll</path><vendor>PUP.Optional.TidyNetwork</vendor><action>success</action><hash>516cab035e3b02341456ab7807fcc63a</hash></file>
<file><path>C:\Users\Host\AppData\Local\TNT2\2.0.0.2010\PARTNER.TNT</path><vendor>PUP.Optional.TidyNetwork</vendor><action>success</action><hash>516cab035e3b02341456ab7807fcc63a</hash></file>
<file><path>C:\Users\Host\AppData\Local\TNT2\2.0.0.2010\passport.dll</path><vendor>PUP.Optional.TidyNetwork</vendor><action>success</action><hash>516cab035e3b02341456ab7807fcc63a</hash></file>
<file><path>C:\Users\Host\AppData\Local\TNT2\2.0.0.2010\passport64.dll</path><vendor>PUP.Optional.TidyNetwork</vendor><action>success</action><hash>516cab035e3b02341456ab7807fcc63a</hash></file>
<file><path>C:\Users\Host\AppData\Local\TNT2\2.0.0.2010\pinnedSearch.htm</path><vendor>PUP.Optional.TidyNetwork</vendor><action>success</action><hash>516cab035e3b02341456ab7807fcc63a</hash></file>
<file><path>C:\Users\Host\AppData\Local\TNT2\2.0.0.2010\pinnedSearch_FindWide.htm</path><vendor>PUP.Optional.TidyNetwork</vendor><action>success</action><hash>516cab035e3b02341456ab7807fcc63a</hash></file>
<file><path>C:\Users\Host\AppData\Local\TNT2\2.0.0.2010\pinnedSearch_Freshy.htm</path><vendor>PUP.Optional.TidyNetwork</vendor><action>success</action><hash>516cab035e3b02341456ab7807fcc63a</hash></file>
<file><path>C:\Users\Host\AppData\Local\TNT2\2.0.0.2010\progress.1.dll</path><vendor>PUP.Optional.TidyNetwork</vendor><action>success</action><hash>516cab035e3b02341456ab7807fcc63a</hash></file>
<file><path>C:\Users\Host\AppData\Local\TNT2\2.0.0.2010\regsvr.1.dll</path><vendor>PUP.Optional.TidyNetwork</vendor><action>success</action><hash>516cab035e3b02341456ab7807fcc63a</hash></file>
<file><path>C:\Users\Host\AppData\Local\TNT2\2.0.0.2010\RemoteSkin.wms</path><vendor>PUP.Optional.TidyNetwork</vendor><action>success</action><hash>516cab035e3b02341456ab7807fcc63a</hash></file>
<file><path>C:\Users\Host\AppData\Local\TNT2\2.0.0.2010\sqlite.1.dll</path><vendor>PUP.Optional.TidyNetwork</vendor><action>success</action><hash>516cab035e3b02341456ab7807fcc63a</hash></file>
<file><path>C:\Users\Host\AppData\Local\TNT2\2.0.0.2010\tnt2chrome.dll</path><vendor>PUP.Optional.TidyNetwork</vendor><action>success</action><hash>516cab035e3b02341456ab7807fcc63a</hash></file>
<file><path>C:\Users\Host\AppData\Local\TNT2\2.0.0.2010\tnt2chrome64.dll</path><vendor>PUP.Optional.TidyNetwork</vendor><action>success</action><hash>516cab035e3b02341456ab7807fcc63a</hash></file>
<file><path>C:\Users\Host\AppData\Local\TNT2\2.0.0.2010\TNT2UserPS.dll</path><vendor>PUP.Optional.TidyNetwork</vendor><action>success</action><hash>516cab035e3b02341456ab7807fcc63a</hash></file>
<file><path>C:\Users\Host\AppData\Local\TNT2\2.0.0.2010\TNT2UserPS64.dll</path><vendor>PUP.Optional.TidyNetwork</vendor><action>success</action><hash>516cab035e3b02341456ab7807fcc63a</hash></file>
<file><path>C:\Users\Host\AppData\Local\TNT2\2.0.0.2010\TntMagicDel.dll</path><vendor>PUP.Optional.TidyNetwork</vendor><action>success</action><hash>516cab035e3b02341456ab7807fcc63a</hash></file>
<file><path>C:\Users\Host\AppData\Local\TNT2\2.0.0.2010\UnInjLib.dll</path><vendor>PUP.Optional.TidyNetwork</vendor><action>success</action><hash>516cab035e3b02341456ab7807fcc63a</hash></file>
<file><path>C:\Users\Host\AppData\Local\TNT2\2.0.0.2010\UnInjLib64.dll</path><vendor>PUP.Optional.TidyNetwork</vendor><action>success</action><hash>516cab035e3b02341456ab7807fcc63a</hash></file>
<file><path>C:\Users\Host\AppData\Local\TNT2\2.0.0.2010\UNINSTALL.TNT</path><vendor>PUP.Optional.TidyNetwork</vendor><action>success</action><hash>516cab035e3b02341456ab7807fcc63a</hash></file>
<file><path>C:\Users\Host\AppData\Local\TNT2\2.0.0.2010\UninstallDlg.1.dll</path><vendor>PUP.Optional.TidyNetwork</vendor><action>success</action><hash>516cab035e3b02341456ab7807fcc63a</hash></file>
<file><path>C:\Users\Host\AppData\Local\TNT2\2.0.0.2010\untar.1.dll</path><vendor>PUP.Optional.TidyNetwork</vendor><action>success</action><hash>516cab035e3b02341456ab7807fcc63a</hash></file>
<file><path>C:\Users\Host\AppData\Local\TNT2\2.0.0.2010\UPDATE.TNT</path><vendor>PUP.Optional.TidyNetwork</vendor><action>success</action><hash>516cab035e3b02341456ab7807fcc63a</hash></file>
<file><path>C:\Users\Host\AppData\Local\TNT2\2.0.0.2010\xpi.tar</path><vendor>PUP.Optional.TidyNetwork</vendor><action>success</action><hash>516cab035e3b02341456ab7807fcc63a</hash></file>
<file><path>C:\Users\Host\AppData\Local\TNT2\2.0.0.2010\zipunzip.1.dll</path><vendor>PUP.Optional.TidyNetwork</vendor><action>success</action><hash>516cab035e3b02341456ab7807fcc63a</hash></file>
<file><path>C:\Users\Host\AppData\Local\TNT2\Common\extension_host-manifest.json</path><vendor>PUP.Optional.TidyNetwork</vendor><action>success</action><hash>516cab035e3b02341456ab7807fcc63a</hash></file>
<file><path>C:\Users\Host\AppData\Local\TNT2\Common\extension_host.exe</path><vendor>PUP.Optional.TidyNetwork</vendor><action>success</action><hash>516cab035e3b02341456ab7807fcc63a</hash></file>
<file><path>C:\Users\Host\AppData\Local\TNT2\Common\extension_host.ini</path><vendor>PUP.Optional.TidyNetwork</vendor><action>success</action><hash>516cab035e3b02341456ab7807fcc63a</hash></file>
<file><path>C:\Users\Host\AppData\Local\TNT2\Profiles\11467\icon.ico</path><vendor>PUP.Optional.TidyNetwork</vendor><action>success</action><hash>516cab035e3b02341456ab7807fcc63a</hash></file>
<file><path>C:\Users\Host\AppData\Local\TNT2\Profiles\11467\inst.ini</path><vendor>PUP.Optional.TidyNetwork</vendor><action>success</action><hash>516cab035e3b02341456ab7807fcc63a</hash></file>
<file><path>C:\Users\Host\AppData\Local\TNT2\Profiles\11467\INSTALL.TNT</path><vendor>PUP.Optional.TidyNetwork</vendor><action>success</action><hash>516cab035e3b02341456ab7807fcc63a</hash></file>
<file><path>C:\Users\Host\AppData\Local\TNT2\Profiles\11467\os11467.xml</path><vendor>PUP.Optional.TidyNetwork</vendor><action>success</action><hash>516cab035e3b02341456ab7807fcc63a</hash></file>
<file><path>C:\Users\Host\AppData\Local\TNT2\Profiles\11467\PARTNER.145.TNT</path><vendor>PUP.Optional.TidyNetwork</vendor><action>success</action><hash>516cab035e3b02341456ab7807fcc63a</hash></file>
<file><path>C:\Users\Host\AppData\Local\TNT2\Profiles\11467\partner.dat</path><vendor>PUP.Optional.TidyNetwork</vendor><action>success</action><hash>516cab035e3b02341456ab7807fcc63a</hash></file>
<file><path>C:\Users\Host\AppData\Local\TNT2\Profiles\11467\runt.ini</path><vendor>PUP.Optional.TidyNetwork</vendor><action>success</action><hash>516cab035e3b02341456ab7807fcc63a</hash></file>
<file><path>C:\Users\Host\AppData\Local\TNT2\Profiles\11467\tnt_32x32.png</path><vendor>PUP.Optional.TidyNetwork</vendor><action>success</action><hash>516cab035e3b02341456ab7807fcc63a</hash></file>
<file><path>C:\Users\Host\AppData\Local\TNT2\Profiles\11467\yah11467.xml</path><vendor>PUP.Optional.TidyNetwork</vendor><action>success</action><hash>516cab035e3b02341456ab7807fcc63a</hash></file>
<file><path>C:\Users\Host\AppData\Local\TNT2\Profiles\11467\{cf15270e-cf08-4def-b4ea-6a5ac23f3bca}.xpi</path><vendor>PUP.Optional.TidyNetwork</vendor><action>success</action><hash>516cab035e3b02341456ab7807fcc63a</hash></file>
<file><path>C:\Program Files (x86)\TNT2\2.0.0.2010\IEToolbar.dll</path><vendor>PUP.Optional.TidyNetwork</vendor><action>success</action><hash>fbc2238ba7f2e155c4a7c65d966d8878</hash></file>
<file><path>C:\Program Files (x86)\TNT2\2.0.0.2010\IEToolbar64.dll</path><vendor>PUP.Optional.TidyNetwork</vendor><action>success</action><hash>fbc2238ba7f2e155c4a7c65d966d8878</hash></file>
<file><path>C:\Program Files (x86)\TNT2\Profiles\11467\passport.dll</path><vendor>PUP.Optional.TidyNetwork</vendor><action>success</action><hash>fbc2238ba7f2e155c4a7c65d966d8878</hash></file>
<file><path>C:\Program Files (x86)\TNT2\Profiles\11467\passport64.dll</path><vendor>PUP.Optional.TidyNetwork</vendor><action>success</action><hash>fbc2238ba7f2e155c4a7c65d966d8878</hash></file>
<file><path>C:\Users\holan_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkmjljdbbgogihjcapfhgkonfmccbffp\1.5_0\background.html</path><vendor>PUP.Optional.eShield</vendor><action>success</action><hash>d1ec8f1f8613fe38d5d0e44ab0539a66</hash></file>
<file><path>C:\Users\holan_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkmjljdbbgogihjcapfhgkonfmccbffp\1.5_0\background.js</path><vendor>PUP.Optional.eShield</vendor><action>success</action><hash>d1ec8f1f8613fe38d5d0e44ab0539a66</hash></file>
<file><path>C:\Users\holan_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkmjljdbbgogihjcapfhgkonfmccbffp\1.5_0\eshield.nmf</path><vendor>PUP.Optional.eShield</vendor><action>success</action><hash>d1ec8f1f8613fe38d5d0e44ab0539a66</hash></file>
<file><path>C:\Users\holan_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkmjljdbbgogihjcapfhgkonfmccbffp\1.5_0\eShield_128.png</path><vendor>PUP.Optional.eShield</vendor><action>success</action><hash>d1ec8f1f8613fe38d5d0e44ab0539a66</hash></file>
<file><path>C:\Users\holan_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkmjljdbbgogihjcapfhgkonfmccbffp\1.5_0\eShield_16.png</path><vendor>PUP.Optional.eShield</vendor><action>success</action><hash>d1ec8f1f8613fe38d5d0e44ab0539a66</hash></file>
<file><path>C:\Users\holan_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkmjljdbbgogihjcapfhgkonfmccbffp\1.5_0\eShield_48.png</path><vendor>PUP.Optional.eShield</vendor><action>success</action><hash>d1ec8f1f8613fe38d5d0e44ab0539a66</hash></file>
<file><path>C:\Users\holan_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkmjljdbbgogihjcapfhgkonfmccbffp\1.5_0\eshield_arm.nexe</path><vendor>PUP.Optional.eShield</vendor><action>success</action><hash>d1ec8f1f8613fe38d5d0e44ab0539a66</hash></file>
<file><path>C:\Users\holan_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkmjljdbbgogihjcapfhgkonfmccbffp\1.5_0\eshield_x86_32.nexe</path><vendor>PUP.Optional.eShield</vendor><action>success</action><hash>d1ec8f1f8613fe38d5d0e44ab0539a66</hash></file>
<file><path>C:\Users\holan_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkmjljdbbgogihjcapfhgkonfmccbffp\1.5_0\eshield_x86_64.nexe</path><vendor>PUP.Optional.eShield</vendor><action>success</action><hash>d1ec8f1f8613fe38d5d0e44ab0539a66</hash></file>
<file><path>C:\Users\holan_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkmjljdbbgogihjcapfhgkonfmccbffp\1.5_0\manifest.json</path><vendor>PUP.Optional.eShield</vendor><action>success</action><hash>d1ec8f1f8613fe38d5d0e44ab0539a66</hash></file>
<file><path>C:\Users\holan_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkmjljdbbgogihjcapfhgkonfmccbffp\1.5_0\newtab.html</path><vendor>PUP.Optional.eShield</vendor><action>success</action><hash>d1ec8f1f8613fe38d5d0e44ab0539a66</hash></file>
<file><path>C:\Users\holan_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkmjljdbbgogihjcapfhgkonfmccbffp\1.5_0\newtab.js</path><vendor>PUP.Optional.eShield</vendor><action>success</action><hash>d1ec8f1f8613fe38d5d0e44ab0539a66</hash></file>
<file><path>C:\Users\holan_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkmjljdbbgogihjcapfhgkonfmccbffp\1.5_0\off.png</path><vendor>PUP.Optional.eShield</vendor><action>success</action><hash>d1ec8f1f8613fe38d5d0e44ab0539a66</hash></file>
<file><path>C:\Users\holan_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkmjljdbbgogihjcapfhgkonfmccbffp\1.5_0\on.png</path><vendor>PUP.Optional.eShield</vendor><action>success</action><hash>d1ec8f1f8613fe38d5d0e44ab0539a66</hash></file>
<file><path>C:\Users\holan_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkmjljdbbgogihjcapfhgkonfmccbffp\1.5_0\_metadata\verified_contents.json</path><vendor>PUP.Optional.eShield</vendor><action>success</action><hash>d1ec8f1f8613fe38d5d0e44ab0539a66</hash></file>
<file><path>C:\Users\holan_000\AppData\Local\Google\Chrome\User Data\Default\Preferences</path><vendor>PUP.Optional.TerraClicks.ShrtCln</vendor><action>replaced</action><baddata>www.terraclicks.com</baddata><gooddata></gooddata><hash>c6f778361b7e9f97b15eb2b65aab9868</hash></file>
</items>
</mbam-log>

ADW:

# AdwCleaner v5.111 - Log soubor vytvořen 14/04/2016 o 19:45:16
# Aktualizováno 14/04/2016 by Xplode
# Databáze : 2016-04-11.4 [Server]
# Operační systém : Windows 10 Pro (X64)
# Jméno uživatele : holan_000 - VAIO
# Spuštěno z : C:\Users\holan_000\Desktop\adwcleaner_5.111.exe
# Volba : Čištění
# Podpora : http://toolslib.net/forum

***** [ Služby ] *****

***** [ Složky ] *****

[-] Složka smazáno : C:\ProgramData\simplitec

***** [ Soubory ] *****

[-] Soubor smazáno : C:\Users\holan_000\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_st.chatango.com_0.localstorage
[-] Soubor smazáno : C:\Users\holan_000\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_st.chatango.com_0.localstorage-journal
[#] Soubor smazáno : C:\Users\holan_000\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_st.chatango.com_0.localstorage
[#] Soubor smazáno : C:\Users\holan_000\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_st.chatango.com_0.localstorage-journal
[-] Soubor smazáno : C:\Users\Host\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_dsms0mj1bbhn4.cloudfront.net_0.localstorage
[-] Soubor smazáno : C:\Users\Host\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_dsms0mj1bbhn4.cloudfront.net_0.localstorage-journal
[-] Soubor smazáno : C:\Users\Host\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_st.chatango.com_0.localstorage
[-] Soubor smazáno : C:\Users\Host\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_st.chatango.com_0.localstorage-journal
[-] Soubor smazáno : C:\Users\Host\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_vlc-media-player.en.softonic.com_0.localstorage
[-] Soubor smazáno : C:\Users\Host\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_vlc-media-player.en.softonic.com_0.localstorage-journal
[#] Soubor smazáno : C:\Users\Host\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_st.chatango.com_0.localstorage
[#] Soubor smazáno : C:\Users\Host\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_st.chatango.com_0.localstorage-journal

***** [ DLLs ] *****

***** [ Zástupci ] *****

***** [ Naplánované úkoly ] *****

***** [ Registr ] *****

[-] Hodnota smazáno : HKCU\Software\Mozilla\Firefox\Extensions [{b64d9b05-48e1-4ceb-bf58-e0643994e900}]
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\CLSID\{8BF0126F-A5B7-4720-ABB2-2414A0AF5474}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Interface\{02F878DF-E2BE-4B85-8CB4-A0D2D4E2ED7F}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Interface\{2AF343DD-3102-4F9D-AC95-DCA4C95382C7}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Interface\{3137BC14-D8D7-4B67-8FFA-2E0B2E9D541B}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Interface\{4CA2AC92-971B-47B1-ACB6-357B552155AC}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Interface\{52C5395B-1FCD-47FA-A834-FD830701C2D5}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Interface\{5D3DCC39-9233-4330-94E9-DA92BE49CA1A}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Interface\{615FACDF-DADB-440D-AC91-8AAB0AE9E3AD}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Interface\{762D463B-C45A-456D-A80D-8689C297C91E}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Interface\{7A6BE473-7960-44D0-BD54-D23DA76353DF}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Interface\{803F550E-BAAE-42BB-8917-64BA0006AB17}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Interface\{8D5BC51D-C9D3-43B9-B728-B30677B7C7E8}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Interface\{991C9D8D-A789-4DB9-BDFC-5F33398B04BF}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Interface\{A5ACC874-D943-483F-A2D1-14598D51F872}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Interface\{B0474212-0D9D-4361-90B3-B89D1A44275D}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Interface\{BFDE183A-C6FE-41D2-80F9-586C29210AC2}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Interface\{D83C83BF-3EDD-4410-ADAB-5295116DD8C7}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Interface\{DD260902-9420-4055-A956-9152EB4F3E6A}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Interface\{EB1F9F3C-5526-4DAE-BD4B-3EAA7715DA9F}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Interface\{F1912128-469A-4138-AA26-9699C15BB13E}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Interface\{F68DC16C-9C2B-455B-8853-7E4D34BAA3F4}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Interface\{FBA8498F-B3A0-4942-A2BF-E0CB7BC7E000}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Interface\{A8F7D0A5-7074-40B8-9BDC-1174BDD0A132}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Interface\{D14D64BC-A0E4-42E3-BB72-FB41EA43C198}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Interface\{DD1F043F-ABC8-4643-8B95-D2C5B22BB019}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Interface\{E3F3E8F9-F747-4DD6-BA6B-82A6CE1E0860}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Interface\{ED0B64D4-BF27-4521-AD27-190F49BF5EA7}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Interface\{023E9EC8-B147-40EB-B0B3-DF90618FB371}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Interface\{0522D9A4-4D57-437D-978D-E5B3B6C9005D}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Interface\{07F41522-AF7D-4F26-B394-094F059FDB8A}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Interface\{0C40F472-7407-4467-8914-1DEA7C326972}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Interface\{212E6D43-6062-492A-B8CC-144669FF11ED}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Interface\{224FE662-1E6D-4BC0-AEBB-9E2FB4057BE9}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Interface\{3A807417-B46D-4D37-8C9A-19AC6DE204F9}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Interface\{3CC60715-D6C5-429D-830E-43FA3F86C61D}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Interface\{4517D94C-19BA-46FA-BE66-2A30CEAC4A85}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Interface\{555D7146-94A8-4C94-AE76-C39CDC7F7705}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Interface\{59D188FA-757A-424E-8C93-F58FFD896BD7}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Interface\{8120D9D6-785C-4413-9C0C-DF2028C56FAD}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Interface\{823AE2EB-E62C-4847-B192-C99B91B92416}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Interface\{9B4F7CFE-987D-410E-A8E4-20182E0B3C24}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Interface\{9B9A45F4-18FC-484A-BACA-076D78273D8E}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Interface\{A6D54287-7939-466A-8579-92546D946C8C}
[-] Klávesa smazáno : HKLM\SOFTWARE\Classes\Interface\{A78EDAFB-926F-4D93-AB13-8232D7378EB1}
[-] Klávesa smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
[-] Klávesa smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
[-] Klávesa smazáno : HKCU\Software\WEBAPP
[-] Klávesa smazáno : HKLM\SOFTWARE\simplitec
[-] Klávesa smazáno : HKU\S-1-5-21-300859844-1961672170-2238026608-1007\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\App Lid

***** [ Webové prohlížeče ] *****

*************************

:: "Tracing" odstraněných kláves
:: Nastavení Winsock odstraněno

*************************

C:\AdwCleaner\AdwCleaner[C1].txt - [7391 bytes] - [14/04/2016 19:45:16]
C:\AdwCleaner\AdwCleaner[S1].txt - [11899 bytes] - [12/04/2016 19:38:04]
C:\AdwCleaner\AdwCleaner[S2].txt - [7345 bytes] - [14/04/2016 19:42:02]

########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [7611 bytes] ##########

Junkware:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.0.4 (03.14.2016)
Operating System: Windows 10 Pro x64
Ran by holan_000 (Administrator) on źt 14.04.2016 at 19:49:34,06
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

File System: 9

Successfully deleted: C:\ProgramData\productdata (Folder)
Successfully deleted: C:\Users\holan_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgjpfhpjcgdppjbgnpnjllokbmcdllig (Folder)
Successfully deleted: C:\Users\holan_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\blmojkbhnkkphngknkmgccmlenfaelkd (Folder)
Successfully deleted: C:\Users\holan_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\olfeabkoenfaoljndfecamgilllcpiak (Folder)
Successfully deleted: C:\Users\holan_000\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_bgjpfhpjcgdppjbgnpnjllokbmcdllig_0.localstorage-journal (File)
Successfully deleted: C:\Users\holan_000\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_bgjpfhpjcgdppjbgnpnjllokbmcdllig_0.localstorage (File)
Successfully deleted: C:\Users\holan_000\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_blmojkbhnkkphngknkmgccmlenfaelkd_0.localstorage-journal (File)
Successfully deleted: C:\Users\holan_000\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_blmojkbhnkkphngknkmgccmlenfaelkd_0.localstorage (File)
Successfully deleted: C:\Users\holan_000\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_olfeabkoenfaoljndfecamgilllcpiak_0.localstorage (File)

Registry: 0

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on źt 14.04.2016 at 19:55:21,18
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

ROgue killer:

RogueKiller V12.1.2.0 (x64) [Apr 11 2016] (Free) by Adlice Software
mail : http://www.adlice.com/contact/
Feedback : http://forum.adlice.com
Webová stránka : http://www.adlice.com/software/roguekiller/
Blog : http://www.adlice.com

Operační systém : Windows 10 (10.0.10586) 64 bits version
Spuštěno : Normální režim
Uživatel : holan_000 [Práva správce]
Started from : C:\Users\holan_000\Desktop\RogueKillerX64.exe
Mód : Prohledat -- Datum : 04/14/2016 20:33:03

¤¤¤ Procesy : 0 ¤¤¤

¤¤¤ Registry : 0 ¤¤¤

¤¤¤ Úlohy : 0 ¤¤¤

¤¤¤ Soubory : 0 ¤¤¤

¤¤¤ Soubor HOSTS : 0 ¤¤¤

¤¤¤ Antirootkit : 0 (Driver: Nahrán) ¤¤¤

¤¤¤ Webové prohlížeče : 0 ¤¤¤

¤¤¤ Kontrola MBR : ¤¤¤
+++++ PhysicalDrive0: HGST HTS545050A7E380 +++++
--- User ---
[MBR] 1db1d35444fff48daf5dfe43e574344d
[BSP] 483a1f1067e6abd772a271899fd601f3 : Windows Vista/7/8|VT.Unknown MBR Code
Partition table:
0 - [XXXXXX] ACER (0x27) [VISIBLE] Offset (sectors): 2048 | Size: 18888 MB
1 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 38684672 | Size: 350 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
2 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 39401472 | Size: 457205 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
3 - [XXXXXX] ACER (0x27) [VISIBLE] Offset (sectors): 975759360 | Size: 494 MB
User = LL1 ... OK
User = LL2 ... OK

Příspěvekod **Orcus** » 15 dub 2016 08:43

Stáhni
Zoek.exe

a ulož si ho na plochu.
Zavři všechny ostatní programy, okna i prohlížeče.
Spusť Zoek.exe ( u win vista , win7, 8 klikni na něj pravým a vyber : „Spustit jako správce“
- pozor, náběh programu může trvat déle.

Do okna programu vlož skript níže:

Kód: Vybrat vše

autoclean;
emptyclsid;
iedefaults;
FFdefaults;
CHRdefaults;
emptyalltemp;
resethosts;

Klikni na Run Script
Program provede sken, opravu, sken i oprava může trvat i více minut, je třeba posečkat do konce. Do okna neklikej!
Program nabídne restart , potvrď .

Po restartu se může nějaký čas ukázat pouze černá plocha , to je normální. Je třeba počkat až se vytvoří log. Ten si můžeš uložit třeba do dokumentů, jinak se sám ukládá do:
C:\zoek-results.log
Zkopíruj sem celý obsah toho logu.

====================================================

Co problémy? + nový log z HJT

hollca · Příspěvekod **hollca** » 15 dub 2016 20:53

zOEK:

Zoek.exe v5.0.0.1 Updated 31-December-2015
Tool run by holan_000 on p 15.04.2016 at 19:45:09,11.
Microsoft Windows 10 Pro 10.0.10586 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\holan_000\Desktop\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

15.4.2016 19:48:44 Zoek.exe System Restore Point Created Successfully.

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

127.0.0.1 localhost

==== Empty Folders Check ======================

C:\PROGRA~2\Origin Games deleted successfully
C:\PROGRA~3\Comms deleted successfully
C:\PROGRA~3\Sony Mobile deleted successfully
C:\Users\Administrator\AppData\Local deleted successfully
C:\Users\Guest\AppData\Local deleted successfully
C:\Users\HomeGroupUser$\AppData\Local deleted successfully
C:\Users\holan_000\AppData\Local\ActiveSync deleted successfully
C:\Users\holan_000\AppData\Local\EmieBrowserModeList deleted successfully
C:\Users\holan_000\AppData\Local\EmieSiteList deleted successfully
C:\Users\holan_000\AppData\Local\EmieUserList deleted successfully
C:\Users\holan_000\AppData\Local\NetworkTiles deleted successfully
C:\Users\holan_000\AppData\Local\PeerDistRepub deleted successfully
C:\Users\Host\AppData\Local\ActiveSync deleted successfully
C:\Users\Host\AppData\Local\NetworkTiles deleted successfully
C:\Users\Host\AppData\Local\PeerDistRepub deleted successfully
C:\WINDOWS\serviceprofiles\networkservice\AppData\Local\Maps deleted successfully
C:\WINDOWS\serviceprofiles\networkservice\AppData\Local\PeerDistPub deleted successfully
C:\WINDOWS\serviceprofiles\networkservice\AppData\Local\PeerDistRepub deleted successfully
C:\WINDOWS\serviceprofiles\Localservice\AppData\Local\CrashDumps deleted successfully

==== Deleting CLSID Registry Keys ======================

==== Deleting CLSID Registry Values ======================

==== Deleting Services ======================

==== Deleting Files \ Folders ======================

C:\PROGRA~2\Origin Games not found
C:\PROGRA~3\Package Cache deleted
C:\Users\holan_000\AppData\Local\BIT460A.tmp deleted
C:\Users\holan_000\AppData\Local\Unity deleted
C:\Users\Host\AppData\Local\Unity deleted
C:\Users\Host\AppData\Local\CrashRpt deleted
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Search.lnk deleted
C:\Users\holan_000\AppData\LocalLow\Unity deleted
C:\Users\Host\AppData\LocalLow\Unity deleted
"C:\Users\holan_000\AppData\Local\{C7D09604-A5E0-45EC-9F22-C6E113BF10CC}" deleted

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions]
"wrc@avast.com"="C:\Program Files\AVAST Software\Avast\WebRep\FF" [23.03.2016 22:29]
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]
"sp@avast.com"="C:\Program Files\AVAST Software\Avast\SafePrice\FF" [23.03.2016 22:29]

==== Chromium Look ======================

Google Chrome Version: 46.0.2490.86

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
gomekmidlodglbbmalcneegieacbdmki - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx[03.03.2016 20:40]

HKEY_CURRENT_USER\SOFTWARE\Google\Chrome\Extensions
lmjegmlicamnimmfhcmpkclmigmmcbeh - No path found[]

Angry Birds - holan_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\aknpkdffaafgjchaibgeefbgmgeghloj
Lamborghini - holan_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\fiefegoncbfdemobfpaldfapbfiinmeo
Avast Online Security - holan_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki
Google Drive App Launcher - holan_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh
Avast Online Security - Host\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki

==== Chromium Fix ======================

C:\Users\Host\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.azlyrics.com_0.localstorage deleted successfully
C:\Users\Host\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.azlyrics.com_0.localstorage-journal deleted successfully
C:\Users\Host\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.metrolyrics.com_0.localstorage deleted successfully
C:\Users\Host\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.metrolyrics.com_0.localstorage-journal deleted successfully
C:\Users\holan_000\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_our.amplifinder.biz_0.localstorage deleted successfully
C:\Users\holan_000\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_our.amplifinder.biz_0.localstorage-journal deleted successfully
C:\Users\holan_000\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_ad.doubleclick.net_0.localstorage deleted successfully
C:\Users\holan_000\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_ad.doubleclick.net_0.localstorage-journal deleted successfully
C:\Users\holan_000\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_ads80.dfiles.eu_0.localstorage deleted successfully
C:\Users\holan_000\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_ads80.dfiles.eu_0.localstorage-journal deleted successfully
C:\Users\holan_000\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_adserver.adtech.de_0.localstorage deleted successfully
C:\Users\holan_000\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_adserver.adtech.de_0.localstorage-journal deleted successfully
C:\Users\holan_000\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_advert.uloz.to_0.localstorage deleted successfully
C:\Users\holan_000\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_advert.uloz.to_0.localstorage-journal deleted successfully
C:\Users\Host\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_ad.adverticum.net_0.localstorage deleted successfully
C:\Users\Host\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_ad.adverticum.net_0.localstorage-journal deleted successfully
C:\Users\Host\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_ads.dfiles.eu_0.localstorage deleted successfully
C:\Users\Host\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_ads.dfiles.eu_0.localstorage-journal deleted successfully
C:\Users\Host\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_ads.vertoz.com_0.localstorage deleted successfully
C:\Users\Host\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_ads.vertoz.com_0.localstorage-journal deleted successfully
C:\Users\Host\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_ads.yahoo.com_0.localstorage deleted successfully
C:\Users\Host\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_ads.yahoo.com_0.localstorage-journal deleted successfully
C:\Users\Host\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_adserver.adtech.de_0.localstorage deleted successfully
C:\Users\Host\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_adserver.adtech.de_0.localstorage-journal deleted successfully
C:\Users\Host\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_advert.uloz.to_0.localstorage deleted successfully
C:\Users\Host\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_advert.uloz.to_0.localstorage-journal deleted successfully
C:\Users\Host\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.ad.libimseti.cz_0.localstorage deleted successfully
C:\Users\Host\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.ad.libimseti.cz_0.localstorage-journal deleted successfully
C:\Users\Host\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.olark.com_0.localstorage deleted successfully
C:\Users\Host\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.olark.com_0.localstorage-journal deleted successfully
C:\Users\holan_000\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_c.betrad.com_0.localstorage deleted successfully
C:\Users\holan_000\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_c.betrad.com_0.localstorage-journal deleted successfully
C:\Users\holan_000\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_c.betrad.com_0.localstorage deleted successfully
C:\Users\holan_000\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_c.betrad.com_0.localstorage-journal deleted successfully
C:\Users\Host\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_c.betrad.com_0.localstorage deleted successfully
C:\Users\Host\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_c.betrad.com_0.localstorage-journal deleted successfully
C:\Users\Host\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_c.betrad.com_0.localstorage deleted successfully
C:\Users\Host\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_c.betrad.com_0.localstorage-journal deleted successfully

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="https://www.google.com/?trackid=sp-006"

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="https://www.google.com/?trackid=sp-006"

==== All HKLM and HKCU SearchScopes ======================

HKLM\SearchScopes "DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
HKLM\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
HKLM\Wow6432Node\SearchScopes "DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
HKLM\Wow6432Node\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
HKLM\Wow6432Node\SearchScopes\{E9410C70-B6AE-41FF-AB71-32F4B279EA5F} - https://www.google.com/search?trackid=sp-006&q={searchTerms}
HKCU\SearchScopes "DefaultScope"="{E9410C70-B6AE-41FF-AB71-32F4B279EA5F}"
HKCU\SearchScopes\{012E1000-F331-11DB-8314-0800200C9A66} - http://www.google.com/search?q={searchTerms}
HKCU\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE11SR
HKCU\SearchScopes\{E9410C70-B6AE-41FF-AB71-32F4B279EA5F} - https://www.google.com/search?trackid=sp-006&q={searchTerms}

==== Reset Google Chrome ======================

C:\Users\holan_000\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\holan_000\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences was reset successfully
C:\Users\Host\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\Host\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences was reset successfully
C:\Users\holan_000\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully
C:\Users\holan_000\AppData\Local\Google\Chrome\User Data\Default\Web Data-journal was reset successfully
C:\Users\Host\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully
C:\Users\Host\AppData\Local\Google\Chrome\User Data\Default\Web Data-journal was reset successfully

==== Deleting Registry Keys ======================

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\UnityWebPlayer deleted successfully

==== Empty IE Cache ======================

C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\holan_000\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Users\holan_000\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5 emptied successfully
C:\Users\Host\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5 emptied successfully
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\WINDOWS\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\WINDOWS\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Users\holan_000\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully
C:\Users\holan_000\AppData\Local\Microsoft\Windows\INetCache\Low\IE emptied successfully
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully
C:\WINDOWS\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully

==== Empty FireFox Cache ======================

No FireFox Profiles found

==== Empty Chrome Cache ======================

C:\Users\holan_000\AppData\Local\Opera Software\Opera Stable\Cache emptied successfully
C:\Users\Host\AppData\Local\Opera Software\Opera Stable\Cache emptied successfully
C:\Users\holan_000\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully
C:\Users\Host\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

No Flash Cache Found

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== C:\zoek_backup content ======================

C:\zoek_backup (files=358 folders=193 196294481 bytes)

==== Empty Temp Folders ======================

C:\WINDOWS\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\WINDOWS\Temp successfully emptied
C:\Users\HOLAN_~1\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== EOF on p 15.04.2016 at 20:48:34,51 ======================

HJT:

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:51:06, on 15.4.2016
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.10586.0020)

Boot mode: Normal

Running processes:
C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkypeHost.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Users\holan_000\Documents\SW\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?trackid=sp-006
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~2\Office14\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~2\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [Raptr] "C:\Program Files (x86)\Raptr Inc\Raptr\raptrstub.exe" --startup
O4 - HKCU\..\Run: [GoogleDriveSync] "C:\Program Files (x86)\Google\Drive\googledrivesync.exe" /autostart
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\RunOnce: [Uninstall C:\Users\holan_000\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\amd64] C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\holan_000\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\amd64"
O4 - HKCU\..\RunOnce: [Uninstall C:\Users\holan_000\AppData\Local\Microsoft\OneDrive\17.3.6201.1019_1\amd64] C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\holan_000\AppData\Local\Microsoft\OneDrive\17.3.6201.1019_1\amd64"
O4 - HKLM\..\Policies\Explorer\Run: [BtvStack] "C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe"
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\Program Files (x86)\Microsoft Office\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\freeytmp3downloader.htm
O10 - Unknown file in Winsock LSP: c:\windows\syswow64\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\syswow64\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\WINDOWS\system32\atiesrxx.exe (file missing)
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: Energy Server Service (ESRV_SVC) - Intel Corporation - C:\Program Files\Sony\VAIO Care\ESRV\esrv_svc.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) Wireless Bluetooth(R) 4.0 Radio Management - Intel Corporation - C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Origin Client Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginClientService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: Intel(R) System Behavior Tracker Collector Service (SampleCollector) - Intel Corporation - C:\Program Files\Sony\VAIO Care\VCPerfService.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\WINDOWS\system32\TieringEngineService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: User Energy Server Service (USER_ESRV_SVC) - Intel Corporation - C:\Program Files\Sony\VAIO Care\ESRV\esrv_svc.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: VCService - Sony Corporation - C:\Program Files\Sony\VAIO Care\VCService.exe
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: ZAtheros Bt and Wlan Coex Agent - Atheros - C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe

--
End of file - 9556 bytes

Problemy nejsou zadne.

Příspěvekod **jaro3** » 16 dub 2016 09:32

Zavři ostatní aplikace a prohlížeče, odpoj se od netu a fixni v HJT:
Návod

Kód: Vybrat vše

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O4 - HKCU\..\RunOnce: [Uninstall C:\Users\holan_000\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\amd64] C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\holan_000\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\amd64"
O4 - HKCU\..\RunOnce: [Uninstall C:\Users\holan_000\AppData\Local\Microsoft\OneDrive\17.3.6201.1019_1\amd64] C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\holan_000\AppData\Local\Microsoft\OneDrive\17.3.6201.1019_1\amd64"

Stáhni si zde DelFix
https://toolslib.net/downloads/viewdownload/2-delfix/

ulož si soubor na plochu.
Poklepáním na ikonu spusť nástroj Delfix.exe
( Ve Windows Vista, Windows 7 a 8, musíš spustit soubor pravým tlačítkem myši -> Spustit jako správce .
V hlavním menu, zkontroluj tyto možnosti - Odstranění dezinfekce nástrojů (Remove desinfection tools) – Vyčistit body obnovy (Purge System Restore)
Poté klikněte na tlačítko Spustit (Run) a nech nástroj dělat svoji práci

Poté se zpráva se otevře (DelFix.txt). Vlož celý obsah zprávy sem.Jinak je zpráva zde:
v C: \ DelFix.txt

Aktualizuj javu:
[url= http://www.oracle.com/technetwork/java/ ... 33155.html
Java SE Runtime Environment 8

Klikni na Accept License Agreement
Vyber si OS (Windows nebo Windows x64, Offline Installation)
jre-8-windows-i586-p.exe nebo
jre-8-windows-x64.exe
Stáhni ( download) a nainstaluj.
Ostatní javy odeber v přidat/odebrat programy.

Pokud nejsou problémy , je to vše a můžeš dát vyřešeno , zelenou fajfku.

hollca · Příspěvekod **hollca** » 16 dub 2016 19:22

# DelFix v1.012 - Logfile created 16/04/2016 at 19:19:59
# Updated 04/03/2015 by Xplode
# Username : holan_000 - VAIO
# Operating System : Windows 10 Pro (64 bits)

~ Removing disinfection tools ...

Deleted : C:\zoek_backup
Deleted : C:\AdwCleaner
Deleted : C:\RegBackup
Deleted : C:\zoek-results.log
Deleted : C:\Users\holan_000\Desktop\adwcleaner_5.111.exe
Deleted : C:\Users\holan_000\Desktop\JRT.exe
Deleted : C:\Users\holan_000\Desktop\RogueKillerX64.exe
Deleted : C:\Users\holan_000\Desktop\zoek.exe
Deleted : HKLM\SOFTWARE\OldTimer Tools
Deleted : HKLM\SOFTWARE\TrendMicro\Hijackthis

~ Cleaning system restore ...

Deleted : RP #25 [Naplánovaný kontrolní bod | 04/11/2016 16:34:14]
Deleted : RP #26 [Installed Assassin's Creed Revelations | 04/12/2016 20:57:17]
Deleted : RP #27 [Installed Assassin's Creed Revelations 1.02 | 04/14/2016 16:24:01]
Deleted : RP #28 [JRT Pre-Junkware Removal | 04/14/2016 17:49:38]

New restore point created !

########## - EOF - ##########

Příspěvekod **Orcus** » 17 dub 2016 08:53

Pokud nejsou problémy , je to vše a můžeš dát vyřešeno , zelenou fajfku.

Prosím o kontrolu logu HJT Vyřešeno

Prosím o kontrolu logu HJT Vyřešeno

Re: Prosím o kontrolu logu HJT

Re: Prosím o kontrolu logu HJT

Re: Prosím o kontrolu logu HJT

Re: Prosím o kontrolu logu HJT

Re: Prosím o kontrolu logu HJT

Re: Prosím o kontrolu logu HJT

Re: Prosím o kontrolu logu HJT

Re: Prosím o kontrolu logu HJT

Re: Prosím o kontrolu logu HJT

Kdo je online