Zde je log
Malwarebytes Anti-Malware
www.malwarebytes.org
Datum skenování: 11. 10. 2015
Čas skenování: 19:10
Protokol: log.txt
Správce: Ano
Verze: 2.1.8.1057
Databáze malwaru: v2015.10.11.05
Databáze rootkitů: v2015.10.06.01
Licence: Zkušební verze
Ochrana proti malwaru: Zapnuto
Ochrana proti škodlivým webovým stránkám: Zapnuto
Ochrana programu: Vypnuto
OS: Windows 8.1
CPU: x64
Souborový systém: NTFS
Uživatel: Michal
Typ skenu: Sken hrozeb
Výsledek: Dokončeno
Prohledaných objektů: 381694
Uplynulý čas: 32 min, 6 sek
Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Vypnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto
Procesy: 3
PUP.Optional.BitCoinMiner, C:\Users\Michal\AppData\Roaming\Microsoft\Networking\inet32upd.exe, 5860, , [6e436fe64546e6503772504fb84c4ab6]
PUP.Optional.BitCoinMiner, C:\Users\Michal\AppData\Roaming\Microsoft\Networking\winnet32b.exe, 5884, , [634e67eee2a959dd6743712ecc38b14f]
PUP.Optional.BitCoinMiner, C:\Users\Michal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\conhost32.exe, 5408, , [3b76d184aae1f93ddbd14d52030155ab]
Moduly: 0
(Nenalezeny žádné škodlivé položky)
Klíče registru: 55
PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1942FF40-FBB0-4517-8E3B-5B973EF8CEFE}, , [03ae41147e0d02342726931846be1ce4],
PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1B04D344-43B3-40ED-9CA3-1D785D56FD5C}, , [20911243781370c6e9642f7c6c98a15f],
PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1B319539-1015-4062-8DF2-E1101E72AE4D}, , [d8d94e07206b0c2a8cc3edbe02023dc3],
PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5F7FAF1E-8FDF-452D-A103-DF1187703BEE}, , [a809afa69fec90a691be5b50c63ed12f],
PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9494C65D-EB62-41F3-B2F9-C9462EDFCEC6}, , [6a47e76e5e2d6cca76d8a10aae56847c],
PUP.Optional.CrossRider, HKLM\SOFTWARE\WOW6432NODE\HDQ-1.2cV07.01, , [862b4e070c7f33038ca6beed5da7c13f],
PUP.Optional.CrossRider, HKLM\SOFTWARE\WOW6432NODE\HDQ-1.2cV07.01-nv, , [743d59fce7a460d689a99219ab5903fd],
PUP.Optional.TornTV, HKLM\SOFTWARE\WOW6432NODE\TheTorntv V10-nv, , [476acd88d5b6999dc57e8e4b7292f907],
PUP.Optional.CrossRider, HKLM\SOFTWARE\WOW6432NODE\APPDATALOW\SOFTWARE\Crossrider, , [f5bc074e4447c76fce741992b351ef11],
PUP.Optional.CrossRider, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1942FF40-FBB0-4517-8E3B-5B973EF8CEFE}, , [af0289cc0388c274e36a66452dd7c040],
PUP.Optional.CrossRider, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1B04D344-43B3-40ED-9CA3-1D785D56FD5C}, , [0fa2d77e177461d5e766892253b1fc04],
PUP.Optional.CrossRider, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1B319539-1015-4062-8DF2-E1101E72AE4D}, , [d3de5ef79fecd95d51fe17948183b050],
PUP.Optional.CrossRider, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5F7FAF1E-8FDF-452D-A103-DF1187703BEE}, , [06ab72e3a2e9ee487ad5e3c8c53f9070],
PUP.Optional.CrossRider, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9494C65D-EB62-41F3-B2F9-C9462EDFCEC6}, , [4f6292c393f848ee7ed0eac126de43bd],
PUP.Optional.CrossRider, HKU\S-1-5-18\SOFTWARE\HDQ-1.2cV07.01-nv, , [436e9eb791fa40f6b32f2b7e8e76926e],
PUP.Optional.CrossRider, HKU\S-1-5-18\SOFTWARE\APPDATALOW\SOFTWARE\HDQ-1.2cV07.01, , [1998f461b6d5fb3b29c952579173b947],
PUP.Optional.TornTV, HKU\S-1-5-18\SOFTWARE\APPDATALOW\SOFTWARE\TheTorntv V10, , [edc4a4b172193ef83ef4ac2d33d11ee2],
PUP.Optional.TornTV, HKU\S-1-5-18\SOFTWARE\APPDATALOW\SOFTWARE\Torntv V9.0, , [3978a2b31e6dbe7883b100d992722dd3],
PUP.Optional.CrossRider, HKU\S-1-5-21-3022578457-2048947885-1841973601-1002\SOFTWARE\APPDATALOW\SOFTWARE\HDQ-1.2cV07.01, , [5e53282d612a9d99955d624738cc57a9],
PUP.Optional.CrossRider, HKU\S-1-5-21-3022578457-2048947885-1841973601-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1785DD9F-BD3F-4C25-A690-B3565FB164C3}, , [03aee174b2d988ae9d8f6b4040c4b34d],
PUP.Optional.CrossRider, HKU\S-1-5-21-3022578457-2048947885-1841973601-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1942FF40-FBB0-4517-8E3B-5B973EF8CEFE}, , [951cabaaa9e2a78fea41347731d37f81],
PUP.Optional.CrossRider, HKU\S-1-5-21-3022578457-2048947885-1841973601-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1B04D344-43B3-40ED-9CA3-1D785D56FD5C}, , [4c6540159dee7abcc56617942cd8ce32],
PUP.Optional.CrossRider, HKU\S-1-5-21-3022578457-2048947885-1841973601-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1B319539-1015-4062-8DF2-E1101E72AE4D}, , [466b4312f893bc7a47e64e5dd52f7090],
PUP.Optional.CrossRider, HKU\S-1-5-21-3022578457-2048947885-1841973601-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{27CDCDDC-CBD8-4BC7-8AAF-F3D3E6547DC1}, , [dfd285d06c1f9e9888a465466c983ac6],
PUP.Optional.CrossRider, HKU\S-1-5-21-3022578457-2048947885-1841973601-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{28F5E177-65CA-4886-84A8-64E5ED972D35}, , [e2cf3c19e6a5d06652dbf6b5d13343bd],
PUP.Optional.CrossRider, HKU\S-1-5-21-3022578457-2048947885-1841973601-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{366AEC2B-F5A4-40FB-9E1D-17B4B710FAF6}, , [d7da2233bad141f5b974d0db9a6a7f81],
PUP.Optional.CrossRider, HKU\S-1-5-21-3022578457-2048947885-1841973601-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3C9CDAC2-38E3-4448-B84A-4EB993149350}, , [fcb5f560157654e270bd901ba65ed52b],
PUP.Optional.CrossRider, HKU\S-1-5-21-3022578457-2048947885-1841973601-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{41AB84E2-8D54-4203-ADF3-81555B54101B}, , [bbf6afa62a6179bd8e9f3576b74d17e9],
PUP.Optional.CrossRider, HKU\S-1-5-21-3022578457-2048947885-1841973601-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{43146B6E-535D-4F33-ACD3-23D4F69D1DDC}, , [5958a3b28a011d1914188b20788cd030],
PUP.Optional.CrossRider, HKU\S-1-5-21-3022578457-2048947885-1841973601-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{433C3D5A-90BA-4BA9-A995-44DC27CEC0E7}, , [3a77381dadde54e20428ccdffe06669a],
PUP.Optional.CrossRider, HKU\S-1-5-21-3022578457-2048947885-1841973601-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{45005907-E967-43CF-BB87-F19B3C27F6CC}, , [7938a6af0b80f3434ce058536e96fd03],
PUP.Optional.CrossRider, HKU\S-1-5-21-3022578457-2048947885-1841973601-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5F7FAF1E-8FDF-452D-A103-DF1187703BEE}, , [832e064fd5b6f83e7bb26d3efa0a5ca4],
PUP.Optional.CrossRider, HKU\S-1-5-21-3022578457-2048947885-1841973601-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{612310EB-89DC-4BAF-9CB5-424EAFD189F3}, , [e7ca85d0ed9e5bdb17162b80659faa56],
PUP.Optional.CrossRider, HKU\S-1-5-21-3022578457-2048947885-1841973601-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7D0FEF17-C3D3-4450-A8D5-C2FF4887D33E}, , [733ef4614249cc6abe6e852612f2fb05],
PUP.Optional.CrossRider, HKU\S-1-5-21-3022578457-2048947885-1841973601-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7E5BA3DB-4913-455E-ADB7-EFB817CD7D7D}, , [ecc584d1c0cb5dd9270633781ce820e0],
PUP.Optional.CrossRider, HKU\S-1-5-21-3022578457-2048947885-1841973601-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{84BD3713-9F89-490D-B6D7-FC5B6E7E3CF8}, , [268b80d5612a5ed875b713983ec643bd],
PUP.Optional.CrossRider, HKU\S-1-5-21-3022578457-2048947885-1841973601-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{84E7341C-4632-49DF-8260-689859938019}, , [a908a2b364273ff72ffedccf8a7ac33d],
PUP.Optional.CrossRider, HKU\S-1-5-21-3022578457-2048947885-1841973601-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8E52FB69-63C7-499F-B293-906958F238C1}, , [c2efa4b1d4b75adc75b8228945bf14ec],
PUP.Optional.CrossRider, HKU\S-1-5-21-3022578457-2048947885-1841973601-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{91361D6D-445D-4780-81AA-9AA8E04CF12A}, , [cde433224e3daa8c5cd1fcaf8d7715eb],
PUP.Optional.CrossRider, HKU\S-1-5-21-3022578457-2048947885-1841973601-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9494C65D-EB62-41F3-B2F9-C9462EDFCEC6}, , [615064f10f7cd5611319d0db0df7659b],
PUP.Optional.CrossRider, HKU\S-1-5-21-3022578457-2048947885-1841973601-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{AF5F1546-A524-4F22-B76E-52CEB57E3A36}, , [61501b3a6526082eaa83317a4aba916f],
PUP.Optional.CrossRider, HKU\S-1-5-21-3022578457-2048947885-1841973601-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BFA29807-1D13-4343-B43F-ADD6B114A12A}, , [961b6aeb17748ea844e98922669ee917],
PUP.Optional.CrossRider, HKU\S-1-5-21-3022578457-2048947885-1841973601-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C2103DA0-F7F5-4B27-B9F5-BE6B482628CC}, , [6150aca994f7dd59db510e9d28dc9868],
PUP.Optional.CrossRider, HKU\S-1-5-21-3022578457-2048947885-1841973601-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C3BCACEA-5C8F-4C5C-A75C-7F6CE56F5BB8}, , [39785005d3b8fa3c56d60c9f966ed22e],
PUP.Optional.CrossRider, HKU\S-1-5-21-3022578457-2048947885-1841973601-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C69F61D5-9373-452B-B391-745E5EC537DD}, , [139e7cd90e7deb4bab81901bfa0a57a9],
PUP.Optional.CrossRider, HKU\S-1-5-21-3022578457-2048947885-1841973601-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C95F45AF-9270-4F80-BDE4-8428458E5F37}, , [9b16c2932b60e0566dbfd9d2867ee020],
PUP.Optional.CrossRider, HKU\S-1-5-21-3022578457-2048947885-1841973601-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D184E7FD-DB9F-4C8C-8DD5-E797F15968C5}, , [6150b1a499f2191d72bb406ba163ee12],
PUP.Optional.CrossRider, HKU\S-1-5-21-3022578457-2048947885-1841973601-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{DA58D502-5983-4D14-82A3-4C9DB43511A3}, , [01b01d38cbc06dc96cc0e4c7679d07f9],
PUP.Optional.CrossRider, HKU\S-1-5-21-3022578457-2048947885-1841973601-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{DEB7B2C2-710C-4C12-8838-2C418D784621}, , [407173e2dab11026f73507a46b9931cf],
PUP.Optional.CrossRider, HKU\S-1-5-21-3022578457-2048947885-1841973601-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E06D82F6-F8BD-4DAE-A0FA-9C5628561C50}, , [209125309fec41f5ce5ef7b4b94b38c8],
PUP.Optional.CrossRider, HKU\S-1-5-21-3022578457-2048947885-1841973601-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{EC6197FF-DC60-4A56-ADED-C39F5FBCF1F5}, , [a20f66efe5a6a78ff339dccf60a46c94],
PUP.Optional.CrossRider, HKU\S-1-5-21-3022578457-2048947885-1841973601-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{EDF3D256-2162-4F3D-9EB0-6FE424674124}, , [634eafa618735ed89d8f228938cc02fe],
PUP.Optional.CrossRider, HKU\S-1-5-21-3022578457-2048947885-1841973601-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F535503E-D80A-425C-8C95-748541AC60A8}, , [29886de82566bd79ba73b4f709fbc63a],
PUP.Optional.CrossRider, HKU\S-1-5-21-3022578457-2048947885-1841973601-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F7FB2461-5F35-43F4-829D-8812D3A2CF69}, , [892891c4226975c175b8ddcec93b867a],
PUP.Optional.CrossRider, HKU\S-1-5-21-3022578457-2048947885-1841973601-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{FB909846-60DA-4EA0-973B-ABF62263C97D}, , [5b56a1b44d3e96a050dd505b7e860ff1],
Hodnoty registru: 47
PUP.Optional.Amonetize, HKU\S-1-5-21-3022578457-2048947885-1841973601-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|SwvUpdtr, C:\Users\Michal\AppData\Local\11432\Updater.exe /reg, , [dbd69abb7b105bdb68434d08748ccb35]
PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1942ff40-fbb0-4517-8e3b-5b973ef8cefe}|AppName, TheTorntv V10-bg.exe, , [03ae41147e0d02342726931846be1ce4]
PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1b04d344-43b3-40ed-9ca3-1d785d56fd5c}|AppName, HDQ-1.2cV07.01-bg.exe, , [20911243781370c6e9642f7c6c98a15f]
PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1b319539-1015-4062-8df2-e1101e72ae4d}|AppName, HDQ-1.2cV07.01-codedownloader.exe, , [d8d94e07206b0c2a8cc3edbe02023dc3]
PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5f7faf1e-8fdf-452d-a103-df1187703bee}|AppName, TheTorntv V10-codedownloader.exe, , [a809afa69fec90a691be5b50c63ed12f]
PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9494c65d-eb62-41f3-b2f9-c9462edfcec6}|AppName, TheTorntv V10-buttonutil.exe, , [6a47e76e5e2d6cca76d8a10aae56847c]
PUP.Optional.CrossRider, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1942ff40-fbb0-4517-8e3b-5b973ef8cefe}|AppName, TheTorntv V10-bg.exe, , [af0289cc0388c274e36a66452dd7c040]
PUP.Optional.CrossRider, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1b04d344-43b3-40ed-9ca3-1d785d56fd5c}|AppName, HDQ-1.2cV07.01-bg.exe, , [0fa2d77e177461d5e766892253b1fc04]
PUP.Optional.CrossRider, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1b319539-1015-4062-8df2-e1101e72ae4d}|AppName, HDQ-1.2cV07.01-codedownloader.exe, , [d3de5ef79fecd95d51fe17948183b050]
PUP.Optional.CrossRider, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5f7faf1e-8fdf-452d-a103-df1187703bee}|AppName, TheTorntv V10-codedownloader.exe, , [06ab72e3a2e9ee487ad5e3c8c53f9070]
PUP.Optional.CrossRider, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9494c65d-eb62-41f3-b2f9-c9462edfcec6}|AppName, TheTorntv V10-buttonutil.exe, , [4f6292c393f848ee7ed0eac126de43bd]
PUP.Optional.CrossRider, HKU\S-1-5-21-3022578457-2048947885-1841973601-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1785DD9F-BD3F-4C25-A690-B3565FB164C3}|AppName, e905d133-01c8-4b84-8396-03b28e0dc9f7-2.exe-buttonutil.exe, , [03aee174b2d988ae9d8f6b4040c4b34d]
PUP.Optional.CrossRider, HKU\S-1-5-21-3022578457-2048947885-1841973601-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1942ff40-fbb0-4517-8e3b-5b973ef8cefe}|AppName, TheTorntv V10-bg.exe, , [951cabaaa9e2a78fea41347731d37f81]
PUP.Optional.CrossRider, HKU\S-1-5-21-3022578457-2048947885-1841973601-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1b04d344-43b3-40ed-9ca3-1d785d56fd5c}|AppName, HDQ-1.2cV07.01-bg.exe, , [4c6540159dee7abcc56617942cd8ce32]
PUP.Optional.CrossRider, HKU\S-1-5-21-3022578457-2048947885-1841973601-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1b319539-1015-4062-8df2-e1101e72ae4d}|AppName, HDQ-1.2cV07.01-codedownloader.exe, , [466b4312f893bc7a47e64e5dd52f7090]
PUP.Optional.CrossRider, HKU\S-1-5-21-3022578457-2048947885-1841973601-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{27CDCDDC-CBD8-4BC7-8AAF-F3D3E6547DC1}|AppName, e905d133-01c8-4b84-8396-03b28e0dc9f7-2.exe-buttonutil.exe, , [dfd285d06c1f9e9888a465466c983ac6]
PUP.Optional.CrossRider, HKU\S-1-5-21-3022578457-2048947885-1841973601-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{28F5E177-65CA-4886-84A8-64E5ED972D35}|AppName, e905d133-01c8-4b84-8396-03b28e0dc9f7-2.exe-codedownloader.exe, , [e2cf3c19e6a5d06652dbf6b5d13343bd]
PUP.Optional.CrossRider, HKU\S-1-5-21-3022578457-2048947885-1841973601-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{366AEC2B-F5A4-40FB-9E1D-17B4B710FAF6}|AppName, e905d133-01c8-4b84-8396-03b28e0dc9f7-2.exe-codedownloader.exe, , [d7da2233bad141f5b974d0db9a6a7f81]
PUP.Optional.CrossRider, HKU\S-1-5-21-3022578457-2048947885-1841973601-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{3C9CDAC2-38E3-4448-B84A-4EB993149350}|AppName, e905d133-01c8-4b84-8396-03b28e0dc9f7-2.exe-codedownloader.exe, , [fcb5f560157654e270bd901ba65ed52b]
PUP.Optional.CrossRider, HKU\S-1-5-21-3022578457-2048947885-1841973601-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{41AB84E2-8D54-4203-ADF3-81555B54101B}|AppName, e905d133-01c8-4b84-8396-03b28e0dc9f7-2.exe-codedownloader.exe, , [bbf6afa62a6179bd8e9f3576b74d17e9]
PUP.Optional.CrossRider, HKU\S-1-5-21-3022578457-2048947885-1841973601-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{43146B6E-535D-4F33-ACD3-23D4F69D1DDC}|AppName, e905d133-01c8-4b84-8396-03b28e0dc9f7-2.exe-buttonutil.exe, , [5958a3b28a011d1914188b20788cd030]
PUP.Optional.CrossRider, HKU\S-1-5-21-3022578457-2048947885-1841973601-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{433C3D5A-90BA-4BA9-A995-44DC27CEC0E7}|AppName, e905d133-01c8-4b84-8396-03b28e0dc9f7-2.exe-buttonutil.exe, , [3a77381dadde54e20428ccdffe06669a]
PUP.Optional.CrossRider, HKU\S-1-5-21-3022578457-2048947885-1841973601-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{45005907-E967-43CF-BB87-F19B3C27F6CC}|AppName, e905d133-01c8-4b84-8396-03b28e0dc9f7-2.exe-buttonutil.exe, , [7938a6af0b80f3434ce058536e96fd03]
PUP.Optional.CrossRider, HKU\S-1-5-21-3022578457-2048947885-1841973601-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5f7faf1e-8fdf-452d-a103-df1187703bee}|AppName, TheTorntv V10-codedownloader.exe, , [832e064fd5b6f83e7bb26d3efa0a5ca4]
PUP.Optional.CrossRider, HKU\S-1-5-21-3022578457-2048947885-1841973601-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{612310EB-89DC-4BAF-9CB5-424EAFD189F3}|AppName, f4b32426-ba2e-4e2c-b3ba-e04380e13889-2.exe-codedownloader.exe, , [e7ca85d0ed9e5bdb17162b80659faa56]
PUP.Optional.CrossRider, HKU\S-1-5-21-3022578457-2048947885-1841973601-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7D0FEF17-C3D3-4450-A8D5-C2FF4887D33E}|AppName, e905d133-01c8-4b84-8396-03b28e0dc9f7-2.exe-buttonutil.exe, , [733ef4614249cc6abe6e852612f2fb05]
PUP.Optional.CrossRider, HKU\S-1-5-21-3022578457-2048947885-1841973601-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{7E5BA3DB-4913-455E-ADB7-EFB817CD7D7D}|AppName, f4b32426-ba2e-4e2c-b3ba-e04380e13889-2.exe-codedownloader.exe, , [ecc584d1c0cb5dd9270633781ce820e0]
PUP.Optional.CrossRider, HKU\S-1-5-21-3022578457-2048947885-1841973601-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{84BD3713-9F89-490D-B6D7-FC5B6E7E3CF8}|AppName, f4b32426-ba2e-4e2c-b3ba-e04380e13889-2.exe-buttonutil.exe, , [268b80d5612a5ed875b713983ec643bd]
PUP.Optional.CrossRider, HKU\S-1-5-21-3022578457-2048947885-1841973601-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{84E7341C-4632-49DF-8260-689859938019}|AppName, e905d133-01c8-4b84-8396-03b28e0dc9f7-2.exe-codedownloader.exe, , [a908a2b364273ff72ffedccf8a7ac33d]
PUP.Optional.CrossRider, HKU\S-1-5-21-3022578457-2048947885-1841973601-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8E52FB69-63C7-499F-B293-906958F238C1}|AppName, e905d133-01c8-4b84-8396-03b28e0dc9f7-2.exe-codedownloader.exe, , [c2efa4b1d4b75adc75b8228945bf14ec]
PUP.Optional.CrossRider, HKU\S-1-5-21-3022578457-2048947885-1841973601-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{91361D6D-445D-4780-81AA-9AA8E04CF12A}|AppName, e905d133-01c8-4b84-8396-03b28e0dc9f7-2.exe-codedownloader.exe, , [cde433224e3daa8c5cd1fcaf8d7715eb]
PUP.Optional.CrossRider, HKU\S-1-5-21-3022578457-2048947885-1841973601-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9494c65d-eb62-41f3-b2f9-c9462edfcec6}|AppName, TheTorntv V10-buttonutil.exe, , [615064f10f7cd5611319d0db0df7659b]
PUP.Optional.CrossRider, HKU\S-1-5-21-3022578457-2048947885-1841973601-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{AF5F1546-A524-4F22-B76E-52CEB57E3A36}|AppName, e905d133-01c8-4b84-8396-03b28e0dc9f7-2.exe-codedownloader.exe, , [61501b3a6526082eaa83317a4aba916f]
PUP.Optional.CrossRider, HKU\S-1-5-21-3022578457-2048947885-1841973601-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BFA29807-1D13-4343-B43F-ADD6B114A12A}|AppName, e905d133-01c8-4b84-8396-03b28e0dc9f7-2.exe-codedownloader.exe, , [961b6aeb17748ea844e98922669ee917]
PUP.Optional.CrossRider, HKU\S-1-5-21-3022578457-2048947885-1841973601-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C2103DA0-F7F5-4B27-B9F5-BE6B482628CC}|AppName, e905d133-01c8-4b84-8396-03b28e0dc9f7-2.exe-buttonutil.exe, , [6150aca994f7dd59db510e9d28dc9868]
PUP.Optional.CrossRider, HKU\S-1-5-21-3022578457-2048947885-1841973601-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C3BCACEA-5C8F-4C5C-A75C-7F6CE56F5BB8}|AppName, e905d133-01c8-4b84-8396-03b28e0dc9f7-2.exe-buttonutil.exe, , [39785005d3b8fa3c56d60c9f966ed22e]
PUP.Optional.CrossRider, HKU\S-1-5-21-3022578457-2048947885-1841973601-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C69F61D5-9373-452B-B391-745E5EC537DD}|AppName, e905d133-01c8-4b84-8396-03b28e0dc9f7-2.exe-buttonutil.exe, , [139e7cd90e7deb4bab81901bfa0a57a9]
PUP.Optional.CrossRider, HKU\S-1-5-21-3022578457-2048947885-1841973601-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C95F45AF-9270-4F80-BDE4-8428458E5F37}|AppName, e905d133-01c8-4b84-8396-03b28e0dc9f7-2.exe-buttonutil.exe, , [9b16c2932b60e0566dbfd9d2867ee020]
PUP.Optional.CrossRider, HKU\S-1-5-21-3022578457-2048947885-1841973601-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D184E7FD-DB9F-4C8C-8DD5-E797F15968C5}|AppName, e905d133-01c8-4b84-8396-03b28e0dc9f7-2.exe-codedownloader.exe, , [6150b1a499f2191d72bb406ba163ee12]
PUP.Optional.CrossRider, HKU\S-1-5-21-3022578457-2048947885-1841973601-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{DA58D502-5983-4D14-82A3-4C9DB43511A3}|AppName, e905d133-01c8-4b84-8396-03b28e0dc9f7-2.exe-buttonutil.exe, , [01b01d38cbc06dc96cc0e4c7679d07f9]
PUP.Optional.CrossRider, HKU\S-1-5-21-3022578457-2048947885-1841973601-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{DEB7B2C2-710C-4C12-8838-2C418D784621}|AppName, e905d133-01c8-4b84-8396-03b28e0dc9f7-2.exe-buttonutil.exe, , [407173e2dab11026f73507a46b9931cf]
PUP.Optional.CrossRider, HKU\S-1-5-21-3022578457-2048947885-1841973601-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E06D82F6-F8BD-4DAE-A0FA-9C5628561C50}|AppName, e905d133-01c8-4b84-8396-03b28e0dc9f7-2.exe-buttonutil.exe, , [209125309fec41f5ce5ef7b4b94b38c8]
PUP.Optional.CrossRider, HKU\S-1-5-21-3022578457-2048947885-1841973601-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{EC6197FF-DC60-4A56-ADED-C39F5FBCF1F5}|AppName, e905d133-01c8-4b84-8396-03b28e0dc9f7-2.exe-buttonutil.exe, , [a20f66efe5a6a78ff339dccf60a46c94]
PUP.Optional.CrossRider, HKU\S-1-5-21-3022578457-2048947885-1841973601-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{EDF3D256-2162-4F3D-9EB0-6FE424674124}|AppName, e905d133-01c8-4b84-8396-03b28e0dc9f7-2.exe-buttonutil.exe, , [634eafa618735ed89d8f228938cc02fe]
PUP.Optional.CrossRider, HKU\S-1-5-21-3022578457-2048947885-1841973601-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F535503E-D80A-425C-8C95-748541AC60A8}|AppName, f4b32426-ba2e-4e2c-b3ba-e04380e13889-2.exe-codedownloader.exe, , [29886de82566bd79ba73b4f709fbc63a]
PUP.Optional.CrossRider, HKU\S-1-5-21-3022578457-2048947885-1841973601-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F7FB2461-5F35-43F4-829D-8812D3A2CF69}|AppName, e905d133-01c8-4b84-8396-03b28e0dc9f7-2.exe-codedownloader.exe, , [892891c4226975c175b8ddcec93b867a]
PUP.Optional.CrossRider, HKU\S-1-5-21-3022578457-2048947885-1841973601-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{FB909846-60DA-4EA0-973B-ABF62263C97D}|AppName, e905d133-01c8-4b84-8396-03b28e0dc9f7-2.exe-codedownloader.exe, , [5b56a1b44d3e96a050dd505b7e860ff1]
Data registru: 0
(Nenalezeny žádné škodlivé položky)
Složky: 4
PUP.Optional.Amonetize, C:\Users\Michal\AppData\Local\11432, , [a20f73e2e4a7f24468ebb494030026da],
PUP.Optional.OffersWizard, C:\Program Files (x86)\Common Files\Config, , [1d94f1640c7f37ffdfaa8f36f60e42be],
PUP.Optional.SmileysWeLove, C:\Users\Michal\AppData\Roaming\Mozilla\Firefox\Profiles\br8l251k.default\jetpack\jid1-vW9nopuIAJiRHw@jetpack, , [624f3d180b805fd7946f9da055ae768a],
PUP.Optional.SmileysWeLove, C:\Users\Michal\AppData\Roaming\Mozilla\Firefox\Profiles\br8l251k.default\jetpack\jid1-vW9nopuIAJiRHw@jetpack\simple-storage, , [624f3d180b805fd7946f9da055ae768a],
Soubory: 15
PUP.Optional.Amonetize, C:\Users\Michal\AppData\Local\11432\Updater.exe, , [dbd69abb7b105bdb68434d08748ccb35],
PUP.Optional.Nova, C:\Program Files (x86)\0004ee02-697a-4ce7-8134-29c3f248dd8f\aac2faf2-4396-4848-9162-c00345924bb7.dll, , [5d54aea7b3d863d3af37b01238c97b85],
PUP.Optional.InstallCore, C:\Program Files (x86)\0004ee02-697a-4ce7-8134-29c3f248dd8f\f6e59d36-d704-4fef-b86e-eccef17d8397.dll, , [426f084d8902f046ae407254f510a858],
PUP.Optional.InstallCore, C:\Program Files (x86)\AGEIA Technologies\0004ee02-697a-4ce7-8134-29c3f248dd8f.dll, , [3d743d184a41290dd21c6e583dc88878],
PUP.Optional.Nova, C:\Program Files (x86)\AGEIA Technologies\c38c977e-cbc1-4847-ac98-90c855e46709.dll, , [dfd289ccafdc1e18a0466c5626db7f81],
PUP.Optional.Amonetize, C:\Users\Michal\AppData\Local\11432\status.cfg, , [a20f73e2e4a7f24468ebb494030026da],
PUP.Optional.Amonetize, C:\Users\Michal\AppData\Local\11432\Updater.xml, , [a20f73e2e4a7f24468ebb494030026da],
Malware.Trace, C:\Windows\Inf\ntvdm.inf, , [edc4ada8810a73c35a4d83efee16a65a],
PUP.Optional.BitCoinMiner, C:\Users\Michal\AppData\Roaming\Microsoft\Networking\inet32upd.exe, , [6e436fe64546e6503772504fb84c4ab6],
PUP.Optional.BitCoinMiner, C:\Users\Michal\AppData\Roaming\Microsoft\Networking\winnet32b.exe, , [634e67eee2a959dd6743712ecc38b14f],
PUP.Optional.BitCoinMiner, C:\Users\Michal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\conhost32.exe, , [3b76d184aae1f93ddbd14d52030155ab],
PUP.Optional.OffersWizard, C:\Program Files (x86)\Common Files\Config\ver.xml, , [1d94f1640c7f37ffdfaa8f36f60e42be],
PUP.Optional.OffersWizard, C:\Program Files (x86)\Common Files\Config\data.xml, , [1d94f1640c7f37ffdfaa8f36f60e42be],
PUP.Optional.OffersWizard, C:\Program Files (x86)\Common Files\Config\uninstinethnfd.exe, , [1d94f1640c7f37ffdfaa8f36f60e42be],
PUP.Optional.SmileysWeLove, C:\Users\Michal\AppData\Roaming\Mozilla\Firefox\Profiles\br8l251k.default\jetpack\jid1-vW9nopuIAJiRHw@jetpack\simple-storage\store.json, , [624f3d180b805fd7946f9da055ae768a],
Fyzické sektory: 0
(Nenalezeny žádné škodlivé položky)
(end)
Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
Prosím o radu winnet32b
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
-
Rudy
- Site Admin
- Příspěvky: 119674
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Prosím o radu winnet32b
Všechny nálezy smažte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Prosím o radu winnet32b
Vypadá to dobře moc Vám děkuji Rudy.
-
Rudy
- Site Admin
- Příspěvky: 119674
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Prosím o radu winnet32b
Rádo se stalo! 
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Přispějete na provoz fóra?