Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Zavirované pc

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Zamčeno
Zpráva
Autor
anittra6
2. Stupeň Varování
Příspěvky: 65
Registrován: 25 črc 2011 19:35

Zavirované pc

#1 Příspěvek od anittra6 »

Dobrý den, prosím o pomoc s vyčištěním notebooku. Díky

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:07-11-2015
Ran by martina (administrator) on MARTINA-PC (16-11-2015 06:34:24)
Running from C:\Users\martina\Desktop
Loaded Profiles: martina & UpdatusUser (Available Profiles: martina & UpdatusUser & anittra)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(ESET) C:\Program Files\ESET\ESET Smart Security\ekrn.exe
(Enigma Software Group USA, LLC.) C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
() C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(forum.viry.cz) C:\Users\martina\Desktop\FRSTLauncher.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKU\S-1-5-21-3871993484-2785268054-3228482215-1001\...\Run: [] => [X]
HKU\S-1-5-21-3871993484-2785268054-3228482215-1001\...\MountPoints2: {01bc495a-48fb-11e5-b51e-001dd9f4d8d9} - F:\Lenovo_Suite.exe
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => No File

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

AutoConfigURL: [S-1-5-21-3871993484-2785268054-3228482215-1001] => hxxp://get-access.me/wpad.dat?0d18835c4cf9163bea23f17e1543d10d830915
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{E8BFF513-44B1-48A5-997F-F8ECFAA02E7E}: [DhcpNameServer] 10.0.0.138

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.oursurfing.com/?type=hp&ts=14450927 ... 9t7a263w9x
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.oursurfing.com/?type=hp&ts=14450927 ... 9t7a263w9x
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.oursurfing.com/web/?type=ds&ts=1445 ... earchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.oursurfing.com/web/?type=ds&ts=1445 ... earchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.oursurfing.com/?type=hp&ts=14450927 ... 9t7a263w9x
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.oursurfing.com/?type=hp&ts=14450927 ... 9t7a263w9x
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.oursurfing.com/web/?type=ds&ts=1445 ... earchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.oursurfing.com/web/?type=ds&ts=1445 ... earchTerms}
HKU\S-1-5-21-3871993484-2785268054-3228482215-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.oursurfing.com/?type=hp&ts=14450927 ... 9t7a263w9x
HKU\S-1-5-21-3871993484-2785268054-3228482215-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.oursurfing.com/?type=hp&ts=14450927 ... 9t7a263w9x
HKU\S-1-5-21-3871993484-2785268054-3228482215-1001\Software\Microsoft\Internet Explorer\Main,First Home Page = hxxp://g.msn.com/1me10IE10ENGB/WOL_WCP
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.oursurfing.com/web/?type=ds&ts=1445 ... earchTerms}
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.oursurfing.com/web/?type=ds&ts=1445 ... earchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.oursurfing.com/web/?type=ds&ts=1445 ... earchTerms}
SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.oursurfing.com/web/?type=ds&ts=1445 ... earchTerms}
SearchScopes: HKU\S-1-5-21-3871993484-2785268054-3228482215-1001 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.oursurfing.com/web/?type=ds&ts=1445 ... earchTerms}
SearchScopes: HKU\S-1-5-21-3871993484-2785268054-3228482215-1001 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.oursurfing.com/web/?type=ds&ts=1445 ... earchTerms}
SearchScopes: HKU\S-1-5-21-3871993484-2785268054-3228482215-1001 -> {53ECB224-EAC8-4284-9FB0-BDFBDCD89520} URL = hxxp://tv.seznam.cz/hledej?w={searchTerms}&sourceid=QuickSearch_16194
BHO: No Name -> {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} -> No File
Toolbar: HKLM - No Name - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.mystartsearch.com/?type=sc&ts=14451 ... 9T7A263W9X

FireFox:
========
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll [2011-11-30] (CANON INC.)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @nokia.com/EnablerPlugin -> C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll [2014-11-19] ( )
FF Plugin-x32: @staging.google.com/globalUpdate Update;version=10 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npglobalupdateUpdate4.dll [No File]
FF Plugin-x32: @staging.google.com/globalUpdate Update;version=4 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npglobalupdateUpdate4.dll [No File]
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-14] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-14] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2012-09-23] (Adobe Systems Inc.)

Chrome:
=======
CHR HomePage: Default -> hxxp://www.search.ask.com/?gct=hp
CHR StartupUrls: Default -> "hxxp://www.mystartsearch.com/?type=hp&ts=14451 ... 9T7A263W9X"
CHR DefaultSearchURL: Default -> hxxp://www.mystartsearch.com/web/?type=ds&ts=1 ... earchTerms}
CHR DefaultSearchKeyword: Default -> mystartsearch
CHR Profile: C:\Users\martina\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Dokumenty Google) - C:\Users\martina\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-07-21]
CHR Extension: (Disk Google) - C:\Users\martina\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-07-21]
CHR Extension: (YouTube) - C:\Users\martina\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-25]
CHR Extension: (Vyhledávání Google) - C:\Users\martina\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-07-21]
CHR Extension: (MyBrowser 1.0.2V17.10) - C:\Users\martina\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh [2015-10-17]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\martina\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-08-01]
CHR Extension: (CinemaPlus-3.2cV17.10) - C:\Users\martina\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp [2015-10-17]
CHR Extension: (Gmail) - C:\Users\martina\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-07-21]
CHR HKLM\...\Chrome\Extension: [aaaaaiabcopkplhgaedhbloeejhhankf] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [aaaaaiabcopkplhgaedhbloeejhhankf] - hxxps://clients2.google.com/service/update2/crx
StartMenuInternet: Google Chrome - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe hxxp://www.mystartsearch.com/?type=sc&ts=14451 ... 9T7A263W9X

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 ekrn; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2505472 2015-10-09] (ESET)
R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [84616 2013-06-28] ()
R2 SpyHunter 4 Service; C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe [1026944 2015-10-18] (Enigma Software Group USA, LLC.)
S4 SWUpdateService; C:\ProgramData\Samsung\SW Update Service\SWMAgent.exe [3020120 2015-04-21] (Samsung Electronics CO., LTD.)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
S2 ferupoqy; C:\Program Files (x86)\373FF220-1445099946-11B2-8000-98BBF6FD5061\knsr164E.tmpfs [X]
S2 myqityze; C:\Program Files (x86)\373FF220-1445099946-11B2-8000-98BBF6FD5061\jnsx2ED4.tmp [X]

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [264040 2015-09-23] (ESET)
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R0 edevmon; C:\Windows\System32\DRIVERS\edevmon.sys [241880 2015-03-10] (ESET)
R0 edevmon; C:\Windows\SysWOW64\DRIVERS\edevmon.sys [241368 2014-10-10] (ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [186784 2015-09-23] (ESET)
R2 ekbdflt; C:\Windows\System32\DRIVERS\ekbdflt.sys [142976 2015-10-07] (ESET)
R1 ElRawDisk; C:\Windows\system32\drivers\ElRawDsk.sys [30752 2012-07-26] (EldoS Corporation)
R1 epfw; C:\Windows\System32\DRIVERS\epfw.sys [206312 2015-09-23] (ESET)
R1 EpfwLWF; C:\Windows\System32\DRIVERS\EpfwLWF.sys [52872 2015-09-23] (ESET)
R0 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [69840 2015-09-23] (ESET)
S3 ESETCleanersDriver; C:\Windows\system32\Drivers\ESETCleanersDriver.sys [170280 2015-10-19] (ESET)
S3 esgiguard; C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [15920 2015-10-18] (Enigma Software Group USA, LLC.)
S3 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys [22704 2015-10-18] ()
U3 TrueSight; C:\Windows\System32\drivers\TrueSight.sys [35064 2015-10-18] ()
U5 VWiFiFlt; C:\Windows\System32\Drivers\VWiFiFlt.sys [59904 2009-07-14] (Microsoft Corporation)
R3 yukonw7; C:\Windows\System32\DRIVERS\yk62x64.sys [395264 2009-09-28] ()
S3 NTIOLib_1_0_C; \??\E:\NTIOLib_X64.sys [X]
S3 pccsmcfd; system32\DRIVERS\pccsmcfdx64.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-11-16 06:34 - 2015-11-16 06:34 - 00014339 _____ C:\Users\martina\Desktop\FRST.txt
2015-11-16 06:34 - 2015-11-16 06:34 - 00000000 ____D C:\FRST
2015-11-16 06:32 - 2015-11-16 06:25 - 00112640 _____ (forum.viry.cz) C:\Users\martina\Desktop\FRSTLauncher.exe
2015-11-16 06:32 - 2015-11-16 06:19 - 02198528 _____ (Farbar) C:\Users\martina\Desktop\FRST64.exe
2015-10-19 02:00 - 2015-10-19 02:00 - 00002027 _____ C:\Users\Public\Desktop\ESET Ochrana bankovnictví a online plateb.lnk
2015-10-19 02:00 - 2015-10-19 02:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET
2015-10-19 02:00 - 2015-10-19 02:00 - 00000000 ____D C:\ProgramData\ESET
2015-10-18 19:14 - 2015-10-18 19:14 - 00000000 ____D C:\Users\martina\AppData\Local\CrashDumps
2015-10-18 14:23 - 2015-10-18 14:23 - 00115304 _____ C:\Users\martina\AppData\Local\GDIPFONTCACHEV1.DAT
2015-10-18 14:23 - 2015-10-18 14:23 - 00000000 _____ C:\autoexec.bat
2015-10-18 14:22 - 2015-10-18 14:22 - 00001087 _____ C:\Users\martina\Desktop\SpyHunter.lnk
2015-10-18 14:22 - 2015-10-18 14:22 - 00000000 ____D C:\Users\martina\AppData\Roaming\Enigma Software Group
2015-10-18 14:22 - 2015-10-18 14:22 - 00000000 ____D C:\sh4ldr
2015-10-18 14:21 - 2015-10-18 14:21 - 00022704 _____ C:\Windows\system32\Drivers\EsgScanner.sys
2015-10-18 14:21 - 2015-10-18 14:21 - 00000000 ____D C:\Program Files\Enigma Software Group
2015-10-18 09:45 - 2015-10-18 14:15 - 00000000 ____D C:\ProgramData\RogueKiller
2015-10-18 09:45 - 2015-10-18 09:45 - 00035064 _____ C:\Windows\system32\Drivers\TrueSight.sys
2015-10-17 19:35 - 2015-10-18 14:16 - 00026654 _____ C:\Windows\PFRO.log
2015-10-17 19:35 - 2015-10-17 19:35 - 00435792 _____ C:\Windows\system32\FNTCACHE.DAT
2015-10-17 19:03 - 2015-10-17 19:03 - 00010460 _____ C:\Windows\DPINST.LOG
2015-10-17 18:14 - 2015-10-19 06:20 - 00000000 ____D C:\Program Files (x86)\MyBrowser 1.0.2V17.10
2015-10-17 18:14 - 2015-10-19 06:20 - 00000000 ____D C:\Program Files (x86)\187358c5-d8cc-4b44-8fa5-b33eda1ef5f1
2015-10-17 18:12 - 2015-10-17 18:12 - 00002398 _____ C:\Users\Public\Desktop\Crossbrowse.lnk
2015-10-17 18:12 - 2015-10-17 18:12 - 00000000 ____D C:\Users\martina\AppData\Local\Crossbrowse
2015-10-17 18:12 - 2015-10-17 18:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Crossbrowse
2015-10-17 18:12 - 2015-10-17 18:12 - 00000000 ____D C:\Program Files (x86)\Crossbrowse
2015-10-17 18:11 - 2015-10-19 04:02 - 00000000 ____D C:\ProgramData\yWdsManProy
2015-10-17 18:05 - 2015-10-17 18:05 - 00001144 _____ C:\Users\martina\Desktop\Live PC Help.lnk
2015-10-17 17:53 - 2015-10-17 17:53 - 00000000 ____D C:\Users\martina\AppData\Local\Systweak
2015-10-17 17:52 - 2015-10-19 06:20 - 00000000 ____D C:\Program Files (x86)\CinemaPlus-3.2cV17.10
2015-10-17 17:52 - 2015-10-17 17:53 - 00000000 ____D C:\Users\martina\AppData\Roaming\systweak
2015-10-17 17:52 - 2015-10-17 17:52 - 00000985 _____ C:\Users\Public\Desktop\RegClean Pro.lnk
2015-10-17 17:52 - 2015-10-17 17:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RegClean Pro
2015-10-17 17:52 - 2015-10-17 17:52 - 00000000 ____D C:\Program Files (x86)\globalUpdate
2015-10-17 17:50 - 2015-10-19 06:20 - 00000000 ____D C:\Program Files (x86)\SFK
2015-10-17 17:50 - 2015-10-19 06:19 - 00000000 ____D C:\ProgramData\7WdsManPro7
2015-10-17 17:50 - 2015-10-17 18:11 - 00000102 _____ C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat
2015-10-17 17:50 - 2015-10-17 17:50 - 00002344 _____ C:\Users\Public\Desktop\MyBrowser.lnk
2015-10-17 17:50 - 2015-10-17 17:50 - 00000000 ____D C:\Users\martina\AppData\Roaming\mystartsearch
2015-10-17 17:50 - 2015-10-17 17:50 - 00000000 ____D C:\Users\martina\AppData\Local\MyBrowser
2015-10-17 17:50 - 2015-10-17 17:50 - 00000000 ____D C:\Users\anittra.martina-PC\AppData\Local\MyBrowser
2015-10-17 17:50 - 2015-10-17 17:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyBrowser
2015-10-17 17:50 - 2015-10-17 17:50 - 00000000 ____D C:\Program Files (x86)\MyBrowser
2015-10-17 17:40 - 2015-11-16 06:27 - 00000000 ____D C:\Users\martina\AppData\Local\373FF220-1445107201-11B2-8000-98BBF6FD5061
2015-10-17 17:39 - 2015-10-19 02:16 - 00000000 ____D C:\Program Files\Concom
2015-10-17 17:39 - 2015-10-17 17:39 - 00000000 ____D C:\Users\martina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VOPackage
2015-10-17 17:39 - 2009-06-10 22:00 - 00000824 _____ C:\Windows\system32\Drivers\etc\hp.bak
2015-10-17 15:39 - 2015-10-17 15:39 - 00000000 ____D C:\Users\martina\AppData\Roaming\SimpleFiles
2015-10-17 15:38 - 2015-10-17 15:38 - 00000000 ____D C:\ProgramData\LuckyBrowse
2015-10-17 15:30 - 2015-10-17 15:30 - 00000000 ____D C:\Users\anittra.martina-PC\AppData\Local\Crossbrowse
2015-10-17 15:28 - 2015-10-17 15:40 - 00000000 ____D C:\Users\martina\AppData\Roaming\Seznam.cz
2015-10-17 15:26 - 2015-10-17 18:52 - 00000004 _____ C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7
2015-10-17 15:26 - 2015-10-17 15:39 - 00000000 ____D C:\Users\martina\AppData\Roaming\Opera Software
2015-10-17 15:26 - 2015-10-17 15:39 - 00000000 ____D C:\Users\martina\AppData\Local\Opera Software
2015-10-17 15:26 - 2015-10-17 15:26 - 00000000 ____D C:\Users\martina\AppData\Local\globalUpdate
2015-10-17 15:20 - 2015-10-17 15:20 - 01031069 _____ C:\Users\martina\Downloads\bluetoothv20driverzip.rar

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-11-16 06:21 - 2009-07-14 05:45 - 00021888 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-11-16 06:21 - 2009-07-14 05:45 - 00021888 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-11-16 06:13 - 2015-10-10 07:11 - 00000616 _____ C:\Windows\setupact.log
2015-11-16 06:13 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-11-16 00:17 - 2015-08-18 18:26 - 02014717 _____ C:\Windows\WindowsUpdate.log
2015-10-19 06:20 - 2013-03-24 02:41 - 00000000 ____D C:\Program Files (x86)\Adobe
2015-10-19 02:32 - 2015-02-05 20:07 - 00170280 _____ (ESET) C:\Windows\system32\Drivers\ESETCleanersDriver.sys
2015-10-18 14:22 - 2013-03-23 15:53 - 00000000 ____D C:\Users\martina
2015-10-18 09:49 - 2011-04-12 09:34 - 00677826 _____ C:\Windows\system32\perfh005.dat
2015-10-18 09:49 - 2011-04-12 09:34 - 00146712 _____ C:\Windows\system32\perfc005.dat
2015-10-18 09:49 - 2009-07-14 06:13 - 01611912 _____ C:\Windows\system32\PerfStringBackup.INI
2015-10-18 09:41 - 2013-03-23 15:54 - 00001397 _____ C:\Users\martina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-10-17 19:12 - 2013-03-23 20:09 - 00000000 ____D C:\Windows\System32\Tasks\Games
2015-10-17 19:08 - 2013-05-11 21:55 - 00000000 ____D C:\Windows\pss
2015-10-17 18:41 - 2015-02-08 08:28 - 00007605 _____ C:\Users\martina\AppData\Local\resmon.resmoncfg
2015-10-17 17:50 - 2013-12-13 22:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-10-17 17:38 - 2015-02-08 10:18 - 00000000 ____D C:\Program Files (x86)\Canon
2015-10-17 16:03 - 2009-07-14 04:20 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2015-10-17 10:33 - 2014-12-13 13:40 - 00000000 ___SD C:\Windows\system32\CompatTel
2015-10-17 10:33 - 2014-12-13 13:40 - 00000000 ____D C:\Windows\system32\appraiser
2015-10-17 10:29 - 2013-08-22 23:31 - 00000000 ____D C:\Windows\system32\MRT
2015-10-17 10:15 - 2013-03-24 03:47 - 143481208 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

==================== Files in the root of some directories =======

2014-02-21 15:18 - 2014-02-21 15:18 - 0000000 _____ () C:\Users\martina\AppData\Roaming\.NANotifyHere
2015-04-19 13:20 - 2015-04-19 13:20 - 0005872 _____ () C:\Users\martina\AppData\Roaming\3fgaZMk4JFw
2015-04-19 13:20 - 2015-04-19 13:20 - 0005872 _____ () C:\Users\martina\AppData\Roaming\ogw03zzMYKmdoUxyBMYOy66ke
2015-04-19 13:20 - 2015-04-19 13:20 - 0005872 _____ () C:\Users\martina\AppData\Roaming\pQyyQheVu67zm
2015-08-01 13:35 - 2015-08-01 13:35 - 0005632 _____ () C:\Users\martina\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-10-17 17:39 - 2015-10-17 17:39 - 0000187 _____ () C:\Users\martina\AppData\Local\dong-tom.exe.config
2013-04-05 23:57 - 2013-04-05 23:57 - 0000095 _____ () C:\Users\martina\AppData\Local\fusioncache.dat
2015-02-08 08:28 - 2015-10-17 18:41 - 0007605 _____ () C:\Users\martina\AppData\Local\resmon.resmoncfg
2015-10-17 17:50 - 2015-10-17 18:11 - 0000102 _____ () C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat

Files to move or delete:
====================
C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat


==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-10-12 21:15

==================== End of FRST.txt ============================



===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================

Drive c: () (Fixed) (Total:88 GB) (Free:5.56 GB) NTFS ==>[drive with boot components (obtained from BCD)]
Drive d: () (Fixed) (Total:88.31 GB) (Free:2.76 GB) NTFS
Drive f: () (Removable) (Total:3.73 GB) (Free:3.17 GB) FAT32

Available physical RAM: 2905.34 MB
Total physical RAM: 4094.43 MB
Percentage of memory in use: 29%

==================== MBR and Partition Table ==================

Disk: 0 (Size: 186.3 GB) (Disk ID: 595FFCF9)
Partition 1: (Active) - (Size=88 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=88.3 GB) - (Type=07 NTFS)
Disk: 1 (Size: 3.7 GB) (Disk ID: 20796B73)

==================== Scheduled Tasks (whitelisted) ==================

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

==================== Alternate Data Streams (whitelisted) ==================


==================== Security Center ==================

AV: ESET Smart Security 9.0.318.22 (Enabled - Up to date) {19259FAE-8396-A113-46DB-15B0E7DFA289}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: ESET Smart Security 9.0.318.22 (Enabled - Up to date) {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834}
FW: ESET Personální firewall (Enabled) {211E1E8B-C9F9-A04B-6D84-BC85190CE5F2}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Users\martina\Desktop" je 31918 MB.


***** Startup Programs *****


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000


==================== End Of Log ==============================
Přílohy
Addition.rar
(6.2 KiB) Staženo 100 x
Nahoru
Márty84
VIP
VIP
Příspěvky: 21679
Registrován: 05 pro 2009 20:08
Bydliště: Ostrava

Re: Zavirované pc

#2 Příspěvek od Márty84 »

Zdravim :)
anittra6 píše:***** Velikost "Plochy" *****

Velikost slozky "C:\Users\martina\Desktop" je 31918 MB.
:arrow: Velikost plochy by nemela presahovat 200 - 300 MB! Brzdi to chod pc. Cili ji trosku uklidte a na plochu dejte jen zastupce. Jen pozor na obcasnou chybu, ze uzivatele maji na plose slozku, v ni dalsi a v ni dalsi a do te to schovaji. To je sice hezke, ale plochu to nezmensi, jen je to v jinem supliku :)


:arrow: Stahnete AdwCleaner https://toolslib.net/downloads/finish/1/ a ulozte ho na plochu.
Ukoncete vsechny programy, jinak to AdwCleaner udela za vas.
Kliknete na nej pravym mysidlem a levym na Spustit jako spravce.
Kliknete na Scan a pockejte, az kontrola dobehne.
Pak kliknete na Cleaning
Program zacne pracovat (muze dojit k restartu pc) a vyplivne log (pripadne bude zde C:\AdwCleaner\AdwCleaner[C?].txt ). Ten mi sem zkopirujte.
Pokud máte dotaz, který není určen pro veřejnost, můžete mi napsat na mail marty84zavináčforum.viry.cz

Možnost podpořit naše fórum https://platba.viry.cz/payment/

Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
Nahoru
anittra6
2. Stupeň Varování
Příspěvky: 65
Registrován: 25 črc 2011 19:35

Re: Zavirované pc

#3 Příspěvek od anittra6 »

Jasně, máte pravdu.

# AdwCleaner v5.021 - Logfile created 16/11/2015 at 17:44:48
# Updated 14/11/2015 by Xplode
# Database : 2015-11-13.1 [Local]
# Operating system : Windows 7 Home Premium Service Pack 1 (x64)
# Username : martina - MARTINA-PC
# Running from : C:\Users\martina\Desktop\adwcleaner_5.021.exe
# Option : Cleaning
# Support : http://toolslib.net/forum

***** [ Services ] *****

[-] Service Deleted : ferupoqy
[-] Service Deleted : myqityze

***** [ Folders ] *****

[-] Folder Deleted : C:\Program Files\Concom
[-] Folder Deleted : C:\Program Files (x86)\globalUpdate
[-] Folder Deleted : C:\Program Files (x86)\Crossbrowse
[-] Folder Deleted : C:\Program Files (x86)\SFK
[-] Folder Deleted : C:\Program Files (x86)\CinemaPlus-3.2cV17.10
[!] Folder Not Deleted : C:\Program Files (x86)\Crossbrowse
[-] Folder Deleted : C:\Program Files (x86)\MyBrowser
[-] Folder Deleted : C:\Program Files (x86)\MyBrowser 1.0.2V17.10
[-] Folder Deleted : C:\ProgramData\AdTrustMedia
[-] Folder Deleted : C:\ProgramData\LuckyBrowse
[-] Folder Deleted : C:\ProgramData\7WdsManPro7
[-] Folder Deleted : C:\ProgramData\yWdsManProy
[-] Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RegClean Pro
[-] Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Crossbrowse
[!] Folder Not Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Crossbrowse
[-] Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyBrowser
[-] Folder Deleted : C:\Users\martina\AppData\Local\globalUpdate
[-] Folder Deleted : C:\Users\martina\AppData\Local\Systweak
[-] Folder Deleted : C:\Users\martina\AppData\Local\DriverToolkit
[-] Folder Deleted : C:\Users\martina\AppData\Local\Crossbrowse
[!] Folder Not Deleted : C:\Users\martina\AppData\Local\Crossbrowse
[-] Folder Deleted : C:\Users\martina\AppData\Local\MyBrowser
[-] Folder Deleted : C:\Users\martina\AppData\Local\373FF220-1445107201-11B2-8000-98BBF6FD5061
[-] Folder Deleted : C:\Users\martina\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp
[-] Folder Deleted : C:\Users\martina\AppData\Local\Google\Chrome\User Data\Default\Extensions\gegdfeiahlfolhcfioipjlkombmgbakh
[!] Folder Not Deleted : C:\Users\martina\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp
[-] Folder Deleted : C:\Users\martina\AppData\Roaming\SimpleFiles
[-] Folder Deleted : C:\Users\martina\AppData\Roaming\Systweak
[-] Folder Deleted : C:\Users\martina\AppData\Roaming\mystartsearch
[-] Folder Deleted : C:\Users\martina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VOPackage

***** [ Files ] *****

[-] File Deleted : C:\Users\martina\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_papbadoldddalgcjcicnikcfenodpghp_0.localstorage
[-] File Deleted : C:\Users\martina\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_papbadoldddalgcjcicnikcfenodpghp_0.localstorage-journal
[-] File Deleted : C:\Users\martina\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_papbadoldddalgcjcicnikcfenodpghp_0
[-] File Deleted : C:\Users\martina\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\papbadoldddalgcjcicnikcfenodpghp
[-] File Deleted : C:\Users\martina\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_gegdfeiahlfolhcfioipjlkombmgbakh_0.localstorage
[-] File Deleted : C:\Users\martina\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_gegdfeiahlfolhcfioipjlkombmgbakh_0.localstorage-journal
[-] File Deleted : C:\Users\martina\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_gegdfeiahlfolhcfioipjlkombmgbakh_0
[-] File Deleted : C:\Users\martina\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gegdfeiahlfolhcfioipjlkombmgbakh
[-] File Deleted : C:\Users\martina\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_papbadoldddalgcjcicnikcfenodpghp_0.localstorage
[-] File Deleted : C:\Users\martina\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_papbadoldddalgcjcicnikcfenodpghp_0.localstorage-journal
[-] File Deleted : C:\Users\martina\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_papbadoldddalgcjcicnikcfenodpghp_0
[-] File Deleted : C:\Users\martina\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\papbadoldddalgcjcicnikcfenodpghp
[-] File Deleted : C:\Users\martina\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\crossbrowse.lnk
[-] File Deleted : C:\Users\martina\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\MyBrowser.lnk
[-] File Deleted : C:\Users\martina\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\crossbrowse.lnk
[-] File Deleted : C:\Users\martina\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\MyBrowser.lnk
[-] File Deleted : C:\Users\martina\Desktop\Live PC Help.lnk
[-] File Deleted : C:\Users\Public\Desktop\crossbrowse.lnk
[-] File Deleted : C:\Users\Public\Desktop\RegClean Pro.lnk
[-] File Deleted : C:\Users\Public\Desktop\MyBrowser.lnk

***** [ DLLs ] *****


***** [ Shortcuts ] *****


***** [ Scheduled tasks ] *****


***** [ Registry ] *****

[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.OneClickCtrl.10
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.Update3WebControl.4
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc.1.0
[-] Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=10
[-] Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=4
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Mediaplayer\Shiminclusionlist\crossbrowse.exe
[-] Key Deleted : HKLM\SOFTWARE\Classes\CRSBRWSHTML
[-] Key Deleted : HKLM\SOFTWARE\Clients\StartMenuInternet\Crossbrowse
[-] Value Deleted : HKLM\SOFTWARE\Classes\.htm\OpenWithProgids [CRSBRWSHTML]
[-] Value Deleted : HKLM\SOFTWARE\Classes\.html\OpenWithProgids [CRSBRWSHTML]
[-] Value Deleted : HKLM\SOFTWARE\RegisteredApplications [Crossbrowse]
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\globalupdate.exe
[-] Value Deleted : HKLM\SOFTWARE\Classes\.xht\OpenWithProgIDs [CRSBRWSHTML]
[-] Value Deleted : HKLM\SOFTWARE\Classes\.webp\OpenWithProgIDs [CRSBRWSHTML]
[-] Value Deleted : HKLM\SOFTWARE\Classes\.shtml\OpenWithProgIDs [CRSBRWSHTML]
[-] Value Deleted : HKLM\SOFTWARE\RegisteredApplications [MyBrowser]
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\MediaPlayer\ShimInclusionList\mybrowser.exe
[-] Key Deleted : HKLM\SOFTWARE\Clients\StartMenuInternet\MyBrowser
[-] Key Deleted : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WdsManPro
[-] Key Deleted : HKLM\SOFTWARE\5e0f7fd5-40a3-4b6a-8fac-7e0588ba035c
[-] Key Deleted : HKLM\SOFTWARE\9feabe52-147a-4181-89f8-44c62b997299
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3B5702BA-7F4C-4D1A-B026-1E9A01D43978}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{69F256DF-BA98-45E9-86EA-FC3CFECF9D30}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6E87FC94-9866-49B9-8E93-5736D6DE3DD7}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{7E49F793-B3CD-4BF7-8419-B34B8BD30E61}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{834469E3-CA2B-4F21-A5CA-4F6F4DBCDE87}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{8529FAA3-5BFD-43C1-AB35-B53C4B96C6E5}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{ADBC39BE-3D20-4333-8D99-E91EB1B62474}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CFC47BB5-5FB5-4AD0-8427-6AA04334A3FC}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E06CA7F5-BA34-4FF6-8D24-B1BDC594D91F}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E0ADB535-D7B5-4D8B-B15D-578BDD20D76A}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F6421EE5-A5BE-4D31-81D5-C16B7BF48E4C}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FD8E81D0-F5FE-4CB1-9AEA-1E163D2BAB78}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{459DD0F7-0D55-D3DC-67BC-E6BE37E9D762}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F83D1872-D9FF-47F8-B5A0-49CC51E24EE8}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6EDBF8C0-C94C-4A13-956F-E393BCA5BA4B}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{2A563926-CF4B-4363-A760-F71E46205B7E}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{813A22E0-3E2B-4188-9BDA-ECA9878B8D48}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{BCFF5F55-6F44-11D2-86F8-00104B265ED5}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A8F7D0A5-7074-40B8-9BDC-1174BDD0A132}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D14D64BC-A0E4-42E3-BB72-FB41EA43C198}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{DD1F043F-ABC8-4643-8B95-D2C5B22BB019}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E3F3E8F9-F747-4DD6-BA6B-82A6CE1E0860}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{ED0B64D4-BF27-4521-AD27-190F49BF5EA7}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{023E9EC8-B147-40EB-B0B3-DF90618FB371}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{0522D9A4-4D57-437D-978D-E5B3B6C9005D}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{07F41522-AF7D-4F26-B394-094F059FDB8A}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{0C40F472-7407-4467-8914-1DEA7C326972}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{212E6D43-6062-492A-B8CC-144669FF11ED}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{224FE662-1E6D-4BC0-AEBB-9E2FB4057BE9}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3A807417-B46D-4D37-8C9A-19AC6DE204F9}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3CC60715-D6C5-429D-830E-43FA3F86C61D}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4517D94C-19BA-46FA-BE66-2A30CEAC4A85}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{555D7146-94A8-4C94-AE76-C39CDC7F7705}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{59D188FA-757A-424E-8C93-F58FFD896BD7}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{8120D9D6-785C-4413-9C0C-DF2028C56FAD}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{823AE2EB-E62C-4847-B192-C99B91B92416}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9B4F7CFE-987D-410E-A8E4-20182E0B3C24}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9B9A45F4-18FC-484A-BACA-076D78273D8E}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A6D54287-7939-466A-8579-92546D946C8C}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A78EDAFB-926F-4D93-AB13-8232D7378EB1}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{395DA725-A162-43FF-B885-27BD92F112E8}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{04FEAF9C-DC32-41C7-95CA-790E93488E7D}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{813A22E0-3E2B-4188-9BDA-ECA9878B8D48}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{BCFF5F55-6F44-11D2-86F8-00104B265ED5}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{395DA725-A162-43FF-B885-27BD92F112E8}
[-] Key Deleted : HKCU\Software\GlobalUpdate
[-] Key Deleted : HKCU\Software\InstalledBrowserExtensions
[-] Key Deleted : HKCU\Software\SimpleFiles
[-] Key Deleted : HKCU\Software\systweak
[-] Key Deleted : HKCU\Software\DriverToolkit
[-] Key Deleted : HKCU\Software\CrossBrowser
[-] Key Deleted : HKCU\Software\YorkNewCin
[-] Key Deleted : HKCU\Software\HighDefAction
[-] Key Deleted : HKCU\Software\ArenaHD
[-] Key Deleted : HKCU\Software\OB
[-] Key Deleted : HKCU\Software\Reg\Clean
[-] Key Deleted : HKCU\Software\CinemaPlus-3.2cV17.10
[-] Key Deleted : HKCU\Software\CinemaPlus-3.2cV17.10-nv
[-] Key Deleted : HKCU\Software\CinemaPlus-3.2cV17.10-nv-ie
[-] Key Deleted : HKCU\Software\Crossbrowse
[-] Key Deleted : HKCU\Software\MyBrowser
[-] Key Deleted : HKCU\Software\MyBrowser 1.0.2V17.10
[-] Key Deleted : HKCU\Software\MyBrowser 1.0.2V17.10-nv
[-] Key Deleted : HKCU\Software\MyBrowser 1.0.2V17.10-nv-ie
[-] Key Deleted : HKCU\Software\AppDataLow\Software\Crossrider
[-] Key Deleted : HKLM\SOFTWARE\AppDataLow\SOFTWARE\Crossrider
[-] Key Deleted : HKLM\SOFTWARE\AppDataLow\SOFTWARE\_CrossriderRegNamePlaceHolder_
[-] Key Deleted : HKLM\SOFTWARE\GlobalUpdate
[-] Key Deleted : HKLM\SOFTWARE\InstalledBrowserExtensions
[-] Key Deleted : HKLM\SOFTWARE\SimpleFiles
[-] Key Deleted : HKLM\SOFTWARE\systweak
[-] Key Deleted : HKLM\SOFTWARE\mystartsearchSoftware
[-] Key Deleted : HKLM\SOFTWARE\YorkNewCin
[-] Key Deleted : HKLM\SOFTWARE\HighDefAction
[-] Key Deleted : HKLM\SOFTWARE\oursurfingSoftware
[-] Key Deleted : HKLM\SOFTWARE\ArenaHD
[-] Key Deleted : HKLM\SOFTWARE\downchecker
[-] Key Deleted : HKLM\SOFTWARE\WdsManPro
[-] Key Deleted : HKLM\SOFTWARE\RayDld
[-] Key Deleted : HKLM\SOFTWARE\ihpmserver
[-] Key Deleted : HKLM\SOFTWARE\LuckyBrowse
[-] Key Deleted : HKLM\SOFTWARE\Reg\Clean
[-] Key Deleted : HKLM\SOFTWARE\CinemaPlus-3.2cV17.10
[-] Key Deleted : HKLM\SOFTWARE\CinemaPlus-3.2cV17.10-nv
[-] Key Deleted : HKLM\SOFTWARE\CinemaPlus-3.2cV17.10-nv-ie
[-] Key Deleted : HKLM\SOFTWARE\Crossbrowse
[-] Key Deleted : HKLM\SOFTWARE\MyBrowser
[-] Key Deleted : HKLM\SOFTWARE\MyBrowser 1.0.2V17.10
[-] Key Deleted : HKLM\SOFTWARE\MyBrowser 1.0.2V17.10-nv
[-] Key Deleted : HKLM\SOFTWARE\MyBrowser 1.0.2V17.10-nv-ie
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SU
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\CinemaPlus-3.2cV17.10
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Crossbrowse
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MyBrowser
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MyBrowser 1.0.2V17.10
[-] Key Deleted : [x64] HKLM\SOFTWARE\InstalledBrowserExtensions
[-] Key Deleted : [x64] HKLM\SOFTWARE\YorkNewCin
[-] Key Deleted : [x64] HKLM\SOFTWARE\HighDefAction
[-] Key Deleted : [x64] HKLM\SOFTWARE\ArenaHD
[-] Key Deleted : [x64] HKLM\SOFTWARE\downchecker
[-] Key Deleted : HKU\.DEFAULT\Software\GeekBuddyRSP
[-] Key Deleted : HKU\.DEFAULT\Software\AppDataLow\Software\_CrossriderRegNamePlaceHolder_
[-] Key Deleted : HKU\.DEFAULT\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\_CrossriderRegNamePlaceHolder_
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\GLOBALUPDATE.EXE
[-] Data Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]
[-] Data Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL]
[-] Data Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
[-] Data Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
[-] Data Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
[-] Data Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
[-] Data Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
[-] Data Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
[-] Data Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
[-] Data Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
[-] Data Restored : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [DefaultScope]
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
[-] Data Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes [DefaultScope]
[-] Data Restored : HKLM\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command []
[-] Data Restored : HKLM\SOFTWARE\Clients\StartMenuInternet\Google Chrome\shell\open\command []

***** [ Web browsers ] *****

[-] [C:\Users\martina\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : mystartsearch
[-] [C:\Users\martina\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Startup_URLs] Deleted : hxxp://www.mystartsearch.com/?type=hp&ts=14451 ... 9T7A263W9X
[-] [C:\Users\martina\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Default_Search_Provider] Deleted : hxxp://www.mystartsearch.com/webfavicon.ico
[-] [C:\Users\martina\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Default_Search_Provider_Data] Deleted : hxxp://www.mystartsearch.com/web/?type=ds&ts=1 ... earchTerms}
[-] [C:\Users\martina\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Deleted : aaaaaiabcopkplhgaedhbloeejhhankf
[-] [C:\Users\martina\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Deleted : gegdfeiahlfolhcfioipjlkombmgbakh
[-] [C:\Users\martina\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Deleted : papbadoldddalgcjcicnikcfenodpghp
[-] [C:\Users\martina\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Deleted : papbadoldddalgcjcicnikcfenodpghp
[-] [C:\Users\martina\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Homepage] Deleted : hxxp://www.mystartsearch.com/?type=hp&ts=14451 ... 9T7A263W9X

*************************

:: "Tracing" keys removed
:: Winsock settings cleared

########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [21188 bytes] ##########
Nahoru
Márty84
VIP
VIP
Příspěvky: 21679
Registrován: 05 pro 2009 20:08
Bydliště: Ostrava

Re: Zavirované pc

#4 Příspěvek od Márty84 »

:arrow: Udelejte kontrolu s MBAM. Test nastavte podle tohoto navodu (cili Vlastni sken vsech disku) http://forum.viry.cz/viewtopic.php?f=29&t=144868 a dejte sem vysledky. Predem nic nemazte, miva obcas falesne detekce
Pokud máte dotaz, který není určen pro veřejnost, můžete mi napsat na mail marty84zavináčforum.viry.cz

Možnost podpořit naše fórum https://platba.viry.cz/payment/

Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
Nahoru
anittra6
2. Stupeň Varování
Příspěvky: 65
Registrován: 25 črc 2011 19:35

Re: Zavirované pc

#5 Příspěvek od anittra6 »

Přeji dobrý den, toť máte log z mbam...viz.příloha. Data jsem zálohoval, plochu vyčistil, popř.bootnu win, někde na bych měl mít i bitovou kopii? Ouha, lžu, bitku jsem dělAL na pc, ntb jsem neřešil. Zatim díky.


Malwarebytes Anti-Malware
http://www.malwarebytes.org

Datum skenování: 17.11.2015
Čas skenování: 3:26
Protokol: log mbam.txt
Správce: Ano

Verze: 2.2.0.1024
Databáze malwaru: v2015.11.16.07
Databáze rootkitů: v2015.11.14.01
Licence: Zkušební verze
Ochrana proti malwaru: Zapnuto
Ochrana proti škodlivým webovým stránkám: Zapnuto
Ochrana programu: Vypnuto

OS: Windows 7 Service Pack 1
CPU: x64
Souborový systém: NTFS
Uživatel: martina

Typ skenu: Sken hrozeb
Výsledek: Dokončeno
Prohledaných objektů: 446582
Uplynulý čas: 18 min, 57 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Vypnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto

Procesy: 0
(Nenalezeny žádné škodlivé položky)

Moduly: 0
(Nenalezeny žádné škodlivé položky)

Klíče registru: 9
PUP.Optional.WinManger, HKLM\SOFTWARE\CLASSES\APPID\{85198F55-85AC-498A-BFE4-BBC33840F4AB}, , [2b8c7608d0bb64d2913652e910f2a35d],
PUP.Optional.WinManger, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{85198F55-85AC-498A-BFE4-BBC33840F4AB}, , [2b8c7608d0bb64d2913652e910f2a35d],
PUP.Optional.WinManger, HKLM\SOFTWARE\CLASSES\WOW6432NODE\APPID\{85198F55-85AC-498A-BFE4-BBC33840F4AB}, , [2b8c7608d0bb64d2913652e910f2a35d],
PUP.Optional.Yontoo, HKU\S-1-5-21-3871993484-2785268054-3228482215-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{BFA55139-82AF-4663-A19B-E135DAC8D043}, , [5f58dea035561125688a58b84db56799],
PUP.Optional.Yontoo, HKU\S-1-5-21-3871993484-2785268054-3228482215-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{BFA55139-82AF-4663-A19B-E135DAC8D043}, , [5f58dea035561125688a58b84db56799],
PUP.Optional.SearchApp, HKLM\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\aaaaaiabcopkplhgaedhbloeejhhankf, , [783fee90b5d6989e8730523d1ee5bc44],
PUP.Optional.OurSurfing.ShrtCln, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, , [c3f494ea9cefd561a9c55ff763a0cb35],
PUP.Optional.SearchApp, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\aaaaaiabcopkplhgaedhbloeejhhankf, , [793e8bf35d2ee84ef7c0226d937051af],
PUP.Optional.Cinema, HKU\S-1-5-21-3871993484-2785268054-3228482215-1001\SOFTWARE\CinemaP-1.9cV17.10-nv-ie, , [02b5dea02b60ab8bbb1762042cd75fa1],

Hodnoty registru: 10
PUP.Optional.CrossBrowse, HKLM\SOFTWARE\CLASSES\.XHTML\OPENWITHPROGIDS|CRSBRWSHTML, , [c2f5087603881521ce83f2e160a3f10f],
PUP.Optional.CrossBrowse, HKLM\SOFTWARE\CLASSES\WOW6432NODE\.XHTML\OPENWITHPROGIDS|CRSBRWSHTML, , [e1d60678fb90fd39ed64349fdf24639d],
PUP.Optional.OurSurfing.ShrtCln, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}|DisplayName, oursurfing, , [c3f494ea9cefd561a9c55ff763a0cb35]
PUP.Optional.OurSurfing.ShrtCln, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}|URL, http://www.oursurfing.com/web/?type=ds& ... earchTerms}, , [aa0d0a74d0bbb284ff6facaaea1906fa]
PUP.Optional.CrossBrowse, HKLM\SOFTWARE\WOW6432NODE\CLASSES\.XHTML\OPENWITHPROGIDS|CRSBRWSHTML, , [4a6df38babe01d19e36efad97c878e72],
PUP.Optional.CrossBrowse, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\ACTIVE SETUP\INSTALLED COMPONENTS, Crossbrowse, , [dddadea0741768ce82ae92d93bc832ce]
PUP.Optional.CrossBrowse, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\ACTIVE SETUP\INSTALLED COMPONENTS|StubPath, "C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level, , [288f0678dbb0f1458aa624478f7450b0]
PUP.Optional.CrossBrowse, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\ACTIVE SETUP\INSTALLED COMPONENTS|Localized Name, Crossbrowse, , [a21594eab9d21323161a6605bd469c64]
PUP.Optional.CrossBrowse, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SHAREDACCESS\PARAMETERS\FIREWALLPOLICY\FIREWALLRULES|{1B56E91F-31D3-47E3-8F41-412C8CE76C60}, v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|LPort=5353|App=C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe|Name=Crossbrowse (mDNS-In)|Desc=Inbound rule for Crossbrowse to allow mDNS traffic.|EmbedCtxt=Crossbrowse|, , [298e08765d2e34025431bd1a8380c937]
Hijack.Autoconfig.ShrtCln, HKU\S-1-5-21-3871993484-2785268054-3228482215-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS|AutoConfigUrl, http://get-access.me/wpad.dat?0d18835c4 ... d10d830915, , [c7f0a1dd2566c274411b6662c43fcc34]

Data registru: 1
PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Dobré: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Špatné: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),,[42756816a7e4bd794530ba9a11f35da3]

Složky: 63
PUP.Optional.CrossBrowse, C:\Users\anittra.martina-PC\AppData\Local\Crossbrowse, , [b007ceb063281026c952a3be0200c63a],
PUP.Optional.CrossBrowse, C:\Users\anittra.martina-PC\AppData\Local\Crossbrowse\Crossbrowse, , [b007ceb063281026c952a3be0200c63a],
PUP.Optional.CrossBrowse, C:\Users\anittra.martina-PC\AppData\Local\Crossbrowse\Crossbrowse\User Data, , [b007ceb063281026c952a3be0200c63a],
PUP.Optional.CrossBrowse, C:\Users\anittra.martina-PC\AppData\Local\Crossbrowse\Crossbrowse\User Data\Caps, , [b007ceb063281026c952a3be0200c63a],
PUP.Optional.CrossBrowse, C:\Users\anittra.martina-PC\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default, , [b007ceb063281026c952a3be0200c63a],
PUP.Optional.CrossBrowse, C:\Users\anittra.martina-PC\AppData\Local\Crossbrowse\Crossbrowse\User Data\SwReporter, , [b007ceb063281026c952a3be0200c63a],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\background, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\css, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\css\themes, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\css\themes\avira, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\css\themes\imesh, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\css\themes\mindspark, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\css\themes\plain, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\css\themes\taskbar, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\css\themes\v5parity, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\images, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\images\logo, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\images\newtab, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\images\search, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\images\vanilla, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\widgets, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\widgets\ask-homepage, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\widgets\search-box-DLA, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\widgets\searchTheme-images, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\widgets\searchTheme-news, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\widgets\searchTheme-video, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\widgets\searchTheme-web, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\widgets\SPE-hide, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\widgets\SPE-options, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\widgets\SPE-options\css, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\widgets\SPE-options\images, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\widgets\SPE-options\js, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\content_script, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\content_script\hack, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\lib, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\lib\shims, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\newtab, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\newtab\js, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\settings, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\tb_ux, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\widgets, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\widgets\options, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\widgets\options\images, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\widgets\rebuttal, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\widgets\rebuttal\images, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\widgets\search-suggestion, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\widgets\templates, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\widgets\templates\css, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\widgets\templates\css\images, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\widgets\templates\js, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\_metadata, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.MyBrowser, C:\Users\anittra.martina-PC\AppData\Local\MyBrowser, , [37805c220c7fdf576bfcec96c83a2ed2],
PUP.Optional.MyBrowser, C:\Users\anittra.martina-PC\AppData\Local\MyBrowser\MyBrowser, , [37805c220c7fdf576bfcec96c83a2ed2],
PUP.Optional.MyBrowser, C:\Users\anittra.martina-PC\AppData\Local\MyBrowser\MyBrowser\User Data, , [37805c220c7fdf576bfcec96c83a2ed2],
PUP.Optional.MyBrowser, C:\Users\anittra.martina-PC\AppData\Local\MyBrowser\MyBrowser\User Data\Caps, , [37805c220c7fdf576bfcec96c83a2ed2],
PUP.Optional.MyBrowser, C:\Users\anittra.martina-PC\AppData\Local\MyBrowser\MyBrowser\User Data\Default, , [37805c220c7fdf576bfcec96c83a2ed2],
PUP.Optional.MyBrowser, C:\Users\anittra.martina-PC\AppData\Local\MyBrowser\MyBrowser\User Data\SwReporter, , [37805c220c7fdf576bfcec96c83a2ed2],
PUP.Optional.CrossRider, C:\Users\martina\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gegdfeiahlfolhcfioipjlkombmgbakh, , [a215b2cc1774ba7cc1c2f59033cfb44c],
PUP.Optional.CrossRider, C:\Users\martina\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\papbadoldddalgcjcicnikcfenodpghp, , [9f18daa42269b28499143c4961a1e020],

Soubory: 202
PUP.Optional.CrossBrowse, C:\Users\anittra.martina-PC\AppData\Local\Crossbrowse\Crossbrowse\User Data\Local State, , [b007ceb063281026c952a3be0200c63a],
PUP.Optional.CrossBrowse, C:\Users\anittra.martina-PC\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Cookies, , [b007ceb063281026c952a3be0200c63a],
PUP.Optional.CrossBrowse, C:\Users\anittra.martina-PC\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Current Session, , [b007ceb063281026c952a3be0200c63a],
PUP.Optional.CrossBrowse, C:\Users\anittra.martina-PC\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Current Tabs, , [b007ceb063281026c952a3be0200c63a],
PUP.Optional.CrossBrowse, C:\Users\anittra.martina-PC\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Favicons, , [b007ceb063281026c952a3be0200c63a],
PUP.Optional.CrossBrowse, C:\Users\anittra.martina-PC\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\History, , [b007ceb063281026c952a3be0200c63a],
PUP.Optional.CrossBrowse, C:\Users\anittra.martina-PC\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Shortcuts, , [b007ceb063281026c952a3be0200c63a],
PUP.Optional.CrossBrowse, C:\Users\anittra.martina-PC\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Top Sites, , [b007ceb063281026c952a3be0200c63a],
PUP.Optional.CrossBrowse, C:\Users\anittra.martina-PC\AppData\Local\Crossbrowse\Crossbrowse\User Data\Default\Visited Links, , [b007ceb063281026c952a3be0200c63a],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\icon.png, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\manifest.json, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\background\init-bg-messaging.js, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\background\background-options.js, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\background\background.html, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\background\background.js, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\background\browser-action.js, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\background\cache-config.js, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\background\cookies.js, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\background\feeds.js, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\background\fixup-jquery-for-ie.js, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\background\history.js, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\background\ie-bg-shim.js, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\background\install-api.js, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\background\lifecycle.js, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\background\localStorage.js, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\background\OneTimeCode.js, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\background\popup.js, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\background\preference.js, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\background\rebuttal.js, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\background\registry.js, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\background\reporting.js, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\background\search.js, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\background\security.js, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\background\sideByside.js, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\background\tabs.js, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\background\utils.js, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\build.json, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\lang-config.js, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\tb-config.js, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\test-widget-config.js, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\widget-config.js, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\widget-config.jse, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\chrome-options.html, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\content-script.xul, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\init-tb-stuff.js, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\newtab-overlay.xul, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\newtab-subscript.js, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\toolbar.html, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\toolbar.xul, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\widget-bundled.xul, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\widget-hosted.xul, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\css\bl-new-tab.css, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\css\chrome-options.css, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\css\containers.css, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\css\hp-new-tab.css, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\css\new-tab.css, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\css\searchbox.css, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\css\toolbar.css, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\css\themes\avira\avira.css, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\css\themes\imesh\imesh.css, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\css\themes\mindspark\mindspark.css, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\css\themes\mindspark\new-search-button-mid.png, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\css\themes\mindspark\new-search-button-sides.png, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\css\themes\plain\plain.css, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\css\themes\taskbar\taskbar.css, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\css\themes\v5parity\v5parity.css, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\images\IDR_WEBSTORE_ICON.png, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\images\logo\ask_flat_20x.png, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\images\logo\logo_128x.png, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\images\logo\logo_19x.png, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\images\logo\logo_19x_grey.png, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\images\logo\logo_24x.png, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\images\logo\logo_32x.png, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\images\logo\logo_32x_24x.png, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\images\logo\newtablogo.png, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\images\logo\toolbar-icon-ask.ico, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\images\logo\toolbar-icons.png, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\images\newtab\bl-homepage_logo.png, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\images\newtab\btn_x.png, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\images\newtab\homepage_logo.png, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\images\newtab\manifier.png, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\images\newtab\thirdparty_icons.png, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\images\search\btn_search_ask_taskbar.png, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\images\search\logo_cobrand_18px.png, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\images\search\logo_cobrand_24px.png, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\images\search\new-search-button-mid.png, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\images\search\new-search-button-sides.png, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\images\search\search-button-mid.png, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\images\search\search-button-sides.png, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\images\vanilla\badge_1.png, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\images\vanilla\badge_10.png, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\images\vanilla\badge_10plus.png, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\images\vanilla\badge_2.png, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\images\vanilla\badge_3.png, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\images\vanilla\badge_4.png, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\images\vanilla\badge_5.png, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\images\vanilla\badge_6.png, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\images\vanilla\badge_7.png, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\images\vanilla\badge_8.png, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\images\vanilla\badge_9.png, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\images\vanilla\badge_exclaim.png, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\images\vanilla\badge_numbers.png, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\images\vanilla\bdg-gradient.png, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\images\vanilla\bg.png, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\images\vanilla\curved-divider.png, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\images\vanilla\left-bg.png, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\widgets\ask-homepage\button.png, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\widgets\searchTheme-images\button.png, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\widgets\searchTheme-news\button.png, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\widgets\searchTheme-video\button.png, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\widgets\searchTheme-web\button.png, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\widgets\SPE-hide\button.png, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\widgets\SPE-options\options.html, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\widgets\SPE-options\css\options.css, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\widgets\SPE-options\images\button-blue-1x20.png, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\widgets\SPE-options\images\button-grey-1x26.png, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\widgets\SPE-options\images\button.png, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\widgets\SPE-options\images\icons.png, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\widgets\SPE-options\images\lightblue-1x43.png, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\widgets\SPE-options\images\trans-big.gif, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\widgets\SPE-options\js\options.js, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\config\skin\widgets\SPE-options\js\translations.js, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\content_script\content-script.js, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\content_script\injector.js, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\content_script\inline-html.js, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\content_script\notify-presence.js, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\content_script\positioning.js, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\content_script\toolbar.js, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\content_script\widget-hosted.js, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\content_script\widget.js, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\content_script\hack\facebook.css, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\content_script\hack\relative.css, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\content_script\hack\static.css, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\lib\async-gate.js, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\lib\browser-shim.js, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\lib\constant.js, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\lib\DataStore.js, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\lib\default-config.js, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\lib\i18n.js, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\lib\jquery.js, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\lib\json.js, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\lib\logger.js, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\lib\polyfill.js, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\lib\protocol.js, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\lib\state-machine.js, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\lib\tb-config-update.js, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\lib\tb-message.js, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\lib\widget-config-update.js, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\lib\widget-messaging.js, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\lib\window-position.js, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\lib\shims\console.js, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\newtab\newtab.html, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\newtab\js\newtab.js, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\settings\assets.js, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\settings\redirect.js, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\tb_ux\bl-new-tab-page.js, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\tb_ux\chrome-options.js, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\tb_ux\ieCS.js, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\tb_ux\IFrameButton.js, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\tb_ux\init-toolbar.js, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\tb_ux\new-tab-page.js, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\tb_ux\rebuttal.js, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\tb_ux\reel.js, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\tb_ux\searchbox.js, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\tb_ux\shimIE.js, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\tb_ux\SimpleButton.js, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\tb_ux\toolbar.js, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\widgets\options\options.css, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\widgets\options\options.html, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\widgets\options\options.js, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\widgets\options\images\button-blue-1x20.png, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\widgets\options\images\button-grey-1x26.png, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\widgets\options\images\button.png, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\widgets\options\images\icons.png, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\widgets\options\images\lightblue-1x43.png, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\widgets\rebuttal\rebuttal.css, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\widgets\rebuttal\rebuttal.html, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\widgets\rebuttal\rebuttal.js, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\widgets\rebuttal\images\warning.png, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\widgets\search-suggestion\search-suggestion.css, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\widgets\search-suggestion\search-suggestion.html, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\widgets\search-suggestion\search-suggestion.js, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\widgets\templates\feed.html, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\widgets\templates\menu.html, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\widgets\templates\css\menu.css, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\widgets\templates\css\images\footer_gradient.png, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\widgets\templates\css\images\footer_shadow.png, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\widgets\templates\css\images\image_placeholder.png, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\widgets\templates\css\images\item-bg.png, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\widgets\templates\js\api.js, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\widgets\templates\js\feed.js, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\widgets\templates\js\menu.js, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.SearchApp, C:\Users\anittra.martina-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf\111.12_0\_metadata\verified_contents.json, , [1a9d2856c2c956e06cd03f3a39c96b95],
PUP.Optional.MyBrowser, C:\Users\anittra.martina-PC\AppData\Local\MyBrowser\MyBrowser\User Data\Local State, , [37805c220c7fdf576bfcec96c83a2ed2],
PUP.Optional.MyBrowser, C:\Users\anittra.martina-PC\AppData\Local\MyBrowser\MyBrowser\User Data\Default\Cookies, , [37805c220c7fdf576bfcec96c83a2ed2],
PUP.Optional.MyBrowser, C:\Users\anittra.martina-PC\AppData\Local\MyBrowser\MyBrowser\User Data\Default\Current Session, , [37805c220c7fdf576bfcec96c83a2ed2],
PUP.Optional.MyBrowser, C:\Users\anittra.martina-PC\AppData\Local\MyBrowser\MyBrowser\User Data\Default\Current Tabs, , [37805c220c7fdf576bfcec96c83a2ed2],
PUP.Optional.MyBrowser, C:\Users\anittra.martina-PC\AppData\Local\MyBrowser\MyBrowser\User Data\Default\Favicons, , [37805c220c7fdf576bfcec96c83a2ed2],
PUP.Optional.MyBrowser, C:\Users\anittra.martina-PC\AppData\Local\MyBrowser\MyBrowser\User Data\Default\History, , [37805c220c7fdf576bfcec96c83a2ed2],
PUP.Optional.MyBrowser, C:\Users\anittra.martina-PC\AppData\Local\MyBrowser\MyBrowser\User Data\Default\Shortcuts, , [37805c220c7fdf576bfcec96c83a2ed2],
PUP.Optional.MyBrowser, C:\Users\anittra.martina-PC\AppData\Local\MyBrowser\MyBrowser\User Data\Default\Top Sites, , [37805c220c7fdf576bfcec96c83a2ed2],
PUP.Optional.MyBrowser, C:\Users\anittra.martina-PC\AppData\Local\MyBrowser\MyBrowser\User Data\Default\Visited Links, , [37805c220c7fdf576bfcec96c83a2ed2],

Fyzické sektory: 0
(Nenalezeny žádné škodlivé položky)


(end)
Přílohy
log mbam.rar
(4.27 KiB) Staženo 83 x
Nahoru
Márty84
VIP
VIP
Příspěvky: 21679
Registrován: 05 pro 2009 20:08
Bydliště: Ostrava

Re: Zavirované pc

#6 Příspěvek od Márty84 »

Vsechny nalezy nechte odstranit. Po odstraneni a restartu pc udelejte novy test, ale tentokrat opravdu se spravnym nastavenim (tohle byl Sken hrozeb, ten nekontroluje cely pocitac, ja chtel Vlastni sken, tak jak je to v navodu), at vime, jestli se to nevraci. Napiste vysledek testu a podle nej zvolim dalsi postup.
Pokud máte dotaz, který není určen pro veřejnost, můžete mi napsat na mail marty84zavináčforum.viry.cz

Možnost podpořit naše fórum https://platba.viry.cz/payment/

Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
Nahoru
anittra6
2. Stupeň Varování
Příspěvky: 65
Registrován: 25 črc 2011 19:35

Re: Zavirované pc

#7 Příspěvek od anittra6 »

Dyť ano, přidal jsem tootkity s celým hhd... scan (šnek jel cca 5h.))):-Q a delete.
Pc s 1,8TB dat 10min..:-) Je to dědek musím ženě koupit nový.

Malwarebytes Anti-Malware
www.malwarebytes.org

Datum skenování: 17.11.2015
Čas skenování: 20:23
Protokol: LOG.txt
Správce: Ano

Verze: 0.0.0.0000
Databáze malwaru: v2015.11.17.06
Databáze rootkitů: v2015.11.14.01
Licence: Zkušební verze
Ochrana proti malwaru: Zapnuto
Ochrana proti škodlivým webovým stránkám: Zapnuto
Ochrana programu: Vypnuto

OS: Windows 7 Service Pack 1
CPU: x64
Souborový systém: NTFS
Uživatel: martina

Typ skenu: Vlastní sken
Výsledek: Dokončeno
Prohledaných objektů: 615354
Uplynulý čas: 3 hod, 43 min, 55 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Zapnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto

Procesy: 0
(Nenalezeny žádné škodlivé položky)

Moduly: 0
(Nenalezeny žádné škodlivé položky)

Klíče registru: 0
(Nenalezeny žádné škodlivé položky)

Hodnoty registru: 0
(Nenalezeny žádné škodlivé položky)

Data registru: 0
(Nenalezeny žádné škodlivé položky)

Složky: 0
(Nenalezeny žádné škodlivé položky)

Soubory: 0
(Nenalezeny žádné škodlivé položky)

Fyzické sektory: 0
(Nenalezeny žádné škodlivé položky)


(end)
Nahoru
anittra6
2. Stupeň Varování
Příspěvky: 65
Registrován: 25 črc 2011 19:35

Re: Zavirované pc

#8 Příspěvek od anittra6 »

:))))) zase kecám...ten scan trval 18h.....masakr...tak dlouho trvalo obnevení dat z formátovaného hdd 1,8TB.
Nahoru
Márty84
VIP
VIP
Příspěvky: 21679
Registrován: 05 pro 2009 20:08
Bydliště: Ostrava

Re: Zavirované pc

#9 Příspěvek od Márty84 »

anittra6 píše:zase kecám...ten scan trval 18h.....masakr...
No nevim, podle logu trval prvni sken necelych 19 minut a tenhle druhy 3 hodiny a 43 minut :?:


:arrow: MBAM odinstalujte.

:arrow: Stahnete crystal disk info http://sourceforge.jp/projects/crystald ... 5_0_0.zip/
Spustte jako spravce. Za chvili se zobrazi vysledek.
Kliknete nahore na napis Úpravy a pak na napis Kopírovat. To co se zkopiruje (ulozi se to do pameti) mi sem vlozte (ctrl + V)

:arrow: Dejte nove logy z FRST.
Pokud máte dotaz, který není určen pro veřejnost, můžete mi napsat na mail marty84zavináčforum.viry.cz

Možnost podpořit naše fórum https://platba.viry.cz/payment/

Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
Nahoru
anittra6
2. Stupeň Varování
Příspěvky: 65
Registrován: 25 črc 2011 19:35

Re: Zavirované pc

#10 Příspěvek od anittra6 »

----------------------------------------------------------------------------
CrystalDiskInfo 5.0.0 (C) 2008-2012 hiyohiyo
Crystal Dew World : http://crystalmark.info/
----------------------------------------------------------------------------

OS : Windows 7 Home Premium Edition SP1 [6.1 Build 7601] (x64)
Date : 2015/11/18 12:56:04

-- Controller Map ----------------------------------------------------------
+ Řadič úložiště Intel(R) ICH8M s rozhraním Serial ATA 3portový - 2828 [ATA]
+ ATA Channel 0 (0)
- FUJITSU MHY2200BH ATA Device
+ ATA Channel 1 (1)
- TSSTcorp CDDVDW TS-L632N ATA Device
- Ricoh xD-Picture Card Controller [ATA]

-- Disk List ---------------------------------------------------------------
(1) FUJITSU MHY2200BH : 200,0 GB [0/0/0, pd1]

----------------------------------------------------------------------------
(1) FUJITSU MHY2200BH
----------------------------------------------------------------------------
Model : FUJITSU MHY2200BH
Firmware : 0000000B
Serial Number : K42WT7A263W9
Disk Size : 200,0 GB (8,4/137,4/200,0)
Buffer Size : 8192 KB
Queue Depth : 32
# of Sectors : 390721968
Rotation Rate : Neznámy údaj
Interface : Serial ATA
Major Version : ATA8-ACS
Minor Version : ATA8-ACS version 3f
Transfer Mode : SATA/150
Power On Hours : 12717 hod.
Power On Count : 5248 krát
Temparature : 33 C (91 F)
Health Status : Dobrý
Features : S.M.A.R.T., APM, AAM, 48bit LBA, NCQ
APM Level : 4080h [ON]
AAM Level : FEFEh [ON]

-- S.M.A.R.T. --------------------------------------------------------------
ID Cur Wor Thr RawValues(6) Attribute Name
01 100 100 _46 00000002078D Počet chyb čtení
02 100 100 _30 000002E00000 Průchodnost disku
03 100 100 _25 000000000001 Čas na roztočení ploten
04 _98 _98 __0 0000000015C5 Počet spuštění/zastavení
05 100 100 _24 07D000000000 Počet přemapovaných sektorů
07 100 100 _47 000000000B33 Počet chybných hledání
08 100 100 _19 000000000000 Čas potřebný na vyhledání
09 _75 _75 __0 0000000031AD Hodin v činnosti
0A 100 100 _20 000000000000 Počet opakovaných pokusů o roztočení ploten
0C _99 _99 __0 000000001480 Počet cyklů zapnutí zařízení
C0 100 100 __0 0000000000C9 Počet vypnutí disku
C1 _90 _90 __0 000000033D8C Počet cyklů načítání/vymazání
C2 100 _90 __0 003E000E0021 Teplota
C3 100 100 __0 00000000007F Počet oprav chybného čtení
C4 100 100 __0 00001B3A0000 Počet udalostí s číslem realokování sektorů
C5 100 100 __0 000000000000 Počet podezřelých sektorů
C6 100 100 __0 000000000000 Počet neopravitelných sektorů
C7 200 253 __0 000000000000 Počet chyb v kontrolním součtu UltraDMA
C8 100 100 _60 00000000720D Počet chyb při zápisu sektorů
CB 100 100 __0 016405CE02AC Počet chyb v kódech na opravu chyb
F0 200 200 __0 000000000000 Čas nastavování hlaviček - v hodinách

-- IDENTIFY_DEVICE ---------------------------------------------------------
0 1 2 3 4 5 6 7 8 9
000: 045A 3FFF C837 0010 0000 003F 003F 0000 0000 0000
010: 2020 2020 2020 2020 4B34 5437 5437 4132 3633 5739
020: 0003 4000 0000 3030 3030 3042 3042 4655 4A49 5453
030: 5520 4D48 5932 3230 3042 2020 2020 2020 2020 2020
040: 2020 2020 2020 2020 2020 2020 2020 8010 0000 2F00
050: 4000 0200 0200 0007 3FFF 003F 003F FC10 00FB 0110
060: FFFF 0FFF 0000 0007 0003 0078 0078 0078 0078 0000
070: 0000 0000 0000 0000 0000 0702 0702 0000 004C 0048
080: 01F8 0042 346B 7F09 6163 BE09 BE09 6163 203F 0064
090: 0000 4080 FFFE 0000 FEFE 0000 0000 0000 0000 0000
100: F1B0 1749 0000 0000 0000 4000 4000 0000 5000 00E0
110: 40FD 288A 0000 0000 0000 0000 0000 0000 0000 401D
120: 401C 0000 0000 0000 0000 0000 0000 0000 0009 0000
130: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
140: 0000 0000 0000 0000 03D5 0000 0000 0000 4004 4000
150: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
160: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
170: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
180: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
190: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
200: 0000 0000 0000 0000 0000 003D 003D 0000 0000 0000
210: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
220: 0000 0000 100F 0021 0000 0000 0000 0000 0000 0000
230: 0000 0000 0000 0000 0001 0000 0000 0000 0000 0000
240: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
250: 0000 0000 0000 0000 0000 09A5





Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:18-11-2015
Ran by martina (administrator) on MARTINA-PC (18-11-2015 12:57:50)
Running from C:\Users\martina\Desktop
Loaded Profiles: martina & UpdatusUser (Available Profiles: martina & UpdatusUser & anittra)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(ESET) C:\Program Files\ESET\ESET Smart Security\ekrn.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
() C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(forum.viry.cz) C:\Users\martina\Desktop\FRST-OlderVersion\FRSTLauncher.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKU\S-1-5-21-3871993484-2785268054-3228482215-1001\...\Run: [] => [X]
HKU\S-1-5-21-3871993484-2785268054-3228482215-1001\...\MountPoints2: {01bc495a-48fb-11e5-b51e-001dd9f4d8d9} - F:\Lenovo_Suite.exe
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => No File

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

AutoConfigURL: [S-1-5-21-3871993484-2785268054-3228482215-1001] => hxxp://get-access.me/wpad.dat?0d18835c4cf9163bea23f17e1543d10d830915
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{E8BFF513-44B1-48A5-997F-F8ECFAA02E7E}: [DhcpNameServer] 10.0.0.138

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKU\S-1-5-21-3871993484-2785268054-3228482215-1001\Software\Microsoft\Internet Explorer\Main,First Home Page = hxxp://g.msn.com/1me10IE10ENGB/WOL_WCP
SearchScopes: HKU\S-1-5-21-3871993484-2785268054-3228482215-1001 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
BHO: No Name -> {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} -> No File
Toolbar: HKLM - No Name - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File

FireFox:
========
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll [2011-11-30] (CANON INC.)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @nokia.com/EnablerPlugin -> C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll [2014-11-19] ( )
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-14] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-14] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2012-09-23] (Adobe Systems Inc.)

Chrome:
=======
CHR HomePage: Default -> search.ask.com/?gct=hp
CHR DefaultSearchURL: Default -> hxxp://www.search.ask.com/web?q={searchTerms}
CHR DefaultSearchKeyword: Default -> search.ask.com
CHR DefaultSuggestURL: Default -> hxxp://ssmsp.ask.com/query?sstype=prefix&li=ff&q={searchTerms}
CHR Profile: C:\Users\martina\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Dokumenty Google) - C:\Users\martina\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-07-21]
CHR Extension: (Disk Google) - C:\Users\martina\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-11-16]
CHR Extension: (YouTube) - C:\Users\martina\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-25]
CHR Extension: (Vyhledávání Google) - C:\Users\martina\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-11-16]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\martina\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-08-01]
CHR Extension: (Gmail) - C:\Users\martina\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-07-21]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 ekrn; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2505472 2015-10-09] (ESET)
R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [84616 2013-06-28] ()
S4 SWUpdateService; C:\ProgramData\Samsung\SW Update Service\SWMAgent.exe [3020120 2015-04-21] (Samsung Electronics CO., LTD.)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [264040 2015-09-23] (ESET)
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R0 edevmon; C:\Windows\System32\DRIVERS\edevmon.sys [241880 2015-03-10] (ESET)
R0 edevmon; C:\Windows\SysWOW64\DRIVERS\edevmon.sys [241368 2014-10-10] (ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [186784 2015-09-23] (ESET)
R2 ekbdflt; C:\Windows\System32\DRIVERS\ekbdflt.sys [142976 2015-10-07] (ESET)
R1 ElRawDisk; C:\Windows\system32\drivers\ElRawDsk.sys [30752 2012-07-26] (EldoS Corporation)
R1 epfw; C:\Windows\System32\DRIVERS\epfw.sys [206312 2015-09-23] (ESET)
R1 EpfwLWF; C:\Windows\System32\DRIVERS\EpfwLWF.sys [52872 2015-09-23] (ESET)
R0 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [69840 2015-09-23] (ESET)
S3 ESETCleanersDriver; C:\Windows\system32\Drivers\ESETCleanersDriver.sys [170280 2015-11-16] (ESET)
U3 TrueSight; C:\Windows\System32\drivers\TrueSight.sys [35064 2015-10-18] ()
U5 VWiFiFlt; C:\Windows\System32\Drivers\VWiFiFlt.sys [59904 2009-07-14] (Microsoft Corporation)
R3 yukonw7; C:\Windows\System32\DRIVERS\yk62x64.sys [395264 2009-09-28] ()
R3 MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [X]
S3 NTIOLib_1_0_C; \??\E:\NTIOLib_X64.sys [X]
S3 pccsmcfd; system32\DRIVERS\pccsmcfdx64.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-11-18 12:57 - 2015-11-18 12:58 - 00008921 _____ C:\Users\martina\Desktop\FRST.txt
2015-11-18 12:57 - 2015-11-18 12:57 - 00000000 ____D C:\Users\martina\Desktop\FRST-OlderVersion
2015-11-18 12:56 - 2015-11-18 12:56 - 00004535 _____ C:\Users\martina\Desktop\Nový textový dokument.txt
2015-11-18 12:54 - 2015-11-18 12:55 - 00000000 ____D C:\Users\martina\Desktop\cd
2015-11-18 12:53 - 2015-11-18 12:53 - 01496172 _____ C:\Users\martina\Desktop\CrystalDiskInfo5_0_0.zip
2015-11-17 04:31 - 2015-11-17 04:32 - 00004374 _____ C:\Users\martina\Desktop\log mbam.rar
2015-11-17 02:32 - 2015-11-17 02:34 - 00000000 ____D C:\Windows\rescache
2015-11-16 22:14 - 2015-11-16 22:17 - 00000000 ____D C:\Users\martina\AppData\Roaming\ImgBurn
2015-11-16 21:59 - 2015-11-16 21:59 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-11-16 21:56 - 2015-11-16 21:56 - 22908888 _____ (Malwarebytes ) C:\Users\martina\Desktop\mbam-setup-2.2.0.1024.exe
2015-11-16 20:56 - 2015-11-16 20:56 - 00001881 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ImgBurn.lnk
2015-11-16 20:56 - 2015-11-16 20:56 - 00001869 _____ C:\Users\Public\Desktop\ImgBurn.lnk
2015-11-16 20:56 - 2015-11-16 20:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ImgBurn
2015-11-16 20:56 - 2015-11-16 20:56 - 00000000 ____D C:\Program Files (x86)\ImgBurn
2015-11-16 20:54 - 2015-11-16 20:55 - 06951287 _____ C:\Users\martina\Downloads\ImgBurn.v2.5.6.0.rar
2015-11-16 19:41 - 2015-11-16 19:41 - 00929872 _____ (Google Inc.) C:\Users\martina\Downloads\ChromeSetup.exe
2015-11-16 18:42 - 2015-10-20 19:42 - 03168768 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-11-16 18:42 - 2015-10-20 19:42 - 02608128 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-11-16 18:42 - 2015-10-20 19:42 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-11-16 18:42 - 2015-10-20 19:42 - 00192512 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-11-16 18:42 - 2015-10-20 19:42 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-11-16 18:42 - 2015-10-20 19:42 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-11-16 18:42 - 2015-10-20 19:42 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-11-16 18:42 - 2015-10-20 19:41 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-11-16 18:42 - 2015-10-20 19:41 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-11-16 18:42 - 2015-10-20 19:41 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-11-16 18:42 - 2015-10-20 19:41 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-11-16 18:42 - 2015-10-20 18:46 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-11-16 18:42 - 2015-10-20 18:46 - 00174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-11-16 18:42 - 2015-10-20 18:46 - 00093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-11-16 18:42 - 2015-10-20 18:46 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-11-16 18:42 - 2015-10-20 18:45 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-11-16 18:40 - 2015-11-03 23:10 - 00390344 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-11-16 18:40 - 2015-11-03 22:51 - 00342728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-11-16 18:40 - 2015-10-31 00:46 - 25818624 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-11-16 18:40 - 2015-10-31 00:40 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-11-16 18:40 - 2015-10-31 00:40 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-11-16 18:40 - 2015-10-31 00:25 - 02886656 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-11-16 18:40 - 2015-10-31 00:25 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-11-16 18:40 - 2015-10-31 00:25 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-11-16 18:40 - 2015-10-31 00:25 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-11-16 18:40 - 2015-10-31 00:24 - 00585728 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-11-16 18:40 - 2015-10-31 00:24 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-11-16 18:40 - 2015-10-31 00:17 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-11-16 18:40 - 2015-10-31 00:16 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-11-16 18:40 - 2015-10-31 00:13 - 00616960 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-11-16 18:40 - 2015-10-31 00:12 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-11-16 18:40 - 2015-10-31 00:12 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-11-16 18:40 - 2015-10-31 00:11 - 05990912 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-11-16 18:40 - 2015-10-31 00:11 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-11-16 18:40 - 2015-10-31 00:11 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-11-16 18:40 - 2015-10-31 00:04 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-11-16 18:40 - 2015-10-31 00:01 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-11-16 18:40 - 2015-10-30 23:58 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-11-16 18:40 - 2015-10-30 23:53 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-11-16 18:40 - 2015-10-30 23:52 - 20331520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-11-16 18:40 - 2015-10-30 23:49 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-11-16 18:40 - 2015-10-30 23:49 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-11-16 18:40 - 2015-10-30 23:47 - 00504832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-11-16 18:40 - 2015-10-30 23:46 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-11-16 18:40 - 2015-10-30 23:46 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-11-16 18:40 - 2015-10-30 23:45 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-11-16 18:40 - 2015-10-30 23:45 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-11-16 18:40 - 2015-10-30 23:44 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2015-11-16 18:40 - 2015-10-30 23:44 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-11-16 18:40 - 2015-10-30 23:42 - 02279936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-11-16 18:40 - 2015-10-30 23:39 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-11-16 18:40 - 2015-10-30 23:39 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-11-16 18:40 - 2015-10-30 23:37 - 00480256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-11-16 18:40 - 2015-10-30 23:36 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-11-16 18:40 - 2015-10-30 23:36 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-11-16 18:40 - 2015-10-30 23:36 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-11-16 18:40 - 2015-10-30 23:34 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2015-11-16 18:40 - 2015-10-30 23:32 - 00720896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-11-16 18:40 - 2015-10-30 23:31 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-11-16 18:40 - 2015-10-30 23:29 - 02126336 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-11-16 18:40 - 2015-10-30 23:29 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-11-16 18:40 - 2015-10-30 23:28 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-11-16 18:40 - 2015-10-30 23:23 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-11-16 18:40 - 2015-10-30 23:22 - 14457856 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-11-16 18:40 - 2015-10-30 23:21 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-11-16 18:40 - 2015-10-30 23:19 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-11-16 18:40 - 2015-10-30 23:18 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-11-16 18:40 - 2015-10-30 23:17 - 02487808 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-11-16 18:40 - 2015-10-30 23:17 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2015-11-16 18:40 - 2015-10-30 23:16 - 04527616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-11-16 18:40 - 2015-10-30 23:11 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2015-11-16 18:40 - 2015-10-30 23:10 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-11-16 18:40 - 2015-10-30 23:09 - 12854272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-11-16 18:40 - 2015-10-30 23:09 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-11-16 18:40 - 2015-10-30 23:09 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-11-16 18:40 - 2015-10-30 23:04 - 01547264 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-11-16 18:40 - 2015-10-30 22:53 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-11-16 18:40 - 2015-10-30 22:51 - 02011136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-11-16 18:40 - 2015-10-30 22:48 - 01311744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-11-16 18:40 - 2015-10-30 22:46 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-11-16 18:39 - 2015-10-20 02:12 - 05570496 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-11-16 18:39 - 2015-10-20 02:12 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-11-16 18:39 - 2015-10-20 02:12 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-11-16 18:39 - 2015-10-20 02:09 - 01730496 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-11-16 18:39 - 2015-10-20 02:06 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2015-11-16 18:39 - 2015-10-20 02:06 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2015-11-16 18:39 - 2015-10-20 02:06 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2015-11-16 18:39 - 2015-10-20 02:06 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2015-11-16 18:39 - 2015-10-20 02:05 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-11-16 18:39 - 2015-10-20 02:05 - 01216512 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2015-11-16 18:39 - 2015-10-20 02:05 - 01164800 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2015-11-16 18:39 - 2015-10-20 02:05 - 00729600 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-11-16 18:39 - 2015-10-20 02:05 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-11-16 18:39 - 2015-10-20 02:05 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2015-11-16 18:39 - 2015-10-20 02:05 - 00344064 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-11-16 18:39 - 2015-10-20 02:05 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-11-16 18:39 - 2015-10-20 02:05 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-11-16 18:39 - 2015-10-20 02:05 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-11-16 18:39 - 2015-10-20 02:05 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-11-16 18:39 - 2015-10-20 02:05 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-11-16 18:39 - 2015-10-20 02:05 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-11-16 18:39 - 2015-10-20 02:05 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-11-16 18:39 - 2015-10-20 02:05 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-11-16 18:39 - 2015-10-20 02:05 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2015-11-16 18:39 - 2015-10-20 02:05 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-11-16 18:39 - 2015-10-20 02:05 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-11-16 18:39 - 2015-10-20 02:05 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-11-16 18:39 - 2015-10-20 02:05 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-11-16 18:39 - 2015-10-20 02:05 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2015-11-16 18:39 - 2015-10-20 02:04 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2015-11-16 18:39 - 2015-10-20 02:04 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-11-16 18:39 - 2015-10-20 02:04 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-11-16 18:39 - 2015-10-20 02:00 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-11-16 18:39 - 2015-10-20 01:59 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-11-16 18:39 - 2015-10-20 01:53 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-11-16 18:39 - 2015-10-20 01:53 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-11-16 18:39 - 2015-10-20 01:53 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-11-16 18:39 - 2015-10-20 01:53 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-11-16 18:39 - 2015-10-20 01:53 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-11-16 18:39 - 2015-10-20 01:53 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-11-16 18:39 - 2015-10-20 01:53 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-11-16 18:39 - 2015-10-20 01:53 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-11-16 18:39 - 2015-10-20 01:53 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-11-16 18:39 - 2015-10-20 01:53 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-11-16 18:39 - 2015-10-20 01:53 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-11-16 18:39 - 2015-10-20 01:53 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-11-16 18:39 - 2015-10-20 01:53 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-11-16 18:39 - 2015-10-20 01:53 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-11-16 18:39 - 2015-10-20 01:53 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-11-16 18:39 - 2015-10-20 01:53 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-11-16 18:39 - 2015-10-20 01:53 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-11-16 18:39 - 2015-10-20 01:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-11-16 18:39 - 2015-10-20 01:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-11-16 18:39 - 2015-10-20 01:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-11-16 18:39 - 2015-10-20 01:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-11-16 18:39 - 2015-10-20 01:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-11-16 18:39 - 2015-10-20 01:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-11-16 18:39 - 2015-10-20 01:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-11-16 18:39 - 2015-10-20 01:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-11-16 18:39 - 2015-10-20 01:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-11-16 18:39 - 2015-10-20 01:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-11-16 18:39 - 2015-10-20 01:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-11-16 18:39 - 2015-10-20 01:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-11-16 18:39 - 2015-10-20 01:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-11-16 18:39 - 2015-10-20 01:52 - 03991488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-11-16 18:39 - 2015-10-20 01:52 - 03935680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-11-16 18:39 - 2015-10-20 01:48 - 01311768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-11-16 18:39 - 2015-10-20 01:45 - 00552960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-11-16 18:39 - 2015-10-20 01:45 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-11-16 18:39 - 2015-10-20 01:45 - 00251392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-11-16 18:39 - 2015-10-20 01:45 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-11-16 18:39 - 2015-10-20 01:45 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-11-16 18:39 - 2015-10-20 01:45 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-11-16 18:39 - 2015-10-20 01:45 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-11-16 18:39 - 2015-10-20 01:45 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2015-11-16 18:39 - 2015-10-20 01:45 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2015-11-16 18:39 - 2015-10-20 01:45 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-11-16 18:39 - 2015-10-20 01:45 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-11-16 18:39 - 2015-10-20 01:45 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2015-11-16 18:39 - 2015-10-20 01:44 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2015-11-16 18:39 - 2015-10-20 01:44 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2015-11-16 18:39 - 2015-10-20 01:44 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2015-11-16 18:39 - 2015-10-20 01:44 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-11-16 18:39 - 2015-10-20 01:44 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-11-16 18:39 - 2015-10-20 01:44 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2015-11-16 18:39 - 2015-10-20 01:39 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-11-16 18:39 - 2015-10-20 01:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-11-16 18:39 - 2015-10-20 01:35 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-11-16 18:39 - 2015-10-20 01:35 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2015-11-16 18:39 - 2015-10-20 01:35 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2015-11-16 18:39 - 2015-10-20 01:35 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-11-16 18:39 - 2015-10-20 01:35 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-11-16 18:39 - 2015-10-20 01:35 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-11-16 18:39 - 2015-10-20 01:35 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-11-16 18:39 - 2015-10-20 01:35 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-11-16 18:39 - 2015-10-20 01:35 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-11-16 18:39 - 2015-10-20 01:35 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-11-16 18:39 - 2015-10-20 01:35 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-11-16 18:39 - 2015-10-20 01:35 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-11-16 18:39 - 2015-10-20 01:35 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-11-16 18:39 - 2015-10-20 01:35 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-11-16 18:39 - 2015-10-20 01:35 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-11-16 18:39 - 2015-10-20 01:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2015-11-16 18:39 - 2015-10-20 01:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-11-16 18:39 - 2015-10-20 01:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-11-16 18:39 - 2015-10-20 01:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2015-11-16 18:39 - 2015-10-20 01:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-11-16 18:39 - 2015-10-20 01:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-11-16 18:39 - 2015-10-20 01:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-11-16 18:39 - 2015-10-20 01:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-11-16 18:39 - 2015-10-20 01:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-11-16 18:39 - 2015-10-20 01:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-11-16 18:39 - 2015-10-20 01:35 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2015-11-16 18:39 - 2015-10-20 00:41 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2015-11-16 18:39 - 2015-10-20 00:40 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2015-11-16 18:39 - 2015-10-20 00:40 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2015-11-16 18:39 - 2015-10-20 00:29 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2015-11-16 18:39 - 2015-10-20 00:29 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2015-11-16 18:39 - 2015-10-20 00:27 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2015-11-16 18:39 - 2015-10-20 00:27 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-11-16 18:39 - 2015-10-20 00:27 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-11-16 18:39 - 2015-10-20 00:27 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2015-11-16 18:39 - 2015-09-23 14:15 - 00460776 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2015-11-16 18:39 - 2015-09-23 14:15 - 00299632 _____ (Microsoft Corporation) C:\Windows\system32\bcryptprimitives.dll
2015-11-16 18:39 - 2015-09-23 14:09 - 00251000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcryptprimitives.dll
2015-11-16 18:38 - 2015-11-03 18:55 - 03211264 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-11-16 18:38 - 2015-10-29 18:50 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll
2015-11-16 18:38 - 2015-10-29 18:50 - 00072192 _____ (Microsoft Corporation) C:\Windows\system32\aelupsvc.dll
2015-11-16 18:38 - 2015-10-29 18:50 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\sdbinst.exe
2015-11-16 18:38 - 2015-10-29 18:50 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\shimeng.dll
2015-11-16 18:38 - 2015-10-29 18:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shimeng.dll
2015-11-16 18:38 - 2015-10-29 18:49 - 00295936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apphelp.dll
2015-11-16 18:38 - 2015-10-29 18:49 - 00020992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sdbinst.exe
2015-11-16 18:38 - 2015-10-13 17:41 - 00497664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2015-11-16 18:38 - 2015-10-13 17:40 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2015-11-16 18:38 - 2015-10-13 05:57 - 00950720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2015-11-16 18:38 - 2015-10-01 19:00 - 00275456 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll
2015-11-16 18:38 - 2015-10-01 18:50 - 00216064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InkEd.dll
2015-11-16 18:37 - 2015-10-01 19:00 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll
2015-11-16 17:49 - 2015-11-16 17:49 - 00021316 _____ C:\Users\martina\Desktop\AdwCleaner[C1].txt
2015-11-16 17:41 - 2015-11-16 17:44 - 00000000 ____D C:\AdwCleaner
2015-11-16 17:40 - 2015-11-16 17:39 - 01732096 _____ C:\Users\martina\Desktop\adwcleaner_5.021.exe
2015-11-16 06:34 - 2015-11-18 12:57 - 00000000 ____D C:\FRST
2015-11-16 06:32 - 2015-11-18 12:57 - 02008576 _____ (Farbar) C:\Users\martina\Desktop\FRST64.exe
2015-10-19 02:00 - 2015-10-19 02:00 - 00002027 _____ C:\Users\Public\Desktop\ESET Ochrana bankovnictví a online plateb.lnk
2015-10-19 02:00 - 2015-10-19 02:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET
2015-10-19 02:00 - 2015-10-19 02:00 - 00000000 ____D C:\ProgramData\ESET

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-11-18 12:48 - 2009-07-14 05:45 - 00021888 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-11-18 12:48 - 2009-07-14 05:45 - 00021888 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-11-18 12:43 - 2015-08-18 18:26 - 01665196 _____ C:\Windows\WindowsUpdate.log
2015-11-18 12:37 - 2011-04-12 09:34 - 00677826 _____ C:\Windows\system32\perfh005.dat
2015-11-18 12:37 - 2011-04-12 09:34 - 00146712 _____ C:\Windows\system32\perfc005.dat
2015-11-18 12:37 - 2009-07-14 06:13 - 01611912 _____ C:\Windows\system32\PerfStringBackup.INI
2015-11-18 12:33 - 2015-10-10 07:11 - 00000952 _____ C:\Windows\setupact.log
2015-11-18 12:33 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-11-18 12:32 - 2015-10-17 19:35 - 00143510 _____ C:\Windows\PFRO.log
2015-11-18 02:27 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF
2015-11-17 12:43 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system
2015-11-16 20:33 - 2015-10-17 19:35 - 00435792 _____ C:\Windows\system32\FNTCACHE.DAT
2015-11-16 20:24 - 2013-08-22 23:31 - 00000000 ____D C:\Windows\system32\MRT
2015-11-16 20:08 - 2013-03-24 03:47 - 145617392 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-11-16 19:50 - 2013-04-05 23:49 - 01587562 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2015-11-16 19:43 - 2011-04-12 09:45 - 00000000 ____D C:\Program Files\Windows Journal
2015-11-16 19:42 - 2015-02-05 20:07 - 00170280 _____ (ESET) C:\Windows\system32\Drivers\ESETCleanersDriver.sys
2015-11-16 19:26 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2015-11-16 19:21 - 2015-10-18 19:14 - 00000000 ____D C:\Users\martina\AppData\Local\CrashDumps
2015-10-19 06:20 - 2015-10-17 18:14 - 00000000 ____D C:\Program Files (x86)\187358c5-d8cc-4b44-8fa5-b33eda1ef5f1
2015-10-19 06:20 - 2013-03-24 02:41 - 00000000 ____D C:\Program Files (x86)\Adobe

==================== Files in the root of some directories =======

2014-02-21 15:18 - 2014-02-21 15:18 - 0000000 _____ () C:\Users\martina\AppData\Roaming\.NANotifyHere
2015-04-19 13:20 - 2015-04-19 13:20 - 0005872 _____ () C:\Users\martina\AppData\Roaming\3fgaZMk4JFw
2015-04-19 13:20 - 2015-04-19 13:20 - 0005872 _____ () C:\Users\martina\AppData\Roaming\ogw03zzMYKmdoUxyBMYOy66ke
2015-04-19 13:20 - 2015-04-19 13:20 - 0005872 _____ () C:\Users\martina\AppData\Roaming\pQyyQheVu67zm
2015-08-01 13:35 - 2015-08-01 13:35 - 0005632 _____ () C:\Users\martina\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-10-17 17:39 - 2015-10-17 17:39 - 0000187 _____ () C:\Users\martina\AppData\Local\dong-tom.exe.config
2013-04-05 23:57 - 2013-04-05 23:57 - 0000095 _____ () C:\Users\martina\AppData\Local\fusioncache.dat
2015-02-08 08:28 - 2015-10-17 18:41 - 0007605 _____ () C:\Users\martina\AppData\Local\resmon.resmoncfg
2015-10-17 17:50 - 2015-10-17 18:11 - 0000102 _____ () C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat

Files to move or delete:
====================
C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat


Some files in TEMP:
====================
C:\Users\martina\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-11-16 17:36

==================== End of FRST.txt ============================



===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================

Drive c: () (Fixed) (Total:88 GB) (Free:36.47 GB) NTFS ==>[drive with boot components (obtained from BCD)]
Drive d: () (Fixed) (Total:88.31 GB) (Free:4.7 GB) NTFS

Available physical RAM: 2879.39 MB
Total physical RAM: 4094.43 MB
Percentage of memory in use: 29%

==================== MBR and Partition Table ==================

Disk: 0 (Size: 186.3 GB) (Disk ID: 595FFCF9)
Partition 1: (Active) - (Size=88 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=88.3 GB) - (Type=07 NTFS)

==================== Scheduled Tasks (whitelisted) ==================

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

==================== Alternate Data Streams (whitelisted) ==================


==================== Security Center ==================

AV: ESET Smart Security 9.0.318.22 (Enabled - Up to date) {19259FAE-8396-A113-46DB-15B0E7DFA289}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: ESET Smart Security 9.0.318.22 (Enabled - Up to date) {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834}
FW: ESET Personální firewall (Enabled) {211E1E8B-C9F9-A04B-6D84-BC85190CE5F2}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Users\martina\Desktop" je 147 MB.


***** Startup Programs *****


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000


==================== End Of Log ==============================
Nahoru
Márty84
VIP
VIP
Příspěvky: 21679
Registrován: 05 pro 2009 20:08
Bydliště: Ostrava

Re: Zavirované pc

#11 Příspěvek od Márty84 »

Disk hlasi spoustu chyb. I to muze delat potize.


:arrow: Otevrete si poznamkovy blok a zkopirujte do nej tento skript

Kód: Vybrat vše

Start
CloseProcesses:
CreateRestorePoint:

HKU\S-1-5-21-3871993484-2785268054-3228482215-1001\...\Run: [] => [X]
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => No File

HKU\S-1-5-21-3871993484-2785268054-3228482215-1001\Software\Microsoft\Internet Explorer\Main,First Home Page = hxxp://g.msn.com/1me10IE10ENGB/WOL_WCP
SearchScopes: HKU\S-1-5-21-3871993484-2785268054-3228482215-1001 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
BHO: No Name -> {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} -> No File
Toolbar: HKLM - No Name - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File

CHR HomePage: Default -> search.ask.com/?gct=hp
CHR DefaultSearchURL: Default -> hxxp://www.search.ask.com/web?q={searchTerms}
CHR DefaultSearchKeyword: Default -> search.ask.com
CHR DefaultSuggestURL: Default -> hxxp://ssmsp.ask.com/query?sstype=prefix&li=ff&q={searchTerms}

R3 MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [X]

2015-11-16 21:59 - 2015-11-16 21:59 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-11-16 21:56 - 2015-11-16 21:56 - 22908888 _____ (Malwarebytes ) C:\Users\martina\Desktop\mbam-setup-2.2.0.1024.exe
2015-11-17 04:31 - 2015-11-17 04:32 - 00004374 _____ C:\Users\martina\Desktop\log mbam.rar
2015-04-19 13:20 - 2015-04-19 13:20 - 0005872 _____ () C:\Users\martina\AppData\Roaming\3fgaZMk4JFw
2015-04-19 13:20 - 2015-04-19 13:20 - 0005872 _____ () C:\Users\martina\AppData\Roaming\ogw03zzMYKmdoUxyBMYOy66ke
2015-04-19 13:20 - 2015-04-19 13:20 - 0005872 _____ () C:\Users\martina\AppData\Roaming\pQyyQheVu67zm

Hosts:
EmptyTemp:
Reboot:
End
Vlevo nahore kliknete na napis Soubor
Kliknete na napis Ulozit jako...
Napiste spravne ten cerveny nazev fixlist a ulozte na plochu.
Vypnete antivir i dalsi pripadne zabezpeceni.
Spustte FRST jako spravce, kliknete na napis Fix a program vykona prikazy.
Po restartu pc by se mel objevit novy log - s nazvem fixlog, ten mi sem zase zkopirujte.
Pokud máte dotaz, který není určen pro veřejnost, můžete mi napsat na mail marty84zavináčforum.viry.cz

Možnost podpořit naše fórum https://platba.viry.cz/payment/

Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
Nahoru
anittra6
2. Stupeň Varování
Příspěvky: 65
Registrován: 25 črc 2011 19:35

Re: Zavirované pc

#12 Příspěvek od anittra6 »

Tady máte log. Nějakej program na vyřešení chyb hdd? Zatím díky.

Fix result of Farbar Recovery Scan Tool (x64) Version:18-11-2015
Ran by martina (2015-11-18 20:17:58) Run:1
Running from C:\Users\martina\Desktop
Loaded Profiles: martina & UpdatusUser (Available Profiles: martina & UpdatusUser & anittra)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
CloseProcesses:
CreateRestorePoint:

HKU\S-1-5-21-3871993484-2785268054-3228482215-1001\...\Run: [] => [X]
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => No File

HKU\S-1-5-21-3871993484-2785268054-3228482215-1001\Software\Microsoft\Internet Explorer\Main,First Home Page = hxxp://g.msn.com/1me10IE10ENGB/WOL_WCP
SearchScopes: HKU\S-1-5-21-3871993484-2785268054-3228482215-1001 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
BHO: No Name -> {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} -> No File
Toolbar: HKLM - No Name - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File

CHR HomePage: Default -> search.ask.com/?gct=hp
CHR DefaultSearchURL: Default -> hxxp://www.search.ask.com/web?q={searchTerms}
CHR DefaultSearchKeyword: Default -> search.ask.com
CHR DefaultSuggestURL: Default -> hxxp://ssmsp.ask.com/query?sstype=prefix&li=ff&q={searchTerms}

R3 MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [X]

2015-11-16 21:59 - 2015-11-16 21:59 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-11-16 21:56 - 2015-11-16 21:56 - 22908888 _____ (Malwarebytes ) C:\Users\martina\Desktop\mbam-setup-2.2.0.1024.exe
2015-11-17 04:31 - 2015-11-17 04:32 - 00004374 _____ C:\Users\martina\Desktop\log mbam.rar
2015-04-19 13:20 - 2015-04-19 13:20 - 0005872 _____ () C:\Users\martina\AppData\Roaming\3fgaZMk4JFw
2015-04-19 13:20 - 2015-04-19 13:20 - 0005872 _____ () C:\Users\martina\AppData\Roaming\ogw03zzMYKmdoUxyBMYOy66ke
2015-04-19 13:20 - 2015-04-19 13:20 - 0005872 _____ () C:\Users\martina\AppData\Roaming\pQyyQheVu67zm

Hosts:
EmptyTemp:
Reboot:
End
*****************

Processes closed successfully.
Restore point was successfully created.
HKU\S-1-5-21-3871993484-2785268054-3228482215-1001\Software\Microsoft\Windows\CurrentVersion\Run\\ => value removed successfully
"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\00avast" => key removed successfully
HKCR\CLSID\{472083B0-C522-11CF-8763-00608CC02F24} => key not found.
HKU\S-1-5-21-3871993484-2785268054-3228482215-1001\Software\Microsoft\Internet Explorer\Main\\First Home Page => value removed successfully
"HKU\S-1-5-21-3871993484-2785268054-3228482215-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}" => key removed successfully
HKCR\CLSID\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => key not found.
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}" => key removed successfully
HKCR\CLSID\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} => key not found.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} => value removed successfully
HKCR\CLSID\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} => key not found.
Chrome HomePage => removed successfully
Chrome DefaultSearchURL => removed successfully
Chrome DefaultSearchKeyword => removed successfully
Chrome DefaultSuggestURL => removed successfully
MBAMSwissArmy => Service stopped successfully.
MBAMSwissArmy => service removed successfully
C:\ProgramData\Malwarebytes => moved successfully
C:\Users\martina\Desktop\mbam-setup-2.2.0.1024.exe => moved successfully
C:\Users\martina\Desktop\log mbam.rar => moved successfully
C:\Users\martina\AppData\Roaming\3fgaZMk4JFw => moved successfully
C:\Users\martina\AppData\Roaming\ogw03zzMYKmdoUxyBMYOy66ke => moved successfully
C:\Users\martina\AppData\Roaming\pQyyQheVu67zm => moved successfully
C:\Windows\System32\Drivers\etc\hosts => moved successfully
Hosts restored successfully.
EmptyTemp: => 225.7 MB temporary data Removed.


The system needed a reboot.

==== End of Fixlog 20:18:36 ====
Nahoru
Márty84
VIP
VIP
Příspěvky: 21679
Registrován: 05 pro 2009 20:08
Bydliště: Ostrava

Re: Zavirované pc

#13 Příspěvek od Márty84 »

anittra6 píše:Nějakej program na vyřešení chyb hdd?
Na to zadny program neni.



:!: Vsechny tyto programy - vcetne pripadne instalace - spoustejte jako spravce (kliknete na ne pravym mysidlem a zvolte - Spustit jako spravce)

:arrow:
vyosek píše: :arrow: DelFix https://toolslib.net/downloads/finish/2/
  • Stahnete a spustte
  • Ponechte zatrzitkou pouze u volby Remove disinfection tools
  • Kliknete na Run
:arrow: Stahnete Ccleaner http://www.filehippo.com/download_ccleaner a spustte.
Pri instalaci pozor na toolbar (ci jine doplnky), jestli vam nabidne jeho instalaci, tak zruste zatrzitko.
Po spusteni se ocitnete ve funkci Cistic. Vlevo je spousta zatrzitek. Pozor dejte hlavne na kos, pokud nechate zatrzene, vzdy ho vysype.
Dale, podle toho jak je nastaven, smaze vsechna hesla ulozena na netu!!! Takze jestli mate nastavene, at si pocitac hesla pamatuje (coz neni pro bezpecnost dobre), budete je muset pak napsat znova rucne (napr mail, facebook, ruzna fora atd.)
Kliknete na Analyzovat a az dokonci analyzu, kliknete na Spustit Cleaner.
Potom kliknete vlevo na funkci Registry
Kliknete na Hledej problemy, kdyz najde, kliknete na Opravit problemy. Nabidne Vam zalohu, tu udelejte a ulozte ji tak, at ji v pripade potreby najdete.
Funkce Nastroje umoznuje odinstalovani programu. Je dukladnejsi nez samotny windows!
(Pokud je v pc vice uzivatelskych uctu, pouzijte program i v nich)

:arrow: Defragmentujte disk(y) (SSD Disky ne!)
Stahnete program Defraggler https://www.piriform.com/defraggler/download/standard
Pri instalaci opet pozor na toolbar a dalsi nesmysly.
Po nainstalovani program spustte a kliknete na Analyzovat, po analyze kliknete na Defragmentovat a programek odvede svou praci.




:arrow: Pak napiste, jak to s pc vypada.
Pokud máte dotaz, který není určen pro veřejnost, můžete mi napsat na mail marty84zavináčforum.viry.cz

Možnost podpořit naše fórum https://platba.viry.cz/payment/

Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
Nahoru
anittra6
2. Stupeň Varování
Příspěvky: 65
Registrován: 25 črc 2011 19:35

Re: Zavirované pc

#14 Příspěvek od anittra6 »

Zdravím Vás, omlouvám se za prodlevu. Ntb je o 100% lepší, ale často při procházení webu vyskakují nesmyslné stránky....v prohlížeči mám nastavené blokaci vyskakujících oken, v esetu taky (mám placenou verzi). Je to jediný problém který setrvává. Díky za rady.
Nahoru
Márty84
VIP
VIP
Příspěvky: 21679
Registrován: 05 pro 2009 20:08
Bydliště: Ostrava

Re: Zavirované pc

#15 Příspěvek od Márty84 »

:???: Dela to ve vsech prohlizecich?


:arrow: Stahnete novy AdwCleaner https://toolslib.net/downloads/finish/1/ a ulozte ho na plochu.
Ukoncete vsechny programy, jinak to AdwCleaner udela za vas.
Kliknete na nej pravym mysidlem a levym na Spustit jako spravce.
Kliknete na Scan a pockejte, az kontrola dobehne.
Pak kliknete na Cleaning
Program zacne pracovat (muze dojit k restartu pc) a vyplivne log (pripadne bude zde C:\AdwCleaner\AdwCleaner[C?].txt ). Ten mi sem zkopirujte.

vyosek píše: :arrow: Stahnete Junkware Removal Tool http://thisisudax.org/downloads/JRT.exe
  • Ulozte nejlepe na plochu
  • Po spusteni se zobrazi licencni podminky, stisknete libovolnou klavesu
  • Probehne vytvoreni zalohy a nasledne prohledavani
  • Probehne skenovani a pak se objevi log, pripadne bude ulozen v c:\JRT jako JRT.txt, ten sem vlozte

:arrow: Postupujte podle navodu kolegy
vyosek píše: :arrow: Stahnete Zoek.exe http://hijackthis.nl/smeenk/ a ulozte jej na plochu
  • Pokud pouzivate Win Vista ci W7, kliknete na Zoek pravym a dejte Run As Administrator ci Spustit jako spravce
  • Do okna vlozte skript nize

  • Kód: Vybrat vše

    autoclean;
autoclean;
resethosts;
emptyclsid;
IEdefaults;
FFdefaults;
CHRdefaults;
emptyIEcache;
emptyFFcache;
emptyCHRcache;
emptyalltemp;
emptyflash;
emptyjava;
emptyrecycle.bin;
  • Nasledne kliknete na Run Script
  • PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem



20.2. pro neaktivitu :lock: http://forum.viry.cz/viewtopic.php?f=12&t=123975
Pokud máte dotaz, který není určen pro veřejnost, můžete mi napsat na mail marty84zavináčforum.viry.cz

Možnost podpořit naše fórum https://platba.viry.cz/payment/

Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
Nahoru
Zamčeno

Zpět na „Řešení problémů, logy“