Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Zavirované PC

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Zamčeno
Zpráva
Autor
JanKubala
Návštěvník
Návštěvník
Příspěvky: 29
Registrován: 15 dub 2016 11:40

Zavirované PC

#1 Příspěvek od JanKubala »

Dobrý den,
prosím o pomoc jak vyčistit PC od viru apod. Děkuji za ochotu
přikládám log

Logfile of random's system information tool 1.10 (written by random/random)
Run by Jan at 2016-04-15 12:49:22
Microsoft Windows 8 Pro
System drive C: has 42 GB (37%) free of 114 GB
Total RAM: 8175 MB (67% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:49:23, on 15. 4. 2016
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v10.0 (10.00.9200.17568)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files (x86)\OscarX7Editor5Mode\OscarX7Editor5Mode\OscarEditor.exe
C:\Users\Jan\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeterCC.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files (x86)\WIBUKEY\Server\WkSvMgr.exe
C:\Program Files (x86)\Marvell\storage\tray\MarvellTray.exe
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Program Files\trend micro\Jan.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBRGNclVS1AC6sNoHoTG1nEZQLY5Wtlp2hkLTQHocypNIj46MH650xtyZB3R98ApKhzJSMMv6yBwR-2YkBPk3ly6UcA8R9FTKqQD1kwc9X4IT3Ou4t3TEPl0LTXl1INeeQmt7ufjr1KCotF59Zlu3Kmgf4hsIYyd5Vwi1iUy-TDkAu4VhEs3JQSxw,,&q={searchTerms}
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBRGNclVS1AC6sNoHoTG1nEZQLY5Wtlp2hkLTQHocypNIj46MH650xtyZB3R98ApKhzJSMMv6yBwR-2YkBPk3ly6UcA8R9FTKqQD1kwc9X4IT3Ou4t3TEPl0LTXl1INeeQmt7ufjr1KCotF59Zlu3Kmgf4hsIYyd5Vwi1iUy-TDkAu4VhEs3JQSxw,,&q={searchTerms}
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBRGNclVS1AC6sNoHoTG1nEZQLY5Wtlp2hkLTQHocypNIj46MH650xtyZB3R98ApKhzJSMMv6yBwR-2YkBPk3ly6UcA8R9FTKqQD1kwc9X4IT3Ou4t3TEPl0LTXl1INeeQmt7ufjr1KCotF59Zlu3Kmgf4hsIYyd5Vwi1iUy-TDkAu4VhEs3JQSxw,,&q={searchTerms}
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://%66%65%65%64.%68%65%6C%70%65%72%62%61%72.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBRGNclVS1AC6sNoHoTG1nEZQLY5Wtlp2hkLTQHocypNIj46MH650xtyZB3R98ApKhzJSMMv6yBwR-2YkBPk3ly6UcA8R9J7MVlC85Tm8OcFt9LwCZiTY63KjA6L2mUl2A0fHL7hcdF79BNyfomnUewHH3FHegZnoh2FID0iT5HfhPKAdOU1a9N4w,,
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.seznam.cz/?clid=22668
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.seznam.cz/?sourceid=quick ... earchTerms}
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.seznam.cz/?clid=22668
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBRGNclVS1AC6sNoHoTG1nEZQLY5Wtlp2hkLTQHocypNIj46MH650xtyZB3R98ApKhzJSMMv6yBwR-2YkBPk3ly6UcA8R9FTKqQD1kwc9X4IT3Ou4t3TEPl0LTXl1INeeQmt7ufjr1KCotF59Zlu3Kmgf4hsIYyd5Vwi1iUy-TDkAu4VhEs3JQSxw,,&q={searchTerms}
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_73\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.1.355.0\BingExt.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_73\bin\jp2ssv.dll
O3 - Toolbar: Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files (x86)\Microsoft\BingBar\7.1.355.0\BingExt.dll" (file missing)
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [MSUTray] C:\Program Files (x86)\Marvell\storage\tray\MarvellTray.exe
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [KiesTrayAgent] C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [Dropbox] "C:\Program Files (x86)\Dropbox\Client\Dropbox.exe" /systemstartup
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\Run: [OscarX7Mouse5Mode] "C:\Program Files (x86)\OscarX7Editor5Mode\OscarX7Editor5Mode\OscarEditor.exe" Minimum
O4 - HKCU\..\Run: [HP Officejet 7610 series (NET)] "C:\Program Files\HP\HP Officejet 7610 series\Bin\ScanToPCActivationApp.exe" -deviceID "CN51S3M160064N:NW" -scfn "HP Officejet 7610 series (NET)" -AutoStart 1
O4 - HKCU\..\Run: [DAEMON Tools Lite Automount] "C:\Program Files\DAEMON Tools Lite\DTAgent.exe" -autorun
O4 - HKCU\..\Run: [cz.seznam.software.autoupdate] "C:\Users\Jan\AppData\Roaming\Seznam.cz\szninstall.exe" -c
O4 - HKCU\..\Run: [cz.seznam.software.szndesktop] "C:\Users\Jan\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q
O4 - Startup: Sledovat výstrahy inkoustu - HP Officejet 7610 series (Síť).lnk = ?
O4 - Global Startup: CodeMeter Control Center.lnk = C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeterCC.exe
O4 - Global Startup: Network Server.lnk = C:\Program Files (x86)\WIBUKEY\Server\WkSvMgr.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted IP range: http://127.0.0.1
O15 - Trusted IP range: http://localhost
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O20 - AppInit_DLLs: C:\ProgramData\Quoteex\Fun-Tone.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: AvastVBox COM Service (AvastVBoxSvc) - Avast Software - C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
O23 - Service: BugreportW - Unknown owner - C:\Program Files (x86)\yesbnd\mbat.exe
O23 - Service: COMODO Internet Security Helper Service (CmdAgent) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: COMODO Virtual Service Manager (cmdvirth) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe
O23 - Service: CodeMeter Runtime Server (CodeMeter.exe) - WIBU-SYSTEMS AG - C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe
O23 - Service: Dropbox Update Service (dbupdate) (dbupdate) - Dropbox, Inc. - C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
O23 - Service: Dropbox Update Service (dbupdatem) (dbupdatem) - Dropbox, Inc. - C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
O23 - Service: Disc Soft Lite Bus Service - Disc Soft Ltd - C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Fedaryqeule Server (FedaryqeuleServerSrv) - Unknown owner - C:\Program Files (x86)\Fedaryqeule\FedaryqeuleServerSrv.exe
O23 - Service: FLEXnet Licensing Service 64 - Flexera Software LLC - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Marvell Storage Management Service (Marvell Storage Management) - Marvell - C:\Program Files (x86)\Marvell\storage\svc\mvraidsvc.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: MSU Web Service (MSUWebService) - Apache Software Foundation - C:\Program Files (x86)\Marvell\storage\Apache2\bin\httpd.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: SAMSUNG Mobile Connectivity Service (ss_conn_service) - DEVGURU Co., LTD. - C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 13540 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
winlogon.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Windows\system32\nvvsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
"dwm.exe"
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Microsoft\BingBar\7.1.355.0\BBSvc.exe"
"C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe"
"C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe"
dashost.exe {fc214be0-d634-4163-ae72e6b9a828ec5d}
"C:\Program Files (x86)\Marvell\storage\svc\mvraidsvc.exe"
"C:\Program Files (x86)\Marvell\storage\Apache2\bin\httpd.exe" -k runservice
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe"
C:\Windows\slsvc.exe
C:\Windows\PersonalizeEnabler.exe
"C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe"
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Marvell\storage\Apache2\bin\httpd.exe" -d "C:/Program Files (x86)/Marvell/storage/Apache2"
"C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe" /ModeAvMonitor -Embedding
"C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe" 51b5c525-10a3-4611-92fe-6a67b72112ba
\??\C:\Windows\system32\conhost.exe 0x4
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Program Files\COMODO\COMODO Internet Security\cistray.exe"
taskhostex.exe
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe" serviceapp
C:\Windows\Explorer.EXE
\??\C:\Windows\system32\conhost.exe 0x4
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
"C:\Program Files\COMODO\COMODO Internet Security\cis.exe" --alertsUI
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\CCleaner\CCleaner.exe" /MONITOR /uac
"C:\Program Files (x86)\OscarX7Editor5Mode\OscarX7Editor5Mode\OscarEditor.exe" Minimum
"C:\Program Files\HP\HP Officejet 7610 series\Bin\ScanToPCActivationApp.exe" -deviceID "CN51S3M160064N:NW" -scfn "HP Officejet 7610 series (NET)" -AutoStart 1
"C:\Program Files\HP\HP Officejet 7610 series\Bin\HPNetworkCommunicatorCom.exe" -Embedding
"C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe"
szndesktop.exe default start
"C:\Users\Jan\AppData\Roaming\Seznam.cz\bin\listicka-x64.exe"
\??\C:\Windows\system32\conhost.exe 0x4
"C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeterCC.exe"
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
"C:\Program Files (x86)\WIBUKEY\Server\WkSvMgr.exe"
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Windows\system32\RunDll32.exe" "C:\Program Files\HP\HP Officejet 7610 series\bin\HPStatusBL.dll",RunDLLEntry SERIALNUMBER=CN51S3M160064N;CONNECTION=NW;MONITOR=1;
"C:\Program Files (x86)\Marvell\storage\tray\MarvellTray.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe"
"C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe"
"C:\Program Files (x86)\Dropbox\Client\Dropbox.exe" /systemstartup
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
C:\Windows\sysWOW64\wbem\wmiprvse.exe -Embedding
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe" --channel="6020.0.448795282\2070602204" -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" 6020 "\\.\pipe\gecko-crash-server-pipe.6020" tab
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\msiexec.exe /V
"C:\Program Files (x86)\Microsoft\BingBar\7.1.355.0\SeaPort.exe"

"C:\Windows\System32\Taskmgr.exe" /3
C:\Windows\System32\svchost.exe -k WerSvcGroup
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
"C:\Users\Jan\Desktop\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\DropboxUpdateTaskMachineCore.job - C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe /c
C:\Windows\tasks\DropboxUpdateTaskMachineUA.job - C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe /ua /installsource scheduler

=========Mozilla firefox=========

ProfilePath - C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\9t686j9i.default

prefs.js - "browser.startup.homepage" - "http://www.centrum.cz/"

"wrc@avast.com"=C:\Program Files\AVAST Software\Avast\WebRep\FF
"sp@avast.com"=C:\Program Files\AVAST Software\Avast\SafePrice\FF


[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 21.0.0.213 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_21_0_0_213.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/ShockwavePlayer]
"Description"=Adobe Shockwave Player
"Path"=C:\Windows\SysWOW64\Adobe\Director\np32dsw_1215155.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=11.73.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre1.8.0_73\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.73.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre1.8.0_73\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVision]
"Description"=NVIDIA stereo images plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVisionStreaming]
"Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 21.0.0.213 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_21_0_0_213.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=11.73.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files\Java\jre1.8.0_73\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=11.73.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre1.8.0_73\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll


C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\9t686j9i.default\extensions\
toolbar@centrumholdings.com
{ea614400-e918-4741-9a97-7a972ff7c30b}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre1.8.0_73\bin\ssv.dll [2016-02-05 551520]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2016-02-10 901600]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre1.8.0_73\bin\jp2ssv.dll [2016-02-05 212576]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_73\bin\ssv.dll [2016-02-05 460384]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-02-10 678656]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d2ce3e00-f94a-4740-988e-03dc2f38c34f}]
Bing Bar Helper - C:\Program Files (x86)\Microsoft\BingBar\7.1.355.0\BingExt.dll [2012-01-25 1253144]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_73\bin\jp2ssv.dll [2016-02-05 172640]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{8dcb7100-df86-4384-8842-8fa844297b3f} - Bing Bar - C:\Program Files (x86)\Microsoft\BingBar\7.1.355.0\BingExt.dll [2012-01-25 1253144]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2015-08-28 2634872]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2014-12-03 12503184]
"ShadowPlay"=C:\Windows\system32\nvspcap64.dll [2015-08-27 1710568]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2014-12-06 7063832]
"OscarX7Mouse5Mode"=C:\Program Files (x86)\OscarX7Editor5Mode\OscarX7Editor5Mode\OscarEditor.exe [2015-01-06 3521024]
"HP Officejet 7610 series (NET)"=C:\Program Files\HP\HP Officejet 7610 series\Bin\ScanToPCActivationApp.exe [2015-06-19 2631784]
"DAEMON Tools Lite Automount"=C:\Program Files\DAEMON Tools Lite\DTAgent.exe [2015-10-10 4468056]
"cz.seznam.software.autoupdate"=C:\Users\Jan\AppData\Roaming\Seznam.cz\szninstall.exe [2016-03-19 1062472]
"cz.seznam.software.szndesktop"=C:\Users\Jan\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [2016-03-19 103080]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2016-03-24 7139256]
"MSUTray"=C:\Program Files (x86)\Marvell\storage\tray\MarvellTray.exe [2014-12-03 1213952]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-10-08 1022152]
"APSDaemon"=C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [2014-12-16 59720]
"GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2016-03-18 30040]
"KiesTrayAgent"=C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [2015-07-15 311616]
"QuickTime Task"=C:\Program Files (x86)\QuickTime\QTTask.exe [2015-03-11 421888]
"HP Software Update"=C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [2015-06-19 96056]
""= []
"Dropbox"=C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [2016-04-15 23248560]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2016-02-05 594992]
"seznam-listicka-distribuce"=C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [2016-03-19 1062472]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
CodeMeter Control Center.lnk - C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeterCC.exe
Network Server.lnk - C:\Program Files (x86)\WIBUKEY\Server\WkSvMgr.exe

C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Sledovat výstrahy inkoustu - HP Officejet 7610 series (Síť).lnk - C:\Windows\system32\RunDll32.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"PromptOnSecureDesktop"=0
"ConsentPromptBehaviorAdmin"=0
"SoftwareSASGeneration"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
""=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe"="C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe:*:Enabled:CodeMeter Runtime Server"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe"="C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe:*:Enabled:CodeMeter Runtime Server"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.YUY2"=msyuv.dll
"vidc.i420"=lvcod64.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"VIDC.YVYU"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"aux4"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"aux5"=wdmaud.drv
"MSVideo"=vfwwdm32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"wave7"=wdmaud.drv
"midi7"=wdmaud.drv
"mixer7"=wdmaud.drv
"wave8"=wdmaud.drv
"midi8"=wdmaud.drv
"mixer8"=wdmaud.drv
"wave9"=wdmaud.drv
"midi9"=wdmaud.drv
"mixer9"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
.scr - open - C:\Windows\system32\notepad.exe "%1"
.scr - install -
.scr - config -

======List of files/folders created in the last 1 month======

2016-04-15 12:44:14 ----D---- C:\rsit
2016-04-15 12:44:14 ----D---- C:\Program Files\trend micro
2016-04-15 11:50:33 ----D---- C:\Windows\LastGood.Tmp
2016-04-15 08:12:43 ----D---- C:\Windows\system32\appmgmt
2016-04-15 08:06:54 ----D---- C:\ProgramData\Thunder Network
2016-04-15 08:06:44 ----D---- C:\ProgramData\04154d61-6b67-1
2016-04-15 08:06:44 ----D---- C:\ProgramData\04154d61-2367-0
2016-04-15 07:56:46 ----D---- C:\Program Files (x86)\yesbnd
2016-04-15 07:56:46 ----D---- C:\Program Files (x86)\Fedaryqeule
2016-04-15 07:47:14 ----D---- C:\ProgramData\Quoteexs
2016-04-15 07:47:03 ----D---- C:\ProgramData\Quoteex
2016-04-15 07:47:03 ----A---- C:\Users\Jan\AppData\Roaming\noah.dat
2016-04-15 07:47:03 ----A---- C:\Users\Jan\AppData\Roaming\Main.dat
2016-04-15 07:47:03 ----A---- C:\Users\Jan\AppData\Roaming\agent.dat
2016-04-15 07:46:57 ----D---- C:\ProgramData\CloudPrinter
2016-04-15 07:46:56 ----A---- C:\Users\Jan\AppData\Roaming\ReSontex.exe
2016-04-15 07:46:56 ----A---- C:\Users\Jan\AppData\Roaming\lobby.dat
2016-04-15 07:46:56 ----A---- C:\Users\Jan\AppData\Roaming\ApplicationHosting.dat
2016-04-15 07:46:43 ----A---- C:\Users\Jan\AppData\Roaming\Installer.dat
2016-04-15 07:19:40 ----A---- C:\Windows\system32\XAudio2_7.dll
2016-04-15 07:19:40 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2016-04-15 07:19:39 ----A---- C:\Windows\system32\xactengine3_7.dll
2016-04-15 07:19:38 ----A---- C:\Windows\system32\d3dcsx_43.dll
2016-04-15 07:19:38 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2016-04-15 07:16:11 ----A---- C:\Windows\system32\AcSignOpt.exe
2016-04-15 07:15:48 ----D---- C:\Autodesk
2016-04-13 06:59:26 ----A---- C:\Windows\system32\invagent.dll
2016-04-13 06:59:26 ----A---- C:\Windows\system32\generaltel.dll
2016-04-13 06:59:26 ----A---- C:\Windows\system32\devinv.dll
2016-04-13 06:59:26 ----A---- C:\Windows\system32\CompatTelRunner.exe
2016-04-13 06:59:26 ----A---- C:\Windows\system32\appraiser.dll
2016-04-13 06:59:26 ----A---- C:\Windows\system32\aepic.dll
2016-04-13 06:59:26 ----A---- C:\Windows\system32\aeinv.dll
2016-04-13 06:59:26 ----A---- C:\Windows\system32\acmigration.dll
2016-03-24 21:37:44 ----D---- C:\ProgramData\BIMTech
2016-03-24 21:32:53 ----D---- C:\Program Files (x86)\BIMTECH
2016-03-22 21:41:29 ----D---- C:\Program Files (x86)\simplitec
2016-03-19 14:40:41 ----D---- C:\Program Files (x86)\Seznam.cz
2016-03-19 14:40:06 ----D---- C:\Users\Jan\AppData\Roaming\Seznam.cz
2016-03-18 07:58:30 ----D---- C:\Program Files (x86)\Microsoft ASP.NET

======List of files/folders modified in the last 1 month======

2016-04-15 12:49:22 ----D---- C:\Windows\SysWOW64
2016-04-15 12:44:25 ----D---- C:\Windows\Prefetch
2016-04-15 12:44:14 ----RD---- C:\Program Files
2016-04-15 12:44:11 ----D---- C:\Windows\Temp
2016-04-15 12:42:20 ----RD---- C:\Windows\System32
2016-04-15 12:42:20 ----D---- C:\Windows\Inf
2016-04-15 12:42:20 ----A---- C:\Windows\system32\PerfStringBackup.INI
2016-04-15 12:37:30 ----D---- C:\Program Files (x86)\Mozilla Firefox
2016-04-15 12:36:06 ----HD---- C:\ProgramData
2016-04-15 12:36:02 ----D---- C:\ProgramData\NVIDIA
2016-04-15 12:35:52 ----D---- C:\Windows
2016-04-15 12:19:49 ----D---- C:\Users\Jan\AppData\Roaming\AIMP3
2016-04-15 12:19:26 ----D---- C:\Windows\Minidump
2016-04-15 12:19:26 ----D---- C:\Windows\Logs
2016-04-15 12:19:26 ----D---- C:\Windows\debug
2016-04-15 12:02:03 ----D---- C:\Windows\system32\sru
2016-04-15 11:59:08 ----D---- C:\Windows\system32\Tasks
2016-04-15 11:59:08 ----D---- C:\Program Files (x86)\Google
2016-04-15 11:59:07 ----SHD---- C:\Windows\Installer
2016-04-15 11:59:07 ----D---- C:\Windows\Tasks
2016-04-15 11:56:49 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2016-04-15 11:55:43 ----RD---- C:\Program Files (x86)
2016-04-15 11:50:33 ----D---- C:\Windows\system32\Drivers
2016-04-15 11:48:39 ----D---- C:\Windows\system32\DriverStore
2016-04-15 11:32:38 ----D---- C:\KMPlayer
2016-04-15 11:18:37 ----D---- C:\ProgramData\Autodesk
2016-04-15 11:18:35 ----D---- C:\Program Files\Common Files\Autodesk Shared
2016-04-15 09:03:57 ----D---- C:\Program Files (x86)\TDataDld
2016-04-15 08:19:17 ----D---- C:\Windows\Microsoft.NET
2016-04-15 08:17:22 ----D---- C:\Program Files (x86)\Opera
2016-04-15 07:47:07 ----D---- C:\Program Files (x86)\Common Files
2016-04-15 07:33:59 ----D---- C:\Users\Jan\AppData\Roaming\Autodesk
2016-04-15 07:30:54 ----D---- C:\Program Files (x86)\Dropbox
2016-04-15 07:24:39 ----D---- C:\Windows\system32\config
2016-04-15 07:22:18 ----D---- C:\ProgramData\Package Cache
2016-04-15 07:21:29 ----SD---- C:\Windows\Downloaded Program Files
2016-04-15 07:20:53 ----RSD---- C:\Windows\Fonts
2016-04-15 07:19:35 ----RSD---- C:\Windows\assembly
2016-04-15 07:19:27 ----SHD---- C:\System Volume Information
2016-04-15 07:19:20 ----D---- C:\Windows\system32\catroot2
2016-04-15 07:19:10 ----D---- C:\Windows\WinSxS
2016-04-15 07:00:21 ----HD---- C:\Program Files\WindowsApps
2016-04-15 07:00:21 ----D---- C:\Windows\AUInstallAgent
2016-04-13 20:07:20 ----SD---- C:\Windows\system32\CompatTel
2016-04-13 20:07:20 ----D---- C:\Windows\system32\appraiser
2016-04-13 07:16:19 ----D---- C:\ProgramData\Microsoft Help
2016-04-13 07:15:45 ----D---- C:\Windows\CbsTemp
2016-04-13 07:15:42 ----D---- C:\Windows\system32\MRT
2016-04-13 07:12:30 ----A---- C:\Windows\system32\MRT.exe
2016-04-12 16:32:18 ----D---- C:\Windows\SoftwareDistribution
2016-04-07 09:12:38 ----SD---- C:\Users\Jan\AppData\Roaming\Microsoft
2016-04-06 21:37:52 ----D---- C:\Program Files (x86)\Mozilla Thunderbird
2016-04-06 18:49:31 ----D---- C:\Práce
2016-04-06 14:17:08 ----A---- C:\Windows\system32\cmdcsr.dll
2016-04-06 14:16:56 ----A---- C:\Windows\SYSWOW64\guard32.dll
2016-04-06 14:16:50 ----A---- C:\Windows\system32\guard64.dll
2016-04-06 14:14:56 ----A---- C:\Windows\system32\cmdvrt64.dll
2016-04-06 14:14:01 ----A---- C:\Windows\system32\cmdkbd64.dll
2016-04-06 14:12:07 ----A---- C:\Windows\SYSWOW64\cmdvrt32.dll
2016-04-06 14:11:12 ----A---- C:\Windows\SYSWOW64\cmdkbd32.dll
2016-03-23 10:41:03 ----D---- C:\ProgramData\simplitec
2016-03-18 10:59:17 ----A---- C:\Windows\win.ini
2016-03-18 07:59:48 ----D---- C:\Program Files (x86)\Microsoft Works

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2016-02-10 74544]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2016-02-10 287016]
R0 ngvss;ngvss; C:\Windows\system32\drivers\ngvss.sys [2016-02-10 154024]
R1 aswKbd;aswKbd; C:\Windows\system32\drivers\aswKbd.sys [2016-02-10 37144]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2016-02-10 103064]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2016-03-10 1070904]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2016-02-24 463744]
R1 cmderd;COMODO Internet Security Eradication Driver; C:\Windows\System32\DRIVERS\cmderd.sys [2016-04-06 32224]
R1 cmdGuard;COMODO Internet Security Sandbox Driver; C:\Windows\system32\DRIVERS\cmdguard.sys [2016-04-06 846104]
R1 cmdhlp;COMODO Internet Security Helper Driver; C:\Windows\system32\DRIVERS\cmdhlp.sys [2016-04-06 45600]
R1 inspect;@oem8.inf,%inspect_Desc%;COMODO Internet Security Firewall Driver; C:\Windows\system32\DRIVERS\inspect.sys [2016-04-06 138560]
R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2016-02-10 37656]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2016-03-10 107792]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2016-02-10 165344]
R2 RtNdPt630;@oem14.inf,%NDISPROT_Desc%;Realtek NDIS Protocol Driver; C:\Windows\system32\DRIVERS\RtNdPt630.sys [2014-12-03 28888]
R2 speedfan;speedfan; \??\C:\Windows\SysWOW64\speedfan.sys [2012-12-29 28664]
R2 VBoxAswDrv;VBoxAsw Support Driver; \??\C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [2016-02-10 310904]
R3 dtlitescsibus;@oem55.inf,%DTLITESCSIBUS.DeviceDesc%;DAEMON Tools Lite Virtual SCSI Bus; C:\Windows\System32\drivers\dtlitescsibus.sys [2015-10-10 30264]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2014-12-03 4065296]
R3 LVRS64;@oem1.inf,%lvrs.SrvDesc%;Logitech RightSound Filter Driver; C:\Windows\system32\DRIVERS\lvrs64.sys [2012-10-26 351520]
R3 LVUVC64;@oem2.inf,%PID_0805_DD%(UVC);Logitech Webcam 300(UVC); C:\Windows\system32\DRIVERS\lvuvc64.sys [2012-10-26 4758176]
R3 MEIx64;@oem7.inf,%HECI_SvcDesc%;Intel(R) Management Engine Interface ; C:\Windows\System32\drivers\HECIx64.sys [2010-10-20 56344]
R3 Mv_Process;Marvell process notification.; \??\c:\windows\syswow64\mv_process.sys [2011-11-22 14376]
R3 NVHDA;@oem50.inf,%NVHDA.SvcDesc%;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2015-07-15 204648]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2015-09-01 11089200]
R3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2015-08-27 19576]
R3 nvvad_WaveExtensible;@oem52.inf,%nvvad_WaveExtensible.SvcDesc%;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2015-09-01 50472]
R3 RTL8168;@netrt630x64.inf,%rtl8168.Service.DispName%;Realtek 8168 NT Driver; C:\Windows\system32\DRIVERS\Rt630x64.sys [2016-04-15 589824]
R3 StillCam;@sti.inf,%StillCam.SvcDesc%;Ovladač digitálního fotoaparátu pro sériový port; C:\Windows\system32\DRIVERS\serscan.sys [2014-12-04 12288]
R3 usbaudio;@wdma_usb.inf,%USBAudio.SvcDesc%;USB Audio Driver (WDM); C:\Windows\system32\drivers\usbaudio.sys [2014-12-04 121984]
S1 MPCKpt;MPCKpt; C:\Windows\system32\DRIVERS\MPCKpt.sys []
S3 dg_ssudbus;@oem39.inf,%ssud.Service.DeviceDesc%;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudbus.sys [2016-02-02 120416]
S3 gdrv;gdrv; \??\C:\Windows\gdrv.sys [2014-12-03 25640]
S3 nmwcd;@oem29.inf,%MFG% %SVC%;Nokia USB Phone Parent Driver; C:\Windows\system32\drivers\ccdcmbx64.sys [2015-01-23 19968]
S3 nmwcdc;@oem34.inf,%MFG% %SVC%;Nokia USB Communication Driver; C:\Windows\system32\drivers\ccdcmbox64.sys [2015-01-23 27136]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfdx64.sys [2015-01-23 26112]
S3 RTTEAMPT;@oem17.inf,%RTTEAMPT_Desc%;Realtek Teaming Protocol Driver (NDIS 6.20); C:\Windows\system32\DRIVERS\RtTeam620.sys [2014-12-03 58512]
S3 RTVLANPT;@oem15.inf,%RTVLANPT_Desc%;Realtek Vlan Protocol Driver (NDIS 6.2); C:\Windows\system32\DRIVERS\RtVlan620.sys [2014-12-03 32400]
S3 ssudmdm;@oem40.inf,%ssud.Service.Name%;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudmdm.sys [2016-02-02 213088]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerfltx64.sys [2015-01-23 9216]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2014-12-04 33280]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltjx64.sys [2015-01-23 9216]
S3 usbvideo;@usbvideo.inf,%USBVideo.SvcDesc%;USB Video Device (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2014-12-04 210560]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-10-08 81088]
R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2016-02-10 237096]
R2 BBSvc;BingBar Service; C:\Program Files (x86)\Microsoft\BingBar\7.1.355.0\BBSvc.exe [2015-06-19 192792]
R2 CmdAgent;COMODO Internet Security Helper Service; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [2016-04-12 5799552]
R2 CodeMeter.exe;CodeMeter Runtime Server; C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe [2015-06-02 3105144]
R2 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2015-08-28 1155192]
R2 Marvell Storage Management;Marvell Storage Management Service; C:\Program Files (x86)\Marvell\storage\svc\mvraidsvc.exe [2014-12-03 313192]
R2 MSUWebService;MSU Web Service; C:\Program Files (x86)\Marvell\storage\Apache2\bin\httpd.exe [2014-12-03 24645]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2015-08-28 1872504]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2015-08-28 5544568]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2015-09-01 937776]
R2 slsvc;Software Licensing Service; C:\Windows\slsvc.exe [2012-09-25 10240]
R2 ss_conn_service;SAMSUNG Mobile Connectivity Service; C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [2016-02-02 754784]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2015-09-01 410744]
R3 AvastVBoxSvc;AvastVBox COM Service; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [2016-02-10 5570120]
R3 BBUpdate;BBUpdate; C:\Program Files (x86)\Microsoft\BingBar\7.1.355.0\SeaPort.exe [2015-06-19 240408]
R3 Disc Soft Lite Bus Service;Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [2015-10-10 1268568]
S2 BugreportW;BugreportW; C:\Program Files (x86)\yesbnd\mbat.exe [2016-04-14 988240]
S2 dbupdate;Dropbox Update Service (dbupdate); C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2015-07-31 136048]
S2 FedaryqeuleServerSrv;Fedaryqeule Server; C:\Program Files (x86)\Fedaryqeule\FedaryqeuleServerSrv.exe [2016-04-14 311384]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-07-09 327296]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-04-08 269504]
S3 cmdvirth;COMODO Virtual Service Manager; C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [2016-04-12 2271928]
S3 dbupdatem;Dropbox Update Service (dbupdatem); C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2015-07-31 136048]
S3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [2016-04-15 1357104]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2012-07-06 43616]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2015-12-30 69632]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2016-03-18 64856]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2016-04-12 146888]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2016-03-18 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2015-01-02 145184]
S3 ServiceLayer;ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [2015-01-23 737616]
S4 CloudPrinter;CloudPrinter; C:\ProgramData\\CloudPrinter\\CloudPrinter.exe [2016-04-15 945152]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
JaRon
Moderátor
Moderátor
Příspěvky: 15797
Registrován: 29 bře 2005 13:39
Bydliště: BB-SK

Re: Zavirované PC

#2 Příspěvek od JaRon »

ahoj,
citat:
Stahnete Junkware Removal Tool http://thisisudax.org/downloads/JRT.exe
•Ulozte nejlepe na plochu
•Po spusteni se zobrazi licencni podminky, stisknete libovolnou klavesu
•Probehne vytvoreni zalohy a nasledne prohledavani
•Probehne skenovani a pak se objevi log, pripadne bude ulozen v c:\JRT jako JRT.txt, ten sem vlozte
FRST |ADWCleaner |MBAM |CCleaner |AVPTool

V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
Nahoru
JanKubala
Návštěvník
Návštěvník
Příspěvky: 29
Registrován: 15 dub 2016 11:40

Re: Zavirované PC

#3 Příspěvek od JanKubala »

Úplně si nejsem jist jestli je to toto:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.0.4 (03.14.2016)
Operating System: Windows 8 Pro x64
Ran by Jan (Administrator) on p  15. 04. 2016 at 22:25:38,18
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




File System: 2

Successfully repaired: C:\Users\Jan\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk (Shortcut)
Successfully repaired: C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk (Shortcut)



Registry: 0





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on p  15. 04. 2016 at 22:35:40,07
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Nahoru
Uživatelský avatar
JaRon
Moderátor
Moderátor
Příspěvky: 15797
Registrován: 29 bře 2005 13:39
Bydliště: BB-SK

Re: Zavirované PC

#4 Příspěvek od JaRon »

Ano je to ono
Teraz vycisti s MBAM
FRST |ADWCleaner |MBAM |CCleaner |AVPTool

V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
Nahoru
JanKubala
Návštěvník
Návštěvník
Příspěvky: 29
Registrován: 15 dub 2016 11:40

Re: Zavirované PC

#5 Příspěvek od JanKubala »

Malwarebytes Anti-Malware
www.malwarebytes.org

Datum skenování: 16. 4. 2016
Čas skenování: 11:58
Protokol: log.txt
Správce: Ano

Verze: 2.2.1.1043
Databáze malwaru: v2016.04.16.02
Databáze rootkitů: v2016.04.09.01
Licence: Zkušební verze
Ochrana proti malwaru: Zapnuto
Ochrana proti škodlivým webovým stránkám: Zapnuto
Ochrana programu: Vypnuto

OS: Windows 8
CPU: x64
Souborový systém: NTFS
Uživatel: Jan

Typ skenu: Sken hrozeb
Výsledek: Dokončeno
Prohledaných objektů: 370114
Uplynulý čas: 9 min, 26 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Vypnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto

Procesy: 0
(Nenalezeny žádné škodlivé položky)

Moduly: 1
PUP.Optional.Linkury, C:\ProgramData\Quoteex\Fun-Tone.dll, , [4939614eb8e1b3833fd51703b44e50b0],

Klíče registru: 34
PUP.Optional.YesSearches, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\BugreportW, , [047e149b0a8f1c1a9a5da980778ba35d],
PUP.Optional.SweetIM, HKU\S-1-5-21-2542729178-1014806307-1327440532-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{DEDAF650-12B8-48F5-A843-BBA100716106}, , [dfa3ded123763df9373328bed42ed729],
PUP.Optional.TidyNetwork, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{72A6AB0F-2FA8-4C73-9FCB-1E62A608F001}, , [067c733ca3f63204137fd610b64c827e],
PUP.Optional.CloudScout, HKLM\SOFTWARE\5da059a482fd494db3f252126fbc3d5b, , [ccb6cee1c2d71e18c174045551b3c838],
PUP.Optional.eShield, HKLM\SOFTWARE\GOOGLE\CHROME\NATIVEMESSAGINGHOSTS\com.eshield.extension_host, , [9ee4664918817cba7dfaa8d5e51f7789],
PUP.Optional.DNSUnlocker.ACMB2, HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\ROOT\CERTIFICATES\26D9E607FFF0C58C7844B47FF8B6E079E5A2220E, , [d7abddd2d1c8f6407f8de8bf29dbb64a],
PUP.Optional.PriceFountain, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{5DDAF181-CD9A-4363-A4C1-7F04CD6F74D3}, , [ceb4b8f7a9f03bfb7b6c38668084a15f],
PUP.Optional.YesSearches, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{773E27C7-EED8-45F3-B412-4691DFEF696D}, , [49398c2314851a1c003f51577292e41c],
PUP.Optional.YesSearches, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\Fedaryqeule Server, , [542e9916e5b41c1aaa973d6b848002fe],
PUP.Optional.DNSUnlocker.ACMB2, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{E1527582-8509-4011-B922-29E3FB548882}_is1, , [a7db832ce4b5999d27e90b9c7292e719],
PUP.Optional.YesSearches, HKLM\SOFTWARE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}, , [f78b8d22a0f9f83e18f588ae927126da],
PUP.Optional.CloudScout, HKLM\SOFTWARE\WOW6432NODE\5da059a482fd494db3f252126fbc3d5b, , [daa8357aff9add596dc8d980d430eb15],
PUP.Optional.DNSUnlocker.ACMB2, HKLM\SOFTWARE\WOW6432NODE\DNSUnlocker, , [5f232b846237ef47c348fbacc242728e],
PUP.Optional.Linkury.ACMB1, HKLM\SOFTWARE\WOW6432NODE\mtQuoteex, , [374b18977e1b0531a501208847bdfe02],
PUP.Optional.YesSearches, HKLM\SOFTWARE\WOW6432NODE\yessearchesSoftware, , [047e08a71c7de84e8b43e5b0af557c84],
PUP.Optional.YourSearching.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\yoursearchingSoftware, , [83ff911edcbde353e8b1276873918f71],
PUP.Optional.TidyNetwork, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\DRAGDROP\{70BC1CDB-0744-4172-BDA0-B5A487D00C3A}, , [443eaf00405943f3e4fa7dccba4afd03],
PUP.Optional.Linkury, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\IELNKSRCH, , [e2a0515e3e5bd660a992a003f41044bc],
PUP.Optional.DNSUnlocker.ACMB2, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\SYSTEMCERTIFICATES\ROOT\CERTIFICATES\26D9E607FFF0C58C7844B47FF8B6E079E5A2220E, , [5b27c4ebddbcd85e57b5693e6c98cf31],
PUP.Optional.Linkury.ACMB1, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\TRACING\CloudPrinter_RASAPI32, , [1b67248bb0e9c96d78533c68e024639d],
PUP.Optional.Linkury.ACMB1, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\TRACING\CloudPrinter_RASMANCS, , [94ee703fc4d556e01caff7adf80c35cb],
PUP.Optional.Linkury.ACMB1, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\TRACING\Quoteex_RASAPI32, , [a3df555aa4f592a420848622db2951af],
PUP.Optional.Linkury.ACMB1, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\TRACING\Quoteex_RASMANCS, , [760c753a7b1efa3c0e96a107709453ad],
PUP.Optional.Linkury.ACMB1, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SILENTPROCESSEXIT\Quoteex.exe, , [ea987a35752487af188dfcac07fd11ef],
PUP.Optional.YesSearches, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}, , [2161822d485160d6709d6cca946fef11],
PUP.Optional.Elex, HKLM\SOFTWARE\WOW6432NODE\TDATA, , [fb87baf5762348eeff5a058f38cca15f],
PUP.Optional.Linkury.ACMB1, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\CLOUDPRINTER, , [97eba40b6c2d7cba2b78f3b2659f6b95],
PUP.Optional.Linkury.ACMB1, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\EVENTLOG\APPLICATION\Application Hosting, , [fe84c4eb3f5a5dd99d12465f1ce89e62],
PUP.Optional.Linkury.ACMB1, HKU\S-1-5-21-2542729178-1014806307-1327440532-1001\SOFTWARE\mtQuoteex, , [f88a2f80c3d61d1912906048699b35cb],
PUP.Optional.TNT, HKU\S-1-5-21-2542729178-1014806307-1327440532-1001\SOFTWARE\TNT2, , [c2c0f3bc20798da93ec21b2fb1536a96],
PUP.Optional.Linkury, HKU\S-1-5-21-2542729178-1014806307-1327440532-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{IELNKSRCH}, , [bdc5cae526733402003a6d36fe065aa6],
PUP.Optional.TNT, HKU\S-1-5-21-2542729178-1014806307-1327440532-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{27D5ED20-EC05-4284-9DD9-2A6A5BB1D1DF}, , [dda53f70a8f15ed8e51a4405a1639f61],
PUP.Optional.DeskCut, HKU\S-1-5-21-2542729178-1014806307-1327440532-1001\SOFTWARE\MOZILLA\EXTENDS, , [f58d3877fa9f1c1aca3f9b8629dbe719],
PUP.Optional.YesSearches, HKU\S-1-5-21-2542729178-1014806307-1327440532-1001\SOFTWARE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}, , [b2d0c7e8762372c4a321c6d4709437c9],

Hodnoty registru: 26
PUP.Optional.PriceFountain, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{5DDAF181-CD9A-4363-A4C1-7F04CD6F74D3}|Path, \Microsoft\Windows\Setup\8.1 auto install v2, , [ceb4b8f7a9f03bfb7b6c38668084a15f]
PUP.Optional.YesSearches, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{773E27C7-EED8-45F3-B412-4691DFEF696D}|Path, \Fedaryqeule Server, , [49398c2314851a1c003f51577292e41c]
PUP.Optional.YesSearches, HKLM\SOFTWARE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}|hp, http://www.yessearches.com/?ts=AHEqA3Mt ... =ffsengext, , [f78b8d22a0f9f83e18f588ae927126da]
PUP.Optional.YesSearches, HKLM\SOFTWARE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}|tab, http://www.yessearches.com/?ts=AHEqA3Mt ... =ffsengext, , [136fa609bfda2115c74648eed03303fd]
PUP.Optional.YesSearches, HKLM\SOFTWARE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}|sp, http://www.yessearches.com/chrome.php?u ... =ffsengext, , [671b248bd1c8b2843ad3ae88b2511fe1]
PUP.Optional.YesSearches, HKLM\SOFTWARE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}|surl, http://www.yessearches.com/chrome.php?u ... toolbar&q=, , [2959654a861351e59a73d363867d867a]
PUP.Optional.Linkury, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\ielnksrch|DisplayName, Search the web, , [e2a0515e3e5bd660a992a003f41044bc]
PUP.Optional.Linkury.ACMB1, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\ielnksrch|URL, http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBRGNclVS1AC6sNoHoTG1nEZQLY5Wtlp2hkLTQHocypNIj46MH650xtyZB3R98ApKhzJSMMv6yBwR-2YkBPk3ly6UcA8R9FTKqQD1kwc9X4IT3Ou4t3TEPl0LTXl1INeeQmt7ufjr1KCotF59Zlu3Kmgf4hsIYyd5Vwi1iUy-TDkAu4VhEs3JQSxw,,&q={searchTerms}, , [b8ca3a75b9e0cc6ac528327325dfbc44]
PUP.Optional.DeskCut, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS|deskCutv2@gmail.com, C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\9t686j9i.default\extensions\deskCutv2@gmail.com, , [265c842bb7e278bef713cc55c53ff60a]
PUP.Optional.YesSearches, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}|hp, http://www.yessearches.com/?ts=AHEqA3Mt ... =ffsengext, , [2161822d485160d6709d6cca946fef11]
PUP.Optional.YesSearches, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}|tab, http://www.yessearches.com/?ts=AHEqA3Mt ... =ffsengext, , [3250f8b73c5daa8c20edf93d0df6c53b]
PUP.Optional.YesSearches, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}|sp, http://www.yessearches.com/chrome.php?u ... =ffsengext, , [4141fdb26c2d60d6c449082e1be853ad]
PUP.Optional.YesSearches, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}|surl, http://www.yessearches.com/chrome.php?u ... toolbar&q=, , [740eefc0bddc3afc2ce13501ff04e61a]
PUP.Optional.Elex, HKLM\SOFTWARE\WOW6432NODE\TDATA|dir, C:\Program Files (x86)\TDataDld, , [fb87baf5762348eeff5a058f38cca15f]
PUP.Optional.Linkury.ACMB1, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\CLOUDPRINTER|ImagePath, C:\ProgramData\\CloudPrinter\\CloudPrinter.exe shuz -f "C:\ProgramData\\CloudPrinter\\CloudPrinter.dat" -l -a, , [97eba40b6c2d7cba2b78f3b2659f6b95]
PUP.Optional.Linkury.ACMB1, HKU\S-1-5-21-2542729178-1014806307-1327440532-1001\ENVIRONMENT|SNP, http://%66%65%65%64.%68%65%6C%70%65%72%62%61%72.%63%6F%6D?publisher=APSFWakeNet&co=CZ&userid=45d60548-85cf-b2b6-ad71-987abea7391e&searchtype=sc&installDate=15., , [8002c6e97326251151bcb8ec2ed6827e]
PUP.Optional.Linkury.ACMB1, HKU\S-1-5-21-2542729178-1014806307-1327440532-1001\ENVIRONMENT|SNF, C:\ProgramData\Quoteexs\snp.sc, , [1a684e610792da5cdc30c9dbb84c837d]
PUP.Optional.Linkury, HKU\S-1-5-21-2542729178-1014806307-1327440532-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{ielnksrch}|DisplayName, Search the web, , [bdc5cae526733402003a6d36fe065aa6]
PUP.Optional.TNT, HKU\S-1-5-21-2542729178-1014806307-1327440532-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{27D5ED20-EC05-4284-9DD9-2A6A5BB1D1DF}|OSDFileURL, file:///C:/Users/Jan/AppData/Local/TNT2/Profiles/11467/yah11467.xml, , [dda53f70a8f15ed8e51a4405a1639f61]
PUP.Optional.TNT, HKU\S-1-5-21-2542729178-1014806307-1327440532-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{27D5ED20-EC05-4284-9DD9-2A6A5BB1D1DF}|FaviconURL, http://mirror.mirror-files.com/tnt2/1/Y1404.ico, , [4f33327d51488fa720df80c9c83ca55b]
PUP.Optional.Linkury.ACMB1, HKU\S-1-5-21-2542729178-1014806307-1327440532-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{ielnksrch}|URL, http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBRGNclVS1AC6sNoHoTG1nEZQLY5Wtlp2hkLTQHocypNIj46MH650xtyZB3R98ApKhzJSMMv6yBwR-2YkBPk3ly6UcA8R9FTKqQD1kwc9X4IT3Ou4t3TEPl0LTXl1INeeQmt7ufjr1KCotF59Zlu3Kmgf4hsIYyd5Vwi1iUy-TDkAu4VhEs3JQSxw,,&q={searchTerms}, , [7111d5da13862511806baef7996b7888]
PUP.Optional.DeskCut, HKU\S-1-5-21-2542729178-1014806307-1327440532-1001\SOFTWARE\MOZILLA\EXTENDS|appid, deskCutv2@gmail.com, , [f58d3877fa9f1c1aca3f9b8629dbe719]
PUP.Optional.YesSearches, HKU\S-1-5-21-2542729178-1014806307-1327440532-1001\SOFTWARE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}|hp, http://www.yessearches.com/?ts=AHEqA3Mt ... =ffsengext, , [b2d0c7e8762372c4a321c6d4709437c9]
PUP.Optional.YesSearches, HKU\S-1-5-21-2542729178-1014806307-1327440532-1001\SOFTWARE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}|tab, http://www.yessearches.com/?ts=AHEqA3Mt ... =ffsengext, , [b7cbfab50f8a68ce784c5f3b699b6f91]
PUP.Optional.YesSearches, HKU\S-1-5-21-2542729178-1014806307-1327440532-1001\SOFTWARE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}|sp, http://www.yessearches.com/chrome.php?u ... =ffsengext, , [b5cd436c8910f442586ca5f540c4ad53]
PUP.Optional.YesSearches, HKU\S-1-5-21-2542729178-1014806307-1327440532-1001\SOFTWARE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}|surl, http://www.yessearches.com/chrome.php?u ... toolbar&q=, , [f88a9d121e7b9c9a745061392cd841bf]

Data registru: 4
PUP.Optional.Linkury, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINDOWS|AppInit_DLLs, C:\ProgramData\Quoteex\Fun-Tone.dll, Dobré: (), Špatné: (C:\ProgramData\Quoteex\Fun-Tone.dll),,[4939614eb8e1b3833fd51703b44e50b0]
PUP.Optional.eShield, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\ABOUTURLS|Tabs, http://services.eshield.com/general/new ... 670CEF}&i=, Dobré: (www.google.com), Špatné: (http://services.eshield.com/general/new ... 670CEF}&i=),,[3c469e116d2cd75f2739b188f80d8f71]
PUP.Optional.Linkury, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {ielnksrch}, Dobré: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Špatné: ({ielnksrch}),,[aed4545bdbbecb6b1659d6669570d52b]
PUP.Optional.Linkury, HKU\S-1-5-21-2542729178-1014806307-1327440532-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {ielnksrch}, Dobré: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Špatné: ({ielnksrch}),,[dca62f8060398aaca8c6ff3d808524dc]

Složky: 13
PUP.Optional.Linkury, C:\Windows\Temp\Smartbar, , [86fc6946b7e246f05edba300d62e1ee2],
PUP.Optional.YesSearches, C:\Program Files (x86)\Fedaryqeule, , [bdc5852af6a3a78f9f9aa50382825aa6],
PUP.Optional.Linkury.ACMB1, C:\ProgramData\Quoteex, , [0e74e1cec7d269cdfba64662996be020],
PUP.Optional.Linkury.ACMB1, C:\ProgramData\Quoteex\ondemand, , [0e74e1cec7d269cdfba64662996be020],
PUP.Optional.YesSearches, C:\Program Files (x86)\yesbnd, , [a8da9e112e6b66d0ffcdb9ae3bcaff01],
PUP.Optional.YesSearches, C:\Program Files (x86)\yesbnd\dmp, , [a8da9e112e6b66d0ffcdb9ae3bcaff01],
PUP.Optional.YesSearches, C:\Program Files (x86)\yesbnd\dmp\CCeuter.exe, , [a8da9e112e6b66d0ffcdb9ae3bcaff01],
PUP.Optional.YesSearches, C:\Program Files (x86)\yesbnd\dmp\FedaryqeuleServerSrv.exe, , [a8da9e112e6b66d0ffcdb9ae3bcaff01],
PUP.Optional.YesSearches, C:\Program Files (x86)\yesbnd\dmp\FedaryqeuleServerTsk.exe, , [a8da9e112e6b66d0ffcdb9ae3bcaff01],
PUP.Optional.YesSearches, C:\Program Files (x86)\yesbnd\dmp\mbat.exe, , [a8da9e112e6b66d0ffcdb9ae3bcaff01],
PUP.Optional.YesSearches, C:\Program Files (x86)\yesbnd\dmp\thption.exe, , [a8da9e112e6b66d0ffcdb9ae3bcaff01],
PUP.Optional.Linkury.ACMB1, C:\Program Files (x86)\Common Files\Joblex, , [176b8c235a3f8caabfda71f6c045748c],
PUP.Optional.Linkury.ACMB1, C:\ProgramData\Quoteexs, , [ceb4c2edcdcc3006aa170a5d6a9b8d73],

Soubory: 178
PUP.Optional.Linkury, C:\ProgramData\Quoteex\Fun-Tone.dll, , [4939614eb8e1b3833fd51703b44e50b0],
PUP.Optional.YesSearches, C:\Program Files (x86)\yesbnd\mbat.exe, , [047e149b0a8f1c1a9a5da980778ba35d],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{030F9997-AEE5-4345-8032-F388536B56E3}, , [0280ac030594cb6b3e2ee14816ef07f9],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{0357797F-09DB-495E-AE6B-BAA48EB77604}, , [5c266c43e7b23bfb006c86a355b0a65a],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{04AB4029-D954-4BB4-9ACA-28C1C2CFDBB4}, , [325049660b8e63d339330c1d54b149b7],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{0D3EE879-105F-4653-9844-F1B7C7CAA5DC}, , [245e96194554f83ec4a8df4ae025f40c],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{1001A760-DDA4-4073-99E2-017889BBB74C}, , [b2d0b0ffbcdd0531ed7f200956affe02],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{101747DA-964D-47B0-ADEA-BBB3D69DE945}, , [b0d2911ec7d25fd79ecedc4d8085758b],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{441742E0-F5AD-40AC-A431-929934EAFBA6}, , [8ef4ecc301980b2b3735e24738cd8779],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{464DFC0B-BF40-4EA1-851A-A569289A08B7}, , [7b077837e0b9ba7cb8b464c52fd642be],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{48D37D09-5C03-402E-8ACB-D6982676C9C1}, , [7b079817fd9cfe3876f62504fc0960a0],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{4984108D-CFDF-4F6E-8CE1-A9CEE8B40CAB}, , [0181d4db7f1aeb4b402c5fca1ce9e61a],
Backdoor.Bot, C:\ProgramData\Comodo\Cis\Quarantine\data\{4EEAACA1-A495-4FE3-B481-16B039696BD9}, , [fd852788c9d046f03d4be49cc739cd33],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{4F265FAA-8D97-44F8-A740-8EE4CB6B06EB}, , [671b9c13c1d83df9abc187a2838210f0],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{4F5E031C-59DD-4D7E-ABDB-A7FD2A731872}, , [2b57bcf3adecf541bfad91981fe62bd5],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{54B1FD84-DAD3-4594-932A-29ED5BA5548E}, , [156da708e1b81224016bee3b8e7720e0],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{5892DF03-9040-40A1-A625-ED415FA03555}, , [dca6208f39606ec8e9834edb9e67ba46],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{5AC74739-2810-4499-A48B-2DA5982FA936}, , [c8ba5f502079b97d303c44e595709d63],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{CEA06981-58A6-4988-8B16-56C65ECAC164}, , [cab85f50a7f2bc7aa6c684a539cc9b65],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{D23408BB-481E-4972-9F62-66CD7C4F009A}, , [39491699386142f49ece55d418edd62a],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{D502D6CB-3E58-4506-9BD8-444C624DA63C}, , [5d250aa5871281b5ec809a8fc93cf30d],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{D70984E6-CD79-4682-AF55-D89F79A010A6}, , [fb87e6c9188163d3c3a91b0e48bdbf41],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{D729B304-AD48-47AE-8210-5C6B8E2E924A}, , [62206b44a3f6cd692a4256d32ed77b85],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{D8169859-C733-4222-BEBD-9726B969CCDC}, , [90f2258a6f2abf770567ec3df90cab55],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{D817F309-00D2-4250-8D5E-257B56AFE678}, , [7012c1ee693060d679f31217a16450b0],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{ACE65E08-2831-4B0F-9250-0D647D04E98E}, , [0a788728cdcc1125da92c168c44134cc],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{B2224078-F846-4685-8F71-3CB1093388D5}, , [443e9d125d3ce15593d90524f510ef11],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{B2AF6CC6-6F15-4C76-8E01-982ACD304055}, , [bfc3ac03f3a62b0bb3b96ebbe2230ff1],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{B3C77DC3-811E-4C08-9BF5-79B696F16749}, , [562c78374059ac8a511b9b8ee4217b85],
RiskWare.Tool.CK, C:\ProgramData\Comodo\Cis\Quarantine\data\{B4132AF7-B67F-4239-9D1A-FC8FF547473B}, , [4d35d8d75346b086df41c2b58f719769],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{B4427C61-3003-42D9-833F-E4DD1FC537DA}, , [4a386f40f8a19e98422a111828ddc937],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{B535F97E-B092-4B87-96C3-A9F9973DF319}, , [f48ed0dfaaef88aed49840e92fd602fe],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{B760F5C1-F30E-45F0-908C-4230DB8AF50D}, , [e49e2f80178211255e0e84a5e4215fa1],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{E76938D4-969D-4F15-B46E-84DA08B2EC55}, , [b4cea00f6d2c5adc75f7de4b55b0d42c],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{EB3CBCD4-1DAD-41BE-9DCC-9B5BB6A7800A}, , [97eb644bd1c869cd600c99902bda8f71],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{ECFA7516-706A-4371-B3EB-01F234ADF228}, , [d9a94a65ecadc67099d3b772bb4ad62a],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{F389BCFC-5867-4EE9-906B-2D6E514429A7}, , [d0b21f902475da5c600c191026dfe917],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{F3DED87B-0E98-47F5-BC61-32EA49827388}, , [3e44d8d71c7de1551c500128ff064fb1],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{F51E88ED-7845-47B1-8926-290DD2B7825D}, , [93efe7c8f4a59e98462662c73dc85aa6],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{F780B12F-1AD9-49B5-928F-D56FEC379BF0}, , [a6dc545b6a2f78bef577af7aaa5bd22e],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{F87F4BA2-7963-45BD-A28F-13B2D592F840}, , [671bf7b8acedc17516568e9be61f58a8],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{F8F09B39-FC77-4B1C-B743-7642CF015AB9}, , [740e99165148a98dfc70a18815f07c84],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{FDFAB6CB-36E7-447B-9F68-7C3BB9D414FF}, , [2b57921defaaf73f4a22f831be477789],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{8DCA3109-81FF-4104-8167-3052432C5325}, , [e0a21f902673e0569fcde64342c34cb4],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{9095EAFB-5C21-47D6-909F-66B104E54828}, , [d9a9ecc3990092a4c5a78f9aa75eee12],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{912D563F-4919-40A8-B963-2ADFD53347C5}, , [1e64bff08118fd39d29ab871db2a5ca4],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{9239BE65-6437-41DF-97F4-EAC97131B980}, , [6b17f8b7fe9b69cd3834b7721fe6d62a],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{95016405-7A9E-4080-9C3C-28DDD7C3C6C3}, , [0d7569462871fa3c66061b0ef70e8a76],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{9C32DB29-4A04-429F-88DC-FD9A9E6D1ADE}, , [364cc1ee5e3b2e08175580a9966f9a66],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{9EF060E7-357E-4EBA-B63B-F4C4A3B4BFC3}, , [f092a609960394a2115b0326699c0ff1],
RiskWare.Tool.CK, C:\ProgramData\Comodo\Cis\Quarantine\data\{A22DFD81-84E1-4F16-B29D-7C5659C8E85D}, , [651d67486e2b7bbbea365126768adf21],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{A7A073DE-D557-4E7A-B3F4-ACFD898EE652}, , [344e47686c2d053196d6e04937ce5ca4],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{A7F98378-A132-4F67-B230-214206454535}, , [443e02ad62371b1be389290060a5a55b],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{A92645F9-B829-4C6F-A312-4B253981B36D}, , [ceb4a50a0198eb4b5319151472939070],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{A9B5FBF9-5C55-43F7-B75F-80428DAA546B}, , [6b17a00fe9b078be2b41dd4cc83da759],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{AB5048B0-F828-47D2-88B3-1FFE327F9C64}, , [5131753aa2f7f83ec8a45ccd08fd619f],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{11AE601F-F2AE-43F2-832A-8E7381A00348}, , [1e64a6099108d95d1f4dc564c3424ab6],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{1EB8FFB2-3DC9-4B56-84A1-9D10E2851CB3}, , [d2b098178a0f61d5115b6ebbe71efd03],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{61270C7A-45DF-4AA1-BFD8-CB1B2EECD28C}, , [7c06b0ffaaef310584e8fd2c8d78ae52],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{73FA166C-E84E-477F-B219-1AC1A529F180}, , [750dfbb43f5a16202b4104258481c63a],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{8D45E9C3-CED6-4569-BFAE-613F0F2D8350}, , [c9b998179ffa95a11f4d8b9eb64f5ca4],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{2038DBF1-80F3-4F7E-8BBD-312A74AC8D0E}, , [60223c732376d85ef07c69c04cb95ea2],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{222FD42A-8085-475B-8C02-F6B30BF93ABB}, , [bbc7ded1cacf6dc995d7d653996c956b],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{2AB189F6-C35F-48ED-95A7-81F56C939EF8}, , [ea989c132079cb6bdc90fc2df41146ba],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{2B6FB509-3442-46E0-B41B-655CFCB6BB28}, , [146ef7b83f5a22140f5d0b1ea85d38c8],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{2C4D6C30-12B1-4525-84A8-CC8965E237F5}, , [3a489d12ebaefc3aea8231f87b8a926e],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{3022CE98-7E3E-42F0-A9B3-216C70E877CD}, , [eb9718977a1f231388e45dcce5206d93],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{31849D33-935A-46B4-AF83-625FE230AA4C}, , [2062743b9cfd72c4650760c950b5ac54],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{323FBBCE-8BA1-446F-AB8A-0220D8C8CEF9}, , [473b17983d5ccc6ab2ba2dfc7491936d],
Backdoor.Bot, C:\ProgramData\Comodo\Cis\Quarantine\data\{355F6CC5-760F-4D3C-BD90-ED66FDB08161}, , [b0d248676e2b21151276017fe81822de],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{39C57304-12ED-4963-866D-60E11E79E6CB}, , [b2d0802f8712fd3992dace5b9273fd03],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{4180738F-1ACE-477A-B482-B55C02B41E54}, , [ef935f509900c175f5772bfea95c639d],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{419D3E5C-1738-4C3A-A049-DD3CBCFE26E4}, , [2d55159a0495c1759fcdad7cf11436ca],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{427C9DDB-65FD-4AA4-8259-5BB62AB96801}, , [d3afd1deb7e27fb72e3e052460a5f907],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{429F90A4-86EA-4092-B30F-129B34413B61}, , [ff83c8e7fe9bc571c4a82dfce61fc937],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{6427C0BB-9698-48F6-9AE3-50E3EED45CD8}, , [087a0da2badf0f27fa72e34618ed748c],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{667DFFDD-738F-4707-B850-3F5F062310E7}, , [443e703f1d7cc373155792979471ba46],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{67AE363D-15B8-4218-827D-6FE425BFB41E}, , [770bcbe47821cc6a6903d653cf367b85],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{6EC5E810-8C8E-404C-9C24-764C71D38F21}, , [285a3679edace6501d4f86a3d23334cc],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{6ECA7892-5DC2-4DAD-9B85-F139388D0419}, , [3a48fdb28a0fb482016ba0896e97ac54],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{6FBE290D-2BF2-4343-8F50-CD07781289E6}, , [6022b8f7aced3501fb71052430d5629e],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{73814CBE-B855-48FF-B68C-DCD765A97944}, , [9ee4efc046538ea8284488a1cd38b848],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{B83C3843-BA3C-4624-A1FB-D7B022517088}, , [7111733c673258dedc90bf6a92732bd5],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{BCE196B6-ACAC-4BC2-B7B9-91C50F267698}, , [ed95ddd20d8c0b2b90dc38f1877e916f],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{BF0929EB-4021-49E2-9C6E-80C43E96A7B9}, , [2e5426890990a6906b011316b3521ae6],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{C010E2D0-B7E6-47A7-A834-0308AF3BAB6C}, , [d3afcae5bddce551402cad7c61a4cf31],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{C0E5ED9E-80D5-49C4-8005-FA856AD09528}, , [cfb301aef7a29a9c8fdd5bce8b7a768a],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{C23E8A87-F0D5-447B-9554-6452C669C62A}, , [69196946ebae67cf96d60e1b75903bc5],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{C312BC1A-4411-4250-996A-29EF2FA12513}, , [6c160ca3a2f7330392dace5b48bdeb15],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{C4830088-AB76-4876-BB29-36C54767AC98}, , [0d752788adec112572fad059ef16fd03],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{C7E1B5DF-75CC-498B-B241-4F5D887BA116}, , [483a416e801981b5d9935acf63a2956b],
Backdoor.Bot, C:\ProgramData\Comodo\Cis\Quarantine\data\{C905746D-C5B3-40E7-9691-C4B4040D628B}, , [f092b8f72f6a81b5a7e129570ff1cc34],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{CB069A3E-140C-4821-903F-74723668627E}, , [1d653c7319808ea868049b8ecf3629d7],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{CC4E77C8-EE5E-4045-A3C0-AC3FF39FDA0A}, , [780a129d7227e94dcca09990d530867a],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{CCE2D36A-DF7D-41C2-AD08-AA68D4A4D423}, , [dfa3426de9b053e3c3a92801976e6b95],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{CD7A49FA-16D2-4752-B485-45ADBC7F8744}, , [ea98d3dcf8a160d6ee7e66c39f662cd4],
Backdoor.Bot, C:\ProgramData\Comodo\Cis\Quarantine\data\{CD915263-A1B2-4CF8-8E5C-DE8673DD1C3E}, , [0f7368471d7c6fc77f09a7d901ffc33d],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{73FC6168-BEB6-46C5-A14F-E01A4086E65A}, , [2f5387284d4caf87bbb1d5544cb9a45c],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{752D82D8-41F7-4B55-B11E-85789243EB61}, , [c2c0e4cba2f795a11c5007222bdaaa56],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{7761F636-9F35-46C7-B40C-0010DC84AEB8}, , [562c2e812772ad895e0ece5b51b46d93],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{7D5B6CD4-A29C-4FEC-94EE-329F1E5E2BB9}, , [daa8baf5217869cde28aad7cb94c7e82],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{801B1395-29F1-4FA4-ADBA-7A858DAEE5FB}, , [b4cea00f7d1cf343f07c6fbadf269b65],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{82270A83-4BD7-49DE-89F9-E4D48B7C088F}, , [136fded1fe9bed49402cae7b7392b44c],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{82B8EFF5-F438-45A5-92CE-87231FD582DD}, , [c7bb505ff8a1c373abc11514b35238c8],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{D9F86164-0BEA-4AEE-B21D-8B0E8F49179A}, , [4f33b3fcdebb3ef8fb7107228b7aba46],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{DBFFF23D-B2C4-4DC0-925A-976A79716FF5}, , [bcc6fab5e1b842f42d3f74b5dd286e92],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{DFC66353-E03F-4E18-B8D6-FB3E6483639F}, , [bec4713e8b0ec3730963ab7e768faf51],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{E119A607-7960-4F48-84A1-C81C77D6D4DF}, , [e39f49661d7cbb7b7fed1f0a5aab946c],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{E1FD9BBD-7806-4A5A-95B5-3CA4B6AAC233}, , [84fe555a7524f64008641b0e9570728e],
RiskWare.Tool.CK, C:\ProgramData\Comodo\Cis\Quarantine\data\{E49300E2-C421-429C-B1D1-B3766745D338}, , [93eff6b9386179bdcb55d3a4da26af51],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{E5EEA198-4CDC-4276-B437-A3F89B61D707}, , [52302d82336653e3e18b36f3d431cd33],
Trojan.MalPack.Krunchy, C:\ProgramData\Comodo\Cis\Quarantine\data\{E729D127-14B1-4041-A9C3-31754BC2CDF5}, , [c1c11d92d9c0e65015996c0e827f7e82],
RiskWare.Tool.CK, C:\ProgramData\Comodo\Cis\Quarantine\data\{1347ABF8-B7C1-4430-8DDB-3EBABBD8DADE}, , [651d17988b0eba7cbb6572056e928977],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{153695EB-63CF-40AB-BF08-2F0021C67DD9}, , [057d4d62841561d5fa7218114eb77987],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{16782F88-36BB-4643-BE13-2113A65FDA58}, , [2f53367984154de983e9cb5e59ac1be5],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{17360617-2636-4237-AB68-FE7D784783BF}, , [ccb6525db4e59b9b71fb36f3e32222de],
HackTool.Agent, C:\ProgramData\Comodo\Cis\Quarantine\data\{184C03E0-6623-45A2-854C-EA0D951422BE}, , [344e6847f2a7f73fe28676903ac613ed],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{1AFECCAE-8858-49FE-84EE-EC6C8A586445}, , [7111604f0792fc3a6b01e544c441619f],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{1BED1BF3-F830-41F6-9AC3-51A8B7887898}, , [5c26b4fb7e1b3303cf9d7eab06ff57a9],
PUP.Optional.DNSUnlocker, C:\ProgramData\Comodo\Cis\Quarantine\data\{1CDC394D-03D5-49FF-8DB8-4EF82530BBDF}, , [275be9c6efaa70c6fe6ed059c540fb05],
PUP.Optional.Linkury, C:\ProgramData\Quoteex\Quotefan.exe, , [a7db78379dfcbb7b2899da134ab7f10f],
PUP.Optional.Linkury, C:\Users\Jan\AppData\Roaming\Ventoex.bin, , [c9b9ddd2039656e01ef526006f968f71],
PUP.Optional.Elex, C:\Program Files (x86)\Fedaryqeule\FedaryqeuleServerTsk.exe, , [077b505f7c1dab8b805cde48e41ece32],
PUP.Optional.YesSearches, C:\Program Files (x86)\yesbnd\CCeuter.exe, , [e2a0b2fd4a4f00361ddc3feaee1413ed],
PUP.Optional.YesSearches, C:\Program Files (x86)\yesbnd\FFeuter.exe, , [364c456a26737eb80ca78c9cc83a7a86],
PUP.Optional.DNSUnlocker, C:\Windows\Temp\_avast_\unp139689334.tmp, , [d9a9a40bdcbd42f4e08c42e7cc39847c],
PUP.Optional.DNSUnlocker, C:\Windows\Temp\_avast_\unp143405434.tmp, , [c8ba0da2534625117cf02504996cd729],
PUP.Optional.DNSUnlocker, C:\Windows\Temp\_avast_\unp156836842.tmp, , [92f01c932c6d38fe91db00294cb94fb1],
PUP.Optional.DNSUnlocker, C:\Windows\Temp\_avast_\unp177931336.tmp, , [2d55ac03e1b869cd81ebb079778e728e],
PUP.Optional.DNSUnlocker, C:\Windows\Temp\_avast_\unp183062697.tmp, , [8df56b44bbdece688fdd2bfef80dce32],
PUP.Optional.DNSUnlocker, C:\Windows\Temp\_avast_\unp255646844.tmp, , [8ef427888a0f6ec843296dbcdb2aa957],
PUP.Optional.DNSUnlocker, C:\Windows\Temp\_avast_\unp267648767.tmp, , [374b8d22b0e92a0cb4b866c33acb5ea2],
PUP.Optional.DNSUnlocker, C:\Windows\Temp\_avast_\unp54673963.tmp, , [d7ab4f6022776ccad19ba0891fe6ec14],
PUP.Optional.DNSUnlocker, C:\Windows\Temp\_avast_\unp68465112.tmp, , [1171b0ff762396a0125a85a438cd25db],
PUP.Optional.DNSUnlocker, C:\Windows\Temp\_avast_\unp69206780.tmp, , [9ae8b8f72d6cda5cd09ca9804db83cc4],
PUP.Optional.DNSUnlocker, C:\Windows\Temp\_avast_\unp78847902.tmp, , [91f1f4bbd8c1c5710e5ecb5e39cc29d7],
PUP.Optional.DNSUnlocker, C:\Windows\Temp\_avast_\unp79401356.tmp, , [f78bebc4940545f1402cba6f2dd854ac],
PUP.Optional.DNSUnlocker, C:\Windows\Temp\_avast_\unp80976137.tmp, , [ec96cae5d8c171c5d79564c5c3425fa1],
PUP.Optional.DNSUnlocker, C:\Windows\Temp\_avast_\unp9674230.tmp, , [6d15b0ffa8f1989eb6b62603cf36d729],
PUP.Optional.Linkury, C:\Users\Jan\AppData\Roaming\ApplicationHosting.dat, , [245e39760d8c2412054c623cbb49a45c],
PUP.Optional.Linkury, C:\Users\Jan\AppData\Roaming\md.xml, , [0280ecc33e5b3ff754feefaf2bd9c739],
PUP.Optional.Linkury, C:\Users\Jan\AppData\Roaming\noah.dat, , [80023a75efaa092d4e057727c63e32ce],
PUP.Optional.Linkury, C:\Users\Jan\AppData\Roaming\uninstall_temp.ico, , [e89a6a458c0df34398bcd0ce10f44fb1],
PUP.Optional.Linkury, C:\Users\Jan\AppData\Roaming\lobby.dat, , [ff83cee1a5f49e986185c4da37cd47b9],
PUP.Optional.Linkury, C:\Windows\Temp\Smartbar\Tam-Lam.ico, , [86fc6946b7e246f05edba300d62e1ee2],
PUP.Optional.Linkury, C:\Windows\Temp\Smartbar\TopTech.ico, , [86fc6946b7e246f05edba300d62e1ee2],
PUP.Optional.Linkury, C:\Users\Jan\AppData\Roaming\inst.lat, , [dea4941b4d4cbb7b326b3671d03435cb],
PUP.Optional.YesSearches, C:\Program Files (x86)\Fedaryqeule\{A16B1AF7-982D-40C3-B5C1-633E1A6A6678}, , [bdc5852af6a3a78f9f9aa50382825aa6],
PUP.Optional.YesSearches, C:\Windows\System32\Tasks\Fedaryqeule Server, , [661c436c2a6f70c6ef4cdfc9877d4db3],
PUP.Optional.Linkury.ACMB1, C:\ProgramData\Quoteex\Airtouch.bin, , [0e74e1cec7d269cdfba64662996be020],
PUP.Optional.Linkury.ACMB1, C:\ProgramData\Quoteex\Anphase.dat, , [0e74e1cec7d269cdfba64662996be020],
PUP.Optional.Linkury.ACMB1, C:\ProgramData\Quoteex\Biolam.dat, , [0e74e1cec7d269cdfba64662996be020],
PUP.Optional.Linkury.ACMB1, C:\ProgramData\Quoteex\Cofjob.bin, , [0e74e1cec7d269cdfba64662996be020],
PUP.Optional.Linkury.ACMB1, C:\ProgramData\Quoteex\conf.config, , [0e74e1cec7d269cdfba64662996be020],
PUP.Optional.Linkury.ACMB1, C:\ProgramData\Quoteex\Config.xml, , [0e74e1cec7d269cdfba64662996be020],
PUP.Optional.Linkury.ACMB1, C:\ProgramData\Quoteex\Kayjob.bin, , [0e74e1cec7d269cdfba64662996be020],
PUP.Optional.Linkury.ACMB1, C:\ProgramData\Quoteex\Lafind.exe, , [0e74e1cec7d269cdfba64662996be020],
PUP.Optional.Linkury.ACMB1, C:\ProgramData\Quoteex\Lafind.exe.config, , [0e74e1cec7d269cdfba64662996be020],
PUP.Optional.Linkury.ACMB1, C:\ProgramData\Quoteex\md.xml, , [0e74e1cec7d269cdfba64662996be020],
PUP.Optional.Linkury.ACMB1, C:\ProgramData\Quoteex\Quoteex.d.dat, , [0e74e1cec7d269cdfba64662996be020],
PUP.Optional.Linkury.ACMB1, C:\ProgramData\Quoteex\Quoteex.dat, , [0e74e1cec7d269cdfba64662996be020],
PUP.Optional.Linkury.ACMB1, C:\ProgramData\Quoteex\Quotefan.exe.config, , [0e74e1cec7d269cdfba64662996be020],
PUP.Optional.Linkury.ACMB1, C:\ProgramData\Quoteex\Triotop.bin, , [0e74e1cec7d269cdfba64662996be020],
PUP.Optional.Linkury.ACMB1, C:\ProgramData\Quoteex\uninstall.dat, , [0e74e1cec7d269cdfba64662996be020],
PUP.Optional.Linkury.ACMB1, C:\ProgramData\Quoteex\Voya-Dox.bin, , [0e74e1cec7d269cdfba64662996be020],
PUP.Optional.Linkury.ACMB1, C:\ProgramData\Quoteex\X-job.bin, , [0e74e1cec7d269cdfba64662996be020],
PUP.Optional.Linkury.ACMB1, C:\ProgramData\Quoteex\ZooLattam.bin, , [0e74e1cec7d269cdfba64662996be020],
PUP.Optional.YesSearches, C:\Program Files (x86)\yesbnd\conf.json, , [a8da9e112e6b66d0ffcdb9ae3bcaff01],
PUP.Optional.YesSearches, C:\Program Files (x86)\yesbnd\@E9438230-A7DF-4D1F-8F2D-CA1D0F0F7924.xpi, , [a8da9e112e6b66d0ffcdb9ae3bcaff01],
PUP.Optional.YesSearches, C:\Program Files (x86)\yesbnd\{A16B1AF7-982D-40C3-B5C1-633E1A6A6678}, , [a8da9e112e6b66d0ffcdb9ae3bcaff01],
PUP.Optional.Linkury.ACMB1, C:\Program Files (x86)\Common Files\Joblex\InstallationConfiguration.xml, , [176b8c235a3f8caabfda71f6c045748c],
PUP.Optional.Linkury.ACMB1, C:\Program Files (x86)\Common Files\Joblex\uninstall.dat, , [176b8c235a3f8caabfda71f6c045748c],
PUP.Optional.Linkury.ACMB1, C:\Program Files (x86)\Common Files\Joblex\uninstall.ico, , [176b8c235a3f8caabfda71f6c045748c],
PUP.Optional.Linkury.ACMB1, C:\ProgramData\Quoteexs\ff.HP, , [ceb4c2edcdcc3006aa170a5d6a9b8d73],
PUP.Optional.Linkury.ACMB1, C:\ProgramData\Quoteexs\ff.NT, , [ceb4c2edcdcc3006aa170a5d6a9b8d73],
PUP.Optional.Linkury.ACMB1, C:\ProgramData\Quoteexs\snp.sc, , [ceb4c2edcdcc3006aa170a5d6a9b8d73],
PUP.Optional.Linkury.ACMB1, C:\Users\Jan\AppData\Roaming\Config.xml, , [4a38694667326dc947459ec9ae57a25e],
PUP.Optional.Linkury.ACMB1, C:\Users\Jan\AppData\Roaming\InstallationConfiguration.xml, , [f191f4bb0e8b2511e0ad5f0843c235cb],

Fyzické sektory: 0
(Nenalezeny žádné škodlivé položky)


(end)
Nahoru
Uživatelský avatar
JaRon
Moderátor
Moderátor
Příspěvky: 15797
Registrován: 29 bře 2005 13:39
Bydliště: BB-SK

Re: Zavirované PC

#6 Příspěvek od JaRon »

Ak si to nechal zmazat v mbam - restart - su nejake problemy ?
FRST |ADWCleaner |MBAM |CCleaner |AVPTool

V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
Nahoru
JanKubala
Návštěvník
Návštěvník
Příspěvky: 29
Registrován: 15 dub 2016 11:40

Re: Zavirované PC

#7 Příspěvek od JanKubala »

Tak vypadáto že je vše v pohodě. Děkuji za pomoc.
Nahoru
Uživatelský avatar
JaRon
Moderátor
Moderátor
Příspěvky: 15797
Registrován: 29 bře 2005 13:39
Bydliště: BB-SK

Re: Zavirované PC

#8 Příspěvek od JaRon »

Rado sa stalo
FRST |ADWCleaner |MBAM |CCleaner |AVPTool

V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
Nahoru
Zamčeno

Zpět na „Řešení problémů, logy“