VIRY.CZ

Pomáháme v boji s počítačovou havěti!
https://forum.viry.cz:443/

Samovolná instalace programů

https://forum.viry.cz:443/viewtopic.php?t=145907

Stránka 1 z 2

Samovolná instalace programů

Napsal: 02 zář 2015 20:11
od marketa_svobodova
Dobrý den,

už pár týdnu se mi děje, že jednou za pár dní (někdy každý den, jindy zas několik dní nic) se mi začnou instalovat různé programy (např. na odstranění virů, hry, prohlížeče apod.). Dlouhodobějším problémem je to, že se mi v jakémkoliv internetovém prohlížeči samy otevírají webové stránky. To není tak otravné jako instalace programů, ale je možné, že to spolu souvisí.

Nevím vůbec, co s tím dělat, tak prosím o radu.

Děkuji!

Re: Samovolná instalace programů

Napsal: 02 zář 2015 20:25
od Rudy
Zdravím!
Dejte log FRST: http://forum.viry.cz/viewtopic.php?f=13&t=133100 .

Re: Samovolná instalace programů

Napsal: 02 zář 2015 22:00
od marketa_svobodova
Soubory vloženy. Jeden v příloze a jeden zde ve zprávě.

Re: Samovolná instalace programů

Napsal: 03 zář 2015 16:12
od Rudy
Spusťte tuto utilitu:
Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.

Re: Samovolná instalace programů

Napsal: 03 zář 2015 22:56
od marketa_svobodova
Příloha.

Re: Samovolná instalace programů

Napsal: 04 zář 2015 16:42
od Rudy
Dejte nový log FRST.

Re: Samovolná instalace programů

Napsal: 04 zář 2015 22:33
od marketa_svobodova
frst

Re: Samovolná instalace programů

Napsal: 05 zář 2015 10:18
od Rudy
Otevřte poznámkový blok a zkopírujte do něj:
Start
HKLM\...\Run: [mbot_es_362] => [X]
HKLM\...\Run: [gmsd_br_005010077] => [X]
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Extension: No Name - C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\pa14tznl.default-1418815034923\extensions\veggy@veggyAddon.com [not found]
FF Extension: No Name - C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\pa14tznl.default-1418815034923\extensions\quick_searchff@gmail.com [not found]
FF Extension: No Name - C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\pa14tznl.default-1418815034923\extensions\sweetsearch@gmail.com [not found]
FF Extension: No Name - C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\pa14tznl.default-1418815034923\extensions\sweetsearch@gmail.com [not found]
R2 hyverumu; C:\Program Files\8A264F81-1439220725-11CB-9639-E89C0F4F1489\jnsp2E40.tmp [209920 2015-08-10] () [File not signed]
R2 comyninu; C:\Program Files\8A264F81-1439220725-11CB-9639-E89C0F4F1489\hnsp540A.tmp [161792 2015-08-10] () [File not signed]
S2 qudutepi; C:\Users\Marketa\AppData\Roaming\VOPackage\nsr3A70.tmpfs [X]
C:\Windows\system32\Siybbud.ini
C:\Windows\system32\SiybbudOff.ini
C:\Windows\system32\Siybbud.dll
C:\Windows\system32\Drivers\cherimoya.sys
C:\Users\Marketa\AppData\Local\nsp1CB2.tmp
C:\Program Files\shopperz240820151333
C:\ProgramData\lWdsManProl
c:\(CMI Limited) C:\Users\Marketa\AppData\Local\nsh1B07.tmp
C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat
C:\ProgramData\iWinManProi
C:\Users\Marketa\AppData\Local\nsr28CF.tmp
C:\Program Files\baidu
C:\task.vbs
C:\Users\Marketa\AppData\Local\nsx3E62.tmp
C:\ProgramData\2WinManPro2
C:\Users\Marketa\AppData\Local\nsvC0DA.tmp
C:\ProgramData\9WinManPro9
C:\Users\Marketa\AppData\Local\nsrA36F.tmp
c:\Users\Marketa\AppData\Local\nsr27E9.tmp
C:\Windows\Tasks\temp_ebfcfff9-7822-4bc7-b7b7-6c86ee886f55-10_user.job
C:\ProgramData\UWinManProU
C:\Users\Marketa\AppData\Local\nsh1B07.tmp
C:\Users\Marketa\AppData\Local\nsp1CB2.tmp
C:\Users\Marketa\AppData\Local\nsr27E9.tmp
C:\Users\Marketa\AppData\Local\nsr28CF.tmp
C:\Users\Marketa\AppData\Local\nsrA36F.tmp
C:\Users\Marketa\AppData\Local\nsvC0DA.tmp
C:\Users\Marketa\AppData\Local\nsx3E62.tmp
C:\ProgramData\DP45977C.lfl
C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat
C:\Users\Marketa\AppData\Local\Temp
Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

Re: Samovolná instalace programů

Napsal: 06 zář 2015 00:17
od marketa_svobodova
Fix result of Farbar Recovery Scan Tool (x86) Version:31-08-2015
Ran by Marketa (2015-09-05 20:08:13) Run:1
Running from D:\Users\Marketa\Desktop
Loaded Profiles: Marketa (Available Profiles: Marketa & ADMIN & Guest)
Boot Mode: Normal

==============================================

fixlist content:
*****************
Start
HKLM\...\Run: [mbot_es_362] => [X]
HKLM\...\Run: [gmsd_br_005010077] => [X]
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Extension: No Name - C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\pa14tznl.default-1418815034923\extensions\veggy@veggyAddon.com [not found]
FF Extension: No Name - C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\pa14tznl.default-1418815034923\extensions\quick_searchff@gmail.com [not found]
FF Extension: No Name - C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\pa14tznl.default-1418815034923\extensions\sweetsearch@gmail.com [not found]
FF Extension: No Name - C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\pa14tznl.default-1418815034923\extensions\sweetsearch@gmail.com [not found]
R2 hyverumu; C:\Program Files\8A264F81-1439220725-11CB-9639-E89C0F4F1489\jnsp2E40.tmp [209920 2015-08-10] () [File not signed]
R2 comyninu; C:\Program Files\8A264F81-1439220725-11CB-9639-E89C0F4F1489\hnsp540A.tmp [161792 2015-08-10] () [File not signed]
S2 qudutepi; C:\Users\Marketa\AppData\Roaming\VOPackage\nsr3A70.tmpfs [X]
C:\Windows\system32\Siybbud.ini
C:\Windows\system32\SiybbudOff.ini
C:\Windows\system32\Siybbud.dll
C:\Windows\system32\Drivers\cherimoya.sys
C:\Users\Marketa\AppData\Local\nsp1CB2.tmp
C:\Program Files\shopperz240820151333
C:\ProgramData\lWdsManProl
c:\(CMI Limited) C:\Users\Marketa\AppData\Local\nsh1B07.tmp
C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat
C:\ProgramData\iWinManProi
C:\Users\Marketa\AppData\Local\nsr28CF.tmp
C:\Program Files\baidu
C:\task.vbs
C:\Users\Marketa\AppData\Local\nsx3E62.tmp
C:\ProgramData\2WinManPro2
C:\Users\Marketa\AppData\Local\nsvC0DA.tmp
C:\ProgramData\9WinManPro9
C:\Users\Marketa\AppData\Local\nsrA36F.tmp
c:\Users\Marketa\AppData\Local\nsr27E9.tmp
C:\Windows\Tasks\temp_ebfcfff9-7822-4bc7-b7b7-6c86ee886f55-10_user.job
C:\ProgramData\UWinManProU
C:\Users\Marketa\AppData\Local\nsh1B07.tmp
C:\Users\Marketa\AppData\Local\nsp1CB2.tmp
C:\Users\Marketa\AppData\Local\nsr27E9.tmp
C:\Users\Marketa\AppData\Local\nsr28CF.tmp
C:\Users\Marketa\AppData\Local\nsrA36F.tmp
C:\Users\Marketa\AppData\Local\nsvC0DA.tmp
C:\Users\Marketa\AppData\Local\nsx3E62.tmp
C:\ProgramData\DP45977C.lfl
C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat
C:\Users\Marketa\AppData\Local\Temp
*****************

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\mbot_es_362 => value removed successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\gmsd_br_005010077 => value removed successfully.
HKLM\Software\\Microsoft\Internet Explorer\Main\\Search Page => value restored successfully
HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Search_URL => value restored successfully
"HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE" => key removed successfully.
C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\pa14tznl.default-1418815034923\extensions\veggy@veggyAddon.com => path removed successfully.
C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\pa14tznl.default-1418815034923\extensions\quick_searchff@gmail.com => path removed successfully.
C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\pa14tznl.default-1418815034923\extensions\sweetsearch@gmail.com => path removed successfully.
C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\pa14tznl.default-1418815034923\extensions\sweetsearch@gmail.com => path removed successfully.
hyverumu => Service stopped successfully.
hyverumu => service removed successfully.
comyninu => Service stopped successfully.
comyninu => service removed successfully.
qudutepi => service removed successfully.
C:\Windows\system32\Siybbud.ini => moved successfully
C:\Windows\system32\SiybbudOff.ini => moved successfully
C:\Windows\system32\Siybbud.dll => moved successfully
Could not move "C:\Windows\system32\Drivers\cherimoya.sys" => Scheduled to move on reboot.
C:\Users\Marketa\AppData\Local\nsp1CB2.tmp => moved successfully
C:\Program Files\shopperz240820151333 => moved successfully
C:\ProgramData\lWdsManProl => moved successfully
"c:\(CMI Limited) C:\Users\Marketa\AppData\Local\nsh1B07.tmp" => File/Folder not found.
C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat => moved successfully
C:\ProgramData\iWinManProi => moved successfully
C:\Users\Marketa\AppData\Local\nsr28CF.tmp => moved successfully
C:\Program Files\baidu => moved successfully
C:\task.vbs => moved successfully
C:\Users\Marketa\AppData\Local\nsx3E62.tmp => moved successfully
C:\ProgramData\2WinManPro2 => moved successfully
C:\Users\Marketa\AppData\Local\nsvC0DA.tmp => moved successfully
C:\ProgramData\9WinManPro9 => moved successfully
C:\Users\Marketa\AppData\Local\nsrA36F.tmp => moved successfully
c:\Users\Marketa\AppData\Local\nsr27E9.tmp => moved successfully
C:\Windows\Tasks\temp_ebfcfff9-7822-4bc7-b7b7-6c86ee886f55-10_user.job => moved successfully
C:\ProgramData\UWinManProU => moved successfully
C:\Users\Marketa\AppData\Local\nsh1B07.tmp => moved successfully
"C:\Users\Marketa\AppData\Local\nsp1CB2.tmp" => File/Folder not found.
"C:\Users\Marketa\AppData\Local\nsr27E9.tmp" => File/Folder not found.
"C:\Users\Marketa\AppData\Local\nsr28CF.tmp" => File/Folder not found.
"C:\Users\Marketa\AppData\Local\nsrA36F.tmp" => File/Folder not found.
"C:\Users\Marketa\AppData\Local\nsvC0DA.tmp" => File/Folder not found.
"C:\Users\Marketa\AppData\Local\nsx3E62.tmp" => File/Folder not found.
C:\ProgramData\DP45977C.lfl => moved successfully
"C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat" => File/Folder not found.

"C:\Users\Marketa\AppData\Local\Temp" folder move:

Could not move "C:\Users\Marketa\AppData\Local\Temp" => Scheduled to move on reboot.


Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 2015-09-05 20:12:21)<=

"C:\Windows\system32\Drivers\cherimoya.sys" => Could not move
C:\Users\Marketa\AppData\Local\Temp => moved successfully

==== End of Fixlog 20:12:22 ====

Re: Samovolná instalace programů

Napsal: 06 zář 2015 10:06
od Rudy
Smazáno. Nastala nějaká změna?

Re: Samovolná instalace programů

Napsal: 07 zář 2015 03:48
od marketa_svobodova
Vypadá to dobře, mockrát děkuji! Bez vás bych byla naprosto ztracená! Kdyby se náhodou během pár dní něco změnilo, tak dám vědět. Ještě jednou děkuji!

Re: Samovolná instalace programů

Napsal: 07 zář 2015 03:57
od marketa_svobodova
Občas se stále otvírají v prohlížeči nová okna s reklamou apod.

Re: Samovolná instalace programů

Napsal: 07 zář 2015 16:50
od Rudy
Udělejte ještě kompletní sken MBAM: http://www.malwarebytes.org/mbam.php a dejte log. Předem nic nemažte.

Re: Samovolná instalace programů

Napsal: 07 zář 2015 18:19
od marketa_svobodova
Malwarebytes Anti-Malware
http://www.malwarebytes.org

Datum skenování: 7.9.2015
Čas skenování: 13:19
Protokol: log.txt
Správce: Ano

Verze: 2.1.8.1057
Databáze malwaru: v2015.09.07.02
Databáze rootkitů: v2015.08.16.01
Licence: Zkušební verze
Ochrana proti malwaru: Zapnuto
Ochrana proti škodlivým webovým stránkám: Zapnuto
Ochrana programu: Vypnuto

OS: Windows 7 Service Pack 1
CPU: x86
Souborový systém: NTFS
Uživatel: Marketa

Typ skenu: Sken hrozeb
Výsledek: Dokončeno
Prohledaných objektů: 441852
Uplynulý čas: 58 min, 0 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Vypnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto

Procesy: 1
PUP.Optional.MultiPlug, C:\Program Files\8A264F81-1439220725-11CB-9639-E89C0F4F1489\knsj7AA8.tmp, 3132, , [010d4fde0388ce68fc735e42d430966a]

Moduly: 0
(Nenalezeny žádné škodlivé položky)

Klíče registru: 29
PUP.Optional.Shopperz.BrwsrFlsh, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\bsdriver, , [44ca0924612a0f27fb9ce1b762a343bd],
PUP.Optional.MultiPlug, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\zifojyhe, , [010d4fde0388ce68fc735e42d430966a],
PUP.Optional.CinemaPlus, HKLM\SOFTWARE\CinemaPlus-3.2cV12.08, , [36d89c91c8c36cca238986fb52b2af51],
PUP.Optional.CinemaPlus, HKLM\SOFTWARE\CinemaPlus-3.2cV12.08-nv-ie, , [f91577b644471521703cd1b0679d2fd1],
PUP.Optional.WordSurfer, HKLM\SOFTWARE\WordSurfer_1.10.0.19, , [ec2250ddb0db0f279d485567bd47c040],
PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\temp_ebfcfff9-7822-4bc7-b7b7-6c86ee886f55-10_user, , [6f9f78b5d8b39f97c7b41f69c04408f8],
PUP.Optional.VOPackage, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\VOPackage, , [789658d5b9d22c0a7425dfda1ee6847c],
PUP.Optional.Shopperz.BrwsrFlsh, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS, , [25e99a93d6b51f177fd3d2a50400936d],
PUP.Optional.PCSpeedUp, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\PCSUUCDRV, , [d13d6bc29bf085b1ccf8b0f47a8aaa56],
PUP.Optional.SavePass, HKU\S-1-5-18\SOFTWARE\SavePass 1.1-nv, , [20ee8ba22b60de580aed28828c7850b0],
PUP.Optional.SavePass, HKU\S-1-5-18\SOFTWARE\SavePass 1.1-nv-ie, , [3ad4e14c29625cda728575353ec6a957],
PUP.Optional.Shopperz.BrwsrFlsh, HKU\S-1-5-18\SOFTWARE\{788B1F46-6549-4111-8DF1-07A7FC8BF0D7}, , [6aa49a934b40171fc4684b2cb45043bd],
PUP.Optional.Shopperz.BrwsrFlsh, HKU\S-1-5-18\SOFTWARE\{9A1539FD-88FC-46C6-8B92-E6DF763A8168}, , [ce400e1f484344f2d854d2a5c83c8b75],
PUP.Optional.Shopperz.BrwsrFlsh, HKU\S-1-5-19\SOFTWARE\{4E7638A1-6962-4e44-A6B9-F40E84FD6D09}, , [58b6b875d0bbb87e6ebf5324b153639d],
PUP.Optional.Shopperz.BrwsrFlsh, HKU\S-1-5-19\SOFTWARE\{788B1F46-6549-4111-8DF1-07A7FC8BF0D7}, , [de3055d8c1caba7cb676da9d56aebd43],
PUP.Optional.Shopperz.BrwsrFlsh, HKU\S-1-5-19\SOFTWARE\{9A1539FD-88FC-46C6-8B92-E6DF763A8168}, , [848a210c800b1125d854d2a53bc908f8],
PUP.Optional.Shopperz.BrwsrFlsh, HKU\S-1-5-20\SOFTWARE\{4E7638A1-6962-4e44-A6B9-F40E84FD6D09}, , [44caad801c6f60d6c26b0473699bce32],
PUP.Optional.Shopperz.BrwsrFlsh, HKU\S-1-5-20\SOFTWARE\{788B1F46-6549-4111-8DF1-07A7FC8BF0D7}, , [f41aef3e3259f343e14bf780c14321df],
PUP.Optional.Shopperz.BrwsrFlsh, HKU\S-1-5-20\SOFTWARE\{9A1539FD-88FC-46C6-8B92-E6DF763A8168}, , [e02ef33ac8c3b97dd65678ffcb39ba46],
PUP.Optional.CinemaPlus, HKU\S-1-5-21-3439579005-2339205203-1695108522-1000\SOFTWARE\CinemaPlus-3.2cV09.08-nv-ie, , [ec229b92a2e93ff7b5d71d640ff5a65a],
PUP.Optional.CinemaPlus, HKU\S-1-5-21-3439579005-2339205203-1695108522-1000\SOFTWARE\CinemaPlus-3.2cV11.08-nv-ie, , [46c837f637548caa305c7c05c0447c84],
PUP.Optional.CinemaPlus, HKU\S-1-5-21-3439579005-2339205203-1695108522-1000\SOFTWARE\CinemaPlus-3.2cV12.08-nv-ie, , [848af23b4744ba7ce4a84041a2629a66],
PUP.Optional.CinemaPlus, HKU\S-1-5-21-3439579005-2339205203-1695108522-1000\SOFTWARE\CinemaPlus-4.2vV10.08-nv-ie, , [fe103cf1177442f45636463b1ce807f9],
PUP.Optional.GoHD, HKU\S-1-5-21-3439579005-2339205203-1695108522-1000\SOFTWARE\GoHD-nv-ie, , [8f7fcc61088367cf7b45246dc73d9769],
PUP.Optional.InternetSpeedChecker.PrxySvrRST, HKU\S-1-5-21-3439579005-2339205203-1695108522-1000\SOFTWARE\Internet Speed Checker-nv-ie, , [22ec0d208b004de970ae71b7c14235cb],
PUP.Optional.SavePass, HKU\S-1-5-21-3439579005-2339205203-1695108522-1000\SOFTWARE\SavePass 1.1-nv-ie, , [59b5a8851f6c94a29f588a20aa5a8a76],
PUP.Optional.OutBrowse, HKU\S-1-5-21-3439579005-2339205203-1695108522-1000\SOFTWARE\OB, , [d23c7ab3355689ad3f8adac90afa14ec],
PUP.Optional.Shopperz.BrwsrFlsh, HKU\S-1-5-21-3439579005-2339205203-1695108522-1000\SOFTWARE\{788B1F46-6549-4111-8DF1-07A7FC8BF0D7}, , [57b7f33a7a11d0660626e88fdc28dc24],
PUP.Optional.Shopperz.BrwsrFlsh, HKU\S-1-5-21-3439579005-2339205203-1695108522-1000\SOFTWARE\{9A1539FD-88FC-46C6-8B92-E6DF763A8168}, , [be509b9299f2d2642804ef88a262e917],

Hodnoty registru: 24
PUP.Optional.Shopperz.BrwsrFlsh, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|prtstart, C:\Program Files\shopperz300820151717\dr_inst.exe url=aHR0cDovL2Nkcy5zNm01bTlkNy5od2Nkbi5uZXQvYWRkb25fNC9wci8zMDA4MjAxNS8vcHJjMzIuZXhl lpath=QzpcUHJvZ3JhbSBGaWxlc1xzaG9wcGVyejMwMDgyMDE1MTcxN1xwcmMuZXhl time=1 cl=LWluc3RhbGw=, , [8e8052db4744261006392a4dd4301de3]
PUP.Optional.GamesDesktop, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|gmsd_br_005010078, , [19f5ce5f8cff48ee772a6e22c1437c84],
PUP.Optional.Shopperz.BrwsrFlsh, HKLM\SOFTWARE\MOZILLA\FIREFOX\EXTENSIONS|{0420BEC0-F2C1-4578-8F19-471B9E5C63A5}, C:\Program Files\shopperz240820151333\Firefox, , [6aa4f439eaa1c57173d407705ba916ea]
PUP.Optional.Shopperz.BrwsrFlsh, HKLM\SOFTWARE\MOZILLA\FIREFOX\EXTENSIONS|{8152CFEC-06C1-4BA3-95C2-AD1A8E15AD1D}, C:\Program Files\shopperz300820151717\Firefox, , [dd3150dd6f1c5fd7c68102752dd726da]
PUP.Optional.Shopperz.BrwsrFlsh, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS|{5081D2D4-1637-404c-B74F-50526718257D}, C:\Program Files\shopperz\Firefox, , [25e99a93d6b51f177fd3d2a50400936d]
PUP.Optional.Shopperz.BrwsrFlsh, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS|{0420BEC0-F2C1-4578-8F19-471B9E5C63A5}, C:\Program Files\shopperz240820151333\Firefox, , [e42a43eaa0eb1f17f061e59209fb669a]
PUP.Optional.Shopperz.BrwsrFlsh, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS|{8152CFEC-06C1-4BA3-95C2-AD1A8E15AD1D}, C:\Program Files\shopperz300820151717\Firefox, , [f519200d018ac86eff5279fe51b3946c]
PUP.Optional.MultiPlug, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\zifojyhe|ImagePath, C:\Program Files\8A264F81-1439220725-11CB-9639-E89C0F4F1489\knsj7AA8.tmp, , [0b039d901279bd79b4e6aff1f70dd52b]
PUP.Optional.Shopperz.BrwsrFlsh, HKU\S-1-5-18\SOFTWARE\{788B1F46-6549-4111-8DF1-07A7FC8BF0D7}|Name, C:\Program Files\shopperz300820151717\Hupsacs.exe, , [6aa49a934b40171fc4684b2cb45043bd]
PUP.Optional.Shopperz.BrwsrFlsh, HKU\S-1-5-18\SOFTWARE\{9A1539FD-88FC-46C6-8B92-E6DF763A8168}|Name, C:\Program Files\shopperz240820151333\Conrygi.exe, , [ce400e1f484344f2d854d2a5c83c8b75]
PUP.Optional.Shopperz.BrwsrFlsh, HKU\S-1-5-19\SOFTWARE\{788B1F46-6549-4111-8DF1-07A7FC8BF0D7}|Name, C:\Program Files\shopperz300820151717\Hupsacs.exe, , [de3055d8c1caba7cb676da9d56aebd43]
PUP.Optional.Shopperz.BrwsrFlsh, HKU\S-1-5-19\SOFTWARE\{9A1539FD-88FC-46C6-8B92-E6DF763A8168}|Name, C:\Program Files\shopperz240820151333\Conrygi.exe, , [848a210c800b1125d854d2a53bc908f8]
PUP.Optional.Shopperz.BrwsrFlsh, HKU\S-1-5-20\SOFTWARE\{788B1F46-6549-4111-8DF1-07A7FC8BF0D7}|Name, C:\Program Files\shopperz300820151717\Hupsacs.exe, , [f41aef3e3259f343e14bf780c14321df]
PUP.Optional.Shopperz.BrwsrFlsh, HKU\S-1-5-20\SOFTWARE\{9A1539FD-88FC-46C6-8B92-E6DF763A8168}|Name, C:\Program Files\shopperz240820151333\Conrygi.exe, , [e02ef33ac8c3b97dd65678ffcb39ba46]
PUP.Optional.AppHide, HKU\S-1-5-21-3439579005-2339205203-1695108522-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|apphide, C:\Program Files\baidu\pps.exe, , [6ba3cb62d5b69f97496987f350b44cb4]
PUP.Optional.OutBrowse, HKU\S-1-5-21-3439579005-2339205203-1695108522-1000\SOFTWARE\OB|monitype20, 8/10/15 17:32:31, , [d23c7ab3355689ad3f8adac90afa14ec]
PUP.Optional.OutBrowse, HKU\S-1-5-21-3439579005-2339205203-1695108522-1000\SOFTWARE\OB|monitype22, 8/10/15 17:32:32, , [3ed08da0f09bfb3b58716142d2329b65]
PUP.Optional.OutBrowse, HKU\S-1-5-21-3439579005-2339205203-1695108522-1000\SOFTWARE\OB|monitype24, 8/10/15 17:32:32, , [60ae08252368ed4910b9bce761a311ef]
PUP.Optional.OutBrowse, HKU\S-1-5-21-3439579005-2339205203-1695108522-1000\SOFTWARE\OB|monitype27, 8/10/15 17:32:32, , [2be35ecf22699c9aae1bd0d3ac58b749]
PUP.Optional.OutBrowse, HKU\S-1-5-21-3439579005-2339205203-1695108522-1000\SOFTWARE\OB|monitype6, 8/10/15 17:33:42, , [54ba55d81675c076fccd9b08e3215ca4]
PUP.Optional.OutBrowse, HKU\S-1-5-21-3439579005-2339205203-1695108522-1000\SOFTWARE\OB|monitype21, 8/10/15 17:36:48, , [808e3fee55360e286960267d768e7090]
PUP.Optional.OutBrowse, HKU\S-1-5-21-3439579005-2339205203-1695108522-1000\SOFTWARE\OB|monitype14, 8/10/15 17:46:0, , [fc1289a4ec9ff6400abf703350b41ae6]
PUP.Optional.Shopperz.BrwsrFlsh, HKU\S-1-5-21-3439579005-2339205203-1695108522-1000\SOFTWARE\{788B1F46-6549-4111-8DF1-07A7FC8BF0D7}|Name, C:\Program Files\shopperz300820151717\Hupsacs.exe, , [57b7f33a7a11d0660626e88fdc28dc24]
PUP.Optional.Shopperz.BrwsrFlsh, HKU\S-1-5-21-3439579005-2339205203-1695108522-1000\SOFTWARE\{9A1539FD-88FC-46C6-8B92-E6DF763A8168}|Name, C:\Program Files\shopperz240820151333\Conrygi.exe, , [be509b9299f2d2642804ef88a262e917]

Data registru: 0
(Nenalezeny žádné škodlivé položky)

Složky: 19
PUP.Optional.MultiPlug, C:\Program Files\8A264F81-1439220725-11CB-9639-E89C0F4F1489, , [010d4fde0388ce68fc735e42d430966a],
PUP.Optional.ProtectWindowsManager, C:\ProgramData\6WinManPro6, , [b65861cc7912ae88858c72b1f211f709],
PUP.Optional.ProtectWindowsManager, C:\ProgramData\6WinManPro6\update, , [b65861cc7912ae88858c72b1f211f709],
PUP.Optional.ProtectWindowsManager, C:\ProgramData\9WdsManPro9, , [937bfe2faae1ca6ce32e7aa9996a7c84],
PUP.Optional.ProtectWindowsManager, C:\ProgramData\9WdsManPro9\update, , [937bfe2faae1ca6ce32e7aa9996a7c84],
PUP.Optional.ProtectWindowsManager, C:\ProgramData\OWdsManProO, , [66a8ac818cffb581f41d57ccbd462ed2],
PUP.Optional.ProtectWindowsManager, C:\ProgramData\tWdsManProt, , [6ca2aa8328639d9927ea7da68281c040],
PUP.Optional.ZoomIt, C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\pa14tznl.default-1418815034923\extensions\{5e8e14f1-ca7f-892e-f4c8-db890edf44f6}, , [62ac68c54348d95dca13fda3689db34d],
PUP.Optional.ZoomIt, C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\pa14tznl.default-1418815034923\extensions\{5e8e14f1-ca7f-892e-f4c8-db890edf44f6}\chrome, , [62ac68c54348d95dca13fda3689db34d],
PUP.Optional.ZoomIt, C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\pa14tznl.default-1418815034923\extensions\{5e8e14f1-ca7f-892e-f4c8-db890edf44f6}\chrome\content, , [62ac68c54348d95dca13fda3689db34d],
PUP.Optional.ZoomIt, C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\pa14tznl.default-1418815034923\extensions\{5e8e14f1-ca7f-892e-f4c8-db890edf44f6}\chrome\skin, , [62ac68c54348d95dca13fda3689db34d],
PUP.Optional.ZoomIt, C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\pa14tznl.default-1418815034923\extensions\{5e8e14f1-ca7f-892e-f4c8-db890edf44f6}\modules, , [62ac68c54348d95dca13fda3689db34d],
PUP.Optional.ZoomIt, C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\pa14tznl.default-1418815034923\extensions\{5e8e14f1-ca7f-892e-f4c8-db890edf44f6}\modules\tools, , [62ac68c54348d95dca13fda3689db34d],
PUP.Optional.WebProtector, C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\pa14tznl.default-1418815034923\extensions\{a1ec290a-8ad8-c41a-855e-38572413c1aa}, , [3bd3e944a3e88da9edc29c049273b24e],
PUP.Optional.WebProtector, C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\pa14tznl.default-1418815034923\extensions\{a1ec290a-8ad8-c41a-855e-38572413c1aa}\chrome, , [3bd3e944a3e88da9edc29c049273b24e],
PUP.Optional.WebProtector, C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\pa14tznl.default-1418815034923\extensions\{a1ec290a-8ad8-c41a-855e-38572413c1aa}\chrome\content, , [3bd3e944a3e88da9edc29c049273b24e],
PUP.Optional.WebProtector, C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\pa14tznl.default-1418815034923\extensions\{a1ec290a-8ad8-c41a-855e-38572413c1aa}\chrome\skin, , [3bd3e944a3e88da9edc29c049273b24e],
PUP.Optional.WebProtector, C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\pa14tznl.default-1418815034923\extensions\{a1ec290a-8ad8-c41a-855e-38572413c1aa}\modules, , [3bd3e944a3e88da9edc29c049273b24e],
PUP.Optional.WebProtector, C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\pa14tznl.default-1418815034923\extensions\{a1ec290a-8ad8-c41a-855e-38572413c1aa}\modules\tools, , [3bd3e944a3e88da9edc29c049273b24e],

Soubory: 84
PUP.Optional.Shopperz.BrwsrFlsh, C:\Windows\System32\drivers\bsdriver.sys, , [44ca0924612a0f27fb9ce1b762a343bd],
PUP.Optional.WProtectManager, C:\ProgramData\9WdsManPro9\WdsManPro.exe, , [5db10528dead2d09f0616d2d3acb837d],
PUP.Optional.WProtectManager, C:\ProgramData\OWdsManProO\WdsManPro.exe, , [0707f03d5e2dfc3a6de4b8e25aab01ff],
PUP.Optional.WProtectManager, C:\ProgramData\tWdsManProt\WdsManPro.exe, , [e42a87a6b4d7cf67ca871e7cf90c6d93],
Adware.ConvertAd, C:\Program Files\8A264F81-1439220725-11CB-9639-E89C0F4F1489\hnsp540A.tmp, , [16f8e8459af138fe481ee3c58e7325db],
Adware.ConvertAd, C:\Program Files\8A264F81-1439220725-11CB-9639-E89C0F4F1489\jnsp2E40.tmp, , [32dcbf6e8209d75f0b5c1791ec157b85],
PUP.Optional.Shopperz.BrwsrFlsh, C:\Windows\System32\drivers\cherimoya.sys, , [fd119a932566aa8cc5d2eeaa5aab27d9],
PUP.Optional.AnyProtect, C:\Users\Marketa\AppData\Local\nsg5018.tmp, , [9e70b27be8a37db985cb62200200ef11],
Rootkit.Agent.A, C:\Windows\System32\drivers\cherimoya.sys, , [0b0345e81477d75f022748e212f1ec14],
PUP.Optional.ColorMedia, C:\Windows\System32\ColorMedia.ini, , [c14d72bbabe0f541bdc34a38749059a7],
PUP.Optional.CrossRider, C:\Windows\System32\Tasks\temp_ebfcfff9-7822-4bc7-b7b7-6c86ee886f55-10_user, , [69a506274c3f4fe78087028534d051af],
PUP.Optional.MultiPlug, C:\Program Files\8A264F81-1439220725-11CB-9639-E89C0F4F1489\hnsp540A.tmp, , [010d4fde0388ce68fc735e42d430966a],
PUP.Optional.MultiPlug, C:\Program Files\8A264F81-1439220725-11CB-9639-E89C0F4F1489\jnsp2E40.tmp, , [010d4fde0388ce68fc735e42d430966a],
PUP.Optional.MultiPlug, C:\Program Files\8A264F81-1439220725-11CB-9639-E89C0F4F1489\knsj7AA8.tmp, , [010d4fde0388ce68fc735e42d430966a],
PUP.Optional.MultiPlug, C:\Program Files\8A264F81-1439220725-11CB-9639-E89C0F4F1489\rnsfC702.exe, , [010d4fde0388ce68fc735e42d430966a],
PUP.Optional.MultiPlug, C:\Program Files\8A264F81-1439220725-11CB-9639-E89C0F4F1489\Uninstall.exe, , [010d4fde0388ce68fc735e42d430966a],
PUP.Optional.MultiPlug, C:\Program Files\8A264F81-1439220725-11CB-9639-E89C0F4F1489\vnsfF527.tmp, , [010d4fde0388ce68fc735e42d430966a],
PUP.Optional.WOffer, C:\Users\Marketa\AppData\Roaming\WOffer.boostrap.log, , [22ec30fd6f1c37ffadfbd0ec729222de],
PUP.Optional.ProtectWindowsManager, C:\ProgramData\6WinManPro6\updateconf, , [b65861cc7912ae88858c72b1f211f709],
PUP.Optional.ProtectWindowsManager, C:\ProgramData\9WdsManPro9\updateconf, , [937bfe2faae1ca6ce32e7aa9996a7c84],
PUP.Optional.ZoomIt, C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\pa14tznl.default-1418815034923\extensions\{5e8e14f1-ca7f-892e-f4c8-db890edf44f6}\install.rdf, , [62ac68c54348d95dca13fda3689db34d],
PUP.Optional.ZoomIt, C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\pa14tznl.default-1418815034923\extensions\{5e8e14f1-ca7f-892e-f4c8-db890edf44f6}\chrome.manifest, , [62ac68c54348d95dca13fda3689db34d],
PUP.Optional.ZoomIt, C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\pa14tznl.default-1418815034923\extensions\{5e8e14f1-ca7f-892e-f4c8-db890edf44f6}\chrome\content\content.js, , [62ac68c54348d95dca13fda3689db34d],
PUP.Optional.ZoomIt, C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\pa14tznl.default-1418815034923\extensions\{5e8e14f1-ca7f-892e-f4c8-db890edf44f6}\chrome\content\html5slider.js, , [62ac68c54348d95dca13fda3689db34d],
PUP.Optional.ZoomIt, C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\pa14tznl.default-1418815034923\extensions\{5e8e14f1-ca7f-892e-f4c8-db890edf44f6}\chrome\content\jquery-1.8.3.min.js, , [62ac68c54348d95dca13fda3689db34d],
PUP.Optional.ZoomIt, C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\pa14tznl.default-1418815034923\extensions\{5e8e14f1-ca7f-892e-f4c8-db890edf44f6}\chrome\content\li.js, , [62ac68c54348d95dca13fda3689db34d],
PUP.Optional.ZoomIt, C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\pa14tznl.default-1418815034923\extensions\{5e8e14f1-ca7f-892e-f4c8-db890edf44f6}\chrome\content\main.js, , [62ac68c54348d95dca13fda3689db34d],
PUP.Optional.ZoomIt, C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\pa14tznl.default-1418815034923\extensions\{5e8e14f1-ca7f-892e-f4c8-db890edf44f6}\chrome\content\main.xul, , [62ac68c54348d95dca13fda3689db34d],
PUP.Optional.ZoomIt, C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\pa14tznl.default-1418815034923\extensions\{5e8e14f1-ca7f-892e-f4c8-db890edf44f6}\chrome\content\options.html, , [62ac68c54348d95dca13fda3689db34d],
PUP.Optional.ZoomIt, C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\pa14tznl.default-1418815034923\extensions\{5e8e14f1-ca7f-892e-f4c8-db890edf44f6}\chrome\content\options.js, , [62ac68c54348d95dca13fda3689db34d],
PUP.Optional.ZoomIt, C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\pa14tznl.default-1418815034923\extensions\{5e8e14f1-ca7f-892e-f4c8-db890edf44f6}\chrome\content\tools.js, , [62ac68c54348d95dca13fda3689db34d],
PUP.Optional.ZoomIt, C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\pa14tznl.default-1418815034923\extensions\{5e8e14f1-ca7f-892e-f4c8-db890edf44f6}\chrome\content\tr.js, , [62ac68c54348d95dca13fda3689db34d],
PUP.Optional.ZoomIt, C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\pa14tznl.default-1418815034923\extensions\{5e8e14f1-ca7f-892e-f4c8-db890edf44f6}\chrome\content\zoom.js, , [62ac68c54348d95dca13fda3689db34d],
PUP.Optional.ZoomIt, C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\pa14tznl.default-1418815034923\extensions\{5e8e14f1-ca7f-892e-f4c8-db890edf44f6}\chrome\skin\button.png, , [62ac68c54348d95dca13fda3689db34d],
PUP.Optional.ZoomIt, C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\pa14tznl.default-1418815034923\extensions\{5e8e14f1-ca7f-892e-f4c8-db890edf44f6}\chrome\skin\icon32x32-disabled.png, , [62ac68c54348d95dca13fda3689db34d],
PUP.Optional.ZoomIt, C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\pa14tznl.default-1418815034923\extensions\{5e8e14f1-ca7f-892e-f4c8-db890edf44f6}\chrome\skin\icon32x32.png, , [62ac68c54348d95dca13fda3689db34d],
PUP.Optional.ZoomIt, C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\pa14tznl.default-1418815034923\extensions\{5e8e14f1-ca7f-892e-f4c8-db890edf44f6}\chrome\skin\options.css, , [62ac68c54348d95dca13fda3689db34d],
PUP.Optional.ZoomIt, C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\pa14tznl.default-1418815034923\extensions\{5e8e14f1-ca7f-892e-f4c8-db890edf44f6}\chrome\skin\options_bg.png, , [62ac68c54348d95dca13fda3689db34d],
PUP.Optional.ZoomIt, C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\pa14tznl.default-1418815034923\extensions\{5e8e14f1-ca7f-892e-f4c8-db890edf44f6}\chrome\skin\otaznik.png, , [62ac68c54348d95dca13fda3689db34d],
PUP.Optional.ZoomIt, C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\pa14tznl.default-1418815034923\extensions\{5e8e14f1-ca7f-892e-f4c8-db890edf44f6}\chrome\skin\slider.png, , [62ac68c54348d95dca13fda3689db34d],
PUP.Optional.ZoomIt, C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\pa14tznl.default-1418815034923\extensions\{5e8e14f1-ca7f-892e-f4c8-db890edf44f6}\modules\addon_d.js, , [62ac68c54348d95dca13fda3689db34d],
PUP.Optional.ZoomIt, C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\pa14tznl.default-1418815034923\extensions\{5e8e14f1-ca7f-892e-f4c8-db890edf44f6}\modules\addon_info.js, , [62ac68c54348d95dca13fda3689db34d],
PUP.Optional.ZoomIt, C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\pa14tznl.default-1418815034923\extensions\{5e8e14f1-ca7f-892e-f4c8-db890edf44f6}\modules\file_cacher.js, , [62ac68c54348d95dca13fda3689db34d],
PUP.Optional.ZoomIt, C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\pa14tznl.default-1418815034923\extensions\{5e8e14f1-ca7f-892e-f4c8-db890edf44f6}\modules\guid.js, , [62ac68c54348d95dca13fda3689db34d],
PUP.Optional.ZoomIt, C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\pa14tznl.default-1418815034923\extensions\{5e8e14f1-ca7f-892e-f4c8-db890edf44f6}\modules\observer.js, , [62ac68c54348d95dca13fda3689db34d],
PUP.Optional.ZoomIt, C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\pa14tznl.default-1418815034923\extensions\{5e8e14f1-ca7f-892e-f4c8-db890edf44f6}\modules\pref_man.js, , [62ac68c54348d95dca13fda3689db34d],
PUP.Optional.ZoomIt, C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\pa14tznl.default-1418815034923\extensions\{5e8e14f1-ca7f-892e-f4c8-db890edf44f6}\modules\pu_upd.js, , [62ac68c54348d95dca13fda3689db34d],
PUP.Optional.ZoomIt, C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\pa14tznl.default-1418815034923\extensions\{5e8e14f1-ca7f-892e-f4c8-db890edf44f6}\modules\timer.js, , [62ac68c54348d95dca13fda3689db34d],
PUP.Optional.ZoomIt, C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\pa14tznl.default-1418815034923\extensions\{5e8e14f1-ca7f-892e-f4c8-db890edf44f6}\modules\time_passed.js, , [62ac68c54348d95dca13fda3689db34d],
PUP.Optional.ZoomIt, C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\pa14tznl.default-1418815034923\extensions\{5e8e14f1-ca7f-892e-f4c8-db890edf44f6}\modules\xcipher.js, , [62ac68c54348d95dca13fda3689db34d],
PUP.Optional.ZoomIt, C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\pa14tznl.default-1418815034923\extensions\{5e8e14f1-ca7f-892e-f4c8-db890edf44f6}\modules\tools\days_passed.js, , [62ac68c54348d95dca13fda3689db34d],
PUP.Optional.ZoomIt, C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\pa14tznl.default-1418815034923\extensions\{5e8e14f1-ca7f-892e-f4c8-db890edf44f6}\modules\tools\ff_info.js, , [62ac68c54348d95dca13fda3689db34d],
PUP.Optional.ZoomIt, C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\pa14tznl.default-1418815034923\extensions\{5e8e14f1-ca7f-892e-f4c8-db890edf44f6}\modules\tools\firstrun.js, , [62ac68c54348d95dca13fda3689db34d],
PUP.Optional.ZoomIt, C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\pa14tznl.default-1418815034923\extensions\{5e8e14f1-ca7f-892e-f4c8-db890edf44f6}\modules\tools\os.js, , [62ac68c54348d95dca13fda3689db34d],
PUP.Optional.WebProtector, C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\pa14tznl.default-1418815034923\extensions\{a1ec290a-8ad8-c41a-855e-38572413c1aa}\install.rdf, , [3bd3e944a3e88da9edc29c049273b24e],
PUP.Optional.WebProtector, C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\pa14tznl.default-1418815034923\extensions\{a1ec290a-8ad8-c41a-855e-38572413c1aa}\chrome.manifest, , [3bd3e944a3e88da9edc29c049273b24e],
PUP.Optional.WebProtector, C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\pa14tznl.default-1418815034923\extensions\{a1ec290a-8ad8-c41a-855e-38572413c1aa}\chrome\content\main.js, , [3bd3e944a3e88da9edc29c049273b24e],
PUP.Optional.WebProtector, C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\pa14tznl.default-1418815034923\extensions\{a1ec290a-8ad8-c41a-855e-38572413c1aa}\chrome\content\main.xul, , [3bd3e944a3e88da9edc29c049273b24e],
PUP.Optional.WebProtector, C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\pa14tznl.default-1418815034923\extensions\{a1ec290a-8ad8-c41a-855e-38572413c1aa}\chrome\content\tools.js, , [3bd3e944a3e88da9edc29c049273b24e],
PUP.Optional.WebProtector, C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\pa14tznl.default-1418815034923\extensions\{a1ec290a-8ad8-c41a-855e-38572413c1aa}\chrome\content\tr.js, , [3bd3e944a3e88da9edc29c049273b24e],
PUP.Optional.WebProtector, C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\pa14tznl.default-1418815034923\extensions\{a1ec290a-8ad8-c41a-855e-38572413c1aa}\chrome\content\wp.html, , [3bd3e944a3e88da9edc29c049273b24e],
PUP.Optional.WebProtector, C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\pa14tznl.default-1418815034923\extensions\{a1ec290a-8ad8-c41a-855e-38572413c1aa}\chrome\skin\favicon.ico, , [3bd3e944a3e88da9edc29c049273b24e],
PUP.Optional.WebProtector, C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\pa14tznl.default-1418815034923\extensions\{a1ec290a-8ad8-c41a-855e-38572413c1aa}\chrome\skin\icon16x16.png, , [3bd3e944a3e88da9edc29c049273b24e],
PUP.Optional.WebProtector, C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\pa14tznl.default-1418815034923\extensions\{a1ec290a-8ad8-c41a-855e-38572413c1aa}\chrome\skin\icon32x32.png, , [3bd3e944a3e88da9edc29c049273b24e],
PUP.Optional.WebProtector, C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\pa14tznl.default-1418815034923\extensions\{a1ec290a-8ad8-c41a-855e-38572413c1aa}\chrome\skin\loader.css, , [3bd3e944a3e88da9edc29c049273b24e],
PUP.Optional.WebProtector, C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\pa14tznl.default-1418815034923\extensions\{a1ec290a-8ad8-c41a-855e-38572413c1aa}\chrome\skin\main.css, , [3bd3e944a3e88da9edc29c049273b24e],
PUP.Optional.WebProtector, C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\pa14tznl.default-1418815034923\extensions\{a1ec290a-8ad8-c41a-855e-38572413c1aa}\chrome\skin\notSafe150x30.png, , [3bd3e944a3e88da9edc29c049273b24e],
PUP.Optional.WebProtector, C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\pa14tznl.default-1418815034923\extensions\{a1ec290a-8ad8-c41a-855e-38572413c1aa}\chrome\skin\safe150x30.png, , [3bd3e944a3e88da9edc29c049273b24e],
PUP.Optional.WebProtector, C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\pa14tznl.default-1418815034923\extensions\{a1ec290a-8ad8-c41a-855e-38572413c1aa}\chrome\skin\wp.css, , [3bd3e944a3e88da9edc29c049273b24e],
PUP.Optional.WebProtector, C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\pa14tznl.default-1418815034923\extensions\{a1ec290a-8ad8-c41a-855e-38572413c1aa}\modules\AddonInfo.js, , [3bd3e944a3e88da9edc29c049273b24e],
PUP.Optional.WebProtector, C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\pa14tznl.default-1418815034923\extensions\{a1ec290a-8ad8-c41a-855e-38572413c1aa}\modules\FileCacher.js, , [3bd3e944a3e88da9edc29c049273b24e],
PUP.Optional.WebProtector, C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\pa14tznl.default-1418815034923\extensions\{a1ec290a-8ad8-c41a-855e-38572413c1aa}\modules\GUID.js, , [3bd3e944a3e88da9edc29c049273b24e],
PUP.Optional.WebProtector, C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\pa14tznl.default-1418815034923\extensions\{a1ec290a-8ad8-c41a-855e-38572413c1aa}\modules\MessageDisplayer.js, , [3bd3e944a3e88da9edc29c049273b24e],
PUP.Optional.WebProtector, C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\pa14tznl.default-1418815034923\extensions\{a1ec290a-8ad8-c41a-855e-38572413c1aa}\modules\Observer.js, , [3bd3e944a3e88da9edc29c049273b24e],
PUP.Optional.WebProtector, C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\pa14tznl.default-1418815034923\extensions\{a1ec290a-8ad8-c41a-855e-38572413c1aa}\modules\PrefMan.js, , [3bd3e944a3e88da9edc29c049273b24e],
PUP.Optional.WebProtector, C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\pa14tznl.default-1418815034923\extensions\{a1ec290a-8ad8-c41a-855e-38572413c1aa}\modules\TimePassed.js, , [3bd3e944a3e88da9edc29c049273b24e],
PUP.Optional.WebProtector, C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\pa14tznl.default-1418815034923\extensions\{a1ec290a-8ad8-c41a-855e-38572413c1aa}\modules\Timer.js, , [3bd3e944a3e88da9edc29c049273b24e],
PUP.Optional.WebProtector, C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\pa14tznl.default-1418815034923\extensions\{a1ec290a-8ad8-c41a-855e-38572413c1aa}\modules\ToolbarButton.js, , [3bd3e944a3e88da9edc29c049273b24e],
PUP.Optional.WebProtector, C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\pa14tznl.default-1418815034923\extensions\{a1ec290a-8ad8-c41a-855e-38572413c1aa}\modules\WebsiteVerifier.js, , [3bd3e944a3e88da9edc29c049273b24e],
PUP.Optional.WebProtector, C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\pa14tznl.default-1418815034923\extensions\{a1ec290a-8ad8-c41a-855e-38572413c1aa}\modules\tools\DaysPassed.js, , [3bd3e944a3e88da9edc29c049273b24e],
PUP.Optional.WebProtector, C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\pa14tznl.default-1418815034923\extensions\{a1ec290a-8ad8-c41a-855e-38572413c1aa}\modules\tools\FFInfo.js, , [3bd3e944a3e88da9edc29c049273b24e],
PUP.Optional.WebProtector, C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\pa14tznl.default-1418815034923\extensions\{a1ec290a-8ad8-c41a-855e-38572413c1aa}\modules\tools\Firstrun.js, , [3bd3e944a3e88da9edc29c049273b24e],
PUP.Optional.WebProtector, C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\pa14tznl.default-1418815034923\extensions\{a1ec290a-8ad8-c41a-855e-38572413c1aa}\modules\tools\Os.js, , [3bd3e944a3e88da9edc29c049273b24e],
PUP.Optional.HijackHosts.Gen, C:\Windows\System32\abis\cuuf\fah.dat, , [3ed00a23c0cb0b2bed6ff0adab5a6b95],

Fyzické sektory: 0
(Nenalezeny žádné škodlivé položky)


(end)

Re: Samovolná instalace programů

Napsal: 07 zář 2015 18:20
od Rudy
Všechny nálezy MBAM smažte.
Všechny časy jsou v UTC+01:00
Stránka 1 z 2

Založeno na phpBB® Forum Software © phpBB Limited

Český překlad – phpBB.cz