Preventivna kontrola logu

[Noone]

Zdravim, poprosil by som o preventivnu kontrolu logu sestrinho notebooku. Dakujem

Logfile of random's system information tool 1.16 (written by random/random)
Run by pc at 2017-04-07 19:17:22
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 146 GB (61%) free of 238 GB
Total RAM: 4061 MB (39% free)
X64

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:17:37, on 7. 4. 2017
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18315)
Boot mode: Normal

Running processes:
C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE
C:\Windows\Samsung\PanelMgr\SSMMgr.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\pc_RSITx64.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {b6315c48-f861-4913-9578-1b5fac41ebe0} - (no file)
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll
O2 - BHO: (no name) - {b6315c48-f861-4913-9578-1b5fac41ebe0} - (no file)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Windows\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Samsung PanelMgr] C:\Windows\Samsung\PanelMgr\ssmmgr.exe /autorun
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - .DEFAULT User Startup: TRDCReminder.lnk = C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (User 'Default user')
O4 - Startup: Orezávač obrazovky a spúšťač programu OneNote 2007.lnk = C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Odoslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&oslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~2\Office12\ONBttnIE.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: DbxSvc - Unknown owner - C:\Windows\system32\DbxSvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Malwarebytes Service (MBAMService) - Malwarebytes - C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: TOSHIBA Bluetooth Service - TOSHIBA CORPORATION - C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 8374 bytes

====== Enumerating Processes ======

C:\Windows\system32\csrss.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
"C:\Program Files\Microsoft Security Client\MsMpEng.exe"
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\atieclxx.exe
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\taskhost.exe
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
C:\Windows\system32\DbxSvc.exe
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe"
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe"
"C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
"C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE" /tsr
C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
"C:\Windows\Samsung\PanelMgr\SSMMgr.exe" /autorun
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
C:\Windows\Samsung\PanelMgr\caller64.exe Samsung PanelMgr
C:\Program Files\CCleaner\CCleaner64.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
C:\Windows\system32\svchost.exe -k netsvcs
"C:\Program Files\Microsoft Security Client\NisSrv.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=crashpad-handler /prefetch:7 "--database=C:\Users\pc\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\pc\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win32 --annotation=prod=Chrome --annotation=ver=57.0.2987.133 --initial-client-data=0x1ac,0x1b8,0x1bc,0x1b0,0x1c0,0x70ee7dc8,0x70ee7dbc,0x70ee7dd4
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=watcher --main-thread-id=2124 --on-initialized-event-handle=580 --parent-handle=584 /prefetch:6
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --field-trial-handle=1284 --disable-d3d11 --disable-direct-composition --supports-dual-gpus=false --gpu-driver-bug-workarounds=7,10,16,18,19,20,23,26,41,74 --disable-gl-extensions="GL_KHR_blend_equation_advanced GL_KHR_blend_equation_advanced_coherent" --gpu-vendor-id=0x1002 --gpu-device-id=0x9480 --gpu-driver-vendor="ATI Technologies Inc." --gpu-driver-version=8.634.1.0 --gpu-driver-date=7-29-2009 --service-request-channel-token=DE1507969D3013276E4E05D9E60F044C --mojo-platform-channel-handle=1296 --ignored=" --type=renderer " /prefetch:2
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1284 --primordial-pipe-token=EB8443F14A95CD0EB52F6E4001DADED4 --lang=sk --extension-process --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=true --enable-pinch --device-scale-factor=1 --num-raster-threads=1 --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553 --service-request-channel-token=EB8443F14A95CD0EB52F6E4001DADED4 --renderer-client-id=4 --mojo-platform-channel-handle=2584 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1284 --primordial-pipe-token=DAF1E6384A606E407E0F5D219A8D22D5 --lang=sk --extension-process --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=true --enable-pinch --device-scale-factor=1 --num-raster-threads=1 --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553 --service-request-channel-token=DAF1E6384A606E407E0F5D219A8D22D5 --renderer-client-id=5 --mojo-platform-channel-handle=2616 /prefetch:1
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1284 --primordial-pipe-token=709C70C31BA992F3061B308433813548 --lang=sk --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --blink-settings=disallowFetchForDocWrittenScriptsInMainFrame=false,disallowFetchForDocWrittenScriptsInMainFrameOnSlowConnections=true --enable-pinch --device-scale-factor=1 --num-raster-threads=1 --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553 --service-request-channel-token=709C70C31BA992F3061B308433813548 --renderer-client-id=9 --mojo-platform-channel-handle=4592 /prefetch:1
C:\Windows\system32\taskhost.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\sppsvc.exe
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe5_ Global\UsGthrCtrlFltPipeMssGthrPipe5 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 512 516 524 65536 520
"C:\Users\pc\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

====== Scheduled tasks folder ======

C:\Windows\system32\tasks\Adobe Acrobat Update Task - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Windows\system32\tasks\Adobe Flash Player Updater - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\system32\tasks\CCleanerSkipUAC - "C:\Program Files\CCleaner\CCleaner.exe" $(Arg0)
C:\Windows\system32\tasks\GoogleUpdateTaskMachineCore - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\system32\tasks\GoogleUpdateTaskMachineUA - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\system32\tasks\User_Feed_Synchronization-{6D9E7DCF-2A05-44C0-A17C-D5D4DC7D93B7} - C:\Windows\system32\msfeedssync.exe sync
C:\Windows\system32\tasks\{4389FD7B-B33A-4BB3-A2BC-6E20FFBB8370} - C:\Windows\system32\pcalua.exe -a "C:\Users\pc\Downloads\iview438_setup (1).exe" -d C:\Users\pc\Downloads
C:\Windows\system32\tasks\{B25ECF05-2FDD-47C3-9037-2286EAE00DB9} - C:\Windows\system32\pcalua.exe -a "C:\Program Files\TOSHIBA\TVAP\TVAP\setup.exe" -d "C:\Program Files\TOSHIBA\TVAP\TVAP"
C:\Windows\system32\tasks\{BDA99102-26A2-4E85-88C6-7DF1607B2524} - C:\Windows\system32\pcalua.exe -a C:\PROGRA~2\MAX_EN~1\UNWISE.EXE -c /U C:\PROGRA~2\MAX_EN~1\INSTALL.LOG
C:\Windows\system32\tasks\{E76A60EA-9306-42DF-92DE-7FCC34EE069D} - C:\Windows\system32\pcalua.exe -a C:\Windows\TEMP\avast_ash\IrfanView\iview436_setup.exe -d "C:\Program Files\Alwil Software\Avast5"
C:\Windows\system32\tasks\WPD\SqmUpload_S-1-5-21-838472506-3658331162-707142449-1000 - %windir%\system32\rundll32.exe portabledeviceapi.dll,#1
C:\Windows\system32\tasks\Microsoft\Windows\WindowsBackup\ConfigNotification - %systemroot%\System32\sdclt.exe /CONFIGNOTIFICATION
C:\Windows\system32\tasks\Microsoft\Windows\Windows Media Sharing\UpdateLibrary - "%ProgramFiles%\Windows Media Player\wmpnscfg.exe"
C:\Windows\system32\tasks\Microsoft\Windows\Windows Filtering Platform\BfeOnServiceStartTypeChange - %windir%\system32\rundll32.exe bfe.dll,BfeOnServiceStartTypeChange
C:\Windows\system32\tasks\Microsoft\Windows\Windows Error Reporting\QueueReporting - %windir%\system32\wermgr.exe -queuereporting
C:\Windows\system32\tasks\Microsoft\Windows\Windows Activation Technologies\ValidationTask - %SystemRoot%\system32\Wat\WatAdminSvc.exe /run
C:\Windows\system32\tasks\Microsoft\Windows\Windows Activation Technologies\ValidationTaskDeadline - %SystemRoot%\system32\schtasks.exe /run /I /TN "\Microsoft\Windows\Windows Activation Technologies\ValidationTask"
C:\Windows\system32\tasks\Microsoft\Windows\UPnP\UPnPHostConfig - sc.exe config upnphost start= auto
C:\Windows\system32\tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime - %windir%\system32\sc.exe start w32time task_started
C:\Windows\system32\tasks\Microsoft\Windows\Tcpip\IpAddressConflict1 - %windir%\system32\rundll32.exe ndfapi.dll,NdfRunDllDuplicateIPOffendingSystem
C:\Windows\system32\tasks\Microsoft\Windows\Tcpip\IpAddressConflict2 - %windir%\system32\rundll32.exe ndfapi.dll,NdfRunDllDuplicateIPDefendingSystem
C:\Windows\system32\tasks\Microsoft\Windows\SystemRestore\SR - %windir%\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreation
C:\Windows\system32\tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTask - sc.exe start sppsvc
C:\Windows\system32\tasks\Microsoft\Windows\RemoteAssistance\RemoteAssistanceTask - %windir%\system32\RAServer.exe /offerraupdate
C:\Windows\system32\tasks\Microsoft\Windows\Power Efficiency Diagnostics\AnalyzeSystem - %SystemRoot%\System32\powercfg.exe -energy -auto
C:\Windows\system32\tasks\Microsoft\Windows\NetTrace\GatherNetworkInfo - %windir%\system32\gatherNetworkInfo.vbs
C:\Windows\system32\tasks\Microsoft\Windows\MUI\LPRemove - %windir%\system32\lpremove.exe
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch - %SystemRoot%\ehome\ehPrivJob.exe /DoActivateWindowsSearch
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService - %SystemRoot%\ehome\ehPrivJob.exe /DoConfigureInternetTimeService
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks - %SystemRoot%\ehome\ehPrivJob.exe /DoRecoveryTasks $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\ehDRMInit - %SystemRoot%\ehome\ehPrivJob.exe /DRMInit
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\InstallPlayReady - %SystemRoot%\ehome\ehPrivJob.exe /InstallPlayReady $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\mcupdate - %SystemRoot%\ehome\mcupdate $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask - %SystemRoot%\ehome\mcupdate.exe -MediaCenterRecoveryTask
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask - %SystemRoot%\ehome\mcupdate.exe -ObjectStoreRecoveryTask
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\OCURActivate - %SystemRoot%\ehome\ehPrivJob.exe /OCURActivate
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\OCURDiscovery - %SystemRoot%\ehome\ehPrivJob.exe /OCURDiscovery $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PBDADiscovery - %SystemRoot%\ehome\ehPrivJob.exe /PBDADiscovery
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 - %SystemRoot%\ehome\ehPrivJob.exe /wait:7 /PBDADiscovery
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 - %SystemRoot%\ehome\ehPrivJob.exe /wait:90 /PBDADiscovery
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PeriodicScanRetry - %windir%\ehome\MCUpdate.exe -pscn 0
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PvrRecoveryTask - %SystemRoot%\ehome\mcupdate.exe -PvrRecoveryTask
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\PvrScheduleTask - %SystemRoot%\ehome\mcupdate.exe -PvrSchedule
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\RecordingRestart - %SystemRoot%\ehome\ehrec /RestartRecording
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\RegisterSearch - %SystemRoot%\ehome\ehPrivJob.exe /DoRegisterSearch $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\ReindexSearchRoot - %SystemRoot%\ehome\ehPrivJob.exe /DoReindexSearchRoot
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask - %SystemRoot%\ehome\mcupdate.exe -SqlLiteRecoveryTask
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\StartRecording - %SystemRoot%\ehome\ehrec /StartRecording
C:\Windows\system32\tasks\Microsoft\Windows\Media Center\UpdateRecordPath - %SystemRoot%\ehome\ehPrivJob.exe /DoUpdateRecordPath $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Location\Notifications - %windir%\System32\LocationNotifications.exe
C:\Windows\system32\tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector - %windir%\system32\rundll32.exe dfdts.dll,DfdGetDefaultPolicyAndSMART
C:\Windows\system32\tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticResolver - %windir%\system32\DFDWiz.exe
C:\Windows\system32\tasks\Microsoft\Windows\Defrag\ScheduledDefrag - %windir%\system32\defrag.exe -c
C:\Windows\system32\tasks\Microsoft\Windows\Customer Experience Improvement Program\Consolidator - %SystemRoot%\System32\wsqmcons.exe
C:\Windows\system32\tasks\Microsoft\Windows\Bluetooth\UninstallDeviceTask - BthUdTask.exe $(Arg0)
C:\Windows\system32\tasks\Microsoft\Windows\Autochk\Proxy - %windir%\system32\rundll32.exe /d acproxy.dll,PerformAutochkOperations
C:\Windows\system32\tasks\Microsoft\Windows\Application Experience\AitAgent - aitagent
C:\Windows\system32\tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater - %windir%\system32\rundll32.exe aepdu.dll,AePduRunUpdate
C:\Windows\system32\tasks\Microsoft\Windows\AppID\PolicyConverter - %windir%\system32\appidpolicyconverter.exe
C:\Windows\system32\tasks\Microsoft\Windows\AppID\VerifiedPublisherCertStoreCheck - %windir%\system32\appidcertstorecheck.exe
C:\Windows\system32\tasks\Microsoft\Microsoft Antimalware\Microsoft Antimalware Scheduled Scan - C:\Program Files\Microsoft Security Client\\MpCmdRun.exe Scan -ScheduleJob -RestrictPrivileges
C:\Windows\system32\tasks\Microsoft\Microsoft Antimalware\MpIdleTask - C:\Program Files\Microsoft Security Client\\MpCmdRun.exe -IdleTask -TaskName MpIdleTask

=========Mozilla firefox=========

ProfilePath - C:\Users\pc\AppData\Roaming\Mozilla\Firefox\Profiles\kpxy381j.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "https://www.malwarebytes.org/restorebro ... hSource=13"
prefs.js - "extensions.enabledItems" - "{b6315c48-f861-4913-9578-1b5fac41ebe0}:2.7.2.0, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.3"
prefs.js - "keyword.URL" - "http://www.bing.com/search?FORM=UP97DF&PC=UP97&q="

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8081.0709]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@real.com/nppl3260;version=6.0.12.732]
"Description"=RealPlayer(tm) LiveConnect-Enabled Plug-In
"Path"=C:\Program Files (x86)\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.732]
"Description"=6.0.12.732
"Path"=C:\Program Files (x86)\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=]
"Description"=
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll


C:\Program Files (x86)\Mozilla Firefox\components\
browser.xpt
browserdirprovider.dll
brwsrcmp.dll
components.list
compreg.dat
FeedConverter.js
FeedProcessor.js
FeedWriter.js
fuelApplication.js
GPSDGeolocationProvider.js
jsconsole-clhandler.js
NetworkGeolocationProvider.js
nppl3260.xpt
nsAddonRepository.js
nsBadCertHandler.js
nsBlocklistService.js
nsBrowserContentHandler.js
nsBrowserGlue.js
nsContentDispatchChooser.js
nsContentPrefService.js
nsDefaultCLH.js
nsDownloadManagerUI.js
nsExtensionManager.js
nsFormAutoComplete.js
nsHandlerService.js
nsHelperAppDlg.js
nsIQTScriptablePlugin.xpt
nsJSRealPlayerPlugin.xpt
nsLivemarkService.js
nsLoginInfo.js
nsLoginManager.js
nsLoginManagerPrompter.js
nsMicrosummaryService.js
nsPlacesAutoComplete.js
nsPlacesDBFlush.js
nsPlacesTransactionsService.js
nsPrivateBrowsingService.js
nsProxyAutoConfig.js
nsSafebrowsingApplication.js
nsSearchService.js
nsSearchSuggestions.js
nsSessionStartup.js
nsSetDefaultBrowser.js
nsSidebar.js
nsTaggingService.js
nsTryToClose.js
nsUpdateService.js
nsUpdateServiceStub.js
nsUpdateTimerManager.js
nsUrlClassifierLib.js
nsUrlClassifierListManager.js
nsURLFormatter.js
nsWebHandlerApp.js
pluginGlue.js
storage-Legacy.js
storage-mozStorage.js
txEXSLTRegExFunctions.js
WebContentConverter.js
xpti.dat

C:\Program Files (x86)\Mozilla Firefox\plugins\
npnul32.dll
NPOFF12.DLL
nppdf32.dll
nppl3260.dll
nprpjplug.dll

C:\Program Files (x86)\Mozilla Firefox\searchplugins\
okolo.xml
vyhadvanie.xml

C:\Users\pc\AppData\Roaming\Mozilla\Firefox\Profiles\kpxy381j.default\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Users\pc\AppData\Roaming\Mozilla\Firefox\Profiles\kpxy381j.default\searchplugins\
bingp.xml

C:\Users\pc\AppData\Roaming\Mozilla\Firefox\Profiles\kpxy381j.default\pluginreg.dat
Plugin - Google Update - 1.3.31.5 - C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll
Plugin - Windows Live® Photo Gallery - 14.0.8081.709 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
Plugin - Silverlight Plug-In - 5.1.41212.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll
Plugin - Java(TM) Platform SE 6 U14 - 6.0.140.8 - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll
Plugin - Java Deployment Toolkit 6.0.140.8 - 6.0.140.8 - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeploytk.dll
Plugin - Adobe Acrobat - 15.20.20039.7108 - C:\Program Files (x86)\Mozilla Firefox\plugins\nppdf32.dll
Plugin - RealPlayer Version Plugin - 6.0.12.732 - C:\Program Files (x86)\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll
Plugin - RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) - 6.0.12.732 - C:\Program Files (x86)\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll
Plugin - Mozilla Default Plug-in - 1.0.0.15 - C:\Program Files (x86)\Mozilla Firefox\plugins\npnul32.dll
Plugin - 2007 Microsoft Office system - 12.0.4518.1014 - C:\Program Files (x86)\Mozilla Firefox\plugins\NPOFF12.DLL
Plugin - Adobe Acrobat - 15.20.20039.7108 - C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll

=========Google Chrome=========

C:\Users\pc\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Extension ahfgeienlihckogmohjhadlkjgocpleb 1 Store 0.2
Extension bepbmhgboaologfdajaanbcjmnhjmhfn 0
Extension blpcfgokakmgnkcojhhkbfbldkacnbeo 1 YouTube 4.2.8
Extension cfhdojbkjhnklbpkdaibdccddilifddb 1 Adblock Plus 1.13.2
Extension coobgpohoikkiipiblmjeljniedjpjpf 1 Google Search 0.0.0.60
Extension eemcgdkfndhakfknompkggombfjjjeno 1 Bookmark Manager 0.1
Extension efaidnbmnnnibpcajpcglclefindmkaj 2 Adobe Acrobat 15.1.0.3
Extension ennkphjdgehloodpbhlhldgbnhmacadg Settings 0.2
Extension gfdkimpbcpahaombhbimeihdjnejgicl 1 Feedback 1.0
Extension kmendfapggjehodndflmmgagdbamhnfd 1 CryptoTokenExtension 0.9.46
Extension lifbcibllhkdhoafpjfnlhfpfgnpldfl 0 Skype 9.0.0.7200
Extension mfehgcgbbipciphmccgaenjidiccnmng 1 Cloud Print 0.1
Extension mgndgikekgjfcpckkfioiadnlibdjbkf Chrome 0.1
Extension mhjfbmdgcfjbbpaeojofohoefgiehjai 1 Chrome PDF Viewer 1
Extension mkggleleindffinefpajdemfpncccgoo 1 URL to QRCode 0.8
Extension neajdppkdcdipfabeoofebfddakdcjhd 1 Google Network Speech 1.0
Extension nkeimhogjdpnpccoofpliimaahmaaome 1 Google Hangouts 1.3.2
Extension nmmhkkegccagdldgiimedpiccmgmieda 1 Platby Internetového obchodu Chrome 1.0.0.2
Extension pjkljhegncpnkpknbcohdijeoejaedia 1 Gmail 8.1
Extension pkedcjkdefgpdelpbcmbmeomcjbeemfm 1 Chrome Media Router 5717.116.0.4
Homepage: http://www.msn.com/?pc=UP97&ocid=UP97DHP
default_search_provider.search_url:
C:\Users\pc\AppData\Local\Google\Chrome\User Data\Default\Preferences
Plugin Remoting Viewer internal-remoting-viewer
Plugin Native Client C:\Program Files (x86)\Google\Chrome\Application\57.0.2987.133\ppGoogleNaClPluginChrome.dll
Plugin Chrome PDF Viewer C:\Program Files (x86)\Google\Chrome\Application\57.0.2987.133\pdf.dll
Plugin 11,2,202,228 Shockwave Flash C:\Program Files (x86)\Google\Chrome\Application\57.0.2987.133\gcswf32.dll
Plugin 9.4.2.220 Adobe Acrobat C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll
Plugin 6.0.140.8 Java Deployment Toolkit 6.0.140.8 C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeploytk.dll
Plugin 6.0.140.8 Java(TM) Platform SE 6 U14 C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll
Plugin 12.0.4518.1014 2007 Microsoft Office system C:\Program Files (x86)\Mozilla Firefox\plugins\NPOFF12.DLL
Plugin 6.0.12.732 RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) C:\Program Files (x86)\Mozilla Firefox\plugins\nppl3260.dll
Plugin 6.0.12.732 RealPlayer Version Plugin C:\Program Files (x86)\Mozilla Firefox\plugins\nprpjplug.dll
Plugin 1.3.21.111 Google Update C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll
Plugin 4.1.10111.0 Silverlight Plug-In C:\Program Files (x86)\Microsoft Silverlight\4.1.10111.0\npctrl.dll
Plugin 14.0.8081.0709_ship.wlx.w3m3 (ship) Windows Live® Photo Gallery C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
Homepage:
default_search_provider.search_url:

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\efaidnbmnnnibpcajpcglclefindmkaj]
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl]
"Path"=


======Registry dump ======


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"={6A1806CD-94D4-4689-BA73-E35EA1EA9990}
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"URL"=http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}]
"URL"=http://www.google.com/search?q={searchT ... urceid=ie7


[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"={6A1806CD-94D4-4689-BA73-E35EA1EA9990}
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
"URL"=http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}]
"URL"=http://www.google.com/search?q={searchT ... urceid=ie7

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre6\bin\ssv.dll [2009-09-18 320920]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{b6315c48-f861-4913-9578-1b5fac41ebe0}]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2009-09-18 41368]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} -
{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F}

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2009-07-28 7982112]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2009-07-20 1815848]
"MSC"=C:\Program Files\Microsoft Security Client\msseces.exe [2016-11-14 1353680]
"Malwarebytes TrayApp"=C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [2017-01-20 2780112]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2016-09-28 8944344]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Toshiba Registration]
C:\Program Files\Toshiba\Registration\ToshibaReminder.exe [2009-07-30 134032]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2009-07-29 98304]
"GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040]
"NeroFilterCheck"=C:\Windows\system32\NeroCheck.exe []
"Samsung PanelMgr"=C:\Windows\Samsung\PanelMgr\ssmmgr.exe [2010-06-07 618496]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-03-12 253816]

C:\Users\pc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Orezávač obrazovky a spúšťač programu OneNote 2007.lnk - C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders" = credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MBAMService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mcmscsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MpfService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SoftwareSASGeneration"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv

====== File associations ======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

====== List of files/folders created in the last 1 month ======

2017-04-07 19:17:23 ----D---- C:\Program Files\trend micro
2017-04-07 19:17:22 ----D---- C:\rsit
2017-04-07 00:01:26 ----A---- C:\Windows\system32\drivers\MBAMChameleon.sys
2017-04-07 00:01:18 ----A---- C:\Windows\system32\drivers\mwac.sys
2017-04-07 00:01:18 ----A---- C:\Windows\system32\drivers\farflt.sys
2017-04-07 00:01:10 ----A---- C:\Windows\system32\drivers\mbam.sys
2017-04-07 00:01:03 ----A---- C:\Windows\system32\drivers\MBAMSwissArmy.sys
2017-04-07 00:00:52 ----A---- C:\Windows\system32\drivers\mbae64.sys
2017-04-07 00:00:45 ----D---- C:\ProgramData\Malwarebytes
2017-04-07 00:00:45 ----D---- C:\Program Files\Malwarebytes
2017-04-06 23:58:15 ----D---- C:\Program Files (x86)\Microsoft Security Client
2017-04-06 23:58:12 ----D---- C:\Program Files\Microsoft Security Client

====== List of files/folders modified in the last 1 month ======

2017-04-07 19:17:23 ----D---- C:\Program Files
2017-04-07 19:16:59 ----D---- C:\Windows\Temp
2017-04-07 18:45:39 ----D---- C:\Windows\system32\config
2017-04-07 18:27:51 ----SHD---- C:\System Volume Information
2017-04-07 18:19:10 ----D---- C:\Windows\System32
2017-04-07 18:19:10 ----D---- C:\Windows\inf
2017-04-07 18:19:10 ----A---- C:\Windows\system32\PerfStringBackup.INI
2017-04-07 18:12:46 ----D---- C:\Windows\system32\drivers
2017-04-07 18:11:41 ----D---- C:\Program Files\avast software
2017-04-07 18:11:40 ----D---- C:\Program Files\Common Files\AV
2017-04-07 18:11:39 ----D---- C:\Windows\winsxs
2017-04-07 07:00:55 ----N---- C:\Windows\system32\MpSigStub.exe
2017-04-07 00:15:50 ----D---- C:\Program Files (x86)\MAX_EN_Atube
2017-04-07 00:14:10 ----RD---- C:\Program Files (x86)
2017-04-07 00:14:03 ----D---- C:\ProgramData\APN
2017-04-07 00:00:45 ----HD---- C:\ProgramData
2017-04-06 23:59:02 ----D---- C:\Windows
2017-04-06 23:58:19 ----SHD---- C:\Windows\Installer
2017-04-06 23:58:15 ----SD---- C:\ProgramData\Microsoft
2017-04-06 23:53:22 ----D---- C:\Windows\Prefetch
2017-04-06 23:53:10 ----D---- C:\Windows\system32\Tasks
2017-04-06 23:18:26 ----D---- C:\ProgramData\AVAST Software
2017-03-14 19:32:24 ----D---- C:\Windows\SysWOW64
2017-03-14 19:32:19 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2017-03-14 19:32:16 ----D---- C:\Windows\system32\Macromed
2017-03-14 19:32:15 ----D---- C:\Windows\SYSWOW64\Macromed

File C:\Windows\system32\winlogon.exe is digitally signed
File C:\Windows\system32\wininit.exe is digitally signed
File C:\Windows\explorer.exe is digitally signed
File C:\Windows\SysWOW64\explorer.exe is digitally signed
File C:\Windows\system32\svchost.exe is digitally signed
File C:\Windows\SysWOW64\svchost.exe is digitally signed
File C:\Windows\system32\services.exe is digitally signed
File C:\Windows\system32\User32.dll is digitally signed
File C:\Windows\SysWOW64\User32.dll is digitally signed
File C:\Windows\system32\userinit.exe is digitally signed
File C:\Windows\SysWOW64\userinit.exe is digitally signed
File C:\Windows\system32\rpcss.dll is digitally signed
File C:\Windows\system32\Drivers\volsnap.sys is digitally signed

====== List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled) ======

R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2009-06-04 408600]
R0 MBAMSwissArmy;MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [2017-04-07 251832]
R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2016-08-25 295000]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 tos_sps64;TOSHIBA tos_sps64 Service; C:\Windows\system32\DRIVERS\tos_sps64.sys [2009-07-24 482384]
R0 TVALZ;TOSHIBA ACPI-Based Value Added Logical and General Purpose Device Driver; C:\Windows\system32\DRIVERS\TVALZ_O.SYS [2009-07-14 26840]
R1 ESProtectionDriver;Malwarebytes Anti-Exploit; \??\C:\Windows\system32\drivers\mbae64.sys [2017-03-24 77440]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 MBAMChameleon;MBAMChameleon; C:\Windows\system32\drivers\MBAMChameleon.sys [2017-04-07 186304]
R3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2009-07-30 6037504]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2009-07-28 1966624]
R3 LPCFilter;LPC Lower Filter Driver; C:\Windows\system32\DRIVERS\LPCFilter.sys [2009-07-30 44912]
R3 MBAMFarflt;MBAMFarflt; \??\C:\Windows\system32\drivers\farflt.sys [2017-04-07 111544]
R3 MBAMProtection;MBAMProtection; \??\C:\Windows\system32\drivers\mbam.sys [2017-04-07 43968]
R3 MBAMWebProtection;MBAMWebProtection; \??\C:\Windows\system32\drivers\mwac.sys [2017-04-07 82720]
R3 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2016-08-25 135928]
R3 RTHDMIAzAudService;Service for HDMI; C:\Windows\system32\drivers\RtHDMIVX.sys [2009-05-20 202016]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2009-05-22 215040]
R3 RTL8187B;Realtek RTL8187B Wireless 802.11bg 54Mbps USB 2.0 Network Adapter; C:\Windows\system32\DRIVERS\RTL8187B.sys [2009-08-20 446976]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2009-07-20 274480]
R3 tosrfec;Bluetooth ACPI; C:\Windows\system32\DRIVERS\tosrfec.sys [2009-07-13 19824]
S2 DgiVecp;DgiVecp; \??\C:\Windows\system32\Drivers\DgiVecp.sys []
S2 SSPORT;SSPORT; \??\C:\Windows\system32\Drivers\SSPORT.sys []
S3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2009-06-20 1394688]
S3 dbx;dbx; C:\Windows\system32\DRIVERS\dbx.sys []
S3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2009-06-10 6108416]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUStor.sys [2009-07-30 222208]
S3 RtsUIR;Realtek IR Driver; C:\Windows\system32\DRIVERS\Rts516xIR.sys []
S3 Tosrfcom;Tosrfcom; C:\Windows\system32\drivers\Tosrfcom.sys []
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 USBCCID;Realtek Smartcard Reader Driver; C:\Windows\system32\DRIVERS\RtsUCcid.sys []
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]

====== List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled) ======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2016-12-19 82640]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2009-07-29 203264]
R2 DbxSvc;DbxSvc; C:\Windows\system32\DbxSvc.exe [2016-10-10 38000]
R2 MBAMService;Malwarebytes Service; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [2017-01-20 4355024]
R2 MsMpSvc;Microsoft Antimalware Service; C:\Program Files\Microsoft Security Client\MsMpEng.exe [2016-11-14 119864]
R3 NisSrv;@C:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; C:\Program Files\Microsoft Security Client\NisSrv.exe [2016-11-14 361816]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-01 144200]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2016-07-25 324224]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-03-14 271960]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-01 144200]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2016-04-23 114688]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 TOSHIBA Bluetooth Service;TOSHIBA Bluetooth Service; C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe [2009-07-30 192368]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2010-06-16 1255736]

-----------------EOF-----------------

[JaRon]

Ahoj,
Vycisti PC s Adwcleanerom, su tam nejake drobnosti

[Noone]

vykonane, prikladam log a pre istotu v prilohe aj novy log z RSIT

# AdwCleaner v6.045 - *Logfile created 09/04/2017 *at 14:34:07
# *Updated on 28/03/2017 by Malwarebytes
# *Database : 2017-04-06.1 [*Server]
# *Operating System : Windows 7 Home Premium Service Pack 1 (X64)
# *Username : pc - PC-TOSH
# *Running from : C:\Users\pc\Downloads\adwcleaner_6.045.exe
# *Mode: Clean
# *Support : https://www.malwarebytes.com/support



***** [ *Services ] *****



***** [ *Folders ] *****

[-] *Folder deleted: C:\Users\pc\AppData\Local\apn
[-] *Folder deleted: C:\Users\pc\AppData\Local\PackageAware
[-] *Folder deleted: C:\ProgramData\apn
[-] *Folder deleted: C:\ProgramData\Ask
[-] *Folder deleted: C:\ProgramData\Partner
[#] *Folder deleted on reboot: C:\ProgramData\Application Data\apn
[#] *Folder deleted on reboot: C:\ProgramData\Application Data\Ask
[#] *Folder deleted on reboot: C:\ProgramData\Application Data\Partner
[-] *Folder deleted: C:\Program Files (x86)\1ClickDownload
[-] *Folder deleted: C:\Program Files (x86)\Conduit


***** [ *Files ] *****

[-] *File deleted: C:\Users\Public\Desktop\eBay.lnk
[-] *File deleted: C:\Users\pc\AppData\Roaming\Mozilla\Firefox\Profiles\kpxy381j.default\searchplugins\bingp.xml


***** [ DLL ] *****



***** [ WMI ] *****



***** [ *Shortcuts ] *****



***** [ *Scheduled Tasks ] *****



***** [ *Registry ] *****

[-] *Key deleted: HKLM\SOFTWARE\Classes\Applications\iMeshV10.exe
[-] *Key deleted: HKLM\SOFTWARE\Classes\Applications\iMesh_setup.exe
[-] *Key deleted: HKLM\SOFTWARE\Classes\Applications\iMesh_V10_en_Setup.exe
[-] *Key deleted: HKLM\SOFTWARE\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
[-] *Key deleted: HKLM\SOFTWARE\Classes\CLSID\{3CCC052E-BDEE-408A-BEA7-90914EF2964B}
[-] *Key deleted: HKLM\SOFTWARE\Classes\CLSID\{61F47056-E400-43D3-AF1E-AB7DFFD4C4AD}
[-] *Key deleted: HKLM\SOFTWARE\Classes\CLSID\{E2B98EEA-EE55-4E9B-A8C1-6E5288DF785A}
[-] *Key deleted: HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
[-] *Key deleted: HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
[-] *Key deleted: HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
[-] *Key deleted: HKLM\SOFTWARE\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}
[-] *Key deleted: HKU\S-1-5-21-838472506-3658331162-707142449-1000\Software\AppDataLow\Toolbar
[-] *Key deleted: HKU\S-1-5-21-838472506-3658331162-707142449-1000\Software\AppDataLow\Software\AskToolbar
[-] *Key deleted: HKCU\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-838472506-3658331162-707142449-1000\Software\AskPartnerNetwork
[#] *Key deleted on reboot: HKCU\Software\AppDataLow\Toolbar
[#] *Key deleted on reboot: HKCU\Software\AppDataLow\Software\AskToolbar
[#] *Key deleted on reboot: [x64] HKCU\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-838472506-3658331162-707142449-1000\Software\AskPartnerNetwork
[#] *Key deleted on reboot: [x64] HKCU\Software\AppDataLow\Toolbar
[#] *Key deleted on reboot: [x64] HKCU\Software\AppDataLow\Software\AskToolbar
[-] *Key deleted: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\icq.com
[#] *Key deleted on reboot: [x64] HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\icq.com
[-] *Key deleted: HKLM\SOFTWARE\Classes\AppID\GenericAskToolbar.DLL


***** [ *Browsers ] *****

[-] *Firefox preferences cleaned: "CT2189222.AboutPrivacyUrl" - "hxxp://www.conduit.com/privacy/Default.aspx"
[-] *Firefox preferences cleaned: "CT2189222.CTID" - "CT2189222"
[-] *Firefox preferences cleaned: "CT2189222.CurrentServerDate" - "2-10-2010"
[-] *Firefox preferences cleaned: "CT2189222.DialogsAlignMode" - "LTR"
[-] *Firefox preferences cleaned: "CT2189222.DownloadReferralCookieData" - ""
[-] *Firefox preferences cleaned: "CT2189222.EMailNotifierPollDate" - "Sat Oct 02 2010 18:32:44 GMT+0200"
[-] *Firefox preferences cleaned: "CT2189222.FeedLastCount5958353946205616777" - 929
[-] *Firefox preferences cleaned: "CT2189222.FeedPollDate129255181570853284" - "Sat Oct 02 2010 18:32:44 GMT+0200"
[-] *Firefox preferences cleaned: "CT2189222.FeedPollDate129255181570853290" - "Sat Oct 02 2010 18:32:44 GMT+0200"
[-] *Firefox preferences cleaned: "CT2189222.FeedPollDate129255181570853296" - "Sat Oct 02 2010 18:32:44 GMT+0200"
[-] *Firefox preferences cleaned: "CT2189222.FeedPollDate129255181570853302" - "Sat Oct 02 2010 18:32:44 GMT+0200"
[-] *Firefox preferences cleaned: "CT2189222.FeedPollDate129255181570853308" - "Sat Oct 02 2010 18:32:44 GMT+0200"
[-] *Firefox preferences cleaned: "CT2189222.FeedPollDate129255181570853314" - "Sat Oct 02 2010 18:32:44 GMT+0200"
[-] *Firefox preferences cleaned: "CT2189222.FeedPollDate129255181570853320" - "Sat Oct 02 2010 18:32:44 GMT+0200"
[-] *Firefox preferences cleaned: "CT2189222.FeedPollDate129255181570853326" - "Sat Oct 02 2010 18:32:44 GMT+0200"
[-] *Firefox preferences cleaned: "CT2189222.FeedPollDate129255181570853332" - "Sat Oct 02 2010 18:32:45 GMT+0200"
[-] *Firefox preferences cleaned: "CT2189222.FeedPollDate129255181570853338" - "Sat Oct 02 2010 18:32:45 GMT+0200"
[-] *Firefox preferences cleaned: "CT2189222.FeedPollDate129255181570853344" - "Sat Oct 02 2010 18:32:45 GMT+0200"
[-] *Firefox preferences cleaned: "CT2189222.FeedPollDate129255181570853350" - "Sat Oct 02 2010 18:32:45 GMT+0200"
[-] *Firefox preferences cleaned: "CT2189222.FeedPollDate129255181570853356" - "Sat Oct 02 2010 18:32:45 GMT+0200"
[-] *Firefox preferences cleaned: "CT2189222.FeedPollDate129255181570853362" - "Sat Oct 02 2010 18:32:45 GMT+0200"
[-] *Firefox preferences cleaned: "CT2189222.FeedPollDate129255181570853368" - "Sat Oct 02 2010 18:32:45 GMT+0200"
[-] *Firefox preferences cleaned: "CT2189222.FeedPollDate129255181570853374" - "Sat Oct 02 2010 18:32:45 GMT+0200"
[-] *Firefox preferences cleaned: "CT2189222.FeedPollDate129255181570853380" - "Sat Oct 02 2010 18:32:45 GMT+0200"
[-] *Firefox preferences cleaned: "CT2189222.FeedPollDate129255181570853386" - "Sat Oct 02 2010 18:32:45 GMT+0200"
[-] *Firefox preferences cleaned: "CT2189222.FeedPollDate129255181571008750" - "Sat Oct 02 2010 16:32:47 GMT+0200"
[-] *Firefox preferences cleaned: "CT2189222.FeedPollDate129255181571008756" - "Sat Oct 02 2010 18:32:48 GMT+0200"
[-] *Firefox preferences cleaned: "CT2189222.FeedPollDate129255181571008762" - "Sat Oct 02 2010 16:32:48 GMT+0200"
[-] *Firefox preferences cleaned: "CT2189222.FeedPollDate129255181571008768" - "Sat Oct 02 2010 18:32:48 GMT+0200"
[-] *Firefox preferences cleaned: "CT2189222.FeedPollDate129255181571008774" - "Sat Oct 02 2010 18:32:48 GMT+0200"
[-] *Firefox preferences cleaned: "CT2189222.FeedPollDate129255181571008780" - "Sat Oct 02 2010 18:32:48 GMT+0200"
[-] *Firefox preferences cleaned: "CT2189222.FeedPollDate129255181571008786" - "Sat Oct 02 2010 18:32:48 GMT+0200"
[-] *Firefox preferences cleaned: "CT2189222.FeedPollDate129255181571008792" - "Sat Oct 02 2010 18:32:48 GMT+0200"
[-] *Firefox preferences cleaned: "CT2189222.FeedPollDate129255181571008798" - "Sat Oct 02 2010 18:32:48 GMT+0200"
[-] *Firefox preferences cleaned: "CT2189222.FeedPollDate129255181571008804" - "Sat Oct 02 2010 18:32:48 GMT+0200"
[-] *Firefox preferences cleaned: "CT2189222.FeedPollDate129255181571008810" - "Sat Oct 02 2010 18:32:48 GMT+0200"
[-] *Firefox preferences cleaned: "CT2189222.FeedPollDate129255181571008816" - "Sat Oct 02 2010 18:32:49 GMT+0200"
[-] *Firefox preferences cleaned: "CT2189222.FeedPollDate129255181571008822" - "Sat Oct 02 2010 16:32:49 GMT+0200"
[-] *Firefox preferences cleaned: "CT2189222.FeedPollDate129255181571008828" - "Sat Oct 02 2010 16:32:49 GMT+0200"
[-] *Firefox preferences cleaned: "CT2189222.FeedPollDate129255181571008834" - "Sat Oct 02 2010 16:32:49 GMT+0200"
[-] *Firefox preferences cleaned: "CT2189222.FeedPollDate129255181571008840" - "Sat Oct 02 2010 18:32:49 GMT+0200"
[-] *Firefox preferences cleaned: "CT2189222.FeedPollDate129255181571009642" - "Sat Oct 02 2010 18:32:46 GMT+0200"
[-] *Firefox preferences cleaned: "CT2189222.FeedPollDate129255181571009648" - "Sat Oct 02 2010 18:32:46 GMT+0200"
[-] *Firefox preferences cleaned: "CT2189222.FeedPollDate129255181571009654" - "Sat Oct 02 2010 18:32:46 GMT+0200"
[-] *Firefox preferences cleaned: "CT2189222.FeedPollDate129255181571009660" - "Sat Oct 02 2010 18:32:46 GMT+0200"
[-] *Firefox preferences cleaned: "CT2189222.FeedPollDate129255181571009666" - "Sat Oct 02 2010 18:32:46 GMT+0200"
[-] *Firefox preferences cleaned: "CT2189222.FeedPollDate129255181571009672" - "Sat Oct 02 2010 18:32:46 GMT+0200"
[-] *Firefox preferences cleaned: "CT2189222.FeedPollDate129255181571009678" - "Sat Oct 02 2010 18:32:46 GMT+0200"
[-] *Firefox preferences cleaned: "CT2189222.FeedPollDate129255181571009684" - "Sat Oct 02 2010 18:32:46 GMT+0200"
[-] *Firefox preferences cleaned: "CT2189222.FeedPollDate129255181571009690" - "Sat Oct 02 2010 18:32:46 GMT+0200"
[-] *Firefox preferences cleaned: "CT2189222.FeedPollDate129255181571009696" - "Sat Oct 02 2010 18:32:46 GMT+0200"
[-] *Firefox preferences cleaned: "CT2189222.FeedPollDate129255181571009702" - "Sat Oct 02 2010 16:32:47 GMT+0200"
[-] *Firefox preferences cleaned: "CT2189222.FeedPollDate129255181571009708" - "Sat Oct 02 2010 18:32:47 GMT+0200"
[-] *Firefox preferences cleaned: "CT2189222.FeedPollDate129255181571009714" - "Sat Oct 02 2010 18:32:47 GMT+0200"
[-] *Firefox preferences cleaned: "CT2189222.FeedPollDate129255181571009720" - "Sat Oct 02 2010 18:32:47 GMT+0200"
[-] *Firefox preferences cleaned: "CT2189222.FeedPollDate129255181571009726" - "Sat Oct 02 2010 18:32:47 GMT+0200"
[-] *Firefox preferences cleaned: "CT2189222.FeedPollDate129255181571009732" - "Sat Oct 02 2010 18:32:47 GMT+0200"
[-] *Firefox preferences cleaned: "CT2189222.FeedPollDate129255181571009738" - "Sat Oct 02 2010 18:32:47 GMT+0200"
[-] *Firefox preferences cleaned: "CT2189222.FeedPollDate129255181571009744" - "Sat Oct 02 2010 18:32:47 GMT+0200"
[-] *Firefox preferences cleaned: "CT2189222.FeedTTL129255181570853296" - 15
[-] *Firefox preferences cleaned: "CT2189222.FeedTTL129255181570853308" - 60
[-] *Firefox preferences cleaned: "CT2189222.FeedTTL129255181570853362" - 60
[-] *Firefox preferences cleaned: "CT2189222.FeedTTL129255181570853368" - 15
[-] *Firefox preferences cleaned: "CT2189222.FeedTTL129255181570853374" - 2
[-] *Firefox preferences cleaned: "CT2189222.FeedTTL129255181570853380" - 15
[-] *Firefox preferences cleaned: "CT2189222.FeedTTL129255181571008750" - 1440
[-] *Firefox preferences cleaned: "CT2189222.FeedTTL129255181571008780" - 10
[-] *Firefox preferences cleaned: "CT2189222.FeedTTL129255181571008798" - 5
[-] *Firefox preferences cleaned: "CT2189222.FeedTTL129255181571009642" - 2
[-] *Firefox preferences cleaned: "CT2189222.FeedTTL129255181571009648" - 5
[-] *Firefox preferences cleaned: "CT2189222.FeedTTL129255181571009654" - 5
[-] *Firefox preferences cleaned: "CT2189222.FeedTTL129255181571009666" - 5
[-] *Firefox preferences cleaned: "CT2189222.FeedTTL129255181571009678" - 30
[-] *Firefox preferences cleaned: "CT2189222.FeedTTL129255181571009684" - 30
[-] *Firefox preferences cleaned: "CT2189222.FeedTTL129255181571009708" - 15
[-] *Firefox preferences cleaned: "CT2189222.FeedTTL129255181571009720" - 15
[-] *Firefox preferences cleaned: "CT2189222.FeedTTL129255181571009726" - 15
[-] *Firefox preferences cleaned: "CT2189222.FeedTTL129255181571009732" - 15
[-] *Firefox preferences cleaned: "CT2189222.FirstServerDate" - "2-10-2010"
[-] *Firefox preferences cleaned: "CT2189222.FirstTime" - true
[-] *Firefox preferences cleaned: "CT2189222.FirstTimeFF3" - true
[-] *Firefox preferences cleaned: "CT2189222.FirstTimeSettingsDone" - true
[-] *Firefox preferences cleaned: "CT2189222.FixPageNotFoundErrors" - true
[-] *Firefox preferences cleaned: "CT2189222.GroupingServerCheckInterval" - 1440
[-] *Firefox preferences cleaned: "CT2189222.GroupingServiceUrl" - "hxxp://grouping.services.conduit.com/"
[-] *Firefox preferences cleaned: "CT2189222.Initialize" - true
[-] *Firefox preferences cleaned: "CT2189222.InitializeCommonPrefs" - true
[-] *Firefox preferences cleaned: "CT2189222.InstallationAndCookieDataSentCount" - 1
[-] *Firefox preferences cleaned: "CT2189222.InstallationType" - "UnknownIntegration"
[-] *Firefox preferences cleaned: "CT2189222.InstalledDate" - "Sat Oct 02 2010 16:32:43 GMT+0200"
[-] *Firefox preferences cleaned: "CT2189222.InvalidateCache" - false
[-] *Firefox preferences cleaned: "CT2189222.IsGrouping" - false
[-] *Firefox preferences cleaned: "CT2189222.IsMulticommunity" - false
[-] *Firefox preferences cleaned: "CT2189222.IsOpenThankYouPage" - true
[-] *Firefox preferences cleaned: "CT2189222.IsOpenUninstallPage" - true
[-] *Firefox preferences cleaned: "CT2189222.LanguagePackLastCheckTime" - "Sat Oct 02 2010 16:32:45 GMT+0200"
[-] *Firefox preferences cleaned: "CT2189222.LanguagePackReloadIntervalMM" - 1440
[-] *Firefox preferences cleaned: "CT2189222.LanguagePackServiceUrl" - "hxxp://translation.users.conduit.com/Translation.ashx"
[-] *Firefox preferences cleaned: "CT2189222.LastLogin_2.7.2.0" - "Sat Oct 02 2010 16:32:44 GMT+0200"
[-] *Firefox preferences cleaned: "CT2189222.LatestVersion" - "2.7.2.0"
[-] *Firefox preferences cleaned: "CT2189222.Locale" - "en"
[-] *Firefox preferences cleaned: "CT2189222.LoginCache" - 4
[-] *Firefox preferences cleaned: "CT2189222.MCDetectTooltipHeight" - "83"
[-] *Firefox preferences cleaned: "CT2189222.MCDetectTooltipUrl" - "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1"
[-] *Firefox preferences cleaned: "CT2189222.MCDetectTooltipWidth" - "295"
[-] *Firefox preferences cleaned: "CT2189222.RadioIsPodcast" - false
[-] *Firefox preferences cleaned: "CT2189222.RadioLastCheckTime" - "Sat Oct 02 2010 16:32:44 GMT+0200"
[-] *Firefox preferences cleaned: "CT2189222.RadioLastUpdateIPServer" - "0"
[-] *Firefox preferences cleaned: "CT2189222.RadioLastUpdateServer" - "128929877726170000"
[-] *Firefox preferences cleaned: "CT2189222.RadioMediaID" - "10387502"
[-] *Firefox preferences cleaned: "CT2189222.RadioMediaType" - "Media Player"
[-] *Firefox preferences cleaned: "CT2189222.RadioMenuSelectedID" - "EBRadioMenu_CT218922210387502"
[-] *Firefox preferences cleaned: "CT2189222.RadioStationName" - "BBC%20live%205"
[-] *Firefox preferences cleaned: "CT2189222.RadioStationURL" - "hxxp://www.bbc.co.uk/fivelive/live/live.asx"
[-] *Firefox preferences cleaned: "CT2189222.SavedHomepage" - "resource:/browserconfig.properties"
[-] *Firefox preferences cleaned: "CT2189222.SearchEngine" - "%40APPSERVER_BASIC_ENGINES_CAPTION_APPSERVER%40 hxxp://search.conduit.com/Results.aspx?q=UCM_SEARCH_TERM&ctid=CT2189222&octid=EB_ORIGINAL_CTID&SearchSource=1"
[-] *Firefox preferences cleaned: "CT2189222.SearchFromAddressBarIsInit" - true
[-] *Firefox preferences cleaned: "CT2189222.SearchInNewTabEnabled" - true
[-] *Firefox preferences cleaned: "CT2189222.SearchInNewTabIntervalMM" - 1440
[-] *Firefox preferences cleaned: "CT2189222.SearchInNewTabLastCheckTime" - "Sat Oct 02 2010 16:32:44 GMT+0200"
[-] *Firefox preferences cleaned: "CT2189222.SearchInNewTabServiceUrl" - "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID"
[-] *Firefox preferences cleaned: "CT2189222.SearchInNewTabUsageUrl" - "hxxp://Usage.Hosting.conduit-services.com/UsageService.asmx/UsersRequests?ctid=EB_TOOLBAR_ID"
[-] *Firefox preferences cleaned: "CT2189222.SettingsCheckIntervalMin" - 120
[-] *Firefox preferences cleaned: "CT2189222.SettingsLastCheckTime" - "Sat Oct 02 2010 18:36:51 GMT+0200"
[-] *Firefox preferences cleaned: "CT2189222.SettingsLastUpdate" - "1285580322"
[-] *Firefox preferences cleaned: "CT2189222.ThirdPartyComponentsInterval" - 504
[-] *Firefox preferences cleaned: "CT2189222.ThirdPartyComponentsLastCheck" - "Sat Oct 02 2010 16:32:42 GMT+0200"
[-] *Firefox preferences cleaned: "CT2189222.ThirdPartyComponentsLastUpdate" - "1246790578"
[-] *Firefox preferences cleaned: "CT2189222.TrusteLinkUrl" - "hxxp://www.truste.org/pvr.php?page=validate&so ... sealid=112"
[-] *Firefox preferences cleaned: "CT2189222.UserID" - "UN21650648455643384"
[-] *Firefox preferences cleaned: "CT2189222.ValidationData_Toolbar" - 0
[-] *Firefox preferences cleaned: "CT2189222.WeatherNetwork" - ""
[-] *Firefox preferences cleaned: "CT2189222.WeatherPollDate" - "Sat Oct 02 2010 18:32:45 GMT+0200"
[-] *Firefox preferences cleaned: "CT2189222.WeatherUnit" - "C"
[-] *Firefox preferences cleaned: "CT2189222.alertChannelId" - "587815"
[-] *Firefox preferences cleaned: "CT2189222.clientLogIsEnabled" - true
[-] *Firefox preferences cleaned: "CT2189222.clientLogServiceUrl" - "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent"
[-] *Firefox preferences cleaned: "CT2189222.myStuffEnabled" - true
[-] *Firefox preferences cleaned: "CT2189222.myStuffPublihserMinWidth" - 400
[-] *Firefox preferences cleaned: "CT2189222.myStuffSearchUrl" - "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID"
[-] *Firefox preferences cleaned: "CT2189222.myStuffServiceIntervalMM" - 1440
[-] *Firefox preferences cleaned: "CT2189222.myStuffServiceUrl" - "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUFF_LUT"
[-] *Firefox preferences cleaned: "CT2189222.uninstallLogServiceUrl" - "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation"
[-] *Firefox preferences cleaned: "CommunityToolbar.SearchFromAddressBarSavedUrl" - "chrome://browser-region/locale/region.properties"
[-] *Firefox preferences cleaned: "CommunityToolbar.ToolbarsList" - "CT2189222"
[-] *Firefox preferences cleaned: "CommunityToolbar.ToolbarsList2" - "CT2189222"
[-] *Firefox preferences cleaned: "CommunityToolbar.keywordURLSelectedCTID" - "CT2189222"
[-] *Firefox preferences cleaned: "browser.search.defaultthis.engineName" - "MAX EN Atube Customized Web Search"
[-] *Firefox preferences cleaned: "browser.search.order.1" - "Ask.com"
[-] *Firefox preferences cleaned: "browser.startup.homepage" - "https://www.malwarebytes.org/restorebro ... hSource=13"
[-] *Firefox preferences cleaned: "extensions.wrc.SearchRules.ask.com.style" - ".WRCN {display:none} #yui-main .tsrc_vnru .title + .WRCN, #yui-main #teoma-results .title + .WRCN {display:inline !important; background: url(\"IMAGE\") right no-repeat}"
[-] *Firefox preferences cleaned: "extensions.wrc.SearchRules.ask.com.url" - "^hxxp(s)?\\:\\/\\/(.+\\.)?ask\\.com\\/.*"
[-] *Firefox preferences cleaned: "extensions.wrc.SearchRules.rambler.ru.style" - ".WRCN {display:none} .search-results .title + .WRCN {display:inline !important; background: url(\"IMAGE\") right no-repeat}"
[-] *Firefox preferences cleaned: "extensions.wrc.SearchRules.rambler.ru.url" - "^hxxp\\:\\/\\/nova\\.rambler\\.ru\\/.+"


*************************

:: *"Tracing" keys deleted
:: *Winsock settings cleared

*************************

C:\AdwCleaner\AdwCleaner[C0].txt - [19295 *Bytes] - [09/04/2017 14:34:07]
C:\AdwCleaner\AdwCleaner[S0].txt - [29764 *Bytes] - [09/04/2017 14:31:47]

########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt - [19445 *Bytes] ##########

[JaRon]

Ok, malo by to byt ciste
doporucujem taketo cistenie 1x za 1-2mesiace

[Noone]

super, dakujem velmi pekne, nahucim jej to do hlavy (ale aj tak to budem musiet robit ja :/ ) dakujeme este raz a prajeme prijemny den

[JaRon]

Rado sa stalo
Aj Vam obom prajem pekny den