RSIT - prosím o preventivku

[jan.raszka]

Logfile of random's system information tool 1.09 (written by random/random)
Run by Jenda at 2013-03-30 10:08:44
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 629 GB (94%) free of 670 GB
Total RAM: 4040 MB (60% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:08:49, on 30.3.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16470)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\USB Camera2\VM332_STI.EXE
C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe
C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\windows\SysWOW64\RunDll32.exe
C:\Program Files\Lenovo\Bluetooth Software\BluetoothHeadsetProxy.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_6_602_180.exe
C:\windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_6_602_180.exe
C:\Program Files\trend micro\Jenda.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSource= ... =CT3260501
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://lenovo.msn.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: FreemakeGold Toolbar - {1d053bb5-c922-44e3-9910-66585f017505} - C:\Program Files (x86)\FreemakeGold\prxtbFree.dll
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: FreemakeGold - {1d053bb5-c922-44e3-9910-66585f017505} - C:\Program Files (x86)\FreemakeGold\prxtbFree.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O2 - BHO: Freemake.YoutubeButton - {e9e8eb35-ff77-455d-b677-91e5e4fc06c2} - mscoree.dll (file missing)
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar: FreemakeGold Toolbar - {1d053bb5-c922-44e3-9910-66585f017505} - C:\Program Files (x86)\FreemakeGold\prxtbFree.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [332BigDog] C:\Program Files (x86)\USB Camera2\VM332_STI.EXE
O4 - HKLM\..\Run: [UpdateP2GShortCut] "C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\Lenovo\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\5.0"
O4 - HKLM\..\Run: [YouCam Mirage] "C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe"
O4 - HKLM\..\Run: [YouCam Tray] "C:\Program Files (x86)\Lenovo\YouCam\YouCam.exe" /s
O4 - HKLM\..\Run: [VeriFaceManager] C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe
O4 - HKLM\..\Run: [UpdatePRCShortCut] "C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe" "C:\Program Files\Lenovo\OneKey App\OneKey Recovery" UpdateWithCreateOnce "Software\Lenovo\OneKey App\OneKey Recovery"
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: Odeslat obrázek do zařízení &Bluetooth... - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Odeslat stránku do zařízení &Bluetooth... - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Send To Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: Send to &Bluetooth Device... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: @C:\Program Files (x86)\Freemake\Freemake Youtube Mp3 Converter\BrowserPlugin\IE\IEPluginDownloader.dll,-4 - {FC0EA236-1C31-418e-BFCE-A76DDB7F1362} - C:\Program Files (x86)\Freemake\Freemake Youtube Mp3 Converter\BrowserPlugin\IE\IEPluginDownloader.dll (HKCU)
O9 - Extra 'Tools' menuitem: Freemake Video Downloader - {FC0EA236-1C31-418e-BFCE-A76DDB7F1362} - C:\Program Files (x86)\Freemake\Freemake Youtube Mp3 Converter\BrowserPlugin\IE\IEPluginDownloader.dll (HKCU)
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\windows\system32\atiesrxx.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\windows\system32\fxssvc.exe (file missing)
O23 - Service: FreemakeVideoCapture - Ellora Assets Corp. - C:\Program Files (x86)\Freemake\CaptureLib\CaptureLibService.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 12003 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
winlogon.exe
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\lsm.exe
C:\windows\system32\svchost.exe -k DcomLaunch
C:\windows\system32\svchost.exe -k RPCSS
C:\windows\system32\atiesrxx.exe
C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\windows\system32\svchost.exe -k netsvcs
C:\windows\system32\svchost.exe -k GPSvcGroup
C:\windows\system32\svchost.exe -k LocalService
C:\windows\system32\svchost.exe -k NetworkService
atieclxx
C:\windows\system32\WLANExt.exe 4299712
\??\C:\windows\system32\conhost.exe "-3193627801144406288-19467719271412138741-457668664-35755287812501969881612035399
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\windows\System32\spoolsv.exe
C:\windows\system32\svchost.exe -k LocalServiceNoNetwork
"taskhost.exe"
"C:\windows\system32\Dwm.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
C:\windows\Explorer.EXE
"C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe"
"C:\Program Files (x86)\Freemake\CaptureLib\CaptureLibService.exe"
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe"
"C:\Program Files (x86)\Lenovo\Energy Management\utility.exe"
"C:\Program Files\Zune\ZuneLauncher.exe"
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
"C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe"
"C:\Program Files (x86)\USB Camera2\VM332_STI.EXE"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM"
"C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe"
"C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe"
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
C:\windows\system32\svchost.exe -k imgsvc
C:\windows\system32\SearchIndexer.exe /Embedding
C:\windows\system32\svchost.exe -k bthsvcs
C:\windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"
C:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files\Lenovo\Bluetooth Software\BtStackServer.exe" -Embedding
"C:\windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-c4c0626c-61c3-444a-89cf-0784d2a65774 -SystemEventPortName:HostProcess-2d125bc5-4716-4a4c-ae8b-18dae4b0968f -IoCancelEventPortName:HostProcess-1c429dec-daee-4575-907f-ab1c9719808f -NonStateChangingEventPortName:HostProcess-84e7e1bb-9089-4119-a548-b13405b3586a -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:1cd13c08-9ad9-4200-a67e-4852b1bafbbe -DeviceGroupId:WpdFsGroup
C:\windows\SysWOW64\RunDll32.exe "C:\Program Files\Lenovo\Bluetooth Software\SysWOW64\BtMmHook.dll",SetAndWaitBtMmHook
"C:\Program Files\Lenovo\Bluetooth Software\BluetoothHeadsetProxy.exe"
C:\windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe" --channel=4688.a19bd00.2071144712 "C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_180.dll" -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox" E7CF176E110C211B 4688 "\\.\pipe\gecko-crash-server-pipe.4688" plugin
"C:\windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_6_602_180.exe" --proxy-stub-channel=Flash4004.678D3D80.14989 --host-broker-channel=Flash4004.678D3D80.26338 --host-pid=4004 --host-npapi-version=27 --plugin-path="C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_180.dll"
"C:\windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_6_602_180.exe" --channel=1060.0067F49C.1889299098 --proxy-stub-channel=Flash4004.678D3D80.14989 --plugin-path="C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_180.dll" --host-npapi-version=27 --type=renderer
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
C:\windows\System32\svchost.exe -k secsvcs
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
WLIDSvcM.exe 4548
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
C:\windows\system32\msiexec.exe /V
"D:\install\RSITx64.exe"
C:\windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\windows\tasks\Adobe Flash Player Updater.job
C:\windows\tasks\GoogleUpdateTaskMachineCore.job
C:\windows\tasks\GoogleUpdateTaskMachineUA.job

=========Mozilla firefox=========

ProfilePath - C:\Users\Jenda\AppData\Roaming\Mozilla\Firefox\Profiles\mf0ghpmb.default

prefs.js - "browser.startup.homepage" - "http://search.conduit.com/?ctid=CT32823 ... 6671894196"
prefs.js - "keyword.URL" - "http://search.conduit.com/ResultsExt.as ... 196&UM=&q="

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.6.602.180 Plugin
"Path"=C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_180.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=10.17.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\windows\SysWOW64\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=10.17.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.0.5]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.6.602.180 Plugin
"Path"=C:\windows\system32\Macromed\Flash\NPSWF64_11_6_602_180.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll

C:\Program Files (x86)\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files (x86)\Mozilla Firefox\components\
binary.manifest
browsercomps.dll

C:\Program Files (x86)\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Users\Jenda\AppData\Roaming\Mozilla\Firefox\Profiles\mf0ghpmb.default\extensions\
{19996d99-4d11-4056-a5b4-972f39152615}

C:\Users\Jenda\AppData\Roaming\Mozilla\Firefox\Profiles\mf0ghpmb.default\searchplugins\
conduit.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2013-03-07 1497560]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 529280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2013-01-13 253584]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-12-18 66280]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1d053bb5-c922-44e3-9910-66585f017505}]
FreemakeGold Toolbar - C:\Program Files (x86)\FreemakeGold\prxtbFree.dll [2011-05-09 176936]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-03-30 461216]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2013-03-07 1224568]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2013-01-13 192144]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-03-30 170912]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{e9e8eb35-ff77-455d-b677-91e5e4fc06c2}]
Freemake.YoutubeButton - C:\windows\system32\mscoree.dll [2010-11-21 444752]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2013-03-07 1497560]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2013-01-13 253584]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2013-01-13 192144]
{1d053bb5-c922-44e3-9910-66585f017505} - FreemakeGold Toolbar - C:\Program Files (x86)\FreemakeGold\prxtbFree.dll [2011-05-09 176936]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2013-03-07 1224568]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\windows\system32\igfxtray.exe [2011-03-25 167960]
"HotKeysCmds"=C:\windows\system32\hkcmd.exe [2011-03-25 391704]
"Persistence"=C:\windows\system32\igfxpers.exe [2011-03-25 418840]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2011-04-08 2741544]
"Lenovo EE Boot Optimizer"=C:\Program Files (x86)\Lenovo\Boot Optimizer\PopWnd.exe [2011-11-03 114688]
"Energy Management"=C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [2011-11-03 9753024]
"EnergyUtility"=C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [2011-11-03 5908928]
"Zune Launcher"=C:\Program Files\Zune\ZuneLauncher.exe [2011-08-05 163552]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-12-03 946352]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\mcui_exe]
C:\Program Files\McAfee.com\Agent\mcagent.exe /runkey []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
C:\Program Files (x86)\Skype\Phone\Skype.exe [2012-11-09 17877168]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"=C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [2011-02-18 283160]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2011-03-28 336384]
"332BigDog"=C:\Program Files (x86)\USB Camera2\VM332_STI.EXE [2010-01-19 536576]
"UpdateP2GShortCut"=C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [2010-07-26 222504]
"YouCam Mirage"=C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe [2011-01-29 136488]
"YouCam Tray"=C:\Program Files (x86)\Lenovo\YouCam\YouCam.exe [2011-01-29 228448]
"VeriFaceManager"=C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe [2011-11-03 329056]
"UpdatePRCShortCut"=C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe [2009-05-13 222504]
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2013-03-07 4767304]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-12-03 946352]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2012-07-03 252848]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth.lnk - C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\windows\system32\igfxdev.dll [2011-03-25 385024]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2013-03-30 10:08:44 ----D---- C:\rsit
2013-03-30 10:01:03 ----A---- C:\windows\SYSWOW64\javaws.exe
2013-03-30 10:00:53 ----A---- C:\windows\SYSWOW64\WindowsAccessBridge-32.dll
2013-03-30 10:00:53 ----A---- C:\windows\SYSWOW64\javaw.exe
2013-03-30 10:00:53 ----A---- C:\windows\SYSWOW64\java.exe
2013-03-30 10:00:41 ----D---- C:\Program Files (x86)\Java
2013-03-27 17:47:58 ----D---- C:\Program Files (x86)\Mozilla Firefox
2013-03-20 22:40:52 ----A---- C:\windows\system32\drivers\usb8023.sys
2013-03-17 08:58:16 ----A---- C:\windows\system32\drivers\aswVmm.sys
2013-03-17 08:58:15 ----A---- C:\windows\system32\drivers\aswRvrt.sys
2013-03-13 23:08:08 ----A---- C:\windows\SYSWOW64\mshtmled.dll
2013-03-13 23:08:08 ----A---- C:\windows\system32\mshtmled.dll
2013-03-13 23:08:07 ----A---- C:\windows\SYSWOW64\vbscript.dll
2013-03-13 23:08:07 ----A---- C:\windows\SYSWOW64\ieUnatt.exe
2013-03-13 23:08:07 ----A---- C:\windows\SYSWOW64\ieui.dll
2013-03-13 23:08:07 ----A---- C:\windows\system32\ieUnatt.exe
2013-03-13 23:08:07 ----A---- C:\windows\system32\ieui.dll
2013-03-13 23:08:06 ----A---- C:\windows\SYSWOW64\urlmon.dll
2013-03-13 23:08:06 ----A---- C:\windows\SYSWOW64\url.dll
2013-03-13 23:08:06 ----A---- C:\windows\system32\urlmon.dll
2013-03-13 23:08:06 ----A---- C:\windows\system32\url.dll
2013-03-13 23:08:05 ----A---- C:\windows\SYSWOW64\msfeeds.dll
2013-03-13 23:08:05 ----A---- C:\windows\system32\msfeeds.dll
2013-03-13 23:08:05 ----A---- C:\windows\system32\jscript9.dll
2013-03-13 23:08:04 ----A---- C:\windows\SYSWOW64\wininet.dll
2013-03-13 23:08:04 ----A---- C:\windows\system32\wininet.dll
2013-03-13 23:08:04 ----A---- C:\windows\system32\jsproxy.dll
2013-03-13 23:08:03 ----A---- C:\windows\SYSWOW64\jscript9.dll
2013-03-13 23:08:03 ----A---- C:\windows\SYSWOW64\jscript.dll
2013-03-13 23:08:03 ----A---- C:\windows\system32\vbscript.dll
2013-03-13 23:08:03 ----A---- C:\windows\system32\jscript.dll
2013-03-13 23:08:03 ----A---- C:\windows\system32\iertutil.dll
2013-03-13 23:08:02 ----A---- C:\windows\SYSWOW64\jsproxy.dll
2013-03-13 23:08:02 ----A---- C:\windows\SYSWOW64\iertutil.dll
2013-03-13 23:08:01 ----A---- C:\windows\SYSWOW64\mshtml.dll
2013-03-13 23:07:59 ----A---- C:\windows\system32\mshtml.dll
2013-03-13 23:07:58 ----A---- C:\windows\SYSWOW64\ieframe.dll
2013-03-13 23:07:58 ----A---- C:\windows\system32\ieframe.dll
2013-03-13 23:06:50 ----D---- C:\Program Files\Microsoft Silverlight
2013-03-13 23:06:50 ----D---- C:\Program Files (x86)\Microsoft Silverlight

======List of files/folders modified in the last 1 month======

2013-03-30 10:08:47 ----D---- C:\Program Files\trend micro
2013-03-30 10:08:46 ----D---- C:\windows\Temp
2013-03-30 10:01:15 ----SHD---- C:\windows\Installer
2013-03-30 10:01:03 ----D---- C:\windows\SysWOW64
2013-03-30 10:00:46 ----A---- C:\windows\SYSWOW64\npDeployJava1.dll
2013-03-30 10:00:46 ----A---- C:\windows\SYSWOW64\deployJava1.dll
2013-03-30 10:00:41 ----RD---- C:\Program Files (x86)
2013-03-30 10:00:00 ----SHD---- C:\System Volume Information
2013-03-30 09:59:11 ----D---- C:\windows\System32
2013-03-30 09:59:11 ----D---- C:\windows\inf
2013-03-30 09:59:11 ----A---- C:\windows\system32\PerfStringBackup.INI
2013-03-30 09:55:24 ----A---- C:\windows\SYSWOW64\log.txt
2013-03-30 09:53:26 ----D---- C:\windows\system32\config
2013-03-30 09:52:41 ----D---- C:\ProgramData\VeriFace
2013-03-29 17:02:07 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2013-03-26 20:17:07 ----D---- C:\windows\system32\catroot2
2013-03-21 23:03:40 ----D---- C:\windows\winsxs
2013-03-21 23:02:23 ----D---- C:\windows\system32\drivers
2013-03-21 23:02:22 ----D---- C:\windows\system32\DriverStore
2013-03-17 08:58:17 ----D---- C:\windows\system32\Tasks
2013-03-17 08:58:09 ----D---- C:\Windows
2013-03-15 21:39:49 ----D---- C:\windows\system32\catroot
2013-03-14 15:14:44 ----D---- C:\windows\SYSWOW64\migration
2013-03-14 15:14:44 ----D---- C:\Program Files (x86)\Internet Explorer
2013-03-14 15:14:43 ----D---- C:\windows\system32\migration
2013-03-14 15:14:43 ----D---- C:\Program Files\Internet Explorer
2013-03-13 23:08:55 ----A---- C:\windows\system32\MRT.exe
2013-03-13 23:06:50 ----RD---- C:\Program Files
2013-03-12 21:32:18 ----A---- C:\windows\SYSWOW64\FlashPlayerApp.exe
2013-03-07 00:32:22 ----A---- C:\windows\system32\aswBoot.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;aswRvrt; C:\windows\system32\drivers\aswRvrt.sys [2013-03-07 65336]
R0 fbfmon;fbfmon; C:\windows\system32\drivers\fbfmon.sys [2011-11-03 57952]
R0 iaStor;Intel AHCI Controller; C:\windows\system32\DRIVERS\iaStor.sys [2011-02-18 439320]
R0 LHDmgr;LHDmgr; C:\windows\System32\DRIVERS\LhdX64.sys [2011-11-03 39008]
R0 rdyboost;ReadyBoost; C:\windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 aswKbd;aswKbd; C:\windows\system32\drivers\aswKbd.sys [2012-03-07 28504]
R1 aswRdr;aswRdr; C:\windows\System32\Drivers\aswrdr2.sys [2013-03-07 70992]
R1 aswSnx;aswSnx; C:\windows\system32\drivers\aswSnx.sys [2013-03-07 1025808]
R1 aswSP;aswSP; C:\windows\system32\drivers\aswSP.sys [2013-03-07 377920]
R1 aswTdi;avast! Network Shield Support; C:\windows\system32\drivers\aswTdi.sys [2013-03-07 68920]
R1 BPntDrv;BPntDrv; C:\windows\system32\drivers\BPntDrv.sys [2011-11-03 13408]
R1 vwififlt;Virtual WiFi Filter Driver; C:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 aswFsBlk;aswFsBlk; C:\windows\system32\drivers\aswFsBlk.sys [2013-03-07 33400]
R2 aswMonFlt;aswMonFlt; \??\C:\windows\system32\drivers\aswMonFlt.sys [2013-03-07 80816]
R2 npf;NetGroup Packet Filter Driver; C:\windows\system32\drivers\npf.sys [2011-02-11 35344]
R3 ACPIVPC;Lenovo Virtual Power Controller Driver; C:\windows\system32\DRIVERS\AcpiVpc.sys [2011-11-03 29792]
R3 amdkmdag;amdkmdag; C:\windows\system32\DRIVERS\atikmdag.sys [2011-03-28 9319424]
R3 amdkmdap;amdkmdap; C:\windows\system32\DRIVERS\atikmpag.sys [2011-03-28 303616]
R3 BCM43XX;Broadcom 802.11 Network Adapter Driver; C:\windows\system32\DRIVERS\bcmwl664.sys [2010-10-28 4716608]
R3 BthEnum;Ovladač pro Bluetooth Request Block; C:\windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Bluetooth Device (Personal Area Network); C:\windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
R3 BTWAMPFL;btwampfl; C:\windows\system32\DRIVERS\btwampfl.sys [2010-12-15 349224]
R3 btwaudio;Bluetooth Audio Device Service; C:\windows\system32\drivers\btwaudio.sys [2010-12-15 106536]
R3 btwavdt;Bluetooth AVDT Service; C:\windows\system32\drivers\btwavdt.sys [2010-12-15 138280]
R3 btwl2cap;Bluetooth L2CAP Service; C:\windows\system32\DRIVERS\btwl2cap.sys [2010-12-15 39464]
R3 btwrchid;btwrchid; C:\windows\system32\DRIVERS\btwrchid.sys [2010-12-15 21416]
R3 clwvd;CyberLink WebCam Virtual Driver; C:\windows\system32\DRIVERS\clwvd.sys [2011-01-29 31088]
R3 CnxtHdAudService;Conexant UAA Function Driver for High Definition Audio Service; C:\windows\system32\drivers\CHDRT64.sys [2011-02-14 1581184]
R3 IntcDAud;Intel(R) Display Audio; C:\windows\system32\DRIVERS\IntcDAud.sys [2010-10-14 317440]
R3 intelkmd;intelkmd; C:\windows\system32\DRIVERS\igdpmd64.sys [2011-03-25 12262336]
R3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller; C:\windows\system32\DRIVERS\L1C62x64.sys [2010-10-21 76912]
R3 MEIx64;Intel(R) Management Engine Interface; C:\windows\system32\DRIVERS\HECIx64.sys [2010-10-20 56344]
R3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
R3 SynTP;Synaptics TouchPad Driver; C:\windows\system32\DRIVERS\SynTP.sys [2011-04-08 1430576]
R3 vm2uvcflt;Vimicro USB Camera Filter 2; C:\windows\System32\Drivers\vm2uvcflt.sys [2010-09-21 15056]
R3 vm332avs;Lenovo Camera2; C:\windows\System32\Drivers\vm332avs.sys [2010-12-10 234960]
S3 aswVmm;aswVmm; C:\windows\system32\drivers\aswVmm.sys [2013-03-07 178624]
S3 BTHPORT;Ovladač portu Bluetooth; C:\windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 igfx;igfx; C:\windows\system32\DRIVERS\igdkmd64.sys [2011-03-25 12262336]
S3 pciide;pciide; C:\windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 RSUSBVSTOR;RtsUVStor.Sys Realtek USB Card Reader; C:\windows\System32\Drivers\RtsUVStor.sys [2010-09-30 299520]
S3 RTL8167;Realtek 8167 NT Driver; C:\windows\system32\DRIVERS\Rt64win7.sys [2009-06-10 187392]
S3 TsUsbFlt;TsUsbFlt; C:\windows\system32\drivers\tsusbflt.sys [2012-08-23 57856]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
S3 WinUsb;Ovladač WinUsb; C:\windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]
S3 wsvd;wsvd; C:\windows\system32\DRIVERS\wsvd.sys [2009-07-21 121840]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-12-18 65192]
R2 AMD External Events Utility;AMD External Events Utility; C:\windows\system32\atiesrxx.exe [2011-03-28 203264]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2013-03-07 45248]
R2 btwdins;Bluetooth Service; C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe [2010-12-14 953632]
R2 FreemakeVideoCapture;FreemakeVideoCapture; C:\Program Files (x86)\Freemake\CaptureLib\CaptureLibService.exe [2013-01-10 9216]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2011-02-18 13336]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2010-12-21 325656]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-12-21 2656280]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2010-09-21 2286976]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 gupdate;Google Update Service (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-11-03 136176]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2012-11-09 160944]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-03-12 253656]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-11-03 136176]
S3 gusvc;Google Software Updater; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2012-08-13 194032]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2013-03-27 115608]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\windows\system32\Wat\WatAdminSvc.exe [2012-03-24 1255736]
S3 WMZuneComm;Zune Windows Mobile Connectivity Service; C:\Program Files\Zune\WMZuneComm.exe [2011-08-05 306400]
S3 ZuneNetworkSvc;Zune Network Sharing Service; C:\Program Files\Zune\ZuneNss.exe [2011-08-05 8277728]
S3 ZuneWlanCfgSvc;Zune Wireless Configuration Service; C:\Program Files\Zune\ZuneWlanCfgSvc.exe [2011-08-05 467680]
S4 wlcrasvc;Windows Live Mesh remote connections service; C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184]

-----------------EOF-----------------

[Roli]

Zdravím, stáhni a ulož na plochu AdwCleaner,

ukonči všechny programy včetně prohlížeče a dvojklikem spusť,

objeví se okno kde vlevo dole klikni na Search.

Po té proběhne sken a po jeho skončení na Tebe vypadne log, který mi sem zkopíruj.

[jan.raszka]

# AdwCleaner v2.115 - Log vytvooen 30/03/2013 v 21:03:55
# Aktualizováno 17/03/2013 Xplode
# Operaení systém : Windows 7 Home Premium Service Pack 1 (64 bits)
# Uživatel : Jenda - JENDA-PC
# Spuštin systém : Normální
# Spuštino z : C:\Users\Jenda\Desktop\adwcleaner.exe
# Volba [Prohledat]


***** [Služby] *****


***** [Soubory / Složky] *****

Složka Nalezeno : C:\Program Files (x86)\Conduit
Složka Nalezeno : C:\Program Files (x86)\FreemakeGold
Složka Nalezeno : C:\ProgramData\Partner
Složka Nalezeno : C:\Users\Jenda\AppData\Local\Conduit
Složka Nalezeno : C:\Users\Jenda\AppData\Local\Google\Chrome\User Data\Default\Extensions\allecjapbpjaijjopkncccbchmkjbcld
Složka Nalezeno : C:\Users\Jenda\AppData\Local\Temp\CT3282311
Složka Nalezeno : C:\Users\Jenda\AppData\LocalLow\Conduit
Složka Nalezeno : C:\Users\Jenda\AppData\LocalLow\FreemakeGold
Složka Nalezeno : C:\Users\Jenda\AppData\LocalLow\PriceGong
Složka Nalezeno : C:\Users\Jenda\AppData\Roaming\Mozilla\Firefox\Profiles\mf0ghpmb.default\CT3282311
Složka Nalezeno : C:\Users\Jenda\AppData\Roaming\Mozilla\Firefox\Profiles\mf0ghpmb.default\extensions\{19996d99-4d11-4056-a5b4-972f39152615}
Složka Nalezeno : C:\Users\Jenda\AppData\Roaming\Mozilla\Firefox\Profiles\mf0ghpmb.default\Smartbar
Soubor Nalezeno : C:\END
Soubor Nalezeno : C:\Users\Jenda\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_search.conduit.com_0.localstorage
Soubor Nalezeno : C:\Users\Jenda\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_search.conduit.com_0.localstorage-journal
Soubor Nalezeno : C:\Users\Jenda\AppData\Roaming\Mozilla\Firefox\Profiles\mf0ghpmb.default\searchplugins\Conduit.xml

***** [Registry] *****

Hodnota Nalezeno : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{1D053BB5-C922-44E3-9910-66585F017505}]
Hodnota Nalezeno : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{1D053BB5-C922-44E3-9910-66585F017505}]
Hodnota Nalezeno : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{1D053BB5-C922-44E3-9910-66585F017505}]
Hodnota Nalezeno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{1D053BB5-C922-44E3-9910-66585F017505}]
Klíe Nalezeno : HKCU\Software\AppDataLow\Software\Conduit
Klíe Nalezeno : HKCU\Software\AppDataLow\Software\ConduitSearchScopes
Klíe Nalezeno : HKCU\Software\AppDataLow\Software\FreemakeGold
Klíe Nalezeno : HKCU\Software\AppDataLow\Software\PriceGong
Klíe Nalezeno : HKCU\Software\AppDataLow\Software\SmartBar
Klíe Nalezeno : HKCU\Software\AppDataLow\Toolbar
Klíe Nalezeno : HKCU\Software\Conduit
Klíe Nalezeno : HKCU\Software\Google\Chrome\Extensions\allecjapbpjaijjopkncccbchmkjbcld
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{1D053BB5-C922-44E3-9910-66585F017505}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1D053BB5-C922-44E3-9910-66585F017505}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Toolbar.CT3260501
Klíe Nalezeno : HKLM\Software\Conduit
Klíe Nalezeno : HKLM\Software\FreemakeGold
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASAPI32
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASMANCS
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D63CD552-23DA-43ED-BE1A-77476B691A70}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{1D053BB5-C922-44E3-9910-66585F017505}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{D63CD552-23DA-43ED-BE1A-77476B691A70}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\allecjapbpjaijjopkncccbchmkjbcld
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2D8C2243-0AA3-428B-8F15-B56300AB7B65}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CC2DCD3D-79C3-44E5-BD09-67BE66B60A80}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1D053BB5-C922-44E3-9910-66585F017505}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\FreemakeGold Toolbar

***** [Internetové prohlížeee] *****

-\\ Internet Explorer v9.0.8112.16470

[HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://search.conduit.com?SearchSource=10&ctid=CT3260501

-\\ Mozilla Firefox v20.0 (cs)

Soubor : C:\Users\Jenda\AppData\Roaming\Mozilla\Firefox\Profiles\mf0ghpmb.default\prefs.js

Nalezeno : user_pref("CT3282311.ConduitBarVisitsfacebook.enc", "Mw==");
Nalezeno : user_pref("CT3282311.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
Nalezeno : user_pref("CT3282311.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"tru[...]
Nalezeno : user_pref("CT3282311.FF19Solved", "true");
Nalezeno : user_pref("CT3282311.FirstTime", "true");
Nalezeno : user_pref("CT3282311.FirstTimeFF3", "true");
Nalezeno : user_pref("CT3282311.PG_ENABLE", "dHJ1ZQ==");
Nalezeno : user_pref("CT3282311.PG_ENABLE.enc", "dHJ1ZQ==");
Nalezeno : user_pref("CT3282311.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT328[...]
Nalezeno : user_pref("CT3282311.UserID", "UN19735726671894196");
Nalezeno : user_pref("CT3282311._key_edilia__uID.enc", "YmZjMDYzZjktY2ZlZS00NzExLWJjZTYtNTcwMTk4YTYyM2Fi");
Nalezeno : user_pref("CT3282311.addressBarTakeOverEnabledInHidden", "true");
Nalezeno : user_pref("CT3282311.appsJson.enc", "eyJhcHBzIjpbeyJuYW1lIjoiZmFjZWJvb2siLCJ1cmwiOiJhMDllNjk4NS0zNTc[...]
Nalezeno : user_pref("CT3282311.appsJsonLastDate.enc", "MTM2NDU3MzA2NTMwNA==");
Nalezeno : user_pref("CT3282311.autoDisableScopes", -1);
Nalezeno : user_pref("CT3282311.browser.search.defaultthis.engineName", "true");
Nalezeno : user_pref("CT3282311.cbfirsttime.enc", "U3VuIEZlYiAxNyAyMDEzIDA5OjQ3OjI2IEdNVCswMTAw");
Nalezeno : user_pref("CT3282311.dateInstalled.enc", "MTM2MTA5MDY5Mjc4NQ==");
Nalezeno : user_pref("CT3282311.defaultSearch", "true");
Nalezeno : user_pref("CT3282311.embeddedsData", "[{\"appId\":\"130038286748342703\",\"apiPermissions\":{\"cross[...]
Nalezeno : user_pref("CT3282311.enableAlerts", "always");
Nalezeno : user_pref("CT3282311.enableFix404ByUser", "FALSE");
Nalezeno : user_pref("CT3282311.enableSearchFromAddressBar", "true");
Nalezeno : user_pref("CT3282311.firstTimeDialogOpened", "true");
Nalezeno : user_pref("CT3282311.fixPageNotFoundError", "true");
Nalezeno : user_pref("CT3282311.fixPageNotFoundErrorByUser", "true");
Nalezeno : user_pref("CT3282311.fixPageNotFoundErrorInHidden", "true");
Nalezeno : user_pref("CT3282311.fixUrls", true);
Nalezeno : user_pref("CT3282311.freeRideGames_Install.enc", "dHJ1ZQ==");
Nalezeno : user_pref("CT3282311.installDate", "17/2/2013 9:44:37");
Nalezeno : user_pref("CT3282311.installId", "conduitinstaller.exe");
Nalezeno : user_pref("CT3282311.installType", "conduitnsisintegration");
Nalezeno : user_pref("CT3282311.isCheckedStartAsHidden", true);
Nalezeno : user_pref("CT3282311.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
Nalezeno : user_pref("CT3282311.isFirstTimeToolbarLoading", "false");
Nalezeno : user_pref("CT3282311.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
Nalezeno : user_pref("CT3282311.keyword", "true");
Nalezeno : user_pref("CT3282311.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"hxxp://search.conduit[...]
Nalezeno : user_pref("CT3282311.lastVersion", "10.15.0.562");
Nalezeno : user_pref("CT3282311.mam_gk_app13_appState.enc", "b24=");
Nalezeno : user_pref("CT3282311.mam_gk_appStateReportTime.enc", "MTM2NDU3MzA3MDY4MQ==");
Nalezeno : user_pref("CT3282311.mam_gk_appState_CouponBuddy.enc", "b24=");
Nalezeno : user_pref("CT3282311.mam_gk_appState_PriceGong.enc", "b24=");
Nalezeno : user_pref("CT3282311.mam_gk_appsData.enc", "eyJhcHBzIjpbeyJpZCI6IlByaWNlR29uZyIsInVybCI6Imh0dHA6Ly9w[...]
Nalezeno : user_pref("CT3282311.mam_gk_appsDefaultEnabled.enc", "bnVsbA==");
Nalezeno : user_pref("CT3282311.mam_gk_configuration.enc", "eyJjb25maWd1cmF0aW9uIjpbeyJpZCI6IkNvdXBvbkJ1ZGR5Iiw[...]
Nalezeno : user_pref("CT3282311.mam_gk_currentVersion.enc", "MS40LjQuNg==");
Nalezeno : user_pref("CT3282311.mam_gk_eventsCache.enc", "eyJkMDcyZDhiYy0zZjlmLTQ5NjktYTU1NC0wNDAzMTBlODQ3NjgiO[...]
Nalezeno : user_pref("CT3282311.mam_gk_first_time.enc", "MQ==");
Nalezeno : user_pref("CT3282311.mam_gk_gadgetOpen.enc", "MA==");
Nalezeno : user_pref("CT3282311.mam_gk_installer_preapproved.enc", "ZmFsc2U=");
Nalezeno : user_pref("CT3282311.mam_gk_lastLoginTime.enc", "MTM2NDU3MzA2NjQyNw==");
Nalezeno : user_pref("CT3282311.mam_gk_localization.enc", "eyJnYWRnZXRDb250ZW50UG9saWN5Ijp7IlRleHQiOiJDb250ZW50[...]
Nalezeno : user_pref("CT3282311.mam_gk_pgUnloadedOnce.enc", "dHJ1ZQ==");
Nalezeno : user_pref("CT3282311.mam_gk_settings1.4.0.4.enc", "eyJTdGF0dXMiOiJzdWNjZWVkZWQiLCJEYXRhIjp7ImludGVyd[...]
Nalezeno : user_pref("CT3282311.mam_gk_settings1.4.3.1.enc", "eyJTdGF0dXMiOiJzdWNjZWVkZWQiLCJEYXRhIjp7ImludGVyd[...]
Nalezeno : user_pref("CT3282311.mam_gk_settings1.4.3.2.enc", "eyJTdGF0dXMiOiJzdWNjZWVkZWQiLCJEYXRhIjp7ImludGVyd[...]
Nalezeno : user_pref("CT3282311.mam_gk_settings1.4.4.6.enc", "eyJTdGF0dXMiOiJzdWNjZWVkZWQiLCJEYXRhIjp7ImludGVyd[...]
Nalezeno : user_pref("CT3282311.mam_gk_showCloseButton.enc", "dHJ1ZQ==");
Nalezeno : user_pref("CT3282311.mam_gk_showWelcomeGadget.enc", "ZmFsc2U=");
Nalezeno : user_pref("CT3282311.mam_gk_userId.enc", "OGQ0MjQyYzYtM2M3Mi00ZTEyLWJiMmYtOWUwMmQ3ODE3ZmM4");
Nalezeno : user_pref("CT3282311.mam_gk_user_approval_interacted.enc", "MQ==");
Nalezeno : user_pref("CT3282311.mam_gk_user_apps_selection.enc", "eyJQcmljZUdvbmciOnRydWUsIkNvdXBvbkJ1ZGR5Ijp0c[...]
Nalezeno : user_pref("CT3282311.migrateAppsAndComponents", true);
Nalezeno : user_pref("CT3282311.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"karel kryl\",\"EB_MAIN_FRAME_URL[...]
Nalezeno : user_pref("CT3282311.newSettings", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
Nalezeno : user_pref("CT3282311.openThankYouPage", "false");
Nalezeno : user_pref("CT3282311.openUninstallPage", "true");
Nalezeno : user_pref("CT3282311.revertSettingsEnabled", "false");
Nalezeno : user_pref("CT3282311.search.searchAppId", "130038286748342703");
Nalezeno : user_pref("CT3282311.search.searchCount", "1");
Nalezeno : user_pref("CT3282311.searchFromAddressBarEnabledByUser", "true");
Nalezeno : user_pref("CT3282311.searchInNewTabEnabledByUser", "true");
Nalezeno : user_pref("CT3282311.searchInNewTabEnabledInHidden", "true");
Nalezeno : user_pref("CT3282311.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
Nalezeno : user_pref("CT3282311.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"d[...]
Nalezeno : user_pref("CT3282311.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\[...]
Nalezeno : user_pref("CT3282311.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"d[...]
Nalezeno : user_pref("CT3282311.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"strin[...]
Nalezeno : user_pref("CT3282311.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"strin[...]
Nalezeno : user_pref("CT3282311.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data[...]
Nalezeno : user_pref("CT3282311.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1363728808494");
Nalezeno : user_pref("CT3282311.serviceLayer_services_appTracking_lastUpdate", "1361983172759");
Nalezeno : user_pref("CT3282311.serviceLayer_services_appsMetadata_lastUpdate", "1364500471990");
Nalezeno : user_pref("CT3282311.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1363510008639");
Nalezeno : user_pref("CT3282311.serviceLayer_services_location_lastUpdate", "1364492114248");
Nalezeno : user_pref("CT3282311.serviceLayer_services_login_10.14.65.43_lastUpdate", "1364225653594");
Nalezeno : user_pref("CT3282311.serviceLayer_services_login_10.15.0.562_lastUpdate", "1364573181646");
Nalezeno : user_pref("CT3282311.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1363510008767");
Nalezeno : user_pref("CT3282311.serviceLayer_services_searchAPI_lastUpdate", "1364492114260");
Nalezeno : user_pref("CT3282311.serviceLayer_services_serviceMap_lastUpdate", "1364492114126");
Nalezeno : user_pref("CT3282311.serviceLayer_services_setupAPI_lastUpdate", "1364225653544");
Nalezeno : user_pref("CT3282311.serviceLayer_services_toolbarContextMenu_lastUpdate", "1363510008500");
Nalezeno : user_pref("CT3282311.serviceLayer_services_toolbarSettings_lastUpdate", "1364573182659");
Nalezeno : user_pref("CT3282311.serviceLayer_services_translation_lastUpdate", "1364492114765");
Nalezeno : user_pref("CT3282311.settingsINI", true);
Nalezeno : user_pref("CT3282311.shouldFirstTimeDialog", "false");
Nalezeno : user_pref("CT3282311.showToolbarPermission", "false");
Nalezeno : user_pref("CT3282311.smartbar.CTID", "CT3282311");
Nalezeno : user_pref("CT3282311.smartbar.Uninstall", "0");
Nalezeno : user_pref("CT3282311.smartbar.homepage", "true");
Nalezeno : user_pref("CT3282311.smartbar.toolbarName", "FreemakeGoldPack ");
Nalezeno : user_pref("CT3282311.startPage", "true");
Nalezeno : user_pref("CT3282311.toolbarBornServerTime", "17-2-2013");
Nalezeno : user_pref("CT3282311.toolbarCurrentServerTime", "29-3-2013");
Nalezeno : user_pref("CT3282311.toolbarDisabled", "true");
Nalezeno : user_pref("CT3282311.toolbarLoginClientTime", "Mon Mar 25 2013 18:26:55 GMT+0100");
Nalezeno : user_pref("CT3282311.twitter_autostart.enc", "dHJ1ZQ==");
Nalezeno : user_pref("CT3282311.twitter_v1.8.0_twitter_app_open_t_f.enc", "dHJ1ZQ==");
Nalezeno : user_pref("CT3282311.twitter_v1.9.0_twitter_app_open_t_f.enc", "dHJ1ZQ==");
Nalezeno : user_pref("CT3282311.url_history0001.enc", "aHR0cDovL3d3dy5zdGVzdGkuY3ovcHJvZmlsL3JhczA2Ni8jOjo6Y2xp[...]
Nalezeno : user_pref("CT3282311_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\"[...]
Nalezeno : user_pref("Smartbar.ConduitHomepagesList", "hxxp://search.conduit.com/?ctid=CT3282311&SearchSource=1[...]
Nalezeno : user_pref("Smartbar.ConduitSearchEngineList", "FreemakeGoldPack Customized Web Search");
Nalezeno : user_pref("Smartbar.ConduitSearchUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3282311[...]
Nalezeno : user_pref("Smartbar.SearchFromAddressBarSavedUrl", "");
Nalezeno : user_pref("Smartbar.keywordURLSelectedCTID", "CT3282311");
Nalezeno : user_pref("browser.search.defaultthis.engineName", "FreemakeGoldPack Customized Web Search");
Nalezeno : user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3282311&Sea[...]
Nalezeno : user_pref("browser.startup.homepage", "hxxp://search.conduit.com/?ctid=CT3282311&SearchSource=13&CUI[...]
Nalezeno : user_pref("keyword.URL", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3282311&SearchSource=2&CU[...]
Nalezeno : user_pref("smartBar.searchInNewTabOwner", "CT3282311");
Nalezeno : user_pref("smartbar.conduitHomepageList", "hxxp://search.conduit.com/?ctid=CT3282311&SearchSource=13[...]
Nalezeno : user_pref("smartbar.conduitSearchAddressUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT[...]
Nalezeno : user_pref("smartbar.machineId", "HUGSHIGL5VD1CMEW8HRJU/U4P+DE/YG+UUA+PPGC4HKDCNSACOE1CIEMRESD+A6GMDM[...]
Nalezeno : user_pref("smartbar.originalHomepage", "www.google.cz");
Nalezeno : user_pref("smartbar.originalSearchAddressUrl", "");
Nalezeno : user_pref("smartbar.originalSearchEngine", "");

-\\ Google Chrome v25.0.1364.172

Soubor : C:\Users\Jenda\AppData\Local\Google\Chrome\User Data\Default\Preferences

Nalezeno [l.32] : icon_url = "hxxp://search.conduit.com/fav.ico",
Nalezeno [l.35] : keyword = "search.conduit.com",
Nalezeno [l.38] : search_url = "hxxp://search.conduit.com/Results.aspx?q={searchTerms}&SearchSource=49&cui=UN13648000941260174&ctid=CT3282311",
Nalezeno [l.1987] : homepage = "hxxp://search.conduit.com/?CUI=UN13648000941260174&ctid=CT3282311&SearchSource=48",
Nalezeno [l.2409] : urls_to_restore_on_startup = [ "hxxp://search.conduit.com/?CUI=UN13648000941260174&ctid=CT3282311&SearchSource=48" ]

*************************

AdwCleaner[R1].txt - [998 octets] - [22/12/2012 18:27:08]
AdwCleaner[R2].txt - [1057 octets] - [22/12/2012 18:32:31]
AdwCleaner[R3].txt - [16672 octets] - [30/03/2013 21:03:43]
AdwCleaner[R4].txt - [16602 octets] - [30/03/2013 21:03:55]

########## EOF - C:\AdwCleaner[R4].txt - [16663 octets] ##########

[Roli]

Znovu spusť AdwCleaner ale tentokrát klikni na Delete,

proběhne restart PC kdy dojde ke smazání nepořádku.

Po té na Tebe opět vypadne log který mi sem zkopíruj.

[jan.raszka]

# AdwCleaner v2.115 - Log vytvooen 31/03/2013 v 23:31:41
# Aktualizováno 17/03/2013 Xplode
# Operaení systém : Windows 7 Home Premium Service Pack 1 (64 bits)
# Uživatel : Jenda - JENDA-PC
# Spuštin systém : Normální
# Spuštino z : C:\Users\Jenda\Desktop\adwcleaner.exe
# Volba [Vymazat]


***** [Služby] *****


***** [Soubory / Složky] *****

Složka Vymazáno : C:\Program Files (x86)\Conduit
Složka Vymazáno : C:\Program Files (x86)\FreemakeGold
Složka Vymazáno : C:\ProgramData\Partner
Složka Vymazáno : C:\Users\Jenda\AppData\Local\Conduit
Složka Vymazáno : C:\Users\Jenda\AppData\Local\Google\Chrome\User Data\Default\Extensions\allecjapbpjaijjopkncccbchmkjbcld
Složka Vymazáno : C:\Users\Jenda\AppData\Local\Temp\CT3282311
Složka Vymazáno : C:\Users\Jenda\AppData\LocalLow\Conduit
Složka Vymazáno : C:\Users\Jenda\AppData\LocalLow\FreemakeGold
Složka Vymazáno : C:\Users\Jenda\AppData\LocalLow\PriceGong
Složka Vymazáno : C:\Users\Jenda\AppData\Roaming\Mozilla\Firefox\Profiles\mf0ghpmb.default\CT3282311
Složka Vymazáno : C:\Users\Jenda\AppData\Roaming\Mozilla\Firefox\Profiles\mf0ghpmb.default\extensions\{19996d99-4d11-4056-a5b4-972f39152615}
Složka Vymazáno : C:\Users\Jenda\AppData\Roaming\Mozilla\Firefox\Profiles\mf0ghpmb.default\Smartbar
Soubor Vymazáno : C:\END
Soubor Vymazáno : C:\Users\Jenda\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_search.conduit.com_0.localstorage
Soubor Vymazáno : C:\Users\Jenda\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_search.conduit.com_0.localstorage-journal
Soubor Vymazáno : C:\Users\Jenda\AppData\Roaming\Mozilla\Firefox\Profiles\mf0ghpmb.default\searchplugins\Conduit.xml

***** [Registry] *****

Hodnota Vymazáno : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{1D053BB5-C922-44E3-9910-66585F017505}]
Hodnota Vymazáno : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{1D053BB5-C922-44E3-9910-66585F017505}]
Hodnota Vymazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{1D053BB5-C922-44E3-9910-66585F017505}]
Hodnota Vymazáno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{1D053BB5-C922-44E3-9910-66585F017505}]
Klíe Vymazáno : HKCU\Software\AppDataLow\Software\Conduit
Klíe Vymazáno : HKCU\Software\AppDataLow\Software\ConduitSearchScopes
Klíe Vymazáno : HKCU\Software\AppDataLow\Software\FreemakeGold
Klíe Vymazáno : HKCU\Software\AppDataLow\Software\PriceGong
Klíe Vymazáno : HKCU\Software\AppDataLow\Software\SmartBar
Klíe Vymazáno : HKCU\Software\AppDataLow\Toolbar
Klíe Vymazáno : HKCU\Software\Conduit
Klíe Vymazáno : HKCU\Software\Google\Chrome\Extensions\allecjapbpjaijjopkncccbchmkjbcld
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{1D053BB5-C922-44E3-9910-66585F017505}
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1D053BB5-C922-44E3-9910-66585F017505}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Toolbar.CT3260501
Klíe Vymazáno : HKLM\Software\Conduit
Klíe Vymazáno : HKLM\Software\FreemakeGold
Klíe Vymazáno : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASAPI32
Klíe Vymazáno : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASMANCS
Klíe Vymazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D63CD552-23DA-43ED-BE1A-77476B691A70}
Klíe Vymazáno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{1D053BB5-C922-44E3-9910-66585F017505}
Klíe Vymazáno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Klíe Vymazáno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{D63CD552-23DA-43ED-BE1A-77476B691A70}
Klíe Vymazáno : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\allecjapbpjaijjopkncccbchmkjbcld
Klíe Vymazáno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2D8C2243-0AA3-428B-8F15-B56300AB7B65}
Klíe Vymazáno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CC2DCD3D-79C3-44E5-BD09-67BE66B60A80}
Klíe Vymazáno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1D053BB5-C922-44E3-9910-66585F017505}
Klíe Vymazáno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\FreemakeGold Toolbar

***** [Internetové prohlížeee] *****

-\\ Internet Explorer v9.0.8112.16470

Zaminino : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://search.conduit.com?SearchSource=10&ctid=CT3260501 --> hxxp://www.google.com

-\\ Mozilla Firefox v20.0 (cs)

Soubor : C:\Users\Jenda\AppData\Roaming\Mozilla\Firefox\Profiles\mf0ghpmb.default\prefs.js

Vymazáno : user_pref("CT3282311.ConduitBarVisitsfacebook.enc", "Mw==");
Vymazáno : user_pref("CT3282311.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
Vymazáno : user_pref("CT3282311.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"tru[...]
Vymazáno : user_pref("CT3282311.FF19Solved", "true");
Vymazáno : user_pref("CT3282311.FirstTime", "true");
Vymazáno : user_pref("CT3282311.FirstTimeFF3", "true");
Vymazáno : user_pref("CT3282311.PG_ENABLE", "dHJ1ZQ==");
Vymazáno : user_pref("CT3282311.PG_ENABLE.enc", "dHJ1ZQ==");
Vymazáno : user_pref("CT3282311.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT328[...]
Vymazáno : user_pref("CT3282311.UserID", "UN19735726671894196");
Vymazáno : user_pref("CT3282311._key_edilia__uID.enc", "YmZjMDYzZjktY2ZlZS00NzExLWJjZTYtNTcwMTk4YTYyM2Fi");
Vymazáno : user_pref("CT3282311.addressBarTakeOverEnabledInHidden", "true");
Vymazáno : user_pref("CT3282311.appsJson.enc", "eyJhcHBzIjpbeyJuYW1lIjoiZmFjZWJvb2siLCJ1cmwiOiJhMDllNjk4NS0zNTc[...]
Vymazáno : user_pref("CT3282311.appsJsonLastDate.enc", "MTM2NDU3MzA2NTMwNA==");
Vymazáno : user_pref("CT3282311.autoDisableScopes", -1);
Vymazáno : user_pref("CT3282311.browser.search.defaultthis.engineName", "true");
Vymazáno : user_pref("CT3282311.cbfirsttime.enc", "U3VuIEZlYiAxNyAyMDEzIDA5OjQ3OjI2IEdNVCswMTAw");
Vymazáno : user_pref("CT3282311.dateInstalled.enc", "MTM2MTA5MDY5Mjc4NQ==");
Vymazáno : user_pref("CT3282311.defaultSearch", "true");
Vymazáno : user_pref("CT3282311.embeddedsData", "[{\"appId\":\"130038286748342703\",\"apiPermissions\":{\"cross[...]
Vymazáno : user_pref("CT3282311.enableAlerts", "always");
Vymazáno : user_pref("CT3282311.enableFix404ByUser", "FALSE");
Vymazáno : user_pref("CT3282311.enableSearchFromAddressBar", "true");
Vymazáno : user_pref("CT3282311.firstTimeDialogOpened", "true");
Vymazáno : user_pref("CT3282311.fixPageNotFoundError", "true");
Vymazáno : user_pref("CT3282311.fixPageNotFoundErrorByUser", "true");
Vymazáno : user_pref("CT3282311.fixPageNotFoundErrorInHidden", "true");
Vymazáno : user_pref("CT3282311.fixUrls", true);
Vymazáno : user_pref("CT3282311.freeRideGames_Install.enc", "dHJ1ZQ==");
Vymazáno : user_pref("CT3282311.installDate", "17/2/2013 9:44:37");
Vymazáno : user_pref("CT3282311.installId", "conduitinstaller.exe");
Vymazáno : user_pref("CT3282311.installType", "conduitnsisintegration");
Vymazáno : user_pref("CT3282311.isCheckedStartAsHidden", true);
Vymazáno : user_pref("CT3282311.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
Vymazáno : user_pref("CT3282311.isFirstTimeToolbarLoading", "false");
Vymazáno : user_pref("CT3282311.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
Vymazáno : user_pref("CT3282311.keyword", "true");
Vymazáno : user_pref("CT3282311.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"hxxp://search.conduit[...]
Vymazáno : user_pref("CT3282311.lastVersion", "10.15.0.562");
Vymazáno : user_pref("CT3282311.mam_gk_app13_appState.enc", "b24=");
Vymazáno : user_pref("CT3282311.mam_gk_appStateReportTime.enc", "MTM2NDU3MzA3MDY4MQ==");
Vymazáno : user_pref("CT3282311.mam_gk_appState_CouponBuddy.enc", "b24=");
Vymazáno : user_pref("CT3282311.mam_gk_appState_PriceGong.enc", "b24=");
Vymazáno : user_pref("CT3282311.mam_gk_appsData.enc", "eyJhcHBzIjpbeyJpZCI6IlByaWNlR29uZyIsInVybCI6Imh0dHA6Ly9w[...]
Vymazáno : user_pref("CT3282311.mam_gk_appsDefaultEnabled.enc", "bnVsbA==");
Vymazáno : user_pref("CT3282311.mam_gk_configuration.enc", "eyJjb25maWd1cmF0aW9uIjpbeyJpZCI6IkNvdXBvbkJ1ZGR5Iiw[...]
Vymazáno : user_pref("CT3282311.mam_gk_currentVersion.enc", "MS40LjQuNg==");
Vymazáno : user_pref("CT3282311.mam_gk_eventsCache.enc", "eyJkMDcyZDhiYy0zZjlmLTQ5NjktYTU1NC0wNDAzMTBlODQ3NjgiO[...]
Vymazáno : user_pref("CT3282311.mam_gk_first_time.enc", "MQ==");
Vymazáno : user_pref("CT3282311.mam_gk_gadgetOpen.enc", "MA==");
Vymazáno : user_pref("CT3282311.mam_gk_installer_preapproved.enc", "ZmFsc2U=");
Vymazáno : user_pref("CT3282311.mam_gk_lastLoginTime.enc", "MTM2NDU3MzA2NjQyNw==");
Vymazáno : user_pref("CT3282311.mam_gk_localization.enc", "eyJnYWRnZXRDb250ZW50UG9saWN5Ijp7IlRleHQiOiJDb250ZW50[...]
Vymazáno : user_pref("CT3282311.mam_gk_pgUnloadedOnce.enc", "dHJ1ZQ==");
Vymazáno : user_pref("CT3282311.mam_gk_settings1.4.0.4.enc", "eyJTdGF0dXMiOiJzdWNjZWVkZWQiLCJEYXRhIjp7ImludGVyd[...]
Vymazáno : user_pref("CT3282311.mam_gk_settings1.4.3.1.enc", "eyJTdGF0dXMiOiJzdWNjZWVkZWQiLCJEYXRhIjp7ImludGVyd[...]
Vymazáno : user_pref("CT3282311.mam_gk_settings1.4.3.2.enc", "eyJTdGF0dXMiOiJzdWNjZWVkZWQiLCJEYXRhIjp7ImludGVyd[...]
Vymazáno : user_pref("CT3282311.mam_gk_settings1.4.4.6.enc", "eyJTdGF0dXMiOiJzdWNjZWVkZWQiLCJEYXRhIjp7ImludGVyd[...]
Vymazáno : user_pref("CT3282311.mam_gk_showCloseButton.enc", "dHJ1ZQ==");
Vymazáno : user_pref("CT3282311.mam_gk_showWelcomeGadget.enc", "ZmFsc2U=");
Vymazáno : user_pref("CT3282311.mam_gk_userId.enc", "OGQ0MjQyYzYtM2M3Mi00ZTEyLWJiMmYtOWUwMmQ3ODE3ZmM4");
Vymazáno : user_pref("CT3282311.mam_gk_user_approval_interacted.enc", "MQ==");
Vymazáno : user_pref("CT3282311.mam_gk_user_apps_selection.enc", "eyJQcmljZUdvbmciOnRydWUsIkNvdXBvbkJ1ZGR5Ijp0c[...]
Vymazáno : user_pref("CT3282311.migrateAppsAndComponents", true);
Vymazáno : user_pref("CT3282311.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"karel kryl\",\"EB_MAIN_FRAME_URL[...]
Vymazáno : user_pref("CT3282311.newSettings", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
Vymazáno : user_pref("CT3282311.openThankYouPage", "false");
Vymazáno : user_pref("CT3282311.openUninstallPage", "true");
Vymazáno : user_pref("CT3282311.revertSettingsEnabled", "false");
Vymazáno : user_pref("CT3282311.search.searchAppId", "130038286748342703");
Vymazáno : user_pref("CT3282311.search.searchCount", "1");
Vymazáno : user_pref("CT3282311.searchFromAddressBarEnabledByUser", "true");
Vymazáno : user_pref("CT3282311.searchInNewTabEnabledByUser", "true");
Vymazáno : user_pref("CT3282311.searchInNewTabEnabledInHidden", "true");
Vymazáno : user_pref("CT3282311.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
Vymazáno : user_pref("CT3282311.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"d[...]
Vymazáno : user_pref("CT3282311.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\[...]
Vymazáno : user_pref("CT3282311.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"d[...]
Vymazáno : user_pref("CT3282311.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"strin[...]
Vymazáno : user_pref("CT3282311.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"strin[...]
Vymazáno : user_pref("CT3282311.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data[...]
Vymazáno : user_pref("CT3282311.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1363728808494");
Vymazáno : user_pref("CT3282311.serviceLayer_services_appTracking_lastUpdate", "1361983172759");
Vymazáno : user_pref("CT3282311.serviceLayer_services_appsMetadata_lastUpdate", "1364500471990");
Vymazáno : user_pref("CT3282311.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1363510008639");
Vymazáno : user_pref("CT3282311.serviceLayer_services_location_lastUpdate", "1364492114248");
Vymazáno : user_pref("CT3282311.serviceLayer_services_login_10.14.65.43_lastUpdate", "1364225653594");
Vymazáno : user_pref("CT3282311.serviceLayer_services_login_10.15.0.562_lastUpdate", "1364573181646");
Vymazáno : user_pref("CT3282311.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1363510008767");
Vymazáno : user_pref("CT3282311.serviceLayer_services_searchAPI_lastUpdate", "1364492114260");
Vymazáno : user_pref("CT3282311.serviceLayer_services_serviceMap_lastUpdate", "1364492114126");
Vymazáno : user_pref("CT3282311.serviceLayer_services_setupAPI_lastUpdate", "1364225653544");
Vymazáno : user_pref("CT3282311.serviceLayer_services_toolbarContextMenu_lastUpdate", "1363510008500");
Vymazáno : user_pref("CT3282311.serviceLayer_services_toolbarSettings_lastUpdate", "1364573182659");
Vymazáno : user_pref("CT3282311.serviceLayer_services_translation_lastUpdate", "1364492114765");
Vymazáno : user_pref("CT3282311.settingsINI", true);
Vymazáno : user_pref("CT3282311.shouldFirstTimeDialog", "false");
Vymazáno : user_pref("CT3282311.showToolbarPermission", "false");
Vymazáno : user_pref("CT3282311.smartbar.CTID", "CT3282311");
Vymazáno : user_pref("CT3282311.smartbar.Uninstall", "0");
Vymazáno : user_pref("CT3282311.smartbar.homepage", "true");
Vymazáno : user_pref("CT3282311.smartbar.toolbarName", "FreemakeGoldPack ");
Vymazáno : user_pref("CT3282311.startPage", "true");
Vymazáno : user_pref("CT3282311.toolbarBornServerTime", "17-2-2013");
Vymazáno : user_pref("CT3282311.toolbarCurrentServerTime", "29-3-2013");
Vymazáno : user_pref("CT3282311.toolbarDisabled", "true");
Vymazáno : user_pref("CT3282311.toolbarLoginClientTime", "Mon Mar 25 2013 18:26:55 GMT+0100");
Vymazáno : user_pref("CT3282311.twitter_autostart.enc", "dHJ1ZQ==");
Vymazáno : user_pref("CT3282311.twitter_v1.8.0_twitter_app_open_t_f.enc", "dHJ1ZQ==");
Vymazáno : user_pref("CT3282311.twitter_v1.9.0_twitter_app_open_t_f.enc", "dHJ1ZQ==");
Vymazáno : user_pref("CT3282311.url_history0001.enc", "aHR0cDovL3d3dy5zdGVzdGkuY3ovcHJvZmlsL3JhczA2Ni8jOjo6Y2xp[...]
Vymazáno : user_pref("CT3282311_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\"[...]
Vymazáno : user_pref("Smartbar.ConduitHomepagesList", "hxxp://search.conduit.com/?ctid=CT3282311&SearchSource=1[...]
Vymazáno : user_pref("Smartbar.ConduitSearchEngineList", "FreemakeGoldPack Customized Web Search");
Vymazáno : user_pref("Smartbar.ConduitSearchUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3282311[...]
Vymazáno : user_pref("Smartbar.SearchFromAddressBarSavedUrl", "");
Vymazáno : user_pref("Smartbar.keywordURLSelectedCTID", "CT3282311");
Vymazáno : user_pref("browser.search.defaultthis.engineName", "FreemakeGoldPack Customized Web Search");
Vymazáno : user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3282311&Sea[...]
Vymazáno : user_pref("browser.startup.homepage", "hxxp://search.conduit.com/?ctid=CT3282311&SearchSource=13&CUI[...]
Vymazáno : user_pref("keyword.URL", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3282311&SearchSource=2&CU[...]
Vymazáno : user_pref("smartBar.searchInNewTabOwner", "CT3282311");
Vymazáno : user_pref("smartbar.conduitHomepageList", "hxxp://search.conduit.com/?ctid=CT3282311&SearchSource=13[...]
Vymazáno : user_pref("smartbar.conduitSearchAddressUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT[...]
Vymazáno : user_pref("smartbar.machineId", "HUGSHIGL5VD1CMEW8HRJU/U4P+DE/YG+UUA+PPGC4HKDCNSACOE1CIEMRESD+A6GMDM[...]
Vymazáno : user_pref("smartbar.originalHomepage", "www.google.cz");
Vymazáno : user_pref("smartbar.originalSearchAddressUrl", "");
Vymazáno : user_pref("smartbar.originalSearchEngine", "");

-\\ Google Chrome v25.0.1364.172

Soubor : C:\Users\Jenda\AppData\Local\Google\Chrome\User Data\Default\Preferences

Vymazáno [l.32] : icon_url = "hxxp://search.conduit.com/fav.ico",
Vymazáno [l.35] : keyword = "search.conduit.com",
Vymazáno [l.38] : search_url = "hxxp://search.conduit.com/Results.aspx?q={searchTerms}&SearchSource=49&cui=UN13[...]
Vymazáno [l.1987] : homepage = "hxxp://search.conduit.com/?CUI=UN13648000941260174&ctid=CT3282311&SearchSource=48",
Vymazáno [l.2409] : urls_to_restore_on_startup = [ "hxxp://search.conduit.com/?CUI=UN13648000941260174&ctid=CT328[...]

*************************

AdwCleaner[R1].txt - [998 octets] - [22/12/2012 19:27:08]
AdwCleaner[R2].txt - [1057 octets] - [22/12/2012 19:32:31]
AdwCleaner[R3].txt - [16672 octets] - [30/03/2013 22:03:43]
AdwCleaner[R4].txt - [16733 octets] - [30/03/2013 22:03:55]
AdwCleaner[S1].txt - [16653 octets] - [31/03/2013 23:31:41]

########## EOF - C:\AdwCleaner[S1].txt - [16714 octets] ##########

[Roli]

Bezva uklizeno, jaký je stav PC ?

[jan.raszka]

OK.

[Roli]

V tom případě je to z mé strany vše a