Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Prosím o preventivní kontrolu

Nemáte v tuto chvíli žádný problém s pc a chcete se jen ujistit, že je vše v pořádku?
Vložte log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Zamčeno
Zpráva
Autor
dufina
Návštěvník
Návštěvník
Příspěvky: 32
Registrován: 19 dub 2013 13:49

Prosím o preventivní kontrolu

#1 Příspěvek od dufina »

Dobrý den,
dostala jsem od přítele tento notebook a poslední dobou mne začíná zlobit tím, že se občas nevypne, jednou za čas mu jen tak zčerná obrazovka. Mohu Vás tedy poprosito o kontrolu logu, jestli tam nemám nějakého vira?

Moc díky Katka

log:

Logfile of random's system information tool 1.09 (written by random/random)
Run by notebook at 2013-04-19 14:53:24
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 48 GB (32%) free of 153 GB
Total RAM: 1015 MB (28% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 14:53:28, on 19.4.2013
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
c:\Program Files\Microsoft Security Client\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\AVAST Software\Avast\avastUI.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\rsvpx .exe
C:\WINDOWS\system32\rcimlbc.exe
C:\Program Files\Java\jre7\bin\jqs.exe
C:\WINDOWS\System32\ssins.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\Hewlett-Packard\Shared\hpqToaster.exe
C:\Program Files\Hewlett-Packard\Shared\hpCaslNotification.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Documents and Settings\notebook\Plocha\RSIT.exe
C:\Program Files\trend micro\notebook.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.certified-toolbar.com?si= ... bs=true&q=
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.certified-toolbar.com?si= ... bs=true&q=
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.certified-toolbar.com?si= ... bs=true&q=
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSource= ... =TB_IESB23
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.certified-toolbar.com?si= ... bs=true&q=
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.certified-toolbar.com?si= ... bs=true&q=
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.certified-toolbar.com?si= ... bs=true&q=
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.certified-toolbar.com?si= ... ue&tid=619
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://search.certified-toolbar.com?si= ... bs=true&q=
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://search.certified-toolbar.com?si= ... bs=true&q=
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: (no name) - {124d001a-bdcb-472f-aa59-bbe7e4bc3204} - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [SoundMAX] C:\Program Files\Analog Devices\SoundMAX\Smax4.exe /tray
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [MSC] "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
O4 - HKLM\..\Run: [QlbCtrl.exe] C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [] C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Send To &Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Server DHCP (Dhcpserv) - Unknown owner - C:\WINDOWS\system32\rsvpx .exe
O23 - Service: Server DNS (DnsServ) - Unknown owner - C:\WINDOWS\system32\rcimlbc.exe
O23 - Service: hpqwmiex - Hewlett-Packard Company - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Oracle Corporation - C:\Program Files\Java\jre7\bin\jqs.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: SInstalátor (ssinstall) - Unknown owner - C:\WINDOWS\System32\ssins.exe

--
End of file - 8083 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job
C:\WINDOWS\tasks\avast! Emergency Update.job
C:\WINDOWS\tasks\Microsoft Antimalware Scheduled Scan.job

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\notebook\Data aplikací\Mozilla\Firefox\Profiles\exaz6fjr.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "http://www.seznam.cz/"
prefs.js - "keyword.URL" - "http://search.conduit.com/ResultsExt.as ... 124&UM=&q="

"wrc@avast.com"=C:\Program Files\AVAST Software\Avast\WebRep\FF
"{20a82645-c095-46ed-80e3-08825760534b}"=c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.7.700.169 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_7_700_169.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.17.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\WINDOWS\system32\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.17.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@nokia.com/EnablerPlugin]
"Description"=Nokia Suite Enabler Plugin
"Path"=C:\Program Files\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll

C:\Program Files\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll

C:\Program Files\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
Web Search.xml
wikipedia-cz.xml

C:\Documents and Settings\notebook\Data aplikací\Mozilla\Firefox\Profiles\exaz6fjr.default\extensions\
engine@conduit.com
{124d001a-bdcb-472f-aa59-bbe7e4bc3204}
{a1e75a0e-4397-4ba8-bb50-e19fb66890f4}
{ea614400-e918-4741-9a97-7a972ff7c30b}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23 60568]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2013-03-06 461216]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2013-03-07 1224568]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-03-06 170912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2013-03-07 1224568]
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll [2008-12-10 929224]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SoundMAXPnP"=C:\Program Files\Analog Devices\Core\smax4pnp.exe [2007-01-05 872448]
"SoundMAX"=C:\Program Files\Analog Devices\SoundMAX\Smax4.exe [2006-07-13 729088]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2008-08-20 141848]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2008-08-20 166424]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2008-08-20 137752]
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2013-03-07 4767304]
"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2013-01-27 947152]
"QlbCtrl.exe"=C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [2007-10-19 177456]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
""=C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [2013-02-13 844144]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesPreload]
C:\Program Files\Samsung\Kies\Kies.exe [2013-02-13 1509232]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesTrayAgent]
C:\Program Files\Samsung\Kies\KiesTrayAgent.exe [2013-02-13 310128]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NokiaSuite.exe]
C:\Program Files\Nokia\Nokia Suite\NokiaSuite.exe [2012-12-21 1090040]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"FastUserSwitchingCompatibility"=3
"clr_optimization_v4.0.30319_32"=2
"btwdins"=2
"Browser"=2

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2008-02-15 208896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Dhcpserv]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\DnsServ]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
"NoDesktop"=0
"NoActiveDesktop"=0
"HideClock"=0
"NoStartMenuPinnedList"=0
"NoStartMenuMFUprogramsList"=0
"NoUserNameInStartMenu"=0
"StartmenuLogoff"=0
"NoStartMenuSubFolders"=0
"NoCommonGroups"=0
"NoPrinterTabs"=0
"NoDeletePrinter"=0
"NoAddPrinter"=0
"NoPrinters"=0
"NoFavoritesMenu"=0
"NoRun"=0
"NoFind"=0
"NoClose"=0
"NoSetFolders"=0
"NoViewContextMenu"=0
"NoDrives"=0
"NoToolbarCustomize"=0
"NoRecentDocsNetHood"=0
"NoChangeAnimation"=0
"NoChangeKeyboardNavigationIndicators"=0
"NoThemesTab"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Documents and Settings\notebook\Plocha\czdc0666M\CZDCPlusPlus.exe"="C:\Documents and Settings\notebook\Plocha\czdc0666M\CZDCPlusPlus.exe:*:Enabled:CZDC++"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll

Uživatelský avatar
JaRon
Moderátor
Moderátor
Příspěvky: 15694
Registrován: 29 bře 2005 13:39
Bydliště: BB-SK

Re: Prosím o preventivní kontrolu

#2 Příspěvek od JaRon »

ahoj,
1. mas tam dva AV
C:\Program Files\AVAST Software\Avast\avastUI.exe
C:\Program Files\Microsoft Security Client\msseces.exe
jeden odinstaluj :!:
2. pouzi ADWCleaner - volba delete
FRST |ADWCleaner |MBAM |CCleaner |AVPTool

V prípade spokojnosti je možné podporiť fórum
https://platba.viry.cz/payment/

dufina
Návštěvník
Návštěvník
Příspěvky: 32
Registrován: 19 dub 2013 13:49

Re: Prosím o preventivní kontrolu

#3 Příspěvek od dufina »

Log z Adwcleaner:

# AdwCleaner v2.200 - Log vytvooen 19/04/2013 v 15:14:45
# Aktualizováno 02/04/2013 Xplode
# Operaení systém : Microsoft Windows XP Service Pack 3 (32 bits)
# Uživatel : notebook - NOTEBOOK-53DFDB
# Spuštin systém : Normální
# Spuštino z : C:\Documents and Settings\notebook\Plocha\adwcleaner.exe
# Volba [Prohledat]


***** [Služby] *****


***** [Soubory / Složky] *****

Složka Nalezeno : C:\Documents and Settings\notebook\Data aplikací\Mozilla\Firefox\Profiles\exaz6fjr.default\CT2481032
Složka Nalezeno : C:\Documents and Settings\notebook\Data aplikací\Mozilla\Firefox\Profiles\exaz6fjr.default\extensions\{124d001a-bdcb-472f-aa59-bbe7e4bc3204}
Složka Nalezeno : C:\Documents and Settings\notebook\Data aplikací\Mozilla\Firefox\Profiles\exaz6fjr.default\extensions\{a1e75a0e-4397-4ba8-bb50-e19fb66890f4}
Složka Nalezeno : C:\Documents and Settings\notebook\Data aplikací\Mozilla\Firefox\Profiles\exaz6fjr.default\extensions\engine@conduit.com
Složka Nalezeno : C:\Documents and Settings\notebook\Data aplikací\Mozilla\Firefox\Profiles\exaz6fjr.default\Smartbar
Složka Nalezeno : C:\Documents and Settings\notebook\Data aplikací\OpenCandy
Složka Nalezeno : C:\Documents and Settings\notebook\Local Settings\Data aplikací\Conduit
Složka Nalezeno : C:\Documents and Settings\notebook\Local Settings\Data aplikací\simplytech
Složka Nalezeno : C:\Program Files\DAEMON Tools Toolbar
Složka Nalezeno : C:\Program Files\Protected Search
Soubor Nalezeno : C:\END

***** [Registry] *****

Hodnota Nalezeno : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{32099AAC-C132-4136-9E9A-4E364A424E17}]
Hodnota Nalezeno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{32099AAC-C132-4136-9E9A-4E364A424E17}]
Klíe Nalezeno : HKCU\Software\AppDataLow\Software\Conduit
Klíe Nalezeno : HKCU\Software\Conduit
Klíe Nalezeno : HKCU\Software\ConduitSearchScopes
Klíe Nalezeno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AD22EBAF-0D18-4FC7-90CC-5EA0ABBE9EB9}
Klíe Nalezeno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{32099AAC-C132-4136-9E9A-4E364A424E17}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{32099AAC-C132-4136-9E9A-4E364A424E17}
Klíe Nalezeno : HKCU\Software\ProtectedSearch
Klíe Nalezeno : HKCU\Software\SmartBar
Klíe Nalezeno : HKCU\Software\Softonic
Klíe Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{32099AAC-C132-4136-9E9A-4E364A424E17}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Conduit.Engine
Klíe Nalezeno : HKLM\SOFTWARE\Classes\DTToolbar.ToolBandObj
Klíe Nalezeno : HKLM\SOFTWARE\Classes\DTToolbar.ToolBandObj.1
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{813A22E0-3E2B-4188-9BDA-ECA9878B8D48}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{BCFF5F55-6F44-11D2-86F8-00104B265ED5}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Toolbar.CT2475029
Klíe Nalezeno : HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}
Klíe Nalezeno : HKLM\Software\Conduit
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Klíe Nalezeno : HKLM\SOFTWARE\Software
Klíe Nalezeno : HKU\S-1-5-21-1659004503-1958367476-1801674531-1003\Software\Microsoft\Internet Explorer\SearchScopes\{AD22EBAF-0D18-4FC7-90CC-5EA0ABBE9EB9}
Klíe Nalezeno : HKU\S-1-5-21-1659004503-1958367476-1801674531-1003\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}

***** [Internetové prohlížeee] *****

-\\ Internet Explorer v8.0.6001.18702

[HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://search.conduit.com?SearchSource=10&userid=EB_USER_ID&ctid=CT2481032&SSPV=TB_IESB23
[HKCU\Software\Microsoft\Internet Explorer\Main - Search Page] = hxxp://search.certified-toolbar.com?si=39030&tid=619&bs=true&q=
[HKCU\Software\Microsoft\Internet Explorer\Main - Start Default_Page_URL] = hxxp://search.certified-toolbar.com?si=39030&home=true&tid=619
[HKCU\Software\Microsoft\Internet Explorer\Main - Default_Search_URL] = hxxp://search.certified-toolbar.com?si=39030&tid=619&bs=true&q=
[HKCU\Software\Microsoft\Internet Explorer\Main - Search Bar] = hxxp://search.certified-toolbar.com?si=39030&tid=619&bs=true&q=
[HKCU\Software\Microsoft\Internet Explorer\Search - Start Page] = hxxp://search.certified-toolbar.com?si=39030&home=true&tid=619
[HKCU\Software\Microsoft\Internet Explorer\Search - Start Default_Page_URL] = hxxp://search.certified-toolbar.com?si=39030&home=true&tid=619
[HKCU\Software\Microsoft\Internet Explorer\Search - Default_Search_URL] = hxxp://search.certified-toolbar.com?si=39030&tid=619&bs=true&q=
[HKCU\Software\Microsoft\Internet Explorer\Search - Search Bar] = hxxp://search.certified-toolbar.com?si=39030&tid=619&bs=true&q=
[HKCU\Software\Microsoft\Internet Explorer\Search - Search Page] = hxxp://search.certified-toolbar.com?si=39030&tid=619&bs=true&q=
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Search - Start Page] = hxxp://search.certified-toolbar.com?si=39030&home=true&tid=619
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Search - Start Default_Page_URL] = hxxp://search.certified-toolbar.com?si=39030&home=true&tid=619
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Search - Default_Search_URL] = hxxp://search.certified-toolbar.com?si=39030&tid=619&bs=true&q=
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Search - Search Bar] = hxxp://search.certified-toolbar.com?si=39030&tid=619&bs=true&q=
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Search - Search Page] = hxxp://search.certified-toolbar.com?si=39030&tid=619&bs=true&q=
[HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchUrl - (Default)] = hxxp://search.certified-toolbar.com?si=39030&bs=true&tid=619&q=%s
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Main - Default_Search_URL] = hxxp://search.certified-toolbar.com?si=39030&tid=619&bs=true&q=
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Main - Search Page] = hxxp://search.certified-toolbar.com?si=39030&tid=619&bs=true&q=
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Main - Start Page] = hxxp://search.certified-toolbar.com?si=39030&home=true&tid=619
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Main - Start Default_Page_URL] = hxxp://search.certified-toolbar.com?si=39030&home=true&tid=619
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Main - Search Bar] = hxxp://search.certified-toolbar.com?si=39030&tid=619&bs=true&q=

-\\ Mozilla Firefox v20.0.1 (cs)

Soubor : C:\Documents and Settings\notebook\Data aplikací\Mozilla\Firefox\Profiles\exaz6fjr.default\prefs.js

Nalezeno : user_pref("CT2481032.1000082.isDisplayHidden", "true");
Nalezeno : user_pref("CT2481032.1000082.isPlayDisplay", "true");
Nalezeno : user_pref("CT2481032.1000082.state", "{\"state\":\"stopped\",\"text\":\"Californi...\",\"description[...]
Nalezeno : user_pref("CT2481032.CBOpenMAMSettings.enc", "MA==");
Nalezeno : user_pref("CT2481032.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
Nalezeno : user_pref("CT2481032.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"tru[...]
Nalezeno : user_pref("CT2481032.FirstTime", "true");
Nalezeno : user_pref("CT2481032.FirstTimeFF3", "true");
Nalezeno : user_pref("CT2481032.InstallDate", "7/1/2013 0:30:23");
Nalezeno : user_pref("CT2481032.LoginRevertSettingsEnabled", true);
Nalezeno : user_pref("CT2481032.PG_ENABLE", "dHJ1ZQ==");
Nalezeno : user_pref("CT2481032.RevertSettingsEnabled", true);
Nalezeno : user_pref("CT2481032.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT248[...]
Nalezeno : user_pref("CT2481032.UserID", "UN12356410666089124");
Nalezeno : user_pref("CT2481032.addressBarTakeOverEnabledInHidden", "true");
Nalezeno : user_pref("CT2481032.autoDisableScopes", -1);
Nalezeno : user_pref("CT2481032.browser.search.defaultthis.engineName", true);
Nalezeno : user_pref("CT2481032.cbcountry_001.enc", "Q1o=");
Nalezeno : user_pref("CT2481032.cbfirsttime.enc", "TW9uIEphbiAwNyAyMDEzIDAwOjUxOjEzIEdNVCswMTAw");
Nalezeno : user_pref("CT2481032.defaultSearch", "true");
Nalezeno : user_pref("CT2481032.enableAlerts", "false");
Nalezeno : user_pref("CT2481032.enableFix404ByUser", "FALSE");
Nalezeno : user_pref("CT2481032.enableSearchFromAddressBar", "true");
Nalezeno : user_pref("CT2481032.firstTimeDialogOpened", "true");
Nalezeno : user_pref("CT2481032.fixPageNotFoundError", "true");
Nalezeno : user_pref("CT2481032.fixPageNotFoundErrorByUser", "true");
Nalezeno : user_pref("CT2481032.fixPageNotFoundErrorInHidden", "true");
Nalezeno : user_pref("CT2481032.fixUrls", true);
Nalezeno : user_pref("CT2481032.homepageuserchanged", true);
Nalezeno : user_pref("CT2481032.installId", "conduitnsisintegration");
Nalezeno : user_pref("CT2481032.installType", "conduitnsisintegration");
Nalezeno : user_pref("CT2481032.isCheckedStartAsHidden", true);
Nalezeno : user_pref("CT2481032.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
Nalezeno : user_pref("CT2481032.isFirstTimeToolbarLoading", "false");
Nalezeno : user_pref("CT2481032.isNewTabEnabled", true);
Nalezeno : user_pref("CT2481032.isPerformedSmartBarTransition", "true");
Nalezeno : user_pref("CT2481032.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
Nalezeno : user_pref("CT2481032.keyword", true);
Nalezeno : user_pref("CT2481032.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"hxxp://search.conduit[...]
Nalezeno : user_pref("CT2481032.lastVersion", "10.15.2.523");
Nalezeno : user_pref("CT2481032.migrateAppsAndComponents", true);
Nalezeno : user_pref("CT2481032.navigationAliasesJson", "{\"EB_MAIN_FRAME_URL\":\"\",\"EB_MAIN_FRAME_TITLE\":\"[...]
Nalezeno : user_pref("CT2481032.openThankYouPage", "false");
Nalezeno : user_pref("CT2481032.openUninstallPage", "false");
Nalezeno : user_pref("CT2481032.price-gong.isManagedApp", "true");
Nalezeno : user_pref("CT2481032.revertSettingsEnabled", "true");
Nalezeno : user_pref("CT2481032.search.searchAppId", "129058858240125318");
Nalezeno : user_pref("CT2481032.search.searchCount", "0");
Nalezeno : user_pref("CT2481032.searchInNewTabEnabledByUser", "true");
Nalezeno : user_pref("CT2481032.searchInNewTabEnabledInHidden", "true");
Nalezeno : user_pref("CT2481032.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
Nalezeno : user_pref("CT2481032.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"d[...]
Nalezeno : user_pref("CT2481032.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\[...]
Nalezeno : user_pref("CT2481032.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"d[...]
Nalezeno : user_pref("CT2481032.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"strin[...]
Nalezeno : user_pref("CT2481032.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"strin[...]
Nalezeno : user_pref("CT2481032.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data[...]
Nalezeno : user_pref("CT2481032.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1357515061590");
Nalezeno : user_pref("CT2481032.serviceLayer_services_appTracking_lastUpdate", "1357516229719");
Nalezeno : user_pref("CT2481032.serviceLayer_services_appsMetadata_lastUpdate", "1357515061155");
Nalezeno : user_pref("CT2481032.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1357515068510");
Nalezeno : user_pref("CT2481032.serviceLayer_services_location_lastUpdate", "1366347277659");
Nalezeno : user_pref("CT2481032.serviceLayer_services_login_10.13.40.15_lastUpdate", "1357515062009");
Nalezeno : user_pref("CT2481032.serviceLayer_services_login_10.14.42.7_lastUpdate", "1360768139355");
Nalezeno : user_pref("CT2481032.serviceLayer_services_login_10.14.65.43_lastUpdate", "1364125043351");
Nalezeno : user_pref("CT2481032.serviceLayer_services_login_10.15.0.562_lastUpdate", "1366361476739");
Nalezeno : user_pref("CT2481032.serviceLayer_services_login_10.15.2.523_lastUpdate", "1366364873213");
Nalezeno : user_pref("CT2481032.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1357515068584");
Nalezeno : user_pref("CT2481032.serviceLayer_services_searchAPI_lastUpdate", "1357515055127");
Nalezeno : user_pref("CT2481032.serviceLayer_services_serviceMap_lastUpdate", "1366347277446");
Nalezeno : user_pref("CT2481032.serviceLayer_services_toolbarContextMenu_lastUpdate", "1357515068652");
Nalezeno : user_pref("CT2481032.serviceLayer_services_toolbarSettings_lastUpdate", "1366374035748");
Nalezeno : user_pref("CT2481032.serviceLayer_services_translation_lastUpdate", "1366349278344");
Nalezeno : user_pref("CT2481032.serviceLayer_services_userApps1ec55dac-8dca-406b-9697-5d68893c1c0c_lastUpdate",[...]
Nalezeno : user_pref("CT2481032.serviceLayer_services_userApps_lastUpdate", "1359354193798");
Nalezeno : user_pref("CT2481032.settingsINI", true);
Nalezeno : user_pref("CT2481032.shouldFirstTimeDialog", "false");
Nalezeno : user_pref("CT2481032.showToolbarPermission", "false");
Nalezeno : user_pref("CT2481032.smartbar.CTID", "CT2481032");
Nalezeno : user_pref("CT2481032.smartbar.Uninstall", "0");
Nalezeno : user_pref("CT2481032.smartbar.homepage", true);
Nalezeno : user_pref("CT2481032.smartbar.isHidden", true);
Nalezeno : user_pref("CT2481032.smartbar.toolbarName", "Ashampoo US ");
Nalezeno : user_pref("CT2481032.toolbarBornServerTime", "6-1-2013");
Nalezeno : user_pref("CT2481032.toolbarCurrentServerTime", "19-4-2013");
Nalezeno : user_pref("CT2481032.toolbarLoginClientTime", "Sun Mar 24 2013 14:42:26 GMT+0100");
Nalezeno : user_pref("CT2481032_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\"[...]
Nalezeno : user_pref("Smartbar.ConduitHomepagesList", "");
Nalezeno : user_pref("Smartbar.ConduitSearchEngineList", "");
Nalezeno : user_pref("Smartbar.ConduitSearchUrlList", "");
Nalezeno : user_pref("Smartbar.SearchFromAddressBarSavedUrl", "hxxp://search.certified-toolbar.com?si=39030&tid[...]
Nalezeno : user_pref("Smartbar.keywordURLSelectedCTID", "CT2481032");
Nalezeno : user_pref("browser.search.defaultengine", "Web Search");
Nalezeno : user_pref("browser.search.defaultenginename", "Web Search");
Nalezeno : user_pref("browser.search.order.1", "Web Search");
Nalezeno : user_pref("keyword.URL", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2481032&SearchSource=2&CU[...]
Nalezeno : user_pref("smartBar.searchInNewTabOwner", "CT2481032");
Nalezeno : user_pref("smartbar.conduitHomepageList", "hxxp://search.conduit.com/?ctid=CT2481032&SearchSource=13[...]
Nalezeno : user_pref("smartbar.conduitSearchAddressUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT[...]
Nalezeno : user_pref("smartbar.machineId", "/GE+5ZIABK4B6LOT58TIPGPNKQMES/SRVFIEBT6B9SUTFDGORAEFMBCII24M3B2G0CD[...]
Nalezeno : user_pref("smartbar.originalHomepage", "hxxp://www.seznam.cz/");
Nalezeno : user_pref("smartbar.originalSearchAddressUrl", "hxxp://search.certified-toolbar.com?si=39030&tid=619[...]
Nalezeno : user_pref("smartbar.originalSearchEngine", "Google");

*************************

AdwCleaner[R1].txt - [15727 octets] - [19/04/2013 15:14:45]

########## EOF - C:\AdwCleaner[R1].txt - [15788 octets] ##########

Uživatelský avatar
JaRon
Moderátor
Moderátor
Příspěvky: 15694
Registrován: 29 bře 2005 13:39
Bydliště: BB-SK

Re: Prosím o preventivní kontrolu

#4 Příspěvek od JaRon »

zopakuj akciu s volbou delete - zmazat
FRST |ADWCleaner |MBAM |CCleaner |AVPTool

V prípade spokojnosti je možné podporiť fórum
https://platba.viry.cz/payment/

dufina
Návštěvník
Návštěvník
Příspěvky: 32
Registrován: 19 dub 2013 13:49

Re: Prosím o preventivní kontrolu

#5 Příspěvek od dufina »

hotovo...

# AdwCleaner v2.200 - Log vytvooen 19/04/2013 v 15:21:55
# Aktualizováno 02/04/2013 Xplode
# Operaení systém : Microsoft Windows XP Service Pack 3 (32 bits)
# Uživatel : notebook - NOTEBOOK-53DFDB
# Spuštin systém : Normální
# Spuštino z : C:\Documents and Settings\notebook\Plocha\adwcleaner.exe
# Volba [Vymazat]


***** [Služby] *****


***** [Soubory / Složky] *****

Složka Vymazáno : C:\Documents and Settings\notebook\Data aplikací\Mozilla\Firefox\Profiles\exaz6fjr.default\CT2481032
Složka Vymazáno : C:\Documents and Settings\notebook\Data aplikací\Mozilla\Firefox\Profiles\exaz6fjr.default\extensions\{124d001a-bdcb-472f-aa59-bbe7e4bc3204}
Složka Vymazáno : C:\Documents and Settings\notebook\Data aplikací\Mozilla\Firefox\Profiles\exaz6fjr.default\extensions\{a1e75a0e-4397-4ba8-bb50-e19fb66890f4}
Složka Vymazáno : C:\Documents and Settings\notebook\Data aplikací\Mozilla\Firefox\Profiles\exaz6fjr.default\extensions\engine@conduit.com
Složka Vymazáno : C:\Documents and Settings\notebook\Data aplikací\Mozilla\Firefox\Profiles\exaz6fjr.default\Smartbar
Složka Vymazáno : C:\Documents and Settings\notebook\Data aplikací\OpenCandy
Složka Vymazáno : C:\Documents and Settings\notebook\Local Settings\Data aplikací\Conduit
Složka Vymazáno : C:\Documents and Settings\notebook\Local Settings\Data aplikací\simplytech
Složka Vymazáno : C:\Program Files\DAEMON Tools Toolbar
Složka Vymazáno : C:\Program Files\Protected Search
Soubor Vymazáno : C:\END

***** [Registry] *****

Hodnota Vymazáno : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{32099AAC-C132-4136-9E9A-4E364A424E17}]
Hodnota Vymazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{32099AAC-C132-4136-9E9A-4E364A424E17}]
Klíe Vymazáno : HKCU\Software\AppDataLow\Software\Conduit
Klíe Vymazáno : HKCU\Software\Conduit
Klíe Vymazáno : HKCU\Software\ConduitSearchScopes
Klíe Vymazáno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AD22EBAF-0D18-4FC7-90CC-5EA0ABBE9EB9}
Klíe Vymazáno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{32099AAC-C132-4136-9E9A-4E364A424E17}
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{32099AAC-C132-4136-9E9A-4E364A424E17}
Klíe Vymazáno : HKCU\Software\ProtectedSearch
Klíe Vymazáno : HKCU\Software\SmartBar
Klíe Vymazáno : HKCU\Software\Softonic
Klíe Vymazáno : HKLM\SOFTWARE\Classes\CLSID\{32099AAC-C132-4136-9E9A-4E364A424E17}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Conduit.Engine
Klíe Vymazáno : HKLM\SOFTWARE\Classes\DTToolbar.ToolBandObj
Klíe Vymazáno : HKLM\SOFTWARE\Classes\DTToolbar.ToolBandObj.1
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Interface\{813A22E0-3E2B-4188-9BDA-ECA9878B8D48}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Interface\{BCFF5F55-6F44-11D2-86F8-00104B265ED5}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Toolbar.CT2475029
Klíe Vymazáno : HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}
Klíe Vymazáno : HKLM\Software\Conduit
Klíe Vymazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Klíe Vymazáno : HKLM\SOFTWARE\Software

***** [Internetové prohlížeee] *****

-\\ Internet Explorer v8.0.6001.18702

Zaminino : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://search.conduit.com?SearchSource=10&userid=EB_USER_ID&ctid=CT2481032&SSPV=TB_IESB23 --> hxxp://www.google.com
Zaminino : [HKCU\Software\Microsoft\Internet Explorer\Main - Search Page] = hxxp://search.certified-toolbar.com?si=39030&tid=619&bs=true&q= --> hxxp://www.google.com
Zaminino : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Default_Page_URL] = hxxp://search.certified-toolbar.com?si=39030&home=true&tid=619 --> hxxp://www.google.com
Zaminino : [HKCU\Software\Microsoft\Internet Explorer\Main - Default_Search_URL] = hxxp://search.certified-toolbar.com?si=39030&tid=619&bs=true&q= --> hxxp://www.google.com
Zaminino : [HKCU\Software\Microsoft\Internet Explorer\Main - Search Bar] = hxxp://search.certified-toolbar.com?si=39030&tid=619&bs=true&q= --> hxxp://www.google.com
Zaminino : [HKCU\Software\Microsoft\Internet Explorer\Search - Start Page] = hxxp://search.certified-toolbar.com?si=39030&home=true&tid=619 --> hxxp://www.google.com
Zaminino : [HKCU\Software\Microsoft\Internet Explorer\Search - Start Default_Page_URL] = hxxp://search.certified-toolbar.com?si=39030&home=true&tid=619 --> hxxp://www.google.com
Zaminino : [HKCU\Software\Microsoft\Internet Explorer\Search - Default_Search_URL] = hxxp://search.certified-toolbar.com?si=39030&tid=619&bs=true&q= --> hxxp://www.google.com
Zaminino : [HKCU\Software\Microsoft\Internet Explorer\Search - Search Bar] = hxxp://search.certified-toolbar.com?si=39030&tid=619&bs=true&q= --> hxxp://www.google.com
Zaminino : [HKCU\Software\Microsoft\Internet Explorer\Search - Search Page] = hxxp://search.certified-toolbar.com?si=39030&tid=619&bs=true&q= --> hxxp://www.google.com
Zaminino : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Search - Start Page] = hxxp://search.certified-toolbar.com?si=39030&home=true&tid=619 --> hxxp://www.google.com
Zaminino : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Search - Start Default_Page_URL] = hxxp://search.certified-toolbar.com?si=39030&home=true&tid=619 --> hxxp://www.google.com
Zaminino : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Search - Default_Search_URL] = hxxp://search.certified-toolbar.com?si=39030&tid=619&bs=true&q= --> hxxp://www.google.com
Zaminino : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Search - Search Bar] = hxxp://search.certified-toolbar.com?si=39030&tid=619&bs=true&q= --> hxxp://www.google.com
Zaminino : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Search - Search Page] = hxxp://search.certified-toolbar.com?si=39030&tid=619&bs=true&q= --> hxxp://www.google.com
Zaminino : [HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchUrl - (Default)] = hxxp://search.certified-toolbar.com?si=39030&bs=true&tid=619&q=%s --> hxxp://www.google.com
Zaminino : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Main - Default_Search_URL] = hxxp://search.certified-toolbar.com?si=39030&tid=619&bs=true&q= --> hxxp://www.google.com
Zaminino : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Main - Search Page] = hxxp://search.certified-toolbar.com?si=39030&tid=619&bs=true&q= --> hxxp://www.google.com
Zaminino : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Main - Start Page] = hxxp://search.certified-toolbar.com?si=39030&home=true&tid=619 --> hxxp://www.google.com
Zaminino : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Main - Start Default_Page_URL] = hxxp://search.certified-toolbar.com?si=39030&home=true&tid=619 --> hxxp://www.google.com
Zaminino : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Main - Search Bar] = hxxp://search.certified-toolbar.com?si=39030&tid=619&bs=true&q= --> hxxp://www.google.com

-\\ Mozilla Firefox v20.0.1 (cs)

Soubor : C:\Documents and Settings\notebook\Data aplikací\Mozilla\Firefox\Profiles\exaz6fjr.default\prefs.js

Vymazáno : user_pref("CT2481032.1000082.isDisplayHidden", "true");
Vymazáno : user_pref("CT2481032.1000082.isPlayDisplay", "true");
Vymazáno : user_pref("CT2481032.1000082.state", "{\"state\":\"stopped\",\"text\":\"Californi...\",\"description[...]
Vymazáno : user_pref("CT2481032.CBOpenMAMSettings.enc", "MA==");
Vymazáno : user_pref("CT2481032.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
Vymazáno : user_pref("CT2481032.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"tru[...]
Vymazáno : user_pref("CT2481032.FirstTime", "true");
Vymazáno : user_pref("CT2481032.FirstTimeFF3", "true");
Vymazáno : user_pref("CT2481032.InstallDate", "7/1/2013 0:30:23");
Vymazáno : user_pref("CT2481032.LoginRevertSettingsEnabled", true);
Vymazáno : user_pref("CT2481032.PG_ENABLE", "dHJ1ZQ==");
Vymazáno : user_pref("CT2481032.RevertSettingsEnabled", true);
Vymazáno : user_pref("CT2481032.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT248[...]
Vymazáno : user_pref("CT2481032.UserID", "UN12356410666089124");
Vymazáno : user_pref("CT2481032.addressBarTakeOverEnabledInHidden", "true");
Vymazáno : user_pref("CT2481032.autoDisableScopes", -1);
Vymazáno : user_pref("CT2481032.browser.search.defaultthis.engineName", true);
Vymazáno : user_pref("CT2481032.cbcountry_001.enc", "Q1o=");
Vymazáno : user_pref("CT2481032.cbfirsttime.enc", "TW9uIEphbiAwNyAyMDEzIDAwOjUxOjEzIEdNVCswMTAw");
Vymazáno : user_pref("CT2481032.defaultSearch", "true");
Vymazáno : user_pref("CT2481032.enableAlerts", "false");
Vymazáno : user_pref("CT2481032.enableFix404ByUser", "FALSE");
Vymazáno : user_pref("CT2481032.enableSearchFromAddressBar", "true");
Vymazáno : user_pref("CT2481032.firstTimeDialogOpened", "true");
Vymazáno : user_pref("CT2481032.fixPageNotFoundError", "true");
Vymazáno : user_pref("CT2481032.fixPageNotFoundErrorByUser", "true");
Vymazáno : user_pref("CT2481032.fixPageNotFoundErrorInHidden", "true");
Vymazáno : user_pref("CT2481032.fixUrls", true);
Vymazáno : user_pref("CT2481032.homepageuserchanged", true);
Vymazáno : user_pref("CT2481032.installId", "conduitnsisintegration");
Vymazáno : user_pref("CT2481032.installType", "conduitnsisintegration");
Vymazáno : user_pref("CT2481032.isCheckedStartAsHidden", true);
Vymazáno : user_pref("CT2481032.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
Vymazáno : user_pref("CT2481032.isFirstTimeToolbarLoading", "false");
Vymazáno : user_pref("CT2481032.isNewTabEnabled", true);
Vymazáno : user_pref("CT2481032.isPerformedSmartBarTransition", "true");
Vymazáno : user_pref("CT2481032.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
Vymazáno : user_pref("CT2481032.keyword", true);
Vymazáno : user_pref("CT2481032.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"hxxp://search.conduit[...]
Vymazáno : user_pref("CT2481032.lastVersion", "10.15.2.523");
Vymazáno : user_pref("CT2481032.migrateAppsAndComponents", true);
Vymazáno : user_pref("CT2481032.navigationAliasesJson", "{\"EB_MAIN_FRAME_URL\":\"\",\"EB_MAIN_FRAME_TITLE\":\"[...]
Vymazáno : user_pref("CT2481032.openThankYouPage", "false");
Vymazáno : user_pref("CT2481032.openUninstallPage", "false");
Vymazáno : user_pref("CT2481032.price-gong.isManagedApp", "true");
Vymazáno : user_pref("CT2481032.revertSettingsEnabled", "true");
Vymazáno : user_pref("CT2481032.search.searchAppId", "129058858240125318");
Vymazáno : user_pref("CT2481032.search.searchCount", "0");
Vymazáno : user_pref("CT2481032.searchInNewTabEnabledByUser", "true");
Vymazáno : user_pref("CT2481032.searchInNewTabEnabledInHidden", "true");
Vymazáno : user_pref("CT2481032.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
Vymazáno : user_pref("CT2481032.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"d[...]
Vymazáno : user_pref("CT2481032.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\[...]
Vymazáno : user_pref("CT2481032.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"d[...]
Vymazáno : user_pref("CT2481032.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"strin[...]
Vymazáno : user_pref("CT2481032.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"strin[...]
Vymazáno : user_pref("CT2481032.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data[...]
Vymazáno : user_pref("CT2481032.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1357515061590");
Vymazáno : user_pref("CT2481032.serviceLayer_services_appTracking_lastUpdate", "1357516229719");
Vymazáno : user_pref("CT2481032.serviceLayer_services_appsMetadata_lastUpdate", "1357515061155");
Vymazáno : user_pref("CT2481032.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1357515068510");
Vymazáno : user_pref("CT2481032.serviceLayer_services_location_lastUpdate", "1366347277659");
Vymazáno : user_pref("CT2481032.serviceLayer_services_login_10.13.40.15_lastUpdate", "1357515062009");
Vymazáno : user_pref("CT2481032.serviceLayer_services_login_10.14.42.7_lastUpdate", "1360768139355");
Vymazáno : user_pref("CT2481032.serviceLayer_services_login_10.14.65.43_lastUpdate", "1364125043351");
Vymazáno : user_pref("CT2481032.serviceLayer_services_login_10.15.0.562_lastUpdate", "1366361476739");
Vymazáno : user_pref("CT2481032.serviceLayer_services_login_10.15.2.523_lastUpdate", "1366364873213");
Vymazáno : user_pref("CT2481032.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1357515068584");
Vymazáno : user_pref("CT2481032.serviceLayer_services_searchAPI_lastUpdate", "1357515055127");
Vymazáno : user_pref("CT2481032.serviceLayer_services_serviceMap_lastUpdate", "1366347277446");
Vymazáno : user_pref("CT2481032.serviceLayer_services_toolbarContextMenu_lastUpdate", "1357515068652");
Vymazáno : user_pref("CT2481032.serviceLayer_services_toolbarSettings_lastUpdate", "1366374035748");
Vymazáno : user_pref("CT2481032.serviceLayer_services_translation_lastUpdate", "1366349278344");
Vymazáno : user_pref("CT2481032.serviceLayer_services_userApps1ec55dac-8dca-406b-9697-5d68893c1c0c_lastUpdate",[...]
Vymazáno : user_pref("CT2481032.serviceLayer_services_userApps_lastUpdate", "1359354193798");
Vymazáno : user_pref("CT2481032.settingsINI", true);
Vymazáno : user_pref("CT2481032.shouldFirstTimeDialog", "false");
Vymazáno : user_pref("CT2481032.showToolbarPermission", "false");
Vymazáno : user_pref("CT2481032.smartbar.CTID", "CT2481032");
Vymazáno : user_pref("CT2481032.smartbar.Uninstall", "0");
Vymazáno : user_pref("CT2481032.smartbar.homepage", true);
Vymazáno : user_pref("CT2481032.smartbar.isHidden", true);
Vymazáno : user_pref("CT2481032.smartbar.toolbarName", "Ashampoo US ");
Vymazáno : user_pref("CT2481032.toolbarBornServerTime", "6-1-2013");
Vymazáno : user_pref("CT2481032.toolbarCurrentServerTime", "19-4-2013");
Vymazáno : user_pref("CT2481032.toolbarLoginClientTime", "Sun Mar 24 2013 14:42:26 GMT+0100");
Vymazáno : user_pref("CT2481032_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\"[...]
Vymazáno : user_pref("Smartbar.ConduitHomepagesList", "");
Vymazáno : user_pref("Smartbar.ConduitSearchEngineList", "");
Vymazáno : user_pref("Smartbar.ConduitSearchUrlList", "");
Vymazáno : user_pref("Smartbar.SearchFromAddressBarSavedUrl", "hxxp://search.certified-toolbar.com?si=39030&tid[...]
Vymazáno : user_pref("Smartbar.keywordURLSelectedCTID", "CT2481032");
Vymazáno : user_pref("browser.search.defaultengine", "Web Search");
Vymazáno : user_pref("browser.search.defaultenginename", "Web Search");
Vymazáno : user_pref("browser.search.order.1", "Web Search");
Vymazáno : user_pref("keyword.URL", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2481032&SearchSource=2&CU[...]
Vymazáno : user_pref("smartBar.searchInNewTabOwner", "CT2481032");
Vymazáno : user_pref("smartbar.conduitHomepageList", "hxxp://search.conduit.com/?ctid=CT2481032&SearchSource=13[...]
Vymazáno : user_pref("smartbar.conduitSearchAddressUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT[...]
Vymazáno : user_pref("smartbar.machineId", "/GE+5ZIABK4B6LOT58TIPGPNKQMES/SRVFIEBT6B9SUTFDGORAEFMBCII24M3B2G0CD[...]
Vymazáno : user_pref("smartbar.originalHomepage", "hxxp://www.seznam.cz/");
Vymazáno : user_pref("smartbar.originalSearchAddressUrl", "hxxp://search.certified-toolbar.com?si=39030&tid=619[...]
Vymazáno : user_pref("smartbar.originalSearchEngine", "Google");

*************************

AdwCleaner[R1].txt - [15858 octets] - [19/04/2013 15:14:45]
AdwCleaner[S1].txt - [16249 octets] - [19/04/2013 15:21:55]

########## EOF - C:\AdwCleaner[S1].txt - [16310 octets] ##########

Uživatelský avatar
JaRon
Moderátor
Moderátor
Příspěvky: 15694
Registrován: 29 bře 2005 13:39
Bydliště: BB-SK

Re: Prosím o preventivní kontrolu

#6 Příspěvek od JaRon »

hotovo :)
FRST |ADWCleaner |MBAM |CCleaner |AVPTool

V prípade spokojnosti je možné podporiť fórum
https://platba.viry.cz/payment/

Zamčeno