Prosím o kontrolu logu

[karolinaw]

Dobrý den,
Před pár dny se mi výrazně zpomalil notebook, děkuji za jakékoliv rady.

DDS (Ver_2012-11-20.01) - NTFS_x86
Internet Explorer: 10.0.9200.16576
Run by Renata at 19:42:09 on 2013-05-31
Microsoft Windows 7 Professional 6.1.7601.1.1250.420.1029.18.3055.1241 [GMT 2:00]
.
AV: Microsoft Security Essentials *Enabled/Updated* {3F839487-C7A2-C958-E30C-E2825BA31FB5}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Microsoft Security Essentials *Enabled/Updated* {84E27563-E198-C6D6-D9BC-D9F020245508}
.
============== Running Processes ================
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Program Files\Microsoft Security Client\MsMpEng.exe
C:\Windows\system32\atiesrxx.exe
C:\Program Files\IDT\WDM\STacSV.exe
C:\Windows\system32\Hpservice.exe
C:\Windows\system32\atieclxx.exe
C:\Windows\system32\WLANExt.exe
C:\Windows\system32\conhost.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\taskhost.exe
C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
C:\Program Files\IDT\WDM\aestsrv.exe
C:\Program Files\LSI SoftModem\agrsmsvc.exe
C:\ProgramData\BrowserProtect\2.6.1125.80\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe
c:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
C:\Windows\system32\schtasks.exe
C:\Windows\system32\conhost.exe
C:\ProgramData\BrowserProtect\2.6.1125.80\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe
C:\Windows\system32\dgdersvc.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\FsUsbExService.Exe
C:\Program Files\Hewlett-Packard\Shared\HPDrvMntSvc.exe
C:\Program Files\Hewlett-Packard\HP HotKey Support\hpHotkeyMonitor.exe
C:\Windows\system32\dmwu.exe
C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Spyware Terminator\st_rsser.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Microsoft Security Client\NisSrv.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files\Hewlett-Packard\Shared\hpqWmiEx.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Hewlett-Packard\HP HotKey Support\QLBController.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe
C:\Program Files\IDT\WDM\sttray.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\System32\StikyNot.exe
C:\Users\Renata\AppData\Roaming\Yontoo\YontooDesktop.exe
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\Hewlett-Packard\HP Support Framework\HPSF.exe
c:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe
C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\Hewlett-Packard\HP Support Framework\hpsa_service.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Main.exe
C:\Windows\system32\atieclxx.exe
C:\Windows\system32\taskhost.exe
C:\Windows\System32\jmdp\stij.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\Dwm.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Users\Renata\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\Program Files\IDT\WDM\sttray.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Users\Renata\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Renata\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Renata\AppData\Local\Google\Chrome\Application\chrome.exe
c:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Users\Renata\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Main.exe
C:\Users\Renata\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\system32\conhost.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\System32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\system32\svchost.exe -k bthsvcs
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://www1.delta-search.com/?affID=119816&babsrc=HP_ss&mntrId=4E6176F1A142E774
uSearch Bar = hxxp://www.google.com/ie
uSearch Page = hxxp://www.google.com
uDefault_Search_URL = hxxp://www.google.com/ie
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
uURLSearchHooks: <No Name>: - LocalServer32 - <no file>
uURLSearchHooks: {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - <orphaned>
uURLSearchHooks: {7473b6bd-4691-4744-a82b-7854eb3d70b6} - <orphaned>
uURLSearchHooks: {124d001a-bdcb-472f-aa59-bbe7e4bc3204} - <orphaned>
mURLSearchHooks: {855F3B16-6D32-4fe6-8A56-BBB695989046} - <orphaned>
mURLSearchHooks: <No Name>: - LocalServer32 - <no file>
BHO: Skype Browser Helper: {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
BHO: HP Network Check Helper: {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - c:\program files\hewlett-packard\hp support framework\resources\hpnetworkcheck\HPNetworkCheckPlugin.dll
uRun: [KiesTrayAgent] <no file>
mRun: [StartCCC] "c:\program files\ati technologies\ati.ace\core-static\CLIStart.exe" MSRun
mRun: [QLBController] c:\program files\hewlett-packard\hp hotkey support\QLBController.exe /start
mRun: [SynTPEnh] c:\program files\synaptics\syntp\SynTPEnh.exe
mRun: [HPWirelessAssistant] c:\program files\hewlett-packard\hp wireless assistant\delayedappstarter.exe 120 c:\program files\hewlett-packard\hp wireless assistant\HPWA_Main.exe /hidden
mRun: [NeroFilterCheck] c:\windows\system32\NeroCheck.exe
mRun: [MSC] "c:\program files\microsoft security client\msseces.exe" -hide -runkey
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
mRun: [SpywareTerminatorShield] c:\program files\spyware terminator\SpywareTerminatorShield.exe
mRun: [SpywareTerminatorUpdater] c:\program files\spyware terminator\SpywareTerminatorUpdate.exe
mRun: [SysTrayApp] c:\program files\idt\wdm\sttray.exe
StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\blueto~1.lnk - c:\program files\widcomm\bluetooth software\BTTray.exe
mPolicies-System: ConsentPromptBehaviorAdmin = dword:5
mPolicies-System: ConsentPromptBehaviorUser = dword:3
mPolicies-System: EnableUIADesktopToggle = dword:0
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: E&xportovat do aplikace Microsoft Office Excel - c:\progra~1\micros~2\office11\EXCEL.EXE/3000
IE: Odeslat obrázek do zařízení &Bluetooth... - c:\program files\widcomm\bluetooth software\btsendto_ie_ctx.htm
IE: Odeslat stránku do zařízení &Bluetooth... - c:\program files\widcomm\bluetooth software\btsendto_ie.htm
IE: {25510184-5A38-4A99-B273-DCA8EEF6CD08} - c:\program files\hewlett-packard\hp support framework\resources\hpnetworkcheck\NCLauncherFromIE.exe
IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503}
IE: {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\program files\widcomm\bluetooth software\btsendto_ie.htm
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
TCP: NameServer = 192.168.0.1
TCP: Interfaces\{CF06E172-5E2A-4F07-88F2-80BB52F5C009} : DHCPNameServer = 192.168.0.1
TCP: Interfaces\{CF06E172-5E2A-4F07-88F2-80BB52F5C009}\64966656A64697E236A702E4144502A5 : DHCPNameServer = 88.81.64.1 88.81.92.1
TCP: Interfaces\{CF06E172-5E2A-4F07-88F2-80BB52F5C009}\94E6475627E65647 : DHCPNameServer = 10.0.0.138
TCP: Interfaces\{CF06E172-5E2A-4F07-88F2-80BB52F5C009}\A456A7572716 : DHCPNameServer = 10.10.21.1 88.81.64.1 88.81.92.1
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
AppInit_DLLs= c:\progra~2\browse~1\261125~1.80\{c16c1~1\browse~1.dll
SSODL: WebCheck - <orphaned>
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\users\renata\appdata\roaming\mozilla\firefox\profiles\uzgpurg2.default\
FF - prefs.js: browser.search.selectedEngine - Delta Search
FF - prefs.js: browser.startup.homepage - hxxp://www1.delta-search.com/?affID=119816&babsrc=HP_ss&mntrId=4E6176F1A142E774
FF - prefs.js: keyword.URL - hxxp://eu.ask.com/web?l=dis&o=APN10089&gct=kwd&qsrc=2869&apn_dtid=^PFM004^YY^CZ&apn_ptnrs=^A5F&apn_uid=1040175303404503&p2=^A5F^PFM004^YY^CZ&q=
FF - plugin: c:\program files\adobe\reader 10.0\reader\air\nppdf32.dll
FF - plugin: c:\program files\google\google earth\plugin\npgeplugin.dll
FF - plugin: c:\program files\google\picasa3\npPicasa3.dll
FF - plugin: c:\program files\google\update\1.3.21.145\npGoogleUpdate3.dll
FF - plugin: c:\program files\microsoft silverlight\5.1.20125.0\npctrlui.dll
FF - plugin: c:\users\renata\appdata\local\google\update\1.3.21.145\npGoogleUpdate3.dll
FF - plugin: c:\users\renata\appdata\roaming\mozilla\firefox\profiles\uzgpurg2.default\extensions\{124d001a-bdcb-472f-aa59-bbe7e4bc3204}\plugins\np-mswmp.dll
FF - plugin: c:\users\renata\appdata\roaming\mozilla\firefox\profiles\uzgpurg2.default\extensions\{124d001a-bdcb-472f-aa59-bbe7e4bc3204}\plugins\npConduitFirefoxPlugin.dll
FF - plugin: c:\users\renata\appdata\roaming\mozilla\firefox\profiles\uzgpurg2.default\extensions\{7473b6bd-4691-4744-a82b-7854eb3d70b6}\plugins\np-mswmp.dll
FF - plugin: c:\users\renata\appdata\roaming\mozilla\firefox\profiles\uzgpurg2.default\extensions\{7473b6bd-4691-4744-a82b-7854eb3d70b6}\plugins\npConduitFirefoxPlugin.dll
FF - plugin: c:\windows\system32\macromed\flash\NPSWF32_11_7_700_202.dll
FF - plugin: c:\windows\system32\wat\npWatWeb.dll
.
---- FIREFOX POLICIES ----
FF - user.js: extentions.y2layers.installId - c02629a4-85cd-4f38-ba4b-bb84a0dd7db9
FF - user.js: extentions.y2layers.defaultEnableAppsList - bestvideodownloader,ezLooker,pagerage,buzzdock,toprelatedtopics,twittube
.
FF - user.js: extensions.autoDisableScopes - 14
FF - user.js: extensions.incredibar_i.newTab - false
FF - user.js: extensions.incredibar_i.tlbrSrchUrl - hxxp://mystart.Incredibar.com/?a=6OyKkjwo9M&loc=IB_TB&i=26&search=
FF - user.js: extensions.incredibar_i.id - 4e614cce00000000000076f1a142e774
FF - user.js: extensions.incredibar_i.instlDay - 15559
FF - user.js: extensions.incredibar_i.vrsn - 1.5.11.14
FF - user.js: extensions.incredibar_i.vrsni - 1.5.11.14
FF - user.js: extensions.incredibar_i.vrsnTs - 1.5.11.1419:22:44
FF - user.js: extensions.incredibar_i.prtnrId - Incredibar
FF - user.js: extensions.incredibar_i.prdct - incredibar
FF - user.js: extensions.incredibar_i.aflt - orgnl
FF - user.js: extensions.incredibar_i.smplGrp - none
FF - user.js: extensions.incredibar_i.tlbrId - base
FF - user.js: extensions.incredibar_i.instlRef -
FF - user.js: extensions.incredibar_i.dfltLng -
FF - user.js: extensions.incredibar_i.excTlbr - false
FF - user.js: extensions.incredibar_i.ms_url_id -
FF - user.js: extensions.incredibar_i.upn2 - 6OyKkjwo9M
FF - user.js: extensions.incredibar_i.upn2n - 92261890875400430
FF - user.js: extensions.incredibar_i.productid - 26
FF - user.js: extensions.incredibar_i.installerproductid - 26
FF - user.js: extensions.incredibar_i.did - 10658
FF - user.js: extensions.incredibar_i.ppd -
FF - user.js: extensions.BabylonToolbar_i.babTrack - affID=112059&tt=120812_bandext_3312_7
FF - user.js: extensions.BabylonToolbar_i.babExt -
FF - user.js: extensions.BabylonToolbar_i.srcExt - ss
FF - user.js: extensions.BabylonToolbar.tlbrSrchUrl - hxxp://www.google.com/search?babsrc=TB_ggl&q=
FF - user.js: extensions.BabylonToolbar.id - 4e614cce00000000000076f1a142e774
FF - user.js: extensions.BabylonToolbar.instlDay - 15565
FF - user.js: extensions.BabylonToolbar.vrsn - 1.6.4.6
FF - user.js: extensions.BabylonToolbar.vrsni - 1.6.4.6
FF - user.js: extensions.BabylonToolbar_i.vrsnTs - 1.6.4.619:03:48
FF - user.js: extensions.BabylonToolbar.prtnrId - babylon
FF - user.js: extensions.BabylonToolbar.prdct - BabylonToolbar
FF - user.js: extensions.BabylonToolbar.aflt - babsst
FF - user.js: extensions.BabylonToolbar_i.smplGrp - none
FF - user.js: extensions.BabylonToolbar.tlbrId - base
FF - user.js: extensions.BabylonToolbar.instlRef - sst
FF - user.js: extensions.BabylonToolbar.dfltLng - en
FF - user.js: extensions.BabylonToolbar.excTlbr - false
FF - user.js: extensions.BabylonToolbar.admin - false
.
============= SERVICES / DRIVERS ===============
.
R0 MpFilter;Microsoft Malware Protection Driver;c:\windows\system32\drivers\MpFilter.sys [2013-1-20 195296]
R0 pe3aprwb;Simon the Sorcerer Environment Driver (pe3aprwb);c:\windows\system32\drivers\pe3aprwb.sys [2007-12-18 65160]
R0 ps7aprwb;Simon the Sorcerer Synchronization Driver (ps7aprwb);c:\windows\system32\drivers\ps7aprwb.sys [2007-12-18 68752]
R1 MpKsl6e81f310;MpKsl6e81f310;c:\programdata\microsoft\microsoft antimalware\definition updates\{b0a5877f-0a07-4a76-a1cb-d5e8e1422882}\MpKsl6e81f310.sys [2013-5-31 29904]
R1 sp_rsdrv2;Spyware Terminator 2012 Realtime Shield Driver;c:\windows\system32\drivers\sp_rsdrv2.sys [2013-5-23 32768]
R2 AESTFilters;Andrea ST Filters Service;c:\program files\idt\wdm\AEstSrv.exe [2010-7-20 81920]
R2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2013-5-30 176128]
R2 BrowserProtect;BrowserProtect;c:\programdata\browserprotect\2.6.1125.80\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe [2013-4-14 2569168]
R2 dgdersvc;Device Error Recovery Service;c:\windows\system32\dgdersvc.exe [2009-12-22 95568]
R2 FsUsbExService;FsUsbExService;c:\windows\system32\FsUsbExService.Exe [2010-7-20 217088]
R2 HP Support Assistant Service;HP Support Assistant Service;c:\program files\hewlett-packard\hp support framework\HPSA_Service.exe [2012-9-27 86528]
R2 HP Wireless Assistant Service;HP Wireless Assistant Service;c:\program files\hewlett-packard\hp wireless assistant\HPWA_Service.exe [2009-12-16 102968]
R2 HPDrvMntSvc.exe;HP Quick Synchronization Service;c:\program files\hewlett-packard\shared\HPDrvMntSvc.exe [2012-8-10 197536]
R2 hpHotkeyMonitor;HP Hotkey Monitor;c:\program files\hewlett-packard\hp hotkey support\hpHotkeyMonitor.exe [2010-1-4 264248]
R2 hpsrv;HP Service;c:\windows\system32\hpservice.exe [2011-5-13 26168]
R2 IBUpdaterService;IBUpdaterService;c:\windows\system32\dmwu.exe [2012-9-17 1156400]
R2 NisDrv;Microsoft Network Inspection System;c:\windows\system32\drivers\NisDrvWFP.sys [2010-10-24 100328]
R2 ST2012_Svc;Spyware Terminator 2012 Realtime Shield Service;c:\program files\spyware terminator\st_rsser.exe [2013-5-23 587912]
R2 UNS;Intel(R) Management & Security Application User Notification Service;c:\program files\intel\intel(r) management engine components\uns\UNS.exe [2010-7-20 2320920]
R3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\drivers\btwl2cap.sys [2010-7-20 29472]
R3 dgderdrv;dgderdrv;c:\windows\system32\drivers\dgderdrv.sys [2009-12-22 18136]
R3 FsUsbExDisk;FsUsbExDisk;c:\windows\system32\FsUsbExDisk.Sys [2010-7-20 36640]
R3 NisSrv;Kontrola sítě Microsoft;c:\program files\microsoft security client\NisSrv.exe [2013-1-27 295232]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 pr2aprwb;Simon the Sorcerer Drivers Auto Removal (pr2aprwb);c:\windows\system32\pr2aprwb.exe svc --> c:\windows\system32\pr2aprwb.exe svc [?]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\drivers\b57nd60x.sys [2009-7-14 229888]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\drivers\RtsUStor.sys [2010-7-20 181792]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\drivers\Rt86win7.sys [2010-7-20 257568]
S3 StorSvc;Služba úložiště;c:\windows\system32\svchost.exe -k LocalSystemNetworkRestricted [2009-7-14 20992]
S3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\TsUsbFlt.sys [2011-7-2 52224]
S3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\wat\WatAdminSvc.exe [2010-7-25 1343400]
SUnknown MpKsl7e86ebc7;MpKsl7e86ebc7; [x]
.
=============== Created Last 30 ================
.
2013-05-31 17:05:30 60872 ----a-w- c:\programdata\microsoft\microsoft antimalware\definition updates\{b0a5877f-0a07-4a76-a1cb-d5e8e1422882}\offreg.dll
2013-05-31 17:05:24 29904 ----a-w- c:\programdata\microsoft\microsoft antimalware\definition updates\{b0a5877f-0a07-4a76-a1cb-d5e8e1422882}\MpKsl6e81f310.sys
2013-05-31 16:39:17 -------- d-----w- c:\program files\CCleaner
2013-05-31 16:11:50 7016152 ----a-w- c:\programdata\microsoft\microsoft antimalware\definition updates\{b0a5877f-0a07-4a76-a1cb-d5e8e1422882}\mpengine.dll
2013-05-30 18:32:48 86016 ----a-w- c:\windows\system32\AESTCom.dll
2013-05-30 18:32:48 61440 ----a-w- c:\windows\system32\aestaren.dll
2013-05-30 18:32:48 380928 ----a-w- c:\windows\system32\aestecap.dll
2013-05-30 18:32:48 140288 ----a-w- c:\windows\system32\aestacap.dll
2013-05-30 18:32:47 495708 ----a-w- c:\windows\sttray.exe
2013-05-30 18:32:47 1953792 ----a-w- c:\windows\system32\stlang.dll
2013-05-30 18:32:47 12705884 ----a-w- c:\windows\system32\idtcpl.cpl
2013-05-30 18:32:25 179712 ----a-w- c:\windows\system32\staco.dll
2013-05-30 15:26:32 7016152 ----a-w- c:\programdata\microsoft\microsoft antimalware\definition updates\backup\mpengine.dll
2013-05-23 20:32:37 -------- d-----w- c:\program files\Cisco
2013-05-23 18:44:38 32768 ----a-w- c:\windows\system32\drivers\sp_rsdrv2.sys
2013-05-23 18:44:22 -------- d-----w- c:\users\renata\appdata\roaming\Spyware Terminator
2013-05-23 18:44:22 -------- d-----w- c:\programdata\Spyware Terminator
2013-05-23 18:41:56 -------- d-----w- c:\program files\Spyware Terminator
2013-05-23 18:40:47 64000 ------w- c:\windows\system32\agrsmdel.exe
2013-05-23 18:40:47 14848 ------w- c:\windows\system32\agrsco64.dll
2013-05-23 18:40:10 -------- d-----w- c:\program files\LSI SoftModem
2013-05-23 18:38:41 64000 ----a-w- c:\windows\agrsmdel.exe
2013-05-23 18:38:41 13824 ------w- c:\windows\system32\agrscoin.dll
2013-05-23 18:38:41 1163328 ----a-w- c:\windows\system32\drivers\AGRSM.sys
2013-05-23 18:24:19 -------- d-----w- c:\windows\Options
2013-05-23 18:23:49 93344 ----a-w- c:\windows\system32\athcfg11resloc.dll
2013-05-23 18:23:49 85152 ----a-w- c:\windows\system32\wgapiloc.dll
2013-05-23 18:23:49 64672 ----a-w- c:\windows\system32\athihvui.dll
2013-05-23 18:23:49 429312 ----a-w- c:\windows\system32\wgapi.dll
2013-05-23 18:23:49 400544 ----a-w- c:\windows\system32\athihvs.dll
2013-05-23 18:23:49 339200 ----a-w- c:\windows\system32\wcapiU.dll
2013-05-23 18:23:49 -------- d-----w- c:\windows\system32\nn-NO
2013-05-23 18:23:48 417000 ----a-w- c:\windows\system32\wcapi.dll
2013-05-23 18:23:48 314624 ----a-w- c:\windows\system32\athcfg20U.dll
2013-05-23 18:23:48 302312 ----a-w- c:\windows\system32\athcfg20.dll
2013-05-23 18:23:48 130312 ----a-w- c:\windows\system32\athcfg20resU.dll
2013-05-23 18:23:48 130288 ----a-w- c:\windows\system32\athcfg20res.dll
2013-05-21 13:43:12 724464 ------w- c:\programdata\microsoft\microsoft antimalware\definition updates\{0ed7cf7e-acc7-4b87-9747-a1dc0e5babf3}\gapaengine.dll
2013-05-15 14:57:11 40960 ----a-w- c:\windows\system32\wwanprotdim.dll
2013-05-15 14:57:11 186368 ----a-w- c:\windows\system32\wwansvc.dll
2013-05-15 14:57:10 2347520 ----a-w- c:\windows\system32\win32k.sys
2013-05-15 14:57:04 728424 ----a-w- c:\windows\system32\drivers\dxgkrnl.sys
2013-05-15 14:57:04 218984 ----a-w- c:\windows\system32\drivers\dxgmms1.sys
2013-05-15 14:56:56 1796096 ----a-w- c:\windows\system32\authui.dll
2013-05-15 14:56:56 101720 ----a-w- c:\windows\system32\consent.exe
2013-05-15 14:56:55 47104 ----a-w- c:\windows\system32\appinfo.dll
2013-05-10 07:57:26 187456 ----a-w- c:\program files\mozilla firefox\plugins\nppdf32.dll
.
==================== Find3M ====================
.
2013-05-30 18:28:25 431616 ----a-w- c:\windows\system32\drivers\stwrt.sys
2013-05-30 18:28:24 934912 ----a-w- c:\windows\system32\stapo.dll
2013-05-30 18:28:24 531968 ------w- c:\windows\system32\stapi32.dll
2013-05-30 18:28:24 405504 ----a-w- c:\windows\system32\stcplx.dll
2013-05-14 19:37:44 71048 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2013-05-14 19:37:44 692104 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2013-05-02 15:28:50 238872 ------w- c:\windows\system32\MpSigStub.exe
2013-04-14 11:46:32 466008 ----a-w- c:\windows\system32\drivers\sptd.sys
2013-04-13 04:45:16 474624 ----a-w- c:\windows\apppatch\AcSpecfc.dll
2013-04-13 04:45:15 2176512 ----a-w- c:\windows\apppatch\AcGenral.dll
2013-04-12 13:45:29 1211752 ----a-w- c:\windows\system32\drivers\ntfs.sys
2013-04-07 08:54:58 1156400 ----a-w- c:\windows\system32\dmwu.exe
2013-04-07 08:52:34 27136 ----a-w- c:\windows\system32\ImHttpComm.dll
2013-04-02 14:09:52 4550656 ----a-w- c:\windows\system32\GPhotos.scr
2013-03-19 05:04:13 3968856 ----a-w- c:\windows\system32\ntkrnlpa.exe
2013-03-19 05:04:10 3913560 ----a-w- c:\windows\system32\ntoskrnl.exe
2013-03-19 04:48:45 38912 ----a-w- c:\windows\system32\csrsrv.dll
2013-03-19 02:49:16 69632 ----a-w- c:\windows\system32\smss.exe
.
============= FINISH: 20:35:28,80 ===============

[Rudy]

Zdravím!

Spusťte nejprve tuto utilitu:

Stáhněte AdwCleaner http://www.stahuj.centrum.cz/utility_a_ ... dwcleaner/
Uložte na plochu
Ukončete všechny programy
Klikněte na Search (hledat)
Proběhne skenováni a pak se objeví log, který sem vložte.

[karolinaw]

# AdwCleaner v2.301 - Log vytvooen 31/05/2013 v 22:20:58
# Aktualizováno 16/05/2013 Xplode
# Operaení systém : Windows 7 Professional Service Pack 1 (32 bits)
# Uživatel : Renata - RENATA-PC
# Spuštin systém : Normální
# Spuštino z : C:\Users\Renata\Downloads\adwcleaner.exe
# Volba [Prohledat]


***** [Služby] *****

Nalezeno : BrowserProtect
Nalezeno : IBUpdaterService

***** [Soubory / Složky] *****

Složka Nalezeno : C:\Program Files\1ClickDownload
Složka Nalezeno : C:\Program Files\Conduit
Složka Nalezeno : C:\Program Files\ICQ6Toolbar
Složka Nalezeno : C:\Program Files\Mozilla Firefox\Extensions\ffxtlbr@babylon.com
Složka Nalezeno : C:\Program Files\Perion
Složka Nalezeno : C:\ProgramData\Ask
Složka Nalezeno : C:\ProgramData\Babylon
Složka Nalezeno : C:\ProgramData\BrowserProtect
Složka Nalezeno : C:\ProgramData\ICQ\ICQToolbar
Složka Nalezeno : C:\ProgramData\Tarma Installer
Složka Nalezeno : C:\Users\Renata\AppData\Local\Google\Chrome\User Data\Default\Extensions\jifflliplgeajjdhmkcfnngfpgbjonjg
Složka Nalezeno : C:\Users\Renata\AppData\Local\Google\Chrome\User Data\Default\Extensions\pmlghpafmmnmmkjdhacccolfgnkiboco
Složka Nalezeno : C:\Users\Renata\AppData\Local\Temp\CT3220468
Složka Nalezeno : C:\Users\Renata\AppData\LocalLow\BabylonToolbar
Složka Nalezeno : C:\Users\Renata\AppData\LocalLow\Conduit
Složka Nalezeno : C:\Users\Renata\AppData\Roaming\BabSolution
Složka Nalezeno : C:\Users\Renata\AppData\Roaming\Babylon
Složka Nalezeno : C:\Users\Renata\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BrowserProtect
Složka Nalezeno : C:\Users\Renata\AppData\Roaming\Mozilla\Firefox\Profiles\0e85her5.default\Conduit
Složka Nalezeno : C:\Users\Renata\AppData\Roaming\Mozilla\Firefox\Profiles\0e85her5.default\CT1750559
Složka Nalezeno : C:\Users\Renata\AppData\Roaming\Mozilla\Firefox\Profiles\0e85her5.default\extensions\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}
Složka Nalezeno : C:\Users\Renata\AppData\Roaming\Mozilla\Firefox\Profiles\0e85her5.default\extensions\plugin@yontoo.com
Složka Nalezeno : C:\Users\Renata\AppData\Roaming\Mozilla\Firefox\Profiles\5hmbs2yj.default\extensions\plugin@yontoo.com
Složka Nalezeno : C:\Users\Renata\AppData\Roaming\Mozilla\Firefox\Profiles\9dmbk278.default\extensions\plugin@yontoo.com
Složka Nalezeno : C:\Users\Renata\AppData\Roaming\Mozilla\Firefox\Profiles\od3412mv.default\extensions\plugin@yontoo.com
Složka Nalezeno : C:\Users\Renata\AppData\Roaming\Mozilla\Firefox\Profiles\s274s0yb.default\extensions\plugin@yontoo.com
Složka Nalezeno : C:\Users\Renata\AppData\Roaming\Mozilla\Firefox\Profiles\uzgpurg2.default\CT2481032
Složka Nalezeno : C:\Users\Renata\AppData\Roaming\Mozilla\Firefox\Profiles\uzgpurg2.default\CT3220468
Složka Nalezeno : C:\Users\Renata\AppData\Roaming\Mozilla\Firefox\Profiles\uzgpurg2.default\extensions\{124d001a-bdcb-472f-aa59-bbe7e4bc3204}
Složka Nalezeno : C:\Users\Renata\AppData\Roaming\Mozilla\Firefox\Profiles\uzgpurg2.default\extensions\{7473b6bd-4691-4744-a82b-7854eb3d70b6}
Složka Nalezeno : C:\Users\Renata\AppData\Roaming\Mozilla\Firefox\Profiles\uzgpurg2.default\jetpack
Složka Nalezeno : C:\Users\Renata\AppData\Roaming\Mozilla\Firefox\Profiles\uzgpurg2.default\Smartbar
Složka Nalezeno : C:\Users\Renata\AppData\Roaming\Yontoo
Složka Nalezeno : C:\Windows\system32\WNLT
Soubor Nalezeno : C:\Program Files\Mozilla Firefox\searchplugins\ask.xml
Soubor Nalezeno : C:\Program Files\Mozilla Firefox\searchplugins\babylon.xml
Soubor Nalezeno : C:\user.js
Soubor Nalezeno : C:\Users\Renata\AppData\Local\Google\Chrome\User Data\Default\bProtector Web Data
Soubor Nalezeno : C:\Users\Renata\AppData\Local\Google\Chrome\User Data\Default\bprotectorpreferences
Soubor Nalezeno : C:\Users\Renata\AppData\Roaming\BabMaint.exe
Soubor Nalezeno : C:\Users\Renata\AppData\Roaming\Mozilla\Firefox\Profiles\0e85her5.default\searchplugins\Conduit.xml
Soubor Nalezeno : C:\Users\Renata\AppData\Roaming\Mozilla\Firefox\Profiles\od3412mv.default\searchplugins\Askcom.xml
Soubor Nalezeno : C:\Users\Renata\AppData\Roaming\Mozilla\Firefox\Profiles\od3412mv.default\searchplugins\icqplugin.xml
Soubor Nalezeno : C:\Users\Renata\AppData\Roaming\Mozilla\Firefox\Profiles\uzgpurg2.default\bProtector_extensions.rdf
Soubor Nalezeno : C:\Users\Renata\AppData\Roaming\Mozilla\Firefox\Profiles\uzgpurg2.default\bprotector_extensions.sqlite
Soubor Nalezeno : C:\Users\Renata\AppData\Roaming\Mozilla\Firefox\Profiles\uzgpurg2.default\bprotector_prefs.js
Soubor Nalezeno : C:\Users\Renata\AppData\Roaming\Mozilla\Firefox\Profiles\uzgpurg2.default\BrowserMngr_extensions.sqlite
Soubor Nalezeno : C:\Users\Renata\AppData\Roaming\Mozilla\Firefox\Profiles\uzgpurg2.default\browsermngr_prefs.js
Soubor Nalezeno : C:\Users\Renata\AppData\Roaming\Mozilla\Firefox\Profiles\uzgpurg2.default\extensions\OneClickDownload@OneClickDownload.com.xpi
Soubor Nalezeno : C:\Users\Renata\AppData\Roaming\Mozilla\Firefox\Profiles\uzgpurg2.default\extensions\plugin@yontoo.com.xpi
Soubor Nalezeno : C:\Users\Renata\AppData\Roaming\Mozilla\Firefox\Profiles\uzgpurg2.default\searchplugins\Askcom.xml
Soubor Nalezeno : C:\Users\Renata\AppData\Roaming\Mozilla\Firefox\Profiles\uzgpurg2.default\searchplugins\Babylon.xml
Soubor Nalezeno : C:\Users\Renata\AppData\Roaming\Mozilla\Firefox\Profiles\uzgpurg2.default\searchplugins\BrowserProtect.xml
Soubor Nalezeno : C:\Users\Renata\AppData\Roaming\Mozilla\Firefox\Profiles\uzgpurg2.default\searchplugins\MyStart Search.xml
Soubor Nalezeno : C:\Windows\system32\conduitEngine.tmp
Soubor Nalezeno : C:\Windows\system32\dmwu.exe
Soubor Nalezeno : C:\Windows\system32\ImhxxpComm.dll

***** [Registry] *****

Data Nalezeno : HKLM\..\Windows [AppInit_DLLs] = c:\progra~2\browse~1\261125~1.80\{c16c1~1\browse~1.dll
Hodnota Nalezeno : HKCU\Software\Microsoft\Internet Explorer\Main [bprotector start page]
Hodnota Nalezeno : HKCU\Software\Microsoft\Internet Explorer\Main [BrowserMngr Start Page]
Hodnota Nalezeno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [bProtectorDefaultScope]
Hodnota Nalezeno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [BrowserMngrDefaultScope]
Hodnota Nalezeno : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Hodnota Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Yontoo Desktop]
Hodnota Nalezeno : HKCU\Software\Mozilla\Firefox\Extensions [{0F827075-B026-42F3-885D-98981EE7B1AE}]
Hodnota Nalezeno : HKCU\Software\Mozilla\Firefox\Extensions [{b64982b1-d112-42b5-b1e4-d3867c4533f8}]
Hodnota Nalezeno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{98889811-442D-49DD-99D7-DC866BE87DBC}]
Hodnota Nalezeno : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{855F3B16-6D32-4FE6-8A56-BBB695989046}]
Hodnota Nalezeno : HKLM\SOFTWARE\Mozilla\Firefox\extensions [{336D0C35-8A85-403a-B9D2-65C292C39087}]
Hodnota Nalezeno : HKLM\SOFTWARE\Mozilla\Firefox\extensions [{FE1DEEEA-DB6D-44b8-83F0-34FC0F9D1052}]
Klíe Nalezeno : HKCU\Software\1ClickDownload
Klíe Nalezeno : HKCU\Software\5f53d8d8b06fbf14
Klíe Nalezeno : HKCU\Software\APN PIP
Klíe Nalezeno : HKCU\Software\AppDataLow\AskBarDis
Klíe Nalezeno : HKCU\Software\AppDataLow\Software\Conduit
Klíe Nalezeno : HKCU\Software\AppDataLow\Software\ConduitSearchScopes
Klíe Nalezeno : HKCU\Software\AppDataLow\Software\SmartBar
Klíe Nalezeno : HKCU\Software\BabylonToolbar
Klíe Nalezeno : HKCU\Software\BrowserMngr
Klíe Nalezeno : HKCU\Software\Conduit
Klíe Nalezeno : HKCU\Software\DataMngr
Klíe Nalezeno : HKCU\Software\IM
Klíe Nalezeno : HKCU\Software\ImInstaller
Klíe Nalezeno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Klíe Nalezeno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40B7-AC73-056A5EBA4A7E}
Klíe Nalezeno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}
Klíe Nalezeno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AD22EBAF-0D18-4FC7-90CC-5EA0ABBE9EB8}
Klíe Nalezeno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{B9C7CE32-DA91-43C2-B7E9-0E9AAFC675CD}
Klíe Nalezeno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{CFF4DB9B-135F-47C0-9269-B4C6572FD61A}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettings
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{855F3B16-6D32-4FE6-8A56-BBB695989046}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00000000-6E41-4FD3-8538-502F5495E5FC}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Klíe Nalezeno : HKCU\Software\PIP
Klíe Nalezeno : HKCU\Software\PrivitizeVPNInstallDates
Klíe Nalezeno : HKCU\Software\Softonic
Klíe Nalezeno : HKCU\Software\StartSearch
Klíe Nalezeno : HKCU\Software\WNLT
Klíe Nalezeno : HKLM\SOFTWARE\14919ea49a8f3b4aa3cf1058d9a64cec
Klíe Nalezeno : HKLM\SOFTWARE\5f53d8d8b06fbf14
Klíe Nalezeno : HKLM\Software\Babylon
Klíe Nalezeno : HKLM\Software\BrowserMngr
Klíe Nalezeno : HKLM\SOFTWARE\Classes\AppID\{5B1881D1-D9C7-46DF-B041-1E593282C7D0}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\AppID\{608D3067-77E8-463D-9084-908966806826}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\AppID\{CFDAFE39-20CE-451D-BD45-A37452F39CF0}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\AppID\YontooIEClient.DLL
Klíe Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{7E84186E-B5DE-4226-8A66-6E49C6B511B4}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{99066096-8989-4612-841F-621A01D54AD7}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{FE9271F2-6EFD-44B0-A826-84C829536E93}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Conduit.Engine
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Prod.cap
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Toolbar.CT1750559
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Toolbar.CT2481032
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Toolbar.CT3220468
Klíe Nalezeno : HKLM\SOFTWARE\Classes\YontooIEClient.Api
Klíe Nalezeno : HKLM\SOFTWARE\Classes\YontooIEClient.Api.1
Klíe Nalezeno : HKLM\SOFTWARE\Classes\YontooIEClient.Layers
Klíe Nalezeno : HKLM\Software\Conduit
Klíe Nalezeno : HKLM\Software\DataMngr
Klíe Nalezeno : HKLM\SOFTWARE\Google\Chrome\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd
Klíe Nalezeno : HKLM\SOFTWARE\Google\Chrome\Extensions\eooncjejnppfjjklapaamhcdmjbilmde
Klíe Nalezeno : HKLM\SOFTWARE\Google\Chrome\Extensions\jifflliplgeajjdhmkcfnngfpgbjonjg
Klíe Nalezeno : HKLM\SOFTWARE\Google\Chrome\Extensions\niapdbllcanepiiimjjndipklodoedlc
Klíe Nalezeno : HKLM\SOFTWARE\Google\Chrome\Extensions\pgafcinpmmpklohkojmllohdhomoefph
Klíe Nalezeno : HKLM\SOFTWARE\Google\Chrome\Extensions\pmlghpafmmnmmkjdhacccolfgnkiboco
Klíe Nalezeno : HKLM\Software\Iminent
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASAPI32
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASMANCS
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Tracing\IncredibarToolbar_RASAPI32
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Tracing\IncredibarToolbar_RASMANCS
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\BrowserProtect
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB}
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{15D2D75C-9CB2-4EFD-BAD7-B9B4CB4BC693}
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Delta Chrome Toolbar
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WNLT
Klíe Nalezeno : HKLM\Software\PIP
Klíe Nalezeno : HKLM\Software\Tarma Installer
Klíe Nalezeno : HKLM\Software\Web Assistant
Klíe Nalezeno : HKLM\Software\WNLT
Klíe Nalezeno : HKU\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Klíe Nalezeno : HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Klíe Nalezeno : HKU\S-1-5-21-3683041670-2158295546-2881036051-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Klíe Nalezeno : HKU\S-1-5-21-3683041670-2158295546-2881036051-1000\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40B7-AC73-056A5EBA4A7E}
Klíe Nalezeno : HKU\S-1-5-21-3683041670-2158295546-2881036051-1000\Software\Microsoft\Internet Explorer\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}
Klíe Nalezeno : HKU\S-1-5-21-3683041670-2158295546-2881036051-1000\Software\Microsoft\Internet Explorer\SearchScopes\{AD22EBAF-0D18-4FC7-90CC-5EA0ABBE9EB8}
Klíe Nalezeno : HKU\S-1-5-21-3683041670-2158295546-2881036051-1000\Software\Microsoft\Internet Explorer\SearchScopes\{B9C7CE32-DA91-43C2-B7E9-0E9AAFC675CD}
Klíe Nalezeno : HKU\S-1-5-21-3683041670-2158295546-2881036051-1000\Software\Microsoft\Internet Explorer\SearchScopes\{CFF4DB9B-135F-47C0-9269-B4C6572FD61A}

***** [Internetové prohlížeee] *****

-\\ Internet Explorer v10.0.9200.16576

[HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://www1.delta-search.com/?affID=119816&babsrc=HP_ss&mntrId=4E6176F1A142E774
[HKCU\Software\Microsoft\Internet Explorer\Main - ICQ Search] = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd
[HKCU\Software\Microsoft\Internet Explorer\Main - BrowserMngr Start Page] = hxxp://search.babylon.com/?affID=112059&tt=120812_bandext_3312_3&babsrc=HP_ss&mntrId=4e614cce00000000000076f1a142e774
[HKCU\Software\Microsoft\Internet Explorer\Main - bProtector Start Page] = hxxp://www1.delta-search.com/?affID=119816&babsrc=HP_ss&mntrId=4E6176F1A142E774

-\\ Mozilla Firefox v20.0.1 (cs)

Soubor : C:\Users\Renata\AppData\Roaming\Mozilla\Firefox\Profiles\0e85her5.default\prefs.js

Nalezeno : user_pref("CT1750559.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
Nalezeno : user_pref("CT1750559.CTID", "CT1750559");
Nalezeno : user_pref("CT1750559.CurrentServerDate", "28-4-2011");
Nalezeno : user_pref("CT1750559.DialogsAlignMode", "LTR");
Nalezeno : user_pref("CT1750559.FirstServerDate", "28-4-2011");
Nalezeno : user_pref("CT1750559.FirstTime", true);
Nalezeno : user_pref("CT1750559.FirstTimeFF3", true);
Nalezeno : user_pref("CT1750559.FixPageNotFoundErrors", true);
Nalezeno : user_pref("CT1750559.GroupingServerCheckInterval", 1440);
Nalezeno : user_pref("CT1750559.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
Nalezeno : user_pref("CT1750559.Initialize", true);
Nalezeno : user_pref("CT1750559.InitializeCommonPrefs", true);
Nalezeno : user_pref("CT1750559.InstalledDate", "Thu Apr 28 2011 19:17:48 GMT+0200");
Nalezeno : user_pref("CT1750559.InvalidateCache", false);
Nalezeno : user_pref("CT1750559.IsGrouping", false);
Nalezeno : user_pref("CT1750559.IsMulticommunity", false);
Nalezeno : user_pref("CT1750559.IsOpenThankYouPage", true);
Nalezeno : user_pref("CT1750559.IsOpenUninstallPage", true);
Nalezeno : user_pref("CT1750559.LanguagePackLastCheckTime", "Thu Apr 28 2011 19:17:50 GMT+0200");
Nalezeno : user_pref("CT1750559.LanguagePackReloadIntervalMM", 1440);
Nalezeno : user_pref("CT1750559.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...]
Nalezeno : user_pref("CT1750559.LastLogin_2.5.6.0", "Thu Apr 28 2011 19:17:48 GMT+0200");
Nalezeno : user_pref("CT1750559.LatestVersion", "3.3.3.2");
Nalezeno : user_pref("CT1750559.Locale", "en-us");
Nalezeno : user_pref("CT1750559.LoginCache", 4);
Nalezeno : user_pref("CT1750559.MCDetectTooltipHeight", "83");
Nalezeno : user_pref("CT1750559.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
Nalezeno : user_pref("CT1750559.MCDetectTooltipWidth", "295");
Nalezeno : user_pref("CT1750559.RadioIsPodcast", false);
Nalezeno : user_pref("CT1750559.RadioLastCheckTime", "Thu Apr 28 2011 19:17:49 GMT+0200");
Nalezeno : user_pref("CT1750559.RadioLastUpdateIPServer", "3");
Nalezeno : user_pref("CT1750559.RadioLastUpdateServer", "128929877726170000");
Nalezeno : user_pref("CT1750559.RadioMediaID", "11237206");
Nalezeno : user_pref("CT1750559.RadioMediaType", "Media Player");
Nalezeno : user_pref("CT1750559.RadioMenuSelectedID", "EBRadioMenu_CT175055911237206");
Nalezeno : user_pref("CT1750559.RadioStationName", "1.FM%20Dance");
Nalezeno : user_pref("CT1750559.RadioStationURL", "hxxp://dance.1.fm/energydance128k?MSWMExt=.asf");
Nalezeno : user_pref("CT1750559.SHRINK_TOOLBAR", 1);
Nalezeno : user_pref("CT1750559.SavedHomepage", "www.seznam.cz");
Nalezeno : user_pref("CT1750559.SearchEngine", "Search||hxxp://search.conduit.com/Results.aspx?q=UCM_SEARCH_TER[...]
Nalezeno : user_pref("CT1750559.SearchFromAddressBarIsInit", true);
Nalezeno : user_pref("CT1750559.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT175[...]
Nalezeno : user_pref("CT1750559.SearchInNewTabEnabled", true);
Nalezeno : user_pref("CT1750559.SearchInNewTabIntervalMM", 1440);
Nalezeno : user_pref("CT1750559.SearchInNewTabLastCheckTime", "Thu Apr 28 2011 19:17:49 GMT+0200");
Nalezeno : user_pref("CT1750559.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...]
Nalezeno : user_pref("CT1750559.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageServic[...]
Nalezeno : user_pref("CT1750559.SettingsCheckIntervalMin", 120);
Nalezeno : user_pref("CT1750559.SettingsLastCheckTime", "Thu Apr 28 2011 19:17:47 GMT+0200");
Nalezeno : user_pref("CT1750559.SettingsLastUpdate", "1302854560");
Nalezeno : user_pref("CT1750559.ThirdPartyComponentsInterval", 504);
Nalezeno : user_pref("CT1750559.ThirdPartyComponentsLastCheck", "Thu Apr 28 2011 19:17:47 GMT+0200");
Nalezeno : user_pref("CT1750559.ThirdPartyComponentsLastUpdate", "1246786978");
Nalezeno : user_pref("CT1750559.TrusteLinkUrl", "hxxp://trust.conduit.com/EB_ORIGINAL_CTID");
Nalezeno : user_pref("CT1750559.UserID", "UN15234199655916736");
Nalezeno : user_pref("CT1750559.ValidationData_Toolbar", 2);
Nalezeno : user_pref("CT1750559.WeatherNetwork", "");
Nalezeno : user_pref("CT1750559.WeatherPollDate", "Thu Apr 28 2011 19:17:52 GMT+0200");
Nalezeno : user_pref("CT1750559.WeatherUnit", "C");
Nalezeno : user_pref("CT1750559.alertChannelId", "31130");
Nalezeno : user_pref("CT1750559.backendstorage.hxxp://cmg1_conduit-widgets_com/pitsi.state", "4F50454E");
Nalezeno : user_pref("CT1750559.clientLogIsEnabled", false);
Nalezeno : user_pref("CT1750559.clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asm[...]
Nalezeno : user_pref("CT1750559.myStuffEnabled", true);
Nalezeno : user_pref("CT1750559.myStuffPublihserMinWidth", 400);
Nalezeno : user_pref("CT1750559.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...]
Nalezeno : user_pref("CT1750559.myStuffServiceIntervalMM", 1440);
Nalezeno : user_pref("CT1750559.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...]
Nalezeno : user_pref("CT1750559.uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Reg[...]
Nalezeno : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "chrome://browser-region/locale/region.pr[...]
Nalezeno : user_pref("CommunityToolbar.ToolbarsList", "CT1750559");
Nalezeno : user_pref("CommunityToolbar.ToolbarsList2", "CT1750559");
Nalezeno : user_pref("CommunityToolbar.facebook.settingsLastCheckTime", "Thu Apr 28 2011 19:17:49 GMT+0200");
Nalezeno : user_pref("CommunityToolbar.keywordURLSelectedCTID", "CT1750559");
Nalezeno : user_pref("browser.search.defaultthis.engineName", "BS Player Customized Web Search");
Nalezeno : user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT1750559&Sea[...]
Nalezeno : user_pref("browser.search.selectedEngine", "BS Player Customized Web Search");
Nalezeno : user_pref("keyword.URL", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT1750559&q=");
Nalezeno : user_pref("browser.newtab.url", "hxxp://mystart.incredibar.com/mb128?a=6OyKkjwo9M&loc=FF_NT");user_p[...]

Soubor : C:\Users\Renata\AppData\Roaming\Mozilla\Firefox\Profiles\5hmbs2yj.default\prefs.js

Nalezeno : user_pref("browser.newtab.url", "hxxp://mystart.incredibar.com/mb128?a=6OyKkjwo9M&loc=FF_NT");user_p[...]

Soubor : C:\Users\Renata\AppData\Roaming\Mozilla\Firefox\Profiles\9dmbk278.default\prefs.js

Nalezeno : user_pref("browser.newtab.url", "hxxp://mystart.incredibar.com/mb128?a=6OyKkjwo9M&loc=FF_NT");user_p[...]

Soubor : C:\Users\Renata\AppData\Roaming\Mozilla\Firefox\Profiles\od3412mv.default\prefs.js

Nalezeno : user_pref("browser.search.defaultengine", "Ask.com");
Nalezeno : user_pref("browser.search.defaultenginename", "Ask.com");
Nalezeno : user_pref("browser.search.order.1", "Ask.com");
Nalezeno : user_pref("browser.search.selectedEngine", "Ask.com");
Nalezeno : user_pref("extensions.asktb.cbid", "QR");
Nalezeno : user_pref("extensions.asktb.crumb", "2010.12.01+09.25.40-toolbar002iad-CZ-UHJhZ3VlLEN6ZWNoIFJlcHVibG[...]
Nalezeno : user_pref("extensions.asktb.default-channel-url-mask", "hxxp://www.ask.com/web?q={query}&o={o}&l={l}[...]
Nalezeno : user_pref("extensions.asktb.dtid", "YYYYYYYYCZ");
Nalezeno : user_pref("extensions.asktb.fresh-install", false);
Nalezeno : user_pref("extensions.asktb.l", "dis");
Nalezeno : user_pref("extensions.asktb.last-config-req", "1297789640483");
Nalezeno : user_pref("extensions.asktb.locale", "en_US");
Nalezeno : user_pref("extensions.asktb.o", "16205");
Nalezeno : user_pref("extensions.asktb.overlay-reloaded-using-restart", true);
Nalezeno : user_pref("extensions.asktb.qsrc", "2871");
Nalezeno : user_pref("extensions.asktb.r", "3");
Nalezeno : user_pref("extensions.asktb.search-plugin-suggestions-url", "hxxp://ss.websearch.ask.com/query?qsrc=[...]
Nalezeno : user_pref("extensions.asktb.search-suggestions-enabled", true);
Nalezeno : user_pref("icqtoolbar.allowSendURL", false);
Nalezeno : user_pref("icqtoolbar.engineVerified", false);
Nalezeno : user_pref("icqtoolbar.hiddenElements", "itb_options");
Nalezeno : user_pref("icqtoolbar.installTime", "1288727407");
Nalezeno : user_pref("icqtoolbar.newtab_state", "1");
Nalezeno : user_pref("icqtoolbar.numberOfSearches", 0);
Nalezeno : user_pref("icqtoolbar.previousFFVersion", "3.6.12");
Nalezeno : user_pref("icqtoolbar.skip_default_search", "no");
Nalezeno : user_pref("icqtoolbar.suggestions", false);
Nalezeno : user_pref("icqtoolbar.uninstStatSent", true);
Nalezeno : user_pref("icqtoolbar.uniqueID", "128870542612887058801288727407313");
Nalezeno : user_pref("icqtoolbar.usageStatstTimestamp", 1288814053);
Nalezeno : user_pref("icqtoolbar.voucherHideClicks", 0);
Nalezeno : user_pref("icqtoolbar.voucherMoreLinkClicks", 0);
Nalezeno : user_pref("icqtoolbar.voucherRedeemClicks", 0);
Nalezeno : user_pref("icqtoolbar.voucherWasShown", 0);
Nalezeno : user_pref("icqtoolbar.xmlEnableSuggestions", false);
Nalezeno : user_pref("icqtoolbar.xmlLanguage", "cs");
Nalezeno : user_pref("keyword.URL", "hxxp://websearch.ask.com/redirect?client=ff&src=kw&tb=CDS&o=16205&locale=e[...]
Nalezeno : user_pref("browser.newtab.url", "hxxp://mystart.incredibar.com/mb128?a=6OyKkjwo9M&loc=FF_NT");user_p[...]

Soubor : C:\Users\Renata\AppData\Roaming\Mozilla\Firefox\Profiles\s274s0yb.default\prefs.js

Nalezeno : user_pref("browser.newtab.url", "hxxp://mystart.incredibar.com/mb128?a=6OyKkjwo9M&loc=FF_NT");user_p[...]

Soubor : C:\Users\Renata\AppData\Roaming\Mozilla\Firefox\Profiles\uzgpurg2.default\prefs.js

Nalezeno : user_pref("CT2481032.1000082.isDisplayHidden", "true");
Nalezeno : user_pref("CT2481032.1000082.state", "{\"state\":\"stopped\",\"text\":\"Californi...\",\"description[...]
Nalezeno : user_pref("CT2481032.CBOpenMAMSettings.enc", "MA==");
Nalezeno : user_pref("CT2481032.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
Nalezeno : user_pref("CT2481032.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"tru[...]
Nalezeno : user_pref("CT2481032.FirstTime", "true");
Nalezeno : user_pref("CT2481032.FirstTimeFF3", "true");
Nalezeno : user_pref("CT2481032.LoginRevertSettingsEnabled", true);
Nalezeno : user_pref("CT2481032.UserID", "UN75412603070472550");
Nalezeno : user_pref("CT2481032.addressBarTakeOverEnabledInHidden", "true");
Nalezeno : user_pref("CT2481032.autoDisableScopes", 14);
Nalezeno : user_pref("CT2481032.cb_experience_000.enc", "MQ==");
Nalezeno : user_pref("CT2481032.cb_firstuse0100.enc", "MQ==");
Nalezeno : user_pref("CT2481032.cbcountry_001.enc", "Q1o=");
Nalezeno : user_pref("CT2481032.cbfirsttime.enc", "VHVlIE5vdiAyNyAyMDEyIDIwOjQ2OjU2IEdNVCswMTAw");
Nalezeno : user_pref("CT2481032.defaultSearch", "false");
Nalezeno : user_pref("CT2481032.enableAlerts", "false");
Nalezeno : user_pref("CT2481032.enableFix404ByUser", "FALSE");
Nalezeno : user_pref("CT2481032.enableSearchFromAddressBar", "false");
Nalezeno : user_pref("CT2481032.firstTimeDialogOpened", "true");
Nalezeno : user_pref("CT2481032.fixPageNotFoundError", "true");
Nalezeno : user_pref("CT2481032.fixPageNotFoundErrorByUser", "true");
Nalezeno : user_pref("CT2481032.fixPageNotFoundErrorInHidden", "true");
Nalezeno : user_pref("CT2481032.fixUrls", true);
Nalezeno : user_pref("CT2481032.hxxp___www_socialgrowthtechnologies_com_couponbuddy_v001.APP_WIN_FEATURES.enc",[...]
Nalezeno : user_pref("CT2481032.installId", "conduitnsisintegration");
Nalezeno : user_pref("CT2481032.installType", "conduitnsisintegration");
Nalezeno : user_pref("CT2481032.isCheckedStartAsHidden", true);
Nalezeno : user_pref("CT2481032.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
Nalezeno : user_pref("CT2481032.isFirstTimeToolbarLoading", "false");
Nalezeno : user_pref("CT2481032.isNewTabEnabled", false);
Nalezeno : user_pref("CT2481032.isPerformedSmartBarTransition", "true");
Nalezeno : user_pref("CT2481032.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
Nalezeno : user_pref("CT2481032.lastNewTabSettings", "{\"isEnabled\":false,\"newTabUrl\":\"hxxp://search.condui[...]
Nalezeno : user_pref("CT2481032.lastVersion", "10.15.2.523");
Nalezeno : user_pref("CT2481032.migrateAppsAndComponents", true);
Nalezeno : user_pref("CT2481032.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"hxxp%[...]
Nalezeno : user_pref("CT2481032.openThankYouPage", "false");
Nalezeno : user_pref("CT2481032.openUninstallPage", "false");
Nalezeno : user_pref("CT2481032.price-gong.bornDate", "{\"dataType\":\"string\",\"data\":\"{\\\"Response\\\":\\[...]
Nalezeno : user_pref("CT2481032.price-gong.isManagedApp", "true");
Nalezeno : user_pref("CT2481032.revertSettingsEnabled", "false");
Nalezeno : user_pref("CT2481032.search.searchAppId", "129058858240125318");
Nalezeno : user_pref("CT2481032.search.searchCount", "0");
Nalezeno : user_pref("CT2481032.searchInNewTabEnabled", "false");
Nalezeno : user_pref("CT2481032.searchInNewTabEnabledByUser", "false");
Nalezeno : user_pref("CT2481032.searchInNewTabEnabledInHidden", "true");
Nalezeno : user_pref("CT2481032.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
Nalezeno : user_pref("CT2481032.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"d[...]
Nalezeno : user_pref("CT2481032.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\[...]
Nalezeno : user_pref("CT2481032.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"d[...]
Nalezeno : user_pref("CT2481032.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"strin[...]
Nalezeno : user_pref("CT2481032.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"strin[...]
Nalezeno : user_pref("CT2481032.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data[...]
Nalezeno : user_pref("CT2481032.serviceLayer_services_app.twitter.user-cnet_lastUpdate", "1354651751436");
Nalezeno : user_pref("CT2481032.serviceLayer_services_app.twitter.user-cnnbrk_lastUpdate", "1354651751577");
Nalezeno : user_pref("CT2481032.serviceLayer_services_app.twitter.user-computeractive_lastUpdate", "13546517517[...]
Nalezeno : user_pref("CT2481032.serviceLayer_services_app.twitter.user-dailymirror_lastUpdate", "1354651751653"[...]
Nalezeno : user_pref("CT2481032.serviceLayer_services_app.twitter.user-google_lastUpdate", "1354651751619");
Nalezeno : user_pref("CT2481032.serviceLayer_services_app.twitter.user-techcrunch_lastUpdate", "1354651751374")[...]
Nalezeno : user_pref("CT2481032.serviceLayer_services_app.twitter.user-thesun_news_lastUpdate", "1354651751640"[...]
Nalezeno : user_pref("CT2481032.serviceLayer_services_app.twitter.user-wired_lastUpdate", "1354651751729");
Nalezeno : user_pref("CT2481032.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1354045607196");
Nalezeno : user_pref("CT2481032.serviceLayer_services_appsMetadata_lastUpdate", "1354651746537");
Nalezeno : user_pref("CT2481032.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1354045608432");
Nalezeno : user_pref("CT2481032.serviceLayer_services_location_lastUpdate", "1369247005199");
Nalezeno : user_pref("CT2481032.serviceLayer_services_login_10.13.40.15_lastUpdate", "1359283103293");
Nalezeno : user_pref("CT2481032.serviceLayer_services_login_10.14.42.7_lastUpdate", "1362516737676");
Nalezeno : user_pref("CT2481032.serviceLayer_services_login_10.14.65.43_lastUpdate", "1366033249087");
Nalezeno : user_pref("CT2481032.serviceLayer_services_login_10.15.0.562_lastUpdate", "1366532718643");
Nalezeno : user_pref("CT2481032.serviceLayer_services_login_10.15.2.523_lastUpdate", "1369246963150");
Nalezeno : user_pref("CT2481032.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1354045607905");
Nalezeno : user_pref("CT2481032.serviceLayer_services_searchAPI_lastUpdate", "1354651746795");
Nalezeno : user_pref("CT2481032.serviceLayer_services_serviceMap_lastUpdate", "1369247005196");
Nalezeno : user_pref("CT2481032.serviceLayer_services_toolbarContextMenu_lastUpdate", "1354045608386");
Nalezeno : user_pref("CT2481032.serviceLayer_services_toolbarSettings_lastUpdate", "1369247005198");
Nalezeno : user_pref("CT2481032.serviceLayer_services_translation_lastUpdate", "1369247005197");
Nalezeno : user_pref("CT2481032.serviceLayer_services_userApps1ec55dac-8dca-406b-9697-5d68893c1c0c_lastUpdate",[...]
Nalezeno : user_pref("CT2481032.serviceLayer_services_userApps_lastUpdate", "1354045640991");
Nalezeno : user_pref("CT2481032.settingsINI", true);
Nalezeno : user_pref("CT2481032.shouldFirstTimeDialog", "false");
Nalezeno : user_pref("CT2481032.showToolbarPermission", "false");
Nalezeno : user_pref("CT2481032.smartbar.CTID", "CT2481032");
Nalezeno : user_pref("CT2481032.smartbar.Uninstall", "0");
Nalezeno : user_pref("CT2481032.smartbar.isHidden", true);
Nalezeno : user_pref("CT2481032.smartbar.toolbarName", "Ashampoo US ");
Nalezeno : user_pref("CT2481032.startPage", "false");
Nalezeno : user_pref("CT2481032.toolbarBornServerTime", "27-11-2012");
Nalezeno : user_pref("CT2481032.toolbarCurrentServerTime", "22-5-2013");
Nalezeno : user_pref("CT2481032.toolbarLoginClientTime", "Tue Apr 16 2013 20:53:27 GMT+0200");
Nalezeno : user_pref("CT2481032.url_history0001.enc", "aHR0cDovL3d3dy5zc2hzb3BhdmEuY3ovaXNhcy9wcnViZXpuYS1rbGFz[...]
Nalezeno : user_pref("CT2481032_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\"[...]
Nalezeno : user_pref("CT3220468.BT_Stats", "{\"last_log\":1348927710,\"uuid\":157883722652164,\"seq_id\":1,\"ss[...]
Nalezeno : user_pref("CT3220468.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
Nalezeno : user_pref("CT3220468.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"tru[...]
Nalezeno : user_pref("CT3220468.FirstTime", "true");
Nalezeno : user_pref("CT3220468.FirstTimeFF3", "true");
Nalezeno : user_pref("CT3220468.LoginRevertSettingsEnabled", true);
Nalezeno : user_pref("CT3220468.RevertSettingsEnabled", true);
Nalezeno : user_pref("CT3220468.UserID", "UN92059843445263539");
Nalezeno : user_pref("CT3220468.addressBarTakeOverEnabledInHidden", "true");
Nalezeno : user_pref("CT3220468.autoDisableScopes", 14);
Nalezeno : user_pref("CT3220468.cbfirsttime", "Sat Sep 29 2012 16:08:29 GMT+0200");
Nalezeno : user_pref("CT3220468.defaultSearch", "FALSE");
Nalezeno : user_pref("CT3220468.enableAlerts", "always");
Nalezeno : user_pref("CT3220468.enableFix404ByUser", "FALSE");
Nalezeno : user_pref("CT3220468.enableSearchFromAddressBar", "FALSE");
Nalezeno : user_pref("CT3220468.firstTimeDialogOpened", "true");
Nalezeno : user_pref("CT3220468.fixPageNotFoundError", "true");
Nalezeno : user_pref("CT3220468.fixPageNotFoundErrorByUser", "true");
Nalezeno : user_pref("CT3220468.fixPageNotFoundErrorInHidden", "true");
Nalezeno : user_pref("CT3220468.fixUrls", true);
Nalezeno : user_pref("CT3220468.installId", "fft6711.tmp.exe");
Nalezeno : user_pref("CT3220468.installType", "XPE");
Nalezeno : user_pref("CT3220468.isCheckedStartAsHidden", true);
Nalezeno : user_pref("CT3220468.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
Nalezeno : user_pref("CT3220468.isFirstTimeToolbarLoading", "false");
Nalezeno : user_pref("CT3220468.isNewTabEnabled", true);
Nalezeno : user_pref("CT3220468.isPerformedSmartBarTransition", "true");
Nalezeno : user_pref("CT3220468.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
Nalezeno : user_pref("CT3220468.isWelcomPage", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
Nalezeno : user_pref("CT3220468.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"hxxp://search.conduit[...]
Nalezeno : user_pref("CT3220468.lastVersion", "10.16.2.509");
Nalezeno : user_pref("CT3220468.migrateAppsAndComponents", true);
Nalezeno : user_pref("CT3220468.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"hxxp%[...]
Nalezeno : user_pref("CT3220468.openThankYouPage", "true");
Nalezeno : user_pref("CT3220468.openUninstallPage", "FALSE");
Nalezeno : user_pref("CT3220468.search.searchAppId", "129813684258939747");
Nalezeno : user_pref("CT3220468.search.searchCount", "0");
Nalezeno : user_pref("CT3220468.searchInNewTabEnabledByUser", "true");
Nalezeno : user_pref("CT3220468.searchInNewTabEnabledInHidden", "true");
Nalezeno : user_pref("CT3220468.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
Nalezeno : user_pref("CT3220468.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"d[...]
Nalezeno : user_pref("CT3220468.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\[...]
Nalezeno : user_pref("CT3220468.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"d[...]
Nalezeno : user_pref("CT3220468.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"strin[...]
Nalezeno : user_pref("CT3220468.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"strin[...]
Nalezeno : user_pref("CT3220468.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data[...]
Nalezeno : user_pref("CT3220468.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data[...]
Nalezeno : user_pref("CT3220468.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1348927697889");
Nalezeno : user_pref("CT3220468.serviceLayer_services_appsMetadata_lastUpdate", "1348927697682");
Nalezeno : user_pref("CT3220468.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1348927698881");
Nalezeno : user_pref("CT3220468.serviceLayer_services_location_lastUpdate", "1369247005202");
Nalezeno : user_pref("CT3220468.serviceLayer_services_login_10.10.27.6_lastUpdate", "1352999678654");
Nalezeno : user_pref("CT3220468.serviceLayer_services_login_10.13.40.15_lastUpdate", "1359283104158");
Nalezeno : user_pref("CT3220468.serviceLayer_services_login_10.14.370.524_lastUpdate", "1366033298693");
Nalezeno : user_pref("CT3220468.serviceLayer_services_login_10.14.40.128_lastUpdate", "1362516735193");
Nalezeno : user_pref("CT3220468.serviceLayer_services_login_10.14.65.43_lastUpdate", "1363554851306");
Nalezeno : user_pref("CT3220468.serviceLayer_services_login_10.15.0.562_lastUpdate", "1369246962905");
Nalezeno : user_pref("CT3220468.serviceLayer_services_login_10.16.2.509_lastUpdate", "1369253499220");
Nalezeno : user_pref("CT3220468.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1348927698841");
Nalezeno : user_pref("CT3220468.serviceLayer_services_searchAPI_lastUpdate", "1348927697133");
Nalezeno : user_pref("CT3220468.serviceLayer_services_serviceMap_lastUpdate", "1369247005200");
Nalezeno : user_pref("CT3220468.serviceLayer_services_toolbarContextMenu_lastUpdate", "1348927698802");
Nalezeno : user_pref("CT3220468.serviceLayer_services_toolbarSettings_lastUpdate", "1369247005202");
Nalezeno : user_pref("CT3220468.serviceLayer_services_translation_lastUpdate", "1369247005201");
Nalezeno : user_pref("CT3220468.settingsINI", true);
Nalezeno : user_pref("CT3220468.shouldFirstTimeDialog", "false");
Nalezeno : user_pref("CT3220468.showToolbarPermission", "false");
Nalezeno : user_pref("CT3220468.smartbar.CTID", "CT3220468");
Nalezeno : user_pref("CT3220468.smartbar.Uninstall", "0");
Nalezeno : user_pref("CT3220468.smartbar.isHidden", true);
Nalezeno : user_pref("CT3220468.smartbar.toolbarName", "uTorrentControl_v2 ");
Nalezeno : user_pref("CT3220468.startPage", "userChanged");
Nalezeno : user_pref("CT3220468.toolbarBornServerTime", "29-9-2012");
Nalezeno : user_pref("CT3220468.toolbarCurrentServerTime", "22-5-2013");
Nalezeno : user_pref("CT3220468.toolbarLoginClientTime", "Tue Mar 19 2013 20:49:51 GMT+0100");
Nalezeno : user_pref("CT3220468.upgradeFromClearSBVersion", true);
Nalezeno : user_pref("CT3220468_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\"[...]
Nalezeno : user_pref("avg.install.userHPSettings", "hxxp://www1.delta-search.com/?affID=119816&babsrc=HP_ss&mnt[...]
Nalezeno : user_pref("avg.install.userSPSettings", "Delta Search");
Nalezeno : user_pref("browser.newtab.url", "hxxp://www1.delta-search.com/?affID=119816&babsrc=NT_ss&mntrId=4E61[...]
Nalezeno : user_pref("browser.search.selectedEngine", "Delta Search");
Nalezeno : user_pref("browser.startup.homepage", "hxxp://www1.delta-search.com/?affID=119816&babsrc=HP_ss&mntrI[...]
Nalezeno : user_pref("extensions.BabylonToolbar.admin", false);
Nalezeno : user_pref("extensions.BabylonToolbar.aflt", "babsst");
Nalezeno : user_pref("extensions.BabylonToolbar.dfltLng", "en");
Nalezeno : user_pref("extensions.BabylonToolbar.excTlbr", false);
Nalezeno : user_pref("extensions.BabylonToolbar.id", "4e614cce00000000000076f1a142e774");
Nalezeno : user_pref("extensions.BabylonToolbar.instlDay", "15565");
Nalezeno : user_pref("extensions.BabylonToolbar.instlRef", "sst");
Nalezeno : user_pref("extensions.BabylonToolbar.prdct", "BabylonToolbar");
Nalezeno : user_pref("extensions.BabylonToolbar.prtnrId", "babylon");
Nalezeno : user_pref("extensions.BabylonToolbar.tlbrId", "base");
Nalezeno : user_pref("extensions.BabylonToolbar.tlbrSrchUrl", "hxxp://www.google.com/search?babsrc=TB_ggl&q=");
Nalezeno : user_pref("extensions.BabylonToolbar.vrsn", "1.6.4.6");
Nalezeno : user_pref("extensions.BabylonToolbar.vrsni", "1.6.4.6");
Nalezeno : user_pref("extensions.BabylonToolbar_i.babExt", "");
Nalezeno : user_pref("extensions.BabylonToolbar_i.babTrack", "affID=112059&tt=120812_bandext_3312_7");
Nalezeno : user_pref("extensions.BabylonToolbar_i.newTab", true);
Nalezeno : user_pref("extensions.BabylonToolbar_i.newTabUrl", "hxxp://search.babylon.com/?affID=112059&tt=12081[...]
Nalezeno : user_pref("extensions.BabylonToolbar_i.smplGrp", "none");
Nalezeno : user_pref("extensions.BabylonToolbar_i.srcExt", "ss");
Nalezeno : user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.6.4.619:03:48");
Nalezeno : user_pref("extensions.incredibar.admin", false);
Nalezeno : user_pref("extensions.incredibar.aflt", "orgnl");
Nalezeno : user_pref("extensions.incredibar.cntry", "CZ");
Nalezeno : user_pref("extensions.incredibar.dfltLng", "");
Nalezeno : user_pref("extensions.incredibar.dfltSrch", false);
Nalezeno : user_pref("extensions.incredibar.did", "10658");
Nalezeno : user_pref("extensions.incredibar.envrmnt", "production");
Nalezeno : user_pref("extensions.incredibar.excTlbr", false);
Nalezeno : user_pref("extensions.incredibar.hdrMd5", "56B95DE1EDE995C4384A7AF67E0AF2A8");
Nalezeno : user_pref("extensions.incredibar.hmpg", false);
Nalezeno : user_pref("extensions.incredibar.id", "4e614cce00000000000076f1a142e774");
Nalezeno : user_pref("extensions.incredibar.installerproductid", "26");
Nalezeno : user_pref("extensions.incredibar.instlDay", "15559");
Nalezeno : user_pref("extensions.incredibar.instlRef", "");
Nalezeno : user_pref("extensions.incredibar.isDcmntCmplt", true);
Nalezeno : user_pref("extensions.incredibar.lastVrsnTs", "1.5.11.1419:22:44");
Nalezeno : user_pref("extensions.incredibar.mntrvrsn", "1.2.0");
Nalezeno : user_pref("extensions.incredibar.newTab", false);
Nalezeno : user_pref("extensions.incredibar.noFFXTlbr", false);
Nalezeno : user_pref("extensions.incredibar.ppd", "");
Nalezeno : user_pref("extensions.incredibar.prdct", "incredibar");
Nalezeno : user_pref("extensions.incredibar.productid", "26");
Nalezeno : user_pref("extensions.incredibar.prtnrId", "Incredibar");
Nalezeno : user_pref("extensions.incredibar.sg", "none");
Nalezeno : user_pref("extensions.incredibar.smplGrp", "none");
Nalezeno : user_pref("extensions.incredibar.tlbrId", "base");
Nalezeno : user_pref("extensions.incredibar.tlbrSrchUrl", "hxxp://mystart.Incredibar.com/?a=6OyKkjwo9M&loc=IB_T[...]
Nalezeno : user_pref("extensions.incredibar.upn2", "6OyKkjwo9M");
Nalezeno : user_pref("extensions.incredibar.upn2n", "92261890875400430");
Nalezeno : user_pref("extensions.incredibar.vrsn", "1.5.11.14");
Nalezeno : user_pref("extensions.incredibar.vrsnTs", "1.5.11.1419:22:44");
Nalezeno : user_pref("extensions.incredibar.vrsni", "1.5.11.14");
Nalezeno : user_pref("extensions.incredibar_i.aflt", "orgnl");
Nalezeno : user_pref("extensions.incredibar_i.dfltLng", "");
Nalezeno : user_pref("extensions.incredibar_i.did", "10658");
Nalezeno : user_pref("extensions.incredibar_i.excTlbr", false);
Nalezeno : user_pref("extensions.incredibar_i.id", "4e614cce00000000000076f1a142e774");
Nalezeno : user_pref("extensions.incredibar_i.installerproductid", "26");
Nalezeno : user_pref("extensions.incredibar_i.instlDay", "15559");
Nalezeno : user_pref("extensions.incredibar_i.instlRef", "");
Nalezeno : user_pref("extensions.incredibar_i.ms_url_id", "");
Nalezeno : user_pref("extensions.incredibar_i.newTab", false);
Nalezeno : user_pref("extensions.incredibar_i.ppd", "");
Nalezeno : user_pref("extensions.incredibar_i.prdct", "incredibar");
Nalezeno : user_pref("extensions.incredibar_i.productid", "26");
Nalezeno : user_pref("extensions.incredibar_i.prtnrId", "Incredibar");
Nalezeno : user_pref("extensions.incredibar_i.smplGrp", "none");
Nalezeno : user_pref("extensions.incredibar_i.tlbrId", "base");
Nalezeno : user_pref("extensions.incredibar_i.tlbrSrchUrl", "hxxp://mystart.Incredibar.com/?a=6OyKkjwo9M&loc=IB[...]
Nalezeno : user_pref("extensions.incredibar_i.upn2", "6OyKkjwo9M");
Nalezeno : user_pref("extensions.incredibar_i.upn2n", "92261890875400430");
Nalezeno : user_pref("extensions.incredibar_i.vrsn", "1.5.11.14");
Nalezeno : user_pref("extensions.incredibar_i.vrsnTs", "1.5.11.1419:22:44");
Nalezeno : user_pref("extensions.incredibar_i.vrsni", "1.5.11.14");
Nalezeno : user_pref("extentions.y2layers.defaultEnableAppsList", "bestvideodownloader,ezLooker,pagerage,buzzdo[...]
Nalezeno : user_pref("extentions.y2layers.installId", "c02629a4-85cd-4f38-ba4b-bb84a0dd7db9");
Nalezeno : user_pref("keyword.URL", "hxxp://eu.ask.com/web?l=dis&o=APN10089&gct=kwd&qsrc=2869&apn_dtid=^PFM004^[...]
Nalezeno : user_pref("smartBar.searchInNewTabOwner", "CT3220468");
Nalezeno : user_pref("smartbar.machineId", "ZOJJT5QCLWUOAKVUIKV+KSLE2FZLN9JRD/MPDX6OHQFBQ5VQ6JEQJWNHCLOVXLIAIKJ[...]
Nalezeno : user_pref("sweetim.toolbar.urls.homepage", "hxxp://search.babylon.com/?affID=112059&tt=120812_bandex[...]
Nalezeno : user_pref("{336D0C35-8A85-403a-B9D2-65C292C39087}.ScriptData_WSG_whiteList", "{\"search.babylon.com\[...]

-\\ Google Chrome v27.0.1453.94

Soubor : C:\Users\Renata\AppData\Local\Google\Chrome\User Data\Default\Preferences

Nalezeno [l.2481] : homepage = "hxxp://www1.delta-search.com/?affID=119816&babsrc=HP_ss&mntrId=4E6176F1A142E774",
Nalezeno [l.2861] : urls_to_restore_on_startup = [ "hxxp://www1.delta-search.com/?affID=119816&babsrc=HP_ss&mntrId=4E6176F1A142E774" ]

*************************

AdwCleaner[R1].txt - [46251 octets] - [31/05/2013 22:20:58]

########## EOF - C:\AdwCleaner[R1].txt - [46312 octets] ##########

[Rudy]

Spusťte znovu ADWCleaner a klikněte na >Delete< (smazat). Vložte nový log.

[karolinaw]

# AdwCleaner v2.301 - Log vytvooen 31/05/2013 v 22:32:21
# Aktualizováno 16/05/2013 Xplode
# Operaení systém : Windows 7 Professional Service Pack 1 (32 bits)
# Uživatel : Renata - RENATA-PC
# Spuštin systém : Normální
# Spuštino z : C:\Users\Renata\Downloads\adwcleaner.exe
# Volba [Vymazat]


***** [Služby] *****

Zastaveno & vymazáno : BrowserProtect
Zastaveno & vymazáno : IBUpdaterService

***** [Soubory / Složky] *****

Složka Vymazáno : C:\Program Files\1ClickDownload
Složka Vymazáno : C:\Program Files\Conduit
Složka Vymazáno : C:\Program Files\Mozilla Firefox\Extensions\ffxtlbr@babylon.com
Složka Vymazáno : C:\Program Files\Perion
Složka Vymazáno : C:\ProgramData\Ask
Složka Vymazáno : C:\ProgramData\Babylon
Složka Vymazáno : C:\ProgramData\ICQ\ICQToolbar
Složka Vymazáno : C:\ProgramData\Tarma Installer
Složka Vymazáno : C:\Users\Renata\AppData\Local\Google\Chrome\User Data\Default\Extensions\jifflliplgeajjdhmkcfnngfpgbjonjg
Složka Vymazáno : C:\Users\Renata\AppData\Local\Google\Chrome\User Data\Default\Extensions\pmlghpafmmnmmkjdhacccolfgnkiboco
Složka Vymazáno : C:\Users\Renata\AppData\Local\Temp\CT3220468
Složka Vymazáno : C:\Users\Renata\AppData\LocalLow\BabylonToolbar
Složka Vymazáno : C:\Users\Renata\AppData\LocalLow\Conduit
Složka Vymazáno : C:\Users\Renata\AppData\Roaming\BabSolution
Složka Vymazáno : C:\Users\Renata\AppData\Roaming\Babylon
Složka Vymazáno : C:\Users\Renata\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BrowserProtect
Složka Vymazáno : C:\Users\Renata\AppData\Roaming\Mozilla\Firefox\Profiles\0e85her5.default\Conduit
Složka Vymazáno : C:\Users\Renata\AppData\Roaming\Mozilla\Firefox\Profiles\0e85her5.default\CT1750559
Složka Vymazáno : C:\Users\Renata\AppData\Roaming\Mozilla\Firefox\Profiles\0e85her5.default\extensions\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}
Složka Vymazáno : C:\Users\Renata\AppData\Roaming\Mozilla\Firefox\Profiles\0e85her5.default\extensions\plugin@yontoo.com
Složka Vymazáno : C:\Users\Renata\AppData\Roaming\Mozilla\Firefox\Profiles\5hmbs2yj.default\extensions\plugin@yontoo.com
Složka Vymazáno : C:\Users\Renata\AppData\Roaming\Mozilla\Firefox\Profiles\9dmbk278.default\extensions\plugin@yontoo.com
Složka Vymazáno : C:\Users\Renata\AppData\Roaming\Mozilla\Firefox\Profiles\od3412mv.default\extensions\plugin@yontoo.com
Složka Vymazáno : C:\Users\Renata\AppData\Roaming\Mozilla\Firefox\Profiles\s274s0yb.default\extensions\plugin@yontoo.com
Složka Vymazáno : C:\Users\Renata\AppData\Roaming\Mozilla\Firefox\Profiles\uzgpurg2.default\CT2481032
Složka Vymazáno : C:\Users\Renata\AppData\Roaming\Mozilla\Firefox\Profiles\uzgpurg2.default\CT3220468
Složka Vymazáno : C:\Users\Renata\AppData\Roaming\Mozilla\Firefox\Profiles\uzgpurg2.default\extensions\{124d001a-bdcb-472f-aa59-bbe7e4bc3204}
Složka Vymazáno : C:\Users\Renata\AppData\Roaming\Mozilla\Firefox\Profiles\uzgpurg2.default\extensions\{7473b6bd-4691-4744-a82b-7854eb3d70b6}
Složka Vymazáno : C:\Users\Renata\AppData\Roaming\Mozilla\Firefox\Profiles\uzgpurg2.default\jetpack
Složka Vymazáno : C:\Users\Renata\AppData\Roaming\Mozilla\Firefox\Profiles\uzgpurg2.default\Smartbar
Složka Vymazáno : C:\Users\Renata\AppData\Roaming\Yontoo
Složka Vymazáno : C:\Windows\system32\WNLT
Soubor Vymazáno : C:\Program Files\Mozilla Firefox\searchplugins\ask.xml
Soubor Vymazáno : C:\Program Files\Mozilla Firefox\searchplugins\babylon.xml
Soubor Vymazáno : C:\user.js
Soubor Vymazáno : C:\Users\Renata\AppData\Local\Google\Chrome\User Data\Default\bProtector Web Data
Soubor Vymazáno : C:\Users\Renata\AppData\Local\Google\Chrome\User Data\Default\bprotectorpreferences
Soubor Vymazáno : C:\Users\Renata\AppData\Roaming\BabMaint.exe
Soubor Vymazáno : C:\Users\Renata\AppData\Roaming\Mozilla\Firefox\Profiles\0e85her5.default\searchplugins\Conduit.xml
Soubor Vymazáno : C:\Users\Renata\AppData\Roaming\Mozilla\Firefox\Profiles\od3412mv.default\searchplugins\Askcom.xml
Soubor Vymazáno : C:\Users\Renata\AppData\Roaming\Mozilla\Firefox\Profiles\od3412mv.default\searchplugins\icqplugin.xml
Soubor Vymazáno : C:\Users\Renata\AppData\Roaming\Mozilla\Firefox\Profiles\uzgpurg2.default\bProtector_extensions.rdf
Soubor Vymazáno : C:\Users\Renata\AppData\Roaming\Mozilla\Firefox\Profiles\uzgpurg2.default\bprotector_extensions.sqlite
Soubor Vymazáno : C:\Users\Renata\AppData\Roaming\Mozilla\Firefox\Profiles\uzgpurg2.default\bprotector_prefs.js
Soubor Vymazáno : C:\Users\Renata\AppData\Roaming\Mozilla\Firefox\Profiles\uzgpurg2.default\BrowserMngr_extensions.sqlite
Soubor Vymazáno : C:\Users\Renata\AppData\Roaming\Mozilla\Firefox\Profiles\uzgpurg2.default\browsermngr_prefs.js
Soubor Vymazáno : C:\Users\Renata\AppData\Roaming\Mozilla\Firefox\Profiles\uzgpurg2.default\extensions\OneClickDownload@OneClickDownload.com.xpi
Soubor Vymazáno : C:\Users\Renata\AppData\Roaming\Mozilla\Firefox\Profiles\uzgpurg2.default\extensions\plugin@yontoo.com.xpi
Soubor Vymazáno : C:\Users\Renata\AppData\Roaming\Mozilla\Firefox\Profiles\uzgpurg2.default\searchplugins\Askcom.xml
Soubor Vymazáno : C:\Users\Renata\AppData\Roaming\Mozilla\Firefox\Profiles\uzgpurg2.default\searchplugins\Babylon.xml
Soubor Vymazáno : C:\Users\Renata\AppData\Roaming\Mozilla\Firefox\Profiles\uzgpurg2.default\searchplugins\BrowserProtect.xml
Soubor Vymazáno : C:\Users\Renata\AppData\Roaming\Mozilla\Firefox\Profiles\uzgpurg2.default\searchplugins\MyStart Search.xml
Soubor Vymazáno : C:\Windows\system32\conduitEngine.tmp
Vymazáno poi restartu : C:\Program Files\ICQ6Toolbar
Vymazáno poi restartu : C:\ProgramData\BrowserProtect
Vymazáno poi restartu : C:\Windows\system32\Zynga
Vymazáno poi restartu : C:\Windows\system32\Zynga

***** [Registry] *****

Data Vymazáno : HKLM\..\Windows [AppInit_DLLs] = c:\progra~2\browse~1\261125~1.80\{c16c1~1\browse~1.dll
Hodnota Vymazáno : HKCU\Software\Microsoft\Internet Explorer\Main [bprotector start page]
Hodnota Vymazáno : HKCU\Software\Microsoft\Internet Explorer\Main [BrowserMngr Start Page]
Hodnota Vymazáno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [bProtectorDefaultScope]
Hodnota Vymazáno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [BrowserMngrDefaultScope]
Hodnota Vymazáno : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Hodnota Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Yontoo Desktop]
Hodnota Vymazáno : HKCU\Software\Mozilla\Firefox\Extensions [{0F827075-B026-42F3-885D-98981EE7B1AE}]
Hodnota Vymazáno : HKCU\Software\Mozilla\Firefox\Extensions [{b64982b1-d112-42b5-b1e4-d3867c4533f8}]
Hodnota Vymazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{98889811-442D-49DD-99D7-DC866BE87DBC}]
Hodnota Vymazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{855F3B16-6D32-4FE6-8A56-BBB695989046}]
Hodnota Vymazáno : HKLM\SOFTWARE\Mozilla\Firefox\extensions [{336D0C35-8A85-403a-B9D2-65C292C39087}]
Hodnota Vymazáno : HKLM\SOFTWARE\Mozilla\Firefox\extensions [{FE1DEEEA-DB6D-44b8-83F0-34FC0F9D1052}]
Klíe Vymazáno : HKCU\Software\1ClickDownload
Klíe Vymazáno : HKCU\Software\5f53d8d8b06fbf14
Klíe Vymazáno : HKCU\Software\APN PIP
Klíe Vymazáno : HKCU\Software\AppDataLow\AskBarDis
Klíe Vymazáno : HKCU\Software\AppDataLow\Software\Conduit
Klíe Vymazáno : HKCU\Software\AppDataLow\Software\ConduitSearchScopes
Klíe Vymazáno : HKCU\Software\AppDataLow\Software\SmartBar
Klíe Vymazáno : HKCU\Software\BabylonToolbar
Klíe Vymazáno : HKCU\Software\BrowserMngr
Klíe Vymazáno : HKCU\Software\Conduit
Klíe Vymazáno : HKCU\Software\DataMngr
Klíe Vymazáno : HKCU\Software\IM
Klíe Vymazáno : HKCU\Software\ImInstaller
Klíe Vymazáno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Klíe Vymazáno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40B7-AC73-056A5EBA4A7E}
Klíe Vymazáno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}
Klíe Vymazáno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AD22EBAF-0D18-4FC7-90CC-5EA0ABBE9EB8}
Klíe Vymazáno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{B9C7CE32-DA91-43C2-B7E9-0E9AAFC675CD}
Klíe Vymazáno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{CFF4DB9B-135F-47C0-9269-B4C6572FD61A}
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettings
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{855F3B16-6D32-4FE6-8A56-BBB695989046}
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00000000-6E41-4FD3-8538-502F5495E5FC}
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Klíe Vymazáno : HKCU\Software\PIP
Klíe Vymazáno : HKCU\Software\PrivitizeVPNInstallDates
Klíe Vymazáno : HKCU\Software\Softonic
Klíe Vymazáno : HKCU\Software\StartSearch
Klíe Vymazáno : HKCU\Software\WNLT
Klíe Vymazáno : HKLM\SOFTWARE\14919ea49a8f3b4aa3cf1058d9a64cec
Klíe Vymazáno : HKLM\SOFTWARE\5f53d8d8b06fbf14
Klíe Vymazáno : HKLM\Software\Babylon
Klíe Vymazáno : HKLM\Software\BrowserMngr
Klíe Vymazáno : HKLM\SOFTWARE\Classes\AppID\{5B1881D1-D9C7-46DF-B041-1E593282C7D0}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\AppID\{608D3067-77E8-463D-9084-908966806826}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\AppID\{CFDAFE39-20CE-451D-BD45-A37452F39CF0}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\AppID\YontooIEClient.DLL
Klíe Vymazáno : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\CLSID\{7E84186E-B5DE-4226-8A66-6E49C6B511B4}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\CLSID\{99066096-8989-4612-841F-621A01D54AD7}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\CLSID\{FE9271F2-6EFD-44B0-A826-84C829536E93}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Conduit.Engine
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Interface\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Prod.cap
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Toolbar.CT1750559
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Toolbar.CT2481032
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Toolbar.CT3220468
Klíe Vymazáno : HKLM\SOFTWARE\Classes\YontooIEClient.Api
Klíe Vymazáno : HKLM\SOFTWARE\Classes\YontooIEClient.Api.1
Klíe Vymazáno : HKLM\SOFTWARE\Classes\YontooIEClient.Layers
Klíe Vymazáno : HKLM\Software\Conduit
Klíe Vymazáno : HKLM\Software\DataMngr
Klíe Vymazáno : HKLM\SOFTWARE\Google\Chrome\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd
Klíe Vymazáno : HKLM\SOFTWARE\Google\Chrome\Extensions\eooncjejnppfjjklapaamhcdmjbilmde
Klíe Vymazáno : HKLM\SOFTWARE\Google\Chrome\Extensions\jifflliplgeajjdhmkcfnngfpgbjonjg
Klíe Vymazáno : HKLM\SOFTWARE\Google\Chrome\Extensions\niapdbllcanepiiimjjndipklodoedlc
Klíe Vymazáno : HKLM\SOFTWARE\Google\Chrome\Extensions\pgafcinpmmpklohkojmllohdhomoefph
Klíe Vymazáno : HKLM\SOFTWARE\Google\Chrome\Extensions\pmlghpafmmnmmkjdhacccolfgnkiboco
Klíe Vymazáno : HKLM\Software\Iminent
Klíe Vymazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Klíe Vymazáno : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASAPI32
Klíe Vymazáno : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASMANCS
Klíe Vymazáno : HKLM\SOFTWARE\Microsoft\Tracing\IncredibarToolbar_RASAPI32
Klíe Vymazáno : HKLM\SOFTWARE\Microsoft\Tracing\IncredibarToolbar_RASMANCS
Klíe Vymazáno : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32
Klíe Vymazáno : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS
Klíe Vymazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB}
Klíe Vymazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Klíe Vymazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{15D2D75C-9CB2-4EFD-BAD7-B9B4CB4BC693}
Klíe Vymazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}
Klíe Vymazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Delta Chrome Toolbar
Klíe Vymazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WNLT
Klíe Vymazáno : HKLM\Software\PIP
Klíe Vymazáno : HKLM\Software\Tarma Installer
Klíe Vymazáno : HKLM\Software\Web Assistant
Klíe Vymazáno : HKLM\Software\WNLT
Klíe Vymazáno : HKU\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}

***** [Internetové prohlížeee] *****

-\\ Internet Explorer v10.0.9200.16576

Zaminino : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://www1.delta-search.com/?affID=119816&babsrc=HP_ss&mntrId=4E6176F1A142E774 --> hxxp://www.google.com
Zaminino : [HKCU\Software\Microsoft\Internet Explorer\Main - ICQ Search] = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd --> hxxp://www.google.com

-\\ Mozilla Firefox v20.0.1 (cs)

Soubor : C:\Users\Renata\AppData\Roaming\Mozilla\Firefox\Profiles\0e85her5.default\prefs.js

C:\Users\Renata\AppData\Roaming\Mozilla\Firefox\Profiles\0e85her5.default\user.js ... Vymazáno !

Vymazáno : user_pref("CT1750559.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
Vymazáno : user_pref("CT1750559.CTID", "CT1750559");
Vymazáno : user_pref("CT1750559.CurrentServerDate", "28-4-2011");
Vymazáno : user_pref("CT1750559.DialogsAlignMode", "LTR");
Vymazáno : user_pref("CT1750559.FirstServerDate", "28-4-2011");
Vymazáno : user_pref("CT1750559.FirstTime", true);
Vymazáno : user_pref("CT1750559.FirstTimeFF3", true);
Vymazáno : user_pref("CT1750559.FixPageNotFoundErrors", true);
Vymazáno : user_pref("CT1750559.GroupingServerCheckInterval", 1440);
Vymazáno : user_pref("CT1750559.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
Vymazáno : user_pref("CT1750559.Initialize", true);
Vymazáno : user_pref("CT1750559.InitializeCommonPrefs", true);
Vymazáno : user_pref("CT1750559.InstalledDate", "Thu Apr 28 2011 19:17:48 GMT+0200");
Vymazáno : user_pref("CT1750559.InvalidateCache", false);
Vymazáno : user_pref("CT1750559.IsGrouping", false);
Vymazáno : user_pref("CT1750559.IsMulticommunity", false);
Vymazáno : user_pref("CT1750559.IsOpenThankYouPage", true);
Vymazáno : user_pref("CT1750559.IsOpenUninstallPage", true);
Vymazáno : user_pref("CT1750559.LanguagePackLastCheckTime", "Thu Apr 28 2011 19:17:50 GMT+0200");
Vymazáno : user_pref("CT1750559.LanguagePackReloadIntervalMM", 1440);
Vymazáno : user_pref("CT1750559.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...]
Vymazáno : user_pref("CT1750559.LastLogin_2.5.6.0", "Thu Apr 28 2011 19:17:48 GMT+0200");
Vymazáno : user_pref("CT1750559.LatestVersion", "3.3.3.2");
Vymazáno : user_pref("CT1750559.Locale", "en-us");
Vymazáno : user_pref("CT1750559.LoginCache", 4);
Vymazáno : user_pref("CT1750559.MCDetectTooltipHeight", "83");
Vymazáno : user_pref("CT1750559.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
Vymazáno : user_pref("CT1750559.MCDetectTooltipWidth", "295");
Vymazáno : user_pref("CT1750559.RadioIsPodcast", false);
Vymazáno : user_pref("CT1750559.RadioLastCheckTime", "Thu Apr 28 2011 19:17:49 GMT+0200");
Vymazáno : user_pref("CT1750559.RadioLastUpdateIPServer", "3");
Vymazáno : user_pref("CT1750559.RadioLastUpdateServer", "128929877726170000");
Vymazáno : user_pref("CT1750559.RadioMediaID", "11237206");
Vymazáno : user_pref("CT1750559.RadioMediaType", "Media Player");
Vymazáno : user_pref("CT1750559.RadioMenuSelectedID", "EBRadioMenu_CT175055911237206");
Vymazáno : user_pref("CT1750559.RadioStationName", "1.FM%20Dance");
Vymazáno : user_pref("CT1750559.RadioStationURL", "hxxp://dance.1.fm/energydance128k?MSWMExt=.asf");
Vymazáno : user_pref("CT1750559.SHRINK_TOOLBAR", 1);
Vymazáno : user_pref("CT1750559.SavedHomepage", "www.seznam.cz");
Vymazáno : user_pref("CT1750559.SearchEngine", "Search||hxxp://search.conduit.com/Results.aspx?q=UCM_SEARCH_TER[...]
Vymazáno : user_pref("CT1750559.SearchFromAddressBarIsInit", true);
Vymazáno : user_pref("CT1750559.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT175[...]
Vymazáno : user_pref("CT1750559.SearchInNewTabEnabled", true);
Vymazáno : user_pref("CT1750559.SearchInNewTabIntervalMM", 1440);
Vymazáno : user_pref("CT1750559.SearchInNewTabLastCheckTime", "Thu Apr 28 2011 19:17:49 GMT+0200");
Vymazáno : user_pref("CT1750559.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...]
Vymazáno : user_pref("CT1750559.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageServic[...]
Vymazáno : user_pref("CT1750559.SettingsCheckIntervalMin", 120);
Vymazáno : user_pref("CT1750559.SettingsLastCheckTime", "Thu Apr 28 2011 19:17:47 GMT+0200");
Vymazáno : user_pref("CT1750559.SettingsLastUpdate", "1302854560");
Vymazáno : user_pref("CT1750559.ThirdPartyComponentsInterval", 504);
Vymazáno : user_pref("CT1750559.ThirdPartyComponentsLastCheck", "Thu Apr 28 2011 19:17:47 GMT+0200");
Vymazáno : user_pref("CT1750559.ThirdPartyComponentsLastUpdate", "1246786978");
Vymazáno : user_pref("CT1750559.TrusteLinkUrl", "hxxp://trust.conduit.com/EB_ORIGINAL_CTID");
Vymazáno : user_pref("CT1750559.UserID", "UN15234199655916736");
Vymazáno : user_pref("CT1750559.ValidationData_Toolbar", 2);
Vymazáno : user_pref("CT1750559.WeatherNetwork", "");
Vymazáno : user_pref("CT1750559.WeatherPollDate", "Thu Apr 28 2011 19:17:52 GMT+0200");
Vymazáno : user_pref("CT1750559.WeatherUnit", "C");
Vymazáno : user_pref("CT1750559.alertChannelId", "31130");
Vymazáno : user_pref("CT1750559.backendstorage.hxxp://cmg1_conduit-widgets_com/pitsi.state", "4F50454E");
Vymazáno : user_pref("CT1750559.clientLogIsEnabled", false);
Vymazáno : user_pref("CT1750559.clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asm[...]
Vymazáno : user_pref("CT1750559.myStuffEnabled", true);
Vymazáno : user_pref("CT1750559.myStuffPublihserMinWidth", 400);
Vymazáno : user_pref("CT1750559.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...]
Vymazáno : user_pref("CT1750559.myStuffServiceIntervalMM", 1440);
Vymazáno : user_pref("CT1750559.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...]
Vymazáno : user_pref("CT1750559.uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Reg[...]
Vymazáno : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "chrome://browser-region/locale/region.pr[...]
Vymazáno : user_pref("CommunityToolbar.ToolbarsList", "CT1750559");
Vymazáno : user_pref("CommunityToolbar.ToolbarsList2", "CT1750559");
Vymazáno : user_pref("CommunityToolbar.facebook.settingsLastCheckTime", "Thu Apr 28 2011 19:17:49 GMT+0200");
Vymazáno : user_pref("CommunityToolbar.keywordURLSelectedCTID", "CT1750559");
Vymazáno : user_pref("browser.search.defaultthis.engineName", "BS Player Customized Web Search");
Vymazáno : user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT1750559&Sea[...]
Vymazáno : user_pref("browser.search.selectedEngine", "BS Player Customized Web Search");
Vymazáno : user_pref("keyword.URL", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT1750559&q=");
Vymazáno : user_pref("browser.newtab.url", "hxxp://mystart.incredibar.com/mb128?a=6OyKkjwo9M&loc=FF_NT");user_p[...]

Soubor : C:\Users\Renata\AppData\Roaming\Mozilla\Firefox\Profiles\5hmbs2yj.default\prefs.js

C:\Users\Renata\AppData\Roaming\Mozilla\Firefox\Profiles\5hmbs2yj.default\user.js ... Vymazáno !

Vymazáno : user_pref("browser.newtab.url", "hxxp://mystart.incredibar.com/mb128?a=6OyKkjwo9M&loc=FF_NT");user_p[...]

Soubor : C:\Users\Renata\AppData\Roaming\Mozilla\Firefox\Profiles\9dmbk278.default\prefs.js

C:\Users\Renata\AppData\Roaming\Mozilla\Firefox\Profiles\9dmbk278.default\user.js ... Vymazáno !

Vymazáno : user_pref("browser.newtab.url", "hxxp://mystart.incredibar.com/mb128?a=6OyKkjwo9M&loc=FF_NT");user_p[...]

Soubor : C:\Users\Renata\AppData\Roaming\Mozilla\Firefox\Profiles\od3412mv.default\prefs.js

C:\Users\Renata\AppData\Roaming\Mozilla\Firefox\Profiles\od3412mv.default\user.js ... Vymazáno !

Vymazáno : user_pref("browser.search.defaultengine", "Ask.com");
Vymazáno : user_pref("browser.search.defaultenginename", "Ask.com");
Vymazáno : user_pref("browser.search.order.1", "Ask.com");
Vymazáno : user_pref("browser.search.selectedEngine", "Ask.com");
Vymazáno : user_pref("extensions.asktb.cbid", "QR");
Vymazáno : user_pref("extensions.asktb.crumb", "2010.12.01+09.25.40-toolbar002iad-CZ-UHJhZ3VlLEN6ZWNoIFJlcHVibG[...]
Vymazáno : user_pref("extensions.asktb.default-channel-url-mask", "hxxp://www.ask.com/web?q={query}&o={o}&l={l}[...]
Vymazáno : user_pref("extensions.asktb.dtid", "YYYYYYYYCZ");
Vymazáno : user_pref("extensions.asktb.fresh-install", false);
Vymazáno : user_pref("extensions.asktb.l", "dis");
Vymazáno : user_pref("extensions.asktb.last-config-req", "1297789640483");
Vymazáno : user_pref("extensions.asktb.locale", "en_US");
Vymazáno : user_pref("extensions.asktb.o", "16205");
Vymazáno : user_pref("extensions.asktb.overlay-reloaded-using-restart", true);
Vymazáno : user_pref("extensions.asktb.qsrc", "2871");
Vymazáno : user_pref("extensions.asktb.r", "3");
Vymazáno : user_pref("extensions.asktb.search-plugin-suggestions-url", "hxxp://ss.websearch.ask.com/query?qsrc=[...]
Vymazáno : user_pref("extensions.asktb.search-suggestions-enabled", true);
Vymazáno : user_pref("icqtoolbar.allowSendURL", false);
Vymazáno : user_pref("icqtoolbar.engineVerified", false);
Vymazáno : user_pref("icqtoolbar.hiddenElements", "itb_options");
Vymazáno : user_pref("icqtoolbar.installTime", "1288727407");
Vymazáno : user_pref("icqtoolbar.newtab_state", "1");
Vymazáno : user_pref("icqtoolbar.numberOfSearches", 0);
Vymazáno : user_pref("icqtoolbar.previousFFVersion", "3.6.12");
Vymazáno : user_pref("icqtoolbar.skip_default_search", "no");
Vymazáno : user_pref("icqtoolbar.suggestions", false);
Vymazáno : user_pref("icqtoolbar.uninstStatSent", true);
Vymazáno : user_pref("icqtoolbar.uniqueID", "128870542612887058801288727407313");
Vymazáno : user_pref("icqtoolbar.usageStatstTimestamp", 1288814053);
Vymazáno : user_pref("icqtoolbar.voucherHideClicks", 0);
Vymazáno : user_pref("icqtoolbar.voucherMoreLinkClicks", 0);
Vymazáno : user_pref("icqtoolbar.voucherRedeemClicks", 0);
Vymazáno : user_pref("icqtoolbar.voucherWasShown", 0);
Vymazáno : user_pref("icqtoolbar.xmlEnableSuggestions", false);
Vymazáno : user_pref("icqtoolbar.xmlLanguage", "cs");
Vymazáno : user_pref("keyword.URL", "hxxp://websearch.ask.com/redirect?client=ff&src=kw&tb=CDS&o=16205&locale=e[...]
Vymazáno : user_pref("browser.newtab.url", "hxxp://mystart.incredibar.com/mb128?a=6OyKkjwo9M&loc=FF_NT");user_p[...]

Soubor : C:\Users\Renata\AppData\Roaming\Mozilla\Firefox\Profiles\s274s0yb.default\prefs.js

C:\Users\Renata\AppData\Roaming\Mozilla\Firefox\Profiles\s274s0yb.default\user.js ... Vymazáno !

Vymazáno : user_pref("browser.newtab.url", "hxxp://mystart.incredibar.com/mb128?a=6OyKkjwo9M&loc=FF_NT");user_p[...]

Soubor : C:\Users\Renata\AppData\Roaming\Mozilla\Firefox\Profiles\uzgpurg2.default\prefs.js

C:\Users\Renata\AppData\Roaming\Mozilla\Firefox\Profiles\uzgpurg2.default\user.js ... Vymazáno !

Vymazáno : user_pref("CT2481032.1000082.isDisplayHidden", "true");
Vymazáno : user_pref("CT2481032.1000082.state", "{\"state\":\"stopped\",\"text\":\"Californi...\",\"description[...]
Vymazáno : user_pref("CT2481032.CBOpenMAMSettings.enc", "MA==");
Vymazáno : user_pref("CT2481032.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
Vymazáno : user_pref("CT2481032.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"tru[...]
Vymazáno : user_pref("CT2481032.FirstTime", "true");
Vymazáno : user_pref("CT2481032.FirstTimeFF3", "true");
Vymazáno : user_pref("CT2481032.LoginRevertSettingsEnabled", true);
Vymazáno : user_pref("CT2481032.UserID", "UN75412603070472550");
Vymazáno : user_pref("CT2481032.addressBarTakeOverEnabledInHidden", "true");
Vymazáno : user_pref("CT2481032.autoDisableScopes", 14);
Vymazáno : user_pref("CT2481032.cb_experience_000.enc", "MQ==");
Vymazáno : user_pref("CT2481032.cb_firstuse0100.enc", "MQ==");
Vymazáno : user_pref("CT2481032.cbcountry_001.enc", "Q1o=");
Vymazáno : user_pref("CT2481032.cbfirsttime.enc", "VHVlIE5vdiAyNyAyMDEyIDIwOjQ2OjU2IEdNVCswMTAw");
Vymazáno : user_pref("CT2481032.defaultSearch", "false");
Vymazáno : user_pref("CT2481032.enableAlerts", "false");
Vymazáno : user_pref("CT2481032.enableFix404ByUser", "FALSE");
Vymazáno : user_pref("CT2481032.enableSearchFromAddressBar", "false");
Vymazáno : user_pref("CT2481032.firstTimeDialogOpened", "true");
Vymazáno : user_pref("CT2481032.fixPageNotFoundError", "true");
Vymazáno : user_pref("CT2481032.fixPageNotFoundErrorByUser", "true");
Vymazáno : user_pref("CT2481032.fixPageNotFoundErrorInHidden", "true");
Vymazáno : user_pref("CT2481032.fixUrls", true);
Vymazáno : user_pref("CT2481032.hxxp___www_socialgrowthtechnologies_com_couponbuddy_v001.APP_WIN_FEATURES.enc",[...]
Vymazáno : user_pref("CT2481032.installId", "conduitnsisintegration");
Vymazáno : user_pref("CT2481032.installType", "conduitnsisintegration");
Vymazáno : user_pref("CT2481032.isCheckedStartAsHidden", true);
Vymazáno : user_pref("CT2481032.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
Vymazáno : user_pref("CT2481032.isFirstTimeToolbarLoading", "false");
Vymazáno : user_pref("CT2481032.isNewTabEnabled", false);
Vymazáno : user_pref("CT2481032.isPerformedSmartBarTransition", "true");
Vymazáno : user_pref("CT2481032.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
Vymazáno : user_pref("CT2481032.lastNewTabSettings", "{\"isEnabled\":false,\"newTabUrl\":\"hxxp://search.condui[...]
Vymazáno : user_pref("CT2481032.lastVersion", "10.15.2.523");
Vymazáno : user_pref("CT2481032.migrateAppsAndComponents", true);
Vymazáno : user_pref("CT2481032.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"hxxp%[...]
Vymazáno : user_pref("CT2481032.openThankYouPage", "false");
Vymazáno : user_pref("CT2481032.openUninstallPage", "false");
Vymazáno : user_pref("CT2481032.price-gong.bornDate", "{\"dataType\":\"string\",\"data\":\"{\\\"Response\\\":\\[...]
Vymazáno : user_pref("CT2481032.price-gong.isManagedApp", "true");
Vymazáno : user_pref("CT2481032.revertSettingsEnabled", "false");
Vymazáno : user_pref("CT2481032.search.searchAppId", "129058858240125318");
Vymazáno : user_pref("CT2481032.search.searchCount", "0");
Vymazáno : user_pref("CT2481032.searchInNewTabEnabled", "false");
Vymazáno : user_pref("CT2481032.searchInNewTabEnabledByUser", "false");
Vymazáno : user_pref("CT2481032.searchInNewTabEnabledInHidden", "true");
Vymazáno : user_pref("CT2481032.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
Vymazáno : user_pref("CT2481032.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"d[...]
Vymazáno : user_pref("CT2481032.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\[...]
Vymazáno : user_pref("CT2481032.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"d[...]
Vymazáno : user_pref("CT2481032.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"strin[...]
Vymazáno : user_pref("CT2481032.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"strin[...]
Vymazáno : user_pref("CT2481032.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data[...]
Vymazáno : user_pref("CT2481032.serviceLayer_services_app.twitter.user-cnet_lastUpdate", "1354651751436");
Vymazáno : user_pref("CT2481032.serviceLayer_services_app.twitter.user-cnnbrk_lastUpdate", "1354651751577");
Vymazáno : user_pref("CT2481032.serviceLayer_services_app.twitter.user-computeractive_lastUpdate", "13546517517[...]
Vymazáno : user_pref("CT2481032.serviceLayer_services_app.twitter.user-dailymirror_lastUpdate", "1354651751653"[...]
Vymazáno : user_pref("CT2481032.serviceLayer_services_app.twitter.user-google_lastUpdate", "1354651751619");
Vymazáno : user_pref("CT2481032.serviceLayer_services_app.twitter.user-techcrunch_lastUpdate", "1354651751374")[...]
Vymazáno : user_pref("CT2481032.serviceLayer_services_app.twitter.user-thesun_news_lastUpdate", "1354651751640"[...]
Vymazáno : user_pref("CT2481032.serviceLayer_services_app.twitter.user-wired_lastUpdate", "1354651751729");
Vymazáno : user_pref("CT2481032.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1354045607196");
Vymazáno : user_pref("CT2481032.serviceLayer_services_appsMetadata_lastUpdate", "1354651746537");
Vymazáno : user_pref("CT2481032.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1354045608432");
Vymazáno : user_pref("CT2481032.serviceLayer_services_location_lastUpdate", "1369247005199");
Vymazáno : user_pref("CT2481032.serviceLayer_services_login_10.13.40.15_lastUpdate", "1359283103293");
Vymazáno : user_pref("CT2481032.serviceLayer_services_login_10.14.42.7_lastUpdate", "1362516737676");
Vymazáno : user_pref("CT2481032.serviceLayer_services_login_10.14.65.43_lastUpdate", "1366033249087");
Vymazáno : user_pref("CT2481032.serviceLayer_services_login_10.15.0.562_lastUpdate", "1366532718643");
Vymazáno : user_pref("CT2481032.serviceLayer_services_login_10.15.2.523_lastUpdate", "1369246963150");
Vymazáno : user_pref("CT2481032.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1354045607905");
Vymazáno : user_pref("CT2481032.serviceLayer_services_searchAPI_lastUpdate", "1354651746795");
Vymazáno : user_pref("CT2481032.serviceLayer_services_serviceMap_lastUpdate", "1369247005196");
Vymazáno : user_pref("CT2481032.serviceLayer_services_toolbarContextMenu_lastUpdate", "1354045608386");
Vymazáno : user_pref("CT2481032.serviceLayer_services_toolbarSettings_lastUpdate", "1369247005198");
Vymazáno : user_pref("CT2481032.serviceLayer_services_translation_lastUpdate", "1369247005197");
Vymazáno : user_pref("CT2481032.serviceLayer_services_userApps1ec55dac-8dca-406b-9697-5d68893c1c0c_lastUpdate",[...]
Vymazáno : user_pref("CT2481032.serviceLayer_services_userApps_lastUpdate", "1354045640991");
Vymazáno : user_pref("CT2481032.settingsINI", true);
Vymazáno : user_pref("CT2481032.shouldFirstTimeDialog", "false");
Vymazáno : user_pref("CT2481032.showToolbarPermission", "false");
Vymazáno : user_pref("CT2481032.smartbar.CTID", "CT2481032");
Vymazáno : user_pref("CT2481032.smartbar.Uninstall", "0");
Vymazáno : user_pref("CT2481032.smartbar.isHidden", true);
Vymazáno : user_pref("CT2481032.smartbar.toolbarName", "Ashampoo US ");
Vymazáno : user_pref("CT2481032.startPage", "false");
Vymazáno : user_pref("CT2481032.toolbarBornServerTime", "27-11-2012");
Vymazáno : user_pref("CT2481032.toolbarCurrentServerTime", "22-5-2013");
Vymazáno : user_pref("CT2481032.toolbarLoginClientTime", "Tue Apr 16 2013 20:53:27 GMT+0200");
Vymazáno : user_pref("CT2481032.url_history0001.enc", "aHR0cDovL3d3dy5zc2hzb3BhdmEuY3ovaXNhcy9wcnViZXpuYS1rbGFz[...]
Vymazáno : user_pref("CT2481032_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\"[...]
Vymazáno : user_pref("CT3220468.BT_Stats", "{\"last_log\":1348927710,\"uuid\":157883722652164,\"seq_id\":1,\"ss[...]
Vymazáno : user_pref("CT3220468.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
Vymazáno : user_pref("CT3220468.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"tru[...]
Vymazáno : user_pref("CT3220468.FirstTime", "true");
Vymazáno : user_pref("CT3220468.FirstTimeFF3", "true");
Vymazáno : user_pref("CT3220468.LoginRevertSettingsEnabled", true);
Vymazáno : user_pref("CT3220468.RevertSettingsEnabled", true);
Vymazáno : user_pref("CT3220468.UserID", "UN92059843445263539");
Vymazáno : user_pref("CT3220468.addressBarTakeOverEnabledInHidden", "true");
Vymazáno : user_pref("CT3220468.autoDisableScopes", 14);
Vymazáno : user_pref("CT3220468.cbfirsttime", "Sat Sep 29 2012 16:08:29 GMT+0200");
Vymazáno : user_pref("CT3220468.defaultSearch", "FALSE");
Vymazáno : user_pref("CT3220468.enableAlerts", "always");
Vymazáno : user_pref("CT3220468.enableFix404ByUser", "FALSE");
Vymazáno : user_pref("CT3220468.enableSearchFromAddressBar", "FALSE");
Vymazáno : user_pref("CT3220468.firstTimeDialogOpened", "true");
Vymazáno : user_pref("CT3220468.fixPageNotFoundError", "true");
Vymazáno : user_pref("CT3220468.fixPageNotFoundErrorByUser", "true");
Vymazáno : user_pref("CT3220468.fixPageNotFoundErrorInHidden", "true");
Vymazáno : user_pref("CT3220468.fixUrls", true);
Vymazáno : user_pref("CT3220468.installId", "fft6711.tmp.exe");
Vymazáno : user_pref("CT3220468.installType", "XPE");
Vymazáno : user_pref("CT3220468.isCheckedStartAsHidden", true);
Vymazáno : user_pref("CT3220468.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
Vymazáno : user_pref("CT3220468.isFirstTimeToolbarLoading", "false");
Vymazáno : user_pref("CT3220468.isNewTabEnabled", true);
Vymazáno : user_pref("CT3220468.isPerformedSmartBarTransition", "true");
Vymazáno : user_pref("CT3220468.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
Vymazáno : user_pref("CT3220468.isWelcomPage", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
Vymazáno : user_pref("CT3220468.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"hxxp://search.conduit[...]
Vymazáno : user_pref("CT3220468.lastVersion", "10.16.2.509");
Vymazáno : user_pref("CT3220468.migrateAppsAndComponents", true);
Vymazáno : user_pref("CT3220468.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"hxxp%[...]
Vymazáno : user_pref("CT3220468.openThankYouPage", "true");
Vymazáno : user_pref("CT3220468.openUninstallPage", "FALSE");
Vymazáno : user_pref("CT3220468.search.searchAppId", "129813684258939747");
Vymazáno : user_pref("CT3220468.search.searchCount", "0");
Vymazáno : user_pref("CT3220468.searchInNewTabEnabledByUser", "true");
Vymazáno : user_pref("CT3220468.searchInNewTabEnabledInHidden", "true");
Vymazáno : user_pref("CT3220468.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
Vymazáno : user_pref("CT3220468.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"d[...]
Vymazáno : user_pref("CT3220468.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\[...]
Vymazáno : user_pref("CT3220468.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"d[...]
Vymazáno : user_pref("CT3220468.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"strin[...]
Vymazáno : user_pref("CT3220468.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"strin[...]
Vymazáno : user_pref("CT3220468.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data[...]
Vymazáno : user_pref("CT3220468.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data[...]
Vymazáno : user_pref("CT3220468.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1348927697889");
Vymazáno : user_pref("CT3220468.serviceLayer_services_appsMetadata_lastUpdate", "1348927697682");
Vymazáno : user_pref("CT3220468.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1348927698881");
Vymazáno : user_pref("CT3220468.serviceLayer_services_location_lastUpdate", "1369247005202");
Vymazáno : user_pref("CT3220468.serviceLayer_services_login_10.10.27.6_lastUpdate", "1352999678654");
Vymazáno : user_pref("CT3220468.serviceLayer_services_login_10.13.40.15_lastUpdate", "1359283104158");
Vymazáno : user_pref("CT3220468.serviceLayer_services_login_10.14.370.524_lastUpdate", "1366033298693");
Vymazáno : user_pref("CT3220468.serviceLayer_services_login_10.14.40.128_lastUpdate", "1362516735193");
Vymazáno : user_pref("CT3220468.serviceLayer_services_login_10.14.65.43_lastUpdate", "1363554851306");
Vymazáno : user_pref("CT3220468.serviceLayer_services_login_10.15.0.562_lastUpdate", "1369246962905");
Vymazáno : user_pref("CT3220468.serviceLayer_services_login_10.16.2.509_lastUpdate", "1369253499220");
Vymazáno : user_pref("CT3220468.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1348927698841");
Vymazáno : user_pref("CT3220468.serviceLayer_services_searchAPI_lastUpdate", "1348927697133");
Vymazáno : user_pref("CT3220468.serviceLayer_services_serviceMap_lastUpdate", "1369247005200");
Vymazáno : user_pref("CT3220468.serviceLayer_services_toolbarContextMenu_lastUpdate", "1348927698802");
Vymazáno : user_pref("CT3220468.serviceLayer_services_toolbarSettings_lastUpdate", "1369247005202");
Vymazáno : user_pref("CT3220468.serviceLayer_services_translation_lastUpdate", "1369247005201");
Vymazáno : user_pref("CT3220468.settingsINI", true);
Vymazáno : user_pref("CT3220468.shouldFirstTimeDialog", "false");
Vymazáno : user_pref("CT3220468.showToolbarPermission", "false");
Vymazáno : user_pref("CT3220468.smartbar.CTID", "CT3220468");
Vymazáno : user_pref("CT3220468.smartbar.Uninstall", "0");
Vymazáno : user_pref("CT3220468.smartbar.isHidden", true);
Vymazáno : user_pref("CT3220468.smartbar.toolbarName", "uTorrentControl_v2 ");
Vymazáno : user_pref("CT3220468.startPage", "userChanged");
Vymazáno : user_pref("CT3220468.toolbarBornServerTime", "29-9-2012");
Vymazáno : user_pref("CT3220468.toolbarCurrentServerTime", "22-5-2013");
Vymazáno : user_pref("CT3220468.toolbarLoginClientTime", "Tue Mar 19 2013 20:49:51 GMT+0100");
Vymazáno : user_pref("CT3220468.upgradeFromClearSBVersion", true);
Vymazáno : user_pref("CT3220468_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\"[...]
Vymazáno : user_pref("avg.install.userHPSettings", "hxxp://www1.delta-search.com/?affID=119816&babsrc=HP_ss&mnt[...]
Vymazáno : user_pref("avg.install.userSPSettings", "Delta Search");
Vymazáno : user_pref("browser.newtab.url", "hxxp://www1.delta-search.com/?affID=119816&babsrc=NT_ss&mntrId=4E61[...]
Vymazáno : user_pref("browser.search.selectedEngine", "Delta Search");
Vymazáno : user_pref("browser.startup.homepage", "hxxp://www1.delta-search.com/?affID=119816&babsrc=HP_ss&mntrI[...]
Vymazáno : user_pref("extensions.BabylonToolbar.admin", false);
Vymazáno : user_pref("extensions.BabylonToolbar.aflt", "babsst");
Vymazáno : user_pref("extensions.BabylonToolbar.dfltLng", "en");
Vymazáno : user_pref("extensions.BabylonToolbar.excTlbr", false);
Vymazáno : user_pref("extensions.BabylonToolbar.id", "4e614cce00000000000076f1a142e774");
Vymazáno : user_pref("extensions.BabylonToolbar.instlDay", "15565");
Vymazáno : user_pref("extensions.BabylonToolbar.instlRef", "sst");
Vymazáno : user_pref("extensions.BabylonToolbar.prdct", "BabylonToolbar");
Vymazáno : user_pref("extensions.BabylonToolbar.prtnrId", "babylon");
Vymazáno : user_pref("extensions.BabylonToolbar.tlbrId", "base");
Vymazáno : user_pref("extensions.BabylonToolbar.tlbrSrchUrl", "hxxp://www.google.com/search?babsrc=TB_ggl&q=");
Vymazáno : user_pref("extensions.BabylonToolbar.vrsn", "1.6.4.6");
Vymazáno : user_pref("extensions.BabylonToolbar.vrsni", "1.6.4.6");
Vymazáno : user_pref("extensions.BabylonToolbar_i.babExt", "");
Vymazáno : user_pref("extensions.BabylonToolbar_i.babTrack", "affID=112059&tt=120812_bandext_3312_7");
Vymazáno : user_pref("extensions.BabylonToolbar_i.newTab", true);
Vymazáno : user_pref("extensions.BabylonToolbar_i.newTabUrl", "hxxp://search.babylon.com/?affID=112059&tt=12081[...]
Vymazáno : user_pref("extensions.BabylonToolbar_i.smplGrp", "none");
Vymazáno : user_pref("extensions.BabylonToolbar_i.srcExt", "ss");
Vymazáno : user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.6.4.619:03:48");
Vymazáno : user_pref("extensions.incredibar.admin", false);
Vymazáno : user_pref("extensions.incredibar.aflt", "orgnl");
Vymazáno : user_pref("extensions.incredibar.cntry", "CZ");
Vymazáno : user_pref("extensions.incredibar.dfltLng", "");
Vymazáno : user_pref("extensions.incredibar.dfltSrch", false);
Vymazáno : user_pref("extensions.incredibar.did", "10658");
Vymazáno : user_pref("extensions.incredibar.envrmnt", "production");
Vymazáno : user_pref("extensions.incredibar.excTlbr", false);
Vymazáno : user_pref("extensions.incredibar.hdrMd5", "56B95DE1EDE995C4384A7AF67E0AF2A8");
Vymazáno : user_pref("extensions.incredibar.hmpg", false);
Vymazáno : user_pref("extensions.incredibar.id", "4e614cce00000000000076f1a142e774");
Vymazáno : user_pref("extensions.incredibar.installerproductid", "26");
Vymazáno : user_pref("extensions.incredibar.instlDay", "15559");
Vymazáno : user_pref("extensions.incredibar.instlRef", "");
Vymazáno : user_pref("extensions.incredibar.isDcmntCmplt", true);
Vymazáno : user_pref("extensions.incredibar.lastVrsnTs", "1.5.11.1419:22:44");
Vymazáno : user_pref("extensions.incredibar.mntrvrsn", "1.2.0");
Vymazáno : user_pref("extensions.incredibar.newTab", false);
Vymazáno : user_pref("extensions.incredibar.noFFXTlbr", false);
Vymazáno : user_pref("extensions.incredibar.ppd", "");
Vymazáno : user_pref("extensions.incredibar.prdct", "incredibar");
Vymazáno : user_pref("extensions.incredibar.productid", "26");
Vymazáno : user_pref("extensions.incredibar.prtnrId", "Incredibar");
Vymazáno : user_pref("extensions.incredibar.sg", "none");
Vymazáno : user_pref("extensions.incredibar.smplGrp", "none");
Vymazáno : user_pref("extensions.incredibar.tlbrId", "base");
Vymazáno : user_pref("extensions.incredibar.tlbrSrchUrl", "hxxp://mystart.Incredibar.com/?a=6OyKkjwo9M&loc=IB_T[...]
Vymazáno : user_pref("extensions.incredibar.upn2", "6OyKkjwo9M");
Vymazáno : user_pref("extensions.incredibar.upn2n", "92261890875400430");
Vymazáno : user_pref("extensions.incredibar.vrsn", "1.5.11.14");
Vymazáno : user_pref("extensions.incredibar.vrsnTs", "1.5.11.1419:22:44");
Vymazáno : user_pref("extensions.incredibar.vrsni", "1.5.11.14");
Vymazáno : user_pref("extensions.incredibar_i.aflt", "orgnl");
Vymazáno : user_pref("extensions.incredibar_i.dfltLng", "");
Vymazáno : user_pref("extensions.incredibar_i.did", "10658");
Vymazáno : user_pref("extensions.incredibar_i.excTlbr", false);
Vymazáno : user_pref("extensions.incredibar_i.id", "4e614cce00000000000076f1a142e774");
Vymazáno : user_pref("extensions.incredibar_i.installerproductid", "26");
Vymazáno : user_pref("extensions.incredibar_i.instlDay", "15559");
Vymazáno : user_pref("extensions.incredibar_i.instlRef", "");
Vymazáno : user_pref("extensions.incredibar_i.ms_url_id", "");
Vymazáno : user_pref("extensions.incredibar_i.newTab", false);
Vymazáno : user_pref("extensions.incredibar_i.ppd", "");
Vymazáno : user_pref("extensions.incredibar_i.prdct", "incredibar");
Vymazáno : user_pref("extensions.incredibar_i.productid", "26");
Vymazáno : user_pref("extensions.incredibar_i.prtnrId", "Incredibar");
Vymazáno : user_pref("extensions.incredibar_i.smplGrp", "none");
Vymazáno : user_pref("extensions.incredibar_i.tlbrId", "base");
Vymazáno : user_pref("extensions.incredibar_i.tlbrSrchUrl", "hxxp://mystart.Incredibar.com/?a=6OyKkjwo9M&loc=IB[...]
Vymazáno : user_pref("extensions.incredibar_i.upn2", "6OyKkjwo9M");
Vymazáno : user_pref("extensions.incredibar_i.upn2n", "92261890875400430");
Vymazáno : user_pref("extensions.incredibar_i.vrsn", "1.5.11.14");
Vymazáno : user_pref("extensions.incredibar_i.vrsnTs", "1.5.11.1419:22:44");
Vymazáno : user_pref("extensions.incredibar_i.vrsni", "1.5.11.14");
Vymazáno : user_pref("extentions.y2layers.defaultEnableAppsList", "bestvideodownloader,ezLooker,pagerage,buzzdo[...]
Vymazáno : user_pref("extentions.y2layers.installId", "c02629a4-85cd-4f38-ba4b-bb84a0dd7db9");
Vymazáno : user_pref("keyword.URL", "hxxp://eu.ask.com/web?l=dis&o=APN10089&gct=kwd&qsrc=2869&apn_dtid=^PFM004^[...]
Vymazáno : user_pref("smartBar.searchInNewTabOwner", "CT3220468");
Vymazáno : user_pref("smartbar.machineId", "ZOJJT5QCLWUOAKVUIKV+KSLE2FZLN9JRD/MPDX6OHQFBQ5VQ6JEQJWNHCLOVXLIAIKJ[...]
Vymazáno : user_pref("sweetim.toolbar.urls.homepage", "hxxp://search.babylon.com/?affID=112059&tt=120812_bandex[...]
Vymazáno : user_pref("{336D0C35-8A85-403a-B9D2-65C292C39087}.ScriptData_WSG_whiteList", "{\"search.babylon.com\[...]

-\\ Google Chrome v27.0.1453.94

Soubor : C:\Users\Renata\AppData\Local\Google\Chrome\User Data\Default\Preferences

Vymazáno [l.2477] : homepage = "hxxp://www1.delta-search.com/?affID=119816&babsrc=HP_ss&mntrId=4E6176F1A142E774",
Vymazáno [l.2857] : urls_to_restore_on_startup = [ "hxxp://www1.delta-search.com/?affID=119816&babsrc=HP_ss&mntrI[...]

*************************

AdwCleaner[R1].txt - [46382 octets] - [31/05/2013 22:20:58]
AdwCleaner[R2].txt - [46443 octets] - [31/05/2013 22:31:43]
AdwCleaner[S1].txt - [45547 octets] - [31/05/2013 22:32:21]

########## EOF - C:\AdwCleaner[S1].txt - [45608 octets] ##########

[Rudy]

Dejte nový log RSIT.

[karolinaw]

Logfile of random's system information tool 1.09 (written by random/random)
Run by Renata at 2013-05-31 23:02:10
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 38 GB (38%) free of 100 GB
Total RAM: 3055 MB (60% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 23:02:16, on 31.5.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16576)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Program Files\Spyware Terminator\st_rsser.exe
C:\Windows\Explorer.EXE
C:\Windows\System32\rundll32.exe
C:\Program Files\Hewlett-Packard\HP HotKey Support\QLBController.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe
C:\Program Files\IDT\WDM\sttray.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\System32\StikyNot.exe
C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
c:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe
C:\Users\Renata\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Renata\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Renata\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Renata\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Users\Renata\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Main.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Hewlett-Packard\HP Support Framework\HPSF.exe
C:\Users\Renata\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Renata\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Renata\Downloads\RSIT.exe
C:\Program Files\trend micro\Renata.exe
C:\Windows\system32\DllHost.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: (no name) - {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - (no file)
R3 - URLSearchHook: (no name) - {7473b6bd-4691-4744-a82b-7854eb3d70b6} - (no file)
R3 - URLSearchHook: (no name) - {124d001a-bdcb-472f-aa59-bbe7e4bc3204} - (no file)
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [QLBController] C:\Program Files\Hewlett-Packard\HP HotKey Support\QLBController.exe /start
O4 - HKLM\..\Run: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [HPWirelessAssistant] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\DelayedAppStarter.exe 120 C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Main.exe /hidden
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Windows\system32\NeroCheck.exe
O4 - HKLM\..\Run: [MSC] "C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SpywareTerminatorShield] C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe
O4 - HKLM\..\Run: [SpywareTerminatorUpdater] C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe
O4 - HKLM\..\Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [Google Update] "C:\Users\Renata\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [RESTART_STICKY_NOTES] C:\Windows\System32\StikyNot.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Odeslat obrázek do zařízení &Bluetooth... - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Odeslat stránku do zařízení &Bluetooth... - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: @C:\Program Files\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-103 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
O9 - Extra 'Tools' menuitem: @C:\Program Files\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-102 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: @c:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @c:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Program Files\IDT\WDM\aestsrv.exe
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - LSI Corporation - C:\Program Files\LSI SoftModem\agrsmsvc.exe
O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - c:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
O23 - Service: Device Error Recovery Service (dgdersvc) - Devguru Co., Ltd. - C:\Windows\system32\dgdersvc.exe
O23 - Service: FsUsbExService - Teruten - C:\Windows\system32\FsUsbExService.Exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP Support Assistant Service - Hewlett-Packard Company - C:\Program Files\Hewlett-Packard\HP Support Framework\hpsa_service.exe
O23 - Service: HP Wireless Assistant Service - Hewlett-Packard - C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe
O23 - Service: HP Quick Synchronization Service (HPDrvMntSvc.exe) - Hewlett-Packard Company - C:\Program Files\Hewlett-Packard\Shared\HPDrvMntSvc.exe
O23 - Service: HP Hotkey Monitor (hpHotkeyMonitor) - Hewlett-Packard Company - C:\Program Files\Hewlett-Packard\HP HotKey Support\hpHotkeyMonitor.exe
O23 - Service: HP Software Framework Service (hpqwmiex) - Hewlett-Packard Company - C:\Program Files\Hewlett-Packard\Shared\hpqWmiEx.exe
O23 - Service: HP Service (hpsrv) - Hewlett-Packard Company - C:\Windows\system32\Hpservice.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: Spyware Terminator 2012 Realtime Shield Service (ST2012_Svc) - Crawler.com - C:\Program Files\Spyware Terminator\st_rsser.exe
O23 - Service: @%SystemRoot%\system32\stlang.dll,-10122 (STacSV) - IDT, Inc. - C:\Program Files\IDT\WDM\STacSV.exe
O23 - Service: Intel(R) Management & Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

--
End of file - 10207 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3683041670-2158295546-2881036051-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3683041670-2158295546-2881036051-1000UA.job
C:\Windows\tasks\HPCeeScheduleForRenata.job

=========Mozilla firefox=========

ProfilePath - C:\Users\Renata\AppData\Roaming\Mozilla\Firefox\Profiles\0e85her5.default

prefs.js - "browser.startup.homepage" - "www.seznam.cz"
prefs.js - "extensions.enabledItems" - "{ea614400-e918-4741-9a97-7a972ff7c30b}:2.0.10, {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}:2.5.6.0, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.17"

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.7.700.202 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF32_11_7_700_202.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Google.com/GoogleEarthPlugin]
"Description"=Google Earth in your browser
"Path"=C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@google.com/npPicasa3,version=3.0.0]
"Description"=Picasa3 plugin
"Path"=C:\Program Files\Google\Picasa3\npPicasa3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=C:\Windows\system32\Wat\npWatWeb.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.145\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.145\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll

C:\Program Files\Mozilla Firefox\extensions\
{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll

C:\Program Files\Mozilla Firefox\plugins\
NPOFFICE.DLL
nppdf32.dll

C:\Program Files\Mozilla Firefox\searchplugins\
babylon.xml
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Browser Helper - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-10-10 3834016]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}]
HP Network Check Helper - C:\Program Files\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2012-07-09 351136]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2010-03-18 98304]
"QLBController"=C:\Program Files\Hewlett-Packard\HP HotKey Support\QLBController.exe [2010-01-04 254520]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2010-06-04 1791272]
"HPWirelessAssistant"=C:\Program Files\Hewlett-Packard\HP Wireless Assistant\DelayedAppStarter.exe [2009-12-16 8192]
"NeroFilterCheck"=C:\Windows\system32\NeroCheck.exe [2001-07-09 155648]
"MSC"=C:\Program Files\Microsoft Security Client\msseces.exe [2013-01-27 947152]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04 958576]
"SpywareTerminatorShield"=C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe [2013-04-03 2777736]
"SpywareTerminatorUpdater"=C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe [2013-04-03 3684488]
"SysTrayApp"=C:\Program Files\IDT\WDM\sttray.exe [2013-05-30 495708]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"KiesTrayAgent"= []
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1174016]
"Google Update"=C:\Users\Renata\AppData\Local\Google\Update\GoogleUpdate.exe [2012-07-11 116648]
"RESTART_STICKY_NOTES"=C:\Windows\System32\StikyNot.exe [2009-07-14 354304]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"vidc.VP60"=C:\Windows\system32\vp6vfw.dll
"vidc.VP61"=C:\Windows\system32\vp6vfw.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2013-05-31 23:02:10 ----D---- C:\rsit
2013-05-31 22:32:40 ----A---- C:\Windows\DeleteOnReboot.bat
2013-05-31 22:32:21 ----A---- C:\AdwCleaner[S1].txt
2013-05-31 22:31:43 ----A---- C:\AdwCleaner[R2].txt
2013-05-31 22:20:58 ----A---- C:\AdwCleaner[R1].txt
2013-05-31 20:43:29 ----D---- C:\Program Files\Trend Micro
2013-05-31 18:39:17 ----D---- C:\Program Files\CCleaner
2013-05-30 21:39:03 ----A---- C:\Windows\system32\drivers\atikmpag.sys
2013-05-30 21:39:03 ----A---- C:\Windows\system32\drivers\atikmdag.sys
2013-05-30 21:39:03 ----A---- C:\Windows\system32\drivers\ati2erec.dll
2013-05-30 21:39:03 ----A---- C:\Windows\system32\atitmmxx.dll
2013-05-30 21:39:03 ----A---- C:\Windows\system32\atipdlxx.dll
2013-05-30 21:39:03 ----A---- C:\Windows\system32\atipblag.dat
2013-05-30 21:39:03 ----A---- C:\Windows\system32\atioglxx.dll
2013-05-30 21:39:03 ----A---- C:\Windows\system32\atimuixx.dll
2013-05-30 21:39:03 ----A---- C:\Windows\system32\atimpc32.dll
2013-05-30 21:39:03 ----A---- C:\Windows\system32\atiicdxx.dat
2013-05-30 21:39:03 ----A---- C:\Windows\system32\atiglpxx.dll
2013-05-30 21:39:03 ----A---- C:\Windows\system32\atigktxx.dll
2013-05-30 21:39:03 ----A---- C:\Windows\system32\atiesrxx.exe
2013-05-30 21:39:03 ----A---- C:\Windows\system32\atieclxx.exe
2013-05-30 21:39:03 ----A---- C:\Windows\system32\ATIDEMGX.dll
2013-05-30 21:39:03 ----A---- C:\Windows\system32\aticalrt.dll
2013-05-30 21:39:03 ----A---- C:\Windows\system32\aticaldd.dll
2013-05-30 21:39:03 ----A---- C:\Windows\system32\aticalcl.dll
2013-05-30 21:39:03 ----A---- C:\Windows\system32\atiapfxx.exe
2013-05-30 21:39:03 ----A---- C:\Windows\system32\atiadlxx.dll
2013-05-30 21:39:03 ----A---- C:\Windows\system32\amdpcom32.dll
2013-05-30 21:39:02 ----A---- C:\Windows\system32\ati2edxx.dll
2013-05-30 20:32:48 ----A---- C:\Windows\system32\aestecap.dll
2013-05-30 20:32:48 ----A---- C:\Windows\system32\AESTCom.dll
2013-05-30 20:32:48 ----A---- C:\Windows\system32\aestaren.dll
2013-05-30 20:32:48 ----A---- C:\Windows\system32\aestacap.dll
2013-05-30 20:32:47 ----A---- C:\Windows\system32\stlang.dll
2013-05-30 20:32:47 ----A---- C:\Windows\sttray.exe
2013-05-30 20:32:25 ----A---- C:\Windows\system32\staco.dll
2013-05-26 22:20:57 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2013-05-26 22:20:57 ----A---- C:\Windows\system32\elshyph.dll
2013-05-26 22:20:56 ----A---- C:\Windows\system32\wininet.dll
2013-05-26 22:20:56 ----A---- C:\Windows\system32\wextract.exe
2013-05-26 22:20:56 ----A---- C:\Windows\system32\vbscript.dll
2013-05-26 22:20:56 ----A---- C:\Windows\system32\urlmon.dll
2013-05-26 22:20:56 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2013-05-26 22:20:56 ----A---- C:\Windows\system32\msrating.dll
2013-05-26 22:20:56 ----A---- C:\Windows\system32\msls31.dll
2013-05-26 22:20:56 ----A---- C:\Windows\system32\mshtmled.dll
2013-05-26 22:20:56 ----A---- C:\Windows\system32\msfeeds.dll
2013-05-26 22:20:56 ----A---- C:\Windows\system32\jsproxy.dll
2013-05-26 22:20:56 ----A---- C:\Windows\system32\inseng.dll
2013-05-26 22:20:56 ----A---- C:\Windows\system32\iexpress.exe
2013-05-26 22:20:56 ----A---- C:\Windows\system32\iertutil.dll
2013-05-26 22:20:55 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2013-05-26 22:20:55 ----A---- C:\Windows\system32\pngfilt.dll
2013-05-26 22:20:55 ----A---- C:\Windows\system32\occache.dll
2013-05-26 22:20:55 ----A---- C:\Windows\system32\mshtmler.dll
2013-05-26 22:20:55 ----A---- C:\Windows\system32\mshtml.dll
2013-05-26 22:20:55 ----A---- C:\Windows\system32\mshta.exe
2013-05-26 22:20:55 ----A---- C:\Windows\system32\msfeedssync.exe
2013-05-26 22:20:55 ----A---- C:\Windows\system32\msfeedsbs.dll
2013-05-26 22:20:55 ----A---- C:\Windows\system32\jscript9.dll
2013-05-26 22:20:55 ----A---- C:\Windows\system32\jscript.dll
2013-05-26 22:20:55 ----A---- C:\Windows\system32\imgutil.dll
2013-05-26 22:20:55 ----A---- C:\Windows\system32\ieUnatt.exe
2013-05-26 22:20:55 ----A---- C:\Windows\system32\ieui.dll
2013-05-26 22:20:55 ----A---- C:\Windows\system32\iesysprep.dll
2013-05-26 22:20:55 ----A---- C:\Windows\system32\iepeers.dll
2013-05-26 22:20:55 ----A---- C:\Windows\system32\ieframe.dll
2013-05-26 22:20:55 ----A---- C:\Windows\system32\IEAdvpack.dll
2013-05-26 22:20:54 ----A---- C:\Windows\system32\webcheck.dll
2013-05-26 22:20:54 ----A---- C:\Windows\system32\url.dll
2013-05-26 22:20:54 ----A---- C:\Windows\system32\mshtmlmedia.dll
2013-05-26 22:20:54 ----A---- C:\Windows\system32\licmgr10.dll
2013-05-26 22:20:54 ----A---- C:\Windows\system32\iesetup.dll
2013-05-26 22:20:54 ----A---- C:\Windows\system32\iernonce.dll
2013-05-26 22:20:54 ----A---- C:\Windows\system32\iedkcs32.dll
2013-05-26 22:20:54 ----A---- C:\Windows\system32\ieapfltr.dll
2013-05-26 22:20:54 ----A---- C:\Windows\system32\ieapfltr.dat
2013-05-26 22:20:54 ----A---- C:\Windows\system32\ie4uinit.exe
2013-05-26 22:20:54 ----A---- C:\Windows\system32\icardie.dll
2013-05-26 22:20:54 ----A---- C:\Windows\system32\dxtrans.dll
2013-05-26 22:20:54 ----A---- C:\Windows\system32\dxtmsft.dll
2013-05-23 22:32:37 ----D---- C:\Program Files\Cisco
2013-05-23 20:44:38 ----A---- C:\Windows\system32\drivers\sp_rsdrv2.sys
2013-05-23 20:44:22 ----D---- C:\Users\Renata\AppData\Roaming\Spyware Terminator
2013-05-23 20:44:22 ----D---- C:\ProgramData\Spyware Terminator
2013-05-23 20:41:56 ----D---- C:\Program Files\Spyware Terminator
2013-05-23 20:40:47 ----N---- C:\Windows\system32\agrsmdel.exe
2013-05-23 20:40:47 ----N---- C:\Windows\system32\agrsco64.dll
2013-05-23 20:40:10 ----D---- C:\Program Files\LSI SoftModem
2013-05-23 20:38:41 ----N---- C:\Windows\system32\agrscoin.dll
2013-05-23 20:38:41 ----A---- C:\Windows\system32\drivers\AGRSM.sys
2013-05-23 20:38:41 ----A---- C:\Windows\agrsmdel.exe
2013-05-23 20:24:19 ----D---- C:\Windows\Options
2013-05-23 20:23:49 ----D---- C:\Windows\system32\nn-NO
2013-05-23 20:23:49 ----A---- C:\Windows\system32\wgapiloc.dll
2013-05-23 20:23:49 ----A---- C:\Windows\system32\wgapi.dll
2013-05-23 20:23:49 ----A---- C:\Windows\system32\wcapiU.dll
2013-05-23 20:23:49 ----A---- C:\Windows\system32\athihvui.dll
2013-05-23 20:23:49 ----A---- C:\Windows\system32\athihvs.dll
2013-05-23 20:23:49 ----A---- C:\Windows\system32\athcfg11resloc.dll
2013-05-23 20:23:48 ----A---- C:\Windows\system32\wcapi.dll
2013-05-23 20:23:48 ----A---- C:\Windows\system32\athcfg20U.dll
2013-05-23 20:23:48 ----A---- C:\Windows\system32\athcfg20resU.dll
2013-05-23 20:23:48 ----A---- C:\Windows\system32\athcfg20res.dll
2013-05-23 20:23:48 ----A---- C:\Windows\system32\athcfg20.dll
2013-05-15 16:57:11 ----A---- C:\Windows\system32\wwansvc.dll
2013-05-15 16:57:11 ----A---- C:\Windows\system32\wwanprotdim.dll
2013-05-15 16:57:10 ----A---- C:\Windows\system32\win32k.sys
2013-05-15 16:57:04 ----A---- C:\Windows\system32\drivers\dxgmms1.sys
2013-05-15 16:57:04 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2013-05-15 16:56:57 ----A---- C:\Windows\system32\shell32.dll
2013-05-15 16:56:56 ----A---- C:\Windows\system32\consent.exe
2013-05-15 16:56:56 ----A---- C:\Windows\system32\authui.dll
2013-05-15 16:56:55 ----A---- C:\Windows\system32\shdocvw.dll
2013-05-15 16:56:55 ----A---- C:\Windows\system32\appinfo.dll

======List of files/folders modified in the last 1 month======

2013-05-31 23:02:01 ----D---- C:\Windows\Temp
2013-05-31 22:48:16 ----D---- C:\Windows\system32\config
2013-05-31 22:40:52 ----D---- C:\Windows\System32
2013-05-31 22:40:52 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-05-31 22:34:40 ----D---- C:\Windows\system32\drivers
2013-05-31 22:34:38 ----A---- C:\Windows\system32\log.txt
2013-05-31 22:34:34 ----D---- C:\Windows
2013-05-31 22:32:41 ----RD---- C:\Program Files
2013-05-31 22:32:40 ----HD---- C:\ProgramData
2013-05-31 20:48:17 ----SHD---- C:\System Volume Information
2013-05-31 20:46:43 ----D---- C:\Windows\inf
2013-05-31 20:43:34 ----SHD---- C:\Windows\Installer
2013-05-31 19:06:49 ----RD---- C:\Users
2013-05-31 19:04:33 ----D---- C:\Windows\system32\Tasks
2013-05-31 19:01:22 ----HD---- C:\Program Files\InstallShield Installation Information
2013-05-31 19:01:20 ----D---- C:\Program Files\Sega
2013-05-31 19:01:05 ----RSD---- C:\Windows\Fonts
2013-05-31 18:52:24 ----D---- C:\Users\Renata\AppData\Roaming\DAEMON Tools Lite
2013-05-31 18:50:43 ----D---- C:\Windows\Panther
2013-05-31 18:50:43 ----D---- C:\Windows\ModemLogs
2013-05-31 18:50:40 ----D---- C:\Windows\Minidump
2013-05-31 18:50:40 ----D---- C:\Windows\Logs
2013-05-31 18:50:40 ----D---- C:\Windows\debug
2013-05-31 18:33:20 ----D---- C:\ProgramData\Skype
2013-05-31 18:33:19 ----RD---- C:\Program Files\Skype
2013-05-31 18:33:19 ----D---- C:\Program Files\Common Files
2013-05-31 18:33:13 ----D---- C:\Users\Renata\AppData\Roaming\Skype
2013-05-31 18:30:02 ----D---- C:\Program Files\All Ten Fingers
2013-05-30 21:45:45 ----D---- C:\Windows\system32\catroot
2013-05-30 21:45:07 ----D---- C:\Windows\system32\DriverStore
2013-05-30 21:38:37 ----D---- C:\SwSetup
2013-05-30 21:38:34 ----A---- C:\Windows\system32\coinst.dll
2013-05-30 21:38:34 ----A---- C:\Windows\system32\atiuxpag.dll
2013-05-30 21:38:34 ----A---- C:\Windows\system32\atiumdva.dll
2013-05-30 21:38:34 ----A---- C:\Windows\system32\atiumdag.dll
2013-05-30 21:38:34 ----A---- C:\Windows\system32\atiu9pag.dll
2013-05-30 21:38:32 ----A---- C:\Windows\system32\atidxx32.dll
2013-05-30 21:38:32 ----A---- C:\Windows\system32\aticfx32.dll
2013-05-30 20:34:33 ----D---- C:\Program Files\IDT
2013-05-30 20:28:24 ----N---- C:\Windows\system32\stapi32.dll
2013-05-30 20:28:24 ----A---- C:\Windows\system32\stcplx.dll
2013-05-30 20:28:24 ----A---- C:\Windows\system32\stapo.dll
2013-05-30 17:29:57 ----A---- C:\Windows\system32\HP_ActiveX_Patch_NOT_DETECTED.txt
2013-05-29 18:24:18 ----D---- C:\Windows\rescache
2013-05-27 05:43:20 ----D---- C:\Windows\winsxs
2013-05-27 05:33:07 ----D---- C:\Windows\system32\cs-CZ
2013-05-27 05:33:07 ----D---- C:\Program Files\Internet Explorer
2013-05-27 05:33:04 ----D---- C:\Windows\system32\migration
2013-05-27 05:33:04 ----D---- C:\Windows\PolicyDefinitions
2013-05-27 05:33:03 ----D---- C:\Windows\system32\en-US
2013-05-26 22:28:08 ----D---- C:\Windows\system32\catroot2
2013-05-23 20:23:49 ----D---- C:\Windows\system32\zh-TW
2013-05-23 20:23:49 ----D---- C:\Windows\system32\zh-CN
2013-05-23 20:23:49 ----D---- C:\Windows\system32\tr-TR
2013-05-23 20:23:49 ----D---- C:\Windows\system32\sv-SE
2013-05-23 20:23:49 ----D---- C:\Windows\system32\ru-RU
2013-05-23 20:23:49 ----D---- C:\Windows\system32\pt-PT
2013-05-23 20:23:49 ----D---- C:\Windows\system32\pl-PL
2013-05-23 20:23:49 ----D---- C:\Windows\system32\nl-NL
2013-05-23 20:23:49 ----D---- C:\Windows\system32\ko-KR
2013-05-23 20:23:49 ----D---- C:\Windows\system32\ja-JP
2013-05-23 20:23:49 ----D---- C:\Windows\system32\it-IT
2013-05-23 20:23:49 ----D---- C:\Windows\system32\hu-HU
2013-05-23 20:23:49 ----D---- C:\Windows\system32\fr-FR
2013-05-23 20:23:49 ----D---- C:\Windows\system32\fi-FI
2013-05-23 20:23:49 ----D---- C:\Windows\system32\es-ES
2013-05-23 20:23:49 ----D---- C:\Windows\system32\el-GR
2013-05-23 20:23:49 ----D---- C:\Windows\system32\de-DE
2013-05-23 20:23:49 ----D---- C:\Windows\system32\da-DK
2013-05-19 18:59:53 ----D---- C:\Windows\Microsoft.NET
2013-05-19 18:58:52 ----RSD---- C:\Windows\assembly
2013-05-17 06:01:43 ----D---- C:\Windows\Prefetch
2013-05-15 21:26:03 ----D---- C:\Windows\AppPatch
2013-05-15 19:39:38 ----A---- C:\Windows\win.ini
2013-05-15 18:58:33 ----A---- C:\Windows\system32\MRT.exe
2013-05-14 21:37:44 ----A---- C:\Windows\system32\FlashPlayerApp.exe
2013-05-13 19:21:03 ----D---- C:\ProgramData\BrowserProtect
2013-05-09 17:17:19 ----D---- C:\Windows\Tasks
2013-05-02 17:28:50 ----N---- C:\Windows\system32\MpSigStub.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 giveio;giveio; C:\Windows\system32\giveio.sys [1996-04-03 5248]
R0 hpdskflt;HP Filter; C:\Windows\system32\DRIVERS\hpdskflt.sys [2011-05-13 25656]
R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2013-01-20 195296]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R0 speedfan;speedfan; C:\Windows\system32\speedfan.sys [2011-03-18 25240]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2013-04-14 466008]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 175360]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 388096]
R1 MpKsl5421d871;MpKsl5421d871; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{B0A5877F-0A07-4A76-A1CB-D5E8E1422882}\MpKsl5421d871.sys [2013-05-31 29904]
R1 sp_rsdrv2;Spyware Terminator 2012 Realtime Shield Driver; \??\C:\Windows\system32\drivers\sp_rsdrv2.sys [2011-06-21 32768]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 48128]
R2 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2013-01-20 100328]
R3 Accelerometer;HP Mobile Data Protection Sensor; C:\Windows\system32\DRIVERS\Accelerometer.sys [2011-05-13 35896]
R3 AgereSoftModem;Agere Systems Soft Modem; C:\Windows\system32\DRIVERS\AGRSM.sys [2013-05-23 1163328]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2013-05-30 5590016]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2013-05-30 210432]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athr.sys [2011-02-22 2184704]
R3 AtiHdmiService;ATI Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\AtiHdmi.sys [2010-03-09 107024]
R3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 34816]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 93696]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 60416]
R3 btwaudio;Bluetooth Audio Device Service; C:\Windows\system32\drivers\btwaudio.sys [2009-09-17 86056]
R3 btwavdt;Bluetooth AVDT; C:\Windows\system32\DRIVERS\btwavdt.sys [2009-09-17 108072]
R3 btwl2cap;Bluetooth L2CAP Service; C:\Windows\system32\DRIVERS\btwl2cap.sys [2009-09-17 29472]
R3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys [2009-09-17 18472]
R3 dgderdrv;dgderdrv; C:\Windows\System32\drivers\dgderdrv.sys [2009-12-22 18136]
R3 FsUsbExDisk;FsUsbExDisk; \??\C:\Windows\system32\FsUsbExDisk.SYS [2009-12-22 36640]
R3 HECI;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECI.sys [2009-09-17 41088]
R3 HpqKbFiltr;HpqKbFilter Driver; C:\Windows\system32\DRIVERS\HpqKbFiltr.sys [2009-07-16 15872]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 129536]
R3 SNP2UVC;USB2.0 PC Camera (SNP2UVC); C:\Windows\system32\DRIVERS\snp2uvc.sys [2009-12-18 1763968]
R3 STHDA;@%SystemRoot%\system32\stlang.dll,-10322; C:\Windows\system32\DRIVERS\stwrt.sys [2013-05-30 431616]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2010-06-04 1303728]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 14336]
R4 ps7aprwb;Simon the Sorcerer Synchronization Driver (ps7aprwb); C:\Windows\system32\drivers\ps7aprwb.sys []
S2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;Ovladač filtru AMD portu AGP; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2013-05-30 5590016]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 393728]
S3 ew_hwusbdev;Huawei MobileBroadband USB PNP Device; C:\Windows\system32\DRIVERS\ew_hwusbdev.sys []
S3 ew_usbenumfilter;huawei_CompositeFilter; C:\Windows\system32\DRIVERS\ew_usbenumfilter.sys []
S3 huawei_cdcacm;huawei_cdcacm; C:\Windows\system32\DRIVERS\ew_jucdcacm.sys []
S3 huawei_enumerator;huawei_enumerator; C:\Windows\system32\DRIVERS\ew_jubusenum.sys []
S3 huawei_ext_ctrl;huawei_ext_ctrl; C:\Windows\system32\DRIVERS\ew_juextctrl.sys []
S3 huawei_wwanecm;huawei_wwanecm; C:\Windows\system32\DRIVERS\ew_juwwanecm.sys []
S3 nmwcd;Nokia USB Phone Parent; C:\Windows\system32\drivers\ccdcmb.sys []
S3 nmwcdc;Nokia USB Generic; C:\Windows\system32\drivers\ccdcmbo.sys []
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfd.sys []
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 133632]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUStor.sys [2009-11-11 181792]
S3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt86win7.sys [2010-01-12 257568]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 5632]
S3 sisagp;Filtr SIS sběrnice AGP; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 28032]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 52224]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 35840]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltj.sys []
S3 viaagp;Filtr VIA sběrnice AGP; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 17920]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 35968]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-05-10 65640]
R2 AESTFilters;Andrea ST Filters Service; C:\Program Files\IDT\WDM\aestsrv.exe [2013-05-30 81920]
R2 AgereModemAudio;Agere Modem Call Progress Audio; C:\Program Files\LSI SoftModem\agrsmsvc.exe [2013-05-23 14336]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2013-05-30 176128]
R2 btwdins;Bluetooth Service; c:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe [2009-09-04 595232]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 dgdersvc;Device Error Recovery Service; C:\Windows\system32\dgdersvc.exe [2009-12-22 95568]
R2 FsUsbExService;FsUsbExService; C:\Windows\system32\FsUsbExService.Exe [2009-12-22 217088]
R2 HP Support Assistant Service;HP Support Assistant Service; C:\Program Files\Hewlett-Packard\HP Support Framework\hpsa_service.exe [2012-09-27 86528]
R2 HP Wireless Assistant Service;HP Wireless Assistant Service; C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe [2009-12-16 102968]
R2 HPDrvMntSvc.exe;HP Quick Synchronization Service; C:\Program Files\Hewlett-Packard\Shared\HPDrvMntSvc.exe [2012-08-10 197536]
R2 hpHotkeyMonitor;HP Hotkey Monitor; C:\Program Files\Hewlett-Packard\HP HotKey Support\hpHotkeyMonitor.exe [2010-01-04 264248]
R2 hpsrv;HP Service; C:\Windows\system32\Hpservice.exe [2011-05-13 26168]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2009-11-04 268824]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-19 322120]
R2 MsMpSvc;Microsoft Antimalware Service; C:\Program Files\Microsoft Security Client\MsMpEng.exe [2013-01-27 20456]
R2 ST2012_Svc;Spyware Terminator 2012 Realtime Shield Service; C:\Program Files\Spyware Terminator\st_rsser.exe [2013-04-03 587912]
R2 STacSV;@%SystemRoot%\system32\stlang.dll,-10122; C:\Program Files\IDT\WDM\STacSV.exe [2013-05-30 254034]
R2 UNS;Intel(R) Management & Security Application User Notification Service; C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2009-11-04 2320920]
R3 hpqwmiex;HP Software Framework Service; C:\Program Files\Hewlett-Packard\Shared\hpqWmiEx.exe [2012-08-10 1001376]
R3 NisSrv;@C:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; C:\Program Files\Microsoft Security Client\NisSrv.exe [2013-01-27 295232]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2012-04-01 116648]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-05-14 256904]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2012-04-01 116648]
S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2011-05-10 136120]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2013-04-24 115608]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2010-07-25 1343400]

-----------------EOF-----------------

[Rudy]

Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:

:files
C:\Program Files\Skype\Toolbars
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3683041670-2158295546-2881036051-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3683041670-2158295546-2881036051-1000UA.job

:reg
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]

:commands
[Purity]
[Emptytemp]
[Emptyflash]

a klikněte na >MoveIt!<. Po skenu restartujte PC a dejte nový log RSIT.

[karolinaw]

Logfile of random's system information tool 1.09 (written by random/random)
Run by Renata at 2013-06-01 12:05:11
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 38 GB (38%) free of 100 GB
Total RAM: 3055 MB (64% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:05:19, on 1.6.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16576)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Spyware Terminator\st_rsser.exe
C:\Program Files\Hewlett-Packard\HP HotKey Support\QLBController.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\DelayedAppStarter.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe
C:\Program Files\IDT\WDM\sttray.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Users\Renata\AppData\Local\Google\Update\GoogleUpdate.exe
C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe
C:\Windows\System32\StikyNot.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
c:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe
C:\Users\Renata\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Renata\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Renata\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Users\Renata\Downloads\RSIT.exe
C:\Program Files\trend micro\Renata.exe
C:\Windows\system32\DllHost.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: (no name) - {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - (no file)
R3 - URLSearchHook: (no name) - {7473b6bd-4691-4744-a82b-7854eb3d70b6} - (no file)
R3 - URLSearchHook: (no name) - {124d001a-bdcb-472f-aa59-bbe7e4bc3204} - (no file)
O2 - BHO: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [QLBController] C:\Program Files\Hewlett-Packard\HP HotKey Support\QLBController.exe /start
O4 - HKLM\..\Run: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [HPWirelessAssistant] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\DelayedAppStarter.exe 120 C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Main.exe /hidden
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Windows\system32\NeroCheck.exe
O4 - HKLM\..\Run: [MSC] "C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SpywareTerminatorShield] C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe
O4 - HKLM\..\Run: [SpywareTerminatorUpdater] C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe
O4 - HKLM\..\Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [Google Update] "C:\Users\Renata\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [RESTART_STICKY_NOTES] C:\Windows\System32\StikyNot.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Odeslat obrázek do zařízení &Bluetooth... - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Odeslat stránku do zařízení &Bluetooth... - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: @C:\Program Files\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-103 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
O9 - Extra 'Tools' menuitem: @C:\Program Files\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-102 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (file missing)
O9 - Extra 'Tools' menuitem: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (file missing)
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: @c:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @c:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (file missing)
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Program Files\IDT\WDM\aestsrv.exe
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - LSI Corporation - C:\Program Files\LSI SoftModem\agrsmsvc.exe
O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - c:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
O23 - Service: Device Error Recovery Service (dgdersvc) - Devguru Co., Ltd. - C:\Windows\system32\dgdersvc.exe
O23 - Service: FsUsbExService - Teruten - C:\Windows\system32\FsUsbExService.Exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP Support Assistant Service - Hewlett-Packard Company - C:\Program Files\Hewlett-Packard\HP Support Framework\hpsa_service.exe
O23 - Service: HP Wireless Assistant Service - Hewlett-Packard - C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe
O23 - Service: HP Quick Synchronization Service (HPDrvMntSvc.exe) - Hewlett-Packard Company - C:\Program Files\Hewlett-Packard\Shared\HPDrvMntSvc.exe
O23 - Service: HP Hotkey Monitor (hpHotkeyMonitor) - Hewlett-Packard Company - C:\Program Files\Hewlett-Packard\HP HotKey Support\hpHotkeyMonitor.exe
O23 - Service: HP Software Framework Service (hpqwmiex) - Hewlett-Packard Company - C:\Program Files\Hewlett-Packard\Shared\hpqWmiEx.exe
O23 - Service: HP Service (hpsrv) - Hewlett-Packard Company - C:\Windows\system32\Hpservice.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: Spyware Terminator 2012 Realtime Shield Service (ST2012_Svc) - Crawler.com - C:\Program Files\Spyware Terminator\st_rsser.exe
O23 - Service: @%SystemRoot%\system32\stlang.dll,-10122 (STacSV) - IDT, Inc. - C:\Program Files\IDT\WDM\STacSV.exe
O23 - Service: Intel(R) Management & Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

--
End of file - 9737 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\HPCeeScheduleForRenata.job

=========Mozilla firefox=========

ProfilePath - C:\Users\Renata\AppData\Roaming\Mozilla\Firefox\Profiles\0e85her5.default

prefs.js - "browser.startup.homepage" - "www.seznam.cz"
prefs.js - "extensions.enabledItems" - "{ea614400-e918-4741-9a97-7a972ff7c30b}:2.0.10, {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}:2.5.6.0, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.17"

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.7.700.202 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF32_11_7_700_202.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Google.com/GoogleEarthPlugin]
"Description"=Google Earth in your browser
"Path"=C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@google.com/npPicasa3,version=3.0.0]
"Description"=Picasa3 plugin
"Path"=C:\Program Files\Google\Picasa3\npPicasa3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=C:\Windows\system32\Wat\npWatWeb.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.145\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.145\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll

C:\Program Files\Mozilla Firefox\extensions\
{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll

C:\Program Files\Mozilla Firefox\plugins\
NPOFFICE.DLL
nppdf32.dll

C:\Program Files\Mozilla Firefox\searchplugins\
babylon.xml
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}]
HP Network Check Helper - C:\Program Files\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2012-07-09 351136]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2010-03-18 98304]
"QLBController"=C:\Program Files\Hewlett-Packard\HP HotKey Support\QLBController.exe [2010-01-04 254520]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2010-06-04 1791272]
"HPWirelessAssistant"=C:\Program Files\Hewlett-Packard\HP Wireless Assistant\DelayedAppStarter.exe [2009-12-16 8192]
"NeroFilterCheck"=C:\Windows\system32\NeroCheck.exe [2001-07-09 155648]
"MSC"=C:\Program Files\Microsoft Security Client\msseces.exe [2013-01-27 947152]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04 958576]
"SpywareTerminatorShield"=C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe [2013-04-03 2777736]
"SpywareTerminatorUpdater"=C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe [2013-04-03 3684488]
"SysTrayApp"=C:\Program Files\IDT\WDM\sttray.exe [2013-05-30 495708]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"KiesTrayAgent"= []
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1174016]
"Google Update"=C:\Users\Renata\AppData\Local\Google\Update\GoogleUpdate.exe [2012-07-11 116648]
"RESTART_STICKY_NOTES"=C:\Windows\System32\StikyNot.exe [2009-07-14 354304]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"vidc.VP60"=C:\Windows\system32\vp6vfw.dll
"vidc.VP61"=C:\Windows\system32\vp6vfw.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2013-06-01 12:02:07 ----D---- C:\_OTM
2013-05-31 23:02:10 ----D---- C:\rsit
2013-05-31 22:32:40 ----A---- C:\Windows\DeleteOnReboot.bat
2013-05-31 22:32:21 ----A---- C:\AdwCleaner[S1].txt
2013-05-31 22:31:43 ----A---- C:\AdwCleaner[R2].txt
2013-05-31 22:20:58 ----A---- C:\AdwCleaner[R1].txt
2013-05-31 20:43:29 ----D---- C:\Program Files\Trend Micro
2013-05-31 18:39:17 ----D---- C:\Program Files\CCleaner
2013-05-30 21:39:03 ----A---- C:\Windows\system32\drivers\atikmpag.sys
2013-05-30 21:39:03 ----A---- C:\Windows\system32\drivers\atikmdag.sys
2013-05-30 21:39:03 ----A---- C:\Windows\system32\drivers\ati2erec.dll
2013-05-30 21:39:03 ----A---- C:\Windows\system32\atitmmxx.dll
2013-05-30 21:39:03 ----A---- C:\Windows\system32\atipdlxx.dll
2013-05-30 21:39:03 ----A---- C:\Windows\system32\atipblag.dat
2013-05-30 21:39:03 ----A---- C:\Windows\system32\atioglxx.dll
2013-05-30 21:39:03 ----A---- C:\Windows\system32\atimuixx.dll
2013-05-30 21:39:03 ----A---- C:\Windows\system32\atimpc32.dll
2013-05-30 21:39:03 ----A---- C:\Windows\system32\atiicdxx.dat
2013-05-30 21:39:03 ----A---- C:\Windows\system32\atiglpxx.dll
2013-05-30 21:39:03 ----A---- C:\Windows\system32\atigktxx.dll
2013-05-30 21:39:03 ----A---- C:\Windows\system32\atiesrxx.exe
2013-05-30 21:39:03 ----A---- C:\Windows\system32\atieclxx.exe
2013-05-30 21:39:03 ----A---- C:\Windows\system32\ATIDEMGX.dll
2013-05-30 21:39:03 ----A---- C:\Windows\system32\aticalrt.dll
2013-05-30 21:39:03 ----A---- C:\Windows\system32\aticaldd.dll
2013-05-30 21:39:03 ----A---- C:\Windows\system32\aticalcl.dll
2013-05-30 21:39:03 ----A---- C:\Windows\system32\atiapfxx.exe
2013-05-30 21:39:03 ----A---- C:\Windows\system32\atiadlxx.dll
2013-05-30 21:39:03 ----A---- C:\Windows\system32\amdpcom32.dll
2013-05-30 21:39:02 ----A---- C:\Windows\system32\ati2edxx.dll
2013-05-30 20:32:48 ----A---- C:\Windows\system32\aestecap.dll
2013-05-30 20:32:48 ----A---- C:\Windows\system32\AESTCom.dll
2013-05-30 20:32:48 ----A---- C:\Windows\system32\aestaren.dll
2013-05-30 20:32:48 ----A---- C:\Windows\system32\aestacap.dll
2013-05-30 20:32:47 ----A---- C:\Windows\system32\stlang.dll
2013-05-30 20:32:47 ----A---- C:\Windows\sttray.exe
2013-05-30 20:32:25 ----A---- C:\Windows\system32\staco.dll
2013-05-26 22:20:57 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2013-05-26 22:20:57 ----A---- C:\Windows\system32\elshyph.dll
2013-05-26 22:20:56 ----A---- C:\Windows\system32\wininet.dll
2013-05-26 22:20:56 ----A---- C:\Windows\system32\wextract.exe
2013-05-26 22:20:56 ----A---- C:\Windows\system32\vbscript.dll
2013-05-26 22:20:56 ----A---- C:\Windows\system32\urlmon.dll
2013-05-26 22:20:56 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2013-05-26 22:20:56 ----A---- C:\Windows\system32\msrating.dll
2013-05-26 22:20:56 ----A---- C:\Windows\system32\msls31.dll
2013-05-26 22:20:56 ----A---- C:\Windows\system32\mshtmled.dll
2013-05-26 22:20:56 ----A---- C:\Windows\system32\msfeeds.dll
2013-05-26 22:20:56 ----A---- C:\Windows\system32\jsproxy.dll
2013-05-26 22:20:56 ----A---- C:\Windows\system32\inseng.dll
2013-05-26 22:20:56 ----A---- C:\Windows\system32\iexpress.exe
2013-05-26 22:20:56 ----A---- C:\Windows\system32\iertutil.dll
2013-05-26 22:20:55 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2013-05-26 22:20:55 ----A---- C:\Windows\system32\pngfilt.dll
2013-05-26 22:20:55 ----A---- C:\Windows\system32\occache.dll
2013-05-26 22:20:55 ----A---- C:\Windows\system32\mshtmler.dll
2013-05-26 22:20:55 ----A---- C:\Windows\system32\mshtml.dll
2013-05-26 22:20:55 ----A---- C:\Windows\system32\mshta.exe
2013-05-26 22:20:55 ----A---- C:\Windows\system32\msfeedssync.exe
2013-05-26 22:20:55 ----A---- C:\Windows\system32\msfeedsbs.dll
2013-05-26 22:20:55 ----A---- C:\Windows\system32\jscript9.dll
2013-05-26 22:20:55 ----A---- C:\Windows\system32\jscript.dll
2013-05-26 22:20:55 ----A---- C:\Windows\system32\imgutil.dll
2013-05-26 22:20:55 ----A---- C:\Windows\system32\ieUnatt.exe
2013-05-26 22:20:55 ----A---- C:\Windows\system32\ieui.dll
2013-05-26 22:20:55 ----A---- C:\Windows\system32\iesysprep.dll
2013-05-26 22:20:55 ----A---- C:\Windows\system32\iepeers.dll
2013-05-26 22:20:55 ----A---- C:\Windows\system32\ieframe.dll
2013-05-26 22:20:55 ----A---- C:\Windows\system32\IEAdvpack.dll
2013-05-26 22:20:54 ----A---- C:\Windows\system32\webcheck.dll
2013-05-26 22:20:54 ----A---- C:\Windows\system32\url.dll
2013-05-26 22:20:54 ----A---- C:\Windows\system32\mshtmlmedia.dll
2013-05-26 22:20:54 ----A---- C:\Windows\system32\licmgr10.dll
2013-05-26 22:20:54 ----A---- C:\Windows\system32\iesetup.dll
2013-05-26 22:20:54 ----A---- C:\Windows\system32\iernonce.dll
2013-05-26 22:20:54 ----A---- C:\Windows\system32\iedkcs32.dll
2013-05-26 22:20:54 ----A---- C:\Windows\system32\ieapfltr.dll
2013-05-26 22:20:54 ----A---- C:\Windows\system32\ieapfltr.dat
2013-05-26 22:20:54 ----A---- C:\Windows\system32\ie4uinit.exe
2013-05-26 22:20:54 ----A---- C:\Windows\system32\icardie.dll
2013-05-26 22:20:54 ----A---- C:\Windows\system32\dxtrans.dll
2013-05-26 22:20:54 ----A---- C:\Windows\system32\dxtmsft.dll
2013-05-23 22:32:37 ----D---- C:\Program Files\Cisco
2013-05-23 20:44:38 ----A---- C:\Windows\system32\drivers\sp_rsdrv2.sys
2013-05-23 20:44:22 ----D---- C:\Users\Renata\AppData\Roaming\Spyware Terminator
2013-05-23 20:44:22 ----D---- C:\ProgramData\Spyware Terminator
2013-05-23 20:41:56 ----D---- C:\Program Files\Spyware Terminator
2013-05-23 20:40:47 ----N---- C:\Windows\system32\agrsmdel.exe
2013-05-23 20:40:47 ----N---- C:\Windows\system32\agrsco64.dll
2013-05-23 20:40:10 ----D---- C:\Program Files\LSI SoftModem
2013-05-23 20:38:41 ----N---- C:\Windows\system32\agrscoin.dll
2013-05-23 20:38:41 ----A---- C:\Windows\system32\drivers\AGRSM.sys
2013-05-23 20:38:41 ----A---- C:\Windows\agrsmdel.exe
2013-05-23 20:24:19 ----D---- C:\Windows\Options
2013-05-23 20:23:49 ----D---- C:\Windows\system32\nn-NO
2013-05-23 20:23:49 ----A---- C:\Windows\system32\wgapiloc.dll
2013-05-23 20:23:49 ----A---- C:\Windows\system32\wgapi.dll
2013-05-23 20:23:49 ----A---- C:\Windows\system32\wcapiU.dll
2013-05-23 20:23:49 ----A---- C:\Windows\system32\athihvui.dll
2013-05-23 20:23:49 ----A---- C:\Windows\system32\athihvs.dll
2013-05-23 20:23:49 ----A---- C:\Windows\system32\athcfg11resloc.dll
2013-05-23 20:23:48 ----A---- C:\Windows\system32\wcapi.dll
2013-05-23 20:23:48 ----A---- C:\Windows\system32\athcfg20U.dll
2013-05-23 20:23:48 ----A---- C:\Windows\system32\athcfg20resU.dll
2013-05-23 20:23:48 ----A---- C:\Windows\system32\athcfg20res.dll
2013-05-23 20:23:48 ----A---- C:\Windows\system32\athcfg20.dll
2013-05-15 16:57:11 ----A---- C:\Windows\system32\wwansvc.dll
2013-05-15 16:57:11 ----A---- C:\Windows\system32\wwanprotdim.dll
2013-05-15 16:57:10 ----A---- C:\Windows\system32\win32k.sys
2013-05-15 16:57:04 ----A---- C:\Windows\system32\drivers\dxgmms1.sys
2013-05-15 16:57:04 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2013-05-15 16:56:57 ----A---- C:\Windows\system32\shell32.dll
2013-05-15 16:56:56 ----A---- C:\Windows\system32\consent.exe
2013-05-15 16:56:56 ----A---- C:\Windows\system32\authui.dll
2013-05-15 16:56:55 ----A---- C:\Windows\system32\shdocvw.dll
2013-05-15 16:56:55 ----A---- C:\Windows\system32\appinfo.dll

======List of files/folders modified in the last 1 month======

2013-06-01 12:04:53 ----D---- C:\Windows\Temp
2013-06-01 12:03:53 ----A---- C:\Windows\system32\log.txt
2013-06-01 12:02:52 ----D---- C:\Windows\system32\config
2013-06-01 12:02:32 ----RD---- C:\Program Files\Skype
2013-06-01 12:02:32 ----D---- C:\Windows\Tasks
2013-06-01 11:58:59 ----D---- C:\Windows\System32
2013-05-31 22:40:52 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-05-31 22:34:40 ----D---- C:\Windows\system32\drivers
2013-05-31 22:34:34 ----D---- C:\Windows
2013-05-31 22:32:41 ----RD---- C:\Program Files
2013-05-31 22:32:40 ----HD---- C:\ProgramData
2013-05-31 20:48:17 ----SHD---- C:\System Volume Information
2013-05-31 20:46:43 ----D---- C:\Windows\inf
2013-05-31 20:43:34 ----SHD---- C:\Windows\Installer
2013-05-31 19:06:49 ----RD---- C:\Users
2013-05-31 19:04:33 ----D---- C:\Windows\system32\Tasks
2013-05-31 19:01:22 ----HD---- C:\Program Files\InstallShield Installation Information
2013-05-31 19:01:20 ----D---- C:\Program Files\Sega
2013-05-31 19:01:05 ----RSD---- C:\Windows\Fonts
2013-05-31 18:52:24 ----D---- C:\Users\Renata\AppData\Roaming\DAEMON Tools Lite
2013-05-31 18:50:43 ----D---- C:\Windows\Panther
2013-05-31 18:50:43 ----D---- C:\Windows\ModemLogs
2013-05-31 18:50:40 ----D---- C:\Windows\Minidump
2013-05-31 18:50:40 ----D---- C:\Windows\Logs
2013-05-31 18:50:40 ----D---- C:\Windows\debug
2013-05-31 18:33:20 ----D---- C:\ProgramData\Skype
2013-05-31 18:33:19 ----D---- C:\Program Files\Common Files
2013-05-31 18:33:13 ----D---- C:\Users\Renata\AppData\Roaming\Skype
2013-05-31 18:30:02 ----D---- C:\Program Files\All Ten Fingers
2013-05-30 21:45:45 ----D---- C:\Windows\system32\catroot
2013-05-30 21:45:07 ----D---- C:\Windows\system32\DriverStore
2013-05-30 21:38:37 ----D---- C:\SwSetup
2013-05-30 21:38:34 ----A---- C:\Windows\system32\coinst.dll
2013-05-30 21:38:34 ----A---- C:\Windows\system32\atiuxpag.dll
2013-05-30 21:38:34 ----A---- C:\Windows\system32\atiumdva.dll
2013-05-30 21:38:34 ----A---- C:\Windows\system32\atiumdag.dll
2013-05-30 21:38:34 ----A---- C:\Windows\system32\atiu9pag.dll
2013-05-30 21:38:32 ----A---- C:\Windows\system32\atidxx32.dll
2013-05-30 21:38:32 ----A---- C:\Windows\system32\aticfx32.dll
2013-05-30 20:34:33 ----D---- C:\Program Files\IDT
2013-05-30 20:28:24 ----N---- C:\Windows\system32\stapi32.dll
2013-05-30 20:28:24 ----A---- C:\Windows\system32\stcplx.dll
2013-05-30 20:28:24 ----A---- C:\Windows\system32\stapo.dll
2013-05-30 17:29:57 ----A---- C:\Windows\system32\HP_ActiveX_Patch_NOT_DETECTED.txt
2013-05-29 18:24:18 ----D---- C:\Windows\rescache
2013-05-27 05:43:20 ----D---- C:\Windows\winsxs
2013-05-27 05:33:07 ----D---- C:\Windows\system32\cs-CZ
2013-05-27 05:33:07 ----D---- C:\Program Files\Internet Explorer
2013-05-27 05:33:04 ----D---- C:\Windows\system32\migration
2013-05-27 05:33:04 ----D---- C:\Windows\PolicyDefinitions
2013-05-27 05:33:03 ----D---- C:\Windows\system32\en-US
2013-05-26 22:28:08 ----D---- C:\Windows\system32\catroot2
2013-05-23 20:23:49 ----D---- C:\Windows\system32\zh-TW
2013-05-23 20:23:49 ----D---- C:\Windows\system32\zh-CN
2013-05-23 20:23:49 ----D---- C:\Windows\system32\tr-TR
2013-05-23 20:23:49 ----D---- C:\Windows\system32\sv-SE
2013-05-23 20:23:49 ----D---- C:\Windows\system32\ru-RU
2013-05-23 20:23:49 ----D---- C:\Windows\system32\pt-PT
2013-05-23 20:23:49 ----D---- C:\Windows\system32\pl-PL
2013-05-23 20:23:49 ----D---- C:\Windows\system32\nl-NL
2013-05-23 20:23:49 ----D---- C:\Windows\system32\ko-KR
2013-05-23 20:23:49 ----D---- C:\Windows\system32\ja-JP
2013-05-23 20:23:49 ----D---- C:\Windows\system32\it-IT
2013-05-23 20:23:49 ----D---- C:\Windows\system32\hu-HU
2013-05-23 20:23:49 ----D---- C:\Windows\system32\fr-FR
2013-05-23 20:23:49 ----D---- C:\Windows\system32\fi-FI
2013-05-23 20:23:49 ----D---- C:\Windows\system32\es-ES
2013-05-23 20:23:49 ----D---- C:\Windows\system32\el-GR
2013-05-23 20:23:49 ----D---- C:\Windows\system32\de-DE
2013-05-23 20:23:49 ----D---- C:\Windows\system32\da-DK
2013-05-19 18:59:53 ----D---- C:\Windows\Microsoft.NET
2013-05-19 18:58:52 ----RSD---- C:\Windows\assembly
2013-05-17 06:01:43 ----D---- C:\Windows\Prefetch
2013-05-15 21:26:03 ----D---- C:\Windows\AppPatch
2013-05-15 19:39:38 ----A---- C:\Windows\win.ini
2013-05-15 18:58:33 ----A---- C:\Windows\system32\MRT.exe
2013-05-14 21:37:44 ----A---- C:\Windows\system32\FlashPlayerApp.exe
2013-05-13 19:21:03 ----D---- C:\ProgramData\BrowserProtect
2013-05-02 17:28:50 ----N---- C:\Windows\system32\MpSigStub.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 giveio;giveio; C:\Windows\system32\giveio.sys [1996-04-03 5248]
R0 hpdskflt;HP Filter; C:\Windows\system32\DRIVERS\hpdskflt.sys [2011-05-13 25656]
R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2013-01-20 195296]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R0 speedfan;speedfan; C:\Windows\system32\speedfan.sys [2011-03-18 25240]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2013-04-14 466008]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 175360]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 388096]
R1 MpKsl710efd9f;MpKsl710efd9f; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{B0A5877F-0A07-4A76-A1CB-D5E8E1422882}\MpKsl710efd9f.sys [2013-06-01 29904]
R1 sp_rsdrv2;Spyware Terminator 2012 Realtime Shield Driver; \??\C:\Windows\system32\drivers\sp_rsdrv2.sys [2011-06-21 32768]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 48128]
R2 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2013-01-20 100328]
R3 Accelerometer;HP Mobile Data Protection Sensor; C:\Windows\system32\DRIVERS\Accelerometer.sys [2011-05-13 35896]
R3 AgereSoftModem;Agere Systems Soft Modem; C:\Windows\system32\DRIVERS\AGRSM.sys [2013-05-23 1163328]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2013-05-30 5590016]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2013-05-30 210432]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athr.sys [2011-02-22 2184704]
R3 AtiHdmiService;ATI Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\AtiHdmi.sys [2010-03-09 107024]
R3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 34816]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 93696]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 60416]
R3 btwaudio;Bluetooth Audio Device Service; C:\Windows\system32\drivers\btwaudio.sys [2009-09-17 86056]
R3 btwavdt;Bluetooth AVDT; C:\Windows\system32\DRIVERS\btwavdt.sys [2009-09-17 108072]
R3 btwl2cap;Bluetooth L2CAP Service; C:\Windows\system32\DRIVERS\btwl2cap.sys [2009-09-17 29472]
R3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys [2009-09-17 18472]
R3 dgderdrv;dgderdrv; C:\Windows\System32\drivers\dgderdrv.sys [2009-12-22 18136]
R3 FsUsbExDisk;FsUsbExDisk; \??\C:\Windows\system32\FsUsbExDisk.SYS [2009-12-22 36640]
R3 HECI;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECI.sys [2009-09-17 41088]
R3 HpqKbFiltr;HpqKbFilter Driver; C:\Windows\system32\DRIVERS\HpqKbFiltr.sys [2009-07-16 15872]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 129536]
R3 SNP2UVC;USB2.0 PC Camera (SNP2UVC); C:\Windows\system32\DRIVERS\snp2uvc.sys [2009-12-18 1763968]
R3 STHDA;@%SystemRoot%\system32\stlang.dll,-10322; C:\Windows\system32\DRIVERS\stwrt.sys [2013-05-30 431616]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2010-06-04 1303728]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 14336]
S2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;Ovladač filtru AMD portu AGP; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2013-05-30 5590016]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 393728]
S3 ew_hwusbdev;Huawei MobileBroadband USB PNP Device; C:\Windows\system32\DRIVERS\ew_hwusbdev.sys []
S3 ew_usbenumfilter;huawei_CompositeFilter; C:\Windows\system32\DRIVERS\ew_usbenumfilter.sys []
S3 huawei_cdcacm;huawei_cdcacm; C:\Windows\system32\DRIVERS\ew_jucdcacm.sys []
S3 huawei_enumerator;huawei_enumerator; C:\Windows\system32\DRIVERS\ew_jubusenum.sys []
S3 huawei_ext_ctrl;huawei_ext_ctrl; C:\Windows\system32\DRIVERS\ew_juextctrl.sys []
S3 huawei_wwanecm;huawei_wwanecm; C:\Windows\system32\DRIVERS\ew_juwwanecm.sys []
S3 nmwcd;Nokia USB Phone Parent; C:\Windows\system32\drivers\ccdcmb.sys []
S3 nmwcdc;Nokia USB Generic; C:\Windows\system32\drivers\ccdcmbo.sys []
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfd.sys []
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 133632]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUStor.sys [2009-11-11 181792]
S3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt86win7.sys [2010-01-12 257568]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 5632]
S3 sisagp;Filtr SIS sběrnice AGP; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 28032]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 52224]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 35840]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltj.sys []
S3 viaagp;Filtr VIA sběrnice AGP; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 17920]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 35968]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-05-10 65640]
R2 AESTFilters;Andrea ST Filters Service; C:\Program Files\IDT\WDM\aestsrv.exe [2013-05-30 81920]
R2 AgereModemAudio;Agere Modem Call Progress Audio; C:\Program Files\LSI SoftModem\agrsmsvc.exe [2013-05-23 14336]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2013-05-30 176128]
R2 btwdins;Bluetooth Service; c:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe [2009-09-04 595232]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 dgdersvc;Device Error Recovery Service; C:\Windows\system32\dgdersvc.exe [2009-12-22 95568]
R2 FsUsbExService;FsUsbExService; C:\Windows\system32\FsUsbExService.Exe [2009-12-22 217088]
R2 HPDrvMntSvc.exe;HP Quick Synchronization Service; C:\Program Files\Hewlett-Packard\Shared\HPDrvMntSvc.exe [2012-08-10 197536]
R2 hpHotkeyMonitor;HP Hotkey Monitor; C:\Program Files\Hewlett-Packard\HP HotKey Support\hpHotkeyMonitor.exe [2010-01-04 264248]
R2 hpsrv;HP Service; C:\Windows\system32\Hpservice.exe [2011-05-13 26168]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2009-11-04 268824]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-19 322120]
R2 MsMpSvc;Microsoft Antimalware Service; C:\Program Files\Microsoft Security Client\MsMpEng.exe [2013-01-27 20456]
R2 ST2012_Svc;Spyware Terminator 2012 Realtime Shield Service; C:\Program Files\Spyware Terminator\st_rsser.exe [2013-04-03 587912]
R2 STacSV;@%SystemRoot%\system32\stlang.dll,-10122; C:\Program Files\IDT\WDM\STacSV.exe [2013-05-30 254034]
R3 hpqwmiex;HP Software Framework Service; C:\Program Files\Hewlett-Packard\Shared\hpqWmiEx.exe [2012-08-10 1001376]
R3 NisSrv;@C:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; C:\Program Files\Microsoft Security Client\NisSrv.exe [2013-01-27 295232]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2012-04-01 116648]
S2 HP Support Assistant Service;HP Support Assistant Service; C:\Program Files\Hewlett-Packard\HP Support Framework\hpsa_service.exe [2012-09-27 86528]
S2 HP Wireless Assistant Service;HP Wireless Assistant Service; C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe [2009-12-16 102968]
S2 UNS;Intel(R) Management & Security Application User Notification Service; C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2009-11-04 2320920]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-05-14 256904]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2012-04-01 116648]
S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2011-05-10 136120]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2013-04-24 115608]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2010-07-25 1343400]

-----------------EOF-----------------

[Rudy]

Dvouklikem na soubor C:\Program Files\trend micro\Renata.exe spusťte HijackThis. Klikněte na "Do a system scan only" a v otevřeném okně vlevo ve čtverečcích zaškrtněte:

R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: (no name) - {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - (no file)
R3 - URLSearchHook: (no name) - {7473b6bd-4691-4744-a82b-7854eb3d70b6} - (no file)
R3 - URLSearchHook: (no name) - {124d001a-bdcb-472f-aa59-bbe7e4bc3204} - (no file)
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (file missing)
O9 - Extra 'Tools' menuitem: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (file missing)
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (file missing)

Klikněte na >FixChecked<. Pak znovu spusťte OTM a klikněte na >CleanUp!<. OTM po sobě uklidí. Nakonec restartujte PC.

[karolinaw]

Hotovo až na : O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (file missing)
Když to zaškrtnu tak se to smaže, ale pak se to tam objeví znovu. Jinak ale notebook už pracuje jak má.

[Rudy]

Ta poslední akce je jen odstranění neškodných zbytků. Některé položky fixnout nejdou. Pokud NB pracuje jak má, je to vše.

[karolinaw]

Dobře, moc děkuji za pomoc.

[Rudy]

Rádo se stalo!