Prosím o kontrolu

Zpráva

Allkor · #1 Příspěvek od **Allkor** » 26 pro 2013 17:56

Zdravím, chtěla bych poprosit o kontrolu tohoto notebooku. Z ničeho nic přestalo fungovat připojení k internetu (wi-fi nenašla vůbec nic a přes kabel to sice ukazovalo síť, ale nedalo se dostat ani do nastavení routeru natož na internet). Všechno vyřešila odinstalace Avastu, a to se mi moc nelíbí. Přeinstalovala jsem ho, smazala vše nepotřebné a systém vyčistila CCleanerem a všechno vypadá v pořádku... ale raději prosím o tu kontrolu. Díky

Logfile of random's system information tool 1.09 (written by random/random)
Run by Ivanka at 2013-12-26 17:47:32
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 106 GB (75%) free of 142 GB
Total RAM: 1014 MB (41% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:48:02, on 26.12.2013
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\Program Files\Common Files\COMODO\launcher_service.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\acs.exe
C:\Program Files\Common Files\COMODO\GeekBuddyRSP.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
C:\Program Files\Acer\Acer VCM\RS_Service.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Western Digital\WD SmartWare\WDDMService.exe
C:\Program Files\Western Digital\WD SmartWare\WDRulesEngine.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
C:\PROGRA~1\LAUNCH~1\LManager.exe
C:\WINDOWS\PLFSetL.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\COMODO\COMODO Internet Security\cfp.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\TP-LINK\TP-LINK Wireless Client Utility\TWCU.exe
C:\Program Files\Common Files\COMODO\GeekBuddyRSP.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\Program Files\COMODO\GeekBuddy\unit_manager.exe
C:\Program Files\COMODO\GeekBuddy\unit.exe
C:\WINDOWS\system32\igfxext.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\Western Digital\WD SmartWare\WDFME.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wbem\unsecapp.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Documents and Settings\Ivanka\Plocha\RSIT.exe
C:\Program Files\trend micro\Ivanka.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/rdr.aspx?b=ACA ... 5w58024164
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://us.yahoo.com?fr=fp-comodo
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/rdr.aspx?b=ACA ... 5w58024164
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.alawarhry.cz
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O1 - Hosts: ˙ţ127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\LManager.exe
O4 - HKLM\..\Run: [AzMixerSel] C:\Program Files\Realtek\Audio\Drivers\AzMixerSel.exe
O4 - HKLM\..\Run: [PLFSetL] C:\WINDOWS\PLFSetL.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [COMODO Internet Security] "C:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h
O4 - HKLM\..\Run: [TWCU] "C:\Program Files\TP-LINK\TP-LINK Wireless Client Utility\TWCU.exe" -nogui
O4 - HKLM\..\Run: [tvncontrol] "C:\Program Files\Common Files\COMODO\GeekBuddyRSP.exe" -controlservice -slave
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Ivanka\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe" /c
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Start GeekBuddy.lnk = C:\Program Files\COMODO\GeekBuddy\launcher.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Odeslat do zařízení &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Odeslat do zařízení Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Přidat na blog - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Přidat na blog Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: ICQ7.7 - {77F665FD-3F60-4B0A-AE14-EC124B7A7FCE} - C:\Program Files\ICQ7.7\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.7 - {77F665FD-3F60-4B0A-AE14-EC124B7A7FCE} - C:\Program Files\ICQ7.7\ICQ.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microso ... 7733211421
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\WINDOWS\system32\guard32.dll
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: TP-LINK Configuration Service (ACS) - Atheros - C:\WINDOWS\system32\acs.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: COMODO LPS Launcher (CLPSLauncher) - Comodo Security Solutions, Inc. - C:\Program Files\Common Files\COMODO\launcher_service.exe
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: GeekBuddyRSP Server (GeekBuddyRSP) - Comodo Security Solutions, Inc. - C:\Program Files\Common Files\COMODO\GeekBuddyRSP.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: Raw Socket Service (RS_Service) - Acer Incorporated - C:\Program Files\Acer\Acer VCM\RS_Service.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: Sony Ericsson PCCompanion - Avanquest Software - C:\Program Files\Sony Ericsson\Sony Ericsson PC Companion\PCCService.exe
O23 - Service: WDDMService - WDC - C:\Program Files\Western Digital\WD SmartWare\WDDMService.exe
O23 - Service: WDFMEService - Western Digital - C:\Program Files\Western Digital\WD SmartWare\WDFME.exe
O23 - Service: WDRulesService - Western Digital - C:\Program Files\Western Digital\WD SmartWare\WDRulesEngine.exe

--
End of file - 10274 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job
C:\WINDOWS\tasks\avast! Emergency Update.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-4210259494-2243138800-104724495-1005Core.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-4210259494-2243138800-104724495-1005UA.job

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\Ivanka\Data aplikací\Mozilla\Firefox\Profiles\umw0dbil.default

prefs.js - "browser.startup.homepage" - "http://www.seznam.cz"
prefs.js - "keyword.URL" - "http://us.search.yahoo.com/search?fr=ytff-comodo&p="

"{20a82645-c095-46ed-80e3-08825760534b}"=c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
"jqs@sun.com"=C:\Program Files\Java\jre6\lib\deploy\jqs\ff
"wrc@avast.com"=C:\Program Files\AVAST Software\Avast\WebRep\FF

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.9.900.170 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8064.0206]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@playstation.com/PsndlCheck,version=1.00]
"Description"=Plug-in to check PlayStation(R)Network Downloader.
"Path"=C:\Program Files\Sony\PLAYSTATION Network Downloader\nppsndl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@SonyCreativeSoftware.com/Media Go,version=1.0]
"Description"=
"Path"=C:\Program Files\Sony\Media Go\npmediago.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.0.8]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.1.2]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll

C:\Documents and Settings\Ivanka\Data aplikací\Mozilla\Firefox\Profiles\umw0dbil.default\extensions\
staged
{ea614400-e918-4741-9a97-7a972ff7c30b}(2)

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre6\bin\ssv.dll [2012-02-20 325408]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2013-12-26 1138536]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2012-02-20 42272]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2012-02-20 79648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2013-12-26 1138536]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IAAnotif"=C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe [2008-04-15 178712]
"LManager"=C:\PROGRA~1\LAUNCH~1\LManager.exe [2008-12-30 875016]
"AzMixerSel"=C:\Program Files\Realtek\Audio\Drivers\AzMixerSel.exe [2006-07-17 53248]
"PLFSetL"=C:\WINDOWS\PLFSetL.exe [2008-07-03 94208]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2009-02-06 1430824]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2009-08-24 18702336]
"COMODO Internet Security"=C:\Program Files\COMODO\COMODO Internet Security\cfp.exe [2012-11-08 6756048]
"TWCU"=C:\Program Files\TP-LINK\TP-LINK Wireless Client Utility\TWCU.exe [2009-09-23 561263]
"tvncontrol"=C:\Program Files\Common Files\COMODO\GeekBuddyRSP.exe [2013-10-11 2327248]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2013-12-26 3764024]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"Google Update"=C:\Documents and Settings\Ivanka\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe [2011-10-21 136176]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04 958576]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2013-05-08 41056]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Ivanka^Nabídka Start^Programy^Po spuštění^YoWindow.lnk]
C:\PROGRA~1\YoWindow\yowindow.exe [2013-04-13 888128]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
Start GeekBuddy.lnk - C:\Program Files\COMODO\GeekBuddy\launcher.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=" C:\WINDOWS\system32\guard32.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2008-02-14 208896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mcmscsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MpfService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"C:\Program Files\ICQ7.7\ICQ.exe"="C:\Program Files\ICQ7.7\ICQ.exe:*:Enabled:ICQ7.7"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Documents and Settings\Ivanka\Data aplikací\uTorrent\uTorrent.exe"="C:\Documents and Settings\Ivanka\Data aplikací\uTorrent\uTorrent.exe:*:Enabled:µTorrent"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync"
"C:\Program Files\ICQ7.7\ICQ.exe"="C:\Program Files\ICQ7.7\ICQ.exe:*:Enabled:ICQ7.7"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"VIDC.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"VIDC.YVYU"=msyuv.dll
"wavemapper"=msacm32.drv
"MSVideo8"=VfWWDM32.dll
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"msacm.siren"=sirenacm.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======List of files/folders created in the last 1 month======

2013-12-26 17:47:32 ----D---- C:\rsit
2013-12-26 17:21:34 ----D---- C:\Documents and Settings\All Users\Data aplikací\Mozilla
2013-12-26 17:21:30 ----D---- C:\Program Files\Mozilla Maintenance Service
2013-12-26 16:43:00 ----A---- C:\WINDOWS\system32\drivers\aswVmm.sys
2013-12-26 16:43:00 ----A---- C:\WINDOWS\system32\drivers\aswTdi.sys
2013-12-26 16:43:00 ----A---- C:\WINDOWS\system32\drivers\aswSP.sys
2013-12-26 16:43:00 ----A---- C:\WINDOWS\system32\drivers\aswSnx.sys
2013-12-26 16:43:00 ----A---- C:\WINDOWS\system32\drivers\aswRvrt.sys
2013-12-26 16:42:59 ----A---- C:\WINDOWS\system32\drivers\aswRdr.sys
2013-12-26 16:42:59 ----A---- C:\WINDOWS\system32\drivers\aswMonFlt.sys
2013-12-26 16:42:38 ----A---- C:\WINDOWS\avastSS.scr
2013-12-26 16:26:32 ----HD---- C:\BJPrinter

======List of files/folders modified in the last 1 month======

2013-12-26 17:47:58 ----D---- C:\Program Files\trend micro
2013-12-26 17:46:05 ----D---- C:\WINDOWS\Temp
2013-12-26 17:45:52 ----D---- C:\WINDOWS
2013-12-26 17:45:03 ----A---- C:\WINDOWS\SchedLgU.Txt
2013-12-26 17:45:02 ----D---- C:\WINDOWS\system32\CatRoot2
2013-12-26 17:42:55 ----D---- C:\Documents and Settings\Ivanka\Data aplikací\uTorrent
2013-12-26 17:42:06 ----D---- C:\WINDOWS\Debug
2013-12-26 17:35:31 ----D---- C:\Program Files\uTorrent
2013-12-26 17:27:07 ----D---- C:\Program Files\WinRAR
2013-12-26 17:21:30 ----RD---- C:\Program Files
2013-12-26 17:21:11 ----D---- C:\Program Files\Mozilla Firefox
2013-12-26 17:18:30 ----A---- C:\WINDOWS\system32\FlashPlayerApp.exe
2013-12-26 16:59:49 ----D---- C:\Documents and Settings\Ivanka\Data aplikací\vlc
2013-12-26 16:58:45 ----SD---- C:\WINDOWS\Tasks
2013-12-26 16:58:31 ----D---- C:\WINDOWS\system32\drivers
2013-12-26 16:58:05 ----A---- C:\WINDOWS\system32\aswBoot.exe
2013-12-26 16:52:50 ----D---- C:\Program Files\CCleaner
2013-12-26 16:49:41 ----D---- C:\WINDOWS\pss
2013-12-26 16:40:13 ----D---- C:\Documents and Settings\All Users\Data aplikací\AVAST Software
2013-12-26 16:38:26 ----AD---- C:\WINDOWS\system32
2013-12-26 16:32:09 ----SHD---- C:\Config.Msi
2013-12-26 16:31:49 ----D---- C:\Program Files\AVAST Software
2013-12-26 16:26:50 ----HD---- C:\WINDOWS\inf
2013-12-26 16:20:48 ----D---- C:\Program Files\Company
2013-12-26 16:16:54 ----SHD---- C:\WINDOWS\Installer
2013-12-03 21:09:49 ----A---- C:\WINDOWS\system32\PerfStringBackup.TMP

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\WINDOWS\system32\drivers\aswRvrt.sys [2013-12-26 49944]
R0 aswVmm;avast! VM Monitor; C:\WINDOWS\system32\drivers\aswVmm.sys [2013-12-26 180248]
R0 iaStor;Intel AHCI Controller; C:\WINDOWS\system32\drivers\iaStor.sys [2008-04-15 312344]
R0 Inspect;COMODO Internet Security Firewall Driver; C:\WINDOWS\System32\DRIVERS\inspect.sys [2012-11-08 99080]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
R1 aswRdr;aswRdr; \??\C:\WINDOWS\system32\drivers\aswRdr.sys []
R1 aswSnx;aswSnx; \??\C:\WINDOWS\system32\drivers\aswSnx.sys []
R1 aswSP;aswSP; \??\C:\WINDOWS\system32\drivers\aswSP.sys []
R1 aswTdi;aswTdi; \??\C:\WINDOWS\system32\drivers\aswTdi.sys []
R1 CFRMD;CFRMD; C:\WINDOWS\system32\DRIVERS\CFRMD.sys [2013-05-07 36112]
R1 cmdGuard;COMODO Internet Security Sandbox Driver; C:\WINDOWS\System32\DRIVERS\cmdguard.sys [2012-11-08 497952]
R1 cmdHlp;COMODO Internet Security Helper Driver; C:\WINDOWS\System32\DRIVERS\cmdhlp.sys [2012-11-08 32640]
R1 DritekPortIO;Dritek General Port I/O; \??\C:\PROGRA~1\LAUNCH~1\DPortIO.sys []
R1 HMD;COMODO livePCsupport Hardware Monitor Driver; C:\WINDOWS\system32\DRIVERS\hmd.sys [2013-10-07 14272]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\WINDOWS\system32\DRIVERS\wmiacpi.sys [2008-04-14 8832]
R2 aswMonFlt;aswMonFlt; \??\C:\WINDOWS\system32\drivers\aswMonFlt.sys []
R3 BCM43XX;Ovladač síťového adaptéru Broadcom 802.11; C:\WINDOWS\system32\DRIVERS\bcmwl5.sys [2009-02-20 1952512]
R3 BTKRNL;Enumenátor sběrnice Bluetooth; C:\WINDOWS\system32\DRIVERS\btkrnl.sys [2009-04-15 991136]
R3 DKbFltr;Dritek Keyboard Filter Driver; C:\WINDOWS\system32\DRIVERS\DKbFltr.sys [2004-12-08 16896]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-14 144384]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\igxpmp32.sys [2008-02-15 5854752]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2009-08-31 5891584]
R3 L1c;NDIS Miniport Driver for Atheros AR8131/AR8132 PCI-E Ethernet Controller; C:\WINDOWS\system32\DRIVERS\l1c51x86.sys [2009-03-02 38912]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 SNP2UVC;USB2.0 PC Camera (SNP2UVC); C:\WINDOWS\system32\DRIVERS\snp2uvc.sys [2009-05-06 1759744]
R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2009-02-06 205232]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 Wdf01000;Kernel Mode Driver Frameworks service; C:\WINDOWS\System32\Drivers\wdf01000.sys [2008-03-27 503008]
R3 WSIMD;wsimd Service; C:\WINDOWS\system32\DRIVERS\wsimd.sys [2009-09-21 58208]
S3 Ambfilt;Ambfilt; C:\WINDOWS\system32\drivers\Ambfilt.sys [2008-08-05 1684736]
S3 AR9271;Wireless Network Adapter Service; C:\WINDOWS\system32\DRIVERS\athuw.sys [2009-09-21 1668352]
S3 BTWUSB;WIDCOMM USB Bluetooth Driver; C:\WINDOWS\System32\Drivers\btwusb.sys [2008-10-30 47272]
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-14 17024]
S3 Monfilt;Monfilt; C:\WINDOWS\system32\drivers\Monfilt.sys [2006-01-04 1389056]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-14 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-14 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-14 10880]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\WINDOWS\System32\Drivers\RtsUStor.sys [2009-02-03 162816]
S3 Rts516xIR;Realtek IR Driver; C:\WINDOWS\system32\DRIVERS\Rts516xIR.sys []
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-14 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-14 15232]
S3 usb_rndisx;Adaptér USB RNDIS; C:\WINDOWS\system32\DRIVERS\usb8023x.sys [2013-02-12 12928]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2013-08-09 32384]
S3 USBCCID;Realtek Smartcard Reader Driver; C:\WINDOWS\system32\DRIVERS\Rts5161ccid.sys []
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2013-07-03 14976]
S3 usbstor;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 usbvideo;Zobrazovací zařízení USB (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2013-07-17 123008]
S3 WDC_SAM;WD SCSI Pass Thru driver; C:\WINDOWS\system32\DRIVERS\wdcsam.sys [2011-02-16 11520]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-14 19200]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S3 ZDPSp50;ZDPSp50 NDIS Protocol Driver; C:\WINDOWS\System32\Drivers\ZDPSp50.sys [2004-10-25 17664]
S4 agp440;Filtr Intel sběrnice AGP; C:\WINDOWS\system32\DRIVERS\agp440.sys [2008-04-13 42368]
S4 agpCPQ;Filtr Compaq sběrnice AGP; C:\WINDOWS\system32\DRIVERS\agpCPQ.sys [2008-04-13 44928]
S4 alim1541;Filtr ALI sběrnice AGP; C:\WINDOWS\system32\DRIVERS\alim1541.sys [2008-04-13 42752]
S4 amdagp;Ovladač filtru AMD portu AGP; C:\WINDOWS\system32\DRIVERS\amdagp.sys [2008-04-13 43008]
S4 cbidf;cbidf; C:\WINDOWS\system32\DRIVERS\cbidf2k.sys [2008-04-14 13952]
S4 sisagp;Filtr SIS sběrnice AGP ; C:\WINDOWS\system32\DRIVERS\sisagp.sys [2008-04-13 40960]
S4 viaagp;Filtr VIA sběrnice AGP ; C:\WINDOWS\system32\DRIVERS\viaagp.sys [2008-04-13 42240]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ACS;TP-LINK Configuration Service; C:\WINDOWS\system32\acs.exe [2009-09-21 499796]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2013-12-26 50344]
R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe [2009-05-08 349528]
R2 CLPSLauncher;COMODO LPS Launcher; C:\Program Files\Common Files\COMODO\launcher_service.exe [2013-10-11 70352]
R2 cmdAgent;COMODO Internet Security Helper Service; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [2012-11-08 1990464]
R2 GeekBuddyRSP;GeekBuddyRSP Server; C:\Program Files\Common Files\COMODO\GeekBuddyRSP.exe [2013-10-11 2327248]
R2 IAANTMON;Intel(R) Matrix Storage Event Monitor; C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe [2008-04-15 354840]
R2 RS_Service;Raw Socket Service; C:\Program Files\Acer\Acer VCM\RS_Service.exe [2009-02-05 237568]
R2 WDDMService;WDDMService; C:\Program Files\Western Digital\WD SmartWare\WDDMService.exe [2011-08-01 263056]
R2 WDFMEService;WDFMEService; C:\Program Files\Western Digital\WD SmartWare\WDFME.exe [2011-08-01 1592208]
R2 WDRulesService;WDRulesService; C:\Program Files\Western Digital\WD SmartWare\WDRulesEngine.exe [2011-08-01 1091984]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 Fax;Fax; C:\WINDOWS\system32\fxssvc.exe [2008-04-14 268288]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-02-07 135664]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2013-02-28 161384]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-26 257416]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-02-07 135664]
S3 idsvc;Služba Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2013-12-05 119408]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 Sony Ericsson PCCompanion;Sony Ericsson PCCompanion; C:\Program Files\Sony Ericsson\Sony Ericsson PC Companion\PCCService.exe [2011-06-29 155344]
S3 WinRM;Windows Remote Management (WS-Management); C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2013-07-20 754856]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------

#2 Příspěvek od **Márty84** » 27 pro 2013 09:59

Zdravim

Zkontrolujte, zda je u Comoda zapnuty jen firewall.

Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner a ulozte ho na plochu.
Ukoncete vsechny programy, jinak to AdwCleaner udela za vas.
Kliknete na nej pravym mysidlem a levym na Spustit jako spravce.
Kliknete na Scan a program zacne pracovat.
Az skonci, vyplivne na vas log (pokud ne, najdete ho zde C:\AdwCleaner\AdwCleaner[R?].txt ), ten mi sem zkopirujte.

Allkor · #3 Příspěvek od **Allkor** » 27 pro 2013 10:25

Log z AdwCleaneru:

# AdwCleaner v3.016 - Report created 27/12/2013 at 10:17:09
# Updated 23/12/2013 by Xplode
# Operating System : Microsoft Windows XP Service Pack 3 (32 bits)
# Username : Ivanka - ALLKOR
# Running from : C:\Documents and Settings\Ivanka\Plocha\adwcleaner.exe
# Option : Scan

***** [ Services ] *****

***** [ Files / Folders ] *****

File Found : C:\DOCUME~1\Ivanka\LOCALS~1\Temp\Uninstall.exe
File Found : C:\Documents and Settings\Ivanka\Data aplikací\Mozilla\Firefox\Profiles\umw0dbil.default\user.js
Folder Found : C:\Documents and Settings\Ivanka\Data aplikací\Mozilla\Firefox\Profiles\umw0dbil.default\Extensions\{ea614400-e918-4741-9a97-7a972ff7c30b}(2)
Folder Found : C:\Documents and Settings\Ivanka\Data aplikací\Mozilla\Firefox\Profiles\umw0dbil.default\Extensions\staged
Folder Found C:\Documents and Settings\All Users\Data aplikací\AlawarWrapper
Folder Found C:\Documents and Settings\Ivanka\Data aplikací\Mozilla\Firefox\Profiles\umw0dbil.default\Conduit
Folder Found C:\Documents and Settings\Ivanka\Data aplikací\Mozilla\Firefox\Profiles\umw0dbil.default\ConduitCommon
Folder Found C:\Documents and Settings\Ivanka\Data aplikací\OpenCandy
Folder Found C:\Documents and Settings\Ivanka\Local Settings\Data aplikací\Conduit
Folder Found C:\Program Files\Conduit

***** [ Shortcuts ] *****

***** [ Registry ] *****

Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{83FF80F4-8C74-4B80-B5BA-C8DDD434E5C4}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{83FF80F4-8C74-4B80-B5BA-C8DDD434E5C4}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Found : HKCU\Software\YahooPartnerToolbar
Key Found : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
Key Found : HKLM\SOFTWARE\Classes\AppID\WLXQuickTimeShellExt.DLL
Key Found : HKLM\SOFTWARE\Classes\CLSID\{00000001-4FEF-40D3-B3FA-E0531B897F98}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{007EFBDF-8A5D-4930-97CC-A4B437CBA777}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{64697678-0000-0010-8000-00AA00389B71}
Key Found : HKLM\SOFTWARE\Classes\Toolbar.CT2786678
Key Found : HKLM\Software\Conduit
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\08121C32A9C319F4CB0C11FF059552A4
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0FF2AEFF45EEA0A48A4B33C1973B6094
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\305B09CE8C53A214DB58887F62F25536

***** [ Browsers ] *****

-\\ Internet Explorer v8.0.6001.18702

-\\ Mozilla Firefox v26.0 (en-US)

[ File : C:\Documents and Settings\Ivanka\Data aplikací\Mozilla\Firefox\Profiles\umw0dbil.default\prefs.js ]

Line Found : user_pref("CT2438727..clientLogIsEnabled", true);
Line Found : user_pref("CT2438727..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
Line Found : user_pref("CT2438727..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
Line Found : user_pref("CT2438727.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);
Line Found : user_pref("CT2438727.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
Line Found : user_pref("CT2438727.AppTrackingLastCheckTime", "Wed Jun 01 2011 22:47:04 GMT+0200");
Line Found : user_pref("CT2438727.CT2438727", "CT2438727");
Line Found : user_pref("CT2438727.CommunitiesChangesLastCheckTime", "0");
Line Found : user_pref("CT2438727.CurrentServerDate", "31-3-2012");
Line Found : user_pref("CT2438727.DialogsAlignMode", "LTR");
Line Found : user_pref("CT2438727.DialogsGetterLastCheckTime", "Sat Mar 31 2012 12:47:51 GMT+0200");
Line Found : user_pref("CT2438727.DownloadReferralCookieData", "");
Line Found : user_pref("CT2438727.EnableSearchHistory", false);
Line Found : user_pref("CT2438727.EnableSearchSuggest", false);
Line Found : user_pref("CT2438727.FirstServerDate", "22-5-2011");
Line Found : user_pref("CT2438727.FirstTime", true);
Line Found : user_pref("CT2438727.FirstTimeFF3", true);
Line Found : user_pref("CT2438727.FixPageNotFoundErrors", false);
Line Found : user_pref("CT2438727.GroupingInvalidateCache", false);
Line Found : user_pref("CT2438727.GroupingLastCheckTime", "0");
Line Found : user_pref("CT2438727.GroupingLastServerUpdateTime", "0");
Line Found : user_pref("CT2438727.GroupingServerCheckInterval", 1440);
Line Found : user_pref("CT2438727.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
Line Found : user_pref("CT2438727.HasUserGlobalKeys", true);
Line Found : user_pref("CT2438727.HomePageProtectorEnabled", false);
Line Found : user_pref("CT2438727.Initialize", true);
Line Found : user_pref("CT2438727.InitializeCommonPrefs", true);
Line Found : user_pref("CT2438727.InstallationAndCookieDataSentCount", 3);
Line Found : user_pref("CT2438727.InstalledDate", "Sun May 22 2011 11:42:28 GMT+0200");
Line Found : user_pref("CT2438727.InvalidateCache", false);
Line Found : user_pref("CT2438727.IsAlertDBUpdated", true);
Line Found : user_pref("CT2438727.IsGrouping", false);
Line Found : user_pref("CT2438727.IsMulticommunity", false);
Line Found : user_pref("CT2438727.IsOpenThankYouPage", true);
Line Found : user_pref("CT2438727.IsOpenUninstallPage", true);
Line Found : user_pref("CT2438727.LanguagePackLastCheckTime", "Sat Mar 31 2012 12:47:51 GMT+0200");
Line Found : user_pref("CT2438727.LanguagePackReloadIntervalMM", 1440);
Line Found : user_pref("CT2438727.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx");
Line Found : user_pref("CT2438727.LastLogin_3.10.0.1", "Sat Mar 31 2012 12:47:51 GMT+0200");
Line Found : user_pref("CT2438727.LastLogin_3.3.5.1", "Tue Jun 21 2011 17:41:01 GMT+0200");
Line Found : user_pref("CT2438727.LastLogin_3.5.0.12", "Mon Aug 15 2011 14:12:00 GMT+0200");
Line Found : user_pref("CT2438727.LastLogin_3.6.0.10", "Tue Sep 27 2011 17:23:51 GMT+0200");
Line Found : user_pref("CT2438727.LastLogin_3.7.0.6", "Tue Nov 08 2011 11:52:43 GMT+0100");
Line Found : user_pref("CT2438727.LastLogin_3.8.0.8", "Wed Dec 07 2011 20:56:44 GMT+0100");
Line Found : user_pref("CT2438727.LatestVersion", "3.10.0.1");
Line Found : user_pref("CT2438727.Locale", "en");
Line Found : user_pref("CT2438727.MCDetectTooltipHeight", "83");
Line Found : user_pref("CT2438727.MCDetectTooltipShow", false);
Line Found : user_pref("CT2438727.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
Line Found : user_pref("CT2438727.MCDetectTooltipWidth", "295");
Line Found : user_pref("CT2438727.MyStuffEnabledAtInstallation", true);
Line Found : user_pref("CT2438727.RadioLastCheckTime", "0");
Line Found : user_pref("CT2438727.RadioLastUpdateIPServer", "0");
Line Found : user_pref("CT2438727.RadioLastUpdateServer", "0");
Line Found : user_pref("CT2438727.SearchBoxWidth", 100);
Line Found : user_pref("CT2438727.SearchEngineBeforeUnload", "chrome://browser-region/locale/region.properties");
Line Found : user_pref("CT2438727.SearchFromAddressBarIsInit", true);
Line Found : user_pref("CT2438727.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2438727&SearchSource=2&q=");
Line Found : user_pref("CT2438727.SearchInNewTabEnabled", true);
Line Found : user_pref("CT2438727.SearchInNewTabIntervalMM", 1440);
Line Found : user_pref("CT2438727.SearchInNewTabLastCheckTime", "Sat Mar 31 2012 12:47:51 GMT+0200");
Line Found : user_pref("CT2438727.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID");
Line Found : user_pref("CT2438727.SearchInNewTabUsageUrl", "hxxp://usage.hosting.toolbar.conduit-services.com/usage.ashx?ctid=EB_TOOLBAR_ID");
Line Found : user_pref("CT2438727.SearchProtectorEnabled", false);
Line Found : user_pref("CT2438727.SearchProtectorToolbarDisabled", false);
Line Found : user_pref("CT2438727.ServiceMapLastCheckTime", "Sat Mar 31 2012 12:47:50 GMT+0200");
Line Found : user_pref("CT2438727.SettingsLastCheckTime", "Sat Mar 31 2012 12:47:49 GMT+0200");
Line Found : user_pref("CT2438727.SettingsLastUpdate", "1326723880");
Line Found : user_pref("CT2438727.ThirdPartyComponentsInterval", 504);
Line Found : user_pref("CT2438727.ThirdPartyComponentsLastCheck", "Sat Mar 31 2012 12:47:49 GMT+0200");
Line Found : user_pref("CT2438727.ThirdPartyComponentsLastUpdate", "1312887586");
Line Found : user_pref("CT2438727.ToolbarShrinkedFromSetup", false);
Line Found : user_pref("CT2438727.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2438727");
Line Found : user_pref("CT2438727.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,client.conduit-storage.com,OurToolbar.com,CommunityToolbars.com,ForumToolbar.com,MyBlogToolbar.com,MyCity[...]
Line Found : user_pref("CT2438727.Uninstall", true);
Line Found : user_pref("CT2438727.UserID", "UN84503558092297499");
Line Found : user_pref("CT2438727.ValidationData_Toolbar", 2);
Line Found : user_pref("CT2438727.alertChannelId", "832836");
Line Found : user_pref("CT2438727.approveUntrustedApps", true);
Line Found : user_pref("CT2438727.backendstorage.currentgame", "70696F6E656572747261696C");
Line Found : user_pref("CT2438727.components.1000034", false);
Line Found : user_pref("CT2438727.components.1000082", false);
Line Found : user_pref("CT2438727.components.1000234", false);
Line Found : user_pref("CT2438727.components.1000515", false);
Line Found : user_pref("CT2438727.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.conduit.com;apps.conduit.com;services.apps.conduit.com\",\"AppsDetectionUrlPattern\":\"hxxp://appdown[...]
Line Found : user_pref("CT2438727.globalFirstTimeInfoLastCheckTime", "Sat Mar 31 2012 12:47:51 GMT+0200");
Line Found : user_pref("CT2438727.homepageProtectorEnableByLogin", true);
Line Found : user_pref("CT2438727.initDone", true);
Line Found : user_pref("CT2438727.isAppTrackingManagerOn", true);
Line Found : user_pref("CT2438727.myStuffEnabled", true);
Line Found : user_pref("CT2438727.myStuffPublihserMinWidth", 400);
Line Found : user_pref("CT2438727.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID");
Line Found : user_pref("CT2438727.myStuffServiceIntervalMM", 1440);
Line Found : user_pref("CT2438727.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUFF_LUT");
Line Found : user_pref("CT2438727.oldAppsList", "129017707048431316,129017707048587567,111,129509324767711885,129023982676944454,129665740530401877,1000034,1000080,1000082,1000234,1000515,1000,1001,1002,1003,1004,[...]
Line Found : user_pref("CT2438727.revertSettingsEnabled", true);
Line Found : user_pref("CT2438727.searchProtectorDialogDelayInSec", 10);
Line Found : user_pref("CT2438727.searchProtectorEnableByLogin", true);
Line Found : user_pref("CT2438727.testingCtid", "");
Line Found : user_pref("CT2438727.toolbarAppMetaDataLastCheckTime", "Sat Mar 31 2012 12:47:51 GMT+0200");
Line Found : user_pref("CT2438727.toolbarContextMenuLastCheckTime", "Sat Mar 31 2012 12:47:51 GMT+0200");
Line Found : user_pref("CT2438727.usagesFlag", 2);
Line Found : user_pref("CT2438972..clientLogIsEnabled", true);
Line Found : user_pref("CT2438972..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
Line Found : user_pref("CT2438972..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
Line Found : user_pref("CT2438972.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
Line Found : user_pref("CT2438972.BrowserCompStateIsOpen_1000515", true);
Line Found : user_pref("CT2438972.CT2438972", "CT2438972");
Line Found : user_pref("CT2438972.CurrentServerDate", "16-8-2011");
Line Found : user_pref("CT2438972.DialogsAlignMode", "LTR");
Line Found : user_pref("CT2438972.DialogsGetterLastCheckTime", "Tue Aug 16 2011 13:58:37 GMT+0200");
Line Found : user_pref("CT2438972.DownloadReferralCookieData", "");
Line Found : user_pref("CT2438972.FeedLastCount129137323571250068", 50);
Line Found : user_pref("CT2438972.FeedPollDate129137323572812601", "Tue Aug 16 2011 22:38:42 GMT+0200");
Line Found : user_pref("CT2438972.FeedTTL129137323572812601", 40);
Line Found : user_pref("CT2438972.FirstServerDate", "30-5-2011");
Line Found : user_pref("CT2438972.FirstTime", true);
Line Found : user_pref("CT2438972.FirstTimeFF3", true);
Line Found : user_pref("CT2438972.FixPageNotFoundErrors", false);
Line Found : user_pref("CT2438972.GroupingServerCheckInterval", 1440);
Line Found : user_pref("CT2438972.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
Line Found : user_pref("CT2438972.HasUserGlobalKeys", true);
Line Found : user_pref("CT2438972.HomePageProtectorEnabled", false);
Line Found : user_pref("CT2438972.Initialize", true);
Line Found : user_pref("CT2438972.InitializeCommonPrefs", true);
Line Found : user_pref("CT2438972.InstallationAndCookieDataSentCount", 3);
Line Found : user_pref("CT2438972.InstalledDate", "Mon May 30 2011 21:13:41 GMT+0200");
Line Found : user_pref("CT2438972.InvalidateCache", false);
Line Found : user_pref("CT2438972.IsAlertDBUpdated", true);
Line Found : user_pref("CT2438972.IsGrouping", false);
Line Found : user_pref("CT2438972.IsMulticommunity", false);
Line Found : user_pref("CT2438972.IsOpenThankYouPage", true);
Line Found : user_pref("CT2438972.IsOpenUninstallPage", true);
Line Found : user_pref("CT2438972.IsProtectorsInit", true);
Line Found : user_pref("CT2438972.LanguagePackLastCheckTime", "Tue Aug 16 2011 13:58:36 GMT+0200");
Line Found : user_pref("CT2438972.LanguagePackReloadIntervalMM", 1440);
Line Found : user_pref("CT2438972.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx");
Line Found : user_pref("CT2438972.LastLogin_3.4.1.0", "Tue Jun 14 2011 20:05:55 GMT+0200");
Line Found : user_pref("CT2438972.LastLogin_3.6.0.10", "Tue Aug 16 2011 21:58:32 GMT+0200");
Line Found : user_pref("CT2438972.LatestVersion", "3.5.0.12");
Line Found : user_pref("CT2438972.Locale", "en");
Line Found : user_pref("CT2438972.MCDetectTooltipHeight", "83");
Line Found : user_pref("CT2438972.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
Line Found : user_pref("CT2438972.MCDetectTooltipWidth", "295");
Line Found : user_pref("CT2438972.MyStuffEnabledAtInstallation", true);
Line Found : user_pref("CT2438972.OriginalFirstVersion", "3.4.1.0");
Line Found : user_pref("CT2438972.RadioIsPodcast", false);
Line Found : user_pref("CT2438972.RadioLastCheckTime", "Tue Aug 16 2011 13:58:36 GMT+0200");
Line Found : user_pref("CT2438972.RadioLastUpdateIPServer", "3");
Line Found : user_pref("CT2438972.RadioLastUpdateServer", "0");
Line Found : user_pref("CT2438972.RadioMediaID", "9962");
Line Found : user_pref("CT2438972.RadioMediaType", "Media Player");
Line Found : user_pref("CT2438972.RadioMenuSelectedID", "EBRadioMenu_CT24389729962");
Line Found : user_pref("CT2438972.RadioShrinkedFromSetup", false);
Line Found : user_pref("CT2438972.RadioStationName", "California%20Rock");
Line Found : user_pref("CT2438972.RadioStationURL", "hxxp://feedlive.net/california.asx");
Line Found : user_pref("CT2438972.SearchEngineBeforeUnload", "chrome://browser-region/locale/region.properties");
Line Found : user_pref("CT2438972.SearchFromAddressBarIsInit", true);
Line Found : user_pref("CT2438972.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2438972&q=");
Line Found : user_pref("CT2438972.SearchInNewTabEnabled", true);
Line Found : user_pref("CT2438972.SearchInNewTabIntervalMM", 1440);
Line Found : user_pref("CT2438972.SearchInNewTabLastCheckTime", "Tue Aug 16 2011 13:58:35 GMT+0200");
Line Found : user_pref("CT2438972.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID");
Line Found : user_pref("CT2438972.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageService.asmx/UsersRequests?ctid=EB_TOOLBAR_ID");
Line Found : user_pref("CT2438972.SearchProtectorEnabled", false);
Line Found : user_pref("CT2438972.SearchProtectorToolbarDisabled", false);
Line Found : user_pref("CT2438972.ServiceMapLastCheckTime", "Tue Aug 16 2011 13:58:33 GMT+0200");
Line Found : user_pref("CT2438972.SettingsLastCheckTime", "Tue Aug 16 2011 19:50:35 GMT+0200");
Line Found : user_pref("CT2438972.SettingsLastUpdate", "1312887586");
Line Found : user_pref("CT2438972.ThirdPartyComponentsInterval", 504);
Line Found : user_pref("CT2438972.ThirdPartyComponentsLastCheck", "Tue Aug 16 2011 13:58:30 GMT+0200");
Line Found : user_pref("CT2438972.ThirdPartyComponentsLastUpdate", "1246786978");
Line Found : user_pref("CT2438972.ToolbarShrinkedFromSetup", false);
Line Found : user_pref("CT2438972.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2438972");
Line Found : user_pref("CT2438972.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,client.conduit-storage.com,OurToolbar.com,CommunityToolbars.com,ForumToolbar.com,MyBlogToolbar.com,MyCity[...]
Line Found : user_pref("CT2438972.UserID", "UN63686997725116454");
Line Found : user_pref("CT2438972.ValidationData_Toolbar", 2);
Line Found : user_pref("CT2438972.WeatherNetwork", "");
Line Found : user_pref("CT2438972.WeatherPollDate", "Tue Aug 16 2011 19:50:38 GMT+0200");
Line Found : user_pref("CT2438972.WeatherUnit", "C");
Line Found : user_pref("CT2438972.alertChannelId", "833081");
Line Found : user_pref("CT2438972.components.1000034", false);
Line Found : user_pref("CT2438972.components.1000082", true);
Line Found : user_pref("CT2438972.components.1000234", true);
Line Found : user_pref("CT2438972.components.1000515", true);
Line Found : user_pref("CT2438972.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.conduit.com;apps.conduit.com;services.apps.conduit.com\",\"AppsDetectionUrlPattern\":\"hxxp://appdown[...]
Line Found : user_pref("CT2438972.globalFirstTimeInfoLastCheckTime", "Tue Aug 16 2011 21:58:59 GMT+0200");
Line Found : user_pref("CT2438972.homepageProtectorEnableByLogin", true);
Line Found : user_pref("CT2438972.initDone", true);
Line Found : user_pref("CT2438972.isAppTrackingManagerOn", true);
Line Found : user_pref("CT2438972.isFirstRadioInstallation", false);
Line Found : user_pref("CT2438972.myStuffEnabled", true);
Line Found : user_pref("CT2438972.myStuffPublihserMinWidth", 400);
Line Found : user_pref("CT2438972.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID");
Line Found : user_pref("CT2438972.myStuffServiceIntervalMM", 1440);
Line Found : user_pref("CT2438972.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUFF_LUT");
Line Found : user_pref("CT2438972.oldAppsList", "129018056601944690,129018056601944691,111,129018057810537586,129018064080694285,129050175573737950,129308343011437536,129228955154539562,129036212333756256,12913732[...]
Line Found : user_pref("CT2438972.searchProtectorDialogDelayInSec", 10);
Line Found : user_pref("CT2438972.searchProtectorEnableByLogin", true);
Line Found : user_pref("CT2438972.testingCtid", "");
Line Found : user_pref("CT2438972.toolbarAppMetaDataLastCheckTime", "Tue Aug 16 2011 13:58:36 GMT+0200");
Line Found : user_pref("CT2438972.toolbarContextMenuLastCheckTime", "Tue Aug 16 2011 13:58:36 GMT+0200");
Line Found : user_pref("CT2438972.usagesFlag", 2);
Line Found : user_pref("CT2786678..clientLogIsEnabled", false);
Line Found : user_pref("CT2786678..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
Line Found : user_pref("CT2786678..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
Line Found : user_pref("CT2786678.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);
Line Found : user_pref("CT2786678.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
Line Found : user_pref("CT2786678.BrowserCompStateIsOpen_129579220236217502", true);
Line Found : user_pref("CT2786678.CTID", "CT2786678");
Line Found : user_pref("CT2786678.CurrentServerDate", "31-3-2012");
Line Found : user_pref("CT2786678.DSInstall", true);
Line Found : user_pref("CT2786678.DialogsAlignMode", "LTR");
Line Found : user_pref("CT2786678.DialogsGetterLastCheckTime", "Sat Mar 31 2012 12:47:40 GMT+0200");
Line Found : user_pref("CT2786678.DownloadReferralCookieData", "");
Line Found : user_pref("CT2786678.EMailNotifierPollDate", "Sat Mar 31 2012 12:47:33 GMT+0200");
Line Found : user_pref("CT2786678.FeedLastCount5690698542593514850", 263);
Line Found : user_pref("CT2786678.FeedPollDate2429156812186649977", "Sat Mar 31 2012 12:47:43 GMT+0200");
Line Found : user_pref("CT2786678.FeedPollDate2429156813040823546", "Sat Mar 31 2012 12:47:42 GMT+0200");
Line Found : user_pref("CT2786678.FeedPollDate2429156813130095866", "Sat Mar 31 2012 12:47:42 GMT+0200");
Line Found : user_pref("CT2786678.FeedPollDate2429156813224203613", "Sat Mar 31 2012 12:47:42 GMT+0200");
Line Found : user_pref("CT2786678.FeedPollDate2429156813230837251", "Sat Mar 31 2012 12:47:43 GMT+0200");
Line Found : user_pref("CT2786678.FeedPollDate2429156813454291735", "Sat Mar 31 2012 12:47:42 GMT+0200");
Line Found : user_pref("CT2786678.FeedPollDate2429156813729834876", "Sat Mar 31 2012 12:47:42 GMT+0200");
Line Found : user_pref("CT2786678.FeedPollDate2429156813860870021", "Sat Mar 31 2012 12:47:43 GMT+0200");
Line Found : user_pref("CT2786678.FeedPollDate2429156814264681793", "Sat Mar 31 2012 12:47:43 GMT+0200");
Line Found : user_pref("CT2786678.FeedPollDate2429156814863075366", "Sat Mar 31 2012 12:47:42 GMT+0200");
Line Found : user_pref("CT2786678.FeedPollDate2429156815257761081", "Sat Mar 31 2012 12:47:42 GMT+0200");
Line Found : user_pref("CT2786678.FeedTTL2429156813040823546", 15);
Line Found : user_pref("CT2786678.FeedTTL2429156813130095866", 10);
Line Found : user_pref("CT2786678.FeedTTL2429156813454291735", 5);
Line Found : user_pref("CT2786678.FeedTTL2429156814264681793", 5);
Line Found : user_pref("CT2786678.FirstServerDate", "16-10-2011");
Line Found : user_pref("CT2786678.FirstTime", true);
Line Found : user_pref("CT2786678.FirstTimeFF3", true);
Line Found : user_pref("CT2786678.FixPageNotFoundErrors", false);
Line Found : user_pref("CT2786678.GroupingServerCheckInterval", 1440);
Line Found : user_pref("CT2786678.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
Line Found : user_pref("CT2786678.HPInstall", false);
Line Found : user_pref("CT2786678.HasUserGlobalKeys", true);
Line Found : user_pref("CT2786678.HomePageProtectorEnabled", false);
Line Found : user_pref("CT2786678.HomepageBeforeUnload", "hxxp://www.seznam.cz/?clid=3");
Line Found : user_pref("CT2786678.Initialize", true);
Line Found : user_pref("CT2786678.InitializeCommonPrefs", true);
Line Found : user_pref("CT2786678.InstallationAndCookieDataSentCount", 3);
Line Found : user_pref("CT2786678.InstallationType", "UnknownIntegration");
Line Found : user_pref("CT2786678.InstalledDate", "Sun Oct 16 2011 22:21:30 GMT+0200");
Line Found : user_pref("CT2786678.IsGrouping", false);
Line Found : user_pref("CT2786678.IsInitSetupIni", true);
Line Found : user_pref("CT2786678.IsMulticommunity", false);
Line Found : user_pref("CT2786678.IsOpenThankYouPage", true);
Line Found : user_pref("CT2786678.IsOpenUninstallPage", false);
Line Found : user_pref("CT2786678.LanguagePackLastCheckTime", "Sat Mar 31 2012 12:47:39 GMT+0200");
Line Found : user_pref("CT2786678.LanguagePackReloadIntervalMM", 1440);
Line Found : user_pref("CT2786678.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx");
Line Found : user_pref("CT2786678.LastLogin_3.10.0.1", "Sat Mar 31 2012 12:47:37 GMT+0200");
Line Found : user_pref("CT2786678.LastLogin_3.7.0.6", "Sun Oct 16 2011 22:21:35 GMT+0200");
Line Found : user_pref("CT2786678.LatestVersion", "3.10.0.1");
Line Found : user_pref("CT2786678.Locale", "en");
Line Found : user_pref("CT2786678.MCDetectTooltipHeight", "83");
Line Found : user_pref("CT2786678.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
Line Found : user_pref("CT2786678.MCDetectTooltipWidth", "295");
Line Found : user_pref("CT2786678.MyStuffEnabledAtInstallation", true);
Line Found : user_pref("CT2786678.OriginalFirstVersion", "3.7.0.6");
Line Found : user_pref("CT2786678.SearchCaption", " ");
Line Found : user_pref("CT2786678.SearchEngineBeforeUnload", "chrome://browser-region/locale/region.properties");
Line Found : user_pref("CT2786678.SearchFromAddressBarIsInit", true);
Line Found : user_pref("CT2786678.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2786678&q=");
Line Found : user_pref("CT2786678.SearchInNewTabEnabled", true);
Line Found : user_pref("CT2786678.SearchInNewTabIntervalMM", 1440);
Line Found : user_pref("CT2786678.SearchInNewTabLastCheckTime", "Sat Mar 31 2012 12:47:37 GMT+0200");
Line Found : user_pref("CT2786678.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID");
Line Found : user_pref("CT2786678.SearchInNewTabUsageUrl", "hxxp://usage.hosting.toolbar.conduit-services.com/usage.ashx?ctid=EB_TOOLBAR_ID");
Line Found : user_pref("CT2786678.SearchProtectorEnabled", false);
Line Found : user_pref("CT2786678.SearchProtectorToolbarDisabled", false);
Line Found : user_pref("CT2786678.SendProtectorDataViaLogin", true);
Line Found : user_pref("CT2786678.ServiceMapLastCheckTime", "Sat Mar 31 2012 12:47:34 GMT+0200");
Line Found : user_pref("CT2786678.SettingsLastCheckTime", "Sat Mar 31 2012 12:47:32 GMT+0200");
Line Found : user_pref("CT2786678.SettingsLastUpdate", "1331834901");
Line Found : user_pref("CT2786678.TBHomePageUrl", "hxxp://search.conduit.com/?ctid=CT2786678&SearchSource=13");
Line Found : user_pref("CT2786678.ThirdPartyComponentsInterval", 504);
Line Found : user_pref("CT2786678.ThirdPartyComponentsLastCheck", "Sat Mar 31 2012 12:47:32 GMT+0200");
Line Found : user_pref("CT2786678.ThirdPartyComponentsLastUpdate", "1312887586");
Line Found : user_pref("CT2786678.ToolbarShrinkedFromSetup", false);
Line Found : user_pref("CT2786678.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2786678");
Line Found : user_pref("CT2786678.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,client.conduit-storage.com,OurToolbar.com,CommunityToolbars.com,ForumToolbar.com,MyBlogToolbar.com,MyCity[...]
Line Found : user_pref("CT2786678.Uninstall", true);
Line Found : user_pref("CT2786678.UserID", "UN91804285549309164");
Line Found : user_pref("CT2786678.WeatherNetwork", "");
Line Found : user_pref("CT2786678.WeatherPollDate", "Sat Mar 31 2012 12:47:42 GMT+0200");
Line Found : user_pref("CT2786678.WeatherUnit", "C");
Line Found : user_pref("CT2786678.alertChannelId", "1178763");
Line Found : user_pref("CT2786678.backendstorage.cbfirsttime", "53756E204F637420313620323031312032323A32313A343620474D542B30323030");
Line Found : user_pref("CT2786678.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.conduit.com;apps.conduit.com;services.apps.conduit.com\",\"AppsDetectionUrlPattern\":\"hxxp://appdown[...]
Line Found : user_pref("CT2786678.globalFirstTimeInfoLastCheckTime", "Sat Mar 31 2012 12:47:39 GMT+0200");
Line Found : user_pref("CT2786678.homepageProtectorEnableByLogin", true);
Line Found : user_pref("CT2786678.initDone", true);
Line Found : user_pref("CT2786678.isAppTrackingManagerOn", true);
Line Found : user_pref("CT2786678.myStuffEnabled", true);
Line Found : user_pref("CT2786678.myStuffPublihserMinWidth", 400);
Line Found : user_pref("CT2786678.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID");
Line Found : user_pref("CT2786678.myStuffServiceIntervalMM", 1440);
Line Found : user_pref("CT2786678.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUFF_LUT");
Line Found : user_pref("CT2786678.oldAppsList", "129295695672325902,129295695672325903,1000234,129295698017012804,1000034,129526967958500204,129309489763975460,5690698542593514850,129309485163350924,12931541142425[...]
Line Found : user_pref("CT2786678.revertSettingsEnabled", true);
Line Found : user_pref("CT2786678.searchProtectorDialogDelayInSec", 10);
Line Found : user_pref("CT2786678.searchProtectorEnableByLogin", true);
Line Found : user_pref("CT2786678.testingCtid", "");
Line Found : user_pref("CT2786678.toolbarAppMetaDataLastCheckTime", "Sat Mar 31 2012 12:47:37 GMT+0200");
Line Found : user_pref("CT2786678.toolbarContextMenuLastCheckTime", "Sat Mar 31 2012 12:47:39 GMT+0200");
Line Found : user_pref("CommunityToolbar.CantToolbarBeEngineOwner", "CT2438727");
Line Found : user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit.com/root/CT2438727/CT2438727", "\"835a34fd1644a2b70148726d24d29beb1\"");
Line Found : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/1178763/1174448/ES", "\"0\"");
Line Found : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/832836/828639/ES", "\"0\"");
Line Found : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/833081/828884/CZ", "\"0\"");
Line Found : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2438727", "\"0\"");
Line Found : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2438972", "\"0\"");
Line Found : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2786678", "\"1313448428\"");
Line Found : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&locale=en", "wVmmvqqOMqrv5xct1cJIHg==");
Line Found : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&locale=en", "0uSPYx+Kl2jpu8sJZMeHjw==");
Line Found : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&locale=en", "Dclc8oo4TTv7+mAkSlUSWg==");
Line Found : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&locale=en", "cTVrc75U9YwdI74PAhUYFw==");
Line Found : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\"07879643d3acc1:0\"");
Line Found : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.10.0.1", "\"4ead38b3e6bcd1:0\"");
Line Found : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.3.5.1", "\"07b2625f8cb1:0\"");
Line Found : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.4.1.0", "\"07b2625f8cb1:0\"");
Line Found : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.5.0.12", "\"8028f138140cc1:0\"");
Line Found : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.6.0.10", "\"80ee9485875dcc1:0\"");
Line Found : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.7.0.6", "\"6a637346d78ccc1:0\"");
Line Found : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.8.0.8", "\"80ee9485875dcc1:0\"");
Line Found : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2438727", "\"88ab3d189479970c76432224e585cea4\"");
Line Found : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2438972", "\"634485749189530000\"");
Line Found : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2786678", "\"88ab3d189479970c76432224e585cea4\"");
Line Found : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.conduit-services.com/?ctid=CT2438727&octid=CT2438727", "\"1322100586\"");
Line Found : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.conduit-services.com/?ctid=CT2438972&octid=CT2438972", "\"1312887586\"");
Line Found : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.conduit-services.com/?ctid=CT2786678&octid=CT2786678", "\"e7eaeebeb35f6ed50962c00707bc22cf1\"");
Line Found : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT2438727/CT2438727", "\"1311168869\"");
Line Found : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT2438972/CT2438972", "\"1312887586\"");
Line Found : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/27/243/CT2438727/Images/Blank.png", "\"27f9ceb6f365cb1:0\"");
Line Found : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/7/176/CT1764407/Images/634219899986281250.gif", "\"14819e877b65cb1:0\"");
Line Found : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/images/skins/zynga/seperator.gif", "\"461a8601461ca1:0\"");
Line Found : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=en", "\"ced64c3c2c583b79e12b73d4f9b02d35\"");
Line Found : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/96951800.xml", "\"7b113a5b75b365f833b61fc5dd8b9c5e\"-gzip");
Line Found : user_pref("CommunityToolbar.LatestLibsPath", "file:///C:\\Documents and Settings\\Ivanka\\Data aplikací\\Mozilla\\Firefox\\Profiles\\umw0dbil.default\\conduitCommon\\modules\\3.8.0.8");
Line Found : user_pref("CommunityToolbar.LatestToolbarVersionInstalled", "3.8.0.8");
Line Found : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "");
Line Found : user_pref("CommunityToolbar.ToolbarsList", "CT2438727,CT2438972,CT2786678");
Line Found : user_pref("CommunityToolbar.ToolbarsList2", "CT2438727,CT2438972,CT2786678");
Line Found : user_pref("CommunityToolbar.ToolbarsList4", "CT2438972,CT2786678");
Line Found : user_pref("CommunityToolbar.alert.alertDialogsGetterLastCheckTime", "Mon Jun 13 2011 19:20:08 GMT+0200");
Line Found : user_pref("CommunityToolbar.alert.alertEnabled", false);
Line Found : user_pref("CommunityToolbar.alert.clientsServerUrl", "hxxp://alert.client.conduit.com");
Line Found : user_pref("CommunityToolbar.alert.locale", "en");
Line Found : user_pref("CommunityToolbar.alert.loginIntervalMin", 1440);
Line Found : user_pref("CommunityToolbar.alert.loginLastCheckTime", "Tue Jun 21 2011 17:40:59 GMT+0200");
Line Found : user_pref("CommunityToolbar.alert.loginLastUpdateTime", "1305622559");
Line Found : user_pref("CommunityToolbar.alert.messageShowTimeSec", 20);
Line Found : user_pref("CommunityToolbar.alert.servicesServerUrl", "hxxp://alert.services.conduit.com");
Line Found : user_pref("CommunityToolbar.alert.showTrayIcon", false);
Line Found : user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300);
Line Found : user_pref("CommunityToolbar.alert.userId", "65115c5d-3b16-459f-a15b-a46f818f9cf7");
Line Found : user_pref("CommunityToolbar.facebook.settingsLastCheckTime", "Sat Mar 31 2012 12:47:34 GMT+0200");
Line Found : user_pref("CommunityToolbar.globalUserId", "90b4f5b5-9a08-423b-8fd9-c664a5cf3e46");
Line Found : user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true);
Line Found : user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true);
Line Found : user_pref("CommunityToolbar.notifications.alertDialogsGetterLastCheckTime", "Wed Dec 07 2011 20:56:44 GMT+0100");
Line Found : user_pref("CommunityToolbar.notifications.alertInfoInterval", 1440);
Line Found : user_pref("CommunityToolbar.notifications.alertInfoLastCheckTime", "Wed Dec 07 2011 20:56:51 GMT+0100");
Line Found : user_pref("CommunityToolbar.notifications.clientsServerUrl", "hxxp://alert.client.conduit.com");
Line Found : user_pref("CommunityToolbar.notifications.locale", "en");
Line Found : user_pref("CommunityToolbar.notifications.loginIntervalMin", 1440);
Line Found : user_pref("CommunityToolbar.notifications.loginLastCheckTime", "Wed Dec 07 2011 20:56:44 GMT+0100");
Line Found : user_pref("CommunityToolbar.notifications.loginLastUpdateTime", "1313487611");
Line Found : user_pref("CommunityToolbar.notifications.messageShowTimeSec", 20);
Line Found : user_pref("CommunityToolbar.notifications.servicesServerUrl", "hxxp://alert.services.conduit.com");
Line Found : user_pref("CommunityToolbar.notifications.showTrayIcon", false);
Line Found : user_pref("CommunityToolbar.notifications.userCloseIntervalMin", 300);
Line Found : user_pref("CommunityToolbar.notifications.userId", "01df4a87-f24b-45c2-a9bc-98158859d018");
Line Found : user_pref("CommunityToolbar.originalHomepage", "hxxp://www.seznam.cz/?clid=3");
Line Found : user_pref("CommunityToolbar.originalSearchEngine", "chrome://browser-region/locale/region.properties");
Line Found : user_pref("CommunityToolbar.twitter.user_96951800.LastCheckTime", "Tue Aug 16 2011 22:59:50 GMT+0200");
Line Found : user_pref("extensions.facemoods.aflt", "_#ddrnw");
Line Found : user_pref("extensions.facemoods.firstRun", false);
Line Found : user_pref("extensions.facemoods.lastActv", "22");
Line Found : user_pref("extensions.wrc.SearchRules.ask.com.style", ".WRCN {display:none} #yui-main .tsrc_vnru .title + .WRCN, #yui-main #teoma-results .title + .WRCN {display:inline !important; background: url(\"I[...]
Line Found : user_pref("extensions.wrc.SearchRules.ask.com.url", "^hxxp(s)?\\:\\/\\/(.+\\.)?ask\\.com\\/.*");
Line Found : user_pref("extensions.wrc.SearchRules.rambler.ru.style", ".WRCN {display:none} .search-results .title + .WRCN {display:inline !important; background: url(\"IMAGE\") right no-repeat}");

*************************

AdwCleaner[R0].txt - [38471 octets] - [27/12/2013 10:17:09]

########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [38532 octets] ##########

#4 Příspěvek od **Márty84** » 27 pro 2013 10:38

Znovu ukoncete vsechny programy a spustte AdwCleaner jako spravce.
Tentokrat kliknete na Clean
Program zacne pracovat (muze dojit k restartu pc) a vyplivne dalsi log (pripadne bude zde C:\AdwCleaner\AdwCleaner [S?].txt ). Ten mi sem zase zkopirujte.

Udelejte !!!kompletni!!! kontrolu s MBAM http://forum.viry.cz/viewtopic.php?f=29&t=115222 a dejte sem vysledky. Predem nic nemazte, miva obcas falesne detekce

Allkor · #5 Příspěvek od **Allkor** » 27 pro 2013 13:57

AdwClenaer:

# AdwCleaner v3.016 - Report created 27/12/2013 at 10:57:21
# Updated 23/12/2013 by Xplode
# Operating System : Microsoft Windows XP Service Pack 3 (32 bits)
# Username : Ivanka - ALLKOR
# Running from : C:\Documents and Settings\Ivanka\Plocha\adwcleaner.exe
# Option : Clean

***** [ Services ] *****

***** [ Files / Folders ] *****

Folder Deleted : C:\Documents and Settings\All Users\Data aplikací\AlawarWrapper
Folder Deleted : C:\Program Files\Conduit
Folder Deleted : C:\Documents and Settings\Ivanka\Local Settings\Data aplikací\Conduit
Folder Deleted : C:\Documents and Settings\Ivanka\Data aplikací\OpenCandy
Folder Deleted : C:\Documents and Settings\Ivanka\Data aplikací\Mozilla\Firefox\Profiles\umw0dbil.default\Conduit
Folder Deleted : C:\Documents and Settings\Ivanka\Data aplikací\Mozilla\Firefox\Profiles\umw0dbil.default\ConduitCommon
Folder Deleted : C:\Documents and Settings\Ivanka\Data aplikací\Mozilla\Firefox\Profiles\umw0dbil.default\Extensions\staged
Folder Deleted : C:\Documents and Settings\Ivanka\Data aplikací\Mozilla\Firefox\Profiles\umw0dbil.default\Extensions\{ea614400-e918-4741-9a97-7a972ff7c30b}(2)
File Deleted : C:\DOCUME~1\Ivanka\LOCALS~1\Temp\Uninstall.exe
File Deleted : C:\Documents and Settings\Ivanka\Data aplikací\Mozilla\Firefox\Profiles\umw0dbil.default\user.js

***** [ Shortcuts ] *****

***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Classes\AppID\WLXQuickTimeShellExt.DLL
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT2786678
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{00000001-4FEF-40D3-B3FA-E0531B897F98}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{007EFBDF-8A5D-4930-97CC-A4B437CBA777}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{64697678-0000-0010-8000-00AA00389B71}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{83FF80F4-8C74-4B80-B5BA-C8DDD434E5C4}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{83FF80F4-8C74-4B80-B5BA-C8DDD434E5C4}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKCU\Software\YahooPartnerToolbar
Key Deleted : HKLM\Software\Conduit
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\08121C32A9C319F4CB0C11FF059552A4
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0FF2AEFF45EEA0A48A4B33C1973B6094
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\305B09CE8C53A214DB58887F62F25536

***** [ Browsers ] *****

-\\ Internet Explorer v8.0.6001.18702

-\\ Mozilla Firefox v26.0 (en-US)

[ File : C:\Documents and Settings\Ivanka\Data aplikací\Mozilla\Firefox\Profiles\umw0dbil.default\prefs.js ]

Line Deleted : user_pref("CT2438727..clientLogIsEnabled", true);
Line Deleted : user_pref("CT2438727..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
Line Deleted : user_pref("CT2438727..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
Line Deleted : user_pref("CT2438727.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);
Line Deleted : user_pref("CT2438727.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
Line Deleted : user_pref("CT2438727.AppTrackingLastCheckTime", "Wed Jun 01 2011 22:47:04 GMT+0200");
Line Deleted : user_pref("CT2438727.CT2438727", "CT2438727");
Line Deleted : user_pref("CT2438727.CommunitiesChangesLastCheckTime", "0");
Line Deleted : user_pref("CT2438727.CurrentServerDate", "31-3-2012");
Line Deleted : user_pref("CT2438727.DialogsAlignMode", "LTR");
Line Deleted : user_pref("CT2438727.DialogsGetterLastCheckTime", "Sat Mar 31 2012 12:47:51 GMT+0200");
Line Deleted : user_pref("CT2438727.DownloadReferralCookieData", "");
Line Deleted : user_pref("CT2438727.EnableSearchHistory", false);
Line Deleted : user_pref("CT2438727.EnableSearchSuggest", false);
Line Deleted : user_pref("CT2438727.FirstServerDate", "22-5-2011");
Line Deleted : user_pref("CT2438727.FirstTime", true);
Line Deleted : user_pref("CT2438727.FirstTimeFF3", true);
Line Deleted : user_pref("CT2438727.FixPageNotFoundErrors", false);
Line Deleted : user_pref("CT2438727.GroupingInvalidateCache", false);
Line Deleted : user_pref("CT2438727.GroupingLastCheckTime", "0");
Line Deleted : user_pref("CT2438727.GroupingLastServerUpdateTime", "0");
Line Deleted : user_pref("CT2438727.GroupingServerCheckInterval", 1440);
Line Deleted : user_pref("CT2438727.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
Line Deleted : user_pref("CT2438727.HasUserGlobalKeys", true);
Line Deleted : user_pref("CT2438727.HomePageProtectorEnabled", false);
Line Deleted : user_pref("CT2438727.Initialize", true);
Line Deleted : user_pref("CT2438727.InitializeCommonPrefs", true);
Line Deleted : user_pref("CT2438727.InstallationAndCookieDataSentCount", 3);
Line Deleted : user_pref("CT2438727.InstalledDate", "Sun May 22 2011 11:42:28 GMT+0200");
Line Deleted : user_pref("CT2438727.InvalidateCache", false);
Line Deleted : user_pref("CT2438727.IsAlertDBUpdated", true);
Line Deleted : user_pref("CT2438727.IsGrouping", false);
Line Deleted : user_pref("CT2438727.IsMulticommunity", false);
Line Deleted : user_pref("CT2438727.IsOpenThankYouPage", true);
Line Deleted : user_pref("CT2438727.IsOpenUninstallPage", true);
Line Deleted : user_pref("CT2438727.LanguagePackLastCheckTime", "Sat Mar 31 2012 12:47:51 GMT+0200");
Line Deleted : user_pref("CT2438727.LanguagePackReloadIntervalMM", 1440);
Line Deleted : user_pref("CT2438727.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx");
Line Deleted : user_pref("CT2438727.LastLogin_3.10.0.1", "Sat Mar 31 2012 12:47:51 GMT+0200");
Line Deleted : user_pref("CT2438727.LastLogin_3.3.5.1", "Tue Jun 21 2011 17:41:01 GMT+0200");
Line Deleted : user_pref("CT2438727.LastLogin_3.5.0.12", "Mon Aug 15 2011 14:12:00 GMT+0200");
Line Deleted : user_pref("CT2438727.LastLogin_3.6.0.10", "Tue Sep 27 2011 17:23:51 GMT+0200");
Line Deleted : user_pref("CT2438727.LastLogin_3.7.0.6", "Tue Nov 08 2011 11:52:43 GMT+0100");
Line Deleted : user_pref("CT2438727.LastLogin_3.8.0.8", "Wed Dec 07 2011 20:56:44 GMT+0100");
Line Deleted : user_pref("CT2438727.LatestVersion", "3.10.0.1");
Line Deleted : user_pref("CT2438727.Locale", "en");
Line Deleted : user_pref("CT2438727.MCDetectTooltipHeight", "83");
Line Deleted : user_pref("CT2438727.MCDetectTooltipShow", false);
Line Deleted : user_pref("CT2438727.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
Line Deleted : user_pref("CT2438727.MCDetectTooltipWidth", "295");
Line Deleted : user_pref("CT2438727.MyStuffEnabledAtInstallation", true);
Line Deleted : user_pref("CT2438727.RadioLastCheckTime", "0");
Line Deleted : user_pref("CT2438727.RadioLastUpdateIPServer", "0");
Line Deleted : user_pref("CT2438727.RadioLastUpdateServer", "0");
Line Deleted : user_pref("CT2438727.SearchBoxWidth", 100);
Line Deleted : user_pref("CT2438727.SearchEngineBeforeUnload", "chrome://browser-region/locale/region.properties");
Line Deleted : user_pref("CT2438727.SearchFromAddressBarIsInit", true);
Line Deleted : user_pref("CT2438727.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2438727&SearchSource=2&q=");
Line Deleted : user_pref("CT2438727.SearchInNewTabEnabled", true);
Line Deleted : user_pref("CT2438727.SearchInNewTabIntervalMM", 1440);
Line Deleted : user_pref("CT2438727.SearchInNewTabLastCheckTime", "Sat Mar 31 2012 12:47:51 GMT+0200");
Line Deleted : user_pref("CT2438727.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID");
Line Deleted : user_pref("CT2438727.SearchInNewTabUsageUrl", "hxxp://usage.hosting.toolbar.conduit-services.com/usage.ashx?ctid=EB_TOOLBAR_ID");
Line Deleted : user_pref("CT2438727.SearchProtectorEnabled", false);
Line Deleted : user_pref("CT2438727.SearchProtectorToolbarDisabled", false);
Line Deleted : user_pref("CT2438727.ServiceMapLastCheckTime", "Sat Mar 31 2012 12:47:50 GMT+0200");
Line Deleted : user_pref("CT2438727.SettingsLastCheckTime", "Sat Mar 31 2012 12:47:49 GMT+0200");
Line Deleted : user_pref("CT2438727.SettingsLastUpdate", "1326723880");
Line Deleted : user_pref("CT2438727.ThirdPartyComponentsInterval", 504);
Line Deleted : user_pref("CT2438727.ThirdPartyComponentsLastCheck", "Sat Mar 31 2012 12:47:49 GMT+0200");
Line Deleted : user_pref("CT2438727.ThirdPartyComponentsLastUpdate", "1312887586");
Line Deleted : user_pref("CT2438727.ToolbarShrinkedFromSetup", false);
Line Deleted : user_pref("CT2438727.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2438727");
Line Deleted : user_pref("CT2438727.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,client.conduit-storage.com,OurToolbar.com,CommunityToolbars.com,ForumToolbar.com,MyBlogToolbar.com,MyCity[...]
Line Deleted : user_pref("CT2438727.Uninstall", true);
Line Deleted : user_pref("CT2438727.UserID", "UN84503558092297499");
Line Deleted : user_pref("CT2438727.ValidationData_Toolbar", 2);
Line Deleted : user_pref("CT2438727.alertChannelId", "832836");
Line Deleted : user_pref("CT2438727.approveUntrustedApps", true);
Line Deleted : user_pref("CT2438727.backendstorage.currentgame", "70696F6E656572747261696C");
Line Deleted : user_pref("CT2438727.components.1000034", false);
Line Deleted : user_pref("CT2438727.components.1000082", false);
Line Deleted : user_pref("CT2438727.components.1000234", false);
Line Deleted : user_pref("CT2438727.components.1000515", false);
Line Deleted : user_pref("CT2438727.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.conduit.com;apps.conduit.com;services.apps.conduit.com\",\"AppsDetectionUrlPattern\":\"hxxp://appdown[...]
Line Deleted : user_pref("CT2438727.globalFirstTimeInfoLastCheckTime", "Sat Mar 31 2012 12:47:51 GMT+0200");
Line Deleted : user_pref("CT2438727.homepageProtectorEnableByLogin", true);
Line Deleted : user_pref("CT2438727.initDone", true);
Line Deleted : user_pref("CT2438727.isAppTrackingManagerOn", true);
Line Deleted : user_pref("CT2438727.myStuffEnabled", true);
Line Deleted : user_pref("CT2438727.myStuffPublihserMinWidth", 400);
Line Deleted : user_pref("CT2438727.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID");
Line Deleted : user_pref("CT2438727.myStuffServiceIntervalMM", 1440);
Line Deleted : user_pref("CT2438727.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUFF_LUT");
Line Deleted : user_pref("CT2438727.oldAppsList", "129017707048431316,129017707048587567,111,129509324767711885,129023982676944454,129665740530401877,1000034,1000080,1000082,1000234,1000515,1000,1001,1002,1003,1004,[...]
Line Deleted : user_pref("CT2438727.revertSettingsEnabled", true);
Line Deleted : user_pref("CT2438727.searchProtectorDialogDelayInSec", 10);
Line Deleted : user_pref("CT2438727.searchProtectorEnableByLogin", true);
Line Deleted : user_pref("CT2438727.testingCtid", "");
Line Deleted : user_pref("CT2438727.toolbarAppMetaDataLastCheckTime", "Sat Mar 31 2012 12:47:51 GMT+0200");
Line Deleted : user_pref("CT2438727.toolbarContextMenuLastCheckTime", "Sat Mar 31 2012 12:47:51 GMT+0200");
Line Deleted : user_pref("CT2438727.usagesFlag", 2);
Line Deleted : user_pref("CT2438972..clientLogIsEnabled", true);
Line Deleted : user_pref("CT2438972..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
Line Deleted : user_pref("CT2438972..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
Line Deleted : user_pref("CT2438972.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
Line Deleted : user_pref("CT2438972.BrowserCompStateIsOpen_1000515", true);
Line Deleted : user_pref("CT2438972.CT2438972", "CT2438972");
Line Deleted : user_pref("CT2438972.CurrentServerDate", "16-8-2011");
Line Deleted : user_pref("CT2438972.DialogsAlignMode", "LTR");
Line Deleted : user_pref("CT2438972.DialogsGetterLastCheckTime", "Tue Aug 16 2011 13:58:37 GMT+0200");
Line Deleted : user_pref("CT2438972.DownloadReferralCookieData", "");
Line Deleted : user_pref("CT2438972.FeedLastCount129137323571250068", 50);
Line Deleted : user_pref("CT2438972.FeedPollDate129137323572812601", "Tue Aug 16 2011 22:38:42 GMT+0200");
Line Deleted : user_pref("CT2438972.FeedTTL129137323572812601", 40);
Line Deleted : user_pref("CT2438972.FirstServerDate", "30-5-2011");
Line Deleted : user_pref("CT2438972.FirstTime", true);
Line Deleted : user_pref("CT2438972.FirstTimeFF3", true);
Line Deleted : user_pref("CT2438972.FixPageNotFoundErrors", false);
Line Deleted : user_pref("CT2438972.GroupingServerCheckInterval", 1440);
Line Deleted : user_pref("CT2438972.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
Line Deleted : user_pref("CT2438972.HasUserGlobalKeys", true);
Line Deleted : user_pref("CT2438972.HomePageProtectorEnabled", false);
Line Deleted : user_pref("CT2438972.Initialize", true);
Line Deleted : user_pref("CT2438972.InitializeCommonPrefs", true);
Line Deleted : user_pref("CT2438972.InstallationAndCookieDataSentCount", 3);
Line Deleted : user_pref("CT2438972.InstalledDate", "Mon May 30 2011 21:13:41 GMT+0200");
Line Deleted : user_pref("CT2438972.InvalidateCache", false);
Line Deleted : user_pref("CT2438972.IsAlertDBUpdated", true);
Line Deleted : user_pref("CT2438972.IsGrouping", false);
Line Deleted : user_pref("CT2438972.IsMulticommunity", false);
Line Deleted : user_pref("CT2438972.IsOpenThankYouPage", true);
Line Deleted : user_pref("CT2438972.IsOpenUninstallPage", true);
Line Deleted : user_pref("CT2438972.IsProtectorsInit", true);
Line Deleted : user_pref("CT2438972.LanguagePackLastCheckTime", "Tue Aug 16 2011 13:58:36 GMT+0200");
Line Deleted : user_pref("CT2438972.LanguagePackReloadIntervalMM", 1440);
Line Deleted : user_pref("CT2438972.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx");
Line Deleted : user_pref("CT2438972.LastLogin_3.4.1.0", "Tue Jun 14 2011 20:05:55 GMT+0200");
Line Deleted : user_pref("CT2438972.LastLogin_3.6.0.10", "Tue Aug 16 2011 21:58:32 GMT+0200");
Line Deleted : user_pref("CT2438972.LatestVersion", "3.5.0.12");
Line Deleted : user_pref("CT2438972.Locale", "en");
Line Deleted : user_pref("CT2438972.MCDetectTooltipHeight", "83");
Line Deleted : user_pref("CT2438972.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
Line Deleted : user_pref("CT2438972.MCDetectTooltipWidth", "295");
Line Deleted : user_pref("CT2438972.MyStuffEnabledAtInstallation", true);
Line Deleted : user_pref("CT2438972.OriginalFirstVersion", "3.4.1.0");
Line Deleted : user_pref("CT2438972.RadioIsPodcast", false);
Line Deleted : user_pref("CT2438972.RadioLastCheckTime", "Tue Aug 16 2011 13:58:36 GMT+0200");
Line Deleted : user_pref("CT2438972.RadioLastUpdateIPServer", "3");
Line Deleted : user_pref("CT2438972.RadioLastUpdateServer", "0");
Line Deleted : user_pref("CT2438972.RadioMediaID", "9962");
Line Deleted : user_pref("CT2438972.RadioMediaType", "Media Player");
Line Deleted : user_pref("CT2438972.RadioMenuSelectedID", "EBRadioMenu_CT24389729962");
Line Deleted : user_pref("CT2438972.RadioShrinkedFromSetup", false);
Line Deleted : user_pref("CT2438972.RadioStationName", "California%20Rock");
Line Deleted : user_pref("CT2438972.RadioStationURL", "hxxp://feedlive.net/california.asx");
Line Deleted : user_pref("CT2438972.SearchEngineBeforeUnload", "chrome://browser-region/locale/region.properties");
Line Deleted : user_pref("CT2438972.SearchFromAddressBarIsInit", true);
Line Deleted : user_pref("CT2438972.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2438972&q=");
Line Deleted : user_pref("CT2438972.SearchInNewTabEnabled", true);
Line Deleted : user_pref("CT2438972.SearchInNewTabIntervalMM", 1440);
Line Deleted : user_pref("CT2438972.SearchInNewTabLastCheckTime", "Tue Aug 16 2011 13:58:35 GMT+0200");
Line Deleted : user_pref("CT2438972.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID");
Line Deleted : user_pref("CT2438972.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageService.asmx/UsersRequests?ctid=EB_TOOLBAR_ID");
Line Deleted : user_pref("CT2438972.SearchProtectorEnabled", false);
Line Deleted : user_pref("CT2438972.SearchProtectorToolbarDisabled", false);
Line Deleted : user_pref("CT2438972.ServiceMapLastCheckTime", "Tue Aug 16 2011 13:58:33 GMT+0200");
Line Deleted : user_pref("CT2438972.SettingsLastCheckTime", "Tue Aug 16 2011 19:50:35 GMT+0200");
Line Deleted : user_pref("CT2438972.SettingsLastUpdate", "1312887586");
Line Deleted : user_pref("CT2438972.ThirdPartyComponentsInterval", 504);
Line Deleted : user_pref("CT2438972.ThirdPartyComponentsLastCheck", "Tue Aug 16 2011 13:58:30 GMT+0200");
Line Deleted : user_pref("CT2438972.ThirdPartyComponentsLastUpdate", "1246786978");
Line Deleted : user_pref("CT2438972.ToolbarShrinkedFromSetup", false);
Line Deleted : user_pref("CT2438972.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2438972");
Line Deleted : user_pref("CT2438972.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,client.conduit-storage.com,OurToolbar.com,CommunityToolbars.com,ForumToolbar.com,MyBlogToolbar.com,MyCity[...]
Line Deleted : user_pref("CT2438972.UserID", "UN63686997725116454");
Line Deleted : user_pref("CT2438972.ValidationData_Toolbar", 2);
Line Deleted : user_pref("CT2438972.WeatherNetwork", "");
Line Deleted : user_pref("CT2438972.WeatherPollDate", "Tue Aug 16 2011 19:50:38 GMT+0200");
Line Deleted : user_pref("CT2438972.WeatherUnit", "C");
Line Deleted : user_pref("CT2438972.alertChannelId", "833081");
Line Deleted : user_pref("CT2438972.components.1000034", false);
Line Deleted : user_pref("CT2438972.components.1000082", true);
Line Deleted : user_pref("CT2438972.components.1000234", true);
Line Deleted : user_pref("CT2438972.components.1000515", true);
Line Deleted : user_pref("CT2438972.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.conduit.com;apps.conduit.com;services.apps.conduit.com\",\"AppsDetectionUrlPattern\":\"hxxp://appdown[...]
Line Deleted : user_pref("CT2438972.globalFirstTimeInfoLastCheckTime", "Tue Aug 16 2011 21:58:59 GMT+0200");
Line Deleted : user_pref("CT2438972.homepageProtectorEnableByLogin", true);
Line Deleted : user_pref("CT2438972.initDone", true);
Line Deleted : user_pref("CT2438972.isAppTrackingManagerOn", true);
Line Deleted : user_pref("CT2438972.isFirstRadioInstallation", false);
Line Deleted : user_pref("CT2438972.myStuffEnabled", true);
Line Deleted : user_pref("CT2438972.myStuffPublihserMinWidth", 400);
Line Deleted : user_pref("CT2438972.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID");
Line Deleted : user_pref("CT2438972.myStuffServiceIntervalMM", 1440);
Line Deleted : user_pref("CT2438972.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUFF_LUT");
Line Deleted : user_pref("CT2438972.oldAppsList", "129018056601944690,129018056601944691,111,129018057810537586,129018064080694285,129050175573737950,129308343011437536,129228955154539562,129036212333756256,12913732[...]
Line Deleted : user_pref("CT2438972.searchProtectorDialogDelayInSec", 10);
Line Deleted : user_pref("CT2438972.searchProtectorEnableByLogin", true);
Line Deleted : user_pref("CT2438972.testingCtid", "");
Line Deleted : user_pref("CT2438972.toolbarAppMetaDataLastCheckTime", "Tue Aug 16 2011 13:58:36 GMT+0200");
Line Deleted : user_pref("CT2438972.toolbarContextMenuLastCheckTime", "Tue Aug 16 2011 13:58:36 GMT+0200");
Line Deleted : user_pref("CT2438972.usagesFlag", 2);
Line Deleted : user_pref("CT2786678..clientLogIsEnabled", false);
Line Deleted : user_pref("CT2786678..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
Line Deleted : user_pref("CT2786678..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
Line Deleted : user_pref("CT2786678.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);
Line Deleted : user_pref("CT2786678.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
Line Deleted : user_pref("CT2786678.BrowserCompStateIsOpen_129579220236217502", true);
Line Deleted : user_pref("CT2786678.CTID", "CT2786678");
Line Deleted : user_pref("CT2786678.CurrentServerDate", "31-3-2012");
Line Deleted : user_pref("CT2786678.DSInstall", true);
Line Deleted : user_pref("CT2786678.DialogsAlignMode", "LTR");
Line Deleted : user_pref("CT2786678.DialogsGetterLastCheckTime", "Sat Mar 31 2012 12:47:40 GMT+0200");
Line Deleted : user_pref("CT2786678.DownloadReferralCookieData", "");
Line Deleted : user_pref("CT2786678.EMailNotifierPollDate", "Sat Mar 31 2012 12:47:33 GMT+0200");
Line Deleted : user_pref("CT2786678.FeedLastCount5690698542593514850", 263);
Line Deleted : user_pref("CT2786678.FeedPollDate2429156812186649977", "Sat Mar 31 2012 12:47:43 GMT+0200");
Line Deleted : user_pref("CT2786678.FeedPollDate2429156813040823546", "Sat Mar 31 2012 12:47:42 GMT+0200");
Line Deleted : user_pref("CT2786678.FeedPollDate2429156813130095866", "Sat Mar 31 2012 12:47:42 GMT+0200");
Line Deleted : user_pref("CT2786678.FeedPollDate2429156813224203613", "Sat Mar 31 2012 12:47:42 GMT+0200");
Line Deleted : user_pref("CT2786678.FeedPollDate2429156813230837251", "Sat Mar 31 2012 12:47:43 GMT+0200");
Line Deleted : user_pref("CT2786678.FeedPollDate2429156813454291735", "Sat Mar 31 2012 12:47:42 GMT+0200");
Line Deleted : user_pref("CT2786678.FeedPollDate2429156813729834876", "Sat Mar 31 2012 12:47:42 GMT+0200");
Line Deleted : user_pref("CT2786678.FeedPollDate2429156813860870021", "Sat Mar 31 2012 12:47:43 GMT+0200");
Line Deleted : user_pref("CT2786678.FeedPollDate2429156814264681793", "Sat Mar 31 2012 12:47:43 GMT+0200");
Line Deleted : user_pref("CT2786678.FeedPollDate2429156814863075366", "Sat Mar 31 2012 12:47:42 GMT+0200");
Line Deleted : user_pref("CT2786678.FeedPollDate2429156815257761081", "Sat Mar 31 2012 12:47:42 GMT+0200");
Line Deleted : user_pref("CT2786678.FeedTTL2429156813040823546", 15);
Line Deleted : user_pref("CT2786678.FeedTTL2429156813130095866", 10);
Line Deleted : user_pref("CT2786678.FeedTTL2429156813454291735", 5);
Line Deleted : user_pref("CT2786678.FeedTTL2429156814264681793", 5);
Line Deleted : user_pref("CT2786678.FirstServerDate", "16-10-2011");
Line Deleted : user_pref("CT2786678.FirstTime", true);
Line Deleted : user_pref("CT2786678.FirstTimeFF3", true);
Line Deleted : user_pref("CT2786678.FixPageNotFoundErrors", false);
Line Deleted : user_pref("CT2786678.GroupingServerCheckInterval", 1440);
Line Deleted : user_pref("CT2786678.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
Line Deleted : user_pref("CT2786678.HPInstall", false);
Line Deleted : user_pref("CT2786678.HasUserGlobalKeys", true);
Line Deleted : user_pref("CT2786678.HomePageProtectorEnabled", false);
Line Deleted : user_pref("CT2786678.HomepageBeforeUnload", "hxxp://www.seznam.cz/?clid=3");
Line Deleted : user_pref("CT2786678.Initialize", true);
Line Deleted : user_pref("CT2786678.InitializeCommonPrefs", true);
Line Deleted : user_pref("CT2786678.InstallationAndCookieDataSentCount", 3);
Line Deleted : user_pref("CT2786678.InstallationType", "UnknownIntegration");
Line Deleted : user_pref("CT2786678.InstalledDate", "Sun Oct 16 2011 22:21:30 GMT+0200");
Line Deleted : user_pref("CT2786678.IsGrouping", false);
Line Deleted : user_pref("CT2786678.IsInitSetupIni", true);
Line Deleted : user_pref("CT2786678.IsMulticommunity", false);
Line Deleted : user_pref("CT2786678.IsOpenThankYouPage", true);
Line Deleted : user_pref("CT2786678.IsOpenUninstallPage", false);
Line Deleted : user_pref("CT2786678.LanguagePackLastCheckTime", "Sat Mar 31 2012 12:47:39 GMT+0200");
Line Deleted : user_pref("CT2786678.LanguagePackReloadIntervalMM", 1440);
Line Deleted : user_pref("CT2786678.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx");
Line Deleted : user_pref("CT2786678.LastLogin_3.10.0.1", "Sat Mar 31 2012 12:47:37 GMT+0200");
Line Deleted : user_pref("CT2786678.LastLogin_3.7.0.6", "Sun Oct 16 2011 22:21:35 GMT+0200");
Line Deleted : user_pref("CT2786678.LatestVersion", "3.10.0.1");
Line Deleted : user_pref("CT2786678.Locale", "en");
Line Deleted : user_pref("CT2786678.MCDetectTooltipHeight", "83");
Line Deleted : user_pref("CT2786678.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
Line Deleted : user_pref("CT2786678.MCDetectTooltipWidth", "295");
Line Deleted : user_pref("CT2786678.MyStuffEnabledAtInstallation", true);
Line Deleted : user_pref("CT2786678.OriginalFirstVersion", "3.7.0.6");
Line Deleted : user_pref("CT2786678.SearchCaption", " ");
Line Deleted : user_pref("CT2786678.SearchEngineBeforeUnload", "chrome://browser-region/locale/region.properties");
Line Deleted : user_pref("CT2786678.SearchFromAddressBarIsInit", true);
Line Deleted : user_pref("CT2786678.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2786678&q=");
Line Deleted : user_pref("CT2786678.SearchInNewTabEnabled", true);
Line Deleted : user_pref("CT2786678.SearchInNewTabIntervalMM", 1440);
Line Deleted : user_pref("CT2786678.SearchInNewTabLastCheckTime", "Sat Mar 31 2012 12:47:37 GMT+0200");
Line Deleted : user_pref("CT2786678.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID");
Line Deleted : user_pref("CT2786678.SearchInNewTabUsageUrl", "hxxp://usage.hosting.toolbar.conduit-services.com/usage.ashx?ctid=EB_TOOLBAR_ID");
Line Deleted : user_pref("CT2786678.SearchProtectorEnabled", false);
Line Deleted : user_pref("CT2786678.SearchProtectorToolbarDisabled", false);
Line Deleted : user_pref("CT2786678.SendProtectorDataViaLogin", true);
Line Deleted : user_pref("CT2786678.ServiceMapLastCheckTime", "Sat Mar 31 2012 12:47:34 GMT+0200");
Line Deleted : user_pref("CT2786678.SettingsLastCheckTime", "Sat Mar 31 2012 12:47:32 GMT+0200");
Line Deleted : user_pref("CT2786678.SettingsLastUpdate", "1331834901");
Line Deleted : user_pref("CT2786678.TBHomePageUrl", "hxxp://search.conduit.com/?ctid=CT2786678&SearchSource=13");
Line Deleted : user_pref("CT2786678.ThirdPartyComponentsInterval", 504);
Line Deleted : user_pref("CT2786678.ThirdPartyComponentsLastCheck", "Sat Mar 31 2012 12:47:32 GMT+0200");
Line Deleted : user_pref("CT2786678.ThirdPartyComponentsLastUpdate", "1312887586");
Line Deleted : user_pref("CT2786678.ToolbarShrinkedFromSetup", false);
Line Deleted : user_pref("CT2786678.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2786678");
Line Deleted : user_pref("CT2786678.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,client.conduit-storage.com,OurToolbar.com,CommunityToolbars.com,ForumToolbar.com,MyBlogToolbar.com,MyCity[...]
Line Deleted : user_pref("CT2786678.Uninstall", true);
Line Deleted : user_pref("CT2786678.UserID", "UN91804285549309164");
Line Deleted : user_pref("CT2786678.WeatherNetwork", "");
Line Deleted : user_pref("CT2786678.WeatherPollDate", "Sat Mar 31 2012 12:47:42 GMT+0200");
Line Deleted : user_pref("CT2786678.WeatherUnit", "C");
Line Deleted : user_pref("CT2786678.alertChannelId", "1178763");
Line Deleted : user_pref("CT2786678.backendstorage.cbfirsttime", "53756E204F637420313620323031312032323A32313A343620474D542B30323030");
Line Deleted : user_pref("CT2786678.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.conduit.com;apps.conduit.com;services.apps.conduit.com\",\"AppsDetectionUrlPattern\":\"hxxp://appdown[...]
Line Deleted : user_pref("CT2786678.globalFirstTimeInfoLastCheckTime", "Sat Mar 31 2012 12:47:39 GMT+0200");
Line Deleted : user_pref("CT2786678.homepageProtectorEnableByLogin", true);
Line Deleted : user_pref("CT2786678.initDone", true);
Line Deleted : user_pref("CT2786678.isAppTrackingManagerOn", true);
Line Deleted : user_pref("CT2786678.myStuffEnabled", true);
Line Deleted : user_pref("CT2786678.myStuffPublihserMinWidth", 400);
Line Deleted : user_pref("CT2786678.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID");
Line Deleted : user_pref("CT2786678.myStuffServiceIntervalMM", 1440);
Line Deleted : user_pref("CT2786678.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUFF_LUT");
Line Deleted : user_pref("CT2786678.oldAppsList", "129295695672325902,129295695672325903,1000234,129295698017012804,1000034,129526967958500204,129309489763975460,5690698542593514850,129309485163350924,12931541142425[...]
Line Deleted : user_pref("CT2786678.revertSettingsEnabled", true);
Line Deleted : user_pref("CT2786678.searchProtectorDialogDelayInSec", 10);
Line Deleted : user_pref("CT2786678.searchProtectorEnableByLogin", true);
Line Deleted : user_pref("CT2786678.testingCtid", "");
Line Deleted : user_pref("CT2786678.toolbarAppMetaDataLastCheckTime", "Sat Mar 31 2012 12:47:37 GMT+0200");
Line Deleted : user_pref("CT2786678.toolbarContextMenuLastCheckTime", "Sat Mar 31 2012 12:47:39 GMT+0200");
Line Deleted : user_pref("CommunityToolbar.CantToolbarBeEngineOwner", "CT2438727");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit.com/root/CT2438727/CT2438727", "\"835a34fd1644a2b70148726d24d29beb1\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/1178763/1174448/ES", "\"0\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/832836/828639/ES", "\"0\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/833081/828884/CZ", "\"0\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2438727", "\"0\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2438972", "\"0\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2786678", "\"1313448428\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&locale=en", "wVmmvqqOMqrv5xct1cJIHg==");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&locale=en", "0uSPYx+Kl2jpu8sJZMeHjw==");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&locale=en", "Dclc8oo4TTv7+mAkSlUSWg==");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&locale=en", "cTVrc75U9YwdI74PAhUYFw==");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\"07879643d3acc1:0\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.10.0.1", "\"4ead38b3e6bcd1:0\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.3.5.1", "\"07b2625f8cb1:0\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.4.1.0", "\"07b2625f8cb1:0\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.5.0.12", "\"8028f138140cc1:0\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.6.0.10", "\"80ee9485875dcc1:0\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.7.0.6", "\"6a637346d78ccc1:0\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.8.0.8", "\"80ee9485875dcc1:0\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2438727", "\"88ab3d189479970c76432224e585cea4\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2438972", "\"634485749189530000\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2786678", "\"88ab3d189479970c76432224e585cea4\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.conduit-services.com/?ctid=CT2438727&octid=CT2438727", "\"1322100586\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.conduit-services.com/?ctid=CT2438972&octid=CT2438972", "\"1312887586\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.conduit-services.com/?ctid=CT2786678&octid=CT2786678", "\"e7eaeebeb35f6ed50962c00707bc22cf1\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT2438727/CT2438727", "\"1311168869\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT2438972/CT2438972", "\"1312887586\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/27/243/CT2438727/Images/Blank.png", "\"27f9ceb6f365cb1:0\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/7/176/CT1764407/Images/634219899986281250.gif", "\"14819e877b65cb1:0\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/images/skins/zynga/seperator.gif", "\"461a8601461ca1:0\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=en", "\"ced64c3c2c583b79e12b73d4f9b02d35\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/96951800.xml", "\"7b113a5b75b365f833b61fc5dd8b9c5e\"-gzip");
Line Deleted : user_pref("CommunityToolbar.LatestLibsPath", "file:///C:\\Documents and Settings\\Ivanka\\Data aplikací\\Mozilla\\Firefox\\Profiles\\umw0dbil.default\\conduitCommon\\modules\\3.8.0.8");
Line Deleted : user_pref("CommunityToolbar.LatestToolbarVersionInstalled", "3.8.0.8");
Line Deleted : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "");
Line Deleted : user_pref("CommunityToolbar.ToolbarsList", "CT2438727,CT2438972,CT2786678");
Line Deleted : user_pref("CommunityToolbar.ToolbarsList2", "CT2438727,CT2438972,CT2786678");
Line Deleted : user_pref("CommunityToolbar.ToolbarsList4", "CT2438972,CT2786678");
Line Deleted : user_pref("CommunityToolbar.alert.alertDialogsGetterLastCheckTime", "Mon Jun 13 2011 19:20:08 GMT+0200");
Line Deleted : user_pref("CommunityToolbar.alert.alertEnabled", false);
Line Deleted : user_pref("CommunityToolbar.alert.clientsServerUrl", "hxxp://alert.client.conduit.com");
Line Deleted : user_pref("CommunityToolbar.alert.locale", "en");
Line Deleted : user_pref("CommunityToolbar.alert.loginIntervalMin", 1440);
Line Deleted : user_pref("CommunityToolbar.alert.loginLastCheckTime", "Tue Jun 21 2011 17:40:59 GMT+0200");
Line Deleted : user_pref("CommunityToolbar.alert.loginLastUpdateTime", "1305622559");
Line Deleted : user_pref("CommunityToolbar.alert.messageShowTimeSec", 20);
Line Deleted : user_pref("CommunityToolbar.alert.servicesServerUrl", "hxxp://alert.services.conduit.com");
Line Deleted : user_pref("CommunityToolbar.alert.showTrayIcon", false);
Line Deleted : user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300);
Line Deleted : user_pref("CommunityToolbar.alert.userId", "65115c5d-3b16-459f-a15b-a46f818f9cf7");
Line Deleted : user_pref("CommunityToolbar.facebook.settingsLastCheckTime", "Sat Mar 31 2012 12:47:34 GMT+0200");
Line Deleted : user_pref("CommunityToolbar.globalUserId", "90b4f5b5-9a08-423b-8fd9-c664a5cf3e46");
Line Deleted : user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true);
Line Deleted : user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true);
Line Deleted : user_pref("CommunityToolbar.notifications.alertDialogsGetterLastCheckTime", "Wed Dec 07 2011 20:56:44 GMT+0100");
Line Deleted : user_pref("CommunityToolbar.notifications.alertInfoInterval", 1440);
Line Deleted : user_pref("CommunityToolbar.notifications.alertInfoLastCheckTime", "Wed Dec 07 2011 20:56:51 GMT+0100");
Line Deleted : user_pref("CommunityToolbar.notifications.clientsServerUrl", "hxxp://alert.client.conduit.com");
Line Deleted : user_pref("CommunityToolbar.notifications.locale", "en");
Line Deleted : user_pref("CommunityToolbar.notifications.loginIntervalMin", 1440);
Line Deleted : user_pref("CommunityToolbar.notifications.loginLastCheckTime", "Wed Dec 07 2011 20:56:44 GMT+0100");
Line Deleted : user_pref("CommunityToolbar.notifications.loginLastUpdateTime", "1313487611");
Line Deleted : user_pref("CommunityToolbar.notifications.messageShowTimeSec", 20);
Line Deleted : user_pref("CommunityToolbar.notifications.servicesServerUrl", "hxxp://alert.services.conduit.com");
Line Deleted : user_pref("CommunityToolbar.notifications.showTrayIcon", false);
Line Deleted : user_pref("CommunityToolbar.notifications.userCloseIntervalMin", 300);
Line Deleted : user_pref("CommunityToolbar.notifications.userId", "01df4a87-f24b-45c2-a9bc-98158859d018");
Line Deleted : user_pref("CommunityToolbar.originalHomepage", "hxxp://www.seznam.cz/?clid=3");
Line Deleted : user_pref("CommunityToolbar.originalSearchEngine", "chrome://browser-region/locale/region.properties");
Line Deleted : user_pref("CommunityToolbar.twitter.user_96951800.LastCheckTime", "Tue Aug 16 2011 22:59:50 GMT+0200");
Line Deleted : user_pref("extensions.facemoods.aflt", "_#ddrnw");
Line Deleted : user_pref("extensions.facemoods.firstRun", false);
Line Deleted : user_pref("extensions.facemoods.lastActv", "22");
Line Deleted : user_pref("extensions.wrc.SearchRules.ask.com.style", ".WRCN {display:none} #yui-main .tsrc_vnru .title + .WRCN, #yui-main #teoma-results .title + .WRCN {display:inline !important; background: url(\"I[...]
Line Deleted : user_pref("extensions.wrc.SearchRules.ask.com.url", "^hxxp(s)?\\:\\/\\/(.+\\.)?ask\\.com\\/.*");
Line Deleted : user_pref("extensions.wrc.SearchRules.rambler.ru.style", ".WRCN {display:none} .search-results .title + .WRCN {display:inline !important; background: url(\"IMAGE\") right no-repeat}");

*************************

AdwCleaner[R0].txt - [38613 octets] - [27/12/2013 10:17:09]
AdwCleaner[R1].txt - [38674 octets] - [27/12/2013 10:53:27]
AdwCleaner[S0].txt - [39432 octets] - [27/12/2013 10:57:21]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [39493 octets] ##########

Allkor · #6 Příspěvek od **Allkor** » 27 pro 2013 13:57

MBAM:

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Verze: v2013.12.27.03

Windows XP Service Pack 3 x86 NTFS
Internet Explorer 8.0.6001.18702
Ivanka :: ALLKOR [administrátor]

27.12.2013 11:05:44
MBAM-log-2013-12-27 (13-55-32).txt

Typ: Kompletní kontrola (C:\|)
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 275974
Uplynulý čas: 2 hodin, 3 minut, 11 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 7
C:\AdwCleaner\Quarantine\C\Program Files\Conduit\Community Alerts\Alert.dll.vir (PUP.Optional.Conduit) -> Nebyla provedena žádná instrukce.
C:\Documents and Settings\Ivanka\Dokumenty\Downloads\yosetup.exe (PUP.Optional.OpenCandy) -> Nebyla provedena žádná instrukce.
C:\System Volume Information\_restore{708528F3-EC31-4B4C-AC19-73574FAA317E}\RP344\A0081384.exe (PUP.Optional.OpenCandy.A) -> Nebyla provedena žádná instrukce.
C:\System Volume Information\_restore{708528F3-EC31-4B4C-AC19-73574FAA317E}\RP345\A0081920.exe (PUP.Optional.Amonetize.A) -> Nebyla provedena žádná instrukce.
C:\System Volume Information\_restore{708528F3-EC31-4B4C-AC19-73574FAA317E}\RP357\A0091469.exe (PUP.BitCoinMiner) -> Nebyla provedena žádná instrukce.
C:\System Volume Information\_restore{708528F3-EC31-4B4C-AC19-73574FAA317E}\RP368\A0092984.exe (PUP.Optional.Amonetize.A) -> Nebyla provedena žádná instrukce.
C:\System Volume Information\_restore{708528F3-EC31-4B4C-AC19-73574FAA317E}\RP368\A0093122.dll (PUP.Optional.Conduit) -> Nebyla provedena žádná instrukce.

(konec)

#7 Příspěvek od **Márty84** » 27 pro 2013 20:59

Nalezy nechte odstranit.

Pak vymazte body obnovy http://forum.viry.cz/viewtopic.php?f=46&t=47040 .

Po dalsim restartu pc a opetovnem zapnuti funkce vytvareni bodu obnovy zopakujte tes MBAM. Napiste zda neco nasel a podle toho budeme pokracovat dale

Allkor · #8 Příspěvek od **Allkor** » 28 pro 2013 00:42

Při novém testu MBAM už nic nenašel

Bude ještě třeba něco provést? Po poledni odjíždím, zatímco notebook zůstává, takže přinejhorším bychom čištění dokončili asi až za dva týdny. V každém případě už teď moc děkuji za pomoc!

#9 Příspěvek od **Márty84** » 28 pro 2013 09:27

No jeste by to chtelo par veci udelat, aby to bylo uplne ciste.

Jestli bude Avast rvat, ze to chce otevrit v sandboxu, nedovolte to! Vyberte moznost Otevrit normalne

Stahnete RogueKiller http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe , ulozte ho na plochu a spustte.
Probehne kratoucky testik a pak se zpristupni vpravo nahore tlacitko Prohledat. Na to kliknete a probehne dalsi test.
Po dokonceni kliknete na napis Zprava a objevi se log. Ten mi sem vlozte

Allkor · #10 Příspěvek od **Allkor** » 28 pro 2013 09:48

Dole je zpráva z RogueKiller.

Mohla bych se ještě zeptat, co je tu za havěť a jak se sem nejspíš dostala? Zkusím varovat rodiče, ať dávají větší pozor.

RogueKiller V8.8.0 [Dec 27 2013] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Podpora : http://www.adlice.com/forum/
Webové stránky : http://www.adlice.com/softwares/roguekiller/
: http://www.adlice.com

Operační systém : Windows XP (5.1.2600 Service Pack 3) 32 bits version
Spuštěno v : Normální režim
Uživatel : Ivanka [Práva správce]
Mód : Kontrola -- Datum : 12/28/2013 09:43:38
| ARK || FAK || MBR |

¤¤¤ Škodlivé procesy: : 0 ¤¤¤

¤¤¤ ¤¤¤ Záznamy Registrů: : 6 ¤¤¤
[HJ SMENU][PUM] HKCU\[...]\Advanced : Start_ShowPrinters (0) -> NALEZENO
[HJ SMENU][PUM] HKCU\[...]\Advanced : Start_ShowSetProgramAccessAndDefaults (0) -> NALEZENO
[HJ SMENU][PUM] HKLM\[...]\Advanced : Start_ShowRecentDocs (0) -> NALEZENO
[HJ DESK][PUM] HKCU\[...]\ClassicStartMenu : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> NALEZENO
[HJ DESK][PUM] HKCU\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> NALEZENO
[HJ DESK][PUM] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> NALEZENO

¤¤¤ naplánované úlohy : 0 ¤¤¤

¤¤¤ spuštění položky : 1 ¤¤¤
[All Users][SUSP UNIC] Start GeekBuddy.lnk : C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\Start GeekBuddy.lnk [-] -> NALEZENO

¤¤¤ Webové prohlížeče : 0 ¤¤¤

¤¤¤ Browser Addons : 0 ¤¤¤

¤¤¤ Zvláštní soubory / Složky: ¤¤¤

¤¤¤ Ovladač : [NENAHRÁNO 0xc0000033] ¤¤¤

¤¤¤ Externí včelstvo: ¤¤¤

¤¤¤ Nákaza : ¤¤¤

¤¤¤ Soubor HOSTS: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts

ÿþ1

¤¤¤ Kontrola MBR: ¤¤¤

+++++ PhysicalDrive0: (\\.\PHYSICALDRIVE0 @ IDE) ST9160314AS +++++
--- User ---
[MBR] 7593e3280a966e2f383a7b432ce21ba7
[BSP] e9ef55f0614bf62323df011a45f48585 : Windows Vista MBR Code
Partition table:
0 - [XXXXXX] COMPAQ (0x12) [VISIBLE] Offset (sectors): 63 | Size: 10244 Mo
1 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 20981760 | Size: 142381 Mo
User = LL1 ... OK!
User = LL2 ... OK!

Dokončeno : << RKreport[0]_S_12282013_094338.txt >>

#11 Příspěvek od **Márty84** » 28 pro 2013 09:55

Znovu spustte RogueKiller (pokud jste ho jeste nezavrel/a, rovnou kliknete na napis Smazat)
Probehne kratoucky testik a pak se zpristupni vpravo nahore tlacitko Prohledat. Na to kliknete a probehne dalsi test.
Po dokonceni kliknete na napis Smazat.
Pak kliknete na napis Zprava a objevi se log. Ten mi sem vlozte.
Pak kliknete na napis Oprava Host a Zprava.
Objevi se dalsi log. I ten mi sem vlozte.

Pak dejte novy log z RSIT

Prevazne se nejedna o viry jako takove, ale hlavne o otravne a brzdici vecicky. Casto se tam dostanou treba pri instalaci ruznych programu, protoze kazdy zbesile klika na Dalsi Dalsi Dalsi aniz by cetl, co se tam vsechno chce instalovat. Vetsinou staci vykliknout fajfku a je klid. Jenze to dela malokdo.

Allkor · #12 Příspěvek od **Allkor** » 28 pro 2013 10:05

Jasně, tak díky za info

Tady jsou ty logy:

RogueKiller po mazání:

RogueKiller V8.8.0 [Dec 27 2013] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Podpora : http://www.adlice.com/forum/
Webové stránky : http://www.adlice.com/softwares/roguekiller/
: http://www.adlice.com

Operační systém : Windows XP (5.1.2600 Service Pack 3) 32 bits version
Spuštěno v : Normální režim
Uživatel : Ivanka [Práva správce]
Mód : Odebrat -- Datum : 12/28/2013 10:00:54
| ARK || FAK || MBR |

¤¤¤ Škodlivé procesy: : 0 ¤¤¤

¤¤¤ ¤¤¤ Záznamy Registrů: : 6 ¤¤¤
[HJ SMENU][PUM] HKCU\[...]\Advanced : Start_ShowPrinters (0) -> NAHRAZENO (1)
[HJ SMENU][PUM] HKCU\[...]\Advanced : Start_ShowSetProgramAccessAndDefaults (0) -> NAHRAZENO (1)
[HJ SMENU][PUM] HKLM\[...]\Advanced : Start_ShowRecentDocs (0) -> NAHRAZENO (1)
[HJ DESK][PUM] HKCU\[...]\ClassicStartMenu : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> NAHRAZENO (0)
[HJ DESK][PUM] HKCU\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> NAHRAZENO (0)
[HJ DESK][PUM] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> NAHRAZENO (0)

¤¤¤ naplánované úlohy : 0 ¤¤¤

¤¤¤ spuštění položky : 1 ¤¤¤
[All Users][SUSP UNIC] Start GeekBuddy.lnk : C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\Start GeekBuddy.lnk [-] -> VYMAZÁNO

¤¤¤ Webové prohlížeče : 0 ¤¤¤

¤¤¤ Browser Addons : 0 ¤¤¤

¤¤¤ Zvláštní soubory / Složky: ¤¤¤

¤¤¤ Ovladač : [NENAHRÁNO 0xc0000033] ¤¤¤

¤¤¤ Externí včelstvo: ¤¤¤

¤¤¤ Nákaza : ¤¤¤

¤¤¤ Soubor HOSTS: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts

ÿþ1

¤¤¤ Kontrola MBR: ¤¤¤

+++++ PhysicalDrive0: (\\.\PHYSICALDRIVE0 @ IDE) ST9160314AS +++++
--- User ---
[MBR] 7593e3280a966e2f383a7b432ce21ba7
[BSP] e9ef55f0614bf62323df011a45f48585 : Windows Vista MBR Code
Partition table:
0 - [XXXXXX] COMPAQ (0x12) [VISIBLE] Offset (sectors): 63 | Size: 10244 Mo
1 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 20981760 | Size: 142381 Mo
User = LL1 ... OK!
User = LL2 ... OK!

Dokončeno : << RKreport[0]_D_12282013_100054.txt >>
RKreport[0]_S_12282013_094338.txt

RogueKiller po opravě:

RogueKiller V8.8.0 [Dec 27 2013] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Podpora : http://www.adlice.com/forum/
Webové stránky : http://www.adlice.com/softwares/roguekiller/
: http://www.adlice.com

Operační systém : Windows XP (5.1.2600 Service Pack 3) 32 bits version
Spuštěno v : Normální režim
Uživatel : Ivanka [Práva správce]
Mód : Oprava HOSTS -- Datum : 12/28/2013 10:01:52
| ARK || FAK || MBR |

¤¤¤ Škodlivé procesy: : 0 ¤¤¤

¤¤¤ ¤¤¤ Záznamy Registrů: : 0 ¤¤¤

¤¤¤ Ovladač : [NENAHRÁNO 0xc0000033] ¤¤¤

¤¤¤ Externí včelstvo: ¤¤¤

¤¤¤ Nákaza : ¤¤¤

¤¤¤ Soubor HOSTS: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts

ÿþ1

¤¤¤ Resetovaný HOSTS: ¤¤¤
127.0.0.1 localhost

Dokončeno : << RKreport[0]_H_12282013_100152.txt >>
RKreport[0]_D_12282013_100054.txt;RKreport[0]_S_12282013_094338.txt

Allkor · #13 Příspěvek od **Allkor** » 28 pro 2013 10:05

RSIT:

Logfile of random's system information tool 1.09 (written by random/random)
Run by Ivanka at 2013-12-28 10:02:31
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 120 GB (84%) free of 142 GB
Total RAM: 1014 MB (39% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:02:55, on 28.12.2013
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\Program Files\Common Files\COMODO\launcher_service.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\acs.exe
C:\Program Files\Common Files\COMODO\GeekBuddyRSP.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Program Files\Acer\Acer VCM\RS_Service.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Western Digital\WD SmartWare\WDDMService.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Program Files\Western Digital\WD SmartWare\WDRulesEngine.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
C:\PROGRA~1\LAUNCH~1\LManager.exe
C:\WINDOWS\PLFSetL.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\COMODO\COMODO Internet Security\cfp.exe
C:\Program Files\TP-LINK\TP-LINK Wireless Client Utility\TWCU.exe
C:\Program Files\Common Files\COMODO\GeekBuddyRSP.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\COMODO\GeekBuddy\unit_manager.exe
C:\Program Files\COMODO\GeekBuddy\unit.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\WINDOWS\system32\igfxext.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\Western Digital\WD SmartWare\WDFME.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\wbem\unsecapp.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\Ivanka\Plocha\RogueKiller.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\system32\msiexec.exe
C:\WINDOWS\system32\notepad.exe
C:\WINDOWS\system32\notepad.exe
C:\Documents and Settings\Ivanka\Plocha\RSIT.exe
C:\WINDOWS\SoftwareDistribution\Download\66d3344fe1c52b95ee406fe714a3efb2\update\update.exe
C:\Program Files\trend micro\Ivanka.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/rdr.aspx?b=ACA ... 5w58024164
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://us.yahoo.com?fr=fp-comodo
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/rdr.aspx?b=ACA ... 5w58024164
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.alawarhry.cz
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\LManager.exe
O4 - HKLM\..\Run: [AzMixerSel] C:\Program Files\Realtek\Audio\Drivers\AzMixerSel.exe
O4 - HKLM\..\Run: [PLFSetL] C:\WINDOWS\PLFSetL.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [COMODO Internet Security] "C:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h
O4 - HKLM\..\Run: [TWCU] "C:\Program Files\TP-LINK\TP-LINK Wireless Client Utility\TWCU.exe" -nogui
O4 - HKLM\..\Run: [tvncontrol] "C:\Program Files\Common Files\COMODO\GeekBuddyRSP.exe" -controlservice -slave
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\RunOnce: [20131224] C:\Program Files\AVAST Software\Avast\setup\emupdate\197c027c-6273-44c7-93f0-60ff3ba5ed90.exe /check
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Ivanka\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe" /c
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Odeslat do zařízení &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Odeslat do zařízení Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Přidat na blog - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Přidat na blog Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: ICQ7.7 - {77F665FD-3F60-4B0A-AE14-EC124B7A7FCE} - C:\Program Files\ICQ7.7\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.7 - {77F665FD-3F60-4B0A-AE14-EC124B7A7FCE} - C:\Program Files\ICQ7.7\ICQ.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microso ... 7733211421
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\WINDOWS\system32\guard32.dll
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: TP-LINK Configuration Service (ACS) - Atheros - C:\WINDOWS\system32\acs.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: COMODO LPS Launcher (CLPSLauncher) - Comodo Security Solutions, Inc. - C:\Program Files\Common Files\COMODO\launcher_service.exe
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: GeekBuddyRSP Server (GeekBuddyRSP) - Comodo Security Solutions, Inc. - C:\Program Files\Common Files\COMODO\GeekBuddyRSP.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: Raw Socket Service (RS_Service) - Acer Incorporated - C:\Program Files\Acer\Acer VCM\RS_Service.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: Sony Ericsson PCCompanion - Avanquest Software - C:\Program Files\Sony Ericsson\Sony Ericsson PC Companion\PCCService.exe
O23 - Service: WDDMService - WDC - C:\Program Files\Western Digital\WD SmartWare\WDDMService.exe
O23 - Service: WDFMEService - Western Digital - C:\Program Files\Western Digital\WD SmartWare\WDFME.exe
O23 - Service: WDRulesService - Western Digital - C:\Program Files\Western Digital\WD SmartWare\WDRulesEngine.exe

--
End of file - 10911 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job
C:\WINDOWS\tasks\avast! Emergency Update.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-4210259494-2243138800-104724495-1005Core.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-4210259494-2243138800-104724495-1005UA.job

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\Ivanka\Data aplikací\Mozilla\Firefox\Profiles\umw0dbil.default

prefs.js - "browser.startup.homepage" - "http://www.seznam.cz"
prefs.js - "keyword.URL" - "http://us.search.yahoo.com/search?fr=ytff-comodo&p="

"{20a82645-c095-46ed-80e3-08825760534b}"=c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
"jqs@sun.com"=C:\Program Files\Java\jre6\lib\deploy\jqs\ff
"wrc@avast.com"=C:\Program Files\AVAST Software\Avast\WebRep\FF

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.9.900.170 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8064.0206]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@playstation.com/PsndlCheck,version=1.00]
"Description"=Plug-in to check PlayStation(R)Network Downloader.
"Path"=C:\Program Files\Sony\PLAYSTATION Network Downloader\nppsndl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@SonyCreativeSoftware.com/Media Go,version=1.0]
"Description"=
"Path"=C:\Program Files\Sony\Media Go\npmediago.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.0.8]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.1.2]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre6\bin\ssv.dll [2012-02-20 325408]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2013-12-26 1138536]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2012-02-20 42272]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2012-02-20 79648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2013-12-26 1138536]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IAAnotif"=C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe [2008-04-15 178712]
"LManager"=C:\PROGRA~1\LAUNCH~1\LManager.exe [2008-12-30 875016]
"AzMixerSel"=C:\Program Files\Realtek\Audio\Drivers\AzMixerSel.exe [2006-07-17 53248]
"PLFSetL"=C:\WINDOWS\PLFSetL.exe [2008-07-03 94208]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2009-02-06 1430824]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2009-08-24 18702336]
"COMODO Internet Security"=C:\Program Files\COMODO\COMODO Internet Security\cfp.exe [2012-11-08 6756048]
"TWCU"=C:\Program Files\TP-LINK\TP-LINK Wireless Client Utility\TWCU.exe [2009-09-23 561263]
"tvncontrol"=C:\Program Files\Common Files\COMODO\GeekBuddyRSP.exe [2013-10-11 2327248]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2013-12-26 3764024]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"20131224"=C:\Program Files\AVAST Software\Avast\setup\emupdate\197c027c-6273-44c7-93f0-60ff3ba5ed90.exe [2013-12-28 181136]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"Google Update"=C:\Documents and Settings\Ivanka\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe [2011-10-21 136176]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04 958576]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2013-05-08 41056]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Ivanka^Nabídka Start^Programy^Po spuštění^YoWindow.lnk]
C:\PROGRA~1\YoWindow\yowindow.exe [2013-04-13 888128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\WINDOWS\system32\guard32.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2008-02-14 208896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mcmscsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MpfService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"C:\Program Files\ICQ7.7\ICQ.exe"="C:\Program Files\ICQ7.7\ICQ.exe:*:Enabled:ICQ7.7"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Documents and Settings\Ivanka\Data aplikací\uTorrent\uTorrent.exe"="C:\Documents and Settings\Ivanka\Data aplikací\uTorrent\uTorrent.exe:*:Enabled:µTorrent"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync"
"C:\Program Files\ICQ7.7\ICQ.exe"="C:\Program Files\ICQ7.7\ICQ.exe:*:Enabled:ICQ7.7"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"VIDC.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"VIDC.YVYU"=msyuv.dll
"wavemapper"=msacm32.drv
"MSVideo8"=VfWWDM32.dll
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"msacm.siren"=sirenacm.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======List of files/folders created in the last 1 month======

2013-12-28 10:02:29 ----HDC---- C:\WINDOWS\$NtUninstallKB2898715$
2013-12-28 10:01:59 ----HDC---- C:\WINDOWS\$NtUninstallKB2904266$
2013-12-28 09:44:29 ----HDC---- C:\WINDOWS\$NtUninstallKB2893294$
2013-12-28 09:44:06 ----HDC---- C:\WINDOWS\$NtUninstallKB2893984$
2013-12-28 09:43:47 ----D---- C:\WINDOWS\LastGood
2013-12-28 09:43:34 ----A---- C:\WINDOWS\imsins.BAK
2013-12-28 09:43:32 ----A---- C:\WINDOWS\system32\drivers\ZDPSp50a64.sys.bak
2013-12-28 09:43:32 ----A---- C:\WINDOWS\system32\drivers\ZDPSp50.sys.bak
2013-12-28 09:43:32 ----A---- C:\WINDOWS\system32\drivers\WudfRd.sys.bak
2013-12-28 09:43:31 ----A---- C:\WINDOWS\system32\drivers\WudfPf.sys.bak
2013-12-28 09:43:31 ----A---- C:\WINDOWS\system32\drivers\WSTCODEC.SYS.bak
2013-12-28 09:43:31 ----A---- C:\WINDOWS\system32\drivers\wsimd.sys.bak
2013-12-28 09:43:30 ----A---- C:\WINDOWS\system32\drivers\ws2ifsl.sys.bak
2013-12-28 09:43:30 ----A---- C:\WINDOWS\system32\drivers\wpdusb.sys.bak
2013-12-28 09:43:29 ----A---- C:\WINDOWS\system32\drivers\wmilib.sys.bak
2013-12-28 09:43:29 ----A---- C:\WINDOWS\system32\drivers\wmiacpi.sys.bak
2013-12-28 09:43:29 ----A---- C:\WINDOWS\system32\drivers\wdmaud.sys.bak
2013-12-28 09:43:28 ----A---- C:\WINDOWS\system32\drivers\wdfldr.sys.bak
2013-12-28 09:43:27 ----A---- C:\WINDOWS\system32\drivers\wdf01000.sys.bak
2013-12-28 09:43:27 ----A---- C:\WINDOWS\system32\drivers\wdcsam.sys.bak
2013-12-28 09:43:26 ----A---- C:\WINDOWS\system32\drivers\wanarp.sys.bak
2013-12-28 09:43:26 ----A---- C:\WINDOWS\system32\drivers\volsnap.sys.bak
2013-12-28 09:43:25 ----A---- C:\WINDOWS\system32\drivers\videoprt.sys.bak
2013-12-28 09:43:25 ----A---- C:\WINDOWS\system32\drivers\viaide.sys.bak
2013-12-28 09:43:25 ----A---- C:\WINDOWS\system32\drivers\VIAAGP.SYS.bak
2013-12-28 09:43:25 ----A---- C:\WINDOWS\system32\drivers\vga.sys.bak
2013-12-28 09:43:24 ----A---- C:\WINDOWS\system32\drivers\vdmindvd.sys.bak
2013-12-28 09:43:24 ----A---- C:\WINDOWS\system32\drivers\usbvideo.sys.bak
2013-12-28 09:43:23 ----A---- C:\WINDOWS\system32\drivers\usbuhci.sys.bak
2013-12-28 09:43:23 ----A---- C:\WINDOWS\system32\drivers\usbstor.sys.bak
2013-12-28 09:43:23 ----A---- C:\WINDOWS\system32\drivers\usbscan.sys.bak
2013-12-28 09:43:23 ----A---- C:\WINDOWS\system32\drivers\usbprint.sys.bak
2013-12-28 09:43:22 ----A---- C:\WINDOWS\system32\drivers\usbport.sys.bak
2013-12-28 09:43:22 ----A---- C:\WINDOWS\system32\drivers\usbintel.sys.bak
2013-12-28 09:43:22 ----A---- C:\WINDOWS\system32\drivers\usbhub.sys.bak
2013-12-28 09:43:21 ----A---- C:\WINDOWS\system32\drivers\usbehci.sys.bak
2013-12-28 09:43:21 ----A---- C:\WINDOWS\system32\drivers\usbd.sys.bak
2013-12-28 09:43:21 ----A---- C:\WINDOWS\system32\drivers\usbccgp.sys.bak
2013-12-28 09:43:20 ----A---- C:\WINDOWS\system32\drivers\usbcamd2.sys.bak
2013-12-28 09:43:20 ----A---- C:\WINDOWS\system32\drivers\usbcamd.sys.bak
2013-12-28 09:43:20 ----A---- C:\WINDOWS\system32\drivers\usb8023x.sys.bak
2013-12-28 09:43:20 ----A---- C:\WINDOWS\system32\drivers\usb8023.sys.bak
2013-12-28 09:43:19 ----A---- C:\WINDOWS\system32\drivers\update.sys.bak
2013-12-28 09:43:19 ----A---- C:\WINDOWS\system32\drivers\ultra.sys.bak
2013-12-28 09:43:19 ----A---- C:\WINDOWS\system32\drivers\udfs.sys.bak
2013-12-28 09:43:18 ----A---- C:\WINDOWS\system32\drivers\tunmp.sys.bak
2013-12-28 09:43:18 ----A---- C:\WINDOWS\system32\drivers\tsbvcap.sys.bak
2013-12-28 09:43:18 ----A---- C:\WINDOWS\system32\drivers\toside.sys.bak
2013-12-28 09:43:18 ----A---- C:\WINDOWS\system32\drivers\tosdvd.sys.bak
2013-12-28 09:43:18 ----A---- C:\WINDOWS\system32\drivers\termdd.sys.bak
2013-12-28 09:43:17 ----HDC---- C:\WINDOWS\$NtUninstallKB2892075$
2013-12-28 09:43:17 ----A---- C:\WINDOWS\system32\drivers\tdtcp.sys.bak
2013-12-28 09:43:17 ----A---- C:\WINDOWS\system32\drivers\tdpipe.sys.bak
2013-12-28 09:43:17 ----A---- C:\WINDOWS\system32\drivers\tdi.sys.bak
2013-12-28 09:43:16 ----A---- C:\WINDOWS\system32\drivers\tcpip6.sys.bak
2013-12-28 09:43:15 ----A---- C:\WINDOWS\system32\drivers\tcpip.sys.bak
2013-12-28 09:43:15 ----A---- C:\WINDOWS\system32\drivers\tape.sys.bak
2013-12-28 09:43:15 ----A---- C:\WINDOWS\system32\drivers\sysaudio.sys.bak
2013-12-28 09:43:14 ----A---- C:\WINDOWS\system32\drivers\SynTP.sys.bak
2013-12-28 09:43:14 ----A---- C:\WINDOWS\system32\drivers\sym_u3.sys.bak
2013-12-28 09:43:13 ----A---- C:\WINDOWS\system32\drivers\symc8xx.sys.bak
2013-12-28 09:43:13 ----A---- C:\WINDOWS\system32\drivers\symc810.sys.bak
2013-12-28 09:43:13 ----A---- C:\WINDOWS\system32\drivers\sym_hi.sys.bak
2013-12-28 09:43:12 ----A---- C:\WINDOWS\system32\drivers\swmidi.sys.bak
2013-12-28 09:43:12 ----A---- C:\WINDOWS\system32\drivers\swenum.sys.bak
2013-12-28 09:43:12 ----A---- C:\WINDOWS\system32\drivers\StreamIP.sys.bak
2013-12-28 09:43:11 ----A---- C:\WINDOWS\system32\drivers\stream.sys.bak
2013-12-28 09:43:11 ----A---- C:\WINDOWS\system32\drivers\srv.sys.bak
2013-12-28 09:43:10 ----A---- C:\WINDOWS\system32\drivers\sr.sys.bak
2013-12-28 09:43:10 ----A---- C:\WINDOWS\system32\drivers\splitter.sys.bak
2013-12-28 09:43:10 ----A---- C:\WINDOWS\system32\drivers\sparrow.sys.bak
2013-12-28 09:43:10 ----A---- C:\WINDOWS\system32\drivers\sonydcam.sys.bak
2013-12-28 09:43:09 ----A---- C:\WINDOWS\system32\drivers\snp2uvc.sys.bak
2013-12-28 09:43:09 ----A---- C:\WINDOWS\system32\drivers\sncduvc.sys.bak
2013-12-28 09:43:08 ----A---- C:\WINDOWS\system32\drivers\smclib.sys.bak
2013-12-28 09:43:08 ----A---- C:\WINDOWS\system32\drivers\SLIP.sys.bak
2013-12-28 09:43:08 ----A---- C:\WINDOWS\system32\drivers\SISAGP.SYS.bak
2013-12-28 09:43:08 ----A---- C:\WINDOWS\system32\drivers\sfloppy.sys.bak
2013-12-28 09:43:08 ----A---- C:\WINDOWS\system32\drivers\sffp_sd.sys.bak
2013-12-28 09:43:06 ----A---- C:\WINDOWS\system32\drivers\sffp_mmc.sys.bak
2013-12-28 09:43:06 ----A---- C:\WINDOWS\system32\drivers\sffdisk.sys.bak
2013-12-28 09:43:05 ----A---- C:\WINDOWS\system32\drivers\serial.sys.bak
2013-12-28 09:43:05 ----A---- C:\WINDOWS\system32\drivers\serenum.sys.bak
2013-12-28 09:43:05 ----A---- C:\WINDOWS\system32\drivers\secdrv.sys.bak
2013-12-28 09:43:05 ----A---- C:\WINDOWS\system32\drivers\sdbus.sys.bak
2013-12-28 09:43:04 ----A---- C:\WINDOWS\system32\drivers\scsiport.sys.bak
2013-12-28 09:43:04 ----A---- C:\WINDOWS\system32\drivers\RtsUStor.sys.bak
2013-12-28 09:43:01 ----A---- C:\WINDOWS\system32\drivers\RtkHDAud.sys.bak
2013-12-28 09:43:01 ----A---- C:\WINDOWS\system32\drivers\rootmdm.sys.bak
2013-12-28 09:43:01 ----A---- C:\WINDOWS\system32\drivers\rndismpx.sys.bak
2013-12-28 09:43:00 ----A---- C:\WINDOWS\system32\drivers\rndismp.sys.bak
2013-12-28 09:43:00 ----A---- C:\WINDOWS\system32\drivers\rmcast.sys.bak
2013-12-28 09:43:00 ----A---- C:\WINDOWS\system32\drivers\riodrv.sys.bak
2013-12-28 09:42:59 ----A---- C:\WINDOWS\system32\drivers\rio8drv.sys.bak
2013-12-28 09:42:59 ----A---- C:\WINDOWS\system32\drivers\redbook.sys.bak
2013-12-28 09:42:59 ----A---- C:\WINDOWS\system32\drivers\rdpwd.sys.bak
2013-12-28 09:42:58 ----A---- C:\WINDOWS\system32\drivers\rdpdr.sys.bak
2013-12-28 09:42:58 ----A---- C:\WINDOWS\system32\drivers\rdpcdd.sys.bak
2013-12-28 09:42:58 ----A---- C:\WINDOWS\system32\drivers\rdbss.sys.bak
2013-12-28 09:42:58 ----A---- C:\WINDOWS\system32\drivers\rawwan.sys.bak
2013-12-28 09:42:57 ----A---- C:\WINDOWS\system32\drivers\raspti.sys.bak
2013-12-28 09:42:57 ----A---- C:\WINDOWS\system32\drivers\raspptp.sys.bak
2013-12-28 09:42:56 ----A---- C:\WINDOWS\system32\drivers\raspppoe.sys.bak
2013-12-28 09:42:55 ----A---- C:\WINDOWS\system32\drivers\rasl2tp.sys.bak
2013-12-28 09:42:55 ----A---- C:\WINDOWS\system32\drivers\rasacd.sys.bak
2013-12-28 09:42:55 ----A---- C:\WINDOWS\system32\drivers\ql1280.sys.bak
2013-12-28 09:42:55 ----A---- C:\WINDOWS\system32\drivers\ql1240.sys.bak
2013-12-28 09:42:54 ----A---- C:\WINDOWS\system32\drivers\ql12160.sys.bak
2013-12-28 09:42:54 ----A---- C:\WINDOWS\system32\drivers\ql10wnt.sys.bak
2013-12-28 09:42:54 ----A---- C:\WINDOWS\system32\drivers\ql1080.sys.bak
2013-12-28 09:42:53 ----A---- C:\WINDOWS\system32\drivers\ptilink.sys.bak
2013-12-28 09:42:53 ----A---- C:\WINDOWS\system32\drivers\psched.sys.bak
2013-12-28 09:42:53 ----A---- C:\WINDOWS\system32\drivers\processr.sys.bak
2013-12-28 09:42:53 ----A---- C:\WINDOWS\system32\drivers\portcls.sys.bak
2013-12-28 09:42:52 ----A---- C:\WINDOWS\system32\drivers\perc2hib.sys.bak
2013-12-28 09:42:52 ----A---- C:\WINDOWS\system32\drivers\perc2.sys.bak
2013-12-28 09:42:52 ----A---- C:\WINDOWS\system32\drivers\pcmcia.sys.bak
2013-12-28 09:42:52 ----A---- C:\WINDOWS\system32\drivers\pciidex.sys.bak
2013-12-28 09:42:51 ----A---- C:\WINDOWS\system32\drivers\pciide.sys.bak
2013-12-28 09:42:51 ----A---- C:\WINDOWS\system32\drivers\pci.sys.bak
2013-12-28 09:42:51 ----A---- C:\WINDOWS\system32\drivers\parvdm.sys.bak
2013-12-28 09:42:51 ----A---- C:\WINDOWS\system32\drivers\partmgr.sys.bak
2013-12-28 09:42:50 ----A---- C:\WINDOWS\system32\drivers\parport.sys.bak
2013-12-28 09:42:50 ----A---- C:\WINDOWS\system32\drivers\p3.sys.bak
2013-12-28 09:42:49 ----A---- C:\WINDOWS\system32\drivers\oprghdlr.sys.bak
2013-12-28 09:42:49 ----A---- C:\WINDOWS\system32\drivers\nwlnkspx.sys.bak
2013-12-28 09:42:48 ----A---- C:\WINDOWS\system32\drivers\nwlnknb.sys.bak
2013-12-28 09:42:48 ----A---- C:\WINDOWS\system32\drivers\nwlnkipx.sys.bak
2013-12-28 09:42:48 ----A---- C:\WINDOWS\system32\drivers\nwlnkfwd.sys.bak
2013-12-28 09:42:47 ----A---- C:\WINDOWS\system32\drivers\nwlnkflt.sys.bak
2013-12-28 09:42:46 ----A---- C:\WINDOWS\system32\drivers\null.sys.bak
2013-12-28 09:42:45 ----A---- C:\WINDOWS\system32\drivers\ntfs.sys.bak
2013-12-28 09:42:45 ----A---- C:\WINDOWS\system32\drivers\npfs.sys.bak
2013-12-28 09:42:44 ----A---- C:\WINDOWS\system32\drivers\nmnt.sys.bak
2013-12-28 09:42:44 ----A---- C:\WINDOWS\system32\drivers\nikedrv.sys.bak
2013-12-28 09:42:43 ----A---- C:\WINDOWS\system32\drivers\nic1394.sys.bak
2013-12-28 09:42:43 ----A---- C:\WINDOWS\system32\drivers\netbt.sys.bak
2013-12-28 09:42:43 ----A---- C:\WINDOWS\system32\drivers\netbios.sys.bak
2013-12-28 09:42:43 ----A---- C:\WINDOWS\system32\drivers\ndproxy.sys.bak
2013-12-28 09:42:43 ----A---- C:\WINDOWS\system32\drivers\ndiswan.sys.bak
2013-12-28 09:42:43 ----A---- C:\WINDOWS\system32\drivers\ndisuio.sys.bak
2013-12-28 09:42:42 ----A---- C:\WINDOWS\system32\drivers\ndistapi.sys.bak
2013-12-28 09:42:42 ----A---- C:\WINDOWS\system32\drivers\NdisIP.sys.bak
2013-12-28 09:42:42 ----A---- C:\WINDOWS\system32\drivers\ndis.sys.bak
2013-12-28 09:42:41 ----A---- C:\WINDOWS\system32\drivers\NABTSFEC.sys.bak
2013-12-28 09:42:41 ----A---- C:\WINDOWS\system32\drivers\mup.sys.bak
2013-12-28 09:42:41 ----A---- C:\WINDOWS\system32\drivers\MSTEE.sys.bak
2013-12-28 09:42:40 ----A---- C:\WINDOWS\system32\drivers\mssmbios.sys.bak
2013-12-28 09:42:40 ----A---- C:\WINDOWS\system32\drivers\MSPQM.sys.bak
2013-12-28 09:42:40 ----A---- C:\WINDOWS\system32\drivers\MSPCLOCK.sys.bak
2013-12-28 09:42:40 ----A---- C:\WINDOWS\system32\drivers\MSKSSRV.sys.bak
2013-12-28 09:42:40 ----A---- C:\WINDOWS\system32\drivers\msgpc.sys.bak
2013-12-28 09:42:39 ----A---- C:\WINDOWS\system32\drivers\msfs.sys.bak
2013-12-28 09:42:39 ----A---- C:\WINDOWS\system32\drivers\mrxsmb.sys.bak
2013-12-28 09:42:39 ----A---- C:\WINDOWS\system32\drivers\mrxdav.sys.bak
2013-12-28 09:42:38 ----A---- C:\WINDOWS\system32\drivers\mraid35x.sys.bak
2013-12-28 09:42:37 ----A---- C:\WINDOWS\system32\drivers\mountmgr.sys.bak
2013-12-28 09:42:36 ----A---- C:\WINDOWS\system32\drivers\mouhid.sys.bak
2013-12-28 09:42:35 ----A---- C:\WINDOWS\system32\drivers\mouclass.sys.bak
2013-12-28 09:42:33 ----A---- C:\WINDOWS\system32\drivers\Monfilt.sys.bak
2013-12-28 09:42:33 ----A---- C:\WINDOWS\system32\drivers\modem.sys.bak
2013-12-28 09:42:31 ----A---- C:\WINDOWS\system32\drivers\mnmdd.sys.bak
2013-12-28 09:42:31 ----A---- C:\WINDOWS\system32\drivers\mf.sys.bak
2013-12-28 09:42:31 ----A---- C:\WINDOWS\system32\drivers\mcd.sys.bak
2013-12-28 09:42:29 ----A---- C:\WINDOWS\system32\drivers\mbam.sys.bak
2013-12-28 09:42:29 ----A---- C:\WINDOWS\system32\drivers\l1c51x86.sys.bak
2013-12-28 09:42:29 ----A---- C:\WINDOWS\system32\drivers\ksecdd.sys.bak
2013-12-28 09:42:28 ----A---- C:\WINDOWS\system32\drivers\ks.sys.bak
2013-12-28 09:42:28 ----A---- C:\WINDOWS\system32\drivers\kmixer.sys.bak
2013-12-28 09:42:27 ----A---- C:\WINDOWS\system32\drivers\kbdclass.sys.bak
2013-12-28 09:42:27 ----A---- C:\WINDOWS\system32\drivers\isapnp.sys.bak
2013-12-28 09:42:26 ----A---- C:\WINDOWS\system32\drivers\irenum.sys.bak
2013-12-28 09:42:26 ----A---- C:\WINDOWS\system32\drivers\ipsec.sys.bak
2013-12-28 09:42:20 ----A---- C:\WINDOWS\system32\drivers\ipnat.sys.bak
2013-12-28 09:42:20 ----A---- C:\WINDOWS\system32\drivers\ipinip.sys.bak
2013-12-28 09:42:19 ----A---- C:\WINDOWS\system32\drivers\ipfltdrv.sys.bak
2013-12-28 09:42:19 ----A---- C:\WINDOWS\system32\drivers\ip6fw.sys.bak
2013-12-28 09:42:19 ----A---- C:\WINDOWS\system32\drivers\intelppm.sys.bak
2013-12-28 09:42:19 ----A---- C:\WINDOWS\system32\drivers\intelide.sys.bak
2013-12-28 09:42:18 ----A---- C:\WINDOWS\system32\drivers\inspect.sys.bak
2013-12-28 09:42:18 ----A---- C:\WINDOWS\system32\drivers\ini910u.sys.bak
2013-12-28 09:42:18 ----A---- C:\WINDOWS\system32\drivers\imapi.sys.bak
2013-12-28 09:42:15 ----A---- C:\WINDOWS\system32\drivers\igxpmp32.sys.bak
2013-12-28 09:42:14 ----A---- C:\WINDOWS\system32\drivers\iaStor.sys.bak
2013-12-28 09:42:13 ----A---- C:\WINDOWS\system32\drivers\i8042prt.sys.bak
2013-12-28 09:42:13 ----A---- C:\WINDOWS\system32\drivers\i2omp.sys.bak
2013-12-28 09:42:13 ----A---- C:\WINDOWS\system32\drivers\i2omgmt.sys.bak
2013-12-28 09:42:13 ----A---- C:\WINDOWS\system32\drivers\http.sys.bak
2013-12-28 09:42:13 ----A---- C:\WINDOWS\system32\drivers\hpn.sys.bak
2013-12-28 09:42:12 ----A---- C:\WINDOWS\system32\drivers\hmd.sys.bak
2013-12-28 09:42:12 ----A---- C:\WINDOWS\system32\drivers\hidusb.sys.bak
2013-12-28 09:42:12 ----A---- C:\WINDOWS\system32\drivers\hidparse.sys.bak
2013-12-28 09:42:12 ----A---- C:\WINDOWS\system32\drivers\hidclass.sys.bak
2013-12-28 09:42:11 ----A---- C:\WINDOWS\system32\drivers\hdaudbus.sys.bak
2013-12-28 09:42:11 ----A---- C:\WINDOWS\system32\drivers\ftdisk.sys.bak
2013-12-28 09:42:11 ----A---- C:\WINDOWS\system32\drivers\fsvga.sys.bak
2013-12-28 09:42:11 ----A---- C:\WINDOWS\system32\drivers\fs_rec.sys.bak
2013-12-28 09:42:10 ----A---- C:\WINDOWS\system32\drivers\fltMgr.sys.bak
2013-12-28 09:42:10 ----A---- C:\WINDOWS\system32\drivers\flpydisk.sys.bak
2013-12-28 09:42:10 ----A---- C:\WINDOWS\system32\drivers\fips.sys.bak
2013-12-28 09:42:09 ----A---- C:\WINDOWS\system32\drivers\fdc.sys.bak
2013-12-28 09:42:09 ----A---- C:\WINDOWS\system32\drivers\fastfat.sys.bak
2013-12-28 09:42:08 ----A---- C:\WINDOWS\system32\drivers\dxgthk.sys.bak
2013-12-28 09:42:08 ----A---- C:\WINDOWS\system32\drivers\dxg.sys.bak
2013-12-28 09:42:07 ----A---- C:\WINDOWS\system32\drivers\dxapi.sys.bak
2013-12-28 09:42:07 ----A---- C:\WINDOWS\system32\drivers\drmkaud.sys.bak
2013-12-28 09:42:07 ----A---- C:\WINDOWS\system32\drivers\drmk.sys.bak
2013-12-28 09:42:07 ----A---- C:\WINDOWS\system32\drivers\dpti2o.sys.bak
2013-12-28 09:42:06 ----A---- C:\WINDOWS\system32\drivers\DMusic.sys.bak
2013-12-28 09:42:06 ----A---- C:\WINDOWS\system32\drivers\dmload.sys.bak
2013-12-28 09:42:05 ----A---- C:\WINDOWS\system32\drivers\dmio.sys.bak
2013-12-28 09:42:05 ----A---- C:\WINDOWS\system32\drivers\dmboot.sys.bak
2013-12-28 09:42:04 ----A---- C:\WINDOWS\system32\drivers\DKbFltr.SYS.bak
2013-12-28 09:42:04 ----A---- C:\WINDOWS\system32\drivers\diskdump.sys.bak
2013-12-28 09:42:04 ----A---- C:\WINDOWS\system32\drivers\disk.sys.bak
2013-12-28 09:42:04 ----A---- C:\WINDOWS\system32\drivers\dac960nt.sys.bak
2013-12-28 09:42:03 ----A---- C:\WINDOWS\system32\drivers\dac2w2k.sys.bak
2013-12-28 09:42:03 ----A---- C:\WINDOWS\system32\drivers\crusoe.sys.bak
2013-12-28 09:42:03 ----A---- C:\WINDOWS\system32\drivers\cpqdap01.sys.bak
2013-12-28 09:42:03 ----A---- C:\WINDOWS\system32\drivers\cpqarray.sys.bak
2013-12-28 09:42:02 ----A---- C:\WINDOWS\system32\drivers\compbatt.sys.bak
2013-12-28 09:42:02 ----A---- C:\WINDOWS\system32\drivers\cmdide.sys.bak
2013-12-28 09:42:02 ----A---- C:\WINDOWS\system32\drivers\cmdhlp.sys.bak
2013-12-28 09:42:02 ----A---- C:\WINDOWS\system32\drivers\cmdGuard.sys.bak
2013-12-28 09:42:01 ----A---- C:\WINDOWS\system32\drivers\cmderd.sys.bak
2013-12-28 09:42:01 ----A---- C:\WINDOWS\system32\drivers\CmBatt.sys.bak
2013-12-28 09:42:01 ----A---- C:\WINDOWS\system32\drivers\classpnp.sys.bak
2013-12-28 09:42:00 ----A---- C:\WINDOWS\system32\drivers\cinemst2.sys.bak
2013-12-28 09:42:00 ----A---- C:\WINDOWS\system32\drivers\CFRMD.sys.bak
2013-12-28 09:42:00 ----A---- C:\WINDOWS\system32\drivers\cdrom.sys.bak
2013-12-28 09:42:00 ----A---- C:\WINDOWS\system32\drivers\cdfs.sys.bak
2013-12-28 09:41:59 ----A---- C:\WINDOWS\system32\drivers\cdaudio.sys.bak
2013-12-28 09:41:59 ----A---- C:\WINDOWS\system32\drivers\cd20xrnt.sys.bak
2013-12-28 09:41:59 ----A---- C:\WINDOWS\system32\drivers\CCDECODE.sys.bak
2013-12-28 09:41:59 ----A---- C:\WINDOWS\system32\drivers\cbidf2k.sys.bak
2013-12-28 09:41:59 ----A---- C:\WINDOWS\system32\drivers\btwusb.sys.bak
2013-12-28 09:41:58 ----A---- C:\WINDOWS\system32\drivers\btwsecfl.sys.bak
2013-12-28 09:41:58 ----A---- C:\WINDOWS\system32\drivers\btkrnl.sys.bak
2013-12-28 09:41:57 ----A---- C:\WINDOWS\system32\drivers\bthport.sys.bak
2013-12-28 09:41:57 ----A---- C:\WINDOWS\system32\drivers\bridge.sys.bak
2013-12-28 09:41:57 ----A---- C:\WINDOWS\system32\drivers\BRGSp50a64.sys.bak
2013-12-28 09:41:57 ----A---- C:\WINDOWS\system32\drivers\BRGSp50.sys.bak
2013-12-28 09:41:56 ----A---- C:\WINDOWS\system32\drivers\beep.sys.bak
2013-12-28 09:41:56 ----A---- C:\WINDOWS\system32\drivers\BCMWL5.SYS.bak
2013-12-28 09:41:55 ----A---- C:\WINDOWS\system32\drivers\battc.sys.bak
2013-12-28 09:41:53 ----A---- C:\WINDOWS\system32\drivers\audstub.sys.bak
2013-12-28 09:41:53 ----A---- C:\WINDOWS\system32\drivers\atmuni.sys.bak
2013-12-28 09:41:53 ----A---- C:\WINDOWS\system32\drivers\atmlane.sys.bak
2013-12-28 09:41:53 ----A---- C:\WINDOWS\system32\drivers\atmepvc.sys.bak
2013-12-28 09:41:52 ----A---- C:\WINDOWS\system32\drivers\atmarpc.sys.bak
2013-12-28 09:41:52 ----A---- C:\WINDOWS\system32\drivers\athuw.sys.bak
2013-12-28 09:41:51 ----A---- C:\WINDOWS\system32\drivers\atapi.sys.bak
2013-12-28 09:41:51 ----A---- C:\WINDOWS\system32\drivers\asyncmac.sys.bak
2013-12-28 09:41:50 ----A---- C:\WINDOWS\system32\drivers\asc3550.sys.bak
2013-12-28 09:41:50 ----A---- C:\WINDOWS\system32\drivers\asc3350p.sys.bak
2013-12-28 09:41:50 ----A---- C:\WINDOWS\system32\drivers\asc.sys.bak
2013-12-28 09:41:50 ----A---- C:\WINDOWS\system32\drivers\arp1394.sys.bak
2013-12-28 09:41:50 ----A---- C:\WINDOWS\system32\drivers\amsint.sys.bak
2013-12-28 09:41:49 ----A---- C:\WINDOWS\system32\drivers\amdk7.sys.bak
2013-12-28 09:41:49 ----A---- C:\WINDOWS\system32\drivers\amdk6.sys.bak
2013-12-28 09:41:49 ----A---- C:\WINDOWS\system32\drivers\AMDAGP.SYS.bak
2013-12-28 09:41:48 ----A---- C:\WINDOWS\system32\drivers\Ambfilt.sys.bak
2013-12-28 09:41:48 ----A---- C:\WINDOWS\system32\drivers\ALIM1541.SYS.bak
2013-12-28 09:41:48 ----A---- C:\WINDOWS\system32\drivers\aliide.sys.bak
2013-12-28 09:41:47 ----A---- C:\WINDOWS\system32\drivers\aic78xx.sys.bak
2013-12-28 09:41:47 ----A---- C:\WINDOWS\system32\drivers\aic78u2.sys.bak
2013-12-28 09:41:47 ----A---- C:\WINDOWS\system32\drivers\aha154x.sys.bak
2013-12-28 09:41:45 ----A---- C:\WINDOWS\system32\drivers\AGPCPQ.SYS.bak
2013-12-28 09:41:45 ----A---- C:\WINDOWS\system32\drivers\AGP440.SYS.bak
2013-12-28 09:41:45 ----A---- C:\WINDOWS\system32\drivers\afd.sys.bak
2013-12-28 09:41:44 ----A---- C:\WINDOWS\system32\drivers\aec.sys.bak
2013-12-28 09:41:44 ----A---- C:\WINDOWS\system32\drivers\adpu160m.sys.bak
2013-12-28 09:41:44 ----A---- C:\WINDOWS\system32\drivers\acpiec.sys.bak
2013-12-28 09:41:44 ----A---- C:\WINDOWS\system32\drivers\acpi.sys.bak
2013-12-28 09:41:44 ----A---- C:\WINDOWS\system32\drivers\ABP480N5.SYS.bak
2013-12-28 09:38:15 ----A---- C:\WINDOWS\system32\TrueSight.sys
2013-12-27 11:01:10 ----A---- C:\WINDOWS\system32\drivers\mbam.sys
2013-12-27 11:01:08 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2013-12-27 10:16:48 ----D---- C:\AdwCleaner
2013-12-26 17:47:32 ----D---- C:\rsit
2013-12-26 17:21:34 ----D---- C:\Documents and Settings\All Users\Data aplikací\Mozilla
2013-12-26 17:21:30 ----D---- C:\Program Files\Mozilla Maintenance Service
2013-12-26 16:43:00 ----A---- C:\WINDOWS\system32\drivers\aswVmm.sys
2013-12-26 16:43:00 ----A---- C:\WINDOWS\system32\drivers\aswTdi.sys
2013-12-26 16:43:00 ----A---- C:\WINDOWS\system32\drivers\aswSP.sys
2013-12-26 16:43:00 ----A---- C:\WINDOWS\system32\drivers\aswSnx.sys
2013-12-26 16:43:00 ----A---- C:\WINDOWS\system32\drivers\aswRvrt.sys
2013-12-26 16:42:59 ----A---- C:\WINDOWS\system32\drivers\aswRdr.sys
2013-12-26 16:42:59 ----A---- C:\WINDOWS\system32\drivers\aswMonFlt.sys
2013-12-26 16:42:38 ----A---- C:\WINDOWS\avastSS.scr
2013-12-26 16:26:32 ----HD---- C:\BJPrinter

======List of files/folders modified in the last 1 month======

2013-12-28 10:02:45 ----D---- C:\WINDOWS\Prefetch
2013-12-28 10:02:43 ----HD---- C:\WINDOWS\inf
2013-12-28 10:02:42 ----D---- C:\Program Files\trend micro
2013-12-28 10:02:41 ----D---- C:\WINDOWS
2013-12-28 10:02:32 ----RSHDC---- C:\WINDOWS\system32\dllcache
2013-12-28 10:02:31 ----AD---- C:\WINDOWS\system32
2013-12-28 10:01:18 ----SHD---- C:\WINDOWS\Installer
2013-12-28 10:01:17 ----SHD---- C:\Config.Msi
2013-12-28 10:01:17 ----D---- C:\WINDOWS\Temp
2013-12-28 10:01:12 ----D---- C:\Documents and Settings\All Users\Data aplikací\Microsoft Help
2013-12-28 09:50:34 ----D---- C:\WINDOWS\system32\MRT
2013-12-28 09:50:27 ----D---- C:\WINDOWS\Debug
2013-12-28 09:48:55 ----A---- C:\WINDOWS\system32\MRT.exe
2013-12-28 09:43:32 ----D---- C:\WINDOWS\system32\drivers
2013-12-28 09:33:50 ----D---- C:\WINDOWS\system32\CatRoot2
2013-12-28 00:44:22 ----A---- C:\WINDOWS\SchedLgU.Txt
2013-12-27 23:29:16 ----SHD---- C:\System Volume Information
2013-12-27 23:29:16 ----D---- C:\WINDOWS\system32\Restore
2013-12-27 23:21:27 ----D---- C:\WINDOWS\Provisioning
2013-12-27 11:01:08 ----RD---- C:\Program Files
2013-12-26 17:42:55 ----D---- C:\Documents and Settings\Ivanka\Data aplikací\uTorrent
2013-12-26 17:35:31 ----D---- C:\Program Files\uTorrent
2013-12-26 17:27:07 ----D---- C:\Program Files\WinRAR
2013-12-26 17:21:11 ----D---- C:\Program Files\Mozilla Firefox
2013-12-26 17:18:30 ----A---- C:\WINDOWS\system32\FlashPlayerApp.exe
2013-12-26 16:59:49 ----D---- C:\Documents and Settings\Ivanka\Data aplikací\vlc
2013-12-26 16:58:45 ----SD---- C:\WINDOWS\Tasks
2013-12-26 16:58:05 ----A---- C:\WINDOWS\system32\aswBoot.exe
2013-12-26 16:52:50 ----D---- C:\Program Files\CCleaner
2013-12-26 16:49:41 ----D---- C:\WINDOWS\pss
2013-12-26 16:40:13 ----D---- C:\Documents and Settings\All Users\Data aplikací\AVAST Software
2013-12-26 16:31:49 ----D---- C:\Program Files\AVAST Software
2013-12-26 16:20:48 ----D---- C:\Program Files\Company
2013-12-03 21:09:49 ----A---- C:\WINDOWS\system32\PerfStringBackup.TMP

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\WINDOWS\system32\drivers\aswRvrt.sys [2013-12-26 49944]
R0 aswVmm;avast! VM Monitor; C:\WINDOWS\system32\drivers\aswVmm.sys [2013-12-26 180248]
R0 iaStor;Intel AHCI Controller; C:\WINDOWS\system32\drivers\iaStor.sys [2008-04-15 312344]
R0 Inspect;COMODO Internet Security Firewall Driver; C:\WINDOWS\System32\DRIVERS\inspect.sys [2012-11-08 99080]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
R1 aswRdr;aswRdr; \??\C:\WINDOWS\system32\drivers\aswRdr.sys []
R1 aswSnx;aswSnx; \??\C:\WINDOWS\system32\drivers\aswSnx.sys []
R1 aswSP;aswSP; \??\C:\WINDOWS\system32\drivers\aswSP.sys []
R1 aswTdi;aswTdi; \??\C:\WINDOWS\system32\drivers\aswTdi.sys []
R1 CFRMD;CFRMD; C:\WINDOWS\system32\DRIVERS\CFRMD.sys [2013-05-07 36112]
R1 cmdGuard;COMODO Internet Security Sandbox Driver; C:\WINDOWS\System32\DRIVERS\cmdguard.sys [2012-11-08 497952]
R1 cmdHlp;COMODO Internet Security Helper Driver; C:\WINDOWS\System32\DRIVERS\cmdhlp.sys [2012-11-08 32640]
R1 DritekPortIO;Dritek General Port I/O; \??\C:\PROGRA~1\LAUNCH~1\DPortIO.sys []
R1 HMD;COMODO livePCsupport Hardware Monitor Driver; C:\WINDOWS\system32\DRIVERS\hmd.sys [2013-10-07 14272]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\WINDOWS\system32\DRIVERS\wmiacpi.sys [2008-04-14 8832]
R2 aswMonFlt;aswMonFlt; \??\C:\WINDOWS\system32\drivers\aswMonFlt.sys []
R3 BCM43XX;Ovladač síťového adaptéru Broadcom 802.11; C:\WINDOWS\system32\DRIVERS\bcmwl5.sys [2009-02-20 1952512]
R3 BTKRNL;Enumenátor sběrnice Bluetooth; C:\WINDOWS\system32\DRIVERS\btkrnl.sys [2009-04-15 991136]
R3 DKbFltr;Dritek Keyboard Filter Driver; C:\WINDOWS\system32\DRIVERS\DKbFltr.sys [2004-12-08 16896]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-14 144384]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\igxpmp32.sys [2008-02-15 5854752]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2009-08-31 5891584]
R3 L1c;NDIS Miniport Driver for Atheros AR8131/AR8132 PCI-E Ethernet Controller; C:\WINDOWS\system32\DRIVERS\l1c51x86.sys [2009-03-02 38912]
R3 MBAMProtector;MBAMProtector; \??\C:\WINDOWS\system32\drivers\mbam.sys []
R3 SNP2UVC;USB2.0 PC Camera (SNP2UVC); C:\WINDOWS\system32\DRIVERS\snp2uvc.sys [2009-05-06 1759744]
R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2009-02-06 205232]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 Wdf01000;Kernel Mode Driver Frameworks service; C:\WINDOWS\System32\Drivers\wdf01000.sys [2008-03-27 503008]
R3 WSIMD;wsimd Service; C:\WINDOWS\system32\DRIVERS\wsimd.sys [2009-09-21 58208]
S3 Ambfilt;Ambfilt; C:\WINDOWS\system32\drivers\Ambfilt.sys [2008-08-05 1684736]
S3 AR9271;Wireless Network Adapter Service; C:\WINDOWS\system32\DRIVERS\athuw.sys [2009-09-21 1668352]
S3 BTWUSB;WIDCOMM USB Bluetooth Driver; C:\WINDOWS\System32\Drivers\btwusb.sys [2008-10-30 47272]
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-14 17024]
S3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
S3 Monfilt;Monfilt; C:\WINDOWS\system32\drivers\Monfilt.sys [2006-01-04 1389056]
S3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-14 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-14 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-14 10880]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\WINDOWS\System32\Drivers\RtsUStor.sys [2009-02-03 162816]
S3 Rts516xIR;Realtek IR Driver; C:\WINDOWS\system32\DRIVERS\Rts516xIR.sys []
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-14 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-14 15232]
S3 TrueSight;TrueSight; \??\ []
S3 usb_rndisx;Adaptér USB RNDIS; C:\WINDOWS\system32\DRIVERS\usb8023x.sys [2013-02-12 12928]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2013-08-09 32384]
S3 USBCCID;Realtek Smartcard Reader Driver; C:\WINDOWS\system32\DRIVERS\Rts5161ccid.sys []
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2013-07-03 14976]
S3 usbstor;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 usbvideo;Zobrazovací zařízení USB (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2013-07-17 123008]
S3 WDC_SAM;WD SCSI Pass Thru driver; C:\WINDOWS\system32\DRIVERS\wdcsam.sys [2011-02-16 11520]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-14 19200]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S3 ZDPSp50;ZDPSp50 NDIS Protocol Driver; C:\WINDOWS\System32\Drivers\ZDPSp50.sys [2004-10-25 17664]
S4 agp440;Filtr Intel sběrnice AGP; C:\WINDOWS\system32\DRIVERS\agp440.sys [2008-04-13 42368]
S4 agpCPQ;Filtr Compaq sběrnice AGP; C:\WINDOWS\system32\DRIVERS\agpCPQ.sys [2008-04-13 44928]
S4 alim1541;Filtr ALI sběrnice AGP; C:\WINDOWS\system32\DRIVERS\alim1541.sys [2008-04-13 42752]
S4 amdagp;Ovladač filtru AMD portu AGP; C:\WINDOWS\system32\DRIVERS\amdagp.sys [2008-04-13 43008]
S4 cbidf;cbidf; C:\WINDOWS\system32\DRIVERS\cbidf2k.sys [2008-04-14 13952]
S4 sisagp;Filtr SIS sběrnice AGP ; C:\WINDOWS\system32\DRIVERS\sisagp.sys [2008-04-13 40960]
S4 viaagp;Filtr VIA sběrnice AGP ; C:\WINDOWS\system32\DRIVERS\viaagp.sys [2008-04-13 42240]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ACS;TP-LINK Configuration Service; C:\WINDOWS\system32\acs.exe [2009-09-21 499796]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2013-12-26 50344]
R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe [2009-05-08 349528]
R2 CLPSLauncher;COMODO LPS Launcher; C:\Program Files\Common Files\COMODO\launcher_service.exe [2013-10-11 70352]
R2 cmdAgent;COMODO Internet Security Helper Service; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [2012-11-08 1990464]
R2 GeekBuddyRSP;GeekBuddyRSP Server; C:\Program Files\Common Files\COMODO\GeekBuddyRSP.exe [2013-10-11 2327248]
R2 IAANTMON;Intel(R) Matrix Storage Event Monitor; C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe [2008-04-15 354840]
R2 MBAMService;MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [2013-04-04 701512]
R2 MBAMScheduler;MBAMScheduler; C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [2013-04-04 418376]
R2 RS_Service;Raw Socket Service; C:\Program Files\Acer\Acer VCM\RS_Service.exe [2009-02-05 237568]
R2 WDDMService;WDDMService; C:\Program Files\Western Digital\WD SmartWare\WDDMService.exe [2011-08-01 263056]
R2 WDFMEService;WDFMEService; C:\Program Files\Western Digital\WD SmartWare\WDFME.exe [2011-08-01 1592208]
R2 WDRulesService;WDRulesService; C:\Program Files\Western Digital\WD SmartWare\WDRulesEngine.exe [2011-08-01 1091984]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 Fax;Fax; C:\WINDOWS\system32\fxssvc.exe [2008-04-14 268288]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-02-07 135664]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2013-02-28 161384]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-26 257416]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-02-07 135664]
S3 idsvc;Služba Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2013-12-05 119408]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 Sony Ericsson PCCompanion;Sony Ericsson PCCompanion; C:\Program Files\Sony Ericsson\Sony Ericsson PC Companion\PCCService.exe [2011-06-29 155344]
S3 WinRM;Windows Remote Management (WS-Management); C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2013-07-20 754856]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------

#14 Příspěvek od **Márty84** » 28 pro 2013 10:09

Odinstalujte MBAM

Posledni sken a budem mazat

Jestli bude Avast rvat, ze to chce otevrit v sandboxu, nedovolte to! Vyberte moznost Otevrit normalne

Stahnete OTL http://oldtimer.geekstogo.com/OTL.exe , ulozte na plochu a spustte.
Oznacte polozky (dejte tam zatrzitka) Pro všechny uživatele, Kontrola na havěť "LOP" a Kontrola na havěť "Purity"
Do spodniho okna vlozte nasledujici text

Kód: Vybrat vše

CREATERESTOREPOINT

netsvcs
drivers32
savembr:0

/md5start
adp3132.sys
AGP440.sys
ahcix86.sys
ahcix86s.sys
atapi.sys
autochk.exe
cdrom.sys
cngaudit.dll
cryptsvc.dll
eNetHook.dll
eventlog.dll
explorer.exe
hal.dll
Changer.sys
iaStor.sys
iastorv.sys
IdeChnDr.sys
isapnp.sys
JakNDis.sys
KR10N.sys
logevent.dll
lsass.exe
mv61xx.sys
ndis.sys
netlogon.dll
ntelogon.dll
nvata.sys
nvatabus.sys
nvgts.sys
nvraid.sys
nvrd32.sys
nvstor.sys
nvstor32.sys
scecli.dll
sceclt.dll
smss.exe
svchost.exe
symmpi.sys
tcpip.sys
userinit.exe
vaxscsi.sys
viamraid.sys
viasraid.sys
ViPrt.sys
winlogon.exe
ws2_32.dll
/md5stop

%systemroot%*.* /U /s
%SYSTEMDRIVE%\*.exe
%ALLUSERSPROFILE%\Application Data\*.
%ALLUSERSPROFILE%\Application Data\*.exe /s
%APPDATA%\*.
%APPDATA%\*.exe /s
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job /lockedfiles
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\system32\drivers\*.sys /3
%systemroot%\system32\*.* /3
%SYSTEMDRIVE%\*.exe

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s
reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c
reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv" /v ImagePath /c
reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS" /v ImagePath /c

type c:\boot.ini >> test.txt /c
%SystemDrive%\PhysicalMBR.bin /md5

*crack* /s
*keygen* /s
*AntiWPA* /s
*loader* /s
*minodlogin* /s
*tnod* /s
*AutoKMS* /s
*activator* /s
*serial* /s
*w7lxe* /s

Kliknete na Prohledat
Po skenu se vytvori dva logy (OTL.Txt a Extras.txt), oba sem vlozte (kdyz budou dlouhe, rozdelte je do vice prispevku).

Allkor · #15 Příspěvek od **Allkor** » 28 pro 2013 11:51

Tak OTL běžel asi hodinu a teď se tváří zasekle - vyskočila chybová hláška a už asi 15 minut je ve spodním řádku jen Google update. Obojí jde vidět na přiloženém screenu. I podle task mastera nežere CPU, jak kdyby nepracoval

VIRY.CZ

Prosím o kontrolu

Prosím o kontrolu

Re: Prosím o kontrolu

Re: Prosím o kontrolu

Re: Prosím o kontrolu

Re: Prosím o kontrolu

Re: Prosím o kontrolu

Re: Prosím o kontrolu

Re: Prosím o kontrolu

Re: Prosím o kontrolu

Re: Prosím o kontrolu

Re: Prosím o kontrolu

Re: Prosím o kontrolu

Re: Prosím o kontrolu

Re: Prosím o kontrolu

Re: Prosím o kontrolu