Infekce - trojský kůň

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz


Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Zamčeno
Zpráva
Autor
apache.davidson
Návštěvník
Návštěvník
Příspěvky: 26
Registrován: 21 Led 2009 17:50

Infekce - trojský kůň

#1 Příspěvek od apache.davidson »

Dobrý den,
počítač hlásí infekce (trojský kůň). Přikládám log pro kontrolu. Děkuji.

Logfile of random's system information tool 1.09 (written by random/random)
Run by oem at 2014-03-16 16:27:33
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 235 GB (77%) free of 305 GB
Total RAM: 2975 MB (62% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 16:27:48, on 16.3.2014
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.21371)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\extras\Vista Drive Icon\DrvIcon.exe
C:\Program Files\extras\Vista Drive Icon\DrvIcon.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\PLFSetL.exe
C:\WINDOWS\PLFSetI.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Documents and Settings\oem\Local Settings\Data aplikací\Seznam.cz\postak.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\IMPI\ExtensionUpdaterService.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Kozaka\updateKozaka.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\Program Files\Kozaka\bin\utilKozaka.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Documents and Settings\oem\Plocha\Programy\utorrent.exe
C:\WINDOWS\System32\svchost.exe
C:\Documents and Settings\oem\Plocha\Programy\RSIT.exe
C:\Program Files\trend micro\oem.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.tb.ask.com/index.jhtml?n=77 ... 1CD10A7B2B
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,First Home Page = http://go.microsoft.com/fwlink/?LinkId=54843
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: IMPI Helper - {17E113E6-CD0E-4045-B154-65F0E57959EF} - C:\Program Files\IMPI\Extension32.dll
O2 - BHO: Avira SearchFree Toolbar BHO - {41564952-412D-5637-4300-7A786E7484D7} - "C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport.dll" (file missing)
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~3\Office12\GRA8E1~1.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Avira SearchFree Toolbar - {41564952-412D-5637-4300-7A786E7484D7} - "C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport.dll" (file missing)
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE
O4 - HKLM\..\Run: [AlwaysReady Power Message APP] ARPWRMSG.EXE
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [Vista D I] C:\Program Files\extras\Vista Drive Icon\DrvIcon.exe
O4 - HKLM\..\Run: [DrvIcon] C:\Program Files\extras\Vista Drive Icon\DrvIcon.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [PLFSetL] C:\WINDOWS\PLFSetL.exe
O4 - HKLM\..\Run: [PLFSetI] C:\WINDOWS\PLFSetI.exe
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [ApnTBMon] "C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe"
O4 - HKLM\..\RunOnce: [AvgUninstallURL] cmd.exe /c start http://www.avg.cz/cz.special-uninstalla ... er=9.0.894
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Seznam Postak] "C:\Documents and Settings\oem\Local Settings\Data aplikací\Seznam.cz\postak.exe" -s
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [NextLive] C:\WINDOWS\system32\rundll32.exe ",EntryPoint -m l
O4 - HKUS\S-1-5-18\..\RunOnce: [AutoLaunch] C:\Program Files\Lavasoft\Ad-Aware\AutoLaunch.exe monthly (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [AutoLaunch] C:\Program Files\Lavasoft\Ad-Aware\AutoLaunch.exe monthly (User 'Default user')
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Free YouTube Download - C:\Documents and Settings\oem\Data aplikací\DVDVideoSoftIEHelpers\freeytvdownloader.htm
O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Documents and Settings\oem\Data aplikací\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
O8 - Extra context menu item: Odeslat do zařízení &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Odeslat do zařízení Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone: *.line6.net
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~3\Office12\GR99D3~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Avira Scheduler (AntiVirSchedulerService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira Real-Time Protection (AntiVirService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Avira Web Protection (AntiVirWebService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE
O23 - Service: Ask Update Service (APNMCP) - APN LLC. - C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: Služba Google Update (gupdate1ca88a037f522fc) (gupdate1ca88a037f522fc) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: IMPI Updater - Unknown owner - C:\Program Files\IMPI\ExtensionUpdaterService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Lavasoft Ad-Aware Service - Unknown owner - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Sony PC Companion - Avanquest Software - C:\Program Files\Sony\Sony PC Companion\PCCService.exe
O23 - Service: Update Kozaka - Unknown owner - C:\Program Files\Kozaka\updateKozaka.exe
O23 - Service: Util Kozaka - Unknown owner - C:\Program Files\Kozaka\bin\utilKozaka.exe

--
End of file - 10348 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job
C:\WINDOWS\tasks\Adobe Flash Player Updater.job
C:\WINDOWS\tasks\AmiUpdXp.job
C:\WINDOWS\tasks\Express FilesUpdate.job
C:\WINDOWS\tasks\Go for FilesUpdate.job
C:\WINDOWS\tasks\GoforFilesUpdate.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\tasks\Měsíční oznamování konce poskytování služeb pro Microsoft Windows XP.job
C:\WINDOWS\tasks\Přihlášení k oznamování konce poskytování služeb pro Microsoft Windows XP.job
C:\WINDOWS\tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-1177238915-1957994488-2147156445-1005.job
C:\WINDOWS\tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-1177238915-1957994488-2147156445-1005.job

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\oem\Data aplikací\Mozilla\Firefox\Profiles\acmtm6o3.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "http://avira.search.ask.com/?tpid=AVIRA ... 03-08&psv="
prefs.js - "extensions.enabledItems" - "{AB2CE124-6272-4b12-94A9-7303C7397BD1}:5.0.0.6778, {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20, {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22, {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23, {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24, {20a82645-c095-46ed-80e3-08825760534b}:1.2.1, jqs@sun.com:1.0, {82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}:5.10.0.9560, {ACAA314B-EEBA-48e4-AD47-84E31C44796C}:1.0.8, {687578b9-7132-4a7a-80e4-30ee31099e03}:3.10.0.1, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.28"
prefs.js - "keyword.URL" - "http://search.conduit.com/ResultsExt.as ... ource=2&q="

"{20a82645-c095-46ed-80e3-08825760534b}"=c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
"jqs@sun.com"=C:\Program Files\Java\jre6\lib\deploy\jqs\ff
"{17E113E6-CD0E-4045-B154-65F0E57959EF}"=C:\Program Files\IMPI\Firefox
"ext@MediaViewV1alpha7934.net"=C:\Program Files\MediaViewV1\MediaViewV1alpha7934\ff


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 12.0.0.77 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32_12_0_0_77.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0]
"Description"=DivX Plus Web Player
"Path"=C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nppl3260;version=6.0.11.2852]
"Description"=RealMedia Plugin
"Path"=C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nppl3260;version=6.0.12.46]
"Description"=RealPlayer(tm) LiveConnect-Enabled Plug-In
"Path"=C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.1662]
"Description"=RealPlayer Version Plugin
"Path"=C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.46]
"Description"=6.0.12.46
"Path"=C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=]
"Description"=
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll

C:\Program Files\Mozilla Firefox\extensions\
{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
{972ce4c6-7e08-4474-a285-3208198ce6fd}(2)
{AB2CE124-6272-4b12-94A9-7303C7397BD1}

C:\Program Files\Mozilla Firefox\plugins\
npdeployJava1.dll
nppdf32.dll

C:\Documents and Settings\oem\Data aplikací\Mozilla\Firefox\Profiles\acmtm6o3.default\extensions\
toolbar@centrumholdings(2).com
WebSiteRecommendation@weliketheweb.com
{20a82645-c095-46ed-80e3-08825760534b}
{687578b9-7132-4a7a-80e4-30ee31099e03}
{7473b6bd-4691-4744-a82b-7854eb3d70b6}(2)
{872b5b88-9db5-4310-bdd0-ac189557e5f5}
{88ac3cb6-596b-4217-964c-b6757ef9602d}
{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}(2)
{ea614400-e918-4741-9a97-7a972ff7c30b}

C:\Documents and Settings\oem\Data aplikací\Mozilla\Firefox\Profiles\acmtm6o3.default\searchplugins\
ask-search.xml
ask-web-search.xml
askcom.xml
conduit.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{17E113E6-CD0E-4045-B154-65F0E57959EF}]
IMPI - C:\Program Files\IMPI\Extension32.dll [2013-02-05 167424]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{41564952-412D-5637-4300-7A786E7484D7}]
Avira SearchFree Toolbar - C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport.dll [2014-02-13 12240]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~3\Office12\GRA8E1~1.DLL [2006-10-26 2210608]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-02-09 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2011-02-09 79648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{41564952-412D-5637-4300-7A786E7484D7} - Avira SearchFree Toolbar - C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport.dll [2014-02-13 12240]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2008-04-10 16861184]
"SoundMan"=C:\WINDOWS\SOUNDMAN.EXE [2006-07-21 86016]
"AlcWzrd"=C:\WINDOWS\ALCWZRD.EXE [2006-05-04 2808832]
"AlwaysReady Power Message APP"=C:\WINDOWS\ARPWRMSG.EXE [2008-12-26 77312]
"ehTray"=C:\WINDOWS\ehome\ehtray.exe [2005-08-05 64512]
"Vista D I"=C:\Program Files\extras\Vista Drive Icon\DrvIcon.exe [2008-04-13 49152]
"DrvIcon"=C:\Program Files\extras\Vista Drive Icon\DrvIcon.exe [2008-04-13 49152]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2009-04-29 141336]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2009-04-29 173592]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2009-04-29 142872]
"PLFSetL"=C:\WINDOWS\PLFSetL.exe [2007-07-05 94208]
"PLFSetI"=C:\WINDOWS\PLFSetI.exe [2007-10-23 200704]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904]
"avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2014-03-13 689744]
"ApnTBMon"=C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [2014-02-13 1758160]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"AvgUninstallURL"=cmd.exe /c start http://www.avg.cz/cz.special-uninstalla ... er=9.0.894 []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-12-19 40960]
"Seznam Postak"=C:\Documents and Settings\oem\Local Settings\Data aplikací\Seznam.cz\postak.exe [2011-01-19 489584]
"MSMSGS"=C:\Program Files\Messenger\msmsgs.exe [2008-04-14 1695232]
"NextLive"=,EntryPoint -m l []

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2009-04-22 206848]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\wpdshserviceobj.dll [2008-12-14 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~3\Office12\GRA8E1~1.DLL [2006-10-26 2210608]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Lavasoft Ad-Aware Service]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"InstallVisualStyle"=C:\WINDOWS\Resources\Themes\Windows XP Ultimate 2009\Windows XP Ultimate 2009.msstyles
"InstallTheme"=C:\WINDOWS\Resources\Themes\Windows XP Ultimate 2009.theme

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Documents and Settings\oem\Plocha\Programy\utorrent.exe"="C:\Documents and Settings\oem\Plocha\Programy\utorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\Messenger\msmsgs.exe"="C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\Program Files\GoforFiles\goforfilesdl.exe"="C:\Program Files\GoforFiles\goforfilesdl.exe:*:Enabled:GoforFiles"
"C:\Program Files\GoforFiles\GoforFiles.exe"="C:\Program Files\GoforFiles\GoforFiles.exe:*:Enabled:GoforFiles"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"VIDC.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"VIDC.YVYU"=msyuv.dll
"wavemapper"=msacm32.drv
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"VIDC.DIVX"=divx.dll
"VIDC.XVID"=xvidvfw.dll
"VIDC.YV12"=yv12vfw.dll
"msacm.ac3acm"=ac3acm.acm
"msacm.lameacm"=lameACM.acm
"VIDC.FFDS"=ff_vfw.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave5"=wdmaud.drv
"wave6"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"aux2"=wdmaud.drv

======List of files/folders created in the last 1 month======

2014-03-16 12:05:54 ----HD---- C:\WINDOWS\system32\GroupPolicy
2014-03-12 18:46:48 ----HDC---- C:\WINDOWS\$NtUninstallKB2934207$
2014-03-12 18:46:01 ----HDC---- C:\WINDOWS\$NtUninstallKB2929961$
2014-03-12 18:45:47 ----HDC---- C:\WINDOWS\$NtUninstallKB2930275$
2014-03-12 14:43:10 ----N---- C:\WINDOWS\system32\xp_eos.exe
2014-03-08 13:46:19 ----D---- C:\Documents and Settings\oem\Data aplikací\Avira
2014-03-08 13:40:53 ----D---- C:\Documents and Settings\All Users\Data aplikací\APN
2014-03-08 13:38:37 ----A---- C:\WINDOWS\system32\drivers\avipbb.sys
2014-03-08 13:38:37 ----A---- C:\WINDOWS\system32\drivers\avgntflt.sys
2014-03-08 13:38:25 ----D---- C:\Program Files\Avira
2014-03-03 16:18:19 ----D---- C:\Program Files\Mozilla Firefox
2014-03-02 17:51:38 ----D---- C:\8d1a553798708ee6b59d7c51f46e
2014-02-28 17:36:51 ----D---- C:\Program Files\MediaViewV1
2014-02-25 12:42:25 ----D---- C:\Program Files\MediaViewerV1

======List of files/folders modified in the last 1 month======

2014-03-16 16:27:45 ----D---- C:\WINDOWS\TEMP
2014-03-16 16:27:41 ----D---- C:\Program Files\trend micro
2014-03-16 16:27:36 ----D---- C:\WINDOWS\Prefetch
2014-03-16 16:25:01 ----D---- C:\Documents and Settings\oem\Data aplikací\uTorrent
2014-03-16 16:00:00 ----A---- C:\WINDOWS\SchedLgU.Txt
2014-03-16 14:10:22 ----A---- C:\WINDOWS\NeroDigital.ini
2014-03-16 13:28:04 ----D---- C:\WINDOWS
2014-03-16 13:20:36 ----SHD---- C:\System Volume Information
2014-03-16 12:18:22 ----D---- C:\WINDOWS\Registration
2014-03-16 12:05:54 ----D---- C:\WINDOWS\system32
2014-03-15 19:16:15 ----D---- C:\Documents and Settings\oem\Data aplikací\Skype
2014-03-13 10:41:11 ----SD---- C:\WINDOWS\Tasks
2014-03-12 18:46:52 ----HD---- C:\WINDOWS\inf
2014-03-12 18:46:50 ----RSHDC---- C:\WINDOWS\system32\dllcache
2014-03-12 18:46:44 ----D---- C:\WINDOWS\system32\CatRoot2
2014-03-12 18:46:39 ----D---- C:\Program Files\Internet Explorer
2014-03-12 18:46:31 ----D---- C:\WINDOWS\system32\cs-cz
2014-03-12 18:46:17 ----D---- C:\WINDOWS\ie7updates
2014-03-12 15:18:11 ----A---- C:\WINDOWS\system32\FlashPlayerApp.exe
2014-03-08 13:45:53 ----D---- C:\Documents and Settings\oem\Data aplikací\newnext.me
2014-03-08 13:42:22 ----SHD---- C:\WINDOWS\Installer
2014-03-08 13:42:19 ----D---- C:\Config.Msi
2014-03-08 13:42:17 ----RD---- C:\Program Files
2014-03-08 13:41:30 ----D---- C:\WINDOWS\system32\CatRoot
2014-03-08 13:38:37 ----D---- C:\WINDOWS\system32\drivers
2014-03-08 13:38:25 ----D---- C:\Documents and Settings\All Users\Data aplikací\Avira
2014-03-05 07:52:33 ----D---- C:\Program Files\Mozilla Maintenance Service
2014-03-02 17:57:37 ----HDC---- C:\WINDOWS\$NtUninstallKB2916036$
2014-03-02 17:57:27 ----HDC---- C:\WINDOWS\$NtUninstallKB2909212$
2014-03-02 17:52:00 ----D---- C:\WINDOWS\system32\config
2014-03-02 17:51:48 ----D---- C:\WINDOWS\system32\wbem
2014-03-02 17:46:28 ----SD---- C:\Documents and Settings\oem\Data aplikací\Microsoft
2014-03-02 17:42:12 ----D---- C:\Program Files\Kozaka
2014-02-25 12:37:45 ----D---- C:\Documents and Settings\All Users\Data aplikací\Microsoft Help
2014-02-21 15:25:56 ----D---- C:\WINDOWS\Debug

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2005-05-12 20576]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2008-12-14 77568]
R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2014-03-08 135648]
R1 avkmgr;avkmgr; C:\WINDOWS\system32\DRIVERS\avkmgr.sys [2014-03-08 37352]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 nvport;NVIDIA PORT IO Control Driver; \??\C:\WINDOWS\system32\Drivers\nvport.sys []
R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2014-03-08 28520]
R1 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\WINDOWS\system32\DRIVERS\wmiacpi.sys [2008-04-13 8832]
R1 WS2IFSL;Windows Socket 2.0 Non-IFS Service Provider Support Environment; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2001-10-25 12032]
R2 avgntflt;avgntflt; C:\WINDOWS\system32\DRIVERS\avgntflt.sys [2014-03-08 90400]
R3 aracpi;aracpi; C:\WINDOWS\system32\DRIVERS\aracpi.sys [2008-12-26 22784]
R3 arhidfltr;MS Ar HID Filter Driver; C:\WINDOWS\system32\DRIVERS\arhidfltr.sys [2008-12-26 19200]
R3 arkbcfltr;Microsoft PS2 Keyboard Filter; C:\WINDOWS\system32\DRIVERS\arkbcfltr.sys [2008-12-26 5376]
R3 armoucfltr;Microsoft PS2 Mouse Filter; C:\WINDOWS\system32\DRIVERS\armoucfltr.sys [2008-12-26 4992]
R3 ARPolicy;ARPolicy; C:\WINDOWS\system32\DRIVERS\arpolicy.sys [2008-12-26 10112]
R3 BTDriver;Ovladač virtuálních komunikací Bluetooth; C:\WINDOWS\system32\DRIVERS\btport.sys [2009-09-03 37160]
R3 BTKRNL;Enumenátor sběrnice Bluetooth; C:\WINDOWS\system32\DRIVERS\btkrnl.sys [2009-09-03 991136]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\igxpmp32.sys [2009-04-22 6314592]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2008-04-17 4707328]
R3 IntcHdmiAddService;Intel(R) High Definition Audio HDMI Service; C:\WINDOWS\system32\drivers\IntcHdmi.sys [2008-07-30 110080]
R3 L1c;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller; C:\WINDOWS\system32\DRIVERS\l1c51x86.sys [2009-09-04 45056]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 NETw5x32;Ovladač adaptéru Intel(R) Wireless WiFi Link pro systém Windows XP 32 Bit; C:\WINDOWS\system32\DRIVERS\NETw5x32.sys [2008-04-20 3626112]
R3 seehcri;Sony Ericsson seehcri Device Driver; C:\WINDOWS\system32\DRIVERS\seehcri.sys [2008-01-09 27632]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2013-08-09 32384]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
R3 usbvideo;Zobrazovací zařízení USB (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2013-07-17 123008]
S0 Lbd;Lbd; C:\WINDOWS\system32\DRIVERS\Lbd.sys []
S1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
S1 wceusbsh;Windows CE USB Serial Host Driver; C:\WINDOWS\system32\DRIVERS\wceusbsh.sys [2008-04-14 31744]
S3 AVerFx2hbtv;AVerMedia USB SW Hybrid Tuner; C:\WINDOWS\system32\drivers\AVerFx2hbtv.sys [2008-07-21 273152]
S3 btaudio;Zvukové zařízení Bluetooth; C:\WINDOWS\system32\drivers\btaudio.sys [2009-09-03 534312]
S3 BTWDNDIS;Server pro přístup k síti LAN Bluetooth; C:\WINDOWS\system32\DRIVERS\btwdndis.sys [2009-09-03 156816]
S3 BTWUSB;WIDCOMM USB Bluetooth Driver; C:\WINDOWS\System32\Drivers\btwusb.sys [2009-09-03 47272]
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 grmnusb;Garmin USB Driver; C:\WINDOWS\system32\drivers\grmnusb.sys [2009-04-17 9344]
S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2006-04-12 49664]
S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2006-04-12 16496]
S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2006-04-12 21568]
S3 L6PODX3LV;POD X3 Live Service; C:\WINDOWS\System32\Drivers\L6PODX3LV.sys [2010-03-09 571264]
S3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\WINDOWS\system32\drivers\mbamswissarmy.sys []
S3 MPE;Filtr MPE BDA; C:\WINDOWS\system32\DRIVERS\MPE.sys [2008-04-13 15232]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 pcouffin;VSO Software pcouffin; C:\WINDOWS\System32\Drivers\pcouffin.sys [2009-10-21 47360]
S3 pfc;Padus ASPI Shell; C:\WINDOWS\system32\drivers\pfc.sys [2006-03-29 9856]
S3 s1018bus;Sony Ericsson Device 1018 driver (WDM); C:\WINDOWS\system32\DRIVERS\s1018bus.sys [2009-03-25 86824]
S3 s1018mdfl;Sony Ericsson Device 1018 USB WMC Modem Filter; C:\WINDOWS\system32\DRIVERS\s1018mdfl.sys [2009-03-25 15016]
S3 s1018mdm;Sony Ericsson Device 1018 USB WMC Modem Driver; C:\WINDOWS\system32\DRIVERS\s1018mdm.sys [2009-03-25 114728]
S3 s1018mgmt;Sony Ericsson Device 1018 USB WMC Device Management Drivers (WDM); C:\WINDOWS\system32\DRIVERS\s1018mgmt.sys [2009-03-25 106208]
S3 s1018nd5;Sony Ericsson Device 1018 USB Ethernet Emulation (NDIS); C:\WINDOWS\system32\DRIVERS\s1018nd5.sys [2009-03-25 26024]
S3 s1018obex;Sony Ericsson Device 1018 USB WMC OBEX Interface; C:\WINDOWS\system32\DRIVERS\s1018obex.sys [2009-03-25 104744]
S3 s1018unic;Sony Ericsson Device 1018 USB Ethernet Emulation (WDM); C:\WINDOWS\system32\DRIVERS\s1018unic.sys [2009-03-25 109864]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-14 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-14 15232]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2013-07-03 14976]
S3 usbstor;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2008-12-14 38528]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2008-12-14 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AntiVirService;Avira Real-Time Protection; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2014-03-13 440400]
R2 AntiVirSchedulerService;Avira Scheduler; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2014-03-13 440400]
R2 AntiVirWebService;Avira Web Protection; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [2014-03-13 1017424]
R2 APNMCP;Ask Update Service; C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe [2014-02-13 166352]
R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe [2009-03-23 349528]
R2 ehRecvr;Služba přijímače aplikace Media Center; C:\WINDOWS\eHome\ehRecvr.exe [2008-12-22 238592]
R2 ehSched;Služba plánování aplikace Media Center; C:\WINDOWS\eHome\ehSched.exe [2008-12-22 103424]
R2 IMPI Updater;IMPI Updater; C:\Program Files\IMPI\ExtensionUpdaterService.exe [2013-02-05 185856]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2011-02-02 153376]
R2 McrdSvc;Media Center Extender Service; C:\WINDOWS\ehome\mcrdsvc.exe [2005-08-05 99328]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.exe [2006-03-03 69632]
R2 Update Kozaka;Update Kozaka; C:\Program Files\Kozaka\updateKozaka.exe [2014-03-15 348952]
R2 Util Kozaka;Util Kozaka; C:\Program Files\Kozaka\bin\utilKozaka.exe [2014-03-15 348952]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S2 gupdate1ca88a037f522fc;Služba Google Update (gupdate1ca88a037f522fc); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-12-29 133104]
S2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service; C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe []
S3 Adobe LM Service;Adobe LM Service; C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [2010-12-13 72704]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-12 257928]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-12-29 133104]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-26 65824]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2014-03-03 118896]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 Sony PC Companion;Sony PC Companion; C:\Program Files\Sony\Sony PC Companion\PCCService.exe [2013-02-04 155824]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Infekce - trojský kůň

#2 Příspěvek od vyosek »

Zdravim :)

:arrow: Odinstalujte Lavasoft Ad-Aware

:arrow: Stahnete Junkware Removal Tool http://thisisudax.org/downloads/JRT.exe
  • Ulozte nejlepe na plochu
  • Po spusteni se zobrazi licencni podminky, stisknete libovolnou klavesu
  • Probehne vytvoreni zalohy a nasledne prohledavani
  • Probehne skenovani a pak se objevi log, pripadne bude ulozen v c:\JRT jako JRT.txt, ten sem vlozte
:arrow: Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
  • Ulozte nejlepe na plochu
  • Ukoncete vsechny programy
  • Kliknete na Scan a nasledne Clean
  • Probehne oprava, restart PC a pak se objevi log, pripadne bude ulozen ve slozce c:\AdwCleaner\AdwCleaner[S?].txt, ten sem vlozte
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.

apache.davidson
Návštěvník
Návštěvník
Příspěvky: 26
Registrován: 21 Led 2009 17:50

Re: Infekce - trojský kůň

#3 Příspěvek od apache.davidson »

Lavasoft Ad-Aware nelze odinstalovat, hlásí to error 3: nelze nalést uvedenou cestu.

Mám tedy pokračovat dalšími kroky?

Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Infekce - trojský kůň

#4 Příspěvek od vyosek »

:arrow: Zkuste na nej jeste Revo http://www.stahuj.centrum.cz/utility_a_ ... installer/

:arrow: A pak dalsi kroky
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.

apache.davidson
Návštěvník
Návštěvník
Příspěvky: 26
Registrován: 21 Led 2009 17:50

Re: Infekce - trojský kůň

#5 Příspěvek od apache.davidson »

Log JRT:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.2 (02.20.2014:1)
OS: Microsoft Windows XP x86
Ran by oem on ne 16.03.2014 at 20:07:18,29
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values

Successfully deleted: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\apntbmon
Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\\DisplayName
Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\\URL



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\{B302A1BD-0157-49FA-90F1-4E94F22C7B4B}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\extension.dll
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{67BD9EEB-AA06-4329-A940-D250019300C9}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{9EDC0C90-2B5B-4512-953E-35767BAD5C67}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{A36867C6-302D-49FC-9D8E-1EB037B5F1AB}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{1D5A4199-956E-49BC-B89F-6A35C57C0D13}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{A0EE0278-2986-4E5A-884E-A3BF0357E476}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\conduit
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\installcore
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\smartbar
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\yahoopartnertoolbar
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-1177238915-1957994488-2147156445-1005\Software\sweetim
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\babylon
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\extension.extensionhelperobject
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\extension.extensionhelperobject.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\prod.cap
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\updater.amiupd
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\updater.amiupd.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{99c91fc5-db5b-4aa0-bb70-5d89c5a4df96}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{b49962af-cab9-44de-8729-a4369f44ba0d}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{DC4BE4E6-FDA0-47D7-AAC9-9E5AA8D99714}



~~~ Files

Successfully deleted: [File] C:\WINDOWS\Tasks\amiupdxp.job
Successfully deleted: [File] "C:\end"



~~~ Folders

Successfully deleted: [Folder] "C:\Documents and Settings\oem\Data aplikací\babylon"
Successfully deleted: [Folder] "C:\Documents and Settings\oem\Data aplikací\crmixidjtb"
Successfully deleted: [Folder] "C:\Documents and Settings\oem\Data aplikací\dvdvideosoftiehelpers"
Successfully deleted: [Folder] "C:\Documents and Settings\oem\Data aplikací\goforfiles"
Successfully deleted: [Folder] "C:\Documents and Settings\oem\Data aplikací\pricegong"
Successfully deleted: [Folder] "C:\Documents and Settings\oem\Data aplikací\swvupdater"
Successfully deleted: [Folder] "C:\Program Files\utorrentcontrol_v2"



~~~ FireFox

Successfully deleted: [File] C:\Documents and Settings\oem\Data aplikací\mozilla\firefox\profiles\acmtm6o3.default\searchplugins\ask-web-search.xml
Successfully deleted: [File] C:\Documents and Settings\oem\Data aplikací\mozilla\firefox\profiles\acmtm6o3.default\searchplugins\askcom.xml
Successfully deleted: [File] C:\Documents and Settings\oem\Data aplikací\mozilla\firefox\profiles\acmtm6o3.default\searchplugins\conduit.xml
Successfully deleted: [Folder] C:\Documents and Settings\oem\Data aplikací\mozilla\firefox\profiles\acmtm6o3.default\conduitcommon
Successfully deleted: [Folder] C:\Documents and Settings\oem\Data aplikací\mozilla\firefox\profiles\acmtm6o3.default\smartbar
Successfully deleted: [Folder] C:\Documents and Settings\oem\Data aplikací\mozilla\firefox\profiles\acmtm6o3.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}
Successfully deleted: [Folder] C:\Documents and Settings\oem\Data aplikací\mozilla\firefox\profiles\acmtm6o3.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}
Successfully deleted the following from C:\Documents and Settings\oem\Data aplikací\mozilla\firefox\profiles\acmtm6o3.default\prefs.js

user_pref("CT2269050.1000082.isDisplayHidden", "true");
user_pref("CT2269050.1000082.isPlayDisplay", "true");
user_pref("CT2269050.1000082.state", "{\"state\":\"stopped\",\"text\":\"Hotmix 108\",\"description\":\"Hotmix 108\",\"url\":\"hxxp://67.202.67.18:8082\"}");
user_pref("CT2269050.1000234.TWC_TMP_city", "UHERSKY BROD");
user_pref("CT2269050.1000234.TWC_TMP_country", "CZ");
user_pref("CT2269050.1000234.TWC_country", "CZECH REPUBLIC");
user_pref("CT2269050.1000234.TWC_locId", "EZXX0001");
user_pref("CT2269050.1000234.TWC_location", "Beroun, Czech Republic");
user_pref("CT2269050.1000234.TWC_region", "OT");
user_pref("CT2269050.1000234.TWC_temp_dis", "c");
user_pref("CT2269050.1000234.TWC_wind_dis", "kmh");
user_pref("CT2269050.1000234.weatherData", "{\"icon\":\"29.png\",\"temperature\":\"-3Ä‚ââ
user_pref("CT2269050.CBOpenMAMSettings.enc", "MA==");
user_pref("CT2269050.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT2269050.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT2269050.FirstTime", "true");
user_pref("CT2269050.FirstTimeFF3", "true");
user_pref("CT2269050.LoginRevertSettingsEnabled", true);
user_pref("CT2269050.NotificationsToShow_666138", "[{\"id\":\"661999\",\"channelId\":\"666138\",\"title\":\"DVDVideoSoftTB Notifications\",\"imageurl\":\"hxxp://alert.storage.
user_pref("CT2269050.PG_ENABLE", "dHJ1ZQ==");
user_pref("CT2269050.RevertSettingsEnabled", true);
user_pref("CT2269050.SearchAppState.enc", "Mw==");
user_pref("CT2269050.SearchAppTracking.enc", "MQ==");
user_pref("CT2269050.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2269050&SearchSource=2&q=");
user_pref("CT2269050.UserID", "UN95085001602106024");
user_pref("CT2269050.addressBarTakeOverEnabledInHidden", "true");
user_pref("CT2269050.autoDisableScopes", -1);
user_pref("CT2269050.browser.search.defaultthis.engineName", true);
user_pref("CT2269050.cb_experience_000.enc", "MQ==");
user_pref("CT2269050.cb_user_id_000.enc", "Q0IzNTkzNjI1MDcxNTlfMTM1NzgzMjQ0OTA3N19GaXJlZm94");
user_pref("CT2269050.cbcountry_001.enc", "Q1o=");
user_pref("CT2269050.cbfirsttime.enc", "VGh1IERlYyAwNiAyMDEyIDE3OjQwOjA0IEdNVCswMTAw");
user_pref("CT2269050.countryCode", "CZ");
user_pref("CT2269050.enableAlerts", "always");
user_pref("CT2269050.enableFix404ByUser", "TRUE");
user_pref("CT2269050.firstTimeDialogOpened", "true");
user_pref("CT2269050.fixPageNotFoundErrorByUser", "TRUE");
user_pref("CT2269050.fixPageNotFoundErrorInHidden", "true");
user_pref("CT2269050.fixUrls", true);
user_pref("CT2269050.fullUserID", "UN95085001602106024.XX.20130627150251");
user_pref("CT2269050.hxxp___storage_conduit_com_marketplace_83_6d_8399d181_be98_42f2_b035_1616f617316d_.PriceSparrowUuid.enc", "MDk4OTY2MjgtOGFiZC00MjFjLWIxMmYtOTRjZmYxZmUyZWY
user_pref("CT2269050.installType", "Unknown");
user_pref("CT2269050.isCheckedStartAsHidden", true);
user_pref("CT2269050.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT2269050.isFirstTimeToolbarLoading", "false");
user_pref("CT2269050.isNewTabEnabled", true);
user_pref("CT2269050.isPerformedSmartBarTransition", "true");
user_pref("CT2269050.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
user_pref("CT2269050.keyword", true);
user_pref("CT2269050.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"hxxp://search.conduit.com/?ctid=CT2269050&octid=CT2269050&SearchSource=15&CUI=UN9508500160210602
user_pref("CT2269050.lastVersion", "10.22.5.510");
user_pref("CT2269050.migrateAppsAndComponents", true);
user_pref("CT2269050.navigationAliasesJson", "{\"EB_MAIN_FRAME_URL\":\"hxxp%3A%2F%2Fforum.viry.cz%2Fviewforum.php%3Ff%3D13\",\"EB_MAIN_FRAME_TITLE\":\"VIRY.CZ%20%E2%80%A2%20Zo
user_pref("CT2269050.newSettings", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
user_pref("CT2269050.openThankYouPage", "FALSE");
user_pref("CT2269050.openUninstallPage", "FALSE");
user_pref("CT2269050.originalSearchAddressUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3176921&SearchSource=2&CUI=UN39285599272809511&UM=&q=");
user_pref("CT2269050.price-gong.bornDate", "{\"dataType\":\"string\",\"data\":\"{\\\"Response\\\":\\\"12\\\\/09\\\\/2012 21\\\"}\"}");
user_pref("CT2269050.price-gong.isManagedApp", "true");
user_pref("CT2269050.search.searchAppId", "128834881989343895");
user_pref("CT2269050.search.searchCount", "1");
user_pref("CT2269050.searchInNewTabEnabledByUser", "true");
user_pref("CT2269050.searchInNewTabEnabledInHidden", "true");
user_pref("CT2269050.searchSuggestEnabledByUser", "True");
user_pref("CT2269050.searchUserMode", "UM_ID");
user_pref("CT2269050.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT2269050.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
user_pref("CT2269050.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\"}");
user_pref("CT2269050.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT2269050\"}");
user_pref("CT2269050.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"hxxp://DVDVideoSoftTB.OurToolbar.com//xpi\"}");
user_pref("CT2269050.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"DVDVideoSoftTB \"}");
user_pref("CT2269050.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT2269050.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data\":\"2\"}");
user_pref("CT2269050.serviceLayer_services_Configuration_lastUpdate", "1394986039881");
user_pref("CT2269050.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1360860773309");
user_pref("CT2269050.serviceLayer_services_appsMetadata_lastUpdate", "1361451219058");
user_pref("CT2269050.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1360859971910");
user_pref("CT2269050.serviceLayer_services_location_lastUpdate", "1372086326055");
user_pref("CT2269050.serviceLayer_services_login_10.13.40.15_lastUpdate", "1358437988645");
user_pref("CT2269050.serviceLayer_services_login_10.14.40.128_lastUpdate", "1359390805128");
user_pref("CT2269050.serviceLayer_services_login_10.14.42.7_lastUpdate", "1360599505169");
user_pref("CT2269050.serviceLayer_services_login_10.14.65.43_lastUpdate", "1363977101875");
user_pref("CT2269050.serviceLayer_services_login_10.15.0.562_lastUpdate", "1365675456499");
user_pref("CT2269050.serviceLayer_services_login_10.15.2.523_lastUpdate", "1368022115511");
user_pref("CT2269050.serviceLayer_services_login_10.16.1.521_lastUpdate", "1368549972713");
user_pref("CT2269050.serviceLayer_services_login_10.16.2.509_lastUpdate", "1372086327887");
user_pref("CT2269050.serviceLayer_services_login_10.16.4.519_lastUpdate", "1374058698287");
user_pref("CT2269050.serviceLayer_services_login_10.16.70.505_lastUpdate", "1377355258803");
user_pref("CT2269050.serviceLayer_services_login_10.19.2.505_lastUpdate", "1378656496090");
user_pref("CT2269050.serviceLayer_services_login_10.20.0.513_lastUpdate", "1379687091389");
user_pref("CT2269050.serviceLayer_services_login_10.20.1.508_lastUpdate", "1382191150796");
user_pref("CT2269050.serviceLayer_services_login_10.21.1.507_lastUpdate", "1384332847072");
user_pref("CT2269050.serviceLayer_services_login_10.22.2.530_lastUpdate", "1384527511313");
user_pref("CT2269050.serviceLayer_services_login_10.22.3.518_lastUpdate", "1385036288266");
user_pref("CT2269050.serviceLayer_services_login_10.22.5.510_lastUpdate", "1394982432332");
user_pref("CT2269050.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1360859967314");
user_pref("CT2269050.serviceLayer_services_searchAPI_lastUpdate", "1394986039733");
user_pref("CT2269050.serviceLayer_services_serviceMap_lastUpdate", "1394986039341");
user_pref("CT2269050.serviceLayer_services_setupAPI_lastUpdate", "1361451219243");
user_pref("CT2269050.serviceLayer_services_toolbarContextMenu_lastUpdate", "1360859967397");
user_pref("CT2269050.serviceLayer_services_toolbarSettings_lastUpdate", "1394989632967");
user_pref("CT2269050.serviceLayer_services_translation_lastUpdate", "1394986042355");
user_pref("CT2269050.serviceLayer_services_userApps1ec55dac-8dca-406b-9697-5d68893c1c0c_lastUpdate", "1361006057666");
user_pref("CT2269050.serviceLayer_services_userApps_lastUpdate", "1361006057680");
user_pref("CT2269050.settingsINI", true);
user_pref("CT2269050.shouldFirstTimeDialog", "FALSE");
user_pref("CT2269050.showToolbarPermission", "false");
user_pref("CT2269050.smartbar.CTID", "CT2269050");
user_pref("CT2269050.smartbar.Uninstall", "0");
user_pref("CT2269050.smartbar.homepage", true);
user_pref("CT2269050.smartbar.isHidden", true);
user_pref("CT2269050.smartbar.toolbarName", "DVDVideoSoftTB ");
user_pref("CT2269050.startPage", "userChanged");
user_pref("CT2269050.toolbarBornServerTime", "6-12-2012");
user_pref("CT2269050.toolbarCurrentServerTime", "16-3-2014");
user_pref("CT2269050.toolbarLoginClientTime", "Sat Mar 23 2013 10:10:44 GMT+0100");
user_pref("CT2269050.url_history0001.enc", "aHR0cDovL3d3dy5hdWtyby5jei9zaG93X2l0ZW0ucGhwP2l0ZW09MzAxODQ0MzY3OTo6OmNsaWNraGFuZGxlcjo6OjEzNjE0NTgzNDQ0NDEsLCxodHRwOi8vd3d3LmF1a3J
user_pref("CT2269050_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1394968008869,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}
user_pref("CT2786678..clientLogIsEnabled", true);
user_pref("CT2786678..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
user_pref("CT2786678..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
user_pref("CT2786678.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
user_pref("CT2786678.AppTrackingLastCheckTime", "Sat Aug 20 2011 13:05:10 GMT+0200");
user_pref("CT2786678.BrowserCompStateIsOpen_129579220236217502", true);
user_pref("CT2786678.CTID", "CT2786678");
user_pref("CT2786678.CurrentServerDate", "20-8-2011");
user_pref("CT2786678.DialogsAlignMode", "LTR");
user_pref("CT2786678.DialogsGetterLastCheckTime", "Thu Aug 18 2011 17:01:32 GMT+0200");
user_pref("CT2786678.DownloadReferralCookieData", "");
user_pref("CT2786678.EMailNotifierPollDate", "Sat Aug 20 2011 13:13:18 GMT+0200");
user_pref("CT2786678.FeedLastCount5690698542593514850", 205);
user_pref("CT2786678.FeedPollDate2429156812186649977", "Sat Aug 20 2011 13:05:02 GMT+0200");
user_pref("CT2786678.FeedPollDate2429156813040823546", "Sat Aug 20 2011 13:05:01 GMT+0200");
user_pref("CT2786678.FeedPollDate2429156813130095866", "Sat Aug 20 2011 13:05:01 GMT+0200");
user_pref("CT2786678.FeedPollDate2429156813224203613", "Sat Aug 20 2011 13:05:01 GMT+0200");
user_pref("CT2786678.FeedPollDate2429156813230837251", "Sat Aug 20 2011 13:05:02 GMT+0200");
user_pref("CT2786678.FeedPollDate2429156813454291735", "Sat Aug 20 2011 13:05:01 GMT+0200");
user_pref("CT2786678.FeedPollDate2429156813729834876", "Sat Aug 20 2011 13:05:01 GMT+0200");
user_pref("CT2786678.FeedPollDate2429156813860870021", "Sat Aug 20 2011 13:05:02 GMT+0200");
user_pref("CT2786678.FeedPollDate2429156814264681793", "Sat Aug 20 2011 13:05:02 GMT+0200");
user_pref("CT2786678.FeedPollDate2429156814863075366", "Sat Aug 20 2011 13:05:01 GMT+0200");
user_pref("CT2786678.FeedPollDate2429156815257761081", "Sat Aug 20 2011 13:05:01 GMT+0200");
user_pref("CT2786678.FeedTTL2429156813040823546", 15);
user_pref("CT2786678.FeedTTL2429156813130095866", 10);
user_pref("CT2786678.FeedTTL2429156813454291735", 5);
user_pref("CT2786678.FeedTTL2429156814264681793", 5);
user_pref("CT2786678.FirstServerDate", "18-8-2011");
user_pref("CT2786678.FirstTime", true);
user_pref("CT2786678.FirstTimeFF3", true);
user_pref("CT2786678.FixPageNotFoundErrors", false);
user_pref("CT2786678.GroupingServerCheckInterval", 1440);
user_pref("CT2786678.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
user_pref("CT2786678.HasUserGlobalKeys", true);
user_pref("CT2786678.HomePageProtectorEnabled", true);
user_pref("CT2786678.Initialize", true);
user_pref("CT2786678.InitializeCommonPrefs", true);
user_pref("CT2786678.InstallationAndCookieDataSentCount", 2);
user_pref("CT2786678.InstallationType", "UnknownIntegration");
user_pref("CT2786678.InstalledDate", "Thu Aug 18 2011 17:01:29 GMT+0200");
user_pref("CT2786678.IsAlertDBUpdated", true);
user_pref("CT2786678.IsGrouping", false);
user_pref("CT2786678.IsInitSetupIni", true);
user_pref("CT2786678.IsMulticommunity", false);
user_pref("CT2786678.IsOpenThankYouPage", true);
user_pref("CT2786678.IsOpenUninstallPage", false);
user_pref("CT2786678.IsProtectorsInit", true);
user_pref("CT2786678.LanguagePackLastCheckTime", "Sat Aug 20 2011 13:04:48 GMT+0200");
user_pref("CT2786678.LanguagePackReloadIntervalMM", 1440);
user_pref("CT2786678.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx");
user_pref("CT2786678.LastLogin_3.5.0.12", "Thu Aug 18 2011 17:01:29 GMT+0200");
user_pref("CT2786678.LastLogin_3.6.0.10", "Sat Aug 20 2011 13:04:49 GMT+0200");
user_pref("CT2786678.LatestVersion", "3.6.0.10");
user_pref("CT2786678.Locale", "en");
user_pref("CT2786678.MCDetectTooltipHeight", "83");
user_pref("CT2786678.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
user_pref("CT2786678.MCDetectTooltipWidth", "295");
user_pref("CT2786678.MyStuffEnabledAtInstallation", true);
user_pref("CT2786678.OriginalFirstVersion", "3.5.0.12");
user_pref("CT2786678.SavedHomepage", "hxxp://www.seznam.cz");
user_pref("CT2786678.SearchEngineBeforeUnload", " ");
user_pref("CT2786678.SearchFromAddressBarIsInit", true);
user_pref("CT2786678.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2786678&q=");
user_pref("CT2786678.SearchInNewTabEnabled", true);
user_pref("CT2786678.SearchInNewTabIntervalMM", 1440);
user_pref("CT2786678.SearchInNewTabLastCheckTime", "Sat Aug 20 2011 13:04:56 GMT+0200");
user_pref("CT2786678.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID");
user_pref("CT2786678.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageService.asmx/UsersRequests?ctid=EB_TOOLBAR_ID");
user_pref("CT2786678.SearchProtectorEnabled", true);
user_pref("CT2786678.SearchProtectorToolbarDisabled", false);
user_pref("CT2786678.ServiceMapLastCheckTime", "Sat Aug 20 2011 13:04:47 GMT+0200");
user_pref("CT2786678.SettingsLastCheckTime", "Sat Aug 20 2011 13:04:37 GMT+0200");
user_pref("CT2786678.SettingsLastUpdate", "1313448551");
user_pref("CT2786678.ThirdPartyComponentsInterval", 504);
user_pref("CT2786678.ThirdPartyComponentsLastCheck", "Thu Aug 18 2011 17:01:24 GMT+0200");
user_pref("CT2786678.ThirdPartyComponentsLastUpdate", "1312887586");
user_pref("CT2786678.ToolbarShrinkedFromSetup", false);
user_pref("CT2786678.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2786678");
user_pref("CT2786678.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,client.conduit-storage.com,OurToolbar.com,CommunityToolbars.com,ForumToolbar.com
user_pref("CT2786678.UserID", "UN64553233486359773");
user_pref("CT2786678.WeatherNetwork", "");
user_pref("CT2786678.WeatherPollDate", "Sat Aug 20 2011 13:05:02 GMT+0200");
user_pref("CT2786678.WeatherUnit", "C");
user_pref("CT2786678.alertChannelId", "1178763");
user_pref("CT2786678.backendstorage.scriptsource", "687474703A2F2F3132372E302E302E313A31303030302F6775692F");
user_pref("CT2786678.backendstorage.url_history", "687474703A2F2F7777772E6E6F76696E6B792E637A2F646F6D6163692F3234323333362D6365736B652D6C6573792D6472616E63756A692D6B6F6D657263
user_pref("CT2786678.backendstorage.url_history_time", "31333133383338353232363937");
user_pref("CT2786678.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.conduit.com;apps.conduit.com;services.apps.conduit.com\",\"AppsDetectionUrlP
user_pref("CT2786678.globalFirstTimeInfoLastCheckTime", "Sat Aug 20 2011 13:05:00 GMT+0200");
user_pref("CT2786678.homepageProtectorEnableByLogin", true);
user_pref("CT2786678.initDone", true);
user_pref("CT2786678.isAppTrackingManagerOn", true);
user_pref("CT2786678.myStuffEnabled", true);
user_pref("CT2786678.myStuffPublihserMinWidth", 400);
user_pref("CT2786678.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID");
user_pref("CT2786678.myStuffServiceIntervalMM", 1440);
user_pref("CT2786678.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUFF_LUT");
user_pref("CT2786678.oldAppsList", "129295695672325902,129295695672325903,1000234,129295698017012804,1000034,129526967958500204,129309489763975460,5690698542593514850,12930948
user_pref("CT2786678.searchProtectorDialogDelayInSec", 10);
user_pref("CT2786678.searchProtectorEnableByLogin", true);
user_pref("CT2786678.testingCtid", "");
user_pref("CT2786678.toolbarAppMetaDataLastCheckTime", "Sat Aug 20 2011 13:05:00 GMT+0200");
user_pref("CT2786678.toolbarContextMenuLastCheckTime", "Thu Aug 18 2011 17:01:42 GMT+0200");
user_pref("CT3072253..clientLogIsEnabled", false);
user_pref("CT3072253..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
user_pref("CT3072253..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
user_pref("CT3072253.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);
user_pref("CT3072253.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
user_pref("CT3072253.AppTrackingLastCheckTime", "Thu Mar 29 2012 16:06:11 GMT+0200");
user_pref("CT3072253.BrowserCompStateIsOpen_129573915102477663", true);
user_pref("CT3072253.BrowserCompStateIsOpen_129749445530228833", true);
user_pref("CT3072253.BrowserCompStateIsOpen_129749445881800338", true);
user_pref("CT3072253.BrowserCompStateIsOpen_129805375651312503", true);
user_pref("CT3072253.BrowserCompStateIsOpen_130067979083742856", true);
user_pref("CT3072253.BrowserCompStateIsOpen_1359634299000", true);
user_pref("CT3072253.CT3072253.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"hxxp://search.conduit.com/?ctid=CT3072253&octid=CT3072253&SearchSource=15&CUI=SB_CUI&S
user_pref("CT3072253.CTID", "CT3072253");
user_pref("CT3072253.ConfigurationLastCheckTime", "Thu Nov 07 2013 14:06:45 GMT+0100");
user_pref("CT3072253.CurrentServerDate", "7-11-2013");
user_pref("CT3072253.DSInstall", true);
user_pref("CT3072253.DialogsAlignMode", "LTR");
user_pref("CT3072253.DialogsGetterLastCheckTime", "Sun Nov 03 2013 16:33:07 GMT+0100");
user_pref("CT3072253.DownloadReferralCookieData", "");
user_pref("CT3072253.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT3072253.FirstServerDate", "29-3-2012");
user_pref("CT3072253.FirstTime", true);
user_pref("CT3072253.FirstTimeFF3", true);
user_pref("CT3072253.FixPageNotFoundErrors", true);
user_pref("CT3072253.GroupingServerCheckInterval", 1440);
user_pref("CT3072253.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
user_pref("CT3072253.HPChangedManually", false);
user_pref("CT3072253.HPInstall", true);
user_pref("CT3072253.HPProtectChoice", true);
user_pref("CT3072253.HPProtectCount", 4);
user_pref("CT3072253.HasUserGlobalKeys", true);
user_pref("CT3072253.HomePageProtectorEnabled", false);
user_pref("CT3072253.HomepageBeforeUnload", "hxxp://www.seznam.cz/");
user_pref("CT3072253.Initialize", true);
user_pref("CT3072253.InitializeCommonPrefs", true);
user_pref("CT3072253.InstallationAndCookieDataSentCount", 3);
user_pref("CT3072253.InstallationId", "ConduitXPEIntegration");
user_pref("CT3072253.InstallationType", "ConduitXPEIntegration");
user_pref("CT3072253.InstalledDate", "Thu Mar 29 2012 16:05:55 GMT+0200");
user_pref("CT3072253.IsAlertDBUpdated", true);
user_pref("CT3072253.IsGrouping", false);
user_pref("CT3072253.IsInitSetupIni", true);
user_pref("CT3072253.IsMulticommunity", false);
user_pref("CT3072253.IsOpenThankYouPage", true);
user_pref("CT3072253.IsOpenUninstallPage", false);
user_pref("CT3072253.IsProtectorsInit", true);
user_pref("CT3072253.LanguagePackLastCheckTime", "Thu Nov 07 2013 14:06:46 GMT+0100");
user_pref("CT3072253.LanguagePackReloadIntervalMM", 1440);
user_pref("CT3072253.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx");
user_pref("CT3072253.LastLogin_3.10.0.1", "Thu Mar 29 2012 16:06:00 GMT+0200");
user_pref("CT3072253.LastLogin_3.12.2.3", "Fri Jun 01 2012 19:52:42 GMT+0200");
user_pref("CT3072253.LastLogin_3.13.0.6", "Wed Jul 18 2012 19:48:20 GMT+0200");
user_pref("CT3072253.LastLogin_3.14.1.0", "Thu Aug 30 2012 18:25:41 GMT+0200");
user_pref("CT3072253.LastLogin_3.15.1.0", "Wed Nov 07 2012 15:41:46 GMT+0100");
user_pref("CT3072253.LastLogin_3.16.0.3", "Mon Feb 11 2013 17:16:20 GMT+0100");
user_pref("CT3072253.LastLogin_3.18.0.7", "Mon Jul 15 2013 15:36:34 GMT+0200");
user_pref("CT3072253.LastLogin_3.19.0.3", "Tue Sep 10 2013 16:41:33 GMT+0200");
user_pref("CT3072253.LastLogin_3.20.0.4", "Thu Nov 07 2013 14:06:44 GMT+0100");
user_pref("CT3072253.LatestVersion", "3.20.0.4");
user_pref("CT3072253.Locale", "en");
user_pref("CT3072253.MCDetectTooltipHeight", "83");
user_pref("CT3072253.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
user_pref("CT3072253.MCDetectTooltipWidth", "295");
user_pref("CT3072253.MyStuffEnabledAtInstallation", true);
user_pref("CT3072253.OriginalFirstVersion", "3.10.0.1");
user_pref("CT3072253.SHRINK_TOOLBAR", 1);
user_pref("CT3072253.SavedHomepage", "hxxp://www.seznam.cz/");
user_pref("CT3072253.SearchAPILastCheckTime", "Thu Nov 07 2013 14:06:45 GMT+0100");
user_pref("CT3072253.SearchBoxWidth", 100);
user_pref("CT3072253.SearchCaption", "uTorrentControl2 Customized Web Search");
user_pref("CT3072253.SearchEngineBeforeUnload", "uTorrentControl2 Customized Web Search");
user_pref("CT3072253.SearchFromAddressBarIsInit", true);
user_pref("CT3072253.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3072253&SearchSource=2&q=");
user_pref("CT3072253.SearchInNewTabEnabled", true);
user_pref("CT3072253.SearchInNewTabIntervalMM", 1440);
user_pref("CT3072253.SearchInNewTabLastCheckTime", "Tue Sep 10 2013 12:41:33 GMT+0200");
user_pref("CT3072253.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID&UM=UM_ID");
user_pref("CT3072253.SearchInNewTabURLFromSearchAPI", "hxxp://search.conduit.com/?ctid=CT3072253&octid=CT3072253&SearchSource=15&CUI=SB_CUI&SSPV=EB_SSPV&Lay=1&UM=UM_ID");
user_pref("CT3072253.SearchProtectorEnabled", true);
user_pref("CT3072253.SearchProtectorToolbarDisabled", false);
user_pref("CT3072253.SendProtectorDataViaLogin", true);
user_pref("CT3072253.ServiceMapLastCheckTime", "Thu Nov 07 2013 14:06:44 GMT+0100");
user_pref("CT3072253.SettingsLastCheckTime", "Thu Nov 07 2013 14:06:40 GMT+0100");
user_pref("CT3072253.SettingsLastUpdate", "1383814643");
user_pref("CT3072253.TBHomePageUrl", "hxxp://search.conduit.com/?ctid=CT3072253&SearchSource=13");
user_pref("CT3072253.ThirdPartyComponentsInterval", 504);
user_pref("CT3072253.ThirdPartyComponentsLastCheck", "Thu Mar 29 2012 16:05:55 GMT+0200");
user_pref("CT3072253.ThirdPartyComponentsLastUpdate", "1312887586");
user_pref("CT3072253.ToolbarShrinkedFromSetup", false);
user_pref("CT3072253.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,client.conduit-storage.com,OurToolbar.com,CommunityToolbars.com,ForumToolbar.com
user_pref("CT3072253.UserID", "UN29244808838431884");
user_pref("CT3072253.ValidationData_Search", 0);
user_pref("CT3072253.ValidationData_Toolbar", 2);
user_pref("CT3072253.addressBarTakeOverEnabledInHidden", "true");
user_pref("CT3072253.alertChannelId", "1463702");
user_pref("CT3072253.backendstorage.cbfirsttime", "546875204D617220323920323031322031363A30363A303220474D542B30323030");
user_pref("CT3072253.backendstorage.url_history0001", "687474703A2F2F7777772E66616365626F6F6B2E636F6D2F727661636131233A3A3A636C69636B68616E646C65723A3A3A3133333330333034333132
user_pref("CT3072253.cbfirsttime.from_oldbar.enc", "VGh1IE1hciAyOSAyMDEyIDE2OjA2OjAyIEdNVCswMjAw");
user_pref("CT3072253.components.129573915102477663", false);
user_pref("CT3072253.components.129593762370823811", false);
user_pref("CT3072253.components.129749445530228833", false);
user_pref("CT3072253.components.129749445881800338", false);
user_pref("CT3072253.countryCode", "CZ");
user_pref("CT3072253.firstTimeDialogOpened", true);
user_pref("CT3072253.fixPageNotFoundErrorByUser", "TRUE");
user_pref("CT3072253.fixPageNotFoundErrorInHidden", "true");
user_pref("CT3072253.fullUserID", "UN29244808838431884.UP.202409115615");
user_pref("CT3072253.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.conduit.com;apps.conduit.com;services.apps.conduit.com\",\"AppsDetectionUrlP
user_pref("CT3072253.globalFirstTimeInfoLastCheckTime", "Thu Mar 29 2012 16:05:56 GMT+0200");
user_pref("CT3072253.homepageProtectorEnableByLogin", true);
user_pref("CT3072253.initDone", true);
user_pref("CT3072253.installId", "ConduitXPEIntegration");
user_pref("CT3072253.installType", "ConduitXPEIntegration");
user_pref("CT3072253.isAppTrackingManagerOn", true);
user_pref("CT3072253.isCheckedStartAsHidden", true);
user_pref("CT3072253.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT3072253.isFirstTimeToolbarLoading", "false");
user_pref("CT3072253.isPerformedSmartBarTransition", "true");
user_pref("CT3072253.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
user_pref("CT3072253.keyword", true);
user_pref("CT3072253.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"hxxp://search.conduit.com/?ctid=CT3072253&octid=CT3072253&SearchSource=15&CUI=UN2924480883843188
user_pref("CT3072253.lastVersion", "10.20.101.5");
user_pref("CT3072253.myStuffEnabled", true);
user_pref("CT3072253.myStuffPublihserMinWidth", 400);
user_pref("CT3072253.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID");
user_pref("CT3072253.myStuffServiceIntervalMM", 1440);
user_pref("CT3072253.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUFF_LUT");
user_pref("CT3072253.navigateToUrlOnSearch", false);
user_pref("CT3072253.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"hxxps%3A%2F%2Femail.seznam.cz%2F%23inbox%2F18126\",\"EB_MAIN_FRAME_TITLE\":\"(3)
user_pref("CT3072253.originalHomepage", "hxxp://www.seznam.cz/");
user_pref("CT3072253.originalSearchAddressUrl", "chrome://browser-region/locale/region.properties");
user_pref("CT3072253.originalSearchEngine", "chrome://browser-region/locale/region.properties");
user_pref("CT3072253.revertSettingsEnabled", true);
user_pref("CT3072253.search.searchCount", 0);
user_pref("CT3072253.searchFromAddressBarEnabledByUser", "true");
user_pref("CT3072253.searchInNewTabEnabledByUser", "true");
user_pref("CT3072253.searchInNewTabEnabledInHidden", "true");
user_pref("CT3072253.searchProtectorDialogDelayInSec", 10);
user_pref("CT3072253.searchProtectorEnableByLogin", true);
user_pref("CT3072253.searchSuggestEnabledByUser", "true");
user_pref("CT3072253.searchUserMode", "UM_ID");
user_pref("CT3072253.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT3072253.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
user_pref("CT3072253.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\"}");
user_pref("CT3072253.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT3072253\"}");
user_pref("CT3072253.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"hxxp://uTorrentControl2.OurToolbar.com//xpi\"}");
user_pref("CT3072253.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"uTorrentControl2 \"}");
user_pref("CT3072253.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT3072253.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data\":\"2\"}");
user_pref("CT3072253.serviceLayer_services_Configuration_lastUpdate", "1386079843091");
user_pref("CT3072253.serviceLayer_services_login_10.20.101.5_lastUpdate", "1386079788534");
user_pref("CT3072253.serviceLayer_services_searchAPI_lastUpdate", "1386079792685");
user_pref("CT3072253.serviceLayer_services_serviceMap_lastUpdate", "1386079787720");
user_pref("CT3072253.serviceLayer_services_toolbarSettings_lastUpdate", "1386079787750");
user_pref("CT3072253.serviceLayer_services_translation_lastUpdate", "1386079792103");
user_pref("CT3072253.settingsINI", true);
user_pref("CT3072253.showToolbarPermission", "false");
user_pref("CT3072253.smartbar.CTID", "CT3072253");
user_pref("CT3072253.smartbar.Uninstall", "0");
user_pref("CT3072253.smartbar.toolbarName", "uTorrentControl2 ");
user_pref("CT3072253.testingCtid", "");
user_pref("CT3072253.toolbarAppMetaDataLastCheckTime", "Thu Nov 07 2013 14:06:47 GMT+0100");
user_pref("CT3072253.toolbarBornServerTime", "29-3-2012");
user_pref("CT3072253.toolbarContextMenuLastCheckTime", "Thu Mar 29 2012 16:05:57 GMT+0200");
user_pref("CT3072253.toolbarCurrentServerTime", "3-12-2013");
user_pref("CT3072253.toolbarDisabled", "true");
user_pref("CT3072253.toolbarLoginClientTime", "Sat Nov 09 2013 11:56:28 GMT+0100");
user_pref("CT3072253.upgradeFromOBVersion", true);
user_pref("CT3072253.url_history0001.from_oldbar.enc", "aHR0cDovL3d3dy5mYWNlYm9vay5jb20vcnZhY2ExIzo6OmNsaWNraGFuZGxlcjo6OjEzMzMwMzA0MzEyMTksLCxodHRwOi8vd3d3LmZhY2Vib29rLmNvbS9
user_pref("CT3072253.usagesFlag", 2);
user_pref("CT3072253_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1386079774851,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}
user_pref("CT3176921.1000082.isPlayDisplay", "true");
user_pref("CT3176921.1000082.state", "{\"state\":\"stopped\",\"text\":\"Californi...\",\"description\":\"California Rock - Rock\",\"url\":\"hxxp://www.feedlive.net/california.
user_pref("CT3176921.3176921a129719618372458539000000paramsGK1.enc", "eyJ1cGRhdGVSZXFUaW1lIjoxMzYxNDY1NTI2NTc1LCJ1cGRhdGVSZXNwVGltZSI6MTM2MTQ2NTUyNzA3NCwiZGF0YSI6eyJzZXR0aW5nc
user_pref("CT3176921.3176921a129719618372458539000000twitterTemplate_notify_followers.enc", "MHgwMDM4LDB4MDAzOSwweDAwMzMsMHgwMDMyLDB4MDAzOCwweDAwMzAsMHgwMDM0LDB4MDAzNywweDAwMz
user_pref("CT3176921.3176921a129719618372458539000000twitterTemplate_notify_followers_count.enc", "MzE=");
user_pref("CT3176921.3176921a129719618372458539000000twitterTemplate_notify_following.enc", "");
user_pref("CT3176921.3176921a129719618372458539000000twitterTemplate_notify_following_count.enc", "MA==");
user_pref("CT3176921.3176921a129719618372458539000000twitterTemplate_notify_home.enc", "MHgwMDMxLDB4MDAzOSwweDAwMzAsMHgwMDM3LDB4MDAzNywweDAwMzYsMHgwMDMxLDB4MDAzMCwweDAwMzIsMHg
user_pref("CT3176921.3176921a129719618372458539000000twitterTemplate_notify_home_count.enc", "Nw==");
user_pref("CT3176921.3176921a129720553164390415000000paramsGK0.enc", "eyJ1cGRhdGVSZXFUaW1lIjoxMzYxNDY1NTM1MTQ5LCJ1cGRhdGVSZXNwVGltZSI6MTM2MTQ2NTUzNTYyMiwiZGF0YSI6eyJzZXR0aW5nc
user_pref("CT3176921.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT3176921.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT3176921.FF19Solved", "true");
user_pref("CT3176921.FirstTime", "true");
user_pref("CT3176921.FirstTimeFF3", "true");
user_pref("CT3176921.PG_ENABLE", "dHJ1ZQ==");
user_pref("CT3176921.PrintItGreenStatus.enc", "dHJ1ZQ==");
user_pref("CT3176921.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3176921&SearchSource=2&CUI=UN39285599272809511&UM=UM_ID&q=");
user_pref("CT3176921.UserID", "UN39285599272809511");
user_pref("CT3176921.addressBarTakeOverEnabledInHidden", "true");
user_pref("CT3176921.autoDisableScopes", -1);
user_pref("CT3176921.browser.search.defaultthis.engineName", "true");
user_pref("CT3176921.cbfirsttime.enc", "VGh1IEZlYiAyMSAyMDEzIDEzOjUyOjA0IEdNVCswMTAw");
user_pref("CT3176921.countryCode", "CZ");
user_pref("CT3176921.defaultSearch", "true");
user_pref("CT3176921.enableAlerts", "always");
user_pref("CT3176921.enableFix404ByUser", "FALSE");
user_pref("CT3176921.enableSearchFromAddressBar", "true");
user_pref("CT3176921.firstTimeDialogOpened", "true");
user_pref("CT3176921.fixPageNotFoundError", "true");
user_pref("CT3176921.fixPageNotFoundErrorByUser", "true");
user_pref("CT3176921.fixPageNotFoundErrorInHidden", "true");
user_pref("CT3176921.fixUrls", true);
user_pref("CT3176921.fullUserID", "UN39285599272809511.XX.20130627150253");
user_pref("CT3176921.hxxp___cdn_printitgreen_com.APP_WIN_FEATURES.enc", "cmVzaXphYmxlPW5vLGhzY3JvbGw9bm8sdnNjcm9sbD1ubyxzYXZlbG9jYXRpb249bm8sc2F2ZXJlc2l6ZWRzaXplPW5vLGNsb3NlYn
user_pref("CT3176921.installDate", "21/2/2013 13:51:25");
user_pref("CT3176921.installId", "stub.exe");
user_pref("CT3176921.installType", "conduitnsisintegration");
user_pref("CT3176921.isCheckedStartAsHidden", true);
user_pref("CT3176921.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT3176921.isFirstTimeToolbarLoading", "false");
user_pref("CT3176921.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
user_pref("CT3176921.keyword", "true");
user_pref("CT3176921.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"hxxp://www.trovigo.com/?gd=&ctid=CT3176921&oct ... 5992728095
user_pref("CT3176921.lastVersion", "10.23.0.822");
user_pref("CT3176921.mam_gk_installer_preapproved.enc", "dHJ1ZQ==");
user_pref("CT3176921.migrateAppsAndComponents", true);
user_pref("CT3176921.navigationAliasesJson", "{\"EB_MAIN_FRAME_URL\":\"hxxp%3A%2F%2Fforum.viry.cz%2Fviewforum.php%3Ff%3D13\",\"EB_MAIN_FRAME_TITLE\":\"VIRY.CZ%20%E2%80%A2%20Zo
user_pref("CT3176921.newSettings", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
user_pref("CT3176921.openThankYouPage", "false");
user_pref("CT3176921.openUninstallPage", "true");
user_pref("CT3176921.originalHomepage", "hxxp://search.avira.com/?l=dis&o=APN10267&gct=hp&dc=EU&locale=en_CZ");
user_pref("CT3176921.originalSearchAddressUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3072253&SearchSource=2&q=");
user_pref("CT3176921.revertSettingsEnabled", "false");
user_pref("CT3176921.search.searchAppId", "10000002");
user_pref("CT3176921.search.searchCount", "0");
user_pref("CT3176921.searchFromAddressBarEnabledByUser", "true");
user_pref("CT3176921.searchInNewTabEnabledByUser", "true");
user_pref("CT3176921.searchInNewTabEnabledInHidden", "true");
user_pref("CT3176921.searchSuggestEnabledByUser", "true");
user_pref("CT3176921.searchUserMode", "UM_ID");
user_pref("CT3176921.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT3176921.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
user_pref("CT3176921.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\"}");
user_pref("CT3176921.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT3176921\"}");
user_pref("CT3176921.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"hxxp://expressfiles.OurToolbar.com//xpi\"}");
user_pref("CT3176921.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"express-files \"}");
user_pref("CT3176921.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT3176921.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data\":\"2\"}");
user_pref("CT3176921.serviceLayer_services_Configuration_lastUpdate", "1394986039772");
user_pref("CT3176921.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1361451118708");
user_pref("CT3176921.serviceLayer_services_appsMetadata_lastUpdate", "1361451123068");
user_pref("CT3176921.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1361451117431");
user_pref("CT3176921.serviceLayer_services_location_lastUpdate", "1372086328955");
user_pref("CT3176921.serviceLayer_services_login_10.14.65.43_lastUpdate", "1362328651187");
user_pref("CT3176921.serviceLayer_services_login_10.15.0.562_lastUpdate", "1365858389318");
user_pref("CT3176921.serviceLayer_services_login_10.15.2.523_lastUpdate", "1368205337250");
user_pref("CT3176921.serviceLayer_services_login_10.16.1.521_lastUpdate", "1368549973906");
user_pref("CT3176921.serviceLayer_services_login_10.16.2.509_lastUpdate", "1372086329621");
user_pref("CT3176921.serviceLayer_services_login_10.16.4.519_lastUpdate", "1374058692124");
user_pref("CT3176921.serviceLayer_services_login_10.16.70.505_lastUpdate", "1377619848926");
user_pref("CT3176921.serviceLayer_services_login_10.19.2.505_lastUpdate", "1378824219949");
user_pref("CT3176921.serviceLayer_services_login_10.20.0.513_lastUpdate", "1380206336774");
user_pref("CT3176921.serviceLayer_services_login_10.20.1.508_lastUpdate", "1382191151121");
user_pref("CT3176921.serviceLayer_services_login_10.21.1.507_lastUpdate", "1384527511030");
user_pref("CT3176921.serviceLayer_services_login_10.22.3.518_lastUpdate", "1385036289598");
user_pref("CT3176921.serviceLayer_services_login_10.22.5.510_lastUpdate", "1387039817904");
user_pref("CT3176921.serviceLayer_services_login_10.23.0.822_lastUpdate", "1394982431947");
user_pref("CT3176921.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1361451117678");
user_pref("CT3176921.serviceLayer_services_searchAPI_lastUpdate", "1394986039861");
user_pref("CT3176921.serviceLayer_services_serviceMap_lastUpdate", "1394986039228");
user_pref("CT3176921.serviceLayer_services_setupAPI_lastUpdate", "1361451114412");
user_pref("CT3176921.serviceLayer_services_toolbarContextMenu_lastUpdate", "1361451117013");
user_pref("CT3176921.serviceLayer_services_toolbarSettings_lastUpdate", "1394989632872");
user_pref("CT3176921.serviceLayer_services_translation_lastUpdate", "1394986042330");
user_pref("CT3176921.settingsINI", true);
user_pref("CT3176921.shouldFirstTimeDialog", "false");
user_pref("CT3176921.showToolbarPermission", "false");
user_pref("CT3176921.smartbar.CTID", "CT3176921");
user_pref("CT3176921.smartbar.Uninstall", "0");
user_pref("CT3176921.smartbar.homepage", "true");
user_pref("CT3176921.smartbar.isHidden", true);
user_pref("CT3176921.smartbar.toolbarName", "express-files ");
user_pref("CT3176921.startPage", "true");
user_pref("CT3176921.toolbarBornServerTime", "21-2-2013");
user_pref("CT3176921.toolbarCurrentServerTime", "16-3-2014");
user_pref("CT3176921.toolbarLoginClientTime", "Mon Mar 25 2013 17:23:19 GMT+0100");
user_pref("CT3176921.twitterTemplate_3176921a129719618372458539000000_DailyActivity.enc", "MTM2MTQ1MTEyNjUwMQ==");
user_pref("CT3176921.twitterTemplate_3176921a129719618372458539000000_LifetimeSent.enc", "VFJVRQ==");
user_pref("CT3176921.twitter_v1.8.0_twitter_app_open_t_f.enc", "ZmFsc2U=");
user_pref("CT3176921.url_history0001.enc", "aHR0cDovL3d3dy5hdWtyby5jei9zaG93X2l0ZW0ucGhwP2l0ZW09MzAxODQ0MzY3OTo6OmNsaWNraGFuZGxlcjo6OjEzNjE0NTgzNDQ0NDcsLCxodHRwOi8vd3d3LmF1a3J
user_pref("CT3176921_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1394968009491,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}
user_pref("CT3220468.BT_Stats.enc", "eyJsYXN0X2xvZyI6MTM1MzU5OTE0NiwidXVpZCI6NzI0NjU0ODkxMjM1NzcwLCJzZXFfaWQiOjIsInNzYiI6MTM1MzE0OTc4NH0=");
user_pref("CT3220468.CBOpenMAMSettings.enc", "MA==");
user_pref("CT3220468.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT3220468.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT3220468.FirstTime", "true");
user_pref("CT3220468.FirstTimeFF3", "true");
user_pref("CT3220468.LoginRevertSettingsEnabled", true);
user_pref("CT3220468.RevertSettingsEnabled", true);
user_pref("CT3220468.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3220468&SearchSource=2&q=");
user_pref("CT3220468.UserID", "UN00651713944032728");
user_pref("CT3220468.addressBarTakeOverEnabledInHidden", "true");
user_pref("CT3220468.autoDisableScopes", -1);
user_pref("CT3220468.browser.search.defaultthis.engineName", true);
user_pref("CT3220468.cbcountry_001.enc", "Q1o=");
user_pref("CT3220468.cbfirsttime.enc", "U2F0IE5vdiAxNyAyMDEyIDExOjU2OjEwIEdNVCswMTAw");
user_pref("CT3220468.enableAlerts", "always");
user_pref("CT3220468.enableFix404ByUser", "FALSE");
user_pref("CT3220468.enableSearchFromAddressBar", "true");
user_pref("CT3220468.firstTimeDialogOpened", "true");
user_pref("CT3220468.fixPageNotFoundError", "true");
user_pref("CT3220468.fixPageNotFoundErrorByUser", "true");
user_pref("CT3220468.fixPageNotFoundErrorInHidden", "true");
user_pref("CT3220468.fixUrls", true);
user_pref("CT3220468.installId", "fft21.tmp.exe");
user_pref("CT3220468.installType", "XPE");
user_pref("CT3220468.isCheckedStartAsHidden", true);
user_pref("CT3220468.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT3220468.isFirstTimeToolbarLoading", "false");
user_pref("CT3220468.isNewTabEnabled", true);
user_pref("CT3220468.isPerformedSmartBarTransition", "true");
user_pref("CT3220468.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
user_pref("CT3220468.isWelcomPage", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
user_pref("CT3220468.keyword", true);
user_pref("CT3220468.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"hxxp://search.conduit.com/?ctid=CT3220468&octid=CT3220468&SearchSource=15&CUI=UN0065171394403272
user_pref("CT3220468.lastVersion", "10.14.65.43");
user_pref("CT3220468.migrateAppsAndComponents", true);
user_pref("CT3220468.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"hxxp%3A%2F%2Fsearch.conduit.com%2F%3Fctid%3DCT3176921%26SearchSource%3D13%26CUI%
user_pref("CT3220468.newSettings", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
user_pref("CT3220468.openThankYouPage", "true");
user_pref("CT3220468.openUninstallPage", "FALSE");
user_pref("CT3220468.search.searchAppId", "129813684258939747");
user_pref("CT3220468.search.searchCount", "1");
user_pref("CT3220468.searchInNewTabEnabledByUser", "true");
user_pref("CT3220468.searchInNewTabEnabledInHidden", "true");
user_pref("CT3220468.searchProtector.notifyChanges", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT3220468.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT3220468.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
user_pref("CT3220468.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\"}");
user_pref("CT3220468.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT3220468\"}");
user_pref("CT3220468.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"hxxp://uTorrentControlv2.OurToolbar.com//xpi\"}");
user_pref("CT3220468.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"uTorrentControl_v2\"}");
user_pref("CT3220468.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT3220468.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1361451220035");
user_pref("CT3220468.serviceLayer_services_appTracking_lastUpdate", "1353149769541");
user_pref("CT3220468.serviceLayer_services_appsMetadata_lastUpdate", "1361451219973");
user_pref("CT3220468.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1360419146035");
user_pref("CT3220468.serviceLayer_services_location_lastUpdate", "1361451222387");
user_pref("CT3220468.serviceLayer_services_login_10.10.27.6_lastUpdate", "1353149772709");
user_pref("CT3220468.serviceLayer_services_login_10.13.40.15_lastUpdate", "1358437989629");
user_pref("CT3220468.serviceLayer_services_login_10.14.40.128_lastUpdate", "1359642274584");
user_pref("CT3220468.serviceLayer_services_login_10.14.42.7_lastUpdate", "1360945246127");
user_pref("CT3220468.serviceLayer_services_login_10.14.65.43_lastUpdate", "1362314253225");
user_pref("CT3220468.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1360419146099");
user_pref("CT3220468.serviceLayer_services_searchAPI_lastUpdate", "1361451222998");
user_pref("CT3220468.serviceLayer_services_serviceMap_lastUpdate", "1362314252939");
user_pref("CT3220468.serviceLayer_services_setupAPI_lastUpdate", "1361451220455");
user_pref("CT3220468.serviceLayer_services_toolbarContextMenu_lastUpdate", "1360419145981");
user_pref("CT3220468.serviceLayer_services_toolbarSettings_lastUpdate", "1362323014620");
user_pref("CT3220468.serviceLayer_services_translation_lastUpdate", "1362314252970");
user_pref("CT3220468.settingsINI", true);
user_pref("CT3220468.shouldFirstTimeDialog", "false");
user_pref("CT3220468.smartbar.CTID", "CT3220468");
user_pref("CT3220468.smartbar.Uninstall", "0");
user_pref("CT3220468.smartbar.homepage", true);
user_pref("CT3220468.smartbar.isHidden", true);
user_pref("CT3220468.smartbar.toolbarName", "uTorrentControl_v2 ");
user_pref("CT3220468.startPage", "userChanged");
user_pref("CT3220468.toolbarBornServerTime", "17-11-2012");
user_pref("CT3220468.toolbarCurrentServerTime", "3-3-2013");
user_pref("CT3220468.upgradeFromClearSBVersion", true);
user_pref("CT3220468.url_history0001.enc", "aHR0cDovL25vdnkuZW1haWwuc2V6bmFtLmN6LyM6OjpjbGlja2hhbmRsZXI6OjoxMzUzNjAxNDE5MzYzLCwsaHR0cDovL25vdnkuZW1haWwuc2V6bmFtLmN6LyM6OjpjbGl
user_pref("CT3220468_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1362317159551,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}
user_pref("CommunityToolbar.ConduitHomepagesList", "hxxp://search.conduit.com/?ctid=CT2786678&SearchSource=13,hxxp://search.conduit.com/?ctid=CT3072253&SearchSource=13");
user_pref("CommunityToolbar.ConduitSearchList", " ,uTorrentControl2 Customized Web Search");
user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit.com/root/CT3072253/CT3072253", "\"1602f3caa785c108c3cc12e4d4609b4d3\"");
user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/1178763/1174448/CZ", "\"0\"");
user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2786678", "\"1313448428\"");
user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT3072253", "\"1362324308\"");
user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&locale=en", "m4Df43NZ+9lr21ZNdyYrjA==");
user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&locale=en", "0uSPYx+Kl2jpu8sJZMeHjw==");
user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&locale=en", "Dclc8oo4TTv7+mAkSlUSWg==");
user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&locale=en", "K4Vqu91uAzWURlxJRdXJOg==");
user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\"07879643d3acc1:0\"");
user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.10.0.1", "\"4ead38b3e6bcd1:0\"");
user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.12.2.3", "\"4ead38b3e6bcd1:0\"");
user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.13.0.6", "\"0d648794549cd1:0\"");
user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.14.1.0", "\"0e0a4327275cd1:0\"");
user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.15.1.0", "\"0343677cfb1cd1:0\"");
user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.16.0.3", "\"0343677cfb1cd1:0\"");
user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.18.0.7", "\"0343677cfb1cd1:0\"");
user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.19.0.3", "\"23c5489aa686ce1:0\"");
user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.20.0.4", "\"9f8d2729abc2ce1:0\"");
user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.5.0.12", "\"80ee9485875dcc1:0\"");
user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2786678", "\"634485749189530000\"");
user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT3072253", "\"07766f5592f76b152ec9246ce6a0b574\"");
user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.conduit-services.com/?ctid=CT2786678&octid=CT2786678", "\"1313448551\"");
user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=EB_LOCALE", "\"634492029952000000\"");
user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=en", "\"1f5851f12d58a6c6d5b555ddd5415b6a\"");
user_pref("CommunityToolbar.LatestLibsPath", "file:///C:\\Documents and Settings\\oem\\Data aplikacÄ‚ĂĂâ€
user_pref("CommunityToolbar.LatestToolbarVersionInstalled", "3.10.0.1");
user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "chrome://browser-region/locale/region.properties");
user_pref("CommunityToolbar.ToolbarsList", "CT2786678,CT3072253");
user_pref("CommunityToolbar.ToolbarsList2", "CT2786678,CT3072253");
user_pref("CommunityToolbar.ToolbarsList4", "CT2786678,CT3072253");
user_pref("CommunityToolbar.facebook.settingsLastCheckTime", "Sat Aug 20 2011 13:05:00 GMT+0200");
user_pref("CommunityToolbar.globalUserId", "e9a8a44c-750a-413e-b896-27a8d3c1cf1c");
user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true);
user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true);
user_pref("CommunityToolbar.keywordURLSelectedCTID", "CT3072253");
user_pref("CommunityToolbar.notifications.alertDialogsGetterLastCheckTime", "Mon Mar 26 2012 06:52:52 GMT+0200");
user_pref("CommunityToolbar.notifications.alertInfoInterval", 60);
user_pref("CommunityToolbar.notifications.alertInfoLastCheckTime", "Thu Mar 29 2012 18:33:44 GMT+0200");
user_pref("CommunityToolbar.notifications.clientsServerUrl", "hxxp://alert.client.conduit.com");
user_pref("CommunityToolbar.notifications.locale", "en");
user_pref("CommunityToolbar.notifications.loginIntervalMin", 1440);
user_pref("CommunityToolbar.notifications.loginLastCheckTime", "Thu Mar 29 2012 16:05:56 GMT+0200");
user_pref("CommunityToolbar.notifications.loginLastUpdateTime", "1313487611");
user_pref("CommunityToolbar.notifications.messageShowTimeSec", 20);
user_pref("CommunityToolbar.notifications.servicesServerUrl", "hxxp://alert.services.conduit.com");
user_pref("CommunityToolbar.notifications.showTrayIcon", false);
user_pref("CommunityToolbar.notifications.userCloseIntervalMin", 300);
user_pref("CommunityToolbar.notifications.userId", "770fb14d-69f3-46be-8eb3-75e5d669ef19");
user_pref("CommunityToolbar.originalHomepage", "hxxp://www.seznam.cz/");
user_pref("CommunityToolbar.originalSearchEngine", "chrome://browser-region/locale/region.properties");
user_pref("Smartbar.ConduitHomepagesList", "");
user_pref("Smartbar.ConduitSearchEngineList", "uTorrentControl2 Customized Web Search");
user_pref("Smartbar.ConduitSearchUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3176921&SearchSource=3&q={searchTerms}&CUI=UN39285599272809511");
user_pref("Smartbar.SearchFromAddressBarSavedUrl", "chrome://browser-region/locale/region.properties");
user_pref("Smartbar.keywordURLSelectedCTID", "CT3072253");
user_pref("browser.newtab.url", "hxxp://mixidj.delta-search.com/?affID=121125&babsrc=NT_ss&mntrId=681100A0D1AFAAA3");
user_pref("browser.search.defaultthis.engineName", "express-files Customized Web Search");
user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3176921&SearchSource=3&q={searchTerms}&CUI=UN39285599272809511");
user_pref("browser.startup.homepage", "hxxp://avira.search.ask.com/?tpid=AVIRA-V7C&o=APN11398&pf=V7&trgb=ALL&p2=%5EBB5%5EYYYYYY%5EYY%5ECZ&gct=hp&apn_ptnrs=%5EBB5&apn_dtid=%5EY
user_pref("extensions.mywebsearch.prevDefaultEngine", "Google");
user_pref("extensions.mywebsearch.prevKwdEnabled", true);
user_pref("extensions.mywebsearch.prevKwdURL", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3176921&SearchSource=2&CUI=UN39285599272809511&UM=UM_ID&q=");
user_pref("extensions.mywebsearch.prevSelectedEngine", "Google");
user_pref("extensions.toolbar.mindspark._57Members_.homepage", "hxxp://home.tb.ask.com/index.jhtml?ptb=639D4657-EA2E-4934-B26D-A91CD10A7B2B&n=77fd5b06&p2=^0D^xdm271^YYA^cz");
user_pref("extensions.toolbar.mindspark._57Members_.hp.enabled", false);
user_pref("extensions.toolbar.mindspark._57Members_.hp.user.defined", true);
user_pref("extensions.toolbar.mindspark._57Members_.initialized", true);
user_pref("extensions.toolbar.mindspark._57Members_.installation.contextKey", "");
user_pref("extensions.toolbar.mindspark._57Members_.installation.installDate", "2013092614");
user_pref("extensions.toolbar.mindspark._57Members_.installation.partnerId", "^0D^xdm271^YYA^cz");
user_pref("extensions.toolbar.mindspark._57Members_.installation.partnerSubId", "");
user_pref("extensions.toolbar.mindspark._57Members_.installation.success", true);
user_pref("extensions.toolbar.mindspark._57Members_.installation.toolbarId", "639D4657-EA2E-4934-B26D-A91CD10A7B2B");
user_pref("extensions.toolbar.mindspark._57Members_.lastActivePing", "1380525096495");
user_pref("extensions.toolbar.mindspark._57Members_.options.defaultSearch", true);
user_pref("extensions.toolbar.mindspark._57Members_.options.homePageEnabled", true);
user_pref("extensions.toolbar.mindspark._57Members_.options.keywordEnabled", true);
user_pref("extensions.toolbar.mindspark._57Members_.options.tabEnabled", true);
user_pref("extensions.toolbar.mindspark._57Members_.weather.location", "10001");
user_pref("extensions.toolbar.mindspark.hp.enabled", false);
user_pref("extensions.toolbar.mindspark.hp.enabled.guid", "");
user_pref("extensions.toolbar.mindspark.lastInstalled", "marineaquariumfree@mindspark.com");
user_pref("keyword.URL", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3072253&SearchSource=2&q=");
user_pref("plugin.state.npconduitfirefoxplugin", 2);
user_pref("smartBar.searchInNewTabOwner", "CT2269050");
user_pref("smartbar.addressBarOwnerCTID", "CT3072253");
user_pref("smartbar.conduitHomepageList", "hxxp://search.conduit.com/?ctid=CT3220468&SearchSource=13,hxxp://search.conduit.com/?ctid=CT2269050&SearchSource=13&CUI=SB_CUI,hxxp:
user_pref("smartbar.conduitSearchAddressUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3220468&SearchSource=2&q=,hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT
user_pref("smartbar.homePageOwnerCTID", "CT3176921");
user_pref("smartbar.machineId", "4TXSG3LKBF9HQNIFHSCDPKWXVSCHAJVXLYU/C7RPQIGAOHR85NQJRONGQELTO3XVY/2YN+YJUC61E50/QQHGUQ");
user_pref("smartbar.originalHomepage", "hxxp://www.seznam.cz/");
user_pref("smartbar.originalSearchAddressUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3072253&SearchSource=2&q=");
user_pref("smartbar.originalSearchEngine", " false");





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on ne 16.03.2014 at 20:12:48,70
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

apache.davidson
Návštěvník
Návštěvník
Příspěvky: 26
Registrován: 21 Led 2009 17:50

Re: Infekce - trojský kůň

#6 Příspěvek od apache.davidson »

Log Adw Cleaner:

# AdwCleaner v3.022 - Report created 16/03/2014 at 20:32:59
# Updated 13/03/2014 by Xplode
# Operating System : Microsoft Windows XP Service Pack 3 (32 bits)
# Username : oem - S-359835CC70E24
# Running from : C:\Documents and Settings\oem\Plocha\adwcleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\Documents and Settings\All Users\Data aplikací\Babylon
Folder Deleted : C:\Documents and Settings\All Users\Data aplikací\Trymedia
Folder Deleted : C:\Documents and Settings\All Users\Nabídka Start\Programy\jZip
Folder Deleted : C:\Program Files\jZip
Folder Deleted : C:\Program Files\Kozaka
Folder Deleted : C:\Program Files\MediaPlayerV1
Folder Deleted : C:\Program Files\Mobogenie
Folder Deleted : C:\Program Files\SimilarSites
Folder Deleted : C:\Program Files\Common Files\DVDVideoSoft\TB
Folder Deleted : C:\Documents and Settings\LocalService\Local Settings\Data aplikací\AskToolbar
Folder Deleted : C:\Documents and Settings\oem\Local Settings\Data aplikací\Conduit
Folder Deleted : C:\Documents and Settings\oem\Local Settings\Data aplikací\DVDVideoSoftTB
Folder Deleted : C:\Documents and Settings\oem\Local Settings\Data aplikací\genienext
Folder Deleted : C:\Documents and Settings\oem\Local Settings\Data aplikací\jZip
Folder Deleted : C:\Documents and Settings\oem\Local Settings\Data aplikací\Mobogenie
Folder Deleted : C:\Documents and Settings\oem\Data aplikací\ExpressFiles
Folder Deleted : C:\Documents and Settings\oem\Data aplikací\newnext.me
Folder Deleted : C:\Documents and Settings\oem\Data aplikací\SimilarSites
Folder Deleted : C:\Documents and Settings\oem\Dokumenty\Mobogenie
Folder Deleted : C:\Documents and Settings\oem\Data aplikací\Mozilla\Firefox\Profiles\acmtm6o3.default\Smartbar
Folder Deleted : C:\Documents and Settings\oem\Data aplikací\Mozilla\Firefox\Profiles\acmtm6o3.default\ValueApps
Folder Deleted : C:\Documents and Settings\oem\Data aplikací\Mozilla\Firefox\Profiles\acmtm6o3.default\CT3220468
Folder Deleted : C:\Documents and Settings\oem\Data aplikací\Mozilla\Firefox\Profiles\acmtm6o3.default\CT3176921
Folder Deleted : C:\Documents and Settings\oem\Data aplikací\Mozilla\Firefox\Profiles\acmtm6o3.default\CT2786678
Folder Deleted : C:\Documents and Settings\oem\Data aplikací\Mozilla\Firefox\Profiles\acmtm6o3.default\Extensions\{7473b6bd-4691-4744-a82b-7854eb3d70b6}(2)
Folder Deleted : C:\Documents and Settings\oem\Data aplikací\Mozilla\Firefox\Profiles\acmtm6o3.default\Extensions\{88ac3cb6-596b-4217-964c-b6757ef9602d}
Folder Deleted : C:\Documents and Settings\oem\Data aplikací\Mozilla\Firefox\Profiles\acmtm6o3.default\Extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}(2)
[!] Folder Deleted : C:\Documents and Settings\oem\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\olakgnkoldmagdblaalodobkmeokmgjj
File Deleted : C:\Documents and Settings\oem\Data aplikací\Mozilla\Firefox\Profiles\acmtm6o3.default\bProtector_extensions.rdf
File Deleted : C:\Documents and Settings\oem\Data aplikací\Mozilla\Firefox\Profiles\acmtm6o3.default\searchplugins\ask-search.xml
File Deleted : C:\WINDOWS\Tasks\Express FilesUpdate.job
File Deleted : C:\WINDOWS\Tasks\GoforFilesUpdate.job

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\boipimhfjpakfgckhbljjengakjhkcbp
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\ICQ\ICQToolBar
Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [NextLive]
Key Deleted : HKLM\SOFTWARE\Classes\jZip.file
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd
Key Deleted : HKCU\Software\5dedfd8e23aec47
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{A2773ED4-83BD-488A-A186-73590706C916}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{00000001-4FEF-40D3-B3FA-E0531B897F98}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{64697678-0000-0010-8000-00AA00389B71}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3408AC0D-510E-4808-8F7B-6B70B1F88534}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{DCABB943-792E-44C4-9029-ECBEE6265AF9}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3614D305-2DBB-4991-9297-750DD60FFC73}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{EF99BD32-C1FB-11D2-892F-0090271D4F88}]
Value Deleted : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List [C:\Program Files\GoforFiles\goforfilesdl.exe]
Value Deleted : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List [C:\Program Files\GoforFiles\GoforFiles.exe]
Key Deleted : HKCU\Software\Conduit
Key Deleted : HKCU\Software\GoforFiles
Key Deleted : HKCU\Software\ICQ\ICQToolbar
Key Deleted : HKCU\Software\Pokki
Key Deleted : HKCU\Software\SmartBar
Key Deleted : HKLM\Software\GoforFiles
Key Deleted : HKLM\Software\ICQ\ICQToolbar
Key Deleted : HKLM\Software\jZip
Key Deleted : HKLM\Software\Trymedia Systems
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\{79A765E1-C399-405B-85AF-466F52E918B0}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\jZip
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\jZip

***** [ Browsers ] *****

-\\ Internet Explorer v7.0.6000.21371


-\\ Mozilla Firefox v27.0.1 (cs)

[ File : C:\Documents and Settings\oem\Data aplikací\Mozilla\Firefox\Profiles\acmtm6o3.default\prefs.js ]

Line Deleted : user_pref("CT3176921.1000082.isPlayDisplay", "true");
Line Deleted : user_pref("CT3176921.1000082.state", "{\"state\":\"stopped\",\"text\":\"Californi...\",\"description\":\"California Rock - Rock\",\"url\":\"hxxp://www.feedlive.net/california.asx\"}");
Line Deleted : user_pref("CT3176921.1000234.TWC_TMP_city", "PRAGUE");
Line Deleted : user_pref("CT3176921.1000234.TWC_TMP_country", "CZ");
Line Deleted : user_pref("CT3176921.1000234.TWC_country", "CZECH REPUBLIC");
Line Deleted : user_pref("CT3176921.1000234.TWC_locId", "EZXX0012");
Line Deleted : user_pref("CT3176921.1000234.TWC_location", "Prague, PR, Czech Republic");
Line Deleted : user_pref("CT3176921.1000234.TWC_region", "OT");
Line Deleted : user_pref("CT3176921.1000234.TWC_temp_dis", "c");
Line Deleted : user_pref("CT3176921.1000234.TWC_wind_dis", "kmh");
Line Deleted : user_pref("CT3176921.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Deleted : user_pref("CT3176921.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Deleted : user_pref("CT3176921.FirstTime", "true");
Line Deleted : user_pref("CT3176921.FirstTimeFF3", "true");
Line Deleted : user_pref("CT3176921.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3176921&SearchSource=2&CUI=UN39285599272809511&UM=2&q=");
Line Deleted : user_pref("CT3176921.TopHitsConfig.enc", "ew0KICAgICJzcHJpdGVVcmwiOiAiaHR0cDovL3N0b3JhZ2UuY29uZHVpdC5jb20vcHMvVG9wSGl0c0dlbmVyaWNBcHAvY29uZmlncy9VUy1VSy1EYW5jZS1Sb2NrLVJhcC9zcHJpdGUucG5nIiwNCiAgICAiaX[...]
Line Deleted : user_pref("CT3176921.UserID", "UN39285599272809511");
Line Deleted : user_pref("CT3176921.addressBarTakeOverEnabledInHidden", "true");
Line Deleted : user_pref("CT3176921.appOptions", "{\"1000034\":{\"render\":true},\"1000234\":{\"render\":true},\"1000515\":{\"render\":true}}");
Line Deleted : user_pref("CT3176921.browser.search.defaultthis.engineName", true);
Line Deleted : user_pref("CT3176921.countryCode", "CZ");
Line Deleted : user_pref("CT3176921.embeddedsData", "[{\"appId\":\"10000002\",\"apiPermissions\":{\"crossDomainAjax\":true,\"getMainFrameTitle\":true,\"getMainFrameUrl\":true,\"getSearchTerm\":true,\"instantAlert\":[...]
Line Deleted : user_pref("CT3176921.firstTimeDialogOpened", "true");
Line Deleted : user_pref("CT3176921.fixPageNotFoundErrorByUser", "TRUE");
Line Deleted : user_pref("CT3176921.fixPageNotFoundErrorInHidden", "true");
Line Deleted : user_pref("CT3176921.fullUserID", "UN39285599272809511.XX.20130627150253");
Line Deleted : user_pref("CT3176921.isCheckedStartAsHidden", true);
Line Deleted : user_pref("CT3176921.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Deleted : user_pref("CT3176921.isFirstTimeToolbarLoading", "false");
Line Deleted : user_pref("CT3176921.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
Line Deleted : user_pref("CT3176921.isWelcomPage", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
Line Deleted : user_pref("CT3176921.keyword", true);
Line Deleted : user_pref("CT3176921.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"hxxp://www.trovigo.com/?gd=&ctid=CT3176921&oct ... Lay=1&UM=2\"}");
Line Deleted : user_pref("CT3176921.lastVersion", "10.23.0.822");
Line Deleted : user_pref("CT3176921.mam_gk_installer_preapproved.enc", "VFJVRQ==");
Line Deleted : user_pref("CT3176921.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"hxxp%3A%2F%2Fforum.viry.cz%2Fposting.php%3Fmode%3Dreply%26f%3D13%26t%3D136891\",\"EB_MAIN_FRAME_TITLE\":\[...]
Line Deleted : user_pref("CT3176921.newSettings", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
Line Deleted : user_pref("CT3176921.originalHomepage", "chrome://branding/locale/browserconfig.properties");
Line Deleted : user_pref("CT3176921.originalSearchAddressUrl", false);
Line Deleted : user_pref("CT3176921.originalSearchEngine", "Google");
Line Deleted : user_pref("CT3176921.originalSearchEngineName", "Google");
Line Deleted : user_pref("CT3176921.personalApps", "{\"dataType\":\"object\",\"data\":\"[\\\"EMAIL_NOTIFIER\\\",\\\"WEATHER\\\",\\\"BROWSER_COMPONENT\\\"]\"}");
Line Deleted : user_pref("CT3176921.revertSettingsEnabled", "false");
Line Deleted : user_pref("CT3176921.search.searchAppId", "10000002");
Line Deleted : user_pref("CT3176921.search.searchCount", "0");
Line Deleted : user_pref("CT3176921.searchFromAddressBarEnabledByUser", "true");
Line Deleted : user_pref("CT3176921.searchInNewTabEnabledByUser", "true");
Line Deleted : user_pref("CT3176921.searchInNewTabEnabledInHidden", "true");
Line Deleted : user_pref("CT3176921.searchSuggestEnabledByUser", "True");
Line Deleted : user_pref("CT3176921.searchUninstallUserMode", "4");
Line Deleted : user_pref("CT3176921.searchUserMode", "4");
Line Deleted : user_pref("CT3176921.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Deleted : user_pref("CT3176921.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
Line Deleted : user_pref("CT3176921.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"2\"}");
Line Deleted : user_pref("CT3176921.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT3176921\"}");
Line Deleted : user_pref("CT3176921.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"hxxp://expressfiles.OurToolbar.com//xpi\"}");
Line Deleted : user_pref("CT3176921.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"express-files \"}");
Line Deleted : user_pref("CT3176921.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Deleted : user_pref("CT3176921.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data\":\"2\"}");
Line Deleted : user_pref("CT3176921.serviceLayer_services_Configuration_lastUpdate", "1394997221251");
Line Deleted : user_pref("CT3176921.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1394997219507");
Line Deleted : user_pref("CT3176921.serviceLayer_services_appsMetadata_lastUpdate", "1394997219609");
Line Deleted : user_pref("CT3176921.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1394997219279");
Line Deleted : user_pref("CT3176921.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1394997219438");
Line Deleted : user_pref("CT3176921.serviceLayer_services_searchAPI_lastUpdate", "1394997220987");
Line Deleted : user_pref("CT3176921.serviceLayer_services_serviceMap_lastUpdate", "1394997218999");
Line Deleted : user_pref("CT3176921.serviceLayer_services_setupAPI_lastUpdate", "1394997228949");
Line Deleted : user_pref("CT3176921.serviceLayer_services_toolbarContextMenu_lastUpdate", "1394997219209");
Line Deleted : user_pref("CT3176921.serviceLayer_services_toolbarSettings_lastUpdate", "1394997219778");
Line Deleted : user_pref("CT3176921.serviceLayer_services_translation_lastUpdate", "1394997220995");
Line Deleted : user_pref("CT3176921.settingsINI", true);
Line Deleted : user_pref("CT3176921.showToolbarPermission", "false");
Line Deleted : user_pref("CT3176921.smartbar.CTID", "CT3176921");
Line Deleted : user_pref("CT3176921.smartbar.Uninstall", "0");
Line Deleted : user_pref("CT3176921.smartbar.homepage", true);
Line Deleted : user_pref("CT3176921.smartbar.toolbarName", "express-files ");
Line Deleted : user_pref("CT3176921.toolbarBornServerTime", "16-3-2014");
Line Deleted : user_pref("CT3176921.toolbarCurrentServerTime", "16-3-2014");
Line Deleted : user_pref("CT3176921.toolbarInstallDate", "16-03-2014 20:13:38");
Line Deleted : user_pref("CT3176921.toolbarLoginClientTime", "Sun Mar 16 2014 20:13:37 GMT+0100");
Line Deleted : user_pref("CT3176921_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1394997215975,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");
Line Deleted : user_pref("Smartbar.ConduitHomepagesList", "hxxp://search.conduit.com/?UM=2&ctid=CT3176921&SearchSource=13&CUI=UN39285599272809511");
Line Deleted : user_pref("Smartbar.ConduitSearchEngineList", "express-files Customized Web Search");
Line Deleted : user_pref("Smartbar.ConduitSearchUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3176921&SearchSource=2&CUI=UN39285599272809511&UM=2&q=");
Line Deleted : user_pref("Smartbar.keywordURLSelectedCTID", "CT3176921");
Line Deleted : user_pref("browser.search.defaultenginename", "express-files Customized Web Search");
Line Deleted : user_pref("browser.search.selectedEngine", "express-files Customized Web Search");
Line Deleted : user_pref("browser.startup.homepage", "hxxp://search.conduit.com/?UM=2&ctid=CT3176921&SearchSource=13&CUI=UN39285599272809511");
Line Deleted : user_pref("keyword.URL", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3176921&SearchSource=2&CUI=UN39285599272809511&UM=2&q=");
Line Deleted : user_pref("plugin.state.npconduitfirefoxplugin", 2);
Line Deleted : user_pref("smartbar.addressBarOwnerCTID", "CT3176921");
Line Deleted : user_pref("smartbar.conduitHomepageList", "hxxp://search.conduit.com/?UM=2&ctid=CT3176921&SearchSource=13&CUI=UN39285599272809511");
Line Deleted : user_pref("smartbar.conduitSearchAddressUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3176921&SearchSource=2&CUI=UN39285599272809511&UM=2&q=");
Line Deleted : user_pref("smartbar.defaultSearchOwnerCTID", "CT3176921");
Line Deleted : user_pref("smartbar.homePageOwnerCTID", "CT3176921");
Line Deleted : user_pref("valueApps.CT3176921./9B+7E+x305", "2423");
Line Deleted : user_pref("valueApps.CT3176921./9B+7E+x305.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3176921./9B+7E,x305", "2423");
Line Deleted : user_pref("valueApps.CT3176921./9B+7E,x305.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3176921./9B+7E-x305", "2423");
Line Deleted : user_pref("valueApps.CT3176921./9B+7E-x305.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3176921./9B+7E.:2z527", "2423");
Line Deleted : user_pref("valueApps.CT3176921./9B+7E.:2z527.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3176921./9B+7E.x305", "2423");
Line Deleted : user_pref("valueApps.CT3176921./9B+7E.x305.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3176921./9B+7E/x305", "2423");
Line Deleted : user_pref("valueApps.CT3176921./9B+7E/x305.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3176921./9B+7E06CG5EL8:", "6E6D686E6A6B6E747478");
Line Deleted : user_pref("valueApps.CT3176921./9B+7E06CG5EL8:.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3176921./9B+7E06CG5EL;8I:K", "247E2D2F226A74736E747071747A7A7E242F4B49474F42357D5D5C3D");
Line Deleted : user_pref("valueApps.CT3176921./9B+7E06CG5EL;8I:K.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3176921./9B+7E0x305", "2423");
Line Deleted : user_pref("valueApps.CT3176921./9B+7E0x305.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3176921./9B+7E1x305", "2423");
Line Deleted : user_pref("valueApps.CT3176921./9B+7E1x305.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3176921./9B+7E2x305", "2423");
Line Deleted : user_pref("valueApps.CT3176921./9B+7E2x305.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3176921./9B+7E3x305", "2423");
Line Deleted : user_pref("valueApps.CT3176921./9B+7E3x305.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3176921./9B+7E4x305", "2423");
Line Deleted : user_pref("valueApps.CT3176921./9B+7E4x305.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3176921./9B+7E5x305", "2423");
Line Deleted : user_pref("valueApps.CT3176921./9B+7E5x305.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3176921./9B+7E6x305", "2423");
Line Deleted : user_pref("valueApps.CT3176921./9B+7E6x305.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3176921./9B+7E7x305", "2423");
Line Deleted : user_pref("valueApps.CT3176921./9B+7E7x305.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3176921./9B+7E8x305", "2423");
Line Deleted : user_pref("valueApps.CT3176921./9B+7E8x305.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3176921./9B+7E9x305", "2423");
Line Deleted : user_pref("valueApps.CT3176921./9B+7E9x305.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3176921./9B+7E:x305", "2423");
Line Deleted : user_pref("valueApps.CT3176921./9B+7E:x305.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3176921./9B+7E;x305", "2423");
Line Deleted : user_pref("valueApps.CT3176921./9B+7E;x305.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3176921./9B+7E<x305", "2423");
Line Deleted : user_pref("valueApps.CT3176921./9B+7E<x305.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3176921./9B+7E=x305", "2423");
Line Deleted : user_pref("valueApps.CT3176921./9B+7E=x305.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3176921./9B+7E>x305", "2423");
Line Deleted : user_pref("valueApps.CT3176921./9B+7E>x305.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3176921./9B+7E?x305", "2423");
Line Deleted : user_pref("valueApps.CT3176921./9B+7E?x305.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3176921./9B+7E@x305", "2423");
Line Deleted : user_pref("valueApps.CT3176921./9B+7E@x305.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3176921./9B+7EAx305", "2423");
Line Deleted : user_pref("valueApps.CT3176921./9B+7EAx305.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3176921./9B+7EBE3G=;D9N9=D", "372C2D326975762E3A3C7B3A39434A494841434B265146492965504656496571734D337D56545138505C");
Line Deleted : user_pref("valueApps.CT3176921./9B+7EBE3G=;D9N9=D.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3176921./9B+7EBx305", "2423");
Line Deleted : user_pref("valueApps.CT3176921./9B+7EBx305.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3176921./9B+7ECx305", "2423");
Line Deleted : user_pref("valueApps.CT3176921./9B+7ECx305.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3176921./9B+7EDx305", "2423");
Line Deleted : user_pref("valueApps.CT3176921./9B+7EDx305.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3176921./9B+7Etx305", "2423");
Line Deleted : user_pref("valueApps.CT3176921./9B+7Etx305.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3176921./9B-0?3G>D", "3E3E3B6D3F6F70767A77734677207A4D497B254E4E524F2A5623532A5657272D2A31315D");
Line Deleted : user_pref("valueApps.CT3176921./9B-0?3G>D.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3176921./9B-0?3G@6:5;", "");
Line Deleted : user_pref("valueApps.CT3176921./9B-0?3G@6:5;.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3176921./9B-0?3GFA7EF", "2B2E2C3D");
Line Deleted : user_pref("valueApps.CT3176921./9B-0?3GFA7EF.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3176921./9B-3=3ECCJA=F>", "247E333D2C452F4135276F297B7E7D21202F26313E4249357D37382F3A494D5D513F283338435D6554695B65546D57695D5D686365533C70766C66755E");
Line Deleted : user_pref("valueApps.CT3176921./9B-3=3ECCJA=F>.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3176921./9B/>01=9A6K6<IM;KRIE@PDAWM", "6E6A68707374757677");
Line Deleted : user_pref("valueApps.CT3176921./9B/>01=9A6K6<IM;KRIE@PDAWM.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3176921./9B3=>@44I48?", "372C2D3269757633423633414847203E3D474E4D4C45474F2A554A4D2D5858585E4B554E366352564F");
Line Deleted : user_pref("valueApps.CT3176921./9B3=>@44I48?.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3176921./9B5BA==9CJAG", "686A6E726D6B6E727A73474479764C49494F7E794E");
Line Deleted : user_pref("valueApps.CT3176921./9B5BA==9CJAG.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3176921./9B6B11G4C56B>F;P;ANR@P", "6E6D686E6A6B6E74756F72787B");
Line Deleted : user_pref("valueApps.CT3176921./9B6B11G4C56B>F;P;ANR@P.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3176921./9B90E@.3C;7B=?OFB>>RHIQS", "393F352F3E");
Line Deleted : user_pref("valueApps.CT3176921./9B90E@.3C;7B=?OFB>>RHIQS.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3176921./9B9643G3/9E", "6A");
Line Deleted : user_pref("valueApps.CT3176921./9B9643G3/9E.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3176921./9B;45>:BI9I7IE", "2B2E2C3D");
Line Deleted : user_pref("valueApps.CT3176921./9B;45>:BI9I7IE.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3176921./9B<:222H64<", "393F352F3E");
Line Deleted : user_pref("valueApps.CT3176921./9B<:222H64<.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3176921./9B<:222H64<L8DAJ", "6D70706E7674727976722A7972727C7B757B22");
Line Deleted : user_pref("valueApps.CT3176921./9B<:222H64<L8DAJ.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3176921./9B=+03EH8H8J?:", "4443");
Line Deleted : user_pref("valueApps.CT3176921./9B=+03EH8H8J?:.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3176921./9B?+E2A52D8", "372C2D326975762E3A3C7B3A39434A494841434B2651464929655046566470727951555E5E52");
Line Deleted : user_pref("valueApps.CT3176921./9B?+E2A52D8.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3176921./9B?B0D:8AJ62<H", "6D");
Line Deleted : user_pref("valueApps.CT3176921./9B?B0D:8AJ62<H.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3176921./9BA@0<0BI6A7GN:6@L?", "6C");
Line Deleted : user_pref("valueApps.CT3176921./9BA@0<0BI6A7GN:6@L?.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3176921.PG_ENABLE", "74727565");
Line Deleted : user_pref("valueApps.CT3176921.PG_ENABLE.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3176921._key_cl_active", "65363335323230392D303362362D346235612D383163382D303062613430353436313663");
Line Deleted : user_pref("valueApps.CT3176921._key_cl_active.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3176921.cbfirsttime", "53756E204D617220313620323031342032303A31333A353720474D542B30313030");
Line Deleted : user_pref("valueApps.CT3176921.cbfirsttime.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3176921.mam_gk_appStateReportTime", "31333934393937323236373038");
Line Deleted : user_pref("valueApps.CT3176921.mam_gk_appStateReportTime.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3176921.mam_gk_appState_Clarity_Active", "6F6E");
Line Deleted : user_pref("valueApps.CT3176921.mam_gk_appState_Clarity_Active.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3176921.mam_gk_appState_CouponBuddy", "6F6E");
Line Deleted : user_pref("valueApps.CT3176921.mam_gk_appState_CouponBuddy.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3176921.mam_gk_appState_Easytobook", "6F6E");
Line Deleted : user_pref("valueApps.CT3176921.mam_gk_appState_Easytobook.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3176921.mam_gk_appState_Easytobook_targeted", "6F6E");
Line Deleted : user_pref("valueApps.CT3176921.mam_gk_appState_Easytobook_targeted.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3176921.mam_gk_appState_PriceGong", "6F6E");
Line Deleted : user_pref("valueApps.CT3176921.mam_gk_appState_PriceGong.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3176921.mam_gk_appsConfig.storedInFile", true);
Line Deleted : user_pref("valueApps.CT3176921.mam_gk_appsDefaultEnabled", "74727565");
Line Deleted : user_pref("valueApps.CT3176921.mam_gk_appsDefaultEnabled.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3176921.mam_gk_calledSetupService", "31");
Line Deleted : user_pref("valueApps.CT3176921.mam_gk_calledSetupService.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3176921.mam_gk_currentVersion", "312E31332E302E3137");
Line Deleted : user_pref("valueApps.CT3176921.mam_gk_currentVersion.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3176921.mam_gk_existingUsersRecoveryDone", "31");
Line Deleted : user_pref("valueApps.CT3176921.mam_gk_existingUsersRecoveryDone.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3176921.mam_gk_first_time", "31");
Line Deleted : user_pref("valueApps.CT3176921.mam_gk_first_time.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3176921.mam_gk_lastLoginTime", "31333934393937323237333637");
Line Deleted : user_pref("valueApps.CT3176921.mam_gk_lastLoginTime.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3176921.mam_gk_localization.storedInFile", true);
Line Deleted : user_pref("valueApps.CT3176921.mam_gk_mamEnabled", "74727565");
Line Deleted : user_pref("valueApps.CT3176921.mam_gk_mamEnabled.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3176921.mam_gk_migrated_from_ls", "31");
Line Deleted : user_pref("valueApps.CT3176921.mam_gk_migrated_from_ls.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3176921.mam_gk_new_welcome_experience", "31");
Line Deleted : user_pref("valueApps.CT3176921.mam_gk_new_welcome_experience.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3176921.mam_gk_settings1.13.0.17.storedInFile", true);
Line Deleted : user_pref("valueApps.CT3176921.mam_gk_showWelcomeGadget", "66616C7365");
Line Deleted : user_pref("valueApps.CT3176921.mam_gk_showWelcomeGadget.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3176921.mam_gk_stamp", "35345F30");
Line Deleted : user_pref("valueApps.CT3176921.mam_gk_stamp.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3176921.mam_gk_userBornDate", "4E2F41");
Line Deleted : user_pref("valueApps.CT3176921.mam_gk_userBornDate.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3176921.mam_gk_userId", "37313632646332332D303735632D343336342D383332632D366665393039613166616539");
Line Deleted : user_pref("valueApps.CT3176921.mam_gk_userId.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3176921.mam_gk_user_approval_interacted", "31");
Line Deleted : user_pref("valueApps.CT3176921.mam_gk_user_approval_interacted.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3176921.mam_gk_welcomeDialogMode", "31");
Line Deleted : user_pref("valueApps.CT3176921.mam_gk_welcomeDialogMode.storedInFile", false);

-\\ Google Chrome v

[ File : C:\Documents and Settings\oem\Local Settings\Data aplikací\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [28371 octets] - [16/03/2014 20:15:20]
AdwCleaner[S0].txt - [29181 octets] - [16/03/2014 20:32:59]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [29242 octets] ##########

Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Infekce - trojský kůň

#7 Příspěvek od vyosek »

:arrow: Stahnete Zoek.exe http://hijackthis.nl/smeenk/ a ulozte jej na plochu
  • Pokud pouzivate Win Vista ci W7, kliknete na Zoek pravym a dejte Run As Administrator ci Spustit jako spravce
  • Do okna vlozte skript nize
  • Kód: Vybrat vše

    autoclean;
    emptyclsid;
    iedefaults;
    FFdefaults;
    CHRdefaults;
    emptyalltemp;
    resethosts;
    
  • Nasledne kliknete na Run Script
  • PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.

apache.davidson
Návštěvník
Návštěvník
Příspěvky: 26
Registrován: 21 Led 2009 17:50

Re: Infekce - trojský kůň

#8 Příspěvek od apache.davidson »

Zoek.exe v5.0.0.0 Updated 07-March-2014
Tool run by oem on po 17.03.2014 at 10:13:37,35.
Systém Microsoft Windows XP Professional 5.1.2600 Service Pack 3 x86
Running in: Normal Mode Internet Access Detected
Launched: C:\Documents and Settings\oem\Dokumenty\Stažené soubory\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

17.3.2014 10:14:47 Zoek.exe System Restore Point Created Succesfully.

==== Suspicious Entries Found ======================

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"65533:TCP"="65533:TCP:*:Enabled:Services"
"52344:TCP"="52344:TCP:*:Enabled:Services"
"3389:TCP"="3389:TCP:*:Enabled:Remote Desktop"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"1900:UDP"="1900:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22007"
"2869:TCP"="2869:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22008"
"65533:TCP"="65533:TCP:*:Enabled:Services"
"52344:TCP"="52344:TCP:*:Enabled:Services"
"3389:TCP"="3389:TCP:*:Enabled:Remote Desktop"

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-1177238915-1957994488-2147156445-1005\Software\Microsoft\Internet Explorer\SearchScopes\{067F9BF7-592E-4B9A-ADAC-0FD09B16AB30} deleted successfully
HKEY_USERS\S-1-5-21-1177238915-1957994488-2147156445-1005\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{41564952-412D-5637-4300-7A786E7484D7} deleted successfully
HKEY_USERS\S-1-5-21-1177238915-1957994488-2147156445-1005\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2318C2B1-4965-11D4-9B18-009027A5CD4F} deleted successfully
HKEY_USERS\S-1-5-21-1177238915-1957994488-2147156445-1005\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2318C2B1-4965-11D4-9B18-009027A5CD4F} deleted successfully
HKEY_CLASSES_ROOT\CLSID\{41564952-412D-5637-4300-7A786E7484D7} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{41564952-412D-5637-4300-7A786E7484D7} deleted successfully

==== Deleting CLSID Registry Values ======================

HKEY_USERS\S-1-5-21-1177238915-1957994488-2147156445-1005\Software\Microsoft\Internet Explorer\Approved Extensions\{4D2D3B0F-69BE-477A-90F5-FDDB05357975} deleted successfully
HKEY_USERS\S-1-5-21-1177238915-1957994488-2147156445-1005\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{2318C2B1-4965-11D4-9B18-009027A5CD4F} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{41564952-412D-5637-4300-7A786E7484D7} deleted successfully
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\{AEB6717E-7E19-11d0-97EE-00C04FD91972} deleted successfully
HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\jqs@sun.com deleted successfully

==== Deleting Services ======================

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\APNMCP deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\APNMCP deleted successfully

==== Deleting Files \ Folders ======================

C:\Program Files\express-files deleted
C:\Documents and Settings\oem\daemonprocess.txt deleted
C:\Documents and Settings\oem\.android deleted
C:\Program Files\MediaViewV1 deleted
C:\Program Files\MediaViewerV1 deleted
C:\Program Files\Common Files\DVDVideoSoft\bin deleted
C:\Program Files\Yahoo! deleted
C:\Program Files\AskPartnerNetwork deleted
C:\DOCUME~1\ALLUSE~1\DATAAP~1\AskPartnerNetwork deleted
C:\DOCUME~1\ALLUSE~1\DATAAP~1\APN deleted
C:\DOCUME~1\ALLUSE~1\DATAAP~1\hpe1B.dll deleted
C:\DOCUME~1\ALLUSE~1\DATAAP~1\ICQ deleted
C:\WINDOWS\tasks\Go for FilesUpdate.job deleted

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions]
"ext@MediaViewV1alpha7934.net"="C:\Program Files\MediaViewV1\MediaViewV1alpha7934\ff" []
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]
"{17E113E6-CD0E-4045-B154-65F0E57959EF}"="C:\Program Files\IMPI\Firefox" [16.03.2013 17:01]

==== Chrome Look ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
anlpooegpgdoigipgdcaanhfckhmlkea - C:\Program Files\MediaViewV1\MediaViewV1alpha7934\ch\MediaViewV1alpha7934.crx[]
bejbohlohkkgompgecdcbbglkpjfjgdj - C:\DOCUME~1\oem\LOCALS~1\Temp\crx14.tmp[]
pacgpkgadgmibnhpdidcnfafllnmeomc - C:\DOCUME~1\oem\LOCALS~1\Temp\ccex.crx[]

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://home.tb.ask.com/index.jhtml?n=77 ... 1CD10A7B2B"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AboutURLs]
"Tabs"="C:\\Documents and Settings\\All Users\\Data aplikacˇ\\ICQ\\ICQNewTab\\newTab.html"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
No DefaultScope Set For HKCU

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AboutURLs]
"Tabs"="res://ieframe.dll/tabswelcome.htm"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} @ieframe.dll,-12512 Url="http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC"
{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchT ... {startPage}"

==== Reset Google Chrome ======================

Nothing found to reset

==== Deleting CLSID Registry Keys ======================


==== Deleting CLSID Registry Values ======================

HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\ext@MediaViewV1alpha7934.net deleted successfully

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions\anlpooegpgdoigipgdcaanhfckhmlkea deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions\bejbohlohkkgompgecdcbbglkpjfjgdj deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc deleted successfully

==== Empty IE Cache ======================

C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5 emptied successfully
C:\Documents and Settings\LocalService\Local Settings\temp\Temporary Internet Files\Content.IE5 emptied successfully
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5 emptied successfully
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot
C:\Documents and Settings\oem\Local Settings\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot

==== Empty FireFox Cache ======================

No FireFox Profiles found

==== Empty Chrome Cache ======================

No Chrome User Data found

==== Empty All Flash Cache ======================

No Flash Cache Found

==== Empty All Java Cache ======================

No Java Cache Found

==== C:\zoek_backup content ======================

C:\zoek_backup (files=408 folders=138 27749202 bytes)

==== Empty Temp Folders ======================

C:\WINDOWS\Temp will be emptied at reboot

==== After Reboot ======================

==== Reset Hosts File ======================

Hosts File Reset Successfully

==== Empty Temp Folders ======================

C:\WINDOWS\Temp successfully emptied
C:\DOCUME~1\oem\LOCALS~1\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\RECYCLER successfully emptied

==== Deleting Files / Folders ======================

"C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat" not found
"C:\Documents and Settings\oem\Local Settings\Temporary Internet Files\Content.IE5\index.dat" not found

==== EOF on po 17.03.2014 at 10:27:39,85 ======================

Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Infekce - trojský kůň

#9 Příspěvek od vyosek »

"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.

apache.davidson
Návštěvník
Návštěvník
Příspěvky: 26
Registrován: 21 Led 2009 17:50

Re: Infekce - trojský kůň

#10 Příspěvek od apache.davidson »

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 13-03-2014 01
Ran by oem (administrator) on S-359835CC70E24 on 18-03-2014 18:26:43
Running from C:\Documents and Settings\oem\Dokumenty\Stažené soubory
Systém Microsoft Windows XP Professional Service Pack 3 (X86) OS Language: Czech
Internet Explorer Version 7
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Realtek Semiconductor Corp.) C:\WINDOWS\RTHDCPL.EXE
(Realtek Semiconductor Corp.) C:\WINDOWS\SOUNDMAN.EXE
(Microsoft Corporation) C:\WINDOWS\ehome\ehtray.exe
(artArmin) C:\Program Files\extras\Vista Drive Icon\DrvIcon.exe
(artArmin) C:\Program Files\extras\Vista Drive Icon\DrvIcon.exe
(Intel Corporation) C:\WINDOWS\system32\igfxtray.exe
(Intel Corporation) C:\WINDOWS\system32\hkcmd.exe
(Intel Corporation) C:\WINDOWS\system32\igfxpers.exe
(sonix) C:\WINDOWS\PLFSetL.exe
() C:\WINDOWS\PLFSetI.exe
(Intel Corporation) C:\WINDOWS\system32\igfxsrvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
() C:\Documents and Settings\oem\Local Settings\Data aplikací\Seznam.cz\postak.exe
(Microsoft Corporation) C:\Program Files\Messenger\msmsgs.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(Microsoft Corporation) C:\WINDOWS\eHome\ehRecvr.exe
(Microsoft Corporation) C:\WINDOWS\eHome\ehSched.exe
() C:\Program Files\IMPI\ExtensionUpdaterService.exe
(Sun Microsystems, Inc.) C:\Program Files\Java\jre6\bin\jqs.exe
(Microsoft Corporation) C:\WINDOWS\ehome\mcrdsvc.exe
(Microsoft Corporation) C:\WINDOWS\eHome\ehmsas.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE
(Microsoft Corporation) C:\WINDOWS\system32\wscntfy.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDCPL] - C:\WINDOWS\RTHDCPL.EXE [16861184 2008-04-10] (Realtek Semiconductor Corp.)
HKLM\...\Run: [SoundMan] - C:\WINDOWS\SOUNDMAN.EXE [86016 2006-07-21] (Realtek Semiconductor Corp.)
HKLM\...\Run: [AlcWzrd] - C:\WINDOWS\ALCWZRD.EXE [2808832 2006-05-04] (RealTek Semicoductor Corp.)
HKLM\...\Run: [AlwaysReady Power Message APP] - C:\WINDOWS\ARPWRMSG.EXE [77312 2008-12-26] (Microsoft)
HKLM\...\Run: [ehTray] - C:\WINDOWS\ehome\ehtray.exe [64512 2005-08-05] (Microsoft Corporation)
HKLM\...\Run: [Vista D I] - C:\Program Files\extras\Vista Drive Icon\DrvIcon.exe [49152 2008-04-13] (artArmin)
HKLM\...\Run: [DrvIcon] - C:\Program Files\extras\Vista Drive Icon\DrvIcon.exe [49152 2008-04-13] (artArmin)
HKLM\...\Run: [PLFSetL] - C:\WINDOWS\PLFSetL.exe [94208 2007-07-05] (sonix)
HKLM\...\Run: [PLFSetI] - C:\WINDOWS\PLFSetI.exe [200704 2007-10-23] ()
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [689744 2014-03-13] (Avira Operations GmbH & Co. KG)
HKLM\...\Runonce: [AvgUninstallURL] - cmd.exe /c start http://www.avg.cz/cz.special-uninstalla ... er=9.0.894
HKU\.DEFAULT\...\RunOnce: [AutoLaunch] - C:\Program Files\Lavasoft\Ad-Aware\AutoLaunch.exe monthly
HKU\S-1-5-21-1177238915-1957994488-2147156445-1005\...\Run: [Seznam Postak] - C:\Documents and Settings\oem\Local Settings\Data aplikací\Seznam.cz\postak.exe [489584 2011-01-19] ()
HKU\S-1-5-21-1177238915-1957994488-2147156445-1005\...\Run: [MSMSGS] - C:\Program Files\Messenger\msmsgs.exe [1695232 2008-04-14] (Microsoft Corporation)
Startup: C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\Bluetooth.lnk
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={searchT ... {startPage}
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={searchT ... {startPage}
BHO: IMPI - {17E113E6-CD0E-4045-B154-65F0E57959EF} - C:\Program Files\IMPI\Extension32.dll ()
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO: JQSIEStartDetectorImpl Class - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll (Sun Microsystems, Inc.)
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Winsock: Catalog9 01 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 02 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 24 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)

Hosts: Hosts file not detected in the default directory
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Documents and Settings\oem\Data aplikací\Mozilla\Firefox\Profiles\acmtm6o3.default
FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF Plugin: @divx.com/DivX Browser Plugin,version=1.0.0 - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX,Inc.)
FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin: @microsoft.com/WPF,version=3.5 - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @real.com/nppl3260;version=6.0.11.2852 - C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll No File
FF Plugin: @real.com/nppl3260;version=6.0.12.46 - C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll No File
FF Plugin: @real.com/nprpjplug;version=6.0.12.1662 - C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll No File
FF Plugin: @real.com/nprpjplug;version=6.0.12.46 - C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll No File
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll (Sun Microsystems, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Documents and Settings\oem\Data aplikací\Mozilla\Firefox\Profiles\acmtm6o3.default\searchplugins\express-files-customized-web-search.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\heureka-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\jyxo-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\seznam-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\slunecnice-cz.xml
FF Extension: Lišta Centrum.cz - C:\Documents and Settings\oem\Data aplikací\Mozilla\Firefox\Profiles\acmtm6o3.default\Extensions\toolbar@centrumholdings(2).com [2014-01-17]
FF Extension: WebSite Recommendation - C:\Documents and Settings\oem\Data aplikací\Mozilla\Firefox\Profiles\acmtm6o3.default\Extensions\WebSiteRecommendation@weliketheweb.com [2013-12-24]
FF Extension: Microsoft .NET Framework Assistant - C:\Documents and Settings\oem\Data aplikací\Mozilla\Firefox\Profiles\acmtm6o3.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b} [2011-04-10]
FF Extension: Seznam lištička - C:\Documents and Settings\oem\Data aplikací\Mozilla\Firefox\Profiles\acmtm6o3.default\Extensions\{ea614400-e918-4741-9a97-7a972ff7c30b} [2013-03-29]
FF Extension: Avira SearchFree Toolbar plus Web Protection - C:\Documents and Settings\oem\Data aplikací\Mozilla\Firefox\Profiles\acmtm6o3.default\Extensions\toolbar_AVIRA-V7C@apn.ask.com.xpi [2013-12-20]
FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Documents and Settings\oem\Data aplikací\Mozilla\Firefox\Profiles\acmtm6o3.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi [2012-11-22]
FF Extension: No Name - C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2014-03-03]
FF Extension: No Name - C:\Program Files\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1} [2014-03-03]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ []
FF HKLM\...\Firefox\Extensions: [{17E113E6-CD0E-4045-B154-65F0E57959EF}] - C:\Program Files\IMPI\Firefox
FF Extension: IMPI - C:\Program Files\IMPI\Firefox [2013-03-16]

Chrome:
=======
CHR HomePage: hxxp://www.google.com/
CHR RestoreOnStartup: "hxxp://www.google.com/"
CHR Extension: (No Name) - C:\Documents and Settings\oem\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\cknkimpcfkpmmikggddpidpmaljigegp [2012-12-19]
CHR Extension: (RealDownloader) - C:\Documents and Settings\oem\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji [2012-12-18]
CHR Extension: (IMPI) - C:\Documents and Settings\oem\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\ncdfeinlpefandfngbdmdgjgepebkjap [2013-03-16]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

========================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [440400 2014-03-13] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [440400 2014-03-13] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [1017424 2014-03-13] (Avira Operations GmbH & Co. KG)
S2 gupdate1ca88a037f522fc; C:\Program Files\Google\Update\GoogleUpdate.exe [133104 2009-12-29] (Google Inc.)
R2 IMPI Updater; C:\Program Files\IMPI\ExtensionUpdaterService.exe [185856 2013-02-05] ()
R2 JavaQuickStarterService; C:\Program Files\Java\jre6\bin\jqs.exe [153376 2011-02-02] (Sun Microsystems, Inc.)
R2 McrdSvc; C:\WINDOWS\ehome\mcrdsvc.exe [99328 2005-08-05] (Microsoft Corporation)
S3 Sony PC Companion; C:\Program Files\Sony\Sony PC Companion\PCCService.exe [155824 2013-02-04] (Avanquest Software)
S2 Lavasoft Ad-Aware Service; "C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe" [X]
S2 Update Kozaka; "C:\Program Files\Kozaka\updateKozaka.exe" [X]
S2 Util Kozaka; "C:\Program Files\Kozaka\bin\utilKozaka.exe" [X]

==================== Drivers (Whitelisted) ====================

R3 aracpi; C:\WINDOWS\System32\DRIVERS\aracpi.sys [22784 2008-12-26] (Microsoft Corporation)
R3 arhidfltr; C:\WINDOWS\System32\DRIVERS\arhidfltr.sys [19200 2008-12-26] (Microsoft Corporation)
R3 arkbcfltr; C:\WINDOWS\System32\DRIVERS\arkbcfltr.sys [5376 2008-12-26] (Microsoft Corporation)
R3 armoucfltr; C:\WINDOWS\System32\DRIVERS\armoucfltr.sys [4992 2008-12-26] (Microsoft Corporation)
R3 ARPolicy; C:\WINDOWS\System32\DRIVERS\arpolicy.sys [10112 2008-12-26] (Microsoft Corporation)
S3 AVerFx2hbtv; C:\WINDOWS\System32\drivers\AVerFx2hbtv.sys [273152 2008-07-21] (AVerMedia TECHNOLOGIES, Inc.)
R2 avgntflt; C:\WINDOWS\System32\DRIVERS\avgntflt.sys [90400 2014-03-08] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\WINDOWS\System32\DRIVERS\avipbb.sys [135648 2014-03-08] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\WINDOWS\System32\DRIVERS\avkmgr.sys [37352 2014-03-08] (Avira Operations GmbH & Co. KG)
S3 btaudio; C:\WINDOWS\System32\drivers\btaudio.sys [534312 2009-09-03] (Broadcom Corporation.)
R3 BTDriver; C:\WINDOWS\System32\DRIVERS\btport.sys [37160 2009-09-03] (Broadcom Corporation.)
R3 BTKRNL; C:\WINDOWS\System32\DRIVERS\btkrnl.sys [991136 2009-09-03] (Broadcom Corporation.)
S3 BTWDNDIS; C:\WINDOWS\System32\DRIVERS\btwdndis.sys [156816 2009-09-03] (Broadcom Corporation.)
S3 BTWUSB; C:\WINDOWS\System32\Drivers\btwusb.sys [47272 2009-09-03] (Broadcom Corporation.)
S3 CCDECODE; C:\WINDOWS\System32\DRIVERS\CCDECODE.sys [17024 2008-04-13] (Microsoft Corporation)
S3 grmnusb; C:\WINDOWS\System32\drivers\grmnusb.sys [9344 2009-04-17] (GARMIN Corp.)
S3 HPZid412; C:\WINDOWS\System32\DRIVERS\HPZid412.sys [49664 2006-04-12] (HP)
S3 HPZipr12; C:\WINDOWS\System32\DRIVERS\HPZipr12.sys [16496 2006-04-12] (HP)
S3 HPZius12; C:\WINDOWS\System32\DRIVERS\HPZius12.sys [21568 2006-04-12] (HP)
R3 L1c; C:\WINDOWS\System32\DRIVERS\l1c51x86.sys [45056 2009-09-04] (Atheros Communications, Inc.)
S3 L6PODX3LV; C:\WINDOWS\System32\Drivers\L6PODX3LV.sys [571264 2010-03-09] (Line 6)
S3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\mbamswissarmy.sys [40776 2012-12-19] (Malwarebytes Corporation)
S3 MPE; C:\WINDOWS\System32\DRIVERS\MPE.sys [15232 2008-04-13] (Microsoft Corporation)
S3 NdisIP; C:\WINDOWS\System32\DRIVERS\NdisIP.sys [10880 2008-04-13] (Microsoft Corporation)
R3 NETw5x32; C:\WINDOWS\System32\DRIVERS\NETw5x32.sys [3626112 2008-04-20] (Intel Corporation)
R1 nvport; C:\WINDOWS\system32\Drivers\nvport.sys [4608 2006-05-05] (NVIDIA Corporation.)
S3 pfc; C:\WINDOWS\System32\drivers\pfc.sys [9856 2006-03-29] (Padus, Inc.)
S3 s1018obex; C:\WINDOWS\System32\DRIVERS\s1018obex.sys [104744 2009-03-25] (MCCI Corporation)
R1 ssmdrv; C:\WINDOWS\System32\DRIVERS\ssmdrv.sys [28520 2014-03-08] (Avira GmbH)
S1 wceusbsh; C:\WINDOWS\System32\DRIVERS\wceusbsh.sys [31744 2008-04-14] (Microsoft Corporation)
S4 IntelIde; No ImagePath
S0 Lbd; system32\DRIVERS\Lbd.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-03-18 18:26 - 2014-03-18 18:26 - 00000000 ____D () C:\FRST
2014-03-18 18:25 - 2014-03-18 18:25 - 00029696 _____ () C:\Documents and Settings\oem\Local Settings\Data aplikací\MSGBOX.EXE
2014-03-18 18:25 - 2014-03-18 18:25 - 00015327 _____ () C:\Documents and Settings\oem\Plocha\LM.bat
2014-03-17 10:25 - 2014-03-17 10:13 - 00024064 _____ () C:\WINDOWS\zoek-delete.exe
2014-03-17 10:14 - 2014-03-17 10:27 - 00008420 _____ () C:\zoek-results.log
2014-03-17 10:13 - 2014-03-17 10:22 - 00000000 ____D () C:\zoek_backup
2014-03-17 10:12 - 2014-03-17 10:12 - 01285120 _____ () C:\Documents and Settings\oem\Plocha\zoek.exe
2014-03-16 21:15 - 2014-03-17 20:53 - 00001346 _____ () C:\WINDOWS\KB973768.log
2014-03-16 20:15 - 2014-03-16 20:34 - 00000000 ____D () C:\AdwCleaner
2014-03-16 20:07 - 2014-03-16 20:07 - 00000000 ____D () C:\WINDOWS\ERUNT
2014-03-16 20:03 - 2014-03-16 20:04 - 01950720 _____ () C:\Documents and Settings\oem\Plocha\adwcleaner.exe
2014-03-16 20:03 - 2014-03-16 20:04 - 01037734 _____ (Thisisu) C:\Documents and Settings\oem\Plocha\JRT.exe
2014-03-16 20:01 - 2014-03-16 20:01 - 00000917 _____ () C:\Documents and Settings\oem\Plocha\Revo Uninstaller.lnk
2014-03-16 20:01 - 2014-03-16 20:01 - 00000000 ____D () C:\Program Files\VS Revo Group
2014-03-16 12:05 - 2014-03-16 12:05 - 00000476 __RSH () C:\Documents and Settings\All Users\ntuser.pol
2014-03-16 12:05 - 2014-03-16 12:05 - 00000000 ___HD () C:\WINDOWS\system32\GroupPolicy
2014-03-13 10:41 - 2014-03-18 11:28 - 00000218 _____ () C:\WINDOWS\Tasks\Přihlášení k oznamování konce poskytování služeb pro Microsoft Windows XP.job
2014-03-13 10:41 - 2014-03-14 17:08 - 00000212 _____ () C:\WINDOWS\Tasks\Měsíční oznamování konce poskytování služeb pro Microsoft Windows XP.job
2014-03-12 18:46 - 2014-03-12 18:46 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB2934207$
2014-03-12 18:46 - 2014-03-12 18:46 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB2929961$
2014-03-12 18:45 - 2014-03-12 18:45 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB2930275$
2014-03-12 14:43 - 2014-02-27 00:28 - 00013312 ____N (Microsoft Corporation) C:\WINDOWS\system32\xp_eos.exe
2014-03-12 14:43 - 2014-02-27 00:28 - 00013312 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\xp_eos.exe
2014-03-11 17:22 - 2014-03-12 16:00 - 1570983936 _____ () C:\Documents and Settings\oem\Plocha\Skinwalkers_RG_All_Films.avi
2014-03-11 17:16 - 2014-03-17 18:36 - 00000000 ____D () C:\Documents and Settings\oem\Plocha\Sioux City
2014-03-08 13:57 - 2014-03-08 15:54 - 1022466048 _____ () C:\Documents and Settings\oem\Plocha\Blackthorn-2011-western-cz-dabing.avi
2014-03-08 13:46 - 2014-03-08 13:46 - 00000000 ____D () C:\Documents and Settings\oem\Data aplikací\Avira
2014-03-08 13:41 - 2014-03-08 13:41 - 00000000 ____D () C:\Documents and Settings\LocalService\Data aplikací\Avira
2014-03-08 13:38 - 2014-03-08 13:38 - 00000000 ____D () C:\Program Files\Avira
2014-03-08 13:38 - 2014-03-08 13:33 - 00135648 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avipbb.sys
2014-03-08 13:38 - 2014-03-08 13:33 - 00090400 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avgntflt.sys
2014-03-05 16:30 - 2014-03-16 13:00 - 00000000 ____D () C:\Documents and Settings\oem\Plocha\lakotah
2014-03-05 13:38 - 2014-03-05 16:21 - 1351065230 _____ () C:\Documents and Settings\oem\Plocha\Nespoutany-Django-(2012)cz.avi
2014-03-03 16:18 - 2014-03-03 16:18 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-03-03 15:58 - 2014-03-03 15:58 - 00000724 _____ () C:\Documents and Settings\All Users\Plocha\Mozilla Firefox.lnk
2014-03-02 17:51 - 2014-03-02 17:51 - 00000000 ____D () C:\8d1a553798708ee6b59d7c51f46e
2014-02-27 14:27 - 2014-02-27 14:32 - 30707571 _____ () C:\Documents and Settings\oem\Plocha\wounded-knee_lakota-indians.wmv
2014-02-16 15:28 - 2014-03-02 17:57 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB2916036$
2014-02-16 15:28 - 2014-03-02 17:57 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB2909212$

==================== One Month Modified Files and Folders =======

2014-03-18 18:26 - 2014-03-18 18:26 - 00000000 ____D () C:\FRST
2014-03-18 18:26 - 2011-04-14 14:21 - 00000000 ____D () C:\Documents and Settings\oem\Dokumenty\Stažené soubory
2014-03-18 18:25 - 2014-03-18 18:25 - 00029696 _____ () C:\Documents and Settings\oem\Local Settings\Data aplikací\MSGBOX.EXE
2014-03-18 18:25 - 2014-03-18 18:25 - 00015327 _____ () C:\Documents and Settings\oem\Plocha\LM.bat
2014-03-18 18:25 - 2009-10-20 21:38 - 00000000 ___HD () C:\Documents and Settings\oem\Local Settings\Data aplikací
2014-03-18 18:25 - 2009-10-20 21:38 - 00000000 ____D () C:\Documents and Settings\oem\Plocha
2014-03-18 18:17 - 2012-05-02 18:14 - 00000914 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2014-03-18 18:00 - 2013-02-14 14:13 - 00000940 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-03-18 18:00 - 2013-02-14 14:13 - 00000936 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-03-18 17:01 - 2009-10-02 10:34 - 01566532 _____ () C:\WINDOWS\WindowsUpdate.log
2014-03-18 11:30 - 2009-10-02 10:32 - 00000000 ____D () C:\WINDOWS\Registration
2014-03-18 11:29 - 2009-10-02 12:19 - 00000159 _____ () C:\WINDOWS\wiadebug.log
2014-03-18 11:29 - 2009-10-02 12:19 - 00000049 _____ () C:\WINDOWS\wiaservc.log
2014-03-18 11:28 - 2014-03-13 10:41 - 00000218 _____ () C:\WINDOWS\Tasks\Přihlášení k oznamování konce poskytování služeb pro Microsoft Windows XP.job
2014-03-18 11:28 - 2012-12-18 17:16 - 00000274 _____ () C:\WINDOWS\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-1177238915-1957994488-2147156445-1005.job
2014-03-18 11:28 - 2009-10-02 10:47 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-03-18 11:28 - 2001-10-25 14:00 - 00002206 _____ () C:\WINDOWS\system32\wpa.dbl
2014-03-17 20:53 - 2014-03-16 21:15 - 00001346 _____ () C:\WINDOWS\KB973768.log
2014-03-17 20:53 - 2009-10-20 21:38 - 00000178 ___SH () C:\Documents and Settings\oem\ntuser.ini
2014-03-17 20:53 - 2009-10-02 10:47 - 00032422 _____ () C:\WINDOWS\SchedLgU.Txt
2014-03-17 20:52 - 2012-11-17 11:54 - 00000000 ____D () C:\Documents and Settings\oem\Data aplikací\uTorrent
2014-03-17 20:52 - 2009-10-20 21:38 - 00000000 ____D () C:\Documents and Settings\oem
2014-03-17 18:36 - 2014-03-11 17:16 - 00000000 ____D () C:\Documents and Settings\oem\Plocha\Sioux City
2014-03-17 10:27 - 2014-03-17 10:14 - 00008420 _____ () C:\zoek-results.log
2014-03-17 10:22 - 2014-03-17 10:13 - 00000000 ____D () C:\zoek_backup
2014-03-17 10:22 - 2012-01-09 11:58 - 00000000 ____D () C:\Program Files\Common Files\DVDVideoSoft
2014-03-17 10:22 - 2009-10-02 12:14 - 00000000 __RHD () C:\Documents and Settings\All Users\Data aplikací
2014-03-17 10:13 - 2014-03-17 10:25 - 00024064 _____ () C:\WINDOWS\zoek-delete.exe
2014-03-17 10:12 - 2014-03-17 10:12 - 01285120 _____ () C:\Documents and Settings\oem\Plocha\zoek.exe
2014-03-16 20:34 - 2014-03-16 20:15 - 00000000 ____D () C:\AdwCleaner
2014-03-16 20:33 - 2009-10-20 21:38 - 00000000 __RHD () C:\Documents and Settings\oem\Data aplikací
2014-03-16 20:33 - 2009-10-02 10:47 - 00000000 ___HD () C:\Documents and Settings\LocalService\Local Settings\Data aplikací
2014-03-16 20:32 - 2009-10-02 12:14 - 00000000 ___RD () C:\Documents and Settings\All Users\Nabídka Start\Programy
2014-03-16 20:07 - 2014-03-16 20:07 - 00000000 ____D () C:\WINDOWS\ERUNT
2014-03-16 20:04 - 2014-03-16 20:03 - 01950720 _____ () C:\Documents and Settings\oem\Plocha\adwcleaner.exe
2014-03-16 20:04 - 2014-03-16 20:03 - 01037734 _____ (Thisisu) C:\Documents and Settings\oem\Plocha\JRT.exe
2014-03-16 20:01 - 2014-03-16 20:01 - 00000917 _____ () C:\Documents and Settings\oem\Plocha\Revo Uninstaller.lnk
2014-03-16 20:01 - 2014-03-16 20:01 - 00000000 ____D () C:\Program Files\VS Revo Group
2014-03-16 20:01 - 2009-10-20 21:38 - 00000000 ___RD () C:\Documents and Settings\oem\Nabídka Start\Programy
2014-03-16 16:27 - 2011-04-05 15:27 - 00000000 ____D () C:\Program Files\trend micro
2014-03-16 14:10 - 2009-10-31 16:40 - 00000116 _____ () C:\WINDOWS\NeroDigital.ini
2014-03-16 14:10 - 2009-10-22 20:05 - 00189952 _____ () C:\Documents and Settings\oem\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-03-16 14:04 - 2009-10-21 14:19 - 00000472 _____ () C:\WINDOWS\Tasks\Ad-Aware Update (Weekly).job
2014-03-16 13:00 - 2014-03-05 16:30 - 00000000 ____D () C:\Documents and Settings\oem\Plocha\lakotah
2014-03-16 12:05 - 2014-03-16 12:05 - 00000476 __RSH () C:\Documents and Settings\All Users\ntuser.pol
2014-03-16 12:05 - 2014-03-16 12:05 - 00000000 ___HD () C:\WINDOWS\system32\GroupPolicy
2014-03-15 19:16 - 2010-12-13 12:29 - 00000000 ____D () C:\Documents and Settings\oem\Data aplikací\Skype
2014-03-15 18:21 - 2014-01-11 15:59 - 00000000 ____D () C:\Documents and Settings\oem\Plocha\fota
2014-03-15 14:19 - 2011-08-20 12:05 - 00002265 _____ () C:\Documents and Settings\All Users\Plocha\Skype.lnk
2014-03-15 14:19 - 2009-10-21 14:23 - 00000000 ___RD () C:\Documents and Settings\oem\Plocha\Programy
2014-03-15 14:19 - 2009-10-21 08:55 - 00000000 ____D () C:\Documents and Settings\All Users\Plocha
2014-03-14 17:08 - 2014-03-13 10:41 - 00000212 _____ () C:\WINDOWS\Tasks\Měsíční oznamování konce poskytování služeb pro Microsoft Windows XP.job
2014-03-13 10:50 - 2009-10-21 08:54 - 00000000 ___RD () C:\Documents and Settings\oem\Plocha\Obrázky
2014-03-13 10:40 - 2009-10-02 12:07 - 00302032 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-03-12 18:46 - 2014-03-12 18:46 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB2934207$
2014-03-12 18:46 - 2014-03-12 18:46 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB2929961$
2014-03-12 18:46 - 2009-10-16 21:05 - 00000000 ____D () C:\WINDOWS\ie7updates
2014-03-12 18:45 - 2014-03-12 18:45 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB2930275$
2014-03-12 18:32 - 2011-09-04 12:47 - 00002563 _____ () C:\Documents and Settings\oem\Plocha\Microsoft Office Word 2007.lnk
2014-03-12 16:00 - 2014-03-11 17:22 - 1570983936 _____ () C:\Documents and Settings\oem\Plocha\Skinwalkers_RG_All_Films.avi
2014-03-12 15:18 - 2012-05-02 18:14 - 00692616 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2014-03-12 15:18 - 2011-06-20 06:47 - 00071048 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
2014-03-12 13:48 - 2012-12-18 17:16 - 00000282 _____ () C:\WINDOWS\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-1177238915-1957994488-2147156445-1005.job
2014-03-09 15:57 - 2009-10-20 21:38 - 00000000 ___RD () C:\Documents and Settings\oem\Dokumenty
2014-03-08 17:13 - 2010-01-06 16:56 - 00000000 ___RD () C:\Documents and Settings\oem\Plocha\ftípky a odkazy
2014-03-08 15:54 - 2014-03-08 13:57 - 1022466048 _____ () C:\Documents and Settings\oem\Plocha\Blackthorn-2011-western-cz-dabing.avi
2014-03-08 13:46 - 2014-03-08 13:46 - 00000000 ____D () C:\Documents and Settings\oem\Data aplikací\Avira
2014-03-08 13:41 - 2014-03-08 13:41 - 00000000 ____D () C:\Documents and Settings\LocalService\Data aplikací\Avira
2014-03-08 13:41 - 2009-10-02 10:47 - 00000000 ____D () C:\Documents and Settings\LocalService\Data aplikací
2014-03-08 13:38 - 2014-03-08 13:38 - 00000000 ____D () C:\Program Files\Avira
2014-03-08 13:38 - 2013-05-25 17:33 - 00000000 ____D () C:\Documents and Settings\All Users\Data aplikací\Avira
2014-03-08 13:33 - 2014-03-08 13:38 - 00135648 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avipbb.sys
2014-03-08 13:33 - 2014-03-08 13:38 - 00090400 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avgntflt.sys
2014-03-08 13:33 - 2013-05-25 17:33 - 00037352 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avkmgr.sys
2014-03-08 13:33 - 2013-05-25 17:33 - 00028520 _____ (Avira GmbH) C:\WINDOWS\system32\Drivers\ssmdrv.sys
2014-03-05 16:21 - 2014-03-05 13:38 - 1351065230 _____ () C:\Documents and Settings\oem\Plocha\Nespoutany-Django-(2012)cz.avi
2014-03-05 14:15 - 2014-02-08 12:57 - 00000000 ____D () C:\Documents and Settings\oem\Plocha\filmy nahr
2014-03-05 07:52 - 2012-05-06 06:42 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-03-03 16:18 - 2014-03-03 16:18 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-03-03 15:58 - 2014-03-03 15:58 - 00000724 _____ () C:\Documents and Settings\All Users\Plocha\Mozilla Firefox.lnk
2014-03-03 15:58 - 2012-05-06 06:42 - 00000730 _____ () C:\Documents and Settings\All Users\Nabídka Start\Programy\Mozilla Firefox.lnk
2014-03-02 17:57 - 2014-02-16 15:28 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB2916036$
2014-03-02 17:57 - 2014-02-16 15:28 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB2909212$
2014-03-02 17:51 - 2014-03-02 17:51 - 00000000 ____D () C:\8d1a553798708ee6b59d7c51f46e
2014-03-02 17:51 - 2009-10-21 07:23 - 00000000 ____D () C:\Documents and Settings\Guest
2014-03-02 17:51 - 2009-10-02 10:47 - 00000000 __SHD () C:\Documents and Settings\NetworkService
2014-03-02 17:51 - 2009-10-02 10:47 - 00000000 __SHD () C:\Documents and Settings\LocalService
2014-03-02 17:44 - 2012-01-20 10:33 - 00000000 ____D () C:\Documents and Settings\oem\Plocha\Hudba
2014-02-27 14:32 - 2014-02-27 14:27 - 30707571 _____ () C:\Documents and Settings\oem\Plocha\wounded-knee_lakota-indians.wmv
2014-02-27 00:28 - 2014-03-12 14:43 - 00013312 ____N (Microsoft Corporation) C:\WINDOWS\system32\xp_eos.exe
2014-02-27 00:28 - 2014-03-12 14:43 - 00013312 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\xp_eos.exe
2014-02-25 12:37 - 2009-10-21 17:35 - 00000000 ____D () C:\Documents and Settings\All Users\Data aplikací\Microsoft Help
2014-02-20 18:37 - 2012-02-23 16:13 - 00000000 ____D () C:\Documents and Settings\oem\Plocha\Knihy
2014-02-16 16:31 - 2009-10-02 10:38 - 00000000 ____D () C:\WINDOWS\Microsoft.NET

Some content of TEMP:
====================
C:\Documents and Settings\oem\Local Settings\Temp\avgnt.exe


==================== Bamital & volsnap Check =================

C:\WINDOWS\explorer.exe
[2008-12-19 13:43] - [2008-12-19 13:43] - 1486336 ____A (Microsoft Corporation) d39127310cbad1485ec5001a4ed1d853

C:\WINDOWS\system32\winlogon.exe
[2008-12-19 13:29] - [2008-12-19 13:29] - 0557056 ____A (Microsoft Corporation) 12a799ad9415ae9c8abcc5f75e9cf034

C:\WINDOWS\system32\svchost.exe
[2008-04-14 07:52] - [2008-04-14 07:52] - 0014336 ____A (Microsoft Corporation) be4a520e29b6391f49e79ccc52044d93

C:\WINDOWS\system32\services.exe
[2008-04-14 07:52] - [2009-02-09 12:25] - 0111104 ____A (Microsoft Corporation) 9ef697af07bb8dd82c3b02ca953a95b7

C:\WINDOWS\system32\User32.dll
[2008-12-19 13:28] - [2008-12-19 13:28] - 0578560 ____A (Microsoft Corporation) ccb32d10c69a89822e9134c0c4894be1

C:\WINDOWS\system32\userinit.exe
[2008-04-14 07:52] - [2008-04-14 07:52] - 0026112 ____A (Microsoft Corporation) 7dc1830f22e7d275b438127b68030239

C:\WINDOWS\system32\rpcss.dll => MD5 is legit
C:\WINDOWS\system32\Drivers\volsnap.sys
[2008-04-14 06:42] - [2008-04-14 06:42] - 0052480 ____A (Microsoft Corporation) 28a4b296b47782173c346e376cb374d1


==================== End Of Log ============================

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 13-03-2014 01
Ran by oem at 2014-03-18 18:27:35
Running from C:\Documents and Settings\oem\Dokumenty\Stažené soubory
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Disabled - Up to date) {AD166499-45F9-482A-A743-FDD3350758C7}

==================== Installed Programs ======================

Acer Crystal Eye Webcam 2.0.7 (HKLM\...\{A77255C4-AFCB-44A3-BF0F-2091A71FFD9E}) (Version: 2.0.7 - SuYin)
Acer Crystal Eye Webcam 2.0.7 (Version: 2.0.7 - SuYin) Hidden
Acer Crystal Eye Webcam Video Class Camera (HKLM\...\{399C37FB-08AF-493B-BFED-20FBD85EDF7F}) (Version: 5.8.33.501-1.0 - Suyin)
Acoustica Effects Pack (HKLM\...\Acoustica Effects Pack) (Version: 3.0 - Acoustica, Inc)
Ad-Aware (HKLM\...\Ad-Aware) (Version: - Lavasoft)
Ad-Aware (Version: 8.0.0 - Lavasoft) Hidden
Adobe Bridge 1.0 (Version: 001.000.000 - Adobe Systems) Hidden
Adobe Common File Installer (Version: 1.00.0000 - Adobe System Incorporated) Hidden
Adobe Flash Player 10 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 10.0.42.34 - Adobe Systems Incorporated)
Adobe Flash Player 12 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 12.0.0.77 - Adobe Systems Incorporated)
Adobe Help Center 1.0 (Version: 001.000.000 - Adobe Systems) Hidden
Adobe Photoshop CS2 (HKLM\...\Adobe Photoshop CS2 - {236BB7C4-4419-42FD-0409-1E257A25E34D}) (Version: 9.0 - Adobe Systems, Inc.)
Adobe Photoshop CS2 (Version: 9.0 - Adobe Systems, Inc.) Hidden
Adobe Reader X (10.1.9) - Czech (HKLM\...\{AC76BA86-7AD7-1029-7B44-AA1000000001}) (Version: 10.1.9 - Adobe Systems Incorporated)
Adobe Stock Photos 1.0 (Version: 001.000.000 - Adobe Systems) Hidden
Aktualizace pro systém Windows XP (KB943729) (HKLM\...\KB943729) (Version: - Microsoft Corporation)
Aktualizace systému Windows Internet Explorer 7 (KB976749) (HKLM\...\KB976749-IE7) (Version: 1 - Microsoft Corporation)
Aktualizace systému Windows Internet Explorer 7 (KB980182) (HKLM\...\KB980182-IE7) (Version: 1 - Microsoft Corporation)
Aktualizace systému Windows XP (KB2141007) (HKLM\...\KB2141007) (Version: 1 - Microsoft Corporation)
Aktualizace systému Windows XP (KB2345886) (HKLM\...\KB2345886) (Version: 1 - Microsoft Corporation)
Aktualizace systému Windows XP (KB2467659) (HKLM\...\KB2467659) (Version: 1 - Microsoft Corporation)
Aktualizace systému Windows XP (KB2541763) (HKLM\...\KB2541763) (Version: 1 - Microsoft Corporation)
Aktualizace systému Windows XP (KB2607712) (HKLM\...\KB2607712) (Version: 1 - Microsoft Corporation)
Aktualizace systému Windows XP (KB2616676) (HKLM\...\KB2616676) (Version: 1 - Microsoft Corporation)
Aktualizace systému Windows XP (KB2641690) (HKLM\...\KB2641690) (Version: 1 - Microsoft Corporation)
Aktualizace systému Windows XP (KB2661254-v2) (HKLM\...\KB2661254-v2) (Version: 2 - Microsoft Corporation)
Aktualizace systému Windows XP (KB2718704) (HKLM\...\KB2718704) (Version: 1 - Microsoft Corporation)
Aktualizace systému Windows XP (KB2736233) (HKLM\...\KB2736233) (Version: 1 - Microsoft Corporation)
Aktualizace systému Windows XP (KB2749655) (HKLM\...\KB2749655) (Version: 1 - Microsoft Corporation)
Aktualizace systému Windows XP (KB2863058) (HKLM\...\KB2863058) (Version: 1 - Microsoft Corporation)
Aktualizace systému Windows XP (KB2904266) (HKLM\...\KB2904266) (Version: 1 - Microsoft Corporation)
Aktualizace systému Windows XP (KB2934207) (HKLM\...\KB2934207) (Version: 1 - Microsoft Corporation)
Aktualizace systému Windows XP (KB898461) (HKLM\...\KB898461) (Version: 1 - Microsoft Corporation)
Aktualizace systému Windows XP (KB955759) (HKLM\...\KB955759) (Version: 1 - Microsoft Corporation)
Aktualizace systému Windows XP (KB968389) (HKLM\...\KB968389) (Version: 1 - Microsoft Corporation)
Aktualizace systému Windows XP (KB971029) (HKLM\...\KB971029) (Version: 1 - Microsoft Corporation)
Aktualizace systému Windows XP (KB971737) (HKLM\...\KB971737) (Version: 1 - Microsoft Corporation)
Aktualizace systému Windows XP (KB973687) (HKLM\...\KB973687) (Version: 1 - Microsoft Corporation)
Aktualizace systému Windows XP (KB973815) (HKLM\...\KB973815) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení aplikace Windows Media Player (KB2378111) (HKLM\...\KB2378111_WM9) (Version: - Microsoft Corporation)
Aktualizace zabezpečení aplikace Windows Media Player (KB2834904) (HKLM\...\KB2834904_WM11) (Version: - Microsoft Corporation)
Aktualizace zabezpečení aplikace Windows Media Player (KB2834904-v2) (HKLM\...\KB2834904-v2_WM11) (Version: - Microsoft Corporation)
Aktualizace zabezpečení aplikace Windows Media Player (KB952069) (HKLM\...\KB952069_WM9) (Version: - Microsoft Corporation)
Aktualizace zabezpečení aplikace Windows Media Player (KB954155) (HKLM\...\KB954155_WM9) (Version: - Microsoft Corporation)
Aktualizace zabezpečení aplikace Windows Media Player (KB968816) (HKLM\...\KB968816_WM9) (Version: - Microsoft Corporation)
Aktualizace zabezpečení aplikace Windows Media Player (KB973540) (HKLM\...\KB973540_WM9) (Version: - Microsoft Corporation)
Aktualizace zabezpečení aplikace Windows Media Player (KB975558) (HKLM\...\KB975558_WM8) (Version: - Microsoft Corporation)
Aktualizace zabezpečení aplikace Windows Media Player (KB978695) (HKLM\...\KB978695_WM9) (Version: - Microsoft Corporation)
Aktualizace zabezpečení aplikace Windows Media Player 11 (KB954154) (HKLM\...\KB954154_WM11) (Version: - Microsoft Corporation)
Aktualizace zabezpečení pro Microsoft Windows (KB2564958) (HKLM\...\KB2564958) (Version: - Microsoft Corporation)
Aktualizace zabezpečení produktu Windows XP (KB941569) (HKLM\...\KB941569) (Version: - Microsoft Corporation)
Aktualizace zabezpečení systému Windows Internet Explorer 7 (KB2183461) (HKLM\...\KB2183461-IE7) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows Internet Explorer 7 (KB2360131) (HKLM\...\KB2360131-IE7) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows Internet Explorer 7 (KB2416400) (HKLM\...\KB2416400-IE7) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows Internet Explorer 7 (KB2482017) (HKLM\...\KB2482017-IE7) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows Internet Explorer 7 (KB2497640) (HKLM\...\KB2497640-IE7) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows Internet Explorer 7 (KB2530548) (HKLM\...\KB2530548-IE7) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows Internet Explorer 7 (KB2544521) (HKLM\...\KB2544521-IE7) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows Internet Explorer 7 (KB2559049) (HKLM\...\KB2559049-IE7) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows Internet Explorer 7 (KB2586448) (HKLM\...\KB2586448-IE7) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows Internet Explorer 7 (KB2618444) (HKLM\...\KB2618444-IE7) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows Internet Explorer 7 (KB2647516) (HKLM\...\KB2647516-IE7) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows Internet Explorer 7 (KB2675157) (HKLM\...\KB2675157-IE7) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows Internet Explorer 7 (KB2699988) (HKLM\...\KB2699988-IE7) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows Internet Explorer 7 (KB2722913) (HKLM\...\KB2722913-IE7) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows Internet Explorer 7 (KB2744842) (HKLM\...\KB2744842-IE7) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows Internet Explorer 7 (KB2761465) (HKLM\...\KB2761465-IE7) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows Internet Explorer 7 (KB2792100) (HKLM\...\KB2792100-IE7) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows Internet Explorer 7 (KB2797052) (HKLM\...\KB2797052-IE7) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows Internet Explorer 7 (KB2799329) (HKLM\...\KB2799329-IE7) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows Internet Explorer 7 (KB2809289) (HKLM\...\KB2809289-IE7) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows Internet Explorer 7 (KB2817183) (HKLM\...\KB2817183-IE7) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows Internet Explorer 7 (KB2829530) (HKLM\...\KB2829530-IE7) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows Internet Explorer 7 (KB2838727) (HKLM\...\KB2838727-IE7) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows Internet Explorer 7 (KB2846071) (HKLM\...\KB2846071-IE7) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows Internet Explorer 7 (KB2862772) (HKLM\...\KB2862772-IE7) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows Internet Explorer 7 (KB2870699) (HKLM\...\KB2870699-IE7) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows Internet Explorer 7 (KB2879017) (HKLM\...\KB2879017-IE7) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows Internet Explorer 7 (KB2888505) (HKLM\...\KB2888505-IE7) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows Internet Explorer 7 (KB2898785) (HKLM\...\KB2898785-IE7) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows Internet Explorer 7 (KB2909921) (HKLM\...\KB2909921-IE7) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows Internet Explorer 7 (KB2925418) (HKLM\...\KB2925418-IE7) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows Internet Explorer 7 (KB938127-v2) (Version: 2 - Microsoft Corporation) Hidden
Aktualizace zabezpečení systému Windows Internet Explorer 7 (KB953838) (Version: 1 - Microsoft Corporation) Hidden
Aktualizace zabezpečení systému Windows Internet Explorer 7 (KB956390) (Version: 1 - Microsoft Corporation) Hidden
Aktualizace zabezpečení systému Windows Internet Explorer 7 (KB974455) (HKLM\...\KB974455-IE7) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows Internet Explorer 7 (KB976325) (HKLM\...\KB976325-IE7) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows Internet Explorer 7 (KB978207) (HKLM\...\KB978207-IE7) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows Internet Explorer 7 (KB982381) (HKLM\...\KB982381-IE7) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2079403) (HKLM\...\KB2079403) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2115168) (HKLM\...\KB2115168) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2121546) (HKLM\...\KB2121546) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2160329) (HKLM\...\KB2160329) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2229593) (HKLM\...\KB2229593) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2259922) (HKLM\...\KB2259922) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2279986) (HKLM\...\KB2279986) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2286198) (HKLM\...\KB2286198) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2296011) (HKLM\...\KB2296011) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2296199) (HKLM\...\KB2296199) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2347290) (HKLM\...\KB2347290) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2360937) (HKLM\...\KB2360937) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2387149) (HKLM\...\KB2387149) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2393802) (HKLM\...\KB2393802) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2412687) (HKLM\...\KB2412687) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2419632) (HKLM\...\KB2419632) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2423089) (HKLM\...\KB2423089) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2436673) (HKLM\...\KB2436673) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2440591) (HKLM\...\KB2440591) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2443105) (HKLM\...\KB2443105) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2476490) (HKLM\...\KB2476490) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2476687) (HKLM\...\KB2476687) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2478960) (HKLM\...\KB2478960) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2478971) (HKLM\...\KB2478971) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2479628) (HKLM\...\KB2479628) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2481109) (HKLM\...\KB2481109) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2483185) (HKLM\...\KB2483185) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2485376) (HKLM\...\KB2485376) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2485663) (HKLM\...\KB2485663) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2503658) (HKLM\...\KB2503658) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2503665) (HKLM\...\KB2503665) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2506212) (HKLM\...\KB2506212) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2506223) (HKLM\...\KB2506223) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2507618) (HKLM\...\KB2507618) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2507938) (HKLM\...\KB2507938) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2508272) (HKLM\...\KB2508272) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2508429) (HKLM\...\KB2508429) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2509553) (HKLM\...\KB2509553) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2510581) (HKLM\...\KB2510581) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2511455) (HKLM\...\KB2511455) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2524375) (HKLM\...\KB2524375) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2535512) (HKLM\...\KB2535512) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2536276) (HKLM\...\KB2536276) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2536276-v2) (HKLM\...\KB2536276-v2) (Version: 2 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2544893) (HKLM\...\KB2544893) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2544893-v2) (HKLM\...\KB2544893-v2) (Version: 2 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2555917) (HKLM\...\KB2555917) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2562937) (HKLM\...\KB2562937) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2566454) (HKLM\...\KB2566454) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2567053) (HKLM\...\KB2567053) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2567680) (HKLM\...\KB2567680) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2570222) (HKLM\...\KB2570222) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2570947) (HKLM\...\KB2570947) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2584146) (HKLM\...\KB2584146) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2585542) (HKLM\...\KB2585542) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2592799) (HKLM\...\KB2592799) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2598479) (HKLM\...\KB2598479) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2603381) (HKLM\...\KB2603381) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2618451) (HKLM\...\KB2618451) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2620712) (HKLM\...\KB2620712) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2621440) (HKLM\...\KB2621440) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2624667) (HKLM\...\KB2624667) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2631813) (HKLM\...\KB2631813) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2633171) (HKLM\...\KB2633171) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2639417) (HKLM\...\KB2639417) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2641653) (HKLM\...\KB2641653) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2646524) (HKLM\...\KB2646524) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2647518) (HKLM\...\KB2647518) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2653956) (HKLM\...\KB2653956) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2655992) (HKLM\...\KB2655992) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2659262) (HKLM\...\KB2659262) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2660465) (HKLM\...\KB2660465) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2661637) (HKLM\...\KB2661637) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2676562) (HKLM\...\KB2676562) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2685939) (HKLM\...\KB2685939) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2686509) (HKLM\...\KB2686509) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2691442) (HKLM\...\KB2691442) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2695962) (HKLM\...\KB2695962) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2698365) (HKLM\...\KB2698365) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2705219) (HKLM\...\KB2705219) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2707511) (HKLM\...\KB2707511) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2709162) (HKLM\...\KB2709162) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2712808) (HKLM\...\KB2712808) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2718523) (HKLM\...\KB2718523) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2719985) (HKLM\...\KB2719985) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2723135) (HKLM\...\KB2723135) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2724197) (HKLM\...\KB2724197) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2727528) (HKLM\...\KB2727528) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2731847) (HKLM\...\KB2731847) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2753842) (HKLM\...\KB2753842) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2753842-v2) (HKLM\...\KB2753842-v2) (Version: 2 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2757638) (HKLM\...\KB2757638) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2758857) (HKLM\...\KB2758857) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2761226) (HKLM\...\KB2761226) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2770660) (HKLM\...\KB2770660) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2778344) (HKLM\...\KB2778344) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2779030) (HKLM\...\KB2779030) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2780091) (HKLM\...\KB2780091) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2799494) (HKLM\...\KB2799494) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2802968) (HKLM\...\KB2802968) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2807986) (HKLM\...\KB2807986) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2808735) (HKLM\...\KB2808735) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2813170) (HKLM\...\KB2813170) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2813345) (HKLM\...\KB2813345) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2820197) (HKLM\...\KB2820197) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2820917) (HKLM\...\KB2820917) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2829361) (HKLM\...\KB2829361) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2834886) (HKLM\...\KB2834886) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2839229) (HKLM\...\KB2839229) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2845187) (HKLM\...\KB2845187) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2847311) (HKLM\...\KB2847311) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2849470) (HKLM\...\KB2849470) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2850851) (HKLM\...\KB2850851) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2850869) (HKLM\...\KB2850869) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2859537) (HKLM\...\KB2859537) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2862152) (HKLM\...\KB2862152) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2862330) (HKLM\...\KB2862330) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2862335) (HKLM\...\KB2862335) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2864063) (HKLM\...\KB2864063) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2868038) (HKLM\...\KB2868038) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2868626) (HKLM\...\KB2868626) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2876217) (HKLM\...\KB2876217) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2876315) (HKLM\...\KB2876315) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2876331) (HKLM\...\KB2876331) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2883150) (HKLM\...\KB2883150) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2892075) (HKLM\...\KB2892075) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2893294) (HKLM\...\KB2893294) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2893984) (HKLM\...\KB2893984) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2898715) (HKLM\...\KB2898715) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2900986) (HKLM\...\KB2900986) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2909212) (HKLM\...\KB2909212) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2914368) (HKLM\...\KB2914368) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2916036) (HKLM\...\KB2916036) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2929961) (HKLM\...\KB2929961) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB2930275) (HKLM\...\KB2930275) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB923561) (HKLM\...\KB923561) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB923789) (HKLM\...\KB923789) (Version: - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB951066) (HKLM\...\KB951066) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB952004) (HKLM\...\KB952004) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB953839) (HKLM\...\KB953839) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB956391) (HKLM\...\KB956391) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB956572) (HKLM\...\KB956572) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB956744) (HKLM\...\KB956744) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB956802) (HKLM\...\KB956802) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB956844) (HKLM\...\KB956844) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB958687) (HKLM\...\KB958687) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB958869) (HKLM\...\KB958869) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB959426) (HKLM\...\KB959426) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB960225) (HKLM\...\KB960225) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB960803) (HKLM\...\KB960803) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB960859) (HKLM\...\KB960859) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB961371-v2) (HKLM\...\KB961371-v2) (Version: 2 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB961501) (HKLM\...\KB961501) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB969059) (HKLM\...\KB969059) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB969947) (HKLM\...\KB969947) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB970238) (HKLM\...\KB970238) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB970430) (HKLM\...\KB970430) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB971468) (HKLM\...\KB971468) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB971486) (HKLM\...\KB971486) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB971557) (HKLM\...\KB971557) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB971633) (HKLM\...\KB971633) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB971657) (HKLM\...\KB971657) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB971961) (HKLM\...\KB971961) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB972270) (HKLM\...\KB972270) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB973354) (HKLM\...\KB973354) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB973507) (HKLM\...\KB973507) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB973525) (HKLM\...\KB973525) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB973869) (HKLM\...\KB973869) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB973904) (HKLM\...\KB973904) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB974112) (HKLM\...\KB974112) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB974318) (HKLM\...\KB974318) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB974392) (HKLM\...\KB974392) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB974571) (HKLM\...\KB974571) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB975025) (HKLM\...\KB975025) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB975467) (HKLM\...\KB975467) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB975560) (HKLM\...\KB975560) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB975561) (HKLM\...\KB975561) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB975562) (HKLM\...\KB975562) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB975713) (HKLM\...\KB975713) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB977165) (HKLM\...\KB977165) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB977816) (HKLM\...\KB977816) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB977914) (HKLM\...\KB977914) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB978037) (HKLM\...\KB978037) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB978251) (HKLM\...\KB978251) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB978262) (HKLM\...\KB978262) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB978338) (HKLM\...\KB978338) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB978542) (HKLM\...\KB978542) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB978601) (HKLM\...\KB978601) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB979309) (HKLM\...\KB979309) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB979482) (HKLM\...\KB979482) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB979559) (HKLM\...\KB979559) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB979683) (HKLM\...\KB979683) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB979687) (HKLM\...\KB979687) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB980195) (HKLM\...\KB980195) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB980218) (HKLM\...\KB980218) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB980232) (HKLM\...\KB980232) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB980436) (HKLM\...\KB980436) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB981322) (HKLM\...\KB981322) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB981349) (HKLM\...\KB981349) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB981852) (HKLM\...\KB981852) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB981957) (HKLM\...\KB981957) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB981997) (HKLM\...\KB981997) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB982132) (HKLM\...\KB982132) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB982214) (HKLM\...\KB982214) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB982665) (HKLM\...\KB982665) (Version: 1 - Microsoft Corporation)
Aktualizace zabezpečení systému Windows XP (KB982802) (HKLM\...\KB982802) (Version: 1 - Microsoft Corporation)
Alky for Applications (Windows XP) (HKLM\...\{BB05D173-9681-4812-A7FA-BD4042A3DA00}) (Version: 1.1 - Alky Team)
Avanquest update (HKLM\...\{76E41F43-59D2-4F30-BA42-9A762EE1E8DE}) (Version: 1.25 - Avanquest Software)
Avira Free Antivirus (HKLM\...\Avira AntiVir Desktop) (Version: 14.0.3.350 - Avira)
Avira SearchFree Toolbar (HKLM\...\{41564952-412D-5637-4300-A758B70C0A03}) (Version: 12.10.3.4691 - APN, LLC)
CCleaner (HKLM\...\CCleaner) (Version: - Piriform)
DirectVobSub (remove only) (HKLM\...\DirectVobSub) (Version: - )
DivX Plus Web Player (HKLM\...\{B7050CBDB2504B34BC2A9CA0A692CC29}) (Version: 2.0.0 - DivX,Inc.)
Free Studio version 5.3.3 (HKLM\...\Free Studio_is1) (Version: - DVDVideoSoft Ltd.)
Free YouTube Download version 3.1.40.1031 (HKLM\...\Free YouTube Download_is1) (Version: 3.1.40.1031 - DVDVideoSoft Ltd.)
Free YouTube to MP3 Converter version 3.11.35.1031 (HKLM\...\Free YouTube to MP3 Converter_is1) (Version: 3.11.35.1031 - DVDVideoSoft Ltd.)
Google Earth (HKLM\...\{1E04F83B-2AB9-4301-9EF7-E86307F79C72}) (Version: 4.2.181.2634 - Google)
Google Update Helper (Version: 1.3.22.5 - Google Inc.) Hidden
IMPI 2.0.0.429 (HKLM\...\{17E113E6-CD0E-4045-B154-65F0E57959EF}_is1) (Version: - Bitcocktail)
Intel(R) Graphics Media Accelerator Driver (HKLM\...\HDMI) (Version: - Intel Corporation)
Java Auto Updater (Version: 2.0.3.1 - Sun Microsystems, Inc.) Hidden
Java(TM) 6 Update 24 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83216020FF}) (Version: 6.0.240 - Sun Microsystems, Inc.)
Kozaka (HKLM\...\Kozaka) (Version: 2014.01.10.194843 - Kozaka) <==== ATTENTION
Media View (HKLM\...\MediaViewV1alpha7934) (Version: 1.1 - Media View)
Microsoft .NET Framework 1.1 (HKLM\...\Microsoft .NET Framework 1.1 (1033)) (Version: - )
Microsoft .NET Framework 1.1 (Version: 1.1.4322 - Microsoft) Hidden
Microsoft .NET Framework 1.1 Czech Language Pack (HKLM\...\{5E65E94D-69F2-4850-9E93-6459C53A0F50}) (Version: 1.1.4322 - Microsoft)
Microsoft .NET Framework 1.1 Security Update (KB2698023) (HKLM\...\M2698023) (Version: - )
Microsoft .NET Framework 1.1 Security Update (KB2833941) (HKLM\...\M2833941) (Version: - )
Microsoft .NET Framework 1.1 Security Update (KB979906) (HKLM\...\M979906) (Version: - )
Microsoft .NET Framework 2.0 Service Pack 2 (HKLM\...\{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}) (Version: 2.2.30729 - Microsoft Corporation)
Microsoft .NET Framework 3.0 Service Pack 2 (HKLM\...\{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}) (Version: 3.2.30729 - Microsoft Corporation)
Microsoft .NET Framework 3.5 SP1 (HKLM\...\Microsoft .NET Framework 3.5 SP1) (Version: - Microsoft Corporation)
Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729 - Microsoft Corporation) Hidden
Microsoft Internationalized Domain Names Mitigation APIs (Version: - Microsoft Corporation) Hidden
Microsoft National Language Support Downlevel APIs (Version: - Microsoft Corporation) Hidden
Microsoft Office Access MUI (Czech) 2007 (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Enterprise 2007 (HKLM\...\ENTERPRISE) (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (Czech) 2007 (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Groove MUI (Czech) 2007 (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (Czech) 2007 (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (Czech) 2007 (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (Czech) 2007 (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (Czech) 2007 (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Proof (Czech) 2007 (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proof (Slovak) 2007 (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Proofing (Czech) 2007 (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (Czech) 2007 (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (Czech) 2007 (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (Czech) 2007 (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Software Update for Web Folders (Czech) 12 (Version: 12.0.4518.1025 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 27.0.1 (x86 cs) (HKLM\...\Mozilla Firefox 27.0.1 (x86 cs)) (Version: 27.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 27.0.1 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
neroxml (Version: 1.0.0 - Nero AG) Hidden
NCH Toolbox (HKLM\...\ToolBox) (Version: - NCH Software)
NVIDIA PureVideo Decoder (HKLM\...\{055FEF8E-4B86-400F-A5C6-8FAC0042DCD9}) (Version: 1.00.0000 - )
Oprava hotfix aplikace Windows Media Player 11 (KB939683) (HKLM\...\KB939683) (Version: - Microsoft Corporation)
Oprava Hotfix systému Windows XP (KB2158563) (HKLM\...\KB2158563) (Version: 1 - Microsoft Corporation)
Oprava Hotfix systému Windows XP (KB2443685) (HKLM\...\KB2443685) (Version: 1 - Microsoft Corporation)
Oprava Hotfix systému Windows XP (KB2570791) (HKLM\...\KB2570791) (Version: 1 - Microsoft Corporation)
Oprava Hotfix systému Windows XP (KB2633952) (HKLM\...\KB2633952) (Version: 1 - Microsoft Corporation)
Oprava Hotfix systému Windows XP (KB2756822) (HKLM\...\KB2756822) (Version: 1 - Microsoft Corporation)
Oprava Hotfix systému Windows XP (KB2779562) (HKLM\...\KB2779562) (Version: 1 - Microsoft Corporation)
Oprava Hotfix systému Windows XP (KB932716-v2) (HKLM\...\KB932716-v2) (Version: 2 - Microsoft Corporation)
Oprava Hotfix systému Windows XP (KB961118) (HKLM\...\KB961118) (Version: 1 - Microsoft Corporation)
Oprava Hotfix systému Windows XP (KB976098-v2) (HKLM\...\KB976098-v2) (Version: 2 - Microsoft Corporation)
Oprava Hotfix systému Windows XP (KB979306) (HKLM\...\KB979306) (Version: 1 - Microsoft Corporation)
Oprava Hotfix systému Windows XP (KB981793) (HKLM\...\KB981793) (Version: 1 - Microsoft Corporation)
PitchPerfect Musical Instrument Tuner (HKLM\...\PitchPerfect) (Version: - NCH Software)
Postranní panel systému Windows (HKLM\...\Windows Sidebar) (Version: 6.0.6001.18000 - Microsoft Corporation)
QFolder (Version: 1.00.0000 - Hewlett-Packard) Hidden
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: - Realtek Semiconductor Corp.)
Revo Uninstaller 1.95 (HKLM\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
Seznam Pošťák (Pouze já.) (HKCU\...\szn-software-postak) (Version: - )
Skype Click to Call (HKLM\...\{B6CF2967-C81E-40C0-9815-C05774FEF120}) (Version: 6.5.11422 - Skype Technologies S.A.)
Skype™ 5.5 (HKLM\...\{AA59DDE4-B672-4621-A016-4C248204957A}) (Version: 5.5.124 - Skype Technologies S.A.)
Software Bluetooth WIDCOMM (HKLM\...\{84814E6B-2581-46EC-926A-823BD1C670F6}) (Version: 5.5.0.7000 - Broadcom)
Sony PC Companion 2.10.181 (HKLM\...\{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}) (Version: 2.10.181 - Sony)
Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (HKLM\...\{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707) (Version: 1 - Microsoft Corporation)
VC80CRTRedist - 8.0.50727.4053 (Version: 1.1.0 - DivX, Inc) Hidden
VideoLAN VLC media player 0.8.6i (HKLM\...\VLC media player) (Version: 0.8.6i - VideoLAN Team)
Visual C++ 2008 x86 Runtime - (v9.0.30729) (Version: 9.0.30729 - Microsoft Corporation) Hidden
Visual C++ 2008 x86 Runtime - v9.0.30729.01 (HKLM\...\{F333A33D-125C-32A2-8DCE-5C5D14231E27}.vc_x86runtime_30729_01) (Version: 9.0.30729.01 - Microsoft Corporation)
WebFldrs XP (Version: 9.50.7523 - Microsoft Corporation) Hidden
WebReg (Version: 70.0.170.000 - Hewlett-Packard) Hidden
Windows Genuine Advantage Validation Tool (KB892130) (HKLM\...\KB892130) (Version: - Microsoft Corporation)
Windows Genuine Advantage Validation Tool (KB892130) (HKLM\...\WGA) (Version: 1.7.0069.2 - Microsoft Corporation)
Windows Internet Explorer 7 (HKLM\...\ie7) (Version: 20070813.185237 - Microsoft Corporation)
WinRAR (HKLM\...\WinRAR archiver) (Version: - )
XML Paper Specification Shared Components Pack 1.0 (Version: - Microsoft Corporation) Hidden

==================== Restore Points =========================

19-12-2013 15:32:07 Kontrolní bod systému
19-12-2013 16:58:46 Software Distribution Service 3.0
21-12-2013 15:40:27 Kontrolní bod systému
21-12-2013 16:38:57 Software Distribution Service 3.0
22-12-2013 17:00:25 Software Distribution Service 3.0
23-12-2013 18:25:33 Kontrolní bod systému
23-12-2013 18:38:41 Software Distribution Service 3.0
24-12-2013 14:00:40 Software Distribution Service 3.0
29-12-2013 17:21:20 Kontrolní bod systému
29-12-2013 18:12:06 Software Distribution Service 3.0
31-12-2013 14:23:31 Kontrolní bod systému
31-12-2013 18:18:37 Software Distribution Service 3.0
01-01-2014 18:07:15 Software Distribution Service 3.0
02-01-2014 18:06:27 Software Distribution Service 3.0
03-01-2014 17:18:45 Software Distribution Service 3.0
04-01-2014 17:50:59 Software Distribution Service 3.0
06-01-2014 15:42:14 Kontrolní bod systému
06-01-2014 16:52:29 Software Distribution Service 3.0
08-01-2014 09:37:56 Kontrolní bod systému
08-01-2014 16:47:23 Software Distribution Service 3.0
10-01-2014 08:00:16 Software Distribution Service 3.0
10-01-2014 18:01:30 Software Distribution Service 3.0
11-01-2014 17:16:12 Software Distribution Service 3.0
12-01-2014 16:28:01 Software Distribution Service 3.0
13-01-2014 17:32:43 Software Distribution Service 3.0
14-01-2014 16:56:05 Software Distribution Service 3.0
16-01-2014 15:53:05 Kontrolní bod systému
16-01-2014 16:29:10 Software Distribution Service 3.0
17-01-2014 17:22:55 Software Distribution Service 3.0
19-01-2014 16:17:27 Kontrolní bod systému
19-01-2014 19:28:38 Software Distribution Service 3.0
20-01-2014 16:05:28 Software Distribution Service 3.0
22-01-2014 15:17:05 Kontrolní bod systému
22-01-2014 17:02:35 Software Distribution Service 3.0
24-01-2014 13:52:02 Kontrolní bod systému
25-01-2014 12:49:05 Software Distribution Service 3.0
25-01-2014 18:40:57 Software Distribution Service 3.0
26-01-2014 16:06:35 Software Distribution Service 3.0
26-01-2014 18:51:49 Software Distribution Service 3.0
28-01-2014 09:03:21 Kontrolní bod systému
28-01-2014 16:50:45 Software Distribution Service 3.0
29-01-2014 17:34:02 Kontrolní bod systému
29-01-2014 17:39:13 Software Distribution Service 3.0
30-01-2014 17:14:24 Software Distribution Service 3.0
31-01-2014 16:59:38 Software Distribution Service 3.0
01-02-2014 12:44:02 Software Distribution Service 3.0
02-02-2014 12:55:14 Operace obnovení
02-02-2014 13:06:14 Software Distribution Service 3.0
02-02-2014 17:32:00 Software Distribution Service 3.0
03-02-2014 17:16:03 Software Distribution Service 3.0
05-02-2014 13:52:16 Kontrolní bod systému
05-02-2014 17:32:33 Software Distribution Service 3.0
07-02-2014 13:28:01 Kontrolní bod systému
07-02-2014 18:53:44 Software Distribution Service 3.0
08-02-2014 17:06:43 Software Distribution Service 3.0
11-02-2014 14:12:10 Kontrolní bod systému
11-02-2014 17:33:58 Software Distribution Service 3.0
13-02-2014 18:37:52 Kontrolní bod systému
13-02-2014 19:31:00 Software Distribution Service 3.0
15-02-2014 12:01:08 Kontrolní bod systému
15-02-2014 18:53:32 Software Distribution Service 3.0
16-02-2014 14:25:19 Software Distribution Service 3.0
16-02-2014 17:30:53 Software Distribution Service 3.0
17-02-2014 16:37:01 Software Distribution Service 3.0
19-02-2014 11:44:50 Kontrolní bod systému
19-02-2014 16:30:25 Software Distribution Service 3.0
20-02-2014 16:39:08 Kontrolní bod systému
20-02-2014 22:32:01 Software Distribution Service 3.0
21-02-2014 08:00:27 Software Distribution Service 3.0
21-02-2014 16:19:09 Software Distribution Service 3.0
22-02-2014 08:00:16 Software Distribution Service 3.0
22-02-2014 17:20:08 Software Distribution Service 3.0
23-02-2014 17:09:29 Software Distribution Service 3.0
25-02-2014 09:50:36 Software Distribution Service 3.0
25-02-2014 17:21:28 Software Distribution Service 3.0
27-02-2014 16:29:49 Kontrolní bod systému
27-02-2014 18:02:01 Software Distribution Service 3.0
28-02-2014 16:53:25 Software Distribution Service 3.0
01-03-2014 14:51:02 Software Distribution Service 3.0
02-03-2014 16:06:43 Operace obnovení
02-03-2014 16:18:47 Software Distribution Service 3.0
02-03-2014 16:34:04 Operace obnovení
02-03-2014 16:54:29 Software Distribution Service 3.0
02-03-2014 17:36:52 Software Distribution Service 3.0
03-03-2014 17:51:03 Software Distribution Service 3.0
05-03-2014 04:04:39 Kontrolní bod systému
05-03-2014 08:00:16 Software Distribution Service 3.0
05-03-2014 16:56:33 Software Distribution Service 3.0
08-03-2014 10:21:55 Kontrolní bod systému
08-03-2014 17:31:57 Software Distribution Service 3.0
09-03-2014 17:32:59 Software Distribution Service 3.0
11-03-2014 14:39:20 Kontrolní bod systému
11-03-2014 17:46:57 Software Distribution Service 3.0
12-03-2014 17:44:58 Software Distribution Service 3.0
14-03-2014 17:13:38 Software Distribution Service 3.0
15-03-2014 18:17:30 Software Distribution Service 3.0
16-03-2014 19:02:28 Revo Uninstaller's restore point - Ad-Aware
16-03-2014 20:15:55 Software Distribution Service 3.0
17-03-2014 09:14:47 zoek.exe restore point
17-03-2014 19:53:15 Software Distribution Service 3.0

==================== Scheduled Tasks (whitelisted) =============

Task: C:\WINDOWS\Tasks\Ad-Aware Update (Weekly).job => C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\Měsíční oznamování konce poskytování služeb pro Microsoft Windows XP.job => C:\WINDOWS\system32\xp_eos.exe
Task: C:\WINDOWS\Tasks\Přihlášení k oznamování konce poskytování služeb pro Microsoft Windows XP.job => C:\WINDOWS\system32\xp_eos.exe
Task: C:\WINDOWS\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-1177238915-1957994488-2147156445-1005.job => C:\Program Files\Real\RealUpgrade\realupgrade.exe
Task: C:\WINDOWS\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-1177238915-1957994488-2147156445-1005.job => C:\Program Files\Real\RealUpgrade\realupgrade.exe

==================== Loaded Modules (whitelisted) =============

2014-03-08 13:38 - 2014-03-08 13:32 - 00394808 _____ () C:\Program Files\Avira\AntiVir Desktop\sqlite3.dll
2009-10-21 14:21 - 2009-08-16 17:06 - 00141312 _____ () C:\Program Files\WinRAR\rarext.dll
2010-12-13 13:14 - 2007-10-23 10:56 - 00200704 _____ () C:\WINDOWS\PLFSetI.exe
2008-04-14 07:51 - 2008-04-14 07:51 - 00014336 _____ () C:\WINDOWS\system32\msdmo.dll
2012-12-23 09:41 - 2011-01-19 14:08 - 00489584 _____ () C:\Documents and Settings\oem\Local Settings\Data aplikací\Seznam.cz\postak.exe
2012-12-23 09:41 - 2011-01-19 14:08 - 00851056 _____ () C:\Documents and Settings\oem\Local Settings\Data aplikací\Seznam.cz\email.3.dll
2012-12-23 09:41 - 2011-01-19 14:07 - 01175152 _____ () C:\Documents and Settings\oem\Local Settings\Data aplikací\Seznam.cz\core.3.dll
2009-03-23 16:40 - 2009-03-23 16:40 - 02854976 _____ () C:\WINDOWS\system32\btwicons.dll
2009-03-23 16:38 - 2009-03-23 16:38 - 00069697 _____ () C:\Program Files\WIDCOMM\Bluetooth Software\btkeyind.dll
2008-12-26 21:17 - 2008-12-26 21:17 - 00291840 _____ () C:\WINDOWS\system32\sbe.dll
2013-03-16 17:01 - 2013-02-05 16:50 - 00185856 _____ () C:\Program Files\IMPI\ExtensionUpdaterService.exe
2008-12-26 21:17 - 2008-12-26 21:17 - 00050176 _____ () C:\WINDOWS\armcex.dll
2014-03-03 16:18 - 2014-03-03 16:18 - 03578992 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\Documents and Settings\All Users\Data aplikací\TEMP:A1063995

==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Lavasoft Ad-Aware Service => ""="Service"

==================== Disabled items from MSCONFIG ==============


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (03/02/2014 05:59:16 PM) (Source: Avira Antivirus) (User: NT AUTHORITY)
Description: The keyfile contains no valid license. The service will be stopped!

Error: (03/02/2014 05:53:05 PM) (Source: Avira Antivirus) (User: NT AUTHORITY)
Description: The keyfile contains no valid license. The service will be stopped!

Error: (03/02/2014 05:31:30 PM) (Source: Avira Antivirus) (User: NT AUTHORITY)
Description: The keyfile contains no valid license. The service will be stopped!

Error: (03/02/2014 05:17:20 PM) (Source: Avira Antivirus) (User: NT AUTHORITY)
Description: The keyfile contains no valid license. The service will be stopped!

Error: (02/25/2014 00:37:09 PM) (Source: Microsoft Office 12) (User: )
Description: EventType officelifeboathang, P1 winword.exe, P2 12.0.4518.1014, P3 ntdll.dll, P4 5.1.2600.6055, P5 NIL, P6 NIL, P7 NIL, P8 NIL, P9 officelifeboathang0, P10 officelifeboathang1.

Error: (02/25/2014 00:34:41 PM) (Source: Microsoft Office 12) (User: )
Description: EventType officelifeboathang, P1 winword.exe, P2 12.0.4518.1014, P3 ntdll.dll, P4 5.1.2600.6055, P5 NIL, P6 NIL, P7 NIL, P8 NIL, P9 officelifeboathang0, P10 officelifeboathang1.

Error: (02/25/2014 00:33:50 PM) (Source: Microsoft Office 12) (User: )
Description: EventType officelifeboathang, P1 winword.exe, P2 12.0.4518.1014, P3 ntdll.dll, P4 5.1.2600.6055, P5 NIL, P6 NIL, P7 NIL, P8 NIL, P9 officelifeboathang0, P10 officelifeboathang1.

Error: (11/09/2013 05:14:09 PM) (Source: Microsoft Office 12) (User: )
Description: EventType officelifeboathang, P1 winword.exe, P2 12.0.4518.1014, P3 wwlib.dll, P4 12.0.4518.1014, P5 NIL, P6 NIL, P7 NIL, P8 NIL, P9 officelifeboathang0, P10 officelifeboathang1.

Error: (08/05/2013 02:08:45 PM) (Source: crypt32) (User: )
Description: Extrakce kořenového seznamu jiného výrobce ze souboru CAB pro automatickou aktualizaci v: <http://www.download.windowsupdate.com/m ... ootstl.cab> se nezdařilo. Chyba: Při ověření se systémovými hodinami nebo časovým razítkem podepsaného souboru bylo zjištěno, že požadovaný certifikát je mimo lhůtu platnosti.

Error: (08/05/2013 02:08:44 PM) (Source: crypt32) (User: )
Description: Extrakce kořenového seznamu jiného výrobce ze souboru CAB pro automatickou aktualizaci v: <http://www.download.windowsupdate.com/m ... ootstl.cab> se nezdařilo. Chyba: Při ověření se systémovými hodinami nebo časovým razítkem podepsaného souboru bylo zjištěno, že požadovaný certifikát je mimo lhůtu platnosti.


System errors:
=============
Error: (03/18/2014 05:01:03 PM) (Source: Dhcp) (User: )
Description: Zapůjčení adresy IP počítače 192.168.2.104 pro
síťovou kartu se síťovou adresou 0022FB3CF70C byla ukončena.

Error: (03/18/2014 11:29:48 AM) (Source: Service Control Manager) (User: )
Description: Zavedení následujícího ovladače pro spouštění počítače nebo systému se nezdařilo:
Lbd

Error: (03/18/2014 11:29:02 AM) (Source: Service Control Manager) (User: )
Description: Služba Util Kozaka neuspěla při spuštění v důsledku následující chyby:
%%3

Error: (03/18/2014 11:29:02 AM) (Source: Service Control Manager) (User: )
Description: Služba Update Kozaka neuspěla při spuštění v důsledku následující chyby:
%%3

Error: (03/18/2014 11:29:02 AM) (Source: Service Control Manager) (User: )
Description: Služba Lavasoft Ad-Aware Service neuspěla při spuštění v důsledku následující chyby:
%%3

Error: (03/17/2014 08:53:20 PM) (Source: Windows Update Agent) (User: )
Description: Instalace se nezdařila: Instalace následující aktualizace se nezdařila z důvodu chyby (0x8007f001): Aktualizace zabezpečení systému Windows XP (KB973768).

Error: (03/17/2014 02:34:53 PM) (Source: Dhcp) (User: )
Description: Zapůjčení adresy IP počítače 192.168.2.104 pro
síťovou kartu se síťovou adresou 0022FB3CF70C byla ukončena.

Error: (03/17/2014 10:28:17 AM) (Source: Service Control Manager) (User: )
Description: Zavedení následujícího ovladače pro spouštění počítače nebo systému se nezdařilo:
Lbd

Error: (03/17/2014 10:27:17 AM) (Source: Service Control Manager) (User: )
Description: Služba Util Kozaka neuspěla při spuštění v důsledku následující chyby:
%%3

Error: (03/17/2014 10:27:17 AM) (Source: Service Control Manager) (User: )
Description: Služba Update Kozaka neuspěla při spuštění v důsledku následující chyby:
%%3


Microsoft Office Sessions:
=========================
Error: (01/18/2012 08:05:05 AM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 32 seconds with 0 seconds of active time. This session ended with a crash.


==================== Memory info ===========================

Percentage of memory in use: 25%
Total physical RAM: 2974.88 MB
Available physical RAM: 2207.15 MB
Total Pagefile: 4861.42 MB
Available Pagefile: 4081.12 MB
Total Virtual: 2047.88 MB
Available Virtual: 1949.21 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:298.08 GB) (Free:228.56 GB) NTFS ==>[Drive with boot components (Windows XP)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 298 GB) (Disk ID: 7080FDBA)
Partition 1: (Active) - (Size=298 GB) - (Type=07 NTFS)

==================== End Of Log ============================

Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Infekce - trojský kůň

#11 Příspěvek od vyosek »

:arrow: Tvorba fixlistu pro FRST
  • Spustte poznamkovy blok (Start-spustit-notepad)
  • Zkopirujte skript nize
  • Kód: Vybrat vše

    Start
    HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
    HKLM\...\Runonce: [AvgUninstallURL] - cmd.exe /c start http://www.avg.cz/cz.special-uninstalla ... gBQAEEATgA"&"inst=NwA3AC0ANAA0ADUAMAA3ADQANgA5ADMALQBCAEEAUgA5AE8AKwAxAC0ARgBMACsAOQAtAFgATwAzADYAKwAxAA"&"prod=90"&"ver=9.0.894
    HKU\.DEFAULT\...\RunOnce: [AutoLaunch] - C:\Program Files\Lavasoft\Ad-Aware\AutoLaunch.exe monthly
    HKU\S-1-5-21-1177238915-1957994488-2147156445-1005\...\Run: [Seznam Postak] - C:\Documents and Settings\oem\Local Settings\Data aplikací\Seznam.cz\postak.exe [489584 2011-01-19] ()
    HKU\S-1-5-21-1177238915-1957994488-2147156445-1005\...\Run: [MSMSGS] - C:\Program Files\Messenger\msmsgs.exe [1695232 2008-04-14] (Microsoft Corporation)
    GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
    
    HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
    HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
    SearchScopes: HKLM - DefaultScope value is missing.
    SearchScopes: HKCU - DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}
    SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}
    BHO: IMPI - {17E113E6-CD0E-4045-B154-65F0E57959EF} - C:\Program Files\IMPI\Extension32.dll ()
    
    FF SearchPlugin: C:\Documents and Settings\oem\Data aplikací\Mozilla\Firefox\Profiles\acmtm6o3.default\searchplugins\express-files-customized-web-search.xml
    FF Extension: Lišta Centrum.cz - C:\Documents and Settings\oem\Data aplikací\Mozilla\Firefox\Profiles\acmtm6o3.default\Extensions\toolbar@centrumholdings(2).com [2014-01-17]
    FF Extension: WebSite Recommendation - C:\Documents and Settings\oem\Data aplikací\Mozilla\Firefox\Profiles\acmtm6o3.default\Extensions\WebSiteRecommendation@weliketheweb.com [2013-12-24]
    FF Extension: Avira SearchFree Toolbar plus Web Protection - C:\Documents and Settings\oem\Data aplikací\Mozilla\Firefox\Profiles\acmtm6o3.default\Extensions\toolbar_AVIRA-V7C@apn.ask.com.xpi [2013-12-20]
    
    CHR Extension: (IMPI) - C:\Documents and Settings\oem\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\ncdfeinlpefandfngbdmdgjgepebkjap [2013-03-16]
    CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
    
    R2 IMPI Updater; C:\Program Files\IMPI\ExtensionUpdaterService.exe [185856 2013-02-05] ()
    S2 Lavasoft Ad-Aware Service; "C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe" [X]
    S2 Update Kozaka; "C:\Program Files\Kozaka\updateKozaka.exe" [X]
    S2 Util Kozaka; "C:\Program Files\Kozaka\bin\utilKozaka.exe" [X]
    S0 Lbd; system32\DRIVERS\Lbd.sys [X]
    
    DisableService: gupdate1ca88a037f522fc
    DisableService: JavaQuickStarterService
    
    C:\Program Files\Kozaka
    C:\Program Files\IMPI
    2014-03-18 18:25 - 2014-03-18 18:25 - 00029696 _____ () C:\Documents and Settings\oem\Local Settings\Data aplikací\MSGBOX.EXE
    2014-03-18 18:25 - 2014-03-18 18:25 - 00015327 _____ () C:\Documents and Settings\oem\Plocha\LM.bat
    2014-03-17 10:25 - 2014-03-17 10:13 - 00024064 _____ () C:\WINDOWS\zoek-delete.exe
    2014-03-17 10:14 - 2014-03-17 10:27 - 00008420 _____ () C:\zoek-results.log
    2014-03-17 10:13 - 2014-03-17 10:22 - 00000000 ____D () C:\zoek_backup
    2014-03-17 10:12 - 2014-03-17 10:12 - 01285120 _____ () C:\Documents and Settings\oem\Plocha\zoek.exe
    2014-03-16 20:03 - 2014-03-16 20:04 - 01950720 _____ () C:\Documents and Settings\oem\Plocha\adwcleaner.exe
    2014-03-16 20:03 - 2014-03-16 20:04 - 01037734 _____ (Thisisu) C:\Documents and Settings\oem\Plocha\JRT.exe
    
    Task: C:\WINDOWS\Tasks\Ad-Aware Update (Weekly).job => C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe
    Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
    Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
    Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
    Task: C:\WINDOWS\Tasks\Měsíční oznamování konce poskytování služeb pro Microsoft Windows XP.job => C:\WINDOWS\system32\xp_eos.exe
    Task: C:\WINDOWS\Tasks\Přihlášení k oznamování konce poskytování služeb pro Microsoft Windows XP.job => C:\WINDOWS\system32\xp_eos.exe
    Task: C:\WINDOWS\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-1177238915-1957994488-2147156445-1005.job => C:\Program Files\Real\RealUpgrade\realupgrade.exe
    Task: C:\WINDOWS\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-1177238915-1957994488-2147156445-1005.job => C:\Program Files\Real\RealUpgrade\realupgrade.exe
    
    AlternateDataStreams: C:\Documents and Settings\All Users\Data aplikací\TEMP:A1063995
    
    Hosts:
    CMD: shutdown /r /f /t 2
    
    End
  • Ulozte vytvoreny TXT jako fixlist.txt
  • Presunte vytvoreny fixlist vedle FRST
:arrow: Spustte znovu FRST.exe
  • Kliknete na Fix
  • Probehne oprava a vytvori log Fixlog.txt
:arrow: Restart PC a dejte mi sem fixlog.txt
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.

apache.davidson
Návštěvník
Návštěvník
Příspěvky: 26
Registrován: 21 Led 2009 17:50

Re: Infekce - trojský kůň

#12 Příspěvek od apache.davidson »

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 13-03-2014 01
Ran by oem at 2014-03-19 19:49:19 Run:1
Running from C:\Documents and Settings\oem\Plocha
Boot Mode: Normal

==============================================

Content of fixlist:
*****************
Start
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM\...\Runonce: [AvgUninstallURL] - cmd.exe /c start http://www.avg.cz/cz.special-uninstalla ... gBQAEEATgA"&"inst=NwA3AC0ANAA0ADUAMAA3ADQANgA5ADMALQBCAEEAUgA5AE8AKwAxAC0ARgBMACsAOQAtAFgATwAzADYAKwAxAA"&"prod=90"&"ver=9.0.894
HKU\.DEFAULT\...\RunOnce: [AutoLaunch] - C:\Program Files\Lavasoft\Ad-Aware\AutoLaunch.exe monthly
HKU\S-1-5-21-1177238915-1957994488-2147156445-1005\...\Run: [Seznam Postak] - C:\Documents and Settings\oem\Local Settings\Data aplikací\Seznam.cz\postak.exe [489584 2011-01-19] ()
HKU\S-1-5-21-1177238915-1957994488-2147156445-1005\...\Run: [MSMSGS] - C:\Program Files\Messenger\msmsgs.exe [1695232 2008-04-14] (Microsoft Corporation)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={searchT ... {startPage}
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={searchT ... {startPage}
BHO: IMPI - {17E113E6-CD0E-4045-B154-65F0E57959EF} - C:\Program Files\IMPI\Extension32.dll ()

FF SearchPlugin: C:\Documents and Settings\oem\Data aplikací\Mozilla\Firefox\Profiles\acmtm6o3.default\searchplugins\express-files-customized-web-search.xml
FF Extension: Lišta Centrum.cz - C:\Documents and Settings\oem\Data aplikací\Mozilla\Firefox\Profiles\acmtm6o3.default\Extensions\toolbar@centrumholdings(2).com [2014-01-17]
FF Extension: WebSite Recommendation - C:\Documents and Settings\oem\Data aplikací\Mozilla\Firefox\Profiles\acmtm6o3.default\Extensions\WebSiteRecommendation@weliketheweb.com [2013-12-24]
FF Extension: Avira SearchFree Toolbar plus Web Protection - C:\Documents and Settings\oem\Data aplikací\Mozilla\Firefox\Profiles\acmtm6o3.default\Extensions\toolbar_AVIRA-V7C@apn.ask.com.xpi [2013-12-20]

CHR Extension: (IMPI) - C:\Documents and Settings\oem\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\ncdfeinlpefandfngbdmdgjgepebkjap [2013-03-16]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

R2 IMPI Updater; C:\Program Files\IMPI\ExtensionUpdaterService.exe [185856 2013-02-05] ()
S2 Lavasoft Ad-Aware Service; "C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe" [X]
S2 Update Kozaka; "C:\Program Files\Kozaka\updateKozaka.exe" [X]
S2 Util Kozaka; "C:\Program Files\Kozaka\bin\utilKozaka.exe" [X]
S0 Lbd; system32\DRIVERS\Lbd.sys [X]

DisableService: gupdate1ca88a037f522fc
DisableService: JavaQuickStarterService

C:\Program Files\Kozaka
C:\Program Files\IMPI
2014-03-18 18:25 - 2014-03-18 18:25 - 00029696 _____ () C:\Documents and Settings\oem\Local Settings\Data aplikací\MSGBOX.EXE
2014-03-18 18:25 - 2014-03-18 18:25 - 00015327 _____ () C:\Documents and Settings\oem\Plocha\LM.bat
2014-03-17 10:25 - 2014-03-17 10:13 - 00024064 _____ () C:\WINDOWS\zoek-delete.exe
2014-03-17 10:14 - 2014-03-17 10:27 - 00008420 _____ () C:\zoek-results.log
2014-03-17 10:13 - 2014-03-17 10:22 - 00000000 ____D () C:\zoek_backup
2014-03-17 10:12 - 2014-03-17 10:12 - 01285120 _____ () C:\Documents and Settings\oem\Plocha\zoek.exe
2014-03-16 20:03 - 2014-03-16 20:04 - 01950720 _____ () C:\Documents and Settings\oem\Plocha\adwcleaner.exe
2014-03-16 20:03 - 2014-03-16 20:04 - 01037734 _____ (Thisisu) C:\Documents and Settings\oem\Plocha\JRT.exe

Task: C:\WINDOWS\Tasks\Ad-Aware Update (Weekly).job => C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\Měsíční oznamování konce poskytování služeb pro Microsoft Windows XP.job => C:\WINDOWS\system32\xp_eos.exe
Task: C:\WINDOWS\Tasks\Přihlášení k oznamování konce poskytování služeb pro Microsoft Windows XP.job => C:\WINDOWS\system32\xp_eos.exe
Task: C:\WINDOWS\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-1177238915-1957994488-2147156445-1005.job => C:\Program Files\Real\RealUpgrade\realupgrade.exe
Task: C:\WINDOWS\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-1177238915-1957994488-2147156445-1005.job => C:\Program Files\Real\RealUpgrade\realupgrade.exe

AlternateDataStreams: C:\Documents and Settings\All Users\Data aplikací\TEMP:A1063995

Hosts:
CMD: shutdown /r /f /t 2

End
*****************

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM => Value deleted successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce\\AvgUninstallURL => Value deleted successfully.
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce\\AutoLaunch => Value deleted successfully.
HKU\S-1-5-21-1177238915-1957994488-2147156445-1005\Software\Microsoft\Windows\CurrentVersion\Run\\Seznam Postak => Value deleted successfully.
HKU\S-1-5-21-1177238915-1957994488-2147156445-1005\Software\Microsoft\Windows\CurrentVersion\Run\\MSMSGS => Value deleted successfully.
C:\WINDOWS\system32\GroupPolicy\Machine => Moved successfully.
C:\WINDOWS\system32\GroupPolicy\GPT.ini => Moved successfully.
HKCU\Software\Microsoft\Internet Explorer\Main\\Search Page => Value was restored successfully.
HKLM\Software\\Microsoft\Internet Explorer\Main\\Local Page => Value was restored successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value deleted successfully.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} => Key not found.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{17E113E6-CD0E-4045-B154-65F0E57959EF} => Key deleted successfully.
HKCR\CLSID\{17E113E6-CD0E-4045-B154-65F0E57959EF} => Key deleted successfully.
C:\Documents and Settings\oem\Data aplikací\Mozilla\Firefox\Profiles\acmtm6o3.default\searchplugins\express-files-customized-web-search.xml => Moved successfully.
C:\Documents and Settings\oem\Data aplikací\Mozilla\Firefox\Profiles\acmtm6o3.default\Extensions\toolbar@centrumholdings(2).com => Moved successfully.
C:\Documents and Settings\oem\Data aplikací\Mozilla\Firefox\Profiles\acmtm6o3.default\Extensions\WebSiteRecommendation@weliketheweb.com => Moved successfully.
C:\Documents and Settings\oem\Data aplikací\Mozilla\Firefox\Profiles\acmtm6o3.default\Extensions\toolbar_AVIRA-V7C@apn.ask.com.xpi => Moved successfully.
C:\Documents and Settings\oem\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\ncdfeinlpefandfngbdmdgjgepebkjap => Moved successfully.
HKLM\SOFTWARE\Policies\Google => Key deleted successfully.
IMPI Updater => Service stopped successfully.
IMPI Updater => Service deleted successfully.
Lavasoft Ad-Aware Service => Service deleted successfully.
Update Kozaka => Service deleted successfully.
Util Kozaka => Service deleted successfully.
Lbd => Service deleted successfully.
gupdate1ca88a037f522fc service was disabled
JavaQuickStarterService service was disabled
"C:\Program Files\Kozaka" => File/Directory not found.
C:\Program Files\IMPI => Moved successfully.
C:\Documents and Settings\oem\Local Settings\Data aplikací\MSGBOX.EXE => Moved successfully.
C:\Documents and Settings\oem\Plocha\LM.bat => Moved successfully.
C:\WINDOWS\zoek-delete.exe => Moved successfully.
C:\zoek-results.log => Moved successfully.
C:\zoek_backup => Moved successfully.
C:\Documents and Settings\oem\Plocha\zoek.exe => Moved successfully.
C:\Documents and Settings\oem\Plocha\adwcleaner.exe => Moved successfully.
C:\Documents and Settings\oem\Plocha\JRT.exe => Moved successfully.
C:\WINDOWS\Tasks\Ad-Aware Update (Weekly).job => Moved successfully.
C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => Moved successfully.
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => Moved successfully.
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => Moved successfully.
C:\WINDOWS\Tasks\Měsíční oznamování konce poskytování služeb pro Microsoft Windows XP.job => Moved successfully.
C:\WINDOWS\Tasks\Přihlášení k oznamování konce poskytování služeb pro Microsoft Windows XP.job => Moved successfully.
C:\WINDOWS\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-1177238915-1957994488-2147156445-1005.job => Moved successfully.
C:\WINDOWS\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-1177238915-1957994488-2147156445-1005.job => Moved successfully.
C:\Documents and Settings\All Users\Data aplikací\TEMP => ":A1063995" ADS removed successfully.
Could not reset Hosts.

========= shutdown /r /f /t 2 =========


========= End of CMD: =========



The system needed a reboot.

==== End of Fixlog ====

Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Infekce - trojský kůň

#13 Příspěvek od vyosek »

Tak jeste uklidime :James008:

:arrow: T-Cleaner http://vyosek.tym.cz/pro_usery/T-Cleaner.exe
  • Stahnete a spustte
  • Pro potvrzeni volby mackejte A, Enter
  • Po pouziti utilitu smazte
  • Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)
:arrow: OTC http://oldtimer.geekstogo.com/OTC.exe
  • Stahnete a spustte
  • Kliknete na CleanUp a potvrdte YES
  • Program uklidi a restartuje PC

:arrow: TFC http://oldtimer.geekstogo.com/TFC.exe
  • Stahnete a spustte
  • Kliknete na Start a potvrdte OK
  • Program uklidi a restartuje pc
  • Po pouziti utilitu smazte
:arrow: Stahnete Ccleaner http://forum.viry.cz/viewtopic.php?t=7478
Panel čistič
  • Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner
Panel registry
  • dejte Hledej problémy
  • nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
  • postup opakujte dokud nebude bez problemu - vetsinou cca 3x
Panel nástroje
  • Zde muzete odinstalovat nepotrebne programy
CCleaner doporucuji pouzivat cca jednou za tyden

:arrow: A pokud nejsou problemy ci dotazy, je to z me strany vse :|
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.

apache.davidson
Návštěvník
Návštěvník
Příspěvky: 26
Registrován: 21 Led 2009 17:50

Re: Infekce - trojský kůň

#14 Příspěvek od apache.davidson »

Mockrat dekuji za pomoc! :)

Preji hezky vecer.

Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Infekce - trojský kůň

#15 Příspěvek od vyosek »

Nemate zac, rad jsem pomohl :worship: Zase nekdy Obrázek

A na zaklade Pravidla o zamykani temat :lock:
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.

Zamčeno