odvirování počítače pro motji

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz


Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Zpráva
Autor
atom.jon
Návštěvník
Návštěvník
Příspěvky: 51
Registrován: 15 Led 2012 19:59

Re: odvirování počítače pro motji

#16 Příspěvek od atom.jon »

tak tady to je, snad je to provedeno dobře :) musím na víckrát, nejde to odeslat celé

ComboFix 14-04-12.01 - Ariel 15.04.2014 12:19:29.4.2 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.4040.2185 [GMT 2:00]
Spuštěný z: c:\users\Ariel\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\Ariel\Desktop\CFScript.txt
AV: Norton Internet Security *Disabled/Outdated* {D87FA2C0-F526-77B1-D6EC-0EDF3936CEDB}
FW: Norton Internet Security *Disabled* {E04423E5-BF49-76E9-FDB3-A7EAC7E589A0}
SP: Norton Internet Security *Disabled/Outdated* {631E4324-D31C-783F-EC5C-35AD42B18466}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
FILE ::
"c:\windows\tasks\Dealply.job"
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\AskPartnerNetwork
c:\program files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe
c:\program files (x86)\AskPartnerNetwork\Toolbar\APNSetup.exe
c:\program files (x86)\AskPartnerNetwork\Toolbar\ATU4-V7\Source\1031.mst
c:\program files (x86)\AskPartnerNetwork\Toolbar\ATU4-V7\Source\1033.mst
c:\program files (x86)\AskPartnerNetwork\Toolbar\ATU4-V7\Source\1034.mst
c:\program files (x86)\AskPartnerNetwork\Toolbar\ATU4-V7\Source\1036.mst
c:\program files (x86)\AskPartnerNetwork\Toolbar\ATU4-V7\Source\1040.mst
c:\program files (x86)\AskPartnerNetwork\Toolbar\ATU4-V7\Source\1041.mst
c:\program files (x86)\AskPartnerNetwork\Toolbar\ATU4-V7\Source\1043.mst
c:\program files (x86)\AskPartnerNetwork\Toolbar\ATU4-V7\Source\1045.mst
c:\program files (x86)\AskPartnerNetwork\Toolbar\ATU4-V7\Source\1049.mst
c:\program files (x86)\AskPartnerNetwork\Toolbar\ATU4-V7\Source\2070.mst
c:\program files (x86)\AskPartnerNetwork\Toolbar\ATU4-V7\Source\appdata\Mozilla\Firefox\Profiles\{DefaultProfilesFolder}\extensions\toolbar_ATU4-V7@apn.ask.com.xpi
c:\program files (x86)\AskPartnerNetwork\Toolbar\ATU4-V7\Source\AskToolbarInstaller-12.10.0_ATU4-V7.msi
c:\program files (x86)\AskPartnerNetwork\Toolbar\ATU4-V7\Source\AskToolbarInstaller-12.10.2_ATU4-V7.msi
c:\program files (x86)\AskPartnerNetwork\Toolbar\ATU4-V7\Source\AskToolbarInstaller-12.10.3_ATU4-V7.msi
c:\program files (x86)\AskPartnerNetwork\Toolbar\ATU4-V7\Source\AskToolbarInstaller-12.10.6_ATU4-V7.msi
c:\program files (x86)\AskPartnerNetwork\Toolbar\ATU4-V7\Source\common appdata\AskPartnerNetwork\Toolbar\{PartnerID}\CRX\{Crx_Version}\Toolbar.crx
c:\program files (x86)\AskPartnerNetwork\Toolbar\ATU4-V7\Source\common appdata\AskPartnerNetwork\Toolbar\{PartnerID}\CRX\ToolbarCR.crx
c:\program files (x86)\AskPartnerNetwork\Toolbar\ATU4-V7\Source\common appdata\AskPartnerNetwork\Toolbar\{PartnerID}\CRX\Update.xml
c:\program files (x86)\AskPartnerNetwork\Toolbar\ATU4-V7\Source\program files\AskPartnerNetwork\Toolbar\{PartnerID}\Passport.dll
c:\program files (x86)\AskPartnerNetwork\Toolbar\ATU4-V7\Source\program files\AskPartnerNetwork\Toolbar\{PartnerID}\Passport_x64.dll
c:\program files (x86)\AskPartnerNetwork\Toolbar\ATU4-V7\Source\program files\AskPartnerNetwork\Toolbar\apnmcp.exe
c:\program files (x86)\AskPartnerNetwork\Toolbar\ATU4-V7\Source\program files\AskPartnerNetwork\Toolbar\searchhook.dll
c:\program files (x86)\AskPartnerNetwork\Toolbar\ATU4-V7\Source\program files\AskPartnerNetwork\Toolbar\ServiceLocator.exe
c:\program files (x86)\AskPartnerNetwork\Toolbar\ATU4-V7\Source\program files\AskPartnerNetwork\Toolbar\SO.dll
c:\program files (x86)\AskPartnerNetwork\Toolbar\ATU4-V7\Source\program files\AskPartnerNetwork\Toolbar\toolbar.dll
c:\program files (x86)\AskPartnerNetwork\Toolbar\ATU4-V7\Source\program files\AskPartnerNetwork\Toolbar\Toolbar.exe
c:\program files (x86)\AskPartnerNetwork\Toolbar\ATU4-V7\Source\program files\AskPartnerNetwork\Toolbar\toolbar_x64.dll
c:\program files (x86)\AskPartnerNetwork\Toolbar\ATU4-V7\Source\program files\AskPartnerNetwork\Toolbar\ToolbarPS.dll
c:\program files (x86)\AskPartnerNetwork\Toolbar\ATU4-V7\Source\program files\AskPartnerNetwork\Toolbar\UpdateManager.exe
c:\program files (x86)\AskPartnerNetwork\Toolbar\ATU4-V7\Source\program files\AskPartnerNetwork\Toolbar\Updater\{PartnerID}\config.xml
c:\program files (x86)\AskPartnerNetwork\Toolbar\ATU4-V7\Source\program files\AskPartnerNetwork\Toolbar\Updater\ask-search.xml
c:\program files (x86)\AskPartnerNetwork\Toolbar\ATU4-V7\Source\program files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
c:\program files (x86)\AskPartnerNetwork\Toolbar\ATU4-V7\Source\program files\VNT\content.zip
c:\program files (x86)\AskPartnerNetwork\Toolbar\ATU4-V7\Source\program files\VNT\vntldr.exe
c:\program files (x86)\AskPartnerNetwork\Toolbar\ATU4-V7\Source\program files\VNT\vntsrv.dll
c:\program files (x86)\AskPartnerNetwork\Toolbar\ORJ\Passport.dll
c:\program files (x86)\AskPartnerNetwork\Toolbar\ORJ\Passport_x64.dll
c:\program files (x86)\AskPartnerNetwork\Toolbar\ORJ\Source\1031.mst
c:\program files (x86)\AskPartnerNetwork\Toolbar\ORJ\Source\1033.mst
c:\program files (x86)\AskPartnerNetwork\Toolbar\ORJ\Source\1034.mst
c:\program files (x86)\AskPartnerNetwork\Toolbar\ORJ\Source\1036.mst
c:\program files (x86)\AskPartnerNetwork\Toolbar\ORJ\Source\1040.mst
c:\program files (x86)\AskPartnerNetwork\Toolbar\ORJ\Source\1041.mst
c:\program files (x86)\AskPartnerNetwork\Toolbar\ORJ\Source\1043.mst
c:\program files (x86)\AskPartnerNetwork\Toolbar\ORJ\Source\1045.mst
c:\program files (x86)\AskPartnerNetwork\Toolbar\ORJ\Source\1049.mst
c:\program files (x86)\AskPartnerNetwork\Toolbar\ORJ\Source\2070.mst
c:\program files (x86)\AskPartnerNetwork\Toolbar\ORJ\Source\appdata\Mozilla\Firefox\Profiles\{DefaultProfilesFolder}\extensions\toolbar@ask.com.xpi
c:\program files (x86)\AskPartnerNetwork\Toolbar\ORJ\Source\AskToolbarInstaller-12.10.3_ORJ.msi
c:\program files (x86)\AskPartnerNetwork\Toolbar\ORJ\Source\AskToolbarInstaller-12.10.6_ORJ.msi
c:\program files (x86)\AskPartnerNetwork\Toolbar\ORJ\Source\common appdata\AskPartnerNetwork\Toolbar\{PartnerID}\CRX\{Crx_Version}\Toolbar.crx
c:\program files (x86)\AskPartnerNetwork\Toolbar\ORJ\Source\common appdata\AskPartnerNetwork\Toolbar\{PartnerID}\CRX\ToolbarCR.crx
c:\program files (x86)\AskPartnerNetwork\Toolbar\ORJ\Source\common appdata\AskPartnerNetwork\Toolbar\{PartnerID}\CRX\Update.xml
c:\program files (x86)\AskPartnerNetwork\Toolbar\ORJ\Source\program files\AskPartnerNetwork\Toolbar\{PartnerID}\Passport.dll
c:\program files (x86)\AskPartnerNetwork\Toolbar\ORJ\Source\program files\AskPartnerNetwork\Toolbar\{PartnerID}\Passport_x64.dll
c:\program files (x86)\AskPartnerNetwork\Toolbar\ORJ\Source\program files\AskPartnerNetwork\Toolbar\apnmcp.exe
c:\program files (x86)\AskPartnerNetwork\Toolbar\ORJ\Source\program files\AskPartnerNetwork\Toolbar\searchhook.dll
c:\program files (x86)\AskPartnerNetwork\Toolbar\ORJ\Source\program files\AskPartnerNetwork\Toolbar\ServiceLocator.exe
c:\program files (x86)\AskPartnerNetwork\Toolbar\ORJ\Source\program files\AskPartnerNetwork\Toolbar\SO.dll
c:\program files (x86)\AskPartnerNetwork\Toolbar\ORJ\Source\program files\AskPartnerNetwork\Toolbar\toolbar.dll
c:\program files (x86)\AskPartnerNetwork\Toolbar\ORJ\Source\program files\AskPartnerNetwork\Toolbar\Toolbar.exe
c:\program files (x86)\AskPartnerNetwork\Toolbar\ORJ\Source\program files\AskPartnerNetwork\Toolbar\toolbar_x64.dll
c:\program files (x86)\AskPartnerNetwork\Toolbar\ORJ\Source\program files\AskPartnerNetwork\Toolbar\ToolbarPS.dll
c:\program files (x86)\AskPartnerNetwork\Toolbar\ORJ\Source\program files\AskPartnerNetwork\Toolbar\UpdateManager.exe
c:\program files (x86)\AskPartnerNetwork\Toolbar\ORJ\Source\program files\AskPartnerNetwork\Toolbar\Updater\{PartnerID}\config.xml
c:\program files (x86)\AskPartnerNetwork\Toolbar\ORJ\Source\program files\AskPartnerNetwork\Toolbar\Updater\ask-search.xml
c:\program files (x86)\AskPartnerNetwork\Toolbar\ORJ\Source\program files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
c:\program files (x86)\AskPartnerNetwork\Toolbar\ORJ\Source\program files\VNT\content.zip
c:\program files (x86)\AskPartnerNetwork\Toolbar\ORJ\Source\program files\VNT\vntldr.exe
c:\program files (x86)\AskPartnerNetwork\Toolbar\ORJ\Source\program files\VNT\vntsrv.dll

atom.jon
Návštěvník
Návštěvník
Příspěvky: 51
Registrován: 15 Led 2012 19:59

Re: odvirování počítače pro motji

#17 Příspěvek od atom.jon »

c:\program files (x86)\AskPartnerNetwork\Toolbar\searchhook.dll
c:\program files (x86)\AskPartnerNetwork\Toolbar\ServiceLocator.exe
c:\program files (x86)\AskPartnerNetwork\Toolbar\SO.dll
c:\program files (x86)\AskPartnerNetwork\Toolbar\toolbar.dll
c:\program files (x86)\AskPartnerNetwork\Toolbar\Toolbar.exe
c:\program files (x86)\AskPartnerNetwork\Toolbar\toolbar_x64.dll
c:\program files (x86)\AskPartnerNetwork\Toolbar\ToolbarPS.dll
c:\program files (x86)\AskPartnerNetwork\Toolbar\UpdateManager.exe
c:\program files (x86)\AskPartnerNetwork\Toolbar\Updater\ask-search.xml
c:\program files (x86)\AskPartnerNetwork\Toolbar\Updater\ATU4-V7\config.xml
c:\program files (x86)\AskPartnerNetwork\Toolbar\Updater\ORJ\config.xml
c:\program files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
c:\program files (x86)\atube
c:\program files (x86)\atube\as_guid.dat
c:\program files (x86)\atube\ask.xml
c:\program files (x86)\atube\atubeX.dll
c:\program files (x86)\atube\components\windowmediator.js
c:\program files (x86)\atube\dtUser.exe
c:\program files (x86)\atube\chrome\cleanCVS.bat
c:\program files (x86)\atube\chrome\content\custom.js
c:\program files (x86)\atube\chrome\content\lib\about.xml
c:\program files (x86)\atube\chrome\content\lib\custom.js
c:\program files (x86)\atube\chrome\content\lib\dtxpanel.xul
c:\program files (x86)\atube\chrome\content\lib\dtxpaneltransparent.xul
c:\program files (x86)\atube\chrome\content\lib\dtxpanelwin.xul
c:\program files (x86)\atube\chrome\content\lib\dtxprefwin.xul
c:\program files (x86)\atube\chrome\content\lib\dtxtransparentwin.xul
c:\program files (x86)\atube\chrome\content\lib\dtxwin.xul
c:\program files (x86)\atube\chrome\content\lib\emailnotifierproviders.xml
c:\program files (x86)\atube\chrome\content\lib\external.js
c:\program files (x86)\atube\chrome\content\lib\neterror.xhtml
c:\program files (x86)\atube\chrome\content\lib\rsspreview.html
c:\program files (x86)\atube\chrome\content\lib\rsswin.xml
c:\program files (x86)\atube\chrome\content\lib\rsswin.xsl
c:\program files (x86)\atube\chrome\content\lib\wmpstreamer.html
c:\program files (x86)\atube\chrome\content\modules\datastore.jsm
c:\program files (x86)\atube\chrome\content\modules\nsDragAndDrop.js
c:\program files (x86)\atube\chrome\content\neterror.xhtml
c:\program files (x86)\atube\chrome\content\newtab\images\btn_search.gif
c:\program files (x86)\atube\chrome\content\newtab\images\bullet.gif
c:\program files (x86)\atube\chrome\content\newtab\images\field_bg.gif
c:\program files (x86)\atube\chrome\content\newtab\images\powered_by_yahoo.gif
c:\program files (x86)\atube\chrome\content\newtab\newtab.html
c:\program files (x86)\atube\chrome\content\newtab\newtab_mystart.html
c:\program files (x86)\atube\chrome\content\newtab\newtab_yahoo.html
c:\program files (x86)\atube\chrome\content\preferences.xml
c:\program files (x86)\atube\chrome\content\template.xml
c:\program files (x86)\atube\chrome\content\toolbar.htm
c:\program files (x86)\atube\chrome\content\toolbar.xul
c:\program files (x86)\atube\chrome\content\vmncode.js
c:\program files (x86)\atube\chrome\content\vmnrsswin.xml
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\arrow-next-off.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\arrow-next.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\arrow-previous-off.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\arrow-previous.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\bg.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\border-radius.htc
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\btn-gotostore.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\btn-wide-close-over.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\btn-wide-close.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\css\dialog.css
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\css\IE7Styles.css
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\dialog.css
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\images\arrow-grey.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\images\arrows_grey-left.gif
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\images\arrows_grey-right.gif
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\images\bg_top.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\images\btn-back.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\images\btn-search.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\images\coupon-activated.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\images\delete.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\images\loader.gif
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\images\noimage.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\images\power-by.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\images\save.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\images\scrollb-disable.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\images\scrollb-down.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\images\scrollb.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\images\scrollt-disable.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\images\scrollt-down.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\images\scrollt.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\images\sprite.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\images\tab-arrow-hover.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\images\tab-arrow.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\images\tab-off-l.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\images\tab-off-r.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\images\tab-on-l.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\images\tab-on-r.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\images\tab-over-l.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\images\tab-over-r.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\images\tab-white-left.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\images\tab-white-mdl.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\images\tab-white-right.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\images\vid-bg.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\index.html
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\js\jquery-1.4.2.min.js
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\js\jquery.event.wheel.js
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\js\jquery.pagination.js
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\js\jquery.scrollTo-min.js
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\js\JSON.js
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\js\listnav.js
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\js\main.js
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\not_available.gif
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\page_white_copy.gif
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\panel.html
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\partner.xml
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\pmfeed.xml
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\shopping-hot.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\skin\css\dialog.css
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\skin\images\bg.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\skin\images\btn-help-over.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\skin\images\btn-help.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\skin\images\btn-managealerts-over.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\skin\images\btn-managealerts.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\skin\images\btn-wide-close-over.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\skin\images\btn-wide-close.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\skin\images\default.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\skin\images\logo-bizrate.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\skin\images\tb_icon.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\skin\images\transparent.gif
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\skin\images\win-btm-left.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\skin\images\win-btm-mdl.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\skin\images\win-btm-right-resize.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\skin\images\win-btm-right.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\skin\main.html
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\skin\scripts\defscript.js
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\tb_icon.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\throbber.gif
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\widget.js
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\widget.jsw
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\widget.xml
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\widget_version.txt
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\css\dialog.css
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\arrow-grey.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\arrows_grey-left.gif
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\arrows_grey-right.gif
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\back.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\btn-search-over.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\btn-search.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\delete.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\scrollb-disable.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\scrollb-down.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\scrollb.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\scrollt-disable.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\scrollt-down.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\scrollt.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\tab-arrow-hover.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\tab-arrow.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\tab-off-l.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\tab-off-r.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\tab-on-l.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\tab-on-r.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\tab-over-l.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\tab-over-r.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\tab-red-left.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\tab-red-mdl.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\tab-red-right.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\tab-white-left.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\tab-white-mdl.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\tab-white-right.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\throbber.gif
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\vid-bg.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\youtube.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\index.html
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\js\function.js
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\js\jquery-1.4.2.min.js
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\js\JSON.js
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\skin\css\dialog.css
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\skin\images\bg-facebook.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\skin\images\blank.gif
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\skin\images\btn-wide-close-over.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\skin\images\btn-wide-close.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\skin\images\default.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\skin\images\transparent.gif
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\skin\images\win-btm-left.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\skin\images\win-btm-mdl.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\skin\images\win-btm-right-resize.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\skin\images\win-btm-right.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\skin\main.html
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\skin\scripts\defscript.js
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\skin\scripts\jquery-1.4.2.min.js
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\tb_icon.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\widget.js
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\widget.xml
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\widget_version.txt
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.RadioBeta\radiobeta-buffering.gif
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.RadioBeta\radiobeta-connecting.gif
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.RadioBeta\radiobeta-ico.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.RadioBeta\radiobeta-playing.gif
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.RadioBeta\radiobeta-stopped.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.RadioBeta\radiobeta.ico
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.RadioBeta\radiobeta.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.RadioBeta\tb_icon.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.RadioBeta\widget.js
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.RadioBeta\widget.jsw
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.RadioBeta\widget.xml
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\country.json
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\css\dialog.css
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\css\videoplayer.css
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\favorites.json
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\images\arrow-grey.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\images\arrows_grey-left.gif
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\images\arrows_grey-right.gif
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\images\back.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\images\btn-search-over.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\images\btn-search.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\images\delete.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\images\scrollb-disable.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\images\scrollb-down.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\images\scrollb.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\images\scrollt-disable.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\images\scrollt-down.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\images\scrollt.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\images\star-grey.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\images\star.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\images\tab-arrow-hover.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\images\tab-arrow.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\images\tab-off-l.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\images\tab-off-r.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\images\tab-on-l.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\images\tab-on-r.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\images\tab-over-l.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\images\tab-over-r.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\images\tab-red-left.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\images\tab-red-mdl.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\images\tab-red-right.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\images\tab-white-left.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\images\tab-white-mdl.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\images\tab-white-right.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\images\throbber.gif
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\images\vid-bg.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\index.html
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\js\function.js
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\js\jquery-1.4.2.min.js
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\js\jquery.autocomplete.min.js
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\js\jquery.event.wheel.js
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\js\jquery.jlembed.js
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\js\jquery.scrollTo-min.js
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\js\jquery.url.js
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\js\JSON.js
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\js\main.js
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\js\videoplayer.js
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\net.vmn.www.WebTV.zip
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\skin\css\dialog.css
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\skin\images\bg.gif
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\skin\images\btn-search.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\skin\images\btn-wide-close-over.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\skin\images\btn-wide-close.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\skin\images\default.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\skin\images\Thumbs.db
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\skin\images\transparent.gif
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\skin\images\win-btm-left.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\skin\images\win-btm-mdl.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\skin\images\win-btm-right-resize.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\skin\images\win-btm-right.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\skin\main.html
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\skin\scripts\defscript.js
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\tb_icon.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\videoplayer.html
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\widget.js
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\widget.xml
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\widget_version.txt
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\css\autocomplete.css
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\css\dialog.css
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\images\arrow-grey.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\images\arrows_grey-left.gif
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\images\arrows_grey-right.gif
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\images\bg.gif
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\images\btn-search-over.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\images\btn-search.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\images\powered-by-youtube.gif
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\images\tab-off-l.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\images\tab-off-r.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\images\tab-on-l.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\images\tab-on-r.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\images\tab-red-left.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\images\tab-red-mdl.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\images\tab-red-right.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\images\tab-white-left.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\images\tab-white-mdl.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\images\tab-white-right.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\images\throbber.gif
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\images\vid-bg.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\images\youtube.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\index.html
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\js\autocomplete.js
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\js\jquery-1.4.3.min.js
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\js\paginator.js
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\js\youtube.js
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\skin\css\dialog.css
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\skin\images\bg.gif
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\skin\images\btn-search.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\skin\images\btn-wide-close-over.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\skin\images\btn-wide-close.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\skin\images\default.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\skin\images\tab-off-l.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\skin\images\tab-off-r.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\skin\images\tab-on-l.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\skin\images\tab-on-r.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\skin\images\transparent.gif
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\skin\images\win-btm-left.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\skin\images\win-btm-mdl.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\skin\images\win-btm-right-resize.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\skin\images\win-btm-right.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\skin\main.html
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\skin\scripts\defscript.js
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\tb_icon.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\widget.js
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\widget.jsw
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\widget.xml
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\widget_version.txt

atom.jon
Návštěvník
Návštěvník
Příspěvky: 51
Registrován: 15 Led 2012 19:59

Re: odvirování počítače pro motji

#18 Příspěvek od atom.jon »

c:\program files (x86)\atube\chrome\data\dynamicElements\vmntoolbar.xsl
c:\program files (x86)\atube\chrome\data\rss\rss.xml
c:\program files (x86)\atube\chrome\data\search\engines.xml
c:\program files (x86)\atube\chrome\data\search\engines_mystart.xml
c:\program files (x86)\atube\chrome\data\search\engines_yahoo.xml
c:\program files (x86)\atube\chrome\data\search\search.xsl
c:\program files (x86)\atube\chrome\data\weather\icons.xml
c:\program files (x86)\atube\chrome\locale\lib\de.js
c:\program files (x86)\atube\chrome\locale\lib\en.js
c:\program files (x86)\atube\chrome\locale\lib\es.js
c:\program files (x86)\atube\chrome\locale\lib\fr.js
c:\program files (x86)\atube\chrome\locale\lib\it.js
c:\program files (x86)\atube\chrome\locale\locale.js
c:\program files (x86)\atube\chrome\locale\toolbar\de.js
c:\program files (x86)\atube\chrome\locale\toolbar\en.js
c:\program files (x86)\atube\chrome\locale\toolbar\es.js
c:\program files (x86)\atube\chrome\locale\toolbar\fr.js
c:\program files (x86)\atube\chrome\locale\toolbar\it.js
c:\program files (x86)\atube\chrome\skin\83745_thumb_ask_logo_24x.png
c:\program files (x86)\atube\chrome\skin\about.gif
c:\program files (x86)\atube\chrome\skin\about_logo.png
c:\program files (x86)\atube\chrome\skin\babylon_logo.png
c:\program files (x86)\atube\chrome\skin\bluelite.gif
c:\program files (x86)\atube\chrome\skin\bluesky.gif
c:\program files (x86)\atube\chrome\skin\btn-search-de.png
c:\program files (x86)\atube\chrome\skin\btn-search-en.png
c:\program files (x86)\atube\chrome\skin\btn-search-es.png
c:\program files (x86)\atube\chrome\skin\btn-search-fr.png
c:\program files (x86)\atube\chrome\skin\btn-search-it.png
c:\program files (x86)\atube\chrome\skin\btn-search-over-de.png
c:\program files (x86)\atube\chrome\skin\btn-search-over-en.png
c:\program files (x86)\atube\chrome\skin\btn-search-over-es.png
c:\program files (x86)\atube\chrome\skin\btn-search-over-fr.png
c:\program files (x86)\atube\chrome\skin\btn-search-over-it.png
c:\program files (x86)\atube\chrome\skin\btn-search-over.png
c:\program files (x86)\atube\chrome\skin\btn-search.png
c:\program files (x86)\atube\chrome\skin\btn-settings-over.png
c:\program files (x86)\atube\chrome\skin\btn-settings.png
c:\program files (x86)\atube\chrome\skin\btn-widgets-over.png
c:\program files (x86)\atube\chrome\skin\btn-widgets.png
c:\program files (x86)\atube\chrome\skin\btn_settings.png
c:\program files (x86)\atube\chrome\skin\ca.png
c:\program files (x86)\atube\chrome\skin\custom.css
c:\program files (x86)\atube\chrome\skin\dictionary.png
c:\program files (x86)\atube\chrome\skin\divider.png
c:\program files (x86)\atube\chrome\skin\downloadcom.png
c:\program files (x86)\atube\chrome\skin\dtxlogo.png
c:\program files (x86)\atube\chrome\skin\email.png
c:\program files (x86)\atube\chrome\skin\email_on.png
c:\program files (x86)\atube\chrome\skin\facebook.png
c:\program files (x86)\atube\chrome\skin\games.png
c:\program files (x86)\atube\chrome\skin\graphna.png
c:\program files (x86)\atube\chrome\skin\graphred0.png
c:\program files (x86)\atube\chrome\skin\graphred0_5.png
c:\program files (x86)\atube\chrome\skin\graphred1.png
c:\program files (x86)\atube\chrome\skin\graphred1_5.png
c:\program files (x86)\atube\chrome\skin\graphred2.png
c:\program files (x86)\atube\chrome\skin\graphred2_5.png
c:\program files (x86)\atube\chrome\skin\graphred3.png
c:\program files (x86)\atube\chrome\skin\graphred3_5.png
c:\program files (x86)\atube\chrome\skin\graphred4.png
c:\program files (x86)\atube\chrome\skin\graphred4_5.png
c:\program files (x86)\atube\chrome\skin\graphred5.png
c:\program files (x86)\atube\chrome\skin\graphredna.png
c:\program files (x86)\atube\chrome\skin\grey.gif
c:\program files (x86)\atube\chrome\skin\ico-shield.png
c:\program files (x86)\atube\chrome\skin\images.png
c:\program files (x86)\atube\chrome\skin\lib\add.png
c:\program files (x86)\atube\chrome\skin\lib\alexabutton.css
c:\program files (x86)\atube\chrome\skin\lib\aol.png
c:\program files (x86)\atube\chrome\skin\lib\arrow-dn.gif
c:\program files (x86)\atube\chrome\skin\lib\arrow-right-disabled.gif
c:\program files (x86)\atube\chrome\skin\lib\arrow-right.gif
c:\program files (x86)\atube\chrome\skin\lib\arrow-up.gif
c:\program files (x86)\atube\chrome\skin\lib\bg-btn-divider.png
c:\program files (x86)\atube\chrome\skin\lib\bg-btn-end.png
c:\program files (x86)\atube\chrome\skin\lib\bg-btn-mdl.png
c:\program files (x86)\atube\chrome\skin\lib\bg-btn-mdl_ff.png
c:\program files (x86)\atube\chrome\skin\lib\bg-btn-start.png
c:\program files (x86)\atube\chrome\skin\lib\bg-btnover-divider.png
c:\program files (x86)\atube\chrome\skin\lib\bg-btnover-end.png
c:\program files (x86)\atube\chrome\skin\lib\bg-btnover-mdl.png
c:\program files (x86)\atube\chrome\skin\lib\bg-btnover-mdl_ff.png
c:\program files (x86)\atube\chrome\skin\lib\bg-btnover-start.png
c:\program files (x86)\atube\chrome\skin\lib\blank.gif
c:\program files (x86)\atube\chrome\skin\lib\btn-widgets-over.png
c:\program files (x86)\atube\chrome\skin\lib\btn-widgets.png
c:\program files (x86)\atube\chrome\skin\lib\btn_slider.png
c:\program files (x86)\atube\chrome\skin\lib\btnback-down-vista.png
c:\program files (x86)\atube\chrome\skin\lib\btnback-vista.png
c:\program files (x86)\atube\chrome\skin\lib\btnleft-down-vista.png
c:\program files (x86)\atube\chrome\skin\lib\btnleft-vista.png
c:\program files (x86)\atube\chrome\skin\lib\btnright-down-vista.png
c:\program files (x86)\atube\chrome\skin\lib\btnright-vista.png
c:\program files (x86)\atube\chrome\skin\lib\button-splitter-down-vista.png
c:\program files (x86)\atube\chrome\skin\lib\button-splitter-vista.png
c:\program files (x86)\atube\chrome\skin\lib\button-splitter.png
c:\program files (x86)\atube\chrome\skin\lib\collapse.png
c:\program files (x86)\atube\chrome\skin\lib\comcast.png
c:\program files (x86)\atube\chrome\skin\lib\debugbar\debug.html
c:\program files (x86)\atube\chrome\skin\lib\dtx-test.css
c:\program files (x86)\atube\chrome\skin\lib\dtx.css
c:\program files (x86)\atube\chrome\skin\lib\edit-back-hot.png
c:\program files (x86)\atube\chrome\skin\lib\edit-back.png
c:\program files (x86)\atube\chrome\skin\lib\embarq.png
c:\program files (x86)\atube\chrome\skin\lib\expand.png
c:\program files (x86)\atube\chrome\skin\lib\fast.png
c:\program files (x86)\atube\chrome\skin\lib\found.png
c:\program files (x86)\atube\chrome\skin\lib\gmail.png
c:\program files (x86)\atube\chrome\skin\lib\gripper.png
c:\program files (x86)\atube\chrome\skin\lib\highlight.png
c:\program files (x86)\atube\chrome\skin\lib\highlight_blue.png
c:\program files (x86)\atube\chrome\skin\lib\highlight_cyan.png
c:\program files (x86)\atube\chrome\skin\lib\highlight_lime.png
c:\program files (x86)\atube\chrome\skin\lib\highlight_magenta.png
c:\program files (x86)\atube\chrome\skin\lib\highlight_yellow.png
c:\program files (x86)\atube\chrome\skin\lib\hotmail.png
c:\program files (x86)\atube\chrome\skin\lib\checkmark.png
c:\program files (x86)\atube\chrome\skin\lib\chevron.png
c:\program files (x86)\atube\chrome\skin\lib\ico-check.png
c:\program files (x86)\atube\chrome\skin\lib\imap.png
c:\program files (x86)\atube\chrome\skin\lib\lastsearch-thumb-back.gif
c:\program files (x86)\atube\chrome\skin\lib\launchers.css
c:\program files (x86)\atube\chrome\skin\lib\loadingMid.gif
c:\program files (x86)\atube\chrome\skin\lib\lock.png
c:\program files (x86)\atube\chrome\skin\lib\logo-separator.png
c:\program files (x86)\atube\chrome\skin\lib\mailcom.png
c:\program files (x86)\atube\chrome\skin\lib\menu_bg-basic.png
c:\program files (x86)\atube\chrome\skin\lib\menu_separator_bar.png
c:\program files (x86)\atube\chrome\skin\lib\menu_separator_white.png
c:\program files (x86)\atube\chrome\skin\lib\menuitem-splitter.png
c:\program files (x86)\atube\chrome\skin\lib\menuitemback-down-vista.png
c:\program files (x86)\atube\chrome\skin\lib\menuitemback-vista.png
c:\program files (x86)\atube\chrome\skin\lib\menuitemleft-down-vista.png
c:\program files (x86)\atube\chrome\skin\lib\menuitemleft-vista.png
c:\program files (x86)\atube\chrome\skin\lib\menuitemleft.png
c:\program files (x86)\atube\chrome\skin\lib\menuitemright-down-vista.png
c:\program files (x86)\atube\chrome\skin\lib\menuitemright-vista.png
c:\program files (x86)\atube\chrome\skin\lib\minus.gif
c:\program files (x86)\atube\chrome\skin\lib\modify.png
c:\program files (x86)\atube\chrome\skin\lib\move.gif
c:\program files (x86)\atube\chrome\skin\lib\movetarget.png
c:\program files (x86)\atube\chrome\skin\lib\newsitem.gif
c:\program files (x86)\atube\chrome\skin\lib\panels\css\panels.css
c:\program files (x86)\atube\chrome\skin\lib\panels\css\popupAbout.css
c:\program files (x86)\atube\chrome\skin\lib\panels\css\popupGames.css
c:\program files (x86)\atube\chrome\skin\lib\panels\css\popupRSS.css
c:\program files (x86)\atube\chrome\skin\lib\panels\css\popupWidgets.css
c:\program files (x86)\atube\chrome\skin\lib\panels\default\css\dialog.css
c:\program files (x86)\atube\chrome\skin\lib\panels\default\images\bg.gif
c:\program files (x86)\atube\chrome\skin\lib\panels\default\images\btn-search.png
c:\program files (x86)\atube\chrome\skin\lib\panels\default\images\btn-wide-close-over.png
c:\program files (x86)\atube\chrome\skin\lib\panels\default\images\btn-wide-close.png
c:\program files (x86)\atube\chrome\skin\lib\panels\default\images\default.png
c:\program files (x86)\atube\chrome\skin\lib\panels\default\images\tab-off-l.png
c:\program files (x86)\atube\chrome\skin\lib\panels\default\images\tab-off-r.png
c:\program files (x86)\atube\chrome\skin\lib\panels\default\images\tab-on-l.png
c:\program files (x86)\atube\chrome\skin\lib\panels\default\images\tab-on-r.png
c:\program files (x86)\atube\chrome\skin\lib\panels\default\images\transparent.gif
c:\program files (x86)\atube\chrome\skin\lib\panels\default\images\ttlbar-left.png
c:\program files (x86)\atube\chrome\skin\lib\panels\default\images\ttlbar-mdl.png
c:\program files (x86)\atube\chrome\skin\lib\panels\default\images\ttlbar-right.png
c:\program files (x86)\atube\chrome\skin\lib\panels\default\images\win-btm-left.png
c:\program files (x86)\atube\chrome\skin\lib\panels\default\images\win-btm-mdl.png
c:\program files (x86)\atube\chrome\skin\lib\panels\default\images\win-btm-right-resize.png
c:\program files (x86)\atube\chrome\skin\lib\panels\default\images\win-btm-right.png
c:\program files (x86)\atube\chrome\skin\lib\panels\default\images\win-left.png
c:\program files (x86)\atube\chrome\skin\lib\panels\default\images\win-right.png
c:\program files (x86)\atube\chrome\skin\lib\panels\default\main.html
c:\program files (x86)\atube\chrome\skin\lib\panels\default\main.html.bak
c:\program files (x86)\atube\chrome\skin\lib\panels\default\scripts\defscript.js
c:\program files (x86)\atube\chrome\skin\lib\panels\default\scripts\defscript.js.bak
c:\program files (x86)\atube\chrome\skin\lib\panels\footer.htm
c:\program files (x86)\atube\chrome\skin\lib\panels\gamecategory.xsl
c:\program files (x86)\atube\chrome\skin\lib\panels\gameData.js
c:\program files (x86)\atube\chrome\skin\lib\panels\gameList.xsl
c:\program files (x86)\atube\chrome\skin\lib\panels\games.xsl
c:\program files (x86)\atube\chrome\skin\lib\panels\gametype.xsl
c:\program files (x86)\atube\chrome\skin\lib\panels\images\arrow-dn.gif
c:\program files (x86)\atube\chrome\skin\lib\panels\images\arrow-sml-drop.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\arrow-sml.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\arrow-up.gif
c:\program files (x86)\atube\chrome\skin\lib\panels\images\arrowr-bluew5.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\bg-aboutbox.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\bg-btnover.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\bg-pnl520x390.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\btn-addtoolbar-left-over.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\btn-addtoolbar-left.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\btn-addtoolbar-right.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\btn-back.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\btn-close-grey.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\btn-close-greyover.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\btn-drag.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\btn-mdl-over.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\btn-mdl.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\btn-moredetails.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\btn-next-over.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\btn-next.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\btn-play-left-over.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\btn-play-left.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\btn-previous-over.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\btn-previous.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\btn-right-over.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\btn-search-pnlbtm-over.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\btn-search-pnlbtm.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\btn-try-left-over.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\btn-try-left.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\bullet-orange.gif
c:\program files (x86)\atube\chrome\skin\lib\panels\images\gamethumb-on.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\gamethumb2-over.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\ico-calendar.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\ico-dollar.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\ico-download.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\ico-joystick24.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\ico-news24.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\ico-play.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\ico-tags.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\icon-Add.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\icon-download.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\icon-Info.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\icon-play.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\icon-shop.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\menul-bgon.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\menul-bgover.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\panel-botm-noscroll.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\scroll-bg-206.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\scroll-bg.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\scroll-topwin.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\scrollb-disable.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\scrollb-down.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\scrollb-over.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\scrollb.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\scrollt-disable.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\scrollt-down.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\scrollt-over.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\scrollt.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\searchbox-pnlbtm.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\star_x_grey.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\star_x_orange.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\TRUSTe_about.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\view-detailed-on.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\view-detailed-over.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\view-thumb-on.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\view-thumb-over.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\widgets-square-16px.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\widgets-square-24px.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\widgets.png
c:\program files (x86)\atube\chrome\skin\lib\panels\initHTML.html
c:\program files (x86)\atube\chrome\skin\lib\panels\popupGames.html
c:\program files (x86)\atube\chrome\skin\lib\panels\popupHTML.html
c:\program files (x86)\atube\chrome\skin\lib\panels\popupRSS.html
c:\program files (x86)\atube\chrome\skin\lib\panels\popupWidgets.html
c:\program files (x86)\atube\chrome\skin\lib\panels\popupWidgets.html.bak
c:\program files (x86)\atube\chrome\skin\lib\panels\scroll.png
c:\program files (x86)\atube\chrome\skin\lib\plus.gif
c:\program files (x86)\atube\chrome\skin\lib\pop.png
c:\program files (x86)\atube\chrome\skin\lib\radio.png
c:\program files (x86)\atube\chrome\skin\lib\radio\css\manager.css
c:\program files (x86)\atube\chrome\skin\lib\radio\css\slider.css
c:\program files (x86)\atube\chrome\skin\lib\radio\images\bg-pnl.png
c:\program files (x86)\atube\chrome\skin\lib\radio\images\btn-close-grey.png
c:\program files (x86)\atube\chrome\skin\lib\radio\images\btn-close-greyover.png
c:\program files (x86)\atube\chrome\skin\lib\radio\images\collapsed_button.gif
c:\program files (x86)\atube\chrome\skin\lib\radio\images\expanded_button.gif
c:\program files (x86)\atube\chrome\skin\lib\radio\images\ico-playstation-down.png
c:\program files (x86)\atube\chrome\skin\lib\radio\images\ico-playstation-over.png
c:\program files (x86)\atube\chrome\skin\lib\radio\images\ico-playstation.png
c:\program files (x86)\atube\chrome\skin\lib\radio\images\ico-radio.png
c:\program files (x86)\atube\chrome\skin\lib\radio\images\music-note.png
c:\program files (x86)\atube\chrome\skin\lib\radio\images\radio-btn-pause-on.png
c:\program files (x86)\atube\chrome\skin\lib\radio\images\radio-btn-pause.png
c:\program files (x86)\atube\chrome\skin\lib\radio\images\radio-btn-play-on.png
c:\program files (x86)\atube\chrome\skin\lib\radio\images\radio-btn-play.png
c:\program files (x86)\atube\chrome\skin\lib\radio\images\radio-eq-bg.png
c:\program files (x86)\atube\chrome\skin\lib\radio\images\radio-eq-buffer.gif
c:\program files (x86)\atube\chrome\skin\lib\radio\images\radio-eq-busy.gif
c:\program files (x86)\atube\chrome\skin\lib\radio\images\radio-eq-off.png
c:\program files (x86)\atube\chrome\skin\lib\radio\images\radio-eq-on.gif
c:\program files (x86)\atube\chrome\skin\lib\radio\images\radio-eq-warning.png
c:\program files (x86)\atube\chrome\skin\lib\radio\images\radio-options-design-on.png
c:\program files (x86)\atube\chrome\skin\lib\radio\images\radio-options-design.png
c:\program files (x86)\atube\chrome\skin\lib\radio\images\radio-options-on.png
c:\program files (x86)\atube\chrome\skin\lib\radio\images\radio-options.png
c:\program files (x86)\atube\chrome\skin\lib\radio\images\radio-volume-0.png
c:\program files (x86)\atube\chrome\skin\lib\radio\images\radio-volume-1.png
c:\program files (x86)\atube\chrome\skin\lib\radio\images\radio-volume-2.png
c:\program files (x86)\atube\chrome\skin\lib\radio\images\radio-volume-3.png
c:\program files (x86)\atube\chrome\skin\lib\radio\images\radio-volume-mute.png
c:\program files (x86)\atube\chrome\skin\lib\radio\images\scrollbar-handle.png
c:\program files (x86)\atube\chrome\skin\lib\radio\images\scrollbar-track.png
c:\program files (x86)\atube\chrome\skin\lib\radio\images\slider.png
c:\program files (x86)\atube\chrome\skin\lib\radio\images\slideron.png
c:\program files (x86)\atube\chrome\skin\lib\radio\images\track.png
c:\program files (x86)\atube\chrome\skin\lib\radio\managerpanel.html
c:\program files (x86)\atube\chrome\skin\lib\radio\volumeslider.html
c:\program files (x86)\atube\chrome\skin\lib\rank0.png
c:\program files (x86)\atube\chrome\skin\lib\rank0_5.png
c:\program files (x86)\atube\chrome\skin\lib\rank1.png
c:\program files (x86)\atube\chrome\skin\lib\rank1_5.png
c:\program files (x86)\atube\chrome\skin\lib\rank2.png
c:\program files (x86)\atube\chrome\skin\lib\rank2_5.png
c:\program files (x86)\atube\chrome\skin\lib\rank3.png
c:\program files (x86)\atube\chrome\skin\lib\rank3_5.png
c:\program files (x86)\atube\chrome\skin\lib\rank4.png
c:\program files (x86)\atube\chrome\skin\lib\rank4_5.png
c:\program files (x86)\atube\chrome\skin\lib\rank5.png
c:\program files (x86)\atube\chrome\skin\lib\rankna.png
c:\program files (x86)\atube\chrome\skin\lib\reload.png
c:\program files (x86)\atube\chrome\skin\lib\remove.png
c:\program files (x86)\atube\chrome\skin\lib\rename.gif
c:\program files (x86)\atube\chrome\skin\lib\resize-box.gif
c:\program files (x86)\atube\chrome\skin\lib\rss.png
c:\program files (x86)\atube\chrome\skin\lib\rsschannelback.png
c:\program files (x86)\atube\chrome\skin\lib\RSSLogo.png
c:\program files (x86)\atube\chrome\skin\lib\rsstabdivider.gif
c:\program files (x86)\atube\chrome\skin\lib\scroll-left.png
c:\program files (x86)\atube\chrome\skin\lib\scroll-right.png
c:\program files (x86)\atube\chrome\skin\lib\search-go.png
c:\program files (x86)\atube\chrome\skin\lib\search.png
c:\program files (x86)\atube\chrome\skin\lib\separator.png
c:\program files (x86)\atube\chrome\skin\lib\text-ellipsis.xml
c:\program files (x86)\atube\chrome\skin\lib\throbber.gif
c:\program files (x86)\atube\chrome\skin\lib\toolbarsplitter.gif
c:\program files (x86)\atube\chrome\skin\lib\transparent_1px.gif
c:\program files (x86)\atube\chrome\skin\lib\uwa\border_02.png
c:\program files (x86)\atube\chrome\skin\lib\uwa\border_03.png
c:\program files (x86)\atube\chrome\skin\lib\uwa\border_04.png
c:\program files (x86)\atube\chrome\skin\lib\uwa\border_06.png
c:\program files (x86)\atube\chrome\skin\lib\uwa\border_07.png
c:\program files (x86)\atube\chrome\skin\lib\uwa\border_08.png
c:\program files (x86)\atube\chrome\skin\lib\uwa\border_09.png
c:\program files (x86)\atube\chrome\skin\lib\uwa\border_10.png
c:\program files (x86)\atube\chrome\skin\lib\uwa\border_11.png
c:\program files (x86)\atube\chrome\skin\lib\uwa\border_12.png
c:\program files (x86)\atube\chrome\skin\lib\uwa\border_13.png
c:\program files (x86)\atube\chrome\skin\lib\uwa\border_14.png
c:\program files (x86)\atube\chrome\skin\lib\uwa\border_15.png
c:\program files (x86)\atube\chrome\skin\lib\uwa\border_16.png
c:\program files (x86)\atube\chrome\skin\lib\uwa\border_18.png
c:\program files (x86)\atube\chrome\skin\lib\uwa\border_19.png
c:\program files (x86)\atube\chrome\skin\lib\uwa\border_20.png
c:\program files (x86)\atube\chrome\skin\lib\uwa\border_21.png
c:\program files (x86)\atube\chrome\skin\lib\uwa\btn-close-grey.png
c:\program files (x86)\atube\chrome\skin\lib\uwa\btn-close-greyover.png
c:\program files (x86)\atube\chrome\skin\lib\uwa\close-hot.png
c:\program files (x86)\atube\chrome\skin\lib\uwa\close-normal.png
c:\program files (x86)\atube\chrome\skin\lib\uwa\loadingMid.gif
c:\program files (x86)\atube\chrome\skin\lib\uwa\paneltemplate.html
c:\program files (x86)\atube\chrome\skin\lib\uwa\proxy.html
c:\program files (x86)\atube\chrome\skin\lib\uwa\template.html
c:\program files (x86)\atube\chrome\skin\lib\uwa\template.html.bak
c:\program files (x86)\atube\chrome\skin\lib\uwa\template.xml
c:\program files (x86)\atube\chrome\skin\lib\uwa\templateFF.html
c:\program files (x86)\atube\chrome\skin\lib\uwa\throbber.gif

atom.jon
Návštěvník
Návštěvník
Příspěvky: 51
Registrován: 15 Led 2012 19:59

Re: odvirování počítače pro motji

#19 Příspěvek od atom.jon »

to je teda hodně dlouhé..... má to tak být ? mám to zkopírovat všechno ? jestli to nedělám zbytečně. Možná jsem to udělala špatně.

atom.jon
Návštěvník
Návštěvník
Příspěvky: 51
Registrován: 15 Led 2012 19:59

Re: odvirování počítače pro motji

#20 Příspěvek od atom.jon »

tak teď posílám snad to správné

ComboFix 14-04-12.01 - Ariel 15.04.2014 14:02:00.5.2 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.4040.2544 [GMT 2:00]
Spuštěný z: c:\users\Ariel\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\Ariel\Desktop\CFScript.txt
AV: Norton Internet Security *Disabled/Outdated* {D87FA2C0-F526-77B1-D6EC-0EDF3936CEDB}
FW: Norton Internet Security *Disabled* {E04423E5-BF49-76E9-FDB3-A7EAC7E589A0}
SP: Norton Internet Security *Disabled/Outdated* {631E4324-D31C-783F-EC5C-35AD42B18466}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
FILE ::
"c:\windows\tasks\Dealply.job"
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\diamondata\diamondataBHO.dll
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2014-03-15 do 2014-04-15 )))))))))))))))))))))))))))))))
.
.
2014-04-15 12:11 . 2014-04-15 12:11 -------- d-----w- c:\users\Default\AppData\Local\temp
2014-04-15 06:34 . 2014-03-07 04:43 10521840 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{8D78BAF7-2382-4F91-BFE4-BB6629AF8941}\mpengine.dll
2014-04-09 11:34 . 2014-02-04 02:35 190912 ----a-w- c:\windows\system32\drivers\storport.sys
2014-03-31 09:35 . 2014-03-31 09:35 -------- d-----w- c:\users\Ariel\AppData\Local\VideoDownloadConverter_4z
2014-03-31 08:48 . 2014-03-31 09:31 -------- d-----w- C:\AdwCleaner
2014-03-31 07:21 . 2014-03-31 07:21 -------- d-----w- C:\rsit
2014-03-31 07:21 . 2014-03-31 07:21 -------- d-----w- c:\program files\trend micro
2014-03-24 17:08 . 2014-04-02 04:13 -------- d-----w- c:\windows\system32\drivers\NISx64\1502000.026
2014-03-18 07:18 . 2014-03-18 07:18 -------- d-----w- c:\users\Ariel\AppData\Local\Skype
2014-03-18 07:18 . 2014-03-18 07:18 -------- d-----w- c:\program files (x86)\Common Files\Skype
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-04-09 19:57 . 2012-03-22 17:51 90655440 ----a-w- c:\windows\system32\MRT.exe
2014-03-12 07:35 . 2012-09-04 10:56 692616 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2014-03-12 07:35 . 2012-03-23 20:46 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2014-03-04 09:17 . 2014-04-09 11:34 44032 ----a-w- c:\windows\apppatch\acwow64.dll
2014-02-07 01:23 . 2014-03-14 07:15 3156480 ----a-w- c:\windows\system32\win32k.sys
2014-02-04 08:39 . 2011-02-19 21:51 608080 ----a-w- c:\windows\system32\msvcp100.dll
2014-02-04 08:39 . 2011-02-18 23:52 829264 ----a-w- c:\windows\system32\msvcr100.dll
2014-02-04 02:32 . 2014-03-14 07:14 1424384 ----a-w- c:\windows\system32\WindowsCodecs.dll
2014-02-04 02:32 . 2014-03-14 07:14 624128 ----a-w- c:\windows\system32\qedit.dll
2014-02-04 02:04 . 2014-03-14 07:14 1230336 ----a-w- c:\windows\SysWow64\WindowsCodecs.dll
2014-02-04 02:04 . 2014-03-14 07:14 509440 ----a-w- c:\windows\SysWow64\qedit.dll
2014-01-29 02:32 . 2014-03-14 07:15 484864 ----a-w- c:\windows\system32\wer.dll
2014-01-29 02:06 . 2014-03-14 07:15 381440 ----a-w- c:\windows\SysWow64\wer.dll
2014-01-28 02:32 . 2014-03-14 07:15 228864 ----a-w- c:\windows\system32\wwansvc.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{055af109-de93-4160-bcfc-7da70ecaa020}]
c:\program files (x86)\diamondata\diamondataBHO.dll [BU]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{9cfa5939-8996-40ed-97bb-3c34c4ae8501}]
c:\program files (x86)\diamondata\diamondataBHO.dll [BU]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{bfc39e47-d643-4dc2-aa1d-61377501c844}]
c:\program files (x86)\atube\atubeX.dll [BU]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
c:\program files (x86)\AskPartnerNetwork\Toolbar\ORJ\Passport.dll [BU]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files (x86)\AskPartnerNetwork\Toolbar\ORJ\Passport.dll" [BU]
.
[HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\1AMPCBOK]
@="{04cd1f3e-81d5-4904-a3ab-e0f99a7d769d}"
[HKEY_CLASSES_ROOT\CLSID\{04cd1f3e-81d5-4904-a3ab-e0f99a7d769d}]
2010-11-21 03:24 297808 ----a-w- c:\windows\System32\mscoree.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"GoogleChromeAutoLaunch_F825DD62C9AA018B43DBB0A1261D56EE"="c:\program files (x86)\Google\Chrome\Application\chrome.exe" [2014-04-02 841032]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2014-02-10 20922016]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"BCSSync"="c:\program files (x86)\Microsoft Office\Office14\BCSSync.exe" [2012-11-05 89184]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-10-11 59280]
"SSDMonitor"="c:\program files (x86)\Common Files\PC Tools\sMonitor\SSDMonitor.exe" [2012-08-21 105120]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-11-21 959904]
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2013-05-01 421888]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-03-12 253816]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux1"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 Huawei;HUAWEI Mobile Connect - USB Smart Card Reader;c:\windows\system32\DRIVERS\ewdcsc.sys;c:\windows\SYSNATIVE\DRIVERS\ewdcsc.sys [x]
R3 hwusbdev;Huawei DataCard USB PNP Device;c:\windows\system32\DRIVERS\ewusbdev.sys;c:\windows\SYSNATIVE\DRIVERS\ewusbdev.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 ivusb;Initio Driver for USB Default Controller;c:\windows\system32\DRIVERS\ivusb.sys;c:\windows\SYSNATIVE\DRIVERS\ivusb.sys [x]
R3 RSUSBVSTOR;RtsUVStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUVStor.sys;c:\windows\SYSNATIVE\Drivers\RtsUVStor.sys [x]
R3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R3 wsvd;wsvd;c:\windows\system32\DRIVERS\wsvd.sys;c:\windows\SYSNATIVE\DRIVERS\wsvd.sys [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x]
S0 fbfmon;fbfmon;c:\windows\system32\drivers\fbfmon.sys;c:\windows\SYSNATIVE\drivers\fbfmon.sys [x]
S0 LHDmgr;LHDmgr;c:\windows\System32\DRIVERS\LhdX64.sys;c:\windows\SYSNATIVE\DRIVERS\LhdX64.sys [x]
S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys;c:\windows\SYSNATIVE\Drivers\sptd.sys [x]
S1 BPntDrv;BPntDrv;c:\windows\system32\drivers\BPntDrv.sys;c:\windows\SYSNATIVE\drivers\BPntDrv.sys [x]
S2 c2cautoupdatesvc;Skype Click to Call Updater;c:\program files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe;c:\program files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [x]
S2 c2cpnrsvc;Skype Click to Call PNR Service;c:\program files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe;c:\program files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [x]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x]
S2 NIS;Norton Internet Security;c:\program files (x86)\Norton Internet Security\Engine\21.2.0.38\NIS.exe;c:\program files (x86)\Norton Internet Security\Engine\21.2.0.38\NIS.exe [x]
S2 NitroReaderDriverReadSpool3;NitroPDFReaderDriverCreatorReadSpool3;c:\program files\Common Files\Nitro\Reader\3.0\NitroPDFReaderDriverService3x64.exe;c:\program files\Common Files\Nitro\Reader\3.0\NitroPDFReaderDriverService3x64.exe [x]
S2 PCToolsSSDMonitorSvc;PC Tools Startup and Shutdown Monitor service;c:\program files (x86)\Common Files\PC Tools\sMonitor\StartManSvc.exe;c:\program files (x86)\Common Files\PC Tools\sMonitor\StartManSvc.exe [x]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S3 ACPIVPC;Lenovo Virtual Power Controller Driver;c:\windows\system32\DRIVERS\AcpiVpc.sys;c:\windows\SYSNATIVE\DRIVERS\AcpiVpc.sys [x]
S3 BHDrvx64;BHDrvx64;c:\program files (x86)\Norton Internet Security\NortonData\21.0.0.100\Definitions\BASHDefs\20131218.001\BHDrvx64.sys;c:\program files (x86)\Norton Internet Security\NortonData\21.0.0.100\Definitions\BASHDefs\20131218.001\BHDrvx64.sys [x]
S3 ccSet_NIS;NIS Settings Manager;c:\windows\system32\drivers\NISx64\1502000.026\ccSetx64.sys;c:\windows\SYSNATIVE\drivers\NISx64\1502000.026\ccSetx64.sys [x]
S3 clwvd;CyberLink WebCam Virtual Driver;c:\windows\system32\DRIVERS\clwvd.sys;c:\windows\SYSNATIVE\DRIVERS\clwvd.sys [x]
S3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys;c:\program files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [x]
S3 IDSVia64;IDSVia64;c:\program files (x86)\Norton Internet Security\NortonData\21.0.0.100\Definitions\IPSDefs\20140110.001\IDSvia64.sys;c:\program files (x86)\Norton Internet Security\NortonData\21.0.0.100\Definitions\IPSDefs\20140110.001\IDSvia64.sys [x]
S3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x]
S3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x64.sys;c:\windows\SYSNATIVE\DRIVERS\L1C62x64.sys [x]
S3 SymDS;Symantec Data Store;c:\windows\system32\drivers\NISx64\1502000.026\SYMDS64.SYS;c:\windows\SYSNATIVE\drivers\NISx64\1502000.026\SYMDS64.SYS [x]
S3 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\NISx64\1502000.026\SYMEFA64.SYS;c:\windows\SYSNATIVE\drivers\NISx64\1502000.026\SYMEFA64.SYS [x]
S3 SymIRON;Symantec Iron Driver;c:\windows\system32\drivers\NISx64\1502000.026\Ironx64.SYS;c:\windows\SYSNATIVE\drivers\NISx64\1502000.026\Ironx64.SYS [x]
S3 SymNetS;Symantec Network Security WFP Driver;c:\windows\System32\Drivers\NISx64\1502000.026\SYMNETS.SYS;c:\windows\SYSNATIVE\Drivers\NISx64\1502000.026\SYMNETS.SYS [x]
S3 vm2uvcflt;Vimicro USB Camera Filter 2;c:\windows\system32\Drivers\vm2uvcflt.sys;c:\windows\SYSNATIVE\Drivers\vm2uvcflt.sys [x]
S3 vm332avs;Lenovo Camera2;c:\windows\system32\Drivers\vm332avs.sys;c:\windows\SYSNATIVE\Drivers\vm332avs.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-04-12 08:37 1077576 ----a-w- c:\program files (x86)\Google\Chrome\Application\34.0.1847.116\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2014-04-15 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-09-04 07:35]
.
2014-04-06 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-11-11 15:05]
.
2014-04-15 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-11-11 15:05]
.
2014-04-13 c:\windows\Tasks\Norton Security Scan for Ariel.job
- c:\progra~2\NORTON~2\Engine\403~1.24\Nss.exe [2013-12-12 06:43]
.
2014-04-15 c:\windows\Tasks\RMAutoUpdate.job
- c:\program files (x86)\PC Tools Registry Mechanic\SULauncher.exe [2013-02-18 07:11]
.
2014-04-14 c:\windows\Tasks\RMSchedule.job
- c:\program files (x86)\PC Tools Registry Mechanic\RegMech.exe [2013-02-18 07:11]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\1AMPCBOK]
@="{04cd1f3e-81d5-4904-a3ab-e0f99a7d769d}"
[HKEY_CLASSES_ROOT\CLSID\{04cd1f3e-81d5-4904-a3ab-e0f99a7d769d}]
2010-11-21 03:23 444752 ----a-w- c:\windows\System32\mscoree.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\VeriFace Enc]
@="{771C7324-DA80-49D3-8017-753B0AF60951}"
[HKEY_CLASSES_ROOT\CLSID\{771C7324-DA80-49D3-8017-753B0AF60951}]
2011-11-11 15:11 1508192 ----a-w- c:\windows\System32\IcnOvrly.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2012-03-19 170264]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2012-03-19 398616]
"Persistence"="c:\windows\system32\igfxpers.exe" [2012-03-19 439064]
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.google.com
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
mSearchAssistant = hxxp://www.google.com
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
IE: Od&eslat do aplikace OneNote - c:\progra~2\MICROS~1\Office14\ONBttnIE.dll/105
IE: Search the Web - c:\program files (x86)\SweetIM\Toolbars\Internet Explorer\resources\menuext.html
IE: WikiKomentáře Google... - c:\program files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_D183CA64F05FDD98.dll/cmsidewiki.html
Trusted Zone: mojebanka.cz\etrading
Trusted Zone: mojebanka.cz\www
Trusted Zone: mojebanka.cz\etrading
Trusted Zone: mojebanka.cz\www
TCP: DhcpNameServer = 192.168.1.1
FF - ProfilePath - c:\users\Ariel\AppData\Roaming\Mozilla\Firefox\Profiles\612tub0w.default\
FF - prefs.js: browser.search.selectedEngine -
FF - ExtSQL: !HIDDEN! 2012-11-26 17:33; 4zffxtbr@VideoDownloadConverter_4z.com; c:\program files (x86)\VideoDownloadConverter_4z\bar\1.bin
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Toolbar-Locked - (no file)
ShellIconOverlayIdentifiers-{4d87b7a7-23f1-470c-aa45-96b25b9bd138} - (no file)
AddRemove-atube - c:\program files (x86)\atube\uninstall.exe
AddRemove-Knoll Light Factory EZ Studio 15 - c:\windows\unvise32.exe
AddRemove-Red Giant ToonIt Studio 15 - c:\windows\unvise32.exe
AddRemove-WinZip Registry Optimizer_is1 - c:\program files (x86)\WinZip Registry Optimizer\unins000.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NIS]
"ImagePath"="\"c:\program files (x86)\Norton Internet Security\Engine\21.2.0.38\NIS.exe\" /s \"NIS\" /m \"c:\program files (x86)\Norton Internet Security\Engine\21.2.0.38\diMaster.dll\" /prefetch:1"
"ImagePath"="\SystemRoot\System32\Drivers\NISx64\1502000.026\SYMNETS.SYS"
"TrustedImagePaths"="c:\program files (x86)\Norton Internet Security\Engine\21.2.0.38;c:\program files (x86)\Norton Internet Security\Engine64\21.2.0.38"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\windows\\system32\\Macromed\\Flash\\FlashUtil64_12_0_0_77_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\windows\\system32\\Macromed\\Flash\\FlashUtil64_12_0_0_77_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_12_0_0_77_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_12_0_0_77_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_77.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.12"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_77.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_77.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_77.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2014-04-15 14:19:41
ComboFix-quarantined-files.txt 2014-04-15 12:19
ComboFix2.txt 2014-04-15 11:38
ComboFix3.txt 2014-04-15 07:13
ComboFix4.txt 2014-03-31 10:27
.
Před spuštěním: Volných bajtů: 184 959 823 872
Po spuštění: Volných bajtů: 184 901 935 104
.
- - End Of File - - 0D20F3B95470F6D80E3D3FA9F4659E89

Avatar uživatele
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 Říj 2008 08:02

Re: odvirování počítače pro motji

#21 Příspěvek od motji »

:arrow: Odinstalujte combofix přes Start - Spustit
- zkopírujte do okénka:

ComboFix /Uninstall

-stiskněte Enter
-To odinstaluje ComboFix a smaže s ním související soubory a složky.


***********


:arrow: Stáhněte T-Cleaner
http://tharifas.sweb.cz/T-Cleaner.exe

-Spusťte,pro potvrzení volby mačkejte klávesu A, Enter
-po použití prográmek vymažte.Pozor,antiviry ho mohou falešně označit za vir



***********


:arrow: Z mého podpisu stahněte Ccleaner
- nainstalujte, při výběru, co se má nainstalovat, dejte pryč fajfku u instalace yahoo toolbaru

Obrázekzáložka čistič
- nechejte v levém sloupečku zatrhnuté vše jak je, klikněte na analyzovat
- po analýze klikněte na Spustit Ccleaner

Obrázekzáložka Registry
- klikněte na hledej problémy
- pak klikněte na opravit vybrané problémy -- udělat zálohu registrů - nemusíte
- kliknete opravit všechny problémy :arrow: ok :arrow: zavřít

Obrázek Záložka Nástroje
- zde můžete odinstalovat programy. Je to důkladnější odinstalace než u přidat/odebrat programy ve Windows.

Ccleaner - čistič doporučuji používat, krásně pročistí pc od dočasných souborů.
Registry pročistí třeba po odinstalaci nějakého programu.


***********



:arrow: Stahněte OTC a použijte
http://oldtimer.geekstogo.com/OTC.exe
-vyčistí tempy a po použitých programech



***********

Poprosím o nový log z Frstu
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.

atom.jon
Návštěvník
Návštěvník
Příspěvky: 51
Registrován: 15 Led 2012 19:59

Re: odvirování počítače pro motji

#22 Příspěvek od atom.jon »

hezký den, děkuji za zprávičku. Myslím, že to zvládnu ....jen poprosím, nevím, jak odinstalovat combofix přes start a spustit. To mám kliknout na combofix?

Avatar uživatele
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 Říj 2008 08:02

Re: odvirování počítače pro motji

#23 Příspěvek od motji »

Nemusíte vůbec, stačí přes ten T-cleaner
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.

atom.jon
Návštěvník
Návštěvník
Příspěvky: 51
Registrován: 15 Led 2012 19:59

Re: odvirování počítače pro motji

#24 Příspěvek od atom.jon »

Posílám požadované a děkuji za trpělivost.



Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 20-04-2014 01
Ran by Ariel (administrator) on ARIEL-PC on 20-04-2014 18:43:12
Running from C:\Users\Ariel\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: Czech
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(Microsoft Corporation) C:\windows\system32\WLANExt.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Nitro PDF Software) C:\Program Files\Common Files\Nitro\Reader\3.0\NitroPDFReaderDriverService3x64.exe
(PC Tools) C:\Program Files (x86)\Common Files\PC Tools\sMonitor\StartManSvc.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(PC Tools) C:\Program Files (x86)\Common Files\PC Tools\sMonitor\SSDMonitor.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(CyberLink) C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.2.0.38\NIS.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.2.0.38\NIS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe
(Adobe Systems, Inc.) C:\windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE


==================== Registry (Whitelisted) ==================

HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59280 2012-10-11] (Apple Inc.)
HKLM-x32\...\Run: [SSDMonitor] => C:\Program Files (x86)\Common Files\PC Tools\sMonitor\SSDMonitor.exe [105120 2012-08-21] (PC Tools)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
Winlogon\Notify\igfxcui: C:\windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-2948964889-3286265907-1398495238-1000\...\Run: [GoogleChromeAutoLaunch_F825DD62C9AA018B43DBB0A1261D56EE] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [841032 2014-04-02] (Google Inc.)
HKU\S-1-5-21-2948964889-3286265907-1398495238-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [20922016 2014-02-10] (Skype Technologies S.A.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKLM\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.lenovo.com/
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.lenovo.com/
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKCU - {4FF4DD03-A53B-4F39-9248-622E4F9FC25C} URL = http://search.conduit.com/ResultsExt.as ... =CT2625848
SearchScopes: HKCU - {ACEB6063-2158-4943-AF42-5B50FB18FEDA} URL = http://search.conduit.com/ResultsExt.as ... 76916&UM=1
BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.2.0.38\coIEPlg.dll (Symantec Corporation)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Skype add-on for Internet Explorer - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll No File
BHO-x32: diamondata - {055af109-de93-4160-bcfc-7da70ecaa020} - C:\Program Files (x86)\diamondata\diamondataBHO.dll No File
BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.141\McAfeeMSS_IE.dll No File
BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\21.2.0.38\coIEPlg.dll (Symantec Corporation)
BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\21.2.0.38\IPS\IPSBHO.DLL (Symantec Corporation)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Pomocná služba pro přihlášení ke službě Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: diamondata - {9cfa5939-8996-40ed-97bb-3c34c4ae8501} - C:\Program Files (x86)\diamondata\diamondataBHO.dll No File
BHO-x32: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: aTube Toolbar - {bfc39e47-d643-4dc2-aa1d-61377501c844} - C:\Program Files (x86)\atube\atubeX.dll No File
BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll No File
BHO-x32: Ask Shopping Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\ORJ\Passport.dll" No File
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.2.0.38\coIEPlg.dll (Symantec Corporation)
Toolbar: HKLM - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll" No File
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\21.2.0.38\coIEPlg.dll (Symantec Corporation)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll No File
Toolbar: HKLM-x32 - Ask Shopping Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\ORJ\Passport.dll" No File
DPF: HKLM-x32 {233C1507-6A77-46A4-9443-F871F945D258} http://download.macromedia.com/pub/shoc ... tor/sw.cab
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/s ... wflash.cab
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138

FireFox:
========
FF ProfilePath: C:\Users\Ariel\AppData\Roaming\Mozilla\Firefox\Profiles\612tub0w.default
FF SelectedSearchEngine: user_pref("browser.search.selectedEngine", "");
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_12_0_0_77.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\windows\SysWOW64\Adobe\Director\np32dsw_1202122.dll (Adobe Systems, Inc.)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.8.141\npMcAfeeMss.dll No File
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nitropdf.com/NitroPDF - C:\Program Files (x86)\Nitro\Reader 3\npnitromozilla.dll (Nitro PDF)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Ariel\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll No File
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\heureka-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\mapy-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\seznam-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\slunecnice-cz.xml
FF Extension: VideoDownloadConverter - C:\Users\Ariel\AppData\Roaming\Mozilla\Firefox\Profiles\612tub0w.default\Extensions\4zffxtbr@VideoDownloadConverter_4z.com [2014-01-03]
FF Extension: aTube Toolbar - C:\Users\Ariel\AppData\Roaming\Mozilla\Firefox\Profiles\612tub0w.default\Extensions\{bfc39e47-d643-4dc2-aa1d-61377501c844} [2012-11-20]
FF Extension: Ask Toolbar - C:\Users\Ariel\AppData\Roaming\Mozilla\Firefox\Profiles\612tub0w.default\Extensions\toolbar@ask.com.xpi [2014-04-11]
FF Extension: Ask Toolbar - C:\Users\Ariel\AppData\Roaming\Mozilla\Firefox\Profiles\612tub0w.default\Extensions\toolbar_ATU4-V7@apn.ask.com.xpi [2013-12-30]
FF Extension: diamondata - C:\Users\Ariel\AppData\Roaming\Mozilla\Firefox\Profiles\612tub0w.default\Extensions\{a6d34414-c1ea-40a6-b61e-fb2d4e4ad212}.xpi [2014-02-04]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2014-04-11]
FF HKLM-x32\...\Firefox\Extensions: [4zffxtbr@VideoDownloadConverter_4z.com] - C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin
FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.0.0.100\coFFPlgn\
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.0.0.100\coFFPlgn\ []
FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.0.0.100\IPSFF
FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.0.0.100\IPSFF [2013-12-12]

Chrome:
=======
CHR HomePage: hxxp://www.search.ask.com/?p2=%5EAF8%5EYYYYYY% ... 02-26&psv=
CHR StartupUrls: ""
CHR DefaultSearchProvider: facemoods
CHR DefaultSearchURL: http://www.google.com
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.116\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.116\pdf.dll ()
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.116\gcswf32.dll No File
CHR Plugin: (McAfee SiteAdvisor) - C:\Users\Ariel\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho\3.31.131.2_0\McChPlg.dll No File
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.99\npGoogleUpdate3.dll No File
CHR Plugin: (Windows Live Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\4.0.50401.0\npctrl.dll No File
CHR Plugin: (McAfee SecurityCenter) - c:\progra~2\mcafee\msc\npmcsn~1.dll No File
CHR Plugin: (Default Plug-in) - default_plugin No File
CHR Extension: (Ask Toolbar) - C:\Users\Ariel\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaojmikegpiepcfdkkjaplodkpfmlo [2014-04-20]
CHR Extension: (Skype Click to Call) - C:\Users\Ariel\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2012-03-29]
CHR Extension: (Norton Identity Protection) - C:\Users\Ariel\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk [2014-04-20]
CHR Extension: (Peněženka Google) - C:\Users\Ariel\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-04-20]
CHR HKCU\...\Chrome\Extension: [nikpibnbobmbdbheedjfogjlikpgpnhp] - C:\Users\Ariel\AppData\Roaming\DVDVideoSoft\DVDVideoSoftBrowserExtension.crx [2014-04-20]
CHR HKLM-x32\...\Chrome\Extension: [aaaaojmikegpiepcfdkkjaplodkpfmlo] - C:\ProgramData\AskPartnerNetwork\Toolbar\ORJ\CRX\ToolbarCR.crx [2014-04-11]
CHR HKLM-x32\...\Chrome\Extension: [hendmekoldfacfhlojkjcnbjegkahclb] - C:\Program Files (x86)\diamondata\hendmekoldfacfhlojkjcnbjegkahclb.crx [2014-04-11]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-04-11]
CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton Internet Security\Engine\21.2.0.38\Exts\Chrome.crx [2014-03-24]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390720 2014-04-11] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1764992 2014-04-11] (Microsoft Corporation)
R2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\21.2.0.38\NIS.exe [276376 2014-03-12] (Symantec Corporation)
R2 NitroReaderDriverReadSpool3; C:\Program Files\Common Files\Nitro\Reader\3.0\NitroPDFReaderDriverService3x64.exe [230416 2012-10-30] (Nitro PDF Software)
R2 PCToolsSSDMonitorSvc; C:\Program Files (x86)\Common Files\PC Tools\sMonitor\StartManSvc.exe [794272 2012-08-21] (PC Tools)

==================== Drivers (Whitelisted) ====================

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R3 BHDrvx64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.0.0.100\Definitions\BASHDefs\20131218.001\BHDrvx64.sys [1526488 2013-12-18] (Symantec Corporation)
R3 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1502000.026\ccSetx64.sys [162392 2013-09-26] (Symantec Corporation)
R3 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2013-12-31] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [137648 2013-12-12] (Symantec Corporation)
U5 ewusbnet; C:\Windows\System32\Drivers\ewusbnet.sys [243200 2009-12-15] (Huawei Technologies Co., Ltd.)
S3 Huawei; C:\Windows\System32\DRIVERS\ewdcsc.sys [29696 2009-12-15] (Huawei Tech. Co., Ltd.)
S3 hwusbdev; C:\Windows\System32\DRIVERS\ewusbdev.sys [114304 2009-12-15] (Huawei Technologies Co., Ltd.)
R3 IDSVia64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.0.0.100\Definitions\IPSDefs\20140110.001\IDSvia64.sys [521944 2013-12-13] (Symantec Corporation)
S3 NAVENG; C:\Program Files (x86)\Norton Internet Security\NortonData\21.0.0.100\Definitions\VirusDefs\20140110.017\ENG64.SYS [126040 2014-01-08] (Symantec Corporation)
S3 NAVEX15; C:\Program Files (x86)\Norton Internet Security\NortonData\21.0.0.100\Definitions\VirusDefs\20140110.017\EX64.SYS [2099288 2014-01-08] (Symantec Corporation)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [834544 2012-03-22] ()
S3 SRTSP; C:\Windows\System32\Drivers\NISx64\1502000.026\SRTSP64.SYS [875736 2014-02-13] (Symantec Corporation)
R3 SRTSPX; C:\Windows\system32\drivers\NISx64\1502000.026\SRTSPX64.SYS [36952 2013-07-31] (Symantec Corporation)
R3 SymDS; C:\Windows\system32\drivers\NISx64\1502000.026\SYMDS64.SYS [493656 2013-08-01] (Symantec Corporation)
R3 SymEFA; C:\Windows\system32\drivers\NISx64\1502000.026\SYMEFA64.SYS [1148120 2014-03-04] (Symantec Corporation)
R3 SymEvent; C:\windows\system32\Drivers\SYMEVENT64x86.SYS [177752 2013-12-12] (Symantec Corporation)
R3 SymIRON; C:\Windows\system32\drivers\NISx64\1502000.026\Ironx64.SYS [264280 2013-07-31] (Symantec Corporation)
R3 SymNetS; C:\Windows\System32\Drivers\NISx64\1502000.026\SYMNETS.SYS [593112 2014-02-18] (Symantec Corporation)
U3 aszx8m3q; C:\Windows\System32\Drivers\aszx8m3q.sys [0 ] (Microsoft Corporation)
U3 BcmSqlStartupSvc;
U2 CLKMSVC10_3A60B698;
U2 CLKMSVC10_C3B3B687;
U2 DriverService;
U2 iATAgentService;
U2 idealife Update Service;
U3 IGRS;
U2 IviRegMgr;
U2 nvUpdatusService;
U2 Oasis2Service;
U2 PCCarerService;
U2 ReadyComm.DirectRouter;
U2 RichVideo;
U2 RtLedService;
U2 SeaPort;
U2 SoftwareService;
U3 SQLWriter;
U2 Stereo Service;

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-04-20 18:37 - 2014-04-20 18:43 - 00021645 _____ () C:\Users\Ariel\Desktop\FRST.txt
2014-04-20 18:34 - 2014-04-20 18:34 - 00015327 _____ () C:\Users\Ariel\Desktop\LM.bat
2014-04-20 18:27 - 2014-04-20 18:32 - 00000000 ____D () C:\Users\Ariel\Desktop\FRST-OlderVersion
2014-04-20 18:04 - 2014-04-20 18:04 - 00112640 _____ (forum.viry.cz) C:\Users\Ariel\Desktop\FRSTLauncher.exe
2014-04-20 18:01 - 2014-04-20 18:27 - 02056192 _____ (Farbar) C:\Users\Ariel\Desktop\FRST64.exe
2014-04-20 17:51 - 2014-04-20 18:43 - 00000000 ____D () C:\FRST
2014-04-20 17:51 - 2014-04-20 17:52 - 00047164 _____ () C:\Users\Ariel\Downloads\Addition.txt
2014-04-20 17:51 - 2014-04-20 17:52 - 00040448 _____ () C:\Users\Ariel\Downloads\FRST.txt
2014-04-20 17:46 - 2014-04-20 17:46 - 02055680 _____ (Farbar) C:\Users\Ariel\Downloads\FRST64.exe
2014-04-20 16:54 - 2014-04-20 17:05 - 00000112 _____ () C:\windows\setupact.log
2014-04-20 16:54 - 2014-04-20 16:54 - 00000688 _____ () C:\windows\PFRO.log
2014-04-20 16:54 - 2014-04-20 16:54 - 00000000 _____ () C:\windows\setuperr.log
2014-04-14 11:25 - 2014-04-14 11:34 - 780001280 _____ () C:\Users\Ariel\Downloads\Neobycejny Zivot Timothyho Greena 2012 SUPER KVALITA (CZ DAB).avi
2014-04-13 22:10 - 2014-03-06 12:21 - 23549440 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2014-04-13 22:10 - 2014-03-06 11:32 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2014-04-13 22:10 - 2014-03-06 11:31 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll
2014-04-13 22:10 - 2014-03-06 11:19 - 17387008 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2014-04-13 22:10 - 2014-03-06 10:59 - 00066048 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2014-04-13 22:10 - 2014-03-06 10:57 - 00548352 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll
2014-04-13 22:10 - 2014-03-06 10:57 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll
2014-04-13 22:10 - 2014-03-06 10:53 - 02767360 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2014-04-13 22:10 - 2014-03-06 10:40 - 00051200 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2014-04-13 22:10 - 2014-03-06 10:39 - 00033792 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2014-04-13 22:10 - 2014-03-06 10:32 - 02724864 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2014-04-13 22:10 - 2014-03-06 10:32 - 00574976 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2014-04-13 22:10 - 2014-03-06 10:29 - 00139264 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2014-04-13 22:10 - 2014-03-06 10:29 - 00111616 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe
2014-04-13 22:10 - 2014-03-06 10:28 - 00752640 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2014-04-13 22:10 - 2014-03-06 10:15 - 00940032 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe
2014-04-13 22:10 - 2014-03-06 10:11 - 05784064 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2014-04-13 22:10 - 2014-03-06 10:09 - 00453120 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll
2014-04-13 22:10 - 2014-03-06 10:03 - 00586240 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2014-04-13 22:10 - 2014-03-06 10:02 - 00455168 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll
2014-04-13 22:10 - 2014-03-06 10:02 - 00061952 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2014-04-13 22:10 - 2014-03-06 10:01 - 00051200 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieetwproxystub.dll
2014-04-13 22:10 - 2014-03-06 09:56 - 00038400 _____ (Microsoft Corporation) C:\windows\system32\JavaScriptCollectionAgent.dll
2014-04-13 22:10 - 2014-03-06 09:48 - 00195584 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2014-04-13 22:10 - 2014-03-06 09:47 - 02178048 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2014-04-13 22:10 - 2014-03-06 09:46 - 04254720 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2014-04-13 22:10 - 2014-03-06 09:46 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2014-04-13 22:10 - 2014-03-06 09:45 - 00032768 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2014-04-13 22:10 - 2014-03-06 09:42 - 00296960 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll
2014-04-13 22:10 - 2014-03-06 09:40 - 00440832 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2014-04-13 22:10 - 2014-03-06 09:38 - 00112128 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieUnatt.exe
2014-04-13 22:10 - 2014-03-06 09:36 - 00592896 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll
2014-04-13 22:10 - 2014-03-06 09:22 - 00367616 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtmsft.dll
2014-04-13 22:10 - 2014-03-06 09:21 - 00628736 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2014-04-13 22:10 - 2014-03-06 09:13 - 00032256 _____ (Microsoft Corporation) C:\windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-04-13 22:10 - 2014-03-06 09:11 - 02043904 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2014-04-13 22:10 - 2014-03-06 09:07 - 00164864 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll
2014-04-13 22:10 - 2014-03-06 09:01 - 00244224 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll
2014-04-13 22:10 - 2014-03-06 08:53 - 13551104 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2014-04-13 22:10 - 2014-03-06 08:46 - 00524288 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2014-04-13 22:10 - 2014-03-06 08:40 - 01967104 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl
2014-04-13 22:10 - 2014-03-06 08:36 - 11745792 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2014-04-13 22:10 - 2014-03-06 08:22 - 02260480 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2014-04-13 22:10 - 2014-03-06 07:58 - 01400832 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2014-04-13 22:10 - 2014-03-06 07:50 - 00846336 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2014-04-13 22:10 - 2014-03-06 07:43 - 00704512 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll
2014-04-13 22:10 - 2014-03-06 07:41 - 01789440 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2014-04-13 22:10 - 2014-03-06 07:36 - 01143808 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2014-04-13 08:23 - 2014-04-13 08:39 - 718739366 _____ () C:\Users\Ariel\Downloads\Zvonilka a Pirati cz dab 2014 Novinka.avi
2014-04-13 08:21 - 2014-04-13 08:48 - 1549593386 _____ () C:\Users\Ariel\Downloads\Cesta z města (2000) CZ.avi
2014-04-13 08:21 - 2014-04-13 08:39 - 733816674 _____ () C:\Users\Ariel\Downloads\Cesta do lesa CZ-film (2012) NOVINKA.avi
2014-04-11 18:57 - 2014-04-11 18:57 - 00001046 _____ () C:\Videa – zástupce.lnk
2014-04-09 13:34 - 2014-03-04 11:44 - 01163264 _____ (Microsoft Corporation) C:\windows\system32\kernel32.dll
2014-04-09 13:34 - 2014-03-04 11:44 - 00362496 _____ (Microsoft Corporation) C:\windows\system32\wow64win.dll
2014-04-09 13:34 - 2014-03-04 11:44 - 00243712 _____ (Microsoft Corporation) C:\windows\system32\wow64.dll
2014-04-09 13:34 - 2014-03-04 11:44 - 00016384 _____ (Microsoft Corporation) C:\windows\system32\ntvdm64.dll
2014-04-09 13:34 - 2014-03-04 11:44 - 00013312 _____ (Microsoft Corporation) C:\windows\system32\wow64cpu.dll
2014-04-09 13:34 - 2014-03-04 11:17 - 00014336 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntvdm64.dll
2014-04-09 13:34 - 2014-03-04 11:16 - 01114112 _____ (Microsoft Corporation) C:\windows\SysWOW64\kernel32.dll
2014-04-09 13:34 - 2014-03-04 11:16 - 00025600 _____ (Microsoft Corporation) C:\windows\SysWOW64\setup16.exe
2014-04-09 13:34 - 2014-03-04 11:16 - 00005120 _____ (Microsoft Corporation) C:\windows\SysWOW64\wow32.dll
2014-04-09 13:34 - 2014-03-04 10:09 - 00007680 _____ (Microsoft Corporation) C:\windows\SysWOW64\instnm.exe
2014-04-09 13:34 - 2014-03-04 10:09 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\user.exe
2014-04-09 13:34 - 2014-02-04 04:35 - 00274880 _____ (Microsoft Corporation) C:\windows\system32\Drivers\msiscsi.sys
2014-04-09 13:34 - 2014-02-04 04:35 - 00190912 _____ (Microsoft Corporation) C:\windows\system32\Drivers\storport.sys
2014-04-09 13:34 - 2014-02-04 04:35 - 00027584 _____ (Microsoft Corporation) C:\windows\system32\Drivers\Diskdump.sys
2014-04-09 13:34 - 2014-02-04 04:28 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\iologmsg.dll
2014-04-09 13:34 - 2014-02-04 04:00 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\iologmsg.dll
2014-04-09 13:34 - 2014-01-24 04:37 - 01684928 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ntfs.sys
2014-04-08 11:18 - 2014-04-09 13:57 - 00000000 ____D () C:\Users\Ariel\Desktop\fotky nové
2014-04-05 21:02 - 2014-04-05 21:05 - 336603000 _____ () C:\Users\Ariel\Downloads\Doba ledova - 2011 Mamutí vánoce anim.pohádka czdab.n@y.avi
2014-04-05 20:08 - 2014-04-05 20:32 - 734015628 _____ () C:\Users\Ariel\Downloads\Doba ledová 1 (2002) CZ Animovaný Dobrodružný.avi
2014-04-02 06:21 - 2014-04-02 06:21 - 00000000 ____D () C:\windows\System32\Tasks\Norton Internet Security
2014-03-31 11:35 - 2014-03-31 11:35 - 00000000 ____D () C:\Users\Ariel\AppData\Local\VideoDownloadConverter_4z
2014-03-31 09:21 - 2014-03-31 09:21 - 00935175 _____ () C:\Users\Ariel\Downloads\RSITx64.exe
2014-03-31 09:21 - 2014-03-31 09:21 - 00000000 ____D () C:\Program Files\trend micro
2014-03-31 08:52 - 2014-04-20 16:46 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-03-28 06:57 - 2014-04-10 20:07 - 00000000 ____D () C:\Users\Ariel\Documents\semena
2014-03-28 06:52 - 2014-03-28 06:57 - 00000000 ____D () C:\Users\Ariel\Documents\komenský
2014-03-27 11:26 - 2014-03-27 13:02 - 00000000 ____D () C:\Users\Ariel\Documents\25.3
2014-03-27 10:35 - 2014-03-27 10:35 - 03401216 _____ () C:\Users\Ariel\Downloads\SENECA_OZ.pps
2014-03-25 12:42 - 2014-03-17 10:30 - 00028436 _____ () C:\Users\Ariel\Documents\školky vysočina – kopie.xlsx
2014-03-25 10:12 - 2014-03-25 10:12 - 00000000 ____D () C:\Users\Ariel\AppData\Local\{3EEF77EC-2A6A-4312-BAD3-C37175466818}

==================== One Month Modified Files and Folders =======

2014-04-20 18:43 - 2014-04-20 18:37 - 00021645 _____ () C:\Users\Ariel\Desktop\FRST.txt
2014-04-20 18:43 - 2014-04-20 17:51 - 00000000 ____D () C:\FRST
2014-04-20 18:35 - 2012-09-04 12:56 - 00000914 _____ () C:\windows\Tasks\Adobe Flash Player Updater.job
2014-04-20 18:34 - 2014-04-20 18:34 - 00015327 _____ () C:\Users\Ariel\Desktop\LM.bat
2014-04-20 18:32 - 2014-04-20 18:27 - 00000000 ____D () C:\Users\Ariel\Desktop\FRST-OlderVersion
2014-04-20 18:27 - 2014-04-20 18:01 - 02056192 _____ (Farbar) C:\Users\Ariel\Desktop\FRST64.exe
2014-04-20 18:24 - 2012-03-15 19:56 - 00000000 ____D () C:\Users\Ariel
2014-04-20 18:17 - 2012-03-23 21:44 - 00000000 ____D () C:\Users\Ariel\AppData\Roaming\Skype
2014-04-20 18:09 - 2011-11-11 17:05 - 00000966 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-04-20 18:04 - 2014-04-20 18:04 - 00112640 _____ (forum.viry.cz) C:\Users\Ariel\Desktop\FRSTLauncher.exe
2014-04-20 17:52 - 2014-04-20 17:51 - 00047164 _____ () C:\Users\Ariel\Downloads\Addition.txt
2014-04-20 17:52 - 2014-04-20 17:51 - 00040448 _____ () C:\Users\Ariel\Downloads\FRST.txt
2014-04-20 17:46 - 2014-04-20 17:46 - 02055680 _____ (Farbar) C:\Users\Ariel\Downloads\FRST64.exe
2014-04-20 17:30 - 2012-03-22 19:44 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-04-20 17:14 - 2011-11-11 16:33 - 01560522 _____ () C:\windows\WindowsUpdate.log
2014-04-20 17:13 - 2009-07-14 06:45 - 00021280 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-04-20 17:13 - 2009-07-14 06:45 - 00021280 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-04-20 17:12 - 2011-11-11 08:11 - 07788350 _____ () C:\windows\system32\perfh005.dat
2014-04-20 17:12 - 2011-11-11 08:11 - 02634438 _____ () C:\windows\system32\perfc005.dat
2014-04-20 17:12 - 2009-07-14 07:13 - 00006512 _____ () C:\windows\system32\PerfStringBackup.INI
2014-04-20 17:07 - 2011-11-11 17:19 - 00489881 _____ () C:\windows\system32\fastboot.set
2014-04-20 17:06 - 2013-02-17 20:00 - 00000284 _____ () C:\windows\Tasks\RMAutoUpdate.job
2014-04-20 17:06 - 2013-02-15 21:47 - 00000000 ____D () C:\Program Files (x86)\PC Tools Registry Mechanic
2014-04-20 17:06 - 2012-03-15 19:55 - 06285508 _____ () C:\FaceProv.log
2014-04-20 17:05 - 2014-04-20 16:54 - 00000112 _____ () C:\windows\setupact.log
2014-04-20 17:05 - 2012-07-30 11:24 - 00065536 _____ () C:\windows\system32\Ikeext.etl
2014-04-20 17:05 - 2009-07-14 07:08 - 00000006 ____H () C:\windows\Tasks\SA.DAT
2014-04-20 16:55 - 2012-03-23 21:44 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-04-20 16:54 - 2014-04-20 16:54 - 00000688 _____ () C:\windows\PFRO.log
2014-04-20 16:54 - 2014-04-20 16:54 - 00000000 _____ () C:\windows\setuperr.log
2014-04-20 16:46 - 2014-03-31 08:52 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-04-20 16:42 - 2013-12-15 18:52 - 00000000 ____D () C:\Users\Ariel\AppData\Local\CrashDumps
2014-04-20 16:42 - 2011-02-22 13:19 - 00000000 ____D () C:\windows\Panther
2014-04-20 16:36 - 2012-03-21 17:07 - 00000000 ____D () C:\windows\Minidump
2014-04-20 16:21 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\tracing
2014-04-20 12:14 - 2013-01-19 13:38 - 00000452 ____H () C:\windows\Tasks\Norton Security Scan for Ariel.job
2014-04-20 09:43 - 2013-02-17 20:00 - 00000410 _____ () C:\windows\SysWOW64\AppLog.log
2014-04-20 09:43 - 2013-02-15 21:47 - 00000284 _____ () C:\windows\Tasks\RMSchedule.job
2014-04-15 15:24 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\rescache
2014-04-15 14:11 - 2009-07-14 04:34 - 00000215 _____ () C:\windows\system.ini
2014-04-15 12:58 - 2009-07-14 04:34 - 85983232 _____ () C:\windows\system32\config\SOFTWARE.bak
2014-04-15 12:58 - 2009-07-14 04:34 - 23855104 _____ () C:\windows\system32\config\SYSTEM.bak
2014-04-15 12:58 - 2009-07-14 04:34 - 00524288 _____ () C:\windows\system32\config\DEFAULT.bak
2014-04-15 12:58 - 2009-07-14 04:34 - 00262144 _____ () C:\windows\system32\config\SECURITY.bak
2014-04-15 12:58 - 2009-07-14 04:34 - 00262144 _____ () C:\windows\system32\config\SAM.bak
2014-04-14 11:34 - 2014-04-14 11:25 - 780001280 _____ () C:\Users\Ariel\Downloads\Neobycejny Zivot Timothyho Greena 2012 SUPER KVALITA (CZ DAB).avi
2014-04-14 09:48 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\PolicyDefinitions
2014-04-13 08:48 - 2014-04-13 08:21 - 1549593386 _____ () C:\Users\Ariel\Downloads\Cesta z města (2000) CZ.avi
2014-04-13 08:39 - 2014-04-13 08:23 - 718739366 _____ () C:\Users\Ariel\Downloads\Zvonilka a Pirati cz dab 2014 Novinka.avi
2014-04-13 08:39 - 2014-04-13 08:21 - 733816674 _____ () C:\Users\Ariel\Downloads\Cesta do lesa CZ-film (2012) NOVINKA.avi
2014-04-11 18:57 - 2014-04-11 18:57 - 00001046 _____ () C:\Videa – zástupce.lnk
2014-04-10 20:07 - 2014-03-28 06:57 - 00000000 ____D () C:\Users\Ariel\Documents\semena
2014-04-09 22:00 - 2014-01-09 09:02 - 00000000 ____D () C:\windows\system32\MRT
2014-04-09 21:57 - 2012-03-22 19:51 - 90655440 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2014-04-09 13:57 - 2014-04-08 11:18 - 00000000 ____D () C:\Users\Ariel\Desktop\fotky nové
2014-04-06 08:07 - 2011-11-11 17:05 - 00000962 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-04-05 21:05 - 2014-04-05 21:02 - 336603000 _____ () C:\Users\Ariel\Downloads\Doba ledova - 2011 Mamutí vánoce anim.pohádka czdab.n@y.avi
2014-04-05 20:32 - 2014-04-05 20:08 - 734015628 _____ () C:\Users\Ariel\Downloads\Doba ledová 1 (2002) CZ Animovaný Dobrodružný.avi
2014-04-05 09:13 - 2013-04-08 19:22 - 00000000 ____D () C:\Users\Ariel\Documents\leták školky
2014-04-05 09:04 - 2011-11-11 17:05 - 00003962 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-04-05 09:04 - 2011-11-11 17:05 - 00003712 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-04-03 06:23 - 2013-04-15 13:52 - 00000000 ____D () C:\Users\Ariel\Documents\hudba do projektu
2014-04-02 08:49 - 2012-11-19 20:23 - 30089030 _____ () C:\Users\Ariel\Desktop\maminka je všechno kolem.pptx
2014-04-02 08:42 - 2013-02-19 13:16 - 00000000 ____D () C:\Users\Ariel\Documents\Dilo a podmořský svět
2014-04-02 06:21 - 2014-04-02 06:21 - 00000000 ____D () C:\windows\System32\Tasks\Norton Internet Security
2014-04-02 06:16 - 2013-12-12 09:30 - 00003234 _____ () C:\windows\System32\Tasks\Norton WSC Integration
2014-04-02 06:16 - 2013-12-12 09:26 - 00000000 ____D () C:\windows\system32\Drivers\NISx64
2014-03-31 12:27 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Default
2014-03-31 11:35 - 2014-03-31 11:35 - 00000000 ____D () C:\Users\Ariel\AppData\Local\VideoDownloadConverter_4z
2014-03-31 11:32 - 2012-07-17 20:50 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-03-31 10:56 - 2012-03-15 19:57 - 00000000 ___RD () C:\Users\Ariel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-03-31 09:35 - 2010-11-21 05:27 - 00270496 ____N (Microsoft Corporation) C:\windows\system32\MpSigStub.exe
2014-03-31 09:21 - 2014-03-31 09:21 - 00935175 _____ () C:\Users\Ariel\Downloads\RSITx64.exe
2014-03-31 09:21 - 2014-03-31 09:21 - 00000000 ____D () C:\Program Files\trend micro
2014-03-31 06:41 - 2014-01-04 21:00 - 00003136 _____ () C:\windows\System32\Tasks\Registry Optimizer
2014-03-31 06:41 - 2013-12-19 10:17 - 00000136 _____ () C:\Users\Ariel\AppData\Roaming\WB.CFG
2014-03-28 09:52 - 2013-01-23 22:21 - 00000000 ____D () C:\Users\Ariel\Documents\1.hodina človíček a jeho maminka planeta Země
2014-03-28 06:59 - 2013-05-16 12:23 - 00000000 ____D () C:\Users\Ariel\Documents\pyramidy
2014-03-28 06:58 - 2013-01-16 09:48 - 00000000 ____D () C:\Users\Ariel\Documents\seznamy školek
2014-03-28 06:57 - 2014-03-28 06:52 - 00000000 ____D () C:\Users\Ariel\Documents\komenský
2014-03-28 06:55 - 2013-11-05 07:49 - 00000000 ____D () C:\Users\Ariel\Documents\3.hodina človíček a kapička vody
2014-03-27 13:02 - 2014-03-27 11:26 - 00000000 ____D () C:\Users\Ariel\Documents\25.3
2014-03-27 10:35 - 2014-03-27 10:35 - 03401216 _____ () C:\Users\Ariel\Downloads\SENECA_OZ.pps
2014-03-25 12:19 - 2014-03-20 11:48 - 00000000 ____D () C:\Users\Ariel\Documents\Nová složka (2)
2014-03-25 10:31 - 2013-08-17 15:25 - 00000000 ____D () C:\Users\Ariel\Documents\omalovánky doplněné
2014-03-25 10:12 - 2014-03-25 10:12 - 00000000 ____D () C:\Users\Ariel\AppData\Local\{3EEF77EC-2A6A-4312-BAD3-C37175466818}

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-04-20 12:17

==================== End Of Log ============================

Avatar uživatele
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 Říj 2008 08:02

Re: odvirování počítače pro motji

#25 Příspěvek od motji »

:arrow: otevřete poznámkový blok a zkopírujte do něj:

Kód: Vybrat vše

SearchScopes: HKCU - {4FF4DD03-A53B-4F39-9248-622E4F9FC25C} URL = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2625848
SearchScopes: HKCU - {ACEB6063-2158-4943-AF42-5B50FB18FEDA} URL = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT1750559&CUI=UN11086442727776916&UM=1
BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll No File
BHO-x32: diamondata - {055af109-de93-4160-bcfc-7da70ecaa020} - C:\Program Files (x86)\diamondata\diamondataBHO.dll No File
BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.141\McAfeeMSS_IE.dll No File
BHO-x32: aTube Toolbar - {bfc39e47-d643-4dc2-aa1d-61377501c844} - C:\Program Files (x86)\atube\atubeX.dll No File
BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll No File
BHO-x32: Ask Shopping Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\ORJ\Passport.dll" No File
Toolbar: HKLM - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll" No File
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll No File
Toolbar: HKLM-x32 - Ask Shopping Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\ORJ\Passport.dll" No File
FF Extension: aTube Toolbar - C:\Users\Ariel\AppData\Roaming\Mozilla\Firefox\Profiles\612tub0w.default\Extensions\{bfc39e47-d643-4dc2-aa1d-61377501c844} [2012-11-20]
FF Extension: Ask Toolbar - C:\Users\Ariel\AppData\Roaming\Mozilla\Firefox\Profiles\612tub0w.default\Extensions\toolbar@ask.com.xpi [2014-04-11]
FF Extension: Ask Toolbar - C:\Users\Ariel\AppData\Roaming\Mozilla\Firefox\Profiles\612tub0w.default\Extensions\toolbar_ATU4-V7@apn.ask.com.xpi [2013-12-30]
FF Extension: diamondata - C:\Users\Ariel\AppData\Roaming\Mozilla\Firefox\Profiles\612tub0w.default\Extensions\{a6d34414-c1ea-40a6-b61e-fb2d4e4ad212}.xpi [2014-02-04]
CHR HomePage: hxxp://www.search.ask.com/?p2=%5EAF8%5E ... 02-26&psv=
CHR DefaultSearchProvider: facemoods
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\4.0.50401.0\npctrl.dll No File
CHR Plugin: (McAfee SecurityCenter) - c:\progra~2\mcafee\msc\npmcsn~1.dll No File
CHR Plugin: (Default Plug-in) - default_plugin No File
CHR Extension: (Ask Toolbar) - C:\Users\Ariel\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaojmikegpiepcfdkkjaplodkpfmlo [2014-04-20]
C:\Users\Ariel\AppData\Local\{3EEF77EC-2A6A-4312-BAD3-C37175466818}

Uložte vedle Frstu jako Fixlist.txt. Spusťte Frst, dejte tlačítko Fix, log vložte zde.

:arrow: Stáhněte Junkware Removal Tool http://thisisudax.org/downloads/JRT.exe
-Uložte program na plochu a spusťte . Pak se zobrazí se licenční podminky - potvrďte start libovolnou klávesou.
- vytvoří se záloha a proběhne skenování.
Po skončení skenování na Vás vyběhne log (bude uložen v c:\JRT jako JRT.txt) - zkopírujte jej sem
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.

atom.jon
Návštěvník
Návštěvník
Příspěvky: 51
Registrován: 15 Led 2012 19:59

Re: odvirování počítače pro motji

#26 Příspěvek od atom.jon »

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 20-04-2014 02
Ran by Ariel at 2014-04-21 08:53:13 Run:1
Running from C:\Users\Ariel\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
SearchScopes: HKCU - {4FF4DD03-A53B-4F39-9248-622E4F9FC25C} URL = http://search.conduit.com/ResultsExt.as ... =CT2625848
SearchScopes: HKCU - {ACEB6063-2158-4943-AF42-5B50FB18FEDA} URL = http://search.conduit.com/ResultsExt.as ... 76916&UM=1
BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll No File
BHO-x32: diamondata - {055af109-de93-4160-bcfc-7da70ecaa020} - C:\Program Files (x86)\diamondata\diamondataBHO.dll No File
BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.141\McAfeeMSS_IE.dll No File
BHO-x32: aTube Toolbar - {bfc39e47-d643-4dc2-aa1d-61377501c844} - C:\Program Files (x86)\atube\atubeX.dll No File
BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll No File
BHO-x32: Ask Shopping Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\ORJ\Passport.dll" No File
Toolbar: HKLM - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll" No File
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll No File
Toolbar: HKLM-x32 - Ask Shopping Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\ORJ\Passport.dll" No File
FF Extension: aTube Toolbar - C:\Users\Ariel\AppData\Roaming\Mozilla\Firefox\Profiles\612tub0w.default\Extensions\{bfc39e47-d643-4dc2-aa1d-61377501c844} [2012-11-20]
FF Extension: Ask Toolbar - C:\Users\Ariel\AppData\Roaming\Mozilla\Firefox\Profiles\612tub0w.default\Extensions\toolbar@ask.com.xpi [2014-04-11]
FF Extension: Ask Toolbar - C:\Users\Ariel\AppData\Roaming\Mozilla\Firefox\Profiles\612tub0w.default\Extensions\toolbar_ATU4-V7@apn.ask.com.xpi [2013-12-30]
FF Extension: diamondata - C:\Users\Ariel\AppData\Roaming\Mozilla\Firefox\Profiles\612tub0w.default\Extensions\{a6d34414-c1ea-40a6-b61e-fb2d4e4ad212}.xpi [2014-02-04]
CHR HomePage: hxxp://www.search.ask.com/?p2=%5EAF8%5E ... 02-26&psv=
CHR DefaultSearchProvider: facemoods
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\4.0.50401.0\npctrl.dll No File
CHR Plugin: (McAfee SecurityCenter) - c:\progra~2\mcafee\msc\npmcsn~1.dll No File
CHR Plugin: (Default Plug-in) - default_plugin No File
CHR Extension: (Ask Toolbar) - C:\Users\Ariel\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaojmikegpiepcfdkkjaplodkpfmlo [2014-04-20]
C:\Users\Ariel\AppData\Local\{3EEF77EC-2A6A-4312-BAD3-C37175466818}
*****************

HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{4FF4DD03-A53B-4F39-9248-622E4F9FC25C} => Key deleted successfully.
HKCR\CLSID\{4FF4DD03-A53B-4F39-9248-622E4F9FC25C} => Key deleted successfully.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{ACEB6063-2158-4943-AF42-5B50FB18FEDA} => Key deleted successfully.
HKCR\CLSID\{ACEB6063-2158-4943-AF42-5B50FB18FEDA} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d2ce3e00-f94a-4740-988e-03dc2f38c34f} => Key deleted successfully.
HKCR\CLSID\{d2ce3e00-f94a-4740-988e-03dc2f38c34f} => Key deleted successfully.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{055af109-de93-4160-bcfc-7da70ecaa020} => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{055af109-de93-4160-bcfc-7da70ecaa020} => Key deleted successfully.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0E8A89AD-95D7-40EB-8D9D-083EF7066A01} => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{0E8A89AD-95D7-40EB-8D9D-083EF7066A01} => Key deleted successfully.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{bfc39e47-d643-4dc2-aa1d-61377501c844} => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{bfc39e47-d643-4dc2-aa1d-61377501c844} => Key deleted successfully.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d2ce3e00-f94a-4740-988e-03dc2f38c34f} => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{d2ce3e00-f94a-4740-988e-03dc2f38c34f} => Key deleted successfully.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440} => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{8dcb7100-df86-4384-8842-8fa844297b3f} => Value deleted successfully.
HKCR\CLSID\{8dcb7100-df86-4384-8842-8fa844297b3f} => Key deleted successfully.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{8dcb7100-df86-4384-8842-8fa844297b3f} => Value deleted successfully.
HKCR\Wow6432Node\CLSID\{8dcb7100-df86-4384-8842-8fa844297b3f} => Key deleted successfully.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{D4027C7F-154A-4066-A1AD-4243D8127440} => Value not found.
HKCR\Wow6432Node\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440} => Key deleted successfully.
C:\Users\Ariel\AppData\Roaming\Mozilla\Firefox\Profiles\612tub0w.default\Extensions\{bfc39e47-d643-4dc2-aa1d-61377501c844} => Moved successfully.
C:\Users\Ariel\AppData\Roaming\Mozilla\Firefox\Profiles\612tub0w.default\Extensions\toolbar@ask.com.xpi not found.
C:\Users\Ariel\AppData\Roaming\Mozilla\Firefox\Profiles\612tub0w.default\Extensions\toolbar_ATU4-V7@apn.ask.com.xpi not found.
C:\Users\Ariel\AppData\Roaming\Mozilla\Firefox\Profiles\612tub0w.default\Extensions\{a6d34414-c1ea-40a6-b61e-fb2d4e4ad212}.xpi => Moved successfully.
CHR HomePage: hxxp://www.search.ask.com/?p2=%5EAF8%5E ... 02-26&psv= ==> The Chrome "Settings" can be used to fix the entry.
CHR DefaultSearchProvider: facemoods ==> The Chrome "Settings" can be used to fix the entry.
c:\Program Files (x86)\Microsoft Silverlight\4.0.50401.0\npctrl.dll not found.
c:\progra~2\mcafee\msc\npmcsn~1.dll not found.
C:\Users\Ariel\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaojmikegpiepcfdkkjaplodkpfmlo => Moved successfully.
C:\Users\Ariel\AppData\Local\{3EEF77EC-2A6A-4312-BAD3-C37175466818} => Moved successfully.

==== End of Fixlog ====

Avatar uživatele
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 Říj 2008 08:02

Re: odvirování počítače pro motji

#27 Příspěvek od motji »

Vypadá to čistě, jsou s pc ještě nějaké problémy? :)
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.

atom.jon
Návštěvník
Návštěvník
Příspěvky: 51
Registrován: 15 Led 2012 19:59

Re: odvirování počítače pro motji

#28 Příspěvek od atom.jon »

tady je ještě log JRT

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 7 Home Premium x64
Ran by Ariel on po 21.04.2014 at 8:55:03,09
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\conduit
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-2948964889-3286265907-1398495238-1000\Software\sweetim
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\sweetim
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\APN_ATU3__RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\APN_ATU3__RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9cfa5939-8996-40ed-97bb-3c34c4ae8501}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{9cfa5939-8996-40ed-97bb-3c34c4ae8501}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}



~~~ Files

Successfully deleted: [File] C:\windows\Tasks\rmschedule.job
Successfully deleted: [File] "C:\Users\Ariel\appdata\locallow\SkwConfig.bin"



~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\apn"
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{0026F125-4C5A-46B6-8E2F-2E7EF2262492}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{02699E45-64ED-4496-AB8E-D93F8BA495AE}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{0463641D-C0EC-4511-9539-AC4D0F8AA268}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{049C0436-87AE-463D-83A4-9453EBA8BDA4}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{09FDF622-B0C3-4502-86C8-C3C52F73C62A}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{0A058B3C-D840-428A-A099-D575831AE674}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{0A13B69E-357C-4BFB-B2C4-3C07399EADF8}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{0B6A0052-E476-4177-B8E0-51FD07D2D3CE}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{0BD2EF67-F835-4C00-A02E-64DE5293BFE4}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{0FF6CC8E-D6B5-4960-87C5-762199184DDB}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{11232334-C1A2-432F-8864-09C97723ABB4}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{12F99538-1ACC-4496-A1EA-031F2676B65E}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{1331854C-083D-463A-887C-06C5DDF7722C}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{13C79D8F-EF26-4CF0-BEC8-F4364A2EA4B1}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{143E3976-AB55-4C9A-9F1F-C14076D1D369}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{14FA555B-5E1B-49A4-A227-BBB41E4DDA57}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{16ED7914-ECDF-4C3E-9096-D378BC4A1D6D}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{17E5252F-A90C-4F22-BEB3-398FB15E18E3}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{1B31FCAD-2222-4474-8D82-4847F6CEAB58}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{1C7F6085-6640-4746-9CCE-EE90AB545663}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{205F6AFD-B335-4648-95F2-5E3AC4DBF4BA}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{20E4EF96-6251-40FE-82B8-8EAA718B7118}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{22B2CF28-EFA0-4A2B-A625-80F052AC7DF0}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{22CD3974-D089-44D6-ADCC-929BF8DC4FA0}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{2348C818-15DC-4267-BA1B-E62FDB17299E}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{250BAE86-12AE-4C87-8B40-A7364C40CCE2}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{2518A1E0-E511-4666-BD6D-99F21C3A4C26}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{255916DB-58B6-4A69-807F-6713F6981066}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{266514F2-A049-4A69-9966-38B34D313D30}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{27EF870A-774A-4340-9980-320BA0F1977A}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{29DB0D48-3583-4A1C-AAC9-CAB600253198}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{2DC97426-B0EA-42DE-B9D3-273D67832DCD}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{31291008-6B4D-4D59-B8B9-DF9E85356B18}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{33E1EAD9-B7EE-4494-89A0-7C09928BCAFB}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{3723942C-3EFC-419E-AEAC-2B8107D07ECD}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{37A934AF-A0A0-49D1-97E9-89E97E989D4E}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{395966D3-5760-4B2E-ACFE-FE546ECA5FE4}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{3ACEF614-6E15-4B82-9049-AC7E6B23EDEE}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{3E39E16A-7217-4DEE-9500-4EAFACCA19D2}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{403B6ED3-144A-4FE3-98E4-41F46ACA566B}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{41C92549-ED06-47F4-BBBE-1C8CB9B2102A}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{42EA3B5A-593A-4C36-802C-B1F1DF33AAFE}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{42F1CCB5-9707-4DFC-BE2D-7D241B8D1996}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{4370CB44-C906-4CE7-828F-2C90FF85DA39}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{43A65E94-559E-45DE-8A31-0DF754300B1A}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{44FDAE35-14A6-4B94-A549-81FC8DEC5B6A}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{462906E9-70F7-4465-BD80-0A1CC2EF4762}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{46C5B4CC-EFB7-498F-AB06-F6EA05938893}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{4C06A03B-B547-4381-A59F-82934B6F3846}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{4E1EDDCE-CB58-4A58-8656-30AD4FE22B70}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{514022CB-475D-4DD4-8FBD-2215DE959FAB}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{53018E6E-FE77-4449-8AE6-7B948839F8EF}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{5660A29B-4B69-40C0-9129-9AF545F9ABAE}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{56A3BCA2-96E0-460B-9053-AB4447B22AD0}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{577CDEE0-9484-43D6-8990-80DAC1EEBFA7}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{5B0DF405-693C-4544-BDEA-A9C15B51544F}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{5B4D9219-72AB-4270-96B3-C81FD0BD449B}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{5C156323-2544-40D7-B242-B480E4540441}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{5DC4A7F7-E0A9-4512-A796-E387792A77DA}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{5E2EB7C9-D9D7-46A5-A1BF-47EB241C801B}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{6216B5B8-7F40-492D-A0D1-1B46456DC163}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{6294ACAF-AB1B-4E2F-833D-0EE2EB887F1E}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{65C220BD-3C04-4F20-B346-616A1F254EE2}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{6767BE03-4014-4A5F-B430-47E819B15ECF}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{69912D3D-C90C-4599-9907-0A44AF515120}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{6D276E3E-CDBB-486D-8760-F4688BEFCA68}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{6DF6C64F-0D87-499C-AD1F-346168B288D3}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{6FCEE194-D736-44D2-B990-AE5D15C523DB}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{7294EB7F-54D3-43FF-8A3D-B9C229ECFA59}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{752754D1-BAD2-4F66-A80D-2ACCCC908212}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{766B0137-FC28-4FC7-9EEE-214D9689ED8F}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{7995DC7C-E2B4-4F52-B21F-00C55C4D341F}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{7A2C8193-26CC-418B-88B8-CED9CA03BE05}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{7AA6BDC5-80D2-40FD-822C-F254DC366AFA}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{7AB9D0CF-7170-4989-8CCE-7B9ED6FDF88C}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{7B30F66F-AD83-423A-B602-12A8C119ACC6}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{7C44E3B6-C532-4FD1-B75F-6A62BC404B82}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{7D948B32-0C68-447A-B5C3-9B8FEF125334}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{7E001AC7-AF2C-484D-B0A2-26B085DDB7F6}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{7E646340-49A3-4190-B80B-D07342A31716}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{8586E70F-D7F1-4D08-9625-66AB0CFEF216}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{8643C95F-8BF9-4CE2-ACD8-4AE1E6CA98F6}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{871898E1-22B2-4BD3-A24C-CF1F3D897578}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{8BAF74CF-B25F-4FF5-A13C-EBEDE122DF94}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{8E0DFB7D-4056-4AD7-8F3D-C3CCFB49CD79}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{90502DFF-6DBD-4B6B-9EE7-BAED07ED4918}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{905363A1-7F5B-41A2-9419-F0DA8D69BA4A}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{90DC074B-6608-4617-90BB-EF2BB09E55C1}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{9207FFCD-9058-439B-AC76-0892699391AD}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{920C766F-08B5-4B07-9BC3-2ED61A0D0B2D}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{94342A05-DAE6-40DD-9654-8A38F1E4932C}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{94DD5BFB-073A-4A7A-BE4E-C9C5ED53BB14}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{99E23105-A4F2-46A3-8813-1E3B8EB495CB}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{9D431F00-6780-48F2-AEC3-5D162A72BC23}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{9D970DE9-7C20-46E8-A6D2-E7382DEA1BFD}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{A032A09B-D91E-4EBC-9172-EB0F3E984D00}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{A69BF2C6-4269-4D67-AC1A-DA8C0C7D782D}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{ADF48F28-22A8-45C8-ABA4-7C8BA1BFEEB6}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{B0CCA1CE-572A-4705-82E6-38580C26B9B3}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{B13C5F9A-5BD4-4C20-B0A3-8D0D4CEA1509}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{B230ADDE-7519-45B7-9F57-11CD37520993}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{B2552A69-79F9-4502-8206-AA53FF6C07E0}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{B52AACA3-1433-4D79-A57C-A9D2E13E4B1A}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{B59102A4-38FD-481D-A7EE-1B3E13080C92}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{B76321FE-DA0D-4FBA-A9CC-56CAADB3BE78}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{BAB5138C-1C0E-4B4B-BE26-BA69D5169A3F}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{BD5F9EEA-162D-45C6-B620-6B84B47E8420}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{BF7BB8C9-C4CB-48E2-A848-5815D0CB66AB}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{C4877994-2979-4E77-946F-57A981CE96CB}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{C71AB369-6094-4960-B120-58F98A8F344E}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{C7FD82DF-78ED-423D-A40B-5FECC6BE2E00}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{C8E6FEC3-52F6-4087-B412-195A73C32C83}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{CCF0756E-030A-4559-A063-08B1A6C65D87}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{CD97F47F-70FC-4E37-AAE3-79E2C3E14905}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{CF80DD85-1B00-4D96-B4C2-187D23BD23DA}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{D02D21EC-20A3-47E8-98E8-3A097D8AE55B}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{D2CFDF28-C089-43D3-9C5B-7BFE62817EB3}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{D44A9233-5FCE-434B-9BB6-906B462D90E9}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{D554C8F1-9FC0-4DD8-B550-7C9776211493}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{DF52264E-3C3A-4CB6-9037-482323869931}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{DF7342D1-5F12-4144-BFE8-AB5F73E655BA}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{DF7B7DE3-FCD8-4ED5-B5E1-735932031248}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{E01540F1-4F5A-4B24-A9FD-DDB6B193EB28}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{E1CA3756-322F-4653-980A-D4824DCC0321}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{E4560DA5-9E00-47C2-B7BB-3D6C9B92EC89}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{E864F931-7B64-4738-A437-1C27D2698CD2}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{E8CB8506-0BE9-43B1-9427-B801DB28E30B}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{E9593717-9B11-45EB-A4FE-D92084482670}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{ED9A84D1-D506-4C17-9F4A-F836380248F6}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{EE45127D-CBEF-45F7-A8D3-FD8694139754}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{EF097AEA-DFE6-42E5-8971-2EB2C18329AD}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{F16EC345-6791-4582-A1AB-B43C699A19D4}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{F3D2C022-D3FE-4C9B-844C-7472E1A37746}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{F5F65C99-7E81-4073-A15F-61AB60A2872E}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{F66D0EFD-E290-4942-B199-FB06E2059864}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{F79BDB0E-910F-403A-A0B9-5B0BCC4FCACE}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{FB889961-7BBE-494B-9658-314616C2E5D7}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{FFB1DC4A-B99D-4DB2-BCDF-EC56B6115FBC}



~~~ FireFox

Successfully deleted: [File] C:\user.js
Successfully deleted: [Folder] C:\Users\Ariel\AppData\Roaming\mozilla\firefox\profiles\612tub0w.default\extensions\4zffxtbr@videodownloadconverter_4z.com
Successfully deleted: [Registry Value] HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions\\4zffxtbr@videodownloadconverter_4z.com
Successfully deleted the following from C:\Users\Ariel\AppData\Roaming\mozilla\firefox\profiles\612tub0w.default\prefs.js

user_pref("extensions.toolbar.mindspark._4zMembers_.homepage", "hxxp://home.mywebsearch.com/index.jhtml?ptb=undefined&n=780bb4d7&ptnrS=HJxpi000YY");
user_pref("extensions.toolbar.mindspark._4zMembers_.hp.user.defined", true);
user_pref("extensions.toolbar.mindspark._4zMembers_.initialized", true);
user_pref("extensions.toolbar.mindspark._4zMembers_.installation.contextKey", "");
user_pref("extensions.toolbar.mindspark._4zMembers_.installation.installDate", "2014033111");
user_pref("extensions.toolbar.mindspark._4zMembers_.installation.partnerId", "HJxpi000YY");
user_pref("extensions.toolbar.mindspark._4zMembers_.installation.partnerSubId", "");
user_pref("extensions.toolbar.mindspark._4zMembers_.installation.success", false);
user_pref("extensions.toolbar.mindspark._4zMembers_.installation.toolbarId", "undefined");
user_pref("extensions.toolbar.mindspark._4zMembers_.options.defaultSearch", false);
user_pref("extensions.toolbar.mindspark._4zMembers_.options.homePageEnabled", false);
user_pref("extensions.toolbar.mindspark._4zMembers_.options.keywordEnabled", false);
user_pref("extensions.toolbar.mindspark._4zMembers_.options.tabEnabled", false);
user_pref("extensions.toolbar.mindspark._4zMembers_.weather.location", "10001");
user_pref("extensions.toolbar.mindspark.lastInstalled", "videodownloadconverter@mindspark.com");
Emptied folder: C:\Users\Ariel\AppData\Roaming\mozilla\firefox\profiles\612tub0w.default\minidumps [379 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on po 21.04.2014 at 9:04:45,49
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

atom.jon
Návštěvník
Návštěvník
Příspěvky: 51
Registrován: 15 Led 2012 19:59

Re: odvirování počítače pro motji

#29 Příspěvek od atom.jon »

Počítač funguje mnohem lépe, řekla bych, že výborně, je rychlý ......... dokonce zmizelo i zavirování modzilly ....

super ................. :D moc vám děkuju ..... je tedy i podle vás všechno v pořádku?

krásný den

Martina

Avatar uživatele
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 Říj 2008 08:02

Re: odvirování počítače pro motji

#30 Příspěvek od motji »

Ještě smažte C:\windows\Panther
A odinstalujte pc tols registry mechanic, postačí Vám ccleaner. Dejte vyčistit registry několikrát za sebou :) .

A pokud nejsou problémy, je to vše :)
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.

Odpovědět