Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

odvirování počítače pro motji

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Zpráva
Autor
atom.jon
Návštěvník
Návštěvník
Příspěvky: 51
Registrován: 15 led 2012 19:59

Re: odvirování počítače pro motji

#16 Příspěvek od atom.jon »

tak tady to je, snad je to provedeno dobře :) musím na víckrát, nejde to odeslat celé

ComboFix 14-04-12.01 - Ariel 15.04.2014 12:19:29.4.2 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.4040.2185 [GMT 2:00]
Spuštěný z: c:\users\Ariel\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\Ariel\Desktop\CFScript.txt
AV: Norton Internet Security *Disabled/Outdated* {D87FA2C0-F526-77B1-D6EC-0EDF3936CEDB}
FW: Norton Internet Security *Disabled* {E04423E5-BF49-76E9-FDB3-A7EAC7E589A0}
SP: Norton Internet Security *Disabled/Outdated* {631E4324-D31C-783F-EC5C-35AD42B18466}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
FILE ::
"c:\windows\tasks\Dealply.job"
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\AskPartnerNetwork
c:\program files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe
c:\program files (x86)\AskPartnerNetwork\Toolbar\APNSetup.exe
c:\program files (x86)\AskPartnerNetwork\Toolbar\ATU4-V7\Source\1031.mst
c:\program files (x86)\AskPartnerNetwork\Toolbar\ATU4-V7\Source\1033.mst
c:\program files (x86)\AskPartnerNetwork\Toolbar\ATU4-V7\Source\1034.mst
c:\program files (x86)\AskPartnerNetwork\Toolbar\ATU4-V7\Source\1036.mst
c:\program files (x86)\AskPartnerNetwork\Toolbar\ATU4-V7\Source\1040.mst
c:\program files (x86)\AskPartnerNetwork\Toolbar\ATU4-V7\Source\1041.mst
c:\program files (x86)\AskPartnerNetwork\Toolbar\ATU4-V7\Source\1043.mst
c:\program files (x86)\AskPartnerNetwork\Toolbar\ATU4-V7\Source\1045.mst
c:\program files (x86)\AskPartnerNetwork\Toolbar\ATU4-V7\Source\1049.mst
c:\program files (x86)\AskPartnerNetwork\Toolbar\ATU4-V7\Source\2070.mst
c:\program files (x86)\AskPartnerNetwork\Toolbar\ATU4-V7\Source\appdata\Mozilla\Firefox\Profiles\{DefaultProfilesFolder}\extensions\toolbar_ATU4-V7@apn.ask.com.xpi
c:\program files (x86)\AskPartnerNetwork\Toolbar\ATU4-V7\Source\AskToolbarInstaller-12.10.0_ATU4-V7.msi
c:\program files (x86)\AskPartnerNetwork\Toolbar\ATU4-V7\Source\AskToolbarInstaller-12.10.2_ATU4-V7.msi
c:\program files (x86)\AskPartnerNetwork\Toolbar\ATU4-V7\Source\AskToolbarInstaller-12.10.3_ATU4-V7.msi
c:\program files (x86)\AskPartnerNetwork\Toolbar\ATU4-V7\Source\AskToolbarInstaller-12.10.6_ATU4-V7.msi
c:\program files (x86)\AskPartnerNetwork\Toolbar\ATU4-V7\Source\common appdata\AskPartnerNetwork\Toolbar\{PartnerID}\CRX\{Crx_Version}\Toolbar.crx
c:\program files (x86)\AskPartnerNetwork\Toolbar\ATU4-V7\Source\common appdata\AskPartnerNetwork\Toolbar\{PartnerID}\CRX\ToolbarCR.crx
c:\program files (x86)\AskPartnerNetwork\Toolbar\ATU4-V7\Source\common appdata\AskPartnerNetwork\Toolbar\{PartnerID}\CRX\Update.xml
c:\program files (x86)\AskPartnerNetwork\Toolbar\ATU4-V7\Source\program files\AskPartnerNetwork\Toolbar\{PartnerID}\Passport.dll
c:\program files (x86)\AskPartnerNetwork\Toolbar\ATU4-V7\Source\program files\AskPartnerNetwork\Toolbar\{PartnerID}\Passport_x64.dll
c:\program files (x86)\AskPartnerNetwork\Toolbar\ATU4-V7\Source\program files\AskPartnerNetwork\Toolbar\apnmcp.exe
c:\program files (x86)\AskPartnerNetwork\Toolbar\ATU4-V7\Source\program files\AskPartnerNetwork\Toolbar\searchhook.dll
c:\program files (x86)\AskPartnerNetwork\Toolbar\ATU4-V7\Source\program files\AskPartnerNetwork\Toolbar\ServiceLocator.exe
c:\program files (x86)\AskPartnerNetwork\Toolbar\ATU4-V7\Source\program files\AskPartnerNetwork\Toolbar\SO.dll
c:\program files (x86)\AskPartnerNetwork\Toolbar\ATU4-V7\Source\program files\AskPartnerNetwork\Toolbar\toolbar.dll
c:\program files (x86)\AskPartnerNetwork\Toolbar\ATU4-V7\Source\program files\AskPartnerNetwork\Toolbar\Toolbar.exe
c:\program files (x86)\AskPartnerNetwork\Toolbar\ATU4-V7\Source\program files\AskPartnerNetwork\Toolbar\toolbar_x64.dll
c:\program files (x86)\AskPartnerNetwork\Toolbar\ATU4-V7\Source\program files\AskPartnerNetwork\Toolbar\ToolbarPS.dll
c:\program files (x86)\AskPartnerNetwork\Toolbar\ATU4-V7\Source\program files\AskPartnerNetwork\Toolbar\UpdateManager.exe
c:\program files (x86)\AskPartnerNetwork\Toolbar\ATU4-V7\Source\program files\AskPartnerNetwork\Toolbar\Updater\{PartnerID}\config.xml
c:\program files (x86)\AskPartnerNetwork\Toolbar\ATU4-V7\Source\program files\AskPartnerNetwork\Toolbar\Updater\ask-search.xml
c:\program files (x86)\AskPartnerNetwork\Toolbar\ATU4-V7\Source\program files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
c:\program files (x86)\AskPartnerNetwork\Toolbar\ATU4-V7\Source\program files\VNT\content.zip
c:\program files (x86)\AskPartnerNetwork\Toolbar\ATU4-V7\Source\program files\VNT\vntldr.exe
c:\program files (x86)\AskPartnerNetwork\Toolbar\ATU4-V7\Source\program files\VNT\vntsrv.dll
c:\program files (x86)\AskPartnerNetwork\Toolbar\ORJ\Passport.dll
c:\program files (x86)\AskPartnerNetwork\Toolbar\ORJ\Passport_x64.dll
c:\program files (x86)\AskPartnerNetwork\Toolbar\ORJ\Source\1031.mst
c:\program files (x86)\AskPartnerNetwork\Toolbar\ORJ\Source\1033.mst
c:\program files (x86)\AskPartnerNetwork\Toolbar\ORJ\Source\1034.mst
c:\program files (x86)\AskPartnerNetwork\Toolbar\ORJ\Source\1036.mst
c:\program files (x86)\AskPartnerNetwork\Toolbar\ORJ\Source\1040.mst
c:\program files (x86)\AskPartnerNetwork\Toolbar\ORJ\Source\1041.mst
c:\program files (x86)\AskPartnerNetwork\Toolbar\ORJ\Source\1043.mst
c:\program files (x86)\AskPartnerNetwork\Toolbar\ORJ\Source\1045.mst
c:\program files (x86)\AskPartnerNetwork\Toolbar\ORJ\Source\1049.mst
c:\program files (x86)\AskPartnerNetwork\Toolbar\ORJ\Source\2070.mst
c:\program files (x86)\AskPartnerNetwork\Toolbar\ORJ\Source\appdata\Mozilla\Firefox\Profiles\{DefaultProfilesFolder}\extensions\toolbar@ask.com.xpi
c:\program files (x86)\AskPartnerNetwork\Toolbar\ORJ\Source\AskToolbarInstaller-12.10.3_ORJ.msi
c:\program files (x86)\AskPartnerNetwork\Toolbar\ORJ\Source\AskToolbarInstaller-12.10.6_ORJ.msi
c:\program files (x86)\AskPartnerNetwork\Toolbar\ORJ\Source\common appdata\AskPartnerNetwork\Toolbar\{PartnerID}\CRX\{Crx_Version}\Toolbar.crx
c:\program files (x86)\AskPartnerNetwork\Toolbar\ORJ\Source\common appdata\AskPartnerNetwork\Toolbar\{PartnerID}\CRX\ToolbarCR.crx
c:\program files (x86)\AskPartnerNetwork\Toolbar\ORJ\Source\common appdata\AskPartnerNetwork\Toolbar\{PartnerID}\CRX\Update.xml
c:\program files (x86)\AskPartnerNetwork\Toolbar\ORJ\Source\program files\AskPartnerNetwork\Toolbar\{PartnerID}\Passport.dll
c:\program files (x86)\AskPartnerNetwork\Toolbar\ORJ\Source\program files\AskPartnerNetwork\Toolbar\{PartnerID}\Passport_x64.dll
c:\program files (x86)\AskPartnerNetwork\Toolbar\ORJ\Source\program files\AskPartnerNetwork\Toolbar\apnmcp.exe
c:\program files (x86)\AskPartnerNetwork\Toolbar\ORJ\Source\program files\AskPartnerNetwork\Toolbar\searchhook.dll
c:\program files (x86)\AskPartnerNetwork\Toolbar\ORJ\Source\program files\AskPartnerNetwork\Toolbar\ServiceLocator.exe
c:\program files (x86)\AskPartnerNetwork\Toolbar\ORJ\Source\program files\AskPartnerNetwork\Toolbar\SO.dll
c:\program files (x86)\AskPartnerNetwork\Toolbar\ORJ\Source\program files\AskPartnerNetwork\Toolbar\toolbar.dll
c:\program files (x86)\AskPartnerNetwork\Toolbar\ORJ\Source\program files\AskPartnerNetwork\Toolbar\Toolbar.exe
c:\program files (x86)\AskPartnerNetwork\Toolbar\ORJ\Source\program files\AskPartnerNetwork\Toolbar\toolbar_x64.dll
c:\program files (x86)\AskPartnerNetwork\Toolbar\ORJ\Source\program files\AskPartnerNetwork\Toolbar\ToolbarPS.dll
c:\program files (x86)\AskPartnerNetwork\Toolbar\ORJ\Source\program files\AskPartnerNetwork\Toolbar\UpdateManager.exe
c:\program files (x86)\AskPartnerNetwork\Toolbar\ORJ\Source\program files\AskPartnerNetwork\Toolbar\Updater\{PartnerID}\config.xml
c:\program files (x86)\AskPartnerNetwork\Toolbar\ORJ\Source\program files\AskPartnerNetwork\Toolbar\Updater\ask-search.xml
c:\program files (x86)\AskPartnerNetwork\Toolbar\ORJ\Source\program files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
c:\program files (x86)\AskPartnerNetwork\Toolbar\ORJ\Source\program files\VNT\content.zip
c:\program files (x86)\AskPartnerNetwork\Toolbar\ORJ\Source\program files\VNT\vntldr.exe
c:\program files (x86)\AskPartnerNetwork\Toolbar\ORJ\Source\program files\VNT\vntsrv.dll

atom.jon
Návštěvník
Návštěvník
Příspěvky: 51
Registrován: 15 led 2012 19:59

Re: odvirování počítače pro motji

#17 Příspěvek od atom.jon »

c:\program files (x86)\AskPartnerNetwork\Toolbar\searchhook.dll
c:\program files (x86)\AskPartnerNetwork\Toolbar\ServiceLocator.exe
c:\program files (x86)\AskPartnerNetwork\Toolbar\SO.dll
c:\program files (x86)\AskPartnerNetwork\Toolbar\toolbar.dll
c:\program files (x86)\AskPartnerNetwork\Toolbar\Toolbar.exe
c:\program files (x86)\AskPartnerNetwork\Toolbar\toolbar_x64.dll
c:\program files (x86)\AskPartnerNetwork\Toolbar\ToolbarPS.dll
c:\program files (x86)\AskPartnerNetwork\Toolbar\UpdateManager.exe
c:\program files (x86)\AskPartnerNetwork\Toolbar\Updater\ask-search.xml
c:\program files (x86)\AskPartnerNetwork\Toolbar\Updater\ATU4-V7\config.xml
c:\program files (x86)\AskPartnerNetwork\Toolbar\Updater\ORJ\config.xml
c:\program files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
c:\program files (x86)\atube
c:\program files (x86)\atube\as_guid.dat
c:\program files (x86)\atube\ask.xml
c:\program files (x86)\atube\atubeX.dll
c:\program files (x86)\atube\components\windowmediator.js
c:\program files (x86)\atube\dtUser.exe
c:\program files (x86)\atube\chrome\cleanCVS.bat
c:\program files (x86)\atube\chrome\content\custom.js
c:\program files (x86)\atube\chrome\content\lib\about.xml
c:\program files (x86)\atube\chrome\content\lib\custom.js
c:\program files (x86)\atube\chrome\content\lib\dtxpanel.xul
c:\program files (x86)\atube\chrome\content\lib\dtxpaneltransparent.xul
c:\program files (x86)\atube\chrome\content\lib\dtxpanelwin.xul
c:\program files (x86)\atube\chrome\content\lib\dtxprefwin.xul
c:\program files (x86)\atube\chrome\content\lib\dtxtransparentwin.xul
c:\program files (x86)\atube\chrome\content\lib\dtxwin.xul
c:\program files (x86)\atube\chrome\content\lib\emailnotifierproviders.xml
c:\program files (x86)\atube\chrome\content\lib\external.js
c:\program files (x86)\atube\chrome\content\lib\neterror.xhtml
c:\program files (x86)\atube\chrome\content\lib\rsspreview.html
c:\program files (x86)\atube\chrome\content\lib\rsswin.xml
c:\program files (x86)\atube\chrome\content\lib\rsswin.xsl
c:\program files (x86)\atube\chrome\content\lib\wmpstreamer.html
c:\program files (x86)\atube\chrome\content\modules\datastore.jsm
c:\program files (x86)\atube\chrome\content\modules\nsDragAndDrop.js
c:\program files (x86)\atube\chrome\content\neterror.xhtml
c:\program files (x86)\atube\chrome\content\newtab\images\btn_search.gif
c:\program files (x86)\atube\chrome\content\newtab\images\bullet.gif
c:\program files (x86)\atube\chrome\content\newtab\images\field_bg.gif
c:\program files (x86)\atube\chrome\content\newtab\images\powered_by_yahoo.gif
c:\program files (x86)\atube\chrome\content\newtab\newtab.html
c:\program files (x86)\atube\chrome\content\newtab\newtab_mystart.html
c:\program files (x86)\atube\chrome\content\newtab\newtab_yahoo.html
c:\program files (x86)\atube\chrome\content\preferences.xml
c:\program files (x86)\atube\chrome\content\template.xml
c:\program files (x86)\atube\chrome\content\toolbar.htm
c:\program files (x86)\atube\chrome\content\toolbar.xul
c:\program files (x86)\atube\chrome\content\vmncode.js
c:\program files (x86)\atube\chrome\content\vmnrsswin.xml
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\arrow-next-off.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\arrow-next.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\arrow-previous-off.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\arrow-previous.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\bg.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\border-radius.htc
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\btn-gotostore.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\btn-wide-close-over.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\btn-wide-close.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\css\dialog.css
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\css\IE7Styles.css
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\dialog.css
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\images\arrow-grey.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\images\arrows_grey-left.gif
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\images\arrows_grey-right.gif
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\images\bg_top.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\images\btn-back.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\images\btn-search.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\images\coupon-activated.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\images\delete.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\images\loader.gif
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\images\noimage.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\images\power-by.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\images\save.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\images\scrollb-disable.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\images\scrollb-down.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\images\scrollb.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\images\scrollt-disable.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\images\scrollt-down.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\images\scrollt.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\images\sprite.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\images\tab-arrow-hover.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\images\tab-arrow.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\images\tab-off-l.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\images\tab-off-r.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\images\tab-on-l.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\images\tab-on-r.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\images\tab-over-l.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\images\tab-over-r.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\images\tab-white-left.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\images\tab-white-mdl.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\images\tab-white-right.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\images\vid-bg.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\index.html
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\js\jquery-1.4.2.min.js
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\js\jquery.event.wheel.js
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\js\jquery.pagination.js
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\js\jquery.scrollTo-min.js
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\js\JSON.js
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\js\listnav.js
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\js\main.js
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\not_available.gif
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\page_white_copy.gif
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\panel.html
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\partner.xml
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\pmfeed.xml
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\shopping-hot.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\skin\css\dialog.css
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\skin\images\bg.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\skin\images\btn-help-over.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\skin\images\btn-help.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\skin\images\btn-managealerts-over.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\skin\images\btn-managealerts.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\skin\images\btn-wide-close-over.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\skin\images\btn-wide-close.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\skin\images\default.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\skin\images\logo-bizrate.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\skin\images\tb_icon.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\skin\images\transparent.gif
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\skin\images\win-btm-left.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\skin\images\win-btm-mdl.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\skin\images\win-btm-right-resize.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\skin\images\win-btm-right.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\skin\main.html
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\skin\scripts\defscript.js
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\tb_icon.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\throbber.gif
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\widget.js
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\widget.jsw
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\widget.xml
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.Bizrate\widget_version.txt
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\css\dialog.css
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\arrow-grey.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\arrows_grey-left.gif
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\arrows_grey-right.gif
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\back.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\btn-search-over.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\btn-search.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\delete.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\scrollb-disable.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\scrollb-down.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\scrollb.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\scrollt-disable.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\scrollt-down.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\scrollt.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\tab-arrow-hover.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\tab-arrow.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\tab-off-l.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\tab-off-r.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\tab-on-l.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\tab-on-r.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\tab-over-l.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\tab-over-r.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\tab-red-left.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\tab-red-mdl.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\tab-red-right.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\tab-white-left.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\tab-white-mdl.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\tab-white-right.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\throbber.gif
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\vid-bg.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\youtube.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\index.html
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\js\function.js
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\js\jquery-1.4.2.min.js
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\js\JSON.js
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\skin\css\dialog.css
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\skin\images\bg-facebook.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\skin\images\blank.gif
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\skin\images\btn-wide-close-over.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\skin\images\btn-wide-close.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\skin\images\default.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\skin\images\transparent.gif
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\skin\images\win-btm-left.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\skin\images\win-btm-mdl.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\skin\images\win-btm-right-resize.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\skin\images\win-btm-right.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\skin\main.html
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\skin\scripts\defscript.js
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\skin\scripts\jquery-1.4.2.min.js
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\tb_icon.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\widget.js
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\widget.xml
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.MyStartFacebook\widget_version.txt
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.RadioBeta\radiobeta-buffering.gif
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.RadioBeta\radiobeta-connecting.gif
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.RadioBeta\radiobeta-ico.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.RadioBeta\radiobeta-playing.gif
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.RadioBeta\radiobeta-stopped.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.RadioBeta\radiobeta.ico
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.RadioBeta\radiobeta.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.RadioBeta\tb_icon.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.RadioBeta\widget.js
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.RadioBeta\widget.jsw
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.RadioBeta\widget.xml
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\country.json
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\css\dialog.css
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\css\videoplayer.css
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\favorites.json
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\images\arrow-grey.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\images\arrows_grey-left.gif
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\images\arrows_grey-right.gif
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\images\back.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\images\btn-search-over.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\images\btn-search.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\images\delete.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\images\scrollb-disable.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\images\scrollb-down.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\images\scrollb.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\images\scrollt-disable.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\images\scrollt-down.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\images\scrollt.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\images\star-grey.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\images\star.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\images\tab-arrow-hover.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\images\tab-arrow.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\images\tab-off-l.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\images\tab-off-r.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\images\tab-on-l.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\images\tab-on-r.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\images\tab-over-l.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\images\tab-over-r.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\images\tab-red-left.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\images\tab-red-mdl.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\images\tab-red-right.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\images\tab-white-left.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\images\tab-white-mdl.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\images\tab-white-right.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\images\throbber.gif
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\images\vid-bg.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\index.html
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\js\function.js
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\js\jquery-1.4.2.min.js
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\js\jquery.autocomplete.min.js
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\js\jquery.event.wheel.js
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\js\jquery.jlembed.js
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\js\jquery.scrollTo-min.js
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\js\jquery.url.js
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\js\JSON.js
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\js\main.js
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\js\videoplayer.js
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\net.vmn.www.WebTV.zip
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\skin\css\dialog.css
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\skin\images\bg.gif
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\skin\images\btn-search.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\skin\images\btn-wide-close-over.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\skin\images\btn-wide-close.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\skin\images\default.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\skin\images\Thumbs.db
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\skin\images\transparent.gif
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\skin\images\win-btm-left.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\skin\images\win-btm-mdl.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\skin\images\win-btm-right-resize.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\skin\images\win-btm-right.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\skin\main.html
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\skin\scripts\defscript.js
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\tb_icon.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\videoplayer.html
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\widget.js
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\widget.xml
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.WebTV\widget_version.txt
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\css\autocomplete.css
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\css\dialog.css
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\images\arrow-grey.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\images\arrows_grey-left.gif
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\images\arrows_grey-right.gif
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\images\bg.gif
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\images\btn-search-over.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\images\btn-search.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\images\powered-by-youtube.gif
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\images\tab-off-l.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\images\tab-off-r.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\images\tab-on-l.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\images\tab-on-r.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\images\tab-red-left.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\images\tab-red-mdl.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\images\tab-red-right.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\images\tab-white-left.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\images\tab-white-mdl.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\images\tab-white-right.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\images\throbber.gif
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\images\vid-bg.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\images\youtube.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\index.html
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\js\autocomplete.js
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\js\jquery-1.4.3.min.js
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\js\paginator.js
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\js\youtube.js
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\skin\css\dialog.css
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\skin\images\bg.gif
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\skin\images\btn-search.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\skin\images\btn-wide-close-over.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\skin\images\btn-wide-close.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\skin\images\default.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\skin\images\tab-off-l.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\skin\images\tab-off-r.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\skin\images\tab-on-l.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\skin\images\tab-on-r.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\skin\images\transparent.gif
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\skin\images\win-btm-left.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\skin\images\win-btm-mdl.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\skin\images\win-btm-right-resize.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\skin\images\win-btm-right.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\skin\main.html
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\skin\scripts\defscript.js
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\tb_icon.png
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\widget.js
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\widget.jsw
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\widget.xml
c:\program files (x86)\atube\chrome\content\widgets\net.vmn.www.YouTube_v2\widget_version.txt

atom.jon
Návštěvník
Návštěvník
Příspěvky: 51
Registrován: 15 led 2012 19:59

Re: odvirování počítače pro motji

#18 Příspěvek od atom.jon »

c:\program files (x86)\atube\chrome\data\dynamicElements\vmntoolbar.xsl
c:\program files (x86)\atube\chrome\data\rss\rss.xml
c:\program files (x86)\atube\chrome\data\search\engines.xml
c:\program files (x86)\atube\chrome\data\search\engines_mystart.xml
c:\program files (x86)\atube\chrome\data\search\engines_yahoo.xml
c:\program files (x86)\atube\chrome\data\search\search.xsl
c:\program files (x86)\atube\chrome\data\weather\icons.xml
c:\program files (x86)\atube\chrome\locale\lib\de.js
c:\program files (x86)\atube\chrome\locale\lib\en.js
c:\program files (x86)\atube\chrome\locale\lib\es.js
c:\program files (x86)\atube\chrome\locale\lib\fr.js
c:\program files (x86)\atube\chrome\locale\lib\it.js
c:\program files (x86)\atube\chrome\locale\locale.js
c:\program files (x86)\atube\chrome\locale\toolbar\de.js
c:\program files (x86)\atube\chrome\locale\toolbar\en.js
c:\program files (x86)\atube\chrome\locale\toolbar\es.js
c:\program files (x86)\atube\chrome\locale\toolbar\fr.js
c:\program files (x86)\atube\chrome\locale\toolbar\it.js
c:\program files (x86)\atube\chrome\skin\83745_thumb_ask_logo_24x.png
c:\program files (x86)\atube\chrome\skin\about.gif
c:\program files (x86)\atube\chrome\skin\about_logo.png
c:\program files (x86)\atube\chrome\skin\babylon_logo.png
c:\program files (x86)\atube\chrome\skin\bluelite.gif
c:\program files (x86)\atube\chrome\skin\bluesky.gif
c:\program files (x86)\atube\chrome\skin\btn-search-de.png
c:\program files (x86)\atube\chrome\skin\btn-search-en.png
c:\program files (x86)\atube\chrome\skin\btn-search-es.png
c:\program files (x86)\atube\chrome\skin\btn-search-fr.png
c:\program files (x86)\atube\chrome\skin\btn-search-it.png
c:\program files (x86)\atube\chrome\skin\btn-search-over-de.png
c:\program files (x86)\atube\chrome\skin\btn-search-over-en.png
c:\program files (x86)\atube\chrome\skin\btn-search-over-es.png
c:\program files (x86)\atube\chrome\skin\btn-search-over-fr.png
c:\program files (x86)\atube\chrome\skin\btn-search-over-it.png
c:\program files (x86)\atube\chrome\skin\btn-search-over.png
c:\program files (x86)\atube\chrome\skin\btn-search.png
c:\program files (x86)\atube\chrome\skin\btn-settings-over.png
c:\program files (x86)\atube\chrome\skin\btn-settings.png
c:\program files (x86)\atube\chrome\skin\btn-widgets-over.png
c:\program files (x86)\atube\chrome\skin\btn-widgets.png
c:\program files (x86)\atube\chrome\skin\btn_settings.png
c:\program files (x86)\atube\chrome\skin\ca.png
c:\program files (x86)\atube\chrome\skin\custom.css
c:\program files (x86)\atube\chrome\skin\dictionary.png
c:\program files (x86)\atube\chrome\skin\divider.png
c:\program files (x86)\atube\chrome\skin\downloadcom.png
c:\program files (x86)\atube\chrome\skin\dtxlogo.png
c:\program files (x86)\atube\chrome\skin\email.png
c:\program files (x86)\atube\chrome\skin\email_on.png
c:\program files (x86)\atube\chrome\skin\facebook.png
c:\program files (x86)\atube\chrome\skin\games.png
c:\program files (x86)\atube\chrome\skin\graphna.png
c:\program files (x86)\atube\chrome\skin\graphred0.png
c:\program files (x86)\atube\chrome\skin\graphred0_5.png
c:\program files (x86)\atube\chrome\skin\graphred1.png
c:\program files (x86)\atube\chrome\skin\graphred1_5.png
c:\program files (x86)\atube\chrome\skin\graphred2.png
c:\program files (x86)\atube\chrome\skin\graphred2_5.png
c:\program files (x86)\atube\chrome\skin\graphred3.png
c:\program files (x86)\atube\chrome\skin\graphred3_5.png
c:\program files (x86)\atube\chrome\skin\graphred4.png
c:\program files (x86)\atube\chrome\skin\graphred4_5.png
c:\program files (x86)\atube\chrome\skin\graphred5.png
c:\program files (x86)\atube\chrome\skin\graphredna.png
c:\program files (x86)\atube\chrome\skin\grey.gif
c:\program files (x86)\atube\chrome\skin\ico-shield.png
c:\program files (x86)\atube\chrome\skin\images.png
c:\program files (x86)\atube\chrome\skin\lib\add.png
c:\program files (x86)\atube\chrome\skin\lib\alexabutton.css
c:\program files (x86)\atube\chrome\skin\lib\aol.png
c:\program files (x86)\atube\chrome\skin\lib\arrow-dn.gif
c:\program files (x86)\atube\chrome\skin\lib\arrow-right-disabled.gif
c:\program files (x86)\atube\chrome\skin\lib\arrow-right.gif
c:\program files (x86)\atube\chrome\skin\lib\arrow-up.gif
c:\program files (x86)\atube\chrome\skin\lib\bg-btn-divider.png
c:\program files (x86)\atube\chrome\skin\lib\bg-btn-end.png
c:\program files (x86)\atube\chrome\skin\lib\bg-btn-mdl.png
c:\program files (x86)\atube\chrome\skin\lib\bg-btn-mdl_ff.png
c:\program files (x86)\atube\chrome\skin\lib\bg-btn-start.png
c:\program files (x86)\atube\chrome\skin\lib\bg-btnover-divider.png
c:\program files (x86)\atube\chrome\skin\lib\bg-btnover-end.png
c:\program files (x86)\atube\chrome\skin\lib\bg-btnover-mdl.png
c:\program files (x86)\atube\chrome\skin\lib\bg-btnover-mdl_ff.png
c:\program files (x86)\atube\chrome\skin\lib\bg-btnover-start.png
c:\program files (x86)\atube\chrome\skin\lib\blank.gif
c:\program files (x86)\atube\chrome\skin\lib\btn-widgets-over.png
c:\program files (x86)\atube\chrome\skin\lib\btn-widgets.png
c:\program files (x86)\atube\chrome\skin\lib\btn_slider.png
c:\program files (x86)\atube\chrome\skin\lib\btnback-down-vista.png
c:\program files (x86)\atube\chrome\skin\lib\btnback-vista.png
c:\program files (x86)\atube\chrome\skin\lib\btnleft-down-vista.png
c:\program files (x86)\atube\chrome\skin\lib\btnleft-vista.png
c:\program files (x86)\atube\chrome\skin\lib\btnright-down-vista.png
c:\program files (x86)\atube\chrome\skin\lib\btnright-vista.png
c:\program files (x86)\atube\chrome\skin\lib\button-splitter-down-vista.png
c:\program files (x86)\atube\chrome\skin\lib\button-splitter-vista.png
c:\program files (x86)\atube\chrome\skin\lib\button-splitter.png
c:\program files (x86)\atube\chrome\skin\lib\collapse.png
c:\program files (x86)\atube\chrome\skin\lib\comcast.png
c:\program files (x86)\atube\chrome\skin\lib\debugbar\debug.html
c:\program files (x86)\atube\chrome\skin\lib\dtx-test.css
c:\program files (x86)\atube\chrome\skin\lib\dtx.css
c:\program files (x86)\atube\chrome\skin\lib\edit-back-hot.png
c:\program files (x86)\atube\chrome\skin\lib\edit-back.png
c:\program files (x86)\atube\chrome\skin\lib\embarq.png
c:\program files (x86)\atube\chrome\skin\lib\expand.png
c:\program files (x86)\atube\chrome\skin\lib\fast.png
c:\program files (x86)\atube\chrome\skin\lib\found.png
c:\program files (x86)\atube\chrome\skin\lib\gmail.png
c:\program files (x86)\atube\chrome\skin\lib\gripper.png
c:\program files (x86)\atube\chrome\skin\lib\highlight.png
c:\program files (x86)\atube\chrome\skin\lib\highlight_blue.png
c:\program files (x86)\atube\chrome\skin\lib\highlight_cyan.png
c:\program files (x86)\atube\chrome\skin\lib\highlight_lime.png
c:\program files (x86)\atube\chrome\skin\lib\highlight_magenta.png
c:\program files (x86)\atube\chrome\skin\lib\highlight_yellow.png
c:\program files (x86)\atube\chrome\skin\lib\hotmail.png
c:\program files (x86)\atube\chrome\skin\lib\checkmark.png
c:\program files (x86)\atube\chrome\skin\lib\chevron.png
c:\program files (x86)\atube\chrome\skin\lib\ico-check.png
c:\program files (x86)\atube\chrome\skin\lib\imap.png
c:\program files (x86)\atube\chrome\skin\lib\lastsearch-thumb-back.gif
c:\program files (x86)\atube\chrome\skin\lib\launchers.css
c:\program files (x86)\atube\chrome\skin\lib\loadingMid.gif
c:\program files (x86)\atube\chrome\skin\lib\lock.png
c:\program files (x86)\atube\chrome\skin\lib\logo-separator.png
c:\program files (x86)\atube\chrome\skin\lib\mailcom.png
c:\program files (x86)\atube\chrome\skin\lib\menu_bg-basic.png
c:\program files (x86)\atube\chrome\skin\lib\menu_separator_bar.png
c:\program files (x86)\atube\chrome\skin\lib\menu_separator_white.png
c:\program files (x86)\atube\chrome\skin\lib\menuitem-splitter.png
c:\program files (x86)\atube\chrome\skin\lib\menuitemback-down-vista.png
c:\program files (x86)\atube\chrome\skin\lib\menuitemback-vista.png
c:\program files (x86)\atube\chrome\skin\lib\menuitemleft-down-vista.png
c:\program files (x86)\atube\chrome\skin\lib\menuitemleft-vista.png
c:\program files (x86)\atube\chrome\skin\lib\menuitemleft.png
c:\program files (x86)\atube\chrome\skin\lib\menuitemright-down-vista.png
c:\program files (x86)\atube\chrome\skin\lib\menuitemright-vista.png
c:\program files (x86)\atube\chrome\skin\lib\minus.gif
c:\program files (x86)\atube\chrome\skin\lib\modify.png
c:\program files (x86)\atube\chrome\skin\lib\move.gif
c:\program files (x86)\atube\chrome\skin\lib\movetarget.png
c:\program files (x86)\atube\chrome\skin\lib\newsitem.gif
c:\program files (x86)\atube\chrome\skin\lib\panels\css\panels.css
c:\program files (x86)\atube\chrome\skin\lib\panels\css\popupAbout.css
c:\program files (x86)\atube\chrome\skin\lib\panels\css\popupGames.css
c:\program files (x86)\atube\chrome\skin\lib\panels\css\popupRSS.css
c:\program files (x86)\atube\chrome\skin\lib\panels\css\popupWidgets.css
c:\program files (x86)\atube\chrome\skin\lib\panels\default\css\dialog.css
c:\program files (x86)\atube\chrome\skin\lib\panels\default\images\bg.gif
c:\program files (x86)\atube\chrome\skin\lib\panels\default\images\btn-search.png
c:\program files (x86)\atube\chrome\skin\lib\panels\default\images\btn-wide-close-over.png
c:\program files (x86)\atube\chrome\skin\lib\panels\default\images\btn-wide-close.png
c:\program files (x86)\atube\chrome\skin\lib\panels\default\images\default.png
c:\program files (x86)\atube\chrome\skin\lib\panels\default\images\tab-off-l.png
c:\program files (x86)\atube\chrome\skin\lib\panels\default\images\tab-off-r.png
c:\program files (x86)\atube\chrome\skin\lib\panels\default\images\tab-on-l.png
c:\program files (x86)\atube\chrome\skin\lib\panels\default\images\tab-on-r.png
c:\program files (x86)\atube\chrome\skin\lib\panels\default\images\transparent.gif
c:\program files (x86)\atube\chrome\skin\lib\panels\default\images\ttlbar-left.png
c:\program files (x86)\atube\chrome\skin\lib\panels\default\images\ttlbar-mdl.png
c:\program files (x86)\atube\chrome\skin\lib\panels\default\images\ttlbar-right.png
c:\program files (x86)\atube\chrome\skin\lib\panels\default\images\win-btm-left.png
c:\program files (x86)\atube\chrome\skin\lib\panels\default\images\win-btm-mdl.png
c:\program files (x86)\atube\chrome\skin\lib\panels\default\images\win-btm-right-resize.png
c:\program files (x86)\atube\chrome\skin\lib\panels\default\images\win-btm-right.png
c:\program files (x86)\atube\chrome\skin\lib\panels\default\images\win-left.png
c:\program files (x86)\atube\chrome\skin\lib\panels\default\images\win-right.png
c:\program files (x86)\atube\chrome\skin\lib\panels\default\main.html
c:\program files (x86)\atube\chrome\skin\lib\panels\default\main.html.bak
c:\program files (x86)\atube\chrome\skin\lib\panels\default\scripts\defscript.js
c:\program files (x86)\atube\chrome\skin\lib\panels\default\scripts\defscript.js.bak
c:\program files (x86)\atube\chrome\skin\lib\panels\footer.htm
c:\program files (x86)\atube\chrome\skin\lib\panels\gamecategory.xsl
c:\program files (x86)\atube\chrome\skin\lib\panels\gameData.js
c:\program files (x86)\atube\chrome\skin\lib\panels\gameList.xsl
c:\program files (x86)\atube\chrome\skin\lib\panels\games.xsl
c:\program files (x86)\atube\chrome\skin\lib\panels\gametype.xsl
c:\program files (x86)\atube\chrome\skin\lib\panels\images\arrow-dn.gif
c:\program files (x86)\atube\chrome\skin\lib\panels\images\arrow-sml-drop.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\arrow-sml.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\arrow-up.gif
c:\program files (x86)\atube\chrome\skin\lib\panels\images\arrowr-bluew5.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\bg-aboutbox.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\bg-btnover.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\bg-pnl520x390.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\btn-addtoolbar-left-over.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\btn-addtoolbar-left.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\btn-addtoolbar-right.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\btn-back.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\btn-close-grey.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\btn-close-greyover.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\btn-drag.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\btn-mdl-over.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\btn-mdl.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\btn-moredetails.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\btn-next-over.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\btn-next.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\btn-play-left-over.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\btn-play-left.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\btn-previous-over.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\btn-previous.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\btn-right-over.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\btn-search-pnlbtm-over.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\btn-search-pnlbtm.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\btn-try-left-over.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\btn-try-left.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\bullet-orange.gif
c:\program files (x86)\atube\chrome\skin\lib\panels\images\gamethumb-on.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\gamethumb2-over.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\ico-calendar.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\ico-dollar.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\ico-download.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\ico-joystick24.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\ico-news24.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\ico-play.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\ico-tags.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\icon-Add.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\icon-download.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\icon-Info.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\icon-play.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\icon-shop.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\menul-bgon.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\menul-bgover.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\panel-botm-noscroll.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\scroll-bg-206.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\scroll-bg.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\scroll-topwin.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\scrollb-disable.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\scrollb-down.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\scrollb-over.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\scrollb.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\scrollt-disable.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\scrollt-down.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\scrollt-over.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\scrollt.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\searchbox-pnlbtm.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\star_x_grey.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\star_x_orange.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\TRUSTe_about.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\view-detailed-on.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\view-detailed-over.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\view-thumb-on.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\view-thumb-over.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\widgets-square-16px.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\widgets-square-24px.png
c:\program files (x86)\atube\chrome\skin\lib\panels\images\widgets.png
c:\program files (x86)\atube\chrome\skin\lib\panels\initHTML.html
c:\program files (x86)\atube\chrome\skin\lib\panels\popupGames.html
c:\program files (x86)\atube\chrome\skin\lib\panels\popupHTML.html
c:\program files (x86)\atube\chrome\skin\lib\panels\popupRSS.html
c:\program files (x86)\atube\chrome\skin\lib\panels\popupWidgets.html
c:\program files (x86)\atube\chrome\skin\lib\panels\popupWidgets.html.bak
c:\program files (x86)\atube\chrome\skin\lib\panels\scroll.png
c:\program files (x86)\atube\chrome\skin\lib\plus.gif
c:\program files (x86)\atube\chrome\skin\lib\pop.png
c:\program files (x86)\atube\chrome\skin\lib\radio.png
c:\program files (x86)\atube\chrome\skin\lib\radio\css\manager.css
c:\program files (x86)\atube\chrome\skin\lib\radio\css\slider.css
c:\program files (x86)\atube\chrome\skin\lib\radio\images\bg-pnl.png
c:\program files (x86)\atube\chrome\skin\lib\radio\images\btn-close-grey.png
c:\program files (x86)\atube\chrome\skin\lib\radio\images\btn-close-greyover.png
c:\program files (x86)\atube\chrome\skin\lib\radio\images\collapsed_button.gif
c:\program files (x86)\atube\chrome\skin\lib\radio\images\expanded_button.gif
c:\program files (x86)\atube\chrome\skin\lib\radio\images\ico-playstation-down.png
c:\program files (x86)\atube\chrome\skin\lib\radio\images\ico-playstation-over.png
c:\program files (x86)\atube\chrome\skin\lib\radio\images\ico-playstation.png
c:\program files (x86)\atube\chrome\skin\lib\radio\images\ico-radio.png
c:\program files (x86)\atube\chrome\skin\lib\radio\images\music-note.png
c:\program files (x86)\atube\chrome\skin\lib\radio\images\radio-btn-pause-on.png
c:\program files (x86)\atube\chrome\skin\lib\radio\images\radio-btn-pause.png
c:\program files (x86)\atube\chrome\skin\lib\radio\images\radio-btn-play-on.png
c:\program files (x86)\atube\chrome\skin\lib\radio\images\radio-btn-play.png
c:\program files (x86)\atube\chrome\skin\lib\radio\images\radio-eq-bg.png
c:\program files (x86)\atube\chrome\skin\lib\radio\images\radio-eq-buffer.gif
c:\program files (x86)\atube\chrome\skin\lib\radio\images\radio-eq-busy.gif
c:\program files (x86)\atube\chrome\skin\lib\radio\images\radio-eq-off.png
c:\program files (x86)\atube\chrome\skin\lib\radio\images\radio-eq-on.gif
c:\program files (x86)\atube\chrome\skin\lib\radio\images\radio-eq-warning.png
c:\program files (x86)\atube\chrome\skin\lib\radio\images\radio-options-design-on.png
c:\program files (x86)\atube\chrome\skin\lib\radio\images\radio-options-design.png
c:\program files (x86)\atube\chrome\skin\lib\radio\images\radio-options-on.png
c:\program files (x86)\atube\chrome\skin\lib\radio\images\radio-options.png
c:\program files (x86)\atube\chrome\skin\lib\radio\images\radio-volume-0.png
c:\program files (x86)\atube\chrome\skin\lib\radio\images\radio-volume-1.png
c:\program files (x86)\atube\chrome\skin\lib\radio\images\radio-volume-2.png
c:\program files (x86)\atube\chrome\skin\lib\radio\images\radio-volume-3.png
c:\program files (x86)\atube\chrome\skin\lib\radio\images\radio-volume-mute.png
c:\program files (x86)\atube\chrome\skin\lib\radio\images\scrollbar-handle.png
c:\program files (x86)\atube\chrome\skin\lib\radio\images\scrollbar-track.png
c:\program files (x86)\atube\chrome\skin\lib\radio\images\slider.png
c:\program files (x86)\atube\chrome\skin\lib\radio\images\slideron.png
c:\program files (x86)\atube\chrome\skin\lib\radio\images\track.png
c:\program files (x86)\atube\chrome\skin\lib\radio\managerpanel.html
c:\program files (x86)\atube\chrome\skin\lib\radio\volumeslider.html
c:\program files (x86)\atube\chrome\skin\lib\rank0.png
c:\program files (x86)\atube\chrome\skin\lib\rank0_5.png
c:\program files (x86)\atube\chrome\skin\lib\rank1.png
c:\program files (x86)\atube\chrome\skin\lib\rank1_5.png
c:\program files (x86)\atube\chrome\skin\lib\rank2.png
c:\program files (x86)\atube\chrome\skin\lib\rank2_5.png
c:\program files (x86)\atube\chrome\skin\lib\rank3.png
c:\program files (x86)\atube\chrome\skin\lib\rank3_5.png
c:\program files (x86)\atube\chrome\skin\lib\rank4.png
c:\program files (x86)\atube\chrome\skin\lib\rank4_5.png
c:\program files (x86)\atube\chrome\skin\lib\rank5.png
c:\program files (x86)\atube\chrome\skin\lib\rankna.png
c:\program files (x86)\atube\chrome\skin\lib\reload.png
c:\program files (x86)\atube\chrome\skin\lib\remove.png
c:\program files (x86)\atube\chrome\skin\lib\rename.gif
c:\program files (x86)\atube\chrome\skin\lib\resize-box.gif
c:\program files (x86)\atube\chrome\skin\lib\rss.png
c:\program files (x86)\atube\chrome\skin\lib\rsschannelback.png
c:\program files (x86)\atube\chrome\skin\lib\RSSLogo.png
c:\program files (x86)\atube\chrome\skin\lib\rsstabdivider.gif
c:\program files (x86)\atube\chrome\skin\lib\scroll-left.png
c:\program files (x86)\atube\chrome\skin\lib\scroll-right.png
c:\program files (x86)\atube\chrome\skin\lib\search-go.png
c:\program files (x86)\atube\chrome\skin\lib\search.png
c:\program files (x86)\atube\chrome\skin\lib\separator.png
c:\program files (x86)\atube\chrome\skin\lib\text-ellipsis.xml
c:\program files (x86)\atube\chrome\skin\lib\throbber.gif
c:\program files (x86)\atube\chrome\skin\lib\toolbarsplitter.gif
c:\program files (x86)\atube\chrome\skin\lib\transparent_1px.gif
c:\program files (x86)\atube\chrome\skin\lib\uwa\border_02.png
c:\program files (x86)\atube\chrome\skin\lib\uwa\border_03.png
c:\program files (x86)\atube\chrome\skin\lib\uwa\border_04.png
c:\program files (x86)\atube\chrome\skin\lib\uwa\border_06.png
c:\program files (x86)\atube\chrome\skin\lib\uwa\border_07.png
c:\program files (x86)\atube\chrome\skin\lib\uwa\border_08.png
c:\program files (x86)\atube\chrome\skin\lib\uwa\border_09.png
c:\program files (x86)\atube\chrome\skin\lib\uwa\border_10.png
c:\program files (x86)\atube\chrome\skin\lib\uwa\border_11.png
c:\program files (x86)\atube\chrome\skin\lib\uwa\border_12.png
c:\program files (x86)\atube\chrome\skin\lib\uwa\border_13.png
c:\program files (x86)\atube\chrome\skin\lib\uwa\border_14.png
c:\program files (x86)\atube\chrome\skin\lib\uwa\border_15.png
c:\program files (x86)\atube\chrome\skin\lib\uwa\border_16.png
c:\program files (x86)\atube\chrome\skin\lib\uwa\border_18.png
c:\program files (x86)\atube\chrome\skin\lib\uwa\border_19.png
c:\program files (x86)\atube\chrome\skin\lib\uwa\border_20.png
c:\program files (x86)\atube\chrome\skin\lib\uwa\border_21.png
c:\program files (x86)\atube\chrome\skin\lib\uwa\btn-close-grey.png
c:\program files (x86)\atube\chrome\skin\lib\uwa\btn-close-greyover.png
c:\program files (x86)\atube\chrome\skin\lib\uwa\close-hot.png
c:\program files (x86)\atube\chrome\skin\lib\uwa\close-normal.png
c:\program files (x86)\atube\chrome\skin\lib\uwa\loadingMid.gif
c:\program files (x86)\atube\chrome\skin\lib\uwa\paneltemplate.html
c:\program files (x86)\atube\chrome\skin\lib\uwa\proxy.html
c:\program files (x86)\atube\chrome\skin\lib\uwa\template.html
c:\program files (x86)\atube\chrome\skin\lib\uwa\template.html.bak
c:\program files (x86)\atube\chrome\skin\lib\uwa\template.xml
c:\program files (x86)\atube\chrome\skin\lib\uwa\templateFF.html
c:\program files (x86)\atube\chrome\skin\lib\uwa\throbber.gif

atom.jon
Návštěvník
Návštěvník
Příspěvky: 51
Registrován: 15 led 2012 19:59

Re: odvirování počítače pro motji

#19 Příspěvek od atom.jon »

to je teda hodně dlouhé..... má to tak být ? mám to zkopírovat všechno ? jestli to nedělám zbytečně. Možná jsem to udělala špatně.

atom.jon
Návštěvník
Návštěvník
Příspěvky: 51
Registrován: 15 led 2012 19:59

Re: odvirování počítače pro motji

#20 Příspěvek od atom.jon »

tak teď posílám snad to správné

ComboFix 14-04-12.01 - Ariel 15.04.2014 14:02:00.5.2 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.4040.2544 [GMT 2:00]
Spuštěný z: c:\users\Ariel\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\Ariel\Desktop\CFScript.txt
AV: Norton Internet Security *Disabled/Outdated* {D87FA2C0-F526-77B1-D6EC-0EDF3936CEDB}
FW: Norton Internet Security *Disabled* {E04423E5-BF49-76E9-FDB3-A7EAC7E589A0}
SP: Norton Internet Security *Disabled/Outdated* {631E4324-D31C-783F-EC5C-35AD42B18466}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
FILE ::
"c:\windows\tasks\Dealply.job"
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\diamondata\diamondataBHO.dll
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2014-03-15 do 2014-04-15 )))))))))))))))))))))))))))))))
.
.
2014-04-15 12:11 . 2014-04-15 12:11 -------- d-----w- c:\users\Default\AppData\Local\temp
2014-04-15 06:34 . 2014-03-07 04:43 10521840 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{8D78BAF7-2382-4F91-BFE4-BB6629AF8941}\mpengine.dll
2014-04-09 11:34 . 2014-02-04 02:35 190912 ----a-w- c:\windows\system32\drivers\storport.sys
2014-03-31 09:35 . 2014-03-31 09:35 -------- d-----w- c:\users\Ariel\AppData\Local\VideoDownloadConverter_4z
2014-03-31 08:48 . 2014-03-31 09:31 -------- d-----w- C:\AdwCleaner
2014-03-31 07:21 . 2014-03-31 07:21 -------- d-----w- C:\rsit
2014-03-31 07:21 . 2014-03-31 07:21 -------- d-----w- c:\program files\trend micro
2014-03-24 17:08 . 2014-04-02 04:13 -------- d-----w- c:\windows\system32\drivers\NISx64\1502000.026
2014-03-18 07:18 . 2014-03-18 07:18 -------- d-----w- c:\users\Ariel\AppData\Local\Skype
2014-03-18 07:18 . 2014-03-18 07:18 -------- d-----w- c:\program files (x86)\Common Files\Skype
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-04-09 19:57 . 2012-03-22 17:51 90655440 ----a-w- c:\windows\system32\MRT.exe
2014-03-12 07:35 . 2012-09-04 10:56 692616 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2014-03-12 07:35 . 2012-03-23 20:46 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2014-03-04 09:17 . 2014-04-09 11:34 44032 ----a-w- c:\windows\apppatch\acwow64.dll
2014-02-07 01:23 . 2014-03-14 07:15 3156480 ----a-w- c:\windows\system32\win32k.sys
2014-02-04 08:39 . 2011-02-19 21:51 608080 ----a-w- c:\windows\system32\msvcp100.dll
2014-02-04 08:39 . 2011-02-18 23:52 829264 ----a-w- c:\windows\system32\msvcr100.dll
2014-02-04 02:32 . 2014-03-14 07:14 1424384 ----a-w- c:\windows\system32\WindowsCodecs.dll
2014-02-04 02:32 . 2014-03-14 07:14 624128 ----a-w- c:\windows\system32\qedit.dll
2014-02-04 02:04 . 2014-03-14 07:14 1230336 ----a-w- c:\windows\SysWow64\WindowsCodecs.dll
2014-02-04 02:04 . 2014-03-14 07:14 509440 ----a-w- c:\windows\SysWow64\qedit.dll
2014-01-29 02:32 . 2014-03-14 07:15 484864 ----a-w- c:\windows\system32\wer.dll
2014-01-29 02:06 . 2014-03-14 07:15 381440 ----a-w- c:\windows\SysWow64\wer.dll
2014-01-28 02:32 . 2014-03-14 07:15 228864 ----a-w- c:\windows\system32\wwansvc.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{055af109-de93-4160-bcfc-7da70ecaa020}]
c:\program files (x86)\diamondata\diamondataBHO.dll [BU]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{9cfa5939-8996-40ed-97bb-3c34c4ae8501}]
c:\program files (x86)\diamondata\diamondataBHO.dll [BU]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{bfc39e47-d643-4dc2-aa1d-61377501c844}]
c:\program files (x86)\atube\atubeX.dll [BU]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
c:\program files (x86)\AskPartnerNetwork\Toolbar\ORJ\Passport.dll [BU]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files (x86)\AskPartnerNetwork\Toolbar\ORJ\Passport.dll" [BU]
.
[HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\1AMPCBOK]
@="{04cd1f3e-81d5-4904-a3ab-e0f99a7d769d}"
[HKEY_CLASSES_ROOT\CLSID\{04cd1f3e-81d5-4904-a3ab-e0f99a7d769d}]
2010-11-21 03:24 297808 ----a-w- c:\windows\System32\mscoree.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"GoogleChromeAutoLaunch_F825DD62C9AA018B43DBB0A1261D56EE"="c:\program files (x86)\Google\Chrome\Application\chrome.exe" [2014-04-02 841032]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2014-02-10 20922016]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"BCSSync"="c:\program files (x86)\Microsoft Office\Office14\BCSSync.exe" [2012-11-05 89184]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-10-11 59280]
"SSDMonitor"="c:\program files (x86)\Common Files\PC Tools\sMonitor\SSDMonitor.exe" [2012-08-21 105120]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-11-21 959904]
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2013-05-01 421888]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-03-12 253816]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux1"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 Huawei;HUAWEI Mobile Connect - USB Smart Card Reader;c:\windows\system32\DRIVERS\ewdcsc.sys;c:\windows\SYSNATIVE\DRIVERS\ewdcsc.sys [x]
R3 hwusbdev;Huawei DataCard USB PNP Device;c:\windows\system32\DRIVERS\ewusbdev.sys;c:\windows\SYSNATIVE\DRIVERS\ewusbdev.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 ivusb;Initio Driver for USB Default Controller;c:\windows\system32\DRIVERS\ivusb.sys;c:\windows\SYSNATIVE\DRIVERS\ivusb.sys [x]
R3 RSUSBVSTOR;RtsUVStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUVStor.sys;c:\windows\SYSNATIVE\Drivers\RtsUVStor.sys [x]
R3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R3 wsvd;wsvd;c:\windows\system32\DRIVERS\wsvd.sys;c:\windows\SYSNATIVE\DRIVERS\wsvd.sys [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x]
S0 fbfmon;fbfmon;c:\windows\system32\drivers\fbfmon.sys;c:\windows\SYSNATIVE\drivers\fbfmon.sys [x]
S0 LHDmgr;LHDmgr;c:\windows\System32\DRIVERS\LhdX64.sys;c:\windows\SYSNATIVE\DRIVERS\LhdX64.sys [x]
S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys;c:\windows\SYSNATIVE\Drivers\sptd.sys [x]
S1 BPntDrv;BPntDrv;c:\windows\system32\drivers\BPntDrv.sys;c:\windows\SYSNATIVE\drivers\BPntDrv.sys [x]
S2 c2cautoupdatesvc;Skype Click to Call Updater;c:\program files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe;c:\program files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [x]
S2 c2cpnrsvc;Skype Click to Call PNR Service;c:\program files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe;c:\program files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [x]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x]
S2 NIS;Norton Internet Security;c:\program files (x86)\Norton Internet Security\Engine\21.2.0.38\NIS.exe;c:\program files (x86)\Norton Internet Security\Engine\21.2.0.38\NIS.exe [x]
S2 NitroReaderDriverReadSpool3;NitroPDFReaderDriverCreatorReadSpool3;c:\program files\Common Files\Nitro\Reader\3.0\NitroPDFReaderDriverService3x64.exe;c:\program files\Common Files\Nitro\Reader\3.0\NitroPDFReaderDriverService3x64.exe [x]
S2 PCToolsSSDMonitorSvc;PC Tools Startup and Shutdown Monitor service;c:\program files (x86)\Common Files\PC Tools\sMonitor\StartManSvc.exe;c:\program files (x86)\Common Files\PC Tools\sMonitor\StartManSvc.exe [x]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S3 ACPIVPC;Lenovo Virtual Power Controller Driver;c:\windows\system32\DRIVERS\AcpiVpc.sys;c:\windows\SYSNATIVE\DRIVERS\AcpiVpc.sys [x]
S3 BHDrvx64;BHDrvx64;c:\program files (x86)\Norton Internet Security\NortonData\21.0.0.100\Definitions\BASHDefs\20131218.001\BHDrvx64.sys;c:\program files (x86)\Norton Internet Security\NortonData\21.0.0.100\Definitions\BASHDefs\20131218.001\BHDrvx64.sys [x]
S3 ccSet_NIS;NIS Settings Manager;c:\windows\system32\drivers\NISx64\1502000.026\ccSetx64.sys;c:\windows\SYSNATIVE\drivers\NISx64\1502000.026\ccSetx64.sys [x]
S3 clwvd;CyberLink WebCam Virtual Driver;c:\windows\system32\DRIVERS\clwvd.sys;c:\windows\SYSNATIVE\DRIVERS\clwvd.sys [x]
S3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys;c:\program files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [x]
S3 IDSVia64;IDSVia64;c:\program files (x86)\Norton Internet Security\NortonData\21.0.0.100\Definitions\IPSDefs\20140110.001\IDSvia64.sys;c:\program files (x86)\Norton Internet Security\NortonData\21.0.0.100\Definitions\IPSDefs\20140110.001\IDSvia64.sys [x]
S3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x]
S3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x64.sys;c:\windows\SYSNATIVE\DRIVERS\L1C62x64.sys [x]
S3 SymDS;Symantec Data Store;c:\windows\system32\drivers\NISx64\1502000.026\SYMDS64.SYS;c:\windows\SYSNATIVE\drivers\NISx64\1502000.026\SYMDS64.SYS [x]
S3 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\NISx64\1502000.026\SYMEFA64.SYS;c:\windows\SYSNATIVE\drivers\NISx64\1502000.026\SYMEFA64.SYS [x]
S3 SymIRON;Symantec Iron Driver;c:\windows\system32\drivers\NISx64\1502000.026\Ironx64.SYS;c:\windows\SYSNATIVE\drivers\NISx64\1502000.026\Ironx64.SYS [x]
S3 SymNetS;Symantec Network Security WFP Driver;c:\windows\System32\Drivers\NISx64\1502000.026\SYMNETS.SYS;c:\windows\SYSNATIVE\Drivers\NISx64\1502000.026\SYMNETS.SYS [x]
S3 vm2uvcflt;Vimicro USB Camera Filter 2;c:\windows\system32\Drivers\vm2uvcflt.sys;c:\windows\SYSNATIVE\Drivers\vm2uvcflt.sys [x]
S3 vm332avs;Lenovo Camera2;c:\windows\system32\Drivers\vm332avs.sys;c:\windows\SYSNATIVE\Drivers\vm332avs.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-04-12 08:37 1077576 ----a-w- c:\program files (x86)\Google\Chrome\Application\34.0.1847.116\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2014-04-15 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-09-04 07:35]
.
2014-04-06 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-11-11 15:05]
.
2014-04-15 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-11-11 15:05]
.
2014-04-13 c:\windows\Tasks\Norton Security Scan for Ariel.job
- c:\progra~2\NORTON~2\Engine\403~1.24\Nss.exe [2013-12-12 06:43]
.
2014-04-15 c:\windows\Tasks\RMAutoUpdate.job
- c:\program files (x86)\PC Tools Registry Mechanic\SULauncher.exe [2013-02-18 07:11]
.
2014-04-14 c:\windows\Tasks\RMSchedule.job
- c:\program files (x86)\PC Tools Registry Mechanic\RegMech.exe [2013-02-18 07:11]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\1AMPCBOK]
@="{04cd1f3e-81d5-4904-a3ab-e0f99a7d769d}"
[HKEY_CLASSES_ROOT\CLSID\{04cd1f3e-81d5-4904-a3ab-e0f99a7d769d}]
2010-11-21 03:23 444752 ----a-w- c:\windows\System32\mscoree.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\VeriFace Enc]
@="{771C7324-DA80-49D3-8017-753B0AF60951}"
[HKEY_CLASSES_ROOT\CLSID\{771C7324-DA80-49D3-8017-753B0AF60951}]
2011-11-11 15:11 1508192 ----a-w- c:\windows\System32\IcnOvrly.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2012-03-19 170264]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2012-03-19 398616]
"Persistence"="c:\windows\system32\igfxpers.exe" [2012-03-19 439064]
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.google.com
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
mSearchAssistant = hxxp://www.google.com
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
IE: Od&eslat do aplikace OneNote - c:\progra~2\MICROS~1\Office14\ONBttnIE.dll/105
IE: Search the Web - c:\program files (x86)\SweetIM\Toolbars\Internet Explorer\resources\menuext.html
IE: WikiKomentáře Google... - c:\program files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_D183CA64F05FDD98.dll/cmsidewiki.html
Trusted Zone: mojebanka.cz\etrading
Trusted Zone: mojebanka.cz\www
Trusted Zone: mojebanka.cz\etrading
Trusted Zone: mojebanka.cz\www
TCP: DhcpNameServer = 192.168.1.1
FF - ProfilePath - c:\users\Ariel\AppData\Roaming\Mozilla\Firefox\Profiles\612tub0w.default\
FF - prefs.js: browser.search.selectedEngine -
FF - ExtSQL: !HIDDEN! 2012-11-26 17:33; 4zffxtbr@VideoDownloadConverter_4z.com; c:\program files (x86)\VideoDownloadConverter_4z\bar\1.bin
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Toolbar-Locked - (no file)
ShellIconOverlayIdentifiers-{4d87b7a7-23f1-470c-aa45-96b25b9bd138} - (no file)
AddRemove-atube - c:\program files (x86)\atube\uninstall.exe
AddRemove-Knoll Light Factory EZ Studio 15 - c:\windows\unvise32.exe
AddRemove-Red Giant ToonIt Studio 15 - c:\windows\unvise32.exe
AddRemove-WinZip Registry Optimizer_is1 - c:\program files (x86)\WinZip Registry Optimizer\unins000.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NIS]
"ImagePath"="\"c:\program files (x86)\Norton Internet Security\Engine\21.2.0.38\NIS.exe\" /s \"NIS\" /m \"c:\program files (x86)\Norton Internet Security\Engine\21.2.0.38\diMaster.dll\" /prefetch:1"
"ImagePath"="\SystemRoot\System32\Drivers\NISx64\1502000.026\SYMNETS.SYS"
"TrustedImagePaths"="c:\program files (x86)\Norton Internet Security\Engine\21.2.0.38;c:\program files (x86)\Norton Internet Security\Engine64\21.2.0.38"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\windows\\system32\\Macromed\\Flash\\FlashUtil64_12_0_0_77_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\windows\\system32\\Macromed\\Flash\\FlashUtil64_12_0_0_77_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_12_0_0_77_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_12_0_0_77_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_77.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.12"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_77.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_77.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_77.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2014-04-15 14:19:41
ComboFix-quarantined-files.txt 2014-04-15 12:19
ComboFix2.txt 2014-04-15 11:38
ComboFix3.txt 2014-04-15 07:13
ComboFix4.txt 2014-03-31 10:27
.
Před spuštěním: Volných bajtů: 184 959 823 872
Po spuštění: Volných bajtů: 184 901 935 104
.
- - End Of File - - 0D20F3B95470F6D80E3D3FA9F4659E89

Uživatelský avatar
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 říj 2008 08:02

Re: odvirování počítače pro motji

#21 Příspěvek od motji »

:arrow: Odinstalujte combofix přes Start - Spustit
- zkopírujte do okénka:

ComboFix /Uninstall

-stiskněte Enter
-To odinstaluje ComboFix a smaže s ním související soubory a složky.


***********


:arrow: Stáhněte T-Cleaner
http://tharifas.sweb.cz/T-Cleaner.exe

-Spusťte,pro potvrzení volby mačkejte klávesu A, Enter
-po použití prográmek vymažte.Pozor,antiviry ho mohou falešně označit za vir



***********


:arrow: Z mého podpisu stahněte Ccleaner
- nainstalujte, při výběru, co se má nainstalovat, dejte pryč fajfku u instalace yahoo toolbaru

Obrázekzáložka čistič
- nechejte v levém sloupečku zatrhnuté vše jak je, klikněte na analyzovat
- po analýze klikněte na Spustit Ccleaner

Obrázekzáložka Registry
- klikněte na hledej problémy
- pak klikněte na opravit vybrané problémy -- udělat zálohu registrů - nemusíte
- kliknete opravit všechny problémy :arrow: ok :arrow: zavřít

Obrázek Záložka Nástroje
- zde můžete odinstalovat programy. Je to důkladnější odinstalace než u přidat/odebrat programy ve Windows.

Ccleaner - čistič doporučuji používat, krásně pročistí pc od dočasných souborů.
Registry pročistí třeba po odinstalaci nějakého programu.


***********



:arrow: Stahněte OTC a použijte
http://oldtimer.geekstogo.com/OTC.exe
-vyčistí tempy a po použitých programech



***********

Poprosím o nový log z Frstu
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.

atom.jon
Návštěvník
Návštěvník
Příspěvky: 51
Registrován: 15 led 2012 19:59

Re: odvirování počítače pro motji

#22 Příspěvek od atom.jon »

hezký den, děkuji za zprávičku. Myslím, že to zvládnu ....jen poprosím, nevím, jak odinstalovat combofix přes start a spustit. To mám kliknout na combofix?

Uživatelský avatar
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 říj 2008 08:02

Re: odvirování počítače pro motji

#23 Příspěvek od motji »

Nemusíte vůbec, stačí přes ten T-cleaner
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.

atom.jon
Návštěvník
Návštěvník
Příspěvky: 51
Registrován: 15 led 2012 19:59

Re: odvirování počítače pro motji

#24 Příspěvek od atom.jon »

Posílám požadované a děkuji za trpělivost.



Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 20-04-2014 01
Ran by Ariel (administrator) on ARIEL-PC on 20-04-2014 18:43:12
Running from C:\Users\Ariel\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: Czech
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(Microsoft Corporation) C:\windows\system32\WLANExt.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Nitro PDF Software) C:\Program Files\Common Files\Nitro\Reader\3.0\NitroPDFReaderDriverService3x64.exe
(PC Tools) C:\Program Files (x86)\Common Files\PC Tools\sMonitor\StartManSvc.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(PC Tools) C:\Program Files (x86)\Common Files\PC Tools\sMonitor\SSDMonitor.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(CyberLink) C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.2.0.38\NIS.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.2.0.38\NIS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe
(Adobe Systems, Inc.) C:\windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE


==================== Registry (Whitelisted) ==================

HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59280 2012-10-11] (Apple Inc.)
HKLM-x32\...\Run: [SSDMonitor] => C:\Program Files (x86)\Common Files\PC Tools\sMonitor\SSDMonitor.exe [105120 2012-08-21] (PC Tools)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
Winlogon\Notify\igfxcui: C:\windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-2948964889-3286265907-1398495238-1000\...\Run: [GoogleChromeAutoLaunch_F825DD62C9AA018B43DBB0A1261D56EE] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [841032 2014-04-02] (Google Inc.)
HKU\S-1-5-21-2948964889-3286265907-1398495238-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [20922016 2014-02-10] (Skype Technologies S.A.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKLM\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.lenovo.com/
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.lenovo.com/
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKCU - {4FF4DD03-A53B-4F39-9248-622E4F9FC25C} URL = http://search.conduit.com/ResultsExt.as ... =CT2625848
SearchScopes: HKCU - {ACEB6063-2158-4943-AF42-5B50FB18FEDA} URL = http://search.conduit.com/ResultsExt.as ... 76916&UM=1
BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.2.0.38\coIEPlg.dll (Symantec Corporation)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Skype add-on for Internet Explorer - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll No File
BHO-x32: diamondata - {055af109-de93-4160-bcfc-7da70ecaa020} - C:\Program Files (x86)\diamondata\diamondataBHO.dll No File
BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.141\McAfeeMSS_IE.dll No File
BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\21.2.0.38\coIEPlg.dll (Symantec Corporation)
BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\21.2.0.38\IPS\IPSBHO.DLL (Symantec Corporation)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Pomocná služba pro přihlášení ke službě Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: diamondata - {9cfa5939-8996-40ed-97bb-3c34c4ae8501} - C:\Program Files (x86)\diamondata\diamondataBHO.dll No File
BHO-x32: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: aTube Toolbar - {bfc39e47-d643-4dc2-aa1d-61377501c844} - C:\Program Files (x86)\atube\atubeX.dll No File
BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll No File
BHO-x32: Ask Shopping Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\ORJ\Passport.dll" No File
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.2.0.38\coIEPlg.dll (Symantec Corporation)
Toolbar: HKLM - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll" No File
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\21.2.0.38\coIEPlg.dll (Symantec Corporation)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll No File
Toolbar: HKLM-x32 - Ask Shopping Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\ORJ\Passport.dll" No File
DPF: HKLM-x32 {233C1507-6A77-46A4-9443-F871F945D258} http://download.macromedia.com/pub/shoc ... tor/sw.cab
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/s ... wflash.cab
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138

FireFox:
========
FF ProfilePath: C:\Users\Ariel\AppData\Roaming\Mozilla\Firefox\Profiles\612tub0w.default
FF SelectedSearchEngine: user_pref("browser.search.selectedEngine", "");
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_12_0_0_77.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\windows\SysWOW64\Adobe\Director\np32dsw_1202122.dll (Adobe Systems, Inc.)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.8.141\npMcAfeeMss.dll No File
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nitropdf.com/NitroPDF - C:\Program Files (x86)\Nitro\Reader 3\npnitromozilla.dll (Nitro PDF)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Ariel\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll No File
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\heureka-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\mapy-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\seznam-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\slunecnice-cz.xml
FF Extension: VideoDownloadConverter - C:\Users\Ariel\AppData\Roaming\Mozilla\Firefox\Profiles\612tub0w.default\Extensions\4zffxtbr@VideoDownloadConverter_4z.com [2014-01-03]
FF Extension: aTube Toolbar - C:\Users\Ariel\AppData\Roaming\Mozilla\Firefox\Profiles\612tub0w.default\Extensions\{bfc39e47-d643-4dc2-aa1d-61377501c844} [2012-11-20]
FF Extension: Ask Toolbar - C:\Users\Ariel\AppData\Roaming\Mozilla\Firefox\Profiles\612tub0w.default\Extensions\toolbar@ask.com.xpi [2014-04-11]
FF Extension: Ask Toolbar - C:\Users\Ariel\AppData\Roaming\Mozilla\Firefox\Profiles\612tub0w.default\Extensions\toolbar_ATU4-V7@apn.ask.com.xpi [2013-12-30]
FF Extension: diamondata - C:\Users\Ariel\AppData\Roaming\Mozilla\Firefox\Profiles\612tub0w.default\Extensions\{a6d34414-c1ea-40a6-b61e-fb2d4e4ad212}.xpi [2014-02-04]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2014-04-11]
FF HKLM-x32\...\Firefox\Extensions: [4zffxtbr@VideoDownloadConverter_4z.com] - C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin
FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.0.0.100\coFFPlgn\
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.0.0.100\coFFPlgn\ []
FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.0.0.100\IPSFF
FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.0.0.100\IPSFF [2013-12-12]

Chrome:
=======
CHR HomePage: hxxp://www.search.ask.com/?p2=%5EAF8%5EYYYYYY% ... 02-26&psv=
CHR StartupUrls: ""
CHR DefaultSearchProvider: facemoods
CHR DefaultSearchURL: http://www.google.com
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.116\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.116\pdf.dll ()
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.116\gcswf32.dll No File
CHR Plugin: (McAfee SiteAdvisor) - C:\Users\Ariel\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho\3.31.131.2_0\McChPlg.dll No File
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.99\npGoogleUpdate3.dll No File
CHR Plugin: (Windows Live Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\4.0.50401.0\npctrl.dll No File
CHR Plugin: (McAfee SecurityCenter) - c:\progra~2\mcafee\msc\npmcsn~1.dll No File
CHR Plugin: (Default Plug-in) - default_plugin No File
CHR Extension: (Ask Toolbar) - C:\Users\Ariel\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaojmikegpiepcfdkkjaplodkpfmlo [2014-04-20]
CHR Extension: (Skype Click to Call) - C:\Users\Ariel\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2012-03-29]
CHR Extension: (Norton Identity Protection) - C:\Users\Ariel\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk [2014-04-20]
CHR Extension: (Peněženka Google) - C:\Users\Ariel\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-04-20]
CHR HKCU\...\Chrome\Extension: [nikpibnbobmbdbheedjfogjlikpgpnhp] - C:\Users\Ariel\AppData\Roaming\DVDVideoSoft\DVDVideoSoftBrowserExtension.crx [2014-04-20]
CHR HKLM-x32\...\Chrome\Extension: [aaaaojmikegpiepcfdkkjaplodkpfmlo] - C:\ProgramData\AskPartnerNetwork\Toolbar\ORJ\CRX\ToolbarCR.crx [2014-04-11]
CHR HKLM-x32\...\Chrome\Extension: [hendmekoldfacfhlojkjcnbjegkahclb] - C:\Program Files (x86)\diamondata\hendmekoldfacfhlojkjcnbjegkahclb.crx [2014-04-11]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-04-11]
CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton Internet Security\Engine\21.2.0.38\Exts\Chrome.crx [2014-03-24]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390720 2014-04-11] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1764992 2014-04-11] (Microsoft Corporation)
R2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\21.2.0.38\NIS.exe [276376 2014-03-12] (Symantec Corporation)
R2 NitroReaderDriverReadSpool3; C:\Program Files\Common Files\Nitro\Reader\3.0\NitroPDFReaderDriverService3x64.exe [230416 2012-10-30] (Nitro PDF Software)
R2 PCToolsSSDMonitorSvc; C:\Program Files (x86)\Common Files\PC Tools\sMonitor\StartManSvc.exe [794272 2012-08-21] (PC Tools)

==================== Drivers (Whitelisted) ====================

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R3 BHDrvx64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.0.0.100\Definitions\BASHDefs\20131218.001\BHDrvx64.sys [1526488 2013-12-18] (Symantec Corporation)
R3 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1502000.026\ccSetx64.sys [162392 2013-09-26] (Symantec Corporation)
R3 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2013-12-31] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [137648 2013-12-12] (Symantec Corporation)
U5 ewusbnet; C:\Windows\System32\Drivers\ewusbnet.sys [243200 2009-12-15] (Huawei Technologies Co., Ltd.)
S3 Huawei; C:\Windows\System32\DRIVERS\ewdcsc.sys [29696 2009-12-15] (Huawei Tech. Co., Ltd.)
S3 hwusbdev; C:\Windows\System32\DRIVERS\ewusbdev.sys [114304 2009-12-15] (Huawei Technologies Co., Ltd.)
R3 IDSVia64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.0.0.100\Definitions\IPSDefs\20140110.001\IDSvia64.sys [521944 2013-12-13] (Symantec Corporation)
S3 NAVENG; C:\Program Files (x86)\Norton Internet Security\NortonData\21.0.0.100\Definitions\VirusDefs\20140110.017\ENG64.SYS [126040 2014-01-08] (Symantec Corporation)
S3 NAVEX15; C:\Program Files (x86)\Norton Internet Security\NortonData\21.0.0.100\Definitions\VirusDefs\20140110.017\EX64.SYS [2099288 2014-01-08] (Symantec Corporation)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [834544 2012-03-22] ()
S3 SRTSP; C:\Windows\System32\Drivers\NISx64\1502000.026\SRTSP64.SYS [875736 2014-02-13] (Symantec Corporation)
R3 SRTSPX; C:\Windows\system32\drivers\NISx64\1502000.026\SRTSPX64.SYS [36952 2013-07-31] (Symantec Corporation)
R3 SymDS; C:\Windows\system32\drivers\NISx64\1502000.026\SYMDS64.SYS [493656 2013-08-01] (Symantec Corporation)
R3 SymEFA; C:\Windows\system32\drivers\NISx64\1502000.026\SYMEFA64.SYS [1148120 2014-03-04] (Symantec Corporation)
R3 SymEvent; C:\windows\system32\Drivers\SYMEVENT64x86.SYS [177752 2013-12-12] (Symantec Corporation)
R3 SymIRON; C:\Windows\system32\drivers\NISx64\1502000.026\Ironx64.SYS [264280 2013-07-31] (Symantec Corporation)
R3 SymNetS; C:\Windows\System32\Drivers\NISx64\1502000.026\SYMNETS.SYS [593112 2014-02-18] (Symantec Corporation)
U3 aszx8m3q; C:\Windows\System32\Drivers\aszx8m3q.sys [0 ] (Microsoft Corporation)
U3 BcmSqlStartupSvc;
U2 CLKMSVC10_3A60B698;
U2 CLKMSVC10_C3B3B687;
U2 DriverService;
U2 iATAgentService;
U2 idealife Update Service;
U3 IGRS;
U2 IviRegMgr;
U2 nvUpdatusService;
U2 Oasis2Service;
U2 PCCarerService;
U2 ReadyComm.DirectRouter;
U2 RichVideo;
U2 RtLedService;
U2 SeaPort;
U2 SoftwareService;
U3 SQLWriter;
U2 Stereo Service;

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-04-20 18:37 - 2014-04-20 18:43 - 00021645 _____ () C:\Users\Ariel\Desktop\FRST.txt
2014-04-20 18:34 - 2014-04-20 18:34 - 00015327 _____ () C:\Users\Ariel\Desktop\LM.bat
2014-04-20 18:27 - 2014-04-20 18:32 - 00000000 ____D () C:\Users\Ariel\Desktop\FRST-OlderVersion
2014-04-20 18:04 - 2014-04-20 18:04 - 00112640 _____ (forum.viry.cz) C:\Users\Ariel\Desktop\FRSTLauncher.exe
2014-04-20 18:01 - 2014-04-20 18:27 - 02056192 _____ (Farbar) C:\Users\Ariel\Desktop\FRST64.exe
2014-04-20 17:51 - 2014-04-20 18:43 - 00000000 ____D () C:\FRST
2014-04-20 17:51 - 2014-04-20 17:52 - 00047164 _____ () C:\Users\Ariel\Downloads\Addition.txt
2014-04-20 17:51 - 2014-04-20 17:52 - 00040448 _____ () C:\Users\Ariel\Downloads\FRST.txt
2014-04-20 17:46 - 2014-04-20 17:46 - 02055680 _____ (Farbar) C:\Users\Ariel\Downloads\FRST64.exe
2014-04-20 16:54 - 2014-04-20 17:05 - 00000112 _____ () C:\windows\setupact.log
2014-04-20 16:54 - 2014-04-20 16:54 - 00000688 _____ () C:\windows\PFRO.log
2014-04-20 16:54 - 2014-04-20 16:54 - 00000000 _____ () C:\windows\setuperr.log
2014-04-14 11:25 - 2014-04-14 11:34 - 780001280 _____ () C:\Users\Ariel\Downloads\Neobycejny Zivot Timothyho Greena 2012 SUPER KVALITA (CZ DAB).avi
2014-04-13 22:10 - 2014-03-06 12:21 - 23549440 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2014-04-13 22:10 - 2014-03-06 11:32 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2014-04-13 22:10 - 2014-03-06 11:31 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll
2014-04-13 22:10 - 2014-03-06 11:19 - 17387008 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2014-04-13 22:10 - 2014-03-06 10:59 - 00066048 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2014-04-13 22:10 - 2014-03-06 10:57 - 00548352 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll
2014-04-13 22:10 - 2014-03-06 10:57 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll
2014-04-13 22:10 - 2014-03-06 10:53 - 02767360 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2014-04-13 22:10 - 2014-03-06 10:40 - 00051200 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2014-04-13 22:10 - 2014-03-06 10:39 - 00033792 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2014-04-13 22:10 - 2014-03-06 10:32 - 02724864 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2014-04-13 22:10 - 2014-03-06 10:32 - 00574976 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2014-04-13 22:10 - 2014-03-06 10:29 - 00139264 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2014-04-13 22:10 - 2014-03-06 10:29 - 00111616 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe
2014-04-13 22:10 - 2014-03-06 10:28 - 00752640 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2014-04-13 22:10 - 2014-03-06 10:15 - 00940032 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe
2014-04-13 22:10 - 2014-03-06 10:11 - 05784064 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2014-04-13 22:10 - 2014-03-06 10:09 - 00453120 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll
2014-04-13 22:10 - 2014-03-06 10:03 - 00586240 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2014-04-13 22:10 - 2014-03-06 10:02 - 00455168 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll
2014-04-13 22:10 - 2014-03-06 10:02 - 00061952 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2014-04-13 22:10 - 2014-03-06 10:01 - 00051200 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieetwproxystub.dll
2014-04-13 22:10 - 2014-03-06 09:56 - 00038400 _____ (Microsoft Corporation) C:\windows\system32\JavaScriptCollectionAgent.dll
2014-04-13 22:10 - 2014-03-06 09:48 - 00195584 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2014-04-13 22:10 - 2014-03-06 09:47 - 02178048 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2014-04-13 22:10 - 2014-03-06 09:46 - 04254720 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2014-04-13 22:10 - 2014-03-06 09:46 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2014-04-13 22:10 - 2014-03-06 09:45 - 00032768 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2014-04-13 22:10 - 2014-03-06 09:42 - 00296960 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll
2014-04-13 22:10 - 2014-03-06 09:40 - 00440832 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2014-04-13 22:10 - 2014-03-06 09:38 - 00112128 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieUnatt.exe
2014-04-13 22:10 - 2014-03-06 09:36 - 00592896 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll
2014-04-13 22:10 - 2014-03-06 09:22 - 00367616 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtmsft.dll
2014-04-13 22:10 - 2014-03-06 09:21 - 00628736 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2014-04-13 22:10 - 2014-03-06 09:13 - 00032256 _____ (Microsoft Corporation) C:\windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-04-13 22:10 - 2014-03-06 09:11 - 02043904 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2014-04-13 22:10 - 2014-03-06 09:07 - 00164864 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll
2014-04-13 22:10 - 2014-03-06 09:01 - 00244224 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll
2014-04-13 22:10 - 2014-03-06 08:53 - 13551104 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2014-04-13 22:10 - 2014-03-06 08:46 - 00524288 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2014-04-13 22:10 - 2014-03-06 08:40 - 01967104 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl
2014-04-13 22:10 - 2014-03-06 08:36 - 11745792 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2014-04-13 22:10 - 2014-03-06 08:22 - 02260480 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2014-04-13 22:10 - 2014-03-06 07:58 - 01400832 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2014-04-13 22:10 - 2014-03-06 07:50 - 00846336 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2014-04-13 22:10 - 2014-03-06 07:43 - 00704512 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll
2014-04-13 22:10 - 2014-03-06 07:41 - 01789440 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2014-04-13 22:10 - 2014-03-06 07:36 - 01143808 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2014-04-13 08:23 - 2014-04-13 08:39 - 718739366 _____ () C:\Users\Ariel\Downloads\Zvonilka a Pirati cz dab 2014 Novinka.avi
2014-04-13 08:21 - 2014-04-13 08:48 - 1549593386 _____ () C:\Users\Ariel\Downloads\Cesta z města (2000) CZ.avi
2014-04-13 08:21 - 2014-04-13 08:39 - 733816674 _____ () C:\Users\Ariel\Downloads\Cesta do lesa CZ-film (2012) NOVINKA.avi
2014-04-11 18:57 - 2014-04-11 18:57 - 00001046 _____ () C:\Videa – zástupce.lnk
2014-04-09 13:34 - 2014-03-04 11:44 - 01163264 _____ (Microsoft Corporation) C:\windows\system32\kernel32.dll
2014-04-09 13:34 - 2014-03-04 11:44 - 00362496 _____ (Microsoft Corporation) C:\windows\system32\wow64win.dll
2014-04-09 13:34 - 2014-03-04 11:44 - 00243712 _____ (Microsoft Corporation) C:\windows\system32\wow64.dll
2014-04-09 13:34 - 2014-03-04 11:44 - 00016384 _____ (Microsoft Corporation) C:\windows\system32\ntvdm64.dll
2014-04-09 13:34 - 2014-03-04 11:44 - 00013312 _____ (Microsoft Corporation) C:\windows\system32\wow64cpu.dll
2014-04-09 13:34 - 2014-03-04 11:17 - 00014336 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntvdm64.dll
2014-04-09 13:34 - 2014-03-04 11:16 - 01114112 _____ (Microsoft Corporation) C:\windows\SysWOW64\kernel32.dll
2014-04-09 13:34 - 2014-03-04 11:16 - 00025600 _____ (Microsoft Corporation) C:\windows\SysWOW64\setup16.exe
2014-04-09 13:34 - 2014-03-04 11:16 - 00005120 _____ (Microsoft Corporation) C:\windows\SysWOW64\wow32.dll
2014-04-09 13:34 - 2014-03-04 10:09 - 00007680 _____ (Microsoft Corporation) C:\windows\SysWOW64\instnm.exe
2014-04-09 13:34 - 2014-03-04 10:09 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\user.exe
2014-04-09 13:34 - 2014-02-04 04:35 - 00274880 _____ (Microsoft Corporation) C:\windows\system32\Drivers\msiscsi.sys
2014-04-09 13:34 - 2014-02-04 04:35 - 00190912 _____ (Microsoft Corporation) C:\windows\system32\Drivers\storport.sys
2014-04-09 13:34 - 2014-02-04 04:35 - 00027584 _____ (Microsoft Corporation) C:\windows\system32\Drivers\Diskdump.sys
2014-04-09 13:34 - 2014-02-04 04:28 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\iologmsg.dll
2014-04-09 13:34 - 2014-02-04 04:00 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\iologmsg.dll
2014-04-09 13:34 - 2014-01-24 04:37 - 01684928 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ntfs.sys
2014-04-08 11:18 - 2014-04-09 13:57 - 00000000 ____D () C:\Users\Ariel\Desktop\fotky nové
2014-04-05 21:02 - 2014-04-05 21:05 - 336603000 _____ () C:\Users\Ariel\Downloads\Doba ledova - 2011 Mamutí vánoce anim.pohádka czdab.n@y.avi
2014-04-05 20:08 - 2014-04-05 20:32 - 734015628 _____ () C:\Users\Ariel\Downloads\Doba ledová 1 (2002) CZ Animovaný Dobrodružný.avi
2014-04-02 06:21 - 2014-04-02 06:21 - 00000000 ____D () C:\windows\System32\Tasks\Norton Internet Security
2014-03-31 11:35 - 2014-03-31 11:35 - 00000000 ____D () C:\Users\Ariel\AppData\Local\VideoDownloadConverter_4z
2014-03-31 09:21 - 2014-03-31 09:21 - 00935175 _____ () C:\Users\Ariel\Downloads\RSITx64.exe
2014-03-31 09:21 - 2014-03-31 09:21 - 00000000 ____D () C:\Program Files\trend micro
2014-03-31 08:52 - 2014-04-20 16:46 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-03-28 06:57 - 2014-04-10 20:07 - 00000000 ____D () C:\Users\Ariel\Documents\semena
2014-03-28 06:52 - 2014-03-28 06:57 - 00000000 ____D () C:\Users\Ariel\Documents\komenský
2014-03-27 11:26 - 2014-03-27 13:02 - 00000000 ____D () C:\Users\Ariel\Documents\25.3
2014-03-27 10:35 - 2014-03-27 10:35 - 03401216 _____ () C:\Users\Ariel\Downloads\SENECA_OZ.pps
2014-03-25 12:42 - 2014-03-17 10:30 - 00028436 _____ () C:\Users\Ariel\Documents\školky vysočina – kopie.xlsx
2014-03-25 10:12 - 2014-03-25 10:12 - 00000000 ____D () C:\Users\Ariel\AppData\Local\{3EEF77EC-2A6A-4312-BAD3-C37175466818}

==================== One Month Modified Files and Folders =======

2014-04-20 18:43 - 2014-04-20 18:37 - 00021645 _____ () C:\Users\Ariel\Desktop\FRST.txt
2014-04-20 18:43 - 2014-04-20 17:51 - 00000000 ____D () C:\FRST
2014-04-20 18:35 - 2012-09-04 12:56 - 00000914 _____ () C:\windows\Tasks\Adobe Flash Player Updater.job
2014-04-20 18:34 - 2014-04-20 18:34 - 00015327 _____ () C:\Users\Ariel\Desktop\LM.bat
2014-04-20 18:32 - 2014-04-20 18:27 - 00000000 ____D () C:\Users\Ariel\Desktop\FRST-OlderVersion
2014-04-20 18:27 - 2014-04-20 18:01 - 02056192 _____ (Farbar) C:\Users\Ariel\Desktop\FRST64.exe
2014-04-20 18:24 - 2012-03-15 19:56 - 00000000 ____D () C:\Users\Ariel
2014-04-20 18:17 - 2012-03-23 21:44 - 00000000 ____D () C:\Users\Ariel\AppData\Roaming\Skype
2014-04-20 18:09 - 2011-11-11 17:05 - 00000966 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-04-20 18:04 - 2014-04-20 18:04 - 00112640 _____ (forum.viry.cz) C:\Users\Ariel\Desktop\FRSTLauncher.exe
2014-04-20 17:52 - 2014-04-20 17:51 - 00047164 _____ () C:\Users\Ariel\Downloads\Addition.txt
2014-04-20 17:52 - 2014-04-20 17:51 - 00040448 _____ () C:\Users\Ariel\Downloads\FRST.txt
2014-04-20 17:46 - 2014-04-20 17:46 - 02055680 _____ (Farbar) C:\Users\Ariel\Downloads\FRST64.exe
2014-04-20 17:30 - 2012-03-22 19:44 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-04-20 17:14 - 2011-11-11 16:33 - 01560522 _____ () C:\windows\WindowsUpdate.log
2014-04-20 17:13 - 2009-07-14 06:45 - 00021280 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-04-20 17:13 - 2009-07-14 06:45 - 00021280 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-04-20 17:12 - 2011-11-11 08:11 - 07788350 _____ () C:\windows\system32\perfh005.dat
2014-04-20 17:12 - 2011-11-11 08:11 - 02634438 _____ () C:\windows\system32\perfc005.dat
2014-04-20 17:12 - 2009-07-14 07:13 - 00006512 _____ () C:\windows\system32\PerfStringBackup.INI
2014-04-20 17:07 - 2011-11-11 17:19 - 00489881 _____ () C:\windows\system32\fastboot.set
2014-04-20 17:06 - 2013-02-17 20:00 - 00000284 _____ () C:\windows\Tasks\RMAutoUpdate.job
2014-04-20 17:06 - 2013-02-15 21:47 - 00000000 ____D () C:\Program Files (x86)\PC Tools Registry Mechanic
2014-04-20 17:06 - 2012-03-15 19:55 - 06285508 _____ () C:\FaceProv.log
2014-04-20 17:05 - 2014-04-20 16:54 - 00000112 _____ () C:\windows\setupact.log
2014-04-20 17:05 - 2012-07-30 11:24 - 00065536 _____ () C:\windows\system32\Ikeext.etl
2014-04-20 17:05 - 2009-07-14 07:08 - 00000006 ____H () C:\windows\Tasks\SA.DAT
2014-04-20 16:55 - 2012-03-23 21:44 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-04-20 16:54 - 2014-04-20 16:54 - 00000688 _____ () C:\windows\PFRO.log
2014-04-20 16:54 - 2014-04-20 16:54 - 00000000 _____ () C:\windows\setuperr.log
2014-04-20 16:46 - 2014-03-31 08:52 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-04-20 16:42 - 2013-12-15 18:52 - 00000000 ____D () C:\Users\Ariel\AppData\Local\CrashDumps
2014-04-20 16:42 - 2011-02-22 13:19 - 00000000 ____D () C:\windows\Panther
2014-04-20 16:36 - 2012-03-21 17:07 - 00000000 ____D () C:\windows\Minidump
2014-04-20 16:21 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\tracing
2014-04-20 12:14 - 2013-01-19 13:38 - 00000452 ____H () C:\windows\Tasks\Norton Security Scan for Ariel.job
2014-04-20 09:43 - 2013-02-17 20:00 - 00000410 _____ () C:\windows\SysWOW64\AppLog.log
2014-04-20 09:43 - 2013-02-15 21:47 - 00000284 _____ () C:\windows\Tasks\RMSchedule.job
2014-04-15 15:24 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\rescache
2014-04-15 14:11 - 2009-07-14 04:34 - 00000215 _____ () C:\windows\system.ini
2014-04-15 12:58 - 2009-07-14 04:34 - 85983232 _____ () C:\windows\system32\config\SOFTWARE.bak
2014-04-15 12:58 - 2009-07-14 04:34 - 23855104 _____ () C:\windows\system32\config\SYSTEM.bak
2014-04-15 12:58 - 2009-07-14 04:34 - 00524288 _____ () C:\windows\system32\config\DEFAULT.bak
2014-04-15 12:58 - 2009-07-14 04:34 - 00262144 _____ () C:\windows\system32\config\SECURITY.bak
2014-04-15 12:58 - 2009-07-14 04:34 - 00262144 _____ () C:\windows\system32\config\SAM.bak
2014-04-14 11:34 - 2014-04-14 11:25 - 780001280 _____ () C:\Users\Ariel\Downloads\Neobycejny Zivot Timothyho Greena 2012 SUPER KVALITA (CZ DAB).avi
2014-04-14 09:48 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\PolicyDefinitions
2014-04-13 08:48 - 2014-04-13 08:21 - 1549593386 _____ () C:\Users\Ariel\Downloads\Cesta z města (2000) CZ.avi
2014-04-13 08:39 - 2014-04-13 08:23 - 718739366 _____ () C:\Users\Ariel\Downloads\Zvonilka a Pirati cz dab 2014 Novinka.avi
2014-04-13 08:39 - 2014-04-13 08:21 - 733816674 _____ () C:\Users\Ariel\Downloads\Cesta do lesa CZ-film (2012) NOVINKA.avi
2014-04-11 18:57 - 2014-04-11 18:57 - 00001046 _____ () C:\Videa – zástupce.lnk
2014-04-10 20:07 - 2014-03-28 06:57 - 00000000 ____D () C:\Users\Ariel\Documents\semena
2014-04-09 22:00 - 2014-01-09 09:02 - 00000000 ____D () C:\windows\system32\MRT
2014-04-09 21:57 - 2012-03-22 19:51 - 90655440 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2014-04-09 13:57 - 2014-04-08 11:18 - 00000000 ____D () C:\Users\Ariel\Desktop\fotky nové
2014-04-06 08:07 - 2011-11-11 17:05 - 00000962 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-04-05 21:05 - 2014-04-05 21:02 - 336603000 _____ () C:\Users\Ariel\Downloads\Doba ledova - 2011 Mamutí vánoce anim.pohádka czdab.n@y.avi
2014-04-05 20:32 - 2014-04-05 20:08 - 734015628 _____ () C:\Users\Ariel\Downloads\Doba ledová 1 (2002) CZ Animovaný Dobrodružný.avi
2014-04-05 09:13 - 2013-04-08 19:22 - 00000000 ____D () C:\Users\Ariel\Documents\leták školky
2014-04-05 09:04 - 2011-11-11 17:05 - 00003962 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-04-05 09:04 - 2011-11-11 17:05 - 00003712 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-04-03 06:23 - 2013-04-15 13:52 - 00000000 ____D () C:\Users\Ariel\Documents\hudba do projektu
2014-04-02 08:49 - 2012-11-19 20:23 - 30089030 _____ () C:\Users\Ariel\Desktop\maminka je všechno kolem.pptx
2014-04-02 08:42 - 2013-02-19 13:16 - 00000000 ____D () C:\Users\Ariel\Documents\Dilo a podmořský svět
2014-04-02 06:21 - 2014-04-02 06:21 - 00000000 ____D () C:\windows\System32\Tasks\Norton Internet Security
2014-04-02 06:16 - 2013-12-12 09:30 - 00003234 _____ () C:\windows\System32\Tasks\Norton WSC Integration
2014-04-02 06:16 - 2013-12-12 09:26 - 00000000 ____D () C:\windows\system32\Drivers\NISx64
2014-03-31 12:27 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Default
2014-03-31 11:35 - 2014-03-31 11:35 - 00000000 ____D () C:\Users\Ariel\AppData\Local\VideoDownloadConverter_4z
2014-03-31 11:32 - 2012-07-17 20:50 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-03-31 10:56 - 2012-03-15 19:57 - 00000000 ___RD () C:\Users\Ariel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-03-31 09:35 - 2010-11-21 05:27 - 00270496 ____N (Microsoft Corporation) C:\windows\system32\MpSigStub.exe
2014-03-31 09:21 - 2014-03-31 09:21 - 00935175 _____ () C:\Users\Ariel\Downloads\RSITx64.exe
2014-03-31 09:21 - 2014-03-31 09:21 - 00000000 ____D () C:\Program Files\trend micro
2014-03-31 06:41 - 2014-01-04 21:00 - 00003136 _____ () C:\windows\System32\Tasks\Registry Optimizer
2014-03-31 06:41 - 2013-12-19 10:17 - 00000136 _____ () C:\Users\Ariel\AppData\Roaming\WB.CFG
2014-03-28 09:52 - 2013-01-23 22:21 - 00000000 ____D () C:\Users\Ariel\Documents\1.hodina človíček a jeho maminka planeta Země
2014-03-28 06:59 - 2013-05-16 12:23 - 00000000 ____D () C:\Users\Ariel\Documents\pyramidy
2014-03-28 06:58 - 2013-01-16 09:48 - 00000000 ____D () C:\Users\Ariel\Documents\seznamy školek
2014-03-28 06:57 - 2014-03-28 06:52 - 00000000 ____D () C:\Users\Ariel\Documents\komenský
2014-03-28 06:55 - 2013-11-05 07:49 - 00000000 ____D () C:\Users\Ariel\Documents\3.hodina človíček a kapička vody
2014-03-27 13:02 - 2014-03-27 11:26 - 00000000 ____D () C:\Users\Ariel\Documents\25.3
2014-03-27 10:35 - 2014-03-27 10:35 - 03401216 _____ () C:\Users\Ariel\Downloads\SENECA_OZ.pps
2014-03-25 12:19 - 2014-03-20 11:48 - 00000000 ____D () C:\Users\Ariel\Documents\Nová složka (2)
2014-03-25 10:31 - 2013-08-17 15:25 - 00000000 ____D () C:\Users\Ariel\Documents\omalovánky doplněné
2014-03-25 10:12 - 2014-03-25 10:12 - 00000000 ____D () C:\Users\Ariel\AppData\Local\{3EEF77EC-2A6A-4312-BAD3-C37175466818}

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-04-20 12:17

==================== End Of Log ============================

Uživatelský avatar
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 říj 2008 08:02

Re: odvirování počítače pro motji

#25 Příspěvek od motji »

:arrow: otevřete poznámkový blok a zkopírujte do něj:

Kód: Vybrat vše

SearchScopes: HKCU - {4FF4DD03-A53B-4F39-9248-622E4F9FC25C} URL = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2625848
SearchScopes: HKCU - {ACEB6063-2158-4943-AF42-5B50FB18FEDA} URL = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT1750559&CUI=UN11086442727776916&UM=1
BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll No File
BHO-x32: diamondata - {055af109-de93-4160-bcfc-7da70ecaa020} - C:\Program Files (x86)\diamondata\diamondataBHO.dll No File
BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.141\McAfeeMSS_IE.dll No File
BHO-x32: aTube Toolbar - {bfc39e47-d643-4dc2-aa1d-61377501c844} - C:\Program Files (x86)\atube\atubeX.dll No File
BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll No File
BHO-x32: Ask Shopping Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\ORJ\Passport.dll" No File
Toolbar: HKLM - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll" No File
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll No File
Toolbar: HKLM-x32 - Ask Shopping Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\ORJ\Passport.dll" No File
FF Extension: aTube Toolbar - C:\Users\Ariel\AppData\Roaming\Mozilla\Firefox\Profiles\612tub0w.default\Extensions\{bfc39e47-d643-4dc2-aa1d-61377501c844} [2012-11-20]
FF Extension: Ask Toolbar - C:\Users\Ariel\AppData\Roaming\Mozilla\Firefox\Profiles\612tub0w.default\Extensions\toolbar@ask.com.xpi [2014-04-11]
FF Extension: Ask Toolbar - C:\Users\Ariel\AppData\Roaming\Mozilla\Firefox\Profiles\612tub0w.default\Extensions\toolbar_ATU4-V7@apn.ask.com.xpi [2013-12-30]
FF Extension: diamondata - C:\Users\Ariel\AppData\Roaming\Mozilla\Firefox\Profiles\612tub0w.default\Extensions\{a6d34414-c1ea-40a6-b61e-fb2d4e4ad212}.xpi [2014-02-04]
CHR HomePage: hxxp://www.search.ask.com/?p2=%5EAF8%5E ... 02-26&psv=
CHR DefaultSearchProvider: facemoods
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\4.0.50401.0\npctrl.dll No File
CHR Plugin: (McAfee SecurityCenter) - c:\progra~2\mcafee\msc\npmcsn~1.dll No File
CHR Plugin: (Default Plug-in) - default_plugin No File
CHR Extension: (Ask Toolbar) - C:\Users\Ariel\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaojmikegpiepcfdkkjaplodkpfmlo [2014-04-20]
C:\Users\Ariel\AppData\Local\{3EEF77EC-2A6A-4312-BAD3-C37175466818}

Uložte vedle Frstu jako Fixlist.txt. Spusťte Frst, dejte tlačítko Fix, log vložte zde.

:arrow: Stáhněte Junkware Removal Tool http://thisisudax.org/downloads/JRT.exe
-Uložte program na plochu a spusťte . Pak se zobrazí se licenční podminky - potvrďte start libovolnou klávesou.
- vytvoří se záloha a proběhne skenování.
Po skončení skenování na Vás vyběhne log (bude uložen v c:\JRT jako JRT.txt) - zkopírujte jej sem
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.

atom.jon
Návštěvník
Návštěvník
Příspěvky: 51
Registrován: 15 led 2012 19:59

Re: odvirování počítače pro motji

#26 Příspěvek od atom.jon »

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 20-04-2014 02
Ran by Ariel at 2014-04-21 08:53:13 Run:1
Running from C:\Users\Ariel\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
SearchScopes: HKCU - {4FF4DD03-A53B-4F39-9248-622E4F9FC25C} URL = http://search.conduit.com/ResultsExt.as ... =CT2625848
SearchScopes: HKCU - {ACEB6063-2158-4943-AF42-5B50FB18FEDA} URL = http://search.conduit.com/ResultsExt.as ... 76916&UM=1
BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll No File
BHO-x32: diamondata - {055af109-de93-4160-bcfc-7da70ecaa020} - C:\Program Files (x86)\diamondata\diamondataBHO.dll No File
BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.141\McAfeeMSS_IE.dll No File
BHO-x32: aTube Toolbar - {bfc39e47-d643-4dc2-aa1d-61377501c844} - C:\Program Files (x86)\atube\atubeX.dll No File
BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll No File
BHO-x32: Ask Shopping Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\ORJ\Passport.dll" No File
Toolbar: HKLM - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll" No File
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll No File
Toolbar: HKLM-x32 - Ask Shopping Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\ORJ\Passport.dll" No File
FF Extension: aTube Toolbar - C:\Users\Ariel\AppData\Roaming\Mozilla\Firefox\Profiles\612tub0w.default\Extensions\{bfc39e47-d643-4dc2-aa1d-61377501c844} [2012-11-20]
FF Extension: Ask Toolbar - C:\Users\Ariel\AppData\Roaming\Mozilla\Firefox\Profiles\612tub0w.default\Extensions\toolbar@ask.com.xpi [2014-04-11]
FF Extension: Ask Toolbar - C:\Users\Ariel\AppData\Roaming\Mozilla\Firefox\Profiles\612tub0w.default\Extensions\toolbar_ATU4-V7@apn.ask.com.xpi [2013-12-30]
FF Extension: diamondata - C:\Users\Ariel\AppData\Roaming\Mozilla\Firefox\Profiles\612tub0w.default\Extensions\{a6d34414-c1ea-40a6-b61e-fb2d4e4ad212}.xpi [2014-02-04]
CHR HomePage: hxxp://www.search.ask.com/?p2=%5EAF8%5E ... 02-26&psv=
CHR DefaultSearchProvider: facemoods
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\4.0.50401.0\npctrl.dll No File
CHR Plugin: (McAfee SecurityCenter) - c:\progra~2\mcafee\msc\npmcsn~1.dll No File
CHR Plugin: (Default Plug-in) - default_plugin No File
CHR Extension: (Ask Toolbar) - C:\Users\Ariel\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaojmikegpiepcfdkkjaplodkpfmlo [2014-04-20]
C:\Users\Ariel\AppData\Local\{3EEF77EC-2A6A-4312-BAD3-C37175466818}
*****************

HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{4FF4DD03-A53B-4F39-9248-622E4F9FC25C} => Key deleted successfully.
HKCR\CLSID\{4FF4DD03-A53B-4F39-9248-622E4F9FC25C} => Key deleted successfully.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{ACEB6063-2158-4943-AF42-5B50FB18FEDA} => Key deleted successfully.
HKCR\CLSID\{ACEB6063-2158-4943-AF42-5B50FB18FEDA} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d2ce3e00-f94a-4740-988e-03dc2f38c34f} => Key deleted successfully.
HKCR\CLSID\{d2ce3e00-f94a-4740-988e-03dc2f38c34f} => Key deleted successfully.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{055af109-de93-4160-bcfc-7da70ecaa020} => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{055af109-de93-4160-bcfc-7da70ecaa020} => Key deleted successfully.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0E8A89AD-95D7-40EB-8D9D-083EF7066A01} => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{0E8A89AD-95D7-40EB-8D9D-083EF7066A01} => Key deleted successfully.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{bfc39e47-d643-4dc2-aa1d-61377501c844} => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{bfc39e47-d643-4dc2-aa1d-61377501c844} => Key deleted successfully.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d2ce3e00-f94a-4740-988e-03dc2f38c34f} => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{d2ce3e00-f94a-4740-988e-03dc2f38c34f} => Key deleted successfully.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440} => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{8dcb7100-df86-4384-8842-8fa844297b3f} => Value deleted successfully.
HKCR\CLSID\{8dcb7100-df86-4384-8842-8fa844297b3f} => Key deleted successfully.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{8dcb7100-df86-4384-8842-8fa844297b3f} => Value deleted successfully.
HKCR\Wow6432Node\CLSID\{8dcb7100-df86-4384-8842-8fa844297b3f} => Key deleted successfully.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{D4027C7F-154A-4066-A1AD-4243D8127440} => Value not found.
HKCR\Wow6432Node\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440} => Key deleted successfully.
C:\Users\Ariel\AppData\Roaming\Mozilla\Firefox\Profiles\612tub0w.default\Extensions\{bfc39e47-d643-4dc2-aa1d-61377501c844} => Moved successfully.
C:\Users\Ariel\AppData\Roaming\Mozilla\Firefox\Profiles\612tub0w.default\Extensions\toolbar@ask.com.xpi not found.
C:\Users\Ariel\AppData\Roaming\Mozilla\Firefox\Profiles\612tub0w.default\Extensions\toolbar_ATU4-V7@apn.ask.com.xpi not found.
C:\Users\Ariel\AppData\Roaming\Mozilla\Firefox\Profiles\612tub0w.default\Extensions\{a6d34414-c1ea-40a6-b61e-fb2d4e4ad212}.xpi => Moved successfully.
CHR HomePage: hxxp://www.search.ask.com/?p2=%5EAF8%5E ... 02-26&psv= ==> The Chrome "Settings" can be used to fix the entry.
CHR DefaultSearchProvider: facemoods ==> The Chrome "Settings" can be used to fix the entry.
c:\Program Files (x86)\Microsoft Silverlight\4.0.50401.0\npctrl.dll not found.
c:\progra~2\mcafee\msc\npmcsn~1.dll not found.
C:\Users\Ariel\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaojmikegpiepcfdkkjaplodkpfmlo => Moved successfully.
C:\Users\Ariel\AppData\Local\{3EEF77EC-2A6A-4312-BAD3-C37175466818} => Moved successfully.

==== End of Fixlog ====

Uživatelský avatar
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 říj 2008 08:02

Re: odvirování počítače pro motji

#27 Příspěvek od motji »

Vypadá to čistě, jsou s pc ještě nějaké problémy? :)
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.

atom.jon
Návštěvník
Návštěvník
Příspěvky: 51
Registrován: 15 led 2012 19:59

Re: odvirování počítače pro motji

#28 Příspěvek od atom.jon »

tady je ještě log JRT

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 7 Home Premium x64
Ran by Ariel on po 21.04.2014 at 8:55:03,09
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\conduit
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-2948964889-3286265907-1398495238-1000\Software\sweetim
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\sweetim
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\APN_ATU3__RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\APN_ATU3__RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9cfa5939-8996-40ed-97bb-3c34c4ae8501}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{9cfa5939-8996-40ed-97bb-3c34c4ae8501}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}



~~~ Files

Successfully deleted: [File] C:\windows\Tasks\rmschedule.job
Successfully deleted: [File] "C:\Users\Ariel\appdata\locallow\SkwConfig.bin"



~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\apn"
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{0026F125-4C5A-46B6-8E2F-2E7EF2262492}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{02699E45-64ED-4496-AB8E-D93F8BA495AE}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{0463641D-C0EC-4511-9539-AC4D0F8AA268}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{049C0436-87AE-463D-83A4-9453EBA8BDA4}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{09FDF622-B0C3-4502-86C8-C3C52F73C62A}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{0A058B3C-D840-428A-A099-D575831AE674}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{0A13B69E-357C-4BFB-B2C4-3C07399EADF8}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{0B6A0052-E476-4177-B8E0-51FD07D2D3CE}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{0BD2EF67-F835-4C00-A02E-64DE5293BFE4}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{0FF6CC8E-D6B5-4960-87C5-762199184DDB}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{11232334-C1A2-432F-8864-09C97723ABB4}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{12F99538-1ACC-4496-A1EA-031F2676B65E}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{1331854C-083D-463A-887C-06C5DDF7722C}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{13C79D8F-EF26-4CF0-BEC8-F4364A2EA4B1}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{143E3976-AB55-4C9A-9F1F-C14076D1D369}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{14FA555B-5E1B-49A4-A227-BBB41E4DDA57}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{16ED7914-ECDF-4C3E-9096-D378BC4A1D6D}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{17E5252F-A90C-4F22-BEB3-398FB15E18E3}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{1B31FCAD-2222-4474-8D82-4847F6CEAB58}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{1C7F6085-6640-4746-9CCE-EE90AB545663}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{205F6AFD-B335-4648-95F2-5E3AC4DBF4BA}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{20E4EF96-6251-40FE-82B8-8EAA718B7118}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{22B2CF28-EFA0-4A2B-A625-80F052AC7DF0}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{22CD3974-D089-44D6-ADCC-929BF8DC4FA0}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{2348C818-15DC-4267-BA1B-E62FDB17299E}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{250BAE86-12AE-4C87-8B40-A7364C40CCE2}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{2518A1E0-E511-4666-BD6D-99F21C3A4C26}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{255916DB-58B6-4A69-807F-6713F6981066}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{266514F2-A049-4A69-9966-38B34D313D30}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{27EF870A-774A-4340-9980-320BA0F1977A}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{29DB0D48-3583-4A1C-AAC9-CAB600253198}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{2DC97426-B0EA-42DE-B9D3-273D67832DCD}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{31291008-6B4D-4D59-B8B9-DF9E85356B18}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{33E1EAD9-B7EE-4494-89A0-7C09928BCAFB}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{3723942C-3EFC-419E-AEAC-2B8107D07ECD}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{37A934AF-A0A0-49D1-97E9-89E97E989D4E}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{395966D3-5760-4B2E-ACFE-FE546ECA5FE4}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{3ACEF614-6E15-4B82-9049-AC7E6B23EDEE}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{3E39E16A-7217-4DEE-9500-4EAFACCA19D2}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{403B6ED3-144A-4FE3-98E4-41F46ACA566B}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{41C92549-ED06-47F4-BBBE-1C8CB9B2102A}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{42EA3B5A-593A-4C36-802C-B1F1DF33AAFE}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{42F1CCB5-9707-4DFC-BE2D-7D241B8D1996}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{4370CB44-C906-4CE7-828F-2C90FF85DA39}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{43A65E94-559E-45DE-8A31-0DF754300B1A}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{44FDAE35-14A6-4B94-A549-81FC8DEC5B6A}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{462906E9-70F7-4465-BD80-0A1CC2EF4762}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{46C5B4CC-EFB7-498F-AB06-F6EA05938893}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{4C06A03B-B547-4381-A59F-82934B6F3846}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{4E1EDDCE-CB58-4A58-8656-30AD4FE22B70}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{514022CB-475D-4DD4-8FBD-2215DE959FAB}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{53018E6E-FE77-4449-8AE6-7B948839F8EF}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{5660A29B-4B69-40C0-9129-9AF545F9ABAE}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{56A3BCA2-96E0-460B-9053-AB4447B22AD0}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{577CDEE0-9484-43D6-8990-80DAC1EEBFA7}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{5B0DF405-693C-4544-BDEA-A9C15B51544F}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{5B4D9219-72AB-4270-96B3-C81FD0BD449B}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{5C156323-2544-40D7-B242-B480E4540441}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{5DC4A7F7-E0A9-4512-A796-E387792A77DA}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{5E2EB7C9-D9D7-46A5-A1BF-47EB241C801B}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{6216B5B8-7F40-492D-A0D1-1B46456DC163}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{6294ACAF-AB1B-4E2F-833D-0EE2EB887F1E}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{65C220BD-3C04-4F20-B346-616A1F254EE2}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{6767BE03-4014-4A5F-B430-47E819B15ECF}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{69912D3D-C90C-4599-9907-0A44AF515120}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{6D276E3E-CDBB-486D-8760-F4688BEFCA68}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{6DF6C64F-0D87-499C-AD1F-346168B288D3}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{6FCEE194-D736-44D2-B990-AE5D15C523DB}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{7294EB7F-54D3-43FF-8A3D-B9C229ECFA59}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{752754D1-BAD2-4F66-A80D-2ACCCC908212}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{766B0137-FC28-4FC7-9EEE-214D9689ED8F}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{7995DC7C-E2B4-4F52-B21F-00C55C4D341F}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{7A2C8193-26CC-418B-88B8-CED9CA03BE05}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{7AA6BDC5-80D2-40FD-822C-F254DC366AFA}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{7AB9D0CF-7170-4989-8CCE-7B9ED6FDF88C}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{7B30F66F-AD83-423A-B602-12A8C119ACC6}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{7C44E3B6-C532-4FD1-B75F-6A62BC404B82}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{7D948B32-0C68-447A-B5C3-9B8FEF125334}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{7E001AC7-AF2C-484D-B0A2-26B085DDB7F6}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{7E646340-49A3-4190-B80B-D07342A31716}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{8586E70F-D7F1-4D08-9625-66AB0CFEF216}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{8643C95F-8BF9-4CE2-ACD8-4AE1E6CA98F6}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{871898E1-22B2-4BD3-A24C-CF1F3D897578}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{8BAF74CF-B25F-4FF5-A13C-EBEDE122DF94}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{8E0DFB7D-4056-4AD7-8F3D-C3CCFB49CD79}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{90502DFF-6DBD-4B6B-9EE7-BAED07ED4918}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{905363A1-7F5B-41A2-9419-F0DA8D69BA4A}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{90DC074B-6608-4617-90BB-EF2BB09E55C1}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{9207FFCD-9058-439B-AC76-0892699391AD}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{920C766F-08B5-4B07-9BC3-2ED61A0D0B2D}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{94342A05-DAE6-40DD-9654-8A38F1E4932C}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{94DD5BFB-073A-4A7A-BE4E-C9C5ED53BB14}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{99E23105-A4F2-46A3-8813-1E3B8EB495CB}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{9D431F00-6780-48F2-AEC3-5D162A72BC23}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{9D970DE9-7C20-46E8-A6D2-E7382DEA1BFD}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{A032A09B-D91E-4EBC-9172-EB0F3E984D00}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{A69BF2C6-4269-4D67-AC1A-DA8C0C7D782D}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{ADF48F28-22A8-45C8-ABA4-7C8BA1BFEEB6}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{B0CCA1CE-572A-4705-82E6-38580C26B9B3}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{B13C5F9A-5BD4-4C20-B0A3-8D0D4CEA1509}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{B230ADDE-7519-45B7-9F57-11CD37520993}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{B2552A69-79F9-4502-8206-AA53FF6C07E0}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{B52AACA3-1433-4D79-A57C-A9D2E13E4B1A}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{B59102A4-38FD-481D-A7EE-1B3E13080C92}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{B76321FE-DA0D-4FBA-A9CC-56CAADB3BE78}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{BAB5138C-1C0E-4B4B-BE26-BA69D5169A3F}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{BD5F9EEA-162D-45C6-B620-6B84B47E8420}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{BF7BB8C9-C4CB-48E2-A848-5815D0CB66AB}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{C4877994-2979-4E77-946F-57A981CE96CB}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{C71AB369-6094-4960-B120-58F98A8F344E}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{C7FD82DF-78ED-423D-A40B-5FECC6BE2E00}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{C8E6FEC3-52F6-4087-B412-195A73C32C83}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{CCF0756E-030A-4559-A063-08B1A6C65D87}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{CD97F47F-70FC-4E37-AAE3-79E2C3E14905}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{CF80DD85-1B00-4D96-B4C2-187D23BD23DA}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{D02D21EC-20A3-47E8-98E8-3A097D8AE55B}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{D2CFDF28-C089-43D3-9C5B-7BFE62817EB3}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{D44A9233-5FCE-434B-9BB6-906B462D90E9}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{D554C8F1-9FC0-4DD8-B550-7C9776211493}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{DF52264E-3C3A-4CB6-9037-482323869931}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{DF7342D1-5F12-4144-BFE8-AB5F73E655BA}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{DF7B7DE3-FCD8-4ED5-B5E1-735932031248}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{E01540F1-4F5A-4B24-A9FD-DDB6B193EB28}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{E1CA3756-322F-4653-980A-D4824DCC0321}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{E4560DA5-9E00-47C2-B7BB-3D6C9B92EC89}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{E864F931-7B64-4738-A437-1C27D2698CD2}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{E8CB8506-0BE9-43B1-9427-B801DB28E30B}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{E9593717-9B11-45EB-A4FE-D92084482670}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{ED9A84D1-D506-4C17-9F4A-F836380248F6}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{EE45127D-CBEF-45F7-A8D3-FD8694139754}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{EF097AEA-DFE6-42E5-8971-2EB2C18329AD}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{F16EC345-6791-4582-A1AB-B43C699A19D4}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{F3D2C022-D3FE-4C9B-844C-7472E1A37746}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{F5F65C99-7E81-4073-A15F-61AB60A2872E}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{F66D0EFD-E290-4942-B199-FB06E2059864}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{F79BDB0E-910F-403A-A0B9-5B0BCC4FCACE}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{FB889961-7BBE-494B-9658-314616C2E5D7}
Successfully deleted: [Empty Folder] C:\Users\Ariel\appdata\local\{FFB1DC4A-B99D-4DB2-BCDF-EC56B6115FBC}



~~~ FireFox

Successfully deleted: [File] C:\user.js
Successfully deleted: [Folder] C:\Users\Ariel\AppData\Roaming\mozilla\firefox\profiles\612tub0w.default\extensions\4zffxtbr@videodownloadconverter_4z.com
Successfully deleted: [Registry Value] HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions\\4zffxtbr@videodownloadconverter_4z.com
Successfully deleted the following from C:\Users\Ariel\AppData\Roaming\mozilla\firefox\profiles\612tub0w.default\prefs.js

user_pref("extensions.toolbar.mindspark._4zMembers_.homepage", "hxxp://home.mywebsearch.com/index.jhtml?ptb=undefined&n=780bb4d7&ptnrS=HJxpi000YY");
user_pref("extensions.toolbar.mindspark._4zMembers_.hp.user.defined", true);
user_pref("extensions.toolbar.mindspark._4zMembers_.initialized", true);
user_pref("extensions.toolbar.mindspark._4zMembers_.installation.contextKey", "");
user_pref("extensions.toolbar.mindspark._4zMembers_.installation.installDate", "2014033111");
user_pref("extensions.toolbar.mindspark._4zMembers_.installation.partnerId", "HJxpi000YY");
user_pref("extensions.toolbar.mindspark._4zMembers_.installation.partnerSubId", "");
user_pref("extensions.toolbar.mindspark._4zMembers_.installation.success", false);
user_pref("extensions.toolbar.mindspark._4zMembers_.installation.toolbarId", "undefined");
user_pref("extensions.toolbar.mindspark._4zMembers_.options.defaultSearch", false);
user_pref("extensions.toolbar.mindspark._4zMembers_.options.homePageEnabled", false);
user_pref("extensions.toolbar.mindspark._4zMembers_.options.keywordEnabled", false);
user_pref("extensions.toolbar.mindspark._4zMembers_.options.tabEnabled", false);
user_pref("extensions.toolbar.mindspark._4zMembers_.weather.location", "10001");
user_pref("extensions.toolbar.mindspark.lastInstalled", "videodownloadconverter@mindspark.com");
Emptied folder: C:\Users\Ariel\AppData\Roaming\mozilla\firefox\profiles\612tub0w.default\minidumps [379 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on po 21.04.2014 at 9:04:45,49
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

atom.jon
Návštěvník
Návštěvník
Příspěvky: 51
Registrován: 15 led 2012 19:59

Re: odvirování počítače pro motji

#29 Příspěvek od atom.jon »

Počítač funguje mnohem lépe, řekla bych, že výborně, je rychlý ......... dokonce zmizelo i zavirování modzilly ....

super ................. :D moc vám děkuju ..... je tedy i podle vás všechno v pořádku?

krásný den

Martina

Uživatelský avatar
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 říj 2008 08:02

Re: odvirování počítače pro motji

#30 Příspěvek od motji »

Ještě smažte C:\windows\Panther
A odinstalujte pc tols registry mechanic, postačí Vám ccleaner. Dejte vyčistit registry několikrát za sebou :) .

A pokud nejsou problémy, je to vše :)
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.

Odpovědět