prosim o kontrolu logu

[hunterko]

prijemne popoludnie smiem prosit o kontrolu logu ? jedna sa o to ze mi pc obcas seka napr pri pozerani vide a YT..
Logfile of random's system information tool 1.10 (written by random/random)
Run by PC at 2015-05-16 14:43:25
Microsoft® Windows Vista™ Home Premium Service Pack 2
System drive C: has 69 GB (47%) free of 148 GB
Total RAM: 3069 MB (56% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 14:44:26, on 16. 5. 2015
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v9.00 (9.00.8112.16599)
Boot mode: Normal

Running processes:
C:\Windows\Explorer.EXE
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
C:\Windows\RtHDVCpl.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\Ask.com\Updater\Updater.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\PLFSetI.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Launch Manager\LManager.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe
C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
C:\Windows\ehome\ehmsas.exe
C:\Users\PC\AppData\Local\Temp\RtkBtMnt.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Common Files\Java\Java Update\jucheck.exe
C:\Users\PC\Downloads\RSIT.exe
C:\Program Files\trend micro\PC.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.centrum.cz/#utm_source=icq&u ... um=centrum
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: uTorrentBar Toolbar - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Users\PC\AppData\LocalLow\uTorrentBar\prxtbuTo2.dll
O1 - Hosts: ::1 localhost
O2 - BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll
O2 - BHO: ALOT Toolbar Helper - {14CEEAFF-96DD-4101-AE37-D5ECDC23C3F6} - C:\Program Files\alot\bin\BHO\alotBHO.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: uTorrentBar - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Users\PC\AppData\LocalLow\uTorrentBar\prxtbuTo2.dll
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: SWEETIE - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
O3 - Toolbar: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O3 - Toolbar: ALOT Toolbar - {5AA2BA46-9913-4dc7-9620-69AB0FA17AE7} - C:\Program Files\alot\bin\alot.dll
O3 - Toolbar: uTorrentBar Toolbar - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Users\PC\AppData\LocalLow\uTorrentBar\prxtbuTo2.dll
O3 - Toolbar: SweetIM Toolbar for Internet Explorer - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe"
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [Skytel] Skytel.exe
O4 - HKLM\..\Run: [ZPdtWzdVitaKey MC3000] "C:\Program Files\Acer\Acer Bio Protection\PdtWzd.exe" show
O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
O4 - HKLM\..\Run: [ApnUpdater] "C:\Program Files\Ask.com\Updater\Updater.exe"
O4 - HKLM\..\Run: [PLFSetI] C:\Windows\PLFSetI.exe
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [MSC] "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [LManager] C:\Program Files\Launch Manager\LManager.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [PCSpeedUp] C:\Program Files\Zrychleni Pocitace\PCSpeedUp.lnk
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - Startup: Orezávač obrazovky a spúšťač programu OneNote 2007.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
O4 - Global Startup: Bluetooth.lnk = ?
O4 - Global Startup: McAfee Security Scan Plus.lnk = C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Send image to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Send page to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Quick-Launching Area - {10954C80-4F0F-11d3-B17C-00C0DFE39736} - C:\Program Files\Acer\Acer Bio Protection\PwdBank.exe
O9 - Extra 'Tools' menuitem: Quick-Launching Area - {10954C80-4F0F-11d3-B17C-00C0DFE39736} - C:\Program Files\Acer\Acer Bio Protection\PwdBank.exe
O9 - Extra button: Odoslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&oslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: ICQ7.5 - {7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - C:\Program Files\ICQ7.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.5 - {7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - C:\Program Files\ICQ7.5\ICQ.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {62789780-B744-11D0-986B-00609731A21D} (Autodesk MapGuide ActiveX Control) - http://195.28.70.134/kapor2/lib/mgaxctrl.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O20 - Winlogon Notify: AWinNotifyVitaKey MC3000 - C:\Program Files\Acer\Acer Bio Protection\WinNotify.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: ICQ Service - Unknown owner - C:\Program Files\ICQ6Toolbar\ICQ Service.exe
O23 - Service: LMIGuardianSvc - LogMeIn, Inc. - C:\Program Files\LogMeIn Hamachi\LMIGuardianSvc.exe
O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: PCSpeedUp Service (PCSpeedUpService) - Unknown owner - C:\Program Files\Zrychleni Pocitace\PCSpeedUpService.exe (file missing)
O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
O23 - Service: TeamViewer 5 (TeamViewer5) - TeamViewer GmbH - C:\Program Files\TeamViewer\Version5\TeamViewer_Service.exe
O23 - Service: Validity Fingerprint Service (vfsFPService) - Validity Sensors, Inc. - C:\Windows\system32\vfsFPService.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

--
End of file - 11176 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

=========Mozilla firefox=========

ProfilePath - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\7t3czejc.default

prefs.js - "browser.startup.homepage" - "http://google.sk/"
prefs.js - "extensions.enabledItems" - "{EEE6C361-6118-11DC-9C72-001320C79847}:1.2.0.2, ShopperReports@ShopperReports.com:3.1.71.0"
prefs.js - "keyword.URL" - "http://search.icq.com/search/afe_result ... r=1.3.3&q="

"{20a82645-c095-46ed-80e3-08825760534b}"=c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
"ShopperReports@ShopperReports.com"=C:\Program Files\ShopperReports3\bin\3.1.71.0\firefox\firefoxtoolbar\extensions
"ClickPotatoLite@ClickPotatoLite.com"=C:\Program Files\ClickPotatoLite\bin\10.0.701.0\firefox\extensions


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 17.0.0.169 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF32_17_0_0_169.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Google.com/GoogleEarthPlugin]
"Description"=Google Earth in your browser
"Path"=C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@google.com/npPicasa3,version=3.0.0]
"Description"=Picasa3 plugin
"Path"=C:\Program Files\Google\Picasa3\npPicasa3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=1.6.0_35]
"Description"=
"Path"=C:\Windows\system32\npdeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.0.1]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll

C:\Program Files\Mozilla Firefox\extensions\
{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}
{F0E1168A-B4B5-484C-B77E-0D28E6B64096}

C:\Program Files\Mozilla Firefox\components\
aboutRights.js
aboutRobots.js
browser.xpt
browserdirprovider.dll
brwsrcmp.dll
FeedConverter.js
FeedProcessor.js
FeedWriter.js
fuelApplication.js
jsconsole-clhandler.js
nsAddonRepository.js
nsBadCertHandler.js
nsBlocklistService.js
nsBrowserContentHandler.js
nsBrowserGlue.js
nsContentDispatchChooser.js
nsContentPrefService.js
nsDefaultCLH.js
nsDownloadManagerUI.js
nsExtensionManager.js
nsHandlerService.js
nsHelperAppDlg.js
nsLivemarkService.js
nsLoginInfo.js
nsLoginManager.js
nsLoginManagerPrompter.js
nsMicrosummaryService.js
nsPlacesTransactionsService.js
nsPostUpdateWin.js
nsProxyAutoConfig.js
nsSafebrowsingApplication.js
nsSearchService.js
nsSearchSuggestions.js
nsSessionStartup.js
nsSessionStore.js
nsSetDefaultBrowser.js
nsSidebar.js
nsTaggingService.js
nsTryToClose.js
nsUpdateService.js
nsUrlClassifierLib.js
nsUrlClassifierListManager.js
nsURLFormatter.js
nsWebHandlerApp.js
pluginGlue.js
storage-Legacy.js
txEXSLTRegExFunctions.js
WebContentConverter.js

C:\Program Files\Mozilla Firefox\plugins\
np-mswmp.dll
npnul32.dll
nppdf32.dll
npwachk.dll

C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\7t3czejc.default\extensions\
engine@conduit.com
ffxtlbr@babylon.com
toolbar@ask.com
{800b5000-a755-47e1-992b-48a1c1357f07}
{800b5000-a755-47e1-992b-48a1c1357f07}(137)
{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}(138)
{EEE6C361-6118-11DC-9C72-001320C79847}

C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\7t3czejc.default\searchplugins\
conduit.xml
icqplugin-1.xml
icqplugin-2.xml
icqplugin-3.xml
icqplugin-4.xml
icqplugin-5.xml
icqplugin-6.xml
icqplugin-7.xml
icqplugin.xml
SweetIM Search.xml
sweetim.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0E8A89AD-95D7-40EB-8D9D-083EF7066A01}]
MSS+ Identifier - C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll [2014-04-09 96128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{14CEEAFF-96DD-4101-AE37-D5ECDC23C3F6}]
ALOT Toolbar Helper - C:\Program Files\alot\bin\BHO\alotBHO.dll [2011-03-17 831848]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-03-26 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre6\bin\ssv.dll [2012-09-01 329712]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}]
uTorrentBar Toolbar - C:\Users\PC\AppData\LocalLow\uTorrentBar\prxtbuTo2.dll [2014-03-26 424224]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
Ask Toolbar - C:\Program Files\Ask.com\GenericAskToolbar.dll [2013-12-23 1520560]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2012-09-01 59376]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}]
SweetIM Toolbar Helper - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll [2011-02-01 1499440]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{D4027C7F-154A-4066-A1AD-4243D8127440} - Ask Toolbar - C:\Program Files\Ask.com\GenericAskToolbar.dll [2013-12-23 1520560]
{5AA2BA46-9913-4dc7-9620-69AB0FA17AE7} - ALOT Toolbar - C:\Program Files\alot\bin\alot.dll [2011-03-17 831848]
{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - uTorrentBar Toolbar - C:\Users\PC\AppData\LocalLow\uTorrentBar\prxtbuTo2.dll [2014-03-26 424224]
{EEE6C35B-6118-11DC-9C72-001320C79847} - SweetIM Toolbar for Internet Explorer - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll [2011-02-01 1499440]
{855F3B16-6D32-4FE6-8A56-BBB695989046} - ICQToolBar - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll [2010-11-21 1054520]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-21 1008184]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2006-11-10 90112]
"RtHDVCpl"=C:\Windows\RtHDVCpl.exe [2008-03-11 5296128]
"Skytel"=C:\Windows\Skytel.exe [2007-11-20 1826816]
"ZPdtWzdVitaKey MC3000"=C:\Program Files\Acer\Acer Bio Protection\PdtWzd.exe [2011-06-02 3642368]
"IAAnotif"=C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe [2007-10-24 178712]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040]
"WinampAgent"=C:\Program Files\Winamp\winampa.exe [2011-03-17 74752]
""= []
"ApnUpdater"=C:\Program Files\Ask.com\Updater\Updater.exe [2013-12-23 1648048]
"PLFSetI"=C:\Windows\PLFSetI.exe [2007-10-23 200704]
"APSDaemon"=C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [2011-09-27 59240]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2012-03-27 37296]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-01-02 843712]
"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2014-08-22 974432]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2012-01-18 254696]
"LogMeIn Hamachi Ui"=C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe [2015-03-30 3978600]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2008-01-18 1033512]
"LManager"=C:\Program Files\Launch Manager\LManager.exe [2009-11-23 1115728]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-04-11 1233920]
"PCSpeedUp"=C:\Program Files\Zrychleni Pocitace\PCSpeedUp.lnk [2011-09-26 2059]
"ehTray.exe"=C:\Windows\ehome\ehTray.exe [2008-01-21 125952]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2014-07-24 21645408]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
McAfee Security Scan Plus.lnk - C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe

C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Orezávač obrazovky a spúšťač programu OneNote 2007.lnk - C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AWinNotifyVitaKey MC3000]
C:\Program Files\Acer\Acer Bio Protection\WinNotify.dll [2011-06-02 3024384]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=scecli
C:\Program Files\Acer\Acer Bio Protection\PwdFilter

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"BindDirectlyToPropertySetStorage"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"MSVideo8"=VfWWDM32.dll
"msacm.divxa32"=msaud32_divx.acm
"VIDC.FMVC"=fmcodec.dll
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-05-16 14:43:25 ----D---- C:\rsit
2015-05-15 21:26:25 ----D---- C:\Program Files\Mozilla Firefox
2015-05-10 13:37:20 ----SHD---- C:\found.005
2015-04-24 22:13:03 ----SHD---- C:\found.004
2015-04-22 21:23:27 ----A---- C:\Windows\Setup.INI
2015-04-22 21:22:32 ----D---- C:\Program Files\Launch Manager
2015-04-22 21:21:34 ----A---- C:\Windows\system32\drivers\DKbFltr.sys
2015-04-22 21:21:33 ----A---- C:\Windows\UNINST32.EXE
2015-04-22 21:20:00 ----D---- C:\Program Files\Synaptics
2015-04-22 21:17:36 ----A---- C:\Windows\system32\WdfCoInstaller01000.dll
2015-04-22 21:17:33 ----A---- C:\Windows\system32\SynTPCo4.dll
2015-04-22 21:17:33 ----A---- C:\Windows\system32\SynTPAPI.dll
2015-04-22 21:17:33 ----A---- C:\Windows\system32\drivers\SynTP.sys
2015-04-22 21:17:32 ----A---- C:\Windows\system32\SynCtrl.dll
2015-04-22 21:17:32 ----A---- C:\Windows\system32\SynCOM.dll
2015-04-22 20:23:17 ----D---- C:\4b488a141bdf96ca9911c264
2015-04-17 22:05:39 ----SHD---- C:\found.003

======List of files/folders modified in the last 1 month======

2015-05-16 14:44:00 ----D---- C:\Windows\Temp
2015-05-16 14:43:29 ----D---- C:\Program Files\trend micro
2015-05-16 13:02:08 ----D---- C:\Windows\System32
2015-05-16 13:02:08 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-05-16 13:00:37 ----D---- C:\Program Files\Mozilla Maintenance Service
2015-05-16 13:00:23 ----RD---- C:\Program Files
2015-05-15 21:27:23 ----SHD---- C:\System Volume Information
2015-05-14 23:15:16 ----D---- C:\Users\PC\AppData\Roaming\Skype
2015-05-12 15:43:26 ----D---- C:\Windows\system32\catroot2
2015-04-25 19:41:49 ----D---- C:\Windows\Prefetch
2015-04-22 21:26:52 ----D---- C:\Windows
2015-04-22 21:23:18 ----D---- C:\Windows\system32\drivers
2015-04-22 21:23:15 ----D---- C:\Windows\system32\catroot
2015-04-22 21:23:13 ----D---- C:\Windows\inf
2015-04-22 21:08:09 ----A---- C:\Windows\system32\FlashPlayerApp.exe
2015-04-22 20:23:11 ----SHD---- C:\Windows\Installer
2015-04-22 20:22:56 ----D---- C:\ProgramData\Microsoft Help
2015-04-22 20:15:19 ----D---- C:\Windows\winsxs
2015-04-22 19:56:27 ----D---- C:\Windows\system32\Msdtc
2015-04-22 19:56:25 ----D---- C:\Windows\system32\wbem
2015-04-22 19:55:45 ----D---- C:\Windows\system32\config
2015-04-22 19:55:33 ----D---- C:\Windows\Tasks
2015-04-22 19:55:33 ----D---- C:\Windows\system32\Tasks
2015-04-22 19:55:33 ----D---- C:\Windows\system32\spool
2015-04-22 19:55:33 ----D---- C:\Windows\system32\drivers\UMDF
2015-04-22 19:55:32 ----D---- C:\ProgramData\McAfee Security Scan

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AlfaFF;AlfaFF File System mini-filter; C:\Windows\system32\Drivers\AlfaFF.sys [2011-06-02 43184]
R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2007-09-29 308248]
R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2014-07-17 231800]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2011-06-24 721904]
R2 Int15;Int 15; \??\C:\Windows\System32\drivers\int15.sys [2007-01-26 69632]
R2 mdmxsdk;mdmxsdk; C:\Windows\system32\DRIVERS\mdmxsdk.sys [2006-06-19 12672]
R2 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2014-07-17 95920]
R2 XAudio;XAudio; C:\Windows\system32\DRIVERS\xaudio.sys [2007-10-18 8704]
R3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2007-12-20 3478528]
R3 DKbFltr;Dritek Keyboard Filter Driver; C:\Windows\system32\DRIVERS\DKbFltr.sys [2009-03-26 21000]
R3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2009-03-18 26176]
R3 HdAudAddService;Ovladač funkce Microsoft 1.1 UAA pro službu zvuku High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2009-04-11 236544]
R3 HSF_DPV;HSF_DPV; C:\Windows\system32\DRIVERS\HSX_DPV.sys [2007-11-01 985600]
R3 HSXHWAZL;HSXHWAZL; C:\Windows\system32\DRIVERS\HSXHWAZL.sys [2007-11-01 208896]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2008-03-11 2077080]
R3 itecir;ITECIR Infrared Receiver; C:\Windows\system32\DRIVERS\itecir.sys [2007-12-18 54784]
R3 L1E;NDIS Miniport Driver for Atheros AR8121/AR8113 PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\L1E60x86.sys [2008-02-18 48128]
R3 NETw5x32;Ovladač adaptéru Intel(R) Wireless WiFi Link pro systém Windows XP 32 Bit; C:\Windows\system32\DRIVERS\NETw5x32.sys [2008-05-21 3630336]
R3 pcouffin;VSO Software pcouffin; C:\Windows\System32\Drivers\pcouffin.sys [2011-06-24 47360]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2008-01-18 196784]
R3 UMPass;Microsoft UMPass Driver; C:\Windows\system32\DRIVERS\umpass.sys [2008-01-21 7680]
R3 usbvideo;Zobrazovací zařízení USB (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2013-07-12 134272]
R3 vfs101x;vfs101x; C:\Windows\system32\drivers\vfs101x.sys [2008-02-15 40752]
R3 winachsf;winachsf; C:\Windows\system32\DRIVERS\HSX_CNXT.sys [2007-11-01 661504]
R3 WudfPf;@%SystemRoot%\system32\drivers\Wudfpf.sys,-1000; C:\Windows\system32\drivers\WudfPf.sys [2012-07-26 66560]
S1 DritekPortIO;Dritek General Port I/O; \??\C:\PROGRA~1\LAUNCH~1\DPortIO.sys []
S3 aeiuj4bw;aeiuj4bw; C:\Windows\system32\drivers\aeiuj4bw.sys []
S3 BthEnum;Služba Bluetooth Enumerator; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-04-11 22528]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2008-01-21 92160]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2011-04-21 508416]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2009-06-17 30208]
S3 btwaudio;Bluetooth Audio Device Service; C:\Windows\system32\drivers\btwaudio.sys [2007-03-30 79664]
S3 btwavdt;Bluetooth AVDT Service; C:\Windows\system32\drivers\btwavdt.sys [2007-02-27 81200]
S3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys [2007-02-27 16432]
S3 drmkaud;Dekodér zvuků DRM jádra společnosti Microsoft; C:\Windows\system32\drivers\drmkaud.sys [2008-01-21 5632]
S3 JMCR;JMCR; C:\Windows\system32\DRIVERS\jmcr.sys [2008-03-13 80912]
S3 MSKSSRV;Server proxy služby datových proudů Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-21 8192]
S3 MSPCLOCK;Server proxy hodin datových proudů Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-21 5888]
S3 MSPQM;Server proxy správce kvality datových proudů Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-01-21 5504]
S3 MSTEE;Konvertor jímka-jímka typu T datových proudů Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-21 6016]
S3 NETw4v32;Ovladač adaptéru Intel(R) Wireless WiFi Link pro systém Windows Vista 32 Bit; C:\Windows\system32\DRIVERS\NETw4v32.sys [2007-09-26 2251776]
S3 NETwLv32; Ovladač adaptéru řady Intel(R) Wireless WiFi Link 5000 pro systém Windows Vista 32 Bit; C:\Windows\system32\DRIVERS\NETwLv32.sys []
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-04-11 148992]
S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2009-10-01 40448]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2012-07-26 155136]
S4 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys [2009-04-11 6656]
S4 MegaSR;MegaSR; C:\Windows\system32\drivers\megasr.sys [2008-01-21 386616]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Ati External Event Utility;Ati External Event Utility; C:\Windows\system32\Ati2evxx.exe [2007-12-20 643072]
R2 BthServ;@%SystemRoot%\System32\bthserv.dll,-101; C:\Windows\system32\svchost.exe [2008-01-21 21504]
R2 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-21 21504]
R2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine; C:\Program Files\LogMeIn Hamachi\hamachi-2.exe [2015-03-30 1848168]
R2 IAANTMON;Intel(R) Matrix Storage Event Monitor; C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe [2007-10-24 358936]
R2 ICQ Service;ICQ Service; C:\Program Files\ICQ6Toolbar\ICQ Service.exe [2010-11-21 247608]
R2 LMIGuardianSvc;LMIGuardianSvc; C:\Program Files\LogMeIn Hamachi\LMIGuardianSvc.exe [2015-03-30 411920]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2014-08-22 22192]
R2 StarWindServiceAE;StarWind AE Service; C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [2007-05-28 275968]
R2 TeamViewer5;TeamViewer 5; C:\Program Files\TeamViewer\Version5\TeamViewer_Service.exe [2009-12-17 185640]
R2 vfsFPService;Validity Fingerprint Service; C:\Windows\system32\vfsFPService.exe [2008-02-15 595248]
R2 XAudioService;XAudioService; C:\Windows\system32\DRIVERS\xaudio.exe [2007-10-18 386560]
R3 NisSrv;@c:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\NisSrv.exe [2014-08-22 288120]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 PCSpeedUpService;PCSpeedUp Service; C:\Program Files\Zrychleni Pocitace\PCSpeedUpService.exe []
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-04-22 268464]
S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2011-02-08 136120]
S3 McComponentHostService;McAfee Security Scan Component Host Service; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [2014-04-09 235696]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2015-05-15 148080]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WPFFontCache_v0400;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe,-100; C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2013-09-11 770168]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2013-09-11 46688]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

-----------------EOF-----------------

[vyosek]

Zdravim

A neni to naaahodou ta Vista, na kterou jste stahoval aktivator

[hunterko]

nie nieje toto je oficial mozem poslat vsetko nalepky aj co len chcete toto je starsi ntb ale oficial ktory mi priniesla kamoska ci by som nevedel nieco s tym spravit a ma tu vsetko ako ma byt

edit:// tej vcerajsej visty som sa vzdal kaslem nanu ale toto je oficial sice tiez vista ale uplne ina do tej chcel brat instalovat nanovo win tu je win uz dlhsiu dobu ale ako pisem original

[vyosek]

No dobra, budu Vam verit, vsak ono to stejne pripadne vyjde najevo...

Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner

• Ulozte nejlepe na plochu
• Ukoncete vsechny programy
• Po spusteni probehne stazeni databaze
• Kliknete na Scan a nasledne Clean
• Probehne oprava, restart PC a pak se objevi log, pripadne bude ulozen ve slozce c:\AdwCleaner\AdwCleaner[S?].txt, ten sem vlozte

Stahnete Zoek.exe http://hijackthis.nl/smeenk/ a ulozte jej na plochu

• Pokud pouzivate Win Vista ci W7, kliknete na Zoek pravym a dejte Run As Administrator ci Spustit jako spravce
• Do okna vlozte skript nize

• Kód: Vybrat vše

  autoclean;
  resethosts;
  emptyclsid;
  IEdefaults;
  FFdefaults;
  CHRdefaults;
  emptyIEcache;
  emptyFFcache;
  emptyCHRcache;
  emptyalltemp;
  emptyflash;
  emptyjava;
  emptyrecycle.bin;
  

• Nasledne kliknete na Run Script
• PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem

[hunterko]

tu je prvy log a hned vlozim aj druhy

# AdwCleaner v4.204 - Log vytvořen 16/05/2015 v 15:08:49
# Aktualizováno 12/05/2015 by Xplode
# Databáze : 2015-05-12.2 [Server]
# Operační system : Windows Vista (TM) Home Premium Service Pack 2 (x86)
# Uživatelské jméno : PC - PC-PC
# Spuštěno z : C:\Users\PC\Downloads\adwcleaner_4.204.exe
# Nastavení : Čištění

***** [ Služby ] *****

[#] Služba Smazáno : ICQ Service
[#] Služba Smazáno : PCSpeedUpService

***** [ Soubory / Složky ] *****

Složka Smazáno : C:\ProgramData\Babylon
Složka Smazáno : C:\ProgramData\ClickPotatoLiteSA
Složka Smazáno : C:\ProgramData\DriverCure
Složka Smazáno : C:\ProgramData\ICQ\ICQToolbar
Složka Smazáno : C:\ProgramData\Uniblue
Složka Smazáno : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\clickpotato
Složka Smazáno : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ShopperReports
Složka Smazáno : C:\Program Files\Ask.com
Složka Smazáno : C:\Program Files\clickpotatolite
Složka Smazáno : C:\Program Files\Conduit
Složka Smazáno : C:\Program Files\ICQ6Toolbar
Složka Smazáno : C:\Program Files\ShopperReports3
Složka Smazáno : C:\Program Files\SweetIM
Složka Smazáno : C:\Program Files\Zrychleni Pocitace
Složka Smazáno : C:\Program Files\uTorrentBar
Složka Smazáno : C:\Windows\installer\{86d4b82a-abed-442a-be86-96357b70f4fe}
Složka Smazáno : C:\Users\PC\AppData\Local\Babylon
Složka Smazáno : C:\Users\PC\AppData\Local\Conduit
Složka Smazáno : C:\Users\PC\AppData\Local\OpenCandy
Složka Smazáno : C:\Users\PC\AppData\Local\PackageAware
Složka Smazáno : C:\Users\PC\AppData\LocalLow\AskToolbar
Složka Smazáno : C:\Users\PC\AppData\LocalLow\Conduit
Složka Smazáno : C:\Users\PC\AppData\LocalLow\PriceGong
Složka Smazáno : C:\Users\PC\AppData\LocalLow\uTorrentBar
Složka Smazáno : C:\Users\PC\AppData\Roaming\Babylon
Složka Smazáno : C:\Users\PC\AppData\Roaming\DriverCure
Složka Smazáno : C:\Users\PC\AppData\Roaming\OpenCandy
Složka Smazáno : C:\Users\PC\AppData\Roaming\ShopperReports3
Složka Smazáno : C:\Users\PC\Documents\PCSpeedUp
Složka Smazáno : C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\7t3czejc.default\Extensions\{800B5000-A755-47E1-992B-48A1C1357F07}
Složka Smazáno : C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\7t3czejc.default\Extensions\{EEE6C361-6118-11DC-9C72-001320C79847}
Složka Smazáno : C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\7t3czejc.default\Extensions\engine@conduit.com
Složka Smazáno : C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\7t3czejc.default\Extensions\ffxtlbr@babylon.com
Složka Smazáno : C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\7t3czejc.default\Extensions\toolbar@ask.com
Složka Smazáno : C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\7t3czejc.default\Extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}(138)
Soubor Smazáno : C:\Windows\system32\conduitEngine.tmp
Soubor Smazáno : C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\7t3czejc.default\searchplugins\Conduit.xml
Soubor Smazáno : C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\7t3czejc.default\searchplugins\SweetIM Search.xml
Soubor Smazáno : C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\7t3czejc.default\searchplugins\SweetIm.xml
Soubor Smazáno : C:\Program Files\Mozilla Firefox\defaults\pref\firefox-branding.js
Soubor Smazáno : C:\Program Files\Mozilla Firefox\defaults\pref\firefox-l10n.js
Soubor Smazáno : C:\Program Files\Mozilla Firefox\defaults\pref\firefox.js
Soubor Smazáno : C:\Program Files\Mozilla Firefox\defaults\pref\reporter.js

***** [ Naplánované úlohy ] *****

Úloha Smazáno : RunAsStdUser Task
Úloha Smazáno : Scheduled Update for Ask Toolbar

***** [ Zástupci ] *****


***** [ Registry ] *****

Hodnota Smazáno : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [ClickPotatoLite@ClickPotatoLite.com]
Hodnota Smazáno : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [ShopperReports@ShopperReports.com]
Klíč Smazáno : HKLM\SOFTWARE\Google\Chrome\Extensions\bejbohlohkkgompgecdcbbglkpjfjgdj
Klíč Smazáno : HKLM\SOFTWARE\Google\Chrome\Extensions\bopakagnckmlgajfccecajhnimjiiedh
Klíč Smazáno : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\ICQ\ICQToolBar
Hodnota Smazáno : HKCU\Software\Microsoft\Internet Explorer\Main [ICQ Search]
Hodnota Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [pcspeedup]
Klíč Smazáno : HKLM\SOFTWARE\Classes\AppID\BRNstIE.DLL
Klíč Smazáno : HKLM\SOFTWARE\Classes\AppID\CmndFF.DLL
Klíč Smazáno : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Klíč Smazáno : HKLM\SOFTWARE\Classes\AppID\GenericAskToolbar.DLL
Klíč Smazáno : HKLM\SOFTWARE\Classes\AppID\ICQ Service.exe
Klíč Smazáno : HKLM\SOFTWARE\Classes\AppID\MenuButtonIE.DLL
Klíč Smazáno : HKLM\SOFTWARE\Classes\AppID\mozillaps.dll
Klíč Smazáno : HKLM\SOFTWARE\Classes\AppID\NCTAudioCDGrabber2.DLL
Klíč Smazáno : HKLM\SOFTWARE\Classes\AppID\Pltfrm.DLL
Klíč Smazáno : HKLM\SOFTWARE\Classes\driverscanner
Klíč Smazáno : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd
Klíč Smazáno : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd.1
Klíč Smazáno : HKLM\SOFTWARE\Classes\ICQToolBar.IEHook
Klíč Smazáno : HKLM\SOFTWARE\Classes\ICQToolBar.IEHook.1
Klíč Smazáno : HKLM\SOFTWARE\Classes\Prod.cap
Klíč Smazáno : HKLM\SOFTWARE\Classes\ShopperReports.MozillaNvgtnTrpr
Klíč Smazáno : HKLM\SOFTWARE\Classes\ShopperReports.MozillaNvgtnTrpr.1
Klíč Smazáno : HKLM\SOFTWARE\Classes\ShopperReports.Scopes
Klíč Smazáno : HKLM\SOFTWARE\Classes\ShopperReports.Scopes.1
Klíč Smazáno : HKLM\SOFTWARE\Classes\SWEETIE.IEToolbar
Klíč Smazáno : HKLM\SOFTWARE\Classes\SWEETIE.IEToolbar.1
Klíč Smazáno : HKLM\SOFTWARE\Classes\sweetim_urlsearchhook.toolbarurlsearchhook
Klíč Smazáno : HKLM\SOFTWARE\Classes\sweetim_urlsearchhook.toolbarurlsearchhook.1
Klíč Smazáno : HKLM\SOFTWARE\Classes\Toolbar3.sweetie
Klíč Smazáno : HKLM\SOFTWARE\Classes\Toolbar3.sweetie.1
Hodnota Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform [ShopperReports 3.1.71.0]
Hodnota Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [ApnUpdater]
Klíč Smazáno : HKCU\Software\Microsoft\Internet Explorer\DOMStorage\ask.com
Klíč Smazáno : HKLM\SOFTWARE\Classes\Toolbar.CT2786678
Klíč Smazáno : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Klíč Smazáno : HKLM\SOFTWARE\Classes\AppID\{0D82ACD6-A652-4496-A298-2BDE705F4227}
Klíč Smazáno : HKLM\SOFTWARE\Classes\AppID\{5D723752-5899-47E8-99B4-62C824EF9E13}
Klíč Smazáno : HKLM\SOFTWARE\Classes\AppID\{7025E484-D4B0-441A-9F0B-69063BD679CE}
Klíč Smazáno : HKLM\SOFTWARE\Classes\AppID\{8258B35C-05B8-4C0E-9525-9BCCC70F8F2D}
Klíč Smazáno : HKLM\SOFTWARE\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
Klíč Smazáno : HKLM\SOFTWARE\Classes\AppID\{A89256AD-EC17-4A83-BEF5-4B8BC4F39306}
Klíč Smazáno : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Klíč Smazáno : HKLM\SOFTWARE\Classes\AppID\{D2083641-E57F-4EAB-BB85-0582424F4A29}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{35B8892D-C3FB-4D88-990D-31DB2EBD72BD}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{396CFC12-932D-496B-A0A8-5D7201E105E1}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{5AA2BA46-9913-4DC7-9620-69AB0FA17AE7}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{5EB0259D-AB79-4AE6-A6E6-24FFE21C3DA4}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{74C22317-5B90-471F-9AD2-FEC049870A16}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{855F3B16-6D32-4FE6-8A56-BBB695989046}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{CADAF6BE-BF50-4669-8BFD-C27BD4E6181B}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{EEE6C35B-6118-11DC-9C72-001320C79847}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{EEE6C35C-6118-11DC-9C72-001320C79847}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{EEE6C35D-6118-11DC-9C72-001320C79847}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{A97B89CD-B65C-49DD-AF46-2B772C627456}
Klíč Smazáno : HKLM\SOFTWARE\Classes\Interface\{21BA420E-161C-413A-B21E-4E42AE1F4226}
Klíč Smazáno : HKLM\SOFTWARE\Classes\Interface\{2BEF239C-752E-4001-8048-F256E0D8CD93}
Klíč Smazáno : HKLM\SOFTWARE\Classes\Interface\{3F607E46-0D3C-4442-B1DE-DE7FA4768F5C}
Klíč Smazáno : HKLM\SOFTWARE\Classes\Interface\{453DB0C5-F41C-4D97-8DD6-CC72ECD5F699}
Klíč Smazáno : HKLM\SOFTWARE\Classes\Interface\{49C00A51-6E59-41FE-B3FA-2D2157FAD67B}
Klíč Smazáno : HKLM\SOFTWARE\Classes\Interface\{4AFC07D0-59BB-46B8-B097-1A46E88EEF71}
Klíč Smazáno : HKLM\SOFTWARE\Classes\Interface\{6511CE4C-4722-40D0-AD3D-4AFA2F50978A}
Klíč Smazáno : HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
Klíč Smazáno : HKLM\SOFTWARE\Classes\Interface\{6DFF5DBA-AE3A-46DB-B301-ECFFC6DB2982}
Klíč Smazáno : HKLM\SOFTWARE\Classes\Interface\{71E02280-5212-45C3-B174-4D5A35DA254F}
Klíč Smazáno : HKLM\SOFTWARE\Classes\Interface\{8AD9AD05-36BE-4E40-BA62-5422EB0D02FB}
Klíč Smazáno : HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
Klíč Smazáno : HKLM\SOFTWARE\Classes\Interface\{9BEC9B38-BF39-4899-806E-A1C5DFEB60A2}
Klíč Smazáno : HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
Klíč Smazáno : HKLM\SOFTWARE\Classes\Interface\{AEBF09E2-0C15-43C8-99BF-928C645D98A0}
Klíč Smazáno : HKLM\SOFTWARE\Classes\Interface\{B86D82BF-D39F-439A-A07C-43EDDC6F6EA6}
Klíč Smazáno : HKLM\SOFTWARE\Classes\Interface\{DA6305B9-0869-4235-8C1D-533A65E639E5}
Klíč Smazáno : HKLM\SOFTWARE\Classes\Interface\{DE34CD67-F1C8-4001-9A23-B8A68F63F377}
Klíč Smazáno : HKLM\SOFTWARE\Classes\Interface\{E6961C59-CFCE-4CCD-B794-BC78DB98413A}
Klíč Smazáno : HKLM\SOFTWARE\Classes\Interface\{EEE6C358-6118-11DC-9C72-001320C79847}
Klíč Smazáno : HKLM\SOFTWARE\Classes\Interface\{EEE6C359-6118-11DC-9C72-001320C79847}
Klíč Smazáno : HKLM\SOFTWARE\Classes\Interface\{EEE6C35A-6118-11DC-9C72-001320C79847}
Klíč Smazáno : HKLM\SOFTWARE\Classes\Interface\{FE0273D1-99DF-4AC0-87D5-1371C6271785}
Klíč Smazáno : HKLM\SOFTWARE\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}
Klíč Smazáno : HKLM\SOFTWARE\Classes\TypeLib\{573F4ABB-A1A2-44ED-9BA9-A8DAD40AAC46}
Klíč Smazáno : HKLM\SOFTWARE\Classes\TypeLib\{93E3D79C-0786-48FF-9329-93BC9F6DC2B3}
Klíč Smazáno : HKLM\SOFTWARE\Classes\TypeLib\{ACC62306-9A63-4864-BD2F-C8825D2D7EA6}
Klíč Smazáno : HKLM\SOFTWARE\Classes\TypeLib\{CDCA70D8-C6A6-49EE-9BED-7429D6C477A2}
Klíč Smazáno : HKLM\SOFTWARE\Classes\TypeLib\{D136987F-E1C4-4CCC-A220-893DF03EC5DF}
Klíč Smazáno : HKLM\SOFTWARE\Classes\TypeLib\{EEE6C35E-6118-11DC-9C72-001320C79847}
Klíč Smazáno : HKLM\SOFTWARE\Classes\TypeLib\{EEE6C35F-6118-11DC-9C72-001320C79847}
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC}
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}
Klíč Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{5AA2BA46-9913-4DC7-9620-69AB0FA17AE7}
Klíč Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{855F3B16-6D32-4FE6-8A56-BBB695989046}
Klíč Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC}
Klíč Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
Klíč Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35B-6118-11DC-9C72-001320C79847}
Klíč Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35C-6118-11DC-9C72-001320C79847}
Klíč Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A97B89CD-B65C-49DD-AF46-2B772C627456}
Klíč Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{5AA2BA46-9913-4DC7-9620-69AB0FA17AE7}
Klíč Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{855F3B16-6D32-4FE6-8A56-BBB695989046}
Klíč Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}
Klíč Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}
Klíč Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35B-6118-11DC-9C72-001320C79847}
Klíč Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35C-6118-11DC-9C72-001320C79847}
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{89F88394-3828-4D03-A0CF-8203604C3DA6}
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{B58926D6-CFB0-45D2-9C28-4B5A0F0368AE}
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D4233F04-1789-483C-A137-731E8F113DD5}
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A97B89CD-B65C-49DD-AF46-2B772C627456}
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars\{855F3B16-6D32-4FE6-8A56-BBB695989046}
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EEE6C367-6118-11DC-9C72-001320C79847}
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3BF30080-0493-4491-870A-12368627BF86}
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{62DE9496-59B2-4731-BC23-7C56F68405A5}
Hodnota Smazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{5AA2BA46-9913-4DC7-9620-69AB0FA17AE7}]
Hodnota Smazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{855F3B16-6D32-4FE6-8A56-BBB695989046}]
Hodnota Smazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC}]
Hodnota Smazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Hodnota Smazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{EEE6C35B-6118-11DC-9C72-001320C79847}]
Hodnota Smazáno : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC}]
Hodnota Smazáno : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Hodnota Smazáno : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{855F3B16-6D32-4FE6-8A56-BBB695989046}]
Hodnota Smazáno : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC}]
Hodnota Smazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{855F3B16-6D32-4FE6-8A56-BBB695989046}]
Hodnota Smazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC}]
Klíč Smazáno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
Klíč Smazáno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}
Klíč Smazáno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
Klíč Smazáno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Klíč Smazáno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C}
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Klíč Smazáno : HKCU\Software\APN
Klíč Smazáno : HKCU\Software\Ask.com
Klíč Smazáno : HKCU\Software\Conduit
Klíč Smazáno : HKCU\Software\ICQ\ICQToolbar
Klíč Smazáno : HKCU\Software\ParetoLogic
Klíč Smazáno : HKCU\Software\ShopperReports3
Klíč Smazáno : HKCU\Software\Softonic
Klíč Smazáno : HKCU\Software\SweetIM
Klíč Smazáno : HKCU\Software\Tbccint_HKLM
Klíč Smazáno : HKCU\Software\uTorrentBar
Klíč Smazáno : HKCU\Software\AppDataLow\Toolbar
Klíč Smazáno : HKCU\Software\AppDataLow\Software\alot
Klíč Smazáno : HKCU\Software\AppDataLow\Software\AskToolbar
Klíč Smazáno : HKCU\Software\AppDataLow\Software\Conduit
Klíč Smazáno : HKCU\Software\AppDataLow\Software\PriceGong
Klíč Smazáno : HKCU\Software\AppDataLow\Software\ShopperReports3
Klíč Smazáno : HKCU\Software\AppDataLow\Software\uTorrentBar
Klíč Smazáno : HKLM\SOFTWARE\APN
Klíč Smazáno : HKLM\SOFTWARE\AskToolbar
Klíč Smazáno : HKLM\SOFTWARE\Babylon
Klíč Smazáno : HKLM\SOFTWARE\ClickPotatoLite
Klíč Smazáno : HKLM\SOFTWARE\Conduit
Klíč Smazáno : HKLM\SOFTWARE\ICQ\ICQToolbar
Klíč Smazáno : HKLM\SOFTWARE\ParetoLogic
Klíč Smazáno : HKLM\SOFTWARE\ShopperReports3
Klíč Smazáno : HKLM\SOFTWARE\SweetIM
Klíč Smazáno : HKLM\SOFTWARE\Uniblue
Klíč Smazáno : HKLM\SOFTWARE\uTorrentBar
Klíč Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\{79A765E1-C399-405B-85AF-466F52E918B0}
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A1194237-547A-461d-BD44-B97B1574A7DA}
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\alotToolbar
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ICQToolbar
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\uTorrentBar Toolbar
Klíč Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
Klíč Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{A1194237-547A-461d-BD44-B97B1574A7DA}
Klíč Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\alotToolbar
Klíč Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\BabylonToolbar
Klíč Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\clickpotatolitesa
Klíč Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\conduitEngine
Klíč Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\ICQToolbar
Klíč Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\QuestScan
Klíč Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\ShopperReportsSA
Klíč Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\uTorrentBar Toolbar
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\02F47BF73B948514FAACADD8CBBDF37D
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\080D9F5E1E95FEE4794CE438E635239E
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0CFE535C35F99574E8340BFA75BF92C2
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0E12F736682067FDE4D1158D5940A82E
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1A24B5BB8521B03E0C8D908F5ABC0AE6
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1E264E0A5959A1C46BA9175A878B12EA
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\261F213D1F55267499B1F87D0CC3BCF7
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2B0D56C4F4C46D844A57FFED6F0D2852
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2E6768B6932D112438F047C54D180635
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\351716A953E21214898904032EAE2E81
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\397C771A7BCAC904697C3EC629ED33ED
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\49D4375FE41653242AEA4C969E4E65E0
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\69D6A6B2ED56AF24EA6335EAD6E91CA4
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6AA0923513360135B272E8289C5F13FA
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6F7467AF8F29C134CBBAB394ECCFDE96
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\741B4ADF27276464790022C965AB6DA8
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7DE196B10195F5647A2B21B761F3DE01
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7FFA128C2B0FF414D805FC5627883401
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\86EDC790504E1834DBC20C9A04328FD2
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\922525DCC5199162F8935747CA3D8E59
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\97C3D0F82E712E241A2F969F45E3351C
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\98CC8BF5A4A6E6C4ABF7051DDAB8B058
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9D4F5849367142E4685ED8C25E44C5ED
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9E7F556BF224D804D96A96F0F6344789
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A189D17A469616C4688D23E192996267
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A5875B04372C19545BEB90D4D606C472
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A876D9E80B896EC44A8620248CC79296
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B66FFAB725B92594C986DE826A867888
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BCDA179D619B91648538E3394CAC94CC
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BF4F885EDEE45644EB1E0C99E0162399
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CE21F3FD57B244142880EF15A165A156
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D15DAF33C220F91468A1D7D57C31ACD7
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D3BA76A44C779424889063D5098ED2D6
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D677B1A9671D4D4004F6F2A4469E86EA
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D6D0EB9FDBD90C04D92A7E729058F10D
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DD1402A9DD4215A43ABDE169A41AFA0E
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E36E114A0EAD2AD46B381D23AD69CDDF
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E4748F9A4181FCE46A23C13B517B9420
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EF8E618DB3AEDFBB384561B5C548F65E
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\7324911AA745D164DB449BB751477AAD
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF
Klíč Smazáno : HKLM\SOFTWARE\Classes\Installer\Features\7324911AA745D164DB449BB751477AAD
Klíč Smazáno : HKLM\SOFTWARE\Classes\Installer\Features\A28B4D68DEBAA244EB686953B7074FEF
Klíč Smazáno : HKLM\SOFTWARE\Classes\Installer\Products\7324911AA745D164DB449BB751477AAD
Klíč Smazáno : HKLM\SOFTWARE\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\A97CEC23332751B47BA4B95BAA50C9D0
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\F928123A039649549966D4C29D35B1C9
Klíč Smazáno : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\ask.com
Klíč Smazáno : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\icq.com

***** [ Prohlížeče ] *****

-\\ Internet Explorer v9.0.8112.16599

Nastavení Obnoveno : HKCU\Software\Microsoft\Internet Explorer\Main [ICQ Search]

-\\ Mozilla Firefox v38.0.1 (x86 sk)

[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("CT2786678..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("CT2786678..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("CT2786678.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("CT2786678.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("CT2786678.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("CT2786678.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2786678&q=");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("CT2786678.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("CT2786678.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageService.asmx/UsersRequests?ctid=EB_TOOLBAR_ID");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("CT2786678.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2786678");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("CT2786678.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,OurToolbar.com,CommunityToolbars.com,ForumToolbar.com,MyBlogToolbar.com,MyCityToolbar.com,MyCollegeToolba[...]
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("CT2786678.generalConfigFromLogin", "{\"SocialDomains\":\"social.conduit.com;apps.conduit.com;services.apps.conduit.com\",\"AppsDetectionUrlPattern\":\"hxxp://appdownload.conduit.com/\"}");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("CT2786678.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("CT2786678.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUFF_LUT");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("CommunityToolbar.ConduitSearchList", " ");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/1178763/1174448/SK", "\"0\"");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2786678", "\"1285978514\"");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&locale=EB_LOCALE", "wVmmvqqOMqrv5xct1cJIHg==");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&locale=EB_LOCALE", "uwY9T5AsudBxjradvWCAOA==");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&locale=EB_LOCALE", "Dclc8oo4TTv7+mAkSlUSWg==");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&locale=EB_LOCALE", "ZdrYrsEQox0wVf3yXX8zTQ==");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2786678", "\"634434930587600000\"");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT2786678/CT2786678", "\"1308223219\"");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=EB_LOCALE", "\"634432176643630000\"");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=en", "\"634432176643630000\"");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("CommunityToolbar.LatestLibsPath", "file:///C:\\Users\\PC\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\7t3czejc.default\\conduitCommon\\modules\\3.5.0.12");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("CommunityToolbar.LatestToolbarVersionInstalled", "3.5.0.12");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "hxxp://search.icq.com/search/afe_results.php?ch_id=afex&tb_ver=1.2.6&q=");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("CommunityToolbar.ToolbarsList", "CT2786678");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("CommunityToolbar.ToolbarsList2", "CT2786678");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("CommunityToolbar.ToolbarsList4", "CT2786678");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("CommunityToolbar.facebook.settingsLastCheckTime", "Sun Jun 26 2011 21:25:52 GMT+0200");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("CommunityToolbar.globalUserId", "6c0a0c22-7f1b-4bf6-943b-d1ac06ab976e");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true);
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true);
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("CommunityToolbar.keywordURLSelectedCTID", "CT2786678");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("CommunityToolbar.notifications.alertDialogsGetterLastCheckTime", "Sat Jun 25 2011 17:39:49 GMT+0200");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("CommunityToolbar.notifications.alertInfoInterval", 1440);
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("CommunityToolbar.notifications.alertInfoLastCheckTime", "Sun Jun 26 2011 13:39:46 GMT+0200");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("CommunityToolbar.notifications.clientsServerUrl", "hxxp://alert.client.conduit.com");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("CommunityToolbar.notifications.locale", "en");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("CommunityToolbar.notifications.loginIntervalMin", 1440);
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("CommunityToolbar.notifications.loginLastCheckTime", "Sun Jun 26 2011 21:25:52 GMT+0200");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("CommunityToolbar.notifications.loginLastUpdateTime", "1305622559");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("CommunityToolbar.notifications.messageShowTimeSec", 20);
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("CommunityToolbar.notifications.servicesServerUrl", "hxxp://alert.services.conduit.com");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("CommunityToolbar.notifications.showTrayIcon", false);
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("CommunityToolbar.notifications.userCloseIntervalMin", 300);
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("CommunityToolbar.notifications.userId", "b62e942b-6c4a-48e4-ae8a-ae7c53fed804");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("extensions.BabylonToolbar.aflt", "babsst");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("extensions.BabylonToolbar.babTrack", "affID=101430");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("extensions.BabylonToolbar.bbDpng", 9);
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("extensions.BabylonToolbar.dfltLng", "en");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("extensions.BabylonToolbar.dfltSrch", true);
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("extensions.BabylonToolbar.hmpg", true);
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("extensions.BabylonToolbar.id", "60c0bcff000000000000001de0cc760b");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("extensions.BabylonToolbar.instlDay", "15227");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("extensions.BabylonToolbar.instlRef", "sst");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("extensions.BabylonToolbar.keyWordUrl", "hxxp://search.babylon.com/?babsrc=SP_ss&q={searchTerms}&mntrId=60c0bcff000000000000001de0cc760b&tlver=1.4.35.10&affID=101430");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("extensions.BabylonToolbar.lastDP", 9);
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("extensions.BabylonToolbar.lastVrsnTs", "1.4.35.1013:47:37");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("extensions.BabylonToolbar.mntrFFxVrsn", "7.0");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("extensions.BabylonToolbar.newTab", true);
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("extensions.BabylonToolbar.newTabUrl", "hxxp://search.babylon.com/?babsrc=NT_bb");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("extensions.BabylonToolbar.prdct", "BabylonToolbar");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("extensions.BabylonToolbar.propectorlck", 59431290);
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("extensions.BabylonToolbar.prtnrId", "babylon");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("extensions.BabylonToolbar.ptch_0717", true);
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("extensions.BabylonToolbar.smplGrp", "none");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("extensions.BabylonToolbar.srcExt", "ss");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("extensions.BabylonToolbar.srchPrvdr", "Search the web (Babylon)");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("extensions.BabylonToolbar.tlbrId", "base");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("extensions.BabylonToolbar.vrsn", "1.4.35.10");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("extensions.BabylonToolbar.vrsnTs", "1.4.35.1013:47:37");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("extensions.asktb.InstallDir", "C:\\Program Files\\Ask.com\\");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("extensions.asktb.abar-war-timeout", "4000");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("extensions.asktb.autofill-competitor-query-enabled", true);
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("extensions.asktb.autofill-text-highlight-enabled", true);
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("extensions.asktb.cbid", "RY");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("extensions.asktb.config-updated", true);
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("extensions.asktb.crumb", "2011.06.22+09.12.32-toolbar003iad-SK-QnJhdGlzbGF2YSxTbG92YWtpYQ%3D%3D");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("extensions.asktb.default-channel-url-mask", "hxxp://www.ask.com/web?q={query}&o={o}&l={l}&qsrc={qsrc}");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("extensions.asktb.displaybehavior", "");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("extensions.asktb.displaytext", "");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("extensions.asktb.dtid", "YYYYYYYYSK");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("extensions.asktb.dyn-weather-do-locid-lookup-weatherWidget", false);
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("extensions.asktb.dyn-weather-locid-weatherWidget", "LOXX0001");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("extensions.asktb.dyn-weather-tempunit-weatherWidget", "C");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("extensions.asktb.guid", "d1a069a7-b54a-4a30-9c90-6b9e9f8dba72");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("extensions.asktb.hxxp-header-whitelist-hosts", "[\"static-dev.en.dev.ask.com\", \"ask.com\", \"www.facebook.com\", \"www.playsushi.com\", \"WWW.google.com\", \"hxxps://websearch.ask.com\", [...]
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("extensions.asktb.if", "first");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("extensions.asktb.l", "dis");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("extensions.asktb.last-config-req", "1320860608286");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("extensions.asktb.last-v", "3.12.2.100006");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("extensions.asktb.locale", "en_US");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("extensions.asktb.location", "Bratislava,Slovakia");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("extensions.asktb.lstation", "");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("extensions.asktb.new-tab-enabled", true);
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("extensions.asktb.o", "15184");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("extensions.asktb.pstate", "");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("extensions.asktb.qsrc", "2871");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("extensions.asktb.sa", "NO");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("extensions.asktb.search-suggestions-enabled", true);
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("extensions.asktb.silent-upgrade", true);
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("extensions.asktb.silent-upgrade-from-pre-newtabs-build", false);
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("extensions.asktb.socialmini-first", true);
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("extensions.asktb.socialmini-interval", "1200000");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("extensions.asktb.socialmini-max-char-ticker", "33");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("extensions.asktb.socialmini-max-items", "30");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("extensions.asktb.socialmini-native-on", true);
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("extensions.asktb.socialmini-speed", "5000");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("extensions.asktb.socialmini-transition-first-open", false);
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("extensions.asktb.themeid", "");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("extensions.asktb.to", "");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("extensions.xpiState", "{\"app-profile\":{\"engine@conduit.com\":{\"d\":\"C:\\\\Users\\\\PC\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\7t3czejc.default\\\\extensions\\\\engin[...]
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("icqtoolbar.allowSendURL", false);
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("icqtoolbar.defSearchChange", true);
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("icqtoolbar.engineVerified", false);
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("icqtoolbar.geolastmodified", 1317473478);
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("icqtoolbar.hiddenElements", "itb_options");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("icqtoolbar.history", "perzska%20macka%20rysavachlpate%20mackytv%20programden%20%C4%8Desk%C3%A9%20st%C3%A1tnostisuperhryyoutube.comf1.skyoutubesuperhry.czlife%20as%20we%20k[...]
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("icqtoolbar.hpChange", true);
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("icqtoolbar.icqgeo", 4201);
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("icqtoolbar.installTime", "1317485878");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("icqtoolbar.installsource", "1");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("icqtoolbar.newtab_state", "1");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("icqtoolbar.numberOfSearches", 0);
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("icqtoolbar.previousFFVersion", "7.0.1");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("icqtoolbar.skip_default_search", "yes");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("icqtoolbar.uniqueID", "130868270813086829481308760426431");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("icqtoolbar.usageStatstTimestamp", 1317749450);
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("icqtoolbar.userEngineApproved", true);
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("icqtoolbar.userHpApproved", true);
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("icqtoolbar.voucherHideClicks", 0);
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("icqtoolbar.voucherMoreLinkClicks", 0);
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("icqtoolbar.voucherRedeemClicks", 0);
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("icqtoolbar.voucherWasShown", 0);
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("icqtoolbar.xmlEnableHomePageDsGuard", true);
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("icqtoolbar.xmlLanguage", "sk");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("keyword.URL", "hxxp://search.icq.com/search/afe_results.php?ch_id=afex&tb_ver=1.3.3&q=");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("sweetim.toolbar.previous.keyword.URL", "hxxp://search.icq.com/search/afe_results.php?ch_id=afex&tb_ver=1.2.6&q=");
[7t3czejc.default\prefs.js] - Řádek Smazáno : user_pref("sweetim.toolbar.urls.homepage", "hxxp://home.sweetim.com");

-\\ Google Chrome v

[C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Smazáno [Search Provider] : hxxp://search.sweetim.com/search.asp?src=6&q={searchTerms}
[C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Preferences] - Smazáno [Homepage] : hxxp://home.sweetim.com

*************************

AdwCleaner[R0].txt - [43744 bytů] - [16/05/2015 15:05:42]
AdwCleaner[S0].txt - [43385 bytů] - [16/05/2015 15:08:49]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [43444 bytů] ##########

[hunterko]

Zoek.exe v5.0.0.0 Updated 04-May-2015
Tool run by PC on so 16. 05. 2015 at 15:16:45,23.
Microsoft® Windows Vista™ Home Premium 6.0.6002 Service Pack 2 x86
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\PC\Downloads\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

16. 5. 2015 15:19:19 Zoek.exe System Restore Point Created Successfully.

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

127.0.0.1 localhost
::1 localhost

==== Empty Folders Check ======================

C:\Program Files\MSXML 4.0 deleted successfully
C:\PROGRA~2\2ACA5CC3-0F83-453D-A079-1076FE1A8B65 deleted successfully
C:\PROGRA~2\Skype deleted successfully
C:\Users\PC\AppData\Roaming\Validity deleted successfully

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-225255891-2957673636-2832245467-1000\Software\Microsoft\Internet Explorer\SearchScopes\{5AA2BA46-9913-4DC7-9620-69AB0FA17AE7} deleted successfully
HKEY_USERS\S-1-5-21-225255891-2957673636-2832245467-1000\HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{855F3B16-6D32-4FE6-8A56-BBB695989046} deleted successfully
HKEY_USERS\S-1-5-21-225255891-2957673636-2832245467-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3BF30080-0493-4491-870A-12368627BF86} deleted successfully
HKEY_USERS\S-1-5-21-225255891-2957673636-2832245467-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{62DE9496-59B2-4731-BC23-7C56F68405A5} deleted successfully
HKEY_USERS\S-1-5-21-225255891-2957673636-2832245467-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A} deleted successfully
HKEY_CLASSES_ROOT\CLSID\{BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC} deleted successfully

==== Deleting CLSID Registry Values ======================


==== Deleting Services ======================


==== FireFox Fix ======================

Deleted from C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\7t3czejc.default\prefs.js:
user_pref("browser.startup.homepage", "http://google.sk/");
user_pref("sweetim.toolbar.previous.browser.startup.homepage", "http://www.google.sk/");
user_pref("browser.search.defaulturl", "");
user_pref("sweetim.toolbar.previous.browser.search.defaulturl", "");
user_pref("sweetim.toolbar.previous.browser.search.defaultenginename", "");
user_pref("browser.search.selectedEngine", "ICQ Search");
user_pref("sweetim.toolbar.previous.browser.search.selectedEngine", "SweetIM Search");

Added to C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\7t3czejc.default\prefs.js:
user_pref("browser.startup.homepage", "about:home");
user_pref("browser.newtab.url", "about:newtab");

Deleted from C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\811dm3un.default-1425467964613\prefs.js:

Added to C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\811dm3un.default-1425467964613\prefs.js:
user_pref("browser.startup.homepage", "about:home");
user_pref("browser.newtab.url", "about:newtab");

ProfilePath: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\7t3czejc.default

user.js not found
---- Lines CT2786678 removed from prefs.js ----
user_pref("CT2786678..clientLogIsEnabled", true);
user_pref("CT2786678.alertChannelId", "1178763");
user_pref("CT2786678.backendstorage.url_history", "687474703A2F2F7777772E66616365626F6F6B2E636F6D2F656469746163636F756E742E7068703F7265663D6D622664726
user_pref("CT2786678.backendstorage.url_history_time", "31333039313231323231303630");
user_pref("CT2786678.CTID", "CT2786678");
user_pref("CT2786678.CurrentServerDate", "26-6-2011");
user_pref("CT2786678.DialogsAlignMode", "LTR");
user_pref("CT2786678.DialogsGetterLastCheckTime", "Sat Jun 25 2011 17:39:37 GMT+0200");
user_pref("CT2786678.DownloadReferralCookieData", "");
user_pref("CT2786678.EMailNotifierPollDate", "Sun Jun 26 2011 22:45:51 GMT+0200");
user_pref("CT2786678.FeedLastCount5690698542593514850", 316);
user_pref("CT2786678.FeedPollDate2429156812186649977", "Sun Jun 26 2011 21:25:53 GMT+0200");
user_pref("CT2786678.FeedPollDate2429156813040823546", "Sun Jun 26 2011 22:25:52 GMT+0200");
user_pref("CT2786678.FeedPollDate2429156813130095866", "Sun Jun 26 2011 22:25:52 GMT+0200");
user_pref("CT2786678.FeedPollDate2429156813224203613", "Sun Jun 26 2011 22:25:52 GMT+0200");
user_pref("CT2786678.FeedPollDate2429156813230837251", "Sun Jun 26 2011 22:25:52 GMT+0200");
user_pref("CT2786678.FeedPollDate2429156813454291735", "Sun Jun 26 2011 22:25:52 GMT+0200");
user_pref("CT2786678.FeedPollDate2429156813729834876", "Sun Jun 26 2011 22:25:52 GMT+0200");
user_pref("CT2786678.FeedPollDate2429156813860870021", "Sun Jun 26 2011 22:25:53 GMT+0200");
user_pref("CT2786678.FeedPollDate2429156814264681793", "Sun Jun 26 2011 22:25:52 GMT+0200");
user_pref("CT2786678.FeedPollDate2429156814863075366", "Sun Jun 26 2011 22:25:52 GMT+0200");
user_pref("CT2786678.FeedPollDate2429156815257761081", "Sun Jun 26 2011 22:25:52 GMT+0200");
user_pref("CT2786678.FeedTTL2429156813040823546", 15);
user_pref("CT2786678.FeedTTL2429156813130095866", 10);
user_pref("CT2786678.FeedTTL2429156813454291735", 5);
user_pref("CT2786678.FeedTTL2429156814264681793", 5);
user_pref("CT2786678.FirstServerDate", "25-6-2011");
user_pref("CT2786678.FirstTime", true);
user_pref("CT2786678.FirstTimeFF3", true);
user_pref("CT2786678.FixPageNotFoundErrors", true);
user_pref("CT2786678.globalFirstTimeInfoLastCheckTime", "Sun Jun 26 2011 21:25:53 GMT+0200");
user_pref("CT2786678.GroupingServerCheckInterval", 1440);
user_pref("CT2786678.HasUserGlobalKeys", true);
user_pref("CT2786678.homepageProtectorEnableByLogin", true);
user_pref("CT2786678.HomePageProtectorEnabled", false);
user_pref("CT2786678.initDone", true);
user_pref("CT2786678.Initialize", true);
user_pref("CT2786678.InitializeCommonPrefs", true);
user_pref("CT2786678.InstallationAndCookieDataSentCount", 3);
user_pref("CT2786678.InstalledDate", "Sat Jun 25 2011 17:39:40 GMT+0200");
user_pref("CT2786678.IsAlertDBUpdated", true);
user_pref("CT2786678.isAppTrackingManagerOn", true);
user_pref("CT2786678.IsGrouping", false);
user_pref("CT2786678.IsInitSetupIni", true);
user_pref("CT2786678.IsMulticommunity", false);
user_pref("CT2786678.IsOpenThankYouPage", true);
user_pref("CT2786678.IsOpenUninstallPage", true);
user_pref("CT2786678.IsProtectorsInit", true);
user_pref("CT2786678.LanguagePackLastCheckTime", "Sun Jun 26 2011 21:25:53 GMT+0200");
user_pref("CT2786678.LanguagePackReloadIntervalMM", 1440);
user_pref("CT2786678.LastLogin_3.5.0.12", "Sun Jun 26 2011 21:25:53 GMT+0200");
user_pref("CT2786678.LatestVersion", "3.3.3.2");
user_pref("CT2786678.Locale", "en");
user_pref("CT2786678.MCDetectTooltipHeight", "83");
user_pref("CT2786678.MCDetectTooltipUrl", "http://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
user_pref("CT2786678.MCDetectTooltipWidth", "295");
user_pref("CT2786678.myStuffEnabled", true);
user_pref("CT2786678.MyStuffEnabledAtInstallation", true);
user_pref("CT2786678.myStuffPublihserMinWidth", 400);
user_pref("CT2786678.myStuffServiceIntervalMM", 1440);
user_pref("CT2786678.oldAppsList", "129295695672325902,129295695672325903,111,1000234,129295698017012804,1000034,129526967958500204,129309489763975460
user_pref("CT2786678.OriginalFirstVersion", "3.5.0.12");
user_pref("CT2786678.SearchEngineBeforeUnload", " ");
user_pref("CT2786678.SearchFromAddressBarIsInit", true);
user_pref("CT2786678.SearchInNewTabEnabled", true);
user_pref("CT2786678.SearchInNewTabIntervalMM", 1440);
user_pref("CT2786678.SearchInNewTabLastCheckTime", "Sun Jun 26 2011 21:25:51 GMT+0200");
user_pref("CT2786678.searchProtectorDialogDelayInSec", 10);
user_pref("CT2786678.searchProtectorEnableByLogin", true);
user_pref("CT2786678.SearchProtectorEnabled", true);
user_pref("CT2786678.SearchProtectorToolbarDisabled", false);
user_pref("CT2786678.ServiceMapLastCheckTime", "Sun Jun 26 2011 21:25:52 GMT+0200");
user_pref("CT2786678.SettingsLastCheckTime", "Sun Jun 26 2011 21:25:51 GMT+0200");
user_pref("CT2786678.SettingsLastUpdate", "1308223219");
user_pref("CT2786678.testingCtid", "");
user_pref("CT2786678.ThirdPartyComponentsInterval", 504);
user_pref("CT2786678.ThirdPartyComponentsLastCheck", "Sat Jun 25 2011 17:42:07 GMT+0200");
user_pref("CT2786678.ThirdPartyComponentsLastUpdate", "1246786978");
user_pref("CT2786678.toolbarAppMetaDataLastCheckTime", "Sun Jun 26 2011 21:25:53 GMT+0200");
user_pref("CT2786678.toolbarContextMenuLastCheckTime", "Sat Jun 25 2011 17:42:11 GMT+0200");
user_pref("CT2786678.ToolbarShrinkedFromSetup", false);
user_pref("CT2786678.UserID", "UN10200436075026509");
user_pref("CT2786678.WeatherNetwork", "");
user_pref("CT2786678.WeatherPollDate", "Sun Jun 26 2011 22:25:53 GMT+0200");
user_pref("CT2786678.WeatherUnit", "C");
---- Lines Search removed from prefs.js ----
user_pref("sweetim.toolbar.search.external", "<?xml version=\"1.0\"?><TOOLBAR><EXTERNAL_SEARCH engine=\"http://*google.*\" param=\"q=\" /><EXTERNAL_SE
---- Lines EEE6C361-6118-11DC-9C72-001320C79847 modified from prefs.js ----

user_pref("extensions.enabledItems", "{EEE6C361-6118-11DC-9C72-001320C79847}:1.2.0.2,ShopperReports@ShopperReports.com:3.1.71.0");
---- Lines Sweet removed from prefs.js ----
user_pref("sweetim.toolbar.highlight.colors", "#FFFF00,#00FFE4,#5AFF00,#0087FF,#FFCC00,#FF00F0");
user_pref("sweetim.toolbar.logger.ConsoleHandler.MinReportLevel", "7");
user_pref("sweetim.toolbar.logger.FileHandler.FileName", "ff-toolbar.log");
user_pref("sweetim.toolbar.logger.FileHandler.MaxFileSize", "200000");
user_pref("sweetim.toolbar.logger.FileHandler.MinReportLevel", "7");
user_pref("sweetim.toolbar.mode.debug", "false");
user_pref("sweetim.toolbar.search.history.capacity", "10");
user_pref("sweetim.toolbar.searchguard.enable", "true");
user_pref("sweetim.toolbar.simapp_id", "{B3BD7AD0-BB64-11E0-85C8-00A0D1A568C2}");
---- FireFox user.js and prefs.js backups ----

prefs_201516.05._1552_.backup

ProfilePath: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\811dm3un.default-1425467964613

user.js not found
---- FireFox user.js and prefs.js backups ----

prefs_201516.05._1552_.backup

==== Deleting Files \ Folders ======================

C:\PROGRA~2\2ACA5CC3-0F83-453D-A079-1076FE1A8B65 not found
C:\SafariSetup.exe deleted
C:\found.000 deleted
C:\found.001 deleted
C:\found.002 deleted
C:\found.003 deleted
C:\found.004 deleted
C:\found.005 deleted
C:\Users\PC\AppData\Roaming\pcouffin.log deleted
C:\PROGRA~2\ICQ deleted
C:\PROGRA~2\UAB deleted
C:\Users\PC\AppData\Local\edsinstaller.txt-20110620.log deleted
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk deleted
C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\7t3czejc.default\searchplugins\icqplugin-1.xml deleted
C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\7t3czejc.default\searchplugins\icqplugin-2.xml deleted
C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\7t3czejc.default\searchplugins\icqplugin-3.xml deleted
C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\7t3czejc.default\searchplugins\icqplugin-4.xml deleted
C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\7t3czejc.default\searchplugins\icqplugin-5.xml deleted
C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\7t3czejc.default\searchplugins\icqplugin-6.xml deleted
C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\7t3czejc.default\searchplugins\icqplugin-7.xml deleted
C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\7t3czejc.default\searchplugins\icqplugin.xml deleted
C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\7t3czejc.default\ICQToolbarData deleted
C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\7t3czejc.default\SweetIMToolbarData deleted
C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\7t3czejc.default\CT2786678 deleted
C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\7t3czejc.default\conduitCommon deleted
"C:\ProgramData\37fc2680d24a7b29f9e71bc622812581_c" deleted

==== Firefox Start and Search pages ======================

ProfilePath: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\7t3czejc.default
user_pref("browser.startup.homepage", "about:home");
user_pref("browser.newtab.url", "about:newtab");

ProfilePath: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\811dm3un.default-1425467964613
user_pref("browser.startup.homepage", "about:home");
user_pref("browser.newtab.url", "about:newtab");

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions]
"{20a82645-c095-46ed-80e3-08825760534b}"="c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension" [11. 06. 2011 21:25]
[HKEY_CURRENT_USER\Software\Mozilla\Firefox\Extensions]
"{e4f94d1e-2f53-401e-8885-681602c0ddd8}"="C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi" [04. 04. 2014 12:36]

==== Firefox Extensions ======================

ProfilePath: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\7t3czejc.default
- ICQ Toolbar - %ProfilePath%\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}(137)

AppDir: C:\Program Files\Mozilla Firefox
- Undetermined - %AppDir%\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}
- Undetermined - %AppDir%\extensions\{F0E1168A-B4B5-484C-B77E-0D28E6B64096}
- Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

==== Firefox Plugins ======================

Profilepath: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\7t3czejc.default
E0AD06BE7DBEC6EF843711E97080549A - C:\Program Files\Adobe\Reader 9.0\Reader\browser\nppdf32.dll - Adobe Acrobat
E0AD06BE7DBEC6EF843711E97080549A - C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll - Adobe Acrobat
1F8FFDE82C52353906244AFDC6BAF2AB - C:\Program Files\VideoLAN\VLC\npvlc.dll - VLC Web Plugin
AB87EEFFD18F2BAAFC274E7075EA6C67 - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll - Windows Presentation Foundation / Windows Presentation Foundation
893BF7D2261C56C24F813405D9D018E0 - c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll - Silverlight Plug-In
7B000D95ABFE622F17709D36AF44FBD3 - C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll - Java(TM) Platform SE 6 U35
6CD3A99DCEDE9C2D7D3BFBF6D4902F5F - C:\Windows\system32\npdeployJava1.dll - Java Deployment Toolkit 6.0.350.10
9419AA8A2799526EC32B473C2BB7A10D - C:\Program Files\Google\Picasa3\npPicasa3.dll - Picasa
5E947691097BA0A9AA4B8E44A4B9FEB0 - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll - Google Earth Plugin
9AE02005247DA91AB1743F5208DBEF76 - C:\Windows\system32\Macromed\Flash\NPSWF32_17_0_0_169.dll - Shockwave Flash
8DA2ED6B04EA33F2EAE8BA883F903729 - c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrlui.dll - Microsoft® Silverlight
DFCAB29E8FD38F95650CC1E203E8D318 - C:\Windows\system32\npmproxy.dll - Microsoft® Windows® Operating System


==== Deleted Firefox Extensions ======================

C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\7t3czejc.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}(137) deleted

==== Chromium Look ======================


==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.centrum.cz/#utm_source=icq&u ... um=centrum"
"Default_Search_URL"="http://www.google.com/ie"
"ICQ Search"="http://www.google.com"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl]
@="http://www.google.com/search?q=%s"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AboutURLs]
"Tabs"="C:\\ProgramData\\ICQ\\ICQNewTab\\newTab.html"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search]
"SearchAssistant"="http://www.google.com/ie"
"Default_Search_URL"="http://www.google.com/ie"

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"ICQ Search"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Start Page"="http://www.centrum.cz/#utm_source=icq&u ... um=centrum"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl]
"(Default)"="http://search.msn.com/results.asp?q=%s"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AboutURLs]
"Tabs"="about:newtab"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search]
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"SearchAssistant"="http://ie.search.msn.com/{SUB_RFC1766}/ ... chasst.htm"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
{012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTer ... ORM=IE8SRC"
{4B8C28A7-A9BC-45F8-990D-21499EED643C} QuestScan Url="http://www.questscan.com/?prt=QstscanPB ... earchTerms}"
{5F10C767-CE95-4C8B-98B0-6562C723B23D} Google Url="http://www.google.com/search?q={searchT ... f8&oe=utf8"
{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Goo Url="http://www.google.com/search?q={sear"

==== Reset Google Chrome ======================

C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully

==== Empty IE Cache ======================

C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\PC\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Users\PC\AppData\Local\Temp\acro_rd_dir\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\PC\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\25CYQB03 will be deleted at reboot
C:\Users\PC\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot

==== Empty FireFox Cache ======================

C:\Users\PC\AppData\Local\Mozilla\Firefox\Profiles\7t3czejc.default\cache2 emptied successfully

==== Empty Chrome Cache ======================

C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== C:\zoek_backup content ======================

C:\zoek_backup (files=244 folders=61 41608622 bytes)

==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\PC\AppData\Local\Temp will be emptied at reboot
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied
C:\Users\PC\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== Deleting Files / Folders ======================

"C:\Users\PC\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" not found
"C:\Users\PC\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\25CYQB03" not found

==== EOF on so 16. 05. 2015 at 16:01:21,84 ======================

[vyosek]

Poprosim o FRST http://forum.viry.cz/viewtopic.php?f=30&t=133101

[hunterko]

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 16-05-2015 02
Ran by PC (administrator) on PC-PC on 16-05-2015 16:15:42
Running from C:\Users\PC\Desktop
Loaded Profiles: PC (Available profiles: PC)
Platform: Microsoft® Windows Vista™ Home Premium Service Pack 2 (X86) OS Language: Čeština (Česká republika)
Internet Explorer Version 9 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(ATI Technologies Inc.) C:\Windows\System32\Ati2evxx.exe
(Microsoft Corporation) C:\Windows\System32\SLsvc.exe
(ATI Technologies Inc.) C:\Windows\System32\Ati2evxx.exe
(Arachnoid Biometrics Identification Group Corp.) C:\Program Files\Acer\Acer Bio Protection\CompPtcVUI.exe
(Validity Sensors, Inc.) C:\Windows\System32\vfsFPService.exe
(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe
(LogMeIn, Inc.) C:\Program Files\LogMeIn Hamachi\LMIGuardianSvc.exe
(Rocket Division Software) C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version5\TeamViewer_Service.exe
(Conexant Systems, Inc.) C:\Windows\System32\drivers\XAudio.exe
(LogMeIn Inc.) C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
(LogMeIn Inc.) C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe
(Microsoft Corporation) C:\Windows\System32\conime.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Realtek Semiconductor) C:\Windows\RtHDVCpl.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Arachnoid Biometrics Identification Group Corp.) C:\Program Files\Acer\Acer Bio Protection\PdtWzd.exe
(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(Realtek Semiconductor Corp.) C:\Users\PC\AppData\Local\Temp\RtkBtMnt.exe
(Nullsoft, Inc.) C:\Program Files\Winamp\winampa.exe
() C:\Windows\PLFSetI.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Sun Microsystems, Inc.) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Dritek System Inc.) C:\Program Files\Launch Manager\LManager.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Microsoft Corporation) C:\Windows\ehome\ehtray.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\ehome\ehmsas.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Windows\System32\wuauclt.exe
(Sun Microsystems, Inc.) C:\Program Files\Common Files\Java\Java Update\jucheck.exe
(forum.viry.cz) C:\Users\PC\Desktop\FRSTLauncher.exe
(Microsoft Corporation) C:\Windows\System32\cmd.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Windows Defender] => C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-21] (Microsoft Corporation)
HKLM\...\Run: [StartCCC] => C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [90112 2006-11-10] ()
HKLM\...\Run: [RtHDVCpl] => C:\Windows\RtHDVCpl.exe [5296128 2008-03-11] (Realtek Semiconductor)
HKLM\...\Run: [Skytel] => C:\Windows\Skytel.exe [1826816 2007-11-20] (Realtek Semiconductor Corp.)
HKLM\...\Run: [ZPdtWzdVitaKey MC3000] => C:\Program Files\Acer\Acer Bio Protection\PdtWzd.exe [3642368 2011-06-02] (Arachnoid Biometrics Identification Group Corp.)
HKLM\...\Run: [IAAnotif] => C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe [178712 2007-10-24] (Intel Corporation)
HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM\...\Run: [WinampAgent] => C:\Program Files\Winamp\winampa.exe [74752 2011-03-17] (Nullsoft, Inc.)
HKLM\...\Run: [] => [X]
HKLM\...\Run: [PLFSetI] => C:\Windows\PLFSetI.exe [200704 2007-10-23] ()
HKLM\...\Run: [APSDaemon] => C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59240 2011-09-27] (Apple Inc.)
HKLM\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [37296 2012-03-27] (Adobe Systems Incorporated)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [843712 2012-01-02] (Adobe Systems Incorporated)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [974432 2014-08-22] (Microsoft Corporation)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [254696 2012-01-18] (Sun Microsystems, Inc.)
HKLM\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe [3978600 2015-03-30] (LogMeIn Inc.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1033512 2008-01-18] (Synaptics, Inc.)
HKLM\...\Run: [LManager] => C:\Program Files\Launch Manager\LManager.exe [1115728 2009-11-23] (Dritek System Inc.)
Winlogon\Notify\AWinNotifyVitaKey MC3000: C:\Program Files\Acer\Acer Bio Protection\WinNotify.dll [2011-06-02] (Arachnoid Biometrics Identification Group Corp.)
HKU\S-1-5-21-225255891-2957673636-2832245467-1000\...\Run: [ehTray.exe] => C:\Windows\ehome\ehTray.exe [125952 2008-01-21] (Microsoft Corporation)
HKU\S-1-5-21-225255891-2957673636-2832245467-1000\...\Run: [Skype] => C:\Program Files\Skype\Phone\Skype.exe [21645408 2014-07-24] (Skype Technologies S.A.)
HKU\S-1-5-21-225255891-2957673636-2832245467-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\PhotoScreensaver.scr [704512 2009-04-11] (Microsoft Corporation)
Lsa: [Notification Packages] scecli C:\Program Files\Acer\Acer Bio Protection\PwdFilter
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk [2011-06-02]
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
Startup: C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Orezávač obrazovky a spúšťač programu OneNote 2007.lnk [2011-09-04]
ShortcutTarget: Orezávač obrazovky a spúšťač programu OneNote 2007.lnk -> C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-225255891-2957673636-2832245467-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.centrum.cz/#utm_source=icq&u ... um=centrum
URLSearchHook: HKLM - Default Value = {855F3B16-6D32-4fe6-8A56-BBB695989046}
URLSearchHook: [S-1-5-21-225255891-2957673636-2832245467-1000] ATTENTION ==> Default URLSearchHook is missing.
URLSearchHook: HKU\S-1-5-21-225255891-2957673636-2832245467-1000 - Default Value = {855F3B16-6D32-4fe6-8A56-BBB695989046}
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\.DEFAULT -> {4B8C28A7-A9BC-45F8-990D-21499EED643C} URL = http://www.questscan.com/?prt=QUESTSCAN ... earchTerms}
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-225255891-2957673636-2832245467-1000 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-225255891-2957673636-2832245467-1000 -> {4B8C28A7-A9BC-45F8-990D-21499EED643C} URL = http://www.questscan.com/?prt=QstscanPB ... earchTerms}
SearchScopes: HKU\S-1-5-21-225255891-2957673636-2832245467-1000 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={sear
BHO: MSS+ Identifier -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll [2014-04-09] (McAfee, Inc.)
BHO: ALOT Toolbar Helper -> {14CEEAFF-96DD-4101-AE37-D5ECDC23C3F6} -> C:\Program Files\alot\bin\BHO\alotBHO.dll [2011-03-17] (Vertro)
BHO: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-03-26] (Adobe Systems Incorporated)
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre6\bin\ssv.dll [2012-09-01] (Sun Microsystems, Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll [2012-09-01] (Sun Microsystems, Inc.)
DPF: {62789780-B744-11D0-986B-00609731A21D} http://195.28.70.134/kapor2/lib/mgaxctrl.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll [2009-02-26] (Microsoft Corporation)
Winsock: Catalog5 02 C:\Windows\system32\napinsp.dll [50176 2008-01-21] (Společnost Microsoft)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\7t3czejc.default
FF Homepage: about:home
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-22] ()
FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll [2010-09-01] (Google)
FF Plugin: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files\Google\Picasa3\npPicasa3.dll [2014-08-13] (Google, Inc.)
FF Plugin: @java.com/DTPlugin,version=1.6.0_35 -> C:\Windows\system32\npdeployJava1.dll [2012-09-01] (Sun Microsystems, Inc.)
FF Plugin: @java.com/JavaPlugin -> C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll [2012-09-01] (Sun Microsystems, Inc.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-29] (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2012-03-17] (VideoLAN)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll [2012-03-26] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\np-mswmp.dll [2007-04-10] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npnul32.dll [2009-07-31] (mozilla.org)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll [2012-03-26] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npwachk.dll [2011-03-17] (Nullsoft, Inc.)
FF Extension: No Name - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} [2015-05-15]
FF Extension: No Name - C:\Program Files\Mozilla Firefox\extensions\{F0E1168A-B4B5-484C-B77E-0D28E6B64096} [2015-05-15]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2011-06-11]
FF HKU\S-1-5-21-225255891-2957673636-2832245467-1000\...\Firefox\Extensions: [{e4f94d1e-2f53-401e-8885-681602c0ddd8}] - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi
FF Extension: No Name - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi [2014-04-04]

Chrome:
=======
CHR Profile: C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 Hamachi2Svc; C:\Program Files\LogMeIn Hamachi\hamachi-2.exe [1848168 2015-03-30] (LogMeIn Inc.)
R2 LMIGuardianSvc; C:\Program Files\LogMeIn Hamachi\LMIGuardianSvc.exe [411920 2015-03-30] (LogMeIn, Inc.)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [235696 2014-04-09] (McAfee, Inc.)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [22192 2014-08-22] (Microsoft Corporation)
S3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [288120 2014-08-22] (Microsoft Corporation)
R2 StarWindServiceAE; C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [275968 2007-05-28] (Rocket Division Software) [File not signed]
S2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [272952 2008-01-21] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R0 AlfaFF; C:\Windows\System32\Drivers\AlfaFF.sys [43184 2011-06-02] (Alfa Corporation)
R0 FltMgr; C:\Windows\System32\drivers\fltmgr.sys [190424 2009-04-11] (Společnost Microsoft)
R3 hamachi; C:\Windows\System32\DRIVERS\hamachi.sys [26176 2009-03-18] (LogMeIn, Inc.)
R2 Int15; C:\Windows\System32\drivers\int15.sys [69632 2007-01-26] () [File not signed]
R3 itecir; C:\Windows\System32\DRIVERS\itecir.sys [54784 2007-12-18] (ITE Tech. Inc. )
R3 L1E; C:\Windows\System32\DRIVERS\L1E60x86.sys [48128 2008-02-18] (Atheros Communications, Inc.)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [231800 2014-07-17] (Microsoft Corporation)
R3 NETw5x32; C:\Windows\System32\DRIVERS\NETw5x32.sys [3630336 2008-05-21] (Intel Corporation)
R3 Ntfs; C:\Windows\system32\Drivers\Ntfs.sys [1082232 2013-03-03] (Společnost Microsoft)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [721904 2011-06-24] () [File not signed]
U3 a73bwgxf; C:\Windows\system32\Drivers\a73bwgxf.sys [0 ] (Microsoft Corporation) <==== ATTENTION (zero size file/folder)
S1 DritekPortIO; \??\C:\PROGRA~1\LAUNCH~1\DPortIO.sys [X]
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S3 NETwLv32; system32\DRIVERS\NETwLv32.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-05-16 16:15 - 2015-05-16 16:17 - 00015930 _____ () C:\Users\PC\Desktop\FRST.txt
2015-05-16 16:15 - 2015-05-16 16:16 - 00000000 ____D () C:\FRST
2015-05-16 16:15 - 2015-05-16 16:15 - 00029696 _____ () C:\Users\PC\AppData\Local\MSGBOX.EXE
2015-05-16 16:15 - 2015-05-16 16:15 - 00015327 _____ () C:\Users\PC\Desktop\LM.bat
2015-05-16 16:14 - 2015-05-16 16:14 - 00112640 _____ (forum.viry.cz) C:\Users\PC\Desktop\FRSTLauncher.exe
2015-05-16 16:08 - 2015-05-16 16:08 - 01146368 _____ (Farbar) C:\Users\PC\Desktop\FRST.exe
2015-05-16 16:01 - 2015-05-16 16:01 - 00000000 ____D () C:\Users\PC\AppData\Roaming\Validity
2015-05-16 16:00 - 2015-05-16 16:00 - 00000322 _____ () C:\Windows\PFRO.log
2015-05-16 15:59 - 2015-05-16 15:16 - 00024064 _____ () C:\Windows\zoek-delete.exe
2015-05-16 15:18 - 2015-05-16 16:01 - 00021116 _____ () C:\zoek-results.log
2015-05-16 15:16 - 2015-05-16 15:56 - 00000000 ____D () C:\zoek_backup
2015-05-16 15:15 - 2015-05-16 15:15 - 01308672 _____ () C:\Users\PC\Downloads\zoek.exe
2015-05-16 15:05 - 2015-05-16 15:10 - 00000000 ____D () C:\AdwCleaner
2015-05-16 15:04 - 2015-05-16 15:04 - 02209792 _____ () C:\Users\PC\Downloads\adwcleaner_4.204.exe
2015-05-16 14:43 - 2015-05-16 14:44 - 00000000 ____D () C:\rsit
2015-05-16 14:41 - 2015-05-16 14:41 - 01107968 _____ () C:\Users\PC\Downloads\RSIT.exe
2015-05-15 21:26 - 2015-05-15 21:27 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2015-05-10 13:16 - 2015-05-10 13:19 - 69574952 _____ () C:\Users\PC\Downloads\Ace_Stream_Media_3.0.12.exe
2015-04-22 21:23 - 2015-04-22 21:23 - 00000000 _____ () C:\Windows\Setup.INI
2015-04-22 21:22 - 2015-04-22 21:22 - 00000000 ____D () C:\Program Files\Launch Manager
2015-04-22 21:21 - 2015-04-22 21:21 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_SynTP_01000.Wdf
2015-04-22 21:21 - 2009-09-09 14:41 - 00348680 _____ (Dritek System Inc.) C:\Windows\UNINST32.EXE
2015-04-22 21:21 - 2009-03-26 11:14 - 00021000 _____ (Dritek System Inc.) C:\Windows\system32\Drivers\DKbFltr.sys
2015-04-22 21:20 - 2015-04-22 21:21 - 00000308 _____ () C:\Windows\setupact.log
2015-04-22 21:20 - 2015-04-22 21:20 - 00000000 ____D () C:\Program Files\Synaptics
2015-04-22 21:20 - 2015-04-22 21:20 - 00000000 _____ () C:\Windows\setuperr.log
2015-04-22 21:17 - 2015-04-22 21:21 - 00005148 _____ () C:\Windows\DPINST.LOG
2015-04-22 21:17 - 2008-01-18 11:31 - 00196784 _____ (Synaptics, Inc.) C:\Windows\system32\Drivers\SynTP.sys
2015-04-22 21:17 - 2008-01-18 11:30 - 00110592 _____ (Synaptics, Inc.) C:\Windows\system32\SynTPCo4.dll
2015-04-22 21:17 - 2008-01-18 11:03 - 00147456 _____ (Synaptics, Inc.) C:\Windows\system32\SynTPAPI.dll
2015-04-22 21:17 - 2008-01-18 10:52 - 00196608 _____ (Synaptics, Inc.) C:\Windows\system32\SynCtrl.dll
2015-04-22 21:17 - 2008-01-18 10:51 - 00163840 _____ (Synaptics, Inc.) C:\Windows\system32\SynCOM.dll
2015-04-22 21:17 - 2006-03-09 09:58 - 01060424 _____ () C:\Windows\system32\WdfCoInstaller01000.dll
2015-04-22 20:23 - 2015-04-22 20:23 - 00000000 ____D () C:\4b488a141bdf96ca9911c264

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-05-16 16:07 - 2009-04-13 11:32 - 00006622 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-05-16 16:06 - 2012-09-13 18:44 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-05-16 16:04 - 2011-11-19 12:37 - 01434435 _____ () C:\Windows\WindowsUpdate.log
2015-05-16 16:02 - 2014-11-16 14:26 - 00000000 ____D () C:\Users\PC\AppData\Local\LogMeIn Hamachi
2015-05-16 16:00 - 2006-11-02 15:01 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-05-16 16:00 - 2006-11-02 14:47 - 00002096 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2015-05-16 16:00 - 2006-11-02 14:47 - 00002096 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2015-05-16 15:59 - 2011-06-02 15:03 - 00000012 _____ () C:\Windows\bthservsdp.dat
2015-05-16 15:59 - 2006-11-02 15:01 - 00032562 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2015-05-16 15:11 - 2012-04-27 20:42 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2015-05-16 14:43 - 2011-10-15 19:48 - 00000000 ____D () C:\Program Files\trend micro
2015-05-14 23:15 - 2011-06-22 18:41 - 00000000 ____D () C:\Users\PC\AppData\Roaming\Skype
2015-05-11 10:36 - 2011-06-24 19:05 - 00057344 _____ () C:\Users\PC\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-05-04 19:12 - 2015-03-05 17:53 - 00000000 ____D () C:\Users\PC\Desktop\Nová složka
2015-04-22 21:23 - 2011-06-02 14:11 - 00000000 ____D () C:\Users\PC
2015-04-22 21:22 - 2011-06-03 08:36 - 00000168 _____ () C:\Windows\LManager.UNI
2015-04-22 21:22 - 2011-06-03 08:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Launch Manager
2015-04-22 21:08 - 2012-09-13 18:44 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2015-04-22 21:08 - 2011-06-20 16:14 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2015-04-22 20:22 - 2011-06-15 09:01 - 00000000 ____D () C:\ProgramData\Microsoft Help
2015-04-22 19:56 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\Msdtc
2015-04-22 19:55 - 2012-09-13 18:44 - 00000000 ____D () C:\ProgramData\McAfee Security Scan
2015-04-22 19:55 - 2011-06-24 19:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Picasa 3
2015-04-22 19:55 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\system32\spool
2015-04-22 19:55 - 2006-11-02 12:22 - 48758784 _____ () C:\Windows\system32\config\software_previous
2015-04-22 19:55 - 2006-11-02 12:22 - 31981568 _____ () C:\Windows\system32\config\system_previous
2015-04-22 19:55 - 2006-11-02 12:22 - 30408704 _____ () C:\Windows\system32\config\components_previous
2015-04-22 19:55 - 2006-11-02 12:22 - 00262144 _____ () C:\Windows\system32\config\security_previous
2015-04-22 19:55 - 2006-11-02 12:22 - 00262144 _____ () C:\Windows\system32\config\sam_previous
2015-04-22 19:55 - 2006-11-02 12:22 - 00262144 _____ () C:\Windows\system32\config\default_previous
2015-04-20 20:57 - 2011-06-03 09:20 - 00000000 ____D () C:\Users\PC\Documents\Bluetooth Exchange Folder

==================== Files in the root of some directories =======

2011-06-24 16:31 - 2011-06-24 16:31 - 0087608 _____ () C:\Users\PC\AppData\Roaming\inst.exe
2011-06-24 16:31 - 2011-06-24 16:31 - 0007887 _____ () C:\Users\PC\AppData\Roaming\pcouffin.cat
2011-06-24 16:31 - 2011-06-24 16:31 - 0001144 _____ () C:\Users\PC\AppData\Roaming\pcouffin.inf
2011-06-24 16:31 - 2011-06-24 16:31 - 0047360 _____ (VSO Software) C:\Users\PC\AppData\Roaming\pcouffin.sys
2011-06-24 16:32 - 2011-11-17 13:46 - 0000668 _____ () C:\Users\PC\AppData\Roaming\vso_ts_preview.xml
2011-06-02 14:11 - 2015-02-17 22:08 - 0001356 _____ () C:\Users\PC\AppData\Local\d3d9caps.dat
2011-06-24 19:05 - 2015-05-11 10:36 - 0057344 _____ () C:\Users\PC\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-05-16 16:15 - 2015-05-16 16:15 - 0029696 _____ () C:\Users\PC\AppData\Local\MSGBOX.EXE

Some content of TEMP:
====================
C:\Users\PC\AppData\Local\Temp\RtkBtMnt.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-05-16 16:06

==================== End Of Log ============================

[vyosek]

Tvorba fixlistu pro FRST

• Spustte poznamkovy blok (Start-spustit-notepad)
• Zkopirujte skript nize

• Kód: Vybrat vše

  Start
  CloseProcesses:
  CreateRestorePoint:
  
  HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
  HKLM\...\Run: [WinampAgent] => C:\Program Files\Winamp\winampa.exe [74752 2011-03-17] (Nullsoft, Inc.)
  HKLM\...\Run: [] => [X]
  HKLM\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [37296 2012-03-27] (Adobe Systems Incorporated)
  HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [843712 2012-01-02] (Adobe Systems Incorporated)
  HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [254696 2012-01-18] (Sun Microsystems, Inc.)
  HKLM\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe [3978600 2015-03-30] (LogMeIn Inc.)
  HKU\S-1-5-21-225255891-2957673636-2832245467-1000\...\Run: [Skype] => C:\Program Files\Skype\Phone\Skype.exe [21645408 2014-07-24] (Skype Technologies S.A.)
  
  HKU\S-1-5-21-225255891-2957673636-2832245467-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.centrum.cz/#utm_source=icq&u ... um=centrum
  URLSearchHook: HKLM - Default Value = {855F3B16-6D32-4fe6-8A56-BBB695989046}
  URLSearchHook: [S-1-5-21-225255891-2957673636-2832245467-1000] ATTENTION ==> Default URLSearchHook is missing.
  URLSearchHook: HKU\S-1-5-21-225255891-2957673636-2832245467-1000 - Default Value = {855F3B16-6D32-4fe6-8A56-BBB695989046}
  SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
  SearchScopes: HKU\.DEFAULT -> {4B8C28A7-A9BC-45F8-990D-21499EED643C} URL = http://www.questscan.com/?prt=QUESTSCAN175&keywords={searchTerms}
  SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
  SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
  BHO: MSS+ Identifier -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll [2014-04-09] (McAfee, Inc.)
  BHO: ALOT Toolbar Helper -> {14CEEAFF-96DD-4101-AE37-D5ECDC23C3F6} -> C:\Program Files\alot\bin\BHO\alotBHO.dll [2011-03-17] (Vertro)
  
  FF HKU\S-1-5-21-225255891-2957673636-2832245467-1000\...\Firefox\Extensions: [{e4f94d1e-2f53-401e-8885-681602c0ddd8}] - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi
  FF Extension: No Name - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi [2014-04-04]
  FF Extension: No Name - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} [2015-05-15]
  FF Extension: No Name - C:\Program Files\Mozilla Firefox\extensions\{F0E1168A-B4B5-484C-B77E-0D28E6B64096} [2015-05-15]
  
  U3 a73bwgxf; C:\Windows\system32\Drivers\a73bwgxf.sys [0 ] (Microsoft Corporation) <==== ATTENTION (zero size file/folder)
  S1 DritekPortIO; \??\C:\PROGRA~1\LAUNCH~1\DPortIO.sys [X]
  S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
  S3 NETwLv32; system32\DRIVERS\NETwLv32.sys [X]
  S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
  S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]
  
  2015-05-16 16:15 - 2015-05-16 16:15 - 00029696 _____ () C:\Users\PC\AppData\Local\MSGBOX.EXE
  2015-05-16 16:15 - 2015-05-16 16:15 - 00015327 _____ () C:\Users\PC\Desktop\LM.bat
  2015-05-16 16:14 - 2015-05-16 16:14 - 00112640 _____ (forum.viry.cz) C:\Users\PC\Desktop\FRSTLauncher.exe
  2015-05-16 16:15 - 2015-05-16 16:17 - 00015930 _____ () C:\Users\PC\Desktop\FRST.txt
  2015-05-16 16:00 - 2015-05-16 16:00 - 00000322 _____ () C:\Windows\PFRO.log
  2015-05-16 15:59 - 2015-05-16 15:16 - 00024064 _____ () C:\Windows\zoek-delete.exe
  2015-05-16 15:18 - 2015-05-16 16:01 - 00021116 _____ () C:\zoek-results.log
  2015-05-16 15:16 - 2015-05-16 15:56 - 00000000 ____D () C:\zoek_backup
  2015-05-16 15:15 - 2015-05-16 15:15 - 01308672 _____ () C:\Users\PC\Downloads\zoek.exe
  2015-05-16 15:05 - 2015-05-16 15:10 - 00000000 ____D () C:\AdwCleaner
  2015-05-16 15:04 - 2015-05-16 15:04 - 02209792 _____ () C:\Users\PC\Downloads\adwcleaner_4.204.exe
  2015-05-16 14:43 - 2015-05-16 14:44 - 00000000 ____D () C:\rsit
  2015-05-16 14:41 - 2015-05-16 14:41 - 01107968 _____ () C:\Users\PC\Downloads\RSIT.exe
  C:\Windows\tasks\Adobe Flash Player Updater.job
  
  Hosts:
  EmptyTemp:
  Reboot:
  End
  

• Ulozte vytvoreny TXT jako fixlist.txt
• Presunte vytvoreny fixlist vedle FRST

Spustte znovu FRST.exe

• Kliknete na Fix
• Probehne oprava a vytvori log Fixlog.txt

Restart PC a dejte mi sem fixlog.txt

[hunterko]

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 16-05-2015 02
Ran by PC at 2015-05-16 16:32:04 Run:1
Running from C:\Users\PC\Desktop
Loaded Profiles: PC (Available profiles: PC)
Boot Mode: Normal

==============================================

Content of fixlist:
*****************
Start
CloseProcesses:
CreateRestorePoint:

HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM\...\Run: [WinampAgent] => C:\Program Files\Winamp\winampa.exe [74752 2011-03-17] (Nullsoft, Inc.)
HKLM\...\Run: [] => [X]
HKLM\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [37296 2012-03-27] (Adobe Systems Incorporated)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [843712 2012-01-02] (Adobe Systems Incorporated)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [254696 2012-01-18] (Sun Microsystems, Inc.)
HKLM\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe [3978600 2015-03-30] (LogMeIn Inc.)
HKU\S-1-5-21-225255891-2957673636-2832245467-1000\...\Run: [Skype] => C:\Program Files\Skype\Phone\Skype.exe [21645408 2014-07-24] (Skype Technologies S.A.)

HKU\S-1-5-21-225255891-2957673636-2832245467-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.centrum.cz/#utm_source=icq&u ... um=centrum
URLSearchHook: HKLM - Default Value = {855F3B16-6D32-4fe6-8A56-BBB695989046}
URLSearchHook: [S-1-5-21-225255891-2957673636-2832245467-1000] ATTENTION ==> Default URLSearchHook is missing.
URLSearchHook: HKU\S-1-5-21-225255891-2957673636-2832245467-1000 - Default Value = {855F3B16-6D32-4fe6-8A56-BBB695989046}
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\.DEFAULT -> {4B8C28A7-A9BC-45F8-990D-21499EED643C} URL = http://www.questscan.com/?prt=QUESTSCAN ... earchTerms}
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: MSS+ Identifier -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll [2014-04-09] (McAfee, Inc.)
BHO: ALOT Toolbar Helper -> {14CEEAFF-96DD-4101-AE37-D5ECDC23C3F6} -> C:\Program Files\alot\bin\BHO\alotBHO.dll [2011-03-17] (Vertro)

FF HKU\S-1-5-21-225255891-2957673636-2832245467-1000\...\Firefox\Extensions: [{e4f94d1e-2f53-401e-8885-681602c0ddd8}] - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi
FF Extension: No Name - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi [2014-04-04]
FF Extension: No Name - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} [2015-05-15]
FF Extension: No Name - C:\Program Files\Mozilla Firefox\extensions\{F0E1168A-B4B5-484C-B77E-0D28E6B64096} [2015-05-15]

U3 a73bwgxf; C:\Windows\system32\Drivers\a73bwgxf.sys [0 ] (Microsoft Corporation) <==== ATTENTION (zero size file/folder)
S1 DritekPortIO; \??\C:\PROGRA~1\LAUNCH~1\DPortIO.sys [X]
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S3 NETwLv32; system32\DRIVERS\NETwLv32.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]

2015-05-16 16:15 - 2015-05-16 16:15 - 00029696 _____ () C:\Users\PC\AppData\Local\MSGBOX.EXE
2015-05-16 16:15 - 2015-05-16 16:15 - 00015327 _____ () C:\Users\PC\Desktop\LM.bat
2015-05-16 16:14 - 2015-05-16 16:14 - 00112640 _____ (forum.viry.cz) C:\Users\PC\Desktop\FRSTLauncher.exe
2015-05-16 16:15 - 2015-05-16 16:17 - 00015930 _____ () C:\Users\PC\Desktop\FRST.txt
2015-05-16 16:00 - 2015-05-16 16:00 - 00000322 _____ () C:\Windows\PFRO.log
2015-05-16 15:59 - 2015-05-16 15:16 - 00024064 _____ () C:\Windows\zoek-delete.exe
2015-05-16 15:18 - 2015-05-16 16:01 - 00021116 _____ () C:\zoek-results.log
2015-05-16 15:16 - 2015-05-16 15:56 - 00000000 ____D () C:\zoek_backup
2015-05-16 15:15 - 2015-05-16 15:15 - 01308672 _____ () C:\Users\PC\Downloads\zoek.exe
2015-05-16 15:05 - 2015-05-16 15:10 - 00000000 ____D () C:\AdwCleaner
2015-05-16 15:04 - 2015-05-16 15:04 - 02209792 _____ () C:\Users\PC\Downloads\adwcleaner_4.204.exe
2015-05-16 14:43 - 2015-05-16 14:44 - 00000000 ____D () C:\rsit
2015-05-16 14:41 - 2015-05-16 14:41 - 01107968 _____ () C:\Users\PC\Downloads\RSIT.exe
C:\Windows\tasks\Adobe Flash Player Updater.job

Hosts:
EmptyTemp:
Reboot:
End
*****************

Processes closed successfully.
Restore point was successfully created.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\GrooveMonitor => value deleted successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\WinampAgent => value deleted successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\ => value deleted successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\Adobe Reader Speed Launcher => value deleted successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM => value deleted successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched => value deleted successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\LogMeIn Hamachi Ui => value deleted successfully.
HKU\S-1-5-21-225255891-2957673636-2832245467-1000\Software\Microsoft\Windows\CurrentVersion\Run\\Skype => value deleted successfully.
HKU\S-1-5-21-225255891-2957673636-2832245467-1000\Software\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully.
HKLM\Software\Microsoft\Internet Explorer\URLSearchHooks\\ => value deleted successfully.
Error setting Default URLSearchHook.
HKU\S-1-5-21-225255891-2957673636-2832245467-1000\Software\Microsoft\Internet Explorer\URLSearchHooks\\ => value deleted successfully.
HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
"HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{4B8C28A7-A9BC-45F8-990D-21499EED643C}" => Key deleted successfully.
HKCR\CLSID\{4B8C28A7-A9BC-45F8-990D-21499EED643C} => Key not found.
HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0E8A89AD-95D7-40EB-8D9D-083EF7066A01}" => Key deleted successfully.
"HKCR\CLSID\{0E8A89AD-95D7-40EB-8D9D-083EF7066A01}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{14CEEAFF-96DD-4101-AE37-D5ECDC23C3F6}" => Key deleted successfully.
"HKCR\CLSID\{14CEEAFF-96DD-4101-AE37-D5ECDC23C3F6}" => Key deleted successfully.
HKU\S-1-5-21-225255891-2957673636-2832245467-1000\Software\Mozilla\Firefox\Extensions\\{e4f94d1e-2f53-401e-8885-681602c0ddd8} => value deleted successfully.
C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi => Moved successfully.
C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} => Moved successfully.
C:\Program Files\Mozilla Firefox\extensions\{F0E1168A-B4B5-484C-B77E-0D28E6B64096} => Moved successfully.
a73bwgxf => Service deleted successfully.
DritekPortIO => Service deleted successfully.
IpInIp => Service deleted successfully.
NETwLv32 => Service deleted successfully.
NwlnkFlt => Service deleted successfully.
NwlnkFwd => Service deleted successfully.
C:\Users\PC\AppData\Local\MSGBOX.EXE => Moved successfully.
C:\Users\PC\Desktop\LM.bat => Moved successfully.
C:\Users\PC\Desktop\FRSTLauncher.exe => Moved successfully.
"C:\Users\PC\Desktop\FRST.txt" => File/Directory not found.
C:\Windows\PFRO.log => Moved successfully.
C:\Windows\zoek-delete.exe => Moved successfully.
C:\zoek-results.log => Moved successfully.
C:\zoek_backup => Moved successfully.
C:\Users\PC\Downloads\zoek.exe => Moved successfully.
C:\AdwCleaner => Moved successfully.
C:\Users\PC\Downloads\adwcleaner_4.204.exe => Moved successfully.
C:\rsit => Moved successfully.
C:\Users\PC\Downloads\RSIT.exe => Moved successfully.
C:\Windows\tasks\Adobe Flash Player Updater.job => Moved successfully.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.
EmptyTemp: => Removed 39.9 MB temporary data.


The system needed a reboot.

==== End of Fixlog 16:33:49 ====

[vyosek]

Jak se chova PC??

[hunterko]

poskusal som viac veci zda sa ze problem je vyrieseny
a este jedna otazka co ma sice netrapi ale spytam sa nato nevies preco ked zapinam pc tak ta uvodna zvucka mi ide akoby oneskorene ?

[vyosek]

Nemate na plose nejake velke soubory slozky???