VIRY.CZ

Tušil sem, že to se mnou nebude lehký log here:

# AdwCleaner v2.305 - Log vytvooen 16/07/2013 v 18:01:14
# Aktualizováno 11/07/2013 Xplode
# Operaení systém : Windows 7 Home Premium Service Pack 1 (64 bits)
# Uživatel : Marty - MARTY-PC
# Spuštin systém : Normální
# Spuštino z : C:\Users\Marty\Desktop\adwcleaner.exe
# Volba [Vymazat]


***** [Služby] *****


***** [Soubory / Složky] *****

Složka Vymazáno : C:\Program Files (x86)\1ClickDownload
Složka Vymazáno : C:\Program Files (x86)\Conduit
Složka Vymazáno : C:\Program Files (x86)\NCH
Složka Vymazáno : C:\ProgramData\Babylon
Složka Vymazáno : C:\ProgramData\ICQ\ICQToolbar
Složka Vymazáno : C:\ProgramData\InstallMate
Složka Vymazáno : C:\Users\Marty\AppData\Local\Babylon
Složka Vymazáno : C:\Users\Marty\AppData\Local\Conduit
Složka Vymazáno : C:\Users\Marty\AppData\LocalLow\AVG Security Toolbar
Složka Vymazáno : C:\Users\Marty\AppData\LocalLow\Conduit
Složka Vymazáno : C:\Users\Marty\AppData\LocalLow\NCH
Složka Vymazáno : C:\Users\Marty\AppData\Roaming\Babylon
Složka Vymazáno : C:\Users\Marty\AppData\Roaming\Mozilla\Firefox\Profiles\z849xsjq.default\ConduitCommon
Složka Vymazáno : C:\Users\Marty\AppData\Roaming\Mozilla\Firefox\Profiles\z849xsjq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
Soubor Vymazáno : C:\Program Files (x86)\Mozilla Firefox\.autoreg
Soubor Vymazáno : C:\user.js
Soubor Vymazáno : C:\Users\Marty\AppData\Roaming\Microsoft\Windows\Start Menu\eBay.lnk

***** [Registry] *****

Hodnota Vymazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{855F3B16-6D32-4FE6-8A56-BBB695989046}]
Hodnota Vymazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{C2DB4FE6-8409-45CE-8010-189A7B5CCE86}]
Klíe Vymazáno : HKCU\Software\1ClickDownload
Klíe Vymazáno : HKCU\Software\AppDataLow\Software\Conduit
Klíe Vymazáno : HKCU\Software\AppDataLow\Software\ConduitSearchScopes
Klíe Vymazáno : HKCU\Software\AppDataLow\Software\NCH
Klíe Vymazáno : HKCU\Software\AppDataLow\Toolbar
Klíe Vymazáno : HKCU\Software\Conduit
Klíe Vymazáno : HKCU\Software\ExpressFiles
Klíe Vymazáno : HKCU\Software\ICQ\ICQToolbar
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{201F27D4-3704-41D6-89C1-AA35E39143ED}
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3041D03E-FD4B-44E0-B742-2D9B88305F98}
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{32099AAC-C132-4136-9E9A-4E364A424E17}
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{855F3B16-6D32-4FE6-8A56-BBB695989046}
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{B0DE3308-5D5A-470D-81B9-634FC078393B}
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C2DB4FE6-8409-45CE-8010-189A7B5CCE86}
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{201F27D4-3704-41D6-89C1-AA35E39143ED}
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3041D03E-FD4B-44E0-B742-2D9B88305F98}
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{32099AAC-C132-4136-9E9A-4E364A424E17}
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{855F3B16-6D32-4FE6-8A56-BBB695989046}
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C2DB4FE6-8409-45CE-8010-189A7B5CCE86}
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F25AF245-4A81-40DC-92F9-E9021F207706}
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\grusskartencenter.com
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\grusskartencenter.com
Klíe Vymazáno : HKCU\Software\YahooPartnerToolbar
Klíe Vymazáno : HKLM\Software\Babylon
Klíe Vymazáno : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\AppID\{5D723752-5899-47E8-99B4-62C824EF9E13}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Klíe Vymazáno : HKLM\SOFTWARE\Classes\AppID\ICQ Service.exe
Klíe Vymazáno : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr
Klíe Vymazáno : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr.1
Klíe Vymazáno : HKLM\SOFTWARE\Classes\DTToolbar.ToolBandObj
Klíe Vymazáno : HKLM\SOFTWARE\Classes\DTToolbar.ToolBandObj.1
Klíe Vymazáno : HKLM\SOFTWARE\Classes\ICQToolBar.IEHook
Klíe Vymazáno : HKLM\SOFTWARE\Classes\ICQToolBar.IEHook.1
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Prod.cap
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Toolbar.CT2117678
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Toolbar.CT3021023
Klíe Vymazáno : HKLM\SOFTWARE\Classes\TypeLib\{13ABD093-D46F-40DF-A608-47E162EC799D}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\TypeLib\{4B1C1E16-6B34-430E-B074-5928ECA4C150}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\TypeLib\{D2E5FA06-DCC7-46F9-BEFF-BFD06F69B9B2}
Klíe Vymazáno : HKLM\Software\Conduit
Klíe Vymazáno : HKLM\Software\ExpressFiles
Klíe Vymazáno : HKLM\Software\ICQ\ICQToolbar
Klíe Vymazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars\{855F3B16-6D32-4FE6-8A56-BBB695989046}
Klíe Vymazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}
Klíe Vymazáno : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32
Klíe Vymazáno : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS
Klíe Vymazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EDCF4C04-27CF-4605-AEEB-9C0DECE1A03D}
Klíe Vymazáno : HKLM\Software\NCH
Klíe Vymazáno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Klíe Vymazáno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}
Klíe Vymazáno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Klíe Vymazáno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}
Klíe Vymazáno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Klíe Vymazáno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{EDCF4C04-27CF-4605-AEEB-9C0DECE1A03D}
Klíe Vymazáno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Klíe Vymazáno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{4634804A-F0B0-4A74-A550-FC0EEF8A4362}
Klíe Vymazáno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{4C07EA4F-5F52-4222-B170-4CD9ED33BAEA}
Klíe Vymazáno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
Klíe Vymazáno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Klíe Vymazáno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C44FEFF4-EF0C-4CF7-83D0-92B4266A32B9}
Klíe Vymazáno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{F131923C-381D-4E4C-A472-4A17118FD742}
Klíe Vymazáno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Klíe Vymazáno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\daemon tools toolbar
Klíe Vymazáno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\ICQToolbar
Klíe Vymazáno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\NCH Toolbar
Klíe Vymazáno : HKLM\SOFTWARE\Classes\CLSID\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Interface\{4634804A-F0B0-4A74-A550-FC0EEF8A4362}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Interface\{4C07EA4F-5F52-4222-B170-4CD9ED33BAEA}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Interface\{C44FEFF4-EF0C-4CF7-83D0-92B4266A32B9}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Interface\{F131923C-381D-4E4C-A472-4A17118FD742}
Klíe Vymazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}

***** [Internetové prohlížeee] *****

-\\ Internet Explorer v10.0.9200.16611

Zaminino : [HKCU\Software\Microsoft\Internet Explorer\Main - ICQ Search] = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd --> hxxp://www.google.com
Zaminino : [HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls - Tabs] = hxxp://isearch.avg.com/tab?cid={4214EEE2-9E72-47C5-AA50-1863013D2E9A}&mid=41ce938b7a1247d69ffdd16d5b26b5ee-3288f3b076cfe458ac710afe2cc86cf0929b3e9d&lang=cs&ds=AVG&pr=pr&d=2011-11-05 11:48:44&v=9.0.0.22&sap=nt --> hxxp://www.google.com

-\\ Mozilla Firefox v3.6.12 (en-US)

Soubor : C:\Users\Marty\AppData\Roaming\Mozilla\Firefox\Profiles\z849xsjq.default\prefs.js

C:\Users\Marty\AppData\Roaming\Mozilla\Firefox\Profiles\z849xsjq.default\user.js ... Vymazáno !

Vymazáno : user_pref("CT3021023..clientLogIsEnabled", true);
Vymazáno : user_pref("CT3021023..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...]
Vymazáno : user_pref("CT3021023..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...]
Vymazáno : user_pref("CT3021023.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);
Vymazáno : user_pref("CT3021023.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
Vymazáno : user_pref("CT3021023.AppTrackingLastCheckTime", "Sun Feb 05 2012 17:34:06 GMT+0100");
Vymazáno : user_pref("CT3021023.BrowserCompStateIsOpen_1000515", true);
Vymazáno : user_pref("CT3021023.BrowserCompStateIsOpen_129684820469411022", true);
Vymazáno : user_pref("CT3021023.BrowserCompStateIsOpen_129695278345261195", true);
Vymazáno : user_pref("CT3021023.CT3021023", "CT3021023");
Vymazáno : user_pref("CT3021023.CurrentServerDate", "5-2-2012");
Vymazáno : user_pref("CT3021023.DSInstall", true);
Vymazáno : user_pref("CT3021023.DialogsAlignMode", "LTR");
Vymazáno : user_pref("CT3021023.DialogsGetterLastCheckTime", "Sun Feb 05 2012 17:33:57 GMT+0100");
Vymazáno : user_pref("CT3021023.DownloadReferralCookieData", "");
Vymazáno : user_pref("CT3021023.EMailNotifierPollDate", "Sun Feb 05 2012 18:14:15 GMT+0100");
Vymazáno : user_pref("CT3021023.FirstServerDate", "5-2-2012");
Vymazáno : user_pref("CT3021023.FirstTime", true);
Vymazáno : user_pref("CT3021023.FirstTimeFF3", true);
Vymazáno : user_pref("CT3021023.FixPageNotFoundErrors", true);
Vymazáno : user_pref("CT3021023.GroupingServerCheckInterval", 1440);
Vymazáno : user_pref("CT3021023.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
Vymazáno : user_pref("CT3021023.HPInstall", true);
Vymazáno : user_pref("CT3021023.HasUserGlobalKeys", true);
Vymazáno : user_pref("CT3021023.HomePageProtectorEnabled", true);
Vymazáno : user_pref("CT3021023.HomepageBeforeUnload", "hxxp://search.conduit.com/?ctid=CT3021023&SearchSource=[...]
Vymazáno : user_pref("CT3021023.Initialize", true);
Vymazáno : user_pref("CT3021023.InitializeCommonPrefs", true);
Vymazáno : user_pref("CT3021023.InstallationAndCookieDataSentCount", 1);
Vymazáno : user_pref("CT3021023.InstallationType", "ConduitIntegration");
Vymazáno : user_pref("CT3021023.InstalledDate", "Sun Feb 05 2012 17:33:57 GMT+0100");
Vymazáno : user_pref("CT3021023.InvalidateCache", false);
Vymazáno : user_pref("CT3021023.IsGrouping", false);
Vymazáno : user_pref("CT3021023.IsInitSetupIni", true);
Vymazáno : user_pref("CT3021023.IsMulticommunity", false);
Vymazáno : user_pref("CT3021023.IsOpenThankYouPage", true);
Vymazáno : user_pref("CT3021023.IsOpenUninstallPage", true);
Vymazáno : user_pref("CT3021023.IsProtectorsInit", true);
Vymazáno : user_pref("CT3021023.LanguagePackLastCheckTime", "Sun Feb 05 2012 17:33:57 GMT+0100");
Vymazáno : user_pref("CT3021023.LanguagePackReloadIntervalMM", 1440);
Vymazáno : user_pref("CT3021023.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...]
Vymazáno : user_pref("CT3021023.LastLogin_3.8.1.0", "Sun Feb 05 2012 17:34:13 GMT+0100");
Vymazáno : user_pref("CT3021023.LatestVersion", "3.9.0.3");
Vymazáno : user_pref("CT3021023.Locale", "en");
Vymazáno : user_pref("CT3021023.MCDetectTooltipHeight", "83");
Vymazáno : user_pref("CT3021023.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
Vymazáno : user_pref("CT3021023.MCDetectTooltipWidth", "295");
Vymazáno : user_pref("CT3021023.MyStuffEnabledAtInstallation", true);
Vymazáno : user_pref("CT3021023.OriginalFirstVersion", "3.8.1.0");
Vymazáno : user_pref("CT3021023.RadioIsPodcast", false);
Vymazáno : user_pref("CT3021023.RadioLastCheckTime", "Sun Feb 05 2012 17:33:57 GMT+0100");
Vymazáno : user_pref("CT3021023.RadioLastUpdateIPServer", "3");
Vymazáno : user_pref("CT3021023.RadioLastUpdateServer", "129513331499700000");
Vymazáno : user_pref("CT3021023.RadioMediaID", "21880437");
Vymazáno : user_pref("CT3021023.RadioMediaType", "Media Player");
Vymazáno : user_pref("CT3021023.RadioMenuSelectedID", "EBRadioMenu_CT302102321880437");
Vymazáno : user_pref("CT3021023.RadioShrinkedFromSetup", false);
Vymazáno : user_pref("CT3021023.RadioStationName", "California%20Rock%20-%20Rock");
Vymazáno : user_pref("CT3021023.RadioStationURL", "hxxp://www.feedlive.net/california.asx");
Vymazáno : user_pref("CT3021023.SavedHomepage", "hxxp://start.icq.com/");
Vymazáno : user_pref("CT3021023.SearchCaption", "brothersoft afc Customized Web Search");
Vymazáno : user_pref("CT3021023.SearchEngineBeforeUnload", "brothersoft afc Customized Web Search");
Vymazáno : user_pref("CT3021023.SearchFromAddressBarIsInit", true);
Vymazáno : user_pref("CT3021023.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT302[...]
Vymazáno : user_pref("CT3021023.SearchInNewTabEnabled", true);
Vymazáno : user_pref("CT3021023.SearchInNewTabIntervalMM", 1440);
Vymazáno : user_pref("CT3021023.SearchInNewTabLastCheckTime", "Sun Feb 05 2012 17:34:13 GMT+0100");
Vymazáno : user_pref("CT3021023.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...]
Vymazáno : user_pref("CT3021023.SearchInNewTabUsageUrl", "hxxp://usage.hosting.toolbar.conduit-services.com/usa[...]
Vymazáno : user_pref("CT3021023.SearchProtectorEnabled", true);
Vymazáno : user_pref("CT3021023.SearchProtectorToolbarDisabled", false);
Vymazáno : user_pref("CT3021023.SendProtectorDataViaLogin", true);
Vymazáno : user_pref("CT3021023.ServiceMapLastCheckTime", "Sun Feb 05 2012 17:33:54 GMT+0100");
Vymazáno : user_pref("CT3021023.SettingsLastCheckTime", "Sun Feb 05 2012 17:33:54 GMT+0100");
Vymazáno : user_pref("CT3021023.SettingsLastUpdate", "1327132303");
Vymazáno : user_pref("CT3021023.TBHomePageUrl", "hxxp://search.conduit.com/?ctid=CT3021023&SearchSource=13");
Vymazáno : user_pref("CT3021023.ThirdPartyComponentsInterval", 504);
Vymazáno : user_pref("CT3021023.ThirdPartyComponentsLastCheck", "Sun Feb 05 2012 17:33:54 GMT+0100");
Vymazáno : user_pref("CT3021023.ThirdPartyComponentsLastUpdate", "1312887586");
Vymazáno : user_pref("CT3021023.ToolbarShrinkedFromSetup", false);
Vymazáno : user_pref("CT3021023.TrusteLinkUrl", "hxxp://trust.conduit.com/CT3021023");
Vymazáno : user_pref("CT3021023.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,clien[...]
Vymazáno : user_pref("CT3021023.UserID", "UN47459284026683324");
Vymazáno : user_pref("CT3021023.ValidationData_Toolbar", 1);
Vymazáno : user_pref("CT3021023.WeatherNetwork", "");
Vymazáno : user_pref("CT3021023.WeatherPollDate", "Sun Feb 05 2012 18:04:15 GMT+0100");
Vymazáno : user_pref("CT3021023.WeatherUnit", "C");
Vymazáno : user_pref("CT3021023.alertChannelId", "1412608");
Vymazáno : user_pref("CT3021023.backendstorage.3021023a129513203649046645000000paramsgk0", "7B22757064617465526[...]
Vymazáno : user_pref("CT3021023.backendstorage.3021023a129513207310749520000000paramsgk0", "7B22757064617465526[...]
Vymazáno : user_pref("CT3021023.backendstorage.3021023a129513207310749520000000twittertemplate_notify_followers[...]
Vymazáno : user_pref("CT3021023.backendstorage.3021023a129513207310749520000000twittertemplate_notify_followers[...]
Vymazáno : user_pref("CT3021023.backendstorage.3021023a129513207310749520000000twittertemplate_notify_following[...]
Vymazáno : user_pref("CT3021023.backendstorage.3021023a129513207310749520000000twittertemplate_notify_following[...]
Vymazáno : user_pref("CT3021023.backendstorage.3021023a129513207310749520000000twittertemplate_notify_home", "3[...]
Vymazáno : user_pref("CT3021023.backendstorage.3021023a129513207310749520000000twittertemplate_notify_home_coun[...]
Vymazáno : user_pref("CT3021023.backendstorage.autocompletepro_enable", "31");
Vymazáno : user_pref("CT3021023.backendstorage.autocompletepro_enable_auto", "31");
Vymazáno : user_pref("CT3021023.backendstorage.cbfirsttime", "53756E2046656220303520323031322031373A33343A30332[...]
Vymazáno : user_pref("CT3021023.backendstorage.shoppingapp.gk.exipres", "4672692046656220313020323031322031373A[...]
Vymazáno : user_pref("CT3021023.backendstorage.shoppingapp.gk.geolocation", "637A6563682072657075626C6963");
Vymazáno : user_pref("CT3021023.backendstorage.twittertemplate_3021023a129513207310749520000000_dailyactivity",[...]
Vymazáno : user_pref("CT3021023.backendstorage.twittertemplate_3021023a129513207310749520000000_lifetimesent", [...]
Vymazáno : user_pref("CT3021023.components.1000034", true);
Vymazáno : user_pref("CT3021023.components.1000234", true);
Vymazáno : user_pref("CT3021023.components.1000515", true);
Vymazáno : user_pref("CT3021023.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.c[...]
Vymazáno : user_pref("CT3021023.globalFirstTimeInfoLastCheckTime", "Sun Feb 05 2012 17:33:57 GMT+0100");
Vymazáno : user_pref("CT3021023.homepageProtectorEnableByLogin", true);
Vymazáno : user_pref("CT3021023.initDone", true);
Vymazáno : user_pref("CT3021023.isAppTrackingManagerOn", true);
Vymazáno : user_pref("CT3021023.isFirstRadioInstallation", false);
Vymazáno : user_pref("CT3021023.myStuffEnabled", true);
Vymazáno : user_pref("CT3021023.myStuffPublihserMinWidth", 400);
Vymazáno : user_pref("CT3021023.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...]
Vymazáno : user_pref("CT3021023.myStuffServiceIntervalMM", 1440);
Vymazáno : user_pref("CT3021023.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...]
Vymazáno : user_pref("CT3021023.revertSettingsEnabled", true);
Vymazáno : user_pref("CT3021023.searchProtectorDialogDelayInSec", 10);
Vymazáno : user_pref("CT3021023.searchProtectorEnableByLogin", true);
Vymazáno : user_pref("CT3021023.testingCtid", "");
Vymazáno : user_pref("CT3021023.toolbarAppMetaDataLastCheckTime", "Sun Feb 05 2012 17:33:56 GMT+0100");
Vymazáno : user_pref("CT3021023.toolbarContextMenuLastCheckTime", "Sun Feb 05 2012 17:33:57 GMT+0100");
Vymazáno : user_pref("CT3021023.usagesFlag", 2);
Vymazáno : user_pref("CommunityToolbar.ConduitHomepagesList", "hxxp://search.conduit.com/?ctid=CT3021023&Search[...]
Vymazáno : user_pref("CommunityToolbar.ConduitSearchList", "brothersoft afc Customized Web Search");
Vymazáno : user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit.com/root/CT3021023/CT3021023[...]
Vymazáno : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/1412608/1408264/CZ", "\"0\"[...]
Vymazáno : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT3021023", [...]
Vymazáno : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&lo[...]
Vymazáno : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&loc[...]
Vymazáno : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&lo[...]
Vymazáno : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&local[...]
Vymazáno : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\[...]
Vymazáno : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.8.[...]
Vymazáno : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT3021023",[...]
Vymazáno : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=en", "\"cde[...]
Vymazáno : user_pref("CommunityToolbar.LatestLibsPath", "file:///C:\\Users\\Marty\\AppData\\Roaming\\Mozilla\\F[...]
Vymazáno : user_pref("CommunityToolbar.LatestToolbarVersionInstalled", "3.8.1.0");
Vymazáno : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "hxxp://isearch.avg.com/search?cid=%7Bda2[...]
Vymazáno : user_pref("CommunityToolbar.ToolbarsList", "CT3021023");
Vymazáno : user_pref("CommunityToolbar.ToolbarsList2", "CT3021023");
Vymazáno : user_pref("CommunityToolbar.ToolbarsList4", "CT3021023");
Vymazáno : user_pref("CommunityToolbar.globalUserId", "5396c46a-bdcc-4693-94ee-558a82ea397c");
Vymazáno : user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true);
Vymazáno : user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true);
Vymazáno : user_pref("CommunityToolbar.keywordURLSelectedCTID", "CT3021023");
Vymazáno : user_pref("CommunityToolbar.notifications.alertDialogsGetterLastCheckTime", "Sun Feb 05 2012 17:33:5[...]
Vymazáno : user_pref("CommunityToolbar.notifications.alertEnabled", true);
Vymazáno : user_pref("CommunityToolbar.notifications.alertInfoInterval", 60);
Vymazáno : user_pref("CommunityToolbar.notifications.alertInfoLastCheckTime", "Sun Feb 05 2012 17:34:13 GMT+010[...]
Vymazáno : user_pref("CommunityToolbar.notifications.clientsServerUrl", "hxxp://alert.client.conduit.com");
Vymazáno : user_pref("CommunityToolbar.notifications.locale", "en");
Vymazáno : user_pref("CommunityToolbar.notifications.loginIntervalMin", 1440);
Vymazáno : user_pref("CommunityToolbar.notifications.loginLastCheckTime", "Sun Feb 05 2012 17:33:56 GMT+0100");
Vymazáno : user_pref("CommunityToolbar.notifications.loginLastUpdateTime", "1313487611");
Vymazáno : user_pref("CommunityToolbar.notifications.messageShowTimeSec", 20);
Vymazáno : user_pref("CommunityToolbar.notifications.servicesServerUrl", "hxxp://alert.services.conduit.com");
Vymazáno : user_pref("CommunityToolbar.notifications.showTrayIcon", false);
Vymazáno : user_pref("CommunityToolbar.notifications.userCloseIntervalMin", 300);
Vymazáno : user_pref("CommunityToolbar.notifications.userId", "5213eaf9-6f87-438e-87be-7fe4701e306b");
Vymazáno : user_pref("CommunityToolbar.originalHomepage", "hxxp://start.icq.com/");
Vymazáno : user_pref("CommunityToolbar.originalSearchEngine", "AVG Secure Search");
Vymazáno : user_pref("browser.babylon.HPOnNewTab", "search.babylon.com");
Vymazáno : user_pref("browser.search.defaultenginename", "AVG Secure Search");
Vymazáno : user_pref("browser.search.defaultthis.engineName", "brothersoft afc Customized Web Search");
Vymazáno : user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3021023&Sea[...]
Vymazáno : user_pref("browser.search.order.1", "Search the web (Babylon)");
Vymazáno : user_pref("extensions.BabylonToolbar.admin", false);
Vymazáno : user_pref("extensions.BabylonToolbar.aflt", "babsst");
Vymazáno : user_pref("extensions.BabylonToolbar.babExt", "");
Vymazáno : user_pref("extensions.BabylonToolbar.babTrack", "affID=109980");
Vymazáno : user_pref("extensions.BabylonToolbar.dfltLng", "en");
Vymazáno : user_pref("extensions.BabylonToolbar.dfltSrch", true);
Vymazáno : user_pref("extensions.BabylonToolbar.hmpg", true);
Vymazáno : user_pref("extensions.BabylonToolbar.id", "fcc193f800000000000000ffa4db18e9");
Vymazáno : user_pref("extensions.BabylonToolbar.instlDay", "15452");
Vymazáno : user_pref("extensions.BabylonToolbar.instlRef", "sst");
Vymazáno : user_pref("extensions.BabylonToolbar.keyWordUrl", "hxxp://search.babylon.com/?affID=109980&babsrc=KW[...]
Vymazáno : user_pref("extensions.BabylonToolbar.lastVrsnTs", "1.5.3.1714:05:09");
Vymazáno : user_pref("extensions.BabylonToolbar.newTab", false);
Vymazáno : user_pref("extensions.BabylonToolbar.newTabUrl", "hxxp://search.babylon.com/?affID=109980&babsrc=NT_[...]
Vymazáno : user_pref("extensions.BabylonToolbar.noFFXTlbr", false);
Vymazáno : user_pref("extensions.BabylonToolbar.prdct", "BabylonToolbar");
Vymazáno : user_pref("extensions.BabylonToolbar.prtnrId", "babylon");
Vymazáno : user_pref("extensions.BabylonToolbar.smplGrp", "none");
Vymazáno : user_pref("extensions.BabylonToolbar.srcExt", "ss");
Vymazáno : user_pref("extensions.BabylonToolbar.tlbrId", "base");
Vymazáno : user_pref("extensions.BabylonToolbar.vrsn", "1.5.3.17");
Vymazáno : user_pref("extensions.BabylonToolbar.vrsnTs", "1.5.3.1714:05:09");
Vymazáno : user_pref("extensions.BabylonToolbar.vrsni", "1.5.3.17");
Vymazáno : user_pref("extensions.BabylonToolbar_i.aflt", "babsst");
Vymazáno : user_pref("extensions.BabylonToolbar_i.babExt", "");
Vymazáno : user_pref("extensions.BabylonToolbar_i.babTrack", "affID=109980");
Vymazáno : user_pref("extensions.BabylonToolbar_i.hardId", "fcc193f800000000000000ffa4db18e9");
Vymazáno : user_pref("extensions.BabylonToolbar_i.id", "fcc193f800000000000000ffa4db18e9");
Vymazáno : user_pref("extensions.BabylonToolbar_i.instlDay", "15452");
Vymazáno : user_pref("extensions.BabylonToolbar_i.instlRef", "sst");
Vymazáno : user_pref("extensions.BabylonToolbar_i.newTab", false);
Vymazáno : user_pref("extensions.BabylonToolbar_i.prdct", "BabylonToolbar");
Vymazáno : user_pref("extensions.BabylonToolbar_i.prtnrId", "babylon");
Vymazáno : user_pref("extensions.BabylonToolbar_i.smplGrp", "none");
Vymazáno : user_pref("extensions.BabylonToolbar_i.srcExt", "ss");
Vymazáno : user_pref("extensions.BabylonToolbar_i.tlbrId", "base");
Vymazáno : user_pref("extensions.BabylonToolbar_i.vrsn", "1.5.3.17");
Vymazáno : user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.5.3.1714:05:09");
Vymazáno : user_pref("extensions.BabylonToolbar_i.vrsni", "1.5.3.17");
Vymazáno : user_pref("icqtoolbar.allowSendURL", false);
Vymazáno : user_pref("icqtoolbar.engineVerified", true);
Vymazáno : user_pref("icqtoolbar.geolastmodified", 1346767737);
Vymazáno : user_pref("icqtoolbar.hiddenElements", "itb_options");
Vymazáno : user_pref("icqtoolbar.history", "idnes||pokerman||bestpokertorrents||drag%20the%20bar||google%20p%C5[...]
Vymazáno : user_pref("icqtoolbar.icqgeo", 42);
Vymazáno : user_pref("icqtoolbar.installTime", "1278510864");
Vymazáno : user_pref("icqtoolbar.installsource", "1");
Vymazáno : user_pref("icqtoolbar.itbsitescount", 0);
Vymazáno : user_pref("icqtoolbar.newtab_state", "1");
Vymazáno : user_pref("icqtoolbar.numberOfSearches", 1);
Vymazáno : user_pref("icqtoolbar.previousFFVersion", "3.6.12");
Vymazáno : user_pref("icqtoolbar.skip_default_search", "no");
Vymazáno : user_pref("icqtoolbar.uniqueID", "127825000912782501921278510864493");
Vymazáno : user_pref("icqtoolbar.usageStatstTimestamp", 1328459634);
Vymazáno : user_pref("icqtoolbar.version", "2.0.0.4");

-\\ Google Chrome v28.0.1500.72

Soubor : C:\Users\Marty\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] Soubor je eistý.

*************************

AdwCleaner[R1].txt - [27909 octets] - [16/07/2013 17:56:19]
AdwCleaner[S1].txt - [28028 octets] - [16/07/2013 18:01:14]

########## EOF - C:\AdwCleaner[S1].txt - [28089 octets] ##########

Stahnete Service Repair http://kb.eset.com/library/ESET/KB%20Te ... Repair.exe

• Ulozte nejlepe na Plochu
• Spustte a potvrdte Yes abyste potvrdil reinstalaci sluzeb
• Nasledne kliknutim na Yes potvrdte restart PC
• Na Plose vznikne slozka CC Support, najdete tam log SvcRepair.txt - mel by byt CC Support\Logs\SvcRepair.txt - vlozte mi jej sem

here:

Log Opened: 2013-07-16 @ 18:15:00
18:15:00 - -----------------
18:15:00 - | Begin Logging |
18:15:00 - -----------------
18:15:00 - Fix started on a WIN_7 X64 computer
18:15:00 - Prep in progress. Please Wait.
18:15:01 - Prep complete
18:15:01 - Repairing Services Now. Please wait...
INFO: The restore action ignores the object name parameter (paths are read from the backup file). However, other actions that require the object name may be combined with -restore.
INFORMATION: Input file for restore operation opened: '.\Win7\BFE.sddl'
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\BFE\Parameters\Policy\Persistent\SubLayer>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\BFE\Parameters\Policy\Persistent\Provider>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\BFE\Parameters\Policy\Persistent\Filter>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\BFE\Parameters\Policy\Persistent>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\BFE\Parameters\Policy\BootTime\Filter>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\BFE\Parameters\Policy\BootTime>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\BFE\Parameters\Policy>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\BFE\Parameters>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\BFE>

SetACL finished successfully.
INFO: The restore action ignores the object name parameter (paths are read from the backup file). However, other actions that require the object name may be combined with -restore.
INFORMATION: Input file for restore operation opened: '.\Win7\BITS.sddl'
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\BITS\Security>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\BITS\Performance>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\BITS\Parameters>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\BITS>

SetACL finished successfully.
INFO: The restore action ignores the object name parameter (paths are read from the backup file). However, other actions that require the object name may be combined with -restore.
INFORMATION: Input file for restore operation opened: '.\Win7\iphlpsvc.sddl'
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\iphlpsvc\Teredo>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\iphlpsvc\Parameters\Teredo\{FA88062C-9A61-4C1E-AC45-7143F8F01AAD}>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\iphlpsvc\Parameters\Teredo>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\iphlpsvc\Parameters\Isatap\{8AD2FB26-F91E-44F1-9B24-3C0AE56C9CE0}>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\iphlpsvc\Parameters\Isatap>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\iphlpsvc\Parameters\IPHTTPS>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\iphlpsvc\Parameters>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\iphlpsvc\Interfaces>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\iphlpsvc\config>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\iphlpsvc>

SetACL finished successfully.
INFO: The restore action ignores the object name parameter (paths are read from the backup file). However, other actions that require the object name may be combined with -restore.
INFORMATION: Input file for restore operation opened: '.\Win7\MpsSvc.sddl'
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\MpsSvc\Security>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\MpsSvc\Parameters\PortKeywords\Teredo>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\MpsSvc\Parameters\PortKeywords\RPC-EPMap>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\MpsSvc\Parameters\PortKeywords\IPTLSOut>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\MpsSvc\Parameters\PortKeywords\IPTLSIn>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\MpsSvc\Parameters\PortKeywords\DHCP>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\MpsSvc\Parameters\PortKeywords>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\MpsSvc\Parameters>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\MpsSvc>

SetACL finished successfully.
INFO: The restore action ignores the object name parameter (paths are read from the backup file). However, other actions that require the object name may be combined with -restore.
INFORMATION: Input file for restore operation opened: '.\Win7\SharedAccess.sddl'
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\Logging>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\SharedAccess\Parameters\FirewallPolicy\RestrictedServices\Static\System>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\SharedAccess\Parameters\FirewallPolicy\RestrictedServices\Static>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\SharedAccess\Parameters\FirewallPolicy\RestrictedServices\Configurable\System>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\SharedAccess\Parameters\FirewallPolicy\RestrictedServices\Configurable>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\SharedAccess\Parameters\FirewallPolicy\RestrictedServices>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile\Logging>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile\GloballyOpenPorts>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile\AuthorizedApplications>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\Logging>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\SharedAccess\Parameters\FirewallPolicy>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\SharedAccess\Parameters>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\SharedAccess\Epoch2>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\SharedAccess\Epoch>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\SharedAccess\Defaults\FirewallPolicy\StandardProfile\Logging>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\SharedAccess\Defaults\FirewallPolicy\StandardProfile>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\SharedAccess\Defaults\FirewallPolicy\PublicProfile\Logging>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\SharedAccess\Defaults\FirewallPolicy\PublicProfile>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\SharedAccess\Defaults\FirewallPolicy\FirewallRules>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\SharedAccess\Defaults\FirewallPolicy\DomainProfile\Logging>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\SharedAccess\Defaults\FirewallPolicy\DomainProfile>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\SharedAccess\Defaults\FirewallPolicy>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\SharedAccess\Defaults>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\SharedAccess>

SetACL finished successfully.
INFO: The restore action ignores the object name parameter (paths are read from the backup file). However, other actions that require the object name may be combined with -restore.
INFORMATION: Input file for restore operation opened: '.\Win7\WinDefend.sddl'
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\WinDefend\TriggerInfo\0>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\WinDefend\TriggerInfo>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\WinDefend\Security>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\WinDefend\Parameters>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\WinDefend>

SetACL finished successfully.
INFO: The restore action ignores the object name parameter (paths are read from the backup file). However, other actions that require the object name may be combined with -restore.
INFORMATION: Input file for restore operation opened: '.\Win7\wscsvc.sddl'
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\wscsvc\Security>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\wscsvc\Parameters>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\wscsvc>

SetACL finished successfully.
INFO: The restore action ignores the object name parameter (paths are read from the backup file). However, other actions that require the object name may be combined with -restore.
INFORMATION: Input file for restore operation opened: '.\Win7\wuauserv.sddl'
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\wuauserv\Security>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\wuauserv\Parameters>
INFORMATION: Restoring SD of: <machine\System\CurrentControlset\Services\wuauserv>

SetACL finished successfully.
18:15:02 - Services Repair Complete.
18:15:26 - Reboot Initiated

Uz to vypada nadejne

Pokud nemate, tak presunte Combofix na plochu

• Spustte poznamkovy blok (Start-spustit-notepad)
• Zkopirujte skript nize

• Kód: Vybrat vše

  KillAll::
  
  File::
  C:\Windows\tasks\Adobe Flash Player Updater.job
  C:\Windows\tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job
  C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
  C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
  C:\Windows\system32\drivers\EsgScanner.sys
  
  Driver::
  esgiguard
  EsgScanner
  
  Folder::
  C:\Program Files\Enigma Software Group
  
  RegNull::
  [HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*1*]
  [HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*2*]
  [HKEY_LOCAL_MACHINE\software\Microsoft\Cryptography\RNG*]
  
  RegLock::
  [HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\Approved Extensions]
  [HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\ApprovedExtensionsMigration]
  [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
  [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
  [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
  [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
  [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
  [HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*1*]
  [HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*1*\CLSID]
  [HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*2*]
  [HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*2*\CLSID]
  [HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
  [HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
  [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}]
  [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
  
  ClearJavaCache::
  
  Reboot::

• Ulozte vytvoreny TXT jako CFScript.txt
• Pretahnete vytvoreny CFScript.txt nad Combofix a pustte (viz obrazek nize)
  
• Po aplikaci skriptu (a pripadnem restartu) na Vas vypadne log, jeho obsah sem vlozte

Pokud vyskoci hlaska "Pokus pouzit neplatnou operaci na klic registru, ktery je oznacen pro odstraneni", tak jen restartujte PC - registr se da do kupy - jedna se o vnitrni chybu, kterou zpusobuje CF a autor ji zatim neumi bohuzel opravit

Muze se stat, ze po aplikaci skriptu nenabehnou windows, v tomto pripade restartuje PC a mackejte F8 a zvolte Posledni znamou konfiguraci

btw: mám vypnout avast?

Ano, vypnete jej - klik pravym na jeho kouli v pravem dolnim rohu, Ovladani stitu Avast, Vypnout do retartu

ComboFix 13-07-15.01 - Marty 16/07/2013 18:36:31.2.4 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.6142.4004 [GMT 2:00]
Spuštěný z: c:\users\Marty\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\Marty\Desktop\CFScript.txt
AV: avast! Antivirus *Enabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Enabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Vytvořen nový Bod Obnovení
.
FILE ::
"c:\windows\system32\drivers\EsgScanner.sys"
"c:\windows\tasks\Adobe Flash Player Updater.job"
"c:\windows\tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job"
"c:\windows\tasks\GoogleUpdateTaskMachineCore.job"
"c:\windows\tasks\GoogleUpdateTaskMachineUA.job"
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_ESGIGUARD
-------\Legacy_ESGSCANNER
-------\Service_esgiguard
-------\Service_EsgScanner
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2013-06-16 do 2013-07-16 )))))))))))))))))))))))))))))))
.
.
2013-07-16 16:42 . 2013-07-16 16:42 -------- d-----w- c:\users\postgres\AppData\Local\temp
2013-07-16 16:42 . 2013-07-16 16:42 -------- d-----w- c:\users\postgres.Marty-PC\AppData\Local\temp
2013-07-16 16:42 . 2013-07-16 16:42 -------- d-----w- c:\users\postgres.Marty-PC.000\AppData\Local\temp
2013-07-16 16:42 . 2013-07-16 16:42 -------- d-----w- c:\users\elephant\AppData\Local\temp
2013-07-16 16:42 . 2013-07-16 16:42 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-07-16 15:52 . 2013-07-16 15:53 378944 ----a-w- c:\windows\system32\drivers\aswSP.sys
2013-07-16 15:52 . 2013-05-09 08:59 33400 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2013-07-16 15:52 . 2013-05-09 08:59 72016 ----a-w- c:\windows\system32\drivers\aswRdr2.sys
2013-07-16 15:52 . 2013-07-16 15:53 1030952 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2013-07-16 15:52 . 2013-05-09 08:59 64288 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2013-07-16 15:52 . 2013-07-16 15:53 189936 ----a-w- c:\windows\system32\drivers\aswVmm.sys
2013-07-16 15:52 . 2013-05-09 08:59 65336 ----a-w- c:\windows\system32\drivers\aswRvrt.sys
2013-07-16 15:52 . 2013-05-09 08:59 80816 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2013-07-16 15:52 . 2013-05-09 08:58 287840 ----a-w- c:\windows\system32\aswBoot.exe
2013-07-16 15:52 . 2013-05-09 08:58 41664 ----a-w- c:\windows\avastSS.scr
2013-07-16 15:52 . 2013-07-16 15:52 -------- d-----w- c:\program files\AVAST Software
2013-07-16 15:52 . 2013-07-16 15:52 -------- d-----w- c:\programdata\AVAST Software
2013-07-16 15:10 . 2013-07-16 15:11 -------- d-----w- c:\users\Marty\AppData\Local\CrashDumps
2013-07-16 13:47 . 2013-07-16 13:47 -------- d-----w- C:\FRST
2013-07-15 21:30 . 2013-07-15 21:30 -------- d-----w- C:\rsit
2013-07-15 21:30 . 2013-07-15 21:30 -------- d-----w- c:\program files\trend micro
2013-07-15 21:07 . 2013-07-15 21:07 -------- d-sh--w- C:\$$PendingFiles
2013-07-15 21:00 . 2013-07-15 21:00 388096 ----a-r- c:\users\Marty\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2013-07-15 21:00 . 2013-07-15 21:00 -------- d-----w- c:\program files (x86)\Trend Micro
2013-07-15 18:02 . 2012-06-22 10:01 22704 ----a-w- c:\windows\system32\drivers\EsgScanner.sys
2013-07-15 18:02 . 2013-07-15 18:02 110080 ----a-r- c:\users\Marty\AppData\Roaming\Microsoft\Installer\{67E1227E-D553-4A6A-96CD-40CCBBC705D8}\IconF7A21AF7.exe
2013-07-15 18:02 . 2013-07-15 18:02 110080 ----a-r- c:\users\Marty\AppData\Roaming\Microsoft\Installer\{67E1227E-D553-4A6A-96CD-40CCBBC705D8}\IconD7F16134.exe
2013-07-15 18:02 . 2013-07-15 18:02 110080 ----a-r- c:\users\Marty\AppData\Roaming\Microsoft\Installer\{67E1227E-D553-4A6A-96CD-40CCBBC705D8}\Icon1226A4C5.exe
2013-07-15 18:02 . 2013-07-15 18:02 -------- d-----w- C:\sh4ldr
2013-07-15 18:01 . 2013-07-15 18:02 -------- d-----w- c:\windows\67E1227ED5534A6A96CD40CCBBC705D8.TMP
2013-07-15 16:40 . 2013-07-16 11:37 -------- d-----w- c:\windows\system32\drivers\NAVx64
2013-07-15 16:40 . 2013-07-16 14:48 -------- d-----w- c:\programdata\NortonInstaller
2013-07-15 15:53 . 2013-07-15 15:53 -------- d-----w- C:\VTRoot
2013-07-15 13:36 . 2013-07-15 13:36 -------- d-----w- c:\program files\PostgreSQL
2013-07-15 12:41 . 2013-07-15 13:02 -------- d-----w- c:\users\Marty\AppData\Roaming\postgresql
2013-07-12 09:15 . 2013-07-12 09:15 -------- d-----w- c:\users\Marty\AppData\Roaming\TuneUp Software
2013-07-11 20:23 . 2013-07-11 20:23 225280 ----a-w- c:\programdata\Microsoft\Media Tools\MediaIconsOverlays.dll
2013-07-11 20:23 . 2013-07-11 20:23 -------- d-----w- c:\program files (x86)\x264 Video Codec
2013-06-20 17:04 . 2013-06-20 17:04 -------- d-----w- c:\users\Marty\AppData\Local\Sharkystrator
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-07-16 16:44 . 2009-12-11 01:46 23080 ----a-w- c:\windows\gdrv.sys
2013-07-15 20:35 . 2009-12-14 04:46 78185248 ----a-w- c:\windows\system32\MRT.exe
2013-07-12 10:00 . 2009-12-13 18:10 30528 ----a-w- c:\windows\GVTDrv64.sys
2013-06-13 13:24 . 2013-06-13 13:24 95648 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2013-06-13 13:24 . 2013-01-08 18:28 866720 ----a-w- c:\windows\SysWow64\npDeployJava1.dll
2013-06-13 13:24 . 2010-08-27 13:24 788896 ----a-w- c:\windows\SysWow64\deployJava1.dll
2013-06-12 18:46 . 2013-02-26 20:13 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-06-12 18:46 . 2013-02-26 20:13 692104 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2013-06-08 14:08 . 2013-06-15 01:01 1365504 ----a-w- c:\windows\system32\urlmon.dll
2013-06-08 14:07 . 2013-06-15 01:00 19233792 ----a-w- c:\windows\system32\mshtml.dll
2013-06-08 14:06 . 2013-06-15 01:00 2648064 ----a-w- c:\windows\system32\iertutil.dll
2013-06-08 14:06 . 2013-06-15 01:00 526336 ----a-w- c:\windows\system32\ieui.dll
2013-06-08 14:06 . 2013-06-15 01:00 15404544 ----a-w- c:\windows\system32\ieframe.dll
2013-06-08 12:28 . 2013-06-15 01:01 2706432 ----a-w- c:\windows\system32\mshtml.tlb
2013-06-08 11:13 . 2013-06-15 01:01 2706432 ----a-w- c:\windows\SysWow64\mshtml.tlb
2013-05-17 01:25 . 2013-06-13 01:02 1767936 ----a-w- c:\windows\SysWow64\wininet.dll
2013-05-17 01:25 . 2013-06-13 01:02 2877440 ----a-w- c:\windows\SysWow64\jscript9.dll
2013-05-17 01:25 . 2013-06-13 01:02 61440 ----a-w- c:\windows\SysWow64\iesetup.dll
2013-05-17 01:25 . 2013-06-13 01:02 109056 ----a-w- c:\windows\SysWow64\iesysprep.dll
2013-05-17 00:59 . 2013-06-13 01:02 51712 ----a-w- c:\windows\system32\ie4uinit.exe
2013-05-17 00:59 . 2013-06-13 01:02 2241024 ----a-w- c:\windows\system32\wininet.dll
2013-05-17 00:58 . 2013-06-13 01:02 603136 ----a-w- c:\windows\system32\msfeeds.dll
2013-05-17 00:58 . 2013-06-13 01:02 855552 ----a-w- c:\windows\system32\jscript.dll
2013-05-17 00:58 . 2013-06-13 01:02 3958784 ----a-w- c:\windows\system32\jscript9.dll
2013-05-17 00:58 . 2013-06-13 01:02 53248 ----a-w- c:\windows\system32\jsproxy.dll
2013-05-17 00:58 . 2013-06-13 01:02 67072 ----a-w- c:\windows\system32\iesetup.dll
2013-05-17 00:58 . 2013-06-13 01:02 39936 ----a-w- c:\windows\system32\iernonce.dll
2013-05-17 00:58 . 2013-06-13 01:02 136704 ----a-w- c:\windows\system32\iesysprep.dll
2013-05-14 12:23 . 2013-06-13 01:02 89600 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe
2013-05-14 08:40 . 2013-06-13 01:02 71680 ----a-w- c:\windows\SysWow64\RegisterIEPKEYs.exe
2013-05-13 05:51 . 2013-06-12 07:51 184320 ----a-w- c:\windows\system32\cryptsvc.dll
2013-05-13 05:51 . 2013-06-12 07:51 1464320 ----a-w- c:\windows\system32\crypt32.dll
2013-05-13 05:51 . 2013-06-12 07:51 139776 ----a-w- c:\windows\system32\cryptnet.dll
2013-05-13 05:50 . 2013-06-12 07:51 52224 ----a-w- c:\windows\system32\certenc.dll
2013-05-13 04:45 . 2013-06-12 07:51 140288 ----a-w- c:\windows\SysWow64\cryptsvc.dll
2013-05-13 04:45 . 2013-06-12 07:51 1160192 ----a-w- c:\windows\SysWow64\crypt32.dll
2013-05-13 04:45 . 2013-06-12 07:51 103936 ----a-w- c:\windows\SysWow64\cryptnet.dll
2013-05-13 03:43 . 2013-06-12 07:51 1192448 ----a-w- c:\windows\system32\certutil.exe
2013-05-13 03:08 . 2013-06-12 07:51 903168 ----a-w- c:\windows\SysWow64\certutil.exe
2013-05-13 03:08 . 2013-06-12 07:51 43008 ----a-w- c:\windows\SysWow64\certenc.dll
2013-05-10 05:49 . 2013-06-12 07:51 30720 ----a-w- c:\windows\system32\cryptdlg.dll
2013-05-10 03:20 . 2013-06-12 07:51 24576 ----a-w- c:\windows\SysWow64\cryptdlg.dll
2013-05-08 06:39 . 2013-06-12 07:51 1910632 ----a-w- c:\windows\system32\drivers\tcpip.sys
2013-05-07 01:03 . 2013-05-07 01:03 719360 ----a-w- c:\windows\SysWow64\mshtmlmedia.dll
2013-05-07 01:03 . 2013-05-07 01:03 523264 ----a-w- c:\windows\SysWow64\vbscript.dll
2013-05-07 01:03 . 2013-05-07 01:03 226304 ----a-w- c:\windows\system32\elshyph.dll
2013-05-07 01:03 . 2013-05-07 01:03 185344 ----a-w- c:\windows\SysWow64\elshyph.dll
2013-05-07 01:03 . 2013-05-07 01:03 158720 ----a-w- c:\windows\SysWow64\msls31.dll
2013-05-07 01:03 . 2013-05-07 01:03 150528 ----a-w- c:\windows\SysWow64\iexpress.exe
2013-05-07 01:03 . 2013-05-07 01:03 138752 ----a-w- c:\windows\SysWow64\wextract.exe
2013-05-07 01:03 . 2013-05-07 01:03 137216 ----a-w- c:\windows\SysWow64\ieUnatt.exe
2013-05-07 01:03 . 2013-05-07 01:03 1054720 ----a-w- c:\windows\system32\MsSpellCheckingFacility.exe
2013-05-07 01:03 . 2013-05-07 01:03 73728 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe
2013-05-07 01:03 . 2013-05-07 01:03 61952 ----a-w- c:\windows\SysWow64\tdc.ocx
2013-05-07 01:03 . 2013-05-07 01:03 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll
2013-05-07 01:03 . 2013-05-07 01:03 38400 ----a-w- c:\windows\SysWow64\imgutil.dll
2013-05-07 01:03 . 2013-05-07 01:03 361984 ----a-w- c:\windows\SysWow64\html.iec
2013-05-07 01:03 . 2013-05-07 01:03 12800 ----a-w- c:\windows\SysWow64\mshta.exe
2013-05-07 01:03 . 2013-05-07 01:03 110592 ----a-w- c:\windows\SysWow64\IEAdvpack.dll
2013-05-07 01:03 . 2013-05-07 01:03 905728 ----a-w- c:\windows\system32\mshtmlmedia.dll
2013-05-07 01:03 . 2013-05-07 01:03 81408 ----a-w- c:\windows\system32\icardie.dll
2013-05-07 01:03 . 2013-05-07 01:03 762368 ----a-w- c:\windows\system32\ieapfltr.dll
2013-05-07 01:03 . 2013-05-07 01:03 452096 ----a-w- c:\windows\system32\dxtmsft.dll
2013-05-07 01:03 . 2013-05-07 01:03 441856 ----a-w- c:\windows\system32\html.iec
2013-05-07 01:03 . 2013-05-07 01:03 281600 ----a-w- c:\windows\system32\dxtrans.dll
2013-05-07 01:03 . 2013-05-07 01:03 270848 ----a-w- c:\windows\system32\iedkcs32.dll
2013-05-07 01:03 . 2013-05-07 01:03 235008 ----a-w- c:\windows\system32\url.dll
2013-05-07 01:03 . 2013-05-07 01:03 23040 ----a-w- c:\windows\SysWow64\licmgr10.dll
2013-05-07 01:03 . 2013-05-07 01:03 216064 ----a-w- c:\windows\system32\msls31.dll
2013-05-07 01:03 . 2013-05-07 01:03 197120 ----a-w- c:\windows\system32\msrating.dll
2013-05-07 01:03 . 2013-05-07 01:03 1509376 ----a-w- c:\windows\system32\inetcpl.cpl
2013-05-07 01:03 . 2013-05-07 01:03 1441280 ----a-w- c:\windows\SysWow64\inetcpl.cpl
2013-05-07 01:03 . 2013-05-07 01:03 1400416 ----a-w- c:\windows\system32\ieapfltr.dat
2013-05-07 01:03 . 2013-05-07 01:03 97280 ----a-w- c:\windows\system32\mshtmled.dll
2013-05-07 01:03 . 2013-05-07 01:03 92160 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2013-05-07 01:03 . 2013-05-07 01:03 62976 ----a-w- c:\windows\system32\pngfilt.dll
2013-05-07 01:03 . 2013-05-07 01:03 599552 ----a-w- c:\windows\system32\vbscript.dll
2013-05-07 01:03 . 2013-05-07 01:03 52224 ----a-w- c:\windows\system32\msfeedsbs.dll
2013-05-07 01:03 . 2013-05-07 01:03 51200 ----a-w- c:\windows\system32\imgutil.dll
2013-05-07 01:03 . 2013-05-07 01:03 48640 ----a-w- c:\windows\system32\mshtmler.dll
2013-05-07 01:03 . 2013-05-07 01:03 27648 ----a-w- c:\windows\system32\licmgr10.dll
2013-05-07 01:03 . 2013-05-07 01:03 247296 ----a-w- c:\windows\system32\webcheck.dll
2013-05-07 01:03 . 2013-05-07 01:03 173568 ----a-w- c:\windows\system32\ieUnatt.exe
2013-05-07 01:03 . 2013-05-07 01:03 167424 ----a-w- c:\windows\system32\iexpress.exe
2013-05-07 01:03 . 2013-05-07 01:03 149504 ----a-w- c:\windows\system32\occache.dll
2013-05-07 01:03 . 2013-05-07 01:03 144896 ----a-w- c:\windows\system32\wextract.exe
2013-05-07 01:03 . 2013-05-07 01:03 13824 ----a-w- c:\windows\system32\mshta.exe
2013-05-07 01:03 . 2013-05-07 01:03 136192 ----a-w- c:\windows\system32\iepeers.dll
2013-05-07 01:03 . 2013-05-07 01:03 135680 ----a-w- c:\windows\system32\IEAdvpack.dll
2013-05-07 01:03 . 2013-05-07 01:03 12800 ----a-w- c:\windows\system32\msfeedssync.exe
2013-05-07 01:03 . 2013-05-07 01:03 102912 ----a-w- c:\windows\system32\inseng.dll
2013-05-07 01:03 . 2013-05-07 01:03 77312 ----a-w- c:\windows\system32\tdc.ocx
2013-04-26 05:51 . 2013-06-12 07:51 751104 ----a-w- c:\windows\system32\win32spl.dll
2013-04-26 04:55 . 2013-06-12 07:51 492544 ----a-w- c:\windows\SysWow64\win32spl.dll
2013-04-25 23:30 . 2013-06-12 07:51 1505280 ----a-w- c:\windows\SysWow64\d3d11.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"JMB36X IDE Setup"="c:\windows\RaidTool\xInsIDE.exe" [2007-03-20 36864]
"ASUSGamerOSD"="c:\program files (x86)\ASUS\GamerOSD\GamerOSD.exe" [2009-07-30 380928]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2009-09-18 98304]
"EasyTuneVI"="c:\program files (x86)\GIGABYTE\ET6\ETcall.exe" [2007-07-26 20480]
"hpqSRMon"="c:\program files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe" [2008-07-22 150528]
"ArcSoft Connection Service"="c:\program files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe" [2010-10-27 207424]
"Logitech G930"="c:\program files (x86)\Logitech\G930\G930.exe" [2011-03-23 1516888]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2013-01-28 59720]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2013-05-09 4858968]
.
c:\users\Marty\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OpenOffice.org 3.1.lnk - c:\program files (x86)\OpenOffice.org 3\program\quickstart.exe [2009-9-16 384512]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
HP Digital Imaging Monitor.lnk - c:\program files (x86)\HP\Digital Imaging\bin\hpqtra08.exe [2009-9-20 270336]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 ALSysIO;ALSysIO;c:\users\Marty\AppData\Local\Temp\ALSysIO64.sys;c:\users\Marty\AppData\Local\Temp\ALSysIO64.sys [x]
R3 AmdTools64;AMD Special Tools Driver;c:\windows\system32\DRIVERS\AmdTools64.sys;c:\windows\SYSNATIVE\DRIVERS\AmdTools64.sys [x]
R3 AODDriver;AODDriver;c:\program files (x86)\Gigabyte\ET6\amd64\AODDriver.sys;c:\program files (x86)\Gigabyte\ET6\amd64\AODDriver.sys [x]
R3 B-Service;B-Service;c:\users\Marty\AppData\Roaming\Mikogo\B-Service.exe;c:\users\Marty\AppData\Roaming\Mikogo\B-Service.exe [x]
R3 cpuz130;cpuz130;c:\users\Marty\AppData\Local\Temp\cpuz130\cpuz_x64.sys;c:\users\Marty\AppData\Local\Temp\cpuz130\cpuz_x64.sys [x]
R3 ENTECH64;ENTECH64;c:\windows\system32\DRIVERS\ENTECH64.sys;c:\windows\SYSNATIVE\DRIVERS\ENTECH64.sys [x]
R3 etdrv;etdrv;c:\windows\etdrv.sys;c:\windows\etdrv.sys [x]
R3 GVTDrv64;GVTDrv64;c:\windows\GVTDrv64.sys;c:\windows\GVTDrv64.sys [x]
R3 Huawei;HUAWEI Mobile Connect - USB Smart Card Reader;c:\windows\system32\DRIVERS\ewdcsc.sys;c:\windows\SYSNATIVE\DRIVERS\ewdcsc.sys [x]
R3 hwusbdev;Huawei DataCard USB PNP Device;c:\windows\system32\DRIVERS\ewusbdev.sys;c:\windows\SYSNATIVE\DRIVERS\ewusbdev.sys [x]
R3 SandraAgentSrv;SiSoftware Deployment Agent Service;c:\program files\SiSoftware\SiSoftware Sandra Lite 2010\RpcAgentSrv.exe;c:\program files\SiSoftware\SiSoftware Sandra Lite 2010\RpcAgentSrv.exe [x]
R3 SwitchBoard;SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [x]
R3 teamviewervpn;TeamViewer VPN Adapter;c:\windows\system32\DRIVERS\teamviewervpn.sys;c:\windows\SYSNATIVE\DRIVERS\teamviewervpn.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
S0 aswRvrt;aswRvrt; [x]
S0 aswVmm;aswVmm; [x]
S0 sptd;sptd;c:\windows\\SystemRoot\System32\Drivers\sptd.sys;c:\windows\\SystemRoot\System32\Drivers\sptd.sys [x]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S1 EIO64;EIO Driver;c:\windows\system32\DRIVERS\EIO64.sys;c:\windows\SYSNATIVE\DRIVERS\EIO64.sys [x]
S1 HWiNFO32;HWiNFO32 Kernel Driver;c:\program files (x86)\HWiNFO32\HWiNFO64A.SYS;c:\program files (x86)\HWiNFO32\HWiNFO64A.SYS [x]
S2 acedrv11;acedrv11;c:\windows\system32\drivers\acedrv11.sys;c:\windows\SYSNATIVE\drivers\acedrv11.sys [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys;c:\windows\SYSNATIVE\drivers\aswMonFlt.sys [x]
S2 ES lite Service;ES lite Service for program management.;c:\program files (x86)\Gigabyte\EasySaver\ESSVR.EXE;c:\program files (x86)\Gigabyte\EasySaver\ESSVR.EXE [x]
S2 TeamViewer8;TeamViewer 8;c:\program files (x86)\TeamViewer\Version8\TeamViewer_Service.exe;c:\program files (x86)\TeamViewer\Version8\TeamViewer_Service.exe [x]
S3 LADF_BakerCOnly;BakerC Filter Driver;c:\windows\system32\DRIVERS\ladfBakerCamd64.sys;c:\windows\SYSNATIVE\DRIVERS\ladfBakerCamd64.sys [x]
S3 LADF_BakerROnly;BakerR Filter Driver;c:\windows\system32\DRIVERS\ladfBakerRamd64.sys;c:\windows\SYSNATIVE\DRIVERS\ladfBakerRamd64.sys [x]
S3 RTL8167;Ovladač Realtek 8167 NT;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-07-13 09:00 1173456 ----a-w- c:\program files (x86)\Google\Chrome\Application\28.0.1500.72\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2013-07-16 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-02-26 18:46]
.
2013-07-16 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-01-21 07:56]
.
2013-07-16 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-01-21 07:56]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2013-05-09 08:58 133840 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2009-01-20 6963744]
"Skytel"="c:\program files\Realtek\Audio\HDA\Skytel.exe" [2009-01-20 1833504]
"Logitech Download Assistant"="c:\windows\System32\LogiLDA.dll" [2012-09-20 1832760]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = about:blank
uDefault_Search_URL = hxxp://www.google.com/ie
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = *.local
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: E&nviar para o OneNote - c:\progra~2\MICROS~1\Office14\ONBttnIE.dll/105
IE: E&xportar para o Microsoft Excel - c:\progra~2\MICROS~1\Office14\EXCEL.EXE/3000
IE: WikiKomentáře Google... - c:\program files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll/cmsidewiki.html
IE: {{90EAE591-7E7E-434a-8E28-ECFD00071806} - c:\program files (x86)\PokerStars.FR\PokerStarsUpdate.exe
IE: {{C53BFCFC-7A54-4627-AEBA-2CD4871FCA97} - c:\microgaming\Poker\UnibetpokerMPP\MPPoker.exe
TCP: DhcpNameServer = 192.168.0.1
FF - ProfilePath - c:\users\Marty\AppData\Roaming\Mozilla\Firefox\Profiles\z849xsjq.default\
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
ShellIconOverlayIdentifiers-{1EC23CFF-4C58-458f-924C-8519AEF61B32} - (no file)
AddRemove-Unibet - c:\microgaming\Casino\Unibet\install.exe
AddRemove-{F0A209B7-7F85-4BDD-8F1F-B98EEAD9E04B} - c:\program files (x86)\InstallShield Installation Information\{F0A209B7-7F85-4BDD-8F1F-B98EEAD9E04B}\setup.exe
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_7_700_224_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_7_700_224_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*1*]
@="?????????????????? v1"
.
[HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*1*\CLSID]
@="{E23FE9C6-778E-49D4-B537-38FCDE4887D8}"
.
[HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*2*]
@="?????????????????? v2"
.
[HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*2*\CLSID]
@="{9BE31822-FDAD-461B-AD51-BE1D1C159921}"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Cryptography\RNG*]
"Seed"=hex:49,31,f4,88,04,28,01,14,c5,ca,fa,5f,f5,cf,66,6e,1f,6c,42,48,3b,1d,
bb,84,6e,c3,98,a3,07,68,b8,a1,8e,3f,71,ca,a8,53,6d,af,a8,e5,29,51,a3,e5,99,\
"Seed"=hex:49,31,f4,88,04,28,01,14,c5,ca,fa,5f,f5,cf,66,6e,1f,6c,42,48,3b,1d,
bb,84,6e,c3,98,a3,07,68,b8,a1,8e,3f,71,ca,a8,53,6d,af,a8,e5,29,51,a3,e5,99,\
"Seed"=hex:49,31,f4,88,04,28,01,14,c5,ca,fa,5f,f5,cf,66,6e,1f,6c,42,48,3b,1d,
bb,84,6e,c3,98,a3,07,68,b8,a1,8e,3f,71,ca,a8,53,6d,af,a8,e5,29,51,a3,e5,99,\
"Seed"=hex:49,31,f4,88,04,28,01,14,c5,ca,fa,5f,f5,cf,66,6e,1f,6c,42,48,3b,1d,
bb,84,6e,c3,98,a3,07,68,b8,a1,8e,3f,71,ca,a8,53,6d,af,a8,e5,29,51,a3,e5,99,\
"Seed"=hex:49,31,f4,88,04,28,01,14,c5,ca,fa,5f,f5,cf,66,6e,1f,6c,42,48,3b,1d,
bb,84,6e,c3,98,a3,07,68,b8,a1,8e,3f,71,ca,a8,53,6d,af,a8,e5,29,51,a3,e5,99,\
"Seed"=hex:49,31,f4,88,04,28,01,14,c5,ca,fa,5f,f5,cf,66,6e,1f,6c,42,48,3b,1d,
bb,84,6e,c3,98,a3,07,68,b8,a1,8e,3f,71,ca,a8,53,6d,af,a8,e5,29,51,a3,e5,99,\
"Seed"=hex:49,31,f4,88,04,28,01,14,c5,ca,fa,5f,f5,cf,66,6e,1f,6c,42,48,3b,1d,
bb,84,6e,c3,98,a3,07,68,b8,a1,8e,3f,71,ca,a8,53,6d,af,a8,e5,29,51,a3,e5,99,\
"Seed"=hex:49,31,f4,88,04,28,01,14,c5,ca,fa,5f,f5,cf,66,6e,1f,6c,42,48,3b,1d,
bb,84,6e,c3,98,a3,07,68,b8,a1,8e,3f,71,ca,a8,53,6d,af,a8,e5,29,51,a3,e5,99,\
"Seed"=hex:49,31,f4,88,04,28,01,14,c5,ca,fa,5f,f5,cf,66,6e,1f,6c,42,48,3b,1d,
bb,84,6e,c3,98,a3,07,68,b8,a1,8e,3f,71,ca,a8,53,6d,af,a8,e5,29,51,a3,e5,99,\
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\AVAST Software\Avast\AvastSvc.exe
c:\program files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\windows\SysWOW64\ASDR.exe
c:\windows\SysWOW64\PnkBstrA.exe
c:\program files (x86)\TeamViewer\Version8\TeamViewer.exe
c:\program files (x86)\TeamViewer\Version8\tv_w32.exe
.
**************************************************************************
.
Celkový čas: 2013-07-16 18:50:08 - počítač byl restartován
ComboFix-quarantined-files.txt 2013-07-16 16:50
ComboFix2.txt 2013-07-16 11:45
.
Před spuštěním: Volných bajtů: 143 763 505 152
Po spuštění: Volných bajtů: 143 442 718 720
.
- - End Of File - - 0F7463E4CCACF6C111C31E81B032D984
A36C5E4F47E84449FF07ED3517B43A31

No dost toho bylo vykonano, jak se chova PC

Vypadá to líp, od pohledu rychlejší...Opravdu moooc děkuji..Co tedka? mám nainstalovat nějaký soft?

Co byste chtel instalovat za soft??

Odinstalujte Combofix

• Prejmenujte ComboFix na Uninstall
• Spustte jej
• Tohle smaze Combofix a jeho slozky

T-Cleaner http://vyosek.ic.cz/pro_usery/T-Cleaner.exe

• Stahnete a spustte
• Pro potvrzeni volby mackejte A, Enter
• Po pouziti utilitu smazte
• Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)

OTC http://oldtimer.geekstogo.com/OTC.exe

• Stahnete a spustte
• Kliknete na CleanUp a potvrdte YES
• Program uklidi a restartuje PC

TFC http://oldtimer.geekstogo.com/TFC.exe

• Stahnete a spustte
• Kliknete na Start a potvrdte OK
• Program uklidi a restartuje pc
• Po pouziti utilitu smazte

Stahnete Ccleaner http://forum.viry.cz/viewtopic.php?t=7478
Panel čistič

• Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner

Panel registry

• dejte Hledej problémy
• nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
• postup opakujte dokud nebude bez problemu - vetsinou cca 3x

Panel nástroje

• Zde muzete odinstalovat nepotrebne programy

CCleaner doporucuji pouzivat cca jednou za tyden

Stahnete Malwarebytes' Anti-Malware (zkracene MBAM) http://forum.viry.cz/viewtopic.php?f=29&t=115222

• Provedte aktualizaci
• Provedte uplny sken - nic nemazte
• MBAM miva obcas falesne detekce, proto vlozte log do prispevku a pockejte na posouzeni

Omlouvám se, test trval dost dlouho

Malwarebytes Anti-Malware (Zkušební verze Malwarebytes Anti-Malware.) 1.75.0.1300
www.malwarebytes.org

Verze: v2013.07.16.05

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 10.0.9200.16618
Marty :: MARTY-PC [administrátor]

Ochrana: Povolena

16/07/2013 19:44:01
MBAM-log-2013-07-16 (21-55-54).txt

Typ: Kompletní kontrola (C:\|)
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 652991
Uplynulý čas: 2 hodin, 10 minut, 14 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 3
C:\Program Files (x86)\Ubisoft\Assassin's Creed II\ubiorbitapi_r2.dll (Trojan.Agent.CK) -> Nebyla provedena žádná instrukce.
C:\Users\Marty\Documents\Azureus Downloads\TW2AoK.CRACK-SKIDROW.rar (PUP.RiskwareTool.CK) -> Nebyla provedena žádná instrukce.
C:\Users\Marty\Documents\Azureus Downloads\bin\paul.dll (PUP.RiskwareTool.CK) -> Nebyla provedena žádná instrukce.

(konec)

Nemate se zac omlouvat

Nalezy doporucuji smazat, crack\keygeny nejsou dobrota pro PC a vetsinou se z nej PC hned pekne zaviruje

PC by melo byti tudiz ciste a snad OK

Provedeno. Děkuji mnohokrát za ochotu a námahu.Thx

Nemate zac, rad jsem pomohl Zase nekdy

A na zaklade Pravidla o zamykani temat