VIRY.CZ

Logfile of random's system information tool 1.09 (written by random/random)
Run by vladkoss at 2012-11-25 20:10:35
Microsoft Windows 7 Ultimate
System drive C: has 77 GB (16%) free of 477 GB
Total RAM: 4972 MB (37% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:10:41, on 25. 11. 2012
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v9.00 (9.00.8112.16455)
Boot mode: Normal

Running processes:
C:\ProgramData\Browser Manager\2.3.787.43\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.exe
C:\Program Files (x86)\YourFileDownloader\YourFileUpdater.exe
C:\Program Files (x86)\uTorrent\uTorrent.exe
C:\Users\vladkoss\AppData\Roaming\Microsoft\Windows\Templates\msadrh10.exe
C:\Users\vladkoss\AppData\Roaming\Host.exe
C:\Users\vladkoss\AppData\Roaming\MyFolder\Manager.exe
C:\Users\vladkoss\AppData\Roaming\lservice.exe
C:\Users\vladkoss\AppData\Roaming\MyFolder\Kan3wasere.exe
C:\Users\vladkoss\AppData\Roaming\MyFolder\washere.exe
C:\Program Files (x86)\Optimizer Pro\OptProReminder.exe
C:\Users\vladkoss\AppData\Roaming\Ks\K-lsservice.exe
C:\Users\vladkoss\AppData\Roaming\KHost.exe
C:\Users\vladkoss\AppData\Roaming\K\K-lservice.exe
C:\Users\vladkoss\AppData\Roaming\K.exe
C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe
C:\Program Files (x86)\SweetIM\Messenger\SweetIM.exe
C:\Users\vladkoss\AppData\Local\Temp\lsasrv.exe
C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
C:\Users\vladkoss\AppData\Roaming\SDVC.exe
C:\Users\vladkoss\AppData\Roaming\sgghggd\condll.exe
C:\Users\vladkoss\AppData\Roaming\SDVC.exe
C:\Users\vladkoss\AppData\Roaming\sgghggd\dll.exe
C:\Windows\Microsoft.NET\Framework\v2.0.50727\InstallUtil.exe
C:\Users\vladkoss\AppData\Roaming\appdata.\conhostdll.exe
C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Users\vladkoss\AppData\Roaming\acrobatreader\condll.exe
C:\Windows\Microsoft.NET\Framework\v2.0.50727\AppLaunch.exe
C:\Windows\SysWOW64\notepad.exe
C:\Users\vladkoss\AppData\Roaming\Data\TrueVision.exe
C:\Windows\SysWOW64\notepad.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\Xleaner\Xleaner.exe
C:\Program Files (x86)\TuneUp Utilities 2013\SettingCenter.exe
C:\Users\vladkoss\Downloads\RSIT.exe
C:\Windows\SysWOW64\rundll32.exe
C:\Windows\SysWOW64\rundll32.exe
C:\Windows\SysWOW64\WerFault.exe
C:\Program Files (x86)\trend micro\vladkoss.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.babylon.com/?affID=112555 ... 5d4c82acaa
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.gboxapp.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: uTorrentControl2 Toolbar - {687578b9-7132-4a7a-80e4-30ee31099e03} - C:\Program Files (x86)\uTorrentControl2\prxtbuTor.dll
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: ADDICT-THING - {0E5AC866-6F2E-EE85-AFEC-D35460AEE772} - C:\ProgramData\ADDICT-THING\bhoclass.dll
O2 - BHO: Babylon toolbar helper - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.6.9.12\bh\BabylonToolbar.dll
O2 - BHO: Increase performance and video formats for your HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll
O2 - BHO: uTorrentControl2 - {687578b9-7132-4a7a-80e4-30ee31099e03} - C:\Program Files (x86)\uTorrentControl2\prxtbuTor.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Searchqu Toolbar - {99079a25-328f-4bd4-be04-00955acaa0a7} - C:\PROGRA~2\SEARCH~1\Datamngr\ToolBar\searchqudtx.dll
O2 - BHO: DataMngr - {9D717F81-9148-4f12-8568-69135F087DB0} - C:\PROGRA~2\SEARCH~1\Datamngr\BROWSE~1.DLL
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: TorrentToolbar BHO - {C643D00B-082F-4C25-84C5-8707B0D22306} - C:\Program Files (x86)\TorrentToolbar\TorrentToolbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O2 - BHO: SWEETIE - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
O2 - BHO: Yontoo Layers - {FD72061E-9FDE-484D-A58A-0BAB4151CAD8} - C:\Program Files (x86)\Yontoo\YontooIEClient.dll
O3 - Toolbar: SweetPacks Toolbar for Internet Explorer - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
O3 - Toolbar: uTorrentControl2 Toolbar - {687578b9-7132-4a7a-80e4-30ee31099e03} - C:\Program Files (x86)\uTorrentControl2\prxtbuTor.dll
O3 - Toolbar: (no name) - {D0F4A166-B8D4-48b8-9D63-80849FE137CB} - (no file)
O3 - Toolbar: Searchqu Toolbar - {99079a25-328f-4bd4-be04-00955acaa0a7} - C:\PROGRA~2\SEARCH~1\Datamngr\ToolBar\searchqudtx.dll
O3 - Toolbar: TorrentToolbar for Internet Explorer - {5F1A31DE-B4A3-4AD4-9431-D37F3EA03FA2} - C:\Program Files (x86)\TorrentToolbar\TorrentToolbar.dll
O4 - HKLM\..\Run: [4StoryPrePatch] C:\Program Files (x86)\4StoryEGPrePatch.exe
O4 - HKLM\..\Run: [Sweetpacks Communicator] C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe
O4 - HKLM\..\Run: [SweetIM] C:\Program Files (x86)\SweetIM\Messenger\SweetIM.exe
O4 - HKLM\..\Run: [AMD AVT] Cmd.exe /c start "AMD Accelerated Video Transcoding device initialization" /min "C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe" aml
O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [DATAMNGR] C:\PROGRA~2\SEARCH~1\Datamngr\DATAMN~1.EXE
O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [SSDMonitor] C:\Program Files (x86)\Common Files\PC Tools\sMonitor\SSDMonitor.exe
O4 - HKLM\..\Run: [RMAlert] "C:\Program Files (x86)\PC Tools Registry Mechanic\Alert.exe" /PRODUCT=RM /R
O4 - HKLM\..\Run: [OCDLMgr] RunDll32.exe C:\PROGRA~2\CHEATE~1\OPENCA~1\OCSETU~1.DLL,_MgrCheck@16
O4 - HKCU\..\Run: [Google Update] "C:\Users\vladkoss\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [EADM] "C:\Program Files (x86)\Origin\Origin.exe" -AutoStart
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [uTorrent] "C:\Program Files (x86)\uTorrent\uTorrent.exe" /MINIMIZED
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Microsoft® Windows® Operating System] C:\Users\vladkoss\AppData\Roaming\Microsoft\Windows\Templates\msadrh10.exe
O4 - HKCU\..\Run: [SySwo] C:\Users\vladkoss\AppData\Roaming\Facebookvideo\Sy64.exe
O4 - HKCU\..\Run: [NetWire] C:\Users\vladkoss\AppData\Roaming\Host.exe
O4 - HKCU\..\Run: [Sys32start] C:\Users\vladkoss\AppData\Roaming\Sys32start.exe
O4 - HKCU\..\Run: [WinDef] C:\Users\vladkoss\AppData\Roaming\WinDef.exe
O4 - HKCU\..\Run: [Wingadget] C:\Users\vladkoss\AppData\Roaming\acrobatreader\condll.exe
O4 - HKCU\..\Run: [K] C:\Users\vladkoss\AppData\Roaming\SDVC.exe
O4 - HKCU\..\Run: [Ks] C:\Users\vladkoss\AppData\Roaming\SDVdC.exe
O4 - HKCU\..\Run: [@OFF] C:\Users\vladkoss\AppData\Roaming\@OFF.exe
O4 - HKCU\..\Run: [RecycleBin] C:\Users\vladkoss\Documents\RecycleBin.exe
O4 - HKCU\..\Run: [namegoeshere] C:\Users\vladkoss\AppData\Roaming\namegoeshere.exe
O4 - HKCU\..\Run: [WMediaPlayer] C:\Users\vladkoss\AppData\Roaming\lservice.exe
O4 - HKCU\..\Run: [Optimizer Pro] C:\Program Files (x86)\Optimizer Pro\OptProLauncher.exe
O4 - HKCU\..\Run: [KWMediaPlayer] C:\Users\vladkoss\AppData\Roaming\K\K-lservice.exe
O4 - HKCU\..\Run: [KWMediaPlayers] C:\Users\vladkoss\AppData\Roaming\Ks\K-lsservice.exe
O4 - HKCU\..\Run: [NetWires] C:\Users\vladkoss\AppData\Roaming\MyFolder\NetWires.exe
O4 - HKCU\..\Run: [GooGleNetWire] C:\Users\vladkoss\AppData\Roaming\KHost.exe
O4 - HKCU\..\Run: [WindowsSystem] C:\Users\vladkoss\AppData\Roaming\K.exe
O4 - HKCU\..\Run: [mstart] C:\Users\vladkoss\AppData\Roaming\dir\arcom.exe
O4 - HKCU\..\Run: [MediaUpd] C:\Users\vladkoss\AppData\Roaming\sgghggd\dll.exe
O4 - HKCU\..\Run: [stMediaUpd] C:\Users\vladkoss\AppData\Roaming\sgghggd\condll.exe
O4 - HKCU\..\Run: [shedulescan] C:\Users\vladkoss\AppData\Roaming\appdata.\conhostdll.exe
O4 - HKCU\..\Run: [controllApps] C:\Users\vladkoss\AppData\Roaming\ap\shades.exe
O4 - HKCU\..\Run: [Manager] C:\Users\vladkoss\AppData\Roaming\MyFolder\Manager.exe
O4 - HKCU\..\Run: [Kan3wasere] C:\Users\vladkoss\AppData\Roaming\MyFolder\Kan3wasere.exe
O4 - HKCU\..\Run: [washere] C:\Users\vladkoss\AppData\Roaming\MyFolder\washere.exe
O4 - HKCU\..\Run: [RealtekAudioDRV] C:\Users\vladkoss\AppData\Roaming\Data\TrueVision.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: c:\progra~3\browse~1\23787~1.43\{16cdf~1\browse~1.dll c:\progra~3\browse~1\22643~1.41\{16cdf~1\browse~1.dll c:\progra~2\sprote~1\sprote~1.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Browser Manager - Unknown owner - C:\ProgramData\Browser Manager\2.3.787.43\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: PC Tools Startup and Shutdown Monitor service (PCToolsSSDMonitorSvc) - Unknown owner - C:\Program Files (x86)\Common Files\PC Tools\sMonitor\StartManSvc.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: SF FrontLine Drivers Auto Removal (v1) (sfrem01) - Unknown owner - C:\Windows\system32\sfrem01.exe (file missing)
O23 - Service: Skype C2C Service - Skype Technologies S.A. - C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe
O23 - Service: TunngleService - Tunngle.net GmbH - C:\Program Files (x86)\Tunngle\TnglCtrl.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 15721 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-843114130-316315272-3188138584-1001Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-843114130-316315272-3188138584-1001UA.job
C:\Windows\tasks\OptimizerPro1UpdaterTask{4812524C-4AFD-42EC-B5A6-2509E5AFFB70}.job
C:\Windows\tasks\RMAutoUpdate.job
C:\Windows\tasks\RMSchedule.job

=========Mozilla firefox=========

ProfilePath - C:\Users\vladkoss\AppData\Roaming\Mozilla\Firefox\Profiles\xnmdhtv2.default

prefs.js - "browser.startup.homepage" - "http://search.gboxapp.com/"
prefs.js - "keyword.URL" - "http://search.gboxapp.com/?q="

"{23fcfd51-4958-4f00-80a3-ae97e717ed8b}"=C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.4.402.287 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_4_402_287.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0]
"Description"=DivX Web Player
"Path"=C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0]
"Description"=DivX VOD Helper Plug-in
"Path"=C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@esn.me/esnsonar,version=0.70.4]
"Description"=ESN Sonar browser plugin
"Path"=C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@esn/esnlaunch,version=1.122.0]
"Description"=
"Path"=C:\Program Files (x86)\Battlelog Web Plugins\1.122.0\npesnlaunch.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@esn/esnlaunch,version=1.132.0]
"Description"=
"Path"=C:\Program Files (x86)\Battlelog Web Plugins\1.132.0\npesnlaunch.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.7.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Windows\SysWOW64\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.7.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=C:\Windows\system32\Wat\npWatWeb.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@pandonetworks.com/PandoWebPlugin]
"Description"=This plugin detects and launches Pando Media Booster
"Path"=C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll

C:\Program Files (x86)\Mozilla Firefox\extensions\
ffxtlbr@babylon.com
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files (x86)\Mozilla Firefox\components\
binary.manifest
browsercomps.dll

C:\Program Files (x86)\Mozilla Firefox\plugins\
libdivx.dll
npdivx32.dll
npdivx32.xpt
ssldivx.dll

C:\Program Files (x86)\Mozilla Firefox\searchplugins\
atlas-sk.xml
azet-sk.xml
babylon.xml
dunaj-sk.xml
eBay.xml
google.xml
Search_Results.xml
slovnik-sk.xml
wikipedia-sk.xml
zoznam-sk.xml

C:\Users\vladkoss\AppData\Roaming\Mozilla\Firefox\Profiles\xnmdhtv2.default\extensions\
50388b80cf6a4@50388b80cf775.info
ffxtlbr@babylon.com
{99079a25-328f-4bd4-be04-00955acaa0a7}

C:\Users\vladkoss\AppData\Roaming\Mozilla\Firefox\Profiles\xnmdhtv2.default\searchplugins\
BabylonMngr.xml
GadgetBox.xml
Search_Results.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0E5AC866-6F2E-EE85-AFEC-D35460AEE772}]
ADDICT-THING Class - C:\ProgramData\ADDICT-THING\bhoclass.dll [2012-08-25 142848]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2EECD738-5844-4a99-B4B6-146BF802613B}]
Babylon toolbar helper - C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.6.9.12\bh\BabylonToolbar.dll [2012-08-23 264192]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{326E768D-4182-46FD-9C16-1449A49795F4}]
DivX Plus Web Player HTML5 <video> - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll [2011-12-12 194432]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{687578b9-7132-4a7a-80e4-30ee31099e03}]
uTorrentControl2 Toolbar - C:\Program Files (x86)\uTorrentControl2\prxtbuTor.dll [2011-05-09 176936]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2012-09-05 449512]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{99079a25-328f-4bd4-be04-00955acaa0a7}]
Searchqu Toolbar - C:\PROGRA~2\SEARCH~1\Datamngr\ToolBar\searchqudtx.dll [2012-02-27 88976]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9D717F81-9148-4f12-8568-69135F087DB0}]
DataMngr - C:\PROGRA~2\SEARCH~1\Datamngr\BROWSE~1.DLL [2012-08-06 89016]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Browser Helper - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2012-10-02 4119744]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C643D00B-082F-4C25-84C5-8707B0D22306}]
TorrentToolbar Browser Helper - C:\Program Files (x86)\TorrentToolbar\TorrentToolbar.dll [2012-08-09 345600]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2012-09-05 157672]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}]
SweetPacks Browser Helper - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll [2012-06-04 1310040]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}]
Yontoo - C:\Program Files (x86)\Yontoo\YontooIEClient.dll [2012-05-16 194928]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{EEE6C35B-6118-11DC-9C72-001320C79847} - SweetPacks Toolbar for Internet Explorer - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll [2012-06-04 1310040]
{687578b9-7132-4a7a-80e4-30ee31099e03} - uTorrentControl2 Toolbar - C:\Program Files (x86)\uTorrentControl2\prxtbuTor.dll [2011-05-09 176936]
{D0F4A166-B8D4-48b8-9D63-80849FE137CB}
{99079a25-328f-4bd4-be04-00955acaa0a7} - Searchqu Toolbar - C:\PROGRA~2\SEARCH~1\Datamngr\ToolBar\searchqudtx.dll [2012-02-27 88976]
{5F1A31DE-B4A3-4AD4-9431-D37F3EA03FA2} - TorrentToolbar for Internet Explorer - C:\Program Files (x86)\TorrentToolbar\TorrentToolbar.dll [2012-08-09 345600]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"4StoryPrePatch"=C:\Program Files (x86)\4StoryEGPrePatch.exe []
"Sweetpacks Communicator"=C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe [2012-02-26 295728]
"SweetIM"=C:\Program Files (x86)\SweetIM\Messenger\SweetIM.exe [2012-05-29 115032]
"AMD AVT"=Cmd.exe /c start AMD Accelerated Video Transcoding device initialization /min C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe aml []
"DivXUpdate"=C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [2011-07-29 1259376]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2012-07-04 641704]
"DATAMNGR"=C:\PROGRA~2\SEARCH~1\Datamngr\DATAMN~1.EXE [2012-08-06 1890744]
"LogMeIn Hamachi Ui"=C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [2012-08-29 1996200]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2012-07-03 252848]
"SSDMonitor"=C:\Program Files (x86)\Common Files\PC Tools\sMonitor\SSDMonitor.exe [2012-04-26 103896]
"RMAlert"=C:\Program Files (x86)\PC Tools Registry Mechanic\Alert.exe [2012-04-26 1318872]
"OCDLMgr"=C:\PROGRA~2\CHEATE~1\OPENCA~1\OCSETU~1.DLL,_MgrCheck@16 []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Google Update"=C:\Users\vladkoss\AppData\Local\Google\Update\GoogleUpdate.exe [2012-06-02 116648]
"EADM"=C:\Program Files (x86)\Origin\Origin.exe [2012-09-06 3341464]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2012-05-03 17355912]
"uTorrent"=C:\Program Files (x86)\uTorrent\uTorrent.exe [2012-08-25 896400]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-07-14 1475072]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2012-04-17 3671872]
"Microsoft® Windows® Operating System"=C:\Users\vladkoss\AppData\Roaming\Microsoft\Windows\Templates\msadrh10.exe [2012-09-17 5632]
"SySwo"=C:\Users\vladkoss\AppData\Roaming\Facebookvideo\Sy64.exe []
"NetWire"=C:\Users\vladkoss\AppData\Roaming\Host.exe [2012-07-27 59904]
"Sys32start"=C:\Users\vladkoss\AppData\Roaming\Sys32start.exe [2012-08-07 648192]
"WinDef"=C:\Users\vladkoss\AppData\Roaming\WinDef.exe [2012-08-10 496128]
"Wingadget"=C:\Users\vladkoss\AppData\Roaming\acrobatreader\condll.exe [2012-08-11 630784]
"K"=C:\Users\vladkoss\AppData\Roaming\SDVC.exe [2012-08-14 368640]
"Ks"=C:\Users\vladkoss\AppData\Roaming\SDVdC.exe []
"@OFF"=C:\Users\vladkoss\AppData\Roaming\@OFF.exe [2012-08-14 496128]
"RecycleBin"=C:\Users\vladkoss\Documents\RecycleBin.exe [2012-08-15 769536]
"namegoeshere"=C:\Users\vladkoss\AppData\Roaming\namegoeshere.exe [2012-08-21 360448]
"WMediaPlayer"=C:\Users\vladkoss\AppData\Roaming\lservice.exe [2012-08-22 462848]
"Optimizer Pro"=C:\Program Files (x86)\Optimizer Pro\OptProLauncher.exe [2012-01-02 81912]
"KWMediaPlayer"=C:\Users\vladkoss\AppData\Roaming\K\K-lservice.exe [2012-08-25 167936]
"KWMediaPlayers"=C:\Users\vladkoss\AppData\Roaming\Ks\K-lsservice.exe [2012-08-25 172032]
"NetWires"=C:\Users\vladkoss\AppData\Roaming\MyFolder\NetWires.exe [2012-08-26 356864]
"GooGleNetWire"=C:\Users\vladkoss\AppData\Roaming\KHost.exe [2012-08-26 143360]
"WindowsSystem"=C:\Users\vladkoss\AppData\Roaming\K.exe [2012-08-27 417792]
"mstart"=C:\Users\vladkoss\AppData\Roaming\dir\arcom.exe [2012-08-28 984480]
"MediaUpd"=C:\Users\vladkoss\AppData\Roaming\sgghggd\dll.exe [2012-08-29 196608]
"stMediaUpd"=C:\Users\vladkoss\AppData\Roaming\sgghggd\condll.exe [2012-08-31 184320]
"shedulescan"=C:\Users\vladkoss\AppData\Roaming\appdata.\conhostdll.exe [2012-09-01 147456]
"controllApps"=C:\Users\vladkoss\AppData\Roaming\ap\shades.exe []
"Manager"=C:\Users\vladkoss\AppData\Roaming\MyFolder\Manager.exe [2012-09-09 488960]
"Kan3wasere"=C:\Users\vladkoss\AppData\Roaming\MyFolder\Kan3wasere.exe [2012-09-11 505344]
"washere"=C:\Users\vladkoss\AppData\Roaming\MyFolder\washere.exe [2012-09-14 374272]
"RealtekAudioDRV"=C:\Users\vladkoss\AppData\Roaming\Data\TrueVision.exe [2012-09-19 675840]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="c:\progra~3\browse~1\23787~1.43\{16cdf~1\browse~1.dll c:\progra~3\browse~1\22643~1.41\{16cdf~1\browse~1.dll c:\progra~2\sprote~1\sprote~1.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\SysWOW64\l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"vidc.VP60"=C:\Windows\system32\vp6vfw.dll
"vidc.VP61"=C:\Windows\system32\vp6vfw.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"vidc.DIVX"=DivX.dll
"vidc.yv12"=DivX.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 3 months======

2012-11-25 20:10:35 ----D---- C:\rsit
2012-11-25 20:10:35 ----D---- C:\Program Files (x86)\trend micro
2012-11-25 19:50:15 ----A---- C:\Windows\SysWOW64\authuitu.dll
2012-11-25 19:49:40 ----D---- C:\Program Files (x86)\TuneUp Utilities 2013
2012-11-25 19:42:59 ----A---- C:\Windows\4StoryEG Uninstall Log.txt
2012-11-25 19:29:40 ----D---- C:\Users\vladkoss\AppData\Roaming\TuneUp Software
2012-11-25 19:29:36 ----D---- C:\ProgramData\TuneUp Software
2012-11-25 19:29:27 ----SHD---- C:\ProgramData\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}
2012-11-25 19:29:27 ----HD---- C:\ProgramData\Common Files
2012-11-25 19:10:15 ----D---- C:\Program Files (x86)\Xleaner
2012-11-25 19:07:33 ----D---- C:\Users\vladkoss\AppData\Roaming\TagScanner
2012-11-25 19:07:27 ----D---- C:\Program Files (x86)\TagScanner
2012-11-25 17:33:54 ----D---- C:\b9d82b46f53542a18f8d
2012-11-25 17:24:27 ----A---- C:\Windows\SysWOW64\mshtmled.dll
2012-11-25 17:24:26 ----A---- C:\Windows\SysWOW64\vbscript.dll
2012-11-25 17:24:26 ----A---- C:\Windows\SysWOW64\ieui.dll
2012-11-25 17:24:25 ----A---- C:\Windows\SysWOW64\url.dll
2012-11-25 17:24:25 ----A---- C:\Windows\SysWOW64\ieUnatt.exe
2012-11-25 17:24:24 ----A---- C:\Windows\SysWOW64\urlmon.dll
2012-11-25 17:24:23 ----A---- C:\Windows\SysWOW64\msfeeds.dll
2012-11-25 17:24:22 ----A---- C:\Windows\SysWOW64\wininet.dll
2012-11-25 17:24:21 ----A---- C:\Windows\SysWOW64\jscript9.dll
2012-11-25 17:24:21 ----A---- C:\Windows\SysWOW64\jscript.dll
2012-11-25 17:24:19 ----A---- C:\Windows\SysWOW64\iertutil.dll
2012-11-25 17:24:18 ----A---- C:\Windows\SysWOW64\jsproxy.dll
2012-11-25 17:24:16 ----A---- C:\Windows\SysWOW64\mshtml.dll
2012-11-25 17:24:14 ----A---- C:\Windows\SysWOW64\ieframe.dll
2012-11-25 13:42:35 ----A---- C:\Users\vladkoss\AppData\Roaming\IconCache.dat
2012-10-10 15:24:47 ----D---- C:\Users\vladkoss\AppData\Roaming\.techniclauncher
2012-10-10 14:57:32 ----A---- C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2012-10-03 17:05:32 ----A---- C:\Users\vladkoss\AppData\Roaming\vladkossv1.18.0 - Trial version.vbs
2012-09-30 15:50:02 ----D---- C:\Users\vladkoss\AppData\Roaming\DataSystemStorage
2012-09-28 14:06:38 ----A---- C:\Windows\SysWOW64\CmdLineExt.dll
2012-09-27 15:03:27 ----D---- C:\Program Files (x86)\Rockstar Games
2012-09-25 18:47:25 ----D---- C:\MINECRAFT SERVER FREDDY VLADKOSS
2012-09-25 18:41:01 ----D---- C:\Users\vladkoss\AppData\Roaming\GHISLER
2012-09-25 18:41:01 ----A---- C:\Windows\UC.PIF
2012-09-25 18:41:01 ----A---- C:\Windows\RAR.PIF
2012-09-25 18:41:01 ----A---- C:\Windows\PKZIP.PIF
2012-09-25 18:41:01 ----A---- C:\Windows\PKUNZIP.PIF
2012-09-25 18:41:01 ----A---- C:\Windows\NOCLOSE.PIF
2012-09-25 18:41:01 ----A---- C:\Windows\LHA.PIF
2012-09-25 18:41:01 ----A---- C:\Windows\ARJ.PIF
2012-09-23 09:29:49 ----D---- C:\World_of_Tanks_Setup
2012-09-22 19:09:33 ----D---- C:\Users\vladkoss\AppData\Roaming\wargaming.net
2012-09-20 13:14:29 ----A---- C:\Windows\SysWOW64\Access.dat
2012-09-20 12:45:18 ----D---- C:\Users\vladkoss\AppData\Roaming\Tunngle
2012-09-20 12:45:18 ----D---- C:\ProgramData\Tunngle
2012-09-20 12:45:09 ----D---- C:\Program Files (x86)\Tunngle
2012-09-19 18:05:00 ----D---- C:\Users\vladkoss\AppData\Roaming\Registry Mechanic
2012-09-19 14:58:51 ----D---- C:\Users\vladkoss\AppData\Roaming\dclogs
2012-09-19 14:58:00 ----SHD---- C:\Users\vladkoss\AppData\Roaming\Data
2012-09-19 13:58:31 ----D---- C:\Users\vladkoss\AppData\Roaming\YourFileDownloader
2012-09-19 13:58:31 ----D---- C:\Program Files (x86)\YourFileDownloader
2012-09-15 11:45:57 ----A---- C:\Windows\SysWOW64\msxml.dll
2012-09-15 11:45:55 ----D---- C:\Program Files (x86)\Common Files\PC Tools
2012-09-15 11:45:54 ----D---- C:\Program Files (x86)\PC Tools Registry Mechanic
2012-09-15 11:45:54 ----AD---- C:\ProgramData\TEMP
2012-09-08 19:50:43 ----D---- C:\Users\vladkoss\AppData\Roaming\ap
2012-09-05 14:01:59 ----D---- C:\Program Files (x86)\Common Files\Java
2012-09-05 14:01:35 ----A---- C:\Windows\SysWOW64\javaws.exe
2012-09-05 14:01:17 ----A---- C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2012-09-05 14:01:17 ----A---- C:\Windows\SysWOW64\javaw.exe
2012-09-05 14:01:17 ----A---- C:\Windows\SysWOW64\java.exe
2012-09-05 14:01:09 ----D---- C:\Program Files (x86)\Java
2012-09-01 14:00:59 ----D---- C:\Users\vladkoss\AppData\Roaming\appdata
2012-08-31 08:05:17 ----D---- C:\Program Files (x86)\smartdl
2012-08-30 20:29:49 ----D---- C:\Users\vladkoss\AppData\Roaming\2K Sports
2012-08-30 20:18:19 ----D---- C:\Program Files (x86)\2K Sports
2012-08-30 17:09:46 ----AD---- C:\Users\vladkoss\AppData\Roaming\.minecraft
2012-08-30 14:25:02 ----D---- C:\Users\vladkoss\AppData\Roaming\minecraft
2012-08-30 14:24:02 ----D---- C:\Users\vladkoss\AppData\Roaming\New folder
2012-08-29 19:01:54 ----D---- C:\Program Files (x86)\LogMeIn Hamachi
2012-08-29 09:40:29 ----D---- C:\Users\vladkoss\AppData\Roaming\sgghggd
2012-08-29 09:31:20 ----RSHD---- C:\Users\vladkoss\AppData\Roaming\InstallDir
2012-08-28 19:36:30 ----D---- C:\Users\vladkoss\AppData\Roaming\dir
2012-08-28 07:58:11 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2012-08-28 07:56:04 ----HD---- C:\Windows\msdownld.tmp
2012-08-28 07:48:54 ----D---- C:\Windows\SysWOW64\directx
2012-08-28 07:20:19 ----D---- C:\Games
2012-08-28 07:19:33 ----A---- C:\Users\vladkoss\AppData\Roaming\Log2.dat
2012-08-28 00:41:06 ----D---- C:\Users\vladkoss\AppData\Roaming\logs
2012-08-27 21:20:12 ----A---- C:\Users\vladkoss\AppData\Roaming\K.exe
2012-08-27 16:01:49 ----A---- C:\Windows\RomeTW.ini
2012-08-27 15:55:10 ----D---- C:\Program Files (x86)\Activision
2012-08-26 11:19:53 ----D---- C:\Users\vladkoss\AppData\Roaming\MyFolder
2012-08-26 08:51:29 ----D---- C:\Users\vladkoss\AppData\Roaming\LolClient
2012-08-26 07:23:52 ----A---- C:\Users\vladkoss\AppData\Roaming\Log.dat

======List of files/folders modified in the last 3 months======

2012-11-26 03:12:33 ----D---- C:\Windows\SysWOW64\en-US
2012-11-26 03:03:40 ----D---- C:\Windows\Tasks
2012-11-26 03:03:40 ----D---- C:\Windows\SysWOW64\sk-SK
2012-11-26 03:03:34 ----D---- C:\ProgramData\OptimizerPro1
2012-11-26 03:03:34 ----D---- C:\ProgramData\DAEMON Tools Lite
2012-11-26 03:03:14 ----D---- C:\Windows\registration
2012-11-25 20:10:41 ----D---- C:\Windows\Temp
2012-11-25 20:10:35 ----RD---- C:\Program Files (x86)
2012-11-25 20:07:57 ----D---- C:\Users\vladkoss\AppData\Roaming\uTorrent
2012-11-25 20:06:36 ----D---- C:\Users\vladkoss\AppData\Roaming\Skype
2012-11-25 19:50:26 ----SHD---- C:\Windows\Installer
2012-11-25 19:50:26 ----SHD---- C:\Config.Msi
2012-11-25 19:50:16 ----D---- C:\Windows\System32
2012-11-25 19:50:15 ----D---- C:\Windows\SysWOW64
2012-11-25 19:49:17 ----SHD---- C:\System Volume Information
2012-11-25 19:48:21 ----D---- C:\Windows
2012-11-25 19:43:12 ----D---- C:\Program Files (x86)\4StoryEG
2012-11-25 19:42:52 ----D---- C:\Program Files (x86)\1ClickDownload
2012-11-25 19:29:36 ----HD---- C:\ProgramData
2012-11-25 19:21:52 ----D---- C:\Windows\Microsoft.NET
2012-11-25 19:21:50 ----RSD---- C:\Windows\assembly
2012-11-25 18:58:28 ----D---- C:\Windows\winsxs
2012-11-25 18:53:31 ----D---- C:\Windows\debug
2012-11-25 18:53:04 ----D---- C:\Users\vladkoss\AppData\Roaming\OpenCandy
2012-11-25 17:48:37 ----D---- C:\Windows\Prefetch
2012-11-25 17:45:59 ----D---- C:\Windows\SysWOW64\migration
2012-11-25 17:45:59 ----D---- C:\Program Files (x86)\Internet Explorer
2012-11-25 17:35:29 ----D---- C:\Windows\inf
2012-11-25 17:19:00 ----D---- C:\ProgramData\Skype
2012-10-13 07:27:53 ----D---- C:\ProgramData\Browser Manager
2012-10-10 14:57:47 ----A---- C:\Windows\SysWOW64\FlashPlayerApp.exe
2012-10-01 17:14:28 ----D---- C:\Users\vladkoss\AppData\Roaming\SySServices
2012-09-29 12:21:03 ----D---- C:\Program Files (x86)\Cheat Engine
2012-09-27 15:03:26 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2012-09-27 14:58:07 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2012-09-26 15:04:52 ----D---- C:\Program Files (x86)\Mozilla Firefox
2012-09-25 19:02:59 ----SD---- C:\Users\vladkoss\AppData\Roaming\Microsoft
2012-09-25 18:41:01 ----D---- C:\totalcmd
2012-09-20 12:45:10 ----RSD---- C:\Windows\Fonts
2012-09-19 18:04:36 ----D---- C:\Windows\Downloaded Program Files
2012-09-19 13:59:05 ----D---- C:\Users\vladkoss\AppData\Roaming\BabylonToolbar
2012-09-19 13:59:02 ----A---- C:\user.js
2012-09-15 11:45:55 ----D---- C:\Program Files (x86)\Common Files
2012-09-15 08:47:06 ----D---- C:\ProgramData\DivX
2012-09-15 08:46:57 ----D---- C:\Program Files (x86)\DivX
2012-09-14 15:59:15 ----RD---- C:\Program Files
2012-09-08 10:19:08 ----D---- C:\ProgramData\ADDICT-THING
2012-09-08 09:51:36 ----A---- C:\Windows\SysWOW64\PnkBstrB.exe
2012-09-06 12:53:02 ----D---- C:\Program Files (x86)\Origin
2012-09-05 14:01:10 ----A---- C:\Windows\SysWOW64\npDeployJava1.dll
2012-09-05 14:01:10 ----A---- C:\Windows\SysWOW64\deployJava1.dll
2012-09-04 17:17:06 ----D---- C:\Program Files (x86)\Battlelog Web Plugins
2012-08-30 20:27:47 ----D---- C:\Windows\Logs
2012-08-26 20:55:41 ----A---- C:\Users\vladkoss\AppData\Roaming\KHost.exe
2012-08-26 09:58:51 ----D---- C:\ProgramData\PMB Files

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys []
R0 sfhlp02;StarForce Protection Helper Driver (version 2.x); C:\Windows\system32\drivers\sfhlp02.sys []
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys []
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys []
R2 SSPORT;SSPORT; \??\C:\Windows\system32\Drivers\SSPORT.sys []
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys []
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys []
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys []
R3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys []
R3 RTL8023x64;Realtek 10/100 NIC Family NDIS x64 Driver; C:\Windows\system32\DRIVERS\Rtnic64.sys []
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys []
R3 tap0901t;TAP-Win32 Adapter V9 (Tunngle); C:\Windows\system32\DRIVERS\tap0901t.sys []
R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv; \??\C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesDriver64.sys [2012-09-19 11880]
S0 sfdrv01a;StarForce Protection Environment Driver (version 1.x.a); C:\Windows\system32\drivers\sfdrv01a.sys []
S0 sfsync04;StarForce Protection Synchronization Driver (version 4.x); C:\Windows\system32\drivers\sfsync04.sys []
S0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys []
S1 jynjrkdu;jynjrkdu; \??\C:\Windows\system32\drivers\jynjrkdu.sys []
S2 DgiVecp;DgiVecp; \??\C:\Windows\system32\Drivers\DgiVecp.sys []
S3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys []
S3 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys []
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys []
S3 s3cap;s3cap; C:\Windows\system32\DRIVERS\vms3cap.sys []
S3 storvsc;storvsc; C:\Windows\system32\DRIVERS\storvsc.sys []
S3 usbscan;USB Scanner Driver; C:\Windows\system32\DRIVERS\usbscan.sys []
S3 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\DRIVERS\vmbus.sys []
S3 VMBusHID;VMBusHID; C:\Windows\system32\DRIVERS\VMBusHID.sys []
S3 WinRing0_1_2_0;WinRing0_1_2_0; \??\C:\Program Files (x86)\IObit\Game Booster 3\Driver\WinRing0x64.sys [2010-11-01 14544]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe []
R2 Browser Manager;Browser Manager; C:\ProgramData\Browser Manager\2.3.787.43\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.exe [2012-10-10 2309656]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine; C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe [2012-08-29 2369960]
R2 PCToolsSSDMonitorSvc;PC Tools Startup and Shutdown Monitor service; C:\Program Files (x86)\Common Files\PC Tools\sMonitor\StartManSvc.exe [2012-04-26 793048]
R2 PnkBstrA;PnkBstrA; C:\Windows\system32\PnkBstrA.exe [2012-06-25 76888]
R2 Skype C2C Service;Skype C2C Service; C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe [2012-10-02 3064000]
R2 TuneUp.UtilitiesSvc;TuneUp Utilities Service; C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe [2012-11-02 2365792]
S2 sfrem01;SF FrontLine Drivers Auto Removal (v1); C:\Windows\system32\sfrem01.exe svc []
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2012-05-03 158856]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-10-10 250808]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2010-03-18 44376]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2012-09-26 114144]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2012-05-27 529232]
S3 TunngleService;TunngleService; C:\Program Files (x86)\Tunngle\TnglCtrl.exe [2012-07-19 738152]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe []
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------

Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte na Search
Proběhne skenováni a pak se objeví log, který sem vložte.

# AdwCleaner v2.009 - Logfile created 11/25/2012 at 20:49:23
# Updated 24/11/2012 by Xplode
# Operating system : Windows 7 Ultimate (64 bits)
# User : vladkoss - VLADKOSS-PC
# Boot Mode : Normal
# Running from : C:\Users\vladkoss\Desktop\adwcleaner.exe
# Option [Search]


***** [Services] *****

Found : Browser Manager

***** [Files / Folders] *****

File Found : C:\Program Files (x86)\Mozilla Firefox\searchplugins\babylon.xml
File Found : C:\Program Files (x86)\Mozilla FireFox\searchplugins\Search_Results.xml
File Found : C:\user.js
File Found : C:\Users\Public\Desktop\iLivid.lnk
File Found : C:\Users\vladkoss\AppData\Roaming\Mozilla\Firefox\Profiles\xnmdhtv2.default\browsermngr_prefs.js
File Found : C:\Users\vladkoss\AppData\Roaming\Mozilla\Firefox\Profiles\xnmdhtv2.default\searchplugins\BabylonMngr.xml
File Found : C:\Users\vladkoss\AppData\Roaming\Mozilla\Firefox\Profiles\xnmdhtv2.default\searchplugins\Search_Results.xml
Folder Found : C:\Program Files (x86)\BabylonToolbar
Folder Found : C:\Program Files (x86)\Conduit
Folder Found : C:\Program Files (x86)\Ilivid
Folder Found : C:\Program Files (x86)\Mozilla Firefox\Extensions\ffxtlbr@babylon.com
Folder Found : C:\Program Files (x86)\Searchqu Toolbar
Folder Found : C:\Program Files (x86)\Smartdl
Folder Found : C:\Program Files (x86)\SweetIM
Folder Found : C:\Program Files (x86)\uTorrentControl2
Folder Found : C:\Program Files (x86)\Yontoo
Folder Found : C:\Program Files (x86)\yourfiledownloader
Folder Found : C:\ProgramData\Babylon
Folder Found : C:\ProgramData\boost_interprocess
Folder Found : C:\ProgramData\Browser Manager
Folder Found : C:\ProgramData\IBUpdaterService
Folder Found : C:\ProgramData\InstallMate
Folder Found : C:\ProgramData\Premium
Folder Found : C:\ProgramData\SweetIM
Folder Found : C:\ProgramData\Tarma Installer
Folder Found : C:\Users\vladkoss\AppData\Local\Conduit
Folder Found : C:\Users\vladkoss\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn
Folder Found : C:\Users\vladkoss\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc
Folder Found : C:\Users\vladkoss\AppData\Local\Google\Chrome\User Data\Default\Extensions\pgafcinpmmpklohkojmllohdhomoefph
Folder Found : C:\Users\vladkoss\AppData\Local\Ilivid Player
Folder Found : C:\Users\vladkoss\AppData\LocalLow\BabylonToolbar
Folder Found : C:\Users\vladkoss\AppData\LocalLow\boost_interprocess
Folder Found : C:\Users\vladkoss\AppData\LocalLow\Conduit
Folder Found : C:\Users\vladkoss\AppData\LocalLow\Searchqutoolbar
Folder Found : C:\Users\vladkoss\AppData\LocalLow\SweetIM
Folder Found : C:\Users\vladkoss\AppData\LocalLow\uTorrentControl2
Folder Found : C:\Users\vladkoss\AppData\Roaming\Babylon
Folder Found : C:\Users\vladkoss\AppData\Roaming\BabylonToolbar
Folder Found : C:\Users\vladkoss\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Browser Manager
Folder Found : C:\Users\vladkoss\AppData\Roaming\Mozilla\Firefox\Profiles\xnmdhtv2.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}
Folder Found : C:\Users\vladkoss\AppData\Roaming\Mozilla\Firefox\Profiles\xnmdhtv2.default\extensions\ffxtlbr@babylon.com
Folder Found : C:\Users\vladkoss\AppData\Roaming\Mozilla\Firefox\Profiles\xnmdhtv2.default\Searchqutoolbar
Folder Found : C:\Users\vladkoss\AppData\Roaming\OpenCandy
Folder Found : C:\Users\vladkoss\AppData\Roaming\yourfiledownloader
Folder Found : C:\Windows\Installer\{FB697452-8CA4-46B4-98B1-165C922A2EF3}

***** [Registry] *****

Data Found : HKLM\..\Windows [AppInit_DLLs] = c:\progra~3\browse~1\22643~1.41\{16cdf~1\browse~1.dll
Data Found : HKLM\..\Windows [AppInit_DLLs] = c:\progra~3\browse~1\23787~1.43\{16cdf~1\browse~1.dll
Key Found : HKCU\Software\AppDataLow\Software\Conduit
Key Found : HKCU\Software\AppDataLow\Software\ConduitSearchScopes
Key Found : HKCU\Software\AppDataLow\Software\SmartBar
Key Found : HKCU\Software\AppDataLow\Software\uTorrentControl2
Key Found : HKCU\Software\AppDataLow\Toolbar
Key Found : HKCU\Software\BabylonToolbar
Key Found : HKCU\Software\BrowserMngr
Key Found : HKCU\Software\Conduit
Key Found : HKCU\Software\DataMngr
Key Found : HKCU\Software\DataMngr_Toolbar
Key Found : HKCU\Software\Google\Chrome\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc
Key Found : HKCU\Software\ilivid
Key Found : HKCU\Software\IM
Key Found : HKCU\Software\ImInstaller
Key Found : HKCU\Software\Microsoft\Babylon
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettings
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{687578B9-7132-4A7A-80E4-30EE31099E03}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{687578B9-7132-4A7A-80E4-30EE31099E03}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Key Found : HKLM\Software\Babylon
Key Found : HKLM\Software\BabylonToolbar
Key Found : HKLM\Software\BrowserMngr
Key Found : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Key Found : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Key Found : HKLM\SOFTWARE\Classes\AppID\YontooIEClient.DLL
Key Found : HKLM\SOFTWARE\Classes\b
Key Found : HKLM\SOFTWARE\Classes\Babylon.dskBnd
Key Found : HKLM\SOFTWARE\Classes\Babylon.dskBnd.1
Key Found : HKLM\SOFTWARE\Classes\bbylnApp.appCore
Key Found : HKLM\SOFTWARE\Classes\bbylnApp.appCore.1
Key Found : HKLM\SOFTWARE\Classes\bhoclass.bho.bhoclass.bho
Key Found : HKLM\SOFTWARE\Classes\bhoclass.bho.bhoclass.bho.1.0
Key Found : HKLM\SOFTWARE\Classes\escort.escortIEPane
Key Found : HKLM\SOFTWARE\Classes\escort.escortIEPane.1
Key Found : HKLM\SOFTWARE\Classes\escort.escrtBtn.1
Key Found : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc
Key Found : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc.1
Key Found : HKLM\SOFTWARE\Classes\MediaPlayer.GraphicsUtils
Key Found : HKLM\SOFTWARE\Classes\MediaPlayer.GraphicsUtils.1
Key Found : HKLM\SOFTWARE\Classes\MgMediaPlayer.GifAnimator
Key Found : HKLM\SOFTWARE\Classes\MgMediaPlayer.GifAnimator.1
Key Found : HKLM\SOFTWARE\Classes\Prod.cap
Key Found : HKLM\SOFTWARE\Classes\SearchQUIEHelper.DNSGuard
Key Found : HKLM\SOFTWARE\Classes\SearchQUIEHelper.DNSGuard.1
Key Found : HKLM\SOFTWARE\Classes\sim-packages
Key Found : HKLM\SOFTWARE\Classes\SWEETIE.IEToolbar
Key Found : HKLM\SOFTWARE\Classes\SWEETIE.IEToolbar.1
Key Found : HKLM\SOFTWARE\Classes\sweetim_urlsearchhook.toolbarurlsearchhook
Key Found : HKLM\SOFTWARE\Classes\sweetim_urlsearchhook.toolbarurlsearchhook.1
Key Found : HKLM\SOFTWARE\Classes\Toolbar.CT3072253
Key Found : HKLM\SOFTWARE\Classes\Toolbar3.sweetie
Key Found : HKLM\SOFTWARE\Classes\Toolbar3.sweetie.1
Key Found : HKLM\SOFTWARE\Classes\YontooIEClient.Api
Key Found : HKLM\SOFTWARE\Classes\YontooIEClient.Api.1
Key Found : HKLM\SOFTWARE\Classes\YontooIEClient.Layers
Key Found : HKLM\SOFTWARE\Classes\YontooIEClient.Layers.1
Key Found : HKLM\Software\Conduit
Key Found : HKLM\Software\DataMngr
Key Found : HKLM\Software\ilivid
Key Found : HKLM\Software\Iminent
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SearchquMediaBar_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SearchquMediaBar_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SetupDataMngr_Searchqu_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SetupDataMngr_Searchqu_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\SweetIM.exe
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D4AAF2A6-F6D1-49A5-BA1A-B20735DF1955}
Key Found : HKLM\Software\SearchquMediabarTb
Key Found : HKLM\Software\uTorrentControl2
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{687578B9-7132-4A7A-80E4-30EE31099E03}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{D4AAF2A6-F6D1-49A5-BA1A-B20735DF1955}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5}
Key Found : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\dhkplhfnhceodhffomolpfigojocbpcb
Key Found : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn
Key Found : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\jplinpmadfkdgipabgcdchbdikologlh
Key Found : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\niapdbllcanepiiimjjndipklodoedlc
Key Found : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc
Key Found : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\pgafcinpmmpklohkojmllohdhomoefph
Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B3FCED7F-A9E9-4CFF-8873-556B66FFF665}
Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E069C60B-6890-4D6D-A16B-9B479E3F3713}
Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{687578B9-7132-4A7A-80E4-30EE31099E03}
Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{15D2D75C-9CB2-4EFD-BAD7-B9B4CB4BC693}
Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}
Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{A7BC02AF-1128-4A31-BCF8-1A3EE803D3B3}
Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{A81A974F-8A22-43E6-9243-5198FF758DA1}
Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{E55E7026-EF2A-4A17-AAA7-DB98EA3FD1B1}
Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{FB697452-8CA4-46B4-98B1-165C922A2EF3}
Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\BabylonToolbar
Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\ilivid
Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Searchqu Toolbar
Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\uTorrentControl2 Toolbar
Key Found : HKLM\SOFTWARE\Classes\Interface\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}
Key Found : HKLM\SOFTWARE\Classes\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5}
Key Found : HKLM\SOFTWARE\DataMngr
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A7BC02AF-1128-4A31-BCF8-1A3EE803D3B3}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A81A974F-8A22-43E6-9243-5198FF758DA1}
Key Found : HKLM\SOFTWARE\Tarma Installer
Key Found : HKU\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Key Found : HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Key Found : HKU\S-1-5-21-843114130-316315272-3188138584-1001\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Value Found : HKCU\Software\Microsoft\Internet Explorer\Main [BrowserMngr Start Page]
Value Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [bProtectorDefaultScope]
Value Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [BrowserMngrDefaultScope]
Value Found : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{687578B9-7132-4A7A-80E4-30EE31099E03}]
Value Found : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{687578B9-7132-4A7A-80E4-30EE31099E03}]
Value Found : HKCU\Software\Mozilla\Firefox\Extensions [{b64982b1-d112-42b5-b1e4-d3867c4533f8}]
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{687578B9-7132-4A7A-80E4-30EE31099E03}]
Value Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [DataMngr]
Value Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [SweetIM]
Value Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [Sweetpacks Communicator]
Value Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs [C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgHelperApp.exe]
Value Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs [C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarProxy.dll]
Value Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{687578B9-7132-4A7A-80E4-30EE31099E03}]

***** [Internet Browsers] *****

-\\ Internet Explorer v9.0.8112.16421

[HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://search.babylon.com/?affID=112555&tt=120912_nocpc_3812_3&babsrc=HP_ss&mntrId=60cc556a000000000000d85d4c82acaa
[HKCU\Software\Microsoft\Internet Explorer\Main - BrowserMngr Start Page] = hxxp://search.babylon.com/?affID=112061&tt=120812_bandext_3312_8&babsrc=HP_ss&mntrId=60cc556a000000000000d85d4c82acaa
[HKCU\Software\Microsoft\Internet Explorer\Main - bProtector Start Page] = hxxp://search.babylon.com/?affID=112061&tt=120812_bandext_3312_8&babsrc=HP_ss&mntrId=60cc556a000000000000d85d4c82acaa
[HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls - Tabs] = hxxp://search.babylon.com/?affID=112061&tt=120812_bandext_3312_8&babsrc=NT_ss&mntrId=60cc556a000000000000d85d4c82acaa
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main - Start Page] = hxxp://search.gboxapp.com/

-\\ Mozilla Firefox v15.0.1 (sk)

Profile name : default
File : C:\Users\vladkoss\AppData\Roaming\Mozilla\Firefox\Profiles\xnmdhtv2.default\prefs.js

Found : user_pref("aol_toolbar.default.homepage.check", false);
Found : user_pref("aol_toolbar.default.search.check", false);
Found : user_pref("avg.install.userHPSettings", "hxxp://search.babylon.com/?affID=112061&tt=120812_bandext_3[...]
Found : user_pref("avg.install.userSPSettings", "Search the web (Babylon)");
Found : user_pref("browser.babylon.HPOnNewTab", "search.babylon.com");
Found : user_pref("browser.newtab.url", "hxxp://search.babylon.com/?affID=112555&tt=120912_nocpc_3812_3&babs[...]
Found : user_pref("browser.search.defaulturl", "hxxp://search.gboxapp.com/?q=");
Found : user_pref("browser.startup.homepage", "hxxp://search.gboxapp.com/");
Found : user_pref("extensions.50388b80cf7ea.scode", "(function(){try{if('aol.com,mail.google.com,mystart.inc[...]
Found : user_pref("extensions.BabylonToolbar.admin", false);
Found : user_pref("extensions.BabylonToolbar.aflt", "babsst");
Found : user_pref("extensions.BabylonToolbar.appId", "{BDB69379-802F-4eaf-B541-F8DE92DD98DB}");
Found : user_pref("extensions.BabylonToolbar.autoRvrt", "false");
Found : user_pref("extensions.BabylonToolbar.babExt", "");
Found : user_pref("extensions.BabylonToolbar.babTrack", "affID=112555&tt=120912_nocpc_3812_3");
Found : user_pref("extensions.BabylonToolbar.bbDpng", "25");
Found : user_pref("extensions.BabylonToolbar.cntry", "SK");
Found : user_pref("extensions.BabylonToolbar.dfltLng", "en");
Found : user_pref("extensions.BabylonToolbar.excTlbr", false);
Found : user_pref("extensions.BabylonToolbar.hdrMd5", "3450886D588725B49EE546CFB4C44C58");
Found : user_pref("extensions.BabylonToolbar.hmpg", false);
Found : user_pref("extensions.BabylonToolbar.id", "60cc556a000000000000d85d4c82acaa");
Found : user_pref("extensions.BabylonToolbar.instlDay", "15602");
Found : user_pref("extensions.BabylonToolbar.instlRef", "sst");
Found : user_pref("extensions.BabylonToolbar.lastVrsnTs", "1.6.9.1214:59:01");
Found : user_pref("extensions.BabylonToolbar.newTab", false);
Found : user_pref("extensions.BabylonToolbar.pnu_base", "{\"newVrsn\":\"54\",\"lastVrsn\":\"54\",\"vrsnLoad\[...]
Found : user_pref("extensions.BabylonToolbar.prdct", "BabylonToolbar");
Found : user_pref("extensions.BabylonToolbar.prtkDS", 0);
Found : user_pref("extensions.BabylonToolbar.prtkHmpg", 0);
Found : user_pref("extensions.BabylonToolbar.prtnrId", "babylon");
Found : user_pref("extensions.BabylonToolbar.sg", "tzb");
Found : user_pref("extensions.BabylonToolbar.smplGrp", "tzb");
Found : user_pref("extensions.BabylonToolbar.srcExt", "ss");
Found : user_pref("extensions.BabylonToolbar.tlbrId", "base");
Found : user_pref("extensions.BabylonToolbar.tlbrSrchUrl", "hxxp://search.babylon.com/?babsrc=TB_def&mntrId=[...]
Found : user_pref("extensions.BabylonToolbar.vrsn", "1.6.9.12");
Found : user_pref("extensions.BabylonToolbar.vrsnTs", "1.6.9.1214:59:01");
Found : user_pref("extensions.BabylonToolbar.vrsni", "1.6.9.12");
Found : user_pref("extensions.BabylonToolbar_i.babExt", "");
Found : user_pref("extensions.BabylonToolbar_i.babTrack", "affID=112555&tt=120912_nocpc_3812_3");
Found : user_pref("extensions.BabylonToolbar_i.newTab", false);
Found : user_pref("extensions.BabylonToolbar_i.newTabUrl", "hxxp://search.babylon.com/?affID=112061&tt=12081[...]
Found : user_pref("extensions.BabylonToolbar_i.smplGrp", "none");
Found : user_pref("extensions.BabylonToolbar_i.srcExt", "ss");
Found : user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.6.9.1214:59:01");
Found : user_pref("extensions.enabledAddons", "ffxtlbr@babylon.com:1.5.0,{972ce4c6-7e08-4474-a285-3208198ce6[...]
Found : user_pref("keyword.URL", "hxxp://search.gboxapp.com/?q=");
Found : user_pref("sweetim.toolbar.previous.browser.search.defaultenginename", "GadgetBox");
Found : user_pref("sweetim.toolbar.previous.browser.search.selectedEngine", "GadgetBox");
Found : user_pref("sweetim.toolbar.previous.browser.startup.homepage", "hxxp://search.gboxapp.com/");
Found : user_pref("sweetim.toolbar.previous.keyword.URL", "hxxp://search.gboxapp.com/?q=");
Found : user_pref("sweetim.toolbar.scripts.1.domain-blacklist", ".*");
Found : user_pref("sweetim.toolbar.searchguard.UserRejectedGuard_DS", "1");
Found : user_pref("sweetim.toolbar.searchguard.UserRejectedGuard_HP", "1");
Found : user_pref("sweetim.toolbar.searchguard.enable", "false");
Found : user_pref("sweetim.toolbar.urls.homepage", "hxxp://search.babylon.com/?affID=112061&tt=120812_bandex[...]

-\\ Google Chrome v23.0.1271.64

File : C:\Users\vladkoss\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] File is clean.

*************************

AdwCleaner[R1].txt - [18698 octets] - [25/11/2012 20:49:23]

########## EOF - C:\AdwCleaner[R1].txt - [18759 octets] ##########

Spusťte znovu ADWCleaner a klikněte na >Delete<. Vložte nový log.

# AdwCleaner v2.009 - Logfile created 11/25/2012 at 21:00:00
# Updated 24/11/2012 by Xplode
# Operating system : Windows 7 Ultimate (64 bits)
# User : vladkoss - VLADKOSS-PC
# Boot Mode : Normal
# Running from : C:\Users\vladkoss\Desktop\adwcleaner.exe
# Option [Delete]


***** [Services] *****

Stopped & Deleted : Browser Manager

***** [Files / Folders] *****

Deleted on reboot : C:\Program Files (x86)\Searchqu Toolbar
Deleted on reboot : C:\ProgramData\Browser Manager
File Deleted : C:\Program Files (x86)\Mozilla Firefox\searchplugins\babylon.xml
File Deleted : C:\Program Files (x86)\Mozilla FireFox\searchplugins\Search_Results.xml
File Deleted : C:\user.js
File Deleted : C:\Users\Public\Desktop\iLivid.lnk
File Deleted : C:\Users\vladkoss\AppData\Roaming\Mozilla\Firefox\Profiles\xnmdhtv2.default\browsermngr_prefs.js
File Deleted : C:\Users\vladkoss\AppData\Roaming\Mozilla\Firefox\Profiles\xnmdhtv2.default\searchplugins\BabylonMngr.xml
File Deleted : C:\Users\vladkoss\AppData\Roaming\Mozilla\Firefox\Profiles\xnmdhtv2.default\searchplugins\Search_Results.xml
Folder Deleted : C:\Program Files (x86)\BabylonToolbar
Folder Deleted : C:\Program Files (x86)\Conduit
Folder Deleted : C:\Program Files (x86)\Ilivid
Folder Deleted : C:\Program Files (x86)\Mozilla Firefox\Extensions\ffxtlbr@babylon.com
Folder Deleted : C:\Program Files (x86)\Smartdl
Folder Deleted : C:\Program Files (x86)\SweetIM
Folder Deleted : C:\Program Files (x86)\uTorrentControl2
Folder Deleted : C:\Program Files (x86)\Yontoo
Folder Deleted : C:\Program Files (x86)\yourfiledownloader
Folder Deleted : C:\ProgramData\Babylon
Folder Deleted : C:\ProgramData\boost_interprocess
Folder Deleted : C:\ProgramData\IBUpdaterService
Folder Deleted : C:\ProgramData\InstallMate
Folder Deleted : C:\ProgramData\Premium
Folder Deleted : C:\ProgramData\SweetIM
Folder Deleted : C:\ProgramData\Tarma Installer
Folder Deleted : C:\Users\vladkoss\AppData\Local\Conduit
Folder Deleted : C:\Users\vladkoss\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn
Folder Deleted : C:\Users\vladkoss\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc
Folder Deleted : C:\Users\vladkoss\AppData\Local\Google\Chrome\User Data\Default\Extensions\pgafcinpmmpklohkojmllohdhomoefph
Folder Deleted : C:\Users\vladkoss\AppData\Local\Ilivid Player
Folder Deleted : C:\Users\vladkoss\AppData\LocalLow\BabylonToolbar
Folder Deleted : C:\Users\vladkoss\AppData\LocalLow\boost_interprocess
Folder Deleted : C:\Users\vladkoss\AppData\LocalLow\Conduit
Folder Deleted : C:\Users\vladkoss\AppData\LocalLow\Searchqutoolbar
Folder Deleted : C:\Users\vladkoss\AppData\LocalLow\SweetIM
Folder Deleted : C:\Users\vladkoss\AppData\LocalLow\uTorrentControl2
Folder Deleted : C:\Users\vladkoss\AppData\Roaming\Babylon
Folder Deleted : C:\Users\vladkoss\AppData\Roaming\BabylonToolbar
Folder Deleted : C:\Users\vladkoss\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Browser Manager
Folder Deleted : C:\Users\vladkoss\AppData\Roaming\Mozilla\Firefox\Profiles\xnmdhtv2.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}
Folder Deleted : C:\Users\vladkoss\AppData\Roaming\Mozilla\Firefox\Profiles\xnmdhtv2.default\extensions\ffxtlbr@babylon.com
Folder Deleted : C:\Users\vladkoss\AppData\Roaming\Mozilla\Firefox\Profiles\xnmdhtv2.default\Searchqutoolbar
Folder Deleted : C:\Users\vladkoss\AppData\Roaming\OpenCandy
Folder Deleted : C:\Users\vladkoss\AppData\Roaming\yourfiledownloader
Folder Deleted : C:\Windows\Installer\{FB697452-8CA4-46B4-98B1-165C922A2EF3}

***** [Registry] *****

Data Deleted : HKLM\..\Windows [AppInit_DLLs] = c:\progra~3\browse~1\22643~1.41\{16cdf~1\browse~1.dll
Data Deleted : HKLM\..\Windows [AppInit_DLLs] = c:\progra~3\browse~1\23787~1.43\{16cdf~1\browse~1.dll
Key Deleted : HKCU\Software\AppDataLow\Software\Conduit
Key Deleted : HKCU\Software\AppDataLow\Software\ConduitSearchScopes
Key Deleted : HKCU\Software\AppDataLow\Software\SmartBar
Key Deleted : HKCU\Software\AppDataLow\Software\uTorrentControl2
Key Deleted : HKCU\Software\AppDataLow\Toolbar
Key Deleted : HKCU\Software\BabylonToolbar
Key Deleted : HKCU\Software\BrowserMngr
Key Deleted : HKCU\Software\Conduit
Key Deleted : HKCU\Software\DataMngr
Key Deleted : HKCU\Software\DataMngr_Toolbar
Key Deleted : HKCU\Software\Google\Chrome\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc
Key Deleted : HKCU\Software\ilivid
Key Deleted : HKCU\Software\IM
Key Deleted : HKCU\Software\ImInstaller
Key Deleted : HKCU\Software\Microsoft\Babylon
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettings
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{687578B9-7132-4A7A-80E4-30EE31099E03}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{687578B9-7132-4A7A-80E4-30EE31099E03}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Key Deleted : HKLM\Software\Babylon
Key Deleted : HKLM\Software\BabylonToolbar
Key Deleted : HKLM\Software\BrowserMngr
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Key Deleted : HKLM\SOFTWARE\Classes\AppID\YontooIEClient.DLL
Key Deleted : HKLM\SOFTWARE\Classes\b
Key Deleted : HKLM\SOFTWARE\Classes\Babylon.dskBnd
Key Deleted : HKLM\SOFTWARE\Classes\Babylon.dskBnd.1
Key Deleted : HKLM\SOFTWARE\Classes\bbylnApp.appCore
Key Deleted : HKLM\SOFTWARE\Classes\bbylnApp.appCore.1
Key Deleted : HKLM\SOFTWARE\Classes\bhoclass.bho.bhoclass.bho
Key Deleted : HKLM\SOFTWARE\Classes\bhoclass.bho.bhoclass.bho.1.0
Key Deleted : HKLM\SOFTWARE\Classes\escort.escortIEPane
Key Deleted : HKLM\SOFTWARE\Classes\escort.escortIEPane.1
Key Deleted : HKLM\SOFTWARE\Classes\escort.escrtBtn.1
Key Deleted : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc
Key Deleted : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc.1
Key Deleted : HKLM\SOFTWARE\Classes\MediaPlayer.GraphicsUtils
Key Deleted : HKLM\SOFTWARE\Classes\MediaPlayer.GraphicsUtils.1
Key Deleted : HKLM\SOFTWARE\Classes\MgMediaPlayer.GifAnimator
Key Deleted : HKLM\SOFTWARE\Classes\MgMediaPlayer.GifAnimator.1
Key Deleted : HKLM\SOFTWARE\Classes\Prod.cap
Key Deleted : HKLM\SOFTWARE\Classes\SearchQUIEHelper.DNSGuard
Key Deleted : HKLM\SOFTWARE\Classes\SearchQUIEHelper.DNSGuard.1
Key Deleted : HKLM\SOFTWARE\Classes\sim-packages
Key Deleted : HKLM\SOFTWARE\Classes\SWEETIE.IEToolbar
Key Deleted : HKLM\SOFTWARE\Classes\SWEETIE.IEToolbar.1
Key Deleted : HKLM\SOFTWARE\Classes\sweetim_urlsearchhook.toolbarurlsearchhook
Key Deleted : HKLM\SOFTWARE\Classes\sweetim_urlsearchhook.toolbarurlsearchhook.1
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3072253
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar3.sweetie
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar3.sweetie.1
Key Deleted : HKLM\SOFTWARE\Classes\YontooIEClient.Api
Key Deleted : HKLM\SOFTWARE\Classes\YontooIEClient.Api.1
Key Deleted : HKLM\SOFTWARE\Classes\YontooIEClient.Layers
Key Deleted : HKLM\SOFTWARE\Classes\YontooIEClient.Layers.1
Key Deleted : HKLM\Software\Conduit
Key Deleted : HKLM\Software\DataMngr
Key Deleted : HKLM\Software\ilivid
Key Deleted : HKLM\Software\Iminent
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SearchquMediaBar_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SearchquMediaBar_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SetupDataMngr_Searchqu_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SetupDataMngr_Searchqu_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\SweetIM.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D4AAF2A6-F6D1-49A5-BA1A-B20735DF1955}
Key Deleted : HKLM\Software\SearchquMediabarTb
Key Deleted : HKLM\Software\uTorrentControl2
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{687578B9-7132-4A7A-80E4-30EE31099E03}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{D4AAF2A6-F6D1-49A5-BA1A-B20735DF1955}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\dhkplhfnhceodhffomolpfigojocbpcb
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\jplinpmadfkdgipabgcdchbdikologlh
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\niapdbllcanepiiimjjndipklodoedlc
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\pgafcinpmmpklohkojmllohdhomoefph
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B3FCED7F-A9E9-4CFF-8873-556B66FFF665}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E069C60B-6890-4D6D-A16B-9B479E3F3713}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{687578B9-7132-4A7A-80E4-30EE31099E03}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{15D2D75C-9CB2-4EFD-BAD7-B9B4CB4BC693}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{A7BC02AF-1128-4A31-BCF8-1A3EE803D3B3}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{A81A974F-8A22-43E6-9243-5198FF758DA1}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{E55E7026-EF2A-4A17-AAA7-DB98EA3FD1B1}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{FB697452-8CA4-46B4-98B1-165C922A2EF3}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\BabylonToolbar
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\ilivid
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Searchqu Toolbar
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\uTorrentControl2 Toolbar
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5}
Key Deleted : HKLM\SOFTWARE\DataMngr
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A7BC02AF-1128-4A31-BCF8-1A3EE803D3B3}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A81A974F-8A22-43E6-9243-5198FF758DA1}
Key Deleted : HKLM\SOFTWARE\Tarma Installer
Key Deleted : HKU\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Key Deleted : HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Key Deleted : HKU\S-1-5-21-843114130-316315272-3188138584-1001\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Main [BrowserMngr Start Page]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [bProtectorDefaultScope]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [BrowserMngrDefaultScope]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{687578B9-7132-4A7A-80E4-30EE31099E03}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{687578B9-7132-4A7A-80E4-30EE31099E03}]
Value Deleted : HKCU\Software\Mozilla\Firefox\Extensions [{b64982b1-d112-42b5-b1e4-d3867c4533f8}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{687578B9-7132-4A7A-80E4-30EE31099E03}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [DataMngr]
Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [SweetIM]
Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [Sweetpacks Communicator]
Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs [C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgHelperApp.exe]
Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs [C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarProxy.dll]
Value Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{687578B9-7132-4A7A-80E4-30EE31099E03}]

***** [Internet Browsers] *****

-\\ Internet Explorer v9.0.8112.16421

Replaced : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://search.babylon.com/?affID=112555&tt=120912_nocpc_3812_3&babsrc=HP_ss&mntrId=60cc556a000000000000d85d4c82acaa --> hxxp://www.google.com
Deleted : [HKCU\Software\Microsoft\Internet Explorer\Main - bProtector Start Page]
Replaced : [HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls - Tabs] = hxxp://search.babylon.com/?affID=112061&tt=120812_bandext_3312_8&babsrc=NT_ss&mntrId=60cc556a000000000000d85d4c82acaa --> hxxp://www.google.com
Replaced : [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main - Start Page] = hxxp://search.gboxapp.com/ --> hxxp://www.google.com

-\\ Mozilla Firefox v15.0.1 (sk)

Profile name : default
File : C:\Users\vladkoss\AppData\Roaming\Mozilla\Firefox\Profiles\xnmdhtv2.default\prefs.js

C:\Users\vladkoss\AppData\Roaming\Mozilla\Firefox\Profiles\xnmdhtv2.default\user.js ... Deleted !

Deleted : user_pref("aol_toolbar.default.homepage.check", false);
Deleted : user_pref("aol_toolbar.default.search.check", false);
Deleted : user_pref("avg.install.userHPSettings", "hxxp://search.babylon.com/?affID=112061&tt=120812_bandext_3[...]
Deleted : user_pref("avg.install.userSPSettings", "Search the web (Babylon)");
Deleted : user_pref("browser.babylon.HPOnNewTab", "search.babylon.com");
Deleted : user_pref("browser.newtab.url", "hxxp://search.babylon.com/?affID=112555&tt=120912_nocpc_3812_3&babs[...]
Deleted : user_pref("browser.search.defaulturl", "hxxp://search.gboxapp.com/?q=");
Deleted : user_pref("browser.startup.homepage", "hxxp://search.gboxapp.com/");
Deleted : user_pref("extensions.50388b80cf7ea.scode", "(function(){try{if('aol.com,mail.google.com,mystart.inc[...]
Deleted : user_pref("extensions.BabylonToolbar.admin", false);
Deleted : user_pref("extensions.BabylonToolbar.aflt", "babsst");
Deleted : user_pref("extensions.BabylonToolbar.appId", "{BDB69379-802F-4eaf-B541-F8DE92DD98DB}");
Deleted : user_pref("extensions.BabylonToolbar.autoRvrt", "false");
Deleted : user_pref("extensions.BabylonToolbar.babExt", "");
Deleted : user_pref("extensions.BabylonToolbar.babTrack", "affID=112555&tt=120912_nocpc_3812_3");
Deleted : user_pref("extensions.BabylonToolbar.bbDpng", "25");
Deleted : user_pref("extensions.BabylonToolbar.cntry", "SK");
Deleted : user_pref("extensions.BabylonToolbar.dfltLng", "en");
Deleted : user_pref("extensions.BabylonToolbar.excTlbr", false);
Deleted : user_pref("extensions.BabylonToolbar.hdrMd5", "3450886D588725B49EE546CFB4C44C58");
Deleted : user_pref("extensions.BabylonToolbar.hmpg", false);
Deleted : user_pref("extensions.BabylonToolbar.id", "60cc556a000000000000d85d4c82acaa");
Deleted : user_pref("extensions.BabylonToolbar.instlDay", "15602");
Deleted : user_pref("extensions.BabylonToolbar.instlRef", "sst");
Deleted : user_pref("extensions.BabylonToolbar.lastVrsnTs", "1.6.9.1214:59:01");
Deleted : user_pref("extensions.BabylonToolbar.newTab", false);
Deleted : user_pref("extensions.BabylonToolbar.pnu_base", "{\"newVrsn\":\"54\",\"lastVrsn\":\"54\",\"vrsnLoad\[...]
Deleted : user_pref("extensions.BabylonToolbar.prdct", "BabylonToolbar");
Deleted : user_pref("extensions.BabylonToolbar.prtkDS", 0);
Deleted : user_pref("extensions.BabylonToolbar.prtkHmpg", 0);
Deleted : user_pref("extensions.BabylonToolbar.prtnrId", "babylon");
Deleted : user_pref("extensions.BabylonToolbar.sg", "tzb");
Deleted : user_pref("extensions.BabylonToolbar.smplGrp", "tzb");
Deleted : user_pref("extensions.BabylonToolbar.srcExt", "ss");
Deleted : user_pref("extensions.BabylonToolbar.tlbrId", "base");
Deleted : user_pref("extensions.BabylonToolbar.tlbrSrchUrl", "hxxp://search.babylon.com/?babsrc=TB_def&mntrId=[...]
Deleted : user_pref("extensions.BabylonToolbar.vrsn", "1.6.9.12");
Deleted : user_pref("extensions.BabylonToolbar.vrsnTs", "1.6.9.1214:59:01");
Deleted : user_pref("extensions.BabylonToolbar.vrsni", "1.6.9.12");
Deleted : user_pref("extensions.BabylonToolbar_i.babExt", "");
Deleted : user_pref("extensions.BabylonToolbar_i.babTrack", "affID=112555&tt=120912_nocpc_3812_3");
Deleted : user_pref("extensions.BabylonToolbar_i.newTab", false);
Deleted : user_pref("extensions.BabylonToolbar_i.newTabUrl", "hxxp://search.babylon.com/?affID=112061&tt=12081[...]
Deleted : user_pref("extensions.BabylonToolbar_i.smplGrp", "none");
Deleted : user_pref("extensions.BabylonToolbar_i.srcExt", "ss");
Deleted : user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.6.9.1214:59:01");
Deleted : user_pref("extensions.enabledAddons", "ffxtlbr@babylon.com:1.5.0,{972ce4c6-7e08-4474-a285-3208198ce6[...]
Deleted : user_pref("keyword.URL", "hxxp://search.gboxapp.com/?q=");
Deleted : user_pref("sweetim.toolbar.previous.browser.search.defaultenginename", "GadgetBox");
Deleted : user_pref("sweetim.toolbar.previous.browser.search.selectedEngine", "GadgetBox");
Deleted : user_pref("sweetim.toolbar.previous.browser.startup.homepage", "hxxp://search.gboxapp.com/");
Deleted : user_pref("sweetim.toolbar.previous.keyword.URL", "hxxp://search.gboxapp.com/?q=");
Deleted : user_pref("sweetim.toolbar.scripts.1.domain-blacklist", ".*");
Deleted : user_pref("sweetim.toolbar.searchguard.UserRejectedGuard_DS", "1");
Deleted : user_pref("sweetim.toolbar.searchguard.UserRejectedGuard_HP", "1");
Deleted : user_pref("sweetim.toolbar.searchguard.enable", "false");
Deleted : user_pref("sweetim.toolbar.urls.homepage", "hxxp://search.babylon.com/?affID=112061&tt=120812_bandex[...]

-\\ Google Chrome v23.0.1271.64

File : C:\Users\vladkoss\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] File is clean.

*************************

AdwCleaner[R1].txt - [18813 octets] - [25/11/2012 20:49:23]
AdwCleaner[S1].txt - [19134 octets] - [25/11/2012 21:00:00]

########## EOF - C:\AdwCleaner[S1].txt - [19195 octets] ##########

Dejte nový log RSIT.