Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Certifie toolbar - prosím o pomoc při odstranění

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Zpráva
Autor
ifka
Návštěvník
Návštěvník
Příspěvky: 18
Registrován: 15 led 2013 13:51

Certifie toolbar - prosím o pomoc při odstranění

#1 Příspěvek od ifka »

Prosím o pomoc s odstraněním certified toolbar, peru se s tím celý den a pořád se nedaří, moc děkuji

# AdwCleaner v2.105 - Logfile created 01/15/2013 at 13:48:40
# Updated 08/01/2013 by Xplode
# Operating system : Windows 7 Home Premium Service Pack 1 (64 bits)
# User : Iveta - IVETA-TOSH
# Boot Mode : Normal
# Running from : C:\Users\Iveta\Desktop\adwcleaner.exe
# Option [Search]


***** [Services] *****


***** [Files / Folders] *****

Folder Found : C:\Program Files (x86)\Protected Search
Folder Found : C:\ProgramData\InstallMate
Folder Found : C:\ProgramData\Partner
Folder Found : C:\ProgramData\Premium
Folder Found : C:\Users\Iveta\AppData\Roaming\Complitly

***** [Registry] *****

Key Found : HKCU\Software\Complitly
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{03119103-0854-469D-807A-171568457991}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{13119113-0854-469D-807A-171568457991}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{33119133-0854-469D-807A-171568457991}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{23119123-0854-469D-807A-171568457991}
Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Key Found : HKLM\SOFTWARE\Classes\Interface\{23119123-0854-469D-807A-171568457991}
Key Found : HKLM\SOFTWARE\Software
Key Found : HKU\S-1-5-21-2355624677-1456643604-1755079233-1000\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}

***** [Internet Browsers] *****

-\\ Internet Explorer v9.0.8112.16457

[HKCU\Software\Microsoft\Internet Explorer\Main - Search Page] = hxxp://search.certified-toolbar.com?si=41460&tid=3204&bs=true&q=
[HKCU\Software\Microsoft\Internet Explorer\Main - Start Default_Page_URL] = hxxp://search.certified-toolbar.com?si=41460&home=true&tid=3204
[HKCU\Software\Microsoft\Internet Explorer\Main - Default_Search_URL] = hxxp://search.certified-toolbar.com?si=41460&tid=3204&bs=true&q=
[HKCU\Software\Microsoft\Internet Explorer\Main - Search Bar] = hxxp://search.certified-toolbar.com?si=41460&tid=3204&bs=true&q=
[HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls - Tabs] = hxxp://newtab.certified-toolbar.com/nie?si=41460&tid=3204&new=true
[HKCU\Software\Microsoft\Internet Explorer\Search - Start Page] = hxxp://search.certified-toolbar.com?si=41460&home=true&tid=3204
[HKCU\Software\Microsoft\Internet Explorer\Search - Start Default_Page_URL] = hxxp://search.certified-toolbar.com?si=41460&home=true&tid=3204
[HKCU\Software\Microsoft\Internet Explorer\Search - Default_Search_URL] = hxxp://search.certified-toolbar.com?si=41460&tid=3204&bs=true&q=
[HKCU\Software\Microsoft\Internet Explorer\Search - Search Bar] = hxxp://search.certified-toolbar.com?si=41460&tid=3204&bs=true&q=
[HKCU\Software\Microsoft\Internet Explorer\Search - Search Page] = hxxp://search.certified-toolbar.com?si=41460&tid=3204&bs=true&q=
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Search - Start Page] = hxxp://search.certified-toolbar.com?si=41460&home=true&tid=3204
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Search - Start Default_Page_URL] = hxxp://search.certified-toolbar.com?si=41460&home=true&tid=3204
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Search - Default_Search_URL] = hxxp://search.certified-toolbar.com?si=41460&tid=3204&bs=true&q=
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Search - Search Bar] = hxxp://search.certified-toolbar.com?si=41460&tid=3204&bs=true&q=
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Search - Search Page] = hxxp://search.certified-toolbar.com?si=41460&tid=3204&bs=true&q=
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main - Default_Search_URL] = hxxp://search.certified-toolbar.com?si=41460&tid=3204&bs=true&q=
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main - Start Page] = hxxp://search.certified-toolbar.com?si=41460&home=true&tid=3204
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main - Search Page] = hxxp://search.certified-toolbar.com?si=41460&tid=3204&bs=true&q=
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main - Start Default_Page_URL] = hxxp://search.certified-toolbar.com?si=41460&home=true&tid=3204
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main - Search Bar] = hxxp://search.certified-toolbar.com?si=41460&tid=3204&bs=true&q=

-\\ Google Chrome v23.0.1271.97

File : C:\Users\Iveta\AppData\Local\Google\Chrome\User Data\Default\Preferences

Found [l.1] : urls_to_restore_on_startup ={"instant":{"enabled_time":"12975165532081988"}, "default_apps_install_state":2, "promo":{"ntp_notification_promo":[{"increment_max":1, "end":1357685940, "closed":false, "increment":1, "views":0, "increment_frequency":0, "max_views":15, "start":1356303600, "text":"M\u00e1te chytr\u00fd telefon nebo tablet? <a href=\"hxxps://www.google.com/chrome/mobile/?utm_sourc ... =ntp-promo\"> Po\u0159i\u010fte si Chrome pro mobiln\u00ed za\u0159\u00edzen\u00ed</a>", "segment":1, "group":0, "num_groups":1, "gplus_required":false}]}, "plugins":{"enabled_nacl":true, "migrated_to_pepper_flash":true, "plugins_list":[{"name":"Remoting Viewer", "version":"", "path":"internal-remoting-viewer", "enabled":true}, {"name":"Remoting Viewer", "enabled":true}, {"name":"Native Client", "version":"", "path":"C:\\Program Files (x86)\\Google\\Chrome\\Application\\23.0.1271.97\\ppGoogleNaClPluginChrome.dll", "enabled":true}, {"name":"Native Client", "enabled":true}, {"name":"Chrome PDF Viewer", "version":"", "path":"C:\\Program Files (x86)\\Google\\Chrome\\Application\\23.0.1271.97\\pdf.dll", "enabled":true}, {"name":"Chrome PDF Viewer", "enabled":true}, {"name":"Shockwave Flash", "version":"11,2,202,235", "path":"C:\\Program Files (x86)\\Google\\Chrome\\Application\\23.0.1271.97\\gcswf32.dll", "enabled":true}, {"name":"Shockwave Flash", "version":"11.2.31.144", "path":"C:\\Users\\Iveta\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\11.2.31.144\\pepflashplayer.dll", "enabled":false}, {"name":"Flash", "enabled":true}, {"name":"Skype Toolbars", "version":"5.6.0.8442", "path":"C:\\Users\\Iveta\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\lifbcibllhkdhoafpjfnlhfpfgnpldfl\\5.6.0.8442_0\\npSkypeChromePlugin.dll", "enabled":true}, {"name":"Skype Toolbars", "enabled":true}, {"name":"Adobe Acrobat", "version":"10.1.3.23", "path":"C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.dll", "enabled":false}, {"name":"Adobe Acrobat", "enabled":false}, {"name":"Java Deployment Toolkit 6.0.200.2", "version":"6.0.200.2", "path":"C:\\Program Files (x86)\\Java\\jre6\\bin\\new_plugin\\npdeployJava1.dll", "enabled":true}, {"name":"Java(TM) Platform SE 6 U20", "version":"6.0.200.2", "path":"C:\\Program Files (x86)\\Java\\jre6\\bin\\new_plugin\\npjp2.dll", "enabled":true}, {"name":"Java", "enabled":true}, {"name":"Microsoft Office 2010", "version":"14.0.4730.1010", "path":"C:\\PROGRA~2\\MICROS~1\\Office14\\NPAUTHZ.DLL", "enabled":true}, {"name":"Microsoft Office 2010", "version":"14.0.4761.1000", "path":"C:\\PROGRA~2\\MICROS~1\\Office14\\NPSPWRAP.DLL", "enabled":true}, {"name":"Microsoft Office", "enabled":true}, {"name":"Google Update", "version":"1.3.21.111", "path":"C:\\Program Files (x86)\\Google\\Update\\1.3.21.111\\npGoogleUpdate3.dll", "enabled":true}, {"name":"Google Update", "enabled":true}, {"name":"Silverlight Plug-In", "version":"5.1.10411.0", "path":"C:\\Program Files (x86)\\Microsoft Silverlight\\5.1.10411.0\\npctrl.dll", "enabled":true}, {"name":"Silverlight", "enabled":true}, {"name":"Windows Live\u0099 Photo Gallery", "version":"15.4.3538.0513_ship.wlx.w4m4 (ship)", "path":"C:\\Program Files (x86)\\Windows Live\\Photo Gallery\\NPWLPG.dll", "enabled":true}, {"name":"Windows Live\u0099 Photo Gallery", "enabled":true}], "last_internal_directory":"C:\\Program Files (x86)\\Google\\Chrome\\Application\\23.0.1271.97", "enabled_internal_pdf3":true}, "homepage_is_newtabpage":"true", "bookmark_bar":{"show_on_all_tabs":false}, "profile":{"avatar_index":0, "per_host_zoom_levels":{"mail.google.com":1.22390103340149, "maps.google.com":1, "accounts.google.com":1, "www.facebook.com":1}, "content_settings":{"clear_on_exit_migrated":true, "pref_version":1}, "exited_cleanly":true, "name":"Prvn\u00ed u\u017eivatel"}, "countryid_at_install":17242, "download":{"directory_upgrade":true, "extensions_to_open":""}, "extensions":{"autoupdate":{"last_check":"13000576769933461", "next_check":"13001440729759880"}, "settings":{"bndahdijlcnncjbpammoedeapmlobllc":{"blacklist":true}, "lndempehphjoeimfchjflohpmhamiamf":{"blacklist":true}, "mfncimdpmknolnnnccdmkpnpkaofonkc":{"blacklist":true}, "loldehkdjdncebfnncknlkdchjclifbn":{"blacklist":true}, "gpgehbjbkfhngdlfpfeokjgbkmmokjhe":{"blacklist":true}, "ggkpicnfnljflddbdoeeaajjgepapcbf":{"blacklist":true}, "ojglppmhgfohhfeinlhklglifnbfebak":{"blacklist":true}, "fpbkafpphnhlpakobppekmkebmbhkoco":{"blacklist":true}, "ghgphbmpcfgkfneodjpbdanmdoemklio":{"blacklist":true}, "dmabikjmolgegjajdhmgpmgffajlmmkb":{"blacklist":true}, "ehgoiaffgjoinpkllmmnikghgpghnabc":{"blacklist":true}, "efbeabpbbkahnnjalakldjfhljboclkf":{"blacklist":true}, "cmjphjljejnfgdbkdgdlclaabimpknna":{"blacklist":true}, "pndadpldhngimdmhnajebjldbmcbpjol":{"blacklist":true}, "nibohffepnilngkecenfdgnokfhmnkod":{"blacklist":true}, "goedioiidkokkbobdnopnlnaaalniegm":{"blacklist":true}, "cbhhdkemlehgodemcigfabmcdnohhhef":{"blacklist":true}, "lceaiepehinnomgijphkmjccbigkljkj":{"blacklist":true}, "iljfgjkppapinhcgonhjnipfppfmfedh":{"blacklist":true}, "gnapdhmknipknfmhhnhdmhakdfhgeing":{"blacklist":true}, "cbbbpmlnlpnjojeplppgeilanlihoojg":{"blacklist":true}, "pobponmhkpmphbnfhpjdagklbkmjhked":{"blacklist":true}, "nckmikohoilfkcoahbjpbgbpegcjgngm":{"blacklist":true}, "dkhkecikbdfpoiopnnpoeglbdphgflmf":{"blacklist":true}, "jbnafcjbcfgejacaanogofkkehcomamp":{"blacklist":true}, "ookcgejbfhcmcanfkfmmmpahflnlajbl":{"blacklist":true}, "jkmhalpofmlfeglboejbchpoijnkmcgh":{"blacklist":true}, "hcpndbchnlgojmnijaldkicigmihmdca":{"blacklist":true}, "ajlkjjdbgcjdiklbcomhnfghjigfccoh":{"blacklist":true}, "lkhcbijhgfchgdmklonlobkfbcadbokg":{"blacklist":true}, "kljhmdlkclaglodecegamnpioaflmage":{"blacklist":true}, "nloaaepkhcnmoakooihnefhhggbmemed":{"blacklist":true}, "cekdjgnecpoooikhmceokdhojckkkhmh":{"blacklist":true}, "jpeijjbllejgmokmahkeommcodahoobm":{"blacklist":true}, "lcmpleboacinanffcdgenhhbkboclkjb":{"blacklist":true}, "kkhomejdleoonmbdhcigkhkjcghngncf":{"blacklist":true}, "jpgidahfcgiajlcbleeiaibpmmblcmnb":{"blacklist":true}, "fbjjhbijaiopkcdolheliknnjlkaekeb":{"blacklist":true}, "pkhidkonipdjidjglnkfcfhnkfnlefbk":{"blacklist":true}, "pgelifedkjaohmjehecojkfldinjlamn":{"blacklist":true}, "hjnigaibahdeadcdnpnommdehajodlhc":{"blacklist":true}, "lookpbabilcplifjdeifacodednpacmk":{"blacklist":true}, "gkjmgdpdndoaiholejnmdbbpdaafahmm":{"blacklist":true}, "ogjbodghhojomghbdfnlkppdagkfjede":{"blacklist":true}, "hecijapnccjhonbmacmkmffooodfokoo":{"blacklist":true}, "lnjgjionmhobdfdegbciceafphgemjnc":{"blacklist":true}, "fbhiehmngojjcmljddjmgpmcockbccmo":{"blacklist":true}, "eijbdinddjecmebnlienfoijpjjobkjh":{"blacklist":true}, "jjnkfllhcgkgnfbekpnmoikpfihpjfli":{"blacklist":true}, "dgaehaeahdegbdlenicbmkbakhdgoeml":{"blacklist":true}, "mlmegahemifabfmdnndafagnncfbnahn":{"blacklist":true}, "nmmnodocfckpoddcgihiihcdinaonckb":{"blacklist":true}, "odeckaficnaplobiiaomegfbokokehhb":{"blacklist":true}, "jhhabiomopkibeecgngiggmopkeofacl":{"blacklist":true}, "hmmoglffhpmacaacfbbmbbkcbdkjphnc":{"blacklist":true}, "gandihaiobadcggbfkhpbkocmiemjlnf":{"blacklist":true}, "ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["appNotifications", "management", "webstorePrivate"]}, "page_ordinal":"n", "app_launcher_index":-2, "app_launcher_ordinal":"n", "page_index":0}, "dinhjcapnfbffhiihdlnbdfjdjjfhcbk":{"blacklist":true}, "clapnamcglekekmamicmbahkghdcjaeh":{"blacklist":true}, "amoobcjlpgloocplpikcldcpjjdnoeii":{"blacklist":true}, "gkjeccpmibljcfpfapfljciimedljpnm":{"blacklist":true}, "bnffnggkphadlnoopcoakdnkellnifjp":{"blacklist":true}, "acomnmbomlajgjbcijkflekoojdfcldj":{"blacklist":true}, "boclfockfmgcppbajihcgajhpggaakgl":{"blacklist":true}, "pjloefkigphblpjminnlpbhjchjafcfc":{"blacklist":true}, "hnkcpoijaeegompjgbjjhkdmljldaccg":{"blacklist":true}, "amfgdngndpfldigimkcindjalokfnmem":{"blacklist":true}, "jljfnkmkkdkppfndippkedacgfkafped":{"blacklist":true}, "kelljdoinjlkmkncffgadbebgpmlcang":{"blacklist":true}, "bhdkpmneahdelgdgfhddianklldfoell":{"blacklist":true}, "gngmkbiihflpghldjnbpemaicedhdddk":{"blacklist":true}, "hhlgbfcfbkhlmajakkcjippgpcmejkko":{"blacklist":true}, "lambangeielkjcnmioccboaphdfcffib":{"blacklist":true}, "jiofcofpcbijcnlpekdkpmgjdppajbjb":{"blacklist":true}, "pfhlnanelpgjbhndafjamnpfhkjadoip":{"blacklist":true}, "omnicnmbagoinlpamknknbcgopadcoci":{"blacklist":true}, "mknjbohhleiicbpagpgmhoaigbblmnic":{"blacklist":true}, "hgbaomphocgmdpmiohjclchaaljpaelp":{"blacklist":true}, "oidjdpbndkjhmhmgdoggibcjnippkcgo":{"blacklist":true}, "aldalonecchncedclgcndcndgilaclnk":{"blacklist":true}, "ijenlpgidnapbndonoinbkhekgjonojg":{"blacklist":true}, "eofejpelggimkodeojpeojnbijgiglgh":{"blacklist":true}, "kelcbonmemlciepjdmfcifnhloeammhj":{"blacklist":true}, "iiiinekimabooeihccihfopoadcaaphn":{"blacklist":true}, "nhbfbnmmdjkjahhfdeklgphihfodfgnb":{"blacklist":true}, "fhlkffpjoajppmhcakbkjndbjfljccpi":{"blacklist":true}, "hgboiaecclcbjphldpbgfgggcbihmnai":{"blacklist":true}, "kbipembkfhbdmkkkfbigmohilmknjnof":{"blacklist":true}, "hfpfbhnmbbigpmoodjemilggabklpopj":{"blacklist":true}, "nmphbnbmgfccfhcmibikmhcgajjpelpf":{"blacklist":true}, "jdiakcmbpmcnniggjcmcjknnklpdlogc":{"blacklist":true}, "hnonhhpgjnjcjfbkjdpfbkfpaodcmncb":{"blacklist":true}, "igkdgkdiiolilocklmiolkpoohacojop":{"blacklist":true}, "doneghboglgnflpdicnkaojmmljgejkj":{"blacklist":true}, "dgkemngdheppgohkjjelnkjmdeimmfml":{"blacklist":true}, "bokkificjhapflinbdejegngffgkcgfe":{"blacklist":true}, "liomofjeffddiiccaolcnllbhnipbkhe":{"blacklist":true}, "bioeopenmokdgbekbgpgnacecjmpckbb":{"blacklist":true}, "kdfahjokahcbmecgaandpobmgiiknagf":{"blacklist":true}, "aofechiiopolnegcjcddgedjabmkemhf":{"blacklist":true}, "gekkhpjigmckhgmgngadbeknekgpgolb":{"blacklist":true}, "ifbkndkaolfbjjhnnhfmkbkoclpdkpli":{"blacklist":true}, "eihjeehdobnpkonebmpanonopghepfle":{"blacklist":true}, "jabpdgllijbnknhkgjideeajfofafckp":{"blacklist":true}, "maakimnachffhlgdhfomaejeeaikgjap":{"blacklist":true}, "ejijgghlncnaphklndknkbkclebfboca":{"blacklist":true}, "lnahlgmhpghkhmafjppdidhcoaomipfg":{"blacklist":true}, "fclheclkknbgfndeahkfdomollhmfkcn":{"blacklist":true}, "dfoegfajplmijblljfancdapbdaopebb":{"blacklist":true}, "kojkdbedffnppdoalcfkkeelbhbklhgp":{"blacklist":true}, "nnioepmjbjjlflmdgjanlcmbjahljeeo":{"blacklist":true}, "oomelpjfeldbopnleifpjibbpekflhlg":{"blacklist":true}, "lodollblmkailkkdiijmoccefdfjohgk":{"blacklist":true}, "hhjmkijkgojfifipdgmiemghfikbohcm":{"blacklist":true}, "oghphhcagopecifjblgdcfihjnlcbcfc":{"blacklist":true}, "jmifipgdcllamghkhdplfjffkciekbgo":{"blacklist":true}, "fihepkmlkmciffbhijldnpmifhbkiinp":{"blacklist":true}, "onpnpccdagncipgnoofbhchlbajcjnkd":{"blacklist":true}, "elcaigjcaijbfpjngaekbblphmfjdhfo":{"blacklist":true}, "diinokaoicgobepmadnmedlhdfnpehcj":{"blacklist":true}, "jindbcpkhnnnjgcjgmkjedbibibiojjf":{"blacklist":true}, "mjalegijammcloleihdmooifidcjggjp":{"blacklist":true}, "bkkchglolnigbfncnbnnbhhempjkdpkf":{"blacklist":true}, "echngajnlpjeacbanjejlhcajjfoedcc":{"blacklist":true}, "aphncaagnlabkeipnbbicmcahnamibgb":{"blacklist":true}, "bilgncckogfgfipdlejkffnbkgjkmflh":{"blacklist":true}, "jfjagidcpadkoaonbogmbgfimmnefeie":{"blacklist":true}, "hhfiljkpjapjjphcocclhhaldpfkkjbi":{"blacklist":true}, "pkbkgagehkkoajkpgnmjegibihpalfdk":{"blacklist":true}, "lnlaeblencbjjjeaanegaldcjfekeled":{"blacklist":true}, "dadcalgappognjbjpalfophhcfakoeac":{"blacklist":true}, "eiflkkehgogioennialfbilppmegcpoa":{"blacklist":true}, "fnhcgnmfccojojojacgeiaaeacefdohb":{"blacklist":true}, "kcgplbmkmfcpngilmhjmebdgkkpbdemp":{"blacklist":true}, "fnoadkjdjfgafomgmablhmffooijcfbn":{"blacklist":true}, "gplgjmecjpbfcdikpbicknafcnfcidek":{"blacklist":true}, "gifglngcdbggmlgkcombebegdaoknkho":{"blacklist":true}, "aebfkgcamgnimcbnbiopgdakknjgggnm":{"blacklist":true}, "mogepbcllienegdibkfpmombhefhcoic":{"blacklist":true}, "fnkaadkanmfgpfbmdcllhjdgmdbgljpi":{"blacklist":true}, "pkbbbncikcipejaiiiioboongndhmjgl":{"blacklist":true}, "benclngoadbppljglhphhnfknoppmjoa":{"blacklist":true}, "gbenikfjhilhpgagllmfgggdjaflbmbi":{"blacklist":true}, "iggjepemmdkieakihpomccndhdfcljdp":{"blacklist":true}, "npadaghbcdejfngcjpbnoikajdnongca":{"blacklist":true}, "ljeihpebkahejeacdalhkhmckmggppif":{"blacklist":true}, "hdnbmmfjbblajkjkcaeofolgfnljpnim":{"blacklist":true}, "mfooalpniplhaaealemjpchkchmmgdko":{"blacklist":true}, "pkbkkendemaimikinaefldfljliecapm":{"blacklist":true}, "nhboiakpmibkbkbeehchlfkggmhphpnk":{"blacklist":true}, "hcapokajkngndbglnfglpfdpoeidmpha":{"blacklist":true}, "jcmipejepoimfflnoapdmkdephgjinck":{"blacklist":true}, "odnamglmogfldajnhkfodmloofeokcmm":{"blacklist":true}, "emcdpbapjmnjgoannclkongdfboaabho":{"blacklist":true}, "lplmcpcnhpbffpcfiaddbeaplhhbengd":{"blacklist":true}, "hjkhligcnpfjhjlapmejaiaiigibofif":{"blacklist":true}, "echjhfifjidfhoappglfmoffcpmpkigb":{"blacklist":true}, "leccghfplhenabeogpibljliijgapfgb":{"blacklist":true}, "pcaedgdgamlfffkfblocmakhgieggoak":{"blacklist":true}, "mnichagcickblneeijmfnmoiakigmmhf":{"blacklist":true}, "bldgnkigdcpgnbfehgbameigoohecdfl":{"blacklist":true}, "cfogpbanfnocakdckmgafapdlmclpiln":{"blacklist":true}, "kmlebjoghkhpapfhbdikannggmmffnco":{"blacklist":true}, "nfecfkjnlkbphobjbcnphimihniieehc":{"blacklist":true}, "fpokembamndopkflopmplkklbdngnknd":{"blacklist":true}, "negkalblfongjbphdcbbhddlickhlamd":{"blacklist":true}, "nochkknnbahbhmmknnmdhagelcnfagom":{"blacklist":true}, "mplhbhmkccidaokcelbcbcmhhedebcng":{"blacklist":true}, "cbjlfaogacjpkplebfbijaakaifoflno":{"blacklist":true}, "fnnmbghphdnmmjdapccfobgjemjadeli":{"blacklist":true}, "pbdgmppmccanplobanhfkjndjkmmabgk":{"blacklist":true}, "ghmaokcegalalefnhlfcnjhnpdbanjkj":{"blacklist":true}, "jbfebbkjjmkcoldeaeelhpconkmgjhbg":{"blacklist":true}, "lgalokbapphhklmilicdefmgbjkcmldf":{"blacklist":true}, "mlnoedbhndgbjcbeadjfnmjloejlgojk":{"blacklist":true}, "fpbippbofbmgmbojjmgfcifpmdaelcmd":{"blacklist":true}, "kdjhalklkkcmodeicjiaekcgifkcepaf":{"blacklist":true}, "ahjfgnikolodijnpakeknpilnemojlhc":{"blacklist":true}, "egljdhfnbjahogjahnigfnbpidlmdagi":{"blacklist":true}, "gncfgndgeoddelbfhlndhljnecoednaa":{"blacklist":true}, "ehmjnpjodmgeocfphkjjnheiheehcoid":{"blacklist":true}, "gkhbgnodbilglgholifcjdblbgdaieah":{"blacklist":true}, "hnbcdmfeoldeppcbnnjmjkdofohaljbn":{"blacklist":true}, "agmhonoepgcnakccfpidhjehlocaeaaj":{"blacklist":true}, "lhajoamjgchgljkdjigcgmmcehjkagan":{"blacklist":true}, "mgdgiplcofghdmpekdeeceolepakodcb":{"blacklist":true}, "bcddmcejgphfgofbpoocakaeapfomlek":{"blacklist":true}, "glhhlafadlhkgbklgbjnmblfhnkfknbm":{"blacklist":true}, "megkcfpbmemnpkgadkoompnoajcolpni":{"blacklist":true}, "oilfokmpgejhjhecdjjpikloibggpenf":{"blacklist":true}, "mplpabdbfbloeiboikmdbnggfnjbjmlh":{"blacklist":true}, "hpibmhghjndideebpackbdlpncgkcppp":{"blacklist":true}, "fjjeecfjmgfnleghoellhldedkaocjfc":{"blacklist":true}, "pbglijbamgmlcpnnpbfjkbdeheejjloj":{"blacklist":true}, "loggadfheaoeabmkgolecncpfdfioefa":{"blacklist":true}, "nlgapikcofpablcmfgaoodlhiejiehhh":{"blacklist":true}, "kgdmldjagfciieddcnlhampgkajkpanc":{"blacklist":true}, "iomejadoamfilglofmeaffghddcgapmf":{"blacklist":true}, "foenbafkkmajnmfnlcmejonkfaipdmme":{"blacklist":true}, "djnahdkbfgnhgpakidinfonfcjbagkgp":{"blacklist":true}, "cepfogmgfkddnllaopgknbdfkceejmhk":{"blacklist":true}, "lojppnndedobolgfepahepphhloediji":{"blacklist":true}, "ocnlnkjmfnolmbclblfhfhcakldceiec":{"blacklist":true}, "aojicjocmihiopalnhjikigammkhgckb":{"blacklist":true}, "gaicmfjflflabagobdiodejfpjikheeo":{"blacklist":true}, "pkdlpbfmpolnhligegklimbccminkioc":{"blacklist":true}, "pjdhkkcnlbfebiokpeghfffajaabahfo":{"blacklist":true}, "dmhjdbigobajgnfoabodjgmcdgoeoljm":{"blacklist":true}, "peahabnpipmmfiajjjhgfggbeigbmbgp":{"blacklist":true}, "bdgijcibmhjjccgbdohofncdjcophknj":{"blacklist":true}, "nidodbfomffkfabciljelkbdiabkeehe":{"blacklist":true}, "niobhlbhocdlohhfblbpkcakfpiclfio":{"ack_external":true}, "dpmloehicimdjkibmobhmpgdndgbcced":{"blacklist":true}, "fpmajanjndhgpifbcbnklbiehgnpkgmf":{"blacklist":true}, "gjmhdmobkhfhkpfmfegnkkimlamjdldi":{"blacklist":true}, "mkobblpffgbncfhijabakfafmkjdmmnm":{"blacklist":true}, "dmkdhgkknhnfpdjeicefnpmhcpbimden":{"blacklist":true}, "noefghcilkpcabnhhilojimkkjplhcnd":{"blacklist":true}, "pfonklmafadkmcedjlodommcoipgbcde":{"blacklist":true}, "bkplhcigeaiiliajeehehiikokgocbhb":{"blacklist":true}, "iemfpgbdjfoihicbocpbjppipdbfimeh":{"blacklist":true}, "hhbihfbjoifhhebcnchglobmkmapgjkm":{"blacklist":true}, "cihlkpohodpdkdnfalhdkhhlhmhffmbe":{"blacklist":true}, "naopgnjebjeeedbbhcadkhkmeefmloho":{"blacklist":true}, "aakhlmakppmkkmfkoibponkmmpgpmjgl":{"blacklist":true}, "oanjogmonneelfpnfmdlalfddkeckdej":{"blacklist":true}, "kcanfkmhccbaheheaackijegkclkaeic":{"blacklist":true}, "fommcgokigkhmnhlhlkckfjhefnmfohd":{"blacklist":true}, "kinhljbhjmcmoddhdoodekeklmjapjff":{"blacklist":true}, "aandpgohbohmlknpjbblpmoladhoochg":{"blacklist":true}, "pnpfkfanlgljpkpilhgiimfadggfmhcd":{"blacklist":true}, "pbekednmpdekknlffkiopooofokfmkla":{"blacklist":true}, "abfclfmhaemoockhhinpplncjehfpdbd":{"blacklist":true}, "kiipngoehgkgkackngaidmhmnchfbmio":{"blacklist":true}, "ckckpgefkpjfopjppjfcikppehdhceah":{"blacklist":true}, "fibgploapkhokkbncddlkcmbmiengcfp":{"blacklist":true}, "pajgiddgjidlcajihkjoacjbplimkgfe":{"blacklist":true}, "hbaajkahagmlkdekmbdabikbopdgpaac":{"blacklist":true}, "mlmmbepkgelpbenpobinockmiehdahai":{"blacklist":true}, "bkhafliomebnpccanacmlfaemgfiofko":{"blacklist":true}, "oocfbmollajebjjpkahmlnclfhkjijea":{"blacklist":true}, "dhclobcklknojliojkkclgjndemadnig":{"blacklist":true}, "jfhmafmjfdblceidmfdmoihamolaaeco":{"blacklist":true}, "ihnembcpodnfgkafmiojebccomjekopm":{"blacklist":true}, "jgdkappiifgomhgikcjbanhnmlekpeje":{"blacklist":true}, "aljdncnajablgppdcfbehhmidlmbndda":{"blacklist":true}, "idbdlnkdnaodonmgnimcfelpngbmcpjk":{"blacklist":true}, "nmgpbidjnaebdlbdbpjggenmbaolmfoi":{"blacklist":true}, "gmghjgfdialcnhadahmjefeflgnhcjeb":{"blacklist":true}, "kibgmcdcfmcglajcfbecilngejnfppjp":{"blacklist":true}, "ijecjbcgpblkacpijljpaienknanaloa":{"blacklist":true}, "kgbkdabomfdpfoibliicpmibceaoohgh":{"blacklist":true}, "cjohbbapkbkkhpohinffggbphnhoblea":{"blacklist":true}, "ejakhnjbomgngodiidgbkapjgbdckhnh":{"blacklist":true}, "jgoljhcbgajhbhnchplgjdkknendhjnn":{"blacklist":true}, "mfffdpnblflpobcnekhekiahepofaane":{"blacklist":true}, "acmpfcamncegnhjdeiodgilikjafcamg":{"blacklist":true}, "phkpgooenaonkpnabopdbjjfmphclela":{"blacklist":true}, "fmcccidacjgnfiafddkngmeolkoiihil":{"blacklist":true}, "mpgehpkneknbopplhmmkfijfiniddipf":{"blacklist":true}, "efnaljpgehfilpmkhobibbjceeeondmn":{"blacklist":true}, "edmnikahahfkfilbbjbdoiabnghbkmjc":{"blacklist":true}, "mcbkimglepddodbiongpohpeidioafgk":{"blacklist":true}, "hbmlheccjkodhfejcmblndjodllmnlnl":{"blacklist":true}, "epbmnbdplhcomkedpjfceakddnbgfjmf":{"blacklist":true}, "iablioliielnhdianpbiijaoncbmfend":{"blacklist":true}, "ijjmbbddenkbenbcfldgghhjgjmcnioo":{"blacklist":true}, "lnbeebaenahmkbffnimghceldeeihfak":{"blacklist":true}, "dbmdicehacbaohlockjgdglcobimmjkh":{"blacklist":true}, "fleljamdchegbjeiipbnmiebnhgheeld":{"blacklist":true}, "afenhmponmfmdmbmccbmglppcmjhmhmh":{"blacklist":true}, "efhjelcghjkfigiagdfbfilndaffpmdj":{"blacklist":true}, "lkdimamelhbiijkiljlnedmhnnkkmlbl":{"blacklist":true}, "mjgobkikdipfikmaoakdcdbicpioljgg":{"blacklist":true}, "nhkmojkfnknbbmhbnacjdlodokeophkl":{"blacklist":true}, "mnhcgaghminpdabllkbkecahjfkdiabk":{"blacklist":true}, "cgnegjfmdfenjojhjffejinpnpoglmlh":{"blacklist":true}, "fomljmklmcefndkgpakgifbiiidgbjej":{"blacklist":true}, "hhfffemhgkginfafaoapljdllodppana":{"blacklist":true}, "nepfiodmbijheamafkiglonfkjebdjmf":{"blacklist":true}, "jgmpapdckakiohhebmeoemejibommimi":{"blacklist":true}, "onjaecbdddgibdijafoemfiachlbcgkj":{"blacklist":true}, "jpkdlckejfjidmplieobnhijmoiecbhl":{"blacklist":true}, "dgcfmgdfbfbgcpbendbhbkfjppboebed":{"blacklist":true}, "kdchmeaiapjkejkcbeclgjklemecieeg":{"blacklist":true}, "kffhenjbibjnbnjhlkcdlmpeccpaohio":{"blacklist":true}, "gobjcjhhebpjbmjdgmejhebbleadnceo":{"blacklist":true}, "ljcicfibknpmlcmcecddjlbgkejehhpa":{"blacklist":true}, "cdogaeccgljmkecjmoedambgiekkllij":{"blacklist":true}, "hefmoncdemhjembgbnkgglhlookbipdc":{"blacklist":true}, "dlobhinihbmedmheccecfnkcadpehmbf":{"blacklist":true}, "fpjdackpllilinpkgmhkpidkanmccblc":{"blacklist":true}, "copjbedljgpkaakkmbhgkpoaadeahido":{"blacklist":true}, "cfbdodejdeejbkffcmiaknpmojjeibpn":{"blacklist":true}, "jmeanodbelbflfmnkfdjgpikmldgjjko":{"blacklist":true}, "gfjfhihpkmehdmblhfaikkipeplpdcla":{"blacklist":true}, "pgldfhecfiofkhnbgcncepnkjkeoahlk":{"blacklist":true}, "hdijkiondgomjpehfhopomicjbiodmcm":{"blacklist":true}, "lkfdchejjogilmloogbbjlnlpbhgjfab":{"blacklist":true}, "lpgiafapdmlapiokjnmpbbfkomiceoml":{"blacklist":true}, "eopmhecjnginkckggjmhombbopmkjpam":{"blacklist":true}, "kgdkcodealpfjolmiagcogfbgmaamegh":{"blacklist":true}, "jmbkhogpjgjpfjhpdikloblkbkljkgao":{"blacklist":true}, "kleaapgdkahaekcocmkbgfainbhihccj":{"blacklist":true}, "fjhfnfakmfcejgmfkmnapemgblmehppf":{"blacklist":true}, "ldgfapfmnplpaohbbadnecegcpfkfall":{"blacklist":true}, "omceiakkomngangmllpgbjcoeloglald":{"blacklist":true}, "hkbgccpdcpbdckohbknjlamamelcnlki":{"blacklist":true}, "cpiiakoibaohkfoaijaigdnocfolnmll":{"blacklist":true}, "aemcjbfajnnmhblifaejadoecfoaebld":{"blacklist":true}, "fngolbdmkneakeaoiieafkilnogbocda":{"blacklist":true}, "hfjpjodbolkmheaehcnmfhjakjileoof":{"blacklist":true}, "ejlekamipdcfcfpgfepjmklllbpeecaj":{"blacklist":true}, "hgjgaeknhmidehalnmokomhpfhbfmpcm":{"blacklist":true}, "ehomcoocpagnlcakcbecdaknmacmedld":{"blacklist":true}, "jeehjhnmgohgpfpjneglogiholalkeip":{"blacklist":true}, "gfmmoiakbmdohkgeoekiokjgljcminig":{"blacklist":true}, "jpehgolpfgnknboibogccapmdcadjkbd":{"blacklist":true}, "ilhjicgcglhjigdehkcehjdokmkahbjl":{"blacklist":true}, "iobnpmeeecphddicmhhmdjbnlbdhjlne":{"blacklist":true}, "pjgbfgdpkbfimabdalhjmmeeelbmkcac":{"blacklist":true}, "iccblehkchfmjgfafjcpjlkjcponhdhl":{"blacklist":true}, "jaejgaoiipdjjlbnapngknalafalbkej":{"blacklist":true}, "lcfkojlnjnedeoepfemhdgkhiabkeadc":{"blacklist":true}, "pnpgiaejfbdapllkchhgchjpdbcpiooa":{"blacklist":true}, "hilncbjbdpnfepdidfchmdclhpnlegpj":{"blacklist":true}, "hbdhabpmbbanaopgkbaondabkkepjfaf":{"blacklist":true}, "dbiblcmlcgdjjbdpbmbcpineegngkiip":{"blacklist":true}, "ncpdanjmicnihdlijomcggnnekloephc":{"blacklist":true}, "igaajdmlejbjcbmpmnigopikfdaccdcm":{"blacklist":true}, "gjkbghdignnlcknknflbigpammebiolo":{"blacklist":true}, "obgljnmbldahelaakfdbjkplokjoneip":{"blacklist":true}, "jkihmglffmfjedfbpbpdbbimcodjbmdh":{"blacklist":true}, "clfhanhcjmgjnbpjfopldmnabimhmcmp":{"blacklist":true}, "onfbaaifbbahonepmednhkjbhdgogkbl":{"blacklist":true}, "ljmjoloiepllcndinchenhomcdcgbgef":{"blacklist":true}, "pfgmgcnbngcnhjddppmnloflcidemopc":{"blacklist":true}, "pnnbdjcjeiobikdfikegpclkcimgafpp":{"blacklist":true}, "hfcgbiofoebieldldghfocjfnnajmpej":{"blacklist":true}, "boaoagnmpennjoigkkmnjhecapibhfko":{"blacklist":true}, "ppmfajacidhcjbddpgmcmigffpppcadd":{"blacklist":true}, "danapgfidmepmcfbjjacceiaiiioieio":{"blacklist":true}, "ldmoahefokhfelhpbgfjpelcdbahdofk":{"blacklist":true}, "igghanohiioehififjoalfkdoicafjof":{"blacklist":true}, "jddbdddmbfencninofcgnodekclofpaj":{"blacklist":true}, "hkjcejgfmaanpncnpoidgbhoikcaeepd":{"blacklist":true}, "dbanhghadfmjndnjmmejdgfdmgidlbpm":{"blacklist":true}, "opnnngnphijodjhemhdafpnnpdjggofe":{"blacklist":true}, "imkffpjpdngdkpgadcmnlkhhmhdocijn":{"blacklist":true}, "fafoohpbicgbcejffcplajonhhooddle":{"blacklist":true}, "igbaoknfddliiaoimhehfbkfekpmmfll":{"blacklist":true}, "nifbebeekindefklojhchehidpikbjfc":{"blacklist":true}, "ilmknaabackgdbnkgbihgpgiopnlkjek":{"blacklist":true}, "mdngbiejioalifclonjepjjfppmbgned":{"blacklist":true}, "magllcifjcllaafcdplnajmobccbcdlo":{"blacklist":true}, "abciiempgohamehppammbkhkicmkgkob":{"blacklist":true}, "gdggdkkjecogagaffaemnbfmllcoihjp":{"blacklist":true}, "ndhkiimgbjnendpcfbiadlifmangejoa":{"blacklist":true}, "mhbffdldpckobeihgebaamjalehefnia":{"blacklist":true}, "cnimdnlablahacgompaahbgohcokcclp":{"blacklist":true}, "oakhllhnbcpgagdafgbninlpjdemdmjk":{"blacklist":true}, "mbmdaiddhfoljplpdhohimgieioblfif":{"blacklist":true}, "deonbedlmakdddidplniclflladdjoep":{"blacklist":true}, "npolaghondefgiomhkbiiompikfjneep":{"blacklist":true}, "caphkimknlmnhpjoneddiaakmcaajagb":{"blacklist":true}, "mmjodihhmnpkldljaifiajmlnpflfhpm":{"blacklist":true}, "mdiehnlecbjlppbpaaipmlnhhjgepfcg":{"blacklist":true}, "jbmbiepnidbnhbbfdbgioomdkgnbcacj":{"blacklist":true}, "lgcnahanhlfpceencjmlehpfklokhojk":{"blacklist":true}, "ebdcdchjcndpjhehacedepnggfdbfkpn":{"blacklist":true}, "mjolnadmlahbpepjaemohnkhpjkbhmef":{"blacklist":true}, "deocpjmfifplhepinpkmpinpnbiemfje":{"blacklist":true}, "likifpgnijjfbdegfepoalpamlgnfofi":{"blacklist":true}, "lbficnmfealeidppcbgdcbemgfjodbkg":{"blacklist":true}, "mndoohjdoechinpkfbkolflbonciahfo":{"blacklist":true}, "fiapkdjniadkodmdibdnchoifkpfoiid":{"blacklist":true}, "cbbjhegipokkofhhicbckicchjpcpeni":{"blacklist":true}, "hkjfdgjkgpbbdmadbglcgljjjddkcdha":{"blacklist":true}, "aifmjmboebdkdelpjenakhaodgneempp":{"blacklist":true}, "lljnngafekbnkpdfophmcdlbfebcbcld":{"blacklist":true}, "fcfepemfihgibdacjlnlecebknaaepmj":{"blacklist":true}, "cjhklhdjonhcohlacgggcbklpnldleck":{"blacklist":true}, "kcfnnanmpghdnoompcfclakpacapnfbn":{"blacklist":true}, "bjihddggcgnblgojnmhpnngonofbnkaj":{"blacklist":true}, "fmonlemffgbabjifjfaoamdflijecdbk":{"blacklist":true}, "coajchbkdbfhmhbgcjepiofllfjjcpfp":{"blacklist":true}, "pfcelnbmkeoaeicedjomcjkcammlkdbk":{"blacklist":true}, "pfoiaildicnbcjojocjlpcibenphhbln":{"blacklist":true}, "imfbomjbodpfgfhfahlgkkcllmhbelhk":{"blacklist":true}, "hnnebfeppcbhhbhiifeaajgcjnkljlld":{"blacklist":true}, "hncomkjbbkchfjelocejkbbflmjhlhfp":{"blacklist":true}, "nbieffehfdniifkgdckbndjhojohbfjj":{"blacklist":true}, "hnipgljcblpgnnojcfldehpeknhakbgj":{"blacklist":true}, "mamfageekafifnickhgkibkofcclfefe":{"blacklist":true}, "apdmgffkfhjfeejmbjidennfjdkmmmbl":{"blacklist":true}, "mandondadnlimicalgkbkaohmeopdojj":{"blacklist":true}, "lifbcibllhkdhoafpjfnlhfpfgnpldfl":{"from_bookmark":false, "active_permissions":{"scriptable_host":["file:///*", "hxxp://*/*", "hxxps://*/*"], "api":["plugin", "tabs"], "explicit_host":["hxxp://*/*", "hxxps://*/*"]}, "location":3, "was_installed_by_default":false, "install_time":"13000574444420345", "lastpingday":"13000550402200461", "state":1, "from_webstore":false, "manifest":{"plugins":[{"public":true, "path":"npSkypeChromePlugin.dll"}], "description":"Skype Click to Call", "key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDMxFysW3wPKWRPPe3xuJQz3m1ZDLX1hN8EYdP37tRPf7lp8vIhG4xirlXHGK748qcLPc4Lm8WsHDhvS5okN54Kwcnw4T2tBXSCZJxMmlu14HZ5yc/t969QLTPLIbAsasq4NVo40YuP2B7umxV9BlcxZEB9TEKPEQq8DRoKhj9jBQIDAQAB", "name":"Skype Click to Call", "background":{"page":"background.html"}, "version":"6.5.0.11422", "content_scripts":[{"run_at":"document_end", "matches":["hxxp://*/*", "file://*/*", "hxxps://*/*"], "all_frames":true, "js":["contentscript.js"]}], "permissions":["tabs", "hxxp://*/*", "hxxps://*/*"], "browser_action":{"default_title":"Options", "default_icon":"skype.png"}, "web_accessible_resources":["change_sink.js", "contentscript.js", "document_iterator.js", "find_proxy.js", "get_html_text.js", "global_constants.js", "menu_injection_builder.js", "menu_injection_handler.js", "name_injection_builder.js", "number_injection_builder.js", "string_finder.js", "flags.gif", "numbers_common_active_icon_set.gif", "numbers_common_inactive_icon_set.gif", "numbers_free_icon_set.gif", "skype_name_icon_set.gif", "space.gif", "call_icon.png", "dropdown_menu_icon_set.png", "numbers_button_skype_logo.png", "skype.png"], "manifest_version":2}, "path":"lifbcibllhkdhoafpjfnlhfpfgnpldfl\\6.5.0.11422_0"}, "mcknnlhkkdbcppajgefagceglahcafjd":{"blacklist":true}, "flmmgcfcpbfddenepkfmgfpbaceolcoe":{"blacklist":true}, "hpcdoodjfcmpcpkeendjnjkeinimhkih":{"blacklist":true}, "ocmhjnhildbnglmlfimkjnnfgddelacb":{"blacklist":true}, "fpoajjnnpmledpmohlgpgbmlhbgkgahg":{"blacklist":true}, "pgjpnfpidejcmjibaaohcmehfohacckf":{"blacklist":true}, "jfalnphfjdoalcdhlnhdpekbmmopkgkj":{"blacklist":true}, "peiijdmlgbelnnmnkighhkpeihmmamio":{"blacklist":true}, "lncjcfkpannmofmpgdfoonkniofdnaba":{"blacklist":true}, "ojmdhklabgbnnkkilmkcfcemdhognifc":{"blacklist":true}, "ckphhghhpjbfddcgkpfbelfeojcciglo":{"blacklist":true}, "cgnkbnaiipmfbakpmhllalggoepniemh":{"blacklist":true}, "pnaiiipilbpcceggeanphcpkkihnojan":{"blacklist":true}, "anmjpohfnlopdfaojooicpemopnliimn":{"blacklist":true}, "aglmapjbjphdidmnileogpjkgpdoliep":{"blacklist":true}, "nihhbeikpchdddoillfdcdinnnnllmna":{"blacklist":true}, "dmhgenmamfphbclmhdgmffajkfommkom":{"blacklist":true}, "dejippphmhbpgckbhdidnjmdcpfccbaj":{"blacklist":true}, "ffgfbfakpcnngelphjnppokmoicdollk":{"blacklist":true}, "indfhnliadamglhalanplbajgenpjdml":{"blacklist":true}, "alfahpoknocfdebmiclonikapcnljlob":{"blacklist":true}, "aconhjfogglfnkjhkjipaifepjklolog":{"blacklist":true}, "ifeijfpkjckedpclgncedmgdiaoeahmk":{"blacklist":true}, "plfijddblbcdcnammpdmfccchkbdekmm":{"blacklist":true}, "dlfienamagdnkekbbbocojppncdambda":{"ack_external":true}, "nidmbljkkcbdfklgdkklgjgmhejmbojn":{"blacklist":true}, "dnemhlkdpajbbniphgkgceplmnkfnhfo":{"blacklist":true}, "aieglpnmmhleoenpbmfaffppfomgjmba":{"blacklist":true}, "pfaooklcbjnkgconjjepimkohgcjmdji":{"blacklist":true}, "mfhfkclojmdocagbmecgcnlofppebebd":{"blacklist":true}, "kgdhnhadbnpeibkghaebmhmngobdafag":{"blacklist":true}, "lbaddolhebpnhdcdkicpcflhnfamcemn":{"blacklist":true}, "cmlokmkdolieoaoddlfhaidnlmiadhik":{"blacklist":true}, "aieihijcjcccdiepockaiekhpflicdii":{"blacklist":true}, "lfggokjjaanlfikbbapgnfemifmddalf":{"blacklist":true}, "alcbnnpmipohgdllkkglhkbncijplago":{"blacklist":true}, "akbdojiajlefghcdclgkgmbbljamgehd":{"blacklist":true}, "ndiogongcmocdgjciemhagfhpjamehpe":{"blacklist":true}, "kolbbghckjilleabphhgeggcgpfidofi":{"blacklist":true}, "janhdpmhnighonkkbkdpnljcoenpfkbh":{"blacklist":true}, "dpgenihgggagjjggfocjceeobjkadcbc":{"blacklist":true}, "icihfeaofpcfehanhbnjigdlpfahjlee":{"blacklist":true}, "mnllienogacopjnkmhgnniopjpgjpopp":{"blacklist":true}, "pihcfdffalbcnmbghijdfcaanagapelf":{"blacklist":true}, "dfafokiagoiocidlpglcanjkcdbdnioi":{"blacklist":true}}, "toolbarsize":-1, "chrome_url_overrides":{"bookmarks":["chrome-extension://eemcgdkfndhakfknompkggombfjjjeno/main.html"]}, "alerts":{"initialized":true}, "blacklistupdate":{"lastpingday":"13000550402200461", "version":"0.0.0.136"}, "toolbar":["lifbcibllhkdhoafpjfnlhfpfgnpldfl"]}, "google":{"services":{"username":""}}, "ntp":{"app_page_names":["Aplikace"], "sign_in_promo":{"group":23, "group_max":100}, "pref_version":3, "promo_resource_cache_update":"1356965612.951483"}, "session":{["hxxp://search.certified-toolbar.com?si=41460&home=true&tid=3204"], "restore_on_startup_migrated":true, "restore_on_startup":4}, "tabs":{"use_vertical_tabs":false}, "translate_denied_count":{"de":3, "en":4}, "distribution":{"verbose_logging":false, "create_all_shortcuts":true, "import_search_engine":false, "import_bookmarks_from_file":"c:\\ProgramData\\Google\\TEUA_bookmarks.html", "skip_first_run_ui":true, "show_welcome_page":false, "import_bookmarks":false, "system_level":true, "make_chrome_default":false, "do_not_launch_chrome":true, "import_history":false, "require_eula":true}, "dns_prefetching":{"startup_list":[1, "hxxp://www.google.com/", "hxxp://www.google.cz/", "hxxps://accounts.google.com/", "hxxps://accounts.youtube.com/", "hxxps://ssl.gstatic.com/", "hxxps://www.google.com/"], "host_referral_list":[2, ["hxxp://0bps664l3vqk05dj8qih0t5renri9iic-a-ig-opensocial.googleusercontent.com/", ["hxxp://0bps664l3vqk05dj8qih0t5renri9iic-a-ig-opensocial.googleusercontent.com/", 0.52957078190717, "hxxp://csi.gstatic.com/", 0.538226537613228, "hxxp://i.ytimg.com/", 0.525905985393395, "hxxp://www-ig-opensocial.googleusercontent.com/", 0.530244863625682, "hxxp://www.google-analytics.com/", 0.538226537613228, "hxxp://www.gstatic.com/", 2.10362391924419]], ["hxxp://0bps664l3vqk05dj8qih0t5renri9iic.ig.ig.gmodules.com/", ["hxxp://www.gstatic.com/", 0.160825578767067, "hxxp://www.ig.gmodules.com/", 0.0698600789953928]], ["hxxp://194.213.41.26/", ["hxxp://194.213.41.26/", 0.503839626328982]], ["hxxp://ad-g.doubleclick.net/", ["hxxp://googleads.g.doubleclick.net/", 0.337895427288852, "hxxp://pagead2.googlesyndication.com/", 0.337895427288852]], ["hxxp://ad.technoratimedia.com/", ["hxxp://ad.technoratimedia.com/", 0.151081078468848, "hxxp://ad.yieldmanager.com/", 0.199091816027285, "hxxp://content.yieldmanager.edgesuite.net/", 0.244327532954844, "hxxp://cookex.amp.yahoo.com/", 0.0959723347149026]], ["hxxp://aleskaambr.webnode.cz/", ["hxxp://imagebox.cz.osobnosti.cz/", 7.40128289035168, "hxxp://img.osobnosti.cz/", 7.3854393469574, "hxxp://nd.blog.cz/", 0.599712799675286, "hxxp://static-cdn1.webnode.com/", 0.654821543429231, "hxxp://static-cdn2.webnode.com/", 1.53656144349235, "hxxp://static-cdn4.webnode.com/", 0.379277824659506, "hxxp://toplist.cz/", 0.379277824659506, "hxxp://www.google-analytics.com/", 0.489495312167396, "hxxp://www.ivillage.com/", 0.379277824659506, "hxxp://www.karolina-kurkova.info/", 0.654821543429231]], ["hxxp://apps.facebook.com/", ["hxxp://0-jg-w.channel.facebook.com/", 0.540951316411741, "hxxp://apps.facebook.com/", 0.385083987954121, "hxxp://creative.ak.fbcdn.net/", 0.346117155839716, "hxxp://photos-a.ak.fbcdn.net/", 0.268183491610906, "hxxp://profile.ak.fbcdn.net/", 0.268183491610906, "hxxp://static.ak.connect.facebook.com/", 0.346117155839716, "hxxp://static.ak.fbcdn.net/", 0.424050820068526, "hxxp://www.tripadvisor.com/", 0.268183491610906, "hxxps://s-static.ak.fbcdn.net/", 0.501984484297336]], ["hxxp://articles.nydailynews.com/", ["hxxp://ads2.adbrite.com/", 0.379277824659506, "hxxp://articles.nydailynews.com/", 0.709930287183177, "hxxp://assets.nydailynews.com/", 0.875256518445012, "hxxp://cm.g.doubleclick.net/", 0.379277824659506, "hxxp://open.ad.yieldmanager.net/", 0.434386568413451, "hxxp://s7.addthis.com/", 0.434386568413451, "hxxp://tag.admeld.com/", 0.599712799675286, "hxxp://us.bc.yahoo.com/", 0.434386568413451, "hxxp://widgets.outbrain.com/", 0.434386568413451, "hxxp://www.google-analytics.com/", 0.544604055921341]], ["hxxp://c.imedia.cz/", ["hxxp://1.im.cz/", 0.599712799675286]], ["hxxp://cs.wikipedia.org/", ["hxxp://bits.wikimedia.org/", 1.43125133325533, "hxxp://cs.wikipedia.org/", 0.539446878078903, "hxxp://geoiplookup.wikimedia.org/", 0.315657051358688, "hxxp://upload.wikimedia.org/", 0.649664365586793]], ["hxxp://cz.adocean.pl/", ["hxxp://cz.adocean.pl/", 0.16521342042168, "hxxp://cz.static.planet49.com/", 0.489495312167396, "hxxp://de.static.planet49.com/", 0.379277824659506]], ["hxxp://data.idnes.cz/", ["hxxp://g.idnes.cz/", 0.0755599700546363]], ["hxxp://googleads.g.doubleclick.net/", ["hxxp://bs.serving-sys.com/", 0.379277824659506, "hxxp://p4.g65lmdrheleco.yk7wkgkmhrjkfjhp.if.v4.ipv6-exp.l.google.com/", 0.0824237045759116, "hxxp://pagead2.googlesyndication.com/", 0.0560084865299575]], ["hxxp://ib.adnxs.com/", ["hxxp://ad.doubleclick.net/", 0.0687642855474512, "hxxp://ad.technoratimedia.com/", 0.104827980552159, "hxxp://s0.2mdn.net/", 0.434386568413451]], ["hxxp://is.cuni.cz/", ["hxxp://is.cuni.cz/", 1.20590898096868]], ["hxxp://kultura.idnes.cz/", ["hxxp://b.topkontakt.cz/", 0.434386568413451, "hxxp://data.idnes.cz/", 0.489495312167396, "hxxp://g.idnes.cz/", 1.37123521223052, "hxxp://go.eu.bbelements.com/", 0.379277824659506, "hxxp://go.idnes.bbelements.com/", 0.709930287183177, "hxxp://i.idnes.cz/", 1.20590898096868, "hxxp://intext.lookit.cz/", 0.434386568413451, "hxxp://raketa.cz/", 0.434386568413451, "hxxp://s.topkontakt.cz/", 0.599712799675286, "hxxp://www.google-analytics.com/", 0.765039030937121]], ["hxxp://maps.google.com/", ["hxxp://id.google.com/", 0.253130497287236, "hxxp://maps.google.com/", 0.768045525956998, "hxxp://maps.gstatic.com/", 1.65075700367659, "hxxp://mt0.google.com/", 1.17262161991181, "hxxp://mt1.google.com/", 1.09906233010185, "hxxps://maps.google.com/", 0.731265881052015]], ["hxxp://models.com/", ["hxxp://b.scorecardresearch.com/", 0.323441645488008, "hxxp://connect.facebook.net/", 0.220322164175626, "hxxp://edge.quantserve.com/", 0.220322164175626, "hxxp://i.models.com/", 1.8472645407771, "hxxp://models.com/", 0.244327532954844, "hxxp://pixel.quantserve.com/", 0.220322164175626, "hxxp://www.facebook.com/", 0.457664501775117, "hxxp://www.google-analytics.com/", 0.275430907929571]], ["hxxp://p4.g65lmdrheleco.yk7wkgkmhrjkfjhp.if.v4.ipv6-exp.l.google.com/", ["hxxp://p4.g65lmdrheleco.yk7wkgkmhrjkfjhp.if.v4.ipv6-exp.l.google.com/", 0.434386568413451]], ["hxxp://p4.h2g4r5fc2i4uq.2wlbzpumhvez4dbp.if.v4.ipv6-exp.l.google.com/", ["hxxp://p4.h2g4r5fc2i4uq.2wlbzpumhvez4dbp.if.v4.ipv6-exp.l.google.com/", 0.434386568413451]], ["hxxp://platform.twitter.com/", ["hxxp://cdn.api.twitter.com/", 0.0980063727243932, "hxxp://platform.twitter.com/", 0.0980778097690827]], ["hxxp://portal.justice.cz/", ["hxxp://194.213.41.26/", 0.447115959788633, "hxxp://portal.justice.cz/", 2.43244428870084]], ["hxxp://presentation.lmc.cz/", ["hxxp://presentation.lmc.cz/", 0.544604055921341]], ["hxxp://raketa.cz/", ["hxxp://raketa.cz/", 0.661669131906204]], ["hxxp://resources.infolinks.com/", ["hxxp://rt1702.infolinks.com/", 0.434386568413451, "hxxp://rt1803.infolinks.com/", 0.434386568413451]], ["hxxp://revue.idnes.cz/", ["hxxp://data.idnes.cz/", 0.489495312167396, "hxxp://g.idnes.cz/", 1.20590898096868, "hxxp://gdecz.hit.gemius.pl/", 0.379277824659506, "hxxp://go.eu.bbelements.com/", 0.379277824659506, "hxxp://go.idnes.bbelements.com/", 1.09569149346079, "hxxp://i.idnes.cz/", 1.5916701872463, "hxxp://intext.lookit.cz/", 0.434386568413451, "hxxp://raketa.cz/", 0.434386568413451, "hxxp://s.topkontakt.cz/", 0.875256518445012, "hxxp://www.google-analytics.com/", 1.20590898096868]], ["hxxp://rudolfkampf.eu/", ["hxxp://connect.facebook.net/", 0.390392293248284, "hxxp://rudolfkampf.eu/", 3.62364128604817, "hxxp://www.facebook.com/", 0.61728695940968, "hxxp://www.google-analytics.com/", 0.503839626328982]], ["hxxp://s.ytimg.com/", ["hxxp://i1.ytimg.com/", 0.436087260859972, "hxxp://i2.ytimg.com/", 0.386991344074412, "hxxp://i3.ytimg.com/", 0.58337501121665, "hxxp://i4.ytimg.com/", 0.386991344074412, "hxxp://o-o.preferred.prg01s01.v11.lscache2.c.youtube.com/", 0.337895427288852, "hxxp://s.youtube.com/", 0.68156684478777, "hxxp://s.ytimg.com/", 0.436087260859972, "hxxp://www.youtube.com/", 0.534279094431091]], ["hxxp://s7.addthis.com/", ["hxxp://ds.addthis.com/", 0.379277824659506, "hxxp://m.addthisedge.com/", 0.379277824659506]], ["hxxp://slovnik.seznam.cz/", ["hxxp://1.im.cz/", 0.399891384399621, "hxxp://h.imedia.cz/", 0.444912268736001, "hxxp://i.imedia.cz/", 0.444912268736001, "hxxp://seznam.hit.gemius.pl/", 0.35487050006324, "hxxp://slovnik.seznam.cz/", 1.12022553378172]], ["hxxp://view.atdmt.com/", ["hxxp://ec.atdmt.com/", 0.379277824659506, "hxxp://ib.adnxs.com/", 0.379277824659506]], ["hxxp://wizzair.com/", ["hxxp://wizzair.com/", 11.3694547890784, "hxxp://www.google-analytics.com/", 1.33993574471109, "hxxps://ajax.googleapis.com/", 1.33993574471109, "hxxps://audit.median.hu/", 1.16994389650147]], ["hxxp://www-ig-opensocial.googleusercontent.com/", ["hxxp://csi.gstatic.com/", 0.768562991721765, "hxxp://nt0.ggpht.com/", 0.407155444818634, "hxxp://www-ig-opensocial.googleusercontent.com/", 0.456685552368807, "hxxp://www.google.com/", 0.0746261840909213, "hxxp://www.gstatic.com/", 0.147072299083468]], ["hxxp://www.blesk.cz/", ["hxxp://cz.adocean.pl/", 0.379277824659506, "hxxp://gdecz.hit.gemius.pl/", 0.379277824659506, "hxxp://img.blesk.cz/", 4.34710737494356, "hxxp://platform.linkedin.com/", 0.379277824659506, "hxxp://ssl.gstatic.com/", 0.379277824659506, "hxxp://static02.linkedin.com/", 0.379277824659506, "hxxp://track.adform.net/", 0.544604055921341, "hxxp://www.facebook.com/", 0.434386568413451, "hxxp://www.linkedin.com/", 0.379277824659506, "hxxps://plusone.google.com/", 0.434386568413451]], ["hxxp://www.facebook.com/", ["hxxp://static.ak.fbcdn.net/", 0.360208120443781]], ["hxxp://www.google.cz/", ["hxxp://clients1.google.cz/", 0.934700286544155, "hxxp://g0.gstatic.com/", 1.61375605027281, "hxxp://igoogle-skins.googleusercontent.com/", 1.20632259203562, "hxxp://ssl.gstatic.com/", 1.07051143928989, "hxxp://talkgadget.google.com/", 0.934700286544155, "hxxp://www-ig-opensocial.googleusercontent.com/", 1.23112653616406, "hxxp://www.google.cz/", 1.59411136275738, "hxxps://apis.google.com/", 0.934700286544155, "hxxps://mail.google.com/", 1.43270831397576, "hxxps://talkgadget.google.com/", 1.94185352550496]], ["hxxp://www.helios.eu/", ["hxxp://csi.gstatic.com/", 0.301028197167115, "hxxp://maps.google.com/", 0.301028197167115, "hxxp://maps.googleapis.com/", 0.563463035723061, "hxxp://maps.gstatic.com/", 0.869637014038331, "hxxp://mt0.googleapis.com/", 0.694680455001033, "hxxp://mt1.googleapis.com/", 0.607202175482385, "hxxp://www.google-analytics.com/", 0.388506476685763, "hxxp://www.helios.eu/", 3.45024625983846, "hxxps://apis.google.com/", 0.301028197167115, "hxxps://plusone.google.com/", 0.344767336926439]], ["hxxp://www.hollywoodcelebgossips.com/", ["hxxp://c.betrad.com/", 0.489495312167396, "hxxp://d.agkn.com/", 0.434386568413451, "hxxp://ib.adnxs.com/", 0.709930287183177, "hxxp://ic.tynt.com/", 0.379277824659506, "hxxp://l.betrad.com/", 0.379277824659506, "hxxp://resources.infolinks.com/", 0.820147774691067, "hxxp://router.infolinks.com/", 0.379277824659506, "hxxp://view.picapp.com/", 0.544604055921341, "hxxp://view3.picapp.com/", 0.489495312167396, "hxxp://whos.amung.us/", 0.379277824659506]], ["hxxp://www.justice.cz/", ["hxxp://www.justice.cz/", 0.787457959030726]], ["hxxp://www.meebo.com/", ["hxxp://rd.meebo.com/", 0.220322164175626, "hxxp://s.meebocdn.net/", 0.189218789200899, "hxxp://syndication.mmismm.com/", 0.220322164175626, "hxxp://tags.bluekai.com/", 0.16521342042168, "hxxp://www.meebo.com/", 0.189218789200899, "hxxps://www.meebo.com/", 0.29943627670879]], ["hxxp://www.seznam.cz/", ["chrome-extension://lifbcibllhkdhoafpjfnlhfpfgnpldfl/", 0.624995806081526, "hxxp://1.im.cz/", 0.309849615726858, "hxxp://d.seznam.cz/", 0.444912268736001, "hxxp://h.imedia.cz/", 0.489933153072383, "hxxp://hp.dot.seznam.cz/", 0.309849615726858, "hxxp://i.imedia.cz/", 0.309849615726858, "hxxp://im.sport.cz/", 0.309849615726858, "hxxp://media.2011.super.cz/", 0.309849615726858, "hxxp://seznam.hit.gemius.pl/", 0.35487050006324, "hxxp://www.seznam.cz/", 2.42583117953677]], ["hxxp://www.skype.com/", ["chrome-extension://lifbcibllhkdhoafpjfnlhfpfgnpldfl/", 0.118591304215042, "hxxp://connect.facebook.net/", 0.255679672382385, "hxxp://metrics.skype.com/", 0.264222266330079, "hxxp://survey.122.2o7.net/", 0.666537911880172, "hxxp://www.facebook.com/", 0.19427676451039, "hxxp://www.google-analytics.com/", 0.461108792131279, "hxxp://www.skype.com/", 0.443901667703142, "hxxp://www.skypeassets.com/", 9.71793701260132, "hxxps://s-static.ak.fbcdn.net/", 0.092364579755013]], ["hxxp://www.studio91.cz/", ["hxxp://www.studio91.cz/", 3.138021536982]], ["hxxp://www.super.cz/", ["hxxp://1.im.cz/", 0.434386568413451, "hxxp://10.im.cz/", 0.599712799675286, "hxxp://c.imedia.cz/", 0.434386568413451, "hxxp://gdecz.hit.gemius.pl/", 0.379277824659506, "hxxp://h.imedia.cz/", 0.489495312167396, "hxxp://i.imedia.cz/", 0.654821543429231, "hxxp://media.2011.super.cz/", 1.20590898096868, "hxxp://seznam.hit.gemius.pl/", 0.379277824659506, "hxxp://stat.2011.super.cz/", 0.379277824659506, "hxxp://www.super.cz/", 1.42634395598446]], ["hxxp://www.tripadvisor.com/", ["hxxp://c1.tacdn.com/", 0.268183491610906, "hxxp://csi.gstatic.com/", 0.268183491610906, "hxxp://maps.googleapis.com/", 0.346117155839716, "hxxp://maps.gstatic.com/", 0.268183491610906, "hxxp://media-cdn.tripadvisor.com/", 7.28221327220386, "hxxp://mt0.googleapis.com/", 0.579918148526147, "hxxp://mt1.googleapis.com/", 0.579918148526147, "hxxp://static.ak.facebook.com/", 0.463017652182931, "hxxp://www.tripadvisor.com/", 2.99586173961926, "hxxps://graph.facebook.com/", 0.618884980640551]], ["hxxp://www.youtube.com/", ["hxxp://ad-emea.doubleclick.net/", 0.337895427288852, "hxxp://clients1.google.com/", 0.73066276157333, "hxxp://csi.gstatic.com/", 0.436087260859972, "hxxp://i1.ytimg.com/", 0.485183177645531, "hxxp://i2.ytimg.com/", 0.877950511930008, "hxxp://i3.ytimg.com/", 0.779758678358889, "hxxp://i4.ytimg.com/", 0.68156684478777, "hxxp://o-o.preferred.prg01s01.v11.lscache2.c.youtube.com/", 0.337895427288852, "hxxp://s.ytimg.com/", 0.877950511930008, "hxxp://www.youtube.com/", 0.337895427288852]], ["hxxps://accounts.google.com/", ["hxxps://accounts.google.com/", 2.2733802, "hxxps://accounts.youtube.com/", 2.6037004, "hxxps://ssl.gstatic.com/", 2.6037004]], ["hxxps://apis.google.com/", ["hxxps://apis.google.com/", 2.53947673009206]], ["hxxps://mail.google.com/", ["hxxps://mail.google.com/", 0.685887452922223, "hxxps://www-opensocial.googleusercontent.com/", 0.338988486774829, "hxxps://www.google.com/", 2.03409235804705]], ["hxxps://plusone.google.com/", ["hxxps://apis.google.com/", 0.876450097877236, "hxxps://plusone.google.com/", 1.00379754799615, "hxxps://ssl.gstatic.com/", 0.876450097877236]], ["hxxps://talkgadget.google.com/", ["hxxps://accounts.google.com/", 0.0534077608733161, "hxxps://ssl.gstatic.com/", 0.177356911762997, "hxxps://talkgadget.google.com/", 2.06461254767301]], ["hxxps://wizzair.com/", ["hxxps://audit.median.hu/", 1.16994389650147, "hxxps://ssl.google-analytics.com/", 1.33993574471109, "hxxps://wizzair.com/", 7.62963412846687]], ["hxxps://www.facebook.com/", ["hxxps://fbcdn-creative-a.akamaihd.net/", 3.39718079124898, "hxxps://fbcdn-photos-a.akamaihd.net/", 3.39718079124898, "hxxps://fbcdn-profile-a.akamaihd.net/", 7.39979974331462, "hxxps://fbcdn-sphotos-a-a.akamaihd.net/", 1.96767402265411, "hxxps://fbcdn-sphotos-f-a.akamaihd.net/", 1.96767402265411, "hxxps://fbcdn-sphotos-h-a.akamaihd.net/", 1.96767402265411, "hxxps://fbexternal-a.akamaihd.net/", 3.11127943753001, "hxxps://fbstatic-a.akamaihd.net/", 16.5486430623218, "hxxps://s-static.ak.facebook.com/", 7.03539215561042, "hxxps://www.facebook.com/", 3.39718079124898]], ["hxxps://www.google.cz/", ["hxxps://id.google.cz/", 1.05806432540995, "hxxps://ssl.gstatic.com/", 1.39804802182918, "hxxps://www.google.com/", 1.22805617361956, "hxxps://www.google.cz/", 5.08876142033876]]]}, "hxxp_throttling":{"enabled":true}, "net":{"hxxp_server_properties":{"version":1, "servers":{"id.google.com:443":{"supports_spdy":true}, "ssl.gstatic.com:443":{"settings":{"4":100, "5":32, "6":0}, "supports_spdy":true}, "www-opensocial.googleusercontent.com:443":{"settings":{"4":100, "5":32, "6":3}, "supports_spdy":true}, "www.gstatic.com:443":{"supports_spdy":true}, "mail.google.com:443":{"settings":{"4":10, "5":16}, "supports_spdy":true}, "accounts.youtube.com:443":{"settings":{"4":100}, "supports_spdy":true}, "id.google.cz:443":{"supports_spdy":true}, "accounts.google.cz:443":{"supports_spdy":true}, "toolbarqueries.google.com:443":{"supports_spdy":true}, "encrypted-tbn0.google.com:443":{"supports_spdy":true}, "clients2.google.com:443":{"supports_spdy":true}, "ssl.google-analytics.com:443":{"supports_spdy":true}, "www.google.com:443":{"settings":{"4":100, "5":32, "6":0}, "supports_spdy":true}, "encrypted-tbn3.google.com:443":{"supports_spdy":true}, "chatenabled.mail.google.com:443":{"supports_spdy":true}, "www-gm-opensocial.googleusercontent.com:443":{"supports_spdy":true}, "apis.google.com:443":{"supports_spdy":true}, "mail-attachment.googleusercontent.com:443":{"supports_spdy":true}, "talkgadget.google.com:443":{"settings":{"4":100, "5":16}, "supports_spdy":true}, "ajax.googleapis.com:443":{"supports_spdy":true}, "googleads.g.doubleclick.net:443":{"supports_spdy":true}, "www.google.cz:443":{"supports_spdy":true}, "accounts.google.com:443":{"settings":{"4":100, "5":32, "6":0}, "supports_spdy":true}}}}, "homepage":"hxxp://search.certified-toolbar.com?si=41460&home=true&tid=3204", "translate_accepted_count":{"de":0, "en":0}, "browser":{"window_placement":{"work_area_top":0, "work_area_right":1366, "top":20, "left":207, "bottom":728, "maximized":true, "right":1257, "work_area_left":0, "work_area_bottom":728}, "last_prompted_google_url":"hxxps://www.google.cz/", "last_known_google_url":"hxxps://www.google.cz/", "check_default_browser":false}}

*************************

AdwCleaner[R1].txt - [52949 octets] - [15/01/2013 13:46:59]
AdwCleaner[R2].txt - [52885 octets] - [15/01/2013 13:48:40]

########## EOF - C:\AdwCleaner[R2].txt - [52946 octets] ##########

Uživatelský avatar
JaRon
Moderátor
Moderátor
Příspěvky: 15713
Registrován: 29 bře 2005 13:39
Bydliště: BB-SK

Re: Certifie toolbar - prosím o pomoc při odstranění

#2 Příspěvek od JaRon »

a volba delete pri ADWCleaner nepomaha :???:
FRST |ADWCleaner |MBAM |CCleaner |AVPTool

V prípade spokojnosti je možné podporiť fórum
https://platba.viry.cz/payment/

ifka
Návštěvník
Návštěvník
Příspěvky: 18
Registrován: 15 led 2013 13:51

Re: Certifie toolbar - prosím o pomoc při odstranění

#3 Příspěvek od ifka »

bohužel ne...fakt už nevím co s tím, zkoušela jsem snad všechno

díky moc

Uživatelský avatar
cernohous13
VIP in memoriam
VIP in memoriam
Příspěvky: 8721
Registrován: 09 pro 2006 06:19
Bydliště: Jablonec nad Nisou
Kontaktovat uživatele:

Re: Certifie toolbar - prosím o pomoc při odstranění

#4 Příspěvek od cernohous13 »

Zdravím, soubor C:\AdwCleaner[S1].txt se ti neobjevil?
Doporučení:
V průběhu léčení prováděj nové instalace a odinstalace jen na můj pokyn.
Důkladně prostuduj a proveď celou operaci podle mé odpovědi.
V případě nejasností se zeptej - vysvětlím Obrázek

-------------------------------------------------------------------------------------------------
> Podpora fóra <

ifka
Návštěvník
Návštěvník
Příspěvky: 18
Registrován: 15 led 2013 13:51

Re: Certifie toolbar - prosím o pomoc při odstranění

#5 Příspěvek od ifka »

objevil, mám s tím ještě něco dělat?

tady je obsah

# AdwCleaner v2.105 - Logfile created 01/15/2013 at 15:24:03
# Updated 08/01/2013 by Xplode
# Operating system : Windows 7 Home Premium Service Pack 1 (64 bits)
# User : Iveta - IVETA-TOSH
# Boot Mode : Normal
# Running from : C:\Users\Iveta\Desktop\adwcleaner.exe
# Option [Delete]


***** [Services] *****


***** [Files / Folders] *****


***** [Registry] *****


***** [Internet Browsers] *****

-\\ Internet Explorer v9.0.8112.16457

[OK] Registry is clean.

-\\ Google Chrome v23.0.1271.97

File : C:\Users\Iveta\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] File is clean.

*************************

AdwCleaner[R1].txt - [52949 octets] - [15/01/2013 13:46:59]
AdwCleaner[R2].txt - [53010 octets] - [15/01/2013 13:48:40]
AdwCleaner[S1].txt - [5519 octets] - [15/01/2013 14:45:08]
AdwCleaner[S2].txt - [967 octets] - [15/01/2013 14:48:08]
AdwCleaner[S3].txt - [899 octets] - [15/01/2013 15:24:03]

########## EOF - C:\AdwCleaner[S3].txt - [958 octets] ##########

Uživatelský avatar
cernohous13
VIP in memoriam
VIP in memoriam
Příspěvky: 8721
Registrován: 09 pro 2006 06:19
Bydliště: Jablonec nad Nisou
Kontaktovat uživatele:

Re: Certifie toolbar - prosím o pomoc při odstranění

#6 Příspěvek od cernohous13 »

:???: Ještě nějaký problém?

:arrow: Mohu doporučit kontrolu a vyčištění Ccleanerem
Stáhni Ccleaner - http://www.slunecnice.cz/sw/ccleaner/
Při instalaci vyhodit fajfku u "Instalovat Yahoo! Toolbar"

zavřít Internetový prohlížeč a
spustit "Čistič" > "Spustit Ccleaner" - odstraní nepotřebné
spustit "Registry" > "Hledej problémy" > "Opravit vybrané problémy"
souhlas se zálohou registrů - opakovat dokud nebudou registry čisté.
Stáhni a nainstaluj MBAM zde http://www.download.com/Malwarebytes-An ... tag=button (nelekej se přesměrování vyčkej)
Spustit > na 3.záložce "Aktualizace" > Kontrola aktualizací
následně na 1.záložce "Kontrolor" -> Rychlá kontrola -> Prohledat
po dokončení scanu vyskočí okno Notepad s výsledkem - obsah zkopíruj do své odpovědi
zatím nic nemazat - počkej na posouzení
Doporučení:
V průběhu léčení prováděj nové instalace a odinstalace jen na můj pokyn.
Důkladně prostuduj a proveď celou operaci podle mé odpovědi.
V případě nejasností se zeptej - vysvětlím Obrázek

-------------------------------------------------------------------------------------------------
> Podpora fóra <

ifka
Návštěvník
Návštěvník
Příspěvky: 18
Registrován: 15 led 2013 13:51

Re: Certifie toolbar - prosím o pomoc při odstranění

#7 Příspěvek od ifka »

provedla jsem Vámi doporučené kroky a zde je obsah ntpu, moc děkuji za pomoc

Malwarebytes Anti-Malware (Zkušební verze Malwarebytes Anti-Malware.) 1.70.0.1100
www.malwarebytes.org

Verze: v2013.01.16.02

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
Iveta :: IVETA-TOSH [administrátor]

Ochrana: Povolena

16.1.2013 9:51:06
MBAM-log-2013-01-16 (09-54-34).txt

Typ: Rychlá kontrola
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 213081
Uplynulý čas: 3 minut, 4 sekund

Nalezené procesy v paměti: 1
C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\4zbrmon.exe (PUP.MyWebSearch) -> 4064 -> Nebyla provedena žádná instrukce.

Nalezené moduly v paměti: 4
C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\4zbrstub.dll (PUP.MyWebSearch) -> Nebyla provedena žádná instrukce.
C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\4zauxstb.dll (PUP.MyWebSearch) -> Nebyla provedena žádná instrukce.
C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\4zSrcAs.dll (PUP.MyWebSearch) -> Nebyla provedena žádná instrukce.
C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\4zdlghk.dll (PUP.MyWebSearch) -> Nebyla provedena žádná instrukce.

Nalezené klíče v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené hodnoty v registru: 1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce|VideoDownloadConverter_4zbar Uninstall (PUP.MyWebSearch) -> Data: rundll32 C:\PROGRA~2\4ZUNIN~1.DLL,O -3 -> Nebyla provedena žádná instrukce.

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 6
C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\4zbrstub.dll (PUP.MyWebSearch) -> Nebyla provedena žádná instrukce.
C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\4zbrmon.exe (PUP.MyWebSearch) -> Nebyla provedena žádná instrukce.
C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\4zauxstb.dll (PUP.MyWebSearch) -> Nebyla provedena žádná instrukce.
C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\4zSrcAs.dll (PUP.MyWebSearch) -> Nebyla provedena žádná instrukce.
C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\4zdlghk.dll (PUP.MyWebSearch) -> Nebyla provedena žádná instrukce.
C:\Program Files (x86)\4zUninstall VideoDownloadConverter.dll (PUP.MyWebSearch) -> Nebyla provedena žádná instrukce.

(konec)

Uživatelský avatar
JaRon
Moderátor
Moderátor
Příspěvky: 15713
Registrován: 29 bře 2005 13:39
Bydliště: BB-SK

Re: Certifie toolbar - prosím o pomoc při odstranění

#8 Příspěvek od JaRon »

vsetko najdene nechaj zmazat v MBAM
FRST |ADWCleaner |MBAM |CCleaner |AVPTool

V prípade spokojnosti je možné podporiť fórum
https://platba.viry.cz/payment/

ifka
Návštěvník
Návštěvník
Příspěvky: 18
Registrován: 15 led 2013 13:51

Re: Certifie toolbar - prosím o pomoc při odstranění

#9 Příspěvek od ifka »

vše jsem smazala, restartovala jsem pc a je to tam pořád :-(

Uživatelský avatar
JaRon
Moderátor
Moderátor
Příspěvky: 15713
Registrován: 29 bře 2005 13:39
Bydliště: BB-SK

Re: Certifie toolbar - prosím o pomoc při odstranění

#10 Příspěvek od JaRon »

Presun ComboFix
na plochu (ak tam este nie je)

otvor si Poznamkovy blok - notepad

do neho zkopiruj skript z nasledujiceho okna:

Kód: Vybrat vše

Folder::
C:\Program Files (x86)\VideoDownloadConverter_4z\bar

uloz vytvoreny textovy soubor ako CFScript.txt na plochu

po ulozeni uchop vytvoreny skript lavym tlacitkom mysi a presun ho nad ikonu Combofixu, nad nim skript upust:

Obrázek

po aplikacii by mal vzniknut dalsi log, ten vloz sem :)
FRST |ADWCleaner |MBAM |CCleaner |AVPTool

V prípade spokojnosti je možné podporiť fórum
https://platba.viry.cz/payment/

ifka
Návštěvník
Návštěvník
Příspěvky: 18
Registrován: 15 led 2013 13:51

Re: Certifie toolbar - prosím o pomoc při odstranění

#11 Příspěvek od ifka »

ComboFix 13-01-15.02 - Iveta 16.01.2013 10:26:32.1.4 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.4044.2511 [GMT 1:00]
Spuštěný z: c:\users\Iveta\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\Iveta\Desktop\CFScript.txt
AV: ESET NOD32 Antivirus 6.0 *Enabled/Updated* {77DEAFED-8149-104B-25A1-21771CA47CD1}
SP: ESET NOD32 Antivirus 6.0 *Enabled/Updated* {CCBF4E09-A773-1FC5-1F11-1A056723366C}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Rezidentní štít AV je zapnutý
.
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Iveta\Documents\~WRL0003.tmp
c:\users\Iveta\Documents\~WRL0111.tmp
c:\users\Iveta\Documents\~WRL0586.tmp
c:\users\Iveta\Documents\~WRL2171.tmp
c:\users\Iveta\Documents\~WRL2383.tmp
c:\users\Iveta\Documents\~WRL2662.tmp
c:\users\Iveta\Documents\~WRL3511.tmp
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-12-16 do 2013-01-16 )))))))))))))))))))))))))))))))
.
.
2013-01-16 09:32 . 2013-01-16 09:32 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-01-16 08:50 . 2013-01-16 08:50 -------- d-----w- c:\users\Iveta\AppData\Roaming\Malwarebytes
2013-01-16 08:49 . 2013-01-16 08:49 -------- d-----w- c:\programdata\Malwarebytes
2013-01-16 08:49 . 2013-01-16 08:49 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2013-01-16 08:49 . 2012-12-14 15:49 24176 ----a-w- c:\windows\system32\drivers\mbam.sys
2013-01-16 08:38 . 2012-09-19 19:44 172464 ----a-w- c:\program files (x86)\4zres.dll
2013-01-16 08:36 . 2013-01-16 08:36 -------- d-----w- c:\program files\CCleaner
2013-01-15 11:57 . 2013-01-15 11:57 -------- d-----w- c:\program files\Enigma Software Group
2013-01-15 11:57 . 2013-01-15 13:56 -------- d-----w- c:\windows\83B952C7F8F34CA3B4C533C85B24E478.TMP
2013-01-15 07:24 . 2012-11-19 00:01 9125352 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{4CAF1C2C-ABC6-49C1-BBBE-0397339EC27E}\mpengine.dll
2013-01-13 15:09 . 2013-01-03 06:18 15360 ----a-w- c:\windows\Launcher.exe
2013-01-13 15:03 . 2013-01-13 15:17 -------- d-----w- c:\users\Iveta\AppData\Local\DownTango
2013-01-13 15:03 . 2013-01-13 15:03 -------- d-----w- c:\users\Iveta\AppData\Local\Programs
2013-01-13 15:03 . 2013-01-13 15:29 -------- d-----w- c:\program files (x86)\Red Sky
2013-01-12 11:14 . 2012-11-30 05:45 362496 ----a-w- c:\windows\system32\wow64win.dll
2013-01-12 11:11 . 2013-01-12 11:11 -------- d-----w- c:\program files\ESET
2012-12-21 08:30 . 2012-12-16 17:11 46080 ----a-w- c:\windows\system32\atmlib.dll
2012-12-21 08:30 . 2012-12-16 14:13 34304 ----a-w- c:\windows\SysWow64\atmlib.dll
2012-12-21 08:30 . 2012-12-16 14:45 367616 ----a-w- c:\windows\system32\atmfd.dll
2012-12-21 08:30 . 2012-12-16 14:13 295424 ----a-w- c:\windows\SysWow64\atmfd.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-01-12 22:26 . 2012-03-02 10:30 67599240 ----a-w- c:\windows\system32\MRT.exe
2013-01-12 12:04 . 2012-12-08 13:05 74248 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-01-12 12:04 . 2012-12-08 13:05 697864 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2012-11-30 04:45 . 2013-01-12 11:14 44032 ----a-w- c:\windows\apppatch\acwow64.dll
2012-11-14 07:06 . 2012-12-12 08:25 17811968 ----a-w- c:\windows\system32\mshtml.dll
2012-11-14 06:32 . 2012-12-12 08:25 10925568 ----a-w- c:\windows\system32\ieframe.dll
2012-11-14 06:11 . 2012-12-12 08:25 2312704 ----a-w- c:\windows\system32\jscript9.dll
2012-11-14 06:04 . 2012-12-12 08:25 1346048 ----a-w- c:\windows\system32\urlmon.dll
2012-11-14 06:04 . 2012-12-12 08:25 1392128 ----a-w- c:\windows\system32\wininet.dll
2012-11-14 06:02 . 2012-12-12 08:25 1494528 ----a-w- c:\windows\system32\inetcpl.cpl
2012-11-14 06:02 . 2012-12-12 08:25 237056 ----a-w- c:\windows\system32\url.dll
2012-11-14 05:59 . 2012-12-12 08:25 85504 ----a-w- c:\windows\system32\jsproxy.dll
2012-11-14 05:58 . 2012-12-12 08:25 816640 ----a-w- c:\windows\system32\jscript.dll
2012-11-14 05:57 . 2012-12-12 08:25 599040 ----a-w- c:\windows\system32\vbscript.dll
2012-11-14 05:57 . 2012-12-12 08:25 173056 ----a-w- c:\windows\system32\ieUnatt.exe
2012-11-14 05:55 . 2012-12-12 08:25 2144768 ----a-w- c:\windows\system32\iertutil.dll
2012-11-14 05:55 . 2012-12-12 08:25 729088 ----a-w- c:\windows\system32\msfeeds.dll
2012-11-14 05:53 . 2012-12-12 08:25 96768 ----a-w- c:\windows\system32\mshtmled.dll
2012-11-14 05:52 . 2012-12-12 08:26 2382848 ----a-w- c:\windows\system32\mshtml.tlb
2012-11-14 05:46 . 2012-12-12 08:25 248320 ----a-w- c:\windows\system32\ieui.dll
2012-11-14 02:09 . 2012-12-12 08:25 1800704 ----a-w- c:\windows\SysWow64\jscript9.dll
2012-11-14 01:58 . 2012-12-12 08:25 1427968 ----a-w- c:\windows\SysWow64\inetcpl.cpl
2012-11-14 01:57 . 2012-12-12 08:25 1129472 ----a-w- c:\windows\SysWow64\wininet.dll
2012-11-14 01:49 . 2012-12-12 08:25 142848 ----a-w- c:\windows\SysWow64\ieUnatt.exe
2012-11-14 01:48 . 2012-12-12 08:25 420864 ----a-w- c:\windows\SysWow64\vbscript.dll
2012-11-14 01:44 . 2012-12-12 08:26 2382848 ----a-w- c:\windows\SysWow64\mshtml.tlb
2012-11-09 05:45 . 2012-12-12 07:29 2048 ----a-w- c:\windows\system32\tzres.dll
2012-11-09 04:42 . 2012-12-12 07:29 2048 ----a-w- c:\windows\SysWow64\tzres.dll
2012-11-02 05:59 . 2012-12-12 07:28 478208 ----a-w- c:\windows\system32\dpnet.dll
2012-11-02 05:11 . 2012-12-12 07:28 376832 ----a-w- c:\windows\SysWow64\dpnet.dll
2012-10-26 06:48 . 2012-10-26 06:48 163056 ----a-w- c:\programdata\Microsoft\Windows\Sqm\Manifest\Sqm10142.bin
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"TOPI.EXE"="c:\program files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe" [2011-05-16 846936]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"NBAgent"="c:\program files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe" [2011-06-29 1409424]
"ToshibaServiceStation"="c:\program files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe" [2010-11-29 1294712]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-09-23 926896]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"TOPI.EXE"="c:\program files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe" [2011-05-16 846936]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Toshiba Places Icon Utility.lnk - c:\program files\TOSHIBA\TOSHIBA Places Icon Utility\TosDIMonitor.exe [2011-8-3 1492352]
.
c:\users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
TRDCReminder.lnk - c:\program files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe [2009-9-1 481184]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
"EnableLinkedConnections"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 Skype C2C Service;Skype C2C Service;c:\programdata\Skype\Toolbars\Skype C2C Service\c2c_service.exe [2012-12-13 3290896]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2012-11-09 160944]
R3 BtFilter;Bluetooth LowerFilter Class Filter Driver;c:\windows\system32\DRIVERS\btfilter.sys [2010-10-18 42096]
R3 esgiguard;esgiguard;c:\program files\Enigma Software Group\SpyHunter\esgiguard.sys [x]
R3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x64.sys [2010-11-08 76912]
R3 massfilter;Mass Storage Filter Driver;c:\windows\system32\drivers\massfilter.sys [x]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys [x]
R3 RSUSBVSTOR;RTSUVSTOR.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RTSUVSTOR.sys [x]
R3 TemproMonitoringService;Notebook Performance Tuning Service (TEMPRO);c:\program files (x86)\Toshiba TEMPRO\TemproSvc.exe [2011-02-10 112080]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2012-02-22 1255736]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184]
S1 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys [2012-10-08 211344]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [2012-10-08 149592]
S2 cfWiMAXService;ConfigFree WiMAX Service;c:\program files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe [2010-01-28 249200]
S2 ConfigFree Service;ConfigFree Service;c:\program files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe [2009-03-10 46448]
S2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [2012-11-26 1329304]
S2 epfwwfpr;epfwwfpr;c:\windows\system32\DRIVERS\epfwwfpr.sys [2012-10-08 138744]
S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-12-14 682344]
S2 NAUpdate;Nero Update;c:\program files (x86)\Nero\Update\NASvc.exe [2011-03-29 598312]
S2 TOSHIBA eco Utility Service;TOSHIBA eco Utility Service;c:\program files\TOSHIBA\TECO\TecoService.exe [2011-03-02 266680]
S2 TVALZFL;TOSHIBA ACPI-Based Value Added Logical and General Purpose Device Filter Driver;c:\windows\system32\DRIVERS\TVALZFL.sys [2009-06-19 14472]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-12-20 2656280]
S3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys [2010-10-14 317440]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2012-12-14 24176]
S3 PGEffect;Pangu effect driver;c:\windows\system32\DRIVERS\pgeffect.sys [2011-02-08 38096]
S3 QIOMem;Generic IO & Memory Access;c:\windows\system32\drivers\QIOMem.sys [2009-06-15 12800]
S3 TMachInfo;TMachInfo;c:\program files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe [2010-11-29 54136]
S3 TOSHIBA HDD SSD Alert Service;TOSHIBA HDD SSD Alert Service;c:\program files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe [2010-12-08 137632]
S3 TPCHSrv;TPCH Service;c:\program files\TOSHIBA\TPHM\TPCHSrv.exe [2011-07-01 828856]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-01-16 07:52 1606760 ----a-w- c:\program files (x86)\Google\Chrome\Application\24.0.1312.52\Installer\setup.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2013-01-16 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-12-08 12:04]
.
2013-01-16 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-08-03 12:01]
.
2013-01-16 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-08-03 12:01]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Toshiba TEMPRO"="c:\program files (x86)\Toshiba TEMPRO\TemproTray.exe" [2011-02-10 1546720]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2011-04-07 167256]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2011-04-07 391000]
"Persistence"="c:\windows\system32\igfxpers.exe" [2011-04-07 418136]
"SmartAudio"="c:\program files\CONEXANT\SAII\SAIICpl.exe" [2010-12-14 316032]
"TosSENotify"="c:\program files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe" [2010-12-08 710040]
"TosVolRegulator"="c:\program files\TOSHIBA\TosVolRegulator\TosVolRegulator.exe" [2009-11-11 24376]
"Toshiba Registration"="c:\program files\TOSHIBA\Registration\ToshibaReminder.exe" [2011-08-03 150992]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2012-11-26 6325936]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.google.cz/
uDefault_Search_URL = hxxp://www.google.com
mDefault_Search_URL = hxxp://www.google.com
mStart Page = hxxp://www.google.com
mLocal Page = c:\windows\SysWOW64\blank.htm
mSearch Page = hxxp://www.google.com
mSearch Bar = hxxp://www.google.com
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~2\MICROS~1\Office14\EXCEL.EXE/3000
IE: Od&eslat do aplikace OneNote - c:\progra~2\MICROS~1\Office14\ONBttnIE.dll/105
IE: Přidat do aplikace TOSHIBA Bulletin Board - c:\program files\TOSHIBA\BulletinBoard\TosBBCom.dll/1000
TCP: DhcpNameServer = 10.10.0.2
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Toolbar-Locked - (no file)
Wow6432Node-HKLM-Run-TSleepSrv - %ProgramFiles(x86)%\TOSHIBA\TOSHIBA Sleep Utility\TSleepSrv.exe
Toolbar-Locked - (no file)
HKLM-Run-TosNC - c:\program files (x86)\Toshiba\BulletinBoard\TosNcCore.exe
HKLM-Run-TosReelTimeMonitor - c:\program files (x86)\TOSHIBA\ReelTime\TosReelTimeMonitor.exe
HKLM-Run-TPwrMain - c:\program files (x86)\TOSHIBA\Power Saver\TPwrMain.EXE
HKLM-Run-HSON - c:\program files (x86)\TOSHIBA\TBS\HSON.exe
HKLM-Run-TCrdMain - c:\program files (x86)\TOSHIBA\FlashCards\TCrdMain.exe
HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe
HKLM-Run-Teco - c:\program files (x86)\TOSHIBA\TECO\Teco.exe
HKLM-Run-TosWaitSrv - c:\program files (x86)\TOSHIBA\TPHM\TosWaitSrv.exe
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_5_502_146_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_5_502_146_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_5_502_146_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_5_502_146_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_146.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_146.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_146.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_146.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\McAfee]
"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2013-01-16 10:36:12
ComboFix-quarantined-files.txt 2013-01-16 09:36
.
Před spuštěním: Volných bajtů: 142 576 852 992
Po spuštění: Volných bajtů: 141 937 967 104
.
- - End Of File - - 93BF351B738CABAEBD45F808905564B8

Uživatelský avatar
JaRon
Moderátor
Moderátor
Příspěvky: 15713
Registrován: 29 bře 2005 13:39
Bydliště: BB-SK

Re: Certifie toolbar - prosím o pomoc při odstranění

#12 Příspěvek od JaRon »

citat:
Odinstalujte Combofix
• Prejmenujte ComboFix na Uninstall
• Spustte jej
• Tohle smaze Combofix a jeho slozky

,,, a malo by byt hotovo :)
FRST |ADWCleaner |MBAM |CCleaner |AVPTool

V prípade spokojnosti je možné podporiť fórum
https://platba.viry.cz/payment/

ifka
Návštěvník
Návštěvník
Příspěvky: 18
Registrován: 15 led 2013 13:51

Re: Certifie toolbar - prosím o pomoc při odstranění

#13 Příspěvek od ifka »

provedeno, restart a je to tam pořád :-(

Uživatelský avatar
JaRon
Moderátor
Moderátor
Příspěvky: 15713
Registrován: 29 bře 2005 13:39
Bydliště: BB-SK

Re: Certifie toolbar - prosím o pomoc při odstranění

#14 Příspěvek od JaRon »

co je tam :???:
FRST |ADWCleaner |MBAM |CCleaner |AVPTool

V prípade spokojnosti je možné podporiť fórum
https://platba.viry.cz/payment/

ifka
Návštěvník
Návštěvník
Příspěvky: 18
Registrován: 15 led 2013 13:51

Re: Certifie toolbar - prosím o pomoc při odstranění

#15 Příspěvek od ifka »

jak spustím internet explorer, tak tam opět vyskakuje certified.toolbar, místo google.com, který mám nastavený jako domovskou stránku

Zamčeno