VIRY.CZ

Zdravim,casto se mi ted stava ze mi na pc vypande pripojeni k netu a nefunguje nacitani v zadnem prohlizeci.Pritom noteboky pres wi-fi funguji v normalu.Kdyz dam odstaranit potize s pripojenim tak se mi objevi hlaska :
Počítač je pravděpodobně správně nakonfigurován,ale zařízení nebo prostředek (www.mikrosoft.com) neodpovida.
Pripoji se az po resetu routeru.
Projel jsem pc nodem,ale vse v poradku,nevite zda to nedela nejaky vir,nebo neco podobneho.
Diky

log:
Logfile of random's system information tool 1.08 (written by random/random)
Run by hadza at 2013-02-23 16:20:28
Microsoft Windows 7 Ultimate Service Pack 1
System drive C: has 16 GB (6%) free of 254 GB
Total RAM: 4094 MB (34% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 16:20:44, on 23.2.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16464)
Boot mode: Normal

Running processes:
C:\Program Files\DAEMON Tools Pro\DTShellHlp.exe
C:\Program Files (x86)\Windows Sidebar\sidebar.exe
C:\Program Files (x86)\uTorrent\uTorrent.exe
C:\Program Files\DAEMON Tools Pro\DTAgent.exe
C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe
C:\Program Files (x86)\Google\Drive\googledrivesync.exe
C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe
C:\Windows\twain_32\Samsung\SCX3200\Scan2Pc.exe
C:\Program Files (x86)\Google\Drive\googledrivesync.exe
C:\Users\hadza\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\hadza\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\hadza\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\hadza\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\hadza\AppData\Local\Google\Chrome\Application\chrome.exe
C:\totalcmd\TOTALCMD.EXE
C:\ProgramData\SUS\SUS.exe
C:\Users\hadza\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Users\hadza\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\hadza\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\hadza\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\hadza\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\hadza\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\hadza\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\hadza\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\hadza\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\hadza\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\hadza.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com/?SearchSource ... =CT3072253
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://start.facemoods.com/?a=ddrnw&s={searchTerms}&f=4
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - (no file)
R3 - URLSearchHook: (no name) - {687578b9-7132-4a7a-80e4-30ee31099e03} - (no file)
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Social Extras Plugin - {FF4E1D1D-705B-4379-AB33-22D98C1ABF55} - C:\Program Files (x86)\SocialExtras\socialx.dll
O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\Windows\RaidTool\xInsIDE.exe
O4 - HKLM\..\Run: [3200 Scan2PC] "C:\Windows\twain_32\Samsung\SCX3200\Scan2Pc.exe"
O4 - HKLM\..\Run: [SUS Start] C:\ProgramData\SUS\SUS.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKCU\..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [uTorrent] "C:\Program Files (x86)\uTorrent\uTorrent.exe" /MINIMIZED
O4 - HKCU\..\Run: [DAEMON Tools Pro Agent] "C:\Program Files\DAEMON Tools Pro\DTAgent.exe" -autorun
O4 - HKCU\..\Run: [KiesPDLR] C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
O4 - HKCU\..\Run: [Sony PC Companion] "C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe" /Background
O4 - HKCU\..\Run: [GoogleDriveSync] "C:\Program Files (x86)\Google\Drive\googledrivesync.exe" /autostart
O4 - HKCU\..\Run: [Facebook Update] "C:\Users\hadza\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Users\hadza\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra 'Tools' menuitem: @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: Nostalgia Casino - @ú° €ó° °ó°  ó° ó° Đů° ŕů° đř° @
m`
m°ř° đm m  m° mŔ m€ mpů° Pů° `ů° €ů° đm - (no file) (HKCU)
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Advanced SystemCare Service (AdvancedSystemCareService) - IObit - C:\Program Files (x86)\IObit\Advanced SystemCare 4\ASCService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: KMService - Unknown owner - C:\Windows\system32\srvany.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Internet Pass-Through Service (PassThru Service) - Unknown owner - C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: RealNetworks Downloader Resolver Service - Unknown owner - C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Sony PC Companion - Avanquest Software - C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Program Files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesService64.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 12433 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
atieclxx
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\IObit\Advanced SystemCare 4\ASCService.exe"
"C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe"
C:\Windows\SysWOW64\PnkBstrA.exe
"C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe"
"C:\Program Files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesService64.exe"
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
WLIDSvcM.exe 1920
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesApp64.exe" /TUStart /pid:1880
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\DAEMON Tools Pro\DTShellHlp.exe"
"C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe"
"C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
"C:\Program Files (x86)\Windows Sidebar\sidebar.exe" /autoRun
"C:\Program Files (x86)\uTorrent\uTorrent.exe" /MINIMIZED
"C:\Program Files\DAEMON Tools Pro\DTAgent.exe" -autorun
"C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe"
"C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe" /Background
"C:\Program Files (x86)\Google\Drive\googledrivesync.exe" /autostart
"C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe"
"C:\Windows\twain_32\Samsung\SCX3200\Scan2Pc.exe"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM" PriorityLow
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files (x86)\Google\Drive\googledrivesync.exe" /autostart
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
C:\Windows\system32\svchost.exe -k WindowsMobile
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\system32\SearchIndexer.exe /Embedding
"taskhost.exe"
"C:\Users\hadza\AppData\Local\Google\Chrome\Application\chrome.exe"
"C:\Users\hadza\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=EnableStage3D/enabled/ForceCompositingMode/thread/GlobalSdch/global_enable_sdch/InfiniteCache/No/NewTabButton/default/OmniboxDisallowInlineHQP/Standard/OmniboxHUPCreateShorterMatch/Standard/OmniboxHUPCullRedirects/Standard/OmniboxSearchSuggestTrialStarted2012Q4/3/OneClickSignIn/Standard/Prerender/PrerenderEnabled/SBInterstitial/V1/SpdyCwnd/cwnd16/SpeculativePrefetching/Disabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_06/UMA-Uniformity-Trial-1-Percent/group_95/UMA-Uniformity-Trial-10-Percent/group_02/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/group_04/UMA-Uniformity-Trial-50-Percent/group_01/WarmSocketImpact/warm_socket/ --renderer-print-preview --enable-threaded-compositing --channel="1696.0.171586086\1019073603" /prefetch:3
"C:\Users\hadza\AppData\Local\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="1696.2.186356330\1494303054" --supports-dual-gpus=false --skip-gpu-full-info-collection --gpu-vendor-id=0x1002 --gpu-device-id=0x68bf --gpu-driver-vendor="Advanced Micro Devices, Inc." --gpu-driver-version=9.12.0.0 --ignored=" --type=renderer " /prefetch:12
"C:\Program Files\Opera x64\opera.exe"
"C:\Users\hadza\AppData\Local\Google\Chrome\Application\chrome.exe" --type=ppapi --channel="1696.7.1883522771\1006036831" --lang=cs --ignored=" --type=renderer " /prefetch:13
"C:\Users\hadza\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=CacheSensitivityAnalysis/No/EnableStage3D/enabled/ForceCompositingMode/thread/GlobalSdch/global_enable_sdch/InfiniteCache/No/NewTabButton/default/OmniboxDisallowInlineHQP/Standard/OmniboxHUPCreateShorterMatch/Standard/OmniboxHUPCullRedirects/Standard/OmniboxSearchSuggestTrialStarted2012Q4/3/OneClickSignIn/Standard/Prerender/PrerenderEnabled/SBInterstitial/V1/SpdyCwnd/cwnd16/SpeculativePrefetching/Disabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_06/UMA-Uniformity-Trial-1-Percent/group_95/UMA-Uniformity-Trial-10-Percent/group_02/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/group_04/UMA-Uniformity-Trial-50-Percent/group_01/WarmSocketImpact/warm_socket/ --renderer-print-preview --enable-threaded-compositing --channel="1696.11.1432464091\498370333" /prefetch:3
"C:\totalcmd\TOTALCMD.EXE"
"C:\ProgramData\SUS\SUS.exe"
"C:\Users\hadza\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=CacheSensitivityAnalysis/No/EnableStage3D/enabled/ForceCompositingMode/thread/GlobalSdch/global_enable_sdch/InfiniteCache/No/NewTabButton/default/OmniboxDisallowInlineHQP/Standard/OmniboxHUPCreateShorterMatch/Standard/OmniboxHUPCullRedirects/Standard/OmniboxSearchSuggestTrialStarted2012Q4/3/OneClickSignIn/Standard/Prerender/PrerenderEnabled/SBInterstitial/V1/SpdyCwnd/cwnd16/SpeculativePrefetching/Disabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_06/UMA-Uniformity-Trial-1-Percent/group_95/UMA-Uniformity-Trial-10-Percent/group_02/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/group_04/UMA-Uniformity-Trial-50-Percent/group_01/WarmSocketImpact/warm_socket/ --renderer-print-preview --enable-threaded-compositing --channel="1696.15.44936425\2003930245" /prefetch:3
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Users\hadza\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=CacheSensitivityAnalysis/No/EnableStage3D/enabled/ForceCompositingMode/thread/GlobalSdch/global_enable_sdch/InfiniteCache/No/NewTabButton/default/OmniboxDisallowInlineHQP/Standard/OmniboxHUPCreateShorterMatch/Standard/OmniboxHUPCullRedirects/Standard/OmniboxSearchSuggestTrialStarted2012Q4/3/OneClickSignIn/Standard/Prerender/PrerenderEnabled/SBInterstitial/V1/SpdyCwnd/cwnd16/SpeculativePrefetching/Disabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_06/UMA-Uniformity-Trial-1-Percent/group_95/UMA-Uniformity-Trial-10-Percent/group_02/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/group_04/UMA-Uniformity-Trial-50-Percent/group_01/WarmSocketImpact/warm_socket/ --renderer-print-preview --enable-threaded-compositing --channel="1696.22.464152334\989213845" /prefetch:3
"C:\Users\hadza\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=CacheSensitivityAnalysis/No/EnableStage3D/enabled/ForceCompositingMode/thread/GlobalSdch/global_enable_sdch/InfiniteCache/No/NewTabButton/default/OmniboxDisallowInlineHQP/Standard/OmniboxHUPCreateShorterMatch/Standard/OmniboxHUPCullRedirects/Standard/OmniboxSearchSuggestTrialStarted2012Q4/3/OneClickSignIn/Standard/Prerender/PrerenderEnabled/SBInterstitial/V1/SpdyCwnd/cwnd16/SpeculativePrefetching/Disabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_06/UMA-Uniformity-Trial-1-Percent/group_95/UMA-Uniformity-Trial-10-Percent/group_02/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/group_04/UMA-Uniformity-Trial-50-Percent/group_01/WarmSocketImpact/warm_socket/ --renderer-print-preview --enable-threaded-compositing --channel="1696.23.244327702\1197796388" /prefetch:3
"C:\Users\hadza\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=CacheSensitivityAnalysis/No/EnableStage3D/enabled/ForceCompositingMode/thread/GlobalSdch/global_enable_sdch/InfiniteCache/No/NewTabButton/default/OmniboxDisallowInlineHQP/Standard/OmniboxHUPCreateShorterMatch/Standard/OmniboxHUPCullRedirects/Standard/OmniboxSearchSuggestTrialStarted2012Q4/3/OneClickSignIn/Standard/Prerender/PrerenderEnabled/SBInterstitial/V1/SpdyCwnd/cwnd16/SpeculativePrefetching/Disabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_06/UMA-Uniformity-Trial-1-Percent/group_95/UMA-Uniformity-Trial-10-Percent/group_02/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/group_04/UMA-Uniformity-Trial-50-Percent/group_01/WarmSocketImpact/warm_socket/ --renderer-print-preview --enable-threaded-compositing --channel="1696.25.414953235\142744402" /prefetch:3
"C:\Users\hadza\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=CacheSensitivityAnalysis/No/EnableStage3D/enabled/ForceCompositingMode/thread/GlobalSdch/global_enable_sdch/InfiniteCache/No/NewTabButton/default/OmniboxDisallowInlineHQP/Standard/OmniboxHUPCreateShorterMatch/Standard/OmniboxHUPCullRedirects/Standard/OmniboxSearchSuggestTrialStarted2012Q4/3/OneClickSignIn/Standard/Prerender/PrerenderEnabled/SBInterstitial/V1/SpdyCwnd/cwnd16/SpeculativePrefetching/Disabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_06/UMA-Uniformity-Trial-1-Percent/group_95/UMA-Uniformity-Trial-10-Percent/group_02/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/group_04/UMA-Uniformity-Trial-50-Percent/group_01/WarmSocketImpact/warm_socket/ --renderer-print-preview --enable-threaded-compositing --channel="1696.27.503627273\1223071642" /prefetch:3
"C:\Users\hadza\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=CacheSensitivityAnalysis/No/EnableStage3D/enabled/ForceCompositingMode/thread/GlobalSdch/global_enable_sdch/InfiniteCache/No/NewTabButton/default/OmniboxDisallowInlineHQP/Standard/OmniboxHUPCreateShorterMatch/Standard/OmniboxHUPCullRedirects/Standard/OmniboxSearchSuggestTrialStarted2012Q4/3/OneClickSignIn/Standard/Prerender/PrerenderEnabled/SBInterstitial/V1/SpdyCwnd/cwnd16/SpeculativePrefetching/Disabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_06/UMA-Uniformity-Trial-1-Percent/group_95/UMA-Uniformity-Trial-10-Percent/group_02/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/group_04/UMA-Uniformity-Trial-50-Percent/group_01/WarmSocketImpact/warm_socket/ --renderer-print-preview --enable-threaded-compositing --channel="1696.32.1097844315\1932391523" /prefetch:3
"C:\Users\hadza\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=CacheSensitivityAnalysis/No/EnableStage3D/enabled/ForceCompositingMode/thread/GlobalSdch/global_enable_sdch/InfiniteCache/No/NewTabButton/default/OmniboxDisallowInlineHQP/Standard/OmniboxHUPCreateShorterMatch/Standard/OmniboxHUPCullRedirects/Standard/OmniboxSearchSuggestTrialStarted2012Q4/3/OneClickSignIn/Standard/Prerender/PrerenderEnabled/SBInterstitial/V1/SpdyCwnd/cwnd16/SpeculativePrefetching/Disabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_06/UMA-Uniformity-Trial-1-Percent/group_95/UMA-Uniformity-Trial-10-Percent/group_02/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/group_04/UMA-Uniformity-Trial-50-Percent/group_01/WarmSocketImpact/warm_socket/ --renderer-print-preview --enable-threaded-compositing --channel="1696.33.1427256665\13569353" /prefetch:3
"C:\Users\hadza\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=CacheSensitivityAnalysis/No/EnableStage3D/enabled/ForceCompositingMode/thread/GlobalSdch/global_enable_sdch/InfiniteCache/No/NewTabButton/default/OmniboxDisallowInlineHQP/Standard/OmniboxHQPNewScoring/Standard/OmniboxHUPCreateShorterMatch/Standard/OmniboxHUPCullRedirects/Standard/OmniboxSearchSuggestTrialStarted2012Q4/3/OneClickSignIn/Standard/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/SBInterstitial/V1/SpdyCwnd/cwnd16/SpeculativePrefetching/Disabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_06/UMA-Uniformity-Trial-1-Percent/group_95/UMA-Uniformity-Trial-10-Percent/group_02/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/group_04/UMA-Uniformity-Trial-50-Percent/group_01/WarmSocketImpact/warm_socket/ --renderer-print-preview --enable-threaded-compositing --channel="1696.36.2139632870\1599998175" /prefetch:3
"C:\Users\hadza\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=CacheSensitivityAnalysis/No/EnableStage3D/enabled/ForceCompositingMode/thread/GlobalSdch/global_enable_sdch/InfiniteCache/No/NewTabButton/default/OmniboxDisallowInlineHQP/Standard/OmniboxHQPNewScoring/Standard/OmniboxHUPCreateShorterMatch/Standard/OmniboxHUPCullRedirects/Standard/OmniboxSearchSuggestTrialStarted2012Q4/3/OneClickSignIn/Standard/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/SBInterstitial/V1/SpdyCwnd/cwnd16/SpeculativePrefetching/Disabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_06/UMA-Uniformity-Trial-1-Percent/group_95/UMA-Uniformity-Trial-10-Percent/group_02/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/group_04/UMA-Uniformity-Trial-50-Percent/group_01/WarmSocketImpact/warm_socket/ --renderer-print-preview --enable-threaded-compositing --channel="1696.38.1470371776\1723979647" /prefetch:3
"C:\Users\hadza\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=CacheSensitivityAnalysis/No/EnableStage3D/enabled/ForceCompositingMode/thread/GlobalSdch/global_enable_sdch/InfiniteCache/No/NewTabButton/default/OmniboxDisallowInlineHQP/Standard/OmniboxHQPNewScoring/Standard/OmniboxHUPCreateShorterMatch/Standard/OmniboxHUPCullRedirects/Standard/OmniboxSearchSuggestTrialStarted2012Q4/3/OneClickSignIn/Standard/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/SBInterstitial/V1/SpdyCwnd/cwnd16/SpeculativePrefetching/Disabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_06/UMA-Uniformity-Trial-1-Percent/group_95/UMA-Uniformity-Trial-10-Percent/group_02/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/group_04/UMA-Uniformity-Trial-50-Percent/group_01/WarmSocketImpact/warm_socket/ --renderer-print-preview --enable-threaded-compositing --channel="1696.39.1085455992\539284410" /prefetch:3
C:\Windows\servicing\TrustedInstaller.exe
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe22_ Global\UsGthrCtrlFltPipeMssGthrPipe22 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 508 512 520 65536 516
"C:\Users\hadza\Downloads\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-3842774712-1057022947-2739308594-1001Core.job
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-3842774712-1057022947-2739308594-1001UA.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore1ce0da354c2a94a.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3842774712-1057022947-2739308594-1001Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3842774712-1057022947-2739308594-1001UA.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3842774712-1057022947-2739308594-1004Core1ce03aba9d974e5.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3842774712-1057022947-2739308594-1004UA1ce03abb6cfcb2e.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2012-08-16 6670496]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2012-11-15 537576]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 532336]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2010-12-21 689040]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2012-11-15 193512]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23 60568]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealNetworks Download and Record Plugin for Internet Explorer - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll [2012-11-29 539888]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2012-08-16 4171424]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre6\bin\ssv.dll [2012-03-12 325408]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 403840]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2010-12-21 561552]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2012-03-12 42272]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FF4E1D1D-705B-4379-AB33-22D98C1ABF55}]
Social Extras Plugin - C:\Program Files (x86)\SocialExtras\socialx.dll [2011-11-29 116056]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{32099AAC-C132-4136-9E9A-4E364A424E17}

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2011-08-16 12673128]
"CDAServer"=C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [2012-02-20 456704]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2012-11-26 6325936]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files (x86)\Windows Sidebar\sidebar.exe [2010-11-21 1174016]
"uTorrent"=C:\Program Files (x86)\uTorrent\uTorrent.exe [2012-12-12 969104]
"DAEMON Tools Pro Agent"=C:\Program Files\DAEMON Tools Pro\DTAgent.exe [2011-03-17 842048]
"KiesPDLR"=C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [2012-05-21 21416]
"Sony PC Companion"=C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe [2013-01-07 446648]
"GoogleDriveSync"=C:\Program Files (x86)\Google\Drive\googledrivesync.exe [2012-12-17 16328976]
"Facebook Update"=C:\Users\hadza\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-02-16 138096]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"JMB36X IDE Setup"=C:\Windows\RaidTool\xInsIDE.exe [2010-09-07 43608]
"3200 Scan2PC"=C:\Windows\twain_32\Samsung\SCX3200\Scan2Pc.exe [2010-05-18 1989120]
"SUS Start"=C:\ProgramData\SUS\SUS.exe [2012-12-14 2189824]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2012-12-19 642808]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Adobe Gamma Loader.lnk - C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2012-08-16 6670496]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2012-08-16 4171424]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
""=0
"LogonHoursAction"=2
"DontDisplayLogonHoursWarnings"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
""=

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
"DisallowRun"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"C:\Program Files (x86)\FlashFXP\FlashFXP.exe"="C:\Program Files (x86)\FlashFXP\FlashFXP.exe:*:Enabled:FlashFXP v3"

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2013-02-23 16:20:28 ----D---- C:\rsit
2013-02-23 16:20:28 ----D---- C:\Program Files\trend micro
2013-02-19 17:47:31 ----A---- C:\Windows\SYSWOW64\PnkBstrB.exe
2013-02-19 17:47:19 ----A---- C:\Windows\SYSWOW64\PnkBstrA.exe
2013-02-19 17:46:35 ----D---- C:\ProgramData\Orbit
2013-02-19 16:18:29 ----D---- C:\Program Files (x86)\Far Cry 3
2013-02-19 15:41:10 ----D---- C:\Program Files (x86)\Ubisoft
2013-02-18 15:12:49 ----D---- C:\Program Files (x86)\Dead Space 3
2013-02-14 11:22:45 ----D---- C:\Program Files (x86)\Rockstar Games
2013-02-14 10:49:17 ----A---- C:\Windows\system32\wrap_oal.dll
2013-02-14 10:49:16 ----A---- C:\Windows\system32\OpenAL32.dll
2013-02-14 10:49:15 ----D---- C:\Program Files (x86)\OpenAL
2013-02-14 10:49:15 ----A---- C:\Windows\SYSWOW64\wrap_oal.dll
2013-02-14 10:49:14 ----RA---- C:\Windows\SYSWOW64\tmp1DD0.tmp
2013-02-14 10:49:14 ----A---- C:\Windows\SYSWOW64\OpenAL32.dll
2013-02-13 21:18:31 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2013-02-13 21:18:31 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2013-02-13 21:18:31 ----A---- C:\Windows\system32\mshtmled.dll
2013-02-13 21:18:30 ----A---- C:\Windows\SYSWOW64\url.dll
2013-02-13 21:18:30 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2013-02-13 21:18:30 ----A---- C:\Windows\SYSWOW64\ieui.dll
2013-02-13 21:18:30 ----A---- C:\Windows\system32\ieUnatt.exe
2013-02-13 21:18:30 ----A---- C:\Windows\system32\ieui.dll
2013-02-13 21:18:29 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2013-02-13 21:18:29 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2013-02-13 21:18:29 ----A---- C:\Windows\system32\urlmon.dll
2013-02-13 21:18:29 ----A---- C:\Windows\system32\url.dll
2013-02-13 21:18:29 ----A---- C:\Windows\system32\msfeeds.dll
2013-02-13 21:18:29 ----A---- C:\Windows\system32\jscript9.dll
2013-02-13 21:18:28 ----A---- C:\Windows\SYSWOW64\wininet.dll
2013-02-13 21:18:27 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2013-02-13 21:18:27 ----A---- C:\Windows\SYSWOW64\jscript.dll
2013-02-13 21:18:27 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2013-02-13 21:18:27 ----A---- C:\Windows\system32\wininet.dll
2013-02-13 21:18:27 ----A---- C:\Windows\system32\vbscript.dll
2013-02-13 21:18:27 ----A---- C:\Windows\system32\jsproxy.dll
2013-02-13 21:18:27 ----A---- C:\Windows\system32\jscript.dll
2013-02-13 21:18:27 ----A---- C:\Windows\system32\iertutil.dll
2013-02-13 21:18:26 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2013-02-13 21:18:26 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2013-02-13 21:18:24 ----A---- C:\Windows\system32\mshtml.dll
2013-02-13 21:18:23 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2013-02-13 21:18:23 ----A---- C:\Windows\system32\ieframe.dll
2013-02-13 09:14:11 ----A---- C:\Windows\system32\ntoskrnl.exe
2013-02-13 09:14:10 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2013-02-13 09:14:10 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2013-02-13 09:14:03 ----A---- C:\Windows\system32\win32k.sys
2013-02-13 09:14:02 ----A---- C:\Windows\SYSWOW64\wow32.dll
2013-02-13 09:14:02 ----A---- C:\Windows\SYSWOW64\setup16.exe
2013-02-13 09:14:02 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2013-02-13 09:14:02 ----A---- C:\Windows\SYSWOW64\instnm.exe
2013-02-13 09:14:02 ----A---- C:\Windows\system32\winsrv.dll
2013-02-13 09:14:01 ----A---- C:\Windows\SYSWOW64\user.exe
2013-02-13 09:14:00 ----A---- C:\Windows\system32\drivers\tcpip.sys
2013-02-13 09:14:00 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS
2013-02-11 15:58:27 ----D---- C:\ProgramData\RELOADED
2013-02-11 15:26:31 ----D---- C:\Program Files (x86)\The Walkin Dead Episode 1&2 CZ
2013-02-06 08:10:40 ----D---- C:\Program Files (x86)\Mozilla Firefox
2013-02-01 17:35:21 ----D---- C:\Program Files (x86)\Google
2013-01-24 06:46:44 ----D---- C:\ProgramData\ATI
2013-01-24 06:46:40 ----D---- C:\Program Files (x86)\AMD AVT
2013-01-24 06:46:28 ----D---- C:\Program Files (x86)\AMD APP

======List of files/folders modified in the last 1 months======

2013-02-23 16:20:44 ----D---- C:\Windows\Prefetch
2013-02-23 16:20:39 ----D---- C:\Windows\Temp
2013-02-23 16:20:28 ----RD---- C:\Program Files
2013-02-23 16:19:41 ----D---- C:\Users\hadza\AppData\Roaming\uTorrent
2013-02-23 16:19:09 ----D---- C:\Windows\system32\config
2013-02-23 15:59:04 ----D---- C:\ProgramData\SUS
2013-02-23 11:20:16 ----D---- C:\Users\hadza\AppData\Roaming\vlc
2013-02-23 11:07:08 ----SHD---- C:\Windows\Installer
2013-02-23 11:07:08 ----SHD---- C:\Config.Msi
2013-02-23 11:06:50 ----D---- C:\Windows\SysWOW64
2013-02-23 10:42:19 ----D---- C:\Windows\System32
2013-02-23 10:42:19 ----D---- C:\Windows\inf
2013-02-23 10:42:19 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-02-23 08:06:47 ----D---- C:\Windows\system32\Tasks
2013-02-23 08:04:42 ----D---- C:\Windows
2013-02-22 18:48:27 ----SHD---- C:\System Volume Information
2013-02-22 11:04:35 ----D---- C:\Windows\system32\NDF
2013-02-19 17:47:20 ----D---- C:\Windows\system32\LogFiles
2013-02-19 17:46:35 ----HD---- C:\ProgramData
2013-02-19 16:18:29 ----RD---- C:\Program Files (x86)
2013-02-18 07:43:59 ----D---- C:\Windows\Tasks
2013-02-15 09:03:22 ----D---- C:\Users\hadza\AppData\Roaming\Winamp
2013-02-15 07:23:56 ----D---- C:\Windows\system32\catroot2
2013-02-14 14:00:21 ----D---- C:\Users\hadza\AppData\Roaming\DAEMON Tools Pro
2013-02-14 13:53:09 ----D---- C:\Windows\winsxs
2013-02-14 13:53:06 ----D---- C:\Users\hadza\AppData\Roaming\DAEMON Tools Lite
2013-02-14 13:52:58 ----D---- C:\Users\hadza\AppData\Roaming\TS3Client
2013-02-14 13:52:58 ----D---- C:\Users\hadza\AppData\Roaming\Skype
2013-02-14 13:50:54 ----D---- C:\Windows\Panther
2013-02-14 13:50:54 ----D---- C:\Windows\ModemLogs
2013-02-14 13:50:53 ----D---- C:\Windows\Logs
2013-02-14 13:49:24 ----D---- C:\Program Files (x86)\Driver-Soft
2013-02-14 13:49:02 ----D---- C:\Program Files\VideoLAN
2013-02-14 13:45:00 ----D---- C:\Program Files\CCleaner
2013-02-14 09:04:45 ----D---- C:\Windows\Microsoft.NET
2013-02-14 09:04:29 ----RSD---- C:\Windows\assembly
2013-02-14 08:06:15 ----D---- C:\Windows\debug
2013-02-14 07:46:44 ----D---- C:\Windows\system32\drivers
2013-02-14 07:46:44 ----D---- C:\Windows\AppPatch
2013-02-14 07:46:43 ----D---- C:\Windows\SYSWOW64\migration
2013-02-14 07:46:43 ----D---- C:\Windows\system32\migration
2013-02-14 07:46:43 ----D---- C:\Program Files (x86)\Internet Explorer
2013-02-14 07:46:42 ----D---- C:\Program Files\Internet Explorer
2013-02-13 21:26:34 ----A---- C:\Windows\system32\MRT.exe
2013-02-13 21:26:28 ----D---- C:\ProgramData\Microsoft Help
2013-02-13 21:20:34 ----D---- C:\Windows\system32\catroot
2013-02-12 18:57:16 ----D---- C:\zVideno dobre
2013-02-12 18:27:30 ----D---- C:\Windows\SYSWOW64\directx
2013-02-11 17:26:52 ----D---- C:\Program Files (x86)\rajce
2013-02-11 17:13:39 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2013-02-11 17:13:39 ----D---- C:\Program Files (x86)\WB Games
2013-02-08 16:27:19 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2013-02-08 14:18:45 ----D---- C:\Program Files\Opera x64
2013-02-08 14:18:45 ----D---- C:\Program Files (x86)\Opera x64
2013-02-06 10:58:37 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2013-02-04 19:07:09 ----D---- C:\ProgramData\Skype
2013-01-29 10:44:53 ----D---- C:\Users\hadza\AppData\Roaming\FileZilla
2013-01-24 06:46:42 ----D---- C:\ProgramData\AMD
2013-01-24 06:45:40 ----D---- C:\Program Files\ATI Technologies
2013-01-24 06:43:08 ----D---- C:\Windows\system32\DriverStore

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2012-11-28 57904]
R0 JRAID;JRAID; C:\Windows\system32\DRIVERS\jraid.sys [2011-05-19 120920]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R0 speedfan;speedfan; C:\Windows\SysWOW64\speedfan.sys [2011-03-18 29592]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2012-07-08 526392]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-21 514560]
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2012-10-08 211344]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2012-10-08 149592]
R1 EpfwLWF;Epfw NDIS LightWeight Filter; C:\Windows\system32\DRIVERS\EpfwLWF.sys [2012-10-08 59440]
R2 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2012-10-08 189208]
R2 SSPORT;SSPORT; \??\C:\Windows\system32\Drivers\SSPORT.sys [2012-02-15 11576]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2012-12-19 11278336]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2012-12-19 552960]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys [2012-11-06 96256]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2011-08-16 3056360]
R3 LgBttPort;LGE Bluetooth TransPort; C:\Windows\system32\DRIVERS\lgbtpt64.sys [2009-09-29 16384]
R3 lgbusenum;LG Bluetooth Bus Enumerator; C:\Windows\system32\DRIVERS\lgbtbs64.sys [2009-09-29 14848]
R3 LGVMODEM;LGE Virtual Modem; C:\Windows\system32\DRIVERS\lgvmdm64.sys [2009-09-29 17408]
R3 MarvinBus;Pinnacle Marvin Bus 64; C:\Windows\system32\DRIVERS\MarvinBus64.sys [2005-09-23 261120]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2000-01-01 685672]
R3 StillCam;Ovladač digitálního fotoaparátu pro sériový port; C:\Windows\system32\DRIVERS\serscan.sys [2009-07-14 12288]
R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv; \??\C:\Program Files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesDriver64.sys [2011-02-10 11856]
S2 DgiVecp;DgiVecp; \??\C:\Windows\system32\Drivers\DgiVecp.sys []
S3 61883;61883 Unit Device; C:\Windows\system32\DRIVERS\61883.sys [2009-07-14 60288]
S3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2012-12-19 11278336]
S3 Avc;Zařízení AVC; C:\Windows\system32\DRIVERS\avc.sys [2009-07-14 48768]
S3 dmvsc;dmvsc; C:\Windows\system32\drivers\dmvsc.sys [2010-11-21 71168]
S3 flashusb;flashusb; C:\Windows\system32\DRIVERS\flashusb.sys [2012-02-27 19968]
S3 gdrv;gdrv; \??\C:\Windows\gdrv.sys [2012-01-11 25640]
S3 ggflt;SEMC USB Flash Driver Filter; C:\Windows\system32\DRIVERS\ggflt.sys [2012-11-28 14448]
S3 ggsemc;SEMC USB Flash Driver; C:\Windows\system32\DRIVERS\ggsemc.sys [2012-11-28 27760]
S3 htcnprot;HTC NDIS Protocol Driver; C:\Windows\system32\DRIVERS\htcnprot.sys [2010-06-25 36928]
S3 MSDV;Microsoft DV Camera and VCR; C:\Windows\system32\DRIVERS\msdv.sys [2009-07-14 61440]
S3 nmwcd;Nokia USB Phone Parent Driver; C:\Windows\system32\drivers\ccdcmbx64.sys [2011-11-01 19968]
S3 nmwcdc;Nokia USB Communication Driver; C:\Windows\system32\drivers\ccdcmbox64.sys [2011-11-01 27136]
S3 nmwcdnsucx64;Nokia USB Flashing Generic; C:\Windows\system32\drivers\nmwcdnsucx64.sys [2011-11-01 12800]
S3 nmwcdnsux64;Nokia USB Flashing Phone Parent; C:\Windows\system32\drivers\nmwcdnsux64.sys [2011-11-01 171008]
S3 NPF;NetGroup Packet Filter Driver; C:\Windows\system32\drivers\npf.sys []
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfdx64.sys [2008-08-28 25600]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-21 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2010-11-21 20992]
S3 RTHDMIAzAudService;Service for HDMI; C:\Windows\system32\drivers\RtHDMIVX.sys []
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-21 6656]
S3 sscdbus;SAMSUNG USB Composite Device driver (WDM); C:\Windows\system32\DRIVERS\sscdbus.sys [2010-12-21 136264]
S3 sscdmdfl;SAMSUNG Mobile Modem Filter; C:\Windows\system32\DRIVERS\sscdmdfl.sys [2010-12-21 19016]
S3 sscdmdm;SAMSUNG Mobile Modem Drivers; C:\Windows\system32\DRIVERS\sscdmdm.sys [2010-12-21 172104]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-21 34688]
S3 SWDUMon;SWDUMon; C:\Windows\system32\DRIVERS\SWDUMon.sys [2012-10-06 15712]
S3 Synth3dVsc;Synth3dVsc; C:\Windows\System32\drivers\synth3dvsc.sys [2010-11-21 88960]
S3 terminpt;Microsoft Remote Desktop Input Driver; C:\Windows\system32\drivers\terminpt.sys [2010-11-21 34816]
S3 TFsExDisk;TFsExDisk; \??\C:\Windows\System32\Drivers\TFsExDisk.sys [2010-06-14 16448]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S3 tsusbhub;@%SystemRoot%\system32\drivers\tsusbhub.sys,-1; C:\Windows\system32\drivers\tsusbhub.sys [2010-11-21 117248]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerfltx64.sys [2011-11-01 9216]
S3 usb_rndisx;Adaptér USB RNDIS; C:\Windows\system32\drivers\usb8023x.sys [2009-07-14 19968]
S3 usbbus;LGE Mobile Composite USB Device; C:\Windows\system32\DRIVERS\lgx64bus.sys []
S3 UsbDiag;LGE Mobile USB Serial Port; C:\Windows\system32\DRIVERS\lgx64diag.sys []
S3 USBModem;LGE Mobile USB Modem; C:\Windows\system32\DRIVERS\lgx64modem.sys []
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 41984]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2010-11-21 32768]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltjx64.sys [2011-11-01 9216]
S3 VGPU;VGPU; C:\Windows\System32\drivers\rdvgkmd.sys []
S3 vmbus;vmbus; C:\Windows\system32\drivers\vmbus.sys [2010-11-21 199552]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-21 21760]
S3 WinUsb;Sony Ericsson USB Device sa0101 Driver; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-12-18 65192]
R2 AdvancedSystemCareService;Advanced SystemCare Service; C:\Program Files (x86)\IObit\Advanced SystemCare 4\ASCService.exe [2011-04-21 352656]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2012-12-19 240640]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [2012-11-26 1329304]
R2 PassThru Service;Internet Pass-Through Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [2010-09-16 80896]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2013-02-19 76888]
R2 RapiMgr;@%windir%\WindowsMobile\rapimgr.dll,-104; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R2 RealNetworks Downloader Resolver Service;RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [2012-11-29 38608]
R2 TuneUp.UtilitiesSvc;TuneUp Utilities Service; C:\Program Files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesService64.exe [2011-03-30 2026304]
R2 UxTuneUp;@%SystemRoot%\System32\uxtuneup.dll,-4096; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 WcesComm;@%windir%\WindowsMobile\wcescomm.dll,-40079; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-08-18 2291568]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-09-15 116648]
S2 KMService;KMService; C:\Windows\syswow64\srvany.exe [2011-05-08 8192]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-02-08 251248]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-09-15 116648]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files\Microsoft Office\Office14\GROOVE.EXE [2012-09-20 50899608]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2013-02-06 115608]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 174440]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 ServiceLayer;ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [2011-11-30 718888]
S3 Sony PC Companion;Sony PC Companion; C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe [2012-01-18 155320]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2011-05-04 1255736]
S4 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S4 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]

-----------------EOF-----------------

Zdravím!
Nejprve spusťte tuto utilitu:

Stáhněte AdwCleaner http://stahnu.cz/tag/adw-cleaner-free-download
Uložte na plochu
Ukončete všechny programy
Klikněte na Search
Proběhne skenováni a pak se objeví log, který sem vložte.

# AdwCleaner v2.109 - Logfile created 02/24/2013 at 13:44:32
# Updated 26/01/2013 by Xplode
# Operating system : Windows 7 Ultimate Service Pack 1 (64 bits)
# User : hadza - HADZA-PC
# Boot Mode : Normal
# Running from : C:\Users\hadza\Desktop\adwcleaner_2.110.exe
# Option [Search]


***** [Services] *****


***** [Files / Folders] *****

File Found : C:\Program Files (x86)\Mozilla Firefox\searchplugins\fcmdSrch.xml
File Found : C:\Users\Deti\AppData\Roaming\Mozilla\Firefox\Profiles\meroiczd.default\searchplugins\Ask.xml
File Found : C:\Users\Deti\AppData\Roaming\Mozilla\Firefox\Profiles\meroiczd.default\searchplugins\Conduit.xml
File Found : C:\Users\Deti\AppData\Roaming\Mozilla\Firefox\Profiles\meroiczd.default\searchplugins\daemon-search.xml
File Found : C:\Users\Deti\AppData\Roaming\Mozilla\Firefox\Profiles\meroiczd.default\searchplugins\icqplugin.xml
File Found : C:\Users\hadza\AppData\Roaming\Mozilla\Firefox\Profiles\e96v92y2.default\searchplugins\Ask.xml
File Found : C:\Users\hadza\AppData\Roaming\Mozilla\Firefox\Profiles\e96v92y2.default\searchplugins\Conduit.xml
File Found : C:\Users\hadza\AppData\Roaming\Mozilla\Firefox\Profiles\e96v92y2.default\searchplugins\daemon-search.xml
File Found : C:\Users\hadza\AppData\Roaming\Mozilla\Firefox\Profiles\e96v92y2.default\searchplugins\icqplugin.xml
Folder Found : C:\Program Files (x86)\Ask.com
Folder Found : C:\Program Files (x86)\Conduit
Folder Found : C:\ProgramData\Ask
Folder Found : C:\Users\Deti\AppData\Roaming\Mozilla\Firefox\Profiles\meroiczd.default\Conduit
Folder Found : C:\Users\Deti\AppData\Roaming\Mozilla\Firefox\Profiles\meroiczd.default\ConduitEngine
Folder Found : C:\Users\Deti\AppData\Roaming\Mozilla\Firefox\Profiles\meroiczd.default\CT2786678
Folder Found : C:\Users\Deti\AppData\Roaming\Mozilla\Firefox\Profiles\meroiczd.default\CT2786678
Folder Found : C:\Users\Deti\AppData\Roaming\Mozilla\Firefox\Profiles\meroiczd.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}
Folder Found : C:\Users\Deti\AppData\Roaming\Mozilla\Firefox\Profiles\meroiczd.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}
Folder Found : C:\Users\Deti\AppData\Roaming\Mozilla\Firefox\Profiles\meroiczd.default\extensions\engine@conduit.com
Folder Found : C:\Users\hadza\AppData\Local\Conduit
Folder Found : C:\Users\hadza\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc
Folder Found : C:\Users\hadza\AppData\Local\OpenCandy
Folder Found : C:\Users\hadza\AppData\LocalLow\Conduit
Folder Found : C:\Users\hadza\AppData\LocalLow\facemoods.com
Folder Found : C:\Users\hadza\AppData\LocalLow\PriceGong
Folder Found : C:\Users\hadza\AppData\Roaming\Mozilla\Firefox\Profiles\e96v92y2.default\Conduit
Folder Found : C:\Users\hadza\AppData\Roaming\Mozilla\Firefox\Profiles\e96v92y2.default\ConduitEngine
Folder Found : C:\Users\hadza\AppData\Roaming\Mozilla\Firefox\Profiles\e96v92y2.default\CT2786678
Folder Found : C:\Users\hadza\AppData\Roaming\Mozilla\Firefox\Profiles\e96v92y2.default\CT2786678
Folder Found : C:\Users\hadza\AppData\Roaming\Mozilla\Firefox\Profiles\e96v92y2.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}
Folder Found : C:\Users\hadza\AppData\Roaming\Mozilla\Firefox\Profiles\e96v92y2.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}
Folder Found : C:\Users\hadza\AppData\Roaming\Mozilla\Firefox\Profiles\e96v92y2.default\extensions\engine@conduit.com
Folder Found : C:\Users\hadza\AppData\Roaming\OpenCandy

***** [Registry] *****

Key Found : HKCU\Software\APN PIP
Key Found : HKCU\Software\AppDataLow\Software\Conduit
Key Found : HKCU\Software\AppDataLow\Software\ConduitSearchScopes
Key Found : HKCU\Software\AppDataLow\Software\PriceGong
Key Found : HKCU\Software\AppDataLow\Software\SmartBar
Key Found : HKCU\Software\Conduit
Key Found : HKCU\Software\Google\Chrome\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc
Key Found : HKCU\Software\PIP
Key Found : HKCU\Software\Softonic
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0D7562AE-8EF6-416D-A838-AB665251703A}
Key Found : HKLM\SOFTWARE\Classes\AppID\{5B1881D1-D9C7-46DF-B041-1E593282C7D0}
Key Found : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Key Found : HKLM\SOFTWARE\Classes\facemoods.facemoodsHlpr
Key Found : HKLM\SOFTWARE\Classes\facemoods.facemoodsHlpr.1
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{09C554C3-109B-483C-A06B-F14172F1A947}
Key Found : HKLM\Software\Conduit
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\facemoodssrv_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\facemoodssrv_RASMANCS
Key Found : HKLM\Software\PIP
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{64182481-4F71-486B-A045-B233BD0DA8FC}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{DDE2C74F-58CC-4D71-8CE1-09DEBB8CFB78}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{813A22E0-3E2B-4188-9BDA-ECA9878B8D48}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{A9379648-F6EB-4F65-A624-1C10411A15D0}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{F16AB1DB-15C0-4456-A29E-4DF24FB9E3D2}
Key Found : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc
Key Found : HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
Key Found : HKLM\SOFTWARE\Classes\Interface\{813A22E0-3E2B-4188-9BDA-ECA9878B8D48}
Key Found : HKLM\SOFTWARE\Classes\Interface\{A9379648-F6EB-4F65-A624-1C10411A15D0}
Key Found : HKLM\SOFTWARE\Classes\Interface\{F16AB1DB-15C0-4456-A29E-4DF24FB9E3D2}
Key Found : HKU\S-1-5-21-3842774712-1057022947-2739308594-1001\Software\Microsoft\Internet Explorer\SearchScopes\{0D7562AE-8EF6-416D-A838-AB665251703A}
Value Found : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{32099AAC-C132-4136-9E9A-4E364A424E17}]
Value Found : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{32099AAC-C132-4136-9E9A-4E364A424E17}]

***** [Internet Browsers] *****

-\\ Internet Explorer v9.0.8112.16464

[HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://search.conduit.com/?SearchSource=10&ctid=CT3072253
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Search - SearchAssistant] = hxxp://start.facemoods.com/?a=ddrnw&s={searchTerms}&f=4

-\\ Mozilla Firefox v18.0.2 (cs)

File : C:\Users\hadza\AppData\Roaming\Mozilla\Firefox\Profiles\e96v92y2.default\prefs.js

Found : user_pref("CT2475029..clientLogIsEnabled", false);
Found : user_pref("CT2475029..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...]
Found : user_pref("CT2475029..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...]
Found : user_pref("CT2475029.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
Found : user_pref("CT2475029.CT2481020.CommunityChanged", true);
Found : user_pref("CT2475029.CT2481024.CommunityChanged", true);
Found : user_pref("CT2475029.CT2481025.CommunityChanged", true);
Found : user_pref("CT2475029.CT2481029.CommunityChanged", true);
Found : user_pref("CT2475029.CT2481031.CommunityChanged", true);
Found : user_pref("CT2475029.CT2481032.CommunityChanged", true);
Found : user_pref("CT2475029.CT2481033.CommunityChanged", true);
Found : user_pref("CT2475029.CT2481034.CommunityChanged", true);
Found : user_pref("CT2475029.CT2481035.CommunityChanged", true);
Found : user_pref("CT2475029.CT2481037.CommunityChanged", true);
Found : user_pref("CT2475029.CTID", "ct2481032");
Found : user_pref("CT2475029.CommunitiesChangesLastCheckTime", "Mon Apr 18 2011 19:07:12 GMT+0200");
Found : user_pref("CT2475029.CommunityChanged", true);
Found : user_pref("CT2475029.CurrentServerDate", "18-4-2011");
Found : user_pref("CT2475029.DialogsAlignMode", "LTR");
Found : user_pref("CT2475029.DialogsGetterLastCheckTime", "Mon Apr 18 2011 05:48:44 GMT+0200");
Found : user_pref("CT2475029.DownloadDomainsCheckInterval", "168");
Found : user_pref("CT2475029.DownloadDomainsListLastCheckTime", "Mon Apr 18 2011 05:48:44 GMT+0200");
Found : user_pref("CT2475029.DownloadDomainsListLastServerUpdateTime", "1201069983");
Found : user_pref("CT2475029.DownloadReferralCookieData", "");
Found : user_pref("CT2475029.FeedPollDate128975107603475850", "Mon Apr 18 2011 19:14:15 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate129104903994210185", "Mon Apr 18 2011 19:14:14 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate129125588542653211", "Mon Apr 18 2011 19:14:15 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate129132307482029379", "Mon Apr 18 2011 05:48:46 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate129132307482029381", "Mon Apr 18 2011 05:48:46 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate129132307482029382", "Mon Apr 18 2011 05:48:46 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate129133095459686870", "Mon Apr 18 2011 05:48:46 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate129133095459686871", "Mon Apr 18 2011 05:48:46 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate129137415288118473", "Mon Apr 18 2011 19:14:14 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate129137415288118474", "Mon Apr 18 2011 19:14:15 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate129137436798437243", "Mon Apr 18 2011 19:14:15 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate129137436798437244", "Mon Apr 18 2011 19:14:15 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate129137436798437245", "Mon Apr 18 2011 19:14:15 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate129137437659687146", "Mon Apr 18 2011 05:48:45 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate129137437659687147", "Mon Apr 18 2011 05:48:45 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate129137437659687148", "Mon Apr 18 2011 05:48:45 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757377779301063", "Mon Apr 18 2011 18:13:55 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757377961554609", "Mon Apr 18 2011 18:13:53 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757377979947076", "Mon Apr 18 2011 18:13:55 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757378132259586", "Mon Apr 18 2011 18:13:53 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757378265651739", "Mon Apr 18 2011 18:13:55 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757378449145277", "Mon Apr 18 2011 18:13:52 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757378705873295", "Mon Apr 18 2011 18:13:55 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757378902522699", "Mon Apr 18 2011 18:13:53 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757378968484097", "Mon Apr 18 2011 18:13:56 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757379044202234", "Mon Apr 18 2011 18:13:55 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757379219112080", "Mon Apr 18 2011 18:13:53 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757379310186023", "Mon Apr 18 2011 18:13:54 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757379320546978", "Mon Apr 18 2011 18:13:55 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757379400531926", "Mon Apr 18 2011 18:13:56 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757379497083274", "Mon Apr 18 2011 18:13:57 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757379497148810", "Mon Apr 18 2011 18:13:57 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757379497279882", "Mon Apr 18 2011 18:13:57 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757379644150784", "Mon Apr 18 2011 18:13:53 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757379646262407", "Mon Apr 18 2011 18:13:53 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757379767858421", "Mon Apr 18 2011 18:13:57 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757379797989042", "Mon Apr 18 2011 05:48:49 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757379883299006", "Mon Apr 18 2011 18:13:55 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757380108070872", "Mon Apr 18 2011 18:13:54 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757380344955611", "Mon Apr 18 2011 18:13:54 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757380390189978", "Mon Apr 18 2011 18:13:53 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757380412472059", "Mon Apr 18 2011 18:13:55 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757380467866928", "Mon Apr 18 2011 18:13:53 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757380521772385", "Mon Apr 18 2011 18:13:54 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757380616362201", "Mon Apr 18 2011 18:13:54 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757380727291645", "Mon Apr 18 2011 18:13:54 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757380767393172", "Mon Apr 18 2011 05:48:50 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757380868375745", "Mon Apr 18 2011 16:46:56 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757381043554700", "Mon Apr 18 2011 18:13:53 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757381080219037", "Mon Apr 18 2011 18:13:55 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757381151343676", "Mon Apr 18 2011 18:13:56 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757381247526121", "Mon Apr 18 2011 18:13:52 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757381247591657", "Mon Apr 18 2011 18:13:52 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757381372042911", "Mon Apr 18 2011 18:13:52 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757381453742514", "Mon Apr 18 2011 18:13:54 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757381520490197", "Mon Apr 18 2011 18:13:56 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757381582880127", "Mon Apr 18 2011 18:13:52 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757381641974229", "Mon Apr 18 2011 18:13:56 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757381669771831", "Mon Apr 18 2011 18:13:53 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757381670861676", "Mon Apr 18 2011 18:13:57 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757381749396397", "Mon Apr 18 2011 18:13:56 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757381869347434", "Mon Apr 18 2011 18:13:56 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757381908324302", "Mon Apr 18 2011 18:13:54 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757381919420428", "Mon Apr 18 2011 18:13:57 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757381932420313", "Mon Apr 18 2011 18:13:56 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757381975368474", "Mon Apr 18 2011 18:13:54 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757381979169315", "Mon Apr 18 2011 18:13:53 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757381989950054", "Mon Apr 18 2011 18:13:56 GMT+0200");
Found : user_pref("CT2475029.FeedTTL128975107603475850", 40);
Found : user_pref("CT2475029.FeedTTL129104903994210185", 40);
Found : user_pref("CT2475029.FeedTTL129125588542653211", 40);
Found : user_pref("CT2475029.FeedTTL129132307482029379", 40);
Found : user_pref("CT2475029.FeedTTL129132307482029381", 40);
Found : user_pref("CT2475029.FeedTTL129132307482029382", 40);
Found : user_pref("CT2475029.FeedTTL129133095459686870", 40);
Found : user_pref("CT2475029.FeedTTL129133095459686871", 40);
Found : user_pref("CT2475029.FeedTTL129137415288118473", 40);
Found : user_pref("CT2475029.FeedTTL129137415288118474", 40);
Found : user_pref("CT2475029.FeedTTL129137436798437243", 40);
Found : user_pref("CT2475029.FeedTTL129137436798437244", 40);
Found : user_pref("CT2475029.FeedTTL129137436798437245", 40);
Found : user_pref("CT2475029.FeedTTL129137437659687146", 40);
Found : user_pref("CT2475029.FeedTTL129137437659687147", 40);
Found : user_pref("CT2475029.FeedTTL129137437659687148", 40);
Found : user_pref("CT2475029.FeedTTL5609757377779301063", 15);
Found : user_pref("CT2475029.FeedTTL5609757377979947076", 15);
Found : user_pref("CT2475029.FeedTTL5609757378132259586", 10);
Found : user_pref("CT2475029.FeedTTL5609757378265651739", 30);
Found : user_pref("CT2475029.FeedTTL5609757378705873295", 15);
Found : user_pref("CT2475029.FeedTTL5609757379310186023", 5);
Found : user_pref("CT2475029.FeedTTL5609757379320546978", 2);
Found : user_pref("CT2475029.FeedTTL5609757379400531926", 5);
Found : user_pref("CT2475029.FeedTTL5609757380108070872", 5);
Found : user_pref("CT2475029.FeedTTL5609757380412472059", 15);
Found : user_pref("CT2475029.FeedTTL5609757380467866928", 60);
Found : user_pref("CT2475029.FeedTTL5609757380521772385", 2);
Found : user_pref("CT2475029.FeedTTL5609757380727291645", 5);
Found : user_pref("CT2475029.FeedTTL5609757380767393172", 1440);
Found : user_pref("CT2475029.FeedTTL5609757381043554700", 2);
Found : user_pref("CT2475029.FeedTTL5609757381247526121", 15);
Found : user_pref("CT2475029.FeedTTL5609757381372042911", 60);
Found : user_pref("CT2475029.FeedTTL5609757381453742514", 15);
Found : user_pref("CT2475029.FeedTTL5609757381908324302", 30);
Found : user_pref("CT2475029.FeedTTL5609757381932420313", 10);
Found : user_pref("CT2475029.FeedTTL5609757381979169315", 15);
Found : user_pref("CT2475029.FirstServerDate", "18-4-2011");
Found : user_pref("CT2475029.FirstTime", true);
Found : user_pref("CT2475029.FirstTimeFF3", true);
Found : user_pref("CT2475029.FixPageNotFoundErrors", true);
Found : user_pref("CT2475029.GroupingLastCheckTime", "Mon Apr 18 2011 05:48:44 GMT+0200");
Found : user_pref("CT2475029.GroupingLastErrorCode", "");
Found : user_pref("CT2475029.GroupingLastResponse", true);
Found : user_pref("CT2475029.GroupingLastServerUpdateTime", "129469851600000000");
Found : user_pref("CT2475029.GroupingServerCheckInterval", 1440);
Found : user_pref("CT2475029.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
Found : user_pref("CT2475029.HasUserGlobalKeys", true);
Found : user_pref("CT2475029.Initialize", true);
Found : user_pref("CT2475029.InitializeCommonPrefs", true);
Found : user_pref("CT2475029.InstallationAndCookieDataSentCount", 3);
Found : user_pref("CT2475029.InstallationId", "MyAshampoo.exe");
Found : user_pref("CT2475029.InstallationType", "ConduitIntegration");
Found : user_pref("CT2475029.InstalledDate", "Mon Apr 18 2011 05:48:45 GMT+0200");
Found : user_pref("CT2475029.IsGrouping", true);
Found : user_pref("CT2475029.IsMulticommunity", true);
Found : user_pref("CT2475029.IsOpenThankYouPage", false);
Found : user_pref("CT2475029.IsOpenUninstallPage", true);
Found : user_pref("CT2475029.LanguagePackLastCheckTime", "Mon Apr 18 2011 05:48:46 GMT+0200");
Found : user_pref("CT2475029.LanguagePackReloadIntervalMM", 1440);
Found : user_pref("CT2475029.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...]
Found : user_pref("CT2475029.LastLogin_3.3.3.2", "Mon Apr 18 2011 17:46:53 GMT+0200");
Found : user_pref("CT2475029.LatestVersion", "3.3.3.2");
Found : user_pref("CT2475029.Locale", "en");
Found : user_pref("CT2475029.MCDetectTooltipHeight", "83");
Found : user_pref("CT2475029.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
Found : user_pref("CT2475029.MCDetectTooltipWidth", "295");
Found : user_pref("CT2475029.RadioIsPodcast", false);
Found : user_pref("CT2475029.RadioMediaID", "9962");
Found : user_pref("CT2475029.RadioMediaType", "Media Player");
Found : user_pref("CT2475029.RadioMenuSelectedID", "EBRadioMenu_CT24750299962");
Found : user_pref("CT2475029.RadioStationName", "California%20Rock");
Found : user_pref("CT2475029.RadioStationURL", "hxxp://feedlive.net/california.asx");
Found : user_pref("CT2475029.SavedHomepage", "hxxp://www.seznam.cz/");
Found : user_pref("CT2475029.SearchFromAddressBarIsInit", true);
Found : user_pref("CT2475029.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT247[...]
Found : user_pref("CT2475029.SearchInNewTabEnabled", true);
Found : user_pref("CT2475029.SearchInNewTabIntervalMM", 1440);
Found : user_pref("CT2475029.SearchInNewTabLastCheckTime", "Mon Apr 18 2011 05:48:45 GMT+0200");
Found : user_pref("CT2475029.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...]
Found : user_pref("CT2475029.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageServic[...]
Found : user_pref("CT2475029.ServiceMapLastCheckTime", "Mon Apr 18 2011 05:48:42 GMT+0200");
Found : user_pref("CT2475029.SettingsLastCheckTime", "Mon Apr 18 2011 05:48:43 GMT+0200");
Found : user_pref("CT2475029.SettingsLastUpdate", "1302500760");
Found : user_pref("CT2475029.ThirdPartyComponentsInterval", 504);
Found : user_pref("CT2475029.ThirdPartyComponentsLastCheck", "Mon Apr 18 2011 05:48:42 GMT+0200");
Found : user_pref("CT2475029.ThirdPartyComponentsLastUpdate", "1246786978");
Found : user_pref("CT2475029.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2475029");
Found : user_pref("CT2475029.UserID", "UN48172298052485907");
Found : user_pref("CT2475029.ValidationData_Toolbar", 2);
Found : user_pref("CT2475029.backendstorage.facebook_mode", "32");
Found : user_pref("CT2475029.backendstorage.facebook_user_locale", "656E");
Found : user_pref("CT2475029.ct2481032.DialogsAlignMode", "LTR");
Found : user_pref("CT2475029.ct2481032.FeedLastCount129137415284993440", 235);
Found : user_pref("CT2475029.ct2481032.FeedLastCount1470371090506316425", 1347);
Found : user_pref("CT2475029.ct2481032.GroupingInvalidateCache", false);
Found : user_pref("CT2475029.ct2481032.GroupingLastCheckTime", "Mon Apr 18 2011 17:48:46 GMT+0200");
Found : user_pref("CT2475029.ct2481032.GroupingLastErrorCode", "");
Found : user_pref("CT2475029.ct2481032.GroupingLastResponse", true);
Found : user_pref("CT2475029.ct2481032.GroupingLastServerUpdateTime", "129469851600000000");
Found : user_pref("CT2475029.ct2481032.InvalidateCache", false);
Found : user_pref("CT2475029.ct2481032.LanguagePackLastCheckTime", "Mon Apr 18 2011 05:48:48 GMT+0200");
Found : user_pref("CT2475029.ct2481032.Locale", "en");
Found : user_pref("CT2475029.ct2481032.RadioLastCheckTime", "Mon Apr 18 2011 05:48:47 GMT+0200");
Found : user_pref("CT2475029.ct2481032.RadioLastUpdateIPServer", "3");
Found : user_pref("CT2475029.ct2481032.RadioLastUpdateServer", "3");
Found : user_pref("CT2475029.ct2481032.SearchInNewTabLastCheckTime", "Mon Apr 18 2011 05:48:47 GMT+0200");
Found : user_pref("CT2475029.ct2481032.SettingsLastCheckTime", "Mon Apr 18 2011 18:20:08 GMT+0200");
Found : user_pref("CT2475029.ct2481032.SettingsLastUpdate", "1302500970");
Found : user_pref("CT2475029.ct2481032.ThirdPartyComponentsLastCheck", "Mon Apr 18 2011 05:48:45 GMT+0200");
Found : user_pref("CT2475029.ct2481032.ThirdPartyComponentsLastUpdate", "1246786978");
Found : user_pref("CT2475029.ct2481032.globalFirstTimeInfoLastCheckTime", "Mon Apr 18 2011 17:46:53 GMT+0200[...]
Found : user_pref("CT2475029.ct2481032.toolbarAppMetaDataLastCheckTime", "Mon Apr 18 2011 05:48:46 GMT+0200"[...]
Found : user_pref("CT2475029.ct2481032.toolbarContextMenuLastCheckTime", "Mon Apr 18 2011 05:48:48 GMT+0200"[...]
Found : user_pref("CT2475029.generalConfigFromLogin", "{\"SocialDomains\":\"social.conduit.com;apps.conduit.[...]
Found : user_pref("CT2475029.globalFirstTimeInfoLastCheckTime", "Mon Apr 18 2011 05:48:46 GMT+0200");
Found : user_pref("CT2475029.isAppTrackingManagerOn", true);
Found : user_pref("CT2475029.myStuffEnabled", true);
Found : user_pref("CT2475029.myStuffPublihserMinWidth", 400);
Found : user_pref("CT2475029.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...]
Found : user_pref("CT2475029.myStuffServiceIntervalMM", 1440);
Found : user_pref("CT2475029.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...]
Found : user_pref("CT2475029.oldAppsList", "200,129058858239812813,129058858240125318,129469743936644511,129[...]
Found : user_pref("CT2475029.testingCtid", "");
Found : user_pref("CT2475029.toolbarAppMetaDataLastCheckTime", "Mon Apr 18 2011 05:48:44 GMT+0200");
Found : user_pref("CT2475029.toolbarContextMenuLastCheckTime", "Mon Apr 18 2011 05:48:47 GMT+0200");
Found : user_pref("CT2475029.usagesFlag", 2);
Found : user_pref("CT2786678..clientLogIsEnabled", false);
Found : user_pref("CT2786678..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...]
Found : user_pref("CT2786678..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...]
Found : user_pref("CT2786678.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
Found : user_pref("CT2786678.CTID", "CT2786678");
Found : user_pref("CT2786678.CurrentServerDate", "4-5-2011");
Found : user_pref("CT2786678.DialogsAlignMode", "LTR");
Found : user_pref("CT2786678.DialogsGetterLastCheckTime", "Wed May 04 2011 11:56:48 GMT+0200");
Found : user_pref("CT2786678.DownloadReferralCookieData", "");
Found : user_pref("CT2786678.EMailNotifierPollDate", "Wed May 04 2011 13:12:02 GMT+0200");
Found : user_pref("CT2786678.FeedLastCount5690698542593514850", 157);
Found : user_pref("CT2786678.FeedPollDate129301619375443753", "Wed May 04 2011 13:12:03 GMT+0200");
Found : user_pref("CT2786678.FeedPollDate129301619375443759", "Wed May 04 2011 13:12:03 GMT+0200");
Found : user_pref("CT2786678.FeedPollDate129301619375444699", "Wed May 04 2011 13:12:02 GMT+0200");
Found : user_pref("CT2786678.FeedPollDate129301619375444705", "Wed May 04 2011 13:12:02 GMT+0200");
Found : user_pref("CT2786678.FeedPollDate129301619375444711", "Wed May 04 2011 13:12:02 GMT+0200");
Found : user_pref("CT2786678.FeedPollDate129301619375444717", "Wed May 04 2011 13:12:03 GMT+0200");
Found : user_pref("CT2786678.FeedPollDate129301619375444723", "Wed May 04 2011 13:12:03 GMT+0200");
Found : user_pref("CT2786678.FeedPollDate129301619375444729", "Wed May 04 2011 13:12:03 GMT+0200");
Found : user_pref("CT2786678.FeedPollDate129301619375444735", "Wed May 04 2011 13:12:03 GMT+0200");
Found : user_pref("CT2786678.FeedPollDate129301619375444741", "Wed May 04 2011 13:12:03 GMT+0200");
Found : user_pref("CT2786678.FeedPollDate129301619375444747", "Wed May 04 2011 13:12:03 GMT+0200");
Found : user_pref("CT2786678.FeedTTL129301619375444699", 10);
Found : user_pref("CT2786678.FeedTTL129301619375444723", 15);
Found : user_pref("CT2786678.FeedTTL129301619375444735", 5);
Found : user_pref("CT2786678.FeedTTL129301619375444747", 5);
Found : user_pref("CT2786678.FirstServerDate", "4-5-2011");
Found : user_pref("CT2786678.FirstTime", true);
Found : user_pref("CT2786678.FirstTimeFF3", true);
Found : user_pref("CT2786678.FixPageNotFoundErrors", false);
Found : user_pref("CT2786678.GroupingServerCheckInterval", 1440);
Found : user_pref("CT2786678.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
Found : user_pref("CT2786678.HasUserGlobalKeys", true);
Found : user_pref("CT2786678.Initialize", true);
Found : user_pref("CT2786678.InitializeCommonPrefs", true);
Found : user_pref("CT2786678.InstallationAndCookieDataSentCount", 1);
Found : user_pref("CT2786678.InstallationType", "UnknownIntegration");
Found : user_pref("CT2786678.InstalledDate", "Wed May 04 2011 11:56:45 GMT+0200");
Found : user_pref("CT2786678.IsGrouping", false);
Found : user_pref("CT2786678.IsMulticommunity", false);
Found : user_pref("CT2786678.IsOpenThankYouPage", true);
Found : user_pref("CT2786678.IsOpenUninstallPage", false);
Found : user_pref("CT2786678.LanguagePackLastCheckTime", "Wed May 04 2011 11:56:50 GMT+0200");
Found : user_pref("CT2786678.LanguagePackReloadIntervalMM", 1440);
Found : user_pref("CT2786678.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...]
Found : user_pref("CT2786678.LastLogin_3.3.3.2", "Wed May 04 2011 11:56:48 GMT+0200");
Found : user_pref("CT2786678.LatestVersion", "3.3.3.2");
Found : user_pref("CT2786678.Locale", "en");
Found : user_pref("CT2786678.MCDetectTooltipHeight", "83");
Found : user_pref("CT2786678.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
Found : user_pref("CT2786678.MCDetectTooltipWidth", "295");
Found : user_pref("CT2786678.SearchFromAddressBarIsInit", true);
Found : user_pref("CT2786678.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT278[...]
Found : user_pref("CT2786678.SearchInNewTabEnabled", true);
Found : user_pref("CT2786678.SearchInNewTabIntervalMM", 1440);
Found : user_pref("CT2786678.SearchInNewTabLastCheckTime", "Wed May 04 2011 11:56:50 GMT+0200");
Found : user_pref("CT2786678.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...]
Found : user_pref("CT2786678.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageServic[...]
Found : user_pref("CT2786678.SearchProtectorToolbarDisabled", true);
Found : user_pref("CT2786678.ServiceMapLastCheckTime", "Wed May 04 2011 11:56:44 GMT+0200");
Found : user_pref("CT2786678.SettingsLastCheckTime", "Wed May 04 2011 11:56:45 GMT+0200");
Found : user_pref("CT2786678.SettingsLastUpdate", "1304004054");
Found : user_pref("CT2786678.ThirdPartyComponentsInterval", 504);
Found : user_pref("CT2786678.ThirdPartyComponentsLastCheck", "Wed May 04 2011 11:56:44 GMT+0200");
Found : user_pref("CT2786678.ThirdPartyComponentsLastUpdate", "1246786978");
Found : user_pref("CT2786678.ToolbarDisabled", true);
Found : user_pref("CT2786678.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2786678");
Found : user_pref("CT2786678.UserID", "UN84681799557815150");
Found : user_pref("CT2786678.WeatherNetwork", "");
Found : user_pref("CT2786678.WeatherPollDate", "Wed May 04 2011 12:57:31 GMT+0200");
Found : user_pref("CT2786678.WeatherUnit", "C");
Found : user_pref("CT2786678.alertChannelId", "1178763");
Found : user_pref("CT2786678.generalConfigFromLogin", "{\"SocialDomains\":\"social.conduit.com;apps.conduit.[...]
Found : user_pref("CT2786678.globalFirstTimeInfoLastCheckTime", "Wed May 04 2011 11:56:48 GMT+0200");
Found : user_pref("CT2786678.isAppTrackingManagerOn", true);
Found : user_pref("CT2786678.myStuffEnabled", true);
Found : user_pref("CT2786678.myStuffPublihserMinWidth", 400);
Found : user_pref("CT2786678.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...]
Found : user_pref("CT2786678.myStuffServiceIntervalMM", 1440);
Found : user_pref("CT2786678.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...]
Found : user_pref("CT2786678.testingCtid", "");
Found : user_pref("CT2786678.toolbarAppMetaDataLastCheckTime", "Wed May 04 2011 11:56:45 GMT+0200");
Found : user_pref("CT2786678.toolbarContextMenuLastCheckTime", "Wed May 04 2011 11:56:52 GMT+0200");
Found : user_pref("CT2786678.usagesFlag", 2);
Found : user_pref("CommunityToolbar.CantToolbarBeEngineOwner", "CT2786678");
Found : user_pref("CommunityToolbar.ConduitHomepagesList", "hxxp://search.conduit.com/?ctid=CT3072253&Search[...]
Found : user_pref("CommunityToolbar.ConduitSearchList", "uTorrentControl2 Customized Web Search");
Found : user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit.com/root/CT3072253/CT3072253[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/1178763/1174448/CZ", "\"0\"[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/868510/864310/CZ", "\"0\"")[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/874426/870225/CZ", "\"0\"")[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/874430/870228/CZ", "\"0\"")[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/874431/870229/CZ", "\"0\"")[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/874435/870233/CZ", "\"0\"")[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/874437/870235/CZ", "\"0\"")[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/874438/870236/CZ", "\"0\"")[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/874439/870237/CZ", "\"0\"")[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/874440/870238/CZ", "\"0\"")[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/874441/870239/CZ", "\"0\"")[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/874443/870241/CZ", "\"0\"")[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/909619/905414/CZ", "\"0\"")[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2475029", [...]
Found : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2786678", [...]
Found : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT3072253", [...]
Found : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=ct2481032", [...]
Found : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&lo[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&loc[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&lo[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&local[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.engine.conduit-services.com/DLG.pkg?ver=3.3.3[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.12[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.3.[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2475029",[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2786678",[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT3072253",[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=0", "63[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=3/13/20[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT2475029/CT2475029[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT2786678/CT2786678[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/ct2481032/CT2475029[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Cornflower/equaliz[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Cornflower/minimiz[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Cornflower/play.gi[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Cornflower/stop.gi[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Cornflower/vol.gif[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=en", "\"67e[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/1344951.xml", "\"5d2fad04d3dc2f798c52[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/16887175.xml", "\"458919548cbc209eb24[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/17151925.xml", "\"f7ed0691e317fce1000[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/20536157.xml", "\"c88763624e3f50e07b3[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/30261067.xml", "\"8e67c43247dd81e23b6[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/34655603.xml", "\"10d12d5dd9a3673efe1[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/428333.xml", "\"236a4e2818ca19c41e1e8[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/759251.xml", "\"4db90f79a7858cb1c9735[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/816653.xml", "\"9e940d2307baea71308d5[...]
Found : user_pref("CommunityToolbar.EngineOwner", "CT2475029");
Found : user_pref("CommunityToolbar.EngineOwnerGuid", "{a1e75a0e-4397-4ba8-bb50-e19fb66890f4}");
Found : user_pref("CommunityToolbar.EngineOwnerToolbarId", "myashampoo");
Found : user_pref("CommunityToolbar.IsEngineShown", false);
Found : user_pref("CommunityToolbar.IsMyStuffImportedToEngine", true);
Found : user_pref("CommunityToolbar.LatestLibsPath", "file:///C:\\Users\\hadza\\AppData\\Roaming\\Mozilla\\F[...]
Found : user_pref("CommunityToolbar.LatestToolbarVersionInstalled", "3.12.0.8");
Found : user_pref("CommunityToolbar.OriginalEngineOwner", "CT2475029");
Found : user_pref("CommunityToolbar.OriginalEngineOwnerGuid", "{a1e75a0e-4397-4ba8-bb50-e19fb66890f4}");
Found : user_pref("CommunityToolbar.OriginalEngineOwnerToolbarId", "myashampoo");
Found : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "hxxp://search.yahoo.com/search?fr=greent[...]
Found : user_pref("CommunityToolbar.ToolbarsList", "ConduitEngine,CT2475029,CT2786678");
Found : user_pref("CommunityToolbar.ToolbarsList2", "CT2475029,CT2786678");
Found : user_pref("CommunityToolbar.ToolbarsList4", "");
Found : user_pref("CommunityToolbar.alert.alertDialogsGetterLastCheckTime", "Tue May 10 2011 13:26:27 GMT+02[...]
Found : user_pref("CommunityToolbar.alert.alertInfoInterval", 1440);
Found : user_pref("CommunityToolbar.alert.alertInfoLastCheckTime", "Mon Jun 13 2011 18:04:20 GMT+0200");
Found : user_pref("CommunityToolbar.alert.clientsServerUrl", "hxxp://alert.client.conduit.com");
Found : user_pref("CommunityToolbar.alert.firstTimeAlertShown", true);
Found : user_pref("CommunityToolbar.alert.locale", "en");
Found : user_pref("CommunityToolbar.alert.loginIntervalMin", 1440);
Found : user_pref("CommunityToolbar.alert.loginLastCheckTime", "Tue Jun 28 2011 18:27:04 GMT+0200");
Found : user_pref("CommunityToolbar.alert.loginLastUpdateTime", "1305622559");
Found : user_pref("CommunityToolbar.alert.messageShowTimeSec", 20);
Found : user_pref("CommunityToolbar.alert.servicesServerUrl", "hxxp://alert.services.conduit.com");
Found : user_pref("CommunityToolbar.alert.showTrayIcon", false);
Found : user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300);
Found : user_pref("CommunityToolbar.alert.userId", "65afc836-d55a-4188-a134-99e3977f093f");
Found : user_pref("CommunityToolbar.facebook.settingsLastCheckTime", "Wed May 04 2011 11:56:57 GMT+0200");
Found : user_pref("CommunityToolbar.globalUserId", "a89a0391-9088-4447-b946-dd057204e28b");
Found : user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true);
Found : user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true);
Found : user_pref("CommunityToolbar.keywordURLSelectedCTID", "CT3072253");
Found : user_pref("CommunityToolbar.notifications.alertDialogsGetterLastCheckTime", "Fri May 18 2012 10:08:3[...]
Found : user_pref("CommunityToolbar.notifications.alertEnabled", false);
Found : user_pref("CommunityToolbar.notifications.clientsServerUrl", "hxxp://alert.client.conduit.com");
Found : user_pref("CommunityToolbar.notifications.locale", "en");
Found : user_pref("CommunityToolbar.notifications.loginIntervalMin", 1440);
Found : user_pref("CommunityToolbar.notifications.loginLastCheckTime", "Fri May 18 2012 10:08:29 GMT+0200");
Found : user_pref("CommunityToolbar.notifications.loginLastUpdateTime", "1313487611");
Found : user_pref("CommunityToolbar.notifications.messageShowTimeSec", 20);
Found : user_pref("CommunityToolbar.notifications.servicesServerUrl", "hxxp://alert.services.conduit.com");
Found : user_pref("CommunityToolbar.notifications.showTrayIcon", false);
Found : user_pref("CommunityToolbar.notifications.userCloseIntervalMin", 300);
Found : user_pref("CommunityToolbar.notifications.userId", "135c9c40-6b76-4bda-8e81-98a3ea654487");
Found : user_pref("CommunityToolbar.originalHomepage", "hxxp://www.seznam.cz/");
Found : user_pref("CommunityToolbar.originalSearchEngine", "Google");
Found : user_pref("CommunityToolbar.twitter.user_1344951.LastCheckTime", "Mon Apr 18 2011 16:47:53 GMT+0200"[...]
Found : user_pref("CommunityToolbar.twitter.user_16887175.LastCheckTime", "Mon Apr 18 2011 16:47:53 GMT+0200[...]
Found : user_pref("CommunityToolbar.twitter.user_17151925.LastCheckTime", "Mon Apr 18 2011 16:47:53 GMT+0200[...]
Found : user_pref("CommunityToolbar.twitter.user_20536157.LastCheckTime", "Mon Apr 18 2011 16:47:53 GMT+0200[...]
Found : user_pref("CommunityToolbar.twitter.user_30261067.LastCheckTime", "Mon Apr 18 2011 16:47:53 GMT+0200[...]
Found : user_pref("CommunityToolbar.twitter.user_34655603.LastCheckTime", "Mon Apr 18 2011 16:47:53 GMT+0200[...]
Found : user_pref("CommunityToolbar.twitter.user_428333.LastCheckTime", "Mon Apr 18 2011 16:47:53 GMT+0200")[...]
Found : user_pref("CommunityToolbar.twitter.user_759251.LastCheckTime", "Mon Apr 18 2011 05:48:49 GMT+0200")[...]
Found : user_pref("CommunityToolbar.twitter.user_816653.LastCheckTime", "Mon Apr 18 2011 16:47:53 GMT+0200")[...]
Found : user_pref("ConduitEngine.AppTrackingLastCheckTime", "Fri May 13 2011 07:10:29 GMT+0200");
Found : user_pref("ConduitEngine.DialogsGetterLastCheckTime", "Mon Apr 18 2011 05:48:44 GMT+0200");
Found : user_pref("ConduitEngine.FirstServerDate", "04/18/2011 06");
Found : user_pref("ConduitEngine.FirstTime", true);
Found : user_pref("ConduitEngine.FirstTimeFF3", true);
Found : user_pref("ConduitEngine.HasUserGlobalKeys", true);
Found : user_pref("ConduitEngine.HideEngineAfterRestart", true);
Found : user_pref("ConduitEngine.Initialize", true);
Found : user_pref("ConduitEngine.InitializeCommonPrefs", true);
Found : user_pref("ConduitEngine.InstalledDate", "Mon Apr 18 2011 05:48:44 GMT+0200");
Found : user_pref("ConduitEngine.IsMulticommunity", false);
Found : user_pref("ConduitEngine.IsOpenThankYouPage", false);
Found : user_pref("ConduitEngine.IsOpenUninstallPage", true);
Found : user_pref("ConduitEngine.LanguagePackLastCheckTime", "Mon Apr 18 2011 05:48:44 GMT+0200");
Found : user_pref("ConduitEngine.LastLogin_3.3.3.2", "Mon Apr 18 2011 16:46:53 GMT+0200");
Found : user_pref("ConduitEngine.PublisherContainerWidth", 0);
Found : user_pref("ConduitEngine.SearchFromAddressBarIsInit", true);
Found : user_pref("ConduitEngine.SettingsLastCheckTime", "Mon Apr 18 2011 16:46:53 GMT+0200");
Found : user_pref("ConduitEngine.UserID", "UN77747500106429591");
Found : user_pref("ConduitEngine.engineLocale", "cs");
Found : user_pref("ConduitEngine.enngineContextMenuLastCheckTime", "Mon Apr 18 2011 05:48:43 GMT+0200");
Found : user_pref("ConduitEngine.globalFirstTimeInfoLastCheckTime", "Mon Apr 18 2011 17:46:55 GMT+0200");
Found : user_pref("ConduitEngine.initDone", true);
Found : user_pref("ConduitEngine.isAppTrackingManagerOn", true);
Found : user_pref("browser.search.defaultthis.engineName", "uTorrentControl2 Customized Web Search");
Found : user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3072253&Sea[...]
Found : user_pref("extensions.engine@conduit.com.install-event-fired", true);
Found : user_pref("extensions.ffxtlbr@Facemoods.com.install-event-fired", true);
Found : user_pref("extensions.snipit.chromeURL", "hxxp://toolbar.ask.com/toolbarv/askRedirect?o=10615&gct=&g[...]
Found : user_pref("extensions.toolbar@ask.com.install-event-fired", true);
Found : user_pref("keyword.URL", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2786678&q=");
Found : user_pref("surfcanyon.ac", true);
Found : user_pref("surfcanyon.fractions", "0.0_0.0\r\n");
Found : user_pref("surfcanyon.last_checked_ts", "1267026589894");

cast 2:


File : C:\Users\Deti\AppData\Roaming\Mozilla\Firefox\Profiles\meroiczd.default\prefs.js

Found : user_pref("CT2475029..clientLogIsEnabled", false);
Found : user_pref("CT2475029..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...]
Found : user_pref("CT2475029..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...]
Found : user_pref("CT2475029.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
Found : user_pref("CT2475029.CT2481020.CommunityChanged", true);
Found : user_pref("CT2475029.CT2481024.CommunityChanged", true);
Found : user_pref("CT2475029.CT2481025.CommunityChanged", true);
Found : user_pref("CT2475029.CT2481029.CommunityChanged", true);
Found : user_pref("CT2475029.CT2481031.CommunityChanged", true);
Found : user_pref("CT2475029.CT2481032.CommunityChanged", true);
Found : user_pref("CT2475029.CT2481033.CommunityChanged", true);
Found : user_pref("CT2475029.CT2481034.CommunityChanged", true);
Found : user_pref("CT2475029.CT2481035.CommunityChanged", true);
Found : user_pref("CT2475029.CT2481037.CommunityChanged", true);
Found : user_pref("CT2475029.CTID", "ct2481032");
Found : user_pref("CT2475029.CommunitiesChangesLastCheckTime", "Mon Apr 18 2011 19:07:12 GMT+0200");
Found : user_pref("CT2475029.CommunityChanged", true);
Found : user_pref("CT2475029.CurrentServerDate", "18-4-2011");
Found : user_pref("CT2475029.DialogsAlignMode", "LTR");
Found : user_pref("CT2475029.DialogsGetterLastCheckTime", "Mon Apr 18 2011 05:48:44 GMT+0200");
Found : user_pref("CT2475029.DownloadDomainsCheckInterval", "168");
Found : user_pref("CT2475029.DownloadDomainsListLastCheckTime", "Mon Apr 18 2011 05:48:44 GMT+0200");
Found : user_pref("CT2475029.DownloadDomainsListLastServerUpdateTime", "1201069983");
Found : user_pref("CT2475029.DownloadReferralCookieData", "");
Found : user_pref("CT2475029.FeedPollDate128975107603475850", "Mon Apr 18 2011 19:14:15 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate129104903994210185", "Mon Apr 18 2011 19:14:14 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate129125588542653211", "Mon Apr 18 2011 19:14:15 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate129132307482029379", "Mon Apr 18 2011 05:48:46 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate129132307482029381", "Mon Apr 18 2011 05:48:46 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate129132307482029382", "Mon Apr 18 2011 05:48:46 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate129133095459686870", "Mon Apr 18 2011 05:48:46 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate129133095459686871", "Mon Apr 18 2011 05:48:46 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate129137415288118473", "Mon Apr 18 2011 19:14:14 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate129137415288118474", "Mon Apr 18 2011 19:14:15 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate129137436798437243", "Mon Apr 18 2011 19:14:15 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate129137436798437244", "Mon Apr 18 2011 19:14:15 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate129137436798437245", "Mon Apr 18 2011 19:14:15 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate129137437659687146", "Mon Apr 18 2011 05:48:45 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate129137437659687147", "Mon Apr 18 2011 05:48:45 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate129137437659687148", "Mon Apr 18 2011 05:48:45 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757377779301063", "Mon Apr 18 2011 18:13:55 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757377961554609", "Mon Apr 18 2011 18:13:53 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757377979947076", "Mon Apr 18 2011 18:13:55 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757378132259586", "Mon Apr 18 2011 18:13:53 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757378265651739", "Mon Apr 18 2011 18:13:55 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757378449145277", "Mon Apr 18 2011 18:13:52 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757378705873295", "Mon Apr 18 2011 18:13:55 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757378902522699", "Mon Apr 18 2011 18:13:53 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757378968484097", "Mon Apr 18 2011 18:13:56 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757379044202234", "Mon Apr 18 2011 18:13:55 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757379219112080", "Mon Apr 18 2011 18:13:53 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757379310186023", "Mon Apr 18 2011 18:13:54 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757379320546978", "Mon Apr 18 2011 18:13:55 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757379400531926", "Mon Apr 18 2011 18:13:56 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757379497083274", "Mon Apr 18 2011 18:13:57 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757379497148810", "Mon Apr 18 2011 18:13:57 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757379497279882", "Mon Apr 18 2011 18:13:57 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757379644150784", "Mon Apr 18 2011 18:13:53 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757379646262407", "Mon Apr 18 2011 18:13:53 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757379767858421", "Mon Apr 18 2011 18:13:57 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757379797989042", "Mon Apr 18 2011 05:48:49 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757379883299006", "Mon Apr 18 2011 18:13:55 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757380108070872", "Mon Apr 18 2011 18:13:54 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757380344955611", "Mon Apr 18 2011 18:13:54 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757380390189978", "Mon Apr 18 2011 18:13:53 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757380412472059", "Mon Apr 18 2011 18:13:55 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757380467866928", "Mon Apr 18 2011 18:13:53 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757380521772385", "Mon Apr 18 2011 18:13:54 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757380616362201", "Mon Apr 18 2011 18:13:54 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757380727291645", "Mon Apr 18 2011 18:13:54 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757380767393172", "Mon Apr 18 2011 05:48:50 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757380868375745", "Mon Apr 18 2011 16:46:56 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757381043554700", "Mon Apr 18 2011 18:13:53 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757381080219037", "Mon Apr 18 2011 18:13:55 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757381151343676", "Mon Apr 18 2011 18:13:56 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757381247526121", "Mon Apr 18 2011 18:13:52 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757381247591657", "Mon Apr 18 2011 18:13:52 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757381372042911", "Mon Apr 18 2011 18:13:52 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757381453742514", "Mon Apr 18 2011 18:13:54 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757381520490197", "Mon Apr 18 2011 18:13:56 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757381582880127", "Mon Apr 18 2011 18:13:52 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757381641974229", "Mon Apr 18 2011 18:13:56 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757381669771831", "Mon Apr 18 2011 18:13:53 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757381670861676", "Mon Apr 18 2011 18:13:57 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757381749396397", "Mon Apr 18 2011 18:13:56 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757381869347434", "Mon Apr 18 2011 18:13:56 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757381908324302", "Mon Apr 18 2011 18:13:54 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757381919420428", "Mon Apr 18 2011 18:13:57 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757381932420313", "Mon Apr 18 2011 18:13:56 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757381975368474", "Mon Apr 18 2011 18:13:54 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757381979169315", "Mon Apr 18 2011 18:13:53 GMT+0200");
Found : user_pref("CT2475029.FeedPollDate5609757381989950054", "Mon Apr 18 2011 18:13:56 GMT+0200");
Found : user_pref("CT2475029.FeedTTL128975107603475850", 40);
Found : user_pref("CT2475029.FeedTTL129104903994210185", 40);
Found : user_pref("CT2475029.FeedTTL129125588542653211", 40);
Found : user_pref("CT2475029.FeedTTL129132307482029379", 40);
Found : user_pref("CT2475029.FeedTTL129132307482029381", 40);
Found : user_pref("CT2475029.FeedTTL129132307482029382", 40);
Found : user_pref("CT2475029.FeedTTL129133095459686870", 40);
Found : user_pref("CT2475029.FeedTTL129133095459686871", 40);
Found : user_pref("CT2475029.FeedTTL129137415288118473", 40);
Found : user_pref("CT2475029.FeedTTL129137415288118474", 40);
Found : user_pref("CT2475029.FeedTTL129137436798437243", 40);
Found : user_pref("CT2475029.FeedTTL129137436798437244", 40);
Found : user_pref("CT2475029.FeedTTL129137436798437245", 40);
Found : user_pref("CT2475029.FeedTTL129137437659687146", 40);
Found : user_pref("CT2475029.FeedTTL129137437659687147", 40);
Found : user_pref("CT2475029.FeedTTL129137437659687148", 40);
Found : user_pref("CT2475029.FeedTTL5609757377779301063", 15);
Found : user_pref("CT2475029.FeedTTL5609757377979947076", 15);
Found : user_pref("CT2475029.FeedTTL5609757378132259586", 10);
Found : user_pref("CT2475029.FeedTTL5609757378265651739", 30);
Found : user_pref("CT2475029.FeedTTL5609757378705873295", 15);
Found : user_pref("CT2475029.FeedTTL5609757379310186023", 5);
Found : user_pref("CT2475029.FeedTTL5609757379320546978", 2);
Found : user_pref("CT2475029.FeedTTL5609757379400531926", 5);
Found : user_pref("CT2475029.FeedTTL5609757380108070872", 5);
Found : user_pref("CT2475029.FeedTTL5609757380412472059", 15);
Found : user_pref("CT2475029.FeedTTL5609757380467866928", 60);
Found : user_pref("CT2475029.FeedTTL5609757380521772385", 2);
Found : user_pref("CT2475029.FeedTTL5609757380727291645", 5);
Found : user_pref("CT2475029.FeedTTL5609757380767393172", 1440);
Found : user_pref("CT2475029.FeedTTL5609757381043554700", 2);
Found : user_pref("CT2475029.FeedTTL5609757381247526121", 15);
Found : user_pref("CT2475029.FeedTTL5609757381372042911", 60);
Found : user_pref("CT2475029.FeedTTL5609757381453742514", 15);
Found : user_pref("CT2475029.FeedTTL5609757381908324302", 30);
Found : user_pref("CT2475029.FeedTTL5609757381932420313", 10);
Found : user_pref("CT2475029.FeedTTL5609757381979169315", 15);
Found : user_pref("CT2475029.FirstServerDate", "18-4-2011");
Found : user_pref("CT2475029.FirstTime", true);
Found : user_pref("CT2475029.FirstTimeFF3", true);
Found : user_pref("CT2475029.FixPageNotFoundErrors", true);
Found : user_pref("CT2475029.GroupingLastCheckTime", "Mon Apr 18 2011 05:48:44 GMT+0200");
Found : user_pref("CT2475029.GroupingLastErrorCode", "");
Found : user_pref("CT2475029.GroupingLastResponse", true);
Found : user_pref("CT2475029.GroupingLastServerUpdateTime", "129469851600000000");
Found : user_pref("CT2475029.GroupingServerCheckInterval", 1440);
Found : user_pref("CT2475029.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
Found : user_pref("CT2475029.HasUserGlobalKeys", true);
Found : user_pref("CT2475029.Initialize", true);
Found : user_pref("CT2475029.InitializeCommonPrefs", true);
Found : user_pref("CT2475029.InstallationAndCookieDataSentCount", 3);
Found : user_pref("CT2475029.InstallationId", "MyAshampoo.exe");
Found : user_pref("CT2475029.InstallationType", "ConduitIntegration");
Found : user_pref("CT2475029.InstalledDate", "Mon Apr 18 2011 05:48:45 GMT+0200");
Found : user_pref("CT2475029.IsGrouping", true);
Found : user_pref("CT2475029.IsMulticommunity", true);
Found : user_pref("CT2475029.IsOpenThankYouPage", false);
Found : user_pref("CT2475029.IsOpenUninstallPage", true);
Found : user_pref("CT2475029.LanguagePackLastCheckTime", "Mon Apr 18 2011 05:48:46 GMT+0200");
Found : user_pref("CT2475029.LanguagePackReloadIntervalMM", 1440);
Found : user_pref("CT2475029.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...]
Found : user_pref("CT2475029.LastLogin_3.3.3.2", "Mon Apr 18 2011 17:46:53 GMT+0200");
Found : user_pref("CT2475029.LatestVersion", "3.3.3.2");
Found : user_pref("CT2475029.Locale", "en");
Found : user_pref("CT2475029.MCDetectTooltipHeight", "83");
Found : user_pref("CT2475029.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
Found : user_pref("CT2475029.MCDetectTooltipWidth", "295");
Found : user_pref("CT2475029.RadioIsPodcast", false);
Found : user_pref("CT2475029.RadioMediaID", "9962");
Found : user_pref("CT2475029.RadioMediaType", "Media Player");
Found : user_pref("CT2475029.RadioMenuSelectedID", "EBRadioMenu_CT24750299962");
Found : user_pref("CT2475029.RadioStationName", "California%20Rock");
Found : user_pref("CT2475029.RadioStationURL", "hxxp://feedlive.net/california.asx");
Found : user_pref("CT2475029.SavedHomepage", "hxxp://www.seznam.cz/");
Found : user_pref("CT2475029.SearchFromAddressBarIsInit", true);
Found : user_pref("CT2475029.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT247[...]
Found : user_pref("CT2475029.SearchInNewTabEnabled", true);
Found : user_pref("CT2475029.SearchInNewTabIntervalMM", 1440);
Found : user_pref("CT2475029.SearchInNewTabLastCheckTime", "Mon Apr 18 2011 05:48:45 GMT+0200");
Found : user_pref("CT2475029.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...]
Found : user_pref("CT2475029.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageServic[...]
Found : user_pref("CT2475029.ServiceMapLastCheckTime", "Mon Apr 18 2011 05:48:42 GMT+0200");
Found : user_pref("CT2475029.SettingsLastCheckTime", "Mon Apr 18 2011 05:48:43 GMT+0200");
Found : user_pref("CT2475029.SettingsLastUpdate", "1302500760");
Found : user_pref("CT2475029.ThirdPartyComponentsInterval", 504);
Found : user_pref("CT2475029.ThirdPartyComponentsLastCheck", "Mon Apr 18 2011 05:48:42 GMT+0200");
Found : user_pref("CT2475029.ThirdPartyComponentsLastUpdate", "1246786978");
Found : user_pref("CT2475029.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2475029");
Found : user_pref("CT2475029.UserID", "UN48172298052485907");
Found : user_pref("CT2475029.ValidationData_Toolbar", 2);
Found : user_pref("CT2475029.backendstorage.facebook_mode", "32");
Found : user_pref("CT2475029.backendstorage.facebook_user_locale", "656E");
Found : user_pref("CT2475029.ct2481032.DialogsAlignMode", "LTR");
Found : user_pref("CT2475029.ct2481032.FeedLastCount129137415284993440", 235);
Found : user_pref("CT2475029.ct2481032.FeedLastCount1470371090506316425", 1347);
Found : user_pref("CT2475029.ct2481032.GroupingInvalidateCache", false);
Found : user_pref("CT2475029.ct2481032.GroupingLastCheckTime", "Mon Apr 18 2011 17:48:46 GMT+0200");
Found : user_pref("CT2475029.ct2481032.GroupingLastErrorCode", "");
Found : user_pref("CT2475029.ct2481032.GroupingLastResponse", true);
Found : user_pref("CT2475029.ct2481032.GroupingLastServerUpdateTime", "129469851600000000");
Found : user_pref("CT2475029.ct2481032.InvalidateCache", false);
Found : user_pref("CT2475029.ct2481032.LanguagePackLastCheckTime", "Mon Apr 18 2011 05:48:48 GMT+0200");
Found : user_pref("CT2475029.ct2481032.Locale", "en");
Found : user_pref("CT2475029.ct2481032.RadioLastCheckTime", "Mon Apr 18 2011 05:48:47 GMT+0200");
Found : user_pref("CT2475029.ct2481032.RadioLastUpdateIPServer", "3");
Found : user_pref("CT2475029.ct2481032.RadioLastUpdateServer", "3");
Found : user_pref("CT2475029.ct2481032.SearchInNewTabLastCheckTime", "Mon Apr 18 2011 05:48:47 GMT+0200");
Found : user_pref("CT2475029.ct2481032.SettingsLastCheckTime", "Mon Apr 18 2011 18:20:08 GMT+0200");
Found : user_pref("CT2475029.ct2481032.SettingsLastUpdate", "1302500970");
Found : user_pref("CT2475029.ct2481032.ThirdPartyComponentsLastCheck", "Mon Apr 18 2011 05:48:45 GMT+0200");
Found : user_pref("CT2475029.ct2481032.ThirdPartyComponentsLastUpdate", "1246786978");
Found : user_pref("CT2475029.ct2481032.globalFirstTimeInfoLastCheckTime", "Mon Apr 18 2011 17:46:53 GMT+0200[...]
Found : user_pref("CT2475029.ct2481032.toolbarAppMetaDataLastCheckTime", "Mon Apr 18 2011 05:48:46 GMT+0200"[...]
Found : user_pref("CT2475029.ct2481032.toolbarContextMenuLastCheckTime", "Mon Apr 18 2011 05:48:48 GMT+0200"[...]
Found : user_pref("CT2475029.generalConfigFromLogin", "{\"SocialDomains\":\"social.conduit.com;apps.conduit.[...]
Found : user_pref("CT2475029.globalFirstTimeInfoLastCheckTime", "Mon Apr 18 2011 05:48:46 GMT+0200");
Found : user_pref("CT2475029.isAppTrackingManagerOn", true);
Found : user_pref("CT2475029.myStuffEnabled", true);
Found : user_pref("CT2475029.myStuffPublihserMinWidth", 400);
Found : user_pref("CT2475029.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...]
Found : user_pref("CT2475029.myStuffServiceIntervalMM", 1440);
Found : user_pref("CT2475029.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...]
Found : user_pref("CT2475029.oldAppsList", "200,129058858239812813,129058858240125318,129469743936644511,129[...]
Found : user_pref("CT2475029.testingCtid", "");
Found : user_pref("CT2475029.toolbarAppMetaDataLastCheckTime", "Mon Apr 18 2011 05:48:44 GMT+0200");
Found : user_pref("CT2475029.toolbarContextMenuLastCheckTime", "Mon Apr 18 2011 05:48:47 GMT+0200");
Found : user_pref("CT2475029.usagesFlag", 2);
Found : user_pref("CT2786678..clientLogIsEnabled", false);
Found : user_pref("CT2786678..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...]
Found : user_pref("CT2786678..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...]
Found : user_pref("CT2786678.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
Found : user_pref("CT2786678.CTID", "CT2786678");
Found : user_pref("CT2786678.CurrentServerDate", "4-5-2011");
Found : user_pref("CT2786678.DialogsAlignMode", "LTR");
Found : user_pref("CT2786678.DialogsGetterLastCheckTime", "Wed May 04 2011 11:56:48 GMT+0200");
Found : user_pref("CT2786678.DownloadReferralCookieData", "");
Found : user_pref("CT2786678.EMailNotifierPollDate", "Wed May 04 2011 13:12:02 GMT+0200");
Found : user_pref("CT2786678.FeedLastCount5690698542593514850", 157);
Found : user_pref("CT2786678.FeedPollDate129301619375443753", "Wed May 04 2011 13:12:03 GMT+0200");
Found : user_pref("CT2786678.FeedPollDate129301619375443759", "Wed May 04 2011 13:12:03 GMT+0200");
Found : user_pref("CT2786678.FeedPollDate129301619375444699", "Wed May 04 2011 13:12:02 GMT+0200");
Found : user_pref("CT2786678.FeedPollDate129301619375444705", "Wed May 04 2011 13:12:02 GMT+0200");
Found : user_pref("CT2786678.FeedPollDate129301619375444711", "Wed May 04 2011 13:12:02 GMT+0200");
Found : user_pref("CT2786678.FeedPollDate129301619375444717", "Wed May 04 2011 13:12:03 GMT+0200");
Found : user_pref("CT2786678.FeedPollDate129301619375444723", "Wed May 04 2011 13:12:03 GMT+0200");
Found : user_pref("CT2786678.FeedPollDate129301619375444729", "Wed May 04 2011 13:12:03 GMT+0200");
Found : user_pref("CT2786678.FeedPollDate129301619375444735", "Wed May 04 2011 13:12:03 GMT+0200");
Found : user_pref("CT2786678.FeedPollDate129301619375444741", "Wed May 04 2011 13:12:03 GMT+0200");
Found : user_pref("CT2786678.FeedPollDate129301619375444747", "Wed May 04 2011 13:12:03 GMT+0200");
Found : user_pref("CT2786678.FeedTTL129301619375444699", 10);
Found : user_pref("CT2786678.FeedTTL129301619375444723", 15);
Found : user_pref("CT2786678.FeedTTL129301619375444735", 5);
Found : user_pref("CT2786678.FeedTTL129301619375444747", 5);
Found : user_pref("CT2786678.FirstServerDate", "4-5-2011");
Found : user_pref("CT2786678.FirstTime", true);
Found : user_pref("CT2786678.FirstTimeFF3", true);
Found : user_pref("CT2786678.FixPageNotFoundErrors", false);
Found : user_pref("CT2786678.GroupingServerCheckInterval", 1440);
Found : user_pref("CT2786678.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
Found : user_pref("CT2786678.HasUserGlobalKeys", true);
Found : user_pref("CT2786678.Initialize", true);
Found : user_pref("CT2786678.InitializeCommonPrefs", true);
Found : user_pref("CT2786678.InstallationAndCookieDataSentCount", 1);
Found : user_pref("CT2786678.InstallationType", "UnknownIntegration");
Found : user_pref("CT2786678.InstalledDate", "Wed May 04 2011 11:56:45 GMT+0200");
Found : user_pref("CT2786678.IsGrouping", false);
Found : user_pref("CT2786678.IsMulticommunity", false);
Found : user_pref("CT2786678.IsOpenThankYouPage", true);
Found : user_pref("CT2786678.IsOpenUninstallPage", false);
Found : user_pref("CT2786678.LanguagePackLastCheckTime", "Wed May 04 2011 11:56:50 GMT+0200");
Found : user_pref("CT2786678.LanguagePackReloadIntervalMM", 1440);
Found : user_pref("CT2786678.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...]
Found : user_pref("CT2786678.LastLogin_3.3.3.2", "Wed May 04 2011 11:56:48 GMT+0200");
Found : user_pref("CT2786678.LatestVersion", "3.3.3.2");
Found : user_pref("CT2786678.Locale", "en");
Found : user_pref("CT2786678.MCDetectTooltipHeight", "83");
Found : user_pref("CT2786678.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
Found : user_pref("CT2786678.MCDetectTooltipWidth", "295");
Found : user_pref("CT2786678.SearchFromAddressBarIsInit", true);
Found : user_pref("CT2786678.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT278[...]
Found : user_pref("CT2786678.SearchInNewTabEnabled", true);
Found : user_pref("CT2786678.SearchInNewTabIntervalMM", 1440);
Found : user_pref("CT2786678.SearchInNewTabLastCheckTime", "Wed May 04 2011 11:56:50 GMT+0200");
Found : user_pref("CT2786678.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...]
Found : user_pref("CT2786678.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageServic[...]
Found : user_pref("CT2786678.SearchProtectorToolbarDisabled", true);
Found : user_pref("CT2786678.ServiceMapLastCheckTime", "Wed May 04 2011 11:56:44 GMT+0200");
Found : user_pref("CT2786678.SettingsLastCheckTime", "Wed May 04 2011 11:56:45 GMT+0200");
Found : user_pref("CT2786678.SettingsLastUpdate", "1304004054");
Found : user_pref("CT2786678.ThirdPartyComponentsInterval", 504);
Found : user_pref("CT2786678.ThirdPartyComponentsLastCheck", "Wed May 04 2011 11:56:44 GMT+0200");
Found : user_pref("CT2786678.ThirdPartyComponentsLastUpdate", "1246786978");
Found : user_pref("CT2786678.ToolbarDisabled", true);
Found : user_pref("CT2786678.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2786678");
Found : user_pref("CT2786678.UserID", "UN84681799557815150");
Found : user_pref("CT2786678.WeatherNetwork", "");
Found : user_pref("CT2786678.WeatherPollDate", "Wed May 04 2011 12:57:31 GMT+0200");
Found : user_pref("CT2786678.WeatherUnit", "C");
Found : user_pref("CT2786678.alertChannelId", "1178763");
Found : user_pref("CT2786678.generalConfigFromLogin", "{\"SocialDomains\":\"social.conduit.com;apps.conduit.[...]
Found : user_pref("CT2786678.globalFirstTimeInfoLastCheckTime", "Wed May 04 2011 11:56:48 GMT+0200");
Found : user_pref("CT2786678.isAppTrackingManagerOn", true);
Found : user_pref("CT2786678.myStuffEnabled", true);
Found : user_pref("CT2786678.myStuffPublihserMinWidth", 400);
Found : user_pref("CT2786678.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...]
Found : user_pref("CT2786678.myStuffServiceIntervalMM", 1440);
Found : user_pref("CT2786678.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...]
Found : user_pref("CT2786678.testingCtid", "");
Found : user_pref("CT2786678.toolbarAppMetaDataLastCheckTime", "Wed May 04 2011 11:56:45 GMT+0200");
Found : user_pref("CT2786678.toolbarContextMenuLastCheckTime", "Wed May 04 2011 11:56:52 GMT+0200");
Found : user_pref("CT2786678.usagesFlag", 2);
Found : user_pref("CommunityToolbar.CantToolbarBeEngineOwner", "CT2786678");
Found : user_pref("CommunityToolbar.ConduitHomepagesList", "hxxp://search.conduit.com/?ctid=CT3072253&Search[...]
Found : user_pref("CommunityToolbar.ConduitSearchList", "uTorrentControl2 Customized Web Search");
Found : user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit.com/root/CT3072253/CT3072253[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/1178763/1174448/CZ", "\"0\"[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/868510/864310/CZ", "\"0\"")[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/874426/870225/CZ", "\"0\"")[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/874430/870228/CZ", "\"0\"")[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/874431/870229/CZ", "\"0\"")[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/874435/870233/CZ", "\"0\"")[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/874437/870235/CZ", "\"0\"")[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/874438/870236/CZ", "\"0\"")[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/874439/870237/CZ", "\"0\"")[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/874440/870238/CZ", "\"0\"")[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/874441/870239/CZ", "\"0\"")[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/874443/870241/CZ", "\"0\"")[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/909619/905414/CZ", "\"0\"")[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2475029", [...]
Found : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2786678", [...]
Found : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT3072253", [...]
Found : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=ct2481032", [...]
Found : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&lo[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&loc[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&lo[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&local[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.engine.conduit-services.com/DLG.pkg?ver=3.3.3[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.12[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.3.[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2475029",[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2786678",[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT3072253",[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=0", "63[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=3/13/20[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT2475029/CT2475029[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT2786678/CT2786678[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/ct2481032/CT2475029[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Cornflower/equaliz[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Cornflower/minimiz[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Cornflower/play.gi[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Cornflower/stop.gi[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Cornflower/vol.gif[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=en", "\"67e[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/1344951.xml", "\"5d2fad04d3dc2f798c52[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/16887175.xml", "\"458919548cbc209eb24[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/17151925.xml", "\"f7ed0691e317fce1000[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/20536157.xml", "\"c88763624e3f50e07b3[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/30261067.xml", "\"8e67c43247dd81e23b6[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/34655603.xml", "\"10d12d5dd9a3673efe1[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/428333.xml", "\"236a4e2818ca19c41e1e8[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/759251.xml", "\"4db90f79a7858cb1c9735[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/816653.xml", "\"9e940d2307baea71308d5[...]
Found : user_pref("CommunityToolbar.EngineOwner", "CT2475029");
Found : user_pref("CommunityToolbar.EngineOwnerGuid", "{a1e75a0e-4397-4ba8-bb50-e19fb66890f4}");
Found : user_pref("CommunityToolbar.EngineOwnerToolbarId", "myashampoo");
Found : user_pref("CommunityToolbar.IsEngineShown", false);
Found : user_pref("CommunityToolbar.IsMyStuffImportedToEngine", true);
Found : user_pref("CommunityToolbar.LatestLibsPath", "file:///C:\\Users\\hadza\\AppData\\Roaming\\Mozilla\\F[...]
Found : user_pref("CommunityToolbar.LatestToolbarVersionInstalled", "3.12.0.8");
Found : user_pref("CommunityToolbar.OriginalEngineOwner", "CT2475029");
Found : user_pref("CommunityToolbar.OriginalEngineOwnerGuid", "{a1e75a0e-4397-4ba8-bb50-e19fb66890f4}");
Found : user_pref("CommunityToolbar.OriginalEngineOwnerToolbarId", "myashampoo");
Found : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "hxxp://search.yahoo.com/search?fr=greent[...]
Found : user_pref("CommunityToolbar.ToolbarsList", "ConduitEngine,CT2475029,CT2786678");
Found : user_pref("CommunityToolbar.ToolbarsList2", "CT2475029,CT2786678");
Found : user_pref("CommunityToolbar.ToolbarsList4", "");
Found : user_pref("CommunityToolbar.alert.alertDialogsGetterLastCheckTime", "Tue May 10 2011 13:26:27 GMT+02[...]
Found : user_pref("CommunityToolbar.alert.alertInfoInterval", 1440);
Found : user_pref("CommunityToolbar.alert.alertInfoLastCheckTime", "Mon Jun 13 2011 18:04:20 GMT+0200");
Found : user_pref("CommunityToolbar.alert.clientsServerUrl", "hxxp://alert.client.conduit.com");
Found : user_pref("CommunityToolbar.alert.firstTimeAlertShown", true);
Found : user_pref("CommunityToolbar.alert.locale", "en");
Found : user_pref("CommunityToolbar.alert.loginIntervalMin", 1440);
Found : user_pref("CommunityToolbar.alert.loginLastCheckTime", "Tue Jun 28 2011 18:27:04 GMT+0200");
Found : user_pref("CommunityToolbar.alert.loginLastUpdateTime", "1305622559");
Found : user_pref("CommunityToolbar.alert.messageShowTimeSec", 20);
Found : user_pref("CommunityToolbar.alert.servicesServerUrl", "hxxp://alert.services.conduit.com");
Found : user_pref("CommunityToolbar.alert.showTrayIcon", false);
Found : user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300);
Found : user_pref("CommunityToolbar.alert.userId", "65afc836-d55a-4188-a134-99e3977f093f");
Found : user_pref("CommunityToolbar.facebook.settingsLastCheckTime", "Wed May 04 2011 11:56:57 GMT+0200");
Found : user_pref("CommunityToolbar.globalUserId", "a89a0391-9088-4447-b946-dd057204e28b");
Found : user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true);
Found : user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true);
Found : user_pref("CommunityToolbar.keywordURLSelectedCTID", "CT3072253");
Found : user_pref("CommunityToolbar.notifications.alertDialogsGetterLastCheckTime", "Fri May 18 2012 10:08:3[...]
Found : user_pref("CommunityToolbar.notifications.alertEnabled", false);
Found : user_pref("CommunityToolbar.notifications.clientsServerUrl", "hxxp://alert.client.conduit.com");
Found : user_pref("CommunityToolbar.notifications.locale", "en");
Found : user_pref("CommunityToolbar.notifications.loginIntervalMin", 1440);
Found : user_pref("CommunityToolbar.notifications.loginLastCheckTime", "Fri May 18 2012 10:08:29 GMT+0200");
Found : user_pref("CommunityToolbar.notifications.loginLastUpdateTime", "1313487611");
Found : user_pref("CommunityToolbar.notifications.messageShowTimeSec", 20);
Found : user_pref("CommunityToolbar.notifications.servicesServerUrl", "hxxp://alert.services.conduit.com");
Found : user_pref("CommunityToolbar.notifications.showTrayIcon", false);
Found : user_pref("CommunityToolbar.notifications.userCloseIntervalMin", 300);
Found : user_pref("CommunityToolbar.notifications.userId", "135c9c40-6b76-4bda-8e81-98a3ea654487");
Found : user_pref("CommunityToolbar.originalHomepage", "hxxp://www.seznam.cz/");
Found : user_pref("CommunityToolbar.originalSearchEngine", "Google");
Found : user_pref("CommunityToolbar.twitter.user_1344951.LastCheckTime", "Mon Apr 18 2011 16:47:53 GMT+0200"[...]
Found : user_pref("CommunityToolbar.twitter.user_16887175.LastCheckTime", "Mon Apr 18 2011 16:47:53 GMT+0200[...]
Found : user_pref("CommunityToolbar.twitter.user_17151925.LastCheckTime", "Mon Apr 18 2011 16:47:53 GMT+0200[...]
Found : user_pref("CommunityToolbar.twitter.user_20536157.LastCheckTime", "Mon Apr 18 2011 16:47:53 GMT+0200[...]
Found : user_pref("CommunityToolbar.twitter.user_30261067.LastCheckTime", "Mon Apr 18 2011 16:47:53 GMT+0200[...]
Found : user_pref("CommunityToolbar.twitter.user_34655603.LastCheckTime", "Mon Apr 18 2011 16:47:53 GMT+0200[...]
Found : user_pref("CommunityToolbar.twitter.user_428333.LastCheckTime", "Mon Apr 18 2011 16:47:53 GMT+0200")[...]
Found : user_pref("CommunityToolbar.twitter.user_759251.LastCheckTime", "Mon Apr 18 2011 05:48:49 GMT+0200")[...]
Found : user_pref("CommunityToolbar.twitter.user_816653.LastCheckTime", "Mon Apr 18 2011 16:47:53 GMT+0200")[...]
Found : user_pref("ConduitEngine.AppTrackingLastCheckTime", "Fri May 13 2011 07:10:29 GMT+0200");
Found : user_pref("ConduitEngine.DialogsGetterLastCheckTime", "Mon Apr 18 2011 05:48:44 GMT+0200");
Found : user_pref("ConduitEngine.FirstServerDate", "04/18/2011 06");
Found : user_pref("ConduitEngine.FirstTime", true);
Found : user_pref("ConduitEngine.FirstTimeFF3", true);
Found : user_pref("ConduitEngine.HasUserGlobalKeys", true);
Found : user_pref("ConduitEngine.HideEngineAfterRestart", true);
Found : user_pref("ConduitEngine.Initialize", true);
Found : user_pref("ConduitEngine.InitializeCommonPrefs", true);
Found : user_pref("ConduitEngine.InstalledDate", "Mon Apr 18 2011 05:48:44 GMT+0200");
Found : user_pref("ConduitEngine.IsMulticommunity", false);
Found : user_pref("ConduitEngine.IsOpenThankYouPage", false);
Found : user_pref("ConduitEngine.IsOpenUninstallPage", true);
Found : user_pref("ConduitEngine.LanguagePackLastCheckTime", "Mon Apr 18 2011 05:48:44 GMT+0200");
Found : user_pref("ConduitEngine.LastLogin_3.3.3.2", "Mon Apr 18 2011 16:46:53 GMT+0200");
Found : user_pref("ConduitEngine.PublisherContainerWidth", 0);
Found : user_pref("ConduitEngine.SearchFromAddressBarIsInit", true);
Found : user_pref("ConduitEngine.SettingsLastCheckTime", "Mon Apr 18 2011 16:46:53 GMT+0200");
Found : user_pref("ConduitEngine.UserID", "UN77747500106429591");
Found : user_pref("ConduitEngine.engineLocale", "cs");
Found : user_pref("ConduitEngine.enngineContextMenuLastCheckTime", "Mon Apr 18 2011 05:48:43 GMT+0200");
Found : user_pref("ConduitEngine.globalFirstTimeInfoLastCheckTime", "Mon Apr 18 2011 17:46:55 GMT+0200");
Found : user_pref("ConduitEngine.initDone", true);
Found : user_pref("ConduitEngine.isAppTrackingManagerOn", true);
Found : user_pref("browser.search.defaultthis.engineName", "uTorrentControl2 Customized Web Search");
Found : user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3072253&Sea[...]
Found : user_pref("extensions.engine@conduit.com.install-event-fired", true);
Found : user_pref("extensions.ffxtlbr@Facemoods.com.install-event-fired", true);
Found : user_pref("extensions.snipit.chromeURL", "hxxp://toolbar.ask.com/toolbarv/askRedirect?o=10615&gct=&g[...]
Found : user_pref("extensions.toolbar@ask.com.install-event-fired", true);
Found : user_pref("keyword.URL", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2786678&q=");
Found : user_pref("surfcanyon.ac", true);
Found : user_pref("surfcanyon.fractions", "0.0_0.0\r\n");
Found : user_pref("surfcanyon.last_checked_ts", "1267026589894");

-\\ Google Chrome v25.0.1364.97

File : C:\Users\hadza\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] File is clean.

File : C:\Users\Deti\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] File is clean.

-\\ Opera v [Unable to get version]

File : C:\Users\hadza\AppData\Roaming\Opera\Opera\operaprefs.ini

Found : application/x-winampx-1.0.0.1=6,,C:\Program Files (x86)\Mozilla Firefox\plugins\npwachk.dll,Winamp A[...]
Found : application/x-winampx-1.0.0.1=,0

*************************

AdwCleaner[R1].txt - [83846 octets] - [24/02/2013 13:44:32]

########## EOF - C:\AdwCleaner[R1].txt - [83907 octets] ##########

Spusťte znovu ADWCleaner a klikněte na >Delete<. Vložte nový log.

# AdwCleaner v2.109 - Logfile created 02/25/2013 at 15:07:21
# Updated 26/01/2013 by Xplode
# Operating system : Windows 7 Ultimate Service Pack 1 (64 bits)
# User : hadza - HADZA-PC
# Boot Mode : Normal
# Running from : C:\Users\hadza\Desktop\adwcleaner_2.110.exe
# Option [Delete]


***** [Services] *****


***** [Files / Folders] *****

File Deleted : C:\Program Files (x86)\Mozilla Firefox\searchplugins\fcmdSrch.xml
File Deleted : C:\Users\Deti\AppData\Roaming\Mozilla\Firefox\Profiles\meroiczd.default\searchplugins\Ask.xml
File Deleted : C:\Users\Deti\AppData\Roaming\Mozilla\Firefox\Profiles\meroiczd.default\searchplugins\Conduit.xml
File Deleted : C:\Users\Deti\AppData\Roaming\Mozilla\Firefox\Profiles\meroiczd.default\searchplugins\daemon-search.xml
File Deleted : C:\Users\Deti\AppData\Roaming\Mozilla\Firefox\Profiles\meroiczd.default\searchplugins\icqplugin.xml
File Deleted : C:\Users\hadza\AppData\Roaming\Mozilla\Firefox\Profiles\e96v92y2.default\searchplugins\Ask.xml
File Deleted : C:\Users\hadza\AppData\Roaming\Mozilla\Firefox\Profiles\e96v92y2.default\searchplugins\Conduit.xml
File Deleted : C:\Users\hadza\AppData\Roaming\Mozilla\Firefox\Profiles\e96v92y2.default\searchplugins\daemon-search.xml
File Deleted : C:\Users\hadza\AppData\Roaming\Mozilla\Firefox\Profiles\e96v92y2.default\searchplugins\icqplugin.xml
Folder Deleted : C:\Program Files (x86)\Ask.com
Folder Deleted : C:\Program Files (x86)\Conduit
Folder Deleted : C:\ProgramData\Ask
Folder Deleted : C:\Users\Deti\AppData\Roaming\Mozilla\Firefox\Profiles\meroiczd.default\Conduit
Folder Deleted : C:\Users\Deti\AppData\Roaming\Mozilla\Firefox\Profiles\meroiczd.default\ConduitEngine
Folder Deleted : C:\Users\Deti\AppData\Roaming\Mozilla\Firefox\Profiles\meroiczd.default\CT2786678
Folder Deleted : C:\Users\Deti\AppData\Roaming\Mozilla\Firefox\Profiles\meroiczd.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}
Folder Deleted : C:\Users\Deti\AppData\Roaming\Mozilla\Firefox\Profiles\meroiczd.default\extensions\engine@conduit.com
Folder Deleted : C:\Users\hadza\AppData\Local\Conduit
Folder Deleted : C:\Users\hadza\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc
Folder Deleted : C:\Users\hadza\AppData\Local\OpenCandy
Folder Deleted : C:\Users\hadza\AppData\LocalLow\Conduit
Folder Deleted : C:\Users\hadza\AppData\LocalLow\facemoods.com
Folder Deleted : C:\Users\hadza\AppData\LocalLow\PriceGong
Folder Deleted : C:\Users\hadza\AppData\Roaming\Mozilla\Firefox\Profiles\e96v92y2.default\Conduit
Folder Deleted : C:\Users\hadza\AppData\Roaming\Mozilla\Firefox\Profiles\e96v92y2.default\ConduitEngine
Folder Deleted : C:\Users\hadza\AppData\Roaming\Mozilla\Firefox\Profiles\e96v92y2.default\CT2786678
Folder Deleted : C:\Users\hadza\AppData\Roaming\Mozilla\Firefox\Profiles\e96v92y2.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}
Folder Deleted : C:\Users\hadza\AppData\Roaming\Mozilla\Firefox\Profiles\e96v92y2.default\extensions\engine@conduit.com
Folder Deleted : C:\Users\hadza\AppData\Roaming\OpenCandy

***** [Registry] *****

Key Deleted : HKCU\Software\APN PIP
Key Deleted : HKCU\Software\AppDataLow\Software\Conduit
Key Deleted : HKCU\Software\AppDataLow\Software\ConduitSearchScopes
Key Deleted : HKCU\Software\AppDataLow\Software\PriceGong
Key Deleted : HKCU\Software\AppDataLow\Software\SmartBar
Key Deleted : HKCU\Software\Conduit
Key Deleted : HKCU\Software\Google\Chrome\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc
Key Deleted : HKCU\Software\PIP
Key Deleted : HKCU\Software\Softonic
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0D7562AE-8EF6-416D-A838-AB665251703A}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{5B1881D1-D9C7-46DF-B041-1E593282C7D0}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Key Deleted : HKLM\SOFTWARE\Classes\facemoods.facemoodsHlpr
Key Deleted : HKLM\SOFTWARE\Classes\facemoods.facemoodsHlpr.1
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{09C554C3-109B-483C-A06B-F14172F1A947}
Key Deleted : HKLM\Software\Conduit
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\facemoodssrv_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\facemoodssrv_RASMANCS
Key Deleted : HKLM\Software\PIP
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{64182481-4F71-486B-A045-B233BD0DA8FC}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{DDE2C74F-58CC-4D71-8CE1-09DEBB8CFB78}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{813A22E0-3E2B-4188-9BDA-ECA9878B8D48}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{A9379648-F6EB-4F65-A624-1C10411A15D0}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{F16AB1DB-15C0-4456-A29E-4DF24FB9E3D2}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{813A22E0-3E2B-4188-9BDA-ECA9878B8D48}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A9379648-F6EB-4F65-A624-1C10411A15D0}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{F16AB1DB-15C0-4456-A29E-4DF24FB9E3D2}
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{32099AAC-C132-4136-9E9A-4E364A424E17}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{32099AAC-C132-4136-9E9A-4E364A424E17}]

***** [Internet Browsers] *****

-\\ Internet Explorer v9.0.8112.16464

Replaced : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://search.conduit.com/?SearchSource=10&ctid=CT3072253 --> hxxp://www.google.com
Replaced : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Search - SearchAssistant] = hxxp://start.facemoods.com/?a=ddrnw&s={searchTerms}&f=4 --> hxxp://www.google.com

-\\ Mozilla Firefox v18.0.2 (cs)

File : C:\Users\hadza\AppData\Roaming\Mozilla\Firefox\Profiles\e96v92y2.default\prefs.js

C:\Users\hadza\AppData\Roaming\Mozilla\Firefox\Profiles\e96v92y2.default\user.js ... Deleted !

Deleted : user_pref("CT2475029..clientLogIsEnabled", false);
Deleted : user_pref("CT2475029..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...]
Deleted : user_pref("CT2475029..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...]
Deleted : user_pref("CT2475029.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
Deleted : user_pref("CT2475029.CT2481020.CommunityChanged", true);
Deleted : user_pref("CT2475029.CT2481024.CommunityChanged", true);
Deleted : user_pref("CT2475029.CT2481025.CommunityChanged", true);
Deleted : user_pref("CT2475029.CT2481029.CommunityChanged", true);
Deleted : user_pref("CT2475029.CT2481031.CommunityChanged", true);
Deleted : user_pref("CT2475029.CT2481032.CommunityChanged", true);
Deleted : user_pref("CT2475029.CT2481033.CommunityChanged", true);
Deleted : user_pref("CT2475029.CT2481034.CommunityChanged", true);
Deleted : user_pref("CT2475029.CT2481035.CommunityChanged", true);
Deleted : user_pref("CT2475029.CT2481037.CommunityChanged", true);
Deleted : user_pref("CT2475029.CTID", "ct2481032");
Deleted : user_pref("CT2475029.CommunitiesChangesLastCheckTime", "Mon Apr 18 2011 19:07:12 GMT+0200");
Deleted : user_pref("CT2475029.CommunityChanged", true);
Deleted : user_pref("CT2475029.CurrentServerDate", "18-4-2011");
Deleted : user_pref("CT2475029.DialogsAlignMode", "LTR");
Deleted : user_pref("CT2475029.DialogsGetterLastCheckTime", "Mon Apr 18 2011 05:48:44 GMT+0200");
Deleted : user_pref("CT2475029.DownloadDomainsCheckInterval", "168");
Deleted : user_pref("CT2475029.DownloadDomainsListLastCheckTime", "Mon Apr 18 2011 05:48:44 GMT+0200");
Deleted : user_pref("CT2475029.DownloadDomainsListLastServerUpdateTime", "1201069983");
Deleted : user_pref("CT2475029.DownloadReferralCookieData", "");
Deleted : user_pref("CT2475029.FeedPollDate128975107603475850", "Mon Apr 18 2011 19:14:15 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate129104903994210185", "Mon Apr 18 2011 19:14:14 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate129125588542653211", "Mon Apr 18 2011 19:14:15 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate129132307482029379", "Mon Apr 18 2011 05:48:46 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate129132307482029381", "Mon Apr 18 2011 05:48:46 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate129132307482029382", "Mon Apr 18 2011 05:48:46 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate129133095459686870", "Mon Apr 18 2011 05:48:46 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate129133095459686871", "Mon Apr 18 2011 05:48:46 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate129137415288118473", "Mon Apr 18 2011 19:14:14 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate129137415288118474", "Mon Apr 18 2011 19:14:15 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate129137436798437243", "Mon Apr 18 2011 19:14:15 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate129137436798437244", "Mon Apr 18 2011 19:14:15 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate129137436798437245", "Mon Apr 18 2011 19:14:15 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate129137437659687146", "Mon Apr 18 2011 05:48:45 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate129137437659687147", "Mon Apr 18 2011 05:48:45 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate129137437659687148", "Mon Apr 18 2011 05:48:45 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757377779301063", "Mon Apr 18 2011 18:13:55 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757377961554609", "Mon Apr 18 2011 18:13:53 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757377979947076", "Mon Apr 18 2011 18:13:55 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757378132259586", "Mon Apr 18 2011 18:13:53 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757378265651739", "Mon Apr 18 2011 18:13:55 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757378449145277", "Mon Apr 18 2011 18:13:52 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757378705873295", "Mon Apr 18 2011 18:13:55 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757378902522699", "Mon Apr 18 2011 18:13:53 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757378968484097", "Mon Apr 18 2011 18:13:56 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757379044202234", "Mon Apr 18 2011 18:13:55 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757379219112080", "Mon Apr 18 2011 18:13:53 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757379310186023", "Mon Apr 18 2011 18:13:54 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757379320546978", "Mon Apr 18 2011 18:13:55 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757379400531926", "Mon Apr 18 2011 18:13:56 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757379497083274", "Mon Apr 18 2011 18:13:57 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757379497148810", "Mon Apr 18 2011 18:13:57 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757379497279882", "Mon Apr 18 2011 18:13:57 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757379644150784", "Mon Apr 18 2011 18:13:53 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757379646262407", "Mon Apr 18 2011 18:13:53 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757379767858421", "Mon Apr 18 2011 18:13:57 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757379797989042", "Mon Apr 18 2011 05:48:49 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757379883299006", "Mon Apr 18 2011 18:13:55 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757380108070872", "Mon Apr 18 2011 18:13:54 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757380344955611", "Mon Apr 18 2011 18:13:54 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757380390189978", "Mon Apr 18 2011 18:13:53 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757380412472059", "Mon Apr 18 2011 18:13:55 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757380467866928", "Mon Apr 18 2011 18:13:53 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757380521772385", "Mon Apr 18 2011 18:13:54 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757380616362201", "Mon Apr 18 2011 18:13:54 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757380727291645", "Mon Apr 18 2011 18:13:54 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757380767393172", "Mon Apr 18 2011 05:48:50 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757380868375745", "Mon Apr 18 2011 16:46:56 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757381043554700", "Mon Apr 18 2011 18:13:53 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757381080219037", "Mon Apr 18 2011 18:13:55 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757381151343676", "Mon Apr 18 2011 18:13:56 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757381247526121", "Mon Apr 18 2011 18:13:52 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757381247591657", "Mon Apr 18 2011 18:13:52 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757381372042911", "Mon Apr 18 2011 18:13:52 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757381453742514", "Mon Apr 18 2011 18:13:54 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757381520490197", "Mon Apr 18 2011 18:13:56 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757381582880127", "Mon Apr 18 2011 18:13:52 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757381641974229", "Mon Apr 18 2011 18:13:56 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757381669771831", "Mon Apr 18 2011 18:13:53 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757381670861676", "Mon Apr 18 2011 18:13:57 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757381749396397", "Mon Apr 18 2011 18:13:56 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757381869347434", "Mon Apr 18 2011 18:13:56 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757381908324302", "Mon Apr 18 2011 18:13:54 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757381919420428", "Mon Apr 18 2011 18:13:57 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757381932420313", "Mon Apr 18 2011 18:13:56 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757381975368474", "Mon Apr 18 2011 18:13:54 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757381979169315", "Mon Apr 18 2011 18:13:53 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757381989950054", "Mon Apr 18 2011 18:13:56 GMT+0200");
Deleted : user_pref("CT2475029.FeedTTL128975107603475850", 40);
Deleted : user_pref("CT2475029.FeedTTL129104903994210185", 40);
Deleted : user_pref("CT2475029.FeedTTL129125588542653211", 40);
Deleted : user_pref("CT2475029.FeedTTL129132307482029379", 40);
Deleted : user_pref("CT2475029.FeedTTL129132307482029381", 40);
Deleted : user_pref("CT2475029.FeedTTL129132307482029382", 40);
Deleted : user_pref("CT2475029.FeedTTL129133095459686870", 40);
Deleted : user_pref("CT2475029.FeedTTL129133095459686871", 40);
Deleted : user_pref("CT2475029.FeedTTL129137415288118473", 40);
Deleted : user_pref("CT2475029.FeedTTL129137415288118474", 40);
Deleted : user_pref("CT2475029.FeedTTL129137436798437243", 40);
Deleted : user_pref("CT2475029.FeedTTL129137436798437244", 40);
Deleted : user_pref("CT2475029.FeedTTL129137436798437245", 40);
Deleted : user_pref("CT2475029.FeedTTL129137437659687146", 40);
Deleted : user_pref("CT2475029.FeedTTL129137437659687147", 40);
Deleted : user_pref("CT2475029.FeedTTL129137437659687148", 40);
Deleted : user_pref("CT2475029.FeedTTL5609757377779301063", 15);
Deleted : user_pref("CT2475029.FeedTTL5609757377979947076", 15);
Deleted : user_pref("CT2475029.FeedTTL5609757378132259586", 10);
Deleted : user_pref("CT2475029.FeedTTL5609757378265651739", 30);
Deleted : user_pref("CT2475029.FeedTTL5609757378705873295", 15);
Deleted : user_pref("CT2475029.FeedTTL5609757379310186023", 5);
Deleted : user_pref("CT2475029.FeedTTL5609757379320546978", 2);
Deleted : user_pref("CT2475029.FeedTTL5609757379400531926", 5);
Deleted : user_pref("CT2475029.FeedTTL5609757380108070872", 5);
Deleted : user_pref("CT2475029.FeedTTL5609757380412472059", 15);
Deleted : user_pref("CT2475029.FeedTTL5609757380467866928", 60);
Deleted : user_pref("CT2475029.FeedTTL5609757380521772385", 2);
Deleted : user_pref("CT2475029.FeedTTL5609757380727291645", 5);
Deleted : user_pref("CT2475029.FeedTTL5609757380767393172", 1440);
Deleted : user_pref("CT2475029.FeedTTL5609757381043554700", 2);
Deleted : user_pref("CT2475029.FeedTTL5609757381247526121", 15);
Deleted : user_pref("CT2475029.FeedTTL5609757381372042911", 60);
Deleted : user_pref("CT2475029.FeedTTL5609757381453742514", 15);
Deleted : user_pref("CT2475029.FeedTTL5609757381908324302", 30);
Deleted : user_pref("CT2475029.FeedTTL5609757381932420313", 10);
Deleted : user_pref("CT2475029.FeedTTL5609757381979169315", 15);
Deleted : user_pref("CT2475029.FirstServerDate", "18-4-2011");
Deleted : user_pref("CT2475029.FirstTime", true);
Deleted : user_pref("CT2475029.FirstTimeFF3", true);
Deleted : user_pref("CT2475029.FixPageNotFoundErrors", true);
Deleted : user_pref("CT2475029.GroupingLastCheckTime", "Mon Apr 18 2011 05:48:44 GMT+0200");
Deleted : user_pref("CT2475029.GroupingLastErrorCode", "");
Deleted : user_pref("CT2475029.GroupingLastResponse", true);
Deleted : user_pref("CT2475029.GroupingLastServerUpdateTime", "129469851600000000");
Deleted : user_pref("CT2475029.GroupingServerCheckInterval", 1440);
Deleted : user_pref("CT2475029.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
Deleted : user_pref("CT2475029.HasUserGlobalKeys", true);
Deleted : user_pref("CT2475029.Initialize", true);
Deleted : user_pref("CT2475029.InitializeCommonPrefs", true);
Deleted : user_pref("CT2475029.InstallationAndCookieDataSentCount", 3);
Deleted : user_pref("CT2475029.InstallationId", "MyAshampoo.exe");
Deleted : user_pref("CT2475029.InstallationType", "ConduitIntegration");
Deleted : user_pref("CT2475029.InstalledDate", "Mon Apr 18 2011 05:48:45 GMT+0200");
Deleted : user_pref("CT2475029.IsGrouping", true);
Deleted : user_pref("CT2475029.IsMulticommunity", true);
Deleted : user_pref("CT2475029.IsOpenThankYouPage", false);
Deleted : user_pref("CT2475029.IsOpenUninstallPage", true);
Deleted : user_pref("CT2475029.LanguagePackLastCheckTime", "Mon Apr 18 2011 05:48:46 GMT+0200");
Deleted : user_pref("CT2475029.LanguagePackReloadIntervalMM", 1440);
Deleted : user_pref("CT2475029.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...]
Deleted : user_pref("CT2475029.LastLogin_3.3.3.2", "Mon Apr 18 2011 17:46:53 GMT+0200");
Deleted : user_pref("CT2475029.LatestVersion", "3.3.3.2");
Deleted : user_pref("CT2475029.Locale", "en");
Deleted : user_pref("CT2475029.MCDetectTooltipHeight", "83");
Deleted : user_pref("CT2475029.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
Deleted : user_pref("CT2475029.MCDetectTooltipWidth", "295");
Deleted : user_pref("CT2475029.RadioIsPodcast", false);
Deleted : user_pref("CT2475029.RadioMediaID", "9962");
Deleted : user_pref("CT2475029.RadioMediaType", "Media Player");
Deleted : user_pref("CT2475029.RadioMenuSelectedID", "EBRadioMenu_CT24750299962");
Deleted : user_pref("CT2475029.RadioStationName", "California%20Rock");
Deleted : user_pref("CT2475029.RadioStationURL", "hxxp://feedlive.net/california.asx");
Deleted : user_pref("CT2475029.SavedHomepage", "hxxp://www.seznam.cz/");
Deleted : user_pref("CT2475029.SearchFromAddressBarIsInit", true);
Deleted : user_pref("CT2475029.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT247[...]
Deleted : user_pref("CT2475029.SearchInNewTabEnabled", true);
Deleted : user_pref("CT2475029.SearchInNewTabIntervalMM", 1440);
Deleted : user_pref("CT2475029.SearchInNewTabLastCheckTime", "Mon Apr 18 2011 05:48:45 GMT+0200");
Deleted : user_pref("CT2475029.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...]
Deleted : user_pref("CT2475029.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageServic[...]
Deleted : user_pref("CT2475029.ServiceMapLastCheckTime", "Mon Apr 18 2011 05:48:42 GMT+0200");
Deleted : user_pref("CT2475029.SettingsLastCheckTime", "Mon Apr 18 2011 05:48:43 GMT+0200");
Deleted : user_pref("CT2475029.SettingsLastUpdate", "1302500760");
Deleted : user_pref("CT2475029.ThirdPartyComponentsInterval", 504);
Deleted : user_pref("CT2475029.ThirdPartyComponentsLastCheck", "Mon Apr 18 2011 05:48:42 GMT+0200");
Deleted : user_pref("CT2475029.ThirdPartyComponentsLastUpdate", "1246786978");
Deleted : user_pref("CT2475029.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2475029");
Deleted : user_pref("CT2475029.UserID", "UN48172298052485907");
Deleted : user_pref("CT2475029.ValidationData_Toolbar", 2);
Deleted : user_pref("CT2475029.backendstorage.facebook_mode", "32");
Deleted : user_pref("CT2475029.backendstorage.facebook_user_locale", "656E");
Deleted : user_pref("CT2475029.ct2481032.DialogsAlignMode", "LTR");
Deleted : user_pref("CT2475029.ct2481032.FeedLastCount129137415284993440", 235);
Deleted : user_pref("CT2475029.ct2481032.FeedLastCount1470371090506316425", 1347);
Deleted : user_pref("CT2475029.ct2481032.GroupingInvalidateCache", false);
Deleted : user_pref("CT2475029.ct2481032.GroupingLastCheckTime", "Mon Apr 18 2011 17:48:46 GMT+0200");
Deleted : user_pref("CT2475029.ct2481032.GroupingLastErrorCode", "");
Deleted : user_pref("CT2475029.ct2481032.GroupingLastResponse", true);
Deleted : user_pref("CT2475029.ct2481032.GroupingLastServerUpdateTime", "129469851600000000");
Deleted : user_pref("CT2475029.ct2481032.InvalidateCache", false);
Deleted : user_pref("CT2475029.ct2481032.LanguagePackLastCheckTime", "Mon Apr 18 2011 05:48:48 GMT+0200");
Deleted : user_pref("CT2475029.ct2481032.Locale", "en");
Deleted : user_pref("CT2475029.ct2481032.RadioLastCheckTime", "Mon Apr 18 2011 05:48:47 GMT+0200");
Deleted : user_pref("CT2475029.ct2481032.RadioLastUpdateIPServer", "3");
Deleted : user_pref("CT2475029.ct2481032.RadioLastUpdateServer", "3");
Deleted : user_pref("CT2475029.ct2481032.SearchInNewTabLastCheckTime", "Mon Apr 18 2011 05:48:47 GMT+0200");
Deleted : user_pref("CT2475029.ct2481032.SettingsLastCheckTime", "Mon Apr 18 2011 18:20:08 GMT+0200");
Deleted : user_pref("CT2475029.ct2481032.SettingsLastUpdate", "1302500970");
Deleted : user_pref("CT2475029.ct2481032.ThirdPartyComponentsLastCheck", "Mon Apr 18 2011 05:48:45 GMT+0200");
Deleted : user_pref("CT2475029.ct2481032.ThirdPartyComponentsLastUpdate", "1246786978");
Deleted : user_pref("CT2475029.ct2481032.globalFirstTimeInfoLastCheckTime", "Mon Apr 18 2011 17:46:53 GMT+0200[...]
Deleted : user_pref("CT2475029.ct2481032.toolbarAppMetaDataLastCheckTime", "Mon Apr 18 2011 05:48:46 GMT+0200"[...]
Deleted : user_pref("CT2475029.ct2481032.toolbarContextMenuLastCheckTime", "Mon Apr 18 2011 05:48:48 GMT+0200"[...]
Deleted : user_pref("CT2475029.generalConfigFromLogin", "{\"SocialDomains\":\"social.conduit.com;apps.conduit.[...]
Deleted : user_pref("CT2475029.globalFirstTimeInfoLastCheckTime", "Mon Apr 18 2011 05:48:46 GMT+0200");
Deleted : user_pref("CT2475029.isAppTrackingManagerOn", true);
Deleted : user_pref("CT2475029.myStuffEnabled", true);
Deleted : user_pref("CT2475029.myStuffPublihserMinWidth", 400);
Deleted : user_pref("CT2475029.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...]
Deleted : user_pref("CT2475029.myStuffServiceIntervalMM", 1440);
Deleted : user_pref("CT2475029.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...]
Deleted : user_pref("CT2475029.oldAppsList", "200,129058858239812813,129058858240125318,129469743936644511,129[...]
Deleted : user_pref("CT2475029.testingCtid", "");
Deleted : user_pref("CT2475029.toolbarAppMetaDataLastCheckTime", "Mon Apr 18 2011 05:48:44 GMT+0200");
Deleted : user_pref("CT2475029.toolbarContextMenuLastCheckTime", "Mon Apr 18 2011 05:48:47 GMT+0200");
Deleted : user_pref("CT2475029.usagesFlag", 2);
Deleted : user_pref("CT2786678..clientLogIsEnabled", false);
Deleted : user_pref("CT2786678..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...]
Deleted : user_pref("CT2786678..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...]
Deleted : user_pref("CT2786678.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
Deleted : user_pref("CT2786678.CTID", "CT2786678");
Deleted : user_pref("CT2786678.CurrentServerDate", "4-5-2011");
Deleted : user_pref("CT2786678.DialogsAlignMode", "LTR");
Deleted : user_pref("CT2786678.DialogsGetterLastCheckTime", "Wed May 04 2011 11:56:48 GMT+0200");
Deleted : user_pref("CT2786678.DownloadReferralCookieData", "");
Deleted : user_pref("CT2786678.EMailNotifierPollDate", "Wed May 04 2011 13:12:02 GMT+0200");
Deleted : user_pref("CT2786678.FeedLastCount5690698542593514850", 157);
Deleted : user_pref("CT2786678.FeedPollDate129301619375443753", "Wed May 04 2011 13:12:03 GMT+0200");
Deleted : user_pref("CT2786678.FeedPollDate129301619375443759", "Wed May 04 2011 13:12:03 GMT+0200");
Deleted : user_pref("CT2786678.FeedPollDate129301619375444699", "Wed May 04 2011 13:12:02 GMT+0200");
Deleted : user_pref("CT2786678.FeedPollDate129301619375444705", "Wed May 04 2011 13:12:02 GMT+0200");
Deleted : user_pref("CT2786678.FeedPollDate129301619375444711", "Wed May 04 2011 13:12:02 GMT+0200");
Deleted : user_pref("CT2786678.FeedPollDate129301619375444717", "Wed May 04 2011 13:12:03 GMT+0200");
Deleted : user_pref("CT2786678.FeedPollDate129301619375444723", "Wed May 04 2011 13:12:03 GMT+0200");
Deleted : user_pref("CT2786678.FeedPollDate129301619375444729", "Wed May 04 2011 13:12:03 GMT+0200");
Deleted : user_pref("CT2786678.FeedPollDate129301619375444735", "Wed May 04 2011 13:12:03 GMT+0200");
Deleted : user_pref("CT2786678.FeedPollDate129301619375444741", "Wed May 04 2011 13:12:03 GMT+0200");
Deleted : user_pref("CT2786678.FeedPollDate129301619375444747", "Wed May 04 2011 13:12:03 GMT+0200");
Deleted : user_pref("CT2786678.FeedTTL129301619375444699", 10);
Deleted : user_pref("CT2786678.FeedTTL129301619375444723", 15);
Deleted : user_pref("CT2786678.FeedTTL129301619375444735", 5);
Deleted : user_pref("CT2786678.FeedTTL129301619375444747", 5);
Deleted : user_pref("CT2786678.FirstServerDate", "4-5-2011");
Deleted : user_pref("CT2786678.FirstTime", true);
Deleted : user_pref("CT2786678.FirstTimeFF3", true);
Deleted : user_pref("CT2786678.FixPageNotFoundErrors", false);
Deleted : user_pref("CT2786678.GroupingServerCheckInterval", 1440);
Deleted : user_pref("CT2786678.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
Deleted : user_pref("CT2786678.HasUserGlobalKeys", true);
Deleted : user_pref("CT2786678.Initialize", true);
Deleted : user_pref("CT2786678.InitializeCommonPrefs", true);
Deleted : user_pref("CT2786678.InstallationAndCookieDataSentCount", 1);
Deleted : user_pref("CT2786678.InstallationType", "UnknownIntegration");
Deleted : user_pref("CT2786678.InstalledDate", "Wed May 04 2011 11:56:45 GMT+0200");
Deleted : user_pref("CT2786678.IsGrouping", false);
Deleted : user_pref("CT2786678.IsMulticommunity", false);
Deleted : user_pref("CT2786678.IsOpenThankYouPage", true);
Deleted : user_pref("CT2786678.IsOpenUninstallPage", false);
Deleted : user_pref("CT2786678.LanguagePackLastCheckTime", "Wed May 04 2011 11:56:50 GMT+0200");
Deleted : user_pref("CT2786678.LanguagePackReloadIntervalMM", 1440);
Deleted : user_pref("CT2786678.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...]
Deleted : user_pref("CT2786678.LastLogin_3.3.3.2", "Wed May 04 2011 11:56:48 GMT+0200");
Deleted : user_pref("CT2786678.LatestVersion", "3.3.3.2");
Deleted : user_pref("CT2786678.Locale", "en");
Deleted : user_pref("CT2786678.MCDetectTooltipHeight", "83");
Deleted : user_pref("CT2786678.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
Deleted : user_pref("CT2786678.MCDetectTooltipWidth", "295");
Deleted : user_pref("CT2786678.SearchFromAddressBarIsInit", true);
Deleted : user_pref("CT2786678.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT278[...]
Deleted : user_pref("CT2786678.SearchInNewTabEnabled", true);
Deleted : user_pref("CT2786678.SearchInNewTabIntervalMM", 1440);
Deleted : user_pref("CT2786678.SearchInNewTabLastCheckTime", "Wed May 04 2011 11:56:50 GMT+0200");
Deleted : user_pref("CT2786678.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...]
Deleted : user_pref("CT2786678.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageServic[...]
Deleted : user_pref("CT2786678.SearchProtectorToolbarDisabled", true);
Deleted : user_pref("CT2786678.ServiceMapLastCheckTime", "Wed May 04 2011 11:56:44 GMT+0200");
Deleted : user_pref("CT2786678.SettingsLastCheckTime", "Wed May 04 2011 11:56:45 GMT+0200");
Deleted : user_pref("CT2786678.SettingsLastUpdate", "1304004054");
Deleted : user_pref("CT2786678.ThirdPartyComponentsInterval", 504);
Deleted : user_pref("CT2786678.ThirdPartyComponentsLastCheck", "Wed May 04 2011 11:56:44 GMT+0200");
Deleted : user_pref("CT2786678.ThirdPartyComponentsLastUpdate", "1246786978");
Deleted : user_pref("CT2786678.ToolbarDisabled", true);
Deleted : user_pref("CT2786678.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2786678");
Deleted : user_pref("CT2786678.UserID", "UN84681799557815150");
Deleted : user_pref("CT2786678.WeatherNetwork", "");
Deleted : user_pref("CT2786678.WeatherPollDate", "Wed May 04 2011 12:57:31 GMT+0200");
Deleted : user_pref("CT2786678.WeatherUnit", "C");
Deleted : user_pref("CT2786678.alertChannelId", "1178763");
Deleted : user_pref("CT2786678.generalConfigFromLogin", "{\"SocialDomains\":\"social.conduit.com;apps.conduit.[...]
Deleted : user_pref("CT2786678.globalFirstTimeInfoLastCheckTime", "Wed May 04 2011 11:56:48 GMT+0200");
Deleted : user_pref("CT2786678.isAppTrackingManagerOn", true);
Deleted : user_pref("CT2786678.myStuffEnabled", true);
Deleted : user_pref("CT2786678.myStuffPublihserMinWidth", 400);
Deleted : user_pref("CT2786678.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...]
Deleted : user_pref("CT2786678.myStuffServiceIntervalMM", 1440);
Deleted : user_pref("CT2786678.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...]
Deleted : user_pref("CT2786678.testingCtid", "");
Deleted : user_pref("CT2786678.toolbarAppMetaDataLastCheckTime", "Wed May 04 2011 11:56:45 GMT+0200");
Deleted : user_pref("CT2786678.toolbarContextMenuLastCheckTime", "Wed May 04 2011 11:56:52 GMT+0200");
Deleted : user_pref("CT2786678.usagesFlag", 2);
Deleted : user_pref("CommunityToolbar.CantToolbarBeEngineOwner", "CT2786678");
Deleted : user_pref("CommunityToolbar.ConduitHomepagesList", "hxxp://search.conduit.com/?ctid=CT3072253&Search[...]
Deleted : user_pref("CommunityToolbar.ConduitSearchList", "uTorrentControl2 Customized Web Search");
Deleted : user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit.com/root/CT3072253/CT3072253[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/1178763/1174448/CZ", "\"0\"[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/868510/864310/CZ", "\"0\"")[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/874426/870225/CZ", "\"0\"")[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/874430/870228/CZ", "\"0\"")[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/874431/870229/CZ", "\"0\"")[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/874435/870233/CZ", "\"0\"")[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/874437/870235/CZ", "\"0\"")[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/874438/870236/CZ", "\"0\"")[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/874439/870237/CZ", "\"0\"")[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/874440/870238/CZ", "\"0\"")[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/874441/870239/CZ", "\"0\"")[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/874443/870241/CZ", "\"0\"")[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/909619/905414/CZ", "\"0\"")[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2475029", [...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2786678", [...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT3072253", [...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=ct2481032", [...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&lo[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&loc[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&lo[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&local[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.engine.conduit-services.com/DLG.pkg?ver=3.3.3[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.12[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.3.[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2475029",[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2786678",[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT3072253",[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=0", "63[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=3/13/20[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT2475029/CT2475029[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT2786678/CT2786678[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/ct2481032/CT2475029[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Cornflower/equaliz[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Cornflower/minimiz[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Cornflower/play.gi[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Cornflower/stop.gi[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Cornflower/vol.gif[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=en", "\"67e[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/1344951.xml", "\"5d2fad04d3dc2f798c52[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/16887175.xml", "\"458919548cbc209eb24[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/17151925.xml", "\"f7ed0691e317fce1000[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/20536157.xml", "\"c88763624e3f50e07b3[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/30261067.xml", "\"8e67c43247dd81e23b6[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/34655603.xml", "\"10d12d5dd9a3673efe1[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/428333.xml", "\"236a4e2818ca19c41e1e8[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/759251.xml", "\"4db90f79a7858cb1c9735[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/816653.xml", "\"9e940d2307baea71308d5[...]
Deleted : user_pref("CommunityToolbar.EngineOwner", "CT2475029");
Deleted : user_pref("CommunityToolbar.EngineOwnerGuid", "{a1e75a0e-4397-4ba8-bb50-e19fb66890f4}");
Deleted : user_pref("CommunityToolbar.EngineOwnerToolbarId", "myashampoo");
Deleted : user_pref("CommunityToolbar.IsEngineShown", false);
Deleted : user_pref("CommunityToolbar.IsMyStuffImportedToEngine", true);
Deleted : user_pref("CommunityToolbar.LatestLibsPath", "file:///C:\\Users\\hadza\\AppData\\Roaming\\Mozilla\\F[...]
Deleted : user_pref("CommunityToolbar.LatestToolbarVersionInstalled", "3.12.0.8");
Deleted : user_pref("CommunityToolbar.OriginalEngineOwner", "CT2475029");
Deleted : user_pref("CommunityToolbar.OriginalEngineOwnerGuid", "{a1e75a0e-4397-4ba8-bb50-e19fb66890f4}");
Deleted : user_pref("CommunityToolbar.OriginalEngineOwnerToolbarId", "myashampoo");
Deleted : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "hxxp://search.yahoo.com/search?fr=greent[...]
Deleted : user_pref("CommunityToolbar.ToolbarsList", "ConduitEngine,CT2475029,CT2786678");
Deleted : user_pref("CommunityToolbar.ToolbarsList2", "CT2475029,CT2786678");
Deleted : user_pref("CommunityToolbar.ToolbarsList4", "");
Deleted : user_pref("CommunityToolbar.alert.alertDialogsGetterLastCheckTime", "Tue May 10 2011 13:26:27 GMT+02[...]
Deleted : user_pref("CommunityToolbar.alert.alertInfoInterval", 1440);
Deleted : user_pref("CommunityToolbar.alert.alertInfoLastCheckTime", "Mon Jun 13 2011 18:04:20 GMT+0200");
Deleted : user_pref("CommunityToolbar.alert.clientsServerUrl", "hxxp://alert.client.conduit.com");
Deleted : user_pref("CommunityToolbar.alert.firstTimeAlertShown", true);
Deleted : user_pref("CommunityToolbar.alert.locale", "en");
Deleted : user_pref("CommunityToolbar.alert.loginIntervalMin", 1440);
Deleted : user_pref("CommunityToolbar.alert.loginLastCheckTime", "Tue Jun 28 2011 18:27:04 GMT+0200");
Deleted : user_pref("CommunityToolbar.alert.loginLastUpdateTime", "1305622559");
Deleted : user_pref("CommunityToolbar.alert.messageShowTimeSec", 20);
Deleted : user_pref("CommunityToolbar.alert.servicesServerUrl", "hxxp://alert.services.conduit.com");
Deleted : user_pref("CommunityToolbar.alert.showTrayIcon", false);
Deleted : user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300);
Deleted : user_pref("CommunityToolbar.alert.userId", "65afc836-d55a-4188-a134-99e3977f093f");
Deleted : user_pref("CommunityToolbar.facebook.settingsLastCheckTime", "Wed May 04 2011 11:56:57 GMT+0200");
Deleted : user_pref("CommunityToolbar.globalUserId", "a89a0391-9088-4447-b946-dd057204e28b");
Deleted : user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true);
Deleted : user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true);
Deleted : user_pref("CommunityToolbar.keywordURLSelectedCTID", "CT3072253");
Deleted : user_pref("CommunityToolbar.notifications.alertDialogsGetterLastCheckTime", "Fri May 18 2012 10:08:3[...]
Deleted : user_pref("CommunityToolbar.notifications.alertEnabled", false);
Deleted : user_pref("CommunityToolbar.notifications.clientsServerUrl", "hxxp://alert.client.conduit.com");
Deleted : user_pref("CommunityToolbar.notifications.locale", "en");
Deleted : user_pref("CommunityToolbar.notifications.loginIntervalMin", 1440);
Deleted : user_pref("CommunityToolbar.notifications.loginLastCheckTime", "Fri May 18 2012 10:08:29 GMT+0200");
Deleted : user_pref("CommunityToolbar.notifications.loginLastUpdateTime", "1313487611");
Deleted : user_pref("CommunityToolbar.notifications.messageShowTimeSec", 20);
Deleted : user_pref("CommunityToolbar.notifications.servicesServerUrl", "hxxp://alert.services.conduit.com");
Deleted : user_pref("CommunityToolbar.notifications.showTrayIcon", false);
Deleted : user_pref("CommunityToolbar.notifications.userCloseIntervalMin", 300);
Deleted : user_pref("CommunityToolbar.notifications.userId", "135c9c40-6b76-4bda-8e81-98a3ea654487");
Deleted : user_pref("CommunityToolbar.originalHomepage", "hxxp://www.seznam.cz/");
Deleted : user_pref("CommunityToolbar.originalSearchEngine", "Google");
Deleted : user_pref("CommunityToolbar.twitter.user_1344951.LastCheckTime", "Mon Apr 18 2011 16:47:53 GMT+0200"[...]
Deleted : user_pref("CommunityToolbar.twitter.user_16887175.LastCheckTime", "Mon Apr 18 2011 16:47:53 GMT+0200[...]
Deleted : user_pref("CommunityToolbar.twitter.user_17151925.LastCheckTime", "Mon Apr 18 2011 16:47:53 GMT+0200[...]
Deleted : user_pref("CommunityToolbar.twitter.user_20536157.LastCheckTime", "Mon Apr 18 2011 16:47:53 GMT+0200[...]
Deleted : user_pref("CommunityToolbar.twitter.user_30261067.LastCheckTime", "Mon Apr 18 2011 16:47:53 GMT+0200[...]
Deleted : user_pref("CommunityToolbar.twitter.user_34655603.LastCheckTime", "Mon Apr 18 2011 16:47:53 GMT+0200[...]
Deleted : user_pref("CommunityToolbar.twitter.user_428333.LastCheckTime", "Mon Apr 18 2011 16:47:53 GMT+0200")[...]
Deleted : user_pref("CommunityToolbar.twitter.user_759251.LastCheckTime", "Mon Apr 18 2011 05:48:49 GMT+0200")[...]
Deleted : user_pref("CommunityToolbar.twitter.user_816653.LastCheckTime", "Mon Apr 18 2011 16:47:53 GMT+0200")[...]
Deleted : user_pref("ConduitEngine.AppTrackingLastCheckTime", "Fri May 13 2011 07:10:29 GMT+0200");
Deleted : user_pref("ConduitEngine.DialogsGetterLastCheckTime", "Mon Apr 18 2011 05:48:44 GMT+0200");
Deleted : user_pref("ConduitEngine.FirstServerDate", "04/18/2011 06");
Deleted : user_pref("ConduitEngine.FirstTime", true);
Deleted : user_pref("ConduitEngine.FirstTimeFF3", true);
Deleted : user_pref("ConduitEngine.HasUserGlobalKeys", true);
Deleted : user_pref("ConduitEngine.HideEngineAfterRestart", true);
Deleted : user_pref("ConduitEngine.Initialize", true);
Deleted : user_pref("ConduitEngine.InitializeCommonPrefs", true);
Deleted : user_pref("ConduitEngine.InstalledDate", "Mon Apr 18 2011 05:48:44 GMT+0200");
Deleted : user_pref("ConduitEngine.IsMulticommunity", false);
Deleted : user_pref("ConduitEngine.IsOpenThankYouPage", false);
Deleted : user_pref("ConduitEngine.IsOpenUninstallPage", true);
Deleted : user_pref("ConduitEngine.LanguagePackLastCheckTime", "Mon Apr 18 2011 05:48:44 GMT+0200");
Deleted : user_pref("ConduitEngine.LastLogin_3.3.3.2", "Mon Apr 18 2011 16:46:53 GMT+0200");
Deleted : user_pref("ConduitEngine.PublisherContainerWidth", 0);
Deleted : user_pref("ConduitEngine.SearchFromAddressBarIsInit", true);
Deleted : user_pref("ConduitEngine.SettingsLastCheckTime", "Mon Apr 18 2011 16:46:53 GMT+0200");
Deleted : user_pref("ConduitEngine.UserID", "UN77747500106429591");
Deleted : user_pref("ConduitEngine.engineLocale", "cs");
Deleted : user_pref("ConduitEngine.enngineContextMenuLastCheckTime", "Mon Apr 18 2011 05:48:43 GMT+0200");
Deleted : user_pref("ConduitEngine.globalFirstTimeInfoLastCheckTime", "Mon Apr 18 2011 17:46:55 GMT+0200");
Deleted : user_pref("ConduitEngine.initDone", true);
Deleted : user_pref("ConduitEngine.isAppTrackingManagerOn", true);
Deleted : user_pref("browser.search.defaultthis.engineName", "uTorrentControl2 Customized Web Search");
Deleted : user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3072253&Sea[...]
Deleted : user_pref("extensions.engine@conduit.com.install-event-fired", true);
Deleted : user_pref("extensions.ffxtlbr@Facemoods.com.install-event-fired", true);
Deleted : user_pref("extensions.snipit.chromeURL", "hxxp://toolbar.ask.com/toolbarv/askRedirect?o=10615&gct=&g[...]
Deleted : user_pref("extensions.toolbar@ask.com.install-event-fired", true);
Deleted : user_pref("keyword.URL", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2786678&q=");
Deleted : user_pref("surfcanyon.ac", true);
Deleted : user_pref("surfcanyon.fractions", "0.0_0.0\r\n");
Deleted : user_pref("surfcanyon.last_checked_ts", "1267026589894");

cast 2:

File : C:\Users\Deti\AppData\Roaming\Mozilla\Firefox\Profiles\meroiczd.default\prefs.js

C:\Users\Deti\AppData\Roaming\Mozilla\Firefox\Profiles\meroiczd.default\user.js ... Deleted !

Deleted : user_pref("CT2475029..clientLogIsEnabled", false);
Deleted : user_pref("CT2475029..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...]
Deleted : user_pref("CT2475029..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...]
Deleted : user_pref("CT2475029.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
Deleted : user_pref("CT2475029.CT2481020.CommunityChanged", true);
Deleted : user_pref("CT2475029.CT2481024.CommunityChanged", true);
Deleted : user_pref("CT2475029.CT2481025.CommunityChanged", true);
Deleted : user_pref("CT2475029.CT2481029.CommunityChanged", true);
Deleted : user_pref("CT2475029.CT2481031.CommunityChanged", true);
Deleted : user_pref("CT2475029.CT2481032.CommunityChanged", true);
Deleted : user_pref("CT2475029.CT2481033.CommunityChanged", true);
Deleted : user_pref("CT2475029.CT2481034.CommunityChanged", true);
Deleted : user_pref("CT2475029.CT2481035.CommunityChanged", true);
Deleted : user_pref("CT2475029.CT2481037.CommunityChanged", true);
Deleted : user_pref("CT2475029.CTID", "ct2481032");
Deleted : user_pref("CT2475029.CommunitiesChangesLastCheckTime", "Mon Apr 18 2011 19:07:12 GMT+0200");
Deleted : user_pref("CT2475029.CommunityChanged", true);
Deleted : user_pref("CT2475029.CurrentServerDate", "18-4-2011");
Deleted : user_pref("CT2475029.DialogsAlignMode", "LTR");
Deleted : user_pref("CT2475029.DialogsGetterLastCheckTime", "Mon Apr 18 2011 05:48:44 GMT+0200");
Deleted : user_pref("CT2475029.DownloadDomainsCheckInterval", "168");
Deleted : user_pref("CT2475029.DownloadDomainsListLastCheckTime", "Mon Apr 18 2011 05:48:44 GMT+0200");
Deleted : user_pref("CT2475029.DownloadDomainsListLastServerUpdateTime", "1201069983");
Deleted : user_pref("CT2475029.DownloadReferralCookieData", "");
Deleted : user_pref("CT2475029.FeedPollDate128975107603475850", "Mon Apr 18 2011 19:14:15 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate129104903994210185", "Mon Apr 18 2011 19:14:14 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate129125588542653211", "Mon Apr 18 2011 19:14:15 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate129132307482029379", "Mon Apr 18 2011 05:48:46 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate129132307482029381", "Mon Apr 18 2011 05:48:46 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate129132307482029382", "Mon Apr 18 2011 05:48:46 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate129133095459686870", "Mon Apr 18 2011 05:48:46 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate129133095459686871", "Mon Apr 18 2011 05:48:46 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate129137415288118473", "Mon Apr 18 2011 19:14:14 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate129137415288118474", "Mon Apr 18 2011 19:14:15 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate129137436798437243", "Mon Apr 18 2011 19:14:15 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate129137436798437244", "Mon Apr 18 2011 19:14:15 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate129137436798437245", "Mon Apr 18 2011 19:14:15 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate129137437659687146", "Mon Apr 18 2011 05:48:45 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate129137437659687147", "Mon Apr 18 2011 05:48:45 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate129137437659687148", "Mon Apr 18 2011 05:48:45 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757377779301063", "Mon Apr 18 2011 18:13:55 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757377961554609", "Mon Apr 18 2011 18:13:53 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757377979947076", "Mon Apr 18 2011 18:13:55 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757378132259586", "Mon Apr 18 2011 18:13:53 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757378265651739", "Mon Apr 18 2011 18:13:55 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757378449145277", "Mon Apr 18 2011 18:13:52 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757378705873295", "Mon Apr 18 2011 18:13:55 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757378902522699", "Mon Apr 18 2011 18:13:53 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757378968484097", "Mon Apr 18 2011 18:13:56 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757379044202234", "Mon Apr 18 2011 18:13:55 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757379219112080", "Mon Apr 18 2011 18:13:53 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757379310186023", "Mon Apr 18 2011 18:13:54 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757379320546978", "Mon Apr 18 2011 18:13:55 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757379400531926", "Mon Apr 18 2011 18:13:56 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757379497083274", "Mon Apr 18 2011 18:13:57 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757379497148810", "Mon Apr 18 2011 18:13:57 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757379497279882", "Mon Apr 18 2011 18:13:57 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757379644150784", "Mon Apr 18 2011 18:13:53 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757379646262407", "Mon Apr 18 2011 18:13:53 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757379767858421", "Mon Apr 18 2011 18:13:57 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757379797989042", "Mon Apr 18 2011 05:48:49 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757379883299006", "Mon Apr 18 2011 18:13:55 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757380108070872", "Mon Apr 18 2011 18:13:54 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757380344955611", "Mon Apr 18 2011 18:13:54 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757380390189978", "Mon Apr 18 2011 18:13:53 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757380412472059", "Mon Apr 18 2011 18:13:55 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757380467866928", "Mon Apr 18 2011 18:13:53 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757380521772385", "Mon Apr 18 2011 18:13:54 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757380616362201", "Mon Apr 18 2011 18:13:54 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757380727291645", "Mon Apr 18 2011 18:13:54 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757380767393172", "Mon Apr 18 2011 05:48:50 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757380868375745", "Mon Apr 18 2011 16:46:56 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757381043554700", "Mon Apr 18 2011 18:13:53 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757381080219037", "Mon Apr 18 2011 18:13:55 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757381151343676", "Mon Apr 18 2011 18:13:56 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757381247526121", "Mon Apr 18 2011 18:13:52 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757381247591657", "Mon Apr 18 2011 18:13:52 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757381372042911", "Mon Apr 18 2011 18:13:52 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757381453742514", "Mon Apr 18 2011 18:13:54 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757381520490197", "Mon Apr 18 2011 18:13:56 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757381582880127", "Mon Apr 18 2011 18:13:52 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757381641974229", "Mon Apr 18 2011 18:13:56 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757381669771831", "Mon Apr 18 2011 18:13:53 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757381670861676", "Mon Apr 18 2011 18:13:57 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757381749396397", "Mon Apr 18 2011 18:13:56 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757381869347434", "Mon Apr 18 2011 18:13:56 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757381908324302", "Mon Apr 18 2011 18:13:54 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757381919420428", "Mon Apr 18 2011 18:13:57 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757381932420313", "Mon Apr 18 2011 18:13:56 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757381975368474", "Mon Apr 18 2011 18:13:54 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757381979169315", "Mon Apr 18 2011 18:13:53 GMT+0200");
Deleted : user_pref("CT2475029.FeedPollDate5609757381989950054", "Mon Apr 18 2011 18:13:56 GMT+0200");
Deleted : user_pref("CT2475029.FeedTTL128975107603475850", 40);
Deleted : user_pref("CT2475029.FeedTTL129104903994210185", 40);
Deleted : user_pref("CT2475029.FeedTTL129125588542653211", 40);
Deleted : user_pref("CT2475029.FeedTTL129132307482029379", 40);
Deleted : user_pref("CT2475029.FeedTTL129132307482029381", 40);
Deleted : user_pref("CT2475029.FeedTTL129132307482029382", 40);
Deleted : user_pref("CT2475029.FeedTTL129133095459686870", 40);
Deleted : user_pref("CT2475029.FeedTTL129133095459686871", 40);
Deleted : user_pref("CT2475029.FeedTTL129137415288118473", 40);
Deleted : user_pref("CT2475029.FeedTTL129137415288118474", 40);
Deleted : user_pref("CT2475029.FeedTTL129137436798437243", 40);
Deleted : user_pref("CT2475029.FeedTTL129137436798437244", 40);
Deleted : user_pref("CT2475029.FeedTTL129137436798437245", 40);
Deleted : user_pref("CT2475029.FeedTTL129137437659687146", 40);
Deleted : user_pref("CT2475029.FeedTTL129137437659687147", 40);
Deleted : user_pref("CT2475029.FeedTTL129137437659687148", 40);
Deleted : user_pref("CT2475029.FeedTTL5609757377779301063", 15);
Deleted : user_pref("CT2475029.FeedTTL5609757377979947076", 15);
Deleted : user_pref("CT2475029.FeedTTL5609757378132259586", 10);
Deleted : user_pref("CT2475029.FeedTTL5609757378265651739", 30);
Deleted : user_pref("CT2475029.FeedTTL5609757378705873295", 15);
Deleted : user_pref("CT2475029.FeedTTL5609757379310186023", 5);
Deleted : user_pref("CT2475029.FeedTTL5609757379320546978", 2);
Deleted : user_pref("CT2475029.FeedTTL5609757379400531926", 5);
Deleted : user_pref("CT2475029.FeedTTL5609757380108070872", 5);
Deleted : user_pref("CT2475029.FeedTTL5609757380412472059", 15);
Deleted : user_pref("CT2475029.FeedTTL5609757380467866928", 60);
Deleted : user_pref("CT2475029.FeedTTL5609757380521772385", 2);
Deleted : user_pref("CT2475029.FeedTTL5609757380727291645", 5);
Deleted : user_pref("CT2475029.FeedTTL5609757380767393172", 1440);
Deleted : user_pref("CT2475029.FeedTTL5609757381043554700", 2);
Deleted : user_pref("CT2475029.FeedTTL5609757381247526121", 15);
Deleted : user_pref("CT2475029.FeedTTL5609757381372042911", 60);
Deleted : user_pref("CT2475029.FeedTTL5609757381453742514", 15);
Deleted : user_pref("CT2475029.FeedTTL5609757381908324302", 30);
Deleted : user_pref("CT2475029.FeedTTL5609757381932420313", 10);
Deleted : user_pref("CT2475029.FeedTTL5609757381979169315", 15);
Deleted : user_pref("CT2475029.FirstServerDate", "18-4-2011");
Deleted : user_pref("CT2475029.FirstTime", true);
Deleted : user_pref("CT2475029.FirstTimeFF3", true);
Deleted : user_pref("CT2475029.FixPageNotFoundErrors", true);
Deleted : user_pref("CT2475029.GroupingLastCheckTime", "Mon Apr 18 2011 05:48:44 GMT+0200");
Deleted : user_pref("CT2475029.GroupingLastErrorCode", "");
Deleted : user_pref("CT2475029.GroupingLastResponse", true);
Deleted : user_pref("CT2475029.GroupingLastServerUpdateTime", "129469851600000000");
Deleted : user_pref("CT2475029.GroupingServerCheckInterval", 1440);
Deleted : user_pref("CT2475029.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
Deleted : user_pref("CT2475029.HasUserGlobalKeys", true);
Deleted : user_pref("CT2475029.Initialize", true);
Deleted : user_pref("CT2475029.InitializeCommonPrefs", true);
Deleted : user_pref("CT2475029.InstallationAndCookieDataSentCount", 3);
Deleted : user_pref("CT2475029.InstallationId", "MyAshampoo.exe");
Deleted : user_pref("CT2475029.InstallationType", "ConduitIntegration");
Deleted : user_pref("CT2475029.InstalledDate", "Mon Apr 18 2011 05:48:45 GMT+0200");
Deleted : user_pref("CT2475029.IsGrouping", true);
Deleted : user_pref("CT2475029.IsMulticommunity", true);
Deleted : user_pref("CT2475029.IsOpenThankYouPage", false);
Deleted : user_pref("CT2475029.IsOpenUninstallPage", true);
Deleted : user_pref("CT2475029.LanguagePackLastCheckTime", "Mon Apr 18 2011 05:48:46 GMT+0200");
Deleted : user_pref("CT2475029.LanguagePackReloadIntervalMM", 1440);
Deleted : user_pref("CT2475029.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...]
Deleted : user_pref("CT2475029.LastLogin_3.3.3.2", "Mon Apr 18 2011 17:46:53 GMT+0200");
Deleted : user_pref("CT2475029.LatestVersion", "3.3.3.2");
Deleted : user_pref("CT2475029.Locale", "en");
Deleted : user_pref("CT2475029.MCDetectTooltipHeight", "83");
Deleted : user_pref("CT2475029.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
Deleted : user_pref("CT2475029.MCDetectTooltipWidth", "295");
Deleted : user_pref("CT2475029.RadioIsPodcast", false);
Deleted : user_pref("CT2475029.RadioMediaID", "9962");
Deleted : user_pref("CT2475029.RadioMediaType", "Media Player");
Deleted : user_pref("CT2475029.RadioMenuSelectedID", "EBRadioMenu_CT24750299962");
Deleted : user_pref("CT2475029.RadioStationName", "California%20Rock");
Deleted : user_pref("CT2475029.RadioStationURL", "hxxp://feedlive.net/california.asx");
Deleted : user_pref("CT2475029.SavedHomepage", "hxxp://www.seznam.cz/");
Deleted : user_pref("CT2475029.SearchFromAddressBarIsInit", true);
Deleted : user_pref("CT2475029.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT247[...]
Deleted : user_pref("CT2475029.SearchInNewTabEnabled", true);
Deleted : user_pref("CT2475029.SearchInNewTabIntervalMM", 1440);
Deleted : user_pref("CT2475029.SearchInNewTabLastCheckTime", "Mon Apr 18 2011 05:48:45 GMT+0200");
Deleted : user_pref("CT2475029.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...]
Deleted : user_pref("CT2475029.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageServic[...]
Deleted : user_pref("CT2475029.ServiceMapLastCheckTime", "Mon Apr 18 2011 05:48:42 GMT+0200");
Deleted : user_pref("CT2475029.SettingsLastCheckTime", "Mon Apr 18 2011 05:48:43 GMT+0200");
Deleted : user_pref("CT2475029.SettingsLastUpdate", "1302500760");
Deleted : user_pref("CT2475029.ThirdPartyComponentsInterval", 504);
Deleted : user_pref("CT2475029.ThirdPartyComponentsLastCheck", "Mon Apr 18 2011 05:48:42 GMT+0200");
Deleted : user_pref("CT2475029.ThirdPartyComponentsLastUpdate", "1246786978");
Deleted : user_pref("CT2475029.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2475029");
Deleted : user_pref("CT2475029.UserID", "UN48172298052485907");
Deleted : user_pref("CT2475029.ValidationData_Toolbar", 2);
Deleted : user_pref("CT2475029.backendstorage.facebook_mode", "32");
Deleted : user_pref("CT2475029.backendstorage.facebook_user_locale", "656E");
Deleted : user_pref("CT2475029.ct2481032.DialogsAlignMode", "LTR");
Deleted : user_pref("CT2475029.ct2481032.FeedLastCount129137415284993440", 235);
Deleted : user_pref("CT2475029.ct2481032.FeedLastCount1470371090506316425", 1347);
Deleted : user_pref("CT2475029.ct2481032.GroupingInvalidateCache", false);
Deleted : user_pref("CT2475029.ct2481032.GroupingLastCheckTime", "Mon Apr 18 2011 17:48:46 GMT+0200");
Deleted : user_pref("CT2475029.ct2481032.GroupingLastErrorCode", "");
Deleted : user_pref("CT2475029.ct2481032.GroupingLastResponse", true);
Deleted : user_pref("CT2475029.ct2481032.GroupingLastServerUpdateTime", "129469851600000000");
Deleted : user_pref("CT2475029.ct2481032.InvalidateCache", false);
Deleted : user_pref("CT2475029.ct2481032.LanguagePackLastCheckTime", "Mon Apr 18 2011 05:48:48 GMT+0200");
Deleted : user_pref("CT2475029.ct2481032.Locale", "en");
Deleted : user_pref("CT2475029.ct2481032.RadioLastCheckTime", "Mon Apr 18 2011 05:48:47 GMT+0200");
Deleted : user_pref("CT2475029.ct2481032.RadioLastUpdateIPServer", "3");
Deleted : user_pref("CT2475029.ct2481032.RadioLastUpdateServer", "3");
Deleted : user_pref("CT2475029.ct2481032.SearchInNewTabLastCheckTime", "Mon Apr 18 2011 05:48:47 GMT+0200");
Deleted : user_pref("CT2475029.ct2481032.SettingsLastCheckTime", "Mon Apr 18 2011 18:20:08 GMT+0200");
Deleted : user_pref("CT2475029.ct2481032.SettingsLastUpdate", "1302500970");
Deleted : user_pref("CT2475029.ct2481032.ThirdPartyComponentsLastCheck", "Mon Apr 18 2011 05:48:45 GMT+0200");
Deleted : user_pref("CT2475029.ct2481032.ThirdPartyComponentsLastUpdate", "1246786978");
Deleted : user_pref("CT2475029.ct2481032.globalFirstTimeInfoLastCheckTime", "Mon Apr 18 2011 17:46:53 GMT+0200[...]
Deleted : user_pref("CT2475029.ct2481032.toolbarAppMetaDataLastCheckTime", "Mon Apr 18 2011 05:48:46 GMT+0200"[...]
Deleted : user_pref("CT2475029.ct2481032.toolbarContextMenuLastCheckTime", "Mon Apr 18 2011 05:48:48 GMT+0200"[...]
Deleted : user_pref("CT2475029.generalConfigFromLogin", "{\"SocialDomains\":\"social.conduit.com;apps.conduit.[...]
Deleted : user_pref("CT2475029.globalFirstTimeInfoLastCheckTime", "Mon Apr 18 2011 05:48:46 GMT+0200");
Deleted : user_pref("CT2475029.isAppTrackingManagerOn", true);
Deleted : user_pref("CT2475029.myStuffEnabled", true);
Deleted : user_pref("CT2475029.myStuffPublihserMinWidth", 400);
Deleted : user_pref("CT2475029.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...]
Deleted : user_pref("CT2475029.myStuffServiceIntervalMM", 1440);
Deleted : user_pref("CT2475029.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...]
Deleted : user_pref("CT2475029.oldAppsList", "200,129058858239812813,129058858240125318,129469743936644511,129[...]
Deleted : user_pref("CT2475029.testingCtid", "");
Deleted : user_pref("CT2475029.toolbarAppMetaDataLastCheckTime", "Mon Apr 18 2011 05:48:44 GMT+0200");
Deleted : user_pref("CT2475029.toolbarContextMenuLastCheckTime", "Mon Apr 18 2011 05:48:47 GMT+0200");
Deleted : user_pref("CT2475029.usagesFlag", 2);
Deleted : user_pref("CT2786678..clientLogIsEnabled", false);
Deleted : user_pref("CT2786678..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...]
Deleted : user_pref("CT2786678..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...]
Deleted : user_pref("CT2786678.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
Deleted : user_pref("CT2786678.CTID", "CT2786678");
Deleted : user_pref("CT2786678.CurrentServerDate", "4-5-2011");
Deleted : user_pref("CT2786678.DialogsAlignMode", "LTR");
Deleted : user_pref("CT2786678.DialogsGetterLastCheckTime", "Wed May 04 2011 11:56:48 GMT+0200");
Deleted : user_pref("CT2786678.DownloadReferralCookieData", "");
Deleted : user_pref("CT2786678.EMailNotifierPollDate", "Wed May 04 2011 13:12:02 GMT+0200");
Deleted : user_pref("CT2786678.FeedLastCount5690698542593514850", 157);
Deleted : user_pref("CT2786678.FeedPollDate129301619375443753", "Wed May 04 2011 13:12:03 GMT+0200");
Deleted : user_pref("CT2786678.FeedPollDate129301619375443759", "Wed May 04 2011 13:12:03 GMT+0200");
Deleted : user_pref("CT2786678.FeedPollDate129301619375444699", "Wed May 04 2011 13:12:02 GMT+0200");
Deleted : user_pref("CT2786678.FeedPollDate129301619375444705", "Wed May 04 2011 13:12:02 GMT+0200");
Deleted : user_pref("CT2786678.FeedPollDate129301619375444711", "Wed May 04 2011 13:12:02 GMT+0200");
Deleted : user_pref("CT2786678.FeedPollDate129301619375444717", "Wed May 04 2011 13:12:03 GMT+0200");
Deleted : user_pref("CT2786678.FeedPollDate129301619375444723", "Wed May 04 2011 13:12:03 GMT+0200");
Deleted : user_pref("CT2786678.FeedPollDate129301619375444729", "Wed May 04 2011 13:12:03 GMT+0200");
Deleted : user_pref("CT2786678.FeedPollDate129301619375444735", "Wed May 04 2011 13:12:03 GMT+0200");
Deleted : user_pref("CT2786678.FeedPollDate129301619375444741", "Wed May 04 2011 13:12:03 GMT+0200");
Deleted : user_pref("CT2786678.FeedPollDate129301619375444747", "Wed May 04 2011 13:12:03 GMT+0200");
Deleted : user_pref("CT2786678.FeedTTL129301619375444699", 10);
Deleted : user_pref("CT2786678.FeedTTL129301619375444723", 15);
Deleted : user_pref("CT2786678.FeedTTL129301619375444735", 5);
Deleted : user_pref("CT2786678.FeedTTL129301619375444747", 5);
Deleted : user_pref("CT2786678.FirstServerDate", "4-5-2011");
Deleted : user_pref("CT2786678.FirstTime", true);
Deleted : user_pref("CT2786678.FirstTimeFF3", true);
Deleted : user_pref("CT2786678.FixPageNotFoundErrors", false);
Deleted : user_pref("CT2786678.GroupingServerCheckInterval", 1440);
Deleted : user_pref("CT2786678.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
Deleted : user_pref("CT2786678.HasUserGlobalKeys", true);
Deleted : user_pref("CT2786678.Initialize", true);
Deleted : user_pref("CT2786678.InitializeCommonPrefs", true);
Deleted : user_pref("CT2786678.InstallationAndCookieDataSentCount", 1);
Deleted : user_pref("CT2786678.InstallationType", "UnknownIntegration");
Deleted : user_pref("CT2786678.InstalledDate", "Wed May 04 2011 11:56:45 GMT+0200");
Deleted : user_pref("CT2786678.IsGrouping", false);
Deleted : user_pref("CT2786678.IsMulticommunity", false);
Deleted : user_pref("CT2786678.IsOpenThankYouPage", true);
Deleted : user_pref("CT2786678.IsOpenUninstallPage", false);
Deleted : user_pref("CT2786678.LanguagePackLastCheckTime", "Wed May 04 2011 11:56:50 GMT+0200");
Deleted : user_pref("CT2786678.LanguagePackReloadIntervalMM", 1440);
Deleted : user_pref("CT2786678.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...]
Deleted : user_pref("CT2786678.LastLogin_3.3.3.2", "Wed May 04 2011 11:56:48 GMT+0200");
Deleted : user_pref("CT2786678.LatestVersion", "3.3.3.2");
Deleted : user_pref("CT2786678.Locale", "en");
Deleted : user_pref("CT2786678.MCDetectTooltipHeight", "83");
Deleted : user_pref("CT2786678.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
Deleted : user_pref("CT2786678.MCDetectTooltipWidth", "295");
Deleted : user_pref("CT2786678.SearchFromAddressBarIsInit", true);
Deleted : user_pref("CT2786678.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT278[...]
Deleted : user_pref("CT2786678.SearchInNewTabEnabled", true);
Deleted : user_pref("CT2786678.SearchInNewTabIntervalMM", 1440);
Deleted : user_pref("CT2786678.SearchInNewTabLastCheckTime", "Wed May 04 2011 11:56:50 GMT+0200");
Deleted : user_pref("CT2786678.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...]
Deleted : user_pref("CT2786678.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageServic[...]
Deleted : user_pref("CT2786678.SearchProtectorToolbarDisabled", true);
Deleted : user_pref("CT2786678.ServiceMapLastCheckTime", "Wed May 04 2011 11:56:44 GMT+0200");
Deleted : user_pref("CT2786678.SettingsLastCheckTime", "Wed May 04 2011 11:56:45 GMT+0200");
Deleted : user_pref("CT2786678.SettingsLastUpdate", "1304004054");
Deleted : user_pref("CT2786678.ThirdPartyComponentsInterval", 504);
Deleted : user_pref("CT2786678.ThirdPartyComponentsLastCheck", "Wed May 04 2011 11:56:44 GMT+0200");
Deleted : user_pref("CT2786678.ThirdPartyComponentsLastUpdate", "1246786978");
Deleted : user_pref("CT2786678.ToolbarDisabled", true);
Deleted : user_pref("CT2786678.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2786678");
Deleted : user_pref("CT2786678.UserID", "UN84681799557815150");
Deleted : user_pref("CT2786678.WeatherNetwork", "");
Deleted : user_pref("CT2786678.WeatherPollDate", "Wed May 04 2011 12:57:31 GMT+0200");
Deleted : user_pref("CT2786678.WeatherUnit", "C");
Deleted : user_pref("CT2786678.alertChannelId", "1178763");
Deleted : user_pref("CT2786678.generalConfigFromLogin", "{\"SocialDomains\":\"social.conduit.com;apps.conduit.[...]
Deleted : user_pref("CT2786678.globalFirstTimeInfoLastCheckTime", "Wed May 04 2011 11:56:48 GMT+0200");
Deleted : user_pref("CT2786678.isAppTrackingManagerOn", true);
Deleted : user_pref("CT2786678.myStuffEnabled", true);
Deleted : user_pref("CT2786678.myStuffPublihserMinWidth", 400);
Deleted : user_pref("CT2786678.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...]
Deleted : user_pref("CT2786678.myStuffServiceIntervalMM", 1440);
Deleted : user_pref("CT2786678.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...]
Deleted : user_pref("CT2786678.testingCtid", "");
Deleted : user_pref("CT2786678.toolbarAppMetaDataLastCheckTime", "Wed May 04 2011 11:56:45 GMT+0200");
Deleted : user_pref("CT2786678.toolbarContextMenuLastCheckTime", "Wed May 04 2011 11:56:52 GMT+0200");
Deleted : user_pref("CT2786678.usagesFlag", 2);
Deleted : user_pref("CommunityToolbar.CantToolbarBeEngineOwner", "CT2786678");
Deleted : user_pref("CommunityToolbar.ConduitHomepagesList", "hxxp://search.conduit.com/?ctid=CT3072253&Search[...]
Deleted : user_pref("CommunityToolbar.ConduitSearchList", "uTorrentControl2 Customized Web Search");
Deleted : user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit.com/root/CT3072253/CT3072253[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/1178763/1174448/CZ", "\"0\"[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/868510/864310/CZ", "\"0\"")[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/874426/870225/CZ", "\"0\"")[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/874430/870228/CZ", "\"0\"")[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/874431/870229/CZ", "\"0\"")[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/874435/870233/CZ", "\"0\"")[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/874437/870235/CZ", "\"0\"")[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/874438/870236/CZ", "\"0\"")[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/874439/870237/CZ", "\"0\"")[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/874440/870238/CZ", "\"0\"")[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/874441/870239/CZ", "\"0\"")[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/874443/870241/CZ", "\"0\"")[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/909619/905414/CZ", "\"0\"")[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2475029", [...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2786678", [...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT3072253", [...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=ct2481032", [...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&lo[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&loc[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&lo[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&local[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.engine.conduit-services.com/DLG.pkg?ver=3.3.3[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.12[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.3.[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2475029",[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2786678",[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT3072253",[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=0", "63[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=3/13/20[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT2475029/CT2475029[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT2786678/CT2786678[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/ct2481032/CT2475029[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Cornflower/equaliz[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Cornflower/minimiz[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Cornflower/play.gi[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Cornflower/stop.gi[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Cornflower/vol.gif[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=en", "\"67e[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/1344951.xml", "\"5d2fad04d3dc2f798c52[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/16887175.xml", "\"458919548cbc209eb24[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/17151925.xml", "\"f7ed0691e317fce1000[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/20536157.xml", "\"c88763624e3f50e07b3[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/30261067.xml", "\"8e67c43247dd81e23b6[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/34655603.xml", "\"10d12d5dd9a3673efe1[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/428333.xml", "\"236a4e2818ca19c41e1e8[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/759251.xml", "\"4db90f79a7858cb1c9735[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/816653.xml", "\"9e940d2307baea71308d5[...]
Deleted : user_pref("CommunityToolbar.EngineOwner", "CT2475029");
Deleted : user_pref("CommunityToolbar.EngineOwnerGuid", "{a1e75a0e-4397-4ba8-bb50-e19fb66890f4}");
Deleted : user_pref("CommunityToolbar.EngineOwnerToolbarId", "myashampoo");
Deleted : user_pref("CommunityToolbar.IsEngineShown", false);
Deleted : user_pref("CommunityToolbar.IsMyStuffImportedToEngine", true);
Deleted : user_pref("CommunityToolbar.LatestLibsPath", "file:///C:\\Users\\hadza\\AppData\\Roaming\\Mozilla\\F[...]
Deleted : user_pref("CommunityToolbar.LatestToolbarVersionInstalled", "3.12.0.8");
Deleted : user_pref("CommunityToolbar.OriginalEngineOwner", "CT2475029");
Deleted : user_pref("CommunityToolbar.OriginalEngineOwnerGuid", "{a1e75a0e-4397-4ba8-bb50-e19fb66890f4}");
Deleted : user_pref("CommunityToolbar.OriginalEngineOwnerToolbarId", "myashampoo");
Deleted : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "hxxp://search.yahoo.com/search?fr=greent[...]
Deleted : user_pref("CommunityToolbar.ToolbarsList", "ConduitEngine,CT2475029,CT2786678");
Deleted : user_pref("CommunityToolbar.ToolbarsList2", "CT2475029,CT2786678");
Deleted : user_pref("CommunityToolbar.ToolbarsList4", "");
Deleted : user_pref("CommunityToolbar.alert.alertDialogsGetterLastCheckTime", "Tue May 10 2011 13:26:27 GMT+02[...]
Deleted : user_pref("CommunityToolbar.alert.alertInfoInterval", 1440);
Deleted : user_pref("CommunityToolbar.alert.alertInfoLastCheckTime", "Mon Jun 13 2011 18:04:20 GMT+0200");
Deleted : user_pref("CommunityToolbar.alert.clientsServerUrl", "hxxp://alert.client.conduit.com");
Deleted : user_pref("CommunityToolbar.alert.firstTimeAlertShown", true);
Deleted : user_pref("CommunityToolbar.alert.locale", "en");
Deleted : user_pref("CommunityToolbar.alert.loginIntervalMin", 1440);
Deleted : user_pref("CommunityToolbar.alert.loginLastCheckTime", "Tue Jun 28 2011 18:27:04 GMT+0200");
Deleted : user_pref("CommunityToolbar.alert.loginLastUpdateTime", "1305622559");
Deleted : user_pref("CommunityToolbar.alert.messageShowTimeSec", 20);
Deleted : user_pref("CommunityToolbar.alert.servicesServerUrl", "hxxp://alert.services.conduit.com");
Deleted : user_pref("CommunityToolbar.alert.showTrayIcon", false);
Deleted : user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300);
Deleted : user_pref("CommunityToolbar.alert.userId", "65afc836-d55a-4188-a134-99e3977f093f");
Deleted : user_pref("CommunityToolbar.facebook.settingsLastCheckTime", "Wed May 04 2011 11:56:57 GMT+0200");
Deleted : user_pref("CommunityToolbar.globalUserId", "a89a0391-9088-4447-b946-dd057204e28b");
Deleted : user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true);
Deleted : user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true);
Deleted : user_pref("CommunityToolbar.keywordURLSelectedCTID", "CT3072253");
Deleted : user_pref("CommunityToolbar.notifications.alertDialogsGetterLastCheckTime", "Fri May 18 2012 10:08:3[...]
Deleted : user_pref("CommunityToolbar.notifications.alertEnabled", false);
Deleted : user_pref("CommunityToolbar.notifications.clientsServerUrl", "hxxp://alert.client.conduit.com");
Deleted : user_pref("CommunityToolbar.notifications.locale", "en");
Deleted : user_pref("CommunityToolbar.notifications.loginIntervalMin", 1440);
Deleted : user_pref("CommunityToolbar.notifications.loginLastCheckTime", "Fri May 18 2012 10:08:29 GMT+0200");
Deleted : user_pref("CommunityToolbar.notifications.loginLastUpdateTime", "1313487611");
Deleted : user_pref("CommunityToolbar.notifications.messageShowTimeSec", 20);
Deleted : user_pref("CommunityToolbar.notifications.servicesServerUrl", "hxxp://alert.services.conduit.com");
Deleted : user_pref("CommunityToolbar.notifications.showTrayIcon", false);
Deleted : user_pref("CommunityToolbar.notifications.userCloseIntervalMin", 300);
Deleted : user_pref("CommunityToolbar.notifications.userId", "135c9c40-6b76-4bda-8e81-98a3ea654487");
Deleted : user_pref("CommunityToolbar.originalHomepage", "hxxp://www.seznam.cz/");
Deleted : user_pref("CommunityToolbar.originalSearchEngine", "Google");
Deleted : user_pref("CommunityToolbar.twitter.user_1344951.LastCheckTime", "Mon Apr 18 2011 16:47:53 GMT+0200"[...]
Deleted : user_pref("CommunityToolbar.twitter.user_16887175.LastCheckTime", "Mon Apr 18 2011 16:47:53 GMT+0200[...]
Deleted : user_pref("CommunityToolbar.twitter.user_17151925.LastCheckTime", "Mon Apr 18 2011 16:47:53 GMT+0200[...]
Deleted : user_pref("CommunityToolbar.twitter.user_20536157.LastCheckTime", "Mon Apr 18 2011 16:47:53 GMT+0200[...]
Deleted : user_pref("CommunityToolbar.twitter.user_30261067.LastCheckTime", "Mon Apr 18 2011 16:47:53 GMT+0200[...]
Deleted : user_pref("CommunityToolbar.twitter.user_34655603.LastCheckTime", "Mon Apr 18 2011 16:47:53 GMT+0200[...]
Deleted : user_pref("CommunityToolbar.twitter.user_428333.LastCheckTime", "Mon Apr 18 2011 16:47:53 GMT+0200")[...]
Deleted : user_pref("CommunityToolbar.twitter.user_759251.LastCheckTime", "Mon Apr 18 2011 05:48:49 GMT+0200")[...]
Deleted : user_pref("CommunityToolbar.twitter.user_816653.LastCheckTime", "Mon Apr 18 2011 16:47:53 GMT+0200")[...]
Deleted : user_pref("ConduitEngine.AppTrackingLastCheckTime", "Fri May 13 2011 07:10:29 GMT+0200");
Deleted : user_pref("ConduitEngine.DialogsGetterLastCheckTime", "Mon Apr 18 2011 05:48:44 GMT+0200");
Deleted : user_pref("ConduitEngine.FirstServerDate", "04/18/2011 06");
Deleted : user_pref("ConduitEngine.FirstTime", true);
Deleted : user_pref("ConduitEngine.FirstTimeFF3", true);
Deleted : user_pref("ConduitEngine.HasUserGlobalKeys", true);
Deleted : user_pref("ConduitEngine.HideEngineAfterRestart", true);
Deleted : user_pref("ConduitEngine.Initialize", true);
Deleted : user_pref("ConduitEngine.InitializeCommonPrefs", true);
Deleted : user_pref("ConduitEngine.InstalledDate", "Mon Apr 18 2011 05:48:44 GMT+0200");
Deleted : user_pref("ConduitEngine.IsMulticommunity", false);
Deleted : user_pref("ConduitEngine.IsOpenThankYouPage", false);
Deleted : user_pref("ConduitEngine.IsOpenUninstallPage", true);
Deleted : user_pref("ConduitEngine.LanguagePackLastCheckTime", "Mon Apr 18 2011 05:48:44 GMT+0200");
Deleted : user_pref("ConduitEngine.LastLogin_3.3.3.2", "Mon Apr 18 2011 16:46:53 GMT+0200");
Deleted : user_pref("ConduitEngine.PublisherContainerWidth", 0);
Deleted : user_pref("ConduitEngine.SearchFromAddressBarIsInit", true);
Deleted : user_pref("ConduitEngine.SettingsLastCheckTime", "Mon Apr 18 2011 16:46:53 GMT+0200");
Deleted : user_pref("ConduitEngine.UserID", "UN77747500106429591");
Deleted : user_pref("ConduitEngine.engineLocale", "cs");
Deleted : user_pref("ConduitEngine.enngineContextMenuLastCheckTime", "Mon Apr 18 2011 05:48:43 GMT+0200");
Deleted : user_pref("ConduitEngine.globalFirstTimeInfoLastCheckTime", "Mon Apr 18 2011 17:46:55 GMT+0200");
Deleted : user_pref("ConduitEngine.initDone", true);
Deleted : user_pref("ConduitEngine.isAppTrackingManagerOn", true);
Deleted : user_pref("browser.search.defaultthis.engineName", "uTorrentControl2 Customized Web Search");
Deleted : user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3072253&Sea[...]
Deleted : user_pref("extensions.engine@conduit.com.install-event-fired", true);
Deleted : user_pref("extensions.ffxtlbr@Facemoods.com.install-event-fired", true);
Deleted : user_pref("extensions.snipit.chromeURL", "hxxp://toolbar.ask.com/toolbarv/askRedirect?o=10615&gct=&g[...]
Deleted : user_pref("extensions.toolbar@ask.com.install-event-fired", true);
Deleted : user_pref("keyword.URL", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2786678&q=");
Deleted : user_pref("surfcanyon.ac", true);
Deleted : user_pref("surfcanyon.fractions", "0.0_0.0\r\n");
Deleted : user_pref("surfcanyon.last_checked_ts", "1267026589894");

-\\ Google Chrome v25.0.1364.97

File : C:\Users\hadza\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] File is clean.

File : C:\Users\Deti\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] File is clean.

-\\ Opera v [Unable to get version]

File : C:\Users\hadza\AppData\Roaming\Opera\Opera\operaprefs.ini

Deleted : application/x-winampx-1.0.0.1=6,,C:\Program Files (x86)\Mozilla Firefox\plugins\npwachk.dll,Winamp A[...]
Deleted : application/x-winampx-1.0.0.1=,0

*************************

AdwCleaner[R1].txt - [83965 octets] - [24/02/2013 13:44:32]
AdwCleaner[S1].txt - [85457 octets] - [25/02/2013 15:07:21]

########## EOF - C:\AdwCleaner[S1].txt - [85518 octets] ##########

Dejte nový log RSIT.

Logfile of random's system information tool 1.08 (written by random/random)
Run by hadza at 2013-02-25 17:23:30
Microsoft Windows 7 Ultimate Service Pack 1
System drive C: has 17 GB (7%) free of 254 GB
Total RAM: 4094 MB (55% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:23:38, on 25.2.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16464)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Windows Sidebar\sidebar.exe
C:\Program Files\DAEMON Tools Pro\DTAgent.exe
C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe
C:\Program Files\DAEMON Tools Pro\DTShellHlp.exe
C:\Program Files (x86)\Google\Drive\googledrivesync.exe
C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe
C:\Windows\twain_32\Samsung\SCX3200\Scan2Pc.exe
C:\ProgramData\SUS\SUS.exe
C:\Program Files (x86)\Google\Drive\googledrivesync.exe
C:\Program Files\trend micro\hadza.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - (no file)
R3 - URLSearchHook: (no name) - {687578b9-7132-4a7a-80e4-30ee31099e03} - (no file)
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Social Extras Plugin - {FF4E1D1D-705B-4379-AB33-22D98C1ABF55} - C:\Program Files (x86)\SocialExtras\socialx.dll
O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\Windows\RaidTool\xInsIDE.exe
O4 - HKLM\..\Run: [3200 Scan2PC] "C:\Windows\twain_32\Samsung\SCX3200\Scan2Pc.exe"
O4 - HKLM\..\Run: [SUS Start] C:\ProgramData\SUS\SUS.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKCU\..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [uTorrent] "C:\Program Files (x86)\uTorrent\uTorrent.exe" /MINIMIZED
O4 - HKCU\..\Run: [DAEMON Tools Pro Agent] "C:\Program Files\DAEMON Tools Pro\DTAgent.exe" -autorun
O4 - HKCU\..\Run: [KiesPDLR] C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
O4 - HKCU\..\Run: [Sony PC Companion] "C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe" /Background
O4 - HKCU\..\Run: [GoogleDriveSync] "C:\Program Files (x86)\Google\Drive\googledrivesync.exe" /autostart
O4 - HKCU\..\Run: [Facebook Update] "C:\Users\hadza\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Users\hadza\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra 'Tools' menuitem: @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: Nostalgia Casino - @ú° €ó° °ó°  ó° ó° Đů° ŕů° đř° @
m`
m°ř° đm m  m° mŔ m€ mpů° Pů° `ů° €ů° đm - (no file) (HKCU)
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Advanced SystemCare Service (AdvancedSystemCareService) - IObit - C:\Program Files (x86)\IObit\Advanced SystemCare 4\ASCService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: KMService - Unknown owner - C:\Windows\system32\srvany.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Internet Pass-Through Service (PassThru Service) - Unknown owner - C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: RealNetworks Downloader Resolver Service - Unknown owner - C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Sony PC Companion - Avanquest Software - C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Program Files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesService64.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 11051 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
atieclxx
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\IObit\Advanced SystemCare 4\ASCService.exe"
"C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe"
C:\Windows\SysWOW64\PnkBstrA.exe
"C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe"
"C:\Program Files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesService64.exe"
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
WLIDSvcM.exe 1908
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
"C:\Program Files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesApp64.exe" /TUStart /pid:1864
C:\Windows\Explorer.EXE
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe"
"C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
"C:\Program Files (x86)\Windows Sidebar\sidebar.exe" /autoRun
"C:\Program Files\DAEMON Tools Pro\DTAgent.exe" -autorun
"C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe"
"C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe" /Background
"C:\Program Files\DAEMON Tools Pro\DTShellHlp.exe"
"C:\Program Files (x86)\Google\Drive\googledrivesync.exe" /autostart
"C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe"
"C:\Windows\twain_32\Samsung\SCX3200\Scan2Pc.exe"
"C:\ProgramData\SUS\SUS.exe"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM" PriorityLow
"C:\Program Files (x86)\Google\Drive\googledrivesync.exe" /autostart
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
C:\Windows\system32\svchost.exe -k WindowsMobile
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe8_ Global\UsGthrCtrlFltPipeMssGthrPipe8 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 508 512 520 65536 516
"C:\Users\hadza\Downloads\RSITx64 (1).exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-3842774712-1057022947-2739308594-1001Core.job
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-3842774712-1057022947-2739308594-1001UA.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore1ce0da354c2a94a.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3842774712-1057022947-2739308594-1001Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3842774712-1057022947-2739308594-1001UA.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3842774712-1057022947-2739308594-1004Core1ce03aba9d974e5.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3842774712-1057022947-2739308594-1004UA1ce03abb6cfcb2e.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2012-08-16 6670496]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2012-11-15 537576]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 532336]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2010-12-21 689040]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2012-11-15 193512]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23 60568]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealNetworks Download and Record Plugin for Internet Explorer - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll [2012-11-29 539888]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2012-08-16 4171424]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre6\bin\ssv.dll [2012-03-12 325408]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 403840]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2010-12-21 561552]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2012-03-12 42272]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FF4E1D1D-705B-4379-AB33-22D98C1ABF55}]
Social Extras Plugin - C:\Program Files (x86)\SocialExtras\socialx.dll [2011-11-29 116056]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2011-08-16 12673128]
"CDAServer"=C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [2012-02-20 456704]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2012-11-26 6325936]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files (x86)\Windows Sidebar\sidebar.exe [2010-11-21 1174016]
"uTorrent"=C:\Program Files (x86)\uTorrent\uTorrent.exe [2012-12-12 969104]
"DAEMON Tools Pro Agent"=C:\Program Files\DAEMON Tools Pro\DTAgent.exe [2011-03-17 842048]
"KiesPDLR"=C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [2012-05-21 21416]
"Sony PC Companion"=C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe [2013-01-07 446648]
"GoogleDriveSync"=C:\Program Files (x86)\Google\Drive\googledrivesync.exe [2012-12-17 16328976]
"Facebook Update"=C:\Users\hadza\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-02-16 138096]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"JMB36X IDE Setup"=C:\Windows\RaidTool\xInsIDE.exe [2010-09-07 43608]
"3200 Scan2PC"=C:\Windows\twain_32\Samsung\SCX3200\Scan2Pc.exe [2010-05-18 1989120]
"SUS Start"=C:\ProgramData\SUS\SUS.exe [2012-12-14 2189824]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2012-12-19 642808]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Adobe Gamma Loader.lnk - C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2012-08-16 6670496]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2012-08-16 4171424]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
""=0
"LogonHoursAction"=2
"DontDisplayLogonHoursWarnings"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
""=

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
"DisallowRun"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"C:\Program Files (x86)\FlashFXP\FlashFXP.exe"="C:\Program Files (x86)\FlashFXP\FlashFXP.exe:*:Enabled:FlashFXP v3"

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2013-02-25 15:07:21 ----A---- C:\AdwCleaner[S1].txt
2013-02-24 13:44:32 ----A---- C:\AdwCleaner[R1].txt
2013-02-23 16:20:28 ----D---- C:\rsit
2013-02-23 16:20:28 ----D---- C:\Program Files\trend micro
2013-02-19 17:47:31 ----A---- C:\Windows\SYSWOW64\PnkBstrB.exe
2013-02-19 17:47:19 ----A---- C:\Windows\SYSWOW64\PnkBstrA.exe
2013-02-19 17:46:35 ----D---- C:\ProgramData\Orbit
2013-02-19 16:18:29 ----D---- C:\Program Files (x86)\Far Cry 3
2013-02-19 15:41:10 ----D---- C:\Program Files (x86)\Ubisoft
2013-02-18 15:12:49 ----D---- C:\Program Files (x86)\Dead Space 3
2013-02-14 11:22:45 ----D---- C:\Program Files (x86)\Rockstar Games
2013-02-14 10:49:17 ----A---- C:\Windows\system32\wrap_oal.dll
2013-02-14 10:49:16 ----A---- C:\Windows\system32\OpenAL32.dll
2013-02-14 10:49:15 ----D---- C:\Program Files (x86)\OpenAL
2013-02-14 10:49:15 ----A---- C:\Windows\SYSWOW64\wrap_oal.dll
2013-02-14 10:49:14 ----RA---- C:\Windows\SYSWOW64\tmp1DD0.tmp
2013-02-14 10:49:14 ----A---- C:\Windows\SYSWOW64\OpenAL32.dll
2013-02-13 21:18:31 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2013-02-13 21:18:31 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2013-02-13 21:18:31 ----A---- C:\Windows\system32\mshtmled.dll
2013-02-13 21:18:30 ----A---- C:\Windows\SYSWOW64\url.dll
2013-02-13 21:18:30 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2013-02-13 21:18:30 ----A---- C:\Windows\SYSWOW64\ieui.dll
2013-02-13 21:18:30 ----A---- C:\Windows\system32\ieUnatt.exe
2013-02-13 21:18:30 ----A---- C:\Windows\system32\ieui.dll
2013-02-13 21:18:29 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2013-02-13 21:18:29 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2013-02-13 21:18:29 ----A---- C:\Windows\system32\urlmon.dll
2013-02-13 21:18:29 ----A---- C:\Windows\system32\url.dll
2013-02-13 21:18:29 ----A---- C:\Windows\system32\msfeeds.dll
2013-02-13 21:18:29 ----A---- C:\Windows\system32\jscript9.dll
2013-02-13 21:18:28 ----A---- C:\Windows\SYSWOW64\wininet.dll
2013-02-13 21:18:27 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2013-02-13 21:18:27 ----A---- C:\Windows\SYSWOW64\jscript.dll
2013-02-13 21:18:27 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2013-02-13 21:18:27 ----A---- C:\Windows\system32\wininet.dll
2013-02-13 21:18:27 ----A---- C:\Windows\system32\vbscript.dll
2013-02-13 21:18:27 ----A---- C:\Windows\system32\jsproxy.dll
2013-02-13 21:18:27 ----A---- C:\Windows\system32\jscript.dll
2013-02-13 21:18:27 ----A---- C:\Windows\system32\iertutil.dll
2013-02-13 21:18:26 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2013-02-13 21:18:26 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2013-02-13 21:18:24 ----A---- C:\Windows\system32\mshtml.dll
2013-02-13 21:18:23 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2013-02-13 21:18:23 ----A---- C:\Windows\system32\ieframe.dll
2013-02-13 09:14:11 ----A---- C:\Windows\system32\ntoskrnl.exe
2013-02-13 09:14:10 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2013-02-13 09:14:10 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2013-02-13 09:14:03 ----A---- C:\Windows\system32\win32k.sys
2013-02-13 09:14:02 ----A---- C:\Windows\SYSWOW64\wow32.dll
2013-02-13 09:14:02 ----A---- C:\Windows\SYSWOW64\setup16.exe
2013-02-13 09:14:02 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2013-02-13 09:14:02 ----A---- C:\Windows\SYSWOW64\instnm.exe
2013-02-13 09:14:02 ----A---- C:\Windows\system32\winsrv.dll
2013-02-13 09:14:01 ----A---- C:\Windows\SYSWOW64\user.exe
2013-02-13 09:14:00 ----A---- C:\Windows\system32\drivers\tcpip.sys
2013-02-13 09:14:00 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS
2013-02-11 15:58:27 ----D---- C:\ProgramData\RELOADED
2013-02-11 15:26:31 ----D---- C:\Program Files (x86)\The Walkin Dead Episode 1&2 CZ
2013-02-06 08:10:40 ----D---- C:\Program Files (x86)\Mozilla Firefox
2013-02-01 17:35:21 ----D---- C:\Program Files (x86)\Google

======List of files/folders modified in the last 1 months======

2013-02-25 17:23:38 ----D---- C:\Windows\Prefetch
2013-02-25 17:23:36 ----D---- C:\Windows\Temp
2013-02-25 17:21:18 ----D---- C:\Users\hadza\AppData\Roaming\uTorrent
2013-02-25 17:08:42 ----D---- C:\Users\hadza\AppData\Roaming\vlc
2013-02-25 16:04:24 ----D---- C:\Windows\system32\config
2013-02-25 15:12:01 ----D---- C:\Windows\system32\Tasks
2013-02-25 15:09:36 ----D---- C:\Windows
2013-02-25 15:07:28 ----RD---- C:\Program Files (x86)
2013-02-25 15:07:28 ----HD---- C:\ProgramData
2013-02-25 13:51:34 ----D---- C:\Users\hadza\AppData\Roaming\Winamp
2013-02-25 13:49:16 ----D---- C:\Windows\System32
2013-02-25 13:49:16 ----D---- C:\Windows\inf
2013-02-25 13:49:16 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-02-24 19:31:28 ----SHD---- C:\System Volume Information
2013-02-24 13:29:13 ----D---- C:\Users\hadza\AppData\Roaming\DAEMON Tools Pro
2013-02-23 16:20:28 ----RD---- C:\Program Files
2013-02-23 15:59:04 ----D---- C:\ProgramData\SUS
2013-02-23 11:07:08 ----SHD---- C:\Windows\Installer
2013-02-23 11:07:08 ----SHD---- C:\Config.Msi
2013-02-23 11:06:50 ----D---- C:\Windows\SysWOW64
2013-02-22 11:04:35 ----D---- C:\Windows\system32\NDF
2013-02-19 17:47:20 ----D---- C:\Windows\system32\LogFiles
2013-02-18 07:43:59 ----D---- C:\Windows\Tasks
2013-02-15 07:23:56 ----D---- C:\Windows\system32\catroot2
2013-02-14 13:53:09 ----D---- C:\Windows\winsxs
2013-02-14 13:53:06 ----D---- C:\Users\hadza\AppData\Roaming\DAEMON Tools Lite
2013-02-14 13:52:58 ----D---- C:\Users\hadza\AppData\Roaming\TS3Client
2013-02-14 13:52:58 ----D---- C:\Users\hadza\AppData\Roaming\Skype
2013-02-14 13:50:54 ----D---- C:\Windows\Panther
2013-02-14 13:50:54 ----D---- C:\Windows\ModemLogs
2013-02-14 13:50:53 ----D---- C:\Windows\Logs
2013-02-14 13:49:24 ----D---- C:\Program Files (x86)\Driver-Soft
2013-02-14 13:49:02 ----D---- C:\Program Files\VideoLAN
2013-02-14 13:45:00 ----D---- C:\Program Files\CCleaner
2013-02-14 09:04:45 ----D---- C:\Windows\Microsoft.NET
2013-02-14 09:04:29 ----RSD---- C:\Windows\assembly
2013-02-14 08:06:15 ----D---- C:\Windows\debug
2013-02-14 07:46:44 ----D---- C:\Windows\system32\drivers
2013-02-14 07:46:44 ----D---- C:\Windows\AppPatch
2013-02-14 07:46:43 ----D---- C:\Windows\SYSWOW64\migration
2013-02-14 07:46:43 ----D---- C:\Windows\system32\migration
2013-02-14 07:46:43 ----D---- C:\Program Files (x86)\Internet Explorer
2013-02-14 07:46:42 ----D---- C:\Program Files\Internet Explorer
2013-02-13 21:26:34 ----A---- C:\Windows\system32\MRT.exe
2013-02-13 21:26:28 ----D---- C:\ProgramData\Microsoft Help
2013-02-13 21:20:34 ----D---- C:\Windows\system32\catroot
2013-02-12 18:57:16 ----D---- C:\zVideno dobre
2013-02-12 18:27:30 ----D---- C:\Windows\SYSWOW64\directx
2013-02-11 17:26:52 ----D---- C:\Program Files (x86)\rajce
2013-02-11 17:13:39 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2013-02-11 17:13:39 ----D---- C:\Program Files (x86)\WB Games
2013-02-08 16:27:19 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2013-02-08 14:18:45 ----D---- C:\Program Files\Opera x64
2013-02-08 14:18:45 ----D---- C:\Program Files (x86)\Opera x64
2013-02-06 10:58:37 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2013-02-04 19:07:09 ----D---- C:\ProgramData\Skype
2013-01-29 10:44:53 ----D---- C:\Users\hadza\AppData\Roaming\FileZilla

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2012-11-28 57904]
R0 JRAID;JRAID; C:\Windows\system32\DRIVERS\jraid.sys [2011-05-19 120920]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R0 speedfan;speedfan; C:\Windows\SysWOW64\speedfan.sys [2011-03-18 29592]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2012-07-08 526392]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-21 514560]
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2012-10-08 211344]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2012-10-08 149592]
R1 EpfwLWF;Epfw NDIS LightWeight Filter; C:\Windows\system32\DRIVERS\EpfwLWF.sys [2012-10-08 59440]
R2 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2012-10-08 189208]
R2 SSPORT;SSPORT; \??\C:\Windows\system32\Drivers\SSPORT.sys [2012-02-15 11576]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2012-12-19 11278336]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2012-12-19 552960]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys [2012-11-06 96256]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2011-08-16 3056360]
R3 LgBttPort;LGE Bluetooth TransPort; C:\Windows\system32\DRIVERS\lgbtpt64.sys [2009-09-29 16384]
R3 lgbusenum;LG Bluetooth Bus Enumerator; C:\Windows\system32\DRIVERS\lgbtbs64.sys [2009-09-29 14848]
R3 LGVMODEM;LGE Virtual Modem; C:\Windows\system32\DRIVERS\lgvmdm64.sys [2009-09-29 17408]
R3 MarvinBus;Pinnacle Marvin Bus 64; C:\Windows\system32\DRIVERS\MarvinBus64.sys [2005-09-23 261120]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2000-01-01 685672]
R3 StillCam;Ovladač digitálního fotoaparátu pro sériový port; C:\Windows\system32\DRIVERS\serscan.sys [2009-07-14 12288]
R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv; \??\C:\Program Files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesDriver64.sys [2011-02-10 11856]
S2 DgiVecp;DgiVecp; \??\C:\Windows\system32\Drivers\DgiVecp.sys []
S3 61883;61883 Unit Device; C:\Windows\system32\DRIVERS\61883.sys [2009-07-14 60288]
S3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2012-12-19 11278336]
S3 Avc;Zařízení AVC; C:\Windows\system32\DRIVERS\avc.sys [2009-07-14 48768]
S3 dmvsc;dmvsc; C:\Windows\system32\drivers\dmvsc.sys [2010-11-21 71168]
S3 flashusb;flashusb; C:\Windows\system32\DRIVERS\flashusb.sys [2012-02-27 19968]
S3 gdrv;gdrv; \??\C:\Windows\gdrv.sys [2012-01-11 25640]
S3 ggflt;SEMC USB Flash Driver Filter; C:\Windows\system32\DRIVERS\ggflt.sys [2012-11-28 14448]
S3 ggsemc;SEMC USB Flash Driver; C:\Windows\system32\DRIVERS\ggsemc.sys [2012-11-28 27760]
S3 htcnprot;HTC NDIS Protocol Driver; C:\Windows\system32\DRIVERS\htcnprot.sys [2010-06-25 36928]
S3 MSDV;Microsoft DV Camera and VCR; C:\Windows\system32\DRIVERS\msdv.sys [2009-07-14 61440]
S3 nmwcd;Nokia USB Phone Parent Driver; C:\Windows\system32\drivers\ccdcmbx64.sys [2011-11-01 19968]
S3 nmwcdc;Nokia USB Communication Driver; C:\Windows\system32\drivers\ccdcmbox64.sys [2011-11-01 27136]
S3 nmwcdnsucx64;Nokia USB Flashing Generic; C:\Windows\system32\drivers\nmwcdnsucx64.sys [2011-11-01 12800]
S3 nmwcdnsux64;Nokia USB Flashing Phone Parent; C:\Windows\system32\drivers\nmwcdnsux64.sys [2011-11-01 171008]
S3 NPF;NetGroup Packet Filter Driver; C:\Windows\system32\drivers\npf.sys []
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfdx64.sys [2008-08-28 25600]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-21 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2010-11-21 20992]
S3 RTHDMIAzAudService;Service for HDMI; C:\Windows\system32\drivers\RtHDMIVX.sys []
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-21 6656]
S3 sscdbus;SAMSUNG USB Composite Device driver (WDM); C:\Windows\system32\DRIVERS\sscdbus.sys [2010-12-21 136264]
S3 sscdmdfl;SAMSUNG Mobile Modem Filter; C:\Windows\system32\DRIVERS\sscdmdfl.sys [2010-12-21 19016]
S3 sscdmdm;SAMSUNG Mobile Modem Drivers; C:\Windows\system32\DRIVERS\sscdmdm.sys [2010-12-21 172104]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-21 34688]
S3 SWDUMon;SWDUMon; C:\Windows\system32\DRIVERS\SWDUMon.sys [2012-10-06 15712]
S3 Synth3dVsc;Synth3dVsc; C:\Windows\System32\drivers\synth3dvsc.sys [2010-11-21 88960]
S3 terminpt;Microsoft Remote Desktop Input Driver; C:\Windows\system32\drivers\terminpt.sys [2010-11-21 34816]
S3 TFsExDisk;TFsExDisk; \??\C:\Windows\System32\Drivers\TFsExDisk.sys [2010-06-14 16448]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S3 tsusbhub;@%SystemRoot%\system32\drivers\tsusbhub.sys,-1; C:\Windows\system32\drivers\tsusbhub.sys [2010-11-21 117248]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerfltx64.sys [2011-11-01 9216]
S3 usb_rndisx;Adaptér USB RNDIS; C:\Windows\system32\drivers\usb8023x.sys [2009-07-14 19968]
S3 usbbus;LGE Mobile Composite USB Device; C:\Windows\system32\DRIVERS\lgx64bus.sys []
S3 UsbDiag;LGE Mobile USB Serial Port; C:\Windows\system32\DRIVERS\lgx64diag.sys []
S3 USBModem;LGE Mobile USB Modem; C:\Windows\system32\DRIVERS\lgx64modem.sys []
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 41984]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2010-11-21 32768]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltjx64.sys [2011-11-01 9216]
S3 VGPU;VGPU; C:\Windows\System32\drivers\rdvgkmd.sys []
S3 vmbus;vmbus; C:\Windows\system32\drivers\vmbus.sys [2010-11-21 199552]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-21 21760]
S3 WinUsb;Sony Ericsson USB Device sa0101 Driver; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-12-18 65192]
R2 AdvancedSystemCareService;Advanced SystemCare Service; C:\Program Files (x86)\IObit\Advanced SystemCare 4\ASCService.exe [2011-04-21 352656]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2012-12-19 240640]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [2012-11-26 1329304]
R2 PassThru Service;Internet Pass-Through Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [2010-09-16 80896]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2013-02-19 76888]
R2 RapiMgr;@%windir%\WindowsMobile\rapimgr.dll,-104; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R2 RealNetworks Downloader Resolver Service;RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [2012-11-29 38608]
R2 TuneUp.UtilitiesSvc;TuneUp Utilities Service; C:\Program Files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesService64.exe [2011-03-30 2026304]
R2 UxTuneUp;@%SystemRoot%\System32\uxtuneup.dll,-4096; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 WcesComm;@%windir%\WindowsMobile\wcescomm.dll,-40079; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-08-18 2291568]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-09-15 116648]
S2 KMService;KMService; C:\Windows\syswow64\srvany.exe [2011-05-08 8192]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-02-08 251248]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-09-15 116648]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files\Microsoft Office\Office14\GROOVE.EXE [2012-09-20 50899608]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2013-02-06 115608]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 174440]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 ServiceLayer;ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [2011-11-30 718888]
S3 Sony PC Companion;Sony PC Companion; C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe [2012-01-18 155320]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2011-05-04 1255736]
S4 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S4 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]

-----------------EOF-----------------

Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:

:files
C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll
C:\Users\hadza\AppData\Local\Facebook\Update
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-3842774712-1057022947-2739308594-1001Core.job
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-3842774712-1057022947-2739308594-1001UA.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore1ce0da354c2a94a.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3842774712-1057022947-2739308594-1001Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3842774712-1057022947-2739308594-1001UA.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3842774712-1057022947-2739308594-1004Core1ce03aba9d974e5.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3842774712-1057022947-2739308594-1004UA1ce03abb6cfcb2e.job
C:\Windows\SYSWOW64\tmp1DD0.tmp

:reg
[-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Facebook Update"=-

:commands
[Purity]
[Emptytemp]
[Emptyflash]

a klikněte na >MoveIt!<. Po skenu restartujte PC a dejte nový log RSIT.

Logfile of random's system information tool 1.08 (written by random/random)
Run by hadza at 2013-02-25 18:53:54
Microsoft Windows 7 Ultimate Service Pack 1
System drive C: has 18 GB (7%) free of 254 GB
Total RAM: 4094 MB (65% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:54:01, on 25.2.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16464)
Boot mode: Normal

Running processes:
C:\Program Files\DAEMON Tools Pro\DTShellHlp.exe
C:\Program Files (x86)\Windows Sidebar\sidebar.exe
C:\Program Files\DAEMON Tools Pro\DTAgent.exe
C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe
C:\Program Files (x86)\Google\Drive\googledrivesync.exe
C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe
C:\Windows\twain_32\Samsung\SCX3200\Scan2Pc.exe
C:\ProgramData\SUS\SUS.exe
C:\Program Files (x86)\Google\Drive\googledrivesync.exe
C:\Program Files\trend micro\hadza.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - (no file)
R3 - URLSearchHook: (no name) - {687578b9-7132-4a7a-80e4-30ee31099e03} - (no file)
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Social Extras Plugin - {FF4E1D1D-705B-4379-AB33-22D98C1ABF55} - C:\Program Files (x86)\SocialExtras\socialx.dll
O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\Windows\RaidTool\xInsIDE.exe
O4 - HKLM\..\Run: [3200 Scan2PC] "C:\Windows\twain_32\Samsung\SCX3200\Scan2Pc.exe"
O4 - HKLM\..\Run: [SUS Start] C:\ProgramData\SUS\SUS.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKCU\..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [uTorrent] "C:\Program Files (x86)\uTorrent\uTorrent.exe" /MINIMIZED
O4 - HKCU\..\Run: [DAEMON Tools Pro Agent] "C:\Program Files\DAEMON Tools Pro\DTAgent.exe" -autorun
O4 - HKCU\..\Run: [KiesPDLR] C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
O4 - HKCU\..\Run: [Sony PC Companion] "C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe" /Background
O4 - HKCU\..\Run: [GoogleDriveSync] "C:\Program Files (x86)\Google\Drive\googledrivesync.exe" /autostart
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Users\hadza\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra 'Tools' menuitem: @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: Nostalgia Casino - @ú° €ó° °ó°  ó° ó° Đů° ŕů° đř° @
m`
m°ř° đm m  m° mŔ m€ mpů° Pů° `ů° €ů° đm - (no file) (HKCU)
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Advanced SystemCare Service (AdvancedSystemCareService) - IObit - C:\Program Files (x86)\IObit\Advanced SystemCare 4\ASCService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: KMService - Unknown owner - C:\Windows\system32\srvany.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Internet Pass-Through Service (PassThru Service) - Unknown owner - C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: RealNetworks Downloader Resolver Service - Unknown owner - C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Sony PC Companion - Avanquest Software - C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Program Files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesService64.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 10725 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
atieclxx
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\IObit\Advanced SystemCare 4\ASCService.exe"
"C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe"
C:\Windows\SysWOW64\PnkBstrA.exe
"C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe"
"C:\Program Files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesService64.exe"
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
WLIDSvcM.exe 1980
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"taskhost.exe"
"C:\Program Files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesApp64.exe" /TUStart /pid:1880
"C:\Windows\system32\Dwm.exe"
taskeng.exe {7DFBD285-7F71-4B40-8FE2-BA6ADE66B79E}
C:\Windows\Explorer.EXE
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c
taskeng.exe {09F5A038-FBB2-4A0F-93D0-4656D013B30A}
"C:\Windows\notepad.exe" C:\_OTM\MovedFiles\02252013_184517.log
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\DAEMON Tools Pro\DTShellHlp.exe"
"C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe"
"C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
"C:\Program Files (x86)\Windows Sidebar\sidebar.exe" /autoRun
"C:\Program Files\DAEMON Tools Pro\DTAgent.exe" -autorun
"C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe"
"C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe" /Background
C:\Windows\System32\svchost.exe -k WerSvcGroup
"C:\Program Files (x86)\Google\Drive\googledrivesync.exe" /autostart
"C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Windows\twain_32\Samsung\SCX3200\Scan2Pc.exe"
"C:\ProgramData\SUS\SUS.exe"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM" PriorityLow
"C:\Program Files (x86)\Google\Drive\googledrivesync.exe" /autostart
C:\Windows\system32\svchost.exe -k WindowsMobile
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\sppsvc.exe
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
"C:\Users\hadza\Downloads\RSITx64.exe"
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe_S-1-5-21-3842774712-1057022947-2739308594-10012_ Global\UsGthrCtrlFltPipeMssGthrPipe_S-1-5-21-3842774712-1057022947-2739308594-10012 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "1"
"C:\Windows\system32\SearchFilterHost.exe" 0 508 512 520 65536 516
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2012-08-16 6670496]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2012-11-15 537576]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 532336]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2010-12-21 689040]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2012-11-15 193512]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23 60568]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2012-08-16 4171424]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre6\bin\ssv.dll [2012-03-12 325408]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 403840]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2010-12-21 561552]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2012-03-12 42272]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FF4E1D1D-705B-4379-AB33-22D98C1ABF55}]
Social Extras Plugin - C:\Program Files (x86)\SocialExtras\socialx.dll [2011-11-29 116056]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2011-08-16 12673128]
"CDAServer"=C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [2012-02-20 456704]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2012-11-26 6325936]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files (x86)\Windows Sidebar\sidebar.exe [2010-11-21 1174016]
"uTorrent"=C:\Program Files (x86)\uTorrent\uTorrent.exe [2012-12-12 969104]
"DAEMON Tools Pro Agent"=C:\Program Files\DAEMON Tools Pro\DTAgent.exe [2011-03-17 842048]
"KiesPDLR"=C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [2012-05-21 21416]
"Sony PC Companion"=C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe [2013-01-07 446648]
"GoogleDriveSync"=C:\Program Files (x86)\Google\Drive\googledrivesync.exe [2012-12-17 16328976]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"JMB36X IDE Setup"=C:\Windows\RaidTool\xInsIDE.exe [2010-09-07 43608]
"3200 Scan2PC"=C:\Windows\twain_32\Samsung\SCX3200\Scan2Pc.exe [2010-05-18 1989120]
"SUS Start"=C:\ProgramData\SUS\SUS.exe [2012-12-14 2189824]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2012-12-19 642808]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Adobe Gamma Loader.lnk - C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2012-08-16 6670496]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2012-08-16 4171424]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
""=0
"LogonHoursAction"=2
"DontDisplayLogonHoursWarnings"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
""=

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
"DisallowRun"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"C:\Program Files (x86)\FlashFXP\FlashFXP.exe"="C:\Program Files (x86)\FlashFXP\FlashFXP.exe:*:Enabled:FlashFXP v3"

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2013-02-25 18:45:17 ----D---- C:\_OTM
2013-02-25 15:07:21 ----A---- C:\AdwCleaner[S1].txt
2013-02-24 13:44:32 ----A---- C:\AdwCleaner[R1].txt
2013-02-23 16:20:28 ----D---- C:\rsit
2013-02-23 16:20:28 ----D---- C:\Program Files\trend micro
2013-02-19 17:47:31 ----A---- C:\Windows\SYSWOW64\PnkBstrB.exe
2013-02-19 17:47:19 ----A---- C:\Windows\SYSWOW64\PnkBstrA.exe
2013-02-19 17:46:35 ----D---- C:\ProgramData\Orbit
2013-02-19 16:18:29 ----D---- C:\Program Files (x86)\Far Cry 3
2013-02-19 15:41:10 ----D---- C:\Program Files (x86)\Ubisoft
2013-02-18 15:12:49 ----D---- C:\Program Files (x86)\Dead Space 3
2013-02-14 11:22:45 ----D---- C:\Program Files (x86)\Rockstar Games
2013-02-14 10:49:17 ----A---- C:\Windows\system32\wrap_oal.dll
2013-02-14 10:49:16 ----A---- C:\Windows\system32\OpenAL32.dll
2013-02-14 10:49:15 ----D---- C:\Program Files (x86)\OpenAL
2013-02-14 10:49:15 ----A---- C:\Windows\SYSWOW64\wrap_oal.dll
2013-02-14 10:49:14 ----A---- C:\Windows\SYSWOW64\OpenAL32.dll
2013-02-13 21:18:31 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2013-02-13 21:18:31 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2013-02-13 21:18:31 ----A---- C:\Windows\system32\mshtmled.dll
2013-02-13 21:18:30 ----A---- C:\Windows\SYSWOW64\url.dll
2013-02-13 21:18:30 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2013-02-13 21:18:30 ----A---- C:\Windows\SYSWOW64\ieui.dll
2013-02-13 21:18:30 ----A---- C:\Windows\system32\ieUnatt.exe
2013-02-13 21:18:30 ----A---- C:\Windows\system32\ieui.dll
2013-02-13 21:18:29 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2013-02-13 21:18:29 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2013-02-13 21:18:29 ----A---- C:\Windows\system32\urlmon.dll
2013-02-13 21:18:29 ----A---- C:\Windows\system32\url.dll
2013-02-13 21:18:29 ----A---- C:\Windows\system32\msfeeds.dll
2013-02-13 21:18:29 ----A---- C:\Windows\system32\jscript9.dll
2013-02-13 21:18:28 ----A---- C:\Windows\SYSWOW64\wininet.dll
2013-02-13 21:18:27 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2013-02-13 21:18:27 ----A---- C:\Windows\SYSWOW64\jscript.dll
2013-02-13 21:18:27 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2013-02-13 21:18:27 ----A---- C:\Windows\system32\wininet.dll
2013-02-13 21:18:27 ----A---- C:\Windows\system32\vbscript.dll
2013-02-13 21:18:27 ----A---- C:\Windows\system32\jsproxy.dll
2013-02-13 21:18:27 ----A---- C:\Windows\system32\jscript.dll
2013-02-13 21:18:27 ----A---- C:\Windows\system32\iertutil.dll
2013-02-13 21:18:26 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2013-02-13 21:18:26 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2013-02-13 21:18:24 ----A---- C:\Windows\system32\mshtml.dll
2013-02-13 21:18:23 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2013-02-13 21:18:23 ----A---- C:\Windows\system32\ieframe.dll
2013-02-13 09:14:11 ----A---- C:\Windows\system32\ntoskrnl.exe
2013-02-13 09:14:10 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2013-02-13 09:14:10 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2013-02-13 09:14:03 ----A---- C:\Windows\system32\win32k.sys
2013-02-13 09:14:02 ----A---- C:\Windows\SYSWOW64\wow32.dll
2013-02-13 09:14:02 ----A---- C:\Windows\SYSWOW64\setup16.exe
2013-02-13 09:14:02 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2013-02-13 09:14:02 ----A---- C:\Windows\SYSWOW64\instnm.exe
2013-02-13 09:14:02 ----A---- C:\Windows\system32\winsrv.dll
2013-02-13 09:14:01 ----A---- C:\Windows\SYSWOW64\user.exe
2013-02-13 09:14:00 ----A---- C:\Windows\system32\drivers\tcpip.sys
2013-02-13 09:14:00 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS
2013-02-11 15:58:27 ----D---- C:\ProgramData\RELOADED
2013-02-11 15:26:31 ----D---- C:\Program Files (x86)\The Walkin Dead Episode 1&2 CZ
2013-02-06 08:10:40 ----D---- C:\Program Files (x86)\Mozilla Firefox
2013-02-01 17:35:21 ----D---- C:\Program Files (x86)\Google

======List of files/folders modified in the last 1 months======

2013-02-25 18:53:59 ----D---- C:\Windows\Temp
2013-02-25 18:53:51 ----D---- C:\Windows\Prefetch
2013-02-25 18:53:50 ----D---- C:\Users\hadza\AppData\Roaming\uTorrent
2013-02-25 18:51:00 ----D---- C:\Windows\system32\Tasks
2013-02-25 18:47:29 ----D---- C:\Windows\SysWOW64
2013-02-25 18:45:20 ----D---- C:\Windows\Tasks
2013-02-25 17:08:42 ----D---- C:\Users\hadza\AppData\Roaming\vlc
2013-02-25 16:04:24 ----D---- C:\Windows\system32\config
2013-02-25 15:09:36 ----D---- C:\Windows
2013-02-25 15:07:28 ----RD---- C:\Program Files (x86)
2013-02-25 15:07:28 ----HD---- C:\ProgramData
2013-02-25 13:51:34 ----D---- C:\Users\hadza\AppData\Roaming\Winamp
2013-02-25 13:49:16 ----D---- C:\Windows\System32
2013-02-25 13:49:16 ----D---- C:\Windows\inf
2013-02-25 13:49:16 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-02-24 19:31:28 ----SHD---- C:\System Volume Information
2013-02-24 13:29:13 ----D---- C:\Users\hadza\AppData\Roaming\DAEMON Tools Pro
2013-02-23 16:20:28 ----RD---- C:\Program Files
2013-02-23 15:59:04 ----D---- C:\ProgramData\SUS
2013-02-23 11:07:08 ----SHD---- C:\Windows\Installer
2013-02-23 11:07:08 ----SHD---- C:\Config.Msi
2013-02-22 11:04:35 ----D---- C:\Windows\system32\NDF
2013-02-19 17:47:20 ----D---- C:\Windows\system32\LogFiles
2013-02-15 07:23:56 ----D---- C:\Windows\system32\catroot2
2013-02-14 13:53:09 ----D---- C:\Windows\winsxs
2013-02-14 13:53:06 ----D---- C:\Users\hadza\AppData\Roaming\DAEMON Tools Lite
2013-02-14 13:52:58 ----D---- C:\Users\hadza\AppData\Roaming\TS3Client
2013-02-14 13:52:58 ----D---- C:\Users\hadza\AppData\Roaming\Skype
2013-02-14 13:50:54 ----D---- C:\Windows\Panther
2013-02-14 13:50:54 ----D---- C:\Windows\ModemLogs
2013-02-14 13:50:53 ----D---- C:\Windows\Logs
2013-02-14 13:49:24 ----D---- C:\Program Files (x86)\Driver-Soft
2013-02-14 13:49:02 ----D---- C:\Program Files\VideoLAN
2013-02-14 13:45:00 ----D---- C:\Program Files\CCleaner
2013-02-14 09:04:45 ----D---- C:\Windows\Microsoft.NET
2013-02-14 09:04:29 ----RSD---- C:\Windows\assembly
2013-02-14 08:06:15 ----D---- C:\Windows\debug
2013-02-14 07:46:44 ----D---- C:\Windows\system32\drivers
2013-02-14 07:46:44 ----D---- C:\Windows\AppPatch
2013-02-14 07:46:43 ----D---- C:\Windows\SYSWOW64\migration
2013-02-14 07:46:43 ----D---- C:\Windows\system32\migration
2013-02-14 07:46:43 ----D---- C:\Program Files (x86)\Internet Explorer
2013-02-14 07:46:42 ----D---- C:\Program Files\Internet Explorer
2013-02-13 21:26:34 ----A---- C:\Windows\system32\MRT.exe
2013-02-13 21:26:28 ----D---- C:\ProgramData\Microsoft Help
2013-02-13 21:20:34 ----D---- C:\Windows\system32\catroot
2013-02-12 18:57:16 ----D---- C:\zVideno dobre
2013-02-12 18:27:30 ----D---- C:\Windows\SYSWOW64\directx
2013-02-11 17:26:52 ----D---- C:\Program Files (x86)\rajce
2013-02-11 17:13:39 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2013-02-11 17:13:39 ----D---- C:\Program Files (x86)\WB Games
2013-02-08 16:27:19 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2013-02-08 14:18:45 ----D---- C:\Program Files\Opera x64
2013-02-08 14:18:45 ----D---- C:\Program Files (x86)\Opera x64
2013-02-06 10:58:37 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2013-02-04 19:07:09 ----D---- C:\ProgramData\Skype
2013-01-29 10:44:53 ----D---- C:\Users\hadza\AppData\Roaming\FileZilla

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2012-11-28 57904]
R0 JRAID;JRAID; C:\Windows\system32\DRIVERS\jraid.sys [2011-05-19 120920]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R0 speedfan;speedfan; C:\Windows\SysWOW64\speedfan.sys [2011-03-18 29592]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2012-07-08 526392]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-21 514560]
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2012-10-08 211344]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2012-10-08 149592]
R1 EpfwLWF;Epfw NDIS LightWeight Filter; C:\Windows\system32\DRIVERS\EpfwLWF.sys [2012-10-08 59440]
R2 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2012-10-08 189208]
R2 SSPORT;SSPORT; \??\C:\Windows\system32\Drivers\SSPORT.sys [2012-02-15 11576]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2012-12-19 11278336]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2012-12-19 552960]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys [2012-11-06 96256]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2011-08-16 3056360]
R3 LgBttPort;LGE Bluetooth TransPort; C:\Windows\system32\DRIVERS\lgbtpt64.sys [2009-09-29 16384]
R3 lgbusenum;LG Bluetooth Bus Enumerator; C:\Windows\system32\DRIVERS\lgbtbs64.sys [2009-09-29 14848]
R3 LGVMODEM;LGE Virtual Modem; C:\Windows\system32\DRIVERS\lgvmdm64.sys [2009-09-29 17408]
R3 MarvinBus;Pinnacle Marvin Bus 64; C:\Windows\system32\DRIVERS\MarvinBus64.sys [2005-09-23 261120]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2000-01-01 685672]
R3 StillCam;Ovladač digitálního fotoaparátu pro sériový port; C:\Windows\system32\DRIVERS\serscan.sys [2009-07-14 12288]
R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv; \??\C:\Program Files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesDriver64.sys [2011-02-10 11856]
S2 DgiVecp;DgiVecp; \??\C:\Windows\system32\Drivers\DgiVecp.sys []
S3 61883;61883 Unit Device; C:\Windows\system32\DRIVERS\61883.sys [2009-07-14 60288]
S3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2012-12-19 11278336]
S3 Avc;Zařízení AVC; C:\Windows\system32\DRIVERS\avc.sys [2009-07-14 48768]
S3 dmvsc;dmvsc; C:\Windows\system32\drivers\dmvsc.sys [2010-11-21 71168]
S3 flashusb;flashusb; C:\Windows\system32\DRIVERS\flashusb.sys [2012-02-27 19968]
S3 gdrv;gdrv; \??\C:\Windows\gdrv.sys [2012-01-11 25640]
S3 ggflt;SEMC USB Flash Driver Filter; C:\Windows\system32\DRIVERS\ggflt.sys [2012-11-28 14448]
S3 ggsemc;SEMC USB Flash Driver; C:\Windows\system32\DRIVERS\ggsemc.sys [2012-11-28 27760]
S3 htcnprot;HTC NDIS Protocol Driver; C:\Windows\system32\DRIVERS\htcnprot.sys [2010-06-25 36928]
S3 MSDV;Microsoft DV Camera and VCR; C:\Windows\system32\DRIVERS\msdv.sys [2009-07-14 61440]
S3 nmwcd;Nokia USB Phone Parent Driver; C:\Windows\system32\drivers\ccdcmbx64.sys [2011-11-01 19968]
S3 nmwcdc;Nokia USB Communication Driver; C:\Windows\system32\drivers\ccdcmbox64.sys [2011-11-01 27136]
S3 nmwcdnsucx64;Nokia USB Flashing Generic; C:\Windows\system32\drivers\nmwcdnsucx64.sys [2011-11-01 12800]
S3 nmwcdnsux64;Nokia USB Flashing Phone Parent; C:\Windows\system32\drivers\nmwcdnsux64.sys [2011-11-01 171008]
S3 NPF;NetGroup Packet Filter Driver; C:\Windows\system32\drivers\npf.sys []
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfdx64.sys [2008-08-28 25600]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-21 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2010-11-21 20992]
S3 RTHDMIAzAudService;Service for HDMI; C:\Windows\system32\drivers\RtHDMIVX.sys []
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-21 6656]
S3 sscdbus;SAMSUNG USB Composite Device driver (WDM); C:\Windows\system32\DRIVERS\sscdbus.sys [2010-12-21 136264]
S3 sscdmdfl;SAMSUNG Mobile Modem Filter; C:\Windows\system32\DRIVERS\sscdmdfl.sys [2010-12-21 19016]
S3 sscdmdm;SAMSUNG Mobile Modem Drivers; C:\Windows\system32\DRIVERS\sscdmdm.sys [2010-12-21 172104]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-21 34688]
S3 SWDUMon;SWDUMon; C:\Windows\system32\DRIVERS\SWDUMon.sys [2012-10-06 15712]
S3 Synth3dVsc;Synth3dVsc; C:\Windows\System32\drivers\synth3dvsc.sys [2010-11-21 88960]
S3 terminpt;Microsoft Remote Desktop Input Driver; C:\Windows\system32\drivers\terminpt.sys [2010-11-21 34816]
S3 TFsExDisk;TFsExDisk; \??\C:\Windows\System32\Drivers\TFsExDisk.sys [2010-06-14 16448]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S3 tsusbhub;@%SystemRoot%\system32\drivers\tsusbhub.sys,-1; C:\Windows\system32\drivers\tsusbhub.sys [2010-11-21 117248]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerfltx64.sys [2011-11-01 9216]
S3 usb_rndisx;Adaptér USB RNDIS; C:\Windows\system32\drivers\usb8023x.sys [2009-07-14 19968]
S3 usbbus;LGE Mobile Composite USB Device; C:\Windows\system32\DRIVERS\lgx64bus.sys []
S3 UsbDiag;LGE Mobile USB Serial Port; C:\Windows\system32\DRIVERS\lgx64diag.sys []
S3 USBModem;LGE Mobile USB Modem; C:\Windows\system32\DRIVERS\lgx64modem.sys []
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 41984]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2010-11-21 32768]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltjx64.sys [2011-11-01 9216]
S3 VGPU;VGPU; C:\Windows\System32\drivers\rdvgkmd.sys []
S3 vmbus;vmbus; C:\Windows\system32\drivers\vmbus.sys [2010-11-21 199552]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-21 21760]
S3 WinUsb;Sony Ericsson USB Device sa0101 Driver; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-12-18 65192]
R2 AdvancedSystemCareService;Advanced SystemCare Service; C:\Program Files (x86)\IObit\Advanced SystemCare 4\ASCService.exe [2011-04-21 352656]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2012-12-19 240640]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [2012-11-26 1329304]
R2 PassThru Service;Internet Pass-Through Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [2010-09-16 80896]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2013-02-19 76888]
R2 RapiMgr;@%windir%\WindowsMobile\rapimgr.dll,-104; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R2 RealNetworks Downloader Resolver Service;RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [2012-11-29 38608]
R2 TuneUp.UtilitiesSvc;TuneUp Utilities Service; C:\Program Files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesService64.exe [2011-03-30 2026304]
R2 UxTuneUp;@%SystemRoot%\System32\uxtuneup.dll,-4096; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 WcesComm;@%windir%\WindowsMobile\wcescomm.dll,-40079; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-08-18 2291568]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-09-15 116648]
S2 KMService;KMService; C:\Windows\syswow64\srvany.exe [2011-05-08 8192]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-02-08 251248]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-09-15 116648]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files\Microsoft Office\Office14\GROOVE.EXE [2012-09-20 50899608]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2013-02-06 115608]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 174440]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 ServiceLayer;ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [2011-11-30 718888]
S3 Sony PC Companion;Sony PC Companion; C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe [2012-01-18 155320]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2011-05-04 1255736]
S4 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S4 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]

-----------------EOF-----------------

Dvouklikem na soubor C:\Program Files\trend micro\hadza.exe spusťte HijackThis. Klikněte na "Do a system scan only" a v otevřeném okně vlevo ve čtverečcích zaškrtněte:

R3 - URLSearchHook: (no name) - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - (no file)
R3 - URLSearchHook: (no name) - {687578b9-7132-4a7a-80e4-30ee31099e03} - (no file)
O9 - Extra button: Nostalgia Casino - @ú° €ó° °ó° ó° ó° Đů° ŕů° đř° @
m`
m°ř° đm m m° mŔ m€ mpů° Pů° `ů° €ů° đm - (no file) (HKCU)

Klikněte na >FixChecked<. Pak znovu spusťte OTM a klikněte na >CleanUp!<. OTM po sobě uklidí. Nakonec restartujte PC.

Provedeno,tak byli tam tedy nejaci bacilci,
dekuji moc za pomoc a straveny cas,snad uz to bude ok.

Viry jsem nenalezl, zato hromadu zbytečností. Vše bylo smazáno. Nemáte zač!