VIRY.CZ

Prosím o kontrolu logu. Počítač dlouho startuje a pak je celkově pomalejší. Je to počítač mé známé, tak mě nenadávejte co tam je všechno nainstalované. Po startu se také objeví okno "Problém s aplikací BTNtService.exe". Děkuji.

Logfile of random's system information tool 1.09 (written by random/random)
Run by Hanka at 2013-03-23 22:47:05
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 3 GB (22%) free of 15 GB
Total RAM: 991 MB (63% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:47:09, on 23.3.2013
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\Java\jre7\bin\jqs.exe
C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
C:\Program Files\Nitro PDF\Reader\NitroPDFReaderDriverService.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Hanka\Plocha\RSIT(2).exe
C:\Program Files\trend micro\Hanka.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.faststone.org/ThankYou.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O2 - BHO: Ukazatel S-Rank - {EA837F48-5AD1-443E-AE34-FFE03CBF3099} - C:\Program Files\Seznam.cz\listicka.dll
O3 - Toolbar: Nástroje Lištičky - {1EA00BE1-6E54-4E2A-8099-680300BF23E1} - C:\Program Files\Seznam.cz\toolbar\toolbar.dll
O4 - HKLM\..\Run: [SiSPower] Rundll32.exe SiSPower.dll,ModeAgent
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: Nastavení Lištičky ... - {0E46D7B6-887D-4F81-B4CA-FCC92AF73610} - C:\Program Files\Seznam.cz\listicka.dll
O9 - Extra 'Tools' menuitem: Nastavení Lištičky ... - {0E46D7B6-887D-4F81-B4CA-FCC92AF73610} - C:\Program Files\Seznam.cz\listicka.dll
O9 - Extra button: Zvýrazňovač slov Lištičky - {4E6D6F90-31CA-4878-A7A3-1CD50F115A69} - C:\Program Files\Seznam.cz\listicka.dll
O9 - Extra 'Tools' menuitem: Zvýrazňovač slov Lištičky - {4E6D6F90-31CA-4878-A7A3-1CD50F115A69} - C:\Program Files\Seznam.cz\listicka.dll
O9 - Extra button: ICQ7.6 - {7644E42D-B096-457F-8B5B-901238FC81AE} - C:\Program Files\ICQ7.6\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.6 - {7644E42D-B096-457F-8B5B-901238FC81AE} - C:\Program Files\ICQ7.6\ICQ.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {A996E48C-D3DC-4244-89F7-AFA33EC60679} (Settings Class) - https://portal.ote-cr.cz/otemarket/reso ... apicom.cab
O16 - DPF: {EC71A2BE-E211-41F9-BCAF-4EFF13426DFE} (RossmCZActiveFormX Element) - https://shop.rossmanncz.orwonet.de/shop ... upload.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{57653143-89D9-4C3C-9C99-2EDB296161B8}: NameServer = 82.150.180.253,213.180.44.1
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Avira Scheduler (AntiVirSchedulerService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira Real-Time Protection (AntiVirService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: BlueSoleil Hid Service - Unknown owner - D:\BTNtService.exe
O23 - Service: HP Port Resolver - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBPRO.EXE
O23 - Service: HP Status Server - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBOID.EXE
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Oracle Corporation - C:\Program Files\Java\jre7\bin\jqs.exe
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: NitroPDFReaderDriverCreatorReadSpool (NitroReaderDriverReadSpool) - Nitro PDF Software - C:\Program Files\Nitro PDF\Reader\NitroPDFReaderDriverService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

--
End of file - 6976 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\Hanka\Data aplikací\Mozilla\Firefox\Profiles\m57i6dvm.default

prefs.js - "browser.startup.homepage" - "http://seznam.cz"
prefs.js - "extensions.enabledItems" - "{CAFEEFAC-0016-0000-0027-ABCDEFFEDCBA}:6.0.27, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.28"
prefs.js - "keyword.URL" - "http://search.icq.com/search/afe_result ... r=1.1.9&q="

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.6.602.180 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_6_602_180.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.17.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\WINDOWS\system32\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.17.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll

C:\Program Files\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}
{CAFEEFAC-0016-0000-0027-ABCDEFFEDCBA}

C:\Program Files\Mozilla Firefox\components\
browser.xpt
browserdirprovider.dll
brwsrcmp.dll
components.list
FeedConverter.js
FeedProcessor.js
FeedWriter.js
fuelApplication.js
GPSDGeolocationProvider.js
jsconsole-clhandler.js
NetworkGeolocationProvider.js
nsAddonRepository.js
nsBadCertHandler.js
nsBlocklistService.js
nsBrowserContentHandler.js
nsBrowserGlue.js
nsContentDispatchChooser.js
nsContentPrefService.js
nsDefaultCLH.js
nsDownloadManagerUI.js
nsExtensionManager.js
nsFormAutoComplete.js
nsHandlerService.js
nsHelperAppDlg.js
nsINIProcessor.js
nsLivemarkService.js
nsLoginInfo.js
nsLoginManager.js
nsLoginManagerPrompter.js
nsMicrosummaryService.js
nsPlacesAutoComplete.js
nsPlacesDBFlush.js
nsPlacesTransactionsService.js
nsPrivateBrowsingService.js
nsProxyAutoConfig.js
nsSafebrowsingApplication.js
nsSearchService.js
nsSearchSuggestions.js
nsSessionStartup.js
nsSessionStore.js
nsSetDefaultBrowser.js
nsSidebar.js
nsTaggingService.js
nsTryToClose.js
nsUpdateService.js
nsUpdateServiceStub.js
nsUpdateTimerManager.js
nsUrlClassifierLib.js
nsUrlClassifierListManager.js
nsURLFormatter.js
nsWebHandlerApp.js
pluginGlue.js
storage-Legacy.js
storage-mozStorage.js
txEXSLTRegExFunctions.js
WebContentConverter.js

C:\Program Files\Mozilla Firefox\plugins\
npnul32.dll
nppdf32.dll

C:\Program Files\Mozilla Firefox\searchplugins\
google.xml
jyxo-cz.xml
mall-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Documents and Settings\Hanka\Data aplikací\Mozilla\Firefox\Profiles\m57i6dvm.default\searchplugins\
conduit.xml
icqplugin.xml
sweetim.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-12-18 77576]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2013-03-05 461216]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-03-05 170912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EA837F48-5AD1-443E-AE34-FFE03CBF3099}]
Lištička - C:\Program Files\Seznam.cz\listicka.dll [2010-10-07 1961240]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{1EA00BE1-6E54-4E2A-8099-680300BF23E1} - Nástroje Lištičky - C:\Program Files\Seznam.cz\toolbar\toolbar.dll [2010-10-07 187672]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SiSPower"=SiSPower.dll,ModeAgent []
"SoundMan"=C:\WINDOWS\SOUNDMAN.EXE [2004-11-15 77824]
"BluetoothAuthenticationAgent"=bthprops.cpl,,BluetoothAuthenticationAgent []
"avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2013-03-23 385248]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-12-03 946352]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2012-12-19 41208]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ccleaner]
C:\Program Files\CCleaner\ccleaner.exe [2010-11-03 1862456]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2005-05-11 49152]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\InstallIQUpdater]
C:\Program Files\W3i\InstallIQUpdater\InstallIQUpdater.exe [2011-10-11 1179648]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesPDLR]
C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [2012-08-31 21432]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesPreload]
C:\Program Files\Samsung\Kies\Kies.exe [2012-08-31 964024]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesTrayAgent]
C:\Program Files\Samsung\Kies\KiesTrayAgent.exe [2012-08-31 3524536]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteControl]
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe [2004-11-02 32768]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files\Common Files\Java\Java Update\jusched.exe [2012-07-03 252848]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Hanka^Nabídka Start^Programy^Po spuštění^OpenOffice.org 3.2.lnk]
C:\PROGRA~1\OPENOF~1.ORG\program\QUICKS~1.EXE [2010-06-07 1195520]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]
UPnPMonitor - {e57ce738-33e8-4c51-8354-bb4de9d215d1} - C:\WINDOWS\system32\upnpui.dll [2008-04-14 239616]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=16895

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Opera\opera.exe"="C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser"
"C:\Program Files\HP\Digital Imaging\bin\hpqnrs08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqnrs08.exe:*:Enabled:hpqnrs08.exe"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe:*:Enabled:hpqtra08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe:*:Enabled:hpofxm08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe"="C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe:*:Enabled:hposfx08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hposid01.exe"="C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe:*:Enabled:hpqscnvw.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe:*:Enabled:hpqcopy.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe"="C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe:*:Enabled:hpfccopy.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe:*:Enabled:hpzwiz01.exe"
"C:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe"="C:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe:*:Enabled:hpqphunl.exe"
"C:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe"="C:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe:*:Enabled:hpqdia.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe"
"D:\BlueSoleil.exe"="D:\BlueSoleil.exe:*:Enabled:BlueSoleil"
"C:\Documents and Settings\Hanka\Plocha\SweetImSetup.exe"="C:\Documents and Settings\Hanka\Plocha\SweetImSetup.exe:*:Enabled:SweetIM Installer"
"C:\Program Files\ICQ7.6\ICQ.exe"="C:\Program Files\ICQ7.6\ICQ.exe:*:Enabled:ICQ7.6"
"C:\WINDOWS\system32\muzapp.exe"="C:\WINDOWS\system32\muzapp.exe:*:Enabled:MUZ AOD APP player"
"C:\Program Files\Opera\pluginwrapper\opera_plugin_wrapper.exe"="C:\Program Files\Opera\pluginwrapper\opera_plugin_wrapper.exe:*:Enabled:Opera Internet Browser - Plugin wrapper"
"C:\Program Files\PANDORA.TV\PanService\PandoraService.exe"="C:\Program Files\PANDORA.TV\PanService\PandoraService.exe:*:Enabled:PandoraService"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype "

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\ICQ7.6\ICQ.exe"="C:\Program Files\ICQ7.6\ICQ.exe:*:Enabled:ICQ7.6"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"VIDC.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"VIDC.YVYU"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"mixer2"=wdmaud.drv
"VIDC.FMVC"=fmcodec.dll

======List of files/folders created in the last 1 month======

2013-03-23 22:37:44 ----D---- C:\Program Files\trend micro
2013-03-23 22:37:43 ----D---- C:\rsit
2013-03-23 21:30:32 ----D---- C:\Documents and Settings\Hanka\Data aplikací\Avira
2013-03-23 21:26:08 ----A---- C:\WINDOWS\system32\drivers\ssmdrv.sys
2013-03-23 21:25:58 ----A---- C:\WINDOWS\system32\drivers\avkmgr.sys
2013-03-23 21:25:58 ----A---- C:\WINDOWS\system32\drivers\avipbb.sys
2013-03-23 21:25:58 ----A---- C:\WINDOWS\system32\drivers\avgntflt.sys
2013-03-23 21:25:21 ----D---- C:\Program Files\Avira
2013-03-23 21:25:21 ----D---- C:\Documents and Settings\All Users\Data aplikací\Avira
2013-03-23 20:35:20 ----D---- C:\Program Files\VS Revo Group
2013-03-13 14:45:38 ----D---- C:\Program Files\Mozilla Thunderbird
2013-03-05 09:32:42 ----D---- C:\Program Files\Common Files\Java
2013-03-05 09:31:21 ----A---- C:\WINDOWS\system32\javaws.exe
2013-03-05 09:31:09 ----A---- C:\WINDOWS\system32\WindowsAccessBridge.dll
2013-03-05 09:31:09 ----A---- C:\WINDOWS\system32\javaw.exe
2013-03-05 09:31:09 ----A---- C:\WINDOWS\system32\java.exe
2013-03-05 09:30:02 ----D---- C:\Program Files\Java
2013-03-04 15:15:49 ----D---- C:\UCTO2013

======List of files/folders modified in the last 1 month======

2013-03-23 22:47:08 ----D---- C:\WINDOWS\Temp
2013-03-23 22:44:25 ----D---- C:\Program Files\Mozilla Firefox
2013-03-23 22:37:44 ----RD---- C:\Program Files
2013-03-23 22:28:21 ----A---- C:\WINDOWS\SchedLgU.Txt
2013-03-23 22:18:44 ----D---- C:\WINDOWS
2013-03-23 21:45:17 ----D---- C:\WINDOWS\system32\CatRoot2
2013-03-23 21:26:08 ----D---- C:\WINDOWS\system32\drivers
2013-03-23 21:19:31 ----D---- C:\WINDOWS\Prefetch
2013-03-23 21:17:14 ----SHD---- C:\WINDOWS\Installer
2013-03-23 21:17:14 ----HD---- C:\Config.Msi
2013-03-23 21:17:12 ----D---- C:\WINDOWS\system32
2013-03-23 20:50:20 ----D---- C:\Documents and Settings\All Users\Data aplikací\Tarma Installer
2013-03-23 20:22:47 ----D---- C:\WINDOWS\pss
2013-03-23 19:55:21 ----D---- C:\WINDOWS\Minidump
2013-03-23 19:50:24 ----SH---- C:\boot.ini
2013-03-23 19:50:24 ----A---- C:\WINDOWS\win.ini
2013-03-23 19:50:24 ----A---- C:\WINDOWS\system.ini
2013-03-23 18:21:43 ----D---- C:\Documents and Settings\Hanka\Data aplikací\Skype
2013-03-23 17:37:21 ----D---- C:\Program Files\Lavalys
2013-03-23 17:17:04 ----D---- C:\Documents and Settings\Hanka\Data aplikací\skypePM
2013-03-23 16:46:27 ----HD---- C:\WINDOWS\inf
2013-03-23 16:44:00 ----D---- C:\Documents and Settings\Hanka\Data aplikací\ICQ
2013-03-17 08:39:06 ----D---- C:\Program Files\Opera
2013-03-17 08:18:42 ----D---- C:\WINDOWS\Network Diagnostic
2013-03-14 18:14:41 ----D---- C:\Documents and Settings\Hanka\Data aplikací\Winamp
2013-03-12 21:31:55 ----A---- C:\WINDOWS\system32\FlashPlayerApp.exe
2013-03-05 09:32:42 ----D---- C:\Program Files\Common Files
2013-03-05 09:30:25 ----A---- C:\WINDOWS\system32\npdeployJava1.dll
2013-03-05 09:30:24 ----A---- C:\WINDOWS\system32\deployJava1.dll
2013-03-04 15:14:12 ----D---- C:\UCTO2012

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 BTHidMgr;Bluetooth HID Manager Service; C:\WINDOWS\System32\Drivers\BTHidMgr.sys [2005-05-01 28271]
R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2010-08-09 691696]
R0 uagp35;Filtr Microsoft AGPv3.5; C:\WINDOWS\system32\DRIVERS\uagp35.sys [2008-04-13 44672]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2013-03-23 134336]
R1 avkmgr;avkmgr; C:\WINDOWS\system32\DRIVERS\avkmgr.sys [2013-03-23 36552]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 qtsmon;qtsmon; C:\WINDOWS\System32\drivers\qtsmon.sys [2010-12-05 72488]
R1 SiSkp;SiSkp; C:\WINDOWS\system32\DRIVERS\srvkp.sys [2006-11-10 16896]
R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2013-03-23 28520]
R2 avgntflt;avgntflt; C:\WINDOWS\system32\DRIVERS\avgntflt.sys [2013-03-23 83944]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2004-11-17 2297664]
R3 BlueletAudio;Bluetooth Audio Service; C:\WINDOWS\system32\DRIVERS\blueletaudio.sys [2006-06-23 31488]
R3 BlueletSCOAudio;Bluetooth SCO Audio Service; C:\WINDOWS\system32\DRIVERS\BlueletSCOAudio.sys [2005-08-31 20480]
R3 BT;Bluetooth PAN Network Adapter; C:\WINDOWS\system32\DRIVERS\btnetdrv.sys [2006-01-19 10068]
R3 BTHidEnum;Bluetooth HID Enumerator; C:\WINDOWS\system32\DRIVERS\vbtenum.sys [2005-07-30 11988]
R3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\WINDOWS\System32\Drivers\RootMdm.sys [2004-08-18 5888]
R3 RT61;Gigabyte RT61 Wireless Driver; C:\WINDOWS\system32\DRIVERS\RT61.sys [2009-06-12 500096]
R3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2008-04-13 20992]
R3 SiS315;SiS315; C:\WINDOWS\system32\DRIVERS\sisgrp.sys [2006-11-10 266752]
R3 VComm;Virtual Serial port driver; C:\WINDOWS\system32\DRIVERS\VComm.sys [2004-10-19 61312]
R3 VcommMgr;Bluetooth VComm Manager Service; C:\WINDOWS\System32\Drivers\VcommMgr.sys [2006-02-28 84836]
S1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
S3 androidusb;SAMSUNG Android Composite ADB Interface Driver; C:\WINDOWS\System32\Drivers\ssadadb.sys [2012-06-27 30312]
S3 andufj6m;andufj6m; C:\WINDOWS\system32\drivers\andufj6m.sys []
S3 Btcsrusb;Bluetooth USB For Bluetooth Service; C:\WINDOWS\System32\Drivers\btcusb.sys [2006-07-16 23040]
S3 BthEnum;Služba Bluetooth Enumerator; C:\WINDOWS\system32\DRIVERS\BthEnum.sys [2008-04-13 17024]
S3 BTHPORT;Ovladač portu Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2009-09-24 272128]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2008-04-13 18944]
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 dgderdrv;dgderdrv; C:\WINDOWS\System32\drivers\dgderdrv.sys [2011-12-23 20032]
S3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2006-04-13 49664]
S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2006-04-13 16496]
S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2006-04-13 21568]
S3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2009-09-24 12160]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\WINDOWS\system32\DRIVERS\rfcomm.sys [2008-04-13 59136]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM); C:\WINDOWS\system32\DRIVERS\ssadbus.sys [2012-06-27 121064]
S3 ssadmdfl;SAMSUNG Android USB Modem (Filter); C:\WINDOWS\system32\DRIVERS\ssadmdfl.sys [2012-06-27 12776]
S3 ssadmdm;SAMSUNG Android USB Modem Drivers; C:\WINDOWS\system32\DRIVERS\ssadmdm.sys [2012-06-27 136808]
S3 ssadserd;SAMSUNG Android USB Diagnostic Serial Port (WDM); C:\WINDOWS\system32\DRIVERS\ssadserd.sys [2012-06-27 114280]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 Wdf01000;Wdf01000; C:\WINDOWS\system32\DRIVERS\Wdf01000.sys [2006-11-02 492000]
S3 WpdUsb;WpdUsb; C:\WINDOWS\System32\Drivers\wpdusb.sys [2006-10-18 38528]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AntiVirService;Avira Real-Time Protection; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2013-03-23 110816]
R2 AntiVirSchedulerService;Avira Scheduler; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2013-03-23 86752]
R2 BthServ;Bluetooth Support Service; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre7\bin\jqs.exe [2013-03-05 170912]
R2 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0; C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe [2009-07-20 935208]
R2 NitroReaderDriverReadSpool;NitroPDFReaderDriverCreatorReadSpool; C:\Program Files\Nitro PDF\Reader\NitroPDFReaderDriverService.exe [2011-01-14 196912]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.exe [2007-08-09 73728]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S2 BlueSoleil Hid Service;BlueSoleil Hid Service; D:\BTNtService.exe [2005-04-06 110592]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-03-12 253656]
S3 HP Port Resolver;HP Port Resolver; C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBPRO.EXE [2005-05-20 81920]
S3 HP Status Server;HP Status Server; C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBOID.EXE [2004-10-16 73728]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]

-----------------EOF-----------------

Zdravim

Hlidejte volne misto na disku. Uz je to na hranici doporuceneho minima.


Stahnete crystal disk info http://sourceforge.jp/projects/crystald ... 5_0_0.zip/
Spustte ho. Za chvili se zobrazi vysledek.
Kliknete nahore na napis Úpravy a pak na napis Kopírovat. To co se zkopiruje (ulozi se to do pameti) mi sem vlozte



Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner a ulozte ho na plochu.
Ukoncete vsechny programy, jinak to AdwCleaner udela za vas.
Spustte ho.
Kliknete na Prohledat a program zacne pracovat.
Az skonci, vyplivne na vas log (pokud ne, najdete ho zde C:\AdwCleaner[R?].txt ), ten mi sem zkopirujte.

----------------------------------------------------------------------------
CrystalDiskInfo 5.0.0 (C) 2008-2012 hiyohiyo
Crystal Dew World : http://crystalmark.info/
----------------------------------------------------------------------------

OS : Windows XP Home Edition SP3 [5.1 Build 2600] (x86)
Date : 2013/03/24 12:13:46

-- Controller Map ----------------------------------------------------------
+ Řadič SiS rozhraní IDE ke sběrnici PCI [ATA]
+ Primární kanál IDE (0)
- HL-DT-ST CD-RW GCE-8526B
- Sekundární kanál IDE (1)
+ PCI Standardní dvoukanálový řadič IDE [ATA]
+ Primární kanál IDE (0)
- WDC WD800JD-00LSA0
- Sekundární kanál IDE (1)
+ AJORI5LX IDE Controller [SCSI]
- ZCJ 1UFW5UZW SCSI CdRom Device

-- Disk List ---------------------------------------------------------------
(1) WDC WD800JD-00LSA0 : 80,0 GB [0/1/0, pd1]

----------------------------------------------------------------------------
(1) WDC WD800JD-00LSA0
----------------------------------------------------------------------------
Model : WDC WD800JD-00LSA0
Firmware : 06.01D06
Serial Number : WD-WMAM9U570090
Disk Size : 80,0 GB (8,4/80,0/80,0)
Buffer Size : 8192 KB
Queue Depth : 1
# of Sectors : 156301488
Rotation Rate : Neznámy údaj
Interface : Serial ATA
Major Version : ATA/ATAPI-7
Minor Version : ----
Transfer Mode : SATA/300
Power On Hours : 12009 hod.
Power On Count : 6858 krát
Temparature : 28 C (82 F)
Health Status : Dobrý
Features : S.M.A.R.T., AAM, 48bit LBA
APM Level : ----
AAM Level : 80FEh [OFF]

-- S.M.A.R.T. --------------------------------------------------------------
ID Cur Wor Thr RawValues(6) Attribute Name
01 200 200 _51 000000000000 Počet chyb čtení
03 179 163 _21 0000000007D8 Čas na roztočení ploten
04 _94 _94 __0 000000001B0D Počet spuštění/zastavení
05 200 200 140 000000000000 Počet přemapovaných sektorů
07 200 200 _51 000000000000 Počet chybných hledání
09 _84 _84 __0 000000002EE9 Hodin v činnosti
0A 100 100 _51 000000000000 Počet opakovaných pokusů o roztočení ploten
0B 100 100 _51 000000000000 Počet pokusů o překalibrování
0C _94 _94 __0 000000001ACA Počet cyklů zapnutí zařízení
BE _72 _45 _45 00000000001C Teplota toku vzduchu
C2 115 _88 __0 00000000001C Teplota
C4 200 200 __0 000000000000 Počet udalostí s číslem realokování sektorů
C5 200 200 __0 000000000000 Počet podezřelých sektorů
C6 200 200 __0 000000000000 Počet neopravitelných sektorů
C7 200 200 __0 0000000006FC Počet chyb v kontrolním součtu UltraDMA
C8 200 200 _51 000000000000 Počet chyb při zápisu sektorů

-- IDENTIFY_DEVICE ---------------------------------------------------------
0 1 2 3 4 5 6 7 8 9
000: 427A 3FFF C837 0010 0000 003F 003F 0000 0000 0000
010: 2020 2020 2057 442D 574D 3955 3955 3537 3030 3930
020: 0000 4000 0041 3036 2E30 3036 3036 5744 4320 5744
030: 3830 304A 442D 3030 4C53 2020 2020 2020 2020 2020
040: 2020 2020 2020 2020 2020 2020 2020 8010 0000 2F00
050: 4001 0000 0000 0007 3FFF 003F 003F FC10 00FB 0110
060: F8B0 0950 0000 0007 0003 0078 0078 0078 0078 0000
070: 0000 0000 0000 0000 0000 0606 0606 0000 0040 0040
080: 00FE 0000 746B 7F01 4023 3C01 3C01 4023 407F 0000
090: 0000 0000 FFFE 0000 80FE 0000 0000 0000 0000 0000
100: F8B0 0950 0000 0000 0000 0000 0000 0000 0000 0000
110: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
120: 0000 0000 0000 0000 0000 0000 0000 0000 0009 0000
130: 0000 0000 0000 1658 0000 0000 0000 0000 0000 0000
140: 0000 0000 0004 0000 0000 0000 0000 0000 0000 0000
150: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
160: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
170: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
180: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
190: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
200: 0000 0000 0000 0000 0000 103F 103F 0000 0000 0000
210: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
220: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
230: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
240: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
250: 0000 0000 0000 0000 0000 15A5



# AdwCleaner v2.115 - Log vytvooen 24/03/2013 v 12:15:55
# Aktualizováno 17/03/2013 Xplode
# Operaení systém : Microsoft Windows XP Service Pack 3 (32 bits)
# Uživatel : Hanka - BERKOVI
# Spuštin systém : Normální
# Spuštino z : C:\Documents and Settings\Hanka\Plocha\adwcleaner.exe
# Volba [Prohledat]


***** [Služby] *****


***** [Soubory / Složky] *****

Složka Nalezeno : C:\Documents and Settings\All Users\Data aplikací\Ask
Složka Nalezeno : C:\Documents and Settings\All Users\Data aplikací\Babylon
Složka Nalezeno : C:\Documents and Settings\All Users\Data aplikací\ICQ\ICQToolbar
Složka Nalezeno : C:\Documents and Settings\All Users\Data aplikací\InstallMate
Složka Nalezeno : C:\Documents and Settings\All Users\Data aplikací\Tarma Installer
Složka Nalezeno : C:\Documents and Settings\All Users\Data aplikací\Trymedia
Složka Nalezeno : C:\Documents and Settings\Hanka\Data aplikací\Babylon
Složka Nalezeno : C:\Documents and Settings\Hanka\Data aplikací\BabylonToolbar
Složka Nalezeno : C:\Documents and Settings\Hanka\Data aplikací\Mozilla\Firefox\Profiles\m57i6dvm.default\Conduit
Složka Nalezeno : C:\Documents and Settings\Hanka\Data aplikací\Mozilla\Firefox\Profiles\m57i6dvm.default\ConduitEngine
Složka Nalezeno : C:\Documents and Settings\Hanka\Data aplikací\OpenCandy
Složka Nalezeno : C:\Documents and Settings\Hanka\Data aplikací\PriceGong
Složka Nalezeno : C:\Documents and Settings\Hanka\Data aplikací\searchresultstb
Složka Nalezeno : C:\Documents and Settings\Hanka\Local Settings\Data aplikací\Babylon
Složka Nalezeno : C:\Documents and Settings\Hanka\Local Settings\Data aplikací\Conduit
Složka Nalezeno : C:\Documents and Settings\Hanka\Local Settings\Data aplikací\OpenCandy
Složka Nalezeno : C:\Documents and Settings\Hanka\Local Settings\Data aplikací\PackageAware
Složka Nalezeno : C:\Program Files\Conduit
Složka Nalezeno : C:\Program Files\ICQ6Toolbar
Soubor Nalezeno : C:\Documents and Settings\Hanka\Data aplikací\Mozilla\Firefox\Profiles\m57i6dvm.default\searchplugins\Conduit.xml
Soubor Nalezeno : C:\Documents and Settings\Hanka\Data aplikací\Mozilla\Firefox\Profiles\m57i6dvm.default\searchplugins\icqplugin.xml
Soubor Nalezeno : C:\Documents and Settings\Hanka\Data aplikací\Mozilla\Firefox\Profiles\m57i6dvm.default\searchplugins\SweetIm.xml
Soubor Nalezeno : C:\Program Files\Mozilla Firefox\.autoreg

***** [Registry] *****

Klíe Nalezeno : HKCU\Software\APN PIP
Klíe Nalezeno : HKCU\Software\AppDataLow\SProtector
Klíe Nalezeno : HKCU\Software\Conduit
Klíe Nalezeno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40B7-AC73-056A5EBA4A7E}
Klíe Nalezeno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Klíe Nalezeno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2EECD738-5844-4A99-B4B6-146BF802613B}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{855F3B16-6D32-4FE6-8A56-BBB695989046}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49DD-99D7-DC866BE87DBC}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4A99-B4B6-146BF802613B}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{855F3B16-6D32-4FE6-8A56-BBB695989046}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{98889811-442D-49DD-99D7-DC866BE87DBC}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35B-6118-11DC-9C72-001320C79847}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35C-6118-11DC-9C72-001320C79847}
Klíe Nalezeno : HKCU\Software\PIP
Klíe Nalezeno : HKCU\Software\PriceGong
Klíe Nalezeno : HKCU\Software\SmartBar
Klíe Nalezeno : HKCU\Software\Softonic
Klíe Nalezeno : HKLM\Software\Babylon
Klíe Nalezeno : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\AppID\{CFDAFE39-20CE-451D-BD45-A37452F39CF0}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Klíe Nalezeno : HKLM\SOFTWARE\Classes\AppID\YontooIEClient.DLL
Klíe Nalezeno : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr
Klíe Nalezeno : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr.1
Klíe Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{7E84186E-B5DE-4226-8A66-6E49C6B511B4}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{FE9271F2-6EFD-44B0-A826-84C829536E93}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Conduit.Engine
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Prod.cap
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Toolbar.CT2475029
Klíe Nalezeno : HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}
Klíe Nalezeno : HKLM\Software\Conduit
Klíe Nalezeno : HKLM\Software\Freeze.com
Klíe Nalezeno : HKLM\SOFTWARE\Google\Chrome\Extensions\niapdbllcanepiiimjjndipklodoedlc
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Klíe Nalezeno : HKLM\Software\PIP
Klíe Nalezeno : HKLM\Software\SProtector
Klíe Nalezeno : HKLM\Software\Tarma Installer
Klíe Nalezeno : HKU\S-1-5-21-1004336348-725345543-1177238915-1004\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40B7-AC73-056A5EBA4A7E}
Klíe Nalezeno : HKU\S-1-5-21-1004336348-725345543-1177238915-1004\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Klíe Nalezeno : HKU\S-1-5-21-1004336348-725345543-1177238915-1004\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}

***** [Internetové prohlížeee] *****

-\\ Internet Explorer v8.0.6001.18702

[HKCU\Software\Microsoft\Internet Explorer\Main - ICQ Search] = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd

-\\ Mozilla Firefox v3.6.28 (cs)

Soubor : C:\Documents and Settings\Hanka\Data aplikací\Mozilla\Firefox\Profiles\m57i6dvm.default\prefs.js

Nalezeno : user_pref("CT2475029..clientLogIsEnabled", false);
Nalezeno : user_pref("CT2475029..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...]
Nalezeno : user_pref("CT2475029..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...]
Nalezeno : user_pref("CT2475029.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
Nalezeno : user_pref("CT2475029.CTID", "CT2475029");
Nalezeno : user_pref("CT2475029.CommunitiesChangesLastCheckTime", "Sat Apr 21 2012 21:23:59 GMT+0200");
Nalezeno : user_pref("CT2475029.CurrentServerDate", "10-2-2012");
Nalezeno : user_pref("CT2475029.DialogsAlignMode", "LTR");
Nalezeno : user_pref("CT2475029.DownloadDomainsListLastCheckTime", "Sat Apr 21 2012 21:23:59 GMT+0200");
Nalezeno : user_pref("CT2475029.DownloadReferralCookieData", "");
Nalezeno : user_pref("CT2475029.EMailNotifierPollDate", "Sat Apr 21 2012 21:24:00 GMT+0200");
Nalezeno : user_pref("CT2475029.FeedLastCount129133095456874337", 160);
Nalezeno : user_pref("CT2475029.FeedPollDate129132307482029379", "Sat Apr 21 2012 21:21:55 GMT+0200");
Nalezeno : user_pref("CT2475029.FeedPollDate129132307482029381", "Sat Apr 21 2012 21:21:55 GMT+0200");
Nalezeno : user_pref("CT2475029.FeedPollDate129132307482029382", "Sat Apr 21 2012 21:21:55 GMT+0200");
Nalezeno : user_pref("CT2475029.FeedPollDate129133095459686870", "Sat Apr 21 2012 21:21:55 GMT+0200");
Nalezeno : user_pref("CT2475029.FeedPollDate129133095459686871", "Sat Apr 21 2012 21:21:55 GMT+0200");
Nalezeno : user_pref("CT2475029.FeedPollDate129137437659687146", "Sat Apr 21 2012 21:21:55 GMT+0200");
Nalezeno : user_pref("CT2475029.FeedPollDate129137437659687147", "Sat Apr 21 2012 21:21:55 GMT+0200");
Nalezeno : user_pref("CT2475029.FeedPollDate129137437659687148", "Sat Apr 21 2012 21:21:55 GMT+0200");
Nalezeno : user_pref("CT2475029.FeedTTL129132307482029379", 40);
Nalezeno : user_pref("CT2475029.FeedTTL129132307482029381", 40);
Nalezeno : user_pref("CT2475029.FeedTTL129132307482029382", 40);
Nalezeno : user_pref("CT2475029.FeedTTL129133095459686870", 40);
Nalezeno : user_pref("CT2475029.FeedTTL129133095459686871", 40);
Nalezeno : user_pref("CT2475029.FeedTTL129137437659687146", 40);
Nalezeno : user_pref("CT2475029.FeedTTL129137437659687147", 40);
Nalezeno : user_pref("CT2475029.FeedTTL129137437659687148", 40);
Nalezeno : user_pref("CT2475029.FirstServerDate", "10-2-2012");
Nalezeno : user_pref("CT2475029.FirstTime", true);
Nalezeno : user_pref("CT2475029.FirstTimeFF3", true);
Nalezeno : user_pref("CT2475029.FixPageNotFoundErrors", true);
Nalezeno : user_pref("CT2475029.GroupingLastCheckTime", "Sat Apr 21 2012 21:23:59 GMT+0200");
Nalezeno : user_pref("CT2475029.GroupingLastResponse", false);
Nalezeno : user_pref("CT2475029.GroupingLastServerUpdateTime", "0");
Nalezeno : user_pref("CT2475029.GroupingServerCheckInterval", 1440);
Nalezeno : user_pref("CT2475029.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
Nalezeno : user_pref("CT2475029.HasUserGlobalKeys", true);
Nalezeno : user_pref("CT2475029.Initialize", true);
Nalezeno : user_pref("CT2475029.InitializeCommonPrefs", true);
Nalezeno : user_pref("CT2475029.InstallationAndCookieDataSentCount", 2);
Nalezeno : user_pref("CT2475029.InstallationId", "MyAshampoo.exe");
Nalezeno : user_pref("CT2475029.InstallationType", "ConduitIntegration");
Nalezeno : user_pref("CT2475029.InstalledDate", "Sat Apr 21 2012 21:22:10 GMT+0200");
Nalezeno : user_pref("CT2475029.InvalidateCache", false);
Nalezeno : user_pref("CT2475029.IsGrouping", true);
Nalezeno : user_pref("CT2475029.IsMulticommunity", true);
Nalezeno : user_pref("CT2475029.IsOpenThankYouPage", true);
Nalezeno : user_pref("CT2475029.IsOpenUninstallPage", true);
Nalezeno : user_pref("CT2475029.LanguagePackLastCheckTime", "Sat Apr 21 2012 21:22:23 GMT+0200");
Nalezeno : user_pref("CT2475029.LanguagePackReloadIntervalMM", 1440);
Nalezeno : user_pref("CT2475029.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...]
Nalezeno : user_pref("CT2475029.LastLogin_3.2.5.2", "Sat Apr 21 2012 21:22:24 GMT+0200");
Nalezeno : user_pref("CT2475029.LatestVersion", "3.9.0.3");
Nalezeno : user_pref("CT2475029.Locale", "en");
Nalezeno : user_pref("CT2475029.MCDetectTooltipHeight", "83");
Nalezeno : user_pref("CT2475029.MCDetectTooltipShow", true);
Nalezeno : user_pref("CT2475029.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
Nalezeno : user_pref("CT2475029.MCDetectTooltipWidth", "295");
Nalezeno : user_pref("CT2475029.RadioIsPodcast", false);
Nalezeno : user_pref("CT2475029.RadioLastCheckTime", "Sat Apr 21 2012 21:21:57 GMT+0200");
Nalezeno : user_pref("CT2475029.RadioLastUpdateIPServer", "3");
Nalezeno : user_pref("CT2475029.RadioLastUpdateServer", "129054397178370000");
Nalezeno : user_pref("CT2475029.RadioMediaID", "13098944");
Nalezeno : user_pref("CT2475029.RadioMediaType", "Media Player");
Nalezeno : user_pref("CT2475029.RadioMenuSelectedID", "EBRadioMenu_CT247502913098944");
Nalezeno : user_pref("CT2475029.RadioStationName", "Mellesleg%20-%20Rapp");
Nalezeno : user_pref("CT2475029.RadioStationURL", "hxxp://195.228.254.168:8060/");
Nalezeno : user_pref("CT2475029.SavedHomepage", "hxxp://www.centrum.cz/#utm_source=icq&utm_medium=generic");
Nalezeno : user_pref("CT2475029.SearchFromAddressBarIsInit", true);
Nalezeno : user_pref("CT2475029.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT247[...]
Nalezeno : user_pref("CT2475029.SearchInNewTabEnabled", true);
Nalezeno : user_pref("CT2475029.SearchInNewTabIntervalMM", 1440);
Nalezeno : user_pref("CT2475029.SearchInNewTabLastCheckTime", "Sat Apr 21 2012 21:21:54 GMT+0200");
Nalezeno : user_pref("CT2475029.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...]
Nalezeno : user_pref("CT2475029.SearchInNewTabUsageUrl", "hxxp://usage.hosting.toolbar.conduit-services.com/usa[...]
Nalezeno : user_pref("CT2475029.ServiceMapLastCheckTime", "Sat Apr 21 2012 21:22:08 GMT+0200");
Nalezeno : user_pref("CT2475029.SettingsLastCheckTime", "Sat Apr 21 2012 21:21:54 GMT+0200");
Nalezeno : user_pref("CT2475029.SettingsLastUpdate", "1328797653");
Nalezeno : user_pref("CT2475029.ThirdPartyComponentsInterval", 504);
Nalezeno : user_pref("CT2475029.ThirdPartyComponentsLastCheck", "Sat Apr 21 2012 21:21:53 GMT+0200");
Nalezeno : user_pref("CT2475029.ThirdPartyComponentsLastUpdate", "1312887586");
Nalezeno : user_pref("CT2475029.TrusteLinkUrl", "hxxp://trust.conduit.com/EB_ORIGINAL_CTID");
Nalezeno : user_pref("CT2475029.UserID", "UN28628792785169477");
Nalezeno : user_pref("CT2475029.components.1000034", true);
Nalezeno : user_pref("CT2475029.components.1000234", true);
Nalezeno : user_pref("CT2475029.myStuffEnabled", true);
Nalezeno : user_pref("CT2475029.myStuffPublihserMinWidth", 400);
Nalezeno : user_pref("CT2475029.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...]
Nalezeno : user_pref("CT2475029.myStuffServiceIntervalMM", 1440);
Nalezeno : user_pref("CT2475029.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...]
Nalezeno : user_pref("CT2475029.testingCtid", "");
Nalezeno : user_pref("CT2475029.toolbarAppMetaDataLastCheckTime", "Sat Apr 21 2012 21:22:23 GMT+0200");
Nalezeno : user_pref("CT2475029.toolbarContextMenuLastCheckTime", "Fri Feb 10 2012 18:54:28 GMT+0100");
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit.com/root/CT2475029/CT2475029[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/909619/905414/CZ", "\"0\"")[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2475029", [...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&lo[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&loc[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&lo[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&local[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/toolbar/", "\"13a760730d9291[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=0", "63[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=en", "\"cde[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/1344951.xml", "\"1075e9ba882f271aa976[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/16887175.xml", "\"926d4c46b6d929471d3[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/17151925.xml", "\"9062df4f08871200bd2[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/20536157.xml", "\"808d3366ee9c0ec789c[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/30261067.xml", "\"ddc97d4a8cdbefd7669[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/34655603.xml", "\"97399411e434569f727[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/759251.xml", "\"8062b2dffd052d4212369[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/816653.xml", "\"50b20199a8f8f3746bc32[...]
Nalezeno : user_pref("CommunityToolbar.EngineOwner", "CT2475029");
Nalezeno : user_pref("CommunityToolbar.EngineOwnerGuid", "{a1e75a0e-4397-4ba8-bb50-e19fb66890f4}");
Nalezeno : user_pref("CommunityToolbar.EngineOwnerToolbarId", "myashampoo");
Nalezeno : user_pref("CommunityToolbar.IsMyStuffImportedToEngine", true);
Nalezeno : user_pref("CommunityToolbar.OriginalEngineOwner", "CT2475029");
Nalezeno : user_pref("CommunityToolbar.OriginalEngineOwnerGuid", "{a1e75a0e-4397-4ba8-bb50-e19fb66890f4}");
Nalezeno : user_pref("CommunityToolbar.OriginalEngineOwnerToolbarId", "myashampoo");
Nalezeno : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "hxxp://search.icq.com/search/afe_results[...]
Nalezeno : user_pref("CommunityToolbar.ToolbarsList", "CT2475029,ConduitEngine");
Nalezeno : user_pref("CommunityToolbar.ToolbarsList2", "CT2475029");
Nalezeno : user_pref("CommunityToolbar.alert.alertInfoInterval", 60);
Nalezeno : user_pref("CommunityToolbar.alert.alertInfoLastCheckTime", "Sat Apr 21 2012 21:22:19 GMT+0200");
Nalezeno : user_pref("CommunityToolbar.alert.clientsServerUrl", "hxxp://alert.client.conduit.com");
Nalezeno : user_pref("CommunityToolbar.alert.locale", "");
Nalezeno : user_pref("CommunityToolbar.alert.loginIntervalMin", 0);
Nalezeno : user_pref("CommunityToolbar.alert.loginLastCheckTime", "Sat Apr 21 2012 21:21:53 GMT+0200");
Nalezeno : user_pref("CommunityToolbar.alert.loginLastUpdateTime", "");
Nalezeno : user_pref("CommunityToolbar.alert.messageShowTimeSec", 20);
Nalezeno : user_pref("CommunityToolbar.alert.servicesServerUrl", "hxxp://alert.services.conduit.com");
Nalezeno : user_pref("CommunityToolbar.alert.showTrayIcon", false);
Nalezeno : user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300);
Nalezeno : user_pref("CommunityToolbar.alert.userId", "974c7453-9820-4485-b8a4-cb19eb1e8279");
Nalezeno : user_pref("CommunityToolbar.keywordURLSelectedCTID", "CT2475029");
Nalezeno : user_pref("CommunityToolbar.twitter.user_1344951.LastCheckTime", "Sat Apr 21 2012 21:21:57 GMT+0200"[...]
Nalezeno : user_pref("CommunityToolbar.twitter.user_16887175.LastCheckTime", "Sat Apr 21 2012 21:21:57 GMT+0200[...]
Nalezeno : user_pref("CommunityToolbar.twitter.user_17151925.LastCheckTime", "Sat Apr 21 2012 21:21:57 GMT+0200[...]
Nalezeno : user_pref("CommunityToolbar.twitter.user_20536157.LastCheckTime", "Sat Apr 21 2012 21:21:57 GMT+0200[...]
Nalezeno : user_pref("CommunityToolbar.twitter.user_30261067.LastCheckTime", "Sat Apr 21 2012 21:21:57 GMT+0200[...]
Nalezeno : user_pref("CommunityToolbar.twitter.user_34655603.LastCheckTime", "Sat Apr 21 2012 21:21:57 GMT+0200[...]
Nalezeno : user_pref("CommunityToolbar.twitter.user_759251.LastCheckTime", "Sat Apr 21 2012 21:21:57 GMT+0200")[...]
Nalezeno : user_pref("CommunityToolbar.twitter.user_816653.LastCheckTime", "Sat Apr 21 2012 21:21:57 GMT+0200")[...]
Nalezeno : user_pref("ConduitEngine.FirstServerDate", "04/21/2012 22");
Nalezeno : user_pref("ConduitEngine.FirstTime", true);
Nalezeno : user_pref("ConduitEngine.FirstTimeFF3", true);
Nalezeno : user_pref("ConduitEngine.HasUserGlobalKeys", true);
Nalezeno : user_pref("ConduitEngine.Initialize", true);
Nalezeno : user_pref("ConduitEngine.InitializeCommonPrefs", true);
Nalezeno : user_pref("ConduitEngine.InstalledDate", "Sat Apr 21 2012 21:22:18 GMT+0200");
Nalezeno : user_pref("ConduitEngine.IsMulticommunity", false);
Nalezeno : user_pref("ConduitEngine.IsOpenThankYouPage", false);
Nalezeno : user_pref("ConduitEngine.IsOpenUninstallPage", true);
Nalezeno : user_pref("ConduitEngine.LanguagePackLastCheckTime", "Sat Apr 21 2012 21:22:19 GMT+0200");
Nalezeno : user_pref("ConduitEngine.LastLogin_3.2.5.2", "Sat Apr 21 2012 21:22:19 GMT+0200");
Nalezeno : user_pref("ConduitEngine.PublisherContainerWidth", 0);
Nalezeno : user_pref("ConduitEngine.SearchFromAddressBarIsInit", true);
Nalezeno : user_pref("ConduitEngine.SettingsLastCheckTime", "Sat Apr 21 2012 21:22:17 GMT+0200");
Nalezeno : user_pref("ConduitEngine.UserID", "UN83559625307382389");
Nalezeno : user_pref("ConduitEngine.engineLocale", "cs");
Nalezeno : user_pref("ConduitEngine.enngineContextMenuLastCheckTime", "Sat Apr 21 2012 21:22:18 GMT+0200");
Nalezeno : user_pref("ConduitEngine.initDone", true);
Nalezeno : user_pref("browser.search.defaultthis.engineName", "MyAshampoo Customized Web Search");
Nalezeno : user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2475029&Sea[...]
Nalezeno : user_pref("extensions.BabylonToolbar.aflt", "babsst");
Nalezeno : user_pref("extensions.BabylonToolbar.babTrack", "affID=100762");
Nalezeno : user_pref("extensions.BabylonToolbar.dfltLng", "en");
Nalezeno : user_pref("extensions.BabylonToolbar.id", "b4093103000000000000001583b97080");
Nalezeno : user_pref("extensions.BabylonToolbar.instlDay", "15292");
Nalezeno : user_pref("extensions.BabylonToolbar.instlRef", "sst");
Nalezeno : user_pref("extensions.BabylonToolbar.keyWordUrl", "hxxp://search.babylon.com/?babsrc=SP_ss&q={search[...]
Nalezeno : user_pref("extensions.BabylonToolbar.lastVrsnTs", "1.4.35.1015:22:09");
Nalezeno : user_pref("extensions.BabylonToolbar.prdct", "BabylonToolbar");
Nalezeno : user_pref("extensions.BabylonToolbar.prtnrId", "babylon");
Nalezeno : user_pref("extensions.BabylonToolbar.smplGrp", "none");
Nalezeno : user_pref("extensions.BabylonToolbar.srcExt", "ss");
Nalezeno : user_pref("extensions.BabylonToolbar.srchPrvdr", "Search the web (Babylon)");
Nalezeno : user_pref("extensions.BabylonToolbar.tlbrId", "base");
Nalezeno : user_pref("extensions.BabylonToolbar.vrsn", "1.4.35.10");
Nalezeno : user_pref("extensions.BabylonToolbar.vrsnTs", "1.4.35.1015:22:09");
Nalezeno : user_pref("extentions.y2layers.defaultEnableAppsList", "twittube,ezLooker,pagerage,buzzdock,toprelat[...]
Nalezeno : user_pref("extentions.y2layers.installId", "b0298105-7fe4-4776-bbab-0ce870a3e443");
Nalezeno : user_pref("icqtoolbar.allowSendURL", false);
Nalezeno : user_pref("icqtoolbar.engineVerified", true);
Nalezeno : user_pref("icqtoolbar.geolastmodified", 1364068796);
Nalezeno : user_pref("icqtoolbar.hiddenElements", "itb_options");
Nalezeno : user_pref("icqtoolbar.icqgeo", 42);
Nalezeno : user_pref("icqtoolbar.installTime", "1304547587");
Nalezeno : user_pref("icqtoolbar.newtab_state", "1");
Nalezeno : user_pref("icqtoolbar.numberOfSearches", 0);
Nalezeno : user_pref("icqtoolbar.previousFFVersion", "3.6.3");
Nalezeno : user_pref("icqtoolbar.showPc", true);
Nalezeno : user_pref("icqtoolbar.skip_default_search", "no");
Nalezeno : user_pref("icqtoolbar.suggestions", false);
Nalezeno : user_pref("icqtoolbar.uninstStatSent", true);
Nalezeno : user_pref("icqtoolbar.uniqueID", "129879975112987994891303748580943");
Nalezeno : user_pref("icqtoolbar.usageStatstTimestamp", 1364068798);
Nalezeno : user_pref("icqtoolbar.voucherHideClicks", 0);
Nalezeno : user_pref("icqtoolbar.voucherMoreLinkClicks", 0);
Nalezeno : user_pref("icqtoolbar.voucherRedeemClicks", 0);
Nalezeno : user_pref("icqtoolbar.voucherWasShown", 0);
Nalezeno : user_pref("icqtoolbar.xmlEnableSuggestions", false);
Nalezeno : user_pref("icqtoolbar.xmlLanguage", "cs");
Nalezeno : user_pref("keyword.URL", "hxxp://search.icq.com/search/afe_results.php?ch_id=afex&tb_ver=1.1.9&q=");

-\\ Opera v12.14.1738.0

Soubor : C:\Documents and Settings\LocalService\Data aplikací\Opera\Opera\operaprefs.ini

[OK] Soubor je eistý.

Soubor : C:\Documents and Settings\Hanka\Data aplikací\Opera\Opera\operaprefs.ini

[OK] Soubor je eistý.

*************************

AdwCleaner[R1].txt - [23909 octets] - [24/03/2013 12:15:55]

########## EOF - C:\AdwCleaner[R1].txt - [23970 octets] ##########

Znovu ukoncete vsechny programy a spustte AdwCleaner.
Tentokrat kliknete na Smazat
Program zacne pracovat (muze dojit k restartu pc) a vyplivne dalsi log (pripadne bude zde C:\AdwCleaner [S1].txt ). Ten mi sem zase zkopirujte.



Udelejte !!!kompletni!!! kontrolu s MBAM http://forum.viry.cz/viewtopic.php?f=29&t=115222 a dejte sem vysledky. Predem nic nemazte, miva obcas falesne detekce

# AdwCleaner v2.115 - Log vytvooen 24/03/2013 v 13:03:59
# Aktualizováno 17/03/2013 Xplode
# Operaení systém : Microsoft Windows XP Service Pack 3 (32 bits)
# Uživatel : Hanka - BERKOVI
# Spuštin systém : Normální
# Spuštino z : C:\Documents and Settings\Hanka\Plocha\adwcleaner.exe
# Volba [Vymazat]


***** [Služby] *****


***** [Soubory / Složky] *****

Složka Vymazáno : C:\Documents and Settings\All Users\Data aplikací\Ask
Složka Vymazáno : C:\Documents and Settings\All Users\Data aplikací\Babylon
Složka Vymazáno : C:\Documents and Settings\All Users\Data aplikací\ICQ\ICQToolbar
Složka Vymazáno : C:\Documents and Settings\All Users\Data aplikací\InstallMate
Složka Vymazáno : C:\Documents and Settings\All Users\Data aplikací\Tarma Installer
Složka Vymazáno : C:\Documents and Settings\All Users\Data aplikací\Trymedia
Složka Vymazáno : C:\Documents and Settings\Hanka\Data aplikací\Babylon
Složka Vymazáno : C:\Documents and Settings\Hanka\Data aplikací\BabylonToolbar
Složka Vymazáno : C:\Documents and Settings\Hanka\Data aplikací\Mozilla\Firefox\Profiles\m57i6dvm.default\Conduit
Složka Vymazáno : C:\Documents and Settings\Hanka\Data aplikací\Mozilla\Firefox\Profiles\m57i6dvm.default\ConduitEngine
Složka Vymazáno : C:\Documents and Settings\Hanka\Data aplikací\OpenCandy
Složka Vymazáno : C:\Documents and Settings\Hanka\Data aplikací\PriceGong
Složka Vymazáno : C:\Documents and Settings\Hanka\Data aplikací\searchresultstb
Složka Vymazáno : C:\Documents and Settings\Hanka\Local Settings\Data aplikací\Babylon
Složka Vymazáno : C:\Documents and Settings\Hanka\Local Settings\Data aplikací\Conduit
Složka Vymazáno : C:\Documents and Settings\Hanka\Local Settings\Data aplikací\OpenCandy
Složka Vymazáno : C:\Documents and Settings\Hanka\Local Settings\Data aplikací\PackageAware
Složka Vymazáno : C:\Program Files\Conduit
Složka Vymazáno : C:\Program Files\ICQ6Toolbar
Soubor Vymazáno : C:\Documents and Settings\Hanka\Data aplikací\Mozilla\Firefox\Profiles\m57i6dvm.default\searchplugins\Conduit.xml
Soubor Vymazáno : C:\Documents and Settings\Hanka\Data aplikací\Mozilla\Firefox\Profiles\m57i6dvm.default\searchplugins\icqplugin.xml
Soubor Vymazáno : C:\Documents and Settings\Hanka\Data aplikací\Mozilla\Firefox\Profiles\m57i6dvm.default\searchplugins\SweetIm.xml
Soubor Vymazáno : C:\Program Files\Mozilla Firefox\.autoreg

***** [Registry] *****

Klíe Vymazáno : HKCU\Software\APN PIP
Klíe Vymazáno : HKCU\Software\AppDataLow\SProtector
Klíe Vymazáno : HKCU\Software\Conduit
Klíe Vymazáno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40B7-AC73-056A5EBA4A7E}
Klíe Vymazáno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Klíe Vymazáno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2EECD738-5844-4A99-B4B6-146BF802613B}
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{855F3B16-6D32-4FE6-8A56-BBB695989046}
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49DD-99D7-DC866BE87DBC}
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4A99-B4B6-146BF802613B}
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{855F3B16-6D32-4FE6-8A56-BBB695989046}
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{98889811-442D-49DD-99D7-DC866BE87DBC}
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35B-6118-11DC-9C72-001320C79847}
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35C-6118-11DC-9C72-001320C79847}
Klíe Vymazáno : HKCU\Software\PIP
Klíe Vymazáno : HKCU\Software\PriceGong
Klíe Vymazáno : HKCU\Software\SmartBar
Klíe Vymazáno : HKCU\Software\Softonic
Klíe Vymazáno : HKLM\Software\Babylon
Klíe Vymazáno : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\AppID\{CFDAFE39-20CE-451D-BD45-A37452F39CF0}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Klíe Vymazáno : HKLM\SOFTWARE\Classes\AppID\YontooIEClient.DLL
Klíe Vymazáno : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr
Klíe Vymazáno : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr.1
Klíe Vymazáno : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\CLSID\{7E84186E-B5DE-4226-8A66-6E49C6B511B4}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\CLSID\{FE9271F2-6EFD-44B0-A826-84C829536E93}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Conduit.Engine
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Prod.cap
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Toolbar.CT2475029
Klíe Vymazáno : HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}
Klíe Vymazáno : HKLM\Software\Conduit
Klíe Vymazáno : HKLM\Software\Freeze.com
Klíe Vymazáno : HKLM\SOFTWARE\Google\Chrome\Extensions\niapdbllcanepiiimjjndipklodoedlc
Klíe Vymazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Klíe Vymazáno : HKLM\Software\PIP
Klíe Vymazáno : HKLM\Software\SProtector
Klíe Vymazáno : HKLM\Software\Tarma Installer

***** [Internetové prohlížeee] *****

-\\ Internet Explorer v8.0.6001.18702

Zaminino : [HKCU\Software\Microsoft\Internet Explorer\Main - ICQ Search] = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd --> hxxp://www.google.com

-\\ Mozilla Firefox v3.6.28 (cs)

Soubor : C:\Documents and Settings\Hanka\Data aplikací\Mozilla\Firefox\Profiles\m57i6dvm.default\prefs.js

C:\Documents and Settings\Hanka\Data aplikací\Mozilla\Firefox\Profiles\m57i6dvm.default\user.js ... Vymazáno !

Vymazáno : user_pref("CT2475029..clientLogIsEnabled", false);
Vymazáno : user_pref("CT2475029..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...]
Vymazáno : user_pref("CT2475029..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...]
Vymazáno : user_pref("CT2475029.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
Vymazáno : user_pref("CT2475029.CTID", "CT2475029");
Vymazáno : user_pref("CT2475029.CommunitiesChangesLastCheckTime", "Sat Apr 21 2012 21:23:59 GMT+0200");
Vymazáno : user_pref("CT2475029.CurrentServerDate", "10-2-2012");
Vymazáno : user_pref("CT2475029.DialogsAlignMode", "LTR");
Vymazáno : user_pref("CT2475029.DownloadDomainsListLastCheckTime", "Sat Apr 21 2012 21:23:59 GMT+0200");
Vymazáno : user_pref("CT2475029.DownloadReferralCookieData", "");
Vymazáno : user_pref("CT2475029.EMailNotifierPollDate", "Sat Apr 21 2012 21:24:00 GMT+0200");
Vymazáno : user_pref("CT2475029.FeedLastCount129133095456874337", 160);
Vymazáno : user_pref("CT2475029.FeedPollDate129132307482029379", "Sat Apr 21 2012 21:21:55 GMT+0200");
Vymazáno : user_pref("CT2475029.FeedPollDate129132307482029381", "Sat Apr 21 2012 21:21:55 GMT+0200");
Vymazáno : user_pref("CT2475029.FeedPollDate129132307482029382", "Sat Apr 21 2012 21:21:55 GMT+0200");
Vymazáno : user_pref("CT2475029.FeedPollDate129133095459686870", "Sat Apr 21 2012 21:21:55 GMT+0200");
Vymazáno : user_pref("CT2475029.FeedPollDate129133095459686871", "Sat Apr 21 2012 21:21:55 GMT+0200");
Vymazáno : user_pref("CT2475029.FeedPollDate129137437659687146", "Sat Apr 21 2012 21:21:55 GMT+0200");
Vymazáno : user_pref("CT2475029.FeedPollDate129137437659687147", "Sat Apr 21 2012 21:21:55 GMT+0200");
Vymazáno : user_pref("CT2475029.FeedPollDate129137437659687148", "Sat Apr 21 2012 21:21:55 GMT+0200");
Vymazáno : user_pref("CT2475029.FeedTTL129132307482029379", 40);
Vymazáno : user_pref("CT2475029.FeedTTL129132307482029381", 40);
Vymazáno : user_pref("CT2475029.FeedTTL129132307482029382", 40);
Vymazáno : user_pref("CT2475029.FeedTTL129133095459686870", 40);
Vymazáno : user_pref("CT2475029.FeedTTL129133095459686871", 40);
Vymazáno : user_pref("CT2475029.FeedTTL129137437659687146", 40);
Vymazáno : user_pref("CT2475029.FeedTTL129137437659687147", 40);
Vymazáno : user_pref("CT2475029.FeedTTL129137437659687148", 40);
Vymazáno : user_pref("CT2475029.FirstServerDate", "10-2-2012");
Vymazáno : user_pref("CT2475029.FirstTime", true);
Vymazáno : user_pref("CT2475029.FirstTimeFF3", true);
Vymazáno : user_pref("CT2475029.FixPageNotFoundErrors", true);
Vymazáno : user_pref("CT2475029.GroupingLastCheckTime", "Sat Apr 21 2012 21:23:59 GMT+0200");
Vymazáno : user_pref("CT2475029.GroupingLastResponse", false);
Vymazáno : user_pref("CT2475029.GroupingLastServerUpdateTime", "0");
Vymazáno : user_pref("CT2475029.GroupingServerCheckInterval", 1440);
Vymazáno : user_pref("CT2475029.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
Vymazáno : user_pref("CT2475029.HasUserGlobalKeys", true);
Vymazáno : user_pref("CT2475029.Initialize", true);
Vymazáno : user_pref("CT2475029.InitializeCommonPrefs", true);
Vymazáno : user_pref("CT2475029.InstallationAndCookieDataSentCount", 2);
Vymazáno : user_pref("CT2475029.InstallationId", "MyAshampoo.exe");
Vymazáno : user_pref("CT2475029.InstallationType", "ConduitIntegration");
Vymazáno : user_pref("CT2475029.InstalledDate", "Sat Apr 21 2012 21:22:10 GMT+0200");
Vymazáno : user_pref("CT2475029.InvalidateCache", false);
Vymazáno : user_pref("CT2475029.IsGrouping", true);
Vymazáno : user_pref("CT2475029.IsMulticommunity", true);
Vymazáno : user_pref("CT2475029.IsOpenThankYouPage", true);
Vymazáno : user_pref("CT2475029.IsOpenUninstallPage", true);
Vymazáno : user_pref("CT2475029.LanguagePackLastCheckTime", "Sat Apr 21 2012 21:22:23 GMT+0200");
Vymazáno : user_pref("CT2475029.LanguagePackReloadIntervalMM", 1440);
Vymazáno : user_pref("CT2475029.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...]
Vymazáno : user_pref("CT2475029.LastLogin_3.2.5.2", "Sat Apr 21 2012 21:22:24 GMT+0200");
Vymazáno : user_pref("CT2475029.LatestVersion", "3.9.0.3");
Vymazáno : user_pref("CT2475029.Locale", "en");
Vymazáno : user_pref("CT2475029.MCDetectTooltipHeight", "83");
Vymazáno : user_pref("CT2475029.MCDetectTooltipShow", true);
Vymazáno : user_pref("CT2475029.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
Vymazáno : user_pref("CT2475029.MCDetectTooltipWidth", "295");
Vymazáno : user_pref("CT2475029.RadioIsPodcast", false);
Vymazáno : user_pref("CT2475029.RadioLastCheckTime", "Sat Apr 21 2012 21:21:57 GMT+0200");
Vymazáno : user_pref("CT2475029.RadioLastUpdateIPServer", "3");
Vymazáno : user_pref("CT2475029.RadioLastUpdateServer", "129054397178370000");
Vymazáno : user_pref("CT2475029.RadioMediaID", "13098944");
Vymazáno : user_pref("CT2475029.RadioMediaType", "Media Player");
Vymazáno : user_pref("CT2475029.RadioMenuSelectedID", "EBRadioMenu_CT247502913098944");
Vymazáno : user_pref("CT2475029.RadioStationName", "Mellesleg%20-%20Rapp");
Vymazáno : user_pref("CT2475029.RadioStationURL", "hxxp://195.228.254.168:8060/");
Vymazáno : user_pref("CT2475029.SavedHomepage", "hxxp://www.centrum.cz/#utm_source=icq&utm_medium=generic");
Vymazáno : user_pref("CT2475029.SearchFromAddressBarIsInit", true);
Vymazáno : user_pref("CT2475029.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT247[...]
Vymazáno : user_pref("CT2475029.SearchInNewTabEnabled", true);
Vymazáno : user_pref("CT2475029.SearchInNewTabIntervalMM", 1440);
Vymazáno : user_pref("CT2475029.SearchInNewTabLastCheckTime", "Sat Apr 21 2012 21:21:54 GMT+0200");
Vymazáno : user_pref("CT2475029.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...]
Vymazáno : user_pref("CT2475029.SearchInNewTabUsageUrl", "hxxp://usage.hosting.toolbar.conduit-services.com/usa[...]
Vymazáno : user_pref("CT2475029.ServiceMapLastCheckTime", "Sat Apr 21 2012 21:22:08 GMT+0200");
Vymazáno : user_pref("CT2475029.SettingsLastCheckTime", "Sat Apr 21 2012 21:21:54 GMT+0200");
Vymazáno : user_pref("CT2475029.SettingsLastUpdate", "1328797653");
Vymazáno : user_pref("CT2475029.ThirdPartyComponentsInterval", 504);
Vymazáno : user_pref("CT2475029.ThirdPartyComponentsLastCheck", "Sat Apr 21 2012 21:21:53 GMT+0200");
Vymazáno : user_pref("CT2475029.ThirdPartyComponentsLastUpdate", "1312887586");
Vymazáno : user_pref("CT2475029.TrusteLinkUrl", "hxxp://trust.conduit.com/EB_ORIGINAL_CTID");
Vymazáno : user_pref("CT2475029.UserID", "UN28628792785169477");
Vymazáno : user_pref("CT2475029.components.1000034", true);
Vymazáno : user_pref("CT2475029.components.1000234", true);
Vymazáno : user_pref("CT2475029.myStuffEnabled", true);
Vymazáno : user_pref("CT2475029.myStuffPublihserMinWidth", 400);
Vymazáno : user_pref("CT2475029.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...]
Vymazáno : user_pref("CT2475029.myStuffServiceIntervalMM", 1440);
Vymazáno : user_pref("CT2475029.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...]
Vymazáno : user_pref("CT2475029.testingCtid", "");
Vymazáno : user_pref("CT2475029.toolbarAppMetaDataLastCheckTime", "Sat Apr 21 2012 21:22:23 GMT+0200");
Vymazáno : user_pref("CT2475029.toolbarContextMenuLastCheckTime", "Fri Feb 10 2012 18:54:28 GMT+0100");
Vymazáno : user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit.com/root/CT2475029/CT2475029[...]
Vymazáno : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/909619/905414/CZ", "\"0\"")[...]
Vymazáno : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2475029", [...]
Vymazáno : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&lo[...]
Vymazáno : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&loc[...]
Vymazáno : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&lo[...]
Vymazáno : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&local[...]
Vymazáno : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/toolbar/", "\"13a760730d9291[...]
Vymazáno : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=0", "63[...]
Vymazáno : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=en", "\"cde[...]
Vymazáno : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/1344951.xml", "\"1075e9ba882f271aa976[...]
Vymazáno : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/16887175.xml", "\"926d4c46b6d929471d3[...]
Vymazáno : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/17151925.xml", "\"9062df4f08871200bd2[...]
Vymazáno : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/20536157.xml", "\"808d3366ee9c0ec789c[...]
Vymazáno : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/30261067.xml", "\"ddc97d4a8cdbefd7669[...]
Vymazáno : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/34655603.xml", "\"97399411e434569f727[...]
Vymazáno : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/759251.xml", "\"8062b2dffd052d4212369[...]
Vymazáno : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/816653.xml", "\"50b20199a8f8f3746bc32[...]
Vymazáno : user_pref("CommunityToolbar.EngineOwner", "CT2475029");
Vymazáno : user_pref("CommunityToolbar.EngineOwnerGuid", "{a1e75a0e-4397-4ba8-bb50-e19fb66890f4}");
Vymazáno : user_pref("CommunityToolbar.EngineOwnerToolbarId", "myashampoo");
Vymazáno : user_pref("CommunityToolbar.IsMyStuffImportedToEngine", true);
Vymazáno : user_pref("CommunityToolbar.OriginalEngineOwner", "CT2475029");
Vymazáno : user_pref("CommunityToolbar.OriginalEngineOwnerGuid", "{a1e75a0e-4397-4ba8-bb50-e19fb66890f4}");
Vymazáno : user_pref("CommunityToolbar.OriginalEngineOwnerToolbarId", "myashampoo");
Vymazáno : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "hxxp://search.icq.com/search/afe_results[...]
Vymazáno : user_pref("CommunityToolbar.ToolbarsList", "CT2475029,ConduitEngine");
Vymazáno : user_pref("CommunityToolbar.ToolbarsList2", "CT2475029");
Vymazáno : user_pref("CommunityToolbar.alert.alertInfoInterval", 60);
Vymazáno : user_pref("CommunityToolbar.alert.alertInfoLastCheckTime", "Sat Apr 21 2012 21:22:19 GMT+0200");
Vymazáno : user_pref("CommunityToolbar.alert.clientsServerUrl", "hxxp://alert.client.conduit.com");
Vymazáno : user_pref("CommunityToolbar.alert.locale", "");
Vymazáno : user_pref("CommunityToolbar.alert.loginIntervalMin", 0);
Vymazáno : user_pref("CommunityToolbar.alert.loginLastCheckTime", "Sat Apr 21 2012 21:21:53 GMT+0200");
Vymazáno : user_pref("CommunityToolbar.alert.loginLastUpdateTime", "");
Vymazáno : user_pref("CommunityToolbar.alert.messageShowTimeSec", 20);
Vymazáno : user_pref("CommunityToolbar.alert.servicesServerUrl", "hxxp://alert.services.conduit.com");
Vymazáno : user_pref("CommunityToolbar.alert.showTrayIcon", false);
Vymazáno : user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300);
Vymazáno : user_pref("CommunityToolbar.alert.userId", "974c7453-9820-4485-b8a4-cb19eb1e8279");
Vymazáno : user_pref("CommunityToolbar.keywordURLSelectedCTID", "CT2475029");
Vymazáno : user_pref("CommunityToolbar.twitter.user_1344951.LastCheckTime", "Sat Apr 21 2012 21:21:57 GMT+0200"[...]
Vymazáno : user_pref("CommunityToolbar.twitter.user_16887175.LastCheckTime", "Sat Apr 21 2012 21:21:57 GMT+0200[...]
Vymazáno : user_pref("CommunityToolbar.twitter.user_17151925.LastCheckTime", "Sat Apr 21 2012 21:21:57 GMT+0200[...]
Vymazáno : user_pref("CommunityToolbar.twitter.user_20536157.LastCheckTime", "Sat Apr 21 2012 21:21:57 GMT+0200[...]
Vymazáno : user_pref("CommunityToolbar.twitter.user_30261067.LastCheckTime", "Sat Apr 21 2012 21:21:57 GMT+0200[...]
Vymazáno : user_pref("CommunityToolbar.twitter.user_34655603.LastCheckTime", "Sat Apr 21 2012 21:21:57 GMT+0200[...]
Vymazáno : user_pref("CommunityToolbar.twitter.user_759251.LastCheckTime", "Sat Apr 21 2012 21:21:57 GMT+0200")[...]
Vymazáno : user_pref("CommunityToolbar.twitter.user_816653.LastCheckTime", "Sat Apr 21 2012 21:21:57 GMT+0200")[...]
Vymazáno : user_pref("ConduitEngine.FirstServerDate", "04/21/2012 22");
Vymazáno : user_pref("ConduitEngine.FirstTime", true);
Vymazáno : user_pref("ConduitEngine.FirstTimeFF3", true);
Vymazáno : user_pref("ConduitEngine.HasUserGlobalKeys", true);
Vymazáno : user_pref("ConduitEngine.Initialize", true);
Vymazáno : user_pref("ConduitEngine.InitializeCommonPrefs", true);
Vymazáno : user_pref("ConduitEngine.InstalledDate", "Sat Apr 21 2012 21:22:18 GMT+0200");
Vymazáno : user_pref("ConduitEngine.IsMulticommunity", false);
Vymazáno : user_pref("ConduitEngine.IsOpenThankYouPage", false);
Vymazáno : user_pref("ConduitEngine.IsOpenUninstallPage", true);
Vymazáno : user_pref("ConduitEngine.LanguagePackLastCheckTime", "Sat Apr 21 2012 21:22:19 GMT+0200");
Vymazáno : user_pref("ConduitEngine.LastLogin_3.2.5.2", "Sat Apr 21 2012 21:22:19 GMT+0200");
Vymazáno : user_pref("ConduitEngine.PublisherContainerWidth", 0);
Vymazáno : user_pref("ConduitEngine.SearchFromAddressBarIsInit", true);
Vymazáno : user_pref("ConduitEngine.SettingsLastCheckTime", "Sat Apr 21 2012 21:22:17 GMT+0200");
Vymazáno : user_pref("ConduitEngine.UserID", "UN83559625307382389");
Vymazáno : user_pref("ConduitEngine.engineLocale", "cs");
Vymazáno : user_pref("ConduitEngine.enngineContextMenuLastCheckTime", "Sat Apr 21 2012 21:22:18 GMT+0200");
Vymazáno : user_pref("ConduitEngine.initDone", true);
Vymazáno : user_pref("browser.search.defaultthis.engineName", "MyAshampoo Customized Web Search");
Vymazáno : user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2475029&Sea[...]
Vymazáno : user_pref("extensions.BabylonToolbar.aflt", "babsst");
Vymazáno : user_pref("extensions.BabylonToolbar.babTrack", "affID=100762");
Vymazáno : user_pref("extensions.BabylonToolbar.dfltLng", "en");
Vymazáno : user_pref("extensions.BabylonToolbar.id", "b4093103000000000000001583b97080");
Vymazáno : user_pref("extensions.BabylonToolbar.instlDay", "15292");
Vymazáno : user_pref("extensions.BabylonToolbar.instlRef", "sst");
Vymazáno : user_pref("extensions.BabylonToolbar.keyWordUrl", "hxxp://search.babylon.com/?babsrc=SP_ss&q={search[...]
Vymazáno : user_pref("extensions.BabylonToolbar.lastVrsnTs", "1.4.35.1015:22:09");
Vymazáno : user_pref("extensions.BabylonToolbar.prdct", "BabylonToolbar");
Vymazáno : user_pref("extensions.BabylonToolbar.prtnrId", "babylon");
Vymazáno : user_pref("extensions.BabylonToolbar.smplGrp", "none");
Vymazáno : user_pref("extensions.BabylonToolbar.srcExt", "ss");
Vymazáno : user_pref("extensions.BabylonToolbar.srchPrvdr", "Search the web (Babylon)");
Vymazáno : user_pref("extensions.BabylonToolbar.tlbrId", "base");
Vymazáno : user_pref("extensions.BabylonToolbar.vrsn", "1.4.35.10");
Vymazáno : user_pref("extensions.BabylonToolbar.vrsnTs", "1.4.35.1015:22:09");
Vymazáno : user_pref("extentions.y2layers.defaultEnableAppsList", "twittube,ezLooker,pagerage,buzzdock,toprelat[...]
Vymazáno : user_pref("extentions.y2layers.installId", "b0298105-7fe4-4776-bbab-0ce870a3e443");
Vymazáno : user_pref("icqtoolbar.allowSendURL", false);
Vymazáno : user_pref("icqtoolbar.engineVerified", true);
Vymazáno : user_pref("icqtoolbar.geolastmodified", 1364068796);
Vymazáno : user_pref("icqtoolbar.hiddenElements", "itb_options");
Vymazáno : user_pref("icqtoolbar.icqgeo", 42);
Vymazáno : user_pref("icqtoolbar.installTime", "1304547587");
Vymazáno : user_pref("icqtoolbar.newtab_state", "1");
Vymazáno : user_pref("icqtoolbar.numberOfSearches", 0);
Vymazáno : user_pref("icqtoolbar.previousFFVersion", "3.6.3");
Vymazáno : user_pref("icqtoolbar.showPc", true);
Vymazáno : user_pref("icqtoolbar.skip_default_search", "no");
Vymazáno : user_pref("icqtoolbar.suggestions", false);
Vymazáno : user_pref("icqtoolbar.uninstStatSent", true);
Vymazáno : user_pref("icqtoolbar.uniqueID", "129879975112987994891303748580943");
Vymazáno : user_pref("icqtoolbar.usageStatstTimestamp", 1364068798);
Vymazáno : user_pref("icqtoolbar.voucherHideClicks", 0);
Vymazáno : user_pref("icqtoolbar.voucherMoreLinkClicks", 0);
Vymazáno : user_pref("icqtoolbar.voucherRedeemClicks", 0);
Vymazáno : user_pref("icqtoolbar.voucherWasShown", 0);
Vymazáno : user_pref("icqtoolbar.xmlEnableSuggestions", false);
Vymazáno : user_pref("icqtoolbar.xmlLanguage", "cs");
Vymazáno : user_pref("keyword.URL", "hxxp://search.icq.com/search/afe_results.php?ch_id=afex&tb_ver=1.1.9&q=");

-\\ Opera v12.14.1738.0

Soubor : C:\Documents and Settings\LocalService\Data aplikací\Opera\Opera\operaprefs.ini

[OK] Soubor je eistý.

Soubor : C:\Documents and Settings\Hanka\Data aplikací\Opera\Opera\operaprefs.ini

[OK] Soubor je eistý.

*************************

AdwCleaner[R1].txt - [24040 octets] - [24/03/2013 12:15:55]
AdwCleaner[S1].txt - [23651 octets] - [24/03/2013 13:03:59]

########## EOF - C:\AdwCleaner[S1].txt - [23712 octets] ##########

Fajn Ted hura na MBAM

Malwarebytes Anti-Malware (Zkušební verze Malwarebytes Anti-Malware.) 1.70.0.1100
www.malwarebytes.org

Verze: v2013.03.24.04

Windows XP Service Pack 3 x86 NTFS
Internet Explorer 8.0.6001.18702
Hanka :: BERKOVI [administrátor]

Ochrana: Povolena

24.3.2013 13:35:24
MBAM-log-2013-03-24 (13-50-39).txt

Typ: Rychlá kontrola
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 196175
Uplynulý čas: 14 minut, 7 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 3
HKLM\SOFTWARE\Microsoft\Security Center|AntiVirusDisableNotify (PUM.Disabled.SecurityCenter) -> Špatný: (1) Dobrý: (0) -> Nebyla provedena žádná instrukce.
HKLM\SOFTWARE\Microsoft\Security Center|FirewallDisableNotify (PUM.Disabled.SecurityCenter) -> Špatný: (1) Dobrý: (0) -> Nebyla provedena žádná instrukce.
HKLM\SOFTWARE\Microsoft\Security Center|UpdatesDisableNotify (PUM.Disabled.SecurityCenter) -> Špatný: (1) Dobrý: (0) -> Nebyla provedena žádná instrukce.

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 0
(Žádné škodlivé položky nebyly zjištěny)

(konec)

Proc jste udelal jen rychlou kontrolu?

Typ: Rychlá kontrola

Ja chtel kompletni, mam to cervene a 6 vykricniku

Nalezy nechte odstranit/opravit a udelejte tu kompletni, at program prosmejdi cely disk.

Omlouvám se ale nic červeně a s 6 vykřičníky ve Vaší odpovědi nebylo. Už pracuju na nápravě.

luba píše:Omlouvám se ale nic červeně a s 6 vykřičníky ve Vaší odpovědi nebylo. Už pracuju na nápravě.

Je treba poradne cist

12:39

Márty84 píše: Znovu ukoncete vsechny programy a spustte AdwCleaner.
Tentokrat kliknete na Smazat
Program zacne pracovat (muze dojit k restartu pc) a vyplivne dalsi log (pripadne bude zde C:\AdwCleaner [S1].txt ). Ten mi sem zase zkopirujte.



Udelejte !!!kompletni!!! kontrolu s MBAM http://forum.viry.cz/viewtopic.php?f=29&t=115222 a dejte sem vysledky. Predem nic nemazte, miva obcas falesne detekce

Malwarebytes Anti-Malware (Zkušební verze Malwarebytes Anti-Malware.) 1.70.0.1100
www.malwarebytes.org

Verze: v2013.03.24.04

Windows XP Service Pack 3 x86 NTFS
Internet Explorer 8.0.6001.18702
Hanka :: BERKOVI [administrátor]

Ochrana: Povolena

24.3.2013 14:18:59
MBAM-log-2013-03-24 (16-01-56).txt

Typ: Kompletní kontrola (C:\|D:\|)
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 245909
Uplynulý čas: 1 hodin, 42 minut, 28 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 2
D:\Dokumentíky\Install Nemazat!!!\Programy\Antiviry a čištění PC\OO.Defrag.Professional.Edition.v12.0.197\keygen.exe (Backdoor.RBot) -> Nebyla provedena žádná instrukce.
D:\Dokumentíky\Install Nemazat!!!\Programy\Vypalování\Nero 6.6.0.8\Keygen.exe (Trojan.Agent) -> Nebyla provedena žádná instrukce.

(konec)

No, i kdyz je to ve slozce Install Nemazat!!!, ja bych to doporucoval smazat. Mozna je v tech crackach pridany i nejaky ten nechteny darecek.


Stahnete RogueKiller http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe , ulozte ho na plochu a spustte.
Probehne kratoucky testik a pak se zpristupni vpravo nahore tlacitko Prohledat. Na to kliknete a probehne dalsi test.
Po dokonceni kliknete na napis Zprava a objevi se log. Ten mi sem vlozte

RogueKiller V8.5.4 [Mar 18 2013] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Podpora : http://www.geekstogo.com/forum/files/fi ... guekiller/
Webové stránky : http://tigzy.geekstogo.com/roguekiller.php
: http://tigzyrk.blogspot.com/

Operační systém : Windows XP (5.1.2600 Service Pack 3) 32 bits version
Spuštěno v : Normální režim
Uživatel : Hanka [Práva správce]
Mód : Kontrola -- Datum : 03/24/2013 20:42:23
| ARK || FAK || MBR |

¤¤¤ Škodlivé procesy: : 0 ¤¤¤

¤¤¤ ¤¤¤ Záznamy Registrů: : 4 ¤¤¤
[RUN][BLACKLISTDLL] HKLM\[...]\Run : SiSPower (Rundll32.exe SiSPower.dll,ModeAgent) -> NALEZENO
[DNS] HKLM\[...]\ControlSet001\Services\Tcpip\Interfaces\{57653143-89D9-4C3C-9C99-2EDB296161B8} : NameServer (82.150.180.253,213.180.44.1) -> NALEZENO
[DNS] HKLM\[...]\ControlSet002\Services\Tcpip\Interfaces\{57653143-89D9-4C3C-9C99-2EDB296161B8} : NameServer (82.150.180.253,213.180.44.1) -> NALEZENO
[HJ DESK] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> NALEZENO

¤¤¤ Zvláštní soubory / Složky: ¤¤¤

¤¤¤ Ovladač : [NAHRÁNO] ¤¤¤
SSDT[17] : NtAllocateVirtualMemory @ 0x80570EDD -> HOOKED (\SystemRoot\System32\drivers\qtsmon.sys @ 0xF78EBF60)
SSDT[19] : NtAssignProcessToJobObject @ 0x805E83C2 -> HOOKED (\SystemRoot\System32\drivers\qtsmon.sys @ 0xF78EBAF0)
SSDT[25] : NtClose @ 0x8056FA48 -> HOOKED (Unknown @ 0xB6DA221C)
SSDT[41] : NtCreateKey @ 0x8057791D -> HOOKED (Unknown @ 0xB6DA21D6)
SSDT[50] : NtCreateSection @ 0x8056DB66 -> HOOKED (Unknown @ 0xB6DA2226)
SSDT[53] : NtCreateThread @ 0x80586C45 -> HOOKED (Unknown @ 0xB6DA21CC)
SSDT[57] : NtDebugActiveProcess @ 0x8066259D -> HOOKED (\SystemRoot\System32\drivers\qtsmon.sys @ 0xF78EBF10)
SSDT[63] : NtDeleteKey @ 0x80593334 -> HOOKED (Unknown @ 0xB6DA21DB)
SSDT[65] : NtDeleteValueKey @ 0x80591F8B -> HOOKED (Unknown @ 0xB6DA21E5)
SSDT[68] : NtDuplicateObject @ 0x80581216 -> HOOKED (Unknown @ 0xB6DA2217)
SSDT[98] : NtLoadKey @ 0x805CE805 -> HOOKED (Unknown @ 0xB6DA21EA)
SSDT[122] : NtOpenProcess @ 0x80581702 -> HOOKED (Unknown @ 0xB6DA21B8)
SSDT[125] : NtOpenSection @ 0x8057A8AD -> HOOKED (\SystemRoot\System32\drivers\qtsmon.sys @ 0xF78EBCD0)
SSDT[128] : NtOpenThread @ 0x805E1959 -> HOOKED (Unknown @ 0xB6DA21BD)
SSDT[137] : NtProtectVirtualMemory @ 0x80581889 -> HOOKED (\SystemRoot\System32\drivers\qtsmon.sys @ 0xF78EBBE0)
SSDT[177] : NtQueryValueKey @ 0x80573037 -> HOOKED (Unknown @ 0xB6DA223F)
SSDT[193] : NtReplaceKey @ 0x80656534 -> HOOKED (Unknown @ 0xB6DA21F4)
SSDT[200] : NtRequestWaitReplyPort @ 0x80579485 -> HOOKED (Unknown @ 0xB6DA2230)
SSDT[204] : NtRestoreKey @ 0x806560C9 -> HOOKED (Unknown @ 0xB6DA21EF)
SSDT[213] : NtSetContextThread @ 0x806359C3 -> HOOKED (Unknown @ 0xB6DA222B)
SSDT[237] : NtSetSecurityObject @ 0x805D9CCF -> HOOKED (Unknown @ 0xB6DA2235)
SSDT[247] : NtSetValueKey @ 0x8058228C -> HOOKED (Unknown @ 0xB6DA21E0)
SSDT[255] : NtSystemDebugControl @ 0x80650E11 -> HOOKED (Unknown @ 0xB6DA223A)
SSDT[257] : NtTerminateProcess @ 0x8058E695 -> HOOKED (Unknown @ 0xB6DA21C7)
SSDT[258] : NtTerminateThread @ 0x805838E7 -> HOOKED (\SystemRoot\System32\drivers\qtsmon.sys @ 0xF78EBC80)
SSDT[277] : NtWriteVirtualMemory @ 0x805885C4 -> HOOKED (\SystemRoot\System32\drivers\qtsmon.sys @ 0xF78EC000)
S_SSDT[549] : NtUserSetWindowsHookEx -> HOOKED (Unknown @ 0xB6DA224E)
S_SSDT[552] : NtUserSetWinEventHook -> HOOKED (Unknown @ 0xB6DA2253)

¤¤¤ Soubor HOSTS: ¤¤¤
--> C:\WINDOWS\system32\drivers\etc\hosts

127.0.0.1 localhost


¤¤¤ Kontrola MBR: ¤¤¤

+++++ PhysicalDrive0: WDC WD800JD-00LSA0 +++++
--- User ---
[MBR] 46cc2fa252d5db284654f9ee1e5e064f
[BSP] e675699f83a874612fc5f55e1e83b491 : Windows XP MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 15000 Mo
1 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 30722048 | Size: 61316 Mo
User = LL1 ... OK!
User = LL2 ... OK!

Dokončeno : << RKreport[1]_S_03242013_02d2042.txt >>
RKreport[1]_S_03242013_02d2042.txt

Znovu spustte RogueKiller (pokud jste ho jeste nezavrel/a, rovnou kliknete na napis Smazat)
Probehne kratoucky testik a pak se zpristupni vpravo nahore tlacitko Prohledat. Na to kliknete a probehne dalsi test.
Po dokonceni kliknete na napis Smazat.
Pak kliknete na napis Zprava a objevi se log. Ten mi sem vlozte.
Pak kliknete na napis Oprava Host a Zprava.
Objevi se dalsi log. I ten mi sem vlozte.

RogueKiller V8.5.4 [Mar 18 2013] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Podpora : http://www.geekstogo.com/forum/files/fi ... guekiller/
Webové stránky : http://tigzy.geekstogo.com/roguekiller.php
: http://tigzyrk.blogspot.com/

Operační systém : Windows XP (5.1.2600 Service Pack 3) 32 bits version
Spuštěno v : Normální režim
Uživatel : Hanka [Práva správce]
Mód : Odebrat -- Datum : 03/24/2013 20:55:17
| ARK || FAK || MBR |

¤¤¤ Škodlivé procesy: : 0 ¤¤¤

¤¤¤ ¤¤¤ Záznamy Registrů: : 2 ¤¤¤
[DNS] HKLM\[...]\ControlSet001\Services\Tcpip\Interfaces\{57653143-89D9-4C3C-9C99-2EDB296161B8} : NameServer (82.150.180.253,213.180.44.1) -> NEBYLO ODSTRANĚNO, POUŽIJTE DNSFIX
[DNS] HKLM\[...]\ControlSet002\Services\Tcpip\Interfaces\{57653143-89D9-4C3C-9C99-2EDB296161B8} : NameServer (82.150.180.253,213.180.44.1) -> NEBYLO ODSTRANĚNO, POUŽIJTE DNSFIX

¤¤¤ Zvláštní soubory / Složky: ¤¤¤

¤¤¤ Ovladač : [NAHRÁNO] ¤¤¤
SSDT[17] : NtAllocateVirtualMemory @ 0x80570EDD -> HOOKED (\SystemRoot\System32\drivers\qtsmon.sys @ 0xF78EBF60)
SSDT[19] : NtAssignProcessToJobObject @ 0x805E83C2 -> HOOKED (\SystemRoot\System32\drivers\qtsmon.sys @ 0xF78EBAF0)
SSDT[25] : NtClose @ 0x8056FA48 -> HOOKED (Unknown @ 0xB6DA221C)
SSDT[41] : NtCreateKey @ 0x8057791D -> HOOKED (Unknown @ 0xB6DA21D6)
SSDT[50] : NtCreateSection @ 0x8056DB66 -> HOOKED (Unknown @ 0xB6DA2226)
SSDT[53] : NtCreateThread @ 0x80586C45 -> HOOKED (Unknown @ 0xB6DA21CC)
SSDT[57] : NtDebugActiveProcess @ 0x8066259D -> HOOKED (\SystemRoot\System32\drivers\qtsmon.sys @ 0xF78EBF10)
SSDT[63] : NtDeleteKey @ 0x80593334 -> HOOKED (Unknown @ 0xB6DA21DB)
SSDT[65] : NtDeleteValueKey @ 0x80591F8B -> HOOKED (Unknown @ 0xB6DA21E5)
SSDT[68] : NtDuplicateObject @ 0x80581216 -> HOOKED (Unknown @ 0xB6DA2217)
SSDT[98] : NtLoadKey @ 0x805CE805 -> HOOKED (Unknown @ 0xB6DA21EA)
SSDT[122] : NtOpenProcess @ 0x80581702 -> HOOKED (Unknown @ 0xB6DA21B8)
SSDT[125] : NtOpenSection @ 0x8057A8AD -> HOOKED (\SystemRoot\System32\drivers\qtsmon.sys @ 0xF78EBCD0)
SSDT[128] : NtOpenThread @ 0x805E1959 -> HOOKED (Unknown @ 0xB6DA21BD)
SSDT[137] : NtProtectVirtualMemory @ 0x80581889 -> HOOKED (\SystemRoot\System32\drivers\qtsmon.sys @ 0xF78EBBE0)
SSDT[177] : NtQueryValueKey @ 0x80573037 -> HOOKED (Unknown @ 0xB6DA223F)
SSDT[193] : NtReplaceKey @ 0x80656534 -> HOOKED (Unknown @ 0xB6DA21F4)
SSDT[200] : NtRequestWaitReplyPort @ 0x80579485 -> HOOKED (Unknown @ 0xB6DA2230)
SSDT[204] : NtRestoreKey @ 0x806560C9 -> HOOKED (Unknown @ 0xB6DA21EF)
SSDT[213] : NtSetContextThread @ 0x806359C3 -> HOOKED (Unknown @ 0xB6DA222B)
SSDT[237] : NtSetSecurityObject @ 0x805D9CCF -> HOOKED (Unknown @ 0xB6DA2235)
SSDT[247] : NtSetValueKey @ 0x8058228C -> HOOKED (Unknown @ 0xB6DA21E0)
SSDT[255] : NtSystemDebugControl @ 0x80650E11 -> HOOKED (Unknown @ 0xB6DA223A)
SSDT[257] : NtTerminateProcess @ 0x8058E695 -> HOOKED (Unknown @ 0xB6DA21C7)
SSDT[258] : NtTerminateThread @ 0x805838E7 -> HOOKED (\SystemRoot\System32\drivers\qtsmon.sys @ 0xF78EBC80)
SSDT[277] : NtWriteVirtualMemory @ 0x805885C4 -> HOOKED (\SystemRoot\System32\drivers\qtsmon.sys @ 0xF78EC000)
S_SSDT[549] : NtUserSetWindowsHookEx -> HOOKED (Unknown @ 0xB6DA224E)
S_SSDT[552] : NtUserSetWinEventHook -> HOOKED (Unknown @ 0xB6DA2253)

¤¤¤ Soubor HOSTS: ¤¤¤
--> C:\WINDOWS\system32\drivers\etc\hosts

127.0.0.1 localhost


¤¤¤ Kontrola MBR: ¤¤¤

+++++ PhysicalDrive0: WDC WD800JD-00LSA0 +++++
--- User ---
[MBR] 46cc2fa252d5db284654f9ee1e5e064f
[BSP] e675699f83a874612fc5f55e1e83b491 : Windows XP MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 15000 Mo
1 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 30722048 | Size: 61316 Mo
User = LL1 ... OK!
User = LL2 ... OK!

Dokončeno : << RKreport[4]_D_03242013_02d2055.txt >>
RKreport[1]_S_03242013_02d2042.txt ; RKreport[2]_D_03242013_02d2053.txt ; RKreport[3]_S_03242013_02d2054.txt ; RKreport[4]_D_03242013_02d2055.txt



RogueKiller V8.5.4 [Mar 18 2013] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Podpora : http://www.geekstogo.com/forum/files/fi ... guekiller/
Webové stránky : http://tigzy.geekstogo.com/roguekiller.php
: http://tigzyrk.blogspot.com/

Operační systém : Windows XP (5.1.2600 Service Pack 3) 32 bits version
Spuštěno v : Normální režim
Uživatel : Hanka [Práva správce]
Mód : Oprava HOSTS -- Datum : 03/24/2013 20:56:03
| ARK || FAK || MBR |

¤¤¤ Škodlivé procesy: : 0 ¤¤¤

¤¤¤ ¤¤¤ Záznamy Registrů: : 0 ¤¤¤

¤¤¤ Ovladač : [NAHRÁNO] ¤¤¤

¤¤¤ Soubor HOSTS: ¤¤¤
--> C:\WINDOWS\system32\drivers\etc\hosts

127.0.0.1 localhost


¤¤¤ Resetovaný HOSTS: ¤¤¤


Dokončeno : << RKreport[5]_H_03242013_02d2056.txt >>
RKreport[1]_S_03242013_02d2042.txt ; RKreport[2]_D_03242013_02d2053.txt ; RKreport[3]_S_03242013_02d2054.txt ; RKreport[4]_D_03242013_02d2055.txt ; RKreport[5]_H_03242013_02d2056.txt