VIRY.CZ

Dobrý den,mohly by jste se mi na to mrknout?
Dlouhá doba při zapínání Pc i při vypínání.
Celková ztráta výkonu,ukazatel stále ukazuje 28% i když s počítačem nikdo nic nedělá.
Děkuji moc za pomoc.

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 08-01-2014 01
Ran by lenka (administrator) on LENKA-PC on 09-01-2014 14:39:13
Running from C:\Users\lenka\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: Czech
Internet Explorer Version 11
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(Broadcom Corporation) C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\WLTRYSVC.EXE
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Broadcom Corporation) C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\BCMWLTRY.EXE
(AMD) C:\Windows\System32\atieclxx.exe
() C:\Users\lenka\AppData\Roaming\DefaultTab\DefaultTab\DTUpdate.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
() C:\Windows\SysWOW64\PnkBstrB.exe
(WDC) C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe
(Memeo) C:\Program Files (x86)\Western Digital\WD SmartWare\Front Parlor\WDSmartWareBackgroundService.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Broadcom Corporation) C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\WLTRAY.EXE
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(WDC) C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMStatus.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerEvent.exe
(Western Digital) C:\Program Files (x86)\Western Digital\WD SmartWare\Front Parlor\WDSmartWare.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe
(Ghisler Software GmbH) C:\totalcmd\TOTALCMD64.EXE
(forum.viry.cz) C:\Users\lenka\Desktop\FRSTLauncher.exe
(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
(Microsoft Corporation) C:\Windows\SysWOW64\PING.EXE


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2280232 2010-07-29] (Synaptics Incorporated)
HKLM\...\Run: [Power Management] - C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe [1831016 2011-08-02] (Acer Incorporated)
HKLM\...\Run: [BCSSync] - C:\Program Files\Microsoft Office\Office14\BCSSync.exe [108144 2012-11-05] (Microsoft Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe [497648 2010-07-29] (Adobe Systems Incorporated)
HKLM\...\Run: [Broadcom Wireless Manager UI] - C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\WLTRAY.EXE [7138816 2013-10-25] (Broadcom Corporation)
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13260944 2012-11-19] (Realtek Semiconductor)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SwitchBoard] - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS5ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [406992 2010-02-22] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [4StoryPrePatch] - C:\Program Files (x86)\Gameforge4D\4Story_CZ\PrePatch.exe [327680 2012-05-08] (Zemi Interactive Inc.)
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [285240 2012-11-19] (Intel Corporation)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642728 2012-09-28] (Advanced Micro Devices, Inc.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKCU\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3671904 2012-08-28] (DT Soft Ltd)
HKCU\...\Run: [uTorrent] - C:\Program Files (x86)\uTorrent\uTorrent.exe [963984 2012-10-27] (BitTorrent, Inc.)
HKCU\...\Run: [Pando Media Booster] - C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe [3093624 2012-12-29] ()
MountPoints2: {80e28117-1a80-11e2-b996-dc0ea122e14a} - "F:\WD SmartWare.exe" autoplay=true
HKU\Default\...\RunOnce: [ScrSav] - C:\Program Files (x86)\Packard Bell\Screensaver\run_Packard Bell.exe [162408 2011-09-13] ()
HKU\Default User\...\RunOnce: [ScrSav] - C:\Program Files (x86)\Packard Bell\Screensaver\run_Packard Bell.exe [162408 2011-09-13] ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSource= ... =CT3220468
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://packardbell.msn.com
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.searchamong.com/searchview.p ... s&bar=true
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.searchamong.com/searchview.p ... s&bar=true
URLSearchHook: HKLM-x32 - uTorrentControl_v2 Toolbar - {7473b6bd-4691-4744-a82b-7854eb3d70b6} - C:\Program Files (x86)\uTorrentControl_v2\prxtbuTo2.dll (Conduit Ltd.)
SearchScopes: HKLM-x32 - DefaultScope {939F018B-3E36-494F-A3CB-E02675B0DDCE} URL =
SearchScopes: HKLM-x32 - {154d339e-ccaa-49a5-9b38-6878ad4220bc} URL = http://www.searchamong.com/searchview.p ... s&bar=true
SearchScopes: HKCU - DefaultScope {939F018B-3E36-494F-A3CB-E02675B0DDCE} URL = http://search.conduit.com/ResultsExt.as ... =CT3220468
SearchScopes: HKCU - {154d339e-ccaa-49a5-9b38-6878ad4220bc} URL = http://www.searchamong.com/searchview.p ... s&bar=true
SearchScopes: HKCU - {939F018B-3E36-494F-A3CB-E02675B0DDCE} URL = http://search.conduit.com/ResultsExt.as ... =CT3220468
SearchScopes: HKCU - {DD00888B-6FE3-466F-A36F-4DABE2596F30} URL = http://www.mysearchresults.com/search?c ... earchTerms}
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: SearchAmong Toolbar - {0E1230F8-EA50-42A9-983C-D22ABC2EED3B} - C:\Program Files (x86)\SearchAmong Toolbar\SearchAmongToolbar.dll ()
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: uTorrentControl_v2 Toolbar - {7473b6bd-4691-4744-a82b-7854eb3d70b6} - C:\Program Files (x86)\uTorrentControl_v2\prxtbuTo2.dll (Conduit Ltd.)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: DefaultTab Browser Helper - {7F6AFBF1-E065-4627-A2FD-810366367D01} - C:\Users\lenka\AppData\Roaming\DefaultTab\DefaultTab\DefaultTabBHO.dll (Search Results LLC.)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Related Searches - {96A25A24-2E87-4374-8A50-CC6F943FCE4D} - C:\Users\lenka\AppData\Roaming\DefaultTab\DefaultTab\Apps\RelatedLinksBHO.dll (Search Results)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM-x32 - uTorrentControl_v2 Toolbar - {7473b6bd-4691-4744-a82b-7854eb3d70b6} - C:\Program Files (x86)\uTorrentControl_v2\prxtbuTo2.dll (Conduit Ltd.)
Toolbar: HKLM-x32 - SearchAmong Toolbar - {0E1230F8-EA50-42A9-983C-D22ABC2EED3B} - C:\Program Files (x86)\SearchAmong Toolbar\SearchAmongToolbar.dll ()
Toolbar: HKLM-x32 - Related Searches - {96A25A24-2E87-4374-8A50-CC6F943FCE4D} - C:\Users\lenka\AppData\Roaming\DefaultTab\DefaultTab\Apps\RelatedLinksBHO.dll (Search Results)
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
Toolbar: HKCU - No Name - {7473B6BD-4691-4744-A82B-7854EB3D70B6} - No File
Toolbar: HKCU - No Name - {0E1230F8-EA50-42A9-983C-D22ABC2EED3B} - No File
Hosts: 127.0.0.1 activate.adobe.com
Tcpip\Parameters: [DhcpNameServer] 213.46.172.36 213.46.172.37

FireFox:
========
FF ProfilePath: C:\Users\lenka\AppData\Roaming\Mozilla\Firefox\Profiles\qstqk54v.default
FF NewTab: about:blank
FF DefaultSearchEngine: Search Here
FF SearchEngineOrder.3: Bing
FF SelectedSearchEngine: Search Here
FF Homepage: hxxp://www.seznam.cz/
FF Keyword.URL: hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3220468&SearchSource=2&CUI=UN97992685371318872&UM=false&q=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.9.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.9.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @ngm.nexoneu.com/NxGame - C:\ProgramData\NexonEU\NGM\npNxGameEU.dll (Nexon)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF SearchPlugin: C:\Users\lenka\AppData\Roaming\Mozilla\Firefox\Profiles\qstqk54v.default\searchplugins\bingp.xml
FF SearchPlugin: C:\Users\lenka\AppData\Roaming\Mozilla\Firefox\Profiles\qstqk54v.default\searchplugins\conduit.xml
FF SearchPlugin: C:\Users\lenka\AppData\Roaming\Mozilla\Firefox\Profiles\qstqk54v.default\searchplugins\search-here.xml
FF SearchPlugin: C:\Users\lenka\AppData\Roaming\Mozilla\Firefox\Profiles\qstqk54v.default\searchplugins\Web Search.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\heureka-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\jyxo-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\seznam-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\slunecnice-cz.xml
FF Extension: Battlefield Heroes Updater - C:\Users\lenka\AppData\Roaming\Mozilla\Firefox\Profiles\qstqk54v.default\Extensions\battlefieldheroespatcher@ea.com
FF Extension: Battlefield Play4Free - C:\Users\lenka\AppData\Roaming\Mozilla\Firefox\Profiles\qstqk54v.default\Extensions\battlefieldplay4free@ea.com
FF Extension: GFACE Experience Plugin - C:\Users\lenka\AppData\Roaming\Mozilla\Firefox\Profiles\qstqk54v.default\Extensions\cryenginebrowserplugin@crytek.com
FF Extension: Český slovník pro kontrolu pravopisu - C:\Users\lenka\AppData\Roaming\Mozilla\Firefox\Profiles\qstqk54v.default\Extensions\cs@dictionaries.addons.mozilla.org
FF Extension: uTorrentControl_v2 - C:\Users\lenka\AppData\Roaming\Mozilla\Firefox\Profiles\qstqk54v.default\Extensions\{7473b6bd-4691-4744-a82b-7854eb3d70b6}
FF Extension: Default Tab - C:\Users\lenka\AppData\Roaming\Mozilla\Firefox\Profiles\qstqk54v.default\Extensions\addon@defaulttab.com.xpi

Chrome:
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR HKLM-x32\...\Chrome\Extension: [ejpbbhjlbipncjklfjjaedaieimbmdda] - C:\Users\lenka\AppData\Local\CRE\ejpbbhjlbipncjklfjjaedaieimbmdda.crx

==================== Services (Whitelisted) =================

R2 DefaultTabUpdate; C:\Users\lenka\AppData\Roaming\DefaultTab\DefaultTab\DTUpdate.exe [107520 2013-04-29] ()
R2 ePowerSvc; C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe [872552 2011-08-02] (Acer Incorporated)
R2 Live Updater Service; C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe [255376 2012-04-05] (Acer Incorporated)
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [75136 2013-10-30] ()
R2 PnkBstrB; C:\Windows\SysWow64\PnkBstrB.exe [189248 2013-10-30] ()
R2 wltrysvc; C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\WLTRYSVC.EXE [48128 2013-10-25] (Broadcom Corporation)

==================== Drivers (Whitelisted) ====================

R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2013-07-26] ()
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2012-10-20] (DT Soft Ltd)
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28216 2012-11-19] (Intel Corporation)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2013-07-26] ()
S1 StarOpen; C:\Windows\SysWow64\Drivers\StarOpen.sys [5632 2006-07-24] ()
S3 SWDUMon; C:\Windows\System32\DRIVERS\SWDUMon.sys [16152 2013-10-30] ()
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [x]
S3 X6va011; \??\C:\Windows\SysWOW64\Drivers\X6va011 [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-09 14:39 - 2014-01-09 14:39 - 00016531 _____ C:\Users\lenka\Desktop\FRST.txt
2014-01-09 14:38 - 2014-01-09 14:38 - 00015327 _____ C:\Users\lenka\Desktop\LM.bat
2014-01-09 14:32 - 2014-01-09 14:38 - 00029696 _____ C:\Users\lenka\AppData\Local\MSGBOX.EXE
2014-01-09 14:32 - 2014-01-09 14:32 - 00112640 _____ (forum.viry.cz) C:\Users\lenka\Desktop\FRSTLauncher.exe
2014-01-09 14:30 - 2014-01-09 14:30 - 00000000 ____D C:\FRST
2014-01-09 14:22 - 2014-01-09 14:23 - 01931770 _____ (Farbar) C:\Users\lenka\Desktop\FRST64.exe
2014-01-04 13:00 - 2014-01-04 13:00 - 00000000 ____D C:\Users\lenka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Drakensang Online
2014-01-04 13:00 - 2014-01-04 13:00 - 00000000 ____D C:\Program Files (x86)\Drakensang Online
2014-01-02 21:00 - 2014-01-02 21:03 - 00000000 ____D C:\Users\lenka\Downloads\James Bond 007 Monsterbox
2013-12-28 22:46 - 2013-12-28 23:57 - 00000000 ____D C:\Users\lenka\Downloads\Hobit - Šmakova dračí poušť
2013-12-28 19:10 - 2013-12-28 19:11 - 00000000 ____D C:\Users\lenka\Downloads\Návštevníci
2013-12-26 17:01 - 2013-12-26 17:04 - 00000000 ____D C:\Users\lenka\Downloads\Prci, Prci, Prcicky1-8(CZ)
2013-12-26 16:43 - 2013-12-26 17:34 - 911362048 _____ C:\Users\lenka\Downloads\Hit and Run.avi
2013-12-26 16:10 - 2013-12-26 17:43 - 2095276032 _____ C:\Users\lenka\Downloads\Paul.avi
2013-12-26 16:05 - 2013-12-26 17:22 - 902123520 _____ C:\Users\lenka\Downloads\Půlnoc v Paříži.avi
2013-12-26 16:03 - 2013-12-26 16:43 - 979885236 _____ C:\Users\lenka\Downloads\RANGO.CZ.BDrip.2011.Cinky.avi
2013-12-26 15:54 - 2013-12-26 16:03 - 715745280 _____ C:\Users\lenka\Downloads\Chlapi.z.karavanu.2006.avi
2013-12-22 01:37 - 2013-12-22 01:37 - 00000000 ____D C:\Users\lenka\Downloads\Jedinečný avi
2013-12-20 02:52 - 2013-12-20 02:52 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-12-13 17:03 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2013-12-13 17:03 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2013-12-13 17:03 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2013-12-13 17:03 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2013-12-13 17:01 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-13 17:01 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-13 17:01 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-12-13 17:01 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-12-13 17:01 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-12-13 17:01 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-12-13 17:01 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-13 17:01 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-13 17:01 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-12-13 17:01 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-12-13 17:01 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-12-13 17:01 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-12-13 17:01 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-12-13 17:01 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-12-13 17:01 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-13 17:01 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-12-13 17:01 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-12-13 17:01 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-13 17:01 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-12-13 17:01 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-12-13 17:01 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-12-13 17:01 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-12-13 17:01 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-13 17:01 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-12-13 17:01 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-12-13 17:01 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-13 17:01 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-13 17:01 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-12-13 17:01 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-12-13 17:01 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-12-13 17:01 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-12-13 16:35 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2013-12-13 16:35 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll
2013-12-13 16:35 - 2013-10-30 02:24 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-12-13 16:34 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-12-13 16:34 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-12-13 16:34 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2013-12-13 16:34 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2013-12-13 16:33 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-12-13 16:33 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-12-13 16:33 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2013-12-13 16:33 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2013-12-13 16:32 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2013-12-13 16:32 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2013-12-13 16:32 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2013-12-13 16:32 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2013-12-13 16:32 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2013-12-13 16:32 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2013-12-13 16:32 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
2013-12-13 16:32 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe

==================== One Month Modified Files and Folders =======

2014-01-09 14:39 - 2014-01-09 14:39 - 00016531 _____ C:\Users\lenka\Desktop\FRST.txt
2014-01-09 14:38 - 2014-01-09 14:38 - 00015327 _____ C:\Users\lenka\Desktop\LM.bat
2014-01-09 14:38 - 2014-01-09 14:32 - 00029696 _____ C:\Users\lenka\AppData\Local\MSGBOX.EXE
2014-01-09 14:37 - 2012-10-19 10:28 - 00000000 ____D C:\Filmy
2014-01-09 14:32 - 2014-01-09 14:32 - 00112640 _____ (forum.viry.cz) C:\Users\lenka\Desktop\FRSTLauncher.exe
2014-01-09 14:30 - 2014-01-09 14:30 - 00000000 ____D C:\FRST
2014-01-09 14:30 - 2012-10-18 12:19 - 00000418 _____ C:\Windows\Tasks\Packard Bell Registration - Reminder Recall task.job
2014-01-09 14:23 - 2014-01-09 14:22 - 01931770 _____ (Farbar) C:\Users\lenka\Desktop\FRST64.exe
2014-01-09 14:10 - 2012-10-27 15:32 - 00000000 ____D C:\Users\lenka\AppData\Roaming\uTorrent
2014-01-09 14:08 - 2012-10-20 08:32 - 00000000 ____D C:\Users\lenka\AppData\Local\CrashDumps
2014-01-09 13:58 - 2012-07-10 13:47 - 01076921 _____ C:\Windows\WindowsUpdate.log
2014-01-09 13:54 - 2012-10-17 15:15 - 00000914 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-09 12:23 - 2009-07-14 05:45 - 00016976 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-09 12:23 - 2009-07-14 05:45 - 00016976 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-09 01:05 - 2012-12-29 19:23 - 00000000 ____D C:\Users\lenka\AppData\Local\PMB Files
2014-01-09 00:35 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-09 00:35 - 2009-07-14 05:51 - 00088854 _____ C:\Windows\setupact.log
2014-01-08 20:26 - 2012-12-29 19:23 - 00000000 ____D C:\ProgramData\PMB Files
2014-01-08 17:38 - 2013-08-23 12:51 - 00000000 ____D C:\Program Files (x86)\The KMPlayer
2014-01-07 18:37 - 2012-07-10 14:34 - 00670964 _____ C:\Windows\system32\perfh005.dat
2014-01-07 18:37 - 2012-07-10 14:34 - 00142062 _____ C:\Windows\system32\perfc005.dat
2014-01-07 18:37 - 2009-07-14 06:13 - 01589492 _____ C:\Windows\system32\PerfStringBackup.INI
2014-01-04 13:00 - 2014-01-04 13:00 - 00000000 ____D C:\Users\lenka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Drakensang Online
2014-01-04 13:00 - 2014-01-04 13:00 - 00000000 ____D C:\Program Files (x86)\Drakensang Online
2014-01-02 21:03 - 2014-01-02 21:00 - 00000000 ____D C:\Users\lenka\Downloads\James Bond 007 Monsterbox
2013-12-29 11:38 - 2010-11-21 04:47 - 00560394 _____ C:\Windows\PFRO.log
2013-12-28 23:57 - 2013-12-28 22:46 - 00000000 ____D C:\Users\lenka\Downloads\Hobit - Šmakova dračí poušť
2013-12-28 22:34 - 2013-08-14 08:47 - 00000000 ____D C:\Program Files (x86)\WarThunder
2013-12-28 22:32 - 2013-09-23 12:25 - 00000000 ____D C:\Program Files (x86)\Zenimax Online
2013-12-28 22:32 - 2013-06-08 12:21 - 00000000 ____D C:\ProgramData\Hi-Rez Studios
2013-12-28 22:32 - 2013-06-08 12:21 - 00000000 ____D C:\Program Files (x86)\Hi-Rez Studios
2013-12-28 22:32 - 2011-10-20 10:28 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-12-28 22:31 - 2011-10-20 11:04 - 00000000 ____D C:\ProgramData\Skype
2013-12-28 22:29 - 2013-11-24 18:42 - 00000000 ____D C:\Program Files (x86)\StarCraft II
2013-12-28 22:29 - 2013-08-21 17:28 - 00000000 ____D C:\Program Files (x86)\RIFT
2013-12-28 22:28 - 2013-04-19 17:09 - 00000000 ____D C:\Users\lenka\AppData\Roaming\.minecraft
2013-12-28 22:28 - 2012-10-17 15:27 - 00000000 ____D C:\Users\lenka\AppData\Roaming\WildTangent
2013-12-28 22:28 - 2011-10-20 10:37 - 00000000 ____D C:\ProgramData\WildTangent
2013-12-28 22:18 - 2013-07-26 20:33 - 00000000 ____D C:\Users\lenka\AppData\Roaming\Ubisoft
2013-12-28 19:11 - 2013-12-28 19:10 - 00000000 ____D C:\Users\lenka\Downloads\Návštevníci
2013-12-26 17:43 - 2013-12-26 16:10 - 2095276032 _____ C:\Users\lenka\Downloads\Paul.avi
2013-12-26 17:34 - 2013-12-26 16:43 - 911362048 _____ C:\Users\lenka\Downloads\Hit and Run.avi
2013-12-26 17:22 - 2013-12-26 16:05 - 902123520 _____ C:\Users\lenka\Downloads\Půlnoc v Paříži.avi
2013-12-26 17:04 - 2013-12-26 17:01 - 00000000 ____D C:\Users\lenka\Downloads\Prci, Prci, Prcicky1-8(CZ)
2013-12-26 16:43 - 2013-12-26 16:03 - 979885236 _____ C:\Users\lenka\Downloads\RANGO.CZ.BDrip.2011.Cinky.avi
2013-12-26 16:03 - 2013-12-26 15:54 - 715745280 _____ C:\Users\lenka\Downloads\Chlapi.z.karavanu.2006.avi
2013-12-24 15:22 - 2013-05-12 13:17 - 00000000 ____D C:\ProgramData\WarThunder
2013-12-22 17:53 - 2012-12-16 19:19 - 00000000 _____ C:\ProgramData\LauncherAccess.dt
2013-12-22 01:37 - 2013-12-22 01:37 - 00000000 ____D C:\Users\lenka\Downloads\Jedinečný avi
2013-12-21 17:54 - 2013-10-30 17:55 - 00000000 ____D C:\Program Files (x86)\WoW
2013-12-21 17:39 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-12-21 15:18 - 2013-08-25 17:42 - 00000000 ____D C:\Program Files (x86)\Pandaria
2013-12-21 12:58 - 2012-10-27 16:03 - 00000000 ____D C:\Users\lenka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2013-12-21 12:14 - 2013-04-19 16:54 - 00000000 ____D C:\Users\lenka\AppData\Roaming\Skype
2013-12-20 23:56 - 2012-10-17 14:00 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-12-20 02:52 - 2013-12-20 02:52 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-12-16 22:22 - 2013-06-19 15:14 - 00000003 _____ C:\Windows\system32\HRUPPROG.TXT
2013-12-14 21:11 - 2013-04-29 20:01 - 00000270 __RSH C:\Users\lenka\ntuser.pol
2013-12-14 21:11 - 2012-10-01 13:18 - 00000000 ____D C:\Users\lenka
2013-12-13 17:17 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2013-12-13 17:16 - 2009-07-14 05:45 - 04974664 _____ C:\Windows\system32\FNTCACHE.DAT
2013-12-13 17:02 - 2012-11-12 20:23 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-12-13 16:54 - 2012-10-17 15:15 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-12-13 16:54 - 2012-10-17 15:15 - 00003852 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-12-13 16:54 - 2011-10-20 11:30 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-12-13 16:44 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF

Some content of TEMP:
====================
C:\Users\lenka\AppData\Local\Temp\BRSVC_12046194_hlp.exe
C:\Users\lenka\AppData\Local\Temp\CH.dll
C:\Users\lenka\AppData\Local\Temp\comver.dll
C:\Users\lenka\AppData\Local\Temp\DefaultTabSetup2.exe
C:\Users\lenka\AppData\Local\Temp\e6a4f757837ed530a2a77f623f564ecf.dll
C:\Users\lenka\AppData\Local\Temp\GameuxInstallHelper.dll
C:\Users\lenka\AppData\Local\Temp\Gw2.exe
C:\Users\lenka\AppData\Local\Temp\HiPatchSelfUpdateWindow.exe
C:\Users\lenka\AppData\Local\Temp\HiRezLauncherControls.dll
C:\Users\lenka\AppData\Local\Temp\InstallManager_GEN_GEN.exe
C:\Users\lenka\AppData\Local\Temp\KMP_3.6.0.87.exe
C:\Users\lenka\AppData\Local\Temp\KMP_3.7.0.109.exe
C:\Users\lenka\AppData\Local\Temp\KMP_3.7.0.113.exe
C:\Users\lenka\AppData\Local\Temp\kpinstaller.exe
C:\Users\lenka\AppData\Local\Temp\Medal of Honor_uninst.exe
C:\Users\lenka\AppData\Local\Temp\NGMDll.dll
C:\Users\lenka\AppData\Local\Temp\NGMResource.dll
C:\Users\lenka\AppData\Local\Temp\riftuninstall.exe
C:\Users\lenka\AppData\Local\Temp\SkypeSetup.exe
C:\Users\lenka\AppData\Local\Temp\Softonic_EN_1-4-9.exe
C:\Users\lenka\AppData\Local\Temp\swt-win32-3740.dll
C:\Users\lenka\AppData\Local\Temp\tmp5DFB.exe
C:\Users\lenka\AppData\Local\Temp\tmp8E9D.exe
C:\Users\lenka\AppData\Local\Temp\tmpCACF.exe
C:\Users\lenka\AppData\Local\Temp\tmpFD06.exe
C:\Users\lenka\AppData\Local\Temp\ubertmp.exe
C:\Users\lenka\AppData\Local\Temp\ubi1393.tmp.exe
C:\Users\lenka\AppData\Local\Temp\unicows.dll
C:\Users\lenka\AppData\Local\Temp\Uninstall.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-01-01 13:11

==================== End Of Log ============================

Zdravim

Stahnete Junkware Removal Tool http://thisisudax.org/downloads/JRT.exe

• Ulozte nejlepe na plochu
• Po spusteni se zobrazi licencni podminky, stisknete libovolnou klavesu
• Probehne vytvoreni zalohy a nasledne prohledavani
• Probehne skenovani a pak se objevi log, pripadne bude ulozen v c:\JRT jako JRT.txt, ten sem vlozte

Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner

• Ulozte nejlepe na plochu
• Ukoncete vsechny programy
• Kliknete na Scan a nasledne Clean
• Probehne oprava, restart PC a pak se objevi log, pripadne bude ulozen ve slozce c:\AdwCleaner\AdwCleaner[S?].txt, ten sem vlozte

JRT

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.0 (01.07.2014:1)
OS: Windows 7 Home Premium x64
Ran by lenka on źt 09.01.2014 at 15:20:52,83
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values

Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-19\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-20\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-21-1612007768-3651778876-998891124-1000\Software\Microsoft\Internet Explorer\Main\\Start Page



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\defaulttabbho.defaulttabbrowser
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\defaulttabbho.defaulttabbrowser.1
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\defaulttabbho.defaulttabbrowseractivex
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\defaulttabbho.defaulttabbrowseractivex.1
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\{38495740-0035-4471-851E-F5BBB86AB085}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\{72D89EBF-0C5D-4190-91FD-398E45F1D007}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\defaulttabbho.dll
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{7F6AFBF1-E065-4627-A2FD-810366367D01}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{A1E28287-1A31-4B0F-8D05-AA8C465D3C5A}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\conduit
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\default tab
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\defaulttab
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\softonic
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\conduit
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\conduitsearchscopes
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\defaulttab
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\pricegong
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\smartbar
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\toolbar
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\&searchamong
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{7F6AFBF1-E065-4627-A2FD-810366367D01}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7F6AFBF1-E065-4627-A2FD-810366367D01}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\caphyon
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\conduit
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\default tab
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\toolband.toolbandobj
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\toolband.toolbandobj.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\apnstub_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\apnstub_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7F6AFBF1-E065-4627-A2FD-810366367D01}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A1E28287-1A31-4B0F-8D05-AA8C465D3C5A}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\defaulttab
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{c7456f74-b576-4a8e-bab2-538c99ee38f0}_is1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Toolbar.CT3220468
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\AskSLib_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\AskSLib_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_dla_dungeon-defenders_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_dla_dungeon-defenders_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_for_dungeon-defenders_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_for_dungeon-defenders_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_for_minecraft_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_for_minecraft_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\AskSLib_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\AskSLib_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\SoftonicDownloader_dla_dungeon-defenders_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\SoftonicDownloader_dla_dungeon-defenders_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\SoftonicDownloader_for_dungeon-defenders_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\SoftonicDownloader_for_dungeon-defenders_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\SoftonicDownloader_for_minecraft_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\SoftonicDownloader_for_minecraft_RASMANCS
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{154d339e-ccaa-49a5-9b38-6878ad4220bc}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{939F018B-3E36-494F-A3CB-E02675B0DDCE}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{DD00888B-6FE3-466F-A36F-4DABE2596F30}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{154d339e-ccaa-49a5-9b38-6878ad4220bc}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7473B6BD-4691-4744-A82B-7854EB3D70B6}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7F6AFBF1-E065-4627-A2FD-810366367D01}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7473b6bd-4691-4744-a82b-7854eb3d70b6}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{7473b6bd-4691-4744-a82b-7854eb3d70b6}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{96A25A24-2E87-4374-8A50-CC6F943FCE4D}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{96A25A24-2E87-4374-8A50-CC6F943FCE4D}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{96A25A24-2E87-4374-8A50-CC6F943FCE4D}



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\Users\lenka\AppData\Roaming\defaulttab"
Successfully deleted: [Folder] "C:\Users\lenka\appdata\local\conduit"
Successfully deleted: [Folder] "C:\Users\lenka\appdata\local\cre"
Successfully deleted: [Folder] "C:\Users\lenka\appdata\locallow\conduit"
Successfully deleted: [Folder] "C:\Users\lenka\appdata\locallow\pricegong"
Successfully deleted: [Folder] "C:\Users\lenka\appdata\locallow\utorrentcontrol_v2"
Successfully deleted: [Folder] "C:\Program Files (x86)\conduit"
Successfully deleted: [Folder] "C:\Program Files (x86)\driver-soft"
Successfully deleted: [Folder] "C:\Program Files (x86)\searchamong toolbar"
Successfully deleted: [Folder] "C:\Program Files (x86)\utorrentcontrol_v2"
Successfully deleted: [Folder] "C:\Windows\syswow64\ai_recyclebin"
Successfully deleted: [Empty Folder] C:\Users\lenka\appdata\local\{3F6F7FDD-9AAC-4CD7-9A62-DA19A5F56206}
Successfully deleted: [Empty Folder] C:\Users\lenka\appdata\local\{A561498C-EA9D-4F15-B578-17EC414D321D}
Successfully deleted: [Empty Folder] C:\Users\lenka\appdata\local\{FABED59D-5F78-4C37-8E82-798EC219F55F}



~~~ FireFox

Successfully deleted: [File] C:\Users\lenka\AppData\Roaming\mozilla\firefox\profiles\qstqk54v.default\extensions\addon@defaulttab.com.xpi
Successfully deleted: [File] C:\Users\lenka\AppData\Roaming\mozilla\firefox\profiles\qstqk54v.default\searchplugins\conduit.xml
Successfully deleted: [File] C:\Users\lenka\AppData\Roaming\mozilla\firefox\profiles\qstqk54v.default\searchplugins\search-here.xml
Successfully deleted: [File] C:\Users\lenka\AppData\Roaming\mozilla\firefox\profiles\qstqk54v.default\searchplugins\web search.xml
Successfully deleted: [Folder] C:\Users\lenka\AppData\Roaming\mozilla\firefox\profiles\qstqk54v.default\smartbar
Successfully deleted: [Folder] C:\Users\lenka\AppData\Roaming\mozilla\firefox\profiles\qstqk54v.default\extensions\{7473b6bd-4691-4744-a82b-7854eb3d70b6}
Successfully deleted the following from C:\Users\lenka\AppData\Roaming\mozilla\firefox\profiles\qstqk54v.default\prefs.js

user_pref("CT3220468.BT_Stats.enc", "eyJsYXN0X2xvZyI6MTM2MzI5NzY5OCwidXVpZCI6NjY3NDg2MjA1ODg4ODY5LCJzZXFfaWQiOjIyLCJzc2IiOjEzNTEzNDg1Njh9");
user_pref("CT3220468.BT_Usage", "{\"uuid\":667486205888869,\"seq_id\":3}");
user_pref("CT3220468.CBOpenMAMSettings", "0");
user_pref("CT3220468.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"false\"}");
user_pref("CT3220468.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT3220468.Facebook_Mode", "2");
user_pref("CT3220468.Facebook_User_Locale", "en");
user_pref("CT3220468.Facebook_ctid_Connect_send_new", "sended");
user_pref("CT3220468.FirstTime", "true");
user_pref("CT3220468.FirstTimeFF3", "true");
user_pref("CT3220468.PG_ENABLE", "dHJ1ZQ==");
user_pref("CT3220468.PG_ENABLE.enc", "ZEhKMVpRPT0=");
user_pref("CT3220468.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3220468&SearchSource=2&q=");
user_pref("CT3220468.UserID", "UN97992685371318872");
user_pref("CT3220468.addressBarTakeOverEnabledInHidden", "true");
user_pref("CT3220468.autoDisableScopes", -1);
user_pref("CT3220468.browser.search.defaultthis.engineName", true);
user_pref("CT3220468.cbcountry_001", "CZ");
user_pref("CT3220468.cbfirsttime.enc", "U2F0IE9jdCAyNyAyMDEyIDE2OjM2OjA5IEdNVCswMjAw");
user_pref("CT3220468.countryCode", "CZ");
user_pref("CT3220468.enableAlerts", "always");
user_pref("CT3220468.enableFix404ByUser", "FALSE");
user_pref("CT3220468.enableSearchFromAddressBar", "true");
user_pref("CT3220468.firstTimeDialogOpened", "true");
user_pref("CT3220468.fixPageNotFoundError", "true");
user_pref("CT3220468.fixPageNotFoundErrorByUser", "true");
user_pref("CT3220468.fixPageNotFoundErrorInHidden", "true");
user_pref("CT3220468.fixUrls", true);
user_pref("CT3220468.fullUserID", "UN97992685371318872.UP.20130704225520");
user_pref("CT3220468.homepageuserchanged", true);
user_pref("CT3220468.hxxp___facebook_conduitapps_com.APP_WIN_FEATURES", "resizable=0,hscroll=0,vscroll=0,titlebar=1,closebutton=1,saveresizedsize=0,openposition=alignment:(B;L
user_pref("CT3220468.hxxp___toolbar_utorrent_com.APP_WIN_FEATURES.enc", "cmVzaXphYmxlPTAsc2F2ZXJlc2l6ZWRzaXplPTAsdGl0bGViYXI9MCxjbG9zZW9uZXh0ZXJuYWxjbGljaz0xLHNhdmVsb2NhdGlvbj
user_pref("CT3220468.installId", "fft8BED.tmp.exe");
user_pref("CT3220468.installType", "XPE");
user_pref("CT3220468.isCheckedStartAsHidden", true);
user_pref("CT3220468.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT3220468.isFirstTimeToolbarLoading", "false");
user_pref("CT3220468.isNewTabEnabled", true);
user_pref("CT3220468.isPerformedSmartBarTransition", "true");
user_pref("CT3220468.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
user_pref("CT3220468.isWelcomPage", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
user_pref("CT3220468.keyword", true);
user_pref("CT3220468.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"hxxp://search.conduit.com/?ctid=CT3220468&octid=CT3220468&SearchSource=15&CUI=UN9799268537131887
user_pref("CT3220468.lastVersion", "10.20.0.513");
user_pref("CT3220468.mam_gk_CouponBuddy_appState.enc", "b24=");
user_pref("CT3220468.mam_gk_PriceGong_appState.enc", "b24=");
user_pref("CT3220468.mam_gk_appStateReportTime.enc", "MTM2MzM1NDMzODM5OQ==");
user_pref("CT3220468.mam_gk_appsData.enc", "eyJhcHBzIjpbeyJpZCI6IlByaWNlR29uZyIsInVybCI6Imh0dHA6Ly9wcmljZWdvbmcuY29uZHVpdGFwcHMuY29tL01BTS92MS9odG1sX2NvbXAuaHRtbCIsIm9wdGlvbnN
user_pref("CT3220468.mam_gk_appsDefaultEnabled.enc", "bnVsbA==");
user_pref("CT3220468.mam_gk_configuration.enc", "eyJjb25maWd1cmF0aW9uIjpbeyJpZCI6IlByaWNlR29uZyIsImNyaXRlcmlhcyI6W3siY3JpdGVyaWFJZCI6IjQzZmVjMDg1LWNkMzktNGQyZi05MDZhLTAyNTdkZj
user_pref("CT3220468.mam_gk_currentVersion.enc", "MS40LjMuMg==");
user_pref("CT3220468.mam_gk_first_time.enc", "MQ==");
user_pref("CT3220468.mam_gk_lastLoginTime.enc", "MTM2MzM1NDMzODQwMw==");
user_pref("CT3220468.mam_gk_localization.enc", "eyJnYWRnZXRDb250ZW50UG9saWN5Ijp7IlRleHQiOiJDb250ZW50IFBvbGljeSJ9LCJnYWRnZXREZXNjcmlwdGlvblByaW1hcnkiOnsiVGV4dCI6IlZhbHVlIEFwcHM
user_pref("CT3220468.mam_gk_pgUnloadedOnce.enc", "dHJ1ZQ==");
user_pref("CT3220468.mam_gk_settings1.4.3.2.enc", "eyJTdGF0dXMiOiJzdWNjZWVkZWQiLCJEYXRhIjp7ImludGVydmFsIjoyNDAsInN0YW1wIjoiNjFfLTEiLCJpc1Rlc3QiOmZhbHNlLCJpc1dlbGNvbWVFeHBlcmll
user_pref("CT3220468.mam_gk_showCloseButton.enc", "dHJ1ZQ==");
user_pref("CT3220468.mam_gk_showWelcomeGadget.enc", "ZmFsc2U=");
user_pref("CT3220468.mam_gk_userId.enc", "MTJkMGMwMjctNDMzZS00OGEyLWJmZmEtOWYyM2E3Yjc2NDJi");
user_pref("CT3220468.mam_gk_user_apps_selection.enc", "");
user_pref("CT3220468.migrateAppsAndComponents", true);
user_pref("CT3220468.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"hxxps%3A%2F%2Flogin.szn.cz%2F%3FreturnURL%3Dhxxps%253a%252f%252femail.seznam.cz%
user_pref("CT3220468.openThankYouPage", "true");
user_pref("CT3220468.openUninstallPage", "FALSE");
user_pref("CT3220468.originalSearchAddressUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3220468&SearchSource=2&CUI=UN97992685371318872&UM=&q=");
user_pref("CT3220468.search.searchAppId", "129813684258939747");
user_pref("CT3220468.search.searchCount", "2");
user_pref("CT3220468.searchInNewTabEnabledByUser", "true");
user_pref("CT3220468.searchInNewTabEnabledInHidden", "true");
user_pref("CT3220468.searchProtector.notifyChanges", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT3220468.searchSuggestEnabledByUser", "true");
user_pref("CT3220468.searchUserMode", "false");
user_pref("CT3220468.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT3220468.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
user_pref("CT3220468.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\"}");
user_pref("CT3220468.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT3220468\"}");
user_pref("CT3220468.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"hxxp://uTorrentControlv2.OurToolbar.com//xpi\"}");
user_pref("CT3220468.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"uTorrentControl_v2 \"}");
user_pref("CT3220468.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT3220468.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data\":\"2\"}");
user_pref("CT3220468.serviceLayer_services_Configuration_lastUpdate", "1385919455518");
user_pref("CT3220468.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1362998830998");
user_pref("CT3220468.serviceLayer_services_appTracking_lastUpdate", "1362998831008");
user_pref("CT3220468.serviceLayer_services_appsMetadata_lastUpdate", "1363354453985");
user_pref("CT3220468.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1362998830779");
user_pref("CT3220468.serviceLayer_services_location_lastUpdate", "1372935448774");
user_pref("CT3220468.serviceLayer_services_login_10.10.27.6_lastUpdate", "1354499881394");
user_pref("CT3220468.serviceLayer_services_login_10.14.370.524_lastUpdate", "1364322781822");
user_pref("CT3220468.serviceLayer_services_login_10.14.65.43_lastUpdate", "1363253256763");
user_pref("CT3220468.serviceLayer_services_login_10.15.0.562_lastUpdate", "1369856474970");
user_pref("CT3220468.serviceLayer_services_login_10.16.2.509_lastUpdate", "1372960995890");
user_pref("CT3220468.serviceLayer_services_login_10.16.4.519_lastUpdate", "1374921806418");
user_pref("CT3220468.serviceLayer_services_login_10.16.70.505_lastUpdate", "1379178587141");
user_pref("CT3220468.serviceLayer_services_login_10.20.0.513_lastUpdate", "1385934073937");
user_pref("CT3220468.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1362998830816");
user_pref("CT3220468.serviceLayer_services_searchAPI_lastUpdate", "1385919455172");
user_pref("CT3220468.serviceLayer_services_serviceMap_lastUpdate", "1385919455120");
user_pref("CT3220468.serviceLayer_services_setupAPI_lastUpdate", "1363207459265");
user_pref("CT3220468.serviceLayer_services_toolbarContextMenu_lastUpdate", "1362998830746");
user_pref("CT3220468.serviceLayer_services_toolbarSettings_lastUpdate", "1385941273514");
user_pref("CT3220468.serviceLayer_services_translation_lastUpdate", "1385919455005");
user_pref("CT3220468.settingsINI", true);
user_pref("CT3220468.shouldFirstTimeDialog", "false");
user_pref("CT3220468.showToolbarPermission", "false");
user_pref("CT3220468.smartbar.CTID", "CT3220468");
user_pref("CT3220468.smartbar.Uninstall", "0");
user_pref("CT3220468.smartbar.homepage", true);
user_pref("CT3220468.smartbar.isHidden", true);
user_pref("CT3220468.smartbar.toolbarName", "uTorrentControl_v2 ");
user_pref("CT3220468.startPage", "userChanged");
user_pref("CT3220468.toolbarBornServerTime", "27-10-2012");
user_pref("CT3220468.toolbarCurrentServerTime", "2-12-2013");
user_pref("CT3220468.toolbarDisabled", "true");
user_pref("CT3220468.toolbarLoginClientTime", "Thu Mar 14 2013 11:20:56 GMT+0100");
user_pref("CT3220468.upgradeFromClearSBVersion", true);
user_pref("CT3220468.url_history0001.enc", "aHR0cDovL3d3dy5zcmVhbGl0eS5jei9kZXRhaWwvcHJvZGVqL2J5dC8zK2trL2Jybm8tYnlzdHJjLWNodWRjaWNrYS8yODY4NTYwNzMyIzo6OmNsaWNraGFuZGxlcjo6OjE
user_pref("CT3220468_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1386111125957,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}
user_pref("Smartbar.ConduitHomepagesList", "");
user_pref("Smartbar.ConduitSearchEngineList", "");
user_pref("Smartbar.ConduitSearchUrlList", "");
user_pref("Smartbar.keywordURLSelectedCTID", "CT3220468");
user_pref("extensions.defaulttab.PIR7", 1388234579);
user_pref("extensions.defaulttab.browserID", "9E1232A0E3565F46078D64B8BDFF3313");
user_pref("extensions.defaulttab.firstrun", false);
user_pref("extensions.defaulttab.installdate", 1386977282);
user_pref("extensions.defaulttab.installedVersion", "2.3");
user_pref("extensions.defaulttab.sethomepage", false);
user_pref("extensions.defaulttab.useNewTabWhiteList", false);
user_pref("keyword.URL", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3220468&SearchSource=2&CUI=UN97992685371318872&UM=false&q=");
user_pref("smartBar.searchInNewTabOwner", "CT3220468");
user_pref("smartbar.addressBarOwnerCTID", "CT3220468");
user_pref("smartbar.conduitSearchAddressUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3220468&SearchSource=2&CUI=UN97992685371318872&UM=UM_ID&q=,hxxp://search.co
user_pref("smartbar.machineId", "NHX3XHIAPF+OBBFOJWZW2LY2UNWPOOWDFIBVTEAMY7RK7ZBK3D7RLG2661WMVQTURUDVHBP6QCNZDXITFZC9KA");
user_pref("smartbar.originalSearchAddressUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3220468&SearchSource=2&q=");
Emptied folder: C:\Users\lenka\AppData\Roaming\mozilla\firefox\profiles\qstqk54v.default\minidumps [285 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on źt 09.01.2014 at 15:28:01,23
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

adwcleaner

# AdwCleaner v3.016 - Report created 09/01/2014 at 15:47:11
# Updated 23/12/2013 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : lenka - LENKA-PC
# Running from : C:\Users\lenka\Desktop\adwcleaner.exe
# Option : Scan

***** [ Services ] *****

Service Found : DefaultTabUpdate

***** [ Files / Folders ] *****

File Found : C:\Users\lenka\AppData\Local\Temp\Uninstall.exe
File Found : C:\Users\lenka\AppData\Roaming\Mozilla\Firefox\Profiles\qstqk54v.default\defaulttab.config
File Found : C:\Users\lenka\AppData\Roaming\Mozilla\Firefox\Profiles\qstqk54v.default\searchplugins\bingp.xml
Folder Found : C:\Users\lenka\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejpbbhjlbipncjklfjjaedaieimbmdda
Folder Found C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SearchAmong Toolbar

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Found : HKCU\Software\AppDataLow\Software\uTorrentControl_v2
Key Found : HKCU\Software\Google\Chrome\Extensions\ejpbbhjlbipncjklfjjaedaieimbmdda
Key Found : HKCU\Software\Microsoft\Internet Explorer\DOMStorage\conduit.com
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{0E1230F8-EA50-42A9-983C-D22ABC2EED3B}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{7473B6BD-4691-4744-A82B-7854EB3D70B6}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{7473B6BD-4691-4744-A82B-7854EB3D70B6}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0E1230F8-EA50-42A9-983C-D22ABC2EED3B}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7473B6BD-4691-4744-A82B-7854EB3D70B6}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7473B6BD-4691-4744-A82B-7854EB3D70B6}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Found : HKCU\Software\Pokki
Key Found : HKCU\Software\uTorrentControl_v2
Key Found : [x64] HKCU\Software\Pokki
Key Found : [x64] HKCU\Software\uTorrentControl_v2
Key Found : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{007EFBDF-8A5D-4930-97CC-A4B437CBA777}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{059EACC2-1ABE-49E8-928D-DC8BD355B7A9}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{0E1230F8-EA50-42A9-983C-D22ABC2EED3B}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{4C836512-BB70-11D2-A5A7-00105A9C91C6}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{537F4F0B-3542-4C7D-A3E5-CF121482696C}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{6FDBBC21-E399-4542-B4CE-86326E1F0727}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{7B878FD4-8F19-46DB-94B1-4CABFF80679C}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{8BA495EF-6CD5-413A-8AEF-483631B98C4F}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{8C71E394-2E6F-452A-AB7D-C17E78307083}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{BADB1512-759C-4792-A18A-DD6BDC4E1991}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{DB797690-40E0-11D2-9BD5-0060082AE372}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{E54FBC83-9028-45AC-A5B9-D5DA828E59C2}
Key Found : HKLM\SOFTWARE\Classes\Interface\{1F8EDE97-36D5-422A-B8F0-9406E2D87C60}
Key Found : HKLM\SOFTWARE\Classes\Interface\{95B92D92-8B7D-4A19-A3F1-43113B4DBCAF}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{5297E905-1DFB-4A9C-9871-A4F95FD58945}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{633AA60B-C339-46C3-951F-047F9822C473}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{9156C8F9-B397-4DEF-8AC5-5966221A134A}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{A8E5842E-102B-4289-9D57-3B3F5B5E15D3}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{DB797681-40E0-11D2-9BD5-0060082AE372}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{FEB62B15-CC00-4736-AAEC-BA046C9DFF73}
Key Found : HKLM\Software\Driver-Soft
Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\ejpbbhjlbipncjklfjjaedaieimbmdda
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A56F1F52-2D31-418E-8F96-319200818F0D}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D183FDF8-A4D8-488F-8E67-7F37D3C5B637}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0E1230F8-EA50-42A9-983C-D22ABC2EED3B}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{537F4F0B-3542-4C7D-A3E5-CF121482696C}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\uTorrentControl_v2 Toolbar
Key Found : HKLM\Software\uTorrentControl_v2
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{1F8EDE97-36D5-422A-B8F0-9406E2D87C60}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{95B92D92-8B7D-4A19-A3F1-43113B4DBCAF}
Value Found : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{0E1230F8-EA50-42A9-983C-D22ABC2EED3B}]
Value Found : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{7473B6BD-4691-4744-A82B-7854EB3D70B6}]
Value Found : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{7473B6BD-4691-4744-A82B-7854EB3D70B6}]
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{0E1230F8-EA50-42A9-983C-D22ABC2EED3B}]
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{7473B6BD-4691-4744-A82B-7854EB3D70B6}]
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{7473B6BD-4691-4744-A82B-7854EB3D70B6}]
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{7473B6BD-4691-4744-A82B-7854EB3D70B6}]
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{7473B6BD-4691-4744-A82B-7854EB3D70B6}]

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.16428

Setting Found : HKCU\Software\Microsoft\Internet Explorer\Main [Search Page] - hxxp://www.searchamong.com/searchview.php?sour ... s&bar=true
Setting Found : HKCU\Software\Microsoft\Internet Explorer\Main [Search Bar] - hxxp://www.searchamong.com/searchview.php?sour ... s&bar=true
Setting Found : HKCU\Software\Microsoft\Internet Explorer\Search [Default_Search_URL] - hxxp://www.searchamong.com/searchview.php?sour ... s&bar=true
Setting Found : HKCU\Software\Microsoft\Internet Explorer\Search [SearchAssistant] - hxxp://www.searchamong.com/searchview.php?sour ... s&bar=true
Setting Found : HKCU\Software\Microsoft\Internet Explorer\SearchUrl [Default] - hxxp://www.searchamong.com/searchview.php?sour ... s&bar=true

-\\ Mozilla Firefox v26.0 (cs)

[ File : C:\Users\lenka\AppData\Roaming\Mozilla\Firefox\Profiles\qstqk54v.default\prefs.js ]

Line Found : user_pref("CT3220468.BT_Usage", "{\"uuid\":667486205888869,\"seq_id\":3}");
Line Found : user_pref("CT3220468.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"false\"}");
Line Found : user_pref("CT3220468.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Found : user_pref("CT3220468.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Found : user_pref("CT3220468.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
Line Found : user_pref("CT3220468.isWelcomPage", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
Line Found : user_pref("CT3220468.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"hxxp://search.conduit.com/?ctid=CT3220468&octid=CT3220468&SearchSource=15&CUI=UN97992685371318872&SSPV=&Lay=1&UM=false\"}[...]
Line Found : user_pref("CT3220468.mam_gk_appsData.enc", "eyJhcHBzIjpbeyJpZCI6IlByaWNlR29uZyIsInVybCI6Imh0dHA6Ly9wcmljZWdvbmcuY29uZHVpdGFwcHMuY29tL01BTS92MS9odG1sX2NvbXAuaHRtbCIsIm9wdGlvbnNEaWFsb2ciOnsiZGlzcGxheU5h[...]
Line Found : user_pref("CT3220468.mam_gk_localization.enc", "eyJnYWRnZXRDb250ZW50UG9saWN5Ijp7IlRleHQiOiJDb250ZW50IFBvbGljeSJ9LCJnYWRnZXREZXNjcmlwdGlvblByaW1hcnkiOnsiVGV4dCI6IlZhbHVlIEFwcHMgZW5yaWNoZXMgeW91ciB3ZWIg[...]
Line Found : user_pref("CT3220468.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"hxxps%3A%2F%2Flogin.szn.cz%2F%3FreturnURL%3Dhxxps%253a%252f%252femail.seznam.cz%252f%26serviceId%3Demail%[...]
Line Found : user_pref("CT3220468.searchProtector.notifyChanges", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Found : user_pref("CT3220468.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Found : user_pref("CT3220468.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
Line Found : user_pref("CT3220468.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\"}");
Line Found : user_pref("CT3220468.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT3220468\"}");
Line Found : user_pref("CT3220468.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"hxxp://uTorrentControlv2.OurToolbar.com//xpi\"}");
Line Found : user_pref("CT3220468.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"uTorrentControl_v2 \"}");
Line Found : user_pref("CT3220468.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Found : user_pref("CT3220468.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data\":\"2\"}");
Line Found : user_pref("CT3220468.url_history0001.enc", "aHR0cDovL3d3dy5zcmVhbGl0eS5jei9kZXRhaWwvcHJvZGVqL2J5dC8zK2trL2Jybm8tYnlzdHJjLWNodWRjaWNrYS8yODY4NTYwNzMyIzo6OmNsaWNraGFuZGxlcjo6OjEzNjMzMzI2NzQxNjYsLCxodHRw[...]
Line Found : user_pref("CT3220468_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1386111125957,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");

*************************

AdwCleaner[R0].txt - [10251 octets] - [09/01/2014 15:47:11]

########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [10312 octets] ##########

Omlouvám se ,nepostupoval jsem podle návodu,ted by to melo být správně.

# AdwCleaner v3.016 - Report created 09/01/2014 at 16:00:12
# Updated 23/12/2013 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : lenka - LENKA-PC
# Running from : C:\Users\lenka\Desktop\adwcleaner.exe
# Option : Clean

***** [ Services ] *****

[#] Service Deleted : DefaultTabUpdate

***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SearchAmong Toolbar
Folder Deleted : C:\Users\lenka\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejpbbhjlbipncjklfjjaedaieimbmdda
File Deleted : C:\Users\lenka\AppData\Local\Temp\Uninstall.exe
File Deleted : C:\Users\lenka\AppData\Roaming\Mozilla\Firefox\Profiles\qstqk54v.default\defaulttab.config
File Deleted : C:\Users\lenka\AppData\Roaming\Mozilla\Firefox\Profiles\qstqk54v.default\searchplugins\bingp.xml

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKCU\Software\Google\Chrome\Extensions\ejpbbhjlbipncjklfjjaedaieimbmdda
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\ejpbbhjlbipncjklfjjaedaieimbmdda
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\DOMStorage\conduit.com
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{007EFBDF-8A5D-4930-97CC-A4B437CBA777}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{059EACC2-1ABE-49E8-928D-DC8BD355B7A9}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{0E1230F8-EA50-42A9-983C-D22ABC2EED3B}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4C836512-BB70-11D2-A5A7-00105A9C91C6}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6FDBBC21-E399-4542-B4CE-86326E1F0727}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{7B878FD4-8F19-46DB-94B1-4CABFF80679C}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{8BA495EF-6CD5-413A-8AEF-483631B98C4F}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{8C71E394-2E6F-452A-AB7D-C17E78307083}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{BADB1512-759C-4792-A18A-DD6BDC4E1991}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{DB797690-40E0-11D2-9BD5-0060082AE372}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E54FBC83-9028-45AC-A5B9-D5DA828E59C2}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{537F4F0B-3542-4C7D-A3E5-CF121482696C}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{1F8EDE97-36D5-422A-B8F0-9406E2D87C60}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{95B92D92-8B7D-4A19-A3F1-43113B4DBCAF}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{5297E905-1DFB-4A9C-9871-A4F95FD58945}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{633AA60B-C339-46C3-951F-047F9822C473}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{9156C8F9-B397-4DEF-8AC5-5966221A134A}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{A8E5842E-102B-4289-9D57-3B3F5B5E15D3}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{DB797681-40E0-11D2-9BD5-0060082AE372}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{FEB62B15-CC00-4736-AAEC-BA046C9DFF73}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0E1230F8-EA50-42A9-983C-D22ABC2EED3B}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0E1230F8-EA50-42A9-983C-D22ABC2EED3B}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7473B6BD-4691-4744-A82B-7854EB3D70B6}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{0E1230F8-EA50-42A9-983C-D22ABC2EED3B}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{7473B6BD-4691-4744-A82B-7854EB3D70B6}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{537F4F0B-3542-4C7D-A3E5-CF121482696C}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A56F1F52-2D31-418E-8F96-319200818F0D}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D183FDF8-A4D8-488F-8E67-7F37D3C5B637}
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{0E1230F8-EA50-42A9-983C-D22ABC2EED3B}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{7473B6BD-4691-4744-A82B-7854EB3D70B6}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{0E1230F8-EA50-42A9-983C-D22ABC2EED3B}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{7473B6BD-4691-4744-A82B-7854EB3D70B6}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{7473B6BD-4691-4744-A82B-7854EB3D70B6}]
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{1F8EDE97-36D5-422A-B8F0-9406E2D87C60}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{95B92D92-8B7D-4A19-A3F1-43113B4DBCAF}
Key Deleted : HKCU\Software\Pokki
Key Deleted : HKCU\Software\uTorrentControl_v2
Key Deleted : HKCU\Software\AppDataLow\Software\uTorrentControl_v2
Key Deleted : HKLM\Software\Driver-Soft
Key Deleted : HKLM\Software\uTorrentControl_v2
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\uTorrentControl_v2 Toolbar

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.16428

Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Search Page]
Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Search Bar]
Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Search [Default_Search_URL]
Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Search [SearchAssistant]
Setting Restored : HKCU\Software\Microsoft\Internet Explorer\SearchUrl [Default]

-\\ Mozilla Firefox v26.0 (cs)

[ File : C:\Users\lenka\AppData\Roaming\Mozilla\Firefox\Profiles\qstqk54v.default\prefs.js ]

Line Deleted : user_pref("CT3220468.BT_Usage", "{\"uuid\":667486205888869,\"seq_id\":3}");
Line Deleted : user_pref("CT3220468.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"false\"}");
Line Deleted : user_pref("CT3220468.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Deleted : user_pref("CT3220468.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Deleted : user_pref("CT3220468.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
Line Deleted : user_pref("CT3220468.isWelcomPage", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
Line Deleted : user_pref("CT3220468.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"hxxp://search.conduit.com/?ctid=CT3220468&octid=CT3220468&SearchSource=15&CUI=UN97992685371318872&SSPV=&Lay=1&UM=false\"}[...]
Line Deleted : user_pref("CT3220468.mam_gk_appsData.enc", "eyJhcHBzIjpbeyJpZCI6IlByaWNlR29uZyIsInVybCI6Imh0dHA6Ly9wcmljZWdvbmcuY29uZHVpdGFwcHMuY29tL01BTS92MS9odG1sX2NvbXAuaHRtbCIsIm9wdGlvbnNEaWFsb2ciOnsiZGlzcGxheU5h[...]
Line Deleted : user_pref("CT3220468.mam_gk_localization.enc", "eyJnYWRnZXRDb250ZW50UG9saWN5Ijp7IlRleHQiOiJDb250ZW50IFBvbGljeSJ9LCJnYWRnZXREZXNjcmlwdGlvblByaW1hcnkiOnsiVGV4dCI6IlZhbHVlIEFwcHMgZW5yaWNoZXMgeW91ciB3ZWIg[...]
Line Deleted : user_pref("CT3220468.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"hxxps%3A%2F%2Flogin.szn.cz%2F%3FreturnURL%3Dhxxps%253a%252f%252femail.seznam.cz%252f%26serviceId%3Demail%[...]
Line Deleted : user_pref("CT3220468.searchProtector.notifyChanges", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Deleted : user_pref("CT3220468.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Deleted : user_pref("CT3220468.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
Line Deleted : user_pref("CT3220468.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\"}");
Line Deleted : user_pref("CT3220468.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT3220468\"}");
Line Deleted : user_pref("CT3220468.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"hxxp://uTorrentControlv2.OurToolbar.com//xpi\"}");
Line Deleted : user_pref("CT3220468.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"uTorrentControl_v2 \"}");
Line Deleted : user_pref("CT3220468.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Deleted : user_pref("CT3220468.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data\":\"2\"}");
Line Deleted : user_pref("CT3220468.url_history0001.enc", "aHR0cDovL3d3dy5zcmVhbGl0eS5jei9kZXRhaWwvcHJvZGVqL2J5dC8zK2trL2Jybm8tYnlzdHJjLWNodWRjaWNrYS8yODY4NTYwNzMyIzo6OmNsaWNraGFuZGxlcjo6OjEzNjMzMzI2NzQxNjYsLCxodHRw[...]
Line Deleted : user_pref("CT3220468_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1386111125957,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");

*************************

AdwCleaner[R0].txt - [10413 octets] - [09/01/2014 15:47:11]
AdwCleaner[R1].txt - [10474 octets] - [09/01/2014 15:59:47]
AdwCleaner[S0].txt - [9297 octets] - [09/01/2014 16:00:12]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [9357 octets] ##########

Poprosim o log z FRSTLauncheru http://forum.viry.cz/viewtopic.php?f=13&t=133100

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 08-01-2014 01
Ran by lenka (administrator) on LENKA-PC on 09-01-2014 16:35:28
Running from C:\Users\lenka\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: Czech
Internet Explorer Version 11
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(Broadcom Corporation) C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\WLTRYSVC.EXE
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Broadcom Corporation) C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\BCMWLTRY.EXE
(AMD) C:\Windows\System32\atieclxx.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
() C:\Windows\SysWOW64\PnkBstrB.exe
(WDC) C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe
(Memeo) C:\Program Files (x86)\Western Digital\WD SmartWare\Front Parlor\WDSmartWareBackgroundService.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Broadcom Corporation) C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\WLTRAY.EXE
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerEvent.exe
(WDC) C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMStatus.exe
(Western Digital) C:\Program Files (x86)\Western Digital\WD SmartWare\Front Parlor\WDSmartWare.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Wargaming.net) C:\Games\World_of_Tanks\WorldOfTanks.exe
(forum.viry.cz) C:\Users\lenka\Desktop\FRSTLauncher.exe
(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
(Microsoft Corporation) C:\Windows\SysWOW64\PING.EXE


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2280232 2010-07-29] (Synaptics Incorporated)
HKLM\...\Run: [Power Management] - C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe [1831016 2011-08-02] (Acer Incorporated)
HKLM\...\Run: [BCSSync] - C:\Program Files\Microsoft Office\Office14\BCSSync.exe [108144 2012-11-05] (Microsoft Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe [497648 2010-07-29] (Adobe Systems Incorporated)
HKLM\...\Run: [Broadcom Wireless Manager UI] - C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\WLTRAY.EXE [7138816 2013-10-25] (Broadcom Corporation)
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13260944 2012-11-19] (Realtek Semiconductor)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SwitchBoard] - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS5ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [406992 2010-02-22] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [4StoryPrePatch] - C:\Program Files (x86)\Gameforge4D\4Story_CZ\PrePatch.exe [327680 2012-05-08] (Zemi Interactive Inc.)
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [285240 2012-11-19] (Intel Corporation)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642728 2012-09-28] (Advanced Micro Devices, Inc.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKCU\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3671904 2012-08-28] (DT Soft Ltd)
HKCU\...\Run: [uTorrent] - C:\Program Files (x86)\uTorrent\uTorrent.exe [963984 2012-10-27] (BitTorrent, Inc.)
HKCU\...\Run: [Pando Media Booster] - C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe [3093624 2012-12-29] ()
MountPoints2: {80e28117-1a80-11e2-b996-dc0ea122e14a} - "F:\WD SmartWare.exe" autoplay=true
HKU\Default\...\RunOnce: [ScrSav] - C:\Program Files (x86)\Packard Bell\Screensaver\run_Packard Bell.exe [162408 2011-09-13] ()
HKU\Default User\...\RunOnce: [ScrSav] - C:\Program Files (x86)\Packard Bell\Screensaver\run_Packard Bell.exe [162408 2011-09-13] ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://packardbell.msn.com
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM-x32 - No Name - {96A25A24-2E87-4374-8A50-CC6F943FCE4D} - No File
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
Hosts: 127.0.0.1 activate.adobe.com
Tcpip\Parameters: [DhcpNameServer] 213.46.172.36 213.46.172.37

FireFox:
========
FF ProfilePath: C:\Users\lenka\AppData\Roaming\Mozilla\Firefox\Profiles\qstqk54v.default
FF NewTab: about:blank
FF DefaultSearchEngine: Search Here
FF SearchEngineOrder.3: Bing
FF SelectedSearchEngine: Search Here
FF Homepage: hxxp://www.seznam.cz/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.9.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.9.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @ngm.nexoneu.com/NxGame - C:\ProgramData\NexonEU\NGM\npNxGameEU.dll (Nexon)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\heureka-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\jyxo-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\seznam-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\slunecnice-cz.xml
FF Extension: Battlefield Heroes Updater - C:\Users\lenka\AppData\Roaming\Mozilla\Firefox\Profiles\qstqk54v.default\Extensions\battlefieldheroespatcher@ea.com
FF Extension: Battlefield Play4Free - C:\Users\lenka\AppData\Roaming\Mozilla\Firefox\Profiles\qstqk54v.default\Extensions\battlefieldplay4free@ea.com
FF Extension: GFACE Experience Plugin - C:\Users\lenka\AppData\Roaming\Mozilla\Firefox\Profiles\qstqk54v.default\Extensions\cryenginebrowserplugin@crytek.com
FF Extension: Český slovník pro kontrolu pravopisu - C:\Users\lenka\AppData\Roaming\Mozilla\Firefox\Profiles\qstqk54v.default\Extensions\cs@dictionaries.addons.mozilla.org

Chrome:
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION

==================== Services (Whitelisted) =================

R2 ePowerSvc; C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe [872552 2011-08-02] (Acer Incorporated)
R2 Live Updater Service; C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe [255376 2012-04-05] (Acer Incorporated)
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [75136 2013-10-30] ()
R2 PnkBstrB; C:\Windows\SysWow64\PnkBstrB.exe [189248 2013-10-30] ()
R2 wltrysvc; C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\WLTRYSVC.EXE [48128 2013-10-25] (Broadcom Corporation)

==================== Drivers (Whitelisted) ====================

R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2013-07-26] ()
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2012-10-20] (DT Soft Ltd)
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28216 2012-11-19] (Intel Corporation)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2013-07-26] ()
S1 StarOpen; C:\Windows\SysWow64\Drivers\StarOpen.sys [5632 2006-07-24] ()
S3 SWDUMon; C:\Windows\System32\DRIVERS\SWDUMon.sys [16152 2013-10-30] ()
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [x]
S3 X6va011; \??\C:\Windows\SysWOW64\Drivers\X6va011 [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-09 16:35 - 2014-01-09 16:35 - 00029696 _____ C:\Users\lenka\AppData\Local\MSGBOX.EXE
2014-01-09 16:35 - 2014-01-09 16:35 - 00015327 _____ C:\Users\lenka\Desktop\LM.bat
2014-01-09 16:35 - 2014-01-09 16:35 - 00012252 _____ C:\Users\lenka\Desktop\FRST.txt
2014-01-09 15:47 - 2014-01-09 16:00 - 00000000 ____D C:\AdwCleaner
2014-01-09 15:28 - 2014-01-09 15:28 - 00021722 _____ C:\Users\lenka\Desktop\JRT.txt
2014-01-09 15:20 - 2014-01-09 15:20 - 01233962 _____ C:\Users\lenka\Desktop\adwcleaner.exe
2014-01-09 15:20 - 2014-01-09 15:20 - 00000000 ____D C:\Windows\ERUNT
2014-01-09 15:19 - 2014-01-09 15:19 - 01037068 _____ (Thisisu) C:\Users\lenka\Desktop\JRT.exe
2014-01-09 14:53 - 2014-01-09 14:53 - 00007097 _____ C:\Users\lenka\Desktop\Addition.rar
2014-01-09 14:32 - 2014-01-09 14:32 - 00112640 _____ (forum.viry.cz) C:\Users\lenka\Desktop\FRSTLauncher.exe
2014-01-09 14:30 - 2014-01-09 14:30 - 00000000 ____D C:\FRST
2014-01-09 14:22 - 2014-01-09 14:23 - 01931770 _____ (Farbar) C:\Users\lenka\Desktop\FRST64.exe
2014-01-04 13:00 - 2014-01-04 13:00 - 00000000 ____D C:\Users\lenka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Drakensang Online
2014-01-04 13:00 - 2014-01-04 13:00 - 00000000 ____D C:\Program Files (x86)\Drakensang Online
2014-01-02 21:00 - 2014-01-02 21:03 - 00000000 ____D C:\Users\lenka\Downloads\James Bond 007 Monsterbox
2013-12-28 22:46 - 2013-12-28 23:57 - 00000000 ____D C:\Users\lenka\Downloads\Hobit - Šmakova dračí poušť
2013-12-28 19:10 - 2013-12-28 19:11 - 00000000 ____D C:\Users\lenka\Downloads\Návštevníci
2013-12-26 17:01 - 2013-12-26 17:04 - 00000000 ____D C:\Users\lenka\Downloads\Prci, Prci, Prcicky1-8(CZ)
2013-12-26 16:43 - 2013-12-26 17:34 - 911362048 _____ C:\Users\lenka\Downloads\Hit and Run.avi
2013-12-26 16:10 - 2013-12-26 17:43 - 2095276032 _____ C:\Users\lenka\Downloads\Paul.avi
2013-12-26 16:05 - 2013-12-26 17:22 - 902123520 _____ C:\Users\lenka\Downloads\Půlnoc v Paříži.avi
2013-12-26 16:03 - 2013-12-26 16:43 - 979885236 _____ C:\Users\lenka\Downloads\RANGO.CZ.BDrip.2011.Cinky.avi
2013-12-26 15:54 - 2013-12-26 16:03 - 715745280 _____ C:\Users\lenka\Downloads\Chlapi.z.karavanu.2006.avi
2013-12-22 01:37 - 2013-12-22 01:37 - 00000000 ____D C:\Users\lenka\Downloads\Jedinečný avi
2013-12-20 02:52 - 2013-12-20 02:52 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-12-13 17:03 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2013-12-13 17:03 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2013-12-13 17:03 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2013-12-13 17:03 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2013-12-13 17:01 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-13 17:01 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-13 17:01 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-12-13 17:01 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-12-13 17:01 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-12-13 17:01 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-12-13 17:01 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-13 17:01 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-13 17:01 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-12-13 17:01 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-12-13 17:01 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-12-13 17:01 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-12-13 17:01 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-12-13 17:01 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-12-13 17:01 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-13 17:01 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-12-13 17:01 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-12-13 17:01 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-13 17:01 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-12-13 17:01 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-12-13 17:01 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-12-13 17:01 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-12-13 17:01 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-13 17:01 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-12-13 17:01 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-12-13 17:01 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-13 17:01 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-13 17:01 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-12-13 17:01 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-12-13 17:01 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-12-13 17:01 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-12-13 16:35 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2013-12-13 16:35 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll
2013-12-13 16:35 - 2013-10-30 02:24 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-12-13 16:34 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-12-13 16:34 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-12-13 16:34 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2013-12-13 16:34 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2013-12-13 16:33 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-12-13 16:33 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-12-13 16:33 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2013-12-13 16:33 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2013-12-13 16:32 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2013-12-13 16:32 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2013-12-13 16:32 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2013-12-13 16:32 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2013-12-13 16:32 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2013-12-13 16:32 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2013-12-13 16:32 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
2013-12-13 16:32 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe

==================== One Month Modified Files and Folders =======

2014-01-09 16:36 - 2014-01-09 16:35 - 00012252 _____ C:\Users\lenka\Desktop\FRST.txt
2014-01-09 16:35 - 2014-01-09 16:35 - 00029696 _____ C:\Users\lenka\AppData\Local\MSGBOX.EXE
2014-01-09 16:35 - 2014-01-09 16:35 - 00015327 _____ C:\Users\lenka\Desktop\LM.bat
2014-01-09 16:31 - 2012-12-29 19:23 - 00000000 ____D C:\Users\lenka\AppData\Local\PMB Files
2014-01-09 16:30 - 2012-10-18 12:19 - 00000418 _____ C:\Windows\Tasks\Packard Bell Registration - Reminder Recall task.job
2014-01-09 16:12 - 2012-10-27 15:32 - 00000000 ____D C:\Users\lenka\AppData\Roaming\uTorrent
2014-01-09 16:08 - 2009-07-14 05:45 - 00016976 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-09 16:08 - 2009-07-14 05:45 - 00016976 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-09 16:04 - 2012-07-10 13:47 - 01085770 _____ C:\Windows\WindowsUpdate.log
2014-01-09 16:01 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-09 16:01 - 2009-07-14 05:51 - 00088910 _____ C:\Windows\setupact.log
2014-01-09 16:00 - 2014-01-09 15:47 - 00000000 ____D C:\AdwCleaner
2014-01-09 15:54 - 2012-10-17 15:15 - 00000914 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-09 15:28 - 2014-01-09 15:28 - 00021722 _____ C:\Users\lenka\Desktop\JRT.txt
2014-01-09 15:20 - 2014-01-09 15:20 - 01233962 _____ C:\Users\lenka\Desktop\adwcleaner.exe
2014-01-09 15:20 - 2014-01-09 15:20 - 00000000 ____D C:\Windows\ERUNT
2014-01-09 15:20 - 2012-10-19 10:28 - 00000000 ____D C:\Filmy
2014-01-09 15:19 - 2014-01-09 15:19 - 01037068 _____ (Thisisu) C:\Users\lenka\Desktop\JRT.exe
2014-01-09 14:53 - 2014-01-09 14:53 - 00007097 _____ C:\Users\lenka\Desktop\Addition.rar
2014-01-09 14:32 - 2014-01-09 14:32 - 00112640 _____ (forum.viry.cz) C:\Users\lenka\Desktop\FRSTLauncher.exe
2014-01-09 14:30 - 2014-01-09 14:30 - 00000000 ____D C:\FRST
2014-01-09 14:23 - 2014-01-09 14:22 - 01931770 _____ (Farbar) C:\Users\lenka\Desktop\FRST64.exe
2014-01-09 14:08 - 2012-10-20 08:32 - 00000000 ____D C:\Users\lenka\AppData\Local\CrashDumps
2014-01-08 20:26 - 2012-12-29 19:23 - 00000000 ____D C:\ProgramData\PMB Files
2014-01-08 17:38 - 2013-08-23 12:51 - 00000000 ____D C:\Program Files (x86)\The KMPlayer
2014-01-07 18:37 - 2012-07-10 14:34 - 00670964 _____ C:\Windows\system32\perfh005.dat
2014-01-07 18:37 - 2012-07-10 14:34 - 00142062 _____ C:\Windows\system32\perfc005.dat
2014-01-07 18:37 - 2009-07-14 06:13 - 01589492 _____ C:\Windows\system32\PerfStringBackup.INI
2014-01-04 13:00 - 2014-01-04 13:00 - 00000000 ____D C:\Users\lenka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Drakensang Online
2014-01-04 13:00 - 2014-01-04 13:00 - 00000000 ____D C:\Program Files (x86)\Drakensang Online
2014-01-02 21:03 - 2014-01-02 21:00 - 00000000 ____D C:\Users\lenka\Downloads\James Bond 007 Monsterbox
2013-12-29 11:38 - 2010-11-21 04:47 - 00560394 _____ C:\Windows\PFRO.log
2013-12-28 23:57 - 2013-12-28 22:46 - 00000000 ____D C:\Users\lenka\Downloads\Hobit - Šmakova dračí poušť
2013-12-28 22:34 - 2013-08-14 08:47 - 00000000 ____D C:\Program Files (x86)\WarThunder
2013-12-28 22:32 - 2013-09-23 12:25 - 00000000 ____D C:\Program Files (x86)\Zenimax Online
2013-12-28 22:32 - 2013-06-08 12:21 - 00000000 ____D C:\ProgramData\Hi-Rez Studios
2013-12-28 22:32 - 2013-06-08 12:21 - 00000000 ____D C:\Program Files (x86)\Hi-Rez Studios
2013-12-28 22:32 - 2011-10-20 10:28 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-12-28 22:31 - 2011-10-20 11:04 - 00000000 ____D C:\ProgramData\Skype
2013-12-28 22:29 - 2013-11-24 18:42 - 00000000 ____D C:\Program Files (x86)\StarCraft II
2013-12-28 22:29 - 2013-08-21 17:28 - 00000000 ____D C:\Program Files (x86)\RIFT
2013-12-28 22:28 - 2013-04-19 17:09 - 00000000 ____D C:\Users\lenka\AppData\Roaming\.minecraft
2013-12-28 22:28 - 2012-10-17 15:27 - 00000000 ____D C:\Users\lenka\AppData\Roaming\WildTangent
2013-12-28 22:28 - 2011-10-20 10:37 - 00000000 ____D C:\ProgramData\WildTangent
2013-12-28 22:18 - 2013-07-26 20:33 - 00000000 ____D C:\Users\lenka\AppData\Roaming\Ubisoft
2013-12-28 19:11 - 2013-12-28 19:10 - 00000000 ____D C:\Users\lenka\Downloads\Návštevníci
2013-12-26 17:43 - 2013-12-26 16:10 - 2095276032 _____ C:\Users\lenka\Downloads\Paul.avi
2013-12-26 17:34 - 2013-12-26 16:43 - 911362048 _____ C:\Users\lenka\Downloads\Hit and Run.avi
2013-12-26 17:22 - 2013-12-26 16:05 - 902123520 _____ C:\Users\lenka\Downloads\Půlnoc v Paříži.avi
2013-12-26 17:04 - 2013-12-26 17:01 - 00000000 ____D C:\Users\lenka\Downloads\Prci, Prci, Prcicky1-8(CZ)
2013-12-26 16:43 - 2013-12-26 16:03 - 979885236 _____ C:\Users\lenka\Downloads\RANGO.CZ.BDrip.2011.Cinky.avi
2013-12-26 16:03 - 2013-12-26 15:54 - 715745280 _____ C:\Users\lenka\Downloads\Chlapi.z.karavanu.2006.avi
2013-12-24 15:22 - 2013-05-12 13:17 - 00000000 ____D C:\ProgramData\WarThunder
2013-12-22 17:53 - 2012-12-16 19:19 - 00000000 _____ C:\ProgramData\LauncherAccess.dt
2013-12-22 01:37 - 2013-12-22 01:37 - 00000000 ____D C:\Users\lenka\Downloads\Jedinečný avi
2013-12-21 17:54 - 2013-10-30 17:55 - 00000000 ____D C:\Program Files (x86)\WoW
2013-12-21 17:39 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-12-21 15:18 - 2013-08-25 17:42 - 00000000 ____D C:\Program Files (x86)\Pandaria
2013-12-21 12:58 - 2012-10-27 16:03 - 00000000 ____D C:\Users\lenka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2013-12-21 12:14 - 2013-04-19 16:54 - 00000000 ____D C:\Users\lenka\AppData\Roaming\Skype
2013-12-20 23:56 - 2012-10-17 14:00 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-12-20 02:52 - 2013-12-20 02:52 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-12-16 22:22 - 2013-06-19 15:14 - 00000003 _____ C:\Windows\system32\HRUPPROG.TXT
2013-12-14 21:11 - 2013-04-29 20:01 - 00000270 __RSH C:\Users\lenka\ntuser.pol
2013-12-14 21:11 - 2012-10-01 13:18 - 00000000 ____D C:\Users\lenka
2013-12-13 17:17 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2013-12-13 17:16 - 2009-07-14 05:45 - 04974664 _____ C:\Windows\system32\FNTCACHE.DAT
2013-12-13 17:02 - 2012-11-12 20:23 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-12-13 16:54 - 2012-10-17 15:15 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-12-13 16:54 - 2012-10-17 15:15 - 00003852 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-12-13 16:54 - 2011-10-20 11:30 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-12-13 16:44 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF

Some content of TEMP:
====================
C:\Users\lenka\AppData\Local\Temp\BRSVC_12046194_hlp.exe
C:\Users\lenka\AppData\Local\Temp\CH.dll
C:\Users\lenka\AppData\Local\Temp\comver.dll
C:\Users\lenka\AppData\Local\Temp\DefaultTabSetup2.exe
C:\Users\lenka\AppData\Local\Temp\e6a4f757837ed530a2a77f623f564ecf.dll
C:\Users\lenka\AppData\Local\Temp\GameuxInstallHelper.dll
C:\Users\lenka\AppData\Local\Temp\Gw2.exe
C:\Users\lenka\AppData\Local\Temp\HiPatchSelfUpdateWindow.exe
C:\Users\lenka\AppData\Local\Temp\HiRezLauncherControls.dll
C:\Users\lenka\AppData\Local\Temp\InstallManager_GEN_GEN.exe
C:\Users\lenka\AppData\Local\Temp\KMP_3.6.0.87.exe
C:\Users\lenka\AppData\Local\Temp\KMP_3.7.0.109.exe
C:\Users\lenka\AppData\Local\Temp\KMP_3.7.0.113.exe
C:\Users\lenka\AppData\Local\Temp\kpinstaller.exe
C:\Users\lenka\AppData\Local\Temp\Medal of Honor_uninst.exe
C:\Users\lenka\AppData\Local\Temp\NGMDll.dll
C:\Users\lenka\AppData\Local\Temp\NGMResource.dll
C:\Users\lenka\AppData\Local\Temp\Quarantine.exe
C:\Users\lenka\AppData\Local\Temp\riftuninstall.exe
C:\Users\lenka\AppData\Local\Temp\SkypeSetup.exe
C:\Users\lenka\AppData\Local\Temp\Softonic_EN_1-4-9.exe
C:\Users\lenka\AppData\Local\Temp\swt-win32-3740.dll
C:\Users\lenka\AppData\Local\Temp\tmp5DFB.exe
C:\Users\lenka\AppData\Local\Temp\tmp8E9D.exe
C:\Users\lenka\AppData\Local\Temp\tmpCACF.exe
C:\Users\lenka\AppData\Local\Temp\tmpFD06.exe
C:\Users\lenka\AppData\Local\Temp\ubertmp.exe
C:\Users\lenka\AppData\Local\Temp\ubi1393.tmp.exe
C:\Users\lenka\AppData\Local\Temp\unicows.dll


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-01-09 15:40

==================== End Of Log ============================

Tvorba fixlistu pro FRST

• Spustte poznamkovy blok (Start-spustit-notepad)
• Zkopirujte skript nize

• Kód: Vybrat vše

  Start
  HKLM\...\Run: [BCSSync] - C:\Program Files\Microsoft Office\Office14\BCSSync.exe [108144 2012-11-05] (Microsoft Corporation)
  HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe [497648 2010-07-29] (Adobe Systems Incorporated)
  HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
  HKLM-x32\...\Run: [SwitchBoard] - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
  HKLM-x32\...\Run: [AdobeCS5ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [406992 2010-02-22] (Adobe Systems Incorporated)
  HKLM-x32\...\Run: [4StoryPrePatch] - C:\Program Files (x86)\Gameforge4D\4Story_CZ\PrePatch.exe [327680 2012-05-08] (Zemi Interactive Inc.)
  HKCU\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3671904 2012-08-28] (DT Soft Ltd)
  HKCU\...\Run: [uTorrent] - C:\Program Files (x86)\uTorrent\uTorrent.exe [963984 2012-10-27] (BitTorrent, Inc.)
  HKCU\...\Run: [Pando Media Booster] - C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe [3093624 2012-12-29] ()
  MountPoints2: {80e28117-1a80-11e2-b996-dc0ea122e14a} - "F:\WD SmartWare.exe" autoplay=true
  HKU\Default\...\RunOnce: [ScrSav] - C:\Program Files (x86)\Packard Bell\Screensaver\run_Packard Bell.exe [162408 2011-09-13] ()
  HKU\Default User\...\RunOnce: [ScrSav] - C:\Program Files (x86)\Packard Bell\Screensaver\run_Packard Bell.exe [162408 2011-09-13] ()
  
  HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://packardbell.msn.com
  Toolbar: HKLM-x32 - No Name - {96A25A24-2E87-4374-8A50-CC6F943FCE4D} - No File
  Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
  
  FF DefaultSearchEngine: Search Here
  FF SearchEngineOrder.3: Bing
  FF SelectedSearchEngine: Search Here
  
  Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
  
  S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [x]
  S3 X6va011; \??\C:\Windows\SysWOW64\Drivers\X6va011 [x]
  
  2014-01-09 16:35 - 2014-01-09 16:35 - 00029696 _____ C:\Users\lenka\AppData\Local\MSGBOX.EXE
  2014-01-09 16:35 - 2014-01-09 16:35 - 00015327 _____ C:\Users\lenka\Desktop\LM.bat
  2014-01-09 16:35 - 2014-01-09 16:35 - 00012252 _____ C:\Users\lenka\Desktop\FRST.txt
  2014-01-09 15:28 - 2014-01-09 15:28 - 00021722 _____ C:\Users\lenka\Desktop\JRT.txt
  2014-01-09 15:20 - 2014-01-09 15:20 - 01233962 _____ C:\Users\lenka\Desktop\adwcleaner.exe
  2014-01-09 15:19 - 2014-01-09 15:19 - 01037068 _____ (Thisisu) C:\Users\lenka\Desktop\JRT.exe
  2014-01-09 14:53 - 2014-01-09 14:53 - 00007097 _____ C:\Users\lenka\Desktop\Addition.rar
  2014-01-09 14:32 - 2014-01-09 14:32 - 00112640 _____ (forum.viry.cz) C:\Users\lenka\Desktop\FRSTLauncher.exe
  C:\Users\lenka\AppData\Local\Temp\BRSVC_12046194_hlp.exe
  C:\Users\lenka\AppData\Local\Temp\CH.dll
  C:\Users\lenka\AppData\Local\Temp\comver.dll
  C:\Users\lenka\AppData\Local\Temp\DefaultTabSetup2.exe
  C:\Users\lenka\AppData\Local\Temp\e6a4f757837ed530a2a77f623f564ecf.dll
  C:\Users\lenka\AppData\Local\Temp\GameuxInstallHelper.dll
  C:\Users\lenka\AppData\Local\Temp\Gw2.exe
  C:\Users\lenka\AppData\Local\Temp\HiPatchSelfUpdateWindow.exe
  C:\Users\lenka\AppData\Local\Temp\HiRezLauncherControls.dll
  C:\Users\lenka\AppData\Local\Temp\InstallManager_GEN_GEN.exe
  C:\Users\lenka\AppData\Local\Temp\KMP_3.6.0.87.exe
  C:\Users\lenka\AppData\Local\Temp\KMP_3.7.0.109.exe
  C:\Users\lenka\AppData\Local\Temp\KMP_3.7.0.113.exe
  C:\Users\lenka\AppData\Local\Temp\kpinstaller.exe
  C:\Users\lenka\AppData\Local\Temp\Medal of Honor_uninst.exe
  C:\Users\lenka\AppData\Local\Temp\NGMDll.dll
  C:\Users\lenka\AppData\Local\Temp\NGMResource.dll
  C:\Users\lenka\AppData\Local\Temp\Quarantine.exe
  C:\Users\lenka\AppData\Local\Temp\riftuninstall.exe
  C:\Users\lenka\AppData\Local\Temp\SkypeSetup.exe
  C:\Users\lenka\AppData\Local\Temp\Softonic_EN_1-4-9.exe
  C:\Users\lenka\AppData\Local\Temp\swt-win32-3740.dll
  C:\Users\lenka\AppData\Local\Temp\tmp5DFB.exe
  C:\Users\lenka\AppData\Local\Temp\tmp8E9D.exe
  C:\Users\lenka\AppData\Local\Temp\tmpCACF.exe
  C:\Users\lenka\AppData\Local\Temp\tmpFD06.exe
  C:\Users\lenka\AppData\Local\Temp\ubertmp.exe
  C:\Users\lenka\AppData\Local\Temp\ubi1393.tmp.exe
  C:\Users\lenka\AppData\Local\Temp\unicows.dll
  
  Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
  Task: C:\Windows\Tasks\Packard Bell Registration - Reminder Recall task.job => C:\Program Files (x86)\Packard Bell\Registration\GREG.exe
  
  Hosts:
  CMD: shutdown /r /f /t 2
  
  End

• Ulozte vytvoreny TXT jako fixlist.txt
• Presunte vytvoreny fixlist vedle FRST

Spustte znovu FRST.exe

• Kliknete na Fix
• Probehne oprava a vytvori log Fixlog.txt

Restart PC a dejte mi sem fixlog.txt

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 08-01-2014 01
Ran by lenka at 2014-01-09 17:56:11 Run:1
Running from C:\Users\lenka\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Start
HKLM\...\Run: [BCSSync] - C:\Program Files\Microsoft Office\Office14\BCSSync.exe [108144 2012-11-05] (Microsoft Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe [497648 2010-07-29] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SwitchBoard] - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS5ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [406992 2010-02-22] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [4StoryPrePatch] - C:\Program Files (x86)\Gameforge4D\4Story_CZ\PrePatch.exe [327680 2012-05-08] (Zemi Interactive Inc.)
HKCU\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3671904 2012-08-28] (DT Soft Ltd)
HKCU\...\Run: [uTorrent] - C:\Program Files (x86)\uTorrent\uTorrent.exe [963984 2012-10-27] (BitTorrent, Inc.)
HKCU\...\Run: [Pando Media Booster] - C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe [3093624 2012-12-29] ()
MountPoints2: {80e28117-1a80-11e2-b996-dc0ea122e14a} - "F:\WD SmartWare.exe" autoplay=true
HKU\Default\...\RunOnce: [ScrSav] - C:\Program Files (x86)\Packard Bell\Screensaver\run_Packard Bell.exe [162408 2011-09-13] ()
HKU\Default User\...\RunOnce: [ScrSav] - C:\Program Files (x86)\Packard Bell\Screensaver\run_Packard Bell.exe [162408 2011-09-13] ()

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://packardbell.msn.com
Toolbar: HKLM-x32 - No Name - {96A25A24-2E87-4374-8A50-CC6F943FCE4D} - No File
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File

FF DefaultSearchEngine: Search Here
FF SearchEngineOrder.3: Bing
FF SelectedSearchEngine: Search Here

Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION

S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [x]
S3 X6va011; \??\C:\Windows\SysWOW64\Drivers\X6va011 [x]

2014-01-09 16:35 - 2014-01-09 16:35 - 00029696 _____ C:\Users\lenka\AppData\Local\MSGBOX.EXE
2014-01-09 16:35 - 2014-01-09 16:35 - 00015327 _____ C:\Users\lenka\Desktop\LM.bat
2014-01-09 16:35 - 2014-01-09 16:35 - 00012252 _____ C:\Users\lenka\Desktop\FRST.txt
2014-01-09 15:28 - 2014-01-09 15:28 - 00021722 _____ C:\Users\lenka\Desktop\JRT.txt
2014-01-09 15:20 - 2014-01-09 15:20 - 01233962 _____ C:\Users\lenka\Desktop\adwcleaner.exe
2014-01-09 15:19 - 2014-01-09 15:19 - 01037068 _____ (Thisisu) C:\Users\lenka\Desktop\JRT.exe
2014-01-09 14:53 - 2014-01-09 14:53 - 00007097 _____ C:\Users\lenka\Desktop\Addition.rar
2014-01-09 14:32 - 2014-01-09 14:32 - 00112640 _____ (forum.viry.cz) C:\Users\lenka\Desktop\FRSTLauncher.exe
C:\Users\lenka\AppData\Local\Temp\BRSVC_12046194_hlp.exe
C:\Users\lenka\AppData\Local\Temp\CH.dll
C:\Users\lenka\AppData\Local\Temp\comver.dll
C:\Users\lenka\AppData\Local\Temp\DefaultTabSetup2.exe
C:\Users\lenka\AppData\Local\Temp\e6a4f757837ed530a2a77f623f564ecf.dll
C:\Users\lenka\AppData\Local\Temp\GameuxInstallHelper.dll
C:\Users\lenka\AppData\Local\Temp\Gw2.exe
C:\Users\lenka\AppData\Local\Temp\HiPatchSelfUpdateWindow.exe
C:\Users\lenka\AppData\Local\Temp\HiRezLauncherControls.dll
C:\Users\lenka\AppData\Local\Temp\InstallManager_GEN_GEN.exe
C:\Users\lenka\AppData\Local\Temp\KMP_3.6.0.87.exe
C:\Users\lenka\AppData\Local\Temp\KMP_3.7.0.109.exe
C:\Users\lenka\AppData\Local\Temp\KMP_3.7.0.113.exe
C:\Users\lenka\AppData\Local\Temp\kpinstaller.exe
C:\Users\lenka\AppData\Local\Temp\Medal of Honor_uninst.exe
C:\Users\lenka\AppData\Local\Temp\NGMDll.dll
C:\Users\lenka\AppData\Local\Temp\NGMResource.dll
C:\Users\lenka\AppData\Local\Temp\Quarantine.exe
C:\Users\lenka\AppData\Local\Temp\riftuninstall.exe
C:\Users\lenka\AppData\Local\Temp\SkypeSetup.exe
C:\Users\lenka\AppData\Local\Temp\Softonic_EN_1-4-9.exe
C:\Users\lenka\AppData\Local\Temp\swt-win32-3740.dll
C:\Users\lenka\AppData\Local\Temp\tmp5DFB.exe
C:\Users\lenka\AppData\Local\Temp\tmp8E9D.exe
C:\Users\lenka\AppData\Local\Temp\tmpCACF.exe
C:\Users\lenka\AppData\Local\Temp\tmpFD06.exe
C:\Users\lenka\AppData\Local\Temp\ubertmp.exe
C:\Users\lenka\AppData\Local\Temp\ubi1393.tmp.exe
C:\Users\lenka\AppData\Local\Temp\unicows.dll

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\Packard Bell Registration - Reminder Recall task.job => C:\Program Files (x86)\Packard Bell\Registration\GREG.exe

Hosts:
CMD: shutdown /r /f /t 2

End
*****************

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\BCSSync => Value deleted successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeAAMUpdater-1.0 => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\SwitchBoard => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\AdobeCS5ServiceManager => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\4StoryPrePatch => Value deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\DAEMON Tools Lite => Value deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\uTorrent => Value deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\Pando Media Booster => Value deleted successfully.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{80e28117-1a80-11e2-b996-dc0ea122e14a} => Key deleted successfully.
HKCR\CLSID\{80e28117-1a80-11e2-b996-dc0ea122e14a} => Key not found.
HKU\Default\Software\Microsoft\Windows\CurrentVersion\RunOnce\\ScrSav => Value deleted successfully.
HKU\Default User\Software\Microsoft\Windows\CurrentVersion\RunOnce\\ScrSav => Value not found.
HKCU\Software\Microsoft\Internet Explorer\Main\\Default_Page_URL => Value was restored successfully.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{96A25A24-2E87-4374-8A50-CC6F943FCE4D} => Value deleted successfully.
HKCR\Wow6432Node\CLSID\{96A25A24-2E87-4374-8A50-CC6F943FCE4D} => Key not found.
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} => Value deleted successfully.
HKCR\CLSID\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} => Key not found.
Firefox DefaultSearchEngine deleted successfully.
Firefox SearchEngineOrder.3 deleted successfully.
Firefox SelectedSearchEngine deleted successfully.
EagleX64 => Service deleted successfully.
X6va011 => Service deleted successfully.
"C:\Users\lenka\AppData\Local\MSGBOX.EXE" => File/Directory not found.
C:\Users\lenka\Desktop\LM.bat => Moved successfully.
C:\Users\lenka\Desktop\FRST.txt => Moved successfully.
C:\Users\lenka\Desktop\JRT.txt => Moved successfully.
C:\Users\lenka\Desktop\adwcleaner.exe => Moved successfully.
C:\Users\lenka\Desktop\JRT.exe => Moved successfully.
C:\Users\lenka\Desktop\Addition.rar => Moved successfully.
C:\Users\lenka\Desktop\FRSTLauncher.exe => Moved successfully.
C:\Users\lenka\AppData\Local\Temp\BRSVC_12046194_hlp.exe => Moved successfully.
C:\Users\lenka\AppData\Local\Temp\CH.dll => Moved successfully.
C:\Users\lenka\AppData\Local\Temp\comver.dll => Moved successfully.
C:\Users\lenka\AppData\Local\Temp\DefaultTabSetup2.exe => Moved successfully.
C:\Users\lenka\AppData\Local\Temp\e6a4f757837ed530a2a77f623f564ecf.dll => Moved successfully.
C:\Users\lenka\AppData\Local\Temp\GameuxInstallHelper.dll => Moved successfully.
C:\Users\lenka\AppData\Local\Temp\Gw2.exe => Moved successfully.
C:\Users\lenka\AppData\Local\Temp\HiPatchSelfUpdateWindow.exe => Moved successfully.
C:\Users\lenka\AppData\Local\Temp\HiRezLauncherControls.dll => Moved successfully.
C:\Users\lenka\AppData\Local\Temp\InstallManager_GEN_GEN.exe => Moved successfully.
C:\Users\lenka\AppData\Local\Temp\KMP_3.6.0.87.exe => Moved successfully.
C:\Users\lenka\AppData\Local\Temp\KMP_3.7.0.109.exe => Moved successfully.
C:\Users\lenka\AppData\Local\Temp\KMP_3.7.0.113.exe => Moved successfully.
C:\Users\lenka\AppData\Local\Temp\kpinstaller.exe => Moved successfully.
C:\Users\lenka\AppData\Local\Temp\Medal of Honor_uninst.exe => Moved successfully.
C:\Users\lenka\AppData\Local\Temp\NGMDll.dll => Moved successfully.
C:\Users\lenka\AppData\Local\Temp\NGMResource.dll => Moved successfully.
C:\Users\lenka\AppData\Local\Temp\Quarantine.exe => Moved successfully.
C:\Users\lenka\AppData\Local\Temp\riftuninstall.exe => Moved successfully.
C:\Users\lenka\AppData\Local\Temp\SkypeSetup.exe => Moved successfully.
C:\Users\lenka\AppData\Local\Temp\Softonic_EN_1-4-9.exe => Moved successfully.
C:\Users\lenka\AppData\Local\Temp\swt-win32-3740.dll => Moved successfully.
C:\Users\lenka\AppData\Local\Temp\tmp5DFB.exe => Moved successfully.
C:\Users\lenka\AppData\Local\Temp\tmp8E9D.exe => Moved successfully.
C:\Users\lenka\AppData\Local\Temp\tmpCACF.exe => Moved successfully.
C:\Users\lenka\AppData\Local\Temp\tmpFD06.exe => Moved successfully.
C:\Users\lenka\AppData\Local\Temp\ubertmp.exe => Moved successfully.
C:\Users\lenka\AppData\Local\Temp\ubi1393.tmp.exe => Moved successfully.
C:\Users\lenka\AppData\Local\Temp\unicows.dll => Moved successfully.
C:\Windows\Tasks\Adobe Flash Player Updater.job => Moved successfully.
C:\Windows\Tasks\Packard Bell Registration - Reminder Recall task.job => Moved successfully.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.

========= shutdown /r /f /t 2 =========


========= End of CMD: =========


==== End of Fixlog ====

Tak jeste uklidime

T-Cleaner http://vyosek.tym.cz/pro_usery/T-Cleaner.exe

• Stahnete a spustte
• Pro potvrzeni volby mackejte A, Enter
• Po pouziti utilitu smazte
• Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)

OTC http://oldtimer.geekstogo.com/OTC.exe

• Stahnete a spustte
• Kliknete na CleanUp a potvrdte YES
• Program uklidi a restartuje PC

TFC http://oldtimer.geekstogo.com/TFC.exe

• Stahnete a spustte
• Kliknete na Start a potvrdte OK
• Program uklidi a restartuje pc
• Po pouziti utilitu smazte

Stahnete Ccleaner http://forum.viry.cz/viewtopic.php?t=7478
Panel čistič

• Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner

Panel registry

• dejte Hledej problémy
• nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
• postup opakujte dokud nebude bez problemu - vetsinou cca 3x

Panel nástroje

• Zde muzete odinstalovat nepotrebne programy

CCleaner doporucuji pouzivat cca jednou za tyden

A pokud nejsou problemy ci dotazy, je to z me strany vse

Děkuji moc,vše provedeno dle vašeho návodu. Počítač se viditelně zrychlil. Po výplatě určitě přispěji. Ještě jednou děkuji.

Nemate zac, rad jsem pomohl Zase nekdy

Za podporu fora jmenem celeho tymu dekuji

A na zaklade Pravidla o zamykani temat