VIRY.CZ

Pomáháme v boji s počítačovou havěti!
https://forum.viry.cz:443/

prosím o kontrolu

https://forum.viry.cz:443/viewtopic.php?t=137646

Stránka 1 z 2

prosím o kontrolu

Napsal: 26 dub 2014 09:03
od tommy.havlos
Zdravím, notebook jsem trochu pročistil, bylo tu pár virů, ale pro jistotu to ještě posílám na kontrolu. Mám tu ještě další notebook na pročištění, který bych kdyžtak poslal později. Díky

Logfile of random's system information tool 1.09 (written by random/random)
Run by Premek at 2014-04-26 09:36:52
Microsoft® Windows Vista™ Home Basic Service Pack 2
System drive C: has 688 MB (1%) free of 120 GB
Total RAM: 1976 MB (15% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9:39:16, on 26.4.2014
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v9.00 (9.00.8112.16540)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Windows\WindowsMobile\wmdSync.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\TO2SSM\McciTrayApp.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\CheckPoint\ZoneAlarm\zatray.exe
C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Premek\Desktop\RSIT.exe
C:\Program Files\trend micro\Premek.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - - (no file)
O1 - Hosts: ::1 localhost
O2 - BHO: Podpora odkazu pro Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe"
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [Windows Mobile-based device management] %windir%\WindowsMobile\wmdSync.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [TO2SSM_McciTrayApp] C:\Program Files\TO2SSM\McciTrayApp.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [ZoneAlarm] "C:\Program Files\CheckPoint\ZoneAlarm\zatray.exe"
O4 - HKLM\..\Run: [Avira Systray] C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
O4 - HKCU\..\Run: [Facebook Update] "C:\Users\Premek\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - Startup: OpenOffice.org 3.3.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
O4 - Startup: srvctl.lnk = C:\ProgramData\tunectl\tuneupdx32.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe (file missing)
O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe (file missing)
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\Program Files\LSI SoftModem\agrsmsvc.exe
O23 - Service: Avira Scheduler (AntiVirSchedulerService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira Real-Time Protection (AntiVirService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Avira Service Host (Avira.OE.ServiceHost) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP Service (hpsrv) - Hewlett-Packard - C:\Windows\system32\Hpservice.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: McciCMService - Motive Communications, Inc. - C:\Program Files\Common Files\Motive\McciCMService.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: Remote Procedure Call (RPC) Net (rpcnet) - Absolute Software Corp. - C:\Windows\system32\rpcnet.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Check Point Software Technologies Ltd. - C:\Program Files\CheckPoint\ZoneAlarm\vsmon.exe
O23 - Service: ZoneAlarm Privacy Service (ZAPrivacyService) - Check Point Software Technologies, Ltd. - C:\Program Files\CheckPoint\ZoneAlarm\ZAPrivacyService.exe

--
End of file - 9254 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-1442088012-695715647-31229734-1000Core.job
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-1442088012-695715647-31229734-1000UA.job
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-1442088012-695715647-31229734-1001Core.job
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-1442088012-695715647-31229734-1001UA.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

=========Mozilla firefox=========

ProfilePath - C:\Users\Premek\AppData\Roaming\Mozilla\Firefox\Profiles\80migwzz.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "http://www.seznam.cz/"

"{20a82645-c095-46ed-80e3-08825760534b}"=C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 12.0.0.77 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF32_12_0_0_77.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Apple.com/iTunes,version=]
"Description"=iTunes Detector Plug-in
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Apple.com/iTunes,version=1.0]
"Description"=
"Path"=C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@ei.VideoDownloadConverter_4z.com/Plugin]
"Description"=VideoDownloadConverter Plugin
"Path"=C:\Program Files\VideoDownloadConverter_4zEI\Installr\1.bin\NP4zEISB.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Google.com/GoogleEarthPlugin]
"Description"=Google Earth in your browser
"Path"=C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@google.com/npPicasa3,version=3.0.0]
"Description"=Picasa3 plugin
"Path"=C:\Program Files\Google\Picasa3\npPicasa3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.55.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.55.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.23.9\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.23.9\npGoogleUpdate3.dll

C:\Program Files\Mozilla Firefox\extensions\
{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}

C:\Program Files\Mozilla Firefox\components\
AskHPRFF.js
nsIQTScriptablePlugin.xpt

C:\Program Files\Mozilla Firefox\plugins\
npqtplugin.dll
npqtplugin2.dll
npqtplugin3.dll
npqtplugin4.dll
npqtplugin5.dll
npqtplugin6.dll
npqtplugin7.dll
QuickTimePlugin.class

C:\Users\Premek\AppData\Roaming\Mozilla\Firefox\Profiles\80migwzz.default\searchplugins\
askcom.xml
bingp.xml
icqplugin-1.xml
icqplugin-10.xml
icqplugin-11.xml
icqplugin-12.xml
icqplugin-13.xml
icqplugin-14.xml
icqplugin-15.xml
icqplugin-16.xml
icqplugin-17.xml
icqplugin-18.xml
icqplugin-19.xml
icqplugin-2.xml
icqplugin-20.xml
icqplugin-21.xml
icqplugin-22.xml
icqplugin-23.xml
icqplugin-24.xml
icqplugin-25.xml
icqplugin-26.xml
icqplugin-27.xml
icqplugin-28.xml
icqplugin-29.xml
icqplugin-3.xml
icqplugin-30.xml
icqplugin-31.xml
icqplugin-32.xml
icqplugin-33.xml
icqplugin-34.xml
icqplugin-35.xml
icqplugin-36.xml
icqplugin-4.xml
icqplugin-5.xml
icqplugin-6.xml
icqplugin-7.xml
icqplugin-8.xml
icqplugin-9.xml
icqplugin.gif
icqplugin.src
icqplugin.xml
zonealarm.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Podpora odkazu pro Adobe PDF Reader - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-23 62080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2014-04-26 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Browser Helper - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2013-05-14 4531320]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2014-04-26 171944]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-21 1008184]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2008-03-28 1045800]
"RemoteControl"=C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe [2006-12-06 69216]
"LanguageShortcut"=C:\Program Files\CyberLink\PowerDVD\Language\Language.exe [2006-12-05 54832]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2008-06-10 150040]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2008-06-10 170520]
"Persistence"=C:\Windows\system32\igfxpers.exe [2008-06-10 145944]
"Windows Mobile-based device management"=C:\Windows\WindowsMobile\wmdSync.exe [2008-01-21 215552]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2010-03-18 421888]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2010-07-21 141608]
"TO2SSM_McciTrayApp"=C:\Program Files\TO2SSM\McciTrayApp.exe [2008-08-15 1473536]
"avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2014-02-25 689744]
"ZoneAlarm"=C:\Program Files\CheckPoint\ZoneAlarm\zatray.exe [2014-03-18 137352]
"Avira Systray"=C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe [2014-04-15 180304]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2013-07-02 254336]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-04-11 1233920]
"PC Suite Tray"=C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe -onlytray []
"Facebook Update"=C:\Users\Premek\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-05-03 138096]
"WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2008-01-21 202240]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2014-02-10 20922016]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Adobe Reader Speed Launch.lnk - C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
Adobe Reader Synchronizer.lnk - C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe

C:\Users\Premek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
OpenOffice.org 3.3.lnk - C:\Program Files\OpenOffice.org 3\program\quickstart.exe
srvctl.lnk - C:\ProgramData\tunectl\tuneupdx32.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2008-05-21 208896]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vsmon]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"EnableLUA"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"TaskbarNoNotification"=0
"HideSCAHealth"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"BindDirectlyToPropertySetStorage"=0
"TaskbarNoNotification"=0
"HideSCAHealth"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"MSVideo8"=VfWWDM32.dll
"vidc.ffds"=C:\PROGRA~1\COMBIN~1\Filters\FFDShow\ff_vfw.dll
"VIDC.FMVC"=fmcodec.dll
"vidc.mjpg"=pvmjpg30.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2014-04-26 09:37:01 ----D---- C:\Program Files\trend micro
2014-04-26 09:36:52 ----D---- C:\rsit
2014-04-26 09:34:59 ----D---- C:\ProgramData\Oracle
2014-04-26 09:34:37 ----D---- C:\Program Files\Common Files\Java
2014-04-26 09:34:25 ----A---- C:\Windows\system32\javaws.exe
2014-04-26 09:32:35 ----A---- C:\Windows\system32\WindowsAccessBridge.dll
2014-04-26 09:32:35 ----A---- C:\Windows\system32\javaw.exe
2014-04-26 09:32:35 ----A---- C:\Windows\system32\java.exe
2014-04-26 09:30:39 ----D---- C:\Program Files\Java
2014-04-17 13:17:37 ----D---- C:\Program Files\Common Files\Skype
2014-04-06 08:29:04 ----N---- C:\Windows\system32\Upgrd.exe
2014-04-06 08:28:26 ----A---- C:\Windows\system32\NTAgent.exe
2014-04-02 20:17:23 ----D---- C:\Program Files\Mozilla Firefox
2014-04-01 22:30:45 ----D---- C:\Program Files\Check Point Software Technologies LTD
2014-04-01 22:30:36 ----D---- C:\Users\Premek\AppData\Roaming\Check Point Software Technologies LTD
2014-04-01 22:30:24 ----D---- C:\Program Files\CheckPoint
2014-04-01 22:30:09 ----D---- C:\ProgramData\CheckPoint
2014-04-01 22:14:52 ----D---- C:\Users\Premek\AppData\Roaming\Avira
2014-04-01 22:08:46 ----A---- C:\Windows\system32\drivers\ssmdrv.sys
2014-04-01 22:08:20 ----A---- C:\Windows\system32\drivers\avkmgr.sys
2014-04-01 22:08:19 ----A---- C:\Windows\system32\drivers\avipbb.sys
2014-04-01 22:08:19 ----A---- C:\Windows\system32\drivers\avgntflt.sys
2014-04-01 21:57:22 ----D---- C:\Program Files\Avira
2014-04-01 21:57:19 ----D---- C:\ProgramData\Avira
2014-04-01 21:56:41 ----D---- C:\ProgramData\Package Cache
2014-04-01 21:40:37 ----D---- C:\Users\Premek\AppData\Roaming\Malwarebytes

======List of files/folders modified in the last 1 month======

2014-04-26 09:37:26 ----D---- C:\Windows\Prefetch
2014-04-26 09:37:18 ----D---- C:\Windows\Temp
2014-04-26 09:37:01 ----RD---- C:\Program Files
2014-04-26 09:34:59 ----HD---- C:\ProgramData
2014-04-26 09:34:38 ----SHD---- C:\Windows\Installer
2014-04-26 09:34:37 ----HD---- C:\Config.Msi
2014-04-26 09:34:37 ----D---- C:\Program Files\Common Files
2014-04-26 09:34:25 ----D---- C:\Windows\System32
2014-04-26 09:30:19 ----SHD---- C:\System Volume Information
2014-04-26 09:30:13 ----D---- C:\Windows\tracing
2014-04-26 09:22:50 ----D---- C:\Windows\inf
2014-04-26 09:22:50 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-04-26 09:18:16 ----A---- C:\Windows\system32\rpcnetp.exe
2014-04-26 09:18:13 ----A---- C:\Windows\system32\rpcnet.dll
2014-04-18 01:18:17 ----D---- C:\Users\Premek\AppData\Roaming\Skype
2014-04-17 13:18:14 ----D---- C:\ProgramData\Skype
2014-04-17 13:17:37 ----RD---- C:\Program Files\Skype
2014-04-10 21:03:40 ----D---- C:\Windows\system32\catroot2
2014-04-09 17:28:32 ----D---- C:\Windows\system32\Tasks
2014-04-06 08:23:54 ----A---- C:\Windows\system32\rpcnetp.dll
2014-04-02 21:50:58 ----D---- C:\Windows\Microsoft.NET
2014-04-02 21:40:03 ----D---- C:\Program Files\Mozilla Maintenance Service
2014-04-01 23:11:26 ----N---- C:\Windows\system32\rpcnet.exe
2014-04-01 22:54:41 ----D---- C:\Windows
2014-04-01 22:39:11 ----D---- C:\Windows\system32\drivers
2014-04-01 22:39:05 ----D---- C:\Windows\system32\catroot
2014-04-01 22:33:03 ----D---- C:\Windows\winsxs
2014-04-01 22:24:26 ----D---- C:\ProgramData\AVAST Software
2014-04-01 22:24:26 ----D---- C:\Program Files\Google
2014-04-01 22:23:31 ----D---- C:\Windows\Options
2014-04-01 22:23:31 ----D---- C:\ProgramData\tunectl
2014-04-01 22:13:11 ----D---- C:\Program Files\Common Files\DVDVideoSoft
2014-04-01 22:03:26 ----D---- C:\Program Files\WinZipBar
2014-04-01 21:52:01 ----D---- C:\ProgramData\Google

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 hpdskflt;HP Filter; C:\Windows\system32\DRIVERS\hpdskflt.sys [2009-07-08 25656]
R1 avipbb;avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [2014-02-25 135648]
R1 avkmgr;avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [2014-02-25 37352]
R1 ssmdrv;ssmdrv; C:\Windows\system32\DRIVERS\ssmdrv.sys [2014-02-25 28520]
R1 Vsdatant;Zone Alarm Firewall Driver; C:\Windows\system32\DRIVERS\vsdatant.sys [2014-03-18 453720]
R2 {95808DC4-FA4A-4c74-92FE-5B863F82066B};{95808DC4-FA4A-4c74-92FE-5B863F82066B}; \??\C:\Program Files\CyberLink\PowerDVD\000.fcl [2006-11-02 13560]
R2 avgntflt;avgntflt; C:\Windows\system32\DRIVERS\avgntflt.sys [2014-02-25 90400]
R2 npf;NetGroup Packet Filter Driver; C:\Windows\system32\drivers\npf.sys [2009-11-16 50704]
R3 Accelerometer;HP Accelerometer; C:\Windows\system32\DRIVERS\Accelerometer.sys [2009-07-08 33848]
R3 AgereSoftModem;Agere Systems Soft Modem; C:\Windows\system32\DRIVERS\AGRSM.sys [2006-12-13 1161152]
R3 BCM43XX;Ovladač síťového adaptéru Broadcom 802.11; C:\Windows\system32\DRIVERS\bcmwl6.sys [2009-11-16 1880056]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2009-05-18 26600]
R3 HBtnKey;HBtnKey; C:\Windows\system32\DRIVERS\cpqbttn.sys [2006-06-28 9472]
R3 HdAudAddService;Ovladač funkce Microsoft 1.1 UAA pro službu zvuku High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2009-04-11 236544]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2008-05-21 2369536]
R3 SNP2UVC;USB2.0 PC Camera (SNP2UVC); C:\Windows\system32\DRIVERS\snp2uvc.sys [2009-03-27 1810992]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2008-03-28 199472]
R3 WudfPf;@%SystemRoot%\system32\drivers\Wudfpf.sys,-1000; C:\Windows\system32\drivers\WudfPf.sys [2012-07-26 66560]
S3 BthEnum;Služba Bluetooth Enumerator; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-04-11 22528]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2008-01-21 92160]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2011-04-21 508416]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2009-06-17 30208]
S3 drmkaud;Dekodér zvuků DRM jádra společnosti Microsoft; C:\Windows\system32\drivers\drmkaud.sys [2008-01-21 5632]
S3 MREMP50;MREMP50 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MREMP50.SYS [2008-03-29 21248]
S3 MREMP50a64;MREMP50a64 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MREMP50a64.SYS []
S3 MREMPR5;MREMPR5 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MREMPR5.SYS []
S3 MRENDIS5;MRENDIS5 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MRENDIS5.SYS []
S3 MRESP50;MRESP50 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MRESP50.SYS [2008-03-29 20096]
S3 MRESP50a64;MRESP50a64 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MRESP50a64.SYS []
S3 MSKSSRV;Server proxy služby datových proudů Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-21 8192]
S3 MSPCLOCK;Server proxy hodin datových proudů Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-21 5888]
S3 MSPQM;Server proxy správce kvality datových proudů Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-01-21 5504]
S3 MSTEE;Konvertor jímka-jímka typu T datových proudů Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-21 6016]
S3 nmwcd;Nokia USB Phone Parent Driver; C:\Windows\system32\drivers\ccdcmb.sys [2012-01-09 18176]
S3 nmwcdc;Nokia USB Communication Driver; C:\Windows\system32\drivers\ccdcmbo.sys [2012-01-09 23168]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfd.sys [2012-06-11 19072]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-04-11 148992]
S3 UIUSys;Conexant Setup API; C:\Windows\system32\DRIVERS\UIUSYS.SYS []
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerflt.sys [2012-01-09 8192]
S3 usb_rndisx;Adaptér USB RNDIS; C:\Windows\system32\DRIVERS\usb8023x.sys [2013-02-12 15872]
S3 usbser;Nokia USB Serial Port Driver ; C:\Windows\system32\drivers\usbser.sys [2013-08-29 27648]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltj.sys [2012-01-09 8192]
S3 usbvideo;Zobrazovací zařízení USB (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2013-07-12 134272]
S3 winusb;WinUSB Driver; C:\Windows\system32\DRIVERS\winusb.sys [2009-07-14 34944]
S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2009-10-01 40448]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2012-07-26 155136]
S3 yukonwlh;NDIS6.0 Miniport Driver for Marvell Yukon Ethernet Controller; C:\Windows\system32\DRIVERS\yk60x86.sys [2008-04-04 310272]
S4 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys [2008-01-21 6656]
S4 MegaSR;MegaSR; C:\Windows\system32\drivers\megasr.sys [2008-01-21 386616]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AgereModemAudio;Agere Modem Call Progress Audio; C:\Program Files\LSI SoftModem\agrsmsvc.exe [2008-08-26 14336]
R2 AntiVirService;Avira Real-Time Protection; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2014-02-25 440400]
R2 AntiVirSchedulerService;Avira Scheduler; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2014-02-25 440400]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2010-06-10 144176]
R2 Avira.OE.ServiceHost;Avira Service Host; C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe [2014-04-15 122448]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2010-05-18 345376]
R2 BthServ;@%SystemRoot%\System32\bthserv.dll,-101; C:\Windows\system32\svchost.exe [2008-01-21 21504]
R2 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-21 21504]
R2 hpsrv;HP Service; C:\Windows\system32\Hpservice.exe [2009-07-08 26168]
R2 McciCMService;McciCMService; C:\Program Files\Common Files\Motive\McciCMService.exe [2007-10-15 303104]
R2 RapiMgr;@%windir%\WindowsMobile\rapimgr.dll,-104; C:\Windows\system32\svchost.exe [2008-01-21 21504]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files\CyberLink\Shared Files\RichVideo.exe [2005-08-08 167936]
R2 rpcnet;Remote Procedure Call (RPC) Net; C:\Windows\system32\rpcnet.exe [2014-04-01 69792]
R2 vsmon;TrueVector Internet Monitor; C:\Program Files\CheckPoint\ZoneAlarm\vsmon.exe [2014-03-18 3558112]
R2 WcesComm;@%windir%\WindowsMobile\wcescomm.dll,-40079; C:\Windows\system32\svchost.exe [2008-01-21 21504]
R2 ZAPrivacyService;ZoneAlarm Privacy Service; C:\Program Files\CheckPoint\ZoneAlarm\ZAPrivacyService.exe [2014-02-23 81752]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2010-07-21 540968]
R3 WPFFontCache_v0400;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe,-100; C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2013-09-11 770168]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-11-19 135664]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2013-10-23 172192]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-11 257928]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2010-01-24 654848]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-11-19 135664]
S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2012-09-13 194032]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2014-02-15 118896]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2012-06-11 724376]
S4 AntiVirWebService;Avira Web Protection; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [2014-02-25 1017424]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2013-09-11 46688]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

-----------------EOF-----------------

Re: prosím o kontrolu

Napsal: 26 dub 2014 09:22
od Márty84
Zdravim :)

:???: To jsou vase stroje? Cim jste to cistil?


:arrow: Prvni vec, uvolnete nejake misto na disku!
System drive C: has 688 MB (1%) free of 120 GB
System se dusi. Uvolnete alespon 3 GB.


:arrow: Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner a ulozte ho na plochu.
Ukoncete vsechny programy, jinak to AdwCleaner udela za vas.
Kliknete na nej pravym mysidlem a levym na Spustit jako spravce.
Kliknete na Scan a pockejte, az kontrola dobehne.
Pak kliknete na Clean
Program zacne pracovat (muze dojit k restartu pc) a vyplivne log (pripadne bude zde C:\AdwCleaner\AdwCleaner [S?].txt ). Ten mi sem zkopirujte.

Re: prosím o kontrolu

Napsal: 26 dub 2014 10:04
od tommy.havlos
Naštěstí nejsou, já bych se o ně takto nestral. Hned sem ten log dám, jak uvolním nějaké místo. Byl tu "policejní virus" a pár trojanů. Dal jsem do počítače antivirus a firewall, který tu chyběl.
U toho druhého notebooku, který mi tu dnes známý přivezl, je také ten "policejní virus",ale zatím nevím jak na něj. Je to hodně starý stroj s win XP a přes nouzový režim a obnovu systému do původního stavu mi to odstranit nejde.

Re: prosím o kontrolu

Napsal: 26 dub 2014 10:16
od Márty84
Dofam, ze nemate servis :boxed: :arcisit:

Na druhy pc zalozte nove tema, nekdo se ho ujme.

Re: prosím o kontrolu

Napsal: 26 dub 2014 10:25
od tommy.havlos
To ne, jen jsem asi v rodině jediný, kdo umí trochu s počítači :)

# AdwCleaner v3.202 - Report created 26/04/2014 at 11:15:03
# Updated 23/04/2014 by Xplode
# Operating System : Windows Vista (TM) Home Basic Service Pack 2 (32 bits)
# Username : Premek - BARA-PC
# Running from : C:\Users\Premek\Desktop\adwcleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\Ask
Folder Deleted : C:\ProgramData\ICQ\ICQToolbar
Folder Deleted : C:\Program Files\Conduit
Folder Deleted : C:\Program Files\ICQ6Toolbar
Folder Deleted : C:\Program Files\WinZipBar
Folder Deleted : C:\Program Files\Common Files\DVDVideoSoft\TB
Folder Deleted : C:\Users\Bara\AppData\Local\Conduit
Folder Deleted : C:\Users\Bara\AppData\LocalLow\AskToolbar
Folder Deleted : C:\Users\Bara\AppData\LocalLow\Conduit
Folder Deleted : C:\Users\Bara\AppData\LocalLow\WinZipBar
Folder Deleted : C:\Users\Premek\AppData\Local\Temp\AskSearch
Folder Deleted : C:\Users\Premek\AppData\Local\Temp\mt_ffx
Folder Deleted : C:\Users\Premek\AppData\LocalLow\Conduit
Folder Deleted : C:\Users\Premek\AppData\LocalLow\WinZipBar
Folder Deleted : C:\Users\Bara\AppData\Roaming\Mozilla\Firefox\Profiles\36wpb9at.default\Conduit
Folder Deleted : C:\Users\Bara\AppData\Roaming\Mozilla\Firefox\Profiles\36wpb9at.default\ConduitCommon
Folder Deleted : C:\Users\Bara\AppData\Roaming\Mozilla\Firefox\Profiles\36wpb9at.default\ConduitEngine
Folder Deleted : C:\Users\Bara\AppData\Roaming\Mozilla\Firefox\Profiles\36wpb9at.default\Smartbar
Folder Deleted : C:\Users\Bara\AppData\Roaming\Mozilla\Firefox\Profiles\36wpb9at.default\ValueApps
Folder Deleted : C:\Users\Bara\AppData\Roaming\Mozilla\Firefox\Profiles\36wpb9at.default\CT3106777
Folder Deleted : C:\Users\Bara\AppData\Roaming\Mozilla\Firefox\Profiles\36wpb9at.default\CT2269050
Folder Deleted : C:\Users\Premek\AppData\Roaming\Mozilla\Firefox\Profiles\80migwzz.default\ICQToolbarData
Folder Deleted : C:\Users\Bara\AppData\Roaming\Mozilla\Firefox\Profiles\36wpb9at.default\Extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}
Folder Deleted : C:\Users\Bara\AppData\Roaming\Mozilla\Firefox\Profiles\36wpb9at.default\Extensions\engine@conduit.com
Folder Deleted : C:\Users\Bara\AppData\Roaming\Mozilla\Firefox\Profiles\36wpb9at.default\Extensions\{50fafaf0-70a9-419d-a109-fa4b4ffd4e37}
File Deleted : C:\Program Files\Mozilla Firefox\Components\AskHPRFF.js
File Deleted : C:\Users\Premek\AppData\Roaming\Mozilla\Firefox\Profiles\80migwzz.default\invalidprefs.js
File Deleted : C:\Users\Premek\AppData\Roaming\Mozilla\Firefox\Profiles\80migwzz.default\searchplugins\Askcom.xml
File Deleted : C:\Users\Premek\AppData\Roaming\Mozilla\Firefox\Profiles\80migwzz.default\searchplugins\bingp.xml
File Deleted : C:\Users\Bara\AppData\Roaming\Mozilla\Firefox\Profiles\36wpb9at.default\searchplugins\Conduit.xml
File Deleted : C:\Users\Premek\AppData\Roaming\Mozilla\Firefox\Profiles\80migwzz.default\searchplugins\icqplugin.gif
File Deleted : C:\Users\Premek\AppData\Roaming\Mozilla\Firefox\Profiles\80migwzz.default\searchplugins\icqplugin.src
File Deleted : C:\Users\Premek\AppData\Roaming\Mozilla\Firefox\Profiles\80migwzz.default\searchplugins\icqplugin.xml
File Deleted : C:\Users\Premek\AppData\Roaming\Mozilla\Firefox\Profiles\80migwzz.default\searchplugins\icqplugin-1.xml
File Deleted : C:\Users\Premek\AppData\Roaming\Mozilla\Firefox\Profiles\80migwzz.default\searchplugins\icqplugin-10.xml
File Deleted : C:\Users\Premek\AppData\Roaming\Mozilla\Firefox\Profiles\80migwzz.default\searchplugins\icqplugin-11.xml
File Deleted : C:\Users\Premek\AppData\Roaming\Mozilla\Firefox\Profiles\80migwzz.default\searchplugins\icqplugin-12.xml
File Deleted : C:\Users\Premek\AppData\Roaming\Mozilla\Firefox\Profiles\80migwzz.default\searchplugins\icqplugin-13.xml
File Deleted : C:\Users\Premek\AppData\Roaming\Mozilla\Firefox\Profiles\80migwzz.default\searchplugins\icqplugin-14.xml
File Deleted : C:\Users\Premek\AppData\Roaming\Mozilla\Firefox\Profiles\80migwzz.default\searchplugins\icqplugin-15.xml
File Deleted : C:\Users\Premek\AppData\Roaming\Mozilla\Firefox\Profiles\80migwzz.default\searchplugins\icqplugin-16.xml
File Deleted : C:\Users\Premek\AppData\Roaming\Mozilla\Firefox\Profiles\80migwzz.default\searchplugins\icqplugin-17.xml
File Deleted : C:\Users\Premek\AppData\Roaming\Mozilla\Firefox\Profiles\80migwzz.default\searchplugins\icqplugin-18.xml
File Deleted : C:\Users\Premek\AppData\Roaming\Mozilla\Firefox\Profiles\80migwzz.default\searchplugins\icqplugin-19.xml
File Deleted : C:\Users\Premek\AppData\Roaming\Mozilla\Firefox\Profiles\80migwzz.default\searchplugins\icqplugin-2.xml
File Deleted : C:\Users\Premek\AppData\Roaming\Mozilla\Firefox\Profiles\80migwzz.default\searchplugins\icqplugin-20.xml
File Deleted : C:\Users\Premek\AppData\Roaming\Mozilla\Firefox\Profiles\80migwzz.default\searchplugins\icqplugin-21.xml
File Deleted : C:\Users\Premek\AppData\Roaming\Mozilla\Firefox\Profiles\80migwzz.default\searchplugins\icqplugin-22.xml
File Deleted : C:\Users\Premek\AppData\Roaming\Mozilla\Firefox\Profiles\80migwzz.default\searchplugins\icqplugin-23.xml
File Deleted : C:\Users\Premek\AppData\Roaming\Mozilla\Firefox\Profiles\80migwzz.default\searchplugins\icqplugin-24.xml
File Deleted : C:\Users\Premek\AppData\Roaming\Mozilla\Firefox\Profiles\80migwzz.default\searchplugins\icqplugin-25.xml
File Deleted : C:\Users\Premek\AppData\Roaming\Mozilla\Firefox\Profiles\80migwzz.default\searchplugins\icqplugin-3.xml
File Deleted : C:\Users\Premek\AppData\Roaming\Mozilla\Firefox\Profiles\80migwzz.default\searchplugins\icqplugin-4.xml
File Deleted : C:\Users\Premek\AppData\Roaming\Mozilla\Firefox\Profiles\80migwzz.default\searchplugins\icqplugin-5.xml
File Deleted : C:\Users\Premek\AppData\Roaming\Mozilla\Firefox\Profiles\80migwzz.default\searchplugins\icqplugin-6.xml
File Deleted : C:\Users\Premek\AppData\Roaming\Mozilla\Firefox\Profiles\80migwzz.default\searchplugins\icqplugin-7.xml
File Deleted : C:\Users\Premek\AppData\Roaming\Mozilla\Firefox\Profiles\80migwzz.default\searchplugins\icqplugin-8.xml
File Deleted : C:\Users\Premek\AppData\Roaming\Mozilla\Firefox\Profiles\80migwzz.default\searchplugins\icqplugin-9.xml
File Deleted : C:\Users\Premek\AppData\Roaming\Mozilla\Firefox\Profiles\80migwzz.default\searchplugins\zonealarm.xml
File Deleted : C:\Users\Premek\AppData\Roaming\Mozilla\Firefox\Profiles\80migwzz.default\user.js

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\ICQ\ICQToolBar
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Main [ICQ Search]
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Key Deleted : HKLM\SOFTWARE\Classes\ScriptHost.Tool
Key Deleted : HKLM\SOFTWARE\Classes\ScriptHost.Tool.1
Key Deleted : HKCU\Software\f1fb540035fd3488
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3106777
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{19D2F415-D58B-46BC-9390-C03DCBC21EB2}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6E45F3E8-2683-4824-A6BE-08108022FB36}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{9F0F16DD-4E76-4049-A9B1-7A91E48F0323}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F4288797-CB12-49CE-9DF8-7CDFA1143BEA}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{9280CAA3-237E-468E-A41C-43EADB5FF61A}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{212C2C4F-C845-4FBC-9561-C833A13D8DCE}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{3C5D1D57-16C8-473C-A552-37B8D88596FE}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{4A115D8A-6A7B-4C72-92B1-2E2D01F36979}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{99DF8440-814E-497F-BDDD-FB93E9E9DF96}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00000000-6E41-4FD3-8538-502F5495E5FC}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9280CAA3-237E-468E-A41C-43EADB5FF61A}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{9280CAA3-237E-468E-A41C-43EADB5FF61A}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{83CAD530-387D-40FD-82EA-B9E863D92A9B}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A3E14633-2056-4FF0-84E8-C9A707D8B12B}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{52FD5241-E977-4B99-A6C6-BBD9E2E40EAE}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40B7-AC73-056A5EBA4A7E}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{855F3B16-6D32-4FE6-8A56-BBB695989046}]
Key Deleted : HKCU\Software\APN PIP
Key Deleted : HKCU\Software\PIP
Key Deleted : HKCU\Software\AppDataLow\AskBarDis
Key Deleted : HKCU\Software\AppDataLow\Software\Conduit
Key Deleted : HKCU\Software\AppDataLow\Software\WinZipBar
Key Deleted : HKLM\Software\Conduit
Key Deleted : HKLM\Software\ICQ\ICQToolbar
Key Deleted : HKLM\Software\PIP
Key Deleted : HKLM\Software\WinZipBar
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinZipBar Toolbar
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{79A765E1-C399-405B-85AF-466F52E918B0}

***** [ Browsers ] *****

-\\ Internet Explorer v9.0.8112.16545

Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [ICQ Search]

-\\ Mozilla Firefox v28.0 (cs)

[ File : C:\Users\Bara\AppData\Roaming\Mozilla\Firefox\Profiles\36wpb9at.default\prefs.js ]

Line Deleted : user_pref("CT2269050..clientLogIsEnabled", true);
Line Deleted : user_pref("CT2269050..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
Line Deleted : user_pref("CT2269050..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
Line Deleted : user_pref("CT2269050.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);
Line Deleted : user_pref("CT2269050.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
Line Deleted : user_pref("CT2269050.BrowserCompStateIsOpen_129681780741097243", true);
Line Deleted : user_pref("CT2269050.BrowserCompStateIsOpen_129853623028165512", true);
Line Deleted : user_pref("CT2269050.BrowserCompStateIsOpen_129881141106886992", true);
Line Deleted : user_pref("CT2269050.BrowserCompStateIsOpen_129977890572899945", true);
Line Deleted : user_pref("CT2269050.BrowserCompStateIsOpen_130100683276316706", true);
Line Deleted : user_pref("CT2269050.BrowserCompStateIsOpen_1359634297000", true);
Line Deleted : user_pref("CT2269050.CT2269050.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"hxxp://search.conduit.com/?ctid=CT2269050&octid=CT2269050&SearchSource=15&CUI=SB_CUI&SSPV=EB_SSPV&Lay=1&UM=UM_I[...]
Line Deleted : user_pref("CT2269050.CTID", "CT2269050");
Line Deleted : user_pref("CT2269050.ConfigurationLastCheckTime", "Thu Nov 14 2013 10:30:52 GMT+0100");
Line Deleted : user_pref("CT2269050.CurrentServerDate", "14-11-2013");
Line Deleted : user_pref("CT2269050.DialogsAlignMode", "LTR");
Line Deleted : user_pref("CT2269050.DialogsGetterLastCheckTime", "Thu Nov 14 2013 10:31:00 GMT+0100");
Line Deleted : user_pref("CT2269050.DownloadReferralCookieData", "");
Line Deleted : user_pref("CT2269050.EMailNotifierPollDate", "Sun Jul 25 2010 15:45:03 GMT+0200");
Line Deleted : user_pref("CT2269050.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Deleted : user_pref("CT2269050.FirstServerDate", "25-7-2010");
Line Deleted : user_pref("CT2269050.FirstTime", true);
Line Deleted : user_pref("CT2269050.FirstTimeFF3", true);
Line Deleted : user_pref("CT2269050.FirstTimeSettingsDone", true);
Line Deleted : user_pref("CT2269050.FixPageNotFoundErrors", true);
Line Deleted : user_pref("CT2269050.GroupingServerCheckInterval", 1440);
Line Deleted : user_pref("CT2269050.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
Line Deleted : user_pref("CT2269050.HasUserGlobalKeys", true);
Line Deleted : user_pref("CT2269050.Initialize", true);
Line Deleted : user_pref("CT2269050.InitializeCommonPrefs", true);
Line Deleted : user_pref("CT2269050.InstallationAndCookieDataSentCount", 3);
Line Deleted : user_pref("CT2269050.InstallationType", "UnknownIntegration");
Line Deleted : user_pref("CT2269050.InstalledDate", "Sun Jul 25 2010 15:45:03 GMT+0200");
Line Deleted : user_pref("CT2269050.InvalidateCache", false);
Line Deleted : user_pref("CT2269050.IsGrouping", false);
Line Deleted : user_pref("CT2269050.IsMulticommunity", false);
Line Deleted : user_pref("CT2269050.IsOpenThankYouPage", false);
Line Deleted : user_pref("CT2269050.IsOpenUninstallPage", false);
Line Deleted : user_pref("CT2269050.LanguagePackLastCheckTime", "Thu Nov 14 2013 10:31:02 GMT+0100");
Line Deleted : user_pref("CT2269050.LanguagePackReloadIntervalMM", 1440);
Line Deleted : user_pref("CT2269050.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx");
Line Deleted : user_pref("CT2269050.LastLogin_2.7.0.14", "Sun Jul 25 2010 15:45:03 GMT+0200");
Line Deleted : user_pref("CT2269050.LastLogin_3.12.2.3", "Sat Jun 02 2012 09:42:19 GMT+0200");
Line Deleted : user_pref("CT2269050.LastLogin_3.13.0.6", "Fri Jun 29 2012 18:08:53 GMT+0200");
Line Deleted : user_pref("CT2269050.LastLogin_3.14.1.0", "Sat Oct 13 2012 19:07:35 GMT+0200");
Line Deleted : user_pref("CT2269050.LastLogin_3.15.1.0", "Sun Dec 09 2012 22:41:56 GMT+0100");
Line Deleted : user_pref("CT2269050.LastLogin_3.16.0.100", "Thu Feb 14 2013 07:15:09 GMT+0100");
Line Deleted : user_pref("CT2269050.LastLogin_3.16.0.3", "Fri Jan 04 2013 09:41:25 GMT+0100");
Line Deleted : user_pref("CT2269050.LastLogin_3.18.0.7", "Sun Aug 18 2013 11:22:08 GMT+0200");
Line Deleted : user_pref("CT2269050.LastLogin_3.19.0.3", "Wed Sep 11 2013 08:53:03 GMT+0200");
Line Deleted : user_pref("CT2269050.LastLogin_3.20.0.4", "Thu Nov 14 2013 10:30:35 GMT+0100");
Line Deleted : user_pref("CT2269050.LatestVersion", "3.20.0.4");
Line Deleted : user_pref("CT2269050.Locale", "en");
Line Deleted : user_pref("CT2269050.LoginCache", 4);
Line Deleted : user_pref("CT2269050.MCDetectTooltipHeight", "83");
Line Deleted : user_pref("CT2269050.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
Line Deleted : user_pref("CT2269050.MCDetectTooltipWidth", "295");
Line Deleted : user_pref("CT2269050.MyStuffEnabledAtInstallation", true);
Line Deleted : user_pref("CT2269050.RadioIsPodcast", false);
Line Deleted : user_pref("CT2269050.RadioLastCheckTime", "Sun Jul 25 2010 15:45:04 GMT+0200");
Line Deleted : user_pref("CT2269050.RadioLastUpdateIPServer", "3");
Line Deleted : user_pref("CT2269050.RadioLastUpdateServer", "129132338014870000");
Line Deleted : user_pref("CT2269050.RadioMediaID", "12473383");
Line Deleted : user_pref("CT2269050.RadioMediaType", "Media Player");
Line Deleted : user_pref("CT2269050.RadioMenuSelectedID", "EBRadioMenu_CT226905012473383");
Line Deleted : user_pref("CT2269050.RadioStationName", "Hotmix%20108");
Line Deleted : user_pref("CT2269050.RadioStationURL", "hxxp://67.202.67.18:8082");
Line Deleted : user_pref("CT2269050.SearchAPILastCheckTime", "Thu Nov 14 2013 10:30:52 GMT+0100");
Line Deleted : user_pref("CT2269050.SearchEngine", "Search||hxxp://search.conduit.com/Results.aspx?q=UCM_SEARCH_TERM&ctid=CT2269050&octid=EB_ORIGINAL_CTID&SearchSource=1");
Line Deleted : user_pref("CT2269050.SearchFromAddressBarIsInit", true);
Line Deleted : user_pref("CT2269050.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2269050&q=");
Line Deleted : user_pref("CT2269050.SearchInNewTabEnabled", true);
Line Deleted : user_pref("CT2269050.SearchInNewTabIntervalMM", 1440);
Line Deleted : user_pref("CT2269050.SearchInNewTabLastCheckTime", "Wed Sep 11 2013 08:53:00 GMT+0200");
Line Deleted : user_pref("CT2269050.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID&UM=UM_ID");
Line Deleted : user_pref("CT2269050.SearchInNewTabURLFromSearchAPI", "hxxp://search.conduit.com/?ctid=CT2269050&octid=CT2269050&SearchSource=15&CUI=SB_CUI&SSPV=EB_SSPV&Lay=1&UM=UM_ID");
Line Deleted : user_pref("CT2269050.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageService.asmx/UsersRequests?ctid=EB_TOOLBAR_ID");
Line Deleted : user_pref("CT2269050.ServiceMapLastCheckTime", "Thu Nov 14 2013 10:30:52 GMT+0100");
Line Deleted : user_pref("CT2269050.SettingsCheckIntervalMin", 120);
Line Deleted : user_pref("CT2269050.SettingsLastCheckTime", "Thu Nov 14 2013 10:30:14 GMT+0100");
Line Deleted : user_pref("CT2269050.SettingsLastUpdate", "1384419394");
Line Deleted : user_pref("CT2269050.ThirdPartyComponentsInterval", 504);
Line Deleted : user_pref("CT2269050.ThirdPartyComponentsLastCheck", "Sun Jul 25 2010 15:45:02 GMT+0200");
Line Deleted : user_pref("CT2269050.ThirdPartyComponentsLastUpdate", "1246790578");
Line Deleted : user_pref("CT2269050.ToolbarShrinkedFromSetup", false);
Line Deleted : user_pref("CT2269050.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,client.conduit-storage.com,OurToolbar.com,CommunityToolbars.com,ForumToolbar.com,MyBlogToolbar.com,MyCity[...]
Line Deleted : user_pref("CT2269050.UserID", "UN57323207820656194");
Line Deleted : user_pref("CT2269050.WeatherNetwork", "");
Line Deleted : user_pref("CT2269050.WeatherPollDate", "Sun Jul 25 2010 15:45:03 GMT+0200");
Line Deleted : user_pref("CT2269050.WeatherUnit", "C");
Line Deleted : user_pref("CT2269050.addressBarTakeOverEnabledInHidden", "true");
Line Deleted : user_pref("CT2269050.alertChannelId", "666138");
Line Deleted : user_pref("CT2269050.clientLogIsEnabled", true);
Line Deleted : user_pref("CT2269050.clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
Line Deleted : user_pref("CT2269050.countryCode", "CZ");
Line Deleted : user_pref("CT2269050.firstTimeDialogOpened", true);
Line Deleted : user_pref("CT2269050.fixPageNotFoundErrorByUser", "TRUE");
Line Deleted : user_pref("CT2269050.fixPageNotFoundErrorInHidden", "true");
Line Deleted : user_pref("CT2269050.fullUserID", "UN57323207820656194.UP.2053090900");
Line Deleted : user_pref("CT2269050.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.conduit.com;apps.conduit.com;services.apps.conduit.com\",\"AppsDetectionUrlPattern\":\"hxxp://appdown[...]
Line Deleted : user_pref("CT2269050.homepageProtectorEnableByLogin", true);
Line Deleted : user_pref("CT2269050.initDone", true);
Line Deleted : user_pref("CT2269050.installType", "DirectDownload");
Line Deleted : user_pref("CT2269050.isCheckedStartAsHidden", true);
Line Deleted : user_pref("CT2269050.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Deleted : user_pref("CT2269050.isFirstTimeToolbarLoading", "false");
Line Deleted : user_pref("CT2269050.isPerformedSmartBarTransition", "true");
Line Deleted : user_pref("CT2269050.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
Line Deleted : user_pref("CT2269050.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"hxxp://search.conduit.com/?ctid=CT2269050&octid=CT2269050&SearchSource=15&CUI=UN57323207820656194&SSPV=&Lay=1&UM=\"}");
Line Deleted : user_pref("CT2269050.lastVersion", "10.20.101.5");
Line Deleted : user_pref("CT2269050.missingMachineIdSent", "true");
Line Deleted : user_pref("CT2269050.myStuffEnabled", true);
Line Deleted : user_pref("CT2269050.myStuffPublihserMinWidth", 400);
Line Deleted : user_pref("CT2269050.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID");
Line Deleted : user_pref("CT2269050.myStuffServiceIntervalMM", 1440);
Line Deleted : user_pref("CT2269050.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUFF_LUT");
Line Deleted : user_pref("CT2269050.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"hxxp%3A%2F%2Fask.fm%2Fpavlinajagrova\",\"EB_MAIN_FRAME_TITLE\":\"Pavlina%20Jagrova%20%7C%20ask.fm%2Fpavli[...]
Line Deleted : user_pref("CT2269050.originalHomepage", "hxxp://seznam.cz/");
Line Deleted : user_pref("CT2269050.originalSearchAddressUrl", "chrome://browser-region/locale/region.properties");
Line Deleted : user_pref("CT2269050.originalSearchEngine", "chrome://browser-region/locale/region.properties");
Line Deleted : user_pref("CT2269050.revertSettingsEnabled", true);
Line Deleted : user_pref("CT2269050.searchFromAddressBarEnabledByUser", "false");
Line Deleted : user_pref("CT2269050.searchInNewTabEnabledByUser", "true");
Line Deleted : user_pref("CT2269050.searchInNewTabEnabledInHidden", "true");
Line Deleted : user_pref("CT2269050.searchProtectorDialogDelayInSec", 10);
Line Deleted : user_pref("CT2269050.searchProtectorEnableByLogin", true);
Line Deleted : user_pref("CT2269050.searchSuggestEnabledByUser", "false");
Line Deleted : user_pref("CT2269050.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Deleted : user_pref("CT2269050.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
Line Deleted : user_pref("CT2269050.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\"}");
Line Deleted : user_pref("CT2269050.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT2269050\"}");
Line Deleted : user_pref("CT2269050.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"hxxp://DVDVideoSoftTB.OurToolbar.com//xpi\"}");
Line Deleted : user_pref("CT2269050.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"DVDVideoSoftTB \"}");
Line Deleted : user_pref("CT2269050.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Deleted : user_pref("CT2269050.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data\":\"2\"}");
Line Deleted : user_pref("CT2269050.serviceLayer_services_Configuration_lastUpdate", "1388218147499");
Line Deleted : user_pref("CT2269050.serviceLayer_services_login_10.20.101.5_lastUpdate", "1388218149159");
Line Deleted : user_pref("CT2269050.serviceLayer_services_searchAPI_lastUpdate", "1388218148175");
Line Deleted : user_pref("CT2269050.serviceLayer_services_serviceMap_lastUpdate", "1388218145855");
Line Deleted : user_pref("CT2269050.serviceLayer_services_toolbarSettings_lastUpdate", "1388218147773");
Line Deleted : user_pref("CT2269050.serviceLayer_services_translation_lastUpdate", "1388218149293");
Line Deleted : user_pref("CT2269050.settingsINI", true);
Line Deleted : user_pref("CT2269050.showToolbarPermission", "false");
Line Deleted : user_pref("CT2269050.smartbar.CTID", "CT2269050");
Line Deleted : user_pref("CT2269050.smartbar.Uninstall", "0");
Line Deleted : user_pref("CT2269050.smartbar.toolbarName", "DVDVideoSoftTB ");
Line Deleted : user_pref("CT2269050.testingCtid", "");
Line Deleted : user_pref("CT2269050.toolbarAppMetaDataLastCheckTime", "Thu Nov 14 2013 10:30:45 GMT+0100");
Line Deleted : user_pref("CT2269050.toolbarBornServerTime", "25-7-2010");
Line Deleted : user_pref("CT2269050.toolbarCurrentServerTime", "28-12-2013");
Line Deleted : user_pref("CT2269050.toolbarDisabled", "true");
Line Deleted : user_pref("CT2269050.toolbarLoginClientTime", "Sat Dec 28 2013 09:09:09 GMT+0100");
Line Deleted : user_pref("CT2269050.uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
Line Deleted : user_pref("CT2269050.usagesFlag", 2);
Line Deleted : user_pref("CT2269050_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1388218140464,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");
Line Deleted : user_pref("CT3106777..clientLogIsEnabled", true);
Line Deleted : user_pref("CT3106777..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
Line Deleted : user_pref("CT3106777..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
Line Deleted : user_pref("CT3106777.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);
Line Deleted : user_pref("CT3106777.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
Line Deleted : user_pref("CT3106777.AppTrackingLastCheckTime", "Wed Jul 11 2012 09:33:59 GMT+0200");
Line Deleted : user_pref("CT3106777.BrowserCompStateIsOpen_129724975549181030", true);
Line Deleted : user_pref("CT3106777.BrowserCompStateIsOpen_130041080178558067", true);
Line Deleted : user_pref("CT3106777.CT3106777.lastNewTabSettings", "{\"isEnabled\":false,\"newTabUrl\":\"hxxp://search.conduit.com/?ctid=CT3106777&octid=CT3106777&SearchSource=15&CUI=SB_CUI&SSPV=EB_SSPV&Lay=1&UM=UM_[...]
Line Deleted : user_pref("CT3106777.CTID", "CT3106777");
Line Deleted : user_pref("CT3106777.ConfigurationLastCheckTime", "Thu Nov 14 2013 10:30:52 GMT+0100");
Line Deleted : user_pref("CT3106777.CurrentServerDate", "14-11-2013");
Line Deleted : user_pref("CT3106777.DSChangedManually", true);
Line Deleted : user_pref("CT3106777.DSInstall", true);
Line Deleted : user_pref("CT3106777.DialogsAlignMode", "LTR");
Line Deleted : user_pref("CT3106777.DialogsGetterLastCheckTime", "Thu Nov 14 2013 10:31:00 GMT+0100");
Line Deleted : user_pref("CT3106777.DownloadReferralCookieData", "");
Line Deleted : user_pref("CT3106777.EMailNotifierPollDate", "Wed Nov 23 2011 20:44:30 GMT+0100");
Line Deleted : user_pref("CT3106777.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":false}");
Line Deleted : user_pref("CT3106777.EnableClickToSearchBox", false);
Line Deleted : user_pref("CT3106777.EnableSearchHistory", false);
Line Deleted : user_pref("CT3106777.EnableSearchSuggest", false);
Line Deleted : user_pref("CT3106777.FirstServerDate", "22-11-2011");
Line Deleted : user_pref("CT3106777.FirstTime", true);
Line Deleted : user_pref("CT3106777.FirstTimeFF3", true);
Line Deleted : user_pref("CT3106777.FixPageNotFoundErrors", true);
Line Deleted : user_pref("CT3106777.GroupingServerCheckInterval", 1440);
Line Deleted : user_pref("CT3106777.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
Line Deleted : user_pref("CT3106777.HPChangedManually", false);
Line Deleted : user_pref("CT3106777.HPInstall", true);
Line Deleted : user_pref("CT3106777.HPProtectChoice", true);
Line Deleted : user_pref("CT3106777.HPProtectCount", 1);
Line Deleted : user_pref("CT3106777.HasUserGlobalKeys", true);
Line Deleted : user_pref("CT3106777.HomePageProtectorEnabled", false);
Line Deleted : user_pref("CT3106777.HomepageBeforeUnload", "hxxp://www.seznam.cz/");
Line Deleted : user_pref("CT3106777.Initialize", true);
Line Deleted : user_pref("CT3106777.InitializeCommonPrefs", true);
Line Deleted : user_pref("CT3106777.InstallationAndCookieDataSentCount", 3);
Line Deleted : user_pref("CT3106777.InstallationId", "ConduitStubGeneric");
Line Deleted : user_pref("CT3106777.InstallationType", "ConduitStubIntegration");
Line Deleted : user_pref("CT3106777.InstalledDate", "Tue Nov 22 2011 19:46:09 GMT+0100");
Line Deleted : user_pref("CT3106777.IsAlertDBUpdated", true);
Line Deleted : user_pref("CT3106777.IsGrouping", false);
Line Deleted : user_pref("CT3106777.IsInitSetupIni", true);
Line Deleted : user_pref("CT3106777.IsMulticommunity", false);
Line Deleted : user_pref("CT3106777.IsOpenThankYouPage", false);
Line Deleted : user_pref("CT3106777.IsOpenUninstallPage", false);
Line Deleted : user_pref("CT3106777.IsProtectorsInit", true);
Line Deleted : user_pref("CT3106777.LanguagePackLastCheckTime", "Thu Nov 14 2013 10:31:02 GMT+0100");
Line Deleted : user_pref("CT3106777.LanguagePackReloadIntervalMM", 1440);
Line Deleted : user_pref("CT3106777.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx");
Line Deleted : user_pref("CT3106777.LastLogin_3.10.0.1", "Mon Mar 26 2012 08:41:44 GMT+0200");
Line Deleted : user_pref("CT3106777.LastLogin_3.12.2.3", "Sat Jun 02 2012 09:42:17 GMT+0200");
Line Deleted : user_pref("CT3106777.LastLogin_3.13.0.6", "Mon Jul 16 2012 09:53:52 GMT+0200");
Line Deleted : user_pref("CT3106777.LastLogin_3.14.1.0", "Sat Oct 13 2012 19:07:35 GMT+0200");
Line Deleted : user_pref("CT3106777.LastLogin_3.15.1.0", "Sun Dec 09 2012 22:41:55 GMT+0100");
Line Deleted : user_pref("CT3106777.LastLogin_3.16.0.100", "Thu Feb 14 2013 07:15:09 GMT+0100");
Line Deleted : user_pref("CT3106777.LastLogin_3.16.0.3", "Fri Jan 04 2013 09:41:25 GMT+0100");
Line Deleted : user_pref("CT3106777.LastLogin_3.18.0.7", "Sun Aug 18 2013 11:22:08 GMT+0200");
Line Deleted : user_pref("CT3106777.LastLogin_3.19.0.3", "Wed Sep 11 2013 08:53:03 GMT+0200");
Line Deleted : user_pref("CT3106777.LastLogin_3.20.0.4", "Thu Nov 14 2013 10:30:35 GMT+0100");
Line Deleted : user_pref("CT3106777.LastLogin_3.8.1.0", "Fri Jan 13 2012 11:05:33 GMT+0100");
Line Deleted : user_pref("CT3106777.LastLogin_3.9.0.3", "Tue Mar 06 2012 22:04:54 GMT+0100");
Line Deleted : user_pref("CT3106777.LatestVersion", "3.20.0.4");
Line Deleted : user_pref("CT3106777.Locale", "en");
Line Deleted : user_pref("CT3106777.MCDetectTooltipHeight", "83");
Line Deleted : user_pref("CT3106777.MCDetectTooltipShow", false);
Line Deleted : user_pref("CT3106777.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
Line Deleted : user_pref("CT3106777.MCDetectTooltipWidth", "295");
Line Deleted : user_pref("CT3106777.MyStuffEnabledAtInstallation", true);
Line Deleted : user_pref("CT3106777.OriginalFirstVersion", "3.8.1.0");
Line Deleted : user_pref("CT3106777.SHRINK_TOOLBAR", 1);
Line Deleted : user_pref("CT3106777.SavedHomepage", "hxxp://seznam.cz/");
Line Deleted : user_pref("CT3106777.SearchAPILastCheckTime", "Thu Nov 14 2013 10:30:45 GMT+0100");
Line Deleted : user_pref("CT3106777.SearchBackToDefaultEngine", false);
Line Deleted : user_pref("CT3106777.SearchBoxWidth", 100);
Line Deleted : user_pref("CT3106777.SearchCaption", "WinZipBar Customized Web Search");
Line Deleted : user_pref("CT3106777.SearchEngine", "Web%20Search||hxxp://search.conduit.com/Results.aspx?q=UCM_SEARCH_TERM&ctid=CT3106777&octid=EB_ORIGINAL_CTID&SearchSource=1");
Line Deleted : user_pref("CT3106777.SearchEngineBeforeUnload", "Ask.com");
Line Deleted : user_pref("CT3106777.SearchFromAddressBarIsInit", true);
Line Deleted : user_pref("CT3106777.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3106777&SearchSource=2&q=");
Line Deleted : user_pref("CT3106777.SearchInNewTabEnabled", true);
Line Deleted : user_pref("CT3106777.SearchInNewTabIntervalMM", 1440);
Line Deleted : user_pref("CT3106777.SearchInNewTabLastCheckTime", "Wed Sep 11 2013 08:53:00 GMT+0200");
Line Deleted : user_pref("CT3106777.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID&UM=UM_ID");
Line Deleted : user_pref("CT3106777.SearchInNewTabURLFromSearchAPI", "hxxp://search.conduit.com/?ctid=CT3106777&octid=CT3106777&SearchSource=15&CUI=SB_CUI&SSPV=EB_SSPV&Lay=1&UM=UM_ID");
Line Deleted : user_pref("CT3106777.SearchInNewTabUsageUrl", "hxxp://usage.hosting.toolbar.conduit-services.com/usage.ashx?ctid=EB_TOOLBAR_ID");
Line Deleted : user_pref("CT3106777.SearchInNewTabUserEnabled", false);
Line Deleted : user_pref("CT3106777.SearchProtectorEnabled", false);
Line Deleted : user_pref("CT3106777.SearchProtectorToolbarDisabled", false);
Line Deleted : user_pref("CT3106777.SendProtectorDataViaLogin", true);
Line Deleted : user_pref("CT3106777.ServiceMapLastCheckTime", "Thu Nov 14 2013 10:30:50 GMT+0100");
Line Deleted : user_pref("CT3106777.SettingsLastCheckTime", "Thu Nov 14 2013 10:30:12 GMT+0100");
Line Deleted : user_pref("CT3106777.SettingsLastUpdate", "1383737452");
Line Deleted : user_pref("CT3106777.TBHomePageUrl", "hxxp://search.conduit.com/?ctid=CT3106777&SearchSource=13");
Line Deleted : user_pref("CT3106777.ThirdPartyComponentsInterval", 504);
Line Deleted : user_pref("CT3106777.ThirdPartyComponentsLastCheck", "Fri Apr 05 2013 12:26:10 GMT+0200");
Line Deleted : user_pref("CT3106777.ThirdPartyComponentsLastUpdate", "1331805997");
Line Deleted : user_pref("CT3106777.ToolbarShrinkedFromSetup", false);
Line Deleted : user_pref("CT3106777.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,client.conduit-storage.com,OurToolbar.com,CommunityToolbars.com,ForumToolbar.com,MyBlogToolbar.com,MyCity[...]
Line Deleted : user_pref("CT3106777.UserID", "UN11589529652990804");
Line Deleted : user_pref("CT3106777.ValidationData_Search", 0);
Line Deleted : user_pref("CT3106777.ValidationData_Toolbar", 1);
Line Deleted : user_pref("CT3106777.addressBarTakeOverEnabledInHidden", "true");
Line Deleted : user_pref("CT3106777.alertChannelId", "1500748");
Line Deleted : user_pref("CT3106777.approveUntrustedApps", false);
Line Deleted : user_pref("CT3106777.backendstorage.searchappstate", "33");
Line Deleted : user_pref("CT3106777.backendstorage.searchapptracking", "73656E74");
Line Deleted : user_pref("CT3106777.components.1000034", false);
Line Deleted : user_pref("CT3106777.components.129621406983725013", false);
Line Deleted : user_pref("CT3106777.components.129651867756644549", false);
Line Deleted : user_pref("CT3106777.components.129651874902112531", false);
Line Deleted : user_pref("CT3106777.components.129651877805706313", false);
Line Deleted : user_pref("CT3106777.components.129652079729731960", false);
Line Deleted : user_pref("CT3106777.components.129652080115356962", false);
Line Deleted : user_pref("CT3106777.components.129652080527700719", false);
Line Deleted : user_pref("CT3106777.components.129652080799263262", false);
Line Deleted : user_pref("CT3106777.components.129652081060044513", false);
Line Deleted : user_pref("CT3106777.components.129658445795250432", false);
Line Deleted : user_pref("CT3106777.components.129666421165716597", false);
Line Deleted : user_pref("CT3106777.components.129666421358302118", false);
Line Deleted : user_pref("CT3106777.components.129666421425472669", false);
Line Deleted : user_pref("CT3106777.components.129666659524711057", false);
Line Deleted : user_pref("CT3106777.components.129683596535774919", false);
Line Deleted : user_pref("CT3106777.countryCode", "CZ");
Line Deleted : user_pref("CT3106777.firstTimeDialogOpened", true);
Line Deleted : user_pref("CT3106777.fixPageNotFoundErrorByUser", "TRUE");
Line Deleted : user_pref("CT3106777.fixPageNotFoundErrorInHidden", "true");
Line Deleted : user_pref("CT3106777.fullUserID", "UN11589529652990804.UP.2053090859");
Line Deleted : user_pref("CT3106777.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.conduit.com;apps.conduit.com;services.apps.conduit.com\",\"AppsDetectionUrlPattern\":\"hxxp://appdown[...]
Line Deleted : user_pref("CT3106777.globalFirstTimeInfoLastCheckTime", "Mon Apr 01 2013 23:16:11 GMT+0200");
Line Deleted : user_pref("CT3106777.homepageProtectorEnableByLogin", true);
Line Deleted : user_pref("CT3106777.initDone", true);
Line Deleted : user_pref("CT3106777.installId", "ConduitStubGeneric");
Line Deleted : user_pref("CT3106777.installType", "ConduitStubIntegration");
Line Deleted : user_pref("CT3106777.isAppTrackingManagerOn", false);
Line Deleted : user_pref("CT3106777.isCheckedStartAsHidden", true);
Line Deleted : user_pref("CT3106777.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":true}");
Line Deleted : user_pref("CT3106777.isFirstTimeToolbarLoading", "false");
Line Deleted : user_pref("CT3106777.isPerformedSmartBarTransition", "true");
Line Deleted : user_pref("CT3106777.isSearchProtectorNotifyChanges", false);
Line Deleted : user_pref("CT3106777.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
Line Deleted : user_pref("CT3106777.lastNewTabSettings", "{\"isEnabled\":false,\"newTabUrl\":\"hxxp://search.conduit.com/?gd=&ctid=CT3106777&octid=CT3106777&ISID=ISID_ID&SearchSource=15&CUI=UN11589529652990804&SSPV=[...]
Line Deleted : user_pref("CT3106777.lastVersion", "10.23.0.822");
Line Deleted : user_pref("CT3106777.missingMachineIdSent", "true");
Line Deleted : user_pref("CT3106777.myStuffEnabled", true);
Line Deleted : user_pref("CT3106777.myStuffPublihserMinWidth", 400);
Line Deleted : user_pref("CT3106777.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID");
Line Deleted : user_pref("CT3106777.myStuffServiceIntervalMM", 1440);
Line Deleted : user_pref("CT3106777.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUFF_LUT");
Line Deleted : user_pref("CT3106777.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"\",\"EB_MAIN_FRAME_TITLE\":\"\",\"EB_TOOLBAR_SUB_DOMAIN\":\"hxxp://WinZipBar.OurToolbar.com/\",\"EB_TOOLB[...]
Line Deleted : user_pref("CT3106777.newSettings", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
Line Deleted : user_pref("CT3106777.oldAppsList", "10000001,10000002,111,129666421165716597,129812574841336690,129652080527700719,129738071320182834,129666421425472669,129621406983725013,129652079729731960,129651867[...]
Line Deleted : user_pref("CT3106777.originalHomepage", "hxxp://seznam.cz/");
Line Deleted : user_pref("CT3106777.originalSearchAddressUrl", "chrome://browser-region/locale/region.properties");
Line Deleted : user_pref("CT3106777.originalSearchEngine", "chrome://browser-region/locale/region.properties");
Line Deleted : user_pref("CT3106777.revertSettingsEnabled", true);
Line Deleted : user_pref("CT3106777.search.searchCount", 0);
Line Deleted : user_pref("CT3106777.searchFromAddressBarEnabledByUser", "false");
Line Deleted : user_pref("CT3106777.searchInNewTabEnabledByUser", "false");
Line Deleted : user_pref("CT3106777.searchInNewTabEnabledInHidden", "true");
Line Deleted : user_pref("CT3106777.searchProtector.notifyChanges", "{\"dataType\":\"string\",\"data\":false}");
Line Deleted : user_pref("CT3106777.searchProtectorDialogDelayInSec", 10);
Line Deleted : user_pref("CT3106777.searchProtectorEnableByLogin", true);
Line Deleted : user_pref("CT3106777.searchSuggestEnabledByUser", "false");
Line Deleted : user_pref("CT3106777.searchappstate.from_oldbar.enc", "Mw==");
Line Deleted : user_pref("CT3106777.searchapptracking.from_oldbar.enc", "c2VudA==");
Line Deleted : user_pref("CT3106777.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"false\"}");
Line Deleted : user_pref("CT3106777.selectToSearchBoxEnabledByUser", "{\"dataType\":\"string\",\"data\":\"false\"}");
Line Deleted : user_pref("CT3106777.sendUsageEnabled", "false");
Line Deleted : user_pref("CT3106777.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
Line Deleted : user_pref("CT3106777.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\"}");
Line Deleted : user_pref("CT3106777.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT3106777\"}");
Line Deleted : user_pref("CT3106777.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"hxxp://WinZipBar.OurToolbar.com//xpi\"}");
Line Deleted : user_pref("CT3106777.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"WinZipBar \"}");
Line Deleted : user_pref("CT3106777.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Deleted : user_pref("CT3106777.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data\":\"2\"}");
Line Deleted : user_pref("CT3106777.serviceLayer_services_Configuration_lastUpdate", "1397035792906");
Line Deleted : user_pref("CT3106777.serviceLayer_services_login_10.20.101.5_lastUpdate", "1388823787194");
Line Deleted : user_pref("CT3106777.serviceLayer_services_login_10.23.0.822_lastUpdate", "1397035790859");
Line Deleted : user_pref("CT3106777.serviceLayer_services_searchAPI_lastUpdate", "1397035792296");
Line Deleted : user_pref("CT3106777.serviceLayer_services_serviceMap_lastUpdate", "1397035791286");
Line Deleted : user_pref("CT3106777.serviceLayer_services_toolbarSettings_lastUpdate", "1397035790827");
Line Deleted : user_pref("CT3106777.serviceLayer_services_translation_lastUpdate", "1397035790778");
Line Deleted : user_pref("CT3106777.settingsINI", true);
Line Deleted : user_pref("CT3106777.showToolbarPermission", "false");
Line Deleted : user_pref("CT3106777.smartbar.CTID", "CT3106777");
Line Deleted : user_pref("CT3106777.smartbar.Uninstall", "0");
Line Deleted : user_pref("CT3106777.smartbar.toolbarName", "WinZipBar ");
Line Deleted : user_pref("CT3106777.testingCtid", "");
Line Deleted : user_pref("CT3106777.toolbarAppMetaDataLastCheckTime", "Thu Nov 14 2013 10:30:44 GMT+0100");
Line Deleted : user_pref("CT3106777.toolbarBornServerTime", "22-11-2011");
Line Deleted : user_pref("CT3106777.toolbarContextMenuLastCheckTime", "Mon Apr 01 2013 23:16:09 GMT+0200");
Line Deleted : user_pref("CT3106777.toolbarCurrentServerTime", "9-4-2014");
Line Deleted : user_pref("CT3106777.toolbarLoginClientTime", "Sat Dec 28 2013 09:09:07 GMT+0100");
Line Deleted : user_pref("CT3106777.upgradeFromOBVersion", true);
Line Deleted : user_pref("CT3106777.usageEnabled", false);
Line Deleted : user_pref("CT3106777.usagesFlag", 2);
Line Deleted : user_pref("CT3106777_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1397035787631,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");
Line Deleted : user_pref("CommunityToolbar.ConduitHomepagesList", "hxxp://search.conduit.com/?ctid=CT3106777&SearchSource=13");
Line Deleted : user_pref("CommunityToolbar.ConduitSearchList", "WinZipBar Customized Web Search");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit.com/root/CT2269050/CT2269050", "\"3273c2b1619ce166b6cdd82f16d0bb9a3\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit.com/root/CT3106777/CT3106777", "\"208136f6bfa3b0ab98b213d993e9e4c83\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://alert.services.conduit.com/Alerts/AlertServices.asmx/GetHostedFeedRss?alertID=666138&alertFeedId=661999", "\"0\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/1500748/1496227/CZ", "\"0\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/666138/661999/CZ", "\"0\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/909619/905414/CZ", "\"0\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2269050", "\"1365594729\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT3106777", "\"1359634418\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&locale=en", "C5ZJe6gL80JBW5CuLy+wkg==");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&locale=en", "2E1/v7EfCEDbv3VaBQMELg==");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&locale=en", "k9un27OkAvkwB2ZmvXxTnA==");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&locale=en", "4BgM4MhF/sOgPsDNmIs3Yw==");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\"0ea11bd291bce1:0\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.engine.conduit-services.com/DLG.pkg?ver=3.3.3.2", "\"807dc126dd28cc1:0\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.12.2.3", "\"4ead38b3e6bcd1:0\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.13.0.6", "\"0d648794549cd1:0\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.14.1.0", "\"0e0a4327275cd1:0\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.15.1.0", "\"0343677cfb1cd1:0\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.16.0.100", "\"0343677cfb1cd1:15ff\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.16.0.3", "\"0343677cfb1cd1:0\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.18.0.7", "\"23c5489aa686ce1:0\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.19.0.3", "\"23c5489aa686ce1:0\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.20.0.4", "\"9f8d2729abc2ce1:0\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.8.1.0", "\"6a637346d78ccc1:0\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.9.0.3", "\"801a319dd78ccc1:0\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2269050", "\"52c3f1538cb4af4ada257fcbc6b15d49\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT3106777", "\"52c3f1538cb4af4ada257fcbc6b15d49\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=0", "634356118310000000");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=3/13/2011 11:17:11 AM", "634356118310000000");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.conduit-services.com/?ctid=CT3106777&octid=CT3106777", "\"1323165000\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=EB_LOCALE", "\"da1aa0987fa552be22d0ed64dc6a80a1\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=en", "\"968402cf2834e7ec0f38a19f0e9a9eb0\"");
Line Deleted : user_pref("CommunityToolbar.EngineOwner", "ConduitEngine");
Line Deleted : user_pref("CommunityToolbar.EngineOwnerGuid", "engine@conduit.com");
Line Deleted : user_pref("CommunityToolbar.EngineOwnerToolbarId", "conduitengine");
Line Deleted : user_pref("CommunityToolbar.IsEngineShown", true);
Line Deleted : user_pref("CommunityToolbar.IsMyStuffImportedToEngine", true);
Line Deleted : user_pref("CommunityToolbar.LatestLibsPath", "file:///C:\\Users\\Bara\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\36wpb9at.default\\conduitCommon\\modules\\3.18.0.7");
Line Deleted : user_pref("CommunityToolbar.LatestToolbarVersionInstalled", "3.18.0.7");
Line Deleted : user_pref("CommunityToolbar.OriginalEngineOwner", "ConduitEngine");
Line Deleted : user_pref("CommunityToolbar.OriginalEngineOwnerGuid", "engine@conduit.com");
Line Deleted : user_pref("CommunityToolbar.OriginalEngineOwnerToolbarId", "conduitengine");
Line Deleted : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "chrome://browser-region/locale/region.properties");
Line Deleted : user_pref("CommunityToolbar.ToolbarsList", "CT2269050,ConduitEngine,CT3106777");
Line Deleted : user_pref("CommunityToolbar.ToolbarsList2", "CT2269050,CT3106777");
Line Deleted : user_pref("CommunityToolbar.ToolbarsList4", "CT3106777");
Line Deleted : user_pref("CommunityToolbar.alert.alertDialogsGetterLastCheckTime", "Wed May 18 2011 22:15:43 GMT+0200");
Line Deleted : user_pref("CommunityToolbar.alert.alertInfoInterval", 1440);
Line Deleted : user_pref("CommunityToolbar.alert.alertInfoLastCheckTime", "Thu Jun 16 2011 09:09:13 GMT+0200");
Line Deleted : user_pref("CommunityToolbar.alert.clientsServerUrl", "hxxp://alert.client.conduit.com");
Line Deleted : user_pref("CommunityToolbar.alert.locale", "en");
Line Deleted : user_pref("CommunityToolbar.alert.loginIntervalMin", 1440);
Line Deleted : user_pref("CommunityToolbar.alert.loginLastCheckTime", "Sat Jul 09 2011 22:00:48 GMT+0200");
Line Deleted : user_pref("CommunityToolbar.alert.loginLastUpdateTime", "1305622559");
Line Deleted : user_pref("CommunityToolbar.alert.messageShowTimeSec", 20);
Line Deleted : user_pref("CommunityToolbar.alert.servicesServerUrl", "hxxp://alert.services.conduit.com");
Line Deleted : user_pref("CommunityToolbar.alert.showTrayIcon", false);
Line Deleted : user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300);
Line Deleted : user_pref("CommunityToolbar.alert.userId", "{cb696117-4409-4c0e-a003-7dfbea03e39f}");
Line Deleted : user_pref("CommunityToolbar.facebook.settingsLastCheckTime", "Sun Jul 25 2010 15:45:04 GMT+0200");
Line Deleted : user_pref("CommunityToolbar.globalUserId", "1da622e6-7e67-41ec-bef5-0186e5f4ce7c");
Line Deleted : user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true);
Line Deleted : user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true);
Line Deleted : user_pref("CommunityToolbar.notifications.alertDialogsGetterLastCheckTime", "Tue Apr 09 2013 23:46:16 GMT+0200");
Line Deleted : user_pref("CommunityToolbar.notifications.alertInfoInterval", 1440);
Line Deleted : user_pref("CommunityToolbar.notifications.alertInfoLastCheckTime", "Tue Apr 09 2013 23:46:23 GMT+0200");
Line Deleted : user_pref("CommunityToolbar.notifications.clientsServerUrl", "hxxp://alert.client.conduit.com");
Line Deleted : user_pref("CommunityToolbar.notifications.locale", "en");
Line Deleted : user_pref("CommunityToolbar.notifications.loginIntervalMin", 1440);
Line Deleted : user_pref("CommunityToolbar.notifications.loginLastCheckTime", "Tue Apr 09 2013 23:46:15 GMT+0200");
Line Deleted : user_pref("CommunityToolbar.notifications.loginLastUpdateTime", "1313487611");
Line Deleted : user_pref("CommunityToolbar.notifications.messageShowTimeSec", 20);
Line Deleted : user_pref("CommunityToolbar.notifications.servicesServerUrl", "hxxp://alert.services.conduit.com");
Line Deleted : user_pref("CommunityToolbar.notifications.showTrayIcon", false);
Line Deleted : user_pref("CommunityToolbar.notifications.userCloseIntervalMin", 300);
Line Deleted : user_pref("CommunityToolbar.notifications.userId", "bcb78ba8-352f-4da0-96dc-6cbaed5f4bc6");
Line Deleted : user_pref("CommunityToolbar.originalHomepage", "hxxp://seznam.cz/");
Line Deleted : user_pref("CommunityToolbar.originalSearchEngine", "chrome://browser-region/locale/region.properties");
Line Deleted : user_pref("ConduitEngine.AppTrackingLastCheckTime", "Fri May 20 2011 16:26:34 GMT+0200");
Line Deleted : user_pref("ConduitEngine.CTID", "ConduitEngine");
Line Deleted : user_pref("ConduitEngine.DialogsGetterLastCheckTime", "Sat Jul 09 2011 22:00:49 GMT+0200");
Line Deleted : user_pref("ConduitEngine.FirstServerDate", "05/18/2011 23");
Line Deleted : user_pref("ConduitEngine.FirstTime", true);
Line Deleted : user_pref("ConduitEngine.FirstTimeFF3", true);
Line Deleted : user_pref("ConduitEngine.HasUserGlobalKeys", true);
Line Deleted : user_pref("ConduitEngine.Initialize", true);
Line Deleted : user_pref("ConduitEngine.InitializeCommonPrefs", true);
Line Deleted : user_pref("ConduitEngine.InstalledDate", "Wed May 18 2011 22:15:43 GMT+0200");
Line Deleted : user_pref("ConduitEngine.IsMulticommunity", false);
Line Deleted : user_pref("ConduitEngine.IsOpenThankYouPage", false);
Line Deleted : user_pref("ConduitEngine.IsOpenUninstallPage", true);
Line Deleted : user_pref("ConduitEngine.LanguagePackLastCheckTime", "Sat Jul 09 2011 22:00:49 GMT+0200");
Line Deleted : user_pref("ConduitEngine.LastLogin_3.3.3.2", "Sat Jul 09 2011 22:00:49 GMT+0200");
Line Deleted : user_pref("ConduitEngine.SearchFromAddressBarIsInit", true);
Line Deleted : user_pref("ConduitEngine.SettingsLastCheckTime", "Sat Jul 09 2011 22:00:49 GMT+0200");
Line Deleted : user_pref("ConduitEngine.UserID", "UN18626785842469162");
Line Deleted : user_pref("ConduitEngine.componentAlertEnabled", false);
Line Deleted : user_pref("ConduitEngine.engineLocale", "cs");
Line Deleted : user_pref("ConduitEngine.enngineContextMenuLastCheckTime", "Sat Jul 09 2011 22:00:49 GMT+0200");
Line Deleted : user_pref("ConduitEngine.globalFirstTimeInfoLastCheckTime", "Sat Jul 09 2011 22:00:49 GMT+0200");
Line Deleted : user_pref("ConduitEngine.initDone", true);
Line Deleted : user_pref("ConduitEngine.isAppTrackingManagerOn", true);
Line Deleted : user_pref("Smartbar.ConduitSearchUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?CUI=UN57323207820656194&ctid=CT3106777&SearchSource=3&q={searchTerms}");
Line Deleted : user_pref("Smartbar.SearchFromAddressBarSavedUrl", "chrome://browser-region/locale/region.properties");
Line Deleted : user_pref("browser.search.defaultthis.engineName", "WinZipBar Customized Web Search");
Line Deleted : user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3106777&SearchSource=3&q={searchTerms}");
Line Deleted : user_pref("extensions.asktb.ff-original-keyword-url", "chrome://browser-region/locale/region.properties");
Line Deleted : user_pref("keyword.URL", "hxxp://websearch.ask.com/redirect?client=ff&src=kw&tb=ATU3&o=15380&locale=en_EU&apn_uid=f9369c64-0a5a-493d-876c-1bcfa31ba885&apn_ptnrs=%5EUJ&apn_sauid=3090A9CA-760D-40EE-A316[...]
Line Deleted : user_pref("plugin.state.npconduitfirefoxplugin", 2);
Line Deleted : user_pref("smartbar.conduitHomepageList", "hxxp://search.conduit.com/?ctid=CT3106777&SearchSource=13");
Line Deleted : user_pref("smartbar.conduitSearchAddressUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3106777&SearchSource=2&q=,hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2269050&q=");
Line Deleted : user_pref("smartbar.machineId", "HPKMIMZDKMRIEOVOXR3S73WMFZIMANI3SZVTOBFO+YCDJVLRULLXKJPP/MMX3PO21RMW89GYT9HOUTDVCPSQQA");
Line Deleted : user_pref("valueApps.CT3106777.mam_gk_currentVersion", "312E31332E302E3137");
Line Deleted : user_pref("valueApps.CT3106777.mam_gk_currentVersion.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3106777.mam_gk_migrated_from_ls", "31");
Line Deleted : user_pref("valueApps.CT3106777.mam_gk_migrated_from_ls.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3106777.mam_gk_userBornDate", "4E2F41");
Line Deleted : user_pref("valueApps.CT3106777.mam_gk_userBornDate.storedInFile", false);

[ File : C:\Users\Premek\AppData\Roaming\Mozilla\Firefox\Profiles\80migwzz.default\prefs.js ]

Line Deleted : user_pref("icqtoolbar.allowSendURL", false);
Line Deleted : user_pref("icqtoolbar.engineVerified", true);
Line Deleted : user_pref("icqtoolbar.facebookSmilesAddonShowedPopup", true);
Line Deleted : user_pref("icqtoolbar.firstTbRun", false);
Line Deleted : user_pref("icqtoolbar.geolastmodified", 1396381347);
Line Deleted : user_pref("icqtoolbar.hiddenElements", "itb_options itb_people itb_zoom_in itb_zoom_out itb_zoom_default itb_games itb_highlight");
Line Deleted : user_pref("icqtoolbar.history", "Jen%C5%A1tejn||praha||tachov||po%C4%8Das%C3%AD||ane%C5%BEsk%C3%BD%20kl%C3%A1%C5%A1ter%20praha||Emil%20Dossev||Pas%C3%A1%C5%BEe%2C%20Praha%201||Praha%201||cafeteria%20g[...]
Line Deleted : user_pref("icqtoolbar.icqgeo", 42);
Line Deleted : user_pref("icqtoolbar.installTime", "1350374363");
Line Deleted : user_pref("icqtoolbar.newtab2_state", false);
Line Deleted : user_pref("icqtoolbar.newtab_most_visited_state", "1");
Line Deleted : user_pref("icqtoolbar.newtab_recently_closed_state", "1");
Line Deleted : user_pref("icqtoolbar.numberOfSearches", 0);
Line Deleted : user_pref("icqtoolbar.previousFFVersion", "27.0.1");
Line Deleted : user_pref("icqtoolbar.skip_default_search", "no");
Line Deleted : user_pref("icqtoolbar.suggestions", false);
Line Deleted : user_pref("icqtoolbar.uninstStatSent", true);
Line Deleted : user_pref("icqtoolbar.uniqueID", "130261448219467218801350374363622");
Line Deleted : user_pref("icqtoolbar.usageStatstTimestamp", 1396381357);
Line Deleted : user_pref("icqtoolbar.voucherHideClicks", 0);
Line Deleted : user_pref("icqtoolbar.voucherMoreLinkClicks", 0);
Line Deleted : user_pref("icqtoolbar.voucherRedeemClicks", 0);
Line Deleted : user_pref("icqtoolbar.voucherWasShown", 0);
Line Deleted : user_pref("icqtoolbar.xmlEnableSuggestions", false);
Line Deleted : user_pref("icqtoolbar.xmlLanguage", "cs");

-\\ Google Chrome v34.0.1847.116

[ File : C:\Users\Bara\AppData\Local\Google\Chrome\User Data\Default\preferences ]


[ File : C:\Users\Premek\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Deleted [Search Provider] : hxxp://websearch.ask.com/redirect?client=cr&src=kw&tb=ATU3&o=15380&locale=en_EU&apn_uid=f9369c64-0a5a-493d-876c-1bcfa31ba885&apn_ptnrs=%5EUJ&apn_sauid=3090A9CA-760D-40EE-A316-BB488A39C158&apn_dtid=%5Ezzz000%5EYY%5ECZ&q={searchTerms}

*************************

AdwCleaner[R0].txt - [57346 octets] - [26/04/2014 11:13:11]
AdwCleaner[S0].txt - [58308 octets] - [26/04/2014 11:15:03]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [58369 octets] ##########

Re: prosím o kontrolu

Napsal: 26 dub 2014 10:29
od tommy.havlos
já s win vista nikdy moc nepřišel do styku. Ale stále mi tu hází chybu Centrum zabezpečení, nejde zapnout a to samé Defender hází chybu 0x800106ba, což nechápu, když jsem naintaloval Zone Alarm Firewall, tak by měl být vypnutý a neozývat se.

Re: prosím o kontrolu

Napsal: 26 dub 2014 10:30
od Márty84
OK :)

To doladime, pokud teda neni naboreny system. Smeti je tam dost :arcisit:

:arrow: Udelejte !!!kompletni!!! kontrolu s MBAM http://forum.viry.cz/viewtopic.php?f=29&t=115222 a dejte sem vysledky. Predem nic nemazte, miva obcas falesne detekce

Re: prosím o kontrolu

Napsal: 26 dub 2014 16:13
od tommy.havlos
Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 26.4.2014
Scan Time: 17:12:46
Logfile: tt.txt
Administrator: Yes

Version: 2.00.1.1004
Malware Database: v2014.04.26.01
Rootkit Database: v2014.03.27.01
License: Trial
Malware Protection: Enabled
Malicious Website Protection: Enabled
Chameleon: Disabled

OS: Windows Vista Service Pack 2
CPU: x86
File System: NTFS
User: Premek

Scan Type: Custom Scan
Result: Completed
Objects Scanned: 486933
Time Elapsed: 5 hr, 35 min, 56 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Shuriken: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 4
PUP.Optional.WinZipTB.A, HKU\S-1-5-21-1442088012-695715647-31229734-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{50FAFAF0-70A9-419D-A109-FA4B4FFD4E37}, , [d118e14d4a31ce682aa8a1784ab8ca36],
PUP.Optional.WinZipTB.A, HKU\S-1-5-21-1442088012-695715647-31229734-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{50FAFAF0-70A9-419D-A109-FA4B4FFD4E37}, , [d118e14d4a31ce682aa8a1784ab8ca36],
PUP.Optional.Conduit.A, HKU\S-1-5-21-1442088012-695715647-31229734-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\CONDUIT\FF, , [d1188da182f9d16518cb0e92b3506d93],
PUP.Optional.ValueApps.A, HKU\S-1-5-21-1442088012-695715647-31229734-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\CONDUIT\ValueApps, , [10d92707dd9eaf87b7f3d1b4e71b02fe],

Registry Values: 4
PUP.Optional.WinZipTB.A, HKU\S-1-5-21-1442088012-695715647-31229734-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\WEBBROWSER|{50FAFAF0-70A9-419D-A109-FA4B4FFD4E37}, Ä?AoAoP©pAYAË? AoKOA1N7, , [d118e14d4a31ce682aa8a1784ab8ca36]
PUP.Optional.WinZipTB.A, HKU\S-1-5-21-1442088012-695715647-31229734-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\URLSEARCHHOOKS|{50FAFAF0-70A9-419D-A109-FA4B4FFD4E37}, , [d118e14d4a31ce682aa8a1784ab8ca36],
PUP.Optional.WinZipTB.A, HKU\S-1-5-21-1442088012-695715647-31229734-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\WEBBROWSER\{50FAFAF0-70A9-419D-A109-FA4B4FFD4E37}, , [a148230b93e87bbbefe35dbc8b77bb45],
PUP.Optional.WinZipTB.A, HKU\S-1-5-21-1442088012-695715647-31229734-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\URLSEARCHHOOKS\{50fafaf0-70a9-419d-a109-fa4b4ffd4e37}, , [6e7bbf6fa0db62d4567cad6ca161ea16],

Registry Data: 1
PUP.Optional.Conduit, HKU\S-1-5-21-1442088012-695715647-31229734-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, http://search.conduit.com?SearchSource= ... =CT3106777, Good: (http://www.google.com), Bad: (http://search.conduit.com?SearchSource= ... =CT3106777),,[9455e24cf98259dd408f8aa55ea6ab55]

Folders: 0
(No malicious items detected)

Files: 24
PUP.Optional.Conduit, C:\AdwCleaner\Quarantine\C\Program Files\Conduit\Community Alerts\Alert.dll.vir, , [559495997cffba7cd2aa62cdff019d63],
Trojan.Swisyn, C:\Users\Premek\AppData\Local\Google\Update\GoogleUpdateBeta.exe, , [cf1aee400b708da94f76166b27d9ae52],
PUP.Optional.OpenCandy, C:\Users\Premek\AppData\Local\Temp\_MTB868313012118282592011.exe, , [985175b90e6dbe78cd2be1729f65b947],
PUP.Optional.OpenCandy, C:\Users\Premek\AppData\Local\Temp\_MTB490838921352313122011.exe, , [cd1cbe70f388fe38c43493c0be46d828],
PUP.Optional.OpenCandy, C:\Users\Premek\AppData\Local\Temp\_MTB197002592127212592011.dat, , [0bdea48af18a5adc8177d47fbd4730d0],
PUP.Optional.OpenCandy, C:\Users\Premek\AppData\Local\Temp\_MTB559841332116532592011.exe, , [60892d0191ea999d12e69bb8fb0926da],
PUP.Optional.OpenCandy, C:\Users\Premek\AppData\Local\Temp\_MTB7722131621343813122011.exe, , [f4f5ff2f6e0d84b20eeaa8abba4aa060],
PUP.Optional.OpenCandy, C:\Users\Premek\AppData\Local\Temp\_MTB902965722132182592011.exe, , [fbeead81661592a430c8c093f90b0ff1],
PUP.Optional.OpenCandy, C:\Users\Premek\AppData\Local\Temp\_MTB347347442137202592011.exe, , [8d5cea448dee1521f701df743dc732ce],
PUP.Optional.OpenCandy, C:\Users\Premek\AppData\Local\Temp\_MTB582637962133132592011.exe, , [c72245e97dfe88aec03857fc2bd92dd3],
Trojan.FakeMS.ED, C:\Users\Premek\AppData\Local\Temp\rwaxsrtlcupcguttjki.bfg, , [d811cd612358a39380d815fa2bd6b848],
Trojan.FakeMS.ED, C:\Users\Premek\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\27\163db31b-3a4e0a89, , [6e7bc6682853df5761f7e02fb44d36ca],
Trojan.Agent, C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\1V3R9ARU\20100730[1].exe, , [01e88ca29be0b086ced61453b14fb64a],
Trojan.Agent, C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\1V3R9ARU\20100730[2].exe, , [36b3a18d1c5f89ad61432740659b37c9],
Trojan.Agent, C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\1V3R9ARU\20100808[1].exe, , [e90077b75d1e62d4baea71f647b9d12f],
Trojan.Agent, C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QJO3ZQSP\20100729[1].exe, , [5f8ab37baad13204564ebea9b24ebb45],
Trojan.Agent, C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QJO3ZQSP\20100730[1].exe, , [c326ed41cab1999d2183a6c1d12f56aa],
Trojan.Agent, C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QJO3ZQSP\20100730[2].exe, , [14d536f84932c175f2b24f180ff1a35d],
Trojan.Agent, C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SVQQFAV6\20100730[1].exe, , [4e9b200ebbc002348c18392e04fcfd03],
Trojan.Agent, C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SVQQFAV6\20100730[2].exe, , [40a934fa720993a3d2d2333443bdc040],
Trojan.Agent, C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SVQQFAV6\20100816[1].exe, , [eaffef3fbdbe43f3e8bca6c126da2ed2],
Trojan.Agent, C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZXW647U9\20100730[1].exe, , [24c5a28ced8e7fb7f8acb7b02ed2837d],
Trojan.Agent, C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZXW647U9\20100730[2].exe, , [10d9c668cbb070c6efb56ef932ce0af6],
Trojan.Agent, C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZXW647U9\20100818[1].exe, , [3faa9d9199e247ef04a04c1bdb2557a9],

Physical Sectors: 0
(No malicious items detected)


(end)

Re: prosím o kontrolu

Napsal: 26 dub 2014 16:56
od Márty84
Vsechno nechte odstranit. Po odstraneni a restartu pc test zopakujte, at vime, jestli se to nevraci. Napiste vysledek, podle nej zvolim dalsi postup.

Re: prosím o kontrolu

Napsal: 26 dub 2014 16:59
od tommy.havlos
odstraněno. Provedu test a napíšu, trvá to trochu déle. Děkuji.

Re: prosím o kontrolu

Napsal: 26 dub 2014 17:15
od Márty84
Jasne :)

Re: prosím o kontrolu

Napsal: 26 dub 2014 20:25
od tommy.havlos
už to vypadá dobře :)
Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 26.4.2014
Scan Time: 21:22:55
Logfile: tt.txt
Administrator: Yes

Version: 2.00.1.1004
Malware Database: v2014.04.26.03
Rootkit Database: v2014.03.27.01
License: Trial
Malware Protection: Enabled
Malicious Website Protection: Enabled
Chameleon: Disabled

OS: Windows Vista Service Pack 2
CPU: x86
File System: NTFS
User: Premek

Scan Type: Custom Scan
Result: Completed
Objects Scanned: 442318
Time Elapsed: 3 hr, 3 min, 18 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Shuriken: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 0
(No malicious items detected)

Registry Values: 0
(No malicious items detected)

Registry Data: 1
PUP.Optional.Conduit, HKU\S-1-5-21-1442088012-695715647-31229734-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, http://search.conduit.com?SearchSource= ... =CT3106777, Good: (http://www.google.com), Bad: (http://search.conduit.com?SearchSource= ... =CT3106777),,[de0d3df18bf0de58879671bf06fe49b7]

Folders: 0
(No malicious items detected)

Files: 1
PUP.Optional.Conduit, C:\AdwCleaner\Quarantine\C\Program Files\Conduit\Community Alerts\Alert.dll.vir, , [cf1cae80413a2f070577121d728e748c],

Physical Sectors: 0
(No malicious items detected)


(end)

Re: prosím o kontrolu

Napsal: 26 dub 2014 21:07
od Márty84
:arrow: Nalezy nechte odstranit, pak MBAM odinstalujte (pokud jste ho nahodou zavrel, neni treba test opakovat, nalezy odpalim pozdejsim skriptem).

:arrow: Stahnete RogueKiller http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe , ulozte ho na plochu, kliknete na nej pravym mysidlem a levym na Spustit jako spravce.
Probehne kratoucky testik a pak se zpristupni vpravo nahore tlacitko Prohledat. Na to kliknete a probehne dalsi test.
Po dokonceni kliknete na napis Zprava a objevi se log. Ten mi sem vlozte

Re: prosím o kontrolu

Napsal: 27 dub 2014 08:03
od tommy.havlos
RogueKiller V8.8.15 [Mar 27 2014] by Adlice Software
mail : http://www.adlice.com/contact/
Podpora : http://forum.adlice.com
Webové stránky : http://www.adlice.com/softwares/roguekiller/
: http://www.adlice.com

Operační systém : Windows Vista (6.0.6002 Service Pack 2) 32 bits version
Spuštěno v : Normální režim
Uživatel : Premek [Práva správce]
Mód : Kontrola -- Datum : 04/27/2014 09:02:58
| ARK || FAK || MBR |

¤¤¤ Škodlivé procesy: : 1 ¤¤¤
[SUSP PATH][DLL] explorer.exe -- C:\Users\Bara\Desktop\Nokia PC Suite 7\PhoneBrowser.dll [x] -> ODEBRÁNO
[SUSP PATH][DLL] explorer.exe -- C:\Users\Bara\Desktop\Nokia PC Suite 7\NGSCM.DLL [x] -> ODEBRÁNO
[SUSP PATH][DLL] explorer.exe -- C:\Users\Bara\Desktop\Nokia PC Suite 7\Lang\PhoneBrowser_cze.nlr [x] -> ODEBRÁNO
[SUSP PATH][DLL] explorer.exe -- C:\Users\Bara\Desktop\Nokia PC Suite 7\Resource\PhoneBrowser_Nokia.ngr [x] -> ODEBRÁNO

¤¤¤ ¤¤¤ Záznamy Registrů: : 5 ¤¤¤
[HJ POL][PUM] HKLM\[...]\System : EnableLUA (0) -> NALEZENO
[HJ SMENU][PUM] HKCU\[...]\Advanced : Start_ShowRecentDocs (0) -> NALEZENO
[HJ SMENU][PUM] HKCU\[...]\Advanced : Start_TrackProgs (0) -> NALEZENO
[HJ DESK][PUM] HKCU\[...]\ClassicStartMenu : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> NALEZENO
[HJ DESK][PUM] HKCU\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> NALEZENO

¤¤¤ naplánované úlohy : 1 ¤¤¤
[V2][SUSP PATH] IHUninstallTrackingTASK : CMD - /C DEL C:\Users\Bara\AppData\Local\Temp\IHU632C.tmp.exe [x][x] -> NALEZENO

¤¤¤ spuštění položky : 1 ¤¤¤
[Premek][SUSP PATH] srvctl.lnk : C:\Users\Premek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\srvctl.lnk @C:\ProgramData\tunectl\tuneupdx32.exe [-][x] -> NALEZENO

¤¤¤ Webové prohlížeče : 0 ¤¤¤

¤¤¤ Browser Addons : 0 ¤¤¤

¤¤¤ Zvláštní soubory / Složky: ¤¤¤

¤¤¤ Ovladač : [NAHRÁNO] ¤¤¤
[Address] SSDT[289] : NtSetContextThread @ 0x82EA22CF -> HOOKED (Unknown @ 0x8A54551B)
[Address] SSDT[314] : NtSetSecurityObject @ 0x82DCF027 -> HOOKED (Unknown @ 0x8A545525)

¤¤¤ Externí včelstvo: ¤¤¤

¤¤¤ Nákaza : ¤¤¤

¤¤¤ Soubor HOSTS: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts


127.0.0.1 localhost
::1 localhost


¤¤¤ Kontrola MBR: ¤¤¤

+++++ PhysicalDrive0: (\\.\PHYSICALDRIVE0 @ IDE) FUJITSU MJA2250BH G2 ATA Device +++++
--- User ---
[MBR] 370aebb5e74e3c6865e2b44a9f328855
[BSP] 2e1f9d8a365eba3cf1b114061c7a5742 : Windows Vista MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 120000 MB
1 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 245762048 | Size: 118473 MB
User = LL1 ... OK!
User = LL2 ... OK!

Dokončeno : << RKreport[0]_S_04272014_090258.txt >>

Re: prosím o kontrolu

Napsal: 27 dub 2014 08:16
od Márty84
:arrow: Znovu spustte RogueKiller jako spravce (pokud jste ho jeste nezavrel/a, rovnou kliknete na napis Smazat)
Probehne kratoucky testik a pak se zpristupni vpravo nahore tlacitko Prohledat. Na to kliknete a probehne dalsi test.
Po dokonceni kliknete na napis Smazat.
Pak kliknete na napis Zprava a objevi se log. Ten mi sem vlozte.
Pak kliknete na napis Oprava Host a Zprava.
Objevi se dalsi log. I ten mi sem vlozte.
Všechny časy jsou v UTC+01:00
Stránka 1 z 2

Založeno na phpBB® Forum Software © phpBB Limited

Český překlad – phpBB.cz