VIRY.CZ

hi,
mam koupeny notebook ze zastavarny.
Vycistil jsem ho od viru (co slo), aktualizoval pomoci druheho pc wireless + radice (drivers).
Nyni me obrazovky (vpravo dole na liste) blikaji, ale nemohu se stale pripojit na zadnou stranku na netu, udelat updaty atd.

Prosim o pomoc s vyresenim tohoto problemu

Jsem z toho uplne mimo a nevim, co mam s tim delat.

Log.:
Logfile of random's system information tool 1.10 (written by random/random)
Run by Bobi at 2014-07-03 18:54:58
Microsoft® Windows Vista™ Home Premium
System drive C: has 33 GB (33%) free of 102 GB
Total RAM: 2037 MB (54% free)

HijackThis download failed

======Scheduled tasks folder======

C:\Windows\tasks\27220085-a1e8-48a2-98b4-5d4a69718ae6-1.job - C:\Program Files\video MediaPlay-Air\video MediaPlay-Air-codedownloader.exe /tXmRNJozj /BkEysK=task /FhlATiZ='video MediaPlay-Air' /YBvfqcD=59599 /NtGZE='001673' /YsoJB='verticals-ads,pops,shopping' /XZBmYJtZ='0' /FpRzft=6FCE1373EA094FBCA96ACA93CB2E71A5IE /RsCzSHPIj=dafca32d082c6ee3fdc28363a4de28eb /XvcAS=1_34_06_10 /XULNPzFkr=1.34.6.10 /JQMoJs=1404162213 /LpujMNl=http://stats.democlientnet.com /yrsve=http://errors.democlientnet.com /GzaKgsZ=http://js.democlientnet.com /HuoRJHY=ff /uGImq='video MediaPlay-Air' /OavAy=http://js.clientdemocloud.com /rCmieM /TSndPTjZ='{"asw":[0, 100663300, 2048]}' /VryOYXuD='http://update.democlientnet.com/ie_code ... pdate.json' /BkEysK='task' /AMkAUj=''
C:\Windows\tasks\27220085-a1e8-48a2-98b4-5d4a69718ae6-11.job - C:\Program Files\video MediaPlay-Air\27220085-a1e8-48a2-98b4-5d4a69718ae6-11.exe /HpIMTze=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
C:\Windows\tasks\27220085-a1e8-48a2-98b4-5d4a69718ae6-2.job - C:\Program Files\video MediaPlay-Air\27220085-a1e8-48a2-98b4-5d4a69718ae6-2.exe /PQPXSC /FhlATiZ='video MediaPlay-Air' /YBvfqcD=59599 /NtGZE='001673' /YsoJB='verticals-ads,pops,shopping' /XZBmYJtZ='0' /FpRzft=6FCE1373EA094FBCA96ACA93CB2E71A5IE /RsCzSHPIj=dafca32d082c6ee3fdc28363a4de28eb /XvcAS=1_34_06_10 /JQMoJs=1404162213 /LpujMNl=http://stats.democlientnet.com /yrsve=http://errors.democlientnet.com /gdoHLU=11111111-1111-1111-1111-110511951199 /HuoRJHY=ff /vYhtWbVW /rCmieM /VryOYXuD='http://update.democlientnet.com/ie_enab ... pdate.json' /BkEysK='task' /AMkAUj=''
C:\Windows\tasks\27220085-a1e8-48a2-98b4-5d4a69718ae6-3.job - C:\Program Files\video MediaPlay-Air\27220085-a1e8-48a2-98b4-5d4a69718ae6-3.exe /HpIMTze=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
C:\Windows\tasks\27220085-a1e8-48a2-98b4-5d4a69718ae6-4.job - C:\Program Files\video MediaPlay-Air\27220085-a1e8-48a2-98b4-5d4a69718ae6-4.exe /EUtnYs /FhlATiZ='video MediaPlay-Air' /LLWGQlaq='C:\Program Files\video MediaPlay-Air\59599.xpi' /YBvfqcD=59599 /NtGZE='001673' /YsoJB='verticals-ads,pops,shopping' /XZBmYJtZ='0' /FpRzft=6FCE1373EA094FBCA96ACA93CB2E71A5IE /RsCzSHPIj=dafca32d082c6ee3fdc28363a4de28eb /XvcAS=1_34_06_10 /XULNPzFkr=1.34.6.10 /JQMoJs=1404162213 /LpujMNl=http://stats.democlientnet.com /yrsve=http://errors.democlientnet.com /EujpiMex=300 /WWIeWuqHY=ff806580-6db3-4c09-ba06-d6caf0e99172@8453cb25-7fef-4ed5-8934-b08be5605617.com /RvbIiAigO=0.94 /znkMkjOqK=aff8065806db34c09ba06d6caf0e991728453cb257fef4ed58934b08be5605617com59599 /osBrP=https://w9u6a2p6.ssl.hwcdn.net/plugin/f ... /59599.rdf /zSojPXMk='video MediaPlay-Air' /kcKUysOe='MediaPlayerEnhance Extension' /kmwbtoBq='enter' /HuoRJHY=ff /TSndPTjZ='{"asw":[0, 100663300, 2048]}' /rCmieM /mWOuLerk /WudHDDlkX /VryOYXuD='http://update.democlientnet.com/ff_agen ... pdate.json' /BkEysK='task' /AMkAUj=''
C:\Windows\tasks\27220085-a1e8-48a2-98b4-5d4a69718ae6-5.job - C:\Program Files\video MediaPlay-Air\27220085-a1e8-48a2-98b4-5d4a69718ae6-5.exe /XvSnNF /FhlATiZ='video MediaPlay-Air' /YBvfqcD=59599 /NtGZE='001673' /YsoJB='verticals-ads,pops,shopping' /XZBmYJtZ='0' /FpRzft=6FCE1373EA094FBCA96ACA93CB2E71A5IE /RsCzSHPIj=dafca32d082c6ee3fdc28363a4de28eb /XvcAS=1_34_06_10 /JQMoJs=1404162213 /LpujMNl=http://stats.democlientnet.com /yrsve=http://errors.democlientnet.com /JaiQRi=http://ipgeoapi.com/ /twRPSIYN=http://update.democlientnet.com /qjrgc=2 /LhiJBndi=http://logs.democlientnet.com /VryOYXuD='http://update.democlientnet.com/updater ... pdate.json' /BkEysK='task' /AMkAUj=''
C:\Windows\tasks\27220085-a1e8-48a2-98b4-5d4a69718ae6-5_user.job - C:\Program Files\video MediaPlay-Air\27220085-a1e8-48a2-98b4-5d4a69718ae6-5.exe /XvSnNF /FhlATiZ='video MediaPlay-Air' /YBvfqcD=59599 /NtGZE='001673' /YsoJB='verticals-ads,pops,shopping' /XZBmYJtZ='0' /FpRzft=6FCE1373EA094FBCA96ACA93CB2E71A5IE /RsCzSHPIj=dafca32d082c6ee3fdc28363a4de28eb /XvcAS=1_34_06_10 /JQMoJs=1404162213 /LpujMNl=http://stats.democlientnet.com /yrsve=http://errors.democlientnet.com /JaiQRi=http://ipgeoapi.com/ /twRPSIYN=http://update.democlientnet.com /qjrgc=2 /LhiJBndi=http://logs.democlientnet.com /VryOYXuD='http://update.democlientnet.com/updater ... pdate.json' /zbvREgX /BkEysK='task' /AMkAUj=''
C:\Windows\tasks\9c489aee-c648-4976-9804-990be9c41a31-1.job - C:\Program Files\Fraveen 1.4\Fraveen 1.4-codedownloader.exe /eHXeDDT /nneDSQYp=task /nzPJIem='Fraveen 1.4' /itUWgT=59601 /VfHcxapr='001674' /LDCLZoWbz='0' /HLeuUn='0' /niEuO=D754B75A9D10492F8E61EF7DD10E7797IE /DCRtzJ=db5dd7ea080136f862745fa922227bf3 /wjfHyHPNF=1_34_06_10 /SEmIo=1.34.6.10 /foiMlS=1404162225 /PJNQjyLJg=http://stats.democlientnet.com /fnbiQL=http://errors.democlientnet.com /yHKPXdF=http://js.democlientnet.com /XaeuuA=ff /weIlsZm='Fraveen 1.4' /YwVKmoT=http://js.clientdemocloud.com /szWufRqQB /EtPJKWSsm='{"asw":[0, 109051908, 2048]}' /TPEnPxnq='http://update.democlientnet.com/ie_code ... pdate.json' /nneDSQYp='task' /fXyNs=''
C:\Windows\tasks\9c489aee-c648-4976-9804-990be9c41a31-11.job - C:\Program Files\Fraveen 1.4\9c489aee-c648-4976-9804-990be9c41a31-11.exe /hmYmWNl=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
C:\Windows\tasks\9c489aee-c648-4976-9804-990be9c41a31-2.job - C:\Program Files\Fraveen 1.4\9c489aee-c648-4976-9804-990be9c41a31-2.exe /MKFygwqe /nzPJIem='Fraveen 1.4' /itUWgT=59601 /VfHcxapr='001674' /LDCLZoWbz='0' /HLeuUn='0' /niEuO=D754B75A9D10492F8E61EF7DD10E7797IE /DCRtzJ=db5dd7ea080136f862745fa922227bf3 /wjfHyHPNF=1_34_06_10 /foiMlS=1404162225 /PJNQjyLJg=http://stats.democlientnet.com /fnbiQL=http://errors.democlientnet.com /Cqerf=11111111-1111-1111-1111-110511961101 /XaeuuA=ff /ZCgpY /szWufRqQB /TPEnPxnq='http://update.democlientnet.com/ie_enab ... pdate.json' /nneDSQYp='task' /fXyNs=''
C:\Windows\tasks\9c489aee-c648-4976-9804-990be9c41a31-3.job - C:\Program Files\Fraveen 1.4\9c489aee-c648-4976-9804-990be9c41a31-3.exe /hmYmWNl=ASzx6KFB7m+0fPCw7X2ORZ0p5jN03U9vFj1xhqnayR+BPXEhFrEVHRAu6mFS0cHJU/4V6nlqw5uRmcaGCf0TT19c9HSmSCSTLBUad7rDgsRxNfLxw9m2BKAMBp7fsJ1wufXk2sGT5Thh401MMZImSQmZrvh6MMD+5KXQgWewLLxeugUU4RyfNX/v7eSEziZLA3H+MUBI9o+B70oEGHMQB9iJ7ckcNh9ihj7OFg1H9TOHsbRsX0lD846uwVekcwZzowVWIroMPggN+i2hHBhr5S0yl6pB7fzAkF2JptSQ1OyRg/PwezsVEp4NpKwpVYECquyAre836FFb/lOLeRVQkmB4Gwt2OqIBeSEdIpOwmNz72N5Z2Irw9NWH58smMPRyIDAZ+FVVmatuj0wwZEjkgy9o1hgGBjEe4t/hxx0s6MUXHNr7N4m+0OsB+Jg90B9I4bRgVpBKn8HfDUlh+jBrlg1IJ8TP4/P/7z1cPKDdIYPIH13d0kHg+A4KxRaMLrWnb9MRTN9WaoisiFay7vLb/m78hsckyFYuu4+u6P1wEuyzHuYhUL3aIIlHJzrHggM1q6I0/ZZFJ/F7xlwuD5r7Vs6JaZWY8a0tle/Hx5ViAtbvP9OG/WnTN3PqPOKKUu8cjNGp9aj3vqutn1uZy5SkD/he1JMax7ZwToXTfHp2AOc5I3z0cMv7kpV5PMAjVP/4t6/ez0vE0TRowf/T1kTH5PKFBQ4GQc2+8sGuX7lYoD1WzEmp/0Q62qrzXfkKp1FH8AqXmvJhDMEh6jh0z4NfteemmXVEDLrybME6SxbOFbTptsKpPun4Wonqr+k0jH+HW9HRcDrC0W4T7kaYxbwirivvY8DjvKIymMn+yLYboP37bUsKF3uT4+Nj9lYSiLK5tpfBzLbN3pJScBfkwqVSwlchwwXyubRh6LcI+Oo2BbbS5kGZ9umtRBUZw2NRT4qn3lSPwrZ9emuXbfDCHuqxrPbDPR3GJWgpZfaVQgo/xqTAUbweDsH3T82Sx0quzaFi
C:\Windows\tasks\9c489aee-c648-4976-9804-990be9c41a31-4.job - C:\Program Files\Fraveen 1.4\9c489aee-c648-4976-9804-990be9c41a31-4.exe /jGyMJAs /nzPJIem='Fraveen 1.4' /uCtiSoaI='C:\Program Files\Fraveen 1.4\59601.xpi' /itUWgT=59601 /VfHcxapr='001674' /LDCLZoWbz='0' /HLeuUn='0' /niEuO=D754B75A9D10492F8E61EF7DD10E7797IE /DCRtzJ=db5dd7ea080136f862745fa922227bf3 /wjfHyHPNF=1_34_06_10 /SEmIo=1.34.6.10 /foiMlS=1404162225 /PJNQjyLJg=http://stats.democlientnet.com /fnbiQL=http://errors.democlientnet.com /nxVhIjzhZ=300 /XmwDk=c3748a13-c1f2-41fb-af7f-2e4a9fbfff0b@663a5b10-a481-4f9b-9ea0-fa3e03409e3a.com /xcTqLwrg=0.94 /NnIKhkrdw=ac3748a13c1f241fbaf7f2e4a9fbfff0b663a5b10a4814f9b9ea0fa3e03409e3acom59601 /VHKqh=https://w9u6a2p6.ssl.hwcdn.net/plugin/f ... /59601.rdf /HuQgrC='Fraveen 1.4' /tNLfbA='Feven Shopping Companion' /dNUyd='shift' /XaeuuA=ff /EtPJKWSsm='{"asw":[0, 109051908, 2048]}' /szWufRqQB /YGSVnu /uivRrMU /TPEnPxnq='http://update.democlientnet.com/ff_agen ... pdate.json' /nneDSQYp='task' /fXyNs=''
C:\Windows\tasks\9c489aee-c648-4976-9804-990be9c41a31-5.job - C:\Program Files\Fraveen 1.4\9c489aee-c648-4976-9804-990be9c41a31-5.exe /NHKXbi /nzPJIem='Fraveen 1.4' /itUWgT=59601 /VfHcxapr='001674' /LDCLZoWbz='0' /HLeuUn='0' /niEuO=D754B75A9D10492F8E61EF7DD10E7797IE /DCRtzJ=db5dd7ea080136f862745fa922227bf3 /wjfHyHPNF=1_34_06_10 /foiMlS=1404162225 /PJNQjyLJg=http://stats.democlientnet.com /fnbiQL=http://errors.democlientnet.com /AnthdbSv=http://ipgeoapi.com/ /vUCRWbeVf=http://update.democlientnet.com /sKGpBVeXZ=2 /YQbice=http://logs.democlientnet.com /TPEnPxnq='http://update.democlientnet.com/updater ... pdate.json' /nneDSQYp='task' /fXyNs=''
C:\Windows\tasks\9c489aee-c648-4976-9804-990be9c41a31-5_user.job - C:\Program Files\Fraveen 1.4\9c489aee-c648-4976-9804-990be9c41a31-5.exe /NHKXbi /nzPJIem='Fraveen 1.4' /itUWgT=59601 /VfHcxapr='001674' /LDCLZoWbz='0' /HLeuUn='0' /niEuO=D754B75A9D10492F8E61EF7DD10E7797IE /DCRtzJ=db5dd7ea080136f862745fa922227bf3 /wjfHyHPNF=1_34_06_10 /foiMlS=1404162225 /PJNQjyLJg=http://stats.democlientnet.com /fnbiQL=http://errors.democlientnet.com /AnthdbSv=http://ipgeoapi.com/ /vUCRWbeVf=http://update.democlientnet.com /sKGpBVeXZ=2 /YQbice=http://logs.democlientnet.com /TPEnPxnq='http://update.democlientnet.com/updater ... pdate.json' /UFsACPdkG /nneDSQYp='task' /fXyNs=''
C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\APSnotifierPP1.job - C:\Program Files\AnyProtectEx\AnyProtect.exe --notifier2 A
C:\Windows\tasks\APSnotifierPP2.job - C:\Program Files\AnyProtectEx\AnyProtect.exe --notifier 4
C:\Windows\tasks\APSnotifierPP3.job - C:\Program Files\AnyProtectEx\AnyProtect.exe --notifier 6
C:\Windows\tasks\FoxTab.job - C:\Users\Bobi\AppData\Roaming\FoxTab\UPDATE~1\UPDATE~1.EXE /Check
C:\Windows\tasks\globalUpdateUpdateTaskMachineCore.job - C:\Program Files\globalUpdate\Update\GoogleUpdate.exe /c
C:\Windows\tasks\globalUpdateUpdateTaskMachineUA.job - C:\Program Files\globalUpdate\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\Rocket Updater.job - C:\Users\Bobi\AppData\Roaming\ROCKET~1\UPDATE~1\UPDATE~1.EXE /Check
C:\Windows\tasks\User_Feed_Synchronization-{C740ADAA-A654-4531-AC5F-E0B4364D25C2}.job - C:\Windows\system32\msfeedssync.exe sync

=========Mozilla firefox=========

ProfilePath - C:\Users\Bobi\AppData\Roaming\Mozilla\Firefox\Profiles\lbiupxjx.default

prefs.js - "browser.search.useDBForOrder" - false
prefs.js - "browser.startup.homepage" - "www.google.co.uk"
prefs.js - "keyword.URL" - "http://search.tb.ask.com/search/GGmain. ... searchfor="

"{20a82645-c095-46ed-80e3-08825760534b}"=c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
"avg@toolbar"=C:\ProgramData\AVG SafeGuard toolbar\FireFoxExt\18.1.7.598
"wrc@avast.com"=C:\Program Files\AVAST Software\Avast\WebRep\FF


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 14.0.0.125 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF32_14_0_0_125.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Apple.com/iTunes,version=]
"Description"=iTunes Detector Plug-in
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Apple.com/iTunes,version=1.0]
"Description"=
"Path"=C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plu
Používáním tohoto webu souhlasíte s použiváním cookies pro zobrazení cíleného obsahu, reklamy a pro účely analýzy.
Další informace Zavřít
MS Home Page
Pomoc a podpora
Přihlásit

Řešení svépomocí Zvoleno
Řešení v komunitě
Asistovaná podpora

Zvolte produkt, pro který potřebujete pomoci

Windows Windows
Internet Explorer Internet Explorer
Office Office
Xbox Xbox
Media Player Media Player
Skype Skype
Windows Phone Windows Phone
Další produkty Další produkty

Systém Windows Vista nemůže získat IP adresu z určitých směrovačů nebo z určitých serverů DHCP jiných společností než Microsoft
Tisk Tisk
E-mail E-mail
Překlady článku Překlady článku
ID článku: 928233 - Produkty, které se vztahují k tomuto článku.
Systémový tipTato verze článku se vztahuje k jiné verzi operačního systému Windows, než právě používáte. Obsah v tomto tohoto článku proto pro Vás nemusí být relevantní. Navštivte Centrum řešení pro Windows XP
Rozbalit všechny záložky | Minimalizovat všechny záložky
Collapse imagePříznaky
Předpokládejme následující situaci:

Připojíte počítač se systémem Windows Vista k síti.
V síti je konfigurován směrovač nebo jiné zařízení nakonfigurované jako server DHCP (Dynamic Host Configuration Protocol).
Tento Směrovač nebo jiné zařízení nepodporuje příznak BROADCAST protokolu DHCP.

V tomto scénáři systém Windows Vista nemůže získat IP adresu.
Zpět nahoru | Dejte nám zpětnou vazbu
Collapse imagePříčina
K tomuto problému dochází v důsledku rozdílů v návrhu systémů Windows Vista a Microsoft Windows XP SP2 (Service Pack 2). Konkrétní rozdíl spočívá v tom, že v systému Windows XP s aktualizací SP2 je příznak BROADCAST v paketech zjišťování protokolu DHCP nastaven na hodnotu 0 (zakázáno). V systému Windows Vista není příznak BROADCAST v paketech zjišťování protokolu DHCP zakázán. Některé směrovače a některé servery DHCP od jiných společností než Microsoft proto nemohou zpracovávat pakety zjišťování protokolu DHCP.

Chcete-li, abychom tyto potíže vyřešili za vás, přejděte k části Automatická oprava. Chcete-li tyto potíže vyřešit sami, přejděte k části Manuální oprava.
Zpět nahoru | Dejte nám zpětnou vazbu
Collapse imageAutomatická oprava
Chcete-li tyto potíže odstranit automaticky, klikněte na tlačítko nebo odkaz Opravit. V dialogovém okně Stažení souboru klikněte na položku Spustit a postupujte podle kroků v průvodci opravou.

Opravit tyto potíže
Microsoft Fix it 50357



Poznámka: Je možné, že tento průvodce bude k dispozici pouze v angličtině, tato automatická oprava však funguje i pro ostatní jazykové verze systému Windows.

Poznámka: Pokud právě nejste u počítače, který má tyto potíže, můžete opravu uložit na jednotku USB Flash nebo na disk CD a spustit ji v příslušném počítači později.
Zpět nahoru | Dejte nám zpětnou vazbu
Collapse imageManuální oprava
Důležité: Tato část, metoda nebo úkol obsahuje kroky, které popisují úpravu registru. V případě úpravy registru nesprávným způsobem však mohou nastat závažné problémy. Proto vždy pečlivě kontrolujte, zda postupujete přesně podle těchto kroků. Jako dodatečnou ochranu registr před úpravami zálohujte. Potom můžete v případě problému registr obnovit. Další informace o zálohování a obnovení registru naleznete v následujícím článku znalostní báze Microsoft Knowledge Base:
322756 Zálohování, úpravy a obnovení registru v systémech Windows XP a Windows Server 2003
Chcete-li tento problém vyřešit sami, zakažte v systému Windows Vista příznak BROADCAST protokolu DHCP. Postupujte takto:

Klikněte na tlačítko Start
Tlačítko Start
, do pole Zahájit hledání zadejte regedit a potom v seznamu Programy klikněte na položku regedit.

Povolení v nástroji Řízení uživatelských účtů
Jestliže se zobrazí výzva k zadání hesla správce nebo k potvrzení, zadejte heslo nebo klikněte na tlačítko Pokračovat.
Vyhledejte následující podklíč registru a klikněte na něj:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{GUID}
V této cestě registru klikněte na podklíč (GUID) odpovídající síťovému adaptéru, který je k síti připojen.
V nabídce Úpravy přejděte na příkaz Nový a pak klikněte na položku Hodnota DWORD (32bitová).
Do pole Nová hodnota #1 zadejte řetězec DhcpConnEnableBcastFlagToggle a stiskněte klávesu ENTER.
Klikněte pravým tlačítkem na položku DhcpConnEnableBcastFlagToggle a pak klikněte na příkaz Změnit.
Do pole Údaj hodnoty zadejte hodnotu 1 a klikněte na tlačítko OK.
Ukončete program Editor registru.

Po nastavení tohoto klíče registru na hodnotu 1 se systém Windows Vista nejdříve pokusí získat IP adresu s použitím příznaku BROADCAST v paketech zjišťování protokolu DHCP. Pokud se tento postup nezdaří, pokusí se systém získat IP adresu bez použití příznaku BROADCAST v paketech zjišťování protokolu DHCP.
Zpět nahoru | Dejte nám zpětnou vazbu
Collapse imageDalší informace
Víte-li, že směrovač nebo server DHCP od jiné společnosti než Microsoft nepodporuje příznak BROADCAST protokolu DHCP, můžete namísto použití klíče registru DhcpConnEnableBcastFlagToggle nastavit následující položku registru podle dále uvedeného postupu.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{GUID}


Název hodnoty: DhcpConnForceBroadcastFlag
Typ hodnoty: REG_DWORD
Údaj hodnoty: 0
Poznámka: Údaj hodnoty 0 tuto položku registru zakáže. Pomocí této položky registru můžete systému Windows Vista zabránit použití příznaku BROADCAST protokolu DHCP. Nastavíte-li tuto položku registru, systém Windows Vista nebude nikdy používat příznak BROADCAST protokolu DHCP.

Poznámka: Tento problém se nevyskytuje v systému Windows 7. Klíč registru DhcpConnEnableBcastFlagToggle je ve výchozím nastavení nastaven na hodnotu 1.
Zpět nahoru | Dejte nám zpětnou vazbu
Collapse imageVlastnosti
ID článku: 928233 - Poslední aktualizace: 24. září 2011 - Revize: 5.0
Informace v tomto článku jsou určeny pro produkt:

Windows Vista Business
Windo

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=l3codecp.acm
"vidc.cvid"=iccvid.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"vidc.XVID"=xvidvfw.dll
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv

======List of files/folders created in the last 1 month======

2014-07-03 18:02:16 ----D---- C:\ProgramData\102F4
2014-07-03 12:37:54 ----D---- C:\Program Files\Mozilla Maintenance Service
2014-07-03 12:37:34 ----D---- C:\Program Files\Mozilla Firefox
2014-07-03 11:45:20 ----D---- C:\temp
2014-07-03 11:42:09 ----D---- C:\Program Files\Marvell
2014-07-03 11:33:45 ----A---- C:\Windows\system32\igfxzoom.exe
2014-07-03 11:33:45 ----A---- C:\Windows\system32\igfxtray.exe
2014-07-03 11:33:45 ----A---- C:\Windows\system32\igfxsrvc.exe
2014-07-03 11:33:45 ----A---- C:\Windows\system32\igfxpers.exe
2014-07-03 11:33:45 ----A---- C:\Windows\system32\igfxext.exe
2014-07-03 11:33:45 ----A---- C:\Windows\system32\igfxcfg.exe
2014-07-03 11:33:45 ----A---- C:\Windows\system32\hkcmd.exe
2014-07-03 11:33:42 ----A---- C:\Windows\system32\igxprd32.dll
2014-07-03 11:33:42 ----A---- C:\Windows\system32\igxpgd32.dll
2014-07-03 11:33:42 ----A---- C:\Windows\system32\igxpdx32.dll
2014-07-03 11:33:42 ----A---- C:\Windows\system32\igxpdv32.dll
2014-07-03 11:33:42 ----A---- C:\Windows\system32\igmedkrn.dll
2014-07-03 11:33:42 ----A---- C:\Windows\system32\igfxsrvc.dll
2014-07-03 11:33:42 ----A---- C:\Windows\system32\igfxCoIn_v4864.dll
2014-07-03 11:33:42 ----A---- C:\Windows\system32\drivers\igxpmp32.sys
2014-07-03 11:33:41 ----A---- C:\Windows\system32\igfxress.dll
2014-07-03 11:33:40 ----A---- C:\Windows\system32\igfxpph.dll
2014-07-03 11:33:40 ----A---- C:\Windows\system32\igfxexps.dll
2014-07-03 11:33:40 ----A---- C:\Windows\system32\igfxdo.dll
2014-07-03 11:33:40 ----A---- C:\Windows\system32\igfxdev.dll
2014-07-03 11:33:40 ----A---- C:\Windows\system32\ig4icd32.dll
2014-07-03 11:33:40 ----A---- C:\Windows\system32\ig4dev32.dll
2014-07-03 11:33:40 ----A---- C:\Windows\system32\hccutils.dll
2014-07-03 11:27:55 ----A---- C:\Windows\system32\drivers\WdfLdr.sys
2014-07-03 11:27:55 ----A---- C:\Windows\system32\drivers\Wdf01000.sys
2014-07-03 11:25:33 ----A---- C:\Windows\system32\WdfCoInstaller01009.dll
2014-07-03 11:25:33 ----A---- C:\Windows\system32\Vxdif.dll
2014-07-03 11:25:32 ----A---- C:\Windows\system32\drivers\Apfiltr.sys
2014-07-02 16:39:19 ----D---- C:\Users\Bobi\AppData\Roaming\AVAST Software
2014-07-02 16:35:48 ----A---- C:\Windows\system32\drivers\aswTdi.sys
2014-07-02 16:35:47 ----A---- C:\Windows\system32\drivers\aswVmm.sys
2014-07-02 16:35:46 ----N---- C:\Windows\system32\drivers\aswSP.sys
2014-07-02 16:35:45 ----A---- C:\Windows\system32\drivers\aswRvrt.sys
2014-07-02 16:35:44 ----A---- C:\Windows\system32\drivers\aswSnx.sys
2014-07-02 16:35:43 ----A---- C:\Windows\system32\drivers\aswMonFlt.sys
2014-07-02 16:35:41 ----N---- C:\Windows\system32\drivers\aswFsBlk.sys
2014-07-02 16:35:41 ----A---- C:\Windows\system32\drivers\aswRdr.sys
2014-07-02 16:35:37 ----A---- C:\Windows\system32\drivers\aswKbd.sys
2014-07-02 16:35:34 ----A---- C:\Windows\system32\aswBoot.exe
2014-07-02 16:35:29 ----N---- C:\Windows\avastSS.scr
2014-07-02 16:32:49 ----D---- C:\Program Files\AVAST Software
2014-07-02 15:51:34 ----D---- C:\Program Files\trend micro
2014-07-02 15:51:33 ----D---- C:\rsit
2014-07-01 20:31:37 ----D---- C:\Users\Bobi\AppData\Roaming\PeerNetworking
2014-07-01 17:08:06 ----D---- C:\Program Files\VS Revo Group
2014-07-01 16:44:38 ----D---- C:\ProgramData\Spybot - Search & Destroy
2014-06-30 22:30:56 ----D---- C:\Program Files\predm
2014-06-30 22:03:56 ----D---- C:\Program Files\globalUpdate
2014-06-30 22:03:55 ----D---- C:\Program Files\Fraveen 1.4
2014-06-30 22:03:49 ----D---- C:\Program Files\video MediaPlay-Air
2014-06-30 18:52:28 ----D---- C:\Program Files\Amazon
2014-06-30 18:52:10 ----D---- C:\Program Files\Amazon Browser Bar
2014-06-30 18:48:37 ----D---- C:\Program Files\Systweak Support Dock
2014-06-30 17:49:01 ----D---- C:\Program Files\System Optimizer Pro
2014-06-30 17:41:10 ----D---- C:\ProgramData\2308189059
2014-06-29 21:07:19 ----D---- C:\Program Files\SBLink
2014-06-29 21:05:49 ----A---- C:\ProgramData\Setup.exe
2014-06-29 20:48:23 ----D---- C:\ProgramData\Browser
2014-06-29 18:26:15 ----A---- C:\Windows\system32\drivers\{57f143ae-1ecd-493d-9ddb-32c45a3cecd5}t.sys
2014-06-29 16:16:12 ----D---- C:\ProgramData\NTIReg
2014-06-29 16:14:08 ----D---- C:\Windows\system32\drivers\nti
2014-06-29 16:13:44 ----D---- C:\Program Files\NTI
2014-06-29 13:04:54 ----D---- C:\Program Files\CouponDownloader
2014-06-29 11:09:07 ----D---- C:\Users\Bobi\AppData\Roaming\FoxTab
2014-06-28 21:28:57 ----D---- C:\Users\Bobi\AppData\Roaming\vlc
2014-06-28 19:12:50 ----D---- C:\ProgramData\IePluginServices
2014-06-28 19:12:50 ----D---- C:\Program Files\SupTab
2014-06-28 19:05:13 ----D---- C:\Users\Bobi\AppData\Roaming\uPlayer
2014-06-28 18:52:42 ----D---- C:\ProgramData\Radsteroids
2014-06-28 18:52:26 ----D---- C:\Program Files\LPT
2014-06-28 18:35:59 ----D---- C:\Program Files\4B5F3986-688D-4EE0-8390-82983E6E96A7
2014-06-28 18:33:15 ----D---- C:\Users\Bobi\AppData\Roaming\Plarium
2014-06-28 18:33:14 ----D---- C:\Program Files\004
2014-06-28 18:09:20 ----D---- C:\Program Files\Browsersafeguard
2014-06-28 18:08:18 ----D---- C:\Users\Bobi\AppData\Roaming\igdhbblpcellaljokkpfhcjlagemhgjl
2014-06-28 18:08:10 ----D---- C:\Program Files\Common Files\Umbrella
2014-06-28 18:08:10 ----D---- C:\Program Files\Common Files\IMGUpdater
2014-06-28 01:23:25 ----D---- C:\Program Files\McAfee Security Scan
2014-06-27 21:10:57 ----D---- C:\Users\Bobi\AppData\Roaming\PC TEKNIX
2014-06-27 21:10:35 ----D---- C:\Users\Bobi\AppData\Roaming\StormFall
2014-06-27 21:07:34 ----D---- C:\ProgramData\UAB
2014-06-27 21:06:33 ----D---- C:\ProgramData\Driver Support
2014-06-27 21:04:27 ----D---- C:\Program Files\Driver Support
2014-06-27 21:04:22 ----D---- C:\Users\Bobi\AppData\Roaming\RocketUpdater
2014-06-27 21:03:00 ----D---- C:\Users\Bobi\AppData\Roaming\Systweak
2014-06-27 21:02:58 ----A---- C:\Windows\system32\roboot.exe
2014-06-16 23:32:58 ----D---- C:\Program Files\ALLMediaServer
2014-06-11 23:14:02 ----D---- C:\Users\Bobi\AppData\Roaming\NapiProjekt
2014-06-11 22:56:20 ----D---- C:\Program Files\ALLPlayer Remote
2014-06-11 22:54:55 ----D---- C:\Program Files\NapiProjekt
2014-06-04 21:12:50 ----D---- C:\ProgramData\AVG Secure Search
2014-06-04 19:17:18 ----D---- C:\Program Files\Music Toolbar

======List of files/folders modified in the last 1 month======

2014-07-03 18:54:55 ----D---- C:\Windows\Temp
2014-07-03 18:52:28 ----D---- C:\Windows\System32
2014-07-03 18:52:27 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-07-03 18:33:41 ----D---- C:\Program Files\Google
2014-07-03 18:33:40 ----SHD---- C:\Windows\Installer
2014-07-03 18:33:40 ----D---- C:\Windows\Tasks
2014-07-03 18:26:58 ----RD---- C:\Program Files
2014-07-03 18:26:13 ----D---- C:\Windows\system32\Tasks
2014-07-03 18:02:16 ----HD---- C:\ProgramData
2014-07-03 18:01:13 ----D---- C:\Windows
2014-07-03 18:00:31 ----D---- C:\ProgramData\TorchCrashHandler
2014-07-03 17:58:37 ----D---- C:\Windows\system32\catroot
2014-07-03 17:57:21 ----SHD---- C:\Config.Msi
2014-07-03 17:56:23 ----A---- C:\Windows\system32\results.txt
2014-07-03 17:49:43 ----D---- C:\Windows\inf
2014-07-03 17:49:35 ----SHD---- C:\System Volume Information
2014-07-03 12:03:45 ----SD---- C:\ProgramData\Microsoft
2014-07-03 12:01:16 ----D---- C:\Windows\Prefetch
2014-07-03 11:49:34 ----D---- C:\Windows\system32\drivers\en-US
2014-07-03 11:49:33 ----D---- C:\Windows\system32\wbem
2014-07-03 11:49:33 ----D---- C:\Windows\system32\drivers
2014-07-03 11:46:25 ----D---- C:\ProgramData\Dell
2014-07-03 11:28:32 ----D---- C:\Windows\winsxs
2014-07-03 11:28:19 ----D---- C:\Windows\system32\catroot2
2014-07-03 11:27:18 ----D---- C:\Program Files\DellTPad
2014-07-02 16:44:41 ----D---- C:\ProgramData\McAfee Security Scan
2014-07-02 16:31:35 ----D---- C:\ProgramData\AVAST Software
2014-07-02 07:55:58 ----D---- C:\Windows\system32\WDI
2014-07-01 22:06:21 ----D---- C:\Windows\system32\en-US
2014-07-01 18:29:05 ----D---- C:\Windows\tracing
2014-07-01 18:27:35 ----D---- C:\Windows\ModemLogs
2014-07-01 16:58:26 ----D---- C:\Windows\Microsoft.NET
2014-07-01 16:57:19 ----RSD---- C:\Windows\assembly
2014-07-01 16:06:04 ----D---- C:\Windows\system32\drivers\etc
2014-06-30 23:09:25 ----D---- C:\Users\Bobi\AppData\Roaming\Apple Computer
2014-06-30 23:09:24 ----D---- C:\ProgramData\Apple
2014-06-30 23:09:24 ----D---- C:\Program Files\Common Files\Apple
2014-06-30 22:40:29 ----D---- C:\Users\Bobi\AppData\Roaming\Dropbox
2014-06-30 22:40:25 ----D---- C:\Users\Bobi\AppData\Roaming\DropboxMaster
2014-06-30 22:27:37 ----D---- C:\Program Files\Optimizer Pro
2014-06-30 22:13:27 ----AD---- C:\ProgramData\TEMP
2014-06-30 22:04:49 ----D---- C:\Program Files\SearchProtect
2014-06-30 21:54:59 ----A---- C:\Windows\system32\FlashPlayerApp.exe
2014-06-30 18:48:29 ----D---- C:\Program Files\The Sea App (Firefox)
2014-06-30 18:04:26 ----D---- C:\Program Files\Dell
2014-06-30 18:00:21 ----D---- C:\Program Files\Cisco
2014-06-30 17:39:07 ----HD---- C:\Program Files\InstallShield Installation Information
2014-06-30 17:26:36 ----D---- C:\Windows\system32\Lang
2014-06-30 17:26:36 ----D---- C:\Program Files\Intel
2014-06-30 17:07:02 ----A---- C:\Windows\win.ini
2014-06-30 16:22:59 ----D---- C:\Windows\system32\migration
2014-06-30 16:22:56 ----D---- C:\Windows\system32\XPSViewer
2014-06-30 02:35:05 ----D---- C:\Windows\system32\MRT
2014-06-30 02:31:30 ----D---- C:\Windows\Debug
2014-06-29 18:53:51 ----D---- C:\Program Files\Common Files\AVG Secure Search
2014-06-29 16:11:18 ----D---- C:\Windows\Downloaded Installations
2014-06-29 14:58:59 ----SHD---- C:\Boot
2014-06-29 14:58:56 ----A---- C:\Windows\Reimage.ini
2014-06-29 12:44:46 ----D---- C:\Program Files\Common Files
2014-06-29 12:42:55 ----D---- C:\Program Files\Common Files\Adobe
2014-06-29 12:42:55 ----D---- C:\Program Files\Adobe
2014-06-29 12:42:53 ----D---- C:\ProgramData\Adobe
2014-06-29 11:21:00 ----D---- C:\Windows\Panther
2014-06-29 11:21:00 ----D---- C:\Windows\Minidump
2014-06-29 11:21:00 ----D---- C:\Windows\Logs
2014-06-28 18:49:19 ----D---- C:\Windows\Resources
2014-06-28 18:09:35 ----HD---- C:\Windows\system32\GroupPolicy
2014-06-27 22:27:34 ----SD---- C:\Users\Bobi\AppData\Roaming\Microsoft
2014-06-20 20:23:56 ----D---- C:\Muza
2014-06-11 23:23:19 ----D---- C:\Program Files\ALLPlayer

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2014-07-02 49944]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2014-07-02 178304]
R0 BsStor;InCD Storage Helper Driver; C:\Windows\System32\DRIVERS\bsstor.sys [2002-06-06 9344]
R1 {57f143ae-1ecd-493d-9ddb-32c45a3cecd5}t;{57f143ae-1ecd-493d-9ddb-32c45a3cecd5}t; C:\Windows\system32\drivers\{57f143ae-1ecd-493d-9ddb-32c45a3cecd5}t.sys [2014-06-28 55224]
R1 {ba099a85-e825-4802-83e7-d386a5b4a734}t;{ba099a85-e825-4802-83e7-d386a5b4a734}t; C:\Windows\system32\drivers\{ba099a85-e825-4802-83e7-d386a5b4a734}t.sys [2014-04-24 55232]
R1 aswKbd;aswKbd; \??\C:\Windows\system32\drivers\aswKbd.sys [2014-07-02 26136]
R1 aswRdr;aswRdr; \??\C:\Windows\system32\drivers\aswRdr.sys [2014-07-02 54832]
R1 aswSnx;aswSnx; \??\C:\Windows\system32\drivers\aswSnx.sys [2014-07-02 774392]
R1 aswSP;aswSP; \??\C:\Windows\system32\drivers\aswSP.sys [2014-07-02 403440]
R1 aswTdi;aswTdi; \??\C:\Windows\system32\drivers\aswTdi.sys [2014-07-02 57672]
R1 netfilter;netfilter; C:\Windows\system32\drivers\netfilter.sys [2014-06-02 47488]
R2 aswFsBlk;aswFsBlk; \??\C:\Windows\system32\drivers\aswFsBlk.sys [2014-07-02 35656]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2014-07-02 70384]
R2 BsUDF;InCD UDF Driver; C:\Windows\system32\drivers\BsUDF.sys [2002-09-13 448640]
R2 mdmxsdk;mdmxsdk; C:\Windows\system32\DRIVERS\mdmxsdk.sys [2006-06-19 12672]
R2 rimmptsk;rimmptsk; C:\Windows\system32\DRIVERS\rimmptsk.sys [2007-02-24 39936]
R2 rimsptsk;rimsptsk; C:\Windows\system32\DRIVERS\rimsptsk.sys [2007-01-23 42496]
R2 rismxdp;Ricoh xD-Picture Card Driver; C:\Windows\system32\DRIVERS\rixdptsk.sys [2007-03-21 37376]
R2 RMCAST;RMCAST (Pgm) Protocol Driver; C:\Windows\system32\DRIVERS\RMCAST.sys [2013-07-08 113664]
R2 XAudio;XAudio; C:\Windows\system32\DRIVERS\xaudio.sys [2006-08-04 8192]
R3 ApfiltrService;Alps Touch Pad Filter Driver for Windows x86; C:\Windows\system32\DRIVERS\Apfiltr.sys [2010-04-15 252536]
R3 BCM43XX;Dell Wireless WLAN Card Driver; C:\Windows\system32\DRIVERS\bcmwl6.sys [2007-12-06 1044984]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 26840]
R3 HdAudAddService;Microsoft 1.1 UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
R3 HSF_DPV;HSF_DPV; C:\Windows\system32\DRIVERS\HSX_DPV.sys [2006-11-02 986624]
R3 HSXHWAZL;HSXHWAZL; C:\Windows\system32\DRIVERS\HSXHWAZL.sys [2006-11-02 206848]
R3 ialm;ialm; C:\Windows\system32\DRIVERS\igxpmp32.sys [2007-08-24 5776928]
R3 IntcHdmiAddService;Intel(R) High Definition Audio HDMI Service; C:\Windows\system32\drivers\IntcHdmi.sys [2007-06-06 111616]
R3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2013-09-02 82432]
R3 winachsf;winachsf; C:\Windows\system32\DRIVERS\HSX_CNXT.sys [2006-11-02 659968]
R3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2006-11-02 82560]
R3 yukonwlh;NDIS6.0 Miniport Driver for Marvell Yukon Ethernet Controller; C:\Windows\system32\DRIVERS\yk60x86.sys [2007-09-17 278528]
S0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys []
S1 F06DEFF2-5B9C-490D-910F-35D3A9119622;F06DEFF2-5B9C-490D-910F-35D3A9119622; \??\C:\Program Files\Music Toolbar\Datamngr\setmgrc1.cfg []
S1 netfilter2;netfilter2; C:\Windows\system32\drivers\netfilter2.sys []
S3 BCM42RLY;BCM42RLY; C:\Windows\system32\drivers\BCM42RLY.sys []
S3 BelkinH43XX;Belkin 802.11 USB Network Adapter Driver; C:\Windows\system32\DRIVERS\bcmwlhigh6.sys [2012-08-01 1740904]
S3 drmkaud;Microsoft Kernel DRM Audio Descrambler; C:\Windows\system32\drivers\drmkaud.sys [2006-11-02 5632]
S3 HSFHWAZL;HSFHWAZL; C:\Windows\system32\DRIVERS\VSTAZL3.SYS [2006-11-02 200704]
S3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2007-09-13 1925632]
S3 MSKSSRV;Microsoft Streaming Service Proxy; C:\Windows\system32\drivers\MSKSSRV.sys [2006-11-02 8192]
S3 MSPCLOCK;Microsoft Streaming Clock Proxy; C:\Windows\system32\drivers\MSPCLOCK.sys [2006-11-02 5888]
S3 MSPQM;Microsoft Streaming Quality Manager Proxy; C:\Windows\system32\drivers\MSPQM.sys [2006-11-02 5504]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\Windows\system32\drivers\MSTEE.sys [2006-11-02 6016]
S3 NWADI;NWADI Bus Enumerator; C:\Windows\system32\DRIVERS\NWADIenum.sys [2007-06-01 178176]
S3 PCASp50;PCASp50 NDIS Protocol Driver; C:\Windows\System32\Drivers\PCASp50.sys [2007-05-30 27072]
S3 STHDA;SigmaTel High Definition Audio CODEC; C:\Windows\system32\drivers\stwrt.sys []
S3 usb_rndisx;USB RNDIS Adapter; C:\Windows\system32\DRIVERS\usb8023x.sys [2006-11-02 14848]
S3 USBAAPL;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl.sys []
S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2006-11-02 39936]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-07-02 50344]
R2 CouponDownloaderService;CouponDownloaderService; C:\Program Files\4B5F3986-688D-4EE0-8390-82983E6E96A7\CouponDownloaderService.exe [2014-06-06 151040]
R2 EvtEng;Intel(R) PROSet/Wireless Event Log; C:\Program Files\Intel\Wireless\Bin\EvtEng.exe [2007-07-25 647168]
R2 GlobalUpdater;GlobalUpdater; C:\Program Files\Common Files\IMGUpdater\IMGUpdater.exe [2014-06-18 378152]
R2 iprip;@%Systemroot%\system32\iprip.dll,-200; C:\Windows\System32\svchost.exe [2006-11-02 22016]
R2 LPTSystemUpdater;LPT System Updater Service; C:\Program Files\LPT\srpts.exe [2014-03-25 36632]
R2 Radsteroids;Radsteroids; C:\ProgramData\Radsteroids\RadsteroidsService.exe [2014-04-17 63184]
R2 RegSrvc;Intel(R) PROSet/Wireless Registry Service; C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe [2007-07-25 327680]
R2 sprtsvc_dellsupportcenter;SupportSoft Sprocket Service (dellsupportcenter); C:\Program Files\Dell Support Center\bin\sprtsvc.exe [2007-11-15 202544]
R2 TorchCrashHandler;Torch Crash Handler; C:\Users\Bobi\AppData\Local\Torch\Update\TorchCrashHandler.exe [2013-07-20 1206624]
R2 vToolbarUpdater18.1.7;vToolbarUpdater18.1.7; C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\18.1.7\ToolbarUpdater.exe [2014-06-04 1808408]
R2 wltrysvc;Dell Wireless WLAN Tray Service; C:\Windows\System32\WLTRYSVC.EXE [2007-12-08 24064]
R2 XAudioService;XAudioService; C:\Windows\system32\DRIVERS\xaudio.exe [2006-08-04 386560]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 globalUpdate;globalUpdate Update Service (globalUpdate); C:\Program Files\globalUpdate\Update\GoogleUpdate.exe [2014-06-30 68608]
S2 IAANTMON;Intel(R) Matrix Storage Event Monitor; C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe []
S2 rqpbhevlkc32;rqpbhevlkc32; C:\Program Files\004\rqpbhevlkc32.exe run options=01100010040000000000000000000000 sourceguid=4B5F3986-688D-4EE0-8390-82983E6E96A7 []
S2 sysTPLService.exe;sysTPLService; C:\Program Files\sysTPL\sysTPLService.exe []
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-06-30 262320]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 globalUpdatem;globalUpdate Update Service (globalUpdatem); C:\Program Files\globalUpdate\Update\GoogleUpdate.exe [2014-06-30 68608]
S3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2013-05-31 553288]
S3 McComponentHostService;McAfee Security Scan Component Host Service; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe []
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2014-04-22 119408]
S3 WPFFontCache_v0400;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe,-100; C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S4 IePluginServices;IePlugin Services; C:\ProgramData\IePluginServices\PluginService.exe -service []
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 Update BuzzSearch;Update BuzzSearch; C:\Program Files\BuzzSearch\updateBuzzSearch.exe []
S4 Util BuzzSearch;Util BuzzSearch; C:\Program Files\BuzzSearch\bin\utilBuzzSearch.exe []

-----------------EOF-----------------

Zdravim

Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner

• Ulozte nejlepe na plochu
• Ukoncete vsechny programy
• Kliknete na Scan a nasledne Clean
• Probehne oprava, restart PC a pak se objevi log, pripadne bude ulozen ve slozce c:\AdwCleaner\AdwCleaner[S?].txt, ten sem vlozte

Stahnete Zoek.exe http://hijackthis.nl/smeenk/ a ulozte jej na plochu

• Pokud pouzivate Win Vista ci W7, kliknete na Zoek pravym a dejte Run As Administrator ci Spustit jako spravce
• Do okna vlozte skript nize

• Kód: Vybrat vše

  autoclean;
  emptyclsid;
  iedefaults;
  FFdefaults;
  CHRdefaults;
  emptyalltemp;
  resethosts;
  

• Nasledne kliknete na Run Script
• PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem

log adw:
# AdwCleaner v3.214 - Report created 03/07/2014 at 20:08:25
# Updated 29/06/2014 by Xplode
# Operating System : Windows Vista (TM) Home Premium (32 bits)
# Username : Bobi - BOBI-PC
# Running from : C:\Users\Bobi\Desktop\adwcleaner_3.214.exe
# Option : Clean

***** [ Services ] *****

[#] Service Deleted : CouponDownloaderService
[#] Service Deleted : F06DEFF2-5B9C-490D-910F-35D3A9119622
[#] Service Deleted : globalUpdate
[#] Service Deleted : globalUpdatem
[#] Service Deleted : GlobalUpdater
[#] Service Deleted : IePluginServices
[#] Service Deleted : LPTSystemUpdater
[#] Service Deleted : rqpbhevlkc32
[#] Service Deleted : torchcrashhandler
[#] Service Deleted : Update BuzzSearch
[#] Service Deleted : Util BuzzSearch
[#] Service Deleted : vToolbarUpdater18.1.7

***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\2308189059
Folder Deleted : C:\ProgramData\apn
Folder Deleted : C:\ProgramData\AVG Secure Search
Folder Deleted : C:\ProgramData\Browser
Folder Deleted : C:\ProgramData\IePluginServices
Folder Deleted : C:\ProgramData\ParetoLogic
Folder Deleted : C:\ProgramData\PC Optimizer Pro
Folder Deleted : C:\ProgramData\Radsteroids
Folder Deleted : C:\ProgramData\torchcrashhandler
Folder Deleted : C:\Program Files\004
Folder Deleted : C:\Program Files\Amazon Browser Bar
Folder Deleted : C:\Program Files\BearShare Applications
Folder Deleted : C:\Program Files\Browsersafeguard
Folder Deleted : C:\Program Files\CouponDownloader
Folder Deleted : C:\Program Files\globalUpdate
Folder Deleted : C:\Program Files\LPT
Folder Deleted : C:\Program Files\Mobogenie
Folder Deleted : C:\Program Files\Music Toolbar
Folder Deleted : C:\Program Files\Optimizer Pro
Folder Deleted : C:\Program Files\predm
Folder Deleted : C:\Program Files\SearchProtect
Folder Deleted : C:\Program Files\SupTab
Folder Deleted : C:\Program Files\System Optimizer Pro
Folder Deleted : C:\Program Files\Systweak Support Dock
Folder Deleted : C:\Program Files\Common Files\AVG Secure Search
Folder Deleted : C:\Program Files\Common Files\IMGUpdater
Folder Deleted : C:\Program Files\Common Files\Umbrella
Folder Deleted : C:\Users\Bobi\AppData\Local\genienext
Folder Deleted : C:\Users\Bobi\AppData\Local\globalUpdate
Folder Deleted : C:\Users\Bobi\AppData\Local\LPT
Folder Deleted : C:\Users\Bobi\AppData\Local\Mobogenie
Folder Deleted : C:\Users\Bobi\AppData\Local\PriceMeter
Folder Deleted : C:\Users\Bobi\AppData\Local\Radsteroids
Folder Deleted : C:\Users\Bobi\AppData\Local\SearchProtect
Folder Deleted : C:\Users\Bobi\AppData\Local\Smartbar
Folder Deleted : C:\Users\Bobi\AppData\Local\torch
Folder Deleted : C:\Users\Bobi\AppData\Local\WeatherAlerts
Folder Deleted : C:\Users\Bobi\AppData\Local\Temp\NetCrawl
Folder Deleted : C:\Users\Bobi\AppData\LocalLow\AVG SafeGuard toolbar
Folder Deleted : C:\Users\Bobi\AppData\LocalLow\Delta
Folder Deleted : C:\Users\Bobi\AppData\LocalLow\Mysearchdial
Folder Deleted : C:\Users\Bobi\AppData\LocalLow\searchresultstb
Folder Deleted : C:\Users\Bobi\AppData\LocalLow\Smartbar
Folder Deleted : C:\Users\Bobi\AppData\Roaming\BabSolution
Folder Deleted : C:\Users\Bobi\AppData\Roaming\DriverCure
Folder Deleted : C:\Users\Bobi\AppData\Roaming\FoxTab
Folder Deleted : C:\Users\Bobi\AppData\Roaming\igdhbblpcellaljokkpfhcjlagemhgjl
Folder Deleted : C:\Users\Bobi\AppData\Roaming\newnext.me
Folder Deleted : C:\Users\Bobi\AppData\Roaming\ParetoLogic
Folder Deleted : C:\Users\Bobi\AppData\Roaming\PC TEKNIX
Folder Deleted : C:\Users\Bobi\AppData\Roaming\RocketUpdater
Folder Deleted : C:\Users\Bobi\AppData\Roaming\Systweak
Folder Deleted : C:\Users\Bobi\AppData\Roaming\Tlapia
Folder Deleted : C:\Users\Bobi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BrowserDefender
Folder Deleted : C:\Users\Bobi\Documents\Mobogenie
Folder Deleted : C:\Users\Bobi\Documents\Optimizer Pro
Folder Deleted : C:\Users\Bobi\Documents\PC Cleaner
Folder Deleted : C:\Users\wangjihua\AppData\Local\Mobogenie
Folder Deleted : C:\Users\Bobi\AppData\Roaming\Mozilla\Firefox\Profiles\lbiupxjx.default\mapsgalaxy_39
Folder Deleted : C:\Users\Bobi\AppData\Roaming\Mozilla\Firefox\Profiles\lbiupxjx.default\Extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
Folder Deleted : C:\Users\Bobi\AppData\Roaming\Mozilla\Firefox\Profiles\lbiupxjx.default\Extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}
Folder Deleted : C:\Users\Bobi\AppData\Roaming\Mozilla\Firefox\Profiles\lbiupxjx.default\Extensions\{ecaa9181-d92a-47b9-8e14-bef9680f204b}
Folder Deleted : C:\Users\Bobi\AppData\Roaming\Mozilla\Firefox\Profiles\lbiupxjx.default\Extensions\39ffxtbr@MapsGalaxy_39.com
Folder Deleted : C:\Users\Bobi\AppData\Roaming\Mozilla\Firefox\Profiles\lbiupxjx.default\Extensions\c3748a13-c1f2-41fb-af7f-2e4a9fbfff0b@663a5b10-a481-4f9b-9ea0-fa3e03409e3a.com
Folder Deleted : C:\Users\Bobi\AppData\Roaming\Mozilla\Firefox\Profiles\lbiupxjx.default\Extensions\ff806580-6db3-4c09-ba06-d6caf0e99172@8453cb25-7fef-4ed5-8934-b08be5605617.com
File Deleted : C:\END
File Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\smartbar_3312014.exe.lnk
File Deleted : C:\Windows\system32\roboot.exe
File Deleted : C:\Users\Bobi\daemonprocess.txt
File Deleted : C:\Users\Bobi\AppData\Local\AnyProtectScannerSetup.exe
File Deleted : C:\Users\Bobi\AppData\Local\mysearchdial-speeddial.crx
File Deleted : C:\Users\Bobi\AppData\Roaming\aps.uninstall.scan.results
File Deleted : C:\Users\Bobi\Desktop\MySearchDial.url
File Deleted : C:\Users\Bobi\AppData\Roaming\Mozilla\Firefox\Profiles\lbiupxjx.default\bprotector_extensions.sqlite
File Deleted : C:\Users\Bobi\AppData\Roaming\Mozilla\Firefox\Profiles\lbiupxjx.default\bprotector_prefs.js
File Deleted : C:\Users\Bobi\AppData\Roaming\Mozilla\Firefox\Profiles\lbiupxjx.default\invalidprefs.js
File Deleted : C:\Users\Bobi\AppData\Roaming\Mozilla\Firefox\Profiles\lbiupxjx.default\searchplugins\Mysearchdial.xml
File Deleted : C:\Users\Bobi\AppData\Roaming\Mozilla\Firefox\Profiles\lbiupxjx.default\searchplugins\Web Search.xml
File Deleted : C:\Users\Bobi\AppData\Roaming\Mozilla\Firefox\Profiles\lbiupxjx.default\user.js
File Deleted : C:\Windows\Tasks\APSnotifierPP1.job
File Deleted : C:\Windows\System32\Tasks\APSnotifierPP1
File Deleted : C:\Windows\Tasks\APSnotifierPP2.job
File Deleted : C:\Windows\System32\Tasks\APSnotifierPP2
File Deleted : C:\Windows\Tasks\APSnotifierPP3.job
File Deleted : C:\Windows\System32\Tasks\APSnotifierPP3
File Deleted : C:\Windows\System32\Tasks\FinishInstall igdhbblpcellaljokkpfhcjlagemhgjl
File Deleted : C:\Windows\Tasks\FoxTab.job
File Deleted : C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job
File Deleted : C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineCore
File Deleted : C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job
File Deleted : C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineUA
File Deleted : C:\Windows\System32\Tasks\LaunchApp
File Deleted : C:\Windows\System32\Tasks\pricemeterdownloader
File Deleted : C:\Windows\System32\Tasks\pricemetertask
File Deleted : C:\Windows\Tasks\27220085-a1e8-48a2-98b4-5d4a69718ae6-1.job
File Deleted : C:\Windows\System32\Tasks\27220085-a1e8-48a2-98b4-5d4a69718ae6-1
File Deleted : C:\Windows\Tasks\27220085-a1e8-48a2-98b4-5d4a69718ae6-11.job
File Deleted : C:\Windows\System32\Tasks\27220085-a1e8-48a2-98b4-5d4a69718ae6-11
File Deleted : C:\Windows\Tasks\27220085-a1e8-48a2-98b4-5d4a69718ae6-2.job
File Deleted : C:\Windows\System32\Tasks\27220085-a1e8-48a2-98b4-5d4a69718ae6-2
File Deleted : C:\Windows\Tasks\27220085-a1e8-48a2-98b4-5d4a69718ae6-3.job
File Deleted : C:\Windows\System32\Tasks\27220085-a1e8-48a2-98b4-5d4a69718ae6-3
File Deleted : C:\Windows\Tasks\27220085-a1e8-48a2-98b4-5d4a69718ae6-4.job
File Deleted : C:\Windows\System32\Tasks\27220085-a1e8-48a2-98b4-5d4a69718ae6-4
File Deleted : C:\Windows\Tasks\27220085-a1e8-48a2-98b4-5d4a69718ae6-5.job
File Deleted : C:\Windows\System32\Tasks\27220085-a1e8-48a2-98b4-5d4a69718ae6-5
File Deleted : C:\Windows\Tasks\27220085-a1e8-48a2-98b4-5d4a69718ae6-5_user.job
File Deleted : C:\Windows\System32\Tasks\27220085-a1e8-48a2-98b4-5d4a69718ae6-5_user
File Deleted : C:\Windows\Tasks\9c489aee-c648-4976-9804-990be9c41a31-1.job
File Deleted : C:\Windows\System32\Tasks\9c489aee-c648-4976-9804-990be9c41a31-1
File Deleted : C:\Windows\Tasks\9c489aee-c648-4976-9804-990be9c41a31-11.job
File Deleted : C:\Windows\System32\Tasks\9c489aee-c648-4976-9804-990be9c41a31-11
File Deleted : C:\Windows\Tasks\9c489aee-c648-4976-9804-990be9c41a31-2.job
File Deleted : C:\Windows\System32\Tasks\9c489aee-c648-4976-9804-990be9c41a31-2
File Deleted : C:\Windows\Tasks\9c489aee-c648-4976-9804-990be9c41a31-3.job
File Deleted : C:\Windows\System32\Tasks\9c489aee-c648-4976-9804-990be9c41a31-3
File Deleted : C:\Windows\Tasks\9c489aee-c648-4976-9804-990be9c41a31-4.job
File Deleted : C:\Windows\System32\Tasks\9c489aee-c648-4976-9804-990be9c41a31-4
File Deleted : C:\Windows\Tasks\9c489aee-c648-4976-9804-990be9c41a31-5.job
File Deleted : C:\Windows\System32\Tasks\9c489aee-c648-4976-9804-990be9c41a31-5
File Deleted : C:\Windows\Tasks\9c489aee-c648-4976-9804-990be9c41a31-5_user.job
File Deleted : C:\Windows\System32\Tasks\9c489aee-c648-4976-9804-990be9c41a31-5_user

***** [ Shortcuts ] *****

***** [ Registry ] *****

Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [Avg@toolbar]
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\bopakagnckmlgajfccecajhnimjiiedh
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\kiplfnciaokpcennlkldkdaeaaomamof
Key Deleted : HKCU\Software\Google\Chrome\Extensions\pflphaooapbgpeakohlggbpidpppgdff
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\pflphaooapbgpeakohlggbpidpppgdff
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{2D0D3436-B9FB-4273-93AC-6B0D45F359B0}
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2D0D3436-B9FB-4273-93AC-6B0D45F359B0}
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{4B6B1FA8-EFB0-456D-A5DB-5B3843F9EB0E}
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4B6B1FA8-EFB0-456D-A5DB-5B3843F9EB0E}
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F3F63E62-7C7B-4BCF-A65D-652337DA507C}
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F3F63E62-7C7B-4BCF-A65D-652337DA507C}
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E94E1DF2-C25E-4C65-937A-AB2515657C7A}
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E94E1DF2-C25E-4C65-937A-AB2515657C7A}
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{94F9A94A-BFF1-4D5B-9A86-23CDF9BB92CA}
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{94F9A94A-BFF1-4D5B-9A86-23CDF9BB92CA}
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{A96CD31A-C47B-47EB-AC48-671D83FD1A11}
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A96CD31A-C47B-47EB-AC48-671D83FD1A11}
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{1CC64E6B-A105-49CF-8722-9A82B112210B}
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1CC64E6B-A105-49CF-8722-9A82B112210B}
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{2688A177-F430-4449-AB52-FC2353ADCCBA}
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2688A177-F430-4449-AB52-FC2353ADCCBA}
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{7127F8C3-A507-4C40-A1E5-8FE462D4BE98}
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7127F8C3-A507-4C40-A1E5-8FE462D4BE98}
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{31D529EF-5AD6-4DD4-A7F1-6B845CF53072}
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{31D529EF-5AD6-4DD4-A7F1-6B845CF53072}
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{4084C932-7903-4FA8-BC40-3437743B8711}
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4084C932-7903-4FA8-BC40-3437743B8711}
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{54D16DE9-D729-4390-92D4-20690521412D}
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{54D16DE9-D729-4390-92D4-20690521412D}
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{DA85206C-ABC7-4381-9496-7AFEC036212F}
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DA85206C-ABC7-4381-9496-7AFEC036212F}
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{845C4642-F499-4722-9C57-C13E6FC0F5F1}
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{845C4642-F499-4722-9C57-C13E6FC0F5F1}
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{231BAA61-4D80-4C8A-8656-CAFFE88C171C}
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{231BAA61-4D80-4C8A-8656-CAFFE88C171C}
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{70F3BBA9-4434-485C-8AE5-4304BA95BD4C}
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{70F3BBA9-4434-485C-8AE5-4304BA95BD4C}
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{73598906-AE5B-4C7C-BD0A-6ED9CBAAAE8D}
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{73598906-AE5B-4C7C-BD0A-6ED9CBAAAE8D}
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{E96165D4-89FC-4ACA-806A-3A425514178C}
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E96165D4-89FC-4ACA-806A-3A425514178C}
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{0DA86F14-C927-4AF0-A665-5A18054B6CB4}
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0DA86F14-C927-4AF0-A665-5A18054B6CB4}
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{C073EDBE-A232-41CF-9A1C-2BF1D0988472}
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{380C9681-A6CC-47C2-BF58-EA47535C796B}
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C073EDBE-A232-41CF-9A1C-2BF1D0988472}
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{380C9681-A6CC-47C2-BF58-EA47535C796B}
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{BBCF36EC-F4B8-42D3-91D7-1E2345FC485A}
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{15F4D6C9-4217-4BFF-9612-6EDC4E9B6BD8}
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{BBCF36EC-F4B8-42D3-91D7-1E2345FC485A}
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{15F4D6C9-4217-4BFF-9612-6EDC4E9B6BD8}
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{8A0E4992-6D98-47F4-B727-D833BDD5D559}
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8A0E4992-6D98-47F4-B727-D833BDD5D559}
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{3F790EBF-9C6A-4837-902E-AFA26BED6367}
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3F790EBF-9C6A-4837-902E-AFA26BED6367}
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{89B86577-6811-43EC-AA46-C42DB5100AB1}
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{89B86577-6811-43EC-AA46-C42DB5100AB1}
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{6162AEC5-455E-43D5-8008-F80E3EB20D93}
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6162AEC5-455E-43D5-8008-F80E3EB20D93}
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CE6004D2-17E0-422D-BD4D-1A98D06DB565}
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{CE6004D2-17E0-422D-BD4D-1A98D06DB565}
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Main [bprotector start page]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [bProtectorDefaultScope]
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettings
Key Deleted : HKLM\SOFTWARE\Classes\AlxSSB.AlxTBSSB
Key Deleted : HKLM\SOFTWARE\Classes\AlxSSB.AlxTBSSB.1
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\DiscoveryHelper.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\GIFAnimator.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\Iminent.WebBooster.InternetExplorer.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\IMTrProgress.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\IMWeb.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\Launcher.EXE
Key Deleted : HKLM\SOFTWARE\Classes\AppID\ScriptHelper.EXE
Key Deleted : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\WMHelper.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AVG SafeGuard toolbar.BrowserWndAPI
Key Deleted : HKLM\SOFTWARE\Classes\AVG SafeGuard toolbar.BrowserWndAPI.1
Key Deleted : HKLM\SOFTWARE\Classes\AVG SafeGuard toolbar.PugiObj
Key Deleted : HKLM\SOFTWARE\Classes\AVG SafeGuard toolbar.PugiObj.1
Key Deleted : HKLM\SOFTWARE\Classes\BearShareIEHelper.DNSGuard.1
Key Deleted : HKLM\SOFTWARE\Classes\delta.deltadskBnd
Key Deleted : HKLM\SOFTWARE\Classes\delta.deltadskBnd.1
Key Deleted : HKLM\SOFTWARE\Classes\delta.deltaHlpr
Key Deleted : HKLM\SOFTWARE\Classes\delta.deltaHlpr.1
Key Deleted : HKLM\SOFTWARE\Classes\DiscoveryHelper.iMesh6Discovery
Key Deleted : HKLM\SOFTWARE\Classes\DiscoveryHelper.iMesh6Discovery.1
Key Deleted : HKLM\SOFTWARE\Classes\escort.escortIEPane
Key Deleted : HKLM\SOFTWARE\Classes\escort.escortIEPane.1
Key Deleted : HKLM\SOFTWARE\Classes\iesmartbar.bandobjectattribute
Key Deleted : HKLM\SOFTWARE\Classes\iesmartbar.bho
Key Deleted : HKLM\SOFTWARE\Classes\iesmartbar.dockingpanel
Key Deleted : HKLM\SOFTWARE\Classes\iesmartbar.iesmartbar
Key Deleted : HKLM\SOFTWARE\Classes\iesmartbar.iesmartbarbandobject
Key Deleted : HKLM\SOFTWARE\Classes\iesmartbar.smartbardisplaystate
Key Deleted : HKLM\SOFTWARE\Classes\iesmartbar.smartbarmenuform
Key Deleted : HKLM\SOFTWARE\Classes\Iminent
Key Deleted : HKLM\SOFTWARE\Classes\IminentWebBooster.BrowserHelperObject
Key Deleted : HKLM\SOFTWARE\Classes\IminentWebBooster.BrowserHelperObject.1
Key Deleted : HKLM\SOFTWARE\Classes\IminentWebBooster.ScriptExtender
Key Deleted : HKLM\SOFTWARE\Classes\IminentWebBooster.ScriptExtender.1
Key Deleted : HKLM\SOFTWARE\Classes\imweb.imwebcontrol
Key Deleted : HKLM\SOFTWARE\Classes\mysearchdial.mysearchdialdskBnd
Key Deleted : HKLM\SOFTWARE\Classes\mysearchdial.mysearchdialdskBnd.1
Key Deleted : HKLM\SOFTWARE\Classes\mysearchdial.mysearchdialHlpr
Key Deleted : HKLM\SOFTWARE\Classes\mysearchdial.mysearchdialHlpr.1
Key Deleted : HKLM\SOFTWARE\Classes\Prod.cap
Key Deleted : HKLM\SOFTWARE\Classes\protocols\handler\viprotocol
Key Deleted : HKLM\SOFTWARE\Classes\S
Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi
Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1
Key Deleted : HKLM\SOFTWARE\Classes\speedupmypc
Key Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE
Key Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs [bProtectTabs]
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bitguard.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bprotect.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browserdefender.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browserprotect.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd
Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [BrowserSafeguard]
Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [vProt]
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=10
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=4
Value Deleted : HKLM\SYSTEM\ControlSet001\Control\Session Manager\AppCertDlls [x64]
Value Deleted : HKLM\SYSTEM\ControlSet001\Control\Session Manager\AppCertDlls [x86]
Key Deleted : HKCU\Software\53558a8cbc69ba48
Key Deleted : HKLM\SOFTWARE\53558a8cbc69ba48
Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0059599.BHO
Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0059599.BHO.1
Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0059599.Sandbox
Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0059599.Sandbox.1
Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0059601.BHO
Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0059601.BHO.1
Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0059601.Sandbox
Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0059601.Sandbox.1
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{01994268-3C10-4044-A1EA-7A9C1B739A11}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{1F02FB61-2BE5-4C16-8199-AEAA16EB0342}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{1FC41815-FA4C-4F8B-B143-2C045C8EA2FC}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{21493C1F-D071-496A-9C27-450578888291}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{403A885F-CB00-40C1-BDC1-EB09053194F7}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{55C1727F-5535-4C2A-9601-8C2458608B48}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{756C097C-6BDB-45DE-A8F1-83E01AB86BA4}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{A7DDCBDE-5C86-415C-8A37-763AE183E7E4}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{C292AD0A-C11F-479B-B8DB-743E72D283B0}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{051E9166-B275-4683-907B-372FAE22BC7C}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{27BF8F8D-58B8-D41C-F913-B7EEB57EF6F6}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3BF72F68-72D8-461D-A884-329D936C5581}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{408CFAD9-8F13-4747-8EC7-770A339C7237}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4FCB4630-2A1C-4AA1-B422-345E8DC8A6DE}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5C176BA0-6FC0-4EBD-8ACF-24AC592506B6}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{78E9D883-93CD-4072-BEF3-38EE581E2839}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{82E74373-58AB-47EB-B0F0-A1D82BB8EB5C}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{83AC1413-FCE4-4A46-9DD5-4F31F306E71F}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{87BEF026-9269-413C-A5B3-11F35451380E}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{933B95E2-E7B7-4AD9-B952-7AC336682AE3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B6F8DA9F-2696-419E-A8A3-19BE41EF51BD}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D40753C7-8A59-4C1F-BE88-C300F4624D5B}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E57091A7-B5F0-4C42-9329-72ED3E59ED31}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E5A7A645-8318-4895-B85C-EDC606B80DB6}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511951199}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511961101}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522952299}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522962201}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B37B4BA6-334E-72C1-B57E-6AFE8F8A5AF3}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B77AD4AC-C1C2-B293-7737-71E13A11FFEA}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C58D664A-3DBC-4925-AE74-0382007DF113}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C776D7F4-BA85-4B75-AAFC-3A0A11FE6E36}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{CA1CE38C-F04C-471F-B9F3-083C58165C10}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E773F2CF-5E6E-FF2B-81A1-AC581A26B2B2}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550555955599}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550555965501}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566956699}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566966601}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{07CAC314-E962-4F78-89AB-DD002F2490EE}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{403A885F-CB00-40C1-BDC1-EB09053194F7}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{55C1727F-5535-4C2A-9601-8C2458608B48}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{96F7FABC-5789-EFA4-B6ED-1272F4C1D27B}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{A2D733A7-73B0-4C6B-B0C7-06A432950B66}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{A9CAF365-EA35-45DA-BD8B-2EFA09D374AC}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{C292AD0A-C11F-479B-B8DB-743E72D283B0}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{C4C4F1F4-3074-4CB6-9FB8-0A64273166F0}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{DA9FC525-41ED-4C00-B046-946DA7CDD305}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440544954499}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440544964401}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{84FF7BD6-B47F-46F8-9130-01B2696B36CB}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110511951199}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110511961101}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{84FF7BD6-B47F-46F8-9130-01B2696B36CB}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110511951199}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110511961101}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{74322BF9-DF26-493F-B0DA-6D2FC5E6429E}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7C3B01BC-53A5-48A0-A43B-0C67731134B9}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{872F3C0B-4462-424C-BB9F-74C6899B9F92}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{B6F8DA9F-2696-419E-A8A3-19BE41EF51BD}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{77AA745B-F4F8-45DA-9B14-61D2D95054C8}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{77AA745B-F4F8-45DA-9B14-61D2D95054C8}
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{95B7759C-8C7F-4BF1-B163-73684A933233}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}]
Key Deleted : HKCU\Software\Adorika
Key Deleted : HKCU\Software\Alexa Internet
Key Deleted : HKCU\Software\AnyProtect
Key Deleted : HKCU\Software\APNDTX
Key Deleted : HKCU\Software\AVG SafeGuard toolbar
Key Deleted : HKCU\Software\BrowserSafeguardInstalled
Key Deleted : HKCU\Software\Conduit
[#] Key Deleted : HKCU\Software\DataMngr_Toolbar
Key Deleted : HKCU\Software\distromatic
Key Deleted : HKCU\Software\Iminent
Key Deleted : HKCU\Software\InstallCore
Key Deleted : HKCU\Software\installedbrowserextensions
Key Deleted : HKCU\Software\mysearchdial.com
Key Deleted : HKCU\Software\Optimizer Pro
Key Deleted : HKCU\Software\ParetoLogic
Key Deleted : HKCU\Software\pc optimizer pro
Key Deleted : HKCU\Software\SmartBar
Key Deleted : HKCU\Software\smartbarbackup
Key Deleted : HKCU\Software\smartbarlog
Key Deleted : HKCU\Software\Softonic
Key Deleted : HKCU\Software\systweak
Key Deleted : HKCU\Software\torch
Key Deleted : HKCU\Software\TutoTag
Key Deleted : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
Key Deleted : HKCU\Software\AppDataLow\Software\Crossrider
Key Deleted : HKCU\Software\AppDataLow\Software\DynConIE
Key Deleted : HKCU\Software\AppDataLow\Software\Re_Markable
Key Deleted : HKLM\Software\{1146AC44-2F03-4431-B4FD-889BC837521F}
Key Deleted : HKLM\Software\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Key Deleted : HKLM\Software\{6791A2F3-FC80-475C-A002-C014AF797E9C}
Key Deleted : HKLM\Software\AVG SafeGuard toolbar
Key Deleted : HKLM\Software\AVG Security Toolbar
Key Deleted : HKLM\Software\BrowserSafeGuard
Key Deleted : HKLM\Software\Default Tab
Key Deleted : HKLM\Software\IMGUPDATER
Key Deleted : HKLM\Software\Iminent
Key Deleted : HKLM\Software\installedbrowserextensions
Key Deleted : HKLM\Software\InstallIQ
Key Deleted : HKLM\Software\mysearchdial
Key Deleted : HKLM\Software\ParetoLogic
Key Deleted : HKLM\Software\PriceMeterLiveUpdate
Key Deleted : HKLM\Software\SearchProtect
Key Deleted : HKLM\Software\SupDp
Key Deleted : HKLM\Software\SupTab
Key Deleted : HKLM\Software\systweak
Key Deleted : HKLM\Software\torch
Key Deleted : HKLM\Software\Tutorials
Key Deleted : HKLM\Software\Umbrella
Key Deleted : HKLM\Software\Uniblue
Key Deleted : HKLM\Software\V9Software
Key Deleted : HKLM\Software\Wpm
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{BC0BF363-63AB-4FF7-8EF1-AE0D7F711B24}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DefaultTab
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IMBoosterARP
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IminentToolbar
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{15D2D75C-9CB2-4EFD-BAD7-B9B4CB4BC693}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{BAEF9F3A-D10C-40DF-819D-D21D9600AE1A}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{E55B3271-7CA8-4D0C-AE06-69A24856E996}_is1
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\00212D92-C5D8-4ff4-AE50-B20F0F85C40A_Systweak_Ad~B9F029BF_is1
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Amazon Browser Settings
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\AnyProtect
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\AVG SafeGuard toolbar
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\BrowserSafeGuard
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\BuzzSearch
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\coupon downloader
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\DefaultTab
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Delta Chrome Toolbar
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Delta
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\IMBoosterARP
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\IminentToolbar
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Mobogenie
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\MyPC Backup
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\mysearchdial
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\NetCrawl
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\NewPlayer
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Optimizer Pro_is1
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\pc optimizer pro
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\RegClean-Pro_is1
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\SearchProtect
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\torch
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\VOPackage
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Wajam
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\WSE Rocket
Data Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - c:\progra~1\searchprotect\searchprotect\bin\spvc32loader.dll
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3152E1F19977892449DC968802CE8964
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\5E8031606EB60A64C882918F8FF38DD4
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bpsvc.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browsersafeguard.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DatamngrCoordinator.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\dprotectsvc.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\jumpflip
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\protectedsearch.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchinstaller.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchprotection.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchprotector.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchsettings.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchsettings64.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\snapdo.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\stinst32.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\stinst64.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\umbrella.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\utiljumpflip.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\volaro
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\vonteera
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\websteroids.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\websteroidsservice.exe

***** [ Browsers ] *****

-\\ Internet Explorer v7.0.6000.16982

Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Search Page]
Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Search Bar]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Search [Default_Search_URL]
Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Search [SearchAssistant]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls [bProtectTabs]
Setting Restored : HKCU\Software\Microsoft\Internet Explorer\SearchUrl [Default]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchUrl [Default]

-\\ Mozilla Firefox v29.0 (cs)

[ File : C:\Users\Bobi\AppData\Roaming\Mozilla\Firefox\Profiles\lbiupxjx.default\prefs.js ]

Line Deleted : user_pref("CT3309350.searchProtector.notifyChanges", "{\"dataType\":\"string\",\"data\":\"false\"}");
Line Deleted : user_pref("browser.search.defaultenginename", "Mysearchdial");
Line Deleted : user_pref("browser.search.selectedEngine", "Mysearchdial");
Line Deleted : user_pref("browser.uiCustomization.state", "{\"placements\":{\"PanelUI-contents\":[\"edit-controls\",\"zoom-controls\",\"new-window-button\",\"privatebrowsing-button\",\"save-page-button\",\"print-but[...]
Line Deleted : user_pref("extensions.crossrider.bic", "146ee9fddf9e513a68777fc27642549f");
Line Deleted : user_pref("extensions.delta.admin", false);
Line Deleted : user_pref("extensions.delta.aflt", "babsst");
Line Deleted : user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");
Line Deleted : user_pref("extensions.delta.autoRvrt", "false");
Line Deleted : user_pref("extensions.delta.dfltLng", "en");
Line Deleted : user_pref("extensions.delta.excTlbr", false);
Line Deleted : user_pref("extensions.delta.ffxUnstlRst", true);
Line Deleted : user_pref("extensions.delta.id", "8cde8ef9000000000000020554066435");
Line Deleted : user_pref("extensions.delta.instlDay", "15935");
Line Deleted : user_pref("extensions.delta.instlRef", "sst");
Line Deleted : user_pref("extensions.delta.newTab", false);
Line Deleted : user_pref("extensions.delta.prdct", "delta");
Line Deleted : user_pref("extensions.delta.prtnrId", "delta");
Line Deleted : user_pref("extensions.delta.rvrt", "false");
Line Deleted : user_pref("extensions.delta.smplGrp", "none");
Line Deleted : user_pref("extensions.delta.tlbrId", "base");
Line Deleted : user_pref("extensions.delta.tlbrSrchUrl", "");
Line Deleted : user_pref("extensions.delta.vrsn", "1.8.24.5");
Line Deleted : user_pref("extensions.delta.vrsnTs", "1.8.24.58:35:58");
Line Deleted : user_pref("extensions.delta.vrsni", "1.8.24.5");
Line Deleted : user_pref("extensions.delta_i.babExt", "");
Line Deleted : user_pref("extensions.delta_i.babTrack", "affID=119357&tsp=4978");
Line Deleted : user_pref("extensions.delta_i.srcExt", "ss");
Line Deleted : user_pref("extensions.irmysearch.aflt", "cmi_14_27_ff");
Line Deleted : user_pref("extensions.irmysearch.cd", "2XzuyEtN2Y1L1Qzu0E0CtC0AyDzyyE0EyEzytDyDzz0E0FzytN0D0Tzu0SzytCtBtN1L2XzutBtFtBtCtFyEtFtCtN1L1CzutCyEtBzytDyD1V1StN1L1G1B1V1N2Y1L1Qzu2SyEtB0CyD0Fzz0EtCtGyBtBzzyEt[...]
Line Deleted : user_pref("extensions.irmysearch.cr", "2144795118");
Line Deleted : user_pref("extensions.irmysearch.instlRef", "142905_b");
Line Deleted : user_pref("extensions.mysearchdial.aflt", "irmsd1103");
Line Deleted : user_pref("extensions.mysearchdial.appId", "{CA5CAA63-B27C-4963-9BEC-CB16A36D56F8}");
Line Deleted : user_pref("extensions.mysearchdial.cd", "2XzuyEtN2Y1L1QzutDtDtC0DtDzytAyByByC0FtBzz0E0FzytN0D0Tzu0SyCzyzztN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutCyD1B1P1R");
Line Deleted : user_pref("extensions.mysearchdial.cntry", "GB");
Line Deleted : user_pref("extensions.mysearchdial.cr", "534369007");
Line Deleted : user_pref("extensions.mysearchdial.dfltLng", "");
Line Deleted : user_pref("extensions.mysearchdial.dfltSrch", true);
Line Deleted : user_pref("extensions.mysearchdial.dnsErr", true);
Line Deleted : user_pref("extensions.mysearchdial.dpkLst", "3654782829,1334533236,1121012847,231756876,1895130307,603719297,4288797614,3754950497,426401714,3046281807,752626116,1657571787,3224935090,2597085128,18285[...]
Line Deleted : user_pref("extensions.mysearchdial.excTlbr", false);
Line Deleted : user_pref("extensions.mysearchdial.hdrMd5", "CBD15ACAD0035D68BDF09A124F509FCF");
Line Deleted : user_pref("extensions.mysearchdial.hmpg", true);
Line Deleted : user_pref("extensions.mysearchdial.hmpgUrl", "hxxp://start.mysearchdial.com/?f=1&a=irmsd1103&cd=2XzuyEtN2Y1L1QzutDtDtC0DtDzytAyByByC0FtBzz0E0FzytN0D0Tzu0SyCzyzztN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutC[...]
Line Deleted : user_pref("extensions.mysearchdial.id", "001D093776F28EF9");
Line Deleted : user_pref("extensions.mysearchdial.instlDay", "16037");
Line Deleted : user_pref("extensions.mysearchdial.instlRef", "");
Line Deleted : user_pref("extensions.mysearchdial.lastB", "hxxp://start.mysearchdial.com/?f=1&a=irmsd1103&cd=2XzuyEtN2Y1L1QzutDtDtC0DtDzytAyByByC0FtBzz0E0FzytN0D0Tzu0SyCzyzztN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutCyD[...]
Line Deleted : user_pref("extensions.mysearchdial.lastVrsnTs", "1.8.21.018:42:50");
Line Deleted : user_pref("extensions.mysearchdial.newTabUrl", "hxxp://start.mysearchdial.com/?f=2&a=irmsd1103&cd=2XzuyEtN2Y1L1QzutDtDtC0DtDzytAyByByC0FtBzz0E0FzytN0D0Tzu0SyCzyzztN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1Czu[...]
Line Deleted : user_pref("extensions.mysearchdial.pnu_base", "{\"newVrsn\":\"96\",\"lastVrsn\":\"96\",\"vrsnLoad\":\"\",\"showMsg\":\"false\",\"showSilent\":\"true\",\"msgTs\":0,\"lstMsgTs\":\"0\"}");
Line Deleted : user_pref("extensions.mysearchdial.prdct", "mysearchdial");
Line Deleted : user_pref("extensions.mysearchdial.prtnrId", "mysearchdial");
Line Deleted : user_pref("extensions.mysearchdial.sg", "none");
Line Deleted : user_pref("extensions.mysearchdial.srchPrvdr", "Mysearchdial");
Line Deleted : user_pref("extensions.mysearchdial.tlbrId", "base");
Line Deleted : user_pref("extensions.mysearchdial.tlbrSrchUrl", "hxxp://start.mysearchdial.com/?f=3&a=irmsd1103&cd=2XzuyEtN2Y1L1QzutDtDtC0DtDzytAyByByC0FtBzz0E0FzytN0D0Tzu0SyCzyzztN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1C[...]
Line Deleted : user_pref("extensions.mysearchdial.vrsn", "1.8.21.0");
Line Deleted : user_pref("extensions.mysearchdial.vrsni", "1.8.21.0");
Line Deleted : user_pref("extensions.mysearchdial_i.hmpg", true);
Line Deleted : user_pref("extensions.mysearchdial_i.newTab", false);
Line Deleted : user_pref("extensions.mysearchdial_i.smplGrp", "none");
Line Deleted : user_pref("extensions.mysearchdial_i.vrsnTs", "1.8.21.018:42:50");
Line Deleted : user_pref("extensions.mywebsearch.prevKwdEnabled", true);
Line Deleted : user_pref("extensions.mywebsearch.prevKwdURL", "hxxp://dts.search.ask.com/sr?src=ffb&gct=ds&appid=716&systemid=2&v=r12720-368&apn_dtid=IME002&apn_ptnrs=AG2&apn_uid=4451186574114463&o=APN10641&q=");
Line Deleted : user_pref("extensions.toolbar.mindspark._39Members_.BUTTON_STRUCTURE", "[{\"b\":221503760,\"c\":\"mindspark.magnify\",\"p\":\"L.0\"},{\"b\":221503761,\"c\":\"mindspark.entersearchterms\",\"p\":\"L.0.0[...]
Line Deleted : user_pref("extensions.toolbar.mindspark._39Members_.firstKnownVersion", "6.33.3.53016");
Line Deleted : user_pref("extensions.toolbar.mindspark._39Members_.homepage", "hxxp://home.tb.ask.com/index.jhtml?ptb=74AC2C8F-21F7-441C-99D6-87F07D4331B7&n=780c0101&p2=^UX^xdm004^LAENUK^gb&si=CJjFkviQyb4CFbShtAodlH[...]
Line Deleted : user_pref("extensions.toolbar.mindspark._39Members_.hp.user.defined", true);
Line Deleted : user_pref("extensions.toolbar.mindspark._39Members_.initialized", true);
Line Deleted : user_pref("extensions.toolbar.mindspark._39Members_.installKeysSource", "LocalStorage");
Line Deleted : user_pref("extensions.toolbar.mindspark._39Members_.installType", "XPI");
Line Deleted : user_pref("extensions.toolbar.mindspark._39Members_.installation.contextKey", "");
Line Deleted : user_pref("extensions.toolbar.mindspark._39Members_.installation.installDate", "2014052609");
Line Deleted : user_pref("extensions.toolbar.mindspark._39Members_.installation.partnerId", "^UX^xdm004^LAENUK^gb");
Line Deleted : user_pref("extensions.toolbar.mindspark._39Members_.installation.partnerSubId", "CJjFkviQyb4CFbShtAodlHAA5g");
Line Deleted : user_pref("extensions.toolbar.mindspark._39Members_.installation.pixelUrl", "hxxp://mapsgalaxy.dl.tb.ask.com/install_pixels.jhtml?partner=^UX^xdm004^LAENUK^gb&coId=cea473f99b6f4251a150302dfe2e91b7&cak[...]
Line Deleted : user_pref("extensions.toolbar.mindspark._39Members_.installation.success", true);
Line Deleted : user_pref("extensions.toolbar.mindspark._39Members_.installation.toolbarId", "74AC2C8F-21F7-441C-99D6-87F07D4331B7");
Line Deleted : user_pref("extensions.toolbar.mindspark._39Members_.isCompliantUninstallImplementation", true);
Line Deleted : user_pref("extensions.toolbar.mindspark._39Members_.lastActivePing", "1404374832446");
Line Deleted : user_pref("extensions.toolbar.mindspark._39Members_.lastKnownVersion", "6.52.4.6288");
Line Deleted : user_pref("extensions.toolbar.mindspark._39Members_.options.defaultSearch", true);
Line Deleted : user_pref("extensions.toolbar.mindspark._39Members_.options.homePageEnabled", false);
Line Deleted : user_pref("extensions.toolbar.mindspark._39Members_.options.keywordEnabled", true);
Line Deleted : user_pref("extensions.toolbar.mindspark._39Members_.options.tabEnabled", false);
Line Deleted : user_pref("extensions.toolbar.mindspark._39Members_.partnerPixelFired", true);
Line Deleted : user_pref("extensions.toolbar.mindspark._39Members_.searchHistory", "hxxp://www.cv-library.co.uk/cgi-bin/job.cgi?j=A201038077||If you would like to upload a new CV to your account then click below. Pl[...]
Line Deleted : user_pref("extensions.toolbar.mindspark._39Members_.successUrl", "hxxp://maps4pc.com/thankyou.php");
Line Deleted : user_pref("extensions.toolbar.mindspark._39Members_.toolbarCollapsed", false);
Line Deleted : user_pref("extensions.toolbar.mindspark._39Members_.weather.location", "10001");
Line Deleted : user_pref("extensions.toolbar.mindspark.lastInstalled", "mapsgalaxy@mindspark.com");
Line Deleted : user_pref("iminent.LayoutId", "1");
Line Deleted : user_pref("iminent.ShowThankyouPixel", "0");
Line Deleted : user_pref("iminent._oaZGabJJ8Q_", "{\"cpt\":0,\"cpr\":0,\"s\":0,\"es\":1}");
Line Deleted : user_pref("iminent.adapters", "{\"nspdlmsd\":{\"CountryCode\":\"GB\",\"NoAds\":false,\"Status\":2,\"AdapterKey\":\"default_adapter\",\"v\":true,\"p\":0,\"t\":1,\"th\":1.1,\"expireTime\":\"140397539532[...]
Line Deleted : user_pref("iminent.enableToolbar", "true");
Line Deleted : user_pref("iminent.enabledAds", "obsolete");
Line Deleted : user_pref("iminent.externalScripts", "{\"value\":[{\"addonUid\":\"10bb6277-6b2b-413e-8d82-ad9398543254\",\"name\":\"Dealply\",\"addonId\":1,\"url\":\"//i.iminentjs.info/imitin/javascript.js\",\"queryS[...]
Line Deleted : user_pref("iminent.newtabredirect", "true");
Line Deleted : user_pref("iminent.nomsi", "true");
Line Deleted : user_pref("iminent.registerToolbarEvent102", "1404057908372");
Line Deleted : user_pref("iminent.registerToolbarEvent140", "1404073583486");
Line Deleted : user_pref("iminent.searchindex", "1");
Line Deleted : user_pref("iminent.trackingInfo", "{\"state\":0,\"samplingRate\":0}");
Line Deleted : user_pref("iminent.version", "8.26.4.1");
Line Deleted : user_pref("iminent.versioning", "{\"CurrentVersion\":\"8.26.4.1\",\"InstallEventCTime\":1404150678919,\"InstallEvent\":\"True\"}");
Line Deleted : user_pref("keyword.URL", "hxxp://search.tb.ask.com/search/GGmain.jhtml?st=kwd&ptb=74AC2C8F-21F7-441C-99D6-87F07D4331B7&n=780c0101&ind=2014052609&p2=^UX^xdm004^LAENUK^gb&si=CJjFkviQyb4CFbShtAodlHAA5g&s[...]

*************************

AdwCleaner[R0].txt - [55039 octets] - [03/07/2014 20:07:34]
AdwCleaner[S0].txt - [52483 octets] - [03/07/2014 20:08:25]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [52544 octets] ##########

log zoe poslu v dalsi odpovedi, velikost obou logu je vetsi nez povolena velikost

OK, dejte mi jej tedy sem

posilam log zoe:


Zoek.exe v5.0.0.0 Updated 21-05-2014
Tool run by Bobi on 03/07/2014 at 20:29:37.06.
Microsoft® Windows Vista™ Home Premium 6.0.6000 x86
Running in: Normal Mode No Internet Access Detected
Launched: C:\Users\Bobi\Desktop\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

03/07/2014 20:31:29 Zoek.exe System Restore Point Created Succesfully.

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

127.0.0.1 localhost
::1 localhost

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-222474816-1787102141-2535510490-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{cfc3366e-c743-48b5-a136-642e86be865e} deleted successfully
HKEY_USERS\S-1-5-21-222474816-1787102141-2535510490-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DF925EF3-7A87-44E4-9CAF-8D7B280BF616} deleted successfully
HKEY_USERS\S-1-5-21-222474816-1787102141-2535510490-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{930C44BB-B2AD-3126-C1D6-C9F314A71635} deleted successfully
HKEY_USERS\S-1-5-21-222474816-1787102141-2535510490-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00f782f3-b496-4f0f-be51-8a51eba1acb1} deleted successfully
HKEY_CLASSES_ROOT\CLSID\{cfc3366e-c743-48b5-a136-642e86be865e} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{cfc3366e-c743-48b5-a136-642e86be865e} deleted successfully
HKEY_CLASSES_ROOT\CLSID\{DF925EF3-7A87-44E4-9CAF-8D7B280BF616} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DF925EF3-7A87-44E4-9CAF-8D7B280BF616} deleted successfully

==== Deleting CLSID Registry Values ======================

HKEY_USERS\S-1-5-21-222474816-1787102141-2535510490-1000\Software\Microsoft\Internet Explorer\Approved Extensions\{4D2D3B0F-69BE-477A-90F5-FDDB05357975} deleted successfully
HKEY_USERS\S-1-5-21-222474816-1787102141-2535510490-1000\Software\Microsoft\Internet Explorer\Approved Extensions\{98889811-442D-49DD-99D7-DC866BE87DBC} deleted successfully
HKEY_USERS\S-1-5-21-222474816-1787102141-2535510490-1000\Software\Microsoft\Internet Explorer\Approved Extensions\{930C44BB-B2AD-3126-C1D6-C9F314A71635} deleted successfully
HKEY_USERS\S-1-5-21-222474816-1787102141-2535510490-1000\Software\Microsoft\Internet Explorer\Approved Extensions\{00f782f3-b496-4f0f-be51-8a51eba1acb1} deleted successfully
HKEY_USERS\S-1-5-21-222474816-1787102141-2535510490-1000\Software\Microsoft\Internet Explorer\Approved Extensions\{11111111-1111-1111-1111-110511961101} deleted successfully
HKEY_USERS\S-1-5-21-222474816-1787102141-2535510490-1000\Software\Microsoft\Internet Explorer\Approved Extensions\{11111111-1111-1111-1111-110511951199} deleted successfully
HKEY_USERS\S-1-5-21-222474816-1787102141-2535510490-1000\Software\Mozilla\Firefox\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{cfc3366e-c743-48b5-a136-642e86be865e} deleted successfully

==== Deleting Services ======================


==== FireFox Fix ======================

Deleted from C:\Users\Bobi\AppData\Roaming\Mozilla\Firefox\Profiles\lbiupxjx.default\prefs.js:
user_pref("browser.startup.homepage", "www.google.co.uk");
user_pref("browser.search.useDBForOrder", false);

Added to C:\Users\Bobi\AppData\Roaming\Mozilla\Firefox\Profiles\lbiupxjx.default\prefs.js:
user_pref("browser.startup.homepage", "http://www.google.com");
user_pref("browser.search.defaulturl", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.newtab.url", "http://www.google.com/");
user_pref("browser.search.defaultengine", "Google");
user_pref("browser.search.defaultenginename", "Google");
user_pref("browser.search.selectedEngine", "Google");
user_pref("browser.search.order.1", "Google");
user_pref("keyword.URL", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.search.suggest.enabled", true);
user_pref("browser.search.useDBForOrder", true);

Deleted from C:\Users\Bobi\AppData\Roaming\TomTom\HOME\Profiles\nz2iaf0x.default\prefs.js:

Added to C:\Users\Bobi\AppData\Roaming\TomTom\HOME\Profiles\nz2iaf0x.default\prefs.js:
user_pref("browser.startup.homepage", "http://www.google.com");
user_pref("browser.search.defaulturl", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.newtab.url", "http://www.google.com/");
user_pref("browser.search.defaultengine", "Google");
user_pref("browser.search.defaultenginename", "Google");
user_pref("browser.search.selectedEngine", "Google");
user_pref("browser.search.order.1", "Google");
user_pref("keyword.URL", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.search.suggest.enabled", true);
user_pref("browser.search.useDBForOrder", true);

ProfilePath: C:\Users\Bobi\AppData\Roaming\Mozilla\Firefox\Profiles\lbiupxjx.default

user.js not found
---- Lines ffxtbr modified from prefs.js ----

user_pref("extensions.enabledAddons", "39ffxtbr%40MapsGalaxy_39.com:6.52.4.6288,ff806580-6db3-4c09-ba06-d6caf0e99172%408453cb25-7fef-4ed5-8934-b08be56
user_pref("extensions.installCache", "[{\"name\":\"winreg-app-global\",\"addons\":{\"{20a82645-c095-46ed-80e3-08825760534b}\":{\"descriptor\":\"c:\\\\
---- Lines ac3748a13c1f241fbaf7f2e4a9fbfff0b663a5b10a4814f9b9ea0fa3e03409e3acom59601 removed from prefs.js ----
user_pref("extensions.ac3748a13c1f241fbaf7f2e4a9fbfff0b663a5b10a4814f9b9ea0fa3e03409e3acom59601.59601.ac3748a13c1f241fbaf7f2e4a9fbfff0b663a5b10a4814f9
user_pref("extensions.ac3748a13c1f241fbaf7f2e4a9fbfff0b663a5b10a4814f9b9ea0fa3e03409e3acom59601.59601.ac3748a13c1f241fbaf7f2e4a9fbfff0b663a5b10a4814f9
user_pref("extensions.ac3748a13c1f241fbaf7f2e4a9fbfff0b663a5b10a4814f9b9ea0fa3e03409e3acom59601.59601.active", true);
user_pref("extensions.ac3748a13c1f241fbaf7f2e4a9fbfff0b663a5b10a4814f9b9ea0fa3e03409e3acom59601.59601.addressbar", "NA");
user_pref("extensions.ac3748a13c1f241fbaf7f2e4a9fbfff0b663a5b10a4814f9b9ea0fa3e03409e3acom59601.59601.addressbarenhanced", "");
user_pref("extensions.ac3748a13c1f241fbaf7f2e4a9fbfff0b663a5b10a4814f9b9ea0fa3e03409e3acom59601.59601.backgroundver", 1);
user_pref("extensions.ac3748a13c1f241fbaf7f2e4a9fbfff0b663a5b10a4814f9b9ea0fa3e03409e3acom59601.59601.certdomaininstaller", "");
user_pref("extensions.ac3748a13c1f241fbaf7f2e4a9fbfff0b663a5b10a4814f9b9ea0fa3e03409e3acom59601.59601.changeprevious", false);
user_pref("extensions.ac3748a13c1f241fbaf7f2e4a9fbfff0b663a5b10a4814f9b9ea0fa3e03409e3acom59601.59601.cookie.InstallationTime.expiration", "Fri Feb 01
user_pref("extensions.ac3748a13c1f241fbaf7f2e4a9fbfff0b663a5b10a4814f9b9ea0fa3e03409e3acom59601.59601.cookie.InstallationTime.value", "1404162793");
user_pref("extensions.ac3748a13c1f241fbaf7f2e4a9fbfff0b663a5b10a4814f9b9ea0fa3e03409e3acom59601.59601.description", "Feven Shopping Companion");
user_pref("extensions.ac3748a13c1f241fbaf7f2e4a9fbfff0b663a5b10a4814f9b9ea0fa3e03409e3acom59601.59601.domain", "");
user_pref("extensions.ac3748a13c1f241fbaf7f2e4a9fbfff0b663a5b10a4814f9b9ea0fa3e03409e3acom59601.59601.enablesearch", false);
user_pref("extensions.ac3748a13c1f241fbaf7f2e4a9fbfff0b663a5b10a4814f9b9ea0fa3e03409e3acom59601.59601.homepage", "");
user_pref("extensions.ac3748a13c1f241fbaf7f2e4a9fbfff0b663a5b10a4814f9b9ea0fa3e03409e3acom59601.59601.iframe", false);
user_pref("extensions.ac3748a13c1f241fbaf7f2e4a9fbfff0b663a5b10a4814f9b9ea0fa3e03409e3acom59601.59601.InstallationTime", 1404162793);
user_pref("extensions.ac3748a13c1f241fbaf7f2e4a9fbfff0b663a5b10a4814f9b9ea0fa3e03409e3acom59601.59601.lastDailyReport", "1404374837203");
user_pref("extensions.ac3748a13c1f241fbaf7f2e4a9fbfff0b663a5b10a4814f9b9ea0fa3e03409e3acom59601.59601.lastUpdate", "1404374834004");
user_pref("extensions.ac3748a13c1f241fbaf7f2e4a9fbfff0b663a5b10a4814f9b9ea0fa3e03409e3acom59601.59601.manifesturl", "");
user_pref("extensions.ac3748a13c1f241fbaf7f2e4a9fbfff0b663a5b10a4814f9b9ea0fa3e03409e3acom59601.59601.MyEXT59601.AsyncDB_is_undefined", 0);
user_pref("extensions.ac3748a13c1f241fbaf7f2e4a9fbfff0b663a5b10a4814f9b9ea0fa3e03409e3acom59601.59601.name", "Fraveen 1.4");
user_pref("extensions.ac3748a13c1f241fbaf7f2e4a9fbfff0b663a5b10a4814f9b9ea0fa3e03409e3acom59601.59601.newtab", "");
user_pref("extensions.ac3748a13c1f241fbaf7f2e4a9fbfff0b663a5b10a4814f9b9ea0fa3e03409e3acom59601.59601.opensearch", "");
user_pref("extensions.ac3748a13c1f241fbaf7f2e4a9fbfff0b663a5b10a4814f9b9ea0fa3e03409e3acom59601.59601.pluginsurl", "http://js.democlientnet.com/plugin
user_pref("extensions.ac3748a13c1f241fbaf7f2e4a9fbfff0b663a5b10a4814f9b9ea0fa3e03409e3acom59601.59601.pluginsversion", 13);
user_pref("extensions.ac3748a13c1f241fbaf7f2e4a9fbfff0b663a5b10a4814f9b9ea0fa3e03409e3acom59601.59601.publisher", "shift");
user_pref("extensions.ac3748a13c1f241fbaf7f2e4a9fbfff0b663a5b10a4814f9b9ea0fa3e03409e3acom59601.59601.searchstatus", 0);
user_pref("extensions.ac3748a13c1f241fbaf7f2e4a9fbfff0b663a5b10a4814f9b9ea0fa3e03409e3acom59601.59601.setnewtab", false);
user_pref("extensions.ac3748a13c1f241fbaf7f2e4a9fbfff0b663a5b10a4814f9b9ea0fa3e03409e3acom59601.59601.thankyou", "");
user_pref("extensions.ac3748a13c1f241fbaf7f2e4a9fbfff0b663a5b10a4814f9b9ea0fa3e03409e3acom59601.59601.updateinterval", 360);
user_pref("extensions.ac3748a13c1f241fbaf7f2e4a9fbfff0b663a5b10a4814f9b9ea0fa3e03409e3acom59601.59601.ver", 20);
user_pref("extensions.ac3748a13c1f241fbaf7f2e4a9fbfff0b663a5b10a4814f9b9ea0fa3e03409e3acom59601.apps", "59601");
user_pref("extensions.ac3748a13c1f241fbaf7f2e4a9fbfff0b663a5b10a4814f9b9ea0fa3e03409e3acom59601.bic", "146ee9fddf9e513a68777fc27642549f");
user_pref("extensions.ac3748a13c1f241fbaf7f2e4a9fbfff0b663a5b10a4814f9b9ea0fa3e03409e3acom59601.cid", 59601);
user_pref("extensions.ac3748a13c1f241fbaf7f2e4a9fbfff0b663a5b10a4814f9b9ea0fa3e03409e3acom59601.firstrun", false);
user_pref("extensions.ac3748a13c1f241fbaf7f2e4a9fbfff0b663a5b10a4814f9b9ea0fa3e03409e3acom59601.hadappinstalled", true);
user_pref("extensions.ac3748a13c1f241fbaf7f2e4a9fbfff0b663a5b10a4814f9b9ea0fa3e03409e3acom59601.installationdate", 1404162793);
user_pref("extensions.ac3748a13c1f241fbaf7f2e4a9fbfff0b663a5b10a4814f9b9ea0fa3e03409e3acom59601.installerAdditionalInfo", "{\"asw\":[0, 109051908, 204
user_pref("extensions.ac3748a13c1f241fbaf7f2e4a9fbfff0b663a5b10a4814f9b9ea0fa3e03409e3acom59601.modetype", "production");
user_pref("extensions.ac3748a13c1f241fbaf7f2e4a9fbfff0b663a5b10a4814f9b9ea0fa3e03409e3acom59601.reportInstall", true);
user_pref("extensions.ac3748a13c1f241fbaf7f2e4a9fbfff0b663a5b10a4814f9b9ea0fa3e03409e3acom59601.statsDailyCounter", 6);
---- Lines {cfc3366e-c743-48b5-a136-642e86be865e} modified from prefs.js ----

user_pref("extensions.installCache", "[{\"name\":\"winreg-app-global\",\"addons\":{\"{20a82645-c095-46ed-80e3-08825760534b}\":{\"descriptor\":\"c:\\\\
---- FireFox user.js and prefs.js backups ----

prefs_072014_2043_.backup

ProfilePath: C:\Users\Bobi\AppData\Roaming\TomTom\HOME\Profiles\nz2iaf0x.default

user.js not found
---- FireFox user.js and prefs.js backups ----

prefs_072014_2043_.backup

==== Registry Fix Code ======================

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AboutURLs]
"bProtectTabs"=-

==== Deleting Files \ Folders ======================

C:\PROGRA~2\?-?-Ä-?-8520-1533-40C5-AD09-953C574F14BCÄ-?- not found
C:\PROGRA~2\????Ä???8520-1533-40C5-AD09-953C574F14BCÄ??? not found
C:\PROGRA~2\????Ä???8520-1533-40C5-AD09-953C574F14BCÄ??? not found
C:\PROGRA~2\????Ä???8520-1533-40C5-AD09-953C574F14BCÄ??? not found
C:\Users\Bobi\AppData\Roaming\Mozilla\Firefox\Profiles\lbiupxjx.default\extensions\39ffxtbr@MapsGalaxy_39.com not found
C:\Program Files\Fraveen 1.4 deleted
C:\Program Files\video MediaPlay-Air deleted
C:\Users\Bobi\.android deleted
C:\Program Files\The Sea App (Firefox) deleted
C:\found.000 deleted
C:\Users\Bobi\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\BearShare.lnk deleted
C:\PROGRA~2\NTIRegistry.REG deleted
C:\Users\Bobi\AppData\Local\nsf4087.tmp deleted
C:\Users\Bobi\AppData\Local\nszE41D.tmp deleted
C:\Users\Bobi\AppData\Local\BearShare deleted
C:\Users\Bobi\AppData\Local\cache deleted
C:\Users\Public\AlexaNSISPlugin.8500.dll deleted
C:\Users\Bobi\AppData\LocalLow\bearsharemusicboxtoolbar181 deleted
C:\Windows\system32\config\systemprofile\AppData\LocalLow\AVG SafeGuard toolbar deleted
C:\Windows\Reimage.ini deleted
C:\Windows\system32\tasks\Total Domination W1 deleted
C:\Users\wangjihua deleted
C:\Windows\System32\searchplugins deleted
C:\Windows\System32\Extensions deleted
C:\Users\Bobi\AppData\Roaming\Mozilla\Firefox\Profiles\lbiupxjx.default\bearsharemusicboxtoolbar181 deleted
C:\Users\Bobi\Desktop\Search.lnk deleted
C:\PROGRA~2\Setup.exe deleted
C:\Users\Bobi\AppData\Roaming\Mozilla\Firefox\Profiles\lbiupxjx.default\extensions\{cfc3366e-c743-48b5-a136-642e86be865e} deleted

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions]
"wrc@avast.com"="C:\Program Files\AVAST Software\Avast\WebRep\FF" [02/07/2014 16:35]

==== Firefox Extensions ======================

ProfilePath: C:\Users\Bobi\AppData\Roaming\Mozilla\Firefox\Profiles\lbiupxjx.default
- Ask New Tabs - %ProfilePath%\extensions\{C709527E-547E-7FB7-81F0-1377F22FC770}
- Iplex to ALLPlayer - %ProfilePath%\extensions\IplextoALL@ALLPlayer.org.xpi
- Polski Language Pack - %ProfilePath%\extensions\langpack-pl@firefox.mozilla.org.xpi
- ALLYouTubeDownloader - %ProfilePath%\extensions\YouTubetoALL@ALLPlayer.org.xpi

ProfilePath: C:\Users\Bobi\AppData\Roaming\TomTom\HOME\Profiles\nz2iaf0x.default
- Undetermined - C:\Program Files\TomTom HOME 2\xul\extensions\MapShare-status@tomtom.com
- Undetermined - C:\Program Files\TomTom HOME 2\xul\extensions\baseTheme@tomtom.com

AppDir: C:\Program Files\Mozilla Firefox
- Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

==== Firefox Plugins ======================

Profilepath: C:\Users\Bobi\AppData\Roaming\Mozilla\Firefox\Profiles\lbiupxjx.default
738C29EAC995029E13333034C1402F56 - C:\Windows\system32\Macromed\Flash\NPSWF32_14_0_0_125.dll - Shockwave Flash
270EE43CC00609B9937AAF94E1E970D4 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll - iTunes Application Detector
AB87EEFFD18F2BAAFC274E7075EA6C67 - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll - Windows Presentation Foundation / Windows Presentation Foundation


==== Chrome Look ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
ibnjmihbbanannlbobkbmnmckjnmdnom - No path found[]

HKEY_CURRENT_USER\SOFTWARE\Google\Chrome\Extensions
ibnjmihbbanannlbobkbmnmckjnmdnom - No path found[]

Rocket - Bobi\AppData\Local\Rocket\User Data\Default\Extensions\ibnjmihbbanannlbobkbmnmckjnmdnom

==== Chrome Fix ======================

C:\Users\Bobi\AppData\Local\Rocket\User Data\Default\Extensions\ibnjmihbbanannlbobkbmnmckjnmdnom deleted successfully
C:\Users\Bobi\AppData\Local\Rocket\User Data\Default\Local Storage\chrome-extension_ibnjmihbbanannlbobkbmnmckjnmdnom_0.localstorage deleted successfully
C:\Users\Bobi\AppData\Local\Rocket\User Data\Default\Local Storage\chrome-extension_ibnjmihbbanannlbobkbmnmckjnmdnom_0.localstorage-journal deleted successfully
C:\Users\Bobi\AppData\Local\Rocket\User Data\Default\Local Extension Settings\ibnLogfile of random's system information tool 1.10 (written by random/random)
Run by Bobi at 2014-07-03 18:54:58
Microsoft® Windows Vista™ Home Premium
System drive C: has 33 GB (33%) free of 102 GB
Total RAM: 2037 MB (54% free)

HijackThis download failed

======Scheduled tasks folder======

C:\Windows\tasks\27220085-a1e8-48a2-98b4-5d4a69718ae6-1.job - C:\Program Files\video MediaPlay-Air\video MediaPlay-Air-codedownloader.exe /tXmRNJozj /BkEysK=task /FhlATiZ='video MediaPlay-Air' /YBvfqcD=59599 /NtGZE='001673' /YsoJB='verticals-ads,pops,shopping' /XZBmYJtZ='0' /FpRzft=6FCE1373EA094FBCA96ACA93CB2E71A5IE /RsCzSHPIj=dafca32d082c6ee3fdc28363a4de28eb /XvcAS=1_34_06_10 /XULNPzFkr=1.34.6.10 /JQMoJs=1404162213 /LpujMNl=http://stats.democlientnet.com /yrsve=http://errors.democlientnet.com /GzaKgsZ=http://js.democlientnet.com /HuoRJHY=ff /uGImq='video MediaPlay-Air' /OavAy=http://js.clientdemocloud.com /rCmieM /TSndPTjZ='{"asw":[0, 100663300, 2048]}' /VryOYXuD='http://update.democlientnet.com/ie_code ... pdate.json' /BkEysK='task' /AMkAUj=''
C:\Windows\tasks\27220085-a1e8-48a2-98b4-5d4a69718ae6-11.job - C:\Program Files\video MediaPlay-Air\27220085-a1e8-48a2-98b4-5d4a69718ae6-11.exe /HpIMTze=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
C:\Windows\tasks\27220085-a1e8-48a2-98b4-5d4a69718ae6-2.job - C:\Program Files\video MediaPlay-Air\27220085-a1e8-48a2-98b4-5d4a69718ae6-2.exe /PQPXSC /FhlATiZ='video MediaPlay-Air' /YBvfqcD=59599 /NtGZE='001673' /YsoJB='verticals-ads,pops,shopping' /XZBmYJtZ='0' /FpRzft=6FCE1373EA094FBCA96ACA93CB2E71A5IE /RsCzSHPIj=dafca32d082c6ee3fdc28363a4de28eb /XvcAS=1_34_06_10 /JQMoJs=1404162213 /LpujMNl=http://stats.democlientnet.com /yrsve=http://errors.democlientnet.com /gdoHLU=11111111-1111-1111-1111-110511951199 /HuoRJHY=ff /vYhtWbVW /rCmieM /VryOYXuD='http://update.democlientnet.com/ie_enab ... pdate.json' /BkEysK='task' /AMkAUj=''
C:\Windows\tasks\27220085-a1e8-48a2-98b4-5d4a69718ae6-3.job - C:\Program Files\video MediaPlay-Air\27220085-a1e8-48a2-98b4-5d4a69718ae6-3.exe /HpIMTze=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
C:\Windows\tasks\27220085-a1e8-48a2-98b4-5d4a69718ae6-4.job - C:\Program Files\video MediaPlay-Air\27220085-a1e8-48a2-98b4-5d4a69718ae6-4.exe /EUtnYs /FhlATiZ='video MediaPlay-Air' /LLWGQlaq='C:\Program Files\video MediaPlay-Air\59599.xpi' /YBvfqcD=59599 /NtGZE='001673' /YsoJB='verticals-ads,pops,shopping' /XZBmYJtZ='0' /FpRzft=6FCE1373EA094FBCA96ACA93CB2E71A5IE /RsCzSHPIj=dafca32d082c6ee3fdc28363a4de28eb /XvcAS=1_34_06_10 /XULNPzFkr=1.34.6.10 /JQMoJs=1404162213 /LpujMNl=http://stats.democlientnet.com /yrsve=http://errors.democlientnet.com /EujpiMex=300 /WWIeWuqHY=ff806580-6db3-4c09-ba06-d6caf0e99172@8453cb25-7fef-4ed5-8934-b08be5605617.com /RvbIiAigO=0.94 /znkMkjOqK=aff8065806db34c09ba06d6caf0e991728453cb257fef4ed58934b08be5605617com59599 /osBrP=https://w9u6a2p6.ssl.hwcdn.net/plugin/f ... /59599.rdf /zSojPXMk='video MediaPlay-Air' /kcKUysOe='MediaPlayerEnhance Extension' /kmwbtoBq='enter' /HuoRJHY=ff /TSndPTjZ='{"asw":[0, 100663300, 2048]}' /rCmieM /mWOuLerk /WudHDDlkX /VryOYXuD='http://update.democlientnet.com/ff_agen ... pdate.json' /BkEysK='task' /AMkAUj=''
C:\Windows\tasks\27220085-a1e8-48a2-98b4-5d4a69718ae6-5.job - C:\Program Files\video MediaPlay-Air\27220085-a1e8-48a2-98b4-5d4a69718ae6-5.exe /XvSnNF /FhlATiZ='video MediaPlay-Air' /YBvfqcD=59599 /NtGZE='001673' /YsoJB='verticals-ads,pops,shopping' /XZBmYJtZ='0' /FpRzft=6FCE1373EA094FBCA96ACA93CB2E71A5IE /RsCzSHPIj=dafca32d082c6ee3fdc28363a4de28eb /XvcAS=1_34_06_10 /JQMoJs=1404162213 /Lpu

Stahnete RKill http://download.bleepingcomputer.com/grinler/rkill.com

• Pokud ho havet blokuje, pouzijte jeden z nasledujicich - i ty prejmenovane

  Rkill EXE:
  http://download.bleepingcomputer.com/grinler/rkill.exe
  
  Rkill iExplore.exe:
  http://download.bleepingcomputer.com/gr ... xplore.exe
  
  Rkill uSeRiNiT.exe:
  http://download.bleepingcomputer.com/gr ... eRiNiT.exe
  
  Rkill WiNlOgOn.exe:
  http://download.bleepingcomputer.com/gr ... NlOgOn.exe

• Ulozte nejlepena plochu a ukoncete vsechny aplikace (jinak to udela RKill za Vas)
• Spustte tradicne dvojklikem - program probehne do par sekund a ukonci i svou cinnost
• RKill ukonci vsechny ne-systemove procesy - tedy i procesy, pod kterymi bezi havet
• Na plose vznikne log Rkill.txt ten mi sem vlozte
• Ted nerestartujte PC - prisli byste o ucinek RKillu

PROSIM CTETE DUKLADNE NAVOD - TATO UTILITA MA VELKOU SCHOPNOST MAZAT A JE NUTNE JI APLIKOVAT JEN NA DOPORUCENI, JINAK VAM MUZE JIT SYSTEM DO KYTEK
Stahnete a ulozte na plochu Combofix http://download.bleepingcomputer.com/sUBs/ComboFix.exe

• Vypnete vsechny rezidentni bezpecnostní programy - firewally, antiviry, antispywary apod.
• Pokud mate Win XP spustte pod uctem Spravce\Administratora
• Pokud mate Win Vista ci Win 7, kliknete na Combofix pravym a dejte Run As Administrator ci Spustit jako spravce
• Ihned po startu se zobrazi stranka s licencnim ujednanim, pokracujte kliknutim na Ano
• Pokud Vam CF nabidne instalaci Konzoly pro zotaveni, tak souhlaste
• Dale postupujte dle pokynu, behem scanu nechte PC naprosto v klidu - nespoustejte zadne aplikace a neklikejte do zobrazujiciho se okna
• Scan by mel trvat cca 10 min, ale pokud bude PC hodne zaneseno, muze se cas prodlouzit
• Po dokonceni skenu a pripadnem restartu CF zobrazi log, pripadne jej najdete zde C:\ComboFix.txt, jeho obsah sem vlozte
• Detailni postup vc. obrazku mate zde http://www.bleepingcomputer.com/combofi ... t-combofix

posilam log Rkill:

Rkill 2.6.7 by Lawrence Abrams (Grinler)
http://www.bleepingcomputer.com/
Copyright 2008-2014 BleepingComputer.com
More Information about Rkill can be found at this link:
http://www.bleepingcomputer.com/forums/topic308364.html

Program started at: 07/04/2014 11:43:42 AM in x86 mode.
Windows Version: Windows Vista (TM) Home Premium

Checking for Windows services to stop:

* No malware services found to stop.

Checking for processes to terminate:

* C:\Windows\System32\WLTRAY.EXE (PID: 2528) [WD-HEUR]
* C:\Windows\System32\WLTRYSVC.EXE (PID: 3972) [WD-HEUR]
* C:\Windows\System32\bcmwltry.exe (PID: 4036) [WD-HEUR]

3 proccesses terminated!

Checking Registry for malware related settings:

* No issues found in the Registry.

Resetting .EXE, .COM, & .BAT associations in the Windows Registry.

Performing miscellaneous checks:

* No issues found.

Checking Windows Service Integrity:

* No issues found.

Searching for Missing Digital Signatures:

* No issues found.

Checking HOSTS File:

* HOSTS file entries found:


127.0.0.1 localhost
::1 localhost

Program finished at: 07/04/2014 11:44:15 AM
Execution time: 0 hours(s), 0 minute(s), and 33 seconds(s)

na pocitaci, ze ktereho stahuji a komunikuji s vami, mi pri stahovani souboru " Combofix" me toto stahovani zablokoval Avast - co s tim?

Docasne Avasty vypnete

Posilam log Combofix. PC se neresetovalo.

Log:

ComboFix 14-07-03.01 - Bobi 04/07/2014 12:30:31.1.2 - x86
Microsoft® Windows Vista™ Home Premium 6.0.6000.0.1252.44.1033.18.2037.1249 [GMT 1:00]
Running from: c:\users\Bobi\Desktop\ComboFix.exe
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\293
c:\programdata\293\{9C391D6B-3976-4707-92FC-E6C745A4F65D}.swf
c:\programdata\Roaming
c:\programdata\Roaming\Intel\Wireless\Settings\Settings.ini
.
.
((((((((((((((((((((((((( Files Created from 2014-06-04 to 2014-07-04 )))))))))))))))))))))))))))))))
.
.
2014-07-04 10:20 . 2009-09-02 06:13 131072 ----a-w- c:\windows\system32\DellSPMsg.dll
2014-07-03 19:46 . 2014-07-03 19:28 24064 ----a-w- c:\windows\zoek-delete.exe
2014-07-03 19:29 . 2014-07-03 19:45 -------- d-----w- C:\zoek_backup
2014-07-03 19:07 . 2014-07-03 19:10 -------- d-----w- C:\AdwCleaner
2014-07-03 18:47 . 2014-07-03 18:47 -------- d-----w- c:\users\Bobi\AppData\Local\MigWiz
2014-07-03 17:02 . 2014-07-03 17:02 -------- d-----w- c:\programdata\102F4
2014-07-03 12:35 . 2014-07-03 12:35 -------- d-----w- c:\users\Bobi\AppData\Local\Dell
2014-07-03 11:37 . 2014-07-03 11:38 -------- d-----w- c:\program files\Mozilla Maintenance Service
2014-07-03 10:45 . 2014-07-03 10:45 -------- d-----w- C:\temp
2014-07-03 10:42 . 2014-07-03 10:42 -------- d-----w- c:\program files\Marvell
2014-07-03 10:39 . 2004-07-15 23:18 172032 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\01\Intel32\iuser.dll
2014-07-03 10:39 . 2014-07-03 10:39 303104 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\01\Intel32\setup.dll
2014-07-03 10:39 . 2014-07-03 10:39 180356 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\01\Intel32\iGdi.dll
2014-07-03 10:39 . 2004-07-15 23:20 733184 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\01\Intel32\iKernel.dll
2014-07-03 10:39 . 2004-07-15 23:20 69715 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\01\Intel32\ctor.dll
2014-07-03 10:39 . 2004-07-15 23:19 266240 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\01\Intel32\iscript.dll
2014-07-03 10:39 . 2004-07-15 23:18 5632 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\01\Intel32\DotNetInstaller.exe
2014-07-03 10:27 . 2009-07-14 01:19 38480 ----a-w- c:\windows\system32\drivers\WdfLdr.sys
2014-07-03 10:27 . 2009-07-14 01:19 445008 ----a-w- c:\windows\system32\drivers\Wdf01000.sys
2014-07-03 10:25 . 2010-02-26 20:32 109122 ----a-w- c:\windows\system32\Vxdif.dll
2014-07-03 10:25 . 2009-07-14 11:27 1461992 ----a-w- c:\windows\system32\WdfCoInstaller01009.dll
2014-07-03 10:25 . 2010-04-15 12:36 252536 ----a-w- c:\windows\system32\drivers\Apfiltr.sys
2014-07-02 19:54 . 2014-07-02 19:54 -------- d-----w- c:\users\Bobi\AppData\Local\Apps
2014-07-02 15:39 . 2014-07-02 15:39 -------- d-----w- c:\users\Bobi\AppData\Roaming\AVAST Software
2014-07-02 15:35 . 2014-07-02 15:35 57672 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2014-07-02 15:35 . 2014-07-02 15:35 178304 ----a-w- c:\windows\system32\drivers\aswVmm.sys
2014-07-02 15:35 . 2014-07-02 15:35 403440 ------w- c:\windows\system32\drivers\aswSP.sys
2014-07-02 15:35 . 2014-07-02 15:35 49944 ----a-w- c:\windows\system32\drivers\aswRvrt.sys
2014-07-02 15:35 . 2014-07-02 15:35 774392 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2014-07-02 15:35 . 2014-07-02 15:35 70384 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2014-07-02 15:35 . 2014-07-02 15:35 54832 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2014-07-02 15:35 . 2014-07-02 15:35 35656 ------w- c:\windows\system32\drivers\aswFsBlk.sys
2014-07-02 15:35 . 2014-07-02 15:34 26136 ----a-w- c:\windows\system32\drivers\aswKbd.sys
2014-07-02 15:35 . 2014-07-02 15:35 269216 ----a-w- c:\windows\system32\aswBoot.exe
2014-07-02 15:35 . 2014-07-02 15:35 43152 ------w- c:\windows\avastSS.scr
2014-07-02 15:32 . 2014-07-02 15:32 -------- d-----w- c:\program files\AVAST Software
2014-07-02 14:51 . 2014-07-02 14:51 -------- d-----w- c:\program files\trend micro
2014-07-02 14:51 . 2014-07-02 14:51 -------- d-----w- C:\rsit
2014-07-01 19:31 . 2014-07-01 19:31 -------- d-----w- c:\users\Bobi\AppData\Roaming\PeerNetworking
2014-07-01 16:08 . 2014-07-02 15:40 -------- d-----w- c:\program files\VS Revo Group
2014-07-01 15:44 . 2014-07-01 16:09 -------- d-----w- c:\programdata\Spybot - Search & Destroy
2014-06-30 21:21 . 2014-06-30 21:21 -------- d-----w- c:\users\Bobi\AppData\Local\com
2014-06-30 17:52 . 2014-06-30 18:12 -------- d-----w- c:\program files\Amazon
2014-06-29 20:07 . 2014-06-30 16:09 -------- d-----w- c:\program files\SBLink
2014-06-29 17:26 . 2014-06-28 21:10 55224 ----a-w- c:\windows\system32\drivers\{57f143ae-1ecd-493d-9ddb-32c45a3cecd5}t.sys
2014-06-29 15:16 . 2014-06-29 15:16 -------- d-----w- c:\programdata\NTIReg
2014-06-29 15:14 . 2014-06-29 15:14 -------- d-----w- c:\windows\system32\drivers\nti
2014-06-29 15:13 . 2014-06-30 16:38 -------- d-----w- c:\program files\NTI
2014-06-28 20:28 . 2014-06-28 20:28 -------- d-----w- c:\users\Bobi\AppData\Roaming\vlc
2014-06-28 20:19 . 2014-06-30 16:03 411 ----a-w- c:\windows\system32\ff.bin
2014-06-28 20:15 . 2014-06-30 15:59 546 ----a-w- c:\windows\system32\schtasks.bin
2014-06-28 18:16 . 2014-06-30 16:47 -------- d-----w- c:\users\Bobi\AppData\Local\PriceMeter Express
2014-06-28 18:05 . 2014-06-30 18:00 -------- d-----w- c:\users\Bobi\AppData\Roaming\uPlayer
2014-06-28 17:35 . 2014-06-28 17:36 -------- d-----w- c:\program files\4B5F3986-688D-4EE0-8390-82983E6E96A7
2014-06-28 17:33 . 2014-06-28 17:33 -------- d-----w- c:\users\Bobi\AppData\Roaming\Plarium
2014-06-28 00:23 . 2014-07-02 15:44 -------- d-----w- c:\program files\McAfee Security Scan
2014-06-27 20:10 . 2014-06-27 20:10 -------- d-----w- c:\users\Bobi\AppData\Roaming\StormFall
2014-06-27 20:10 . 2014-06-27 20:10 -------- d-----w- c:\users\Bobi\AppData\Local\StormFall
2014-06-27 20:07 . 2014-06-27 20:08 -------- d-----w- c:\programdata\UAB
2014-06-27 20:06 . 2014-06-27 20:06 -------- d-----w- c:\users\Bobi\AppData\Local\PC_Drivers_Headquarters
2014-06-27 20:06 . 2014-06-27 20:06 -------- d-----w- c:\programdata\Driver Support
2014-06-27 20:05 . 2014-06-30 15:40 -------- d-----w- c:\users\Bobi\AppData\Local\Rocket
2014-06-27 20:04 . 2014-06-27 20:04 -------- d-----w- c:\program files\Driver Support
2014-06-27 20:02 . 2014-06-30 17:34 -------- d-----w- c:\users\Bobi\AppData\Local\StormAlerts
2014-06-27 09:37 . 2014-06-17 01:57 8140904 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{8596E3E7-2659-40C9-BA63-A5DE4FF3ACA3}\mpengine.dll
2014-06-16 22:32 . 2014-06-16 22:33 -------- d-----w- c:\users\Bobi\AppData\Local\ALLMediaServer
2014-06-16 22:32 . 2014-06-16 22:33 -------- d-----w- c:\program files\ALLMediaServer
2014-06-11 22:14 . 2014-06-11 22:14 -------- d-----w- c:\users\Bobi\AppData\Roaming\NapiProjekt
2014-06-11 21:56 . 2014-06-11 21:56 -------- d-----w- c:\program files\ALLPlayer Remote
2014-06-11 21:54 . 2014-06-30 17:09 -------- d-----w- c:\program files\NapiProjekt
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-06-30 20:54 . 2013-07-09 06:57 71344 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2014-06-30 20:54 . 2013-07-09 06:57 699056 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2014-06-02 20:25 . 2014-06-02 20:25 47488 ----a-w- c:\windows\system32\drivers\netfilter.sys
2014-05-14 12:51 . 2006-11-02 09:14 2421760 ----a-w- c:\windows\system32\wucltux.dll
2014-05-14 12:51 . 2006-11-02 09:13 87552 ----a-w- c:\windows\system32\wudriver.dll
2014-05-14 12:51 . 2006-11-02 09:13 171608 ----a-w- c:\windows\system32\wuwebv.dll
2014-05-14 12:51 . 2006-11-02 09:13 44768 ----a-w- c:\windows\system32\wups2.dll
2014-05-14 12:51 . 2006-11-02 09:13 35552 ----a-w- c:\windows\system32\wups.dll
2014-05-14 12:51 . 2006-11-02 08:50 30208 ----a-w- c:\windows\system32\xolehlp.dll
2014-05-14 12:51 . 2006-11-02 09:14 1929952 ----a-w- c:\windows\system32\wuaueng.dll
2014-05-14 12:51 . 2006-11-02 09:14 575704 ----a-w- c:\windows\system32\wuapi.dll
2014-05-14 12:51 . 2006-11-02 09:13 33792 ----a-w- c:\windows\system32\wuapp.exe
2014-05-14 12:51 . 2006-11-02 09:13 53472 ----a-w- c:\windows\system32\wuauclt.exe
2014-05-14 12:51 . 2006-11-02 08:51 788992 ----a-w- c:\windows\system32\rpcrt4.dll
2014-05-14 12:51 . 2006-11-02 09:12 229888 ----a-w- c:\windows\system32\msshsq.dll
2014-05-14 12:51 . 2006-11-02 08:51 500736 ----a-w- c:\windows\system32\msdtcprx.dll
2014-05-14 12:51 . 2014-05-14 12:58 8704 ----a-w- c:\windows\system32\hcrstco.dll
2014-05-14 12:51 . 2013-07-08 14:48 8704 ----a-w- c:\windows\system32\hccoin.dll
2014-05-14 12:51 . 2013-07-08 14:48 73216 ----a-w- c:\windows\system32\drivers\usbccgp.sys
2014-05-14 12:51 . 2013-07-08 14:48 5888 ----a-w- c:\windows\system32\drivers\usbd.sys
2014-05-14 12:51 . 2013-07-08 14:48 38400 ----a-w- c:\windows\system32\drivers\usbehci.sys
2014-05-14 12:51 . 2013-07-08 14:48 23040 ----a-w- c:\windows\system32\drivers\usbuhci.sys
2014-05-14 12:51 . 2013-07-08 14:48 224768 ----a-w- c:\windows\system32\drivers\usbport.sys
2014-05-14 12:51 . 2013-07-08 14:48 192000 ----a-w- c:\windows\system32\drivers\usbhub.sys
2014-05-14 12:51 . 2006-11-02 08:51 17512 ----a-w- c:\windows\system32\drivers\viaide.sys
2014-05-14 12:51 . 2006-11-02 08:51 13416 ----a-w- c:\windows\system32\drivers\pciide.sys
2014-05-14 12:51 . 2006-11-02 07:36 88680 ----a-w- c:\windows\system32\drivers\nvraid.sys
2014-05-14 12:51 . 2006-11-02 07:36 40040 ----a-w- c:\windows\system32\drivers\nvstor.sys
2014-05-14 12:43 . 2013-07-08 14:48 53248 ----a-w- c:\windows\system32\drivers\hdaudbus.sys
2014-05-14 12:43 . 2006-11-02 12:41 36864 ----a-w- c:\windows\system32\drivers\en-US\http.sys.mui
2014-05-14 12:43 . 2006-11-02 08:51 15464 ----a-w- c:\windows\system32\drivers\amdide.sys
2014-05-14 12:43 . 2006-11-02 08:51 16488 ----a-w- c:\windows\system32\drivers\cmdide.sys
2014-05-14 12:43 . 2006-11-02 08:51 14952 ----a-w- c:\windows\system32\drivers\aliide.sys
2014-04-24 11:21 . 2014-04-25 10:56 55232 ----a-w- c:\windows\system32\drivers\{ba099a85-e825-4802-83e7-d386a5b4a734}t.sys
2014-04-17 06:20 . 2014-04-17 06:20 1161080 ----a-w- c:\windows\system32\Radsteroids.33AABCF1AD13.dll
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-11 02:09 131248 ----a-w- c:\users\Bobi\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-11 02:09 131248 ----a-w- c:\users\Bobi\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-11 02:09 131248 ----a-w- c:\users\Bobi\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2013-07-08 1232896]
"DellSupportCenter"="c:\program files\Dell Support Center\bin\sprtcmd.exe" [2007-11-15 202544]
"ALLMediaServer"="c:\program files\ALLMediaServer\MediaServer.exe" [2013-07-17 4985856]
"ALLPlayer WiFi Remote"="c:\program files\ALLPlayer Remote\ALLPlayerRemoteControl.exe" [2014-01-31 5052800]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2006-11-02 201728]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Broadcom Wireless Manager UI"="c:\windows\system32\WLTRAY.exe" [2007-12-08 3444736]
"dscactivate"="c:\program files\Dell Support Center\gs_agent\custom\dsca.exe" [2007-11-15 16384]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2013-05-31 152392]
"AvastUI.exe"="c:\program files\AVAST Software\Avast\AvastUI.exe" [2014-07-02 3568312]
"Apoint"="c:\program files\DellTPad\Apoint.exe" [2010-04-05 288040]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2007-09-05 141848]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2007-09-05 166424]
"Persistence"="c:\windows\system32\igfxpers.exe" [2007-09-05 137752]
.
c:\users\Bobi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Dropbox.lnk - c:\users\Bobi\AppData\Roaming\Dropbox\bin\Dropbox.exe /systemstartup [2014-5-31 33322976]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Ultrawideband Control Center.lnk - c:\program files\Dell\Dell WUSB\WQ_Tray2.exe [2007-8-4 1965112]
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0\0sdnclean.exe
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
ipripsvc REG_MULTI_SZ iprip
.
Contents of the 'Scheduled Tasks' folder
.
2014-07-04 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-07-09 20:54]
.
2014-07-04 c:\windows\Tasks\User_Feed_Synchronization-{C740ADAA-A654-4531-AC5F-E0B4364D25C2}.job
- c:\windows\system32\msfeedssync.exe [2006-11-02 09:45]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.google.co.uk/
FF - ProfilePath - c:\users\Bobi\AppData\Roaming\Mozilla\Firefox\Profiles\lbiupxjx.default\
FF - prefs.js: browser.search.defaulturl - hxxp://www.google.com/search?btnG=Google+Search&q=
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://www.google.co.uk
FF - prefs.js: keyword.URL - hxxp://www.google.com/search?btnG=Google+Search&q=
FF - prefs.js: network.proxy.type - 4
FF - ExtSQL: 2014-06-28 18:08; webbooster@iminent.com; c:\users\Bobi\AppData\Roaming\Mozilla\Firefox\Profiles\lbiupxjx.default\extensions\webbooster@iminent.com.xpi
.
- - - - ORPHANS REMOVED - - - -
.
Toolbar-10 - (no file)
ShellIconOverlayIdentifiers-{472083B0-C522-11CF-8763-00608CC02F24} - (no file)
HKCU-Run-BearShare - c:\program files\BearShare Applications\BearShare\BearShare.exe
HKLM-Run-AnyProtect Scanner - c:\program files\AnyProtectEx\AnyProtect.exe
HKLM-Run-AnyProtect Tray - c:\program files\AnyProtectEx\AnyProtectTrayIcon.exe
HKLM-Run-fst_gb_49 - (no file)
AddRemove-01_Simmental - c:\program files\SAMSUNG\USB Drivers\01_Simmental\Uninstall.exe
AddRemove-02_Siberian - c:\program files\SAMSUNG\USB Drivers\02_Siberian\Uninstall.exe
AddRemove-03_Swallowtail - c:\program files\SAMSUNG\USB Drivers\03_Swallowtail\Uninstall.exe
AddRemove-04_semseyite - c:\program files\SAMSUNG\USB Drivers\04_semseyite\Uninstall.exe
AddRemove-3162183995.api.allplayer.nextplus.pl - c:\program files\Microsoft Silverlight\5.1.30214.0\Silverlight.Configuration.exe
AddRemove-BearShare - c:\program files\BearShare Applications\BearShare\uninstall.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2014-07-04 12:53
Windows 6.0.6000 NTFS
.
scanning hidden processes ...
.
scanning hidden autostart entries ...
.
scanning hidden files ...
.
.
c:\users\Bobi\AppData\Local\Temp\catchme.dll 53248 bytes executable
C:\avast! sandbox
.
scan completed successfully
hidden files: 2
.
**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.htm\UserChoice]
@DenLogfile of random's system information tool 1.10 (written by random/random)
Run by Bobi at 2014-07-03 18:54:58
Microsoft® Windows Vista™ Home Premium
System drive C: has 33 GB (33%) free of 102 GB
Total RAM: 2037 MB (54% free)

HijackThis download failed

======Scheduled tasks folder======

C:\Windows\tasks\27220085-a1e8-48a2-98b4-5d4a69718ae6-1.job - C:\Program Files\video MediaPlay-Air\video MediaPlay-Air-codedownloader.exe /tXmRNJozj /BkEysK=task /FhlATiZ='video MediaPlay-Air' /YBvfqcD=59599 /NtGZE='001673' /YsoJB='verticals-ads,pops,shopping' /XZBmYJtZ='0' /FpRzft=6FCE1373EA094FBCA96ACA93CB2E71A5IE /RsCzSHPIj=dafca32d082c6ee3fdc28363a4de28eb /XvcAS=1_34_06_10 /XULNPzFkr=1.34.6.10 /JQMoJs=1404162213 /LpujMNl=http://stats.democlientnet.com /yrsve=http://errors.democlientnet.com /GzaKgsZ=http://js.democlientnet.com /HuoRJHY=ff /uGImq='video MediaPlay-Air' /OavAy=http://js.clientdemocloud.com /rCmieM /TSndPTjZ='{"asw":[0, 100663300, 2048]}' /VryOYXuD='http://update.democlientnet.com/ie_code ... pdate.json' /BkEysK='task' /AMkAUj=''
C:\Windows\tasks\27220085-a1e8-48a2-98b4-5d4a69718ae6-11.job - C:\Prog

Stahnete Malwarebytes Anti-Rootkit http://www.bleepingcomputer.com/downloa ... i-rootkit/

• Ulozte nejlepe na Plochu a rozbalte
• Spustte kliknutim na mbar
• Nyni postupne kliknete na Next a Update
• Po dokonceni update (aktualizace) databaze kliknete opet na Next
• Nechte zaskrtnute vsechny tri moznosti a klinete na Scan cimz spustite prohledavani PC
• Po dokonceni skenu (cca 5 minutek) zkontrolujte, zda-li je u vsech nalezu (samozrejme pokud budou) zatrzitko
• Tez zkontrolujte, jetsli je zatrzitko u Create Restore point
• Nyni kliknete na CleanUp cimz nalezenou infekci odstranime
• PC bude restartovan
• Slozka mbar by mela obsahovat log (a zrejme se i sam otevre) mbar-log-rok-mesic-den (hodina-minuta-sekunda).txt, ten mi sem dejte

stahl jsem, rozbalil a aktualizoval MBar.
Ulozil jsem ho na USB a prenesl do potizeneho pocitace. Tam jsem ho chtel spustit (scan), ale vyhazuje me to: Could not load DDAdriver.
Na tomto postizenem pocitaci mi nejde pripojeni k internetu.
co s tim mam delat?

Spustte MiniTool dle kolegy

stell píše:daj spustit tento program
http://www.bleepingcomputer.com/downloa ... box/dl/65/

Spustit>.zafajknut.
1:Report IEPROXY
2:Report FFPROXY
3:List comtent OFF HOSTS
4:List IP CONFIGURATION
5:LIST WINSOCK...
6:List Last 10 EvENTS..
7:Only problems
8:Klik GO a log nech ti da do fora.

Log MBA:

MiniToolBox by Farbar Version: 25-06-2014
Ran by Bobi (administrator) on 04-07-2014 at 13:45:32
Running from "C:\Users\Bobi\Desktop"
Microsoft® Windows Vista™ Home Premium (X86)
Boot Mode: Normal
***************************************************************************

========================= IE Proxy Settings: ==============================

Proxy is not enabled.
No Proxy Server is set.

========================= FF Proxy Settings: ==============================

"network.proxy.type", 4
========================= Hosts content: =================================

127.0.0.1 localhost

========================= IP Configuration: ================================



# ----------------------------------
# IPv4 Configuration
# ----------------------------------
pushd interface ipv4

reset
set interface luid=loopback_0 forwarding=disabled advertise=disabled mtu=0 metric=0 metric=0 nud=disabled basereachabletime=0 retransmittime=0 routerdiscovery=disabled managedaddress=disabled otherstateful=disabled weakhostsend=disabled weakhostreceive=disabled ignoredefaultroutes=disabled
set interface luid=ethernet_1 forwarding=disabled advertise=disabled mtu=0 metric=0 metric=0 nud=disabled basereachabletime=0 retransmittime=0 routerdiscovery=disabled managedaddress=disabled otherstateful=disabled weakhostsend=disabled weakhostreceive=disabled ignoredefaultroutes=disabled
set interface luid=ethernet_2 forwarding=disabled advertise=disabled mtu=0 metric=0 metric=0 nud=disabled basereachabletime=0 retransmittime=0 routerdiscovery=disabled managedaddress=disabled otherstateful=disabled weakhostsend=disabled weakhostreceive=disabled ignoredefaultroutes=disabled
set interface luid=wireless_0 forwarding=disabled advertise=disabled mtu=0 metric=0 metric=0 nud=disabled basereachabletime=0 retransmittime=0 routerdiscovery=disabled managedaddress=disabled otherstateful=disabled weakhostsend=disabled weakhostreceive=disabled ignoredefaultroutes=disabled
set interface luid=ethernet_6 forwarding=disabled advertise=disabled mtu=0 metric=0 metric=0 nud=disabled basereachabletime=0 retransmittime=0 routerdiscovery=disabled managedaddress=disabled otherstateful=disabled weakhostsend=disabled weakhostreceive=disabled ignoredefaultroutes=disabled
set interface luid=ethernet_7 forwarding=disabled advertise=disabled mtu=0 metric=0 metric=0 nud=disabled basereachabletime=0 retransmittime=0 routerdiscovery=disabled managedaddress=disabled otherstateful=disabled weakhostsend=disabled weakhostreceive=disabled ignoredefaultroutes=disabled
set interface luid=other_1 forwarding=disabled advertise=disabled mtu=0 metric=0 metric=0 nud=disabled basereachabletime=0 retransmittime=0 routerdiscovery=disabled managedaddress=disabled otherstateful=disabled weakhostsend=disabled weakhostreceive=disabled ignoredefaultroutes=disabled
set interface luid=ethernet_14 forwarding=disabled advertise=disabled mtu=0 metric=0 metric=0 nud=disabled basereachabletime=0 retransmittime=0 routerdiscovery=disabled managedaddress=disabled otherstateful=disabled weakhostsend=disabled weakhostreceive=disabled ignoredefaultroutes=disabled
set interface luid=wireless_2 forwarding=disabled advertise=disabled mtu=0 metric=0 metric=0 nud=disabled basereachabletime=0 retransmittime=0 routerdiscovery=disabled managedaddress=disabled otherstateful=disabled weakhostsend=disabled weakhostreceive=disabled ignoredefaultroutes=disabled
set interface luid=ethernet_13 forwarding=disabled advertise=disabled mtu=0 metric=0 metric=0 nud=disabled basereachabletime=0 retransmittime=0 routerdiscovery=disabled managedaddress=disabled otherstateful=disabled weakhostsend=disabled weakhostreceive=disabled ignoredefaultroutes=disabled
set interface luid=wireless_1 forwarding=disabled advertise=disabled mtu=0 metric=0 metric=0 nud=disabled basereachabletime=0 retransmittime=0 routerdiscovery=disabled managedaddress=disabled otherstateful=disabled weakhostsend=disabled weakhostreceive=disabled ignoredefaultroutes=disabled
set interface luid=wireless_3 forwarding=disabled advertise=disabled mtu=0 metric=0 metric=0 nud=disabled basereachabletime=0 retransmittime=0 routerdiscovery=disabled managedaddress=disabled otherstateful=disabled weakhostsend=disabled weakhostreceive=disabled ignoredefaultroutes=disabled
set interface luid=ethernet_4 forwarding=disabled advertise=disabled mtu=0 metric=0 metric=0 nud=disabled basereachabletime=0 retransmittime=0 routerdiscovery=disabled managedaddress=disabled otherstateful=disabled weakhostsend=disabled weakhostreceive=disabled ignoredefaultroutes=disabled


popd
# End of IPv4 configuration



Windows IP Configuration

Host Name . . . . . . . . . . . . : Bobi-PC
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter Local Area Connection:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Marvell Yukon 88E8040 PCI-E Fast Ethernet Controller
Physical Address. . . . . . . . . : 00-1D-09-37-76-F2
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes

Wireless LAN adapter Bobuniu S:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Dell Wireless 1395 WLAN Mini-Card
Physical Address. . . . . . . . . : 00-16-44-86-92-55
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . : fe80::998:fc3ba3f1%8(Preferred)
Autoconfiguration IPv4 Address. . : 169.254.163.241(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.0.0
Default Gateway . . . . . . . . . :
DNS Servers . . . . . . . . . . . : fec0:0:0:ffff::1%1
fec0:0:0:ffff::2%1
fec0:0:0:ffff::3%1
NetBIOS over Tcpip. . . . . . . . : Enabled

Tunnel adapter Local Area Connection* 9:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
Physical Address. . . . . . . . . : 02-00-54-55-4E-01
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Server: UnKnown
Address: 127.0.0.1:53

Ping request could not find host google.com. Please check the name and try again.

Server: UnKnown
Address: 127.0.0.1:53

Ping request could not find host yahoo.com. Please check the name and try again.



Pinging 127.0.0.1 with 32 bytes of data:



Reply from 127.0.0.1: bytes=32 time<1ms TTL=128

Reply from 127.0.0.1: bytes=32 time<1ms TTL=128



Ping statistics for 127.0.0.1:

Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

Minimum = 0ms, Maximum = 0ms, Average = 0ms

===========================================================================
Interface List
17 ...00 1d 09 37 76 f2 ...... Marvell Yukon 88E8040 PCI-E Fast Ethernet Controller
8 ...00 16 44 86 92 55 ...... Dell Wireless 1395 WLAN Mini-Card
1 ........................... Software Loopback Interface 1
9 ...02 00 54 55 4e 01 ...... Teredo Tunneling Pseudo-Interface
===========================================================================

IPv4 Route Table
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
127.0.0.0 255.0.0.0 On-link 127.0.0.1 306
127.0.0.1 255.255.255.255 On-link 127.0.0.1 306
127.255.255.255 255.255.255.255 On-link 127.0.0.1 306
169.254.0.0 255.255.0.0 On-link 169.254.163.241 281
169.254.163.241 255.255.255.255 On-link 169.254.163.241 281
169.254.255.255 255.255.255.255 On-link 169.254.163.241 281
224.0.0.0 240.0.0.0 On-link 127.0.0.1 306
224.0.0.0 240.0.0.0 On-link 169.254.163.241 281
255.255.255.255 255.255.255.255 On-link 127.0.0.1 306
255.255.255.255 255.255.255.255 On-link 169.254.163.241 281
===========================================================================
Persistent Routes:
None

IPv6 Route Table
===========================================================================
Active Routes:
If Metric Network Destination Gateway
1 306 ::1/128 On-link
8 281 fe80::/64 On-link
8 281 fe80::998:fc3ba3f1/128
On-link
1 306 ff00::/8 On-link
8 281 ff00::/8 On-link
===========================================================================
Persistent Routes:
None
========================= Winsock entries =====================================

Catalog5 01 C:\Windows\system32\NLAapi.dll [48128] (Microsoft Corporation)
Catalog5 02 C:\Windows\system32\mswsock.dll [227328] (Microsoft Corporation)
Catalog5 03 C:\Windows\system32\winrnr.dll [19968] (Microsoft Corporation)
Catalog5 04 C:\Windows\system32\napinsp.dll [50176] (Microsoft Corporation)
Catalog5 05 C:\Windows\system32\pnrpnsp.dll [62464] (Microsoft Corporation)
Catalog5 06 C:\Windows\system32\pnrpnsp.dll [62464] (Microsoft Corporation)
Catalog9 01 C:\Windows\system32\mswsock.dll [227328] (Microsoft Corporation)
Catalog9 02 C:\Windows\system32\mswsock.dll [227328] (Microsoft Corporation)
Catalog9 03 C:\Windows\system32\mswsock.dll [227328] (Microsoft Corporation)
Catalog9 04 C:\Windows\system32\mswsock.dll [227328] (Microsoft Corporation)
Catalog9 05 C:\Windows\system32\mswsock.dll [227328] (Microsoft Corporation)
Catalog9 06 C:\Windows\system32\mswsock.dll [227328] (Microsoft Corporation)
Catalog9 07 C:\Windows\system32\mswsock.dll [227328] (Microsoft Corporation)
Catalog9 08 C:\Windows\system32\mswsock.dll [227328] (Microsoft Corporation)
Catalog9 09 C:\Windows\system32\mswsock.dll [227328] (Microsoft Corporation)
Catalog9 10 C:\Windows\system32\mswsock.dll [227328] (Microsoft Corporation)
Catalog9 11 C:\Windows\system32\mswsock.dll [227328] (Microsoft Corporation)
Catalog9 12 C:\Windows\system32\mswsock.dll [227328] (Microsoft Corporation)
Catalog9 13 C:\Windows\system32\mswsock.dll [227328] (Microsoft Corporation)
Catalog9 14 C:\Windows\system32\mswsock.dll [227328] (Microsoft Corporation)
Catalog9 15 C:\Windows\system32\mswsock.dll [227328] (Microsoft Corporation)
Catalog9 16 C:\Windows\system32\mswsock.dll [227328] (Microsoft Corporation)
Catalog9 17 C:\Windows\system32\mswsock.dll [227328] (Microsoft Corporation)
Catalog9 18 C:\Windows\system32\mswsock.dll [227328] (Microsoft Corporation)
Catalog9 19 C:\Windows\system32\mswsock.dll [227328] (Microsoft Corporation)
Catalog9 20 C:\Windows\system32\mswsock.dll [227328] (Microsoft Corporation)
Catalog9 21 C:\Windows\system32\mswsock.dll [227328] (Microsoft Corporation)
Catalog9 22 C:\Windows\system32\mswsock.dll [227328] (Microsoft Corporation)
Catalog9 23 C:\Windows\system32\mswsock.dll [227328] (Microsoft Corporation)
Catalog9 24 C:\Windows\system32\mswsock.dll [227328] (Microsoft Corporation)
Catalog9 25 C:\Windows\system32\mswsock.dll [227328] (Microsoft Corporation)
Catalog9 26 C:\Windows\system32\mswsock.dll [227328] (Microsoft Corporation)
Catalog9 27 C:\Windows\system32\mswsock.dll [227328] (Microsoft Corporation)
Catalog9 28 C:\Windows\system32\mswsock.dll [227328] (Microsoft Corporation)
Catalog9 29 C:\Windows\system32\mswsock.dll [227328] (Microsoft Corporation)
Catalog9 30 C:\Windows\system32\mswsock.dll [227328] (Microsoft Corporation)
Catalog9 31 C:\Windows\system32\mswsock.dll [227328] (Microsoft Corporation)
Catalog9 32 C:\Windows\system32\mswsock.dll [227328] (Microsoft Corporation)
Catalog9 33 C:\Windows\system32\mswsock.dll [227328] (Microsoft Corporation)
Catalog9 34 C:\Windows\system32\mswsock.dll [227328] (Microsoft Corporation)
Catalog9 35 C:\Windows\system32\mswsock.dll [227328] (Microsoft Corporation)
Catalog9 36 C:\Windows\system32\mswsock.dll [227328] (Microsoft Corporation)
Catalog9 37 C:\Windows\system32\mswsock.dll [227328] (Microsoft Corporation)
Catalog9 38 C:\Windows\system32\mswsock.dll [227328] (Microsoft Corporation)
Catalog9 39 C:\Windows\system32\mswsock.dll [227328] (Microsoft Corporation)
Catalog9 40 C:\Windows\system32\mswsock.dll [227328] (Microsoft Corporation)
Catalog9 41 C:\Windows\system32\mswsock.dll [227328] (Microsoft Corporation)
Catalog9 42 C:\Windows\system32\mswsock.dll [227328] (Microsoft Corporation)
Catalog9 43 C:\Windows\system32\mswsock.dll [227328] (Microsoft Corporation)
Catalog9 44 C:\Windows\system32\mswsock.dll [227328] (Microsoft Corporation)
Catalog9 45 C:\Windows\system32\mswsock.dll [227328] (Microsoft Corporation)
Catalog9 46 C:\Windows\system32\mswsock.dll [227328] (Microsoft Corporation)
Catalog9 47 C:\Windows\system32\mswsock.dll [227328] (Microsoft Corporation)
Catalog9 48 C:\Windows\system32\mswsock.dll [227328] (Microsoft Corporation)

========================= Event log errors: ===============================

Application errors:
==================
Error: (07/04/2014 11:17:26 AM) (Source: LoadPerf) (User: )
Description: WmiApRplWmiApRpl8

Error: (07/04/2014 11:17:26 AM) (Source: LoadPerf) (User: )
Description: Performance16

Error: (07/03/2014 09:47:24 PM) (Source: VSS) (User: )
Description: Volume Shadow Copy Service error: Unexpected error querying for the IVssWriterCallback interface. hr = 0x80070005.
This is often caused by incorrect security settings in either the writer or requestor process.


Operation:
Gathering Writer Data

Context:
Writer Class Id: {e8132975-6f93-4464-a53e-1050253ae220}
Writer Name: System Writer
Writer Instance ID: {cbbb6123-0ce7-403f-a2ff-496cfb7b645b}

Error: (07/03/2014 08:59:38 PM) (Source: LoadPerf) (User: )
Description: WmiApRplWmiApRpl8

Error: (07/03/2014 08:59:38 PM) (Source: LoadPerf) (User: )
Description: Performance16

Error: (07/03/2014 08:29:59 PM) (Source: LoadPerf) (User: )
Description: WmiApRplWmiApRpl8

Error: (07/03/2014 08:29:59 PM) (Source: LoadPerf) (User: )
Description: Performance16

Error: (07/03/2014 07:03:25 PM) (Source: LoadPerf) (User: )
Description: WmiApRplWmiApRpl8

Error: (07/03/2014 07:03:25 PM) (Source: LoadPerf) (User: )
Description: Performance16

Error: (07/03/2014 06:56:49 PM) (Source: LoadPerf) (User: )
Description: WmiApRplWmiApRpl8


System errors:
=============
Error: (07/04/2014 00:21:02 PM) (Source: ipnathlp) (User: )
Description: The DHCP allocator has disabled itself on IP address 169.254.163.241, since the IP address is outside the 192.168.0.0/255.255.255.0 scope from which addresses are being allocated to DHCP clients. To enable the DHCP allocator on this IP address, change the scope to include the IP address, or change the IP address to fall within the scope.

Error: (07/04/2014 11:12:51 AM) (Source: ipnathlp) (User: )
Description: The ICS_IPV6 failed to configure IPv6 stack.

Error: (07/04/2014 11:12:51 AM) (Source: ipnathlp) (User: )
Description: The DHCP allocator has disabled itself on IP address 169.254.163.241, since the IP address is outside the 192.168.0.0/255.255.255.0 scope from which addresses are being allocated to DHCP clients. To enable the DHCP allocator on this IP address, change the scope to include the IP address, or change the IP address to fall within the scope.

Error: (07/04/2014 11:11:42 AM) (Source: EventLog) (User: )
Description: The previous system shutdown at 22:11:27 on 03/07/2014 was unexpected.

Error: (07/03/2014 08:53:52 PM) (Source: ipnathlp) (User: )
Description: The DHCP allocator has disabled itself on IP address 169.254.163.241, since the IP address is outside the 192.168.0.0/255.255.255.0 scope from which addresses are being allocated to DHCP clients. To enable the DHCP allocator on this IP address, change the scope to include the IP address, or change the IP address to fall within the scope.

Error: (07/03/201ComboFix 14-07-03.01 - Bobi 04/07/2014 12:30:31.1.2 - x86
Microsoft® Windows Vista™ Home Premium 6.0.6000.0.1252.44.1033.18.2037.1249 [GMT 1:00]
Running from: c:\users\Bobi\Desktop\ComboFix.exe
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\293
c:\programdata\293\{9C391D6B-3976-4707-92FC-E6C745A4F65D}.swf
c:\programdata\Roaming
c:\programdata\Roaming\Intel\Wireless\Settings\Settings.ini
.
.
((((((((((((((((((((((((( Files Created from 2014-06-04 to 2014-07-04 )))))))))))))))))))))))))))))))
.
.
2014-07-04 10:20 . 2009-09-02 06:13 131072 ----a-w- c:\windows\system32\DellSPMsg.dll
2014-07-03 19:46 . 2014-07-03 19:28 24064 ----a-w- c:\windows\zoek-delete.exe
2014-07-03 19:29 . 2014-07-03 19:45 -------- d-----w- C:\zoek_backup
2014-07-03 19:07 . 2014-07-03 19:10 -------- d-----w- C:\AdwCleaner
2014-07-03 18:47 . 2014-07-03 18:47 -------- d-----w- c:\users\Bobi\AppData\Local\MigWiz
2014-07-03 17:02 . 2014-07-03 17:02 -------- d-----w- c:\programdata\102F4
2014-07-03 12:35 . 2014-07-03 12:35 -------- d-----w- c:\users\Bobi\AppData\Local\Dell
2014-07-03 11:37 . 2014-07-03 11:38 -------- d-----w- c:\program files\Mozilla Maintenance Service
2014-07-03 10:45 . 2014-07-03 10:45 -------- d-----w- C:\temp
2014-07-03 10:42 . 2014-07-03 10:42 -------- d-----w- c:\program files\Marvell
2014-07-03 10:39 . 2004-07-15 23:18 172032 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\01\Intel32\iuser.dll
2014-07-03 10:39 . 2014-07-03 10:39 303104 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\01\Intel32\setup.dll
2014-07-03 10:39 . 2014-07-03 10:39 180356 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\01\Intel32\iGdi.dll
2014-07-03 10:39 . 2004-07-15 23:20 733184 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\01\Intel32\iKernel.dll
2014-07-03 10:39 . 2004-07-15 23:20 69715 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\01\Intel32\ctor.dll
2014-07-03 10:39 . 2004-07-15 23:19 266240 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\01\Intel32\iscript.dll
2014-07-03 10:39 . 2004-07-15 23:18 5632 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\01\Intel32\DotNetInstaller.exe
2014-07-03 10:27 . 2009-07-14 01:19 38480 ----a-w- c:\windows\system32\drivers\WdfLdr.sys
2014-07-03 10:27 . 2009-07-14 01:19 445008 ----a-w- c:\windows\system32\drivers\Wdf01000.sys
2014-07-03 10:25 . 2010-02-26 20:32 109122 ----a-w- c:\windows\system32\Vxdif.dll
2014-07-03 10:25 . 2009-07-14 11:27 1461992 ----a-w- c:\windows\system32\WdfCoInstaller01009.dll
2014-07-03 10:25 . 2010-04-15 12:36 252536 ----a-w- c:\windows\system32\drivers\Apfiltr.sys
2014-07-02 19:54 . 2014-07-02 19:54 -------- d-----w- c:\users\Bobi\AppData\Local\Apps
2014-07-02 15:39 . 2014-07-02 15:39 -------- d-----w- c:\users\Bobi\AppData\Roaming\AVAST Software
2014-07-02 15:35 . 2014-07-02 15:35 57672 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2014-07-02 15:35 . 2014-07-02 15:35 178304 ----a-w- c:\windows\system32\drivers\aswVmm.sys
2014-07-02 15:35 . 2014-07-02 15:35 403440 ------w- c:\windows\system32\drivers\aswSP.sys
2014-07-02 15:35 . 2014-07-02 15:35 49944 ----a-w- c:\windows\system32\drivers\aswRvrt.sys
2014-07-02 15:35 . 2014-07-02 15:35 774392 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2014-07-02 15:35 . 2014-07-02 15:35 70384 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2014-07-02 15:35 . 2014-07-02 15:35 54832 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2014-07-02 15:35 . 2014-07-02 15:35 35656 ------w- c:\windows\system32\drivers\aswFsBlk.sys
2014-07-02 15:35 . 2014-07-02 15:34 26136 ----a-w- c:\windows\system32\drivers\aswKbd.sys
2014-07-02 15:35 . 2014-07-02 15:35 269216 ----a-w- c:\windows\system32\aswBoot.exe
2014-07-02 15:35 . 2014-07-02 15:35 43152 ------w- c:\windows\avastSS.scr
2014-07-02 15:32 . 2014-07-02 15:32 -------- d-----w- c:\program files\AVAST Software
2014-07-02 14:51 . 2014-07-02 14:51 -------- d-----w- c:\program files\trend micro
2014-07-02 14:51 . 2014-07-02 14:51 -------- d-----w- C:\rsit
2014-07-01 19:31 . 2014-07-01 19:31 -------- d-----w- c:\users\Bobi\AppData\Roaming\PeerNetworking
2014-07-01 16:08 . 2014-07-02 15:40 -------- d-----w- c:\program files\VS Revo Group
2014-07-01 15:44 . 2014-07-01 16:09 -------- d-----w- c:\programdata\Spybot - Search & Destroy
2014-06-30 21:21

Vzdy sem date i kus nezadaneho logu (ted ComboFix, predtim RSIT), davejte jen co je treba...

Spustte znovu Zoek.exe

• Pokud pouzivate Win Vista ci W7, kliknete na Zoek pravym a dejte Run As Administrator ci Spustit jako spravce
• Do okna vlozte skript nize

• Kód: Vybrat vše

  emptyclsid;
  ipconfig /flushdns;b
  

• Nasledne kliknete na Run Script
• PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem

Jestli jsem prilozil nejaky kus jineho logu, tak to se omlouvam. Ja vzdy davam v okne s logem "Select All" a pak pravym clict na "Copy". To skopiruji do nove slozky "Text document" na USB a prenesu sem.
Tak nevim cim to muze byt?
Zoek mam stale spusten, ale nic se nedeje. To bude asi trvat dlouho?