VIRY.CZ

Ahoj, prosim o kontrolu logu, pocitatc je zpomaleny a nemuzu otevrit Google Chrom. Zkusila jsem ho odinstalovat a nainstalovat znovu, ale kdyz spustim instalaci, tak mi to na konci napise, ze instalace nebylo mozne dokoncit z duvodu chyby. Diky

Logfile of random's system information tool 1.10 (written by random/random)
Run by Top Manager at 2014-10-12 15:34:18
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 36 GB (12%) free of 293 GB
Total RAM: 2935 MB (28% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 15:34:41, on 12.10.2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17280)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\IDT\WDM\sttray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\Program Files\STMicroelectronics\AccelerometerP11\FF_Protection.exe
C:\Program Files\Dell\DW WLAN Card\WLTRAY.EXE
C:\Program Files\CyberLink\PowerDVD9\PDVD9Serv.exe
C:\Program Files\Dell Webcam\Dell Webcam Central\WebcamDell2.exe
C:\dell\DBRM\Reminder\DbrmTrayicon.exe
C:\Program Files\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\Alwil Software\Avast5\avastui.exe
C:\Program Files\Western Digital\WD Quick View\WDDMStatus.exe
C:\Program Files\Nuance\PaperPort\pptd40nt.exe
C:\Program Files\Browny02\Brother\BrStMonW.exe
C:\Program Files\Adobe\Acrobat 11.0\Acrobat\acrotray.exe
C:\Program Files\ControlCenter4\BrCtrlCntr.exe
C:\Program Files\DAEMON Tools Pro\DTAgent.exe
C:\Program Files\Nokia\Nokia Suite\NokiaSuite.exe
C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe
C:\Program Files\ControlCenter4\BrCcUxSys.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
c:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe
C:\Program Files\PC Connectivity Solution\Transports\NclMSBTSrvEx.exe
C:\Users\Top Manager\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Program Files\HTC\HTC Sync Manager\HTC Sync\adb.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\taskhost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Google\Google Toolbar\GoogleToolbarUser_32.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Google\Google Toolbar\GoogleToolbarUser_32.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\Macromed\Flash\FlashUtil32_15_0_0_167_ActiveX.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_15_0_0_152.exe
C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_15_0_0_152.exe
C:\Program Files\Malwarebytes Anti-Malware\mbam.exe
C:\Users\Top Manager\Downloads\RSIT(1).exe
C:\Program Files\trend micro\Top Manager.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://qc.yahoo.com?fr=hp-avast&type=avastbcl
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://qc.search.yahoo.com/yhs/search? ... earchTerms}
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://qc.yahoo.com?fr=hp-avast&type=avastbcl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = https://qc.yahoo.com?fr=hp-avast&type=avastbcl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://qc.search.yahoo.com/yhs/search? ... earchTerms}
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://qc.yahoo.com?fr=hp-avast&type=avastbcl
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.qip.ru/ie
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {95289393-33EA-4F8D-B952-483415B9C955} - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files\Windows Live\Companion\companioncore.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Adobe Acrobat Create PDF Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar: Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll
O4 - HKLM\..\Run: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [SysTrayApp] %ProgramFiles%\IDT\WDM\sttray.exe
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [QuickSet] C:\Program Files\Dell\QuickSet\QuickSet.exe
O4 - HKLM\..\Run: [FreeFallProtection] C:\Program Files\STMicroelectronics\AccelerometerP11\FF_Protection.exe
O4 - HKLM\..\Run: [Broadcom Wireless Manager UI] C:\Program Files\Dell\DW WLAN Card\WLTRAY.exe
O4 - HKLM\..\Run: [RemoteControl9] "C:\Program Files\CyberLink\PowerDVD9\PDVD9Serv.exe"
O4 - HKLM\..\Run: [PDVD9LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD9\Language\Language.exe"
O4 - HKLM\..\Run: [Dell Webcam Central] "C:\Program Files\Dell Webcam\Dell Webcam Central\WebcamDell2.exe" /mode2
O4 - HKLM\..\Run: [RoxWatchTray] "C:\Program Files\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatchTray12OEM.exe"
O4 - HKLM\..\Run: [DBRMTray] C:\Dell\DBRM\Reminder\DbrmTrayIcon.exe
O4 - HKLM\..\Run: [BCSSync] "C:\Program Files\Microsoft Office\Office14\BCSSync.exe" /DelayServices
O4 - HKLM\..\Run: [Desktop Disc Tool] "C:\Program Files\Roxio\oem\Roxio Burn\RoxioBurnLauncher.exe"
O4 - HKLM\..\Run: [AdobeAAMUpdater-1.0] "C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [AdobeCS5ServiceManager] "C:\Program Files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\Alwil Software\Avast5\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [WD Quick View] C:\Program Files\Western Digital\WD Quick View\WDDMStatus.exe
O4 - HKLM\..\Run: [Onboard] C:\Program Files\Western Digital\WD SmartWare\BackupTask.exe /Onboard "C:\Program Files\Western Digital\WD SmartWare\WDSmartWare.exe"
O4 - HKLM\..\Run: [IndexSearch] "C:\Program Files\Nuance\PaperPort\IndexSearch.exe"
O4 - HKLM\..\Run: [PaperPort PTD] "C:\Program Files\Nuance\PaperPort\pptd40nt.exe"
O4 - HKLM\..\Run: [PPort12reminder] "C:\Program Files\Nuance\PaperPort\Ereg\Ereg.exe" -r "C:\ProgramData\ScanSoft\PaperPort\12\Config\Ereg\Ereg.ini"
O4 - HKLM\..\Run: [ControlCenter4] C:\Program Files\ControlCenter4\BrCcBoot.exe /autorun
O4 - HKLM\..\Run: [BrStsMon00] C:\Program Files\Browny02\Brother\BrStMonW.exe /AUTORUN
O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files\Adobe\Acrobat 11.0\Acrobat\Acrotray.exe"
O4 - HKLM\..\RunOnce: [DBRMTray] C:\Dell\DBRM\Reminder\TrayApp.exe
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [DAEMON Tools Pro Agent] "C:\Program Files\DAEMON Tools Pro\DTAgent.exe" -autorun
O4 - HKCU\..\Run: [NokiaSuite.exe] C:\Program Files\Nokia\Nokia Suite\NokiaSuite.exe -tray
O4 - HKCU\..\Run: [DW7] "C:\Program Files\The Weather Channel\The Weather Channel App\TWCApp.exe"
O4 - HKCU\..\Run: [Facebook Update] "C:\Users\Top Manager\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
O4 - HKCU\..\Run: [ISUSPM] C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe -scheduler
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [deskPDF Creator] "C:\Program Files\Docudesk\deskPDF Studio X\deskPDFCreator.exe" -minimize
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User '?')
O4 - HKUS\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User '?')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User '?')
O4 - HKUS\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User '?')
O4 - HKUS\S-1-5-21-1090270546-3940350394-789224128-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" (User '?')
O4 - HKUS\S-1-5-21-1090270546-3940350394-789224128-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\..\Run: [deskPDF Creator] "C:\Program Files\Docudesk\deskPDF Studio X\deskPDFCreator.exe" -minimize (User '?')
O4 - S-1-5-21-1090270546-3940350394-789224128-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 Startup: Dropbox.lnk = Top Manager\AppData\Roaming\Dropbox\bin\Dropbox.exe (User '?')
O4 - Startup: Dropbox.lnk = Top Manager\AppData\Roaming\Dropbox\bin\Dropbox.exe
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105
O8 - Extra context menu item: Odeslat obrázek do zařízení &Bluetooth... - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Odeslat stránku do zařízení &Bluetooth... - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: @C:\Program Files\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files\Windows Live\Companion\companioncore.dll
O9 - Extra button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe (file missing)
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: @c:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @c:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: QIP 2005 - {1EF681F7-A04B-4D6D-9012-A307CCA55610} - C:\Program Files\QIP\qip.exe (file missing) (HKCU)
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_f39a6924a795ad94\aestsrv.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: BrYNSvc - Brother Industries, Ltd. - C:\Program Files\Browny02\BrYNSvc.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - c:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HTCMonitorService - Nero AG - C:\Program Files\HTC\HTC Sync Manager\HSMServiceEntry.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: Internet Pass-Through Service (PassThru Service) - Unknown owner - C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe
O23 - Service: PDFProFiltSrvPP - Nuance Communications, Inc. - C:\Program Files\Nuance\PaperPort\PDFProFiltSrvPP.exe
O23 - Service: RoxMediaDB12OEM - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxMediaDB12OEM.exe
O23 - Service: Roxio Hard Drive Watcher 12 (RoxWatch12) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatch12OEM.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Audio Service (STacSV) - IDT, Inc. - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_f39a6924a795ad94\STacSV.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: Intel(R) Management & Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: WD Backup (WDBackup) - Western Digital Technologies, Inc. - C:\Program Files\Western Digital\WD SmartWare\WDBackupEngine.exe
O23 - Service: WD Drive Manager (WDDriveService) - Western Digital Technologies, Inc. - C:\Program Files\Western Digital\WD Drive Manager\WDDriveService.exe
O23 - Service: DW WLAN Tray Service (wltrysvc) - Dell Inc. - C:\Program Files\Dell\DW WLAN Card\WLTRYSVC.EXE

--
End of file - 17975 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-1090270546-3940350394-789224128-1001Core.job - C:\Users\Top Manager\AppData\Local\Facebook\Update\FacebookUpdate.exe /c /nocrashserver
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-1090270546-3940350394-789224128-1001UA.job - C:\Users\Top Manager\AppData\Local\Facebook\Update\FacebookUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\PCDoctorBackgroundMonitorTask.job - C:\Program Files\Dell Support Center\uaclauncher.exe -backgroundmon scripts\defaultscan.xml -st PCDoctorBackgroundMonitorTask --ignoresecondarysplash --runsilently
C:\Windows\tasks\SystemToolsDailyTest.job - C:\Program Files\Dell Support Center\pcdrcui.exe -silentenumeration -st SystemToolsDailyTest

=========Mozilla firefox=========

ProfilePath - C:\Users\Top Manager\AppData\Roaming\Mozilla\Firefox\Profiles\gah0y699.default

prefs.js - "browser.startup.homepage" - "http://www.msn.com/?pc=AV01"
prefs.js - "keyword.URL" - "http://www.bing.com/search"

"{3C5F0F00-683D-4847-89C8-E7AF64FD1CFB}"=C:\Program Files\RelevantKnowledge
"wrc@avast.com"=C:\Program Files\Alwil Software\Avast5\WebRep\FF
"web2pdfextension@web2pdf.adobedotcom"=C:\Program Files\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 15.0.0.152 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF32_15_0_0_152.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Google.com/GoogleEarthPlugin]
"Description"=Google Earth in your browser
"Path"=C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.51.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.51.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3555.0308]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@mytalkpal.com/ffplugin]
"Description"=Talkpal(TM) Speech Evaluation Plug-in for Firefox
"Path"=C:\Program Files\Talkpal\Speech Plugin For EF\npTalkpalPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@nokia.com/EnablerPlugin]
"Description"=Nokia Suite Enabler Plugin
"Path"=C:\Program Files\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Acrobat]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Acrobat 11.0\Acrobat\Air\nppdf32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\adobe.com/AdobeAAMDetect]
"Description"=
"Path"=C:\Program Files\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll


C:\Program Files\Mozilla Firefox\components\
nsIQTScriptablePlugin.xpt

C:\Program Files\Mozilla Firefox\searchplugins\
crawlersrch.xml

C:\Users\Top Manager\AppData\Roaming\Mozilla\Firefox\Profiles\gah0y699.default\searchplugins\
askcom.xml
bing-avast.xml
Search.xml
yahoo-avast.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23 60568]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2013-12-19 4171480]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2013-12-18 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll [2014-07-07 457712]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28 441216]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9FDDE16B-836F-4806-AB1F-1455CBEFF289}]
Windows Live Messenger Companion Helper - C:\Program Files\Windows Live\Companion\companioncore.dll [2012-03-08 393600]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2014-03-28 194504]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE7CD045-E861-484f-8273-0445EE161910}]
Adobe Acrobat Create PDF Toolbar Helper - C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2012-09-23 330392]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Click to Call for Internet Explorer - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14 1709152]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL [2014-09-20 710352]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-12-18 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F4971EE7-DAA0-4053-9964-665D8EE6A077}]
Adobe Acrobat Create PDF from Selection - C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2012-09-23 330392]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2014-03-28 194504]
{47833539-D0C5-4125-9FA8-0819E2EAAC93} - Adobe Acrobat Create PDF Toolbar - C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2012-09-23 330392]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2010-01-08 1602856]
"SysTrayApp"=C:\Program Files\IDT\WDM\sttray.exe [2010-04-07 495708]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2010-10-07 136216]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2010-10-07 171032]
"Persistence"=C:\Windows\system32\igfxpers.exe [2010-10-07 170520]
"QuickSet"=C:\Program Files\Dell\QuickSet\QuickSet.exe [2010-01-15 3873648]
"FreeFallProtection"=C:\Program Files\STMicroelectronics\AccelerometerP11\FF_Protection.exe [2010-10-01 727664]
"Broadcom Wireless Manager UI"=C:\Program Files\Dell\DW WLAN Card\WLTRAY.exe [2011-01-23 5249024]
"RemoteControl9"=C:\Program Files\CyberLink\PowerDVD9\PDVD9Serv.exe [2009-07-06 87336]
"PDVD9LanguageShortcut"=C:\Program Files\CyberLink\PowerDVD9\Language\Language.exe [2010-04-29 50472]
"Dell Webcam Central"=C:\Program Files\Dell Webcam\Dell Webcam Central\WebcamDell2.exe [2010-08-19 487562]
"RoxWatchTray"=C:\Program Files\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatchTray12OEM.exe [2010-09-04 240112]
"DBRMTray"=C:\Dell\DBRM\Reminder\DbrmTrayIcon.exe [2010-05-20 206336]
"BCSSync"=C:\Program Files\Microsoft Office\Office14\BCSSync.exe [2012-11-05 89184]
"Desktop Disc Tool"=C:\Program Files\Roxio\oem\Roxio Burn\RoxioBurnLauncher.exe [2010-11-01 522736]
"AdobeAAMUpdater-1.0"=C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2014-02-27 558496]
"SwitchBoard"=C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
"AdobeCS5ServiceManager"=C:\Program Files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [2010-02-22 406992]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2011-10-24 421888]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2013-07-02 254336]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-08-21 959176]
"AvastUI.exe"=C:\Program Files\Alwil Software\Avast5\AvastUI.exe [2014-08-01 4085896]
"WD Quick View"=C:\Program Files\Western Digital\WD Quick View\WDDMStatus.exe [2013-11-02 5537136]
"Onboard"=C:\Program Files\Western Digital\WD SmartWare\BackupTask.exe [2013-11-02 425840]
"IndexSearch"=C:\Program Files\Nuance\PaperPort\IndexSearch.exe [2010-03-09 46368]
"PaperPort PTD"=C:\Program Files\Nuance\PaperPort\pptd40nt.exe [2010-03-09 29984]
"PPort12reminder"=C:\Program Files\Nuance\PaperPort\Ereg\Ereg.exe [2010-02-09 328992]
"ControlCenter4"=C:\Program Files\ControlCenter4\BrCcBoot.exe [2012-09-06 143360]
"BrStsMon00"=C:\Program Files\Browny02\Brother\BrStMonW.exe [2012-06-06 3076096]
""= []
"Acrobat Assistant 8.0"=C:\Program Files\Adobe\Acrobat 11.0\Acrobat\Acrotray.exe [2012-09-23 3477640]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"DBRMTray"=C:\Dell\DBRM\Reminder\TrayApp.exe [2010-02-04 7168]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2011-04-02 39408]
"DAEMON Tools Pro Agent"=C:\Program Files\DAEMON Tools Pro\DTAgent.exe [2011-03-17 842048]
"AdobeBridge"= []
""= []
"NokiaSuite.exe"=C:\Program Files\Nokia\Nokia Suite\NokiaSuite.exe [2012-05-16 1084840]
"DW7"=C:\Program Files\The Weather Channel\The Weather Channel App\TWCApp.exe [2014-02-05 13209088]
"Facebook Update"=C:\Users\Top Manager\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-12-24 138096]
"ISUSPM"=C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe [2009-05-05 222496]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2014-08-27 22041192]
"deskPDF Creator"=C:\Program Files\Docudesk\deskPDF Studio X\deskPDFCreator.exe [2013-11-02 2346664]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe

C:\Users\Top Manager\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Dropbox.lnk - C:\Users\Top Manager\AppData\Roaming\Dropbox\bin\Dropbox.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2010-08-26 228864]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2013-12-19 4171480]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"msacm.siren"=sirenacm.dll
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"wave7"=wdmaud.drv
"midi7"=wdmaud.drv
"mixer7"=wdmaud.drv
"wave8"=wdmaud.drv
"midi8"=wdmaud.drv
"mixer8"=wdmaud.drv
"wave9"=wdmaud.drv
"midi9"=wdmaud.drv
"mixer9"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2014-10-12 15:28:37 ----A---- C:\Windows\system32\drivers\MBAMSwissArmy.sys
2014-10-12 15:28:19 ----A---- C:\Windows\system32\drivers\mwac.sys
2014-10-12 15:28:19 ----A---- C:\Windows\system32\drivers\mbamchameleon.sys
2014-10-12 15:28:19 ----A---- C:\Windows\system32\drivers\mbam.sys
2014-10-12 15:28:18 ----D---- C:\Program Files\Malwarebytes Anti-Malware
2014-10-10 00:58:21 ----D---- C:\Program Files\Hola
2014-10-06 15:08:44 ----D---- C:\Users\Top Manager\AppData\Roaming\deskPDF Editor
2014-10-06 15:07:21 ----A---- C:\Windows\system32\ddmon4-32.dll
2014-10-06 15:06:31 ----A---- C:\Windows\system32\desksc.exe
2014-10-06 15:06:30 ----A---- C:\Windows\system32\ddcvt4.exe
2014-10-06 15:05:51 ----D---- C:\Program Files\Docudesk
2014-10-06 11:30:56 ----D---- C:\Program Files\Common Files\Skype
2014-10-01 13:03:09 ----A---- C:\Windows\system32\qdvd.dll
2014-09-25 18:13:55 ----D---- C:\Users\Top Manager\AppData\Roaming\Spotify
2014-09-24 11:50:43 ----A---- C:\Windows\system32\tzres.dll

======List of files/folders modified in the last 1 month======

2014-10-12 15:34:34 ----D---- C:\Program Files\trend micro
2014-10-12 15:31:56 ----D---- C:\Users\Top Manager\AppData\Roaming\Skype
2014-10-12 15:28:37 ----D---- C:\Windows\system32\drivers
2014-10-12 15:28:18 ----D---- C:\Program Files
2014-10-12 15:26:34 ----D---- C:\Program Files\Mozilla Maintenance Service
2014-10-12 15:26:28 ----D---- C:\Program Files\Mozilla Firefox
2014-10-12 15:20:47 ----D---- C:\Windows\Temp
2014-10-12 15:12:44 ----SHD---- C:\Windows\Installer
2014-10-12 15:12:44 ----SHD---- C:\Config.Msi
2014-10-12 15:12:29 ----D---- C:\Program Files\Google
2014-10-12 15:12:12 ----SHD---- C:\System Volume Information
2014-10-12 14:25:33 ----D---- C:\Windows\system32\config
2014-10-12 14:16:03 ----D---- C:\Users\Top Manager\AppData\Roaming\Dropbox
2014-10-12 14:07:03 ----D---- C:\ProgramData\Sonic
2014-10-12 14:06:27 ----D---- C:\Windows\System32
2014-10-12 14:05:49 ----A---- C:\Windows\system32\log.txt
2014-10-10 15:28:08 ----D---- C:\Windows\system32\Tasks
2014-10-10 15:27:51 ----D---- C:\Windows
2014-10-10 15:21:59 ----D---- C:\Windows\system32\wbem
2014-10-10 15:21:08 ----D---- C:\Windows\Tasks
2014-10-10 15:21:08 ----D---- C:\Windows\system32\wfp
2014-10-10 15:21:08 ----D---- C:\Windows\system32\DriverStore
2014-10-10 15:21:08 ----D---- C:\Windows\system32\catroot2
2014-10-10 15:21:07 ----D---- C:\Windows\winsxs
2014-10-10 15:21:07 ----D---- C:\Windows\system32\NDF
2014-10-10 15:21:07 ----D---- C:\Windows\system32\CodeIntegrity
2014-10-10 15:21:05 ----RSD---- C:\Windows\Fonts
2014-10-10 15:21:05 ----D---- C:\Windows\inf
2014-10-10 15:21:05 ----D---- C:\Users\Top Manager\AppData\Roaming\uTorrent
2014-10-10 15:20:54 ----D---- C:\Program Files\Common Files\Adobe
2014-10-10 15:20:54 ----D---- C:\Program Files\CCleaner
2014-10-10 15:20:45 ----D---- C:\Program Files\Adobe
2014-10-10 15:20:04 ----D---- C:\Windows\registration
2014-10-10 15:19:19 ----D---- C:\Windows\system32\catroot
2014-10-10 15:17:46 ----D---- C:\ProgramData\Nokia
2014-10-10 15:17:45 ----SD---- C:\ProgramData\Microsoft
2014-10-10 15:17:38 ----D---- C:\ProgramData\Adobe
2014-10-10 15:17:24 ----D---- C:\Program Files\Nokia
2014-10-10 11:12:33 ----D---- C:\Windows\debug
2014-10-10 11:05:08 ----D---- C:\Windows\Prefetch
2014-10-07 08:51:50 ----D---- C:\Windows\rescache
2014-10-06 15:12:06 ----D---- C:\Users\Top Manager\AppData\Roaming\Adobe
2014-10-06 15:11:30 ----D---- C:\Windows\system32\FxsTmp
2014-10-06 11:31:07 ----D---- C:\ProgramData\Skype
2014-10-06 11:30:57 ----RD---- C:\Program Files\Skype
2014-10-06 11:30:56 ----D---- C:\Program Files\Common Files
2014-09-26 00:50:03 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-09-25 03:02:40 ----D---- C:\Windows\system32\cs-CZ
2014-09-24 00:06:31 ----A---- C:\Windows\system32\FlashPlayerApp.exe
2014-09-20 00:38:46 ----D---- C:\Windows\Microsoft.NET
2014-09-20 00:37:15 ----RSD---- C:\Windows\assembly
2014-09-20 00:32:47 ----D---- C:\ProgramData\regid.1991-06.com.microsoft
2014-09-20 00:30:35 ----D---- C:\Program Files\Microsoft Office 15

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2014-07-07 49944]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2014-07-07 192352]
R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2010-03-04 435736]
R0 PxHelp20;PxHelp20; C:\Windows\System32\Drivers\PxHelp20.sys [2010-03-18 45648]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R0 stdcfltn;Disk Class Filter Driver for Accelerometer; C:\Windows\system32\DRIVERS\stdcfltn.sys [2010-08-20 17648]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2014-07-07 81768]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2014-07-07 779536]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2014-07-07 414520]
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2013-12-19 56080]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2012-03-01 233024]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-13 48128]
R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2014-07-07 24184]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2014-07-07 67824]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2014-07-07 71944]
R3 Acceler;Accelerometer Service; C:\Windows\system32\DRIVERS\Accelern.sys [2010-09-29 43888]
R3 BCM42RLY;BCM42RLY; C:\Windows\system32\drivers\BCM42RLY.sys [2011-01-23 18424]
R3 BCM43XX;Ovladač pro bezdrátovou síťovou kartu DW WLAN; C:\Windows\system32\DRIVERS\bcmwl6.sys [2010-05-05 2707448]
R3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-13 34816]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-13 93696]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-27 60416]
R3 btwaudio;Bluetooth Audio Device Service; C:\Windows\system32\drivers\btwaudio.sys [2009-10-03 86056]
R3 btwavdt;Bluetooth AVDT; C:\Windows\system32\DRIVERS\btwavdt.sys [2009-08-28 108072]
R3 btwl2cap;Bluetooth L2CAP Service; C:\Windows\system32\DRIVERS\btwl2cap.sys [2009-04-07 29472]
R3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys [2009-08-28 18472]
R3 CtClsFlt;Creative Camera Class Upper Filter Driver; C:\Windows\system32\DRIVERS\CtClsFlt.sys [2010-08-12 146528]
R3 HECI;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECI.sys [2009-09-17 41088]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2010-08-26 9024512]
R3 Impcd;Impcd; C:\Windows\system32\DRIVERS\Impcd.sys [2010-02-27 132480]
R3 IntcDAud;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2010-08-30 247808]
R3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [2014-10-12 110296]
R3 PCDSRVC{E9D79540-57D5953E-06020101}_0;PCDSRVC{E9D79540-57D5953E-06020101}_0 - PCDR Kernel Mode Service Helper Driver; \??\c:\program files\dell support center\pcdsrvc.pkms [2010-07-30 21744]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-13 129536]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUStor.sys [2009-08-10 171520]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt86win7.sys [2011-06-10 394856]
R3 Sftfs;Sftfs; C:\Windows\system32\DRIVERS\Sftfslh.sys [2013-06-26 583848]
R3 Sftplay;Sftplay; C:\Windows\system32\DRIVERS\Sftplaylh.sys [2013-06-26 197800]
R3 Sftredir;Sftredir; C:\Windows\system32\DRIVERS\Sftredirlh.sys [2013-06-26 24232]
R3 Sftvol;Sftvol; C:\Windows\system32\DRIVERS\Sftvollh.sys [2013-06-26 20136]
R3 STHDA;IDT High Definition Audio CODEC; C:\Windows\system32\DRIVERS\stwrt.sys [2010-04-07 423936]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2010-01-08 232624]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-13 14336]
S2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-13 8704]
S3 adusbser;AnyDATA USB Device for Legacy Serial Communication; C:\Windows\system32\DRIVERS\adusbser.sys [2009-11-05 106880]
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-13 70720]
S3 amdagp;Ovladač filtru AMD portu AGP; C:\Windows\system32\drivers\amdagp.sys [2009-07-13 53312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-13 229888]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 393728]
S3 CtAudDrv;Provides advanced audio effects for audio devices.; \??\C:\Windows\system32\Drivers\CtAudDrv.sys [2009-05-28 134144]
S3 ewusbnet;HUAWEI USB-NDIS miniport; C:\Windows\system32\DRIVERS\ewusbnet.sys [2009-07-23 112128]
S3 HTCAND32;HTC Device Driver; C:\Windows\System32\Drivers\ANDROIDUSB.sys [2009-10-26 25088]
S3 htcnprot;HTC NDIS Protocol Driver; C:\Windows\system32\DRIVERS\htcnprot.sys [2010-06-23 23040]
S3 hwdatacard;Huawei DataCard USB Modem and USB Serial; C:\Windows\system32\DRIVERS\ewusbmdm.sys [2009-07-23 102912]
S3 hwmobilehsn;High Speed USB Modem and USB Serial For Normal; C:\Windows\system32\DRIVERS\hwmob01.sys [2010-05-27 106240]
S3 ivusb;Initio Driver for USB Default Controller; C:\Windows\system32\DRIVERS\ivusb.sys [2010-07-29 25112]
S3 nmwcd;Nokia USB Phone Parent Driver; C:\Windows\system32\drivers\ccdcmb.sys [2012-01-09 18176]
S3 nmwcdc;Nokia USB Communication Driver; C:\Windows\system32\drivers\ccdcmbo.sys [2012-01-09 23168]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfd.sys [2012-04-22 18816]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-13 12368]
S3 sisagp;Filtr SIS sběrnice AGP; C:\Windows\system32\drivers\sisagp.sys [2009-07-13 52304]
S3 taphss6;Anchorfree HSS VPN Adapter; C:\Windows\system32\DRIVERS\taphss6.sys []
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 52224]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerflt.sys [2012-01-09 8192]
S3 usb_rndisx;Adaptér USB RNDIS; C:\Windows\system32\DRIVERS\usb8023x.sys [2013-02-11 15872]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 36352]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2013-08-28 28160]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltj.sys [2012-01-09 8192]
S3 viaagp;Filtr VIA sběrnice AGP; C:\Windows\system32\drivers\viaagp.sys [2009-07-13 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-13 52736]
S3 WDC_SAM;WD SCSI Pass Thru driver; C:\Windows\system32\DRIVERS\wdcsam.sys [2013-11-02 11520]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-09-12 64704]
R2 AESTFilters;Andrea ST Filters Service; C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_f39a6924a795ad94\aestsrv.exe [2009-03-03 81920]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2014-07-07 50344]
R2 btwdins;Bluetooth Service; c:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe [2009-10-20 595232]
R2 c2cautoupdatesvc;Skype Click to Call Updater; C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [2014-07-14 1390176]
R2 c2cpnrsvc;Skype Click to Call PNR Service; C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [2014-07-14 1767520]
R2 ClickToRunSvc;Služba Microsoft Office ClickToRun; C:\Program Files\Microsoft Office 15\ClientX86\OfficeClickToRun.exe [2014-08-11 1664176]
R2 cvhsvc;Client Virtualization Handler; C:\Program Files\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2013-04-22 822504]
R2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2011-04-02 136176]
R2 HTCMonitorService;HTCMonitorService; C:\Program Files\HTC\HTC Sync Manager\HSMServiceEntry.exe [2012-12-12 87368]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2009-11-04 268824]
R2 PassThru Service;Internet Pass-Through Service; C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe [2012-12-07 167424]
R2 PDFProFiltSrvPP;PDFProFiltSrvPP; C:\Program Files\Nuance\PaperPort\PDFProFiltSrvPP.exe [2010-03-09 144672]
R2 sftlist;Application Virtualization Client; C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe [2013-06-26 523944]
R2 STacSV;Audio Service; C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_f39a6924a795ad94\STacSV.exe [2010-04-07 229458]
R2 UNS;Intel(R) Management & Security Application User Notification Service; C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2009-11-04 2320920]
R2 WDBackup;WD Backup; C:\Program Files\Western Digital\WD SmartWare\WDBackupEngine.exe [2013-11-02 1042808]
R2 WDDriveService;WD Drive Manager; C:\Program Files\Western Digital\WD Drive Manager\WDDriveService.exe [2013-11-02 270704]
R3 BrYNSvc;BrYNSvc; C:\Program Files\Browny02\BrYNSvc.exe [2012-06-05 266240]
R3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2012-04-22 720936]
R3 sftvsa;Application Virtualization Service Agent; C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe [2013-06-26 207528]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 RoxWatch12;Roxio Hard Drive Watcher 12; C:\Program Files\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatch12OEM.exe [2010-09-04 219632]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-09-24 267440]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2013-09-11 46688]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2011-04-02 136176]
S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2012-08-13 194032]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-08-18 108032]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files\Microsoft Office\Office14\GROOVE.EXE [2013-12-19 30814400]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2014-06-06 119408]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2013-04-23 150600]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2013-04-23 4846168]
S3 RoxMediaDB12OEM;RoxMediaDB12OEM; C:\Program Files\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxMediaDB12OEM.exe [2010-09-04 1116656]
S3 stllssvr;stllssvr; C:\Program Files\Common Files\SureThing Shared\stllssvr.exe [2010-08-26 74392]
S3 SwitchBoard;SwitchBoard; C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2011-02-02 1343400]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

-----------------EOF-----------------

Zdravím!
Spusťte nejprve tuto utilitu:

Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.

Scan:

# AdwCleaner v4.000 - Report created 12/10/2014 at 16:38:57
# DB v2014-10-12.3
# Updated 12/10/2014 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (32 bits)
# Username : Top Manager - TOPMANAGER-PC
# Running from : C:\Users\Top Manager\Downloads\adwcleaner_4.000.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\Ask
Folder Deleted : C:\Program Files\Ask.com
Folder Deleted : C:\Program Files\Conduit
Folder Deleted : C:\Users\Top Manager\AppData\LocalLow\Conduit
Folder Deleted : C:\Users\Top Manager\AppData\Roaming\Mozilla\Firefox\Profiles\gah0y699.default\ConduitCommon
Folder Deleted : C:\Program Files\DAEMON Tools Toolbar
Folder Deleted : C:\Windows\installer\{86d4b82a-abed-442a-be86-96357b70f4fe}
Folder Deleted : C:\Users\Top Manager\AppData\LocalLow\PriceGong
Folder Deleted : C:\Program Files\Common Files\Spigot
Folder Deleted : C:\Users\Top Manager\AppData\Local\Google\Chrome\User Data\Default\Extensions\gkojfkhlekighikafcpjkiklfbnlmeio
File Deleted : C:\Users\Top Manager\AppData\Roaming\Mozilla\Firefox\Profiles\gah0y699.default\invalidprefs.js
File Deleted : C:\Users\Top Manager\AppData\Roaming\Mozilla\Firefox\Profiles\gah0y699.default\searchplugins\Askcom.xml
File Deleted : C:\Program Files\Mozilla Firefox\searchplugins\crawlersrch.xml
File Deleted : C:\Users\Top Manager\AppData\Roaming\Mozilla\Firefox\Profiles\gah0y699.default\searchplugins\search.xml

***** [ Scheduled Tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****

Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{3C5F0F00-683D-4847-89C8-E7AF64FD1CFB}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Main [Backup.old.Start Page]
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
Key Deleted : HKLM\SOFTWARE\Classes\protector_dll.protectorbho
Key Deleted : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\CToolbar_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\CToolbar_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SearchSettings_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SearchSettings_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASMANCS
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3131886
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_daemon-tools_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_daemon-tools_RASMANCS
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{065C1A21-97F8-45FB-A9F0-861B60FACEC8}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3204358F-5904-46A6-841F-D6B5BE3EF4E3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3AE67737-0E3E-44AA-AA5E-46A68BF017FF}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3EE5B726-044A-48D2-AA7B-049BD9A0F62A}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{60FBBE03-57FF-49D8-B38E-053D3F489825}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6A5182F1-C0B8-42B8-96CC-7F329CD46913}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6C153418-8E4D-4FAF-AF27-5201E38463A7}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A26A2F05-AC4D-4A1E-9531-9125F7309B78}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CC5D6240-7DF0-435D-9B9B-F8586A99DE86}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F343045E-E20A-46E1-82D8-9962C43EFC9E}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FBB360DC-CB6C-4D6A-808A-2C773151BFFF}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FFD7DDAC-EC28-42A5-8D39-917B9078604B}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{813A22E0-3E2B-4188-9BDA-ECA9878B8D48}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{BCFF5F55-6F44-11D2-86F8-00104B265ED5}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8736C681-37A0-40C6-A0F0-4C083409151C}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{4B3803EA-5230-4DC3-A7FC-33638F3D3542}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{4B3803EA-5230-4DC3-A7FC-33638F3D3542}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9CB96984-43C3-4D44-90EF-01466EFCF7BB}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AD22EBAF-0D18-4FC7-90CC-5EA0ABBE9EB8}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9CB96984-43C3-4D44-90EF-01466EFCF7BB}
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{32099AAC-C132-4136-9E9A-4E364A424E17}]
Key Deleted : HKCU\Software\anchorfree
Key Deleted : HKCU\Software\Conduit
Key Deleted : HKCU\Software\dt soft\daemon tools toolbar
Key Deleted : HKCU\Software\Softonic
Key Deleted : HKCU\Software\YahooPartnerToolbar
Key Deleted : HKCU\Software\AppDataLow\Software\Conduit
Key Deleted : HKCU\Software\AppDataLow\Software\ConduitSearchScopes
Key Deleted : HKCU\Software\AppDataLow\Software\Search Settings
Key Deleted : HKCU\Software\AppDataLow\Software\SmartBar
Key Deleted : HKLM\SOFTWARE\Conduit

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17280

Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Search [SearchAssistant]

-\\ Mozilla Firefox v30.0 (en-US)

[gah0y699.default] - Line Deleted : user_pref("CT3131886..clientLogIsEnabled", false);
[gah0y699.default] - Line Deleted : user_pref("CT3131886..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
[gah0y699.default] - Line Deleted : user_pref("CT3131886..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
[gah0y699.default] - Line Deleted : user_pref("CT3131886.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);
[gah0y699.default] - Line Deleted : user_pref("CT3131886.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
[gah0y699.default] - Line Deleted : user_pref("CT3131886.BrowserCompStateIsOpen_129730831435930026", true);
[gah0y699.default] - Line Deleted : user_pref("CT3131886.BrowserCompStateIsOpen_1367226153000", true);
[gah0y699.default] - Line Deleted : user_pref("CT3131886.CTID", "CT3131886");
[gah0y699.default] - Line Deleted : user_pref("CT3131886.CurrentServerDate", "18-9-2013");
[gah0y699.default] - Line Deleted : user_pref("CT3131886.DSChangedManually", false);
[gah0y699.default] - Line Deleted : user_pref("CT3131886.DSInstall", true);
[gah0y699.default] - Line Deleted : user_pref("CT3131886.DSProtectChoice", true);
[gah0y699.default] - Line Deleted : user_pref("CT3131886.DSProtectCount", 1);
[gah0y699.default] - Line Deleted : user_pref("CT3131886.DialogsAlignMode", "LTR");
[gah0y699.default] - Line Deleted : user_pref("CT3131886.DialogsGetterLastCheckTime", "Wed Sep 18 2013 11:50:00 GMT-0400");
[gah0y699.default] - Line Deleted : user_pref("CT3131886.DownloadReferralCookieData", "");
[gah0y699.default] - Line Deleted : user_pref("CT3131886.EMailNotifierPollDate", "Tue Sep 11 2012 22:45:20 GMT-0400");
[gah0y699.default] - Line Deleted : user_pref("CT3131886.FirstServerDate", "22-6-2012");
[gah0y699.default] - Line Deleted : user_pref("CT3131886.FirstTime", true);
[gah0y699.default] - Line Deleted : user_pref("CT3131886.FirstTimeFF3", true);
[gah0y699.default] - Line Deleted : user_pref("CT3131886.FirstTimeHiddenVer", true);
[gah0y699.default] - Line Deleted : user_pref("CT3131886.FixPageNotFoundErrors", true);
[gah0y699.default] - Line Deleted : user_pref("CT3131886.GroupingServerCheckInterval", 1440);
[gah0y699.default] - Line Deleted : user_pref("CT3131886.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
[gah0y699.default] - Line Deleted : user_pref("CT3131886.HPInstall", true);
[gah0y699.default] - Line Deleted : user_pref("CT3131886.HPProtectChoice", true);
[gah0y699.default] - Line Deleted : user_pref("CT3131886.HPProtectCount", 1);
[gah0y699.default] - Line Deleted : user_pref("CT3131886.HasUserGlobalKeys", true);
[gah0y699.default] - Line Deleted : user_pref("CT3131886.HomePageProtectorEnabled", true);
[gah0y699.default] - Line Deleted : user_pref("CT3131886.HomepageBeforeUnload", "hxxp://search.conduit.com/?ctid=CT3131886&SearchSource=13");
[gah0y699.default] - Line Deleted : user_pref("CT3131886.Initialize", true);
[gah0y699.default] - Line Deleted : user_pref("CT3131886.InitializeCommonPrefs", true);
[gah0y699.default] - Line Deleted : user_pref("CT3131886.InstallationAndCookieDataSentCount", 3);
[gah0y699.default] - Line Deleted : user_pref("CT3131886.InstallationId", "conduitinstaller.exe");
[gah0y699.default] - Line Deleted : user_pref("CT3131886.InstallationType", "ConduitNSISIntegration");
[gah0y699.default] - Line Deleted : user_pref("CT3131886.InstalledDate", "Fri Jun 22 2012 06:48:22 GMT-0400");
[gah0y699.default] - Line Deleted : user_pref("CT3131886.InvalidateCache", false);
[gah0y699.default] - Line Deleted : user_pref("CT3131886.IsAlertDBUpdated", true);
[gah0y699.default] - Line Deleted : user_pref("CT3131886.IsGrouping", false);
[gah0y699.default] - Line Deleted : user_pref("CT3131886.IsInitSetupIni", true);
[gah0y699.default] - Line Deleted : user_pref("CT3131886.IsMulticommunity", false);
[gah0y699.default] - Line Deleted : user_pref("CT3131886.IsOpenThankYouPage", false);
[gah0y699.default] - Line Deleted : user_pref("CT3131886.IsOpenUninstallPage", true);
[gah0y699.default] - Line Deleted : user_pref("CT3131886.IsProtectorsInit", true);
[gah0y699.default] - Line Deleted : user_pref("CT3131886.LanguagePackLastCheckTime", "Wed Sep 18 2013 11:49:57 GMT-0400");
[gah0y699.default] - Line Deleted : user_pref("CT3131886.LanguagePackReloadIntervalMM", 1440);
[gah0y699.default] - Line Deleted : user_pref("CT3131886.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx");
[gah0y699.default] - Line Deleted : user_pref("CT3131886.LastLogin_3.13.0.6", "Tue Jul 17 2012 02:35:35 GMT-0400");
[gah0y699.default] - Line Deleted : user_pref("CT3131886.LastLogin_3.14.1.0", "Wed Aug 22 2012 14:47:53 GMT-0400");
[gah0y699.default] - Line Deleted : user_pref("CT3131886.LastLogin_3.15.1.0", "Sun Nov 11 2012 10:57:21 GMT-0500");
[gah0y699.default] - Line Deleted : user_pref("CT3131886.LastLogin_3.16.0.3", "Wed Sep 18 2013 11:49:57 GMT-0400");
[gah0y699.default] - Line Deleted : user_pref("CT3131886.LatestVersion", "3.20.0.4");
[gah0y699.default] - Line Deleted : user_pref("CT3131886.Locale", "en");
[gah0y699.default] - Line Deleted : user_pref("CT3131886.MCDetectTooltipHeight", "83");
[gah0y699.default] - Line Deleted : user_pref("CT3131886.MCDetectTooltipShow", false);
[gah0y699.default] - Line Deleted : user_pref("CT3131886.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
[gah0y699.default] - Line Deleted : user_pref("CT3131886.MCDetectTooltipWidth", "295");
[gah0y699.default] - Line Deleted : user_pref("CT3131886.MyStuffEnabledAtInstallation", true);
[gah0y699.default] - Line Deleted : user_pref("CT3131886.OriginalFirstVersion", "3.13.0.6");
[gah0y699.default] - Line Deleted : user_pref("CT3131886.RadioIsPodcast", false);
[gah0y699.default] - Line Deleted : user_pref("CT3131886.RadioLastCheckTime", "Tue Sep 11 2012 22:45:21 GMT-0400");
[gah0y699.default] - Line Deleted : user_pref("CT3131886.RadioLastUpdateIPServer", "3");
[gah0y699.default] - Line Deleted : user_pref("CT3131886.RadioLastUpdateServer", "3");
[gah0y699.default] - Line Deleted : user_pref("CT3131886.RadioMediaID", "9962");
[gah0y699.default] - Line Deleted : user_pref("CT3131886.RadioMediaType", "Media Player");
[gah0y699.default] - Line Deleted : user_pref("CT3131886.RadioMenuSelectedID", "EBRadioMenu_CT31318869962");
[gah0y699.default] - Line Deleted : user_pref("CT3131886.RadioShrinkedFromSetup", false);
[gah0y699.default] - Line Deleted : user_pref("CT3131886.RadioStationName", "California%20Rock");
[gah0y699.default] - Line Deleted : user_pref("CT3131886.RadioStationURL", "hxxp://feedlive.net/california.asx");
[gah0y699.default] - Line Deleted : user_pref("CT3131886.SHRINK_TOOLBAR", 1);
[gah0y699.default] - Line Deleted : user_pref("CT3131886.SavedHomepage", "chrome://branding/locale/browserconfig.properties");
[gah0y699.default] - Line Deleted : user_pref("CT3131886.SearchCaption", "Vgrabber1 Customized Web Search");
[gah0y699.default] - Line Deleted : user_pref("CT3131886.SearchEngineBeforeUnload", "Vgrabber1 Customized Web Search");
[gah0y699.default] - Line Deleted : user_pref("CT3131886.SearchFromAddressBarIsInit", true);
[gah0y699.default] - Line Deleted : user_pref("CT3131886.SearchInNewTabEnabled", true);
[gah0y699.default] - Line Deleted : user_pref("CT3131886.SearchInNewTabIntervalMM", 1440);
[gah0y699.default] - Line Deleted : user_pref("CT3131886.SearchInNewTabLastCheckTime", "Wed Sep 18 2013 11:49:43 GMT-0400");
[gah0y699.default] - Line Deleted : user_pref("CT3131886.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID&UM=UM_ID");
[gah0y699.default] - Line Deleted : user_pref("CT3131886.SearchProtectorEnabled", true);
[gah0y699.default] - Line Deleted : user_pref("CT3131886.SearchProtectorToolbarDisabled", false);
[gah0y699.default] - Line Deleted : user_pref("CT3131886.SendProtectorDataViaLogin", true);
[gah0y699.default] - Line Deleted : user_pref("CT3131886.ServiceMapLastCheckTime", "Wed Sep 18 2013 11:49:44 GMT-0400");
[gah0y699.default] - Line Deleted : user_pref("CT3131886.SettingsLastCheckTime", "Wed Sep 18 2013 11:49:42 GMT-0400");
[gah0y699.default] - Line Deleted : user_pref("CT3131886.SettingsLastUpdate", "1379491837");
[gah0y699.default] - Line Deleted : user_pref("CT3131886.TBHomePageUrl", "hxxp://search.conduit.com/?ctid=CT3131886&SearchSource=13");
[gah0y699.default] - Line Deleted : user_pref("CT3131886.ThirdPartyComponentsInterval", 504);
[gah0y699.default] - Line Deleted : user_pref("CT3131886.ThirdPartyComponentsLastCheck", "Fri Jun 22 2012 06:48:21 GMT-0400");
[gah0y699.default] - Line Deleted : user_pref("CT3131886.ThirdPartyComponentsLastUpdate", "1331805997");
[gah0y699.default] - Line Deleted : user_pref("CT3131886.ToolbarShrinkedFromSetup", false);
[gah0y699.default] - Line Deleted : user_pref("CT3131886.TrusteLinkUrl", "hxxp://trust.conduit.com/CT3131886");
[gah0y699.default] - Line Deleted : user_pref("CT3131886.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,client.conduit-storage.com,OurToolbar.com,CommunityToolbars.com,ForumToolbar.com,MyBlogToolbar.com,MyCity[...]
[gah0y699.default] - Line Deleted : user_pref("CT3131886.UserID", "UN38787041194755821");
[gah0y699.default] - Line Deleted : user_pref("CT3131886.ValidationData_Toolbar", 0);
[gah0y699.default] - Line Deleted : user_pref("CT3131886.WeatherNetwork", "");
[gah0y699.default] - Line Deleted : user_pref("CT3131886.WeatherPollDate", "Tue Sep 11 2012 22:45:21 GMT-0400");
[gah0y699.default] - Line Deleted : user_pref("CT3131886.WeatherUnit", "C");
[gah0y699.default] - Line Deleted : user_pref("CT3131886.alertChannelId", "1528270");
[gah0y699.default] - Line Deleted : user_pref("CT3131886.approveUntrustedApps", false);
[gah0y699.default] - Line Deleted : user_pref("CT3131886.autoDisableScopes", -1);
[gah0y699.default] - Line Deleted : user_pref("CT3131886.backendstorage.cb_experience_000", "31");
[gah0y699.default] - Line Deleted : user_pref("CT3131886.backendstorage.cb_user_id_000", "43423938353035333932323532315F46697265666F78");
[gah0y699.default] - Line Deleted : user_pref("CT3131886.backendstorage.cbcountry_001", "4341");
[gah0y699.default] - Line Deleted : user_pref("CT3131886.backendstorage.cbfirsttime", "467269204A756E20323220323031322030363A34383A323820474D542D30343030");
[gah0y699.default] - Line Deleted : user_pref("CT3131886.backendstorage.shoppingapp.gk.exipres", "4D6F6E204F637420303120323031322031313A33323A303520474D542D30343030");
[gah0y699.default] - Line Deleted : user_pref("CT3131886.backendstorage.shoppingapp.gk.geolocation", "63616E616461");
[gah0y699.default] - Line Deleted : user_pref("CT3131886.backendstorage.url_history0001", "687474703A2F2F7777772E676F746F66696E6F2E636F6D2F626561727761746368696E67746F66696E6F62632E68746D6C3A3A3A636C69636B68616E646C65723A3A3A31333438363[...]
[gah0y699.default] - Line Deleted : user_pref("CT3131886.components.129641800282594559", false);
[gah0y699.default] - Line Deleted : user_pref("CT3131886.components.5905781182315170198", false);
[gah0y699.default] - Line Deleted : user_pref("CT3131886.globalFirstTimeInfoLastCheckTime", "Fri Jun 22 2012 06:48:22 GMT-0400");
[gah0y699.default] - Line Deleted : user_pref("CT3131886.homepageProtectorEnableByLogin", true);
[gah0y699.default] - Line Deleted : user_pref("CT3131886.initDone", true);
[gah0y699.default] - Line Deleted : user_pref("CT3131886.isAppTrackingManagerOn", true);
[gah0y699.default] - Line Deleted : user_pref("CT3131886.isFirstRadioInstallation", false);
[gah0y699.default] - Line Deleted : user_pref("CT3131886.myStuffEnabled", true);
[gah0y699.default] - Line Deleted : user_pref("CT3131886.myStuffPublihserMinWidth", 400);
[gah0y699.default] - Line Deleted : user_pref("CT3131886.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID");
[gah0y699.default] - Line Deleted : user_pref("CT3131886.myStuffServiceIntervalMM", 1440);
[gah0y699.default] - Line Deleted : user_pref("CT3131886.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUFF_LUT");
[gah0y699.default] - Line Deleted : user_pref("CT3131886.navigateToUrlOnSearch", false);
[gah0y699.default] - Line Deleted : user_pref("CT3131886.revertSettingsEnabled", false);
[gah0y699.default] - Line Deleted : user_pref("CT3131886.searchProtectorDialogDelayInSec", 10);
[gah0y699.default] - Line Deleted : user_pref("CT3131886.searchProtectorEnableByLogin", true);
[gah0y699.default] - Line Deleted : user_pref("CT3131886.testingCtid", "");
[gah0y699.default] - Line Deleted : user_pref("CT3131886.toolbarAppMetaDataLastCheckTime", "Wed Sep 18 2013 11:49:57 GMT-0400");
[gah0y699.default] - Line Deleted : user_pref("CT3131886.toolbarContextMenuLastCheckTime", "Fri Jun 22 2012 06:48:25 GMT-0400");
[gah0y699.default] - Line Deleted : user_pref("CT3131886.usagesFlag", 2);
[gah0y699.default] - Line Deleted : user_pref("CommunityToolbar.ConduitHomepagesList", "hxxp://search.conduit.com/?ctid=CT3131886&SearchSource=13");
[gah0y699.default] - Line Deleted : user_pref("CommunityToolbar.ConduitSearchList", "Vgrabber1 Customized Web Search");
[gah0y699.default] - Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&locale=en", "C5ZJe6gL80JBW5CuLy+wkg==");
[gah0y699.default] - Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&locale=en", "2E1/v7EfCEDbv3VaBQMELg==");
[gah0y699.default] - Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&locale=en", "UgzXjW7BIkfdx+x39Ruv3w==");
[gah0y699.default] - Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&locale=en", "4BgM4MhF/sOgPsDNmIs3Yw==");
[gah0y699.default] - Line Deleted : user_pref("CommunityToolbar.LatestLibsPath", "file:///C:\\Users\\Top Manager\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\gah0y699.default\\conduitCommon\\modules\\3.15.1.0");
[gah0y699.default] - Line Deleted : user_pref("CommunityToolbar.LatestToolbarVersionInstalled", "3.15.1.0");
[gah0y699.default] - Line Deleted : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "");
[gah0y699.default] - Line Deleted : user_pref("CommunityToolbar.ToolbarsList", "CT3131886");
[gah0y699.default] - Line Deleted : user_pref("CommunityToolbar.ToolbarsList2", "CT3131886");
[gah0y699.default] - Line Deleted : user_pref("CommunityToolbar.ToolbarsList4", "CT3131886");
[gah0y699.default] - Line Deleted : user_pref("CommunityToolbar.globalUserId", "01fb23aa-2794-47d1-a6ed-d2f5fe1d166c");
[gah0y699.default] - Line Deleted : user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true);
[gah0y699.default] - Line Deleted : user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true);
[gah0y699.default] - Line Deleted : user_pref("CommunityToolbar.keywordURLSelectedCTID", "CT3131886");
[gah0y699.default] - Line Deleted : user_pref("CommunityToolbar.notifications.alertDialogsGetterLastCheckTime", "Tue Sep 11 2012 22:45:23 GMT-0400");
[gah0y699.default] - Line Deleted : user_pref("CommunityToolbar.notifications.alertEnabled", true);
[gah0y699.default] - Line Deleted : user_pref("CommunityToolbar.notifications.alertInfoInterval", 1440);
[gah0y699.default] - Line Deleted : user_pref("CommunityToolbar.notifications.alertInfoLastCheckTime", "Tue Sep 11 2012 22:45:29 GMT-0400");
[gah0y699.default] - Line Deleted : user_pref("CommunityToolbar.notifications.clientsServerUrl", "hxxp://alert.client.conduit.com");
[gah0y699.default] - Line Deleted : user_pref("CommunityToolbar.notifications.locale", "en");
[gah0y699.default] - Line Deleted : user_pref("CommunityToolbar.notifications.loginIntervalMin", 1440);
[gah0y699.default] - Line Deleted : user_pref("CommunityToolbar.notifications.loginLastCheckTime", "Tue Sep 11 2012 22:45:21 GMT-0400");
[gah0y699.default] - Line Deleted : user_pref("CommunityToolbar.notifications.loginLastUpdateTime", "1313487611");
[gah0y699.default] - Line Deleted : user_pref("CommunityToolbar.notifications.messageShowTimeSec", 20);
[gah0y699.default] - Line Deleted : user_pref("CommunityToolbar.notifications.servicesServerUrl", "hxxp://alert.services.conduit.com");
[gah0y699.default] - Line Deleted : user_pref("CommunityToolbar.notifications.showTrayIcon", false);
[gah0y699.default] - Line Deleted : user_pref("CommunityToolbar.notifications.userCloseIntervalMin", 300);
[gah0y699.default] - Line Deleted : user_pref("CommunityToolbar.notifications.userId", "2246abc9-7efe-45ea-a769-237982771878");
[gah0y699.default] - Line Deleted : user_pref("CommunityToolbar.originalHomepage", "chrome://branding/locale/browserconfig.properties");
[gah0y699.default] - Line Deleted : user_pref("CommunityToolbar.originalSearchEngine", "chrome://browser-region/locale/region.properties");
[gah0y699.default] - Line Deleted : user_pref("backup.old.browser.search.selectedEngine", "Vgrabber1 Customized Web Search");
[gah0y699.default] - Line Deleted : user_pref("extensions.funmoods.aflt", "drive");
[gah0y699.default] - Line Deleted : user_pref("extensions.funmoods.autoRvrt", false);
[gah0y699.default] - Line Deleted : user_pref("extensions.funmoods.brwsrsrc", "ietlbr");
[gah0y699.default] - Line Deleted : user_pref("extensions.funmoods.cntry", "");
[gah0y699.default] - Line Deleted : user_pref("extensions.funmoods.cv", "cv5");
[gah0y699.default] - Line Deleted : user_pref("extensions.funmoods.dfltLng", "");
[gah0y699.default] - Line Deleted : user_pref("extensions.funmoods.dfltSrch", true);
[gah0y699.default] - Line Deleted : user_pref("extensions.funmoods.dfltlng", "en");
[gah0y699.default] - Line Deleted : user_pref("extensions.funmoods.dfltsrch", true);
[gah0y699.default] - Line Deleted : user_pref("extensions.funmoods.dnsErr", true);
[gah0y699.default] - Line Deleted : user_pref("extensions.funmoods.envrmnt", "production");
[gah0y699.default] - Line Deleted : user_pref("extensions.funmoods.excTlbr", false);
[gah0y699.default] - Line Deleted : user_pref("extensions.funmoods.hdrMd5", "679BE7DE03451EA1D30FADAA542C5B82");
[gah0y699.default] - Line Deleted : user_pref("extensions.funmoods.hmpg", true);
[gah0y699.default] - Line Deleted : user_pref("extensions.funmoods.hmpgUrl", "hxxp://start.funmoods.com/?f=1&a=drive&chnl=drive&cd=2XzuyEtN2Y1L1Qzu0FtDyE0D0AtB0C0EzytD0Ezz0AyB0E0FtN0D0Tzu0CtBtAtDtN1L2XzutBtFtCtFtDtFtAtDtC&cr=1564357114"[...]
[gah0y699.default] - Line Deleted : user_pref("extensions.funmoods.hrdid", "F04DA2CE90E8A7EF");
[gah0y699.default] - Line Deleted : user_pref("extensions.funmoods.id", "F04DA2CE90E8A7EF");
[gah0y699.default] - Line Deleted : user_pref("extensions.funmoods.instlDay", "15569");
[gah0y699.default] - Line Deleted : user_pref("extensions.funmoods.instlRef", "drive");
[gah0y699.default] - Line Deleted : user_pref("extensions.funmoods.instlday", "15569");
[gah0y699.default] - Line Deleted : user_pref("extensions.funmoods.instlref", "drive");
[gah0y699.default] - Line Deleted : user_pref("extensions.funmoods.isdcmntcmplt", true);
[gah0y699.default] - Line Deleted : user_pref("extensions.funmoods.keywordurl", "");
[gah0y699.default] - Line Deleted : user_pref("extensions.funmoods.lastVrsnTs", "1.5.23.2215:52:9");
[gah0y699.default] - Line Deleted : user_pref("extensions.funmoods.mntrvrsn", "1.3.0");
[gah0y699.default] - Line Deleted : user_pref("extensions.funmoods.newTab", true);
[gah0y699.default] - Line Deleted : user_pref("extensions.funmoods.newTabUrl", "hxxp://start.funmoods.com/?f=2&a=drive&chnl=drive&cd=2XzuyEtN2Y1L1Qzu0FtDyE0D0AtB0C0EzytD0Ezz0AyB0E0FtN0D0Tzu0CtBtAtDtN1L2XzutBtFtCtFtDtFtAtDtC&cr=156435711[...]
[gah0y699.default] - Line Deleted : user_pref("extensions.funmoods.newtab", true);
[gah0y699.default] - Line Deleted : user_pref("extensions.funmoods.newtaburl", "hxxp://start.funmoods.com/?f=2&a=drive&chnl=drive&cd=2XzuyEtN2Y1L1Qzu0FtDyE0D0AtB0C0EzytD0Ezz0AyB0E0FtN0D0Tzu0CtBtAtDtN1L2XzutBtFtCtFtDtFtAtDtC&cr=156435711[...]
[gah0y699.default] - Line Deleted : user_pref("extensions.funmoods.prdct", "funmoods");
[gah0y699.default] - Line Deleted : user_pref("extensions.funmoods.prtnrId", "funmoods");
[gah0y699.default] - Line Deleted : user_pref("extensions.funmoods.prtnrid", "funmoods");
[gah0y699.default] - Line Deleted : user_pref("extensions.funmoods.savedVrsnTs", "1");
[gah0y699.default] - Line Deleted : user_pref("extensions.funmoods.sg", "none");
[gah0y699.default] - Line Deleted : user_pref("extensions.funmoods.smplGrp", "none");
[gah0y699.default] - Line Deleted : user_pref("extensions.funmoods.smplgrp", "none");
[gah0y699.default] - Line Deleted : user_pref("extensions.funmoods.srch", "");
[gah0y699.default] - Line Deleted : user_pref("extensions.funmoods.srchPrvdr", "Search");
[gah0y699.default] - Line Deleted : user_pref("extensions.funmoods.srchprvdr", "Search");
[gah0y699.default] - Line Deleted : user_pref("extensions.funmoods.tlbrId", "base");
[gah0y699.default] - Line Deleted : user_pref("extensions.funmoods.tlbrSrchUrl", "hxxp://start.funmoods.com/?f=3&a=drive&chnl=drive&cd=2XzuyEtN2Y1L1Qzu0FtDyE0D0AtB0C0EzytD0Ezz0AyB0E0FtN0D0Tzu0CtBtAtDtN1L2XzutBtFtCtFtDtFtAtDtC&cr=1564357[...]
[gah0y699.default] - Line Deleted : user_pref("extensions.funmoods.tlbrid", "base");
[gah0y699.default] - Line Deleted : user_pref("extensions.funmoods.tlbrsrchurl", "hxxp://start.funmoods.com/?f=3&a=drive&chnl=drive&cd=2XzuyEtN2Y1L1Qzu0FtDyE0D0AtB0C0EzytD0Ezz0AyB0E0FtN0D0Tzu0CtBtAtDtN1L2XzutBtFtCtFtDtFtAtDtC&cr=1564357[...]
[gah0y699.default] - Line Deleted : user_pref("extensions.funmoods.vrsn", "1.5.23.22");
[gah0y699.default] - Line Deleted : user_pref("extensions.funmoods.vrsnTs", "1.5.23.2215:52:9");
[gah0y699.default] - Line Deleted : user_pref("extensions.funmoods.vrsni", "1.5.23.22");
[gah0y699.default] - Line Deleted : user_pref("extensions.funmoods.vrsnts", "1.5.23.2215:52:9");
[gah0y699.default] - Line Deleted : user_pref("extensions.funmoods_i.newTab", true);
[gah0y699.default] - Line Deleted : user_pref("extensions.funmoods_i.smplGrp", "none");
[gah0y699.default] - Line Deleted : user_pref("extensions.funmoods_i.vrsnTs", "1.5.23.2215:52:9");

-\\ Google Chrome v


*************************

AdwCleaner[R0].txt - [29080 octets] - [12/10/2014 16:35:57]
AdwCleaner[S0].txt - [29546 octets] - [12/10/2014 16:38:57]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [29607 octets] ##########

Dekuji

Dejte nový log RSIT.