VIRY.CZ

Poprosím o kontrolu pc. Počítač žádné anomálie nevykazu.

děkuji

Logfile of random's system information tool 1.10 (written by random/random)
Run by Vena at 2015-09-04 13:24:31
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 181 GB (73%) free of 250 GB
Total RAM: 4094 MB (51% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 13:24:37, on 4.9.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17937)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe
C:\Program Files (x86)\Cobian Backup 11\Cobian.exe
C:\Program Files (x86)\Cobian Backup 11\cbInterface.exe
C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\avpui.exe
C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
C:\Program Files (x86)\Opera\Opera.exe
C:\Program Files\totalcmd\TOTALCMD.EXE
C:\Program Files\trend micro\Vena.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.facebook.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: ContentBlockerBrowserHelperObject - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll
O2 - BHO: VirtualKeyboardBrowserHelperObject - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll
O2 - BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\IEExt\OnlineBanking\online_banking_bho.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll
O2 - BHO: link filter bho - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\IEExt\UrlAdvisor\klwtbbho.dll
O3 - Toolbar: (no name) - {A4C272EC-ED9E-4ACE-A6F2-9558C7F29EF3} - (no file)
O4 - HKLM\..\Run: [VirtualCloneDrive] "C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
O4 - HKLM\..\Run: [HPUsageTrackingLEDM] "C:\Program Files (x86)\HP\HP UT LEDM\bin\hppusg.exe" "C:\Program Files (x86)\HP\HP UT LEDM\"
O4 - HKLM\..\Run: [LWS] C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe -hide
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [Cobian Backup 11] "C:\Program Files (x86)\Cobian Backup 11\Cobian.exe"
O4 - HKCU\..\Run: [Pozadi z webky] C:\Program Files (x86)\Pozadi z webky\PozadiZWebky.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O9 - Extra button: Virtuální klávesnice - {0C4CC089-D306-440D-9772-464E226F6539} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Kontrola adres URL - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\IEExt\UrlAdvisor\klwtbbho.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe Active File Monitor V6 (AdobeActiveFileMonitor6.0) - Unknown owner - C:\Program Files (x86)\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: Služba Kaspersky Anti-Virus (AVP) - Kaspersky Lab ZAO - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\avp.exe
O23 - Service: Cobian Backup 11 Stínová kopie - Requester (cbVSCService11) - CobianSoft, Luis Cobian - C:\Program Files (x86)\Cobian Backup 11\cbVSCService11.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: FLEXnet Licensing Service 64 - Flexera Software, Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Sentinel HASP License Manager (hasplms) - Unknown owner - C:\Windows\system32\hasplms.exe (file missing)
O23 - Service: HP LaserJet Service - HP - C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe
O23 - Service: HP SI Service (HPSIService) - Unknown owner - C:\Windows\system32\HPSIsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: UMVPFSrv - Logitech Inc. - C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
O23 - Service: upsMonitor - Acresso - C:\PROGRA~2\VIEWPO~1.11S\UPSMON~1.EXE
O23 - Service: Apache Tomcat upsTomcat (upsTomcat) - Apache Software Foundation - C:\Program Files (x86)\ViewPower2.11 SP1\tomcat\bin\tomcat6.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 10045 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
winlogon.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
"C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe"
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
atieclxx
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe"
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
"C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe" /launchService
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\avp.exe" -r
"C:\Program Files (x86)\Cobian Backup 11\cbVSCService11.exe"
"C:\Program Files\Logitech\SetPointP\SetPoint.exe" /launchGaming
"C:\Program Files (x86)\Pozadi z webky\PozadiZWebky.exe"
C:\Windows\System32\svchost.exe -k utcsvc
"C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
"C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe" -hide
C:\Windows\system32\hasplms.exe -run
"C:\Program Files (x86)\Cobian Backup 11\Cobian.exe"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM" PriorityLow
"C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
"C:\Program Files (x86)\Cobian Backup 11\cbInterface.exe"
C:\Windows\system32\HPSIsvc.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\PROGRA~2\VIEWPO~1.11S\UPSMON~1.EXE -zglaxservice upsMonitor
"C:\Program Files (x86)\ViewPower2.11 SP1\jre\bin\javaw.exe" -Xrs -classpath "C:\Program Files (x86)\ViewPower2.11 SP1\monitor\derby.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-jvmstat.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-profiler.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\htmlconverter.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\jre\lib\deploy.jar;C:\Program Files (x86)\ViewPower2.11 SP1\monitor\volModbus.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-netbeans-modules-options-api_ja.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\ext\locale\updater_ja.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-openide-windows_zh_CN.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-openide-awt_ja.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-netbeans-core-windows_zh_CN.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-openide-io_ja.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\org-netbeans-modules-masterfs.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-openide-explorer_ja.jar;C:\Program Files (x86)\ViewPower2.11 SP1\tomcat\webapps\ViewPower\WEB-INF\lib\backport-util-concurrent.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\jre\lib\rt.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-netbeans-core-output2_ja.jar;C:\Program Files (x86)\ViewPower2.11 SP1\tomcat\webapps\ViewPower\WEB-INF\lib\viewpowerweb.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-openide-loaders_ja.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-netbeans-modules-editor-mimelookup_zh_CN.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\profiler3\lib\jfluid-server.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-netbeans-modules-queries_zh_CN.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-netbeans-core-io-ui_zh_CN.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-netbeans-modules-keyring_zh_CN.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-netbeans-modules-print_ja.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\src.zip;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-openide-util-enumerations_ja.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\ext\jh-2.0_05.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\jre\lib\im\indicim.jar;C:\Program Files (x86)\ViewPower2.11 SP1\tomcat\lib\jasper-el.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\org-netbeans-modules-queries.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\org-netbeans-modules-autoupdate-ui.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\org-openide-windows.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\visualvm\core\com-sun-tools-visualvm-modules-startup.jar;C:\Program Files (x86)\ViewPower2.11 SP1\tomcat\webapps\ViewPower\WEB-INF\lib\flex-messaging-data-req.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-netbeans-modules-spi-actions_zh_CN.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\org-openide-execution.jar;C:\Program Files (x86)\ViewPower2.11 SP1\tomcat\bin\bootstrap.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\org-netbeans-api-annotations-common.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-netbeans-swing-outline_zh_CN.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\ext\swing-layout-1.0.3.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\lib\locale\org-openide-modules_zh_CN.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\jre\lib\javaws.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-netbeans-modules-editor-mimelookup-impl_zh_CN.jar;C:\Program Files (x86)\ViewPower2.11 SP1\tomcat\lib\tomcat-i18n-ja.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-netbeans-core-execution_ja.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-netbeans-swing-tabcontrol_ja.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\lib\locale\org-openide-util_zh_CN.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\lib\locale\boot_ja.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\org-openide-awt.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-netbeans-api-annotations-common_zh_CN.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\ext\updater.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\jre\lib\ext\sunjce_provider.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-openide-compat_ja.jar;C:\Program Files (x86)\ViewPower2.11 SP1\tomcat\lib\el-api.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-openide-text_ja.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-netbeans-swing-outline_ja.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-openide-io_zh_CN.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\lib\locale\boot_zh_CN.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\org-netbeans-modules-autoupdate-services.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\lib\locale\org-openide-util_ja.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\docs\swing-layout-1.0.3-src.zip;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-netbeans-modules-applemenu_ja.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\org-netbeans-core-nativeaccess.jar;C:\Program Files (x86)\ViewPower2.11 SP1\tomcat\webapps\ViewPower\WEB-INF\lib\commons-logging.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-modules-appui.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\lib\boot.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-netbeans-core-execution_zh_CN.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-netbeans-modules-masterfs_ja.jar;C:\Program Files (x86)\ViewPower2.11 SP1\tomcat\lib\annotations-api.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-netbeans-modules-sendopts_ja.jar;C:\Program Files (x86)\ViewPower2.11 SP1\tomcat\webapps\ViewPower\WEB-INF\lib\flex-messaging-core.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-jmx.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-openide-options_ja.jar;C:\Program Files (x86)\ViewPower2.11 SP1\monitor\snmp4j-1.11.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\jre\lib\ext\sunpkcs11.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-openide-actions_ja.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-netbeans-core-ui_ja.jar;C:\Program Files (x86)\ViewPower2.11 SP1\monitor\RXTXcomm.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\visualvm\modules\locale\org-netbeans-core-windows_visualvm.jar;C:\Program Files (x86)\ViewPower2.11 SP1\tomcat\webapps\ViewPower\WEB-INF\lib\volUtil.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\lib\org-openide-modules.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-netbeans-modules-progress-ui_ja.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-netbeans-core_ja.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-netbeans-modules-autoupdate-ui_zh_CN.jar;C:\Program Files (x86)\ViewPower2.11 SP1\console\lib\SoftewareUpgrade.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\org-netbeans-modules-editor-mimelookup-impl.jar;C:\Program Files (x86)\ViewPower2.11 SP1\tomcat\webapps\ViewPower\WEB-INF\lib\flex-messaging-common.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\lib\locale\org-openide-modules_ja.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-openide-actions_zh_CN.jar;C:\Program Files (x86)\ViewPower2.11 SP1\monitor\mail.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-openide-compat_zh_CN.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\org-openide-options.jar;C:\Program Files (x86)\ViewPower2.11 SP1\monitor\commons-logging.jar;C:\Program Files (x86)\ViewPower2.11 SP1\tomcat\lib\tomcat-i18n-fr.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\org-netbeans-modules-keyring.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-openide-nodes_zh_CN.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\visualvm\modules\locale\org-netbeans-modules-profiler_visualvm.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\sa-jdi.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\core\org-openide-filesystems.jar;C:\Program Files (x86)\ViewPower2.11 SP1\tomcat\lib\catalina-ha.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\org-netbeans-core-windows.jar;C:\Program Files (x86)\ViewPower2.11 SP1\monitor\dom4j-1.6.1.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\lib\locale\org-openide-util-lookup_ja.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\org-netbeans-modules-print.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-netbeans-modules-templates_ja.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-host-views.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-netbeans-modules-keyring-impl_ja.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-openide-loaders_zh_CN.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-netbeans-api-progress_zh_CN.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\org-netbeans-core-execution.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-netbeans-modules-editor-mimelookup-impl_ja.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\jre\lib\management-agent.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\visualvm\modules\locale\org-netbeans-core_visualvm.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-netbeans-modules-javahelp_zh_CN.jar;C:\Program Files (x86)\ViewPower2.11 SP1\tomcat\lib\jasper.jar;C:\Program Files (x86)\ViewPower2.11 SP1\tomcat\bin\commons-daemon.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\jre\lib\ext\localedata.jar;C:\Program Files (x86)\ViewPower2.11 SP1\monitor\saxpath.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\org-netbeans-modules-applemenu.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-netbeans-modules-masterfs_zh_CN.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\org-netbeans-modules-settings.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\tools.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-netbeans-swing-tabcontrol_zh_CN.jar;C:\Program Files (x86)\ViewPower2.11 SP1\monitor\jaxen-full.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\org-openide-io.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\core\locale\core_ja.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-tools.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-host.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\jre\lib\resources.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\jre\lib\alt-string.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-openide-awt_zh_CN.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-netbeans-api-visual_ja.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-netbeans-modules-settings_zh_CN.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\jre\lib\ext\sunmscapi.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-netbeans-spi-quicksearch_ja.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-netbeans-api-annotations-common_ja.jar;C:\Program Files (x86)\ViewPower2.11 SP1\tomcat\bin\tomcat-juli.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\jre\lib\deploy\ffjcext.zip;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-netbeans-core-windows_ja.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\profiler3\modules\org-netbeans-modules-profiler.jar;C:\Program Files (x86)\ViewPower2.11 SP1\tomcat\lib\catalina-tribes.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-threaddump.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\org-netbeans-modules-progress-ui.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\lib\org-openide-util-lookup.jar;C:\Program Files (x86)\ViewPower2.11 SP1\tomcat\lib\jasper-jdt.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\org-openide-nodes.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\org-netbeans-core-multiview.jar;C:\Program Files (x86)\ViewPower2.11 SP1\tomcat\webapps\ViewPower\WEB-INF\lib\flex-messaging-data.jar;C:\Program Files (x86)\ViewPower2.11 SP1\tomcat\webapps\ViewPower\WEB-INF\lib\dom4j-1.6.1.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\jre\lib\ext\dnsns.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-coredump.jar;C:\Program Files (x86)\ViewPower2.11 SP1\tomcat\webapps\ViewPower\WEB-INF\lib\commons-httpclient-3.0.1.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\org-openide-util-enumerations.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\org-netbeans-modules-javahelp.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-netbeans-modules-core-kit_zh_CN.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\profiler3\modules\org-netbeans-lib-profiler.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-attach.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\org-netbeans-modules-spi-actions.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-netbeans-core-ui_zh_CN.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-netbeans-modules-settings_ja.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-netbeans-modules-templates_zh_CN.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-netbeans-modules-javahelp_ja.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-netbeans-modules-keyring-impl_zh_CN.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-application-views.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-netbeans-modules-options-keymap_zh_CN.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\jre\lib\jsse.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\org-netbeans-modules-editor-mimelookup.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-openide-explorer_zh_CN.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-netbeans-core-io-ui_ja.jar;C:\Program Files (x86)\ViewPower2.11 SP1\tomcat\webapps\ViewPower\WEB-INF\lib\flex-messaging-remoting.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\org-netbeans-core-io-ui.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\profiler3\lib\jfluid-server-15.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-netbeans-modules-favorites_zh_CN.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\org-openide-loaders.jar;C:\Program Files (x86)\ViewPower2.11 SP1\tomcat\webapps\ViewPower\WEB-INF\lib\flex-acrobat.jar;C:\Program Files (x86)\ViewPower2.11 SP1\monitor\snmp4j-1.11-javadoc.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-openide-options_zh_CN.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-netbeans-modules-favorites_ja.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-heapdump.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\org-netbeans-modules-templates.jar;C:\Program Files (x86)\ViewPower2.11 SP1\console\lib\JTattoo.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-netbeans-api-progress_ja.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-netbeans-core-multiview_ja.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-netbeans-api-visual_zh_CN.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-netbeans-modules-editor-mimelookup_ja.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\jre\lib\security\US_export_policy.jar;C:\Program Files (x86)\ViewPower2.11 SP1\monitor\spring-core.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\jre\lib\plugin.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-openide-execution_ja.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-jvm.jar;C:\Program Files (x86)\ViewPower2.11 SP1\tomcat\lib\servlet-api.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-openide-util-enumerations_zh_CN.jar;C:\Program Files (x86)\ViewPower2.11 SP1\tomcat\lib\jsp-api.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\org-openide-dialogs.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\org-netbeans-modules-favorites.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\org-openide-explorer.jar;C:\Program Files (x86)\ViewPower2.11 SP1\monitor\viewpowermonitor.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\org-netbeans-modules-sendopts.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-netbeans-modules-options-api_zh_CN.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-netbeans-modules-keyring_ja.jar;C:\Program Files (x86)\ViewPower2.11 SP1\tomcat\lib\catalina-ant.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\lib\org-openide-util.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-openide-windows_ja.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-netbeans-modules-applemenu_zh_CN.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\visualvm\core\locale\core_visualvm.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\dt.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-application.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-netbeans-swing-plaf_ja.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-openide-dialogs_ja.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\lib\locale\org-openide-util-lookup_zh_CN.jar;C:\Program Files (x86)\ViewPower2.11 SP1\tomcat\lib\tomcat-i18n-es.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-openide-dialogs_zh_CN.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\profiler3\modules\org-netbeans-lib-profiler-common.jar;C:\Program Files (x86)\ViewPower2.11 SP1\monitor\spring-beans.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\org-netbeans-swing-plaf.jar;C:\Program Files (x86)\ViewPower2.11 SP1\console\lib\ViewPowerConsole.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\org-netbeans-modules-options-api.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-openide-nodes_ja.jar;C:\Program Files (x86)\ViewPower2.11 SP1\tomcat\webapps\ViewPower\WEB-INF\lib\viewpowerRMI.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\org-openide-text.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\org-netbeans-api-progress.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-netbeans-modules-sendopts_zh_CN.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\profiler3\modules\org-netbeans-lib-profiler-ui.jar;C:\Program Files (x86)\ViewPower2.11 SP1\tomcat\lib\catalina.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\org-netbeans-swing-tabcontrol.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\org-netbeans-swing-outline.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\docs\swing-layout-1.0.3-doc.zip;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\org-netbeans-modules-options-keymap.jar;C:\Program Files (x86)\ViewPower2.11 SP1\monitor\iText-5.0.6.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-openide-text_zh_CN.jar;C:\Program Files (x86)\ViewPower2.11 SP1\tomcat\webapps\ViewPower\WEB-INF\lib\jaxen-full.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\org-jdesktop-layout.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-netbeans-core-output2_zh_CN.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-netbeans-modules-core-kit_ja.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-netbeans-modules-progress-ui_zh_CN.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\jre\lib\alt-rt.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-openide-execution_zh_CN.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\jre\lib\im\thaiim.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-netbeans-modules-queries_ja.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\org-netbeans-core-output2.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-netbeans-core_zh_CN.jar;C:\Program Files (x86)\ViewPower2.11 SP1\monitor\log4j-1.2.14.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\core\locale\core_zh_CN.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-netbeans-modules-autoupdate-ui_ja.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\jre\lib\charsets.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\jre\lib\security\local_policy.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-netbeans-modules-options-keymap_ja.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\org-netbeans-spi-quicksearch.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-netbeans-core-multiview_zh_CN.jar;C:\Program Files (x86)\ViewPower2.11 SP1\tomcat\webapps\ViewPower\WEB-INF\lib\flex-messaging-opt.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-core.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\core\locale\org-openide-filesystems_ja.jar;C:\Program Files (x86)\ViewPower2.11 SP1\tomcat\webapps\ViewPower\WEB-INF\lib\log4j-1.2.14.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\org-netbeans-api-visual.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\jre\lib\jce.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\org-openide-actions.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-netbeans-modules-print_zh_CN.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-netbeans-spi-quicksearch_zh_CN.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\core\locale\org-openide-filesystems_zh_CN.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\org-netbeans-core.jar;C:\Program Files (x86)\ViewPower2.11 SP1\tomcat\lib\tomcat-coyote.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\org-netbeans-modules-keyring-impl.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-netbeans-modules-spi-actions_ja.jar;C:\Program Files (x86)\ViewPower2.11 SP1\tomcat\webapps\ViewPower\WEB-INF\lib\flex-messaging-proxy.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-sa.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\ext\locale\updater_zh_CN.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-netbeans-swing-plaf_zh_CN.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-netbeans-modules-autoupdate-services_ja.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\org-netbeans-modules-core-kit.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\locale\org-netbeans-modules-autoupdate-services_zh_CN.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\jconsole.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\core\core.jar;C:\Program Files (x86)\ViewPower2.11 SP1\tomcat\lib\tomcat-dbcp.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\org-openide-compat.jar;C:\Program Files (x86)\ViewPower2.11 SP1\jdk\lib\visualvm\platform9\modules\org-netbeans-core-ui.jar;C:\Program Files (x86)\ViewPower2.11 SP1\lax.jar;" com.zerog.lax.LAX "C:/Program Files (x86)/ViewPower2.11 SP1/upsMonitor.lax" "C:/Windows/TEMP/lax8D12.tmp"
"C:\Windows\system32\GWX\GWX.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
KHALMNPR.EXE /API
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files (x86)\ViewPower2.11 SP1\tomcat\bin\tomcat6.exe" //RS//upsTomcat
\??\C:\Windows\system32\conhost.exe "-1945304791-131660739849222937-1303545017-107873360012938241282057939573-534198935
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\avpui.exe" -hidden /prefetch:1
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe"
"C:\Program Files (x86)\Opera\Opera.exe" "http://news-cz.orsay.com/api/cs/rescue2 ... 33193.html"

taskeng.exe {BAF428C3-D946-4CD9-853A-F00C64B82F3D}
"C:\Program Files\totalcmd\TOTALCMD.EXE"
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe2_ Global\UsGthrCtrlFltPipeMssGthrPipe2 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 512 516 524 65536 520
"D:\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

=========Mozilla firefox=========

ProfilePath - C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "www.seznam.cz"
prefs.js - "extensions.enabledItems" - "{c50ca3c4-5656-43c2-a061-13e717f73fc8}:4.0.1, {CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA}:6.0.19, fastdial@telega.phpnet.us:3.4, {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20, {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21, {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22, {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23, {32a1fd71-835e-4b11-8e54-886fda0b4c89}:1.1, check4change-owner@mozdev.org:1.8.2, {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.15"
prefs.js - "keyword.URL" - "http://search.sweetim.com/search.asp?sr ... 0.10005&q="

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 18.0.0.232 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_232.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=11.31.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.31.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.28.13\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.28.13\npGoogleUpdate3.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 18.0.0.232 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_18_0_0_232.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

C:\Program Files (x86)\Mozilla Firefox\extensions\
{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA}

C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\searchplugins\
Search.xml
sweetim.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F}]
Content Blocker Plugin - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll [2013-12-20 800448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{73455575-E40C-433C-9784-C78DC7761455}]
Virtual Keyboard Plugin - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll [2014-12-17 1535784]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9E6D0D23-3D72-4A94-AE1F-2D167624E3D9}]
Safe Money Plugin - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\x64\IEExt\OnlineBanking\online_banking_bho.dll [2013-12-20 550080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E33CF602-D945-461A-83F0-819F76A199F8}]
URL Advisor Plugin - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\x64\IEExt\UrlAdvisor\klwtbbho.dll [2014-02-18 996544]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F}]
Content Blocker Plugin - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll [2013-12-20 655040]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{73455575-E40C-433C-9784-C78DC7761455}]
Virtual Keyboard Plugin - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll [2014-12-17 1265448]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class - C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-01-28 460712]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9E6D0D23-3D72-4A94-AE1F-2D167624E3D9}]
Safe Money Plugin - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\IEExt\OnlineBanking\online_banking_bho.dll [2013-12-20 455360]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-28 172968]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E33CF602-D945-461A-83F0-819F76A199F8}]
URL Advisor Plugin - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\IEExt\UrlAdvisor\klwtbbho.dll [2014-02-18 798912]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{A4C272EC-ED9E-4ACE-A6F2-9558C7F29EF3}

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"EvtMgr6"=C:\Program Files\Logitech\SetPointP\SetPoint.exe [2011-10-07 1744152]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Pozadi z webky"=C:\Program Files (x86)\Pozadi z webky\PozadiZWebky.exe [2012-02-10 680448]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Photo Downloader]
C:\Program Files (x86)\Adobe\Photoshop Elements 6.0\apdproxy.exe [2007-09-11 67488]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AMD AVT]
Cmd.exe /c start AMD Accelerated Video Transcoding device initialization /min C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe aml []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Display]
C:\Program Files (x86)\APC\PowerChute Personal Edition\DataCollectionLauncher.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesAirMessage]
C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe -startup []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesPDLR]
C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesPreload]
C:\Program Files (x86)\Samsung\Kies\Kies.exe /preload []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesTrayAgent]
C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OpwareSE4]
C:\Program Files (x86)\ScanSoft\OmniPageSE4.0\OpwareSE4.exe [2006-10-11 75304]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
C:\Program Files (x86)\Skype\Phone\Skype.exe [2012-07-13 17418928]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SSBkgdUpdate]
C:\Program Files (x86)\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe [2006-09-28 185896]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"VirtualCloneDrive"=C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [2011-03-07 89456]
"HPUsageTrackingLEDM"=C:\Program Files (x86)\HP\HP UT LEDM\bin\hppusg.exe [2009-08-04 30264]
"LWS"=C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe [2011-11-11 205336]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2012-06-11 641704]
"Cobian Backup 11"=C:\Program Files (x86)\Cobian Backup 11\Cobian.exe [2012-12-05 720896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\LBTWlgn]
c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll [2011-09-27 68376]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
"NoDriveTypeAutoRun"=28

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=lvcod64.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"VIDC.ACDV"=ACDV.dll
"MSVideo8"=VfWWDM32.dll
"MSVideo"=vfwwdm32.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-09-04 13:24:31 ----D---- C:\rsit
2015-09-04 13:24:31 ----D---- C:\Program Files\trend micro
2015-08-19 22:02:54 ----A---- C:\Windows\system32\mshtml.dll
2015-08-19 22:02:53 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2015-08-16 23:52:01 ----A---- C:\Windows\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-08-16 23:52:01 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-08-16 20:45:12 ----A---- C:\Windows\system32\invagent.dll
2015-08-16 20:45:12 ----A---- C:\Windows\system32\generaltel.dll
2015-08-16 20:45:12 ----A---- C:\Windows\system32\devinv.dll
2015-08-16 20:45:12 ----A---- C:\Windows\system32\appraiser.dll
2015-08-16 20:45:12 ----A---- C:\Windows\system32\aeinv.dll
2015-08-16 20:45:12 ----A---- C:\Windows\system32\acmigration.dll
2015-08-16 20:45:11 ----A---- C:\Windows\system32\CompatTelRunner.exe
2015-08-16 20:45:11 ----A---- C:\Windows\system32\aepdu.dll
2015-08-16 20:45:10 ----A---- C:\Windows\system32\mstscax.dll
2015-08-16 20:45:09 ----A---- C:\Windows\SYSWOW64\tsgqec.dll
2015-08-16 20:45:09 ----A---- C:\Windows\SYSWOW64\rdvidcrl.dll
2015-08-16 20:45:09 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2015-08-16 20:45:09 ----A---- C:\Windows\system32\wksprt.exe
2015-08-16 20:45:09 ----A---- C:\Windows\system32\tsgqec.dll
2015-08-16 20:45:09 ----A---- C:\Windows\system32\rdvidcrl.dll
2015-08-16 20:44:41 ----A---- C:\Windows\system32\ntoskrnl.exe
2015-08-16 20:44:39 ----A---- C:\Windows\system32\ntdll.dll
2015-08-16 20:44:39 ----A---- C:\Windows\system32\kernel32.dll
2015-08-16 20:44:38 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2015-08-16 20:44:38 ----A---- C:\Windows\system32\sysmain.dll
2015-08-16 20:44:37 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2015-08-16 20:44:36 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2015-08-16 20:44:36 ----A---- C:\Windows\system32\drivers\mountmgr.sys
2015-08-16 20:44:35 ----A---- C:\Windows\system32\lsasrv.dll
2015-08-16 20:44:34 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2015-08-16 20:44:34 ----A---- C:\Windows\SYSWOW64\certcli.dll
2015-08-16 20:44:34 ----A---- C:\Windows\system32\wow64.dll
2015-08-16 20:44:34 ----A---- C:\Windows\system32\rstrui.exe
2015-08-16 20:44:34 ----A---- C:\Windows\system32\KernelBase.dll
2015-08-16 20:44:34 ----A---- C:\Windows\system32\certcli.dll
2015-08-16 20:44:33 ----A---- C:\Windows\SYSWOW64\schannel.dll
2015-08-16 20:44:33 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2015-08-16 20:44:33 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2015-08-16 20:44:33 ----A---- C:\Windows\system32\winsrv.dll
2015-08-16 20:44:33 ----A---- C:\Windows\system32\srcore.dll
2015-08-16 20:44:33 ----A---- C:\Windows\system32\schannel.dll
2015-08-16 20:44:33 ----A---- C:\Windows\system32\rpcrt4.dll
2015-08-16 20:44:33 ----A---- C:\Windows\system32\msv1_0.dll
2015-08-16 20:44:33 ----A---- C:\Windows\system32\kerberos.dll
2015-08-16 20:44:33 ----A---- C:\Windows\system32\csrsrv.dll
2015-08-16 20:44:33 ----A---- C:\Windows\system32\conhost.exe
2015-08-16 20:44:32 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2015-08-16 20:44:32 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2015-08-16 20:44:32 ----A---- C:\Windows\SYSWOW64\rpchttp.dll
2015-08-16 20:44:32 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2015-08-16 20:44:32 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2015-08-16 20:44:32 ----A---- C:\Windows\system32\wdigest.dll
2015-08-16 20:44:32 ----A---- C:\Windows\system32\TSpkg.dll
2015-08-16 20:44:32 ----A---- C:\Windows\system32\sspicli.dll
2015-08-16 20:44:32 ----A---- C:\Windows\system32\smss.exe
2015-08-16 20:44:32 ----A---- C:\Windows\system32\rpchttp.dll
2015-08-16 20:44:32 ----A---- C:\Windows\system32\ncrypt.dll
2015-08-16 20:44:32 ----A---- C:\Windows\system32\lsass.exe
2015-08-16 20:44:32 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2015-08-16 20:44:32 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2015-08-16 20:44:32 ----A---- C:\Windows\system32\auditpol.exe
2015-08-16 20:44:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-08-16 20:44:31 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-08-16 20:44:31 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-08-16 20:44:31 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-08-16 20:44:31 ----A---- C:\Windows\SYSWOW64\wow32.dll
2015-08-16 20:44:31 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2015-08-16 20:44:31 ----A---- C:\Windows\SYSWOW64\srclient.dll
2015-08-16 20:44:31 ----A---- C:\Windows\SYSWOW64\setup16.exe
2015-08-16 20:44:31 ----A---- C:\Windows\SYSWOW64\secur32.dll
2015-08-16 20:44:31 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2015-08-16 20:44:31 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2015-08-16 20:44:31 ----A---- C:\Windows\SYSWOW64\cryptbase.dll
2015-08-16 20:44:31 ----A---- C:\Windows\SYSWOW64\credssp.dll
2015-08-16 20:44:31 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2015-08-16 20:44:31 ----A---- C:\Windows\SYSWOW64\appidapi.dll
2015-08-16 20:44:31 ----A---- C:\Windows\system32\wow64win.dll
2015-08-16 20:44:31 ----A---- C:\Windows\system32\wow64cpu.dll
2015-08-16 20:44:31 ----A---- C:\Windows\system32\sspisrv.dll
2015-08-16 20:44:31 ----A---- C:\Windows\system32\srclient.dll
2015-08-16 20:44:31 ----A---- C:\Windows\system32\setbcdlocale.dll
2015-08-16 20:44:31 ----A---- C:\Windows\system32\secur32.dll
2015-08-16 20:44:31 ----A---- C:\Windows\system32\ntvdm64.dll
2015-08-16 20:44:31 ----A---- C:\Windows\system32\msmmsp.dll
2015-08-16 20:44:31 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2015-08-16 20:44:31 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2015-08-16 20:44:31 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2015-08-16 20:44:31 ----A---- C:\Windows\system32\drivers\appid.sys
2015-08-16 20:44:31 ----A---- C:\Windows\system32\cryptbase.dll
2015-08-16 20:44:31 ----A---- C:\Windows\system32\credssp.dll
2015-08-16 20:44:31 ----A---- C:\Windows\system32\appidsvc.dll
2015-08-16 20:44:31 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2015-08-16 20:44:31 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2015-08-16 20:44:31 ----A---- C:\Windows\system32\appidapi.dll
2015-08-16 20:44:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2015-08-16 20:44:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-08-16 20:44:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2015-08-16 20:44:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-08-16 20:44:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-08-16 20:44:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2015-08-16 20:44:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-08-16 20:44:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-08-16 20:44:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-08-16 20:44:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-08-16 20:44:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-08-16 20:44:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-08-16 20:44:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-08-16 20:44:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-08-16 20:44:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-08-16 20:44:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-08-16 20:44:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2015-08-16 20:44:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-08-16 20:44:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-08-16 20:44:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-08-16 20:44:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2015-08-16 20:44:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-08-16 20:44:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-08-16 20:44:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-08-16 20:44:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-08-16 20:44:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-08-16 20:44:30 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2015-08-16 20:44:30 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-08-16 20:44:30 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-08-16 20:44:30 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-08-16 20:44:30 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-08-16 20:44:30 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-08-16 20:44:30 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-08-16 20:44:30 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-08-16 20:44:30 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-08-16 20:44:30 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-08-16 20:44:30 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-08-16 20:44:30 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-08-16 20:44:30 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-08-16 20:44:30 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-08-16 20:44:30 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-08-16 20:44:30 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-08-16 20:44:30 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-08-16 20:44:30 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-08-16 20:44:30 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-08-16 20:44:30 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-08-16 20:44:30 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-08-16 20:44:30 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-08-16 20:44:30 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-08-16 20:44:30 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-08-16 20:44:30 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-08-16 20:44:30 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-08-16 20:44:30 ----A---- C:\Windows\SYSWOW64\user.exe
2015-08-16 20:44:30 ----A---- C:\Windows\SYSWOW64\instnm.exe
2015-08-16 20:44:30 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2015-08-16 20:44:30 ----A---- C:\Windows\system32\apisetschema.dll
2015-08-16 20:44:29 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2015-08-16 20:44:29 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2015-08-16 20:44:29 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2015-08-16 20:44:29 ----A---- C:\Windows\system32\msobjs.dll
2015-08-16 20:44:29 ----A---- C:\Windows\system32\msaudite.dll
2015-08-16 20:44:29 ----A---- C:\Windows\system32\adtschema.dll
2015-08-16 20:44:06 ----A---- C:\Windows\system32\basesrv.dll
2015-08-16 20:43:45 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2015-08-16 20:43:45 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2015-08-16 20:43:45 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2015-08-16 20:43:45 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2015-08-16 20:43:45 ----A---- C:\Windows\system32\iertutil.dll
2015-08-16 20:43:45 ----A---- C:\Windows\system32\ieetwproxystub.dll
2015-08-16 20:43:45 ----A---- C:\Windows\system32\ieetwcollector.exe
2015-08-16 20:43:44 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2015-08-16 20:43:44 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2015-08-16 20:43:44 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2015-08-16 20:43:44 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2015-08-16 20:43:44 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2015-08-16 20:43:44 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2015-08-16 20:43:44 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-08-16 20:43:44 ----A---- C:\Windows\system32\iernonce.dll
2015-08-16 20:43:44 ----A---- C:\Windows\system32\ie4uinit.exe
2015-08-16 20:43:42 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2015-08-16 20:43:42 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2015-08-16 20:43:42 ----A---- C:\Windows\system32\urlmon.dll
2015-08-16 20:43:42 ----A---- C:\Windows\system32\iedkcs32.dll
2015-08-16 20:43:41 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2015-08-16 20:43:41 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2015-08-16 20:43:41 ----A---- C:\Windows\SYSWOW64\jscript.dll
2015-08-16 20:43:41 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2015-08-16 20:43:41 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2015-08-16 20:43:41 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2015-08-16 20:43:41 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2015-08-16 20:43:41 ----A---- C:\Windows\system32\dxtrans.dll
2015-08-16 20:43:40 ----A---- C:\Windows\SYSWOW64\ieui.dll
2015-08-16 20:43:40 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2015-08-16 20:43:40 ----A---- C:\Windows\system32\msfeeds.dll
2015-08-16 20:43:40 ----A---- C:\Windows\system32\iesetup.dll
2015-08-16 20:43:39 ----A---- C:\Windows\system32\ieapfltr.dll
2015-08-16 20:43:38 ----A---- C:\Windows\SYSWOW64\wininet.dll
2015-08-16 20:43:38 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2015-08-16 20:43:38 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2015-08-16 20:43:38 ----A---- C:\Windows\system32\vbscript.dll
2015-08-16 20:43:37 ----A---- C:\Windows\SYSWOW64\msrating.dll
2015-08-16 20:43:37 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2015-08-16 20:43:37 ----A---- C:\Windows\system32\jsproxy.dll
2015-08-16 20:43:37 ----A---- C:\Windows\system32\ieUnatt.exe
2015-08-16 20:43:37 ----A---- C:\Windows\system32\ieui.dll
2015-08-16 20:43:37 ----A---- C:\Windows\system32\dxtmsft.dll
2015-08-16 20:43:36 ----A---- C:\Windows\system32\mshtmlmedia.dll
2015-08-16 20:43:36 ----A---- C:\Windows\system32\mshtmled.dll
2015-08-16 20:43:36 ----A---- C:\Windows\system32\ieframe.dll
2015-08-16 20:43:35 ----A---- C:\Windows\system32\wininet.dll
2015-08-16 20:43:35 ----A---- C:\Windows\system32\jscript9diag.dll
2015-08-16 20:43:35 ----A---- C:\Windows\system32\jscript9.dll
2015-08-16 20:43:35 ----A---- C:\Windows\system32\jscript.dll
2015-08-16 20:43:34 ----A---- C:\Windows\system32\msrating.dll
2015-08-16 20:43:34 ----A---- C:\Windows\system32\MshtmlDac.dll
2015-08-16 20:43:08 ----A---- C:\Windows\SYSWOW64\WebClnt.dll
2015-08-16 20:43:08 ----A---- C:\Windows\system32\WebClnt.dll
2015-08-16 20:43:07 ----A---- C:\Windows\SYSWOW64\davclnt.dll
2015-08-16 20:43:07 ----A---- C:\Windows\system32\davclnt.dll
2015-08-16 20:43:06 ----A---- C:\Windows\SYSWOW64\msxml6r.dll
2015-08-16 20:43:06 ----A---- C:\Windows\SYSWOW64\msxml6.dll
2015-08-16 20:43:06 ----A---- C:\Windows\SYSWOW64\msxml3r.dll
2015-08-16 20:43:06 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2015-08-16 20:43:06 ----A---- C:\Windows\system32\msxml6r.dll
2015-08-16 20:43:06 ----A---- C:\Windows\system32\msxml6.dll
2015-08-16 20:43:06 ----A---- C:\Windows\system32\msxml3r.dll
2015-08-16 20:43:06 ----A---- C:\Windows\system32\msxml3.dll
2015-08-16 20:43:04 ----A---- C:\Windows\system32\FntCache.dll
2015-08-16 20:43:03 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2015-08-16 20:43:03 ----A---- C:\Windows\system32\win32k.sys
2015-08-16 20:43:03 ----A---- C:\Windows\system32\DWrite.dll
2015-08-16 20:43:03 ----A---- C:\Windows\system32\atmfd.dll
2015-08-16 20:43:02 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2015-08-16 20:43:01 ----A---- C:\Windows\SYSWOW64\lpk.dll
2015-08-16 20:43:01 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2015-08-16 20:43:01 ----A---- C:\Windows\SYSWOW64\dciman32.dll
2015-08-16 20:43:01 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll
2015-08-16 20:43:01 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2015-08-16 20:43:01 ----A---- C:\Windows\system32\lpk.dll
2015-08-16 20:43:01 ----A---- C:\Windows\system32\fontsub.dll
2015-08-16 20:43:01 ----A---- C:\Windows\system32\dciman32.dll
2015-08-16 20:43:01 ----A---- C:\Windows\system32\d3d10warp.dll
2015-08-16 20:43:01 ----A---- C:\Windows\system32\atmlib.dll
2015-08-16 20:42:59 ----A---- C:\Windows\system32\notepad.exe
2015-08-16 20:42:59 ----A---- C:\Windows\notepad.exe
2015-08-16 20:42:58 ----A---- C:\Windows\SYSWOW64\notepad.exe
2015-08-16 20:42:56 ----A---- C:\Windows\system32\shell32.dll
2015-08-16 20:42:55 ----A---- C:\Windows\SYSWOW64\shell32.dll
2015-08-16 20:42:52 ----A---- C:\Windows\SYSWOW64\wuwebv.dll
2015-08-16 20:42:52 ----A---- C:\Windows\SYSWOW64\wups.dll
2015-08-16 20:42:52 ----A---- C:\Windows\SYSWOW64\wudriver.dll
2015-08-16 20:42:52 ----A---- C:\Windows\SYSWOW64\wuapp.exe
2015-08-16 20:42:52 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2015-08-16 20:42:52 ----A---- C:\Windows\system32\wuwebv.dll
2015-08-16 20:42:52 ----A---- C:\Windows\system32\wups2.dll
2015-08-16 20:42:52 ----A---- C:\Windows\system32\wups.dll
2015-08-16 20:42:52 ----A---- C:\Windows\system32\wudriver.dll
2015-08-16 20:42:52 ----A---- C:\Windows\system32\wucltux.dll
2015-08-16 20:42:52 ----A---- C:\Windows\system32\wuaueng.dll
2015-08-16 20:42:52 ----A---- C:\Windows\system32\wuauclt.exe
2015-08-16 20:42:52 ----A---- C:\Windows\system32\wuapp.exe
2015-08-16 20:42:52 ----A---- C:\Windows\system32\wuapi.dll
2015-08-16 20:42:52 ----A---- C:\Windows\system32\wu.upgrade.ps.dll
2015-08-16 20:42:52 ----A---- C:\Windows\system32\WinSetupUI.dll

======List of files/folders modified in the last 1 month======

2015-09-04 13:24:33 ----D---- C:\Windows\Temp
2015-09-04 13:24:31 ----RD---- C:\Program Files
2015-09-04 13:24:16 ----D---- C:\Program Files\CCleaner
2015-09-04 13:24:15 ----D---- C:\Windows\Prefetch
2015-09-04 12:13:37 ----D---- C:\ProgramData\Kaspersky Lab
2015-09-04 07:53:21 ----A---- C:\Users\Vena\AppData\Roaming\Pozadi z webkyverze.txt
2015-09-04 07:52:57 ----SHD---- C:\System Volume Information
2015-09-03 23:10:37 ----D---- C:\Windows\system32\config
2015-08-29 12:33:28 ----D---- C:\Windows\System32
2015-08-29 12:33:28 ----D---- C:\Windows\inf
2015-08-29 12:33:28 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-08-29 12:21:02 ----SHD---- C:\Windows\Installer
2015-08-29 12:21:02 ----SHD---- C:\Config.Msi
2015-08-29 12:16:56 ----RD---- C:\Program Files (x86)
2015-08-29 12:16:49 ----D---- C:\Windows\Tasks
2015-08-26 13:24:22 ----D---- C:\Users\Vena\AppData\Roaming\vlc
2015-08-24 22:20:41 ----D---- C:\Users\Vena\AppData\Roaming\AIMP3
2015-08-19 22:03:02 ----D---- C:\Windows\SysWOW64
2015-08-19 22:02:57 ----D---- C:\Windows\winsxs
2015-08-17 18:25:47 ----D---- C:\Windows\rescache
2015-08-17 13:32:19 ----D---- C:\Windows\Microsoft.NET
2015-08-17 13:31:39 ----RSD---- C:\Windows\assembly
2015-08-17 12:53:09 ----SD---- C:\Windows\system32\CompatTel
2015-08-17 12:53:09 ----D---- C:\Windows\system32\appraiser
2015-08-17 12:53:08 ----D---- C:\Windows\AppPatch
2015-08-17 12:53:04 ----D---- C:\Windows\SYSWOW64\cs-CZ
2015-08-17 12:53:03 ----D---- C:\Windows\system32\en-US
2015-08-17 12:53:03 ----D---- C:\Windows\system32\drivers\cs-CZ
2015-08-17 12:53:03 ----D---- C:\Windows\system32\drivers
2015-08-17 12:53:03 ----D---- C:\Windows\system32\cs-CZ
2015-08-17 12:53:01 ----D---- C:\Windows\system32\Boot
2015-08-17 12:52:54 ----D---- C:\Windows\SYSWOW64\en-US
2015-08-17 12:52:54 ----D---- C:\Program Files\Internet Explorer
2015-08-17 12:52:52 ----D---- C:\Program Files (x86)\Internet Explorer
2015-08-17 12:52:50 ----D---- C:\Windows
2015-08-16 23:19:10 ----D---- C:\Windows\system32\MRT
2015-08-16 23:12:54 ----A---- C:\Windows\system32\MRT.exe
2015-08-16 21:13:12 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2015-08-16 20:44:53 ----D---- C:\Windows\system32\catroot2

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 kl1;kl1; C:\Windows\system32\DRIVERS\kl1.sys [2013-12-20 458336]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 PxHlpa64;PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [2012-05-24 52856]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R1 ElbyCDIO;ElbyCDIO Driver; C:\Windows\System32\Drivers\ElbyCDIO.sys [2010-12-17 40816]
R1 KLIF;Kaspersky Lab Driver; C:\Windows\system32\DRIVERS\klif.sys [2014-03-24 625248]
R1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter; C:\Windows\system32\DRIVERS\klim6.sys [2013-10-20 29792]
R1 klpd;klpd; C:\Windows\system32\DRIVERS\klpd.sys [2013-04-12 15456]
R1 kltdi;kltdi; C:\Windows\system32\DRIVERS\kltdi.sys [2013-05-14 55904]
R1 kneps;kneps; C:\Windows\system32\DRIVERS\kneps.sys [2013-12-20 178272]
R2 aksdf;aksdf; \??\C:\Windows\system32\drivers\aksdf.sys [2011-11-24 78208]
R2 aksfridge;Sentinel Fridge; C:\Windows\system32\DRIVERS\aksfridge.sys [2011-11-24 139592]
R2 hardlock;hardlock; \??\C:\Windows\system32\drivers\hardlock.sys [2011-10-07 321536]
R2 npf;NetGroup Packet Filter Driver; C:\Windows\system32\drivers\npf.sys [2010-01-27 47632]
R3 amdiox64;AMD IO Driver; C:\Windows\system32\DRIVERS\amdiox64.sys [2010-02-18 46136]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2012-04-06 11174400]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2012-04-06 343040]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys [2012-02-23 95760]
R3 klkbdflt;Kaspersky Lab KLKBDFLT; C:\Windows\system32\DRIVERS\klkbdflt.sys [2014-02-18 29280]
R3 klmouflt;Kaspersky Lab KLMOUFLT; C:\Windows\system32\DRIVERS\klmouflt.sys [2013-10-20 29280]
R3 LEqdUsb;Logitech SetPoint Unifying KMDF USB Filter; C:\Windows\system32\DRIVERS\LEqdUsb.Sys [2011-09-02 76056]
R3 LHidEqd;Logitech SetPoint Unifying KMDF HID Filter; C:\Windows\system32\DRIVERS\LHidEqd.Sys [2011-09-02 15128]
R3 LHidFilt;Logitech SetPoint KMDF HID Filter Driver; C:\Windows\system32\DRIVERS\LHidFilt.Sys [2011-09-02 66840]
R3 LMouFilt;Logitech SetPoint KMDF Mouse Filter Driver; C:\Windows\system32\DRIVERS\LMouFilt.Sys [2011-09-02 60696]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2009-03-02 187392]
R3 VClone;VClone; C:\Windows\system32\DRIVERS\VClone.sys [2011-01-15 36352]
S3 akshasp;SafeNet Inc. HASP Key; C:\Windows\system32\DRIVERS\akshasp.sys [2011-02-09 53760]
S3 akshhl;SafeNet Inc. Sentinel HL Key; C:\Windows\system32\DRIVERS\akshhl.sys [2011-09-08 57088]
S3 aksusb;SafeNet Inc. USB Key; C:\Windows\system32\DRIVERS\aksusb.sys [2011-08-09 21120]
S3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2012-04-06 11174400]
S3 cpuz135;cpuz135; \??\C:\Windows\TEMP\cpuz135\cpuz135_x64.sys []
S3 dgderdrv;dgderdrv; C:\Windows\System32\drivers\dgderdrv.sys []
S3 FsUsbExDisk;FsUsbExDisk; \??\C:\Windows\SysWOW64\FsUsbExDisk.SYS [2013-03-20 37344]
S3 grmnusb;grmnusb; C:\Windows\system32\drivers\grmnusb.sys [2012-04-18 19304]
S3 LVRS64;Logitech RightSound Filter Driver; C:\Windows\system32\DRIVERS\lvrs64.sys [2012-01-18 351136]
S3 LVUVC64;Logitech Webcam 200(UVC); C:\Windows\system32\DRIVERS\lvuvc64.sys [2012-01-18 4865568]
S3 mdf16;mdf16; \??\C:\Users\Vena\AppData\Local\Temp\mdf16.sys []
S3 mvd23;mvd23; \??\C:\Users\Vena\AppData\Local\Temp\mvd23.sys []
S3 mvusbews;USB EWS Device; C:\Windows\System32\Drivers\mvusbews.sys [2010-10-14 20480]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfdx64.sys [2012-04-22 25600]
S3 pwdrvio;pwdrvio; \??\C:\Windows\syswow64\pwdrvio.sys []
S3 pwdspio;pwdspio; \??\C:\Windows\syswow64\pwdspio.sys []
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 Ser2pl;Prolific Serial port WDF driver; C:\Windows\system32\DRIVERS\ser2pl64.sys [2012-07-30 158720]
S3 StarOpen;StarOpen; C:\Windows\system32\drivers\StarOpen.sys [2009-11-12 5504]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-10-02 56832]
S3 usb_rndisx;Adaptér USB RNDIS; C:\Windows\system32\DRIVERS\usb8023x.sys [2009-07-14 19968]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\drivers\usbscan.sys [2013-07-03 42496]
S3 WinUsb;SAMSUNG Android USB Driver; C:\Windows\system32\drivers\WinUsb.sys [2010-11-20 41984]
S4 klflt;klflt; C:\Windows\system32\DRIVERS\klflt.sys [2014-03-24 115296]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeActiveFileMonitor6.0;Adobe Active File Monitor V6; C:\Program Files (x86)\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe [2007-09-11 124832]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2012-04-06 236544]
R2 AMD FUEL Service;AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2012-06-11 361984]
R2 AVP;Služba Kaspersky Anti-Virus; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\avp.exe [2013-10-20 214512]
R2 cbVSCService11;Cobian Backup 11 Stínová kopie - Requester; C:\Program Files (x86)\Cobian Backup 11\cbVSCService11.exe [2012-12-05 67584]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 hasplms;Sentinel HASP License Manager; C:\Windows\system32\hasplms.exe [2011-12-02 4913608]
R2 HP LaserJet Service;HP LaserJet Service; C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe [2009-06-24 136704]
R2 HPSIService;HP SI Service; C:\Windows\system32\HPSIsvc.exe [2010-11-22 127800]
R2 UMVPFSrv;UMVPFSrv; C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe [2012-01-18 450848]
R2 upsMonitor;upsMonitor; C:\PROGRA~2\VIEWPO~1.11S\UPSMON~1.EXE [2013-10-03 116224]
R3 upsTomcat;Apache Tomcat upsTomcat; C:\Program Files (x86)\ViewPower2.11 SP1\tomcat\bin\tomcat6.exe [2011-04-15 57344]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-29 144200]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2012-07-13 160944]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-08-16 269000]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [2012-11-07 1431888]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2012-05-24 654848]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-29 144200]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2015-07-16 114688]
S3 LBTServ;Logitech Bluetooth Service; C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe [2011-09-27 359192]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2015-05-21 119408]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 ServiceLayer;ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [2012-04-22 720936]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2012-05-25 1255736]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

-----------------EOF-----------------

Ještě jednou dobrý den

stáhněte AdwCleaner https://toolslib.net/downloads/viewdown ... dwcleaner/
-Uložte program na plochu a ukončete všechny spuštěné programy .
-spusťte AdwCleaner, klikněte na Scan a po dokončení skenu na Clean
- provede se oprava, restartuje se pc - (případně restartujte) a objeví se log C:\AdwCleaner\AdwCleaner.txt , obsah logu zkopírujte zde.

Omlouvám se za laxnější přístup, comp je v pokoji u dětí a včera už spali.


# AdwCleaner v5.005 - Logfile created 05/09/2015 at 07:28:18
# Updated 31/08/2015 by Xplode
# Database : 2015-09-04.4 [Server]
# Operating system : Windows 7 Home Premium Service Pack 1 (x64)
# Username : Vena - VENA-PC
# Running from : C:\Users\Vena\Desktop\adwcleaner_5.005.exe
# Option : Cleaning
# Support : http://toolslib.net/forum

***** [ Services ] *****


***** [ Folders ] *****

[-] Folder Deleted : C:\Program Files (x86)\RelevantKnowledge
[-] Folder Deleted : C:\Program Files (x86)\SweetIM
[-] Folder Deleted : C:\ProgramData\apn
[-] Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RelevantKnowledge
[-] Folder Deleted : C:\Users\Vena\AppData\Local\PackageAware
[-] Folder Deleted : C:\Users\Vena\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpglkicenollcignonpgiafdgfeehoj
[-] Folder Deleted : C:\Users\Vena\AppData\Local\Google\Chrome\User Data\Default\Extensions\fdloijijlkoblmigdofommgnheckmaki
[-] Folder Deleted : C:\Users\Vena\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkndcbhcgphcfkkddanakjiepeknbgle
[-] Folder Deleted : C:\Users\Vena\AppData\Roaming\Systweak
[-] Folder Deleted : C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\0x4tz6jd.default\Extensions\staged\ffxtlbr@funmoods.com
[-] Folder Deleted : C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\ConduitCommon
[-] Folder Deleted : C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\Smartbar

***** [ Files ] *****

[-] File Deleted : C:\Users\Vena\AppData\Local\funmoods.crx
[-] File Deleted : C:\Users\Vena\AppData\Local\funmoods-speeddial.crx
[-] File Deleted : C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\0x4tz6jd.default\searchplugins\search.xml
[-] File Deleted : C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\0x4tz6jd.default\searchplugins\search.xml
[-] File Deleted : C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\0x4tz6jd.default\user.js
[-] File Deleted : C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\0x4tz6jd.default\user.js
[-] File Deleted : C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\searchplugins\search.xml
[-] File Deleted : C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\searchplugins\search.xml
[-] File Deleted : C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\searchplugins\SweetIm.xml
[-] File Deleted : C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\user.js
[-] File Deleted : C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\user.js

***** [ Shortcuts ] *****


***** [ Scheduled tasks ] *****


***** [ Registry ] *****

[-] Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Main [Backup.old.Start Page]
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\BabylonHelper.EXE
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\escort.DLL
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
[-] Key Deleted : HKLM\SOFTWARE\Classes\Prod.cap
[-] Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{C7AE725D-FA5C-4027-BB4C-787EF9F8248A}]
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{6536801B-F50C-449B-9476-093DFD3789E3}
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{062D6B05-B83A-46DE-81AD-1750FB7C8DE5}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{92B0265C-B929-4D42-BA54-75AA39C99198}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{0D80F1C5-D17B-4177-AC68-955F3EF9F191}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{23C70BCA-6E23-4A65-AD2E-1389062074F1}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{23D8EEF7-0E13-4000-B9C4-6603C1E912D1}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{295CACB4-51F5-46FD-914E-C72BAAE1B672}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{2CE5C4B9-6DBE-4528-96FA-C9FF38EF1762}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{34C1FDF7-02C1-4F23-B393-F48B16E071D1}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{54291324-7A3D-4F11-B707-3FB6A2C97BD9}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{59C63F11-D4E5-46E7-9B8A-EE158DCA83A8}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{5DA22CBD-0029-4A09-B757-CF0FAFC488ED}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{77A6E7D4-4A83-4A9B-A2A0-EF3B125DC29D}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C0585B2F-74D7-4734-88DE-6C150C5D4036}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{CA17D76B-F91D-4659-A7FD-A9F7ED375CDD}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D8242E89-2F81-484A-AE5B-BA8CAD5B7347}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{EF0588D6-1621-4A75-B8BE-F4BC34794136}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{1D085C0A-E4F4-4F66-BDBF-4BE51015BFC3}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
[-] Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{A4C272EC-ED9E-4ACE-A6F2-9558C7F29EF3}]
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{062D6B05-B83A-46DE-81AD-1750FB7C8DE5}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{92B0265C-B929-4D42-BA54-75AA39C99198}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{0D80F1C5-D17B-4177-AC68-955F3EF9F191}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{23C70BCA-6E23-4A65-AD2E-1389062074F1}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{23D8EEF7-0E13-4000-B9C4-6603C1E912D1}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{295CACB4-51F5-46FD-914E-C72BAAE1B672}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{2CE5C4B9-6DBE-4528-96FA-C9FF38EF1762}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{34C1FDF7-02C1-4F23-B393-F48B16E071D1}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{54291324-7A3D-4F11-B707-3FB6A2C97BD9}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{59C63F11-D4E5-46E7-9B8A-EE158DCA83A8}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{5DA22CBD-0029-4A09-B757-CF0FAFC488ED}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{77A6E7D4-4A83-4A9B-A2A0-EF3B125DC29D}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{C0585B2F-74D7-4734-88DE-6C150C5D4036}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{CA17D76B-F91D-4659-A7FD-A9F7ED375CDD}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{D8242E89-2F81-484A-AE5B-BA8CAD5B7347}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{EF0588D6-1621-4A75-B8BE-F4BC34794136}
[-] Key Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
[-] Key Deleted : HKU\.DEFAULT\Software\AskPartnerNetwork
[-] Key Deleted : HKCU\Software\Conduit
[-] Key Deleted : HKCU\Software\Myfree Codec
[-] Key Deleted : HKCU\Software\SweetIM
[-] Key Deleted : HKCU\Software\AppDataLow\Software\Conduit
[-] Key Deleted : HKLM\SOFTWARE\BabylonToolbar
[-] Key Deleted : HKLM\SOFTWARE\Conduit
[-] Key Deleted : HKLM\SOFTWARE\Myfree Codec
[-] Key Deleted : HKLM\SOFTWARE\SweetIM
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\MyFreeCodec
[!] Key Not Deleted : [x64] HKCU\Software\Conduit
[!] Key Not Deleted : [x64] HKCU\Software\Myfree Codec
[!] Key Not Deleted : [x64] HKCU\Software\SweetIM
[!] Key Not Deleted : HKU\S-1-5-21-3715208554-288028567-3097100948-1000\Software\AppDataLow\Software\Conduit
[!] Key Not Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{29E3C295-0CF0-5DAF-FF3A-3BAC1C83DA60}
[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2ADDC398-8609-4F57-B3B4-31B702C9D014}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[-] Data Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes [DefaultScope]
[!] Key Not Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
[!] Key Not Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{29E3C295-0CF0-5DAF-FF3A-3BAC1C83DA60}
[!] Key Not Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2ADDC398-8609-4F57-B3B4-31B702C9D014}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[-] Data Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes [DefaultScope]
[!] Key Not Deleted : HKU\S-1-5-21-3715208554-288028567-3097100948-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
[!] Key Not Deleted : HKU\S-1-5-21-3715208554-288028567-3097100948-1000\Software\Microsoft\Internet Explorer\SearchScopes\{29E3C295-0CF0-5DAF-FF3A-3BAC1C83DA60}
[!] Key Not Deleted : HKU\S-1-5-21-3715208554-288028567-3097100948-1000\Software\Microsoft\Internet Explorer\SearchScopes\{2ADDC398-8609-4F57-B3B4-31B702C9D014}

***** [ Web browsers ] *****

[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\0x4tz6jd.default\prefs.js] [Preference] Deleted : user_pref("browser.startup.homepage", "hxxp://start.funmoods.com/?f=1&a=ddrnw&chnl=ddrnw&cd=2XzutAtN2Y1L1QzutDtDtC0F0DtD0ByE0EtAtAtDyE0F0AyBtN0D0TzutBtDtCtBtDyCtByE&cr=398136891");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961..clientLogIsEnabled", false);
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.1000082.currentList", "[{\"stationId\":\"9962\",\"url\":\"hxxp://feedlive.net/california.asx\",\"description\":\"California Rock\",\"text\":\"Californi...\",\"type\":\"STREAM\"},{[...]
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.1000082.isPlayDisplay", "true");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.1000082.localStations", "[{\"stationId\":\"9962\",\"url\":\"hxxp://feedlive.net/california.asx\",\"description\":\"California Rock\",\"text\":\"Californi...\",\"type\":\"STREAM\"}[...]
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.1000082.nowPlaying", "{\"stationId\":\"9962\",\"url\":\"hxxp://feedlive.net/california.asx\",\"description\":\"California Rock\",\"text\":\"Californi...\",\"type\":\"STREAM\"}");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.1000082.publisherStations", "[{\"stationId\":\"9962\",\"url\":\"hxxp://feedlive.net/california.asx\",\"description\":\"California Rock\",\"text\":\"Californi...\",\"type\":\"STREA[...]
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.1000082.state", "{\"state\":\"stopped\",\"text\":\"Californi...\",\"description\":\"California Rock\",\"url\":\"hxxp://feedlive.net/california.asx\"}");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.1000234.TWC_TMP_city", "PRAGUE");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.1000234.TWC_TMP_country", "CZ");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.2938961a129687769243231390000000paramsGK0.enc", "eyJ1cGRhdGVSZXFUaW1lIjoxMzU3ODE2OTMwMTY2LCJ1cGRhdGVSZXNwVGltZSI6MTM1NzgxNjkzMDQ0NSwiZGF0YSI6eyJzZXR0aW5ncyI6eyJpY29uIjoiaHR0cDovL3[...]
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.2938961a129687769243231390000000paramsgk0", "eyJ1cGRhdGVSZXFUaW1lIjoxMzM3ODk3NDU3MTAwLCJ1cGRhdGVSZXNwVGltZSI6MTMzNzg5NzQ2NzkzNywiZGF0YSI6eyJzZXR0aW5ncyI6eyJpY29uIjoiaHR0cDovL3N0b3[...]
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.2938961a129687769243231390000000twitterTemplate_notify_followers.enc", "MHgwMDMxLDB4MDAzMCwweDAwMzQsMHgwMDMwLDB4MDAzMywweDAwMzgsMHgwMDM5LDB4MDAzMSwweDAwMzMsMHgwMDM2LDB4MDAyMCwweDA[...]
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.2938961a129687769243231390000000twitterTemplate_notify_followers_count.enc", "MzE=");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.2938961a129687769243231390000000twitterTemplate_notify_following.enc", "AA==");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.2938961a129687769243231390000000twitterTemplate_notify_following_count.enc", "MA==");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.2938961a129687769243231390000000twitterTemplate_notify_home.enc", "MHgwMDMyLDB4MDAzOCwweDAwMzUsMHgwMDM3LDB4MDAzMiwweDAwMzgsMHgwMDM3LDB4MDAzMCwweDAwMzEsMHgwMDMxLDB4MDAzNywweDAwMzYs[...]
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.2938961a129687769243231390000000twitterTemplate_notify_home_count.enc", "MTU=");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.2938961a129687769243231390000000twittertemplate_notify_followers", "MHgwMDM0LDB4MDAzNiwweDAwMzMsMHgwMDMxLDB4MDAzOCwweDAwMzMsMHgwMDMzLDB4MDAzMSwweDAwMzMsMHgwMDIwLDB4MDAzMCwweDAwM0I[...]
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.2938961a129687769243231390000000twittertemplate_notify_followers_count", "MzE=");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.2938961a129687769243231390000000twittertemplate_notify_following", "AA==");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.2938961a129687769243231390000000twittertemplate_notify_following_count", "MA==");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.2938961a129687769243231390000000twittertemplate_notify_home", "MHgwMDMxLDB4MDAzOSwweDAwMzcsMHgwMDM0LDB4MDAzMCwweDAwMzAsMHgwMDM2LDB4MDAzNiwweDAwMzIsMHgwMDM5LDB4MDAzNCwweDAwMzksMHgw[...]
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.2938961a129687769243231390000000twittertemplate_notify_home_count", "MTU=");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.AppTrackingLastCheckTime", "Sun Aug 19 2012 06:57:06 GMT+0200");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.BrowserCompStateIsOpen_1334739508000", true);
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.CT2938961", "CT2938961");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.CommunitiesChangesLastCheckTime", "0");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.CurrentServerDate", "29-8-2012");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.DialogsAlignMode", "LTR");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.DialogsGetterLastCheckTime", "Mon Aug 27 2012 22:31:18 GMT+0200");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.DownloadReferralCookieData", "{\"BannerName\":\"\",\"BannerTypeId\":\"\",\"BannerCulture\":\"\",\"DownloadTime\":\"5/1/2011 8:24:35 PM\",\"SourceId\":0,\"OriginSource\":0,\"Referr[...]
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"false\"}");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"false\"}");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.Facebook_Mode", "Mg==");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.Facebook_User_Locale", "ZW4=");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.FirstServerDate", "1-5-2011");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.FirstTime", true);
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.FirstTimeFF3", true);
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.FixPageNotFoundErrors", false);
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.GroupingInvalidateCache", false);
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.GroupingLastCheckTime", "0");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.GroupingLastServerUpdateTime", "0");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.GroupingServerCheckInterval", 1440);
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.HasUserGlobalKeys", true);
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.HomePageProtectorEnabled", false);
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.Initialize", true);
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.InitializeCommonPrefs", true);
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.InstallationAndCookieDataSentCount", 3);
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.InstalledDate", "Sun May 01 2011 19:25:07 GMT+0200");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.InvalidateCache", false);
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.IsAlertDBUpdated", true);
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.IsGrouping", false);
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.IsMulticommunity", false);
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.IsOpenThankYouPage", true);
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.IsOpenUninstallPage", true);
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.IsProtectorsInit", true);
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.LanguagePackLastCheckTime", "Wed Aug 29 2012 06:09:32 GMT+0200");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.LanguagePackReloadIntervalMM", 1440);
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.LastLogin_3.10.0.1", "Tue Apr 24 2012 17:02:57 GMT+0200");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.LastLogin_3.11.0.3", "Sun May 06 2012 23:58:01 GMT+0200");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.LastLogin_3.12.0.8", "Tue May 01 2012 10:41:24 GMT+0200");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.LastLogin_3.12.2.3", "Sun May 27 2012 00:41:18 GMT+0200");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.LastLogin_3.13.0.6", "Mon Jul 09 2012 13:49:26 GMT+0200");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.LastLogin_3.14.1.0", "Wed Aug 29 2012 22:07:21 GMT+0200");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.LastLogin_3.4.1.0", "Fri Jun 24 2011 11:59:01 GMT+0200");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.LastLogin_3.5.0.12", "Mon Aug 01 2011 21:18:29 GMT+0200");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.LastLogin_3.6.0.10", "Fri Sep 30 2011 19:07:55 GMT+0200");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.LastLogin_3.7.0.6", "Tue Oct 11 2011 18:57:35 GMT+0200");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.LastLogin_3.8.0.8", "Thu Dec 01 2011 16:55:54 GMT+0100");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.LastLogin_3.8.1.0", "Tue Jan 31 2012 18:03:42 GMT+0100");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.LastLogin_3.9.0.3", "Mon Feb 13 2012 20:29:37 GMT+0100");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.LatestVersion", "3.14.1.0");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.Locale", "en");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.LoginRevertSettingsEnabled", true);
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.MCDetectTooltipHeight", "83");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.MCDetectTooltipShow", false);
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.MCDetectTooltipWidth", "295");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.MyStuffEnabledAtInstallation", true);
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.OriginalFirstVersion", "3.4.1.0");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.RadioLastCheckTime", "0");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.RadioLastUpdateIPServer", "0");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.RadioLastUpdateServer", "0");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.RevertSettingsEnabled", true);
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.SHRINK_TOOLBAR", 1);
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.SearchBoxWidth", 144);
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.SearchEngine", "Searchhxxp://search.conduit.com/Results.aspx?q=UCM_SEARCH_TERM&ctid=CT2938961&octid=EB_ORIGINAL_CTID&SearchSource=1");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.SearchEngineBeforeUnload", "QIP Search");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.SearchFromAddressBarIsInit", true);
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2938961&SearchSource=2&q=");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.SearchInNewTabEnabled", true);
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.SearchInNewTabIntervalMM", 1440);
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.SearchInNewTabLastCheckTime", "Wed Aug 29 2012 06:07:20 GMT+0200");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.SearchInNewTabUsageUrl", "hxxp://usage.hosting.toolbar.conduit-services.com/usage.ashx?ctid=EB_TOOLBAR_ID");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.SearchInNewTabUserEnabled", false);
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.SearchProtectorEnabled", false);
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.SearchProtectorToolbarDisabled", false);
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.ServiceMapLastCheckTime", "Wed Aug 29 2012 06:09:32 GMT+0200");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.SettingsLastCheckTime", "Wed Aug 29 2012 06:07:19 GMT+0200");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.SettingsLastUpdate", "1346147988");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.ShoppingApp.GK.Exipres", "Fri Nov 16 2012 17:38:18 GMT+0100");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.ShoppingApp.GK.GeoLocation", "czech republic");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.ThirdPartyComponentsInterval", 504);
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.ThirdPartyComponentsLastCheck", "Mon Aug 20 2012 20:10:51 GMT+0200");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.ThirdPartyComponentsLastUpdate", "1331805997");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.ToolbarShrinkedFromSetup", false);
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,client.conduit-storage.com,OurToolbar.com,CommunityToolbars.com,ForumToolbar.com,MyBlogToolbar.com,MyCity[...]
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.UserID", "UN04982664893575095");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.ValidationData_Search", 2);
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.ValidationData_Toolbar", 2);
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.WeatherNetwork", "");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.WeatherPollDate", "Thu Jun 21 2012 23:34:17 GMT+0200");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.WeatherUnit", "C");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.addressBarTakeOverEnabledInHidden", "true");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.alertChannelId", "1330848");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.approveUntrustedApps", false);
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.backendstorage.2938961a129687769243231390000000paramsgk0", "7B2275706461746552657154696D65223A313333373839373435373130302C227570646174655265737054696D65223A31333337383937343637393[...]
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.backendstorage.2938961a129687769243231390000000twittertemplate_notify_followers", "3078303033342C3078303033362C3078303033332C3078303033312C3078303033382C3078303033332C307830303333[...]
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.backendstorage.2938961a129687769243231390000000twittertemplate_notify_followers_count", "3331");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.backendstorage.2938961a129687769243231390000000twittertemplate_notify_following", "");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.backendstorage.2938961a129687769243231390000000twittertemplate_notify_following_count", "30");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.backendstorage.2938961a129687769243231390000000twittertemplate_notify_home", "3078303033312C3078303033392C3078303033372C3078303033342C3078303033302C3078303033302C3078303033362C307[...]
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.backendstorage.2938961a129687769243231390000000twittertemplate_notify_home_count", "3135");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.backendstorage.cbcountry_000", "435A");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.backendstorage.cbfirsttime", "5765642041707220313820323031322031353A33323A313320474D542B30323030");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.backendstorage.shoppingapp.gk.exipres", "547565204D617920323920323031322032313A35373A323720474D542B30323030");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.backendstorage.shoppingapp.gk.geolocation", "637A6563682072657075626C6963");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.backendstorage.twittertemplate_2938961a129687769243231390000000_dailyactivity", "31333337383839343530393836");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.backendstorage.twittertemplate_2938961a129687769243231390000000_lifetimesent", "54525545");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.backendstorage.url_history0001", "6A6176617363726970743A766F69642830293B3A3A3A636C69636B68616E646C65723A3A3A313333363539363033353033332C2C2C6A6176617363726970743A766F69642830293B3[...]
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.cbcountry_000", "Q1o=");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.cbcountry_001", "Q1o=");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.cbfirsttime.enc", "V2VkIEFwciAxOCAyMDEyIDE1OjMyOjEzIEdNVCswMjAw");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.components.1000034", false);
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.components.1000082", false);
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.components.1000234", false);
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.components.1000515", false);
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.components.129485889648625181", true);
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.components.129687769243231390", false);
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.components.1334739508000", false);
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.components.5567654423577676934", false);
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.components.5567654435776682311", false);
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.components.6344014529820961218", false);
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.embeddedsData", "[{\"appId\":\"129416357650312778\",\"apiPermissions\":{\"crossDomainAjax\":true,\"getMainFrameTitle\":true,\"getMainFrameUrl\":true,\"getSearchTerm\":true,\"insta[...]
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.enableAlerts", "never");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.enableFix404ByUser", "FALSE");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.firstTimeDialogOpened", true);
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.fixPageNotFoundErrorByUser", "TRUE");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.fixPageNotFoundErrorInHidden", "true");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.fixUrls", true);
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.conduit.com;apps.conduit.com;services.apps.conduit.com\",\"AppsDetectionUrlPattern\":\"hxxp://appdown[...]
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.globalFirstTimeInfoLastCheckTime", "Fri Aug 24 2012 15:54:54 GMT+0200");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.homepageProtectorEnableByLogin", true);
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.hxxp___facebook_conduitapps_com.APP_WIN_FEATURES", "cmVzaXphYmxlPTAsaHNjcm9sbD0wLHZzY3JvbGw9MCx0aXRsZWJhcj0xLGNsb3NlYnV0dG9uPTEsc2F2ZXJlc2l6ZWRzaXplPTAsb3BlbnBvc2l0aW9uPWFsaWdubWV[...]
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.initDone", true);
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.installType", "DirectDownload");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.isAppTrackingManagerOn", false);
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.isCheckedStartAsHidden", true);
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":true}");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.isFirstTimeToolbarLoading", "false");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.isNewTabEnabled", true);
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.isPerformedSmartBarTransition", "true");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.isWelcomPage", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.lastNewTabSettings", "{\"isEnabled\":false,\"newTabUrl\":\"hxxp://search.conduit.com/?ctid=CT2938961&octid=CT2938961&SearchSource=15&CUI=UN04982664893575095&SSPV=EB_SSPV&Lay=1&UM=[...]
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.lastVersion", "10.16.2.509");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.mam_CouponBuddy_appState.enc", "b24=");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.mam_gk_PriceGong_appState.enc", "b24=");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.mam_gk_appsData.enc", "eyJhcHBzIjpbeyJpZCI6IlByaWNlR29uZyIsInVybCI6Imh0dHA6Ly9zdG9yYWdlLmNvbmR1aXQuY29tL21hbS8zcmRwYXJ0eWFwcHMvcGcvcGcuaHRtbCIsIm9wdGlvbnNEaWFsb2ciOnsiZGlzcGxheU5h[...]
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.mam_gk_appsDefaultEnabled.enc", "dHJ1ZQ==");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.mam_gk_configuration.enc", "eyJjb25maWd1cmF0aW9uIjpbeyJpZCI6IlByaWNlR29uZyIsImNyaXRlcmlhcyI6W3siY3JpdGVyaWFJZCI6IjQzZmVjMDg1LWNkMzktNGQyZi05MDZhLTAyNTdkZjM2YzlhYiIsImRvbWFpbnMiOls[...]
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.mam_gk_first_time.enc", "MQ==");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.mam_gk_gadgetOpen.enc", "MQ==");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.mam_gk_lastLoginTime.enc", "MTM1NzgwODQ0NDQ3Mw==");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.mam_gk_localization.enc", "eyJnYWRnZXRDb250ZW50UG9saWN5Ijp7IlRleHQiOiJDb250ZW50IFBvbGljeSJ9LCJnYWRnZXREZXNjcmlwdGlvblByaW1hcnkiOnsiVGV4dCI6InZhbFVlIGFwcHMgZW5yaWNoZXMgeW91ciB3ZWIg[...]
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.mam_gk_settings1.1.1.16.enc", "eyJTdGF0dXMiOiJzdWNjZWVkZWQiLCJEYXRhIjp7ImludGVydmFsIjoyNDAsInN0YW1wIjoiNjFfLTEiLCJpc1Rlc3QiOmZhbHNlLCJpc1dlbGNvbWVFeHBlcmllbmNlRW5hYmxlZEJ5RGVmYXVs[...]
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.mam_gk_userId.enc", "NGY1NThiMzAtNWY4Yy00NDczLTgwMzAtMjAzYjZhNjQ1NGQz");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.migrateAppsAndComponents", true);
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.myStuffEnabled", true);
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.myStuffPublihserMinWidth", 400);
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.myStuffServiceIntervalMM", 1440);
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUFF_LUT");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"hxxp%3A%2F%2Fwww.neobux.com%2Fm%2Fad%2F\",\"EB_MAIN_FRAME_TITLE\":\"NeoBux%20-%20AdAlert\",\"EB_TOOLBAR_S[...]
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.oldAppsList", "129416357650312777,129416357650312778,111,129485889648625181,1000034,1000234,129687769243231390,1334739508000,1000080,1000082,1000515,1000,1001,1002,1003,1004,1005,[...]
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.price-gong.bornDate", "{\"dataType\":\"string\",\"data\":\"{\\\"Response\\\":\\\"01\\\\/10\\\\/2013 14\\\"}\"}");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.revertSettingsEnabled", true);
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.search.searchAppId", "129416357650312778");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.search.searchCount", 2);
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.searchInNewTabEnabled", false);
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.searchInNewTabEnabledByUser", false);
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.searchInNewTabEnabledInHidden", "true");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.searchProtector.notifyChanges", "{\"dataType\":\"string\",\"data\":\"true\"}");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.searchProtectorDialogDelayInSec", 10);
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.searchProtectorEnableByLogin", true);
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"false\"}");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.selectToSearchBoxEnabledByUser", "{\"dataType\":\"string\",\"data\":\"true\"}");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\"}");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT2938961\"}");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"hxxp://NeoBux.OurToolbar.com//xpi\"}");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"NeoBux\"}");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data\":\"2\"}");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1369461805839");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.serviceLayer_services_appTracking_lastUpdate", "1353524025218");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.serviceLayer_services_appsMetadata_lastUpdate", "1370201030231");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1369773368750");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.serviceLayer_services_location_lastUpdate", "1370122106841");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.serviceLayer_services_login_10.10.2.10_lastUpdate", "1354819441998");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.serviceLayer_services_login_10.13.1.89_lastUpdate", "1352641664736");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.serviceLayer_services_login_10.13.40.15_lastUpdate", "1360352114125");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.serviceLayer_services_login_10.14.350.531_lastUpdate", "1362761122838");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.serviceLayer_services_login_10.14.370.524_lastUpdate", "1364055264992");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.serviceLayer_services_login_10.14.42.7_lastUpdate", "1360617305011");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.serviceLayer_services_login_10.14.65.43_lastUpdate", "1362032620310");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.serviceLayer_services_login_10.15.0.562_lastUpdate", "1365797200340");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.serviceLayer_services_login_10.15.2.523_lastUpdate", "1367509743179");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.serviceLayer_services_login_10.16.1.521_lastUpdate", "1368458589707");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.serviceLayer_services_login_10.16.2.509_lastUpdate", "1370194003422");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.serviceLayer_services_login_lastUpdate", "1352747604075");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.serviceLayer_services_optimizer_lastUpdate", "1354551064819");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1369773368798");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.serviceLayer_services_searchAPI_lastUpdate", "1370122106850");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.serviceLayer_services_serviceMap_lastUpdate", "1370122106699");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.serviceLayer_services_setupAPI_lastUpdate", "1362679191327");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.serviceLayer_services_toolbarContextMenu_lastUpdate", "1369773368706");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.serviceLayer_services_toolbarSettings_lastUpdate", "1370201030296");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.serviceLayer_services_translation_lastUpdate", "1370122106891");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.serviceLayer_services_userApps_lastUpdate", "1357816807897");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.settingsINI", true);
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.showToolbarPermission", "false");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.smartbar.CTID", "CT2938961");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.smartbar.Uninstall", "0");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.smartbar.isHidden", false);
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.smartbar.toolbarName", "NeoBux ");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.testingCtid", "");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.toolbarAppMetaDataLastCheckTime", "Wed Aug 29 2012 06:09:32 GMT+0200");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.toolbarBornServerTime", "1-5-2011");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.toolbarContextMenuLastCheckTime", "Sat Aug 18 2012 09:44:39 GMT+0200");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.toolbarCurrentServerTime", "2-6-2013");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.toolbarLoginClientTime", "Sat Mar 09 2013 10:11:18 GMT+0100");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.twitterTemplate_2938961a129687769243231390000000_DailyActivity.enc", "MTM1NzgxNjkzMTQ3OA==");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.twitterTemplate_2938961a129687769243231390000000_LifetimeSent.enc", "VFJVRQ==");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.twittertemplate_2938961a129687769243231390000000_dailyactivity", "MTMzNzg4OTQ1MDk4Ng==");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.twittertemplate_2938961a129687769243231390000000_lifetimesent", "VFJVRQ==");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.url_history0001.enc", "aHR0cDovL2FkOS5uZW9idXguY29tL3YvP3hjPTAzQjgwOTMzMTBBRkMwNEM5Q0NEQzk2NTcwOERCMkRCNjk5NTk3RkQ2NzAyODM2NzY1MzgxM0VCREI0MkQ4NDEyMDA0NUMxMkE5OTM2MTJENUVBQkIyRUFE[...]
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961.usagesFlag", 2);
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CT2938961_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1370201021834,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit.com/root/CT2938961/CT2938961", "\"faf1eeeeb3bbdf3b2f185c30f53f2bfc2\"");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/1330848/1326519/CZ", "\"0\"");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2938961", "\"0\"");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&locale=en", "G9mW7heT/8xIX1frcduu0A==");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&locale=en", "2E1/v7EfCEDbv3VaBQMELg==");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&locale=en", "UgzXjW7BIkfdx+x39Ruv3w==");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&locale=en", "4BgM4MhF/sOgPsDNmIs3Yw==");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\"8076e3ce381dcd1:0\"");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.10.0.1", "\"4ead38b3e6bcd1:0\"");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.11.0.3", "\"4ead38b3e6bcd1:0\"");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.12.0.8", "\"4ead38b3e6bcd1:0\"");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.12.2.3", "\"4ead38b3e6bcd1:0\"");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.13.0.6", "\"0d648794549cd1:0\"");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.14.1.0", "\"0e0a4327275cd1:0\"");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.4.1.0", "\"07b2625f8cb1:0\"");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.5.0.12", "\"8028f138140cc1:0\"");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.6.0.10", "\"0ee90707f77cc1:0\"");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.7.0.6", "\"80ee9485875dcc1:0\"");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.8.0.8", "\"80ee9485875dcc1:0\"");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.8.1.0", "\"80ee9485875dcc1:0\"");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.9.0.3", "\"801a319dd78ccc1:0\"");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2938961", "\"c912886ea3ba021d3a9ef2d6ad700899\"");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.conduit-services.com/?ctid=CT2938961&octid=CT2938961", "\"1321973091\"");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT2938961/CT2938961", "\"1310989086\"");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=en", "\"bff3ac31ad0752d7dc4e864dcf0aa474\"");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.LatestLibsPath", "file:///C:\\Users\\Vena\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\n59jda4s.default\\conduitCommon\\modules\\3.14.1.0");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.LatestToolbarVersionInstalled", "3.14.1.0");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "hxxp://search.qip.ru/search?from=FF&query=");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.ToolbarsList", "CT2938961");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.ToolbarsList2", "CT2938961");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.ToolbarsList4", "CT2938961");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.globalUserId", "ada9d512-47f5-414a-894d-801fd72b9158");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true);
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true);
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.notifications.alertDialogsGetterLastCheckTime", "Sat Aug 25 2012 17:45:44 GMT+0200");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.notifications.alertEnabled", false);
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.notifications.alertInfoInterval", 60);
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.notifications.alertInfoLastCheckTime", "Sun May 01 2011 19:25:17 GMT+0200");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.notifications.clientsServerUrl", "hxxp://alert.client.conduit.com");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.notifications.locale", "en");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.notifications.loginIntervalMin", 1440);
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.notifications.loginLastCheckTime", "Wed Aug 29 2012 06:07:29 GMT+0200");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.notifications.loginLastUpdateTime", "1313487611");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.notifications.messageShowTimeSec", 20);
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.notifications.servicesServerUrl", "hxxp://alert.services.conduit.com");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.notifications.showTrayIcon", false);
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.notifications.userCloseIntervalMin", 300);
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.notifications.userId", "5507b3a8-a3c0-4cd8-8047-5f5df55d3d07");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("Smartbar.SearchFromAddressBarSavedUrl", "hxxp://search.qip.ru/search?from=FF&query=");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("extensions.funmoods.aflt", "ddrnw");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("extensions.funmoods.autoRvrt", false);
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("extensions.funmoods.cntry", "CZ");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("extensions.funmoods.dfltLng", "");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("extensions.funmoods.dfltSrch", true);
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("extensions.funmoods.dnsErr", true);
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("extensions.funmoods.envrmnt", "production");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("extensions.funmoods.excTlbr", false);
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("extensions.funmoods.hdrMd5", "AA30DC0907AA35E0876F73252C5A0ADC");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("extensions.funmoods.hmpg", true);
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("extensions.funmoods.hmpgUrl", "hxxp://start.funmoods.com/?f=1&a=ddrnw&chnl=ddrnw&cd=2XzutAtN2Y1L1QzutDtDtC0F0DtD0ByE0EtAtAtDyE0F0AyBtN0D0TzutBtDtCtBtDyCtByE&cr=398136891");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("extensions.funmoods.id", "eec14fa7000000000000001fd0b4e330");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("extensions.funmoods.instlDay", "15515");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("extensions.funmoods.instlRef", "ddrnw");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("extensions.funmoods.isdcmntcmplt", true);
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("extensions.funmoods.lastVrsnTs", "1.5.23.228:29:45");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("extensions.funmoods.mntrvrsn", "1.3.0");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("extensions.funmoods.newTab", true);
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("extensions.funmoods.newTabUrl", "hxxp://start.funmoods.com/?f=2&a=ddrnw&chnl=ddrnw&cd=2XzutAtN2Y1L1QzutDtDtC0F0DtD0ByE0EtAtAtDyE0F0AyBtN0D0TzutBtDtCtBtDyCtByE&cr=398136891");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("extensions.funmoods.prdct", "funmoods");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("extensions.funmoods.prtnrId", "funmoods");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("extensions.funmoods.sg", "none");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("extensions.funmoods.smplGrp", "none");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("extensions.funmoods.srchPrvdr", "Search");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("extensions.funmoods.tlbrId", "base");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("extensions.funmoods.tlbrSrchUrl", "");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("extensions.funmoods.vrsn", "1.5.23.22");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("extensions.funmoods.vrsnTs", "1.5.23.228:29:45");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("extensions.funmoods.vrsni", "1.5.23.22");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("extensions.funmoods_i.newTab", true);
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("extensions.funmoods_i.smplGrp", "none");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("extensions.funmoods_i.vrsnTs", "1.5.23.228:29:45");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("keyword.URL", "hxxp://search.sweetim.com/search.asp?src=2&crg=3.1010000.10005&q=");
[-] [C:\Users\Vena\AppData\Roaming\Mozilla\Firefox\Profiles\n59jda4s.default\prefs.js] [Preference] Deleted : user_pref("smartbar.machineId", "0JLIBTIOT1X36MJCYXWOHRQ0PUMN0HB9FIKA/KLFHIN3E5+GECO1P0AXRLNPKRXFEAQDMAHUXETMWJQK91W9TA");
[-] [C:\Users\Vena\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : search.babylon.com
[-] [C:\Users\Vena\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : start.funmoods.com
[-] [C:\Users\Vena\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Deleted : cjpglkicenollcignonpgiafdgfeehoj
[-] [C:\Users\Vena\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Deleted : fdloijijlkoblmigdofommgnheckmaki
[-] [C:\Users\Vena\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Deleted : mkndcbhcgphcfkkddanakjiepeknbgle

*************************

:: Winsock settings cleared

########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [78438 bytes] ##########

Však nejedeme závody

AdwCleaner toho našel a smazal tedy více než dost. Pro jistotu udělejte ještě scan z MBAM. Ale nic aktivního v logu z RSIT nevidím.

To je dobře, ráno sem to nestih.

Malwarebytes Anti-Malware
www.malwarebytes.org

Datum skenování: 6.9.2015
Čas skenování: 7:20
Protokol: mbam.txt
Správce: Ano

Verze: 2.1.8.1057
Databáze malwaru: v2015.09.06.01
Databáze rootkitů: v2015.08.16.01
Licence: Bezplatná verze
Ochrana proti malwaru: Vypnuto
Ochrana proti škodlivým webovým stránkám: Vypnuto
Ochrana programu: Vypnuto

OS: Windows 7 Service Pack 1
CPU: x64
Souborový systém: NTFS
Uživatel: Vena

Typ skenu: Vlastní sken
Výsledek: Dokončeno
Prohledaných objektů: 567190
Uplynulý čas: 2 hod, 15 min, 58 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Zapnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto

Procesy: 0
(Nenalezeny žádné škodlivé položky)

Moduly: 0
(Nenalezeny žádné škodlivé položky)

Klíče registru: 6
PUP.Optional.FunMoods, HKLM\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\cjpglkicenollcignonpgiafdgfeehoj, , [86230428d1ba74c28d284649749021df],
PUP.Optional.FunMoods, HKLM\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\fdloijijlkoblmigdofommgnheckmaki, , [1594a389f398300631850c837193ff01],
PUP.Optional.FunMoods, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\cjpglkicenollcignonpgiafdgfeehoj, , [7633a389256631050aab3d52cd37c739],
PUP.Optional.FunMoods, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\fdloijijlkoblmigdofommgnheckmaki, , [d5d484a82863b482c9ed3758cd377f81],
PUP.Optional.RelevantKnowledge, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\mkndcbhcgphcfkkddanakjiepeknbgle, , [575279b3bccfc86ebcf8fbad7d8709f7],
PUP.Optional.FunMoods, HKU\S-1-5-21-3715208554-288028567-3097100948-1000\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\cjpglkicenollcignonpgiafdgfeehoj, , [703953d90a81bc7a2b876d228282b947],

Hodnoty registru: 0
(Nenalezeny žádné škodlivé položky)

Data registru: 0
(Nenalezeny žádné škodlivé položky)

Složky: 0
(Nenalezeny žádné škodlivé položky)

Soubory: 18
Trojan.Agent, C:\Program Files (x86)\BLH 2 GPX\libpangoft2-1.0-0.dll, , [2a7f82aa246794a242d2318155abd12f],
Spyware.Passwords, C:\Program Files (x86)\BLH 2 GPX\libpng14-14.dll, , [d3d642eaa6e564d2c7841e514db351af],
Trojan.Agent, C:\System Volume Information\SystemRestore\FRStaging\Program Files (x86)\BLH 2 GPX\libpangoft2-1.0-0.dll, , [b8f10c20a1ea40f61ef6e7cb0af650b0],
Spyware.Passwords, C:\System Volume Information\SystemRestore\FRStaging\Program Files (x86)\BLH 2 GPX\libpng14-14.dll, , [872205270a81181eaf9ce08f04fc3cc4],
PUP.Optional.RelevantKnowledge, C:\System Volume Information\SystemRestore\FRStaging\Program Files (x86)\RelevantKnowledge\rlls.dll, , [a702a686a1ea5ed83c7656216c99da26],
PUP.Optional.RelevantKnowledge, C:\System Volume Information\SystemRestore\FRStaging\Program Files (x86)\RelevantKnowledge\rlls64.dll, , [3f6ac36927646bcb6949b3c42fd649b7],
PUP.Optional.RelevantKnowledge, C:\System Volume Information\SystemRestore\FRStaging\Program Files (x86)\RelevantKnowledge\rlph.dll, , [d2d7da5295f659ddb4fe651229dcc13f],
PUP.Optional.RelevantKnowledge, C:\System Volume Information\SystemRestore\FRStaging\Program Files (x86)\RelevantKnowledge\rlservice.exe, , [4f5a59d31873e254328091e644c16799],
PUP.Optional.RelevantKnowledge, C:\System Volume Information\SystemRestore\FRStaging\Program Files (x86)\RelevantKnowledge\rlvknlg.exe, , [b7f281ab721987af456d542347be768a],
PUP.Optional.RelevantKnowledge, C:\System Volume Information\SystemRestore\FRStaging\Program Files (x86)\RelevantKnowledge\rlvknlg32.exe, , [88213af20a81f73f5a582a4dd82d18e8],
PUP.Optional.RelevantKnowledge, C:\System Volume Information\SystemRestore\FRStaging\Program Files (x86)\RelevantKnowledge\rlvknlg64.exe, , [1f8ad8548dfe1521d5dd92e5a75e857b],
PUP.Optional.RelevantKnowledge, C:\System Volume Information\SystemRestore\FRStaging\Program Files (x86)\RelevantKnowledge\rlxf.dll, , [d0d92dff7a1178be9b171e59dd281de3],
PUP.Optional.RelevantKnowledge, C:\System Volume Information\SystemRestore\FRStaging\Program Files (x86)\RelevantKnowledge\components\rlxg.dll, , [4168c369f19a87afd6dca2d5768f857b],
PUP.Optional.RelevantKnowledge, C:\System Volume Information\SystemRestore\FRStaging\Program Files (x86)\RelevantKnowledge\firefox\rlnx.dll, , [8a1fdc502a61f640c2f04e2905006a96],
PUP.Optional.RelevantKnowledge, C:\AdwCleaner\Quarantine\C\Program Files (x86)\RelevantKnowledge\rlph.dll.vir, , [2881bd6f91fa0333832f601753b26b95],
PUP.Optional.RelevantKnowledge, C:\AdwCleaner\Quarantine\C\Program Files (x86)\RelevantKnowledge\rlxf.dll.vir, , [8e1b78b4bccfbb7b0ba781f66e97d52b],
PUP.Optional.RelevantKnowledge, C:\AdwCleaner\Quarantine\C\Program Files (x86)\RelevantKnowledge\components\rlxg.dll.vir, , [13968e9e3556a88e565c16619d68fe02],
PUP.Optional.RelevantKnowledge, C:\AdwCleaner\Quarantine\C\Program Files (x86)\RelevantKnowledge\firefox\rlnx.dll.vir, , [a20753d98803bd799121bbbca26329d7],

Fyzické sektory: 0
(Nenalezeny žádné škodlivé položky)


(end)

Toto mi prosím zkontrolujte na virustotal.com

C:\Program Files (x86)\BLH 2 GPX\libpangoft2-1.0-0.dll
C:\Program Files (x86)\BLH 2 GPX\libpng14-14.dll

a dejte mi sem výsledky. Většinou je třeba na virustotal.com kliknout na reanalyse, aby byly výsledky aktuální.

Ostatní co MBAM našel, můžete nechat smazat.

stačí hodit odkazy?

https://www.virustotal.com/cs/file/4443 ... 441600720/


https://www.virustotal.com/cs/file/e120 ... 441600872/


p.s. ten program můžu podstranit úplně, už sem ho dlouho nepoužil ....

No nevypadá to nebezpečně. Buď jsou v Malwarebytes tak dobří, a nebo se jedná o falešnou detekci. Ale přikláním se k té falešné detekci.

Jinak je čisto. Můžete tedy kliknout na T-Cleaner v mém podpisu a postupovat dle instrukcí. Dále aktualizujte Javu na nejnovější verzi https://java.com/en/download/

Můžete také stáhnout a spustit http://filehippo.com/updatechecker/UpdateChecker.exe který upozorní na aktualizace programů. Jen doporučuji poté na stránce s výsledky vypnout zobrazení beta verzí a je třeba počítat s tím, že odkazy na stažení, které to nabízí obsahují AJ verze programů.

Provedeno, uklizeno, Java aktualizována a BLH 2 GPX jsem pro jistotu odinstaloval úplně.

Mockrát děkuji za pomoc.

Není zač a přeji hezký večer