VIRY.CZ

Dobrý deň, poprosím o pomoc s odvírením. PC si otvára sám stránky, je totálne spomalený a dlho bootuje


Logfile of random's system information tool 1.10 (written by random/random)
Run by Monika at 2015-09-25 18:10:21
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 692 GB (73%) free of 954 GB
Total RAM: 4095 MB (43% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:10:25, on 25. 9. 2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18015)
Boot mode: Normal

Running processes:
C:\Windows\System32\TiltWheelMouse.exe
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
C:\Users\Monika\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Monika\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Monika\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Monika.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.oursurfing.com/?type=hp&ts=1 ... 9_DCFC9D78
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://mystart.incredibar.com/?a=6R905I ... 63&loc=skw
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.oursurfing.com/?type=hp&ts=1 ... 9_DCFC9D78
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.oursurfing.com/web/?type=ds& ... earchTerms}
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.oursurfing.com/web/?type=ds& ... earchTerms}
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId= ... 9_DCFC9D78
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
R3 - URLSearchHook: (no name) - - (no file)
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: ADDICT-THING - {8431081E-5259-A1A4-D2F6-0C6BFAF55D05} - (no file)
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O2 - BHO: ADDICT-THING - {FDC18286-2A23-0290-9C63-B4051C786C81} - (no file)
O3 - Toolbar: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
O4 - HKLM\..\Run: [HDAudDeck] C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe -r
O4 - HKLM\..\Run: [PMBVolumeWatcher] C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [ApnUpdater] "C:\Program Files (x86)\Ask.com\Updater\Updater.exe"
O4 - HKLM\..\Run: [Denzi] C:\Program Files (x86)\Denzi\Denzi.exe
O4 - HKLM\..\Run: [MSStp] C:\Windows\inf\msstp.vbe
O4 - HKLM\..\Run: [mncalumSrv] C:\Windows\system32\mncalum.vbe
O4 - HKLM\..\Run: [msfyjrqjSrv] C:\Windows\inf\msfyjrqj.vbe
O4 - HKLM\..\Run: [msuodaSrv] "C:\Windows\system32\msuoda.vbe" msqtaoco mskqcxd
O4 - HKCU\..\Run: [Google Update] "C:\Users\Monika\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [EA Core] "C:\Program Files (x86)\Electronic Arts\EADM\Core.exe" -silent
O4 - HKCU\..\Run: [Facebook Update] "C:\Users\Monika\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [GameXN GO] "C:\ProgramData\GameXN\GameXNGO.exe" /startup
O4 - HKCU\..\Run: [RGSC] C:\Program Files (x86)\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe /silent
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [SpeedUpMyComputer] C:\Program Files (x86)\SmartTweak\SpeedUpMyComputer\SpeedUpMyComputer.exe /ot /as
O4 - HKCU\..\Run: [uTorrent] "C:\Users\Monika\Desktop\utorrent.exe" /MINIMIZED
O4 - HKCU\..\Run: [GSplay.exe] C:\Users\Monika\Desktop\GSplay\GSplay.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'Default user')
O9 - Extra button: Pridať do blogu - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Pridať do blogu v programe Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - (no file)
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: ForceWare Intelligent Application Manager (IAM) - Unknown owner - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe
O23 - Service: globalUpdate Update Service (globalUpdate) (globalUpdate) - globalUpdate - C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe
O23 - Service: globalUpdate Update Service (globalUpdatem) (globalUpdatem) - globalUpdate - C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: ForceWare IP service (nSvcIp) - Unknown owner - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: PMBDeviceInfoProvider - Sony Corporation - C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: Web Assistant - Unknown owner - C:\Program Files\Web Assistant\ExtensionUpdaterService.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 11388 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
winlogon.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Windows\system32\nvvsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
"C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe"
WLIDSvcM.exe 1864
"C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-b1a89aa6-efdb-4ff1-b118-dcd46093d380 -SystemEventPortName:HostProcess-bf934d56-9426-4a39-875b-7e590d70e927 -IoCancelEventPortName:HostProcess-55a96c52-8eb7-4aae-b531-d50601d0939d -NonStateChangingEventPortName:HostProcess-e6a8f917-04c0-4293-a7da-6a72acb37291 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:733a1341-6c34-4e86-b78b-581761ba3a5f -DeviceGroupId:WpdFsGroup
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
"C:\Windows\System32\TiltWheelMouse.exe"
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Windows\system32\GWX\GWX.exe"
C:\Windows\System32\GWX\GWXUX.exe -Embedding
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\servicing\TrustedInstaller.exe
C:\Windows\system32\svchost.exe -k SDRSVC
wimserv.exe 28529c66-2f35-4633-af75-463c448889c0
C:\Windows\System32\svchost.exe -k utcsvc
"C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe" -r
"C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe"
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
C:\Windows\system32\msiexec.exe /V
"C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe" -auto
"C:\Users\Monika\AppData\Local\Google\Chrome\Application\chrome.exe"
"C:\Users\Monika\AppData\Local\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="1884.0.61134801\90803680" --supports-dual-gpus=false --gpu-driver-bug-workarounds=2,20,45,55 --gpu-vendor-id=0x10de --gpu-device-id=0x0de1 --gpu-driver-vendor=NVIDIA --gpu-driver-version=9.18.13.4752 --ignored=" --type=renderer " /prefetch:822062411
taskeng.exe {52FC09CE-954D-4BAA-AEF9-8B0FFD701E86}
"C:\Users\Monika\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=sk --force-fieldtrials="AffiliationBasedMatching/Enabled/AudioProcessing48kHzSupport/Default/AutofillEnabled/Default/*BrowserBlacklist/Enabled/CaptivePortalInterstitial/Enabled/ChildAccountDetection/Disabled/ChromeDashboard/Default/*ClientSideDetectionModel/Model0/*DomRel-Enable/enable/*EmbeddedSearch/Group7 pct:10g stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Enabled/*EnhancedBookmarks/Default/*ExtensionContentVerification/Enforce/ExtensionDeveloperModeWarning/Enabled/*ExtensionInstallVerification/Enforce/*IconNTP/Default/InstanceID/Enabled/*IntelligentSessionRestore/Disabled/*NetworkQualityEstimator/Enabled/*NewProfileManagement/Enabled/NewVideoRendererTrial/Enabled/*OmniboxBundledExperimentV1/Stable_EthersuggestPrefix_A5/*PasswordGeneration/Disabled/PasswordLinkInSettings/Enabled/*PluginPowerSaver/Enabled/*PrerenderFromOmnibox/OmniboxPrerenderEnabled/*QUIC/EnabledNoIdForLargePopulation/RefreshTokenDeviceId/Enabled/RememberCertificateErrorDecisions/Default/ReportCertificateErrors/ShowAndPossiblySend/SHA1IdentityUIWarning/Enabled/SHA1ToolbarUIJanuary2016/Warning/SHA1ToolbarUIJanuary2017/Error/*SRTPromptFieldTrial/On/*SafeBrowsingIncidentReportingService/Default/SafeBrowsingSocialEngineeringStrings/Disabled/*SdchPersistence/Enabled/SessionRestoreBackgroundLoading/Restore/*SettingsEnforcement/enforce_always_with_extensions_and_dse/*SlimmingPaint/EnableSlimmingPaint/SyncBackingDatabase32K/Enabled/*UMA-Dynamic-Binary-Uniformity-Trial/default/*UMA-Dynamic-Uniformity-Trial/Group6/*UMA-Population-Restrict/normal/*UMA-Uniformity-Trial-1-Percent/group_46/*UMA-Uniformity-Trial-10-Percent/default/*UMA-Uniformity-Trial-100-Percent/group_01/*UMA-Uniformity-Trial-20-Percent/group_03/*UMA-Uniformity-Trial-5-Percent/group_18/*UMA-Uniformity-Trial-50-Percent/default/*UseDelayAgnosticAEC/DefaultEnabled/VoiceTrigger/Install/WebRTC-UDPSocketNonBlockingIO/Default/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --enable-delegated-renderer --num-raster-threads=2 --gpu-rasterization-msaa-sample-count=8 --content-image-texture-target=3553 --video-image-texture-target=3553 --channel="1884.7.1517105070\1950057231" --font-cache-shared-handle=2244 /prefetch:673131151
C:\Windows\system32\vssvc.exe
C:\Windows\System32\svchost.exe -k swprv

"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe26_ Global\UsGthrCtrlFltPipeMssGthrPipe26 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 516 520 528 65536 524
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Users\Monika\Downloads\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\AddictThingUpdaterTask{337F238D-F2EB-477F-812D-CE54E415E3BD}.job - C:\ProgramData\Premium\AddictThing\AddictThing.exe /schedule /profilepath "C:\ProgramData\Premium\AddictThing\profile.ini"
C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\EySq0uQdt8HkwwBcyHNYoeUX.job - C:\Users\Monika\AppData\Roaming\EySq0uQdt8HkwwBcyHNYoeUX.exe --c=YofvHdQgozGQtgt+A6vo9sXmafC1hldDEtJp0jN43z7X7R2dOKeWyfrWiXkDvMMgBmo/Wodf/K0ysdDusdUNQYU5aROAbiVmxnCWDoh6akkvvYElLoBcS0lgDNN5AOWYrf4nJEak7khZdbaj8VkR4i5Ool/EPCH5YJz7tk0bPCCsUgHMELNrFUf71mDLOYO2Xudgj+uC2sq+uCVET5OTz319/1ywurC3cpR1H+wDXaFgcEpq00LYr0fauc0VjsYS258dCVunyxyTqd6f9Hv2SoxRY/glDo8nJyqROz9RrBh/YiiKQsJnYwtUXMrIYRQvPoiYfrBai3LKsrYigv84UQ==
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-1888807756-2181008117-2529089694-1002Core.job - C:\Users\Monika\AppData\Local\Facebook\Update\FacebookUpdate.exe /c /nocrashserver
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-1888807756-2181008117-2529089694-1002UA.job - C:\Users\Monika\AppData\Local\Facebook\Update\FacebookUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\globalUpdateUpdateTaskMachineCore.job - C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe /c
C:\Windows\tasks\globalUpdateUpdateTaskMachineUA.job - C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe /ua /installsource scheduler
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1888807756-2181008117-2529089694-1002Core.job - C:\Users\Monika\AppData\Local\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1888807756-2181008117-2529089694-1002UA.job - C:\Users\Monika\AppData\Local\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\OmzdH5FY.job - C:\Users\Monika\AppData\Roaming\OmzdH5FY.exe --c=rfQGGiFisGJFNIa7HFBobsW+64tQ0yhW1HQX/Hvq+sPo+xjpb6UzeFnqdRc422SEL2uulnPK/wa766o+d8u9oXABbF7kcqRuDPBHErd3oO9eemtLIjMwgQRVOupupf4sUI2SyTmu7xGcLwPBdz/KUNzYdrL/br8q+nwDTb4940lJQUn5WjPkxtdYQc20/P+bjMtqISJgPQ/EmXFPDdgBhAfJFqHxDtbG3rfy0u2LM9cWumL9YtuGNmfs9YwLIOeoV8fqgoUS6eL0Ofn+5/HhStodILxRGp08dMWn5JrBPJakP2mn3PYj42/RBMyfpSbi7c/qHT+XD2HCxXNuObjHYg==

=========Mozilla firefox=========

ProfilePath - C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "http://mystart.incredibar.com/?a=6R905I ... 63&loc=skw"
prefs.js - "extensions.enabledItems" - "503b50b921eb3@503b50b921eeb.info:1.0, 506305a8cb633@506305a8cb66c.com:3.2, {82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}:5.5.0.8013, ffxtlbr@incredibar.com:1.5.0, {EEE6C361-6118-11DC-9C72-001320C79847}:1.6.0.3, toolbar@ask.com:3.15.1.22229, {FE1DEEEA-DB6D-44b8-83F0-34FC0F9D1052}:2.0.0.572, {5e5ab302-7f65-44cd-8211-c1d4caaccea3}:3.8.1.0, amo@dealplyshopping.com:2.0, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.5.16"
prefs.js - "keyword.URL" - "http://mystart.incredibar.com/?a=6R905I ... kw&search="

"{336D0C35-8A85-403a-B9D2-65C292C39087}"=C:\Program Files\Web Assistant\Firefox
"{FE1DEEEA-DB6D-44b8-83F0-34FC0F9D1052}"=C:\Program Files\Web Assistant\Firefox


[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe� Flash� Player 19.0.0.185 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_185.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/ShockwavePlayer]
"Description"=Adobe Shockwave Player
"Path"=C:\Windows\SysWOW64\Adobe\Director\np32dsw_1219160.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Google.com/GoogleEarthPlugin]
"Description"=Google Earth in your browser
"Path"=C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=10.9.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Windows\SysWOW64\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=10.9.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8117.0416]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVision]
"Description"=NVIDIA stereo images plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVisionStreaming]
"Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@pandonetworks.com/PandoWebPlugin]
"Description"=This plugin detects and launches Pando Media Booster
"Path"=C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@rising.com.cn/nprising]
"Description"=
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@staging.google.com/globalUpdate Update;version=10]
"Description"=globalUpdate Update
"Path"=C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npglobalupdateUpdate4.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@staging.google.com/globalUpdate Update;version=4]
"Description"=globalUpdate Update
"Path"=C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npglobalupdateUpdate4.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe� Flash� Player 19.0.0.185 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_19_0_0_185.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll

C:\Program Files (x86)\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files (x86)\Mozilla Firefox\components\
aboutCertError.js
aboutPrivateBrowsing.js
aboutRights.js
aboutRobots.js
aboutSessionRestore.js
browser.xpt
browserdirprovider.dll
brwsrcmp.dll
compreg.dat
FeedConverter.js
FeedProcessor.js
FeedWriter.js
fuelApplication.js
jsconsole-clhandler.js
NetworkGeolocationProvider.js
nsAddonRepository.js
nsBadCertHandler.js
nsBlocklistService.js
nsBrowserContentHandler.js
nsBrowserGlue.js
nsContentDispatchChooser.js
nsContentPrefService.js
nsDefaultCLH.js
nsDownloadManagerUI.js
nsExtensionManager.js
nsHandlerService.js
nsHelperAppDlg.js
nsLivemarkService.js
nsLoginInfo.js
nsLoginManager.js
nsLoginManagerPrompter.js
nsMicrosummaryService.js
nsPlacesDBFlush.js
nsPlacesTransactionsService.js
nsPostUpdateWin.js
nsPrivateBrowsingService.js
nsProxyAutoConfig.js
nsSafebrowsingApplication.js
nsSearchService.js
nsSearchSuggestions.js
nsSessionStartup.js
nsSessionStore.js
nsSetDefaultBrowser.js
nsSidebar.js
nsTaggingService.js
nsTryToClose.js
nsUpdateService.js
nsUrlClassifierLib.js
nsUrlClassifierListManager.js
nsURLFormatter.js
nsWebHandlerApp.js
pluginGlue.js
storage-Legacy.js
storage-mozStorage.js
txEXSLTRegExFunctions.js
WebContentConverter.js
xpti.dat

C:\Program Files (x86)\Mozilla Firefox\plugins\
npnul32.dll

C:\Program Files (x86)\Mozilla Firefox\searchplugins\
atlas-sk.xml
azet-sk.xml
dunaj-sk.xml
eBay.xml
google.xml
oursurfing.xml
slovnik-sk.xml
wikipedia-sk.xml
zoznam-sk.xml

C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\extensions\
503b50b921eb3@503b50b921eeb.info
506305a8cb633@506305a8cb66c.com
deskCutv2@gmail.com
ffxtlbr@incredibar.com
toolbar@ask.com
{5e5ab302-7f65-44cd-8211-c1d4caaccea3}
{EEE6C361-6118-11DC-9C72-001320C79847}

C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\searchplugins\
askcom.xml
conduit.xml
MyStart Search.xml
sweetim.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4f3ed5cd-0726-42a9-87f5-d13f3d2976ac}]
Windows Live Family Safety Browser Helper Class - C:\Program Files\Windows Live\Family Safety\fssbho.dll [2010-04-28 132456]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 532336]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2012-10-30 449512]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8431081E-5259-A1A4-D2F6-0C6BFAF55D05}]
ADDICT-THING Class

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 403840]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
Ask Toolbar - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll [2012-04-09 1519272]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2012-10-30 155384]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FDC18286-2A23-0290-9C63-B4051C786C81}]
ADDICT-THING Class

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{D4027C7F-154A-4066-A1AD-4243D8127440} - Ask Toolbar - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll [2012-04-09 1519272]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2012-11-16 4090824]
"MouseDriver"=C:\Windows\system32\TiltWheelMouse.exe [2012-12-19 241152]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2015-02-23 1794704]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Google Update"=C:\Users\Monika\AppData\Local\Google\Update\GoogleUpdate.exe [2015-09-20 144200]
"EA Core"=C:\Program Files (x86)\Electronic Arts\EADM\Core.exe -silent []
"Facebook Update"=C:\Users\Monika\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-07-14 138096]
"msnmsgr"=C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe [2010-04-16 3872080]
"GameXN GO"=C:\ProgramData\GameXN\GameXNGO.exe /startup []
"RGSC"=C:\Program Files (x86)\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe /silent []
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1475584]
"SpeedUpMyComputer"=C:\Program Files (x86)\SmartTweak\SpeedUpMyComputer\SpeedUpMyComputer.exe [2013-07-22 2054776]
"uTorrent"=C:\Users\Monika\Desktop\utorrent.exe [2014-03-16 1614416]
"GSplay.exe"=C:\Users\Monika\Desktop\GSplay\GSplay.exe []

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"HDAudDeck"=C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [2010-05-24 2439072]
"PMBVolumeWatcher"=C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe [2011-08-24 651832]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2012-07-03 252848]
""= []
"ApnUpdater"=C:\Program Files (x86)\Ask.com\Updater\Updater.exe [2012-04-09 1557160]
"Denzi"=C:\Program Files (x86)\Denzi\Denzi.exe []
"MSStp"=C:\Windows\inf\msstp.vbe []
"mncalumSrv"=C:\Windows\system32\mncalum.vbe []
"msfyjrqjSrv"=C:\Windows\inf\msfyjrqj.vbe []
"msuodaSrv"=C:\Windows\system32\msuoda.vbe msqtaoco mskqcxd []

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"aux1"=wdmaud.drv
"VIDC.XFR1"=xfcodec64.dll
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"aux2"=wdmaud.drv
"wave7"=wdmaud.drv
"midi7"=wdmaud.drv
"mixer7"=wdmaud.drv
"aux3"=wdmaud.drv
"wave8"=wdmaud.drv
"midi8"=wdmaud.drv
"mixer8"=wdmaud.drv
"aux4"=wdmaud.drv
"wave9"=wdmaud.drv
"midi9"=wdmaud.drv
"mixer9"=wdmaud.drv
"aux5"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-09-25 18:10:21 ----D---- C:\rsit
2015-09-25 18:10:21 ----D---- C:\Program Files\trend micro
2015-09-25 14:25:27 ----A---- C:\Windows\SYSWOW64\nvStreaming.exe
2015-09-25 14:15:30 ----A---- C:\Windows\system32\nvdispgenco6435598.dll
2015-09-25 14:15:30 ----A---- C:\Windows\system32\nvdispco6435598.dll
2015-09-20 13:34:56 ----A---- C:\Windows\SYSWOW64\InkEd.dll
2015-09-20 13:34:56 ----A---- C:\Windows\system32\InkEd.dll
2015-09-20 13:34:55 ----A---- C:\Windows\system32\jnwmon.dll
2015-09-20 13:34:51 ----A---- C:\Windows\system32\schedsvc.dll
2015-09-20 13:34:38 ----A---- C:\Windows\SYSWOW64\tzres.dll
2015-09-20 13:34:38 ----A---- C:\Windows\system32\tzres.dll
2015-09-20 13:34:20 ----A---- C:\Windows\SYSWOW64\dwmcore.dll
2015-09-20 13:34:20 ----A---- C:\Windows\SYSWOW64\dwmapi.dll
2015-09-20 13:34:20 ----A---- C:\Windows\system32\dwmcore.dll
2015-09-20 13:34:20 ----A---- C:\Windows\system32\dwmapi.dll
2015-09-20 13:34:16 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2015-09-20 13:34:15 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2015-09-20 13:34:15 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2015-09-20 13:34:15 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2015-09-20 13:34:15 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2015-09-20 13:34:15 ----A---- C:\Windows\system32\iernonce.dll
2015-09-20 13:34:15 ----A---- C:\Windows\system32\ieetwproxystub.dll
2015-09-20 13:34:15 ----A---- C:\Windows\system32\ieetwcollector.exe
2015-09-20 13:34:15 ----A---- C:\Windows\system32\ie4uinit.exe
2015-09-20 13:34:14 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2015-09-20 13:34:14 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2015-09-20 13:34:14 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2015-09-20 13:34:14 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2015-09-20 13:34:14 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-09-20 13:34:13 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2015-09-20 13:34:12 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2015-09-20 13:34:11 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2015-09-20 13:34:11 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2015-09-20 13:34:11 ----A---- C:\Windows\system32\iedkcs32.dll
2015-09-20 13:34:10 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2015-09-20 13:34:10 ----A---- C:\Windows\system32\urlmon.dll
2015-09-20 13:34:09 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2015-09-20 13:34:09 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2015-09-20 13:34:09 ----A---- C:\Windows\SYSWOW64\jscript.dll
2015-09-20 13:34:09 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2015-09-20 13:34:09 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2015-09-20 13:34:08 ----A---- C:\Windows\SYSWOW64\ieui.dll
2015-09-20 13:34:08 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2015-09-20 13:34:08 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2015-09-20 13:34:08 ----A---- C:\Windows\system32\msfeeds.dll
2015-09-20 13:34:08 ----A---- C:\Windows\system32\dxtrans.dll
2015-09-20 13:34:07 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2015-09-20 13:34:07 ----A---- C:\Windows\system32\iesetup.dll
2015-09-20 13:34:06 ----A---- C:\Windows\system32\ieapfltr.dll
2015-09-20 13:34:05 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2015-09-20 13:34:05 ----A---- C:\Windows\system32\vbscript.dll
2015-09-20 13:34:05 ----A---- C:\Windows\system32\iertutil.dll
2015-09-20 13:34:04 ----A---- C:\Windows\SYSWOW64\wininet.dll
2015-09-20 13:34:04 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2015-09-20 13:34:03 ----A---- C:\Windows\SYSWOW64\msrating.dll
2015-09-20 13:34:03 ----A---- C:\Windows\system32\jsproxy.dll
2015-09-20 13:34:03 ----A---- C:\Windows\system32\ieUnatt.exe
2015-09-20 13:34:02 ----A---- C:\Windows\system32\ieui.dll
2015-09-20 13:34:02 ----A---- C:\Windows\system32\dxtmsft.dll
2015-09-20 13:34:01 ----A---- C:\Windows\system32\ieframe.dll
2015-09-20 13:34:00 ----A---- C:\Windows\system32\mshtmlmedia.dll
2015-09-20 13:34:00 ----A---- C:\Windows\system32\mshtmled.dll
2015-09-20 13:34:00 ----A---- C:\Windows\system32\jscript9diag.dll
2015-09-20 13:34:00 ----A---- C:\Windows\system32\jscript.dll
2015-09-20 13:33:59 ----A---- C:\Windows\system32\wininet.dll
2015-09-20 13:33:59 ----A---- C:\Windows\system32\jscript9.dll
2015-09-20 13:33:58 ----A---- C:\Windows\system32\msrating.dll
2015-09-20 13:33:58 ----A---- C:\Windows\system32\MshtmlDac.dll
2015-09-20 13:33:56 ----A---- C:\Windows\system32\mshtml.dll
2015-09-20 13:33:36 ----A---- C:\Windows\system32\UtcResources.dll
2015-09-20 13:33:36 ----A---- C:\Windows\system32\diagtrack.dll
2015-09-20 13:33:35 ----A---- C:\Windows\system32\ntoskrnl.exe
2015-09-20 13:33:35 ----A---- C:\Windows\system32\ntdll.dll
2015-09-20 13:33:35 ----A---- C:\Windows\system32\kernel32.dll
2015-09-20 13:33:34 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2015-09-20 13:33:34 ----A---- C:\Windows\system32\tdh.dll
2015-09-20 13:33:33 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2015-09-20 13:33:33 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2015-09-20 13:33:32 ----A---- C:\Windows\SYSWOW64\tdh.dll
2015-09-20 13:33:32 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2015-09-20 13:33:32 ----A---- C:\Windows\system32\KernelBase.dll
2015-09-20 13:33:32 ----A---- C:\Windows\system32\advapi32.dll
2015-09-20 13:33:31 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2015-09-20 13:33:31 ----A---- C:\Windows\system32\lsasrv.dll
2015-09-20 13:33:30 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2015-09-20 13:33:30 ----A---- C:\Windows\system32\wow64.dll
2015-09-20 13:33:30 ----A---- C:\Windows\system32\srcore.dll
2015-09-20 13:33:30 ----A---- C:\Windows\system32\rstrui.exe
2015-09-20 13:33:30 ----A---- C:\Windows\system32\rpcrt4.dll
2015-09-20 13:33:29 ----A---- C:\Windows\SYSWOW64\schannel.dll
2015-09-20 13:33:29 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2015-09-20 13:33:29 ----A---- C:\Windows\system32\winsrv.dll
2015-09-20 13:33:29 ----A---- C:\Windows\system32\schannel.dll
2015-09-20 13:33:29 ----A---- C:\Windows\system32\msv1_0.dll
2015-09-20 13:33:29 ----A---- C:\Windows\system32\kerberos.dll
2015-09-20 13:33:29 ----A---- C:\Windows\system32\csrsrv.dll
2015-09-20 13:33:29 ----A---- C:\Windows\system32\conhost.exe
2015-09-20 13:33:28 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2015-09-20 13:33:28 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2015-09-20 13:33:28 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2015-09-20 13:33:28 ----A---- C:\Windows\system32\wdigest.dll
2015-09-20 13:33:28 ----A---- C:\Windows\system32\TSpkg.dll
2015-09-20 13:33:28 ----A---- C:\Windows\system32\sspicli.dll
2015-09-20 13:33:28 ----A---- C:\Windows\system32\smss.exe
2015-09-20 13:33:28 ----A---- C:\Windows\system32\ncrypt.dll
2015-09-20 13:33:28 ----A---- C:\Windows\system32\lsass.exe
2015-09-20 13:33:28 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2015-09-20 13:33:28 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2015-09-20 13:33:27 ----A---- C:\Windows\SYSWOW64\srclient.dll
2015-09-20 13:33:27 ----A---- C:\Windows\SYSWOW64\setup16.exe
2015-09-20 13:33:27 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2015-09-20 13:33:27 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2015-09-20 13:33:27 ----A---- C:\Windows\system32\srclient.dll
2015-09-20 13:33:27 ----A---- C:\Windows\system32\ntvdm64.dll
2015-09-20 13:33:27 ----A---- C:\Windows\system32\cryptbase.dll
2015-09-20 13:33:27 ----A---- C:\Windows\system32\auditpol.exe
2015-09-20 13:33:26 ----A---- C:\Windows\SYSWOW64\secur32.dll
2015-09-20 13:33:26 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2015-09-20 13:33:26 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2015-09-20 13:33:26 ----A---- C:\Windows\SYSWOW64\cryptbase.dll
2015-09-20 13:33:26 ----A---- C:\Windows\SYSWOW64\credssp.dll
2015-09-20 13:33:26 ----A---- C:\Windows\system32\wow64win.dll
2015-09-20 13:33:26 ----A---- C:\Windows\system32\wow64cpu.dll
2015-09-20 13:33:26 ----A---- C:\Windows\system32\sspisrv.dll
2015-09-20 13:33:26 ----A---- C:\Windows\system32\secur32.dll
2015-09-20 13:33:26 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2015-09-20 13:33:26 ----A---- C:\Windows\system32\credssp.dll
2015-09-20 13:33:25 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-09-20 13:33:25 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-09-20 13:33:25 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-09-20 13:33:25 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-09-20 13:33:25 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-09-20 13:33:25 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2015-09-20 13:33:25 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-09-20 13:33:25 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-09-20 13:33:25 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-09-20 13:33:25 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-09-20 13:33:25 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-09-20 13:33:25 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-09-20 13:33:25 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-09-20 13:33:25 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-09-20 13:33:25 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-09-20 13:33:25 ----A---- C:\Windows\SYSWOW64\wow32.dll
2015-09-20 13:33:25 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2015-09-20 13:33:25 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2015-09-20 13:33:25 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2015-09-20 13:33:24 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-09-20 13:33:24 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2015-09-20 13:33:24 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-09-20 13:33:24 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2015-09-20 13:33:24 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-09-20 13:33:24 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-09-20 13:33:24 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-09-20 13:33:24 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-09-20 13:33:24 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-09-20 13:33:24 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-09-20 13:33:24 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-09-20 13:33:24 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-09-20 13:33:24 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-09-20 13:33:24 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-09-20 13:33:24 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-09-20 13:33:24 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-09-20 13:33:24 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-09-20 13:33:24 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-09-20 13:33:24 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-09-20 13:33:24 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-09-20 13:33:24 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-09-20 13:33:24 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-09-20 13:33:24 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-09-20 13:33:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2015-09-20 13:33:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-09-20 13:33:23 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-09-20 13:33:23 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-09-20 13:33:23 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-09-20 13:33:22 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2015-09-20 13:33:22 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-09-20 13:33:22 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-09-20 13:33:22 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-09-20 13:33:22 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-09-20 13:33:22 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-09-20 13:33:22 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-09-20 13:33:22 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-09-20 13:33:22 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-09-20 13:33:21 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-09-20 13:33:21 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2015-09-20 13:33:21 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-09-20 13:33:21 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-09-20 13:33:21 ----A---- C:\Windows\SYSWOW64\instnm.exe
2015-09-20 13:33:21 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2015-09-20 13:33:21 ----A---- C:\Windows\system32\apisetschema.dll
2015-09-20 13:33:20 ----A---- C:\Windows\SYSWOW64\user.exe
2015-09-20 13:33:20 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2015-09-20 13:33:20 ----A---- C:\Windows\system32\adtschema.dll
2015-09-20 13:33:19 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2015-09-20 13:33:19 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2015-09-20 13:33:19 ----A---- C:\Windows\system32\msobjs.dll
2015-09-20 13:33:19 ----A---- C:\Windows\system32\msaudite.dll
2015-09-20 13:32:24 ----A---- C:\Windows\SYSWOW64\authui.dll
2015-09-20 13:32:24 ----A---- C:\Windows\system32\consent.exe
2015-09-20 13:32:24 ----A---- C:\Windows\system32\authui.dll
2015-09-20 13:32:23 ----A---- C:\Windows\system32\appinfo.dll
2015-09-20 13:31:52 ----A---- C:\Windows\SYSWOW64\msxml6.dll
2015-09-20 13:31:52 ----A---- C:\Windows\system32\msxml6.dll
2015-09-20 13:31:52 ----A---- C:\Windows\system32\msxml3.dll
2015-09-20 13:31:51 ----A---- C:\Windows\SYSWOW64\msxml6r.dll
2015-09-20 13:31:51 ----A---- C:\Windows\SYSWOW64\msxml3r.dll
2015-09-20 13:31:51 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2015-09-20 13:31:51 ----A---- C:\Windows\system32\msxml6r.dll
2015-09-20 13:31:51 ----A---- C:\Windows\system32\msxml3r.dll
2015-09-20 13:31:34 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2015-09-20 13:31:33 ----A---- C:\Windows\system32\appidsvc.dll
2015-09-20 13:31:33 ----A---- C:\Windows\system32\appidapi.dll
2015-09-20 13:31:32 ----A---- C:\Windows\SYSWOW64\appidapi.dll
2015-09-20 13:31:29 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2015-09-20 13:31:28 ----A---- C:\Windows\system32\setbcdlocale.dll
2015-09-20 13:31:28 ----A---- C:\Windows\system32\drivers\appid.sys
2015-09-20 13:29:56 ----A---- C:\Windows\system32\win32k.sys
2015-09-20 13:29:56 ----A---- C:\Windows\system32\atmfd.dll
2015-09-20 13:29:55 ----A---- C:\Windows\SYSWOW64\lpk.dll
2015-09-20 13:29:55 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2015-09-20 13:29:55 ----A---- C:\Windows\SYSWOW64\dciman32.dll
2015-09-20 13:29:55 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2015-09-20 13:29:55 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2015-09-20 13:29:55 ----A---- C:\Windows\system32\lpk.dll
2015-09-20 13:29:55 ----A---- C:\Windows\system32\fontsub.dll
2015-09-20 13:29:55 ----A---- C:\Windows\system32\dciman32.dll
2015-09-20 13:29:55 ----A---- C:\Windows\system32\atmlib.dll
2015-09-20 13:29:30 ----A---- C:\Windows\system32\wucltux.dll
2015-09-20 13:29:30 ----A---- C:\Windows\system32\wuaueng.dll
2015-09-20 13:29:29 ----A---- C:\Windows\SYSWOW64\wuwebv.dll
2015-09-20 13:29:29 ----A---- C:\Windows\SYSWOW64\wudriver.dll
2015-09-20 13:29:29 ----A---- C:\Windows\SYSWOW64\wuapp.exe
2015-09-20 13:29:29 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2015-09-20 13:29:29 ----A---- C:\Windows\system32\wuwebv.dll
2015-09-20 13:29:29 ----A---- C:\Windows\system32\wudriver.dll
2015-09-20 13:29:29 ----A---- C:\Windows\system32\wuauclt.exe
2015-09-20 13:29:29 ----A---- C:\Windows\system32\wuapp.exe
2015-09-20 13:29:29 ----A---- C:\Windows\system32\wuapi.dll
2015-09-20 13:29:29 ----A---- C:\Windows\system32\WinSetupUI.dll
2015-09-20 13:29:28 ----A---- C:\Windows\SYSWOW64\wups.dll
2015-09-20 13:29:28 ----A---- C:\Windows\system32\wups2.dll
2015-09-20 13:29:28 ----A---- C:\Windows\system32\wups.dll
2015-09-20 13:29:28 ----A---- C:\Windows\system32\wu.upgrade.ps.dll
2015-09-10 08:57:22 ----HD---- C:\$Windows.~BT

======List of files/folders modified in the last 1 month======

2015-09-25 18:10:25 ----D---- C:\Windows\Prefetch
2015-09-25 18:10:22 ----D---- C:\Windows\Temp
2015-09-25 18:10:21 ----RD---- C:\Program Files
2015-09-25 18:10:06 ----RD---- C:\Program Files (x86)
2015-09-25 18:09:42 ----SHD---- C:\System Volume Information
2015-09-25 18:09:39 ----SHD---- C:\Windows\Installer
2015-09-25 18:07:57 ----SHD---- C:\Config.Msi
2015-09-25 18:07:53 ----RSD---- C:\Windows\Fonts
2015-09-25 18:06:46 ----HD---- C:\ProgramData
2015-09-25 18:05:54 ----D---- C:\Program Files (x86)\Thoosje Sevenbar
2015-09-25 18:05:17 ----D---- C:\Program Files (x86)\Electronic Arts
2015-09-25 18:02:40 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2015-09-25 17:54:49 ----D---- C:\Windows
2015-09-25 16:10:38 ----D---- C:\Program Files (x86)\Sony
2015-09-25 16:09:48 ----D---- C:\Program Files (x86)\Sony Mobile
2015-09-25 16:09:32 ----D---- C:\Program Files (x86)\Slender v0.9.1
2015-09-25 16:09:24 ----D---- C:\ProgramData\Skype
2015-09-25 16:09:23 ----D---- C:\Windows\SysWOW64
2015-09-25 16:09:23 ----D---- C:\Program Files (x86)\Common Files
2015-09-25 16:09:11 ----D---- C:\Users\Monika\AppData\Roaming\Skype
2015-09-25 16:08:06 ----D---- C:\Program Files (x86)\Rockstar Games
2015-09-25 16:07:38 ----D---- C:\Program Files (x86)\Rising
2015-09-25 16:07:18 ----RSD---- C:\Windows\assembly
2015-09-25 16:06:02 ----D---- C:\ProgramData\Origin
2015-09-25 16:05:44 ----D---- C:\Program Files (x86)\Opera
2015-09-25 16:05:34 ----D---- C:\Windows\system32\Tasks
2015-09-25 16:04:58 ----D---- C:\Windows\System32
2015-09-25 16:04:51 ----D---- C:\Program Files (x86)\NortonInstaller
2015-09-25 16:04:49 ----D---- C:\Windows\system32\drivers
2015-09-25 16:04:49 ----D---- C:\ProgramData\Norton
2015-09-25 16:04:47 ----D---- C:\Windows\Tasks
2015-09-25 16:04:18 ----D---- C:\Windows\inf
2015-09-25 16:03:51 ----D---- C:\ProgramData\Electronic Arts
2015-09-25 16:01:26 ----D---- C:\Program Files (x86)\need for speed Most Wanted plna hra CZ
2015-09-25 16:01:01 ----D---- C:\Program Files (x86)\Mozilla Firefox
2015-09-25 15:59:59 ----SHD---- C:\Windows\SYSWOW64\AI_RecycleBin
2015-09-25 15:59:20 ----D---- C:\Windows\system32\drivers\etc
2015-09-25 15:53:17 ----D---- C:\Program Files\Instinkt
2015-09-25 15:49:51 ----D---- C:\Program Files (x86)\Farming Simulator 2013 CZ
2015-09-25 15:45:11 ----D---- C:\Program Files (x86)\Xider
2015-09-25 15:44:42 ----D---- C:\Windows\SYSWOW64\drivers
2015-09-25 15:44:42 ----D---- C:\Program Files (x86)\ASUS
2015-09-25 15:41:36 ----D---- C:\Program Files\Crashday
2015-09-25 15:41:21 ----D---- C:\Program Files (x86)\Denzi
2015-09-25 15:39:33 ----D---- C:\ProgramData\InstallMate
2015-09-25 15:38:19 ----D---- C:\Program Files (x86)\7DaysToDie-Alpha
2015-09-25 15:21:35 ----D---- C:\Windows\Panther
2015-09-25 14:36:54 ----D---- C:\Windows\Microsoft.NET
2015-09-25 14:36:24 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2015-09-25 14:33:25 ----D---- C:\Windows\system32\config
2015-09-25 14:29:19 ----D---- C:\ProgramData\NVIDIA
2015-09-25 14:25:51 ----D---- C:\Program Files\NVIDIA Corporation
2015-09-25 14:25:51 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2015-09-25 14:25:50 ----D---- C:\ProgramData\NVIDIA Corporation
2015-09-25 14:24:15 ----D---- C:\Windows\system32\DriverStore
2015-09-25 14:18:15 ----D---- C:\Windows\Logs
2015-09-25 14:15:12 ----SD---- C:\ProgramData\Microsoft
2015-09-25 14:13:37 ----D---- C:\NVIDIA
2015-09-25 14:12:29 ----D---- C:\ProgramData\Premium
2015-09-25 14:08:40 ----D---- C:\Windows\rescache
2015-09-21 03:45:05 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-09-21 03:40:37 ----D---- C:\Windows\winsxs
2015-09-21 03:37:22 ----D---- C:\Windows\SYSWOW64\sk-SK
2015-09-21 03:37:22 ----D---- C:\Windows\system32\sk-SK
2015-09-21 03:37:22 ----D---- C:\Windows\ehome
2015-09-21 03:37:22 ----D---- C:\Program Files\Windows Journal
2015-09-21 03:37:21 ----D---- C:\Windows\SYSWOW64\en-US
2015-09-21 03:37:21 ----D---- C:\Windows\system32\en-US
2015-09-21 03:37:21 ----D---- C:\Windows\PolicyDefinitions
2015-09-21 03:37:21 ----D---- C:\Program Files\Internet Explorer
2015-09-21 03:37:20 ----D---- C:\Program Files (x86)\Internet Explorer
2015-09-21 03:37:17 ----D---- C:\Windows\AppPatch
2015-09-21 03:37:15 ----D---- C:\Windows\system32\Boot
2015-09-21 03:19:51 ----D---- C:\Windows\system32\MRT
2015-09-20 13:29:43 ----D---- C:\Windows\system32\catroot2
2015-08-26 18:37:02 ----A---- C:\Windows\system32\MRT.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2012-11-16 62024]
R0 nvstor64;nvstor64; C:\Windows\system32\DRIVERS\nvstor64.sys [2010-04-08 244328]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R1 AsIO;AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [2009-08-04 13440]
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2012-11-16 209808]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2012-03-14 148528]
R1 EpfwLWF;Epfw NDIS LightWeight Filter; C:\Windows\system32\DRIVERS\EpfwLWF.sys [2012-03-14 38288]
R2 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2012-03-14 187632]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\Windows\system32\DRIVERS\ASACPI.sys [2009-07-16 15416]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2015-02-23 195728]
R3 NVNET;NVIDIA nForce 10/100/1000 Mbps Ethernet ; C:\Windows\system32\DRIVERS\nvmf6264.sys [2010-03-04 349416]
R3 VIAHdAudAddService;VIA High Definition Audio Driver Service; C:\Windows\system32\drivers\viahduaa.sys [2010-05-15 1327520]
S3 AndNetDiag;LGE AndroidNet USB Serial Port; C:\Windows\system32\DRIVERS\lgandnetdiag64.sys []
S3 ANDNetModem;LGE AndroidNet USB Modem; C:\Windows\system32\DRIVERS\lgandnetmodem64.sys []
S3 androidusb;SAMSUNG Android Composite ADB Interface Driver; C:\Windows\System32\Drivers\ssadadb.sys [2011-05-13 36328]
S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2010-04-28 61288]
S3 ggflt;SOMC USB Flash Driver Filter; C:\Windows\system32\DRIVERS\ggflt.sys [2015-05-12 16088]
S3 ggsomc;SOMC USB Flash Driver; C:\Windows\system32\DRIVERS\ggsomc.sys [2015-05-12 30424]
S3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2009-03-18 33856]
S3 InputFilter_Hid_FlexDef2b;Siliten HID Devices(FlexDef2b) Driver Service; C:\Windows\system32\DRIVERS\InputFilter_FlexDef2b.sys [2010-06-19 17920]
S3 nmwcd;Nokia USB Phone Parent Driver; C:\Windows\system32\drivers\ccdcmbx64.sys []
S3 nmwcdc;Nokia USB Communication Driver; C:\Windows\system32\drivers\ccdcmbox64.sys []
S3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\Windows\system32\DRIVERS\nvm62x64.sys [2009-06-10 408960]
S3 ss_bbus;SAMSUNG USB Mobile Device (WDM); C:\Windows\system32\DRIVERS\ss_bbus.sys [2009-09-19 127488]
S3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter); C:\Windows\system32\DRIVERS\ss_bmdfl.sys [2009-09-19 18944]
S3 ss_bmdm;SAMSUNG USB Mobile Modem; C:\Windows\system32\DRIVERS\ss_bmdm.sys [2009-09-19 161280]
S3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM); C:\Windows\system32\DRIVERS\ssadbus.sys [2011-05-13 157672]
S3 ssadmdfl;SAMSUNG Android USB Modem (Filter); C:\Windows\system32\DRIVERS\ssadmdfl.sys [2011-05-13 16872]
S3 ssadmdm;SAMSUNG Android USB Modem Drivers; C:\Windows\system32\DRIVERS\ssadmdm.sys [2011-05-13 177640]
S3 ssadserd;SAMSUNG Android USB Diagnostic Serial Port (WDM); C:\Windows\system32\DRIVERS\ssadserd.sys [2011-05-13 146920]
S3 t_mouse.sys;HID-compliand device; C:\Windows\system32\DRIVERS\t_mouse.sys [2012-12-19 6144]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerfltx64.sys []
S3 WinUsb;WinUsb; C:\Windows\system32\drivers\WinUsb.sys [2010-11-20 41984]
S3 X6va012;X6va012; \??\C:\Windows\SysWOW64\Drivers\X6va012 []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [2012-11-16 913184]
R2 ForceWare Intelligent Application Manager (IAM);ForceWare Intelligent Application Manager (IAM); C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe [2010-01-21 496232]
R2 nSvcIp;ForceWare IP service; C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe [2010-01-21 209000]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2015-02-05 935056]
R2 PMBDeviceInfoProvider;PMBDeviceInfoProvider; C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe [2011-08-24 430136]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2015-02-05 410952]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-08-18 2291568]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2014-04-11 103608]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2014-04-11 124088]
S2 globalUpdate;globalUpdate Update Service (globalUpdate); C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe [2015-08-18 68608]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-20 144200]
S2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2013-02-26 1260320]
S2 Web Assistant;Web Assistant; C:\Program Files\Web Assistant\ExtensionUpdaterService.exe []
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-09-25 269000]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2014-04-11 50864]
S3 fsssvc;Služba Bezpečnosť rodiny v službe Windows Live; C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2010-04-28 704872]
S3 globalUpdatem;globalUpdate Update Service (globalUpdatem); C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe [2015-08-18 68608]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-20 144200]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2015-08-15 114688]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2011-02-13 1255736]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]

-----------------EOF-----------------

Zdravim

Co jste tam provadel? Haveti je to pekne prolezle

Stahnete AdwCleaner https://toolslib.net/downloads/finish/1/ a ulozte ho na plochu.
Ukoncete vsechny programy, jinak to AdwCleaner udela za vas.
Kliknete na nej pravym mysidlem a levym na Spustit jako spravce.
Kliknete na Scan a pockejte, az kontrola dobehne.
Pak kliknete na Cleaning
Program zacne pracovat (muze dojit k restartu pc) a vyplivne log (pripadne bude zde C:\AdwCleaner\AdwCleaner[C?].txt ). Ten mi sem zkopirujte.

Idem na to, synovec a detska praca...

# AdwCleaner v5.008 - Logfile created 25/09/2015 at 18:41:37
# Updated 18/09/2015 by Xplode
# Database : 2015-09-23.1 [Server]
# Operating system : Windows 7 Home Premium Service Pack 1 (x64)
# Username : Monika - MAŤO-PC
# Running from : C:\Users\Monika\Desktop\adwcleaner_5.008.exe
# Option : Cleaning
# Support : http://toolslib.net/forum

***** [ Services ] *****

[-] Service Deleted : globalUpdate
[-] Service Deleted : globalUpdatem
[-] Service Deleted : Web Assistant

***** [ Folders ] *****

[-] Folder Deleted : C:\Program Files (x86)\Ask.com
[-] Folder Deleted : C:\Program Files (x86)\Conduit
[-] Folder Deleted : C:\Program Files (x86)\globalUpdate
[-] Folder Deleted : C:\Program Files (x86)\ICQ6Toolbar
[-] Folder Deleted : C:\Program Files (x86)\Perion
[-] Folder Deleted : C:\Program Files (x86)\SmartTweak
[-] Folder Deleted : C:\Program Files (x86)\Rising
[-] Folder Deleted : C:\ProgramData\DeviceVM
[-] Folder Deleted : C:\ProgramData\ICQ\ICQToolbar
[-] Folder Deleted : C:\ProgramData\optimizerpro1
[-] Folder Deleted : C:\ProgramData\Premium
[-] Folder Deleted : C:\ProgramData\Rising
[-] Folder Deleted : C:\ProgramData\6WinManPro6
[-] Folder Deleted : C:\Users\Monika\AppData\Local\Conduit
[-] Folder Deleted : C:\Users\Monika\AppData\Local\globalUpdate
[-] Folder Deleted : C:\Users\Monika\AppData\Local\Crossbrowse
[-] Folder Deleted : C:\Users\Monika\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn
[-] Folder Deleted : C:\Users\Monika\AppData\Local\Google\Chrome\User Data\Default\Extensions\jifflliplgeajjdhmkcfnngfpgbjonjg
[-] Folder Deleted : C:\Users\Monika\AppData\Local\Google\Chrome\User Data\Default\Extensions\kmabjcmofdemkaaekcmpocognlfonepb
[!] Folder Not Deleted : C:\Users\Monika\AppData\Local\Google\Chrome\User Data\Default\Extensions\kmabjcmofdemkaaekcmpocognlfonepb
[-] Folder Deleted : C:\Users\Monika\AppData\Local\Temp\AskSearch
[-] Folder Deleted : C:\Users\Monika\AppData\Local\Temp\mt_ffx
[-] Folder Deleted : C:\Users\Monika\AppData\LocalLow\AskToolbar
[-] Folder Deleted : C:\Users\Monika\AppData\LocalLow\Conduit
[-] Folder Deleted : C:\Users\Monika\AppData\Roaming\Desktopicon
[-] Folder Deleted : C:\Users\Monika\AppData\Roaming\DeviceVM
[-] Folder Deleted : C:\Users\Monika\AppData\Roaming\OpenCandy
[-] Folder Deleted : C:\Users\Monika\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SmartTweak Software
[-] Folder Deleted : C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\ConduitCommon
[-] Folder Deleted : C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\SweetPacksToolbarData
[-] Folder Deleted : C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\Extensions\{5E5AB302-7F65-44CD-8211-C1D4CAACCEA3}
[-] Folder Deleted : C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\Extensions\{EEE6C361-6118-11DC-9C72-001320C79847}
[-] Folder Deleted : C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\Extensions\ffxtlbr@incredibar.com
[-] Folder Deleted : C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\Extensions\toolbar@ask.com
[-] Folder Deleted : C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\Extensions\deskCutv2@gmail.com
[-] Folder Deleted : C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\Extensions\503b50b921eb3@503b50b921eeb.info
[-] Folder Deleted : C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\Extensions\506305a8cb633@506305a8cb66c.com
[-] Folder Deleted : C:\Windows\installer\{86d4b82a-abed-442a-be86-96357b70f4fe}

***** [ Files ] *****

[-] File Deleted : C:\Program Files (x86)\Mozilla Firefox\searchplugins\oursurfing.xml
[-] File Deleted : C:\Users\Monika\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_dlnembnfbcpjnepmfjmngjenhhajpdfd_0.localstorage
[-] File Deleted : C:\Users\Monika\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_dlnembnfbcpjnepmfjmngjenhhajpdfd_0.localstorage-journal
[-] File Deleted : C:\Users\Monika\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_fmfnfnpmhcllokmkepffndflpnadjmma_0.localstorage-journal
[-] File Deleted : C:\Users\Monika\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_kmabjcmofdemkaaekcmpocognlfonepb_0.localstorage
[-] File Deleted : C:\Users\Monika\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_kmabjcmofdemkaaekcmpocognlfonepb_0.localstorage-journal
[-] File Deleted : C:\Users\Monika\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_kmabjcmofdemkaaekcmpocognlfonepb_0.localstorage
[-] File Deleted : C:\Users\Monika\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_kmabjcmofdemkaaekcmpocognlfonepb_0.localstorage-journal
[-] File Deleted : C:\Users\Monika\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_pstatic.bestpriceninja.com_0.localstorage
[-] File Deleted : C:\Users\Monika\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_pstatic.bestpriceninja.com_0.localstorage-journal
[-] File Deleted : C:\Users\Monika\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_pstatic.bestpriceninja.com_0.localstorage
[-] File Deleted : C:\Users\Monika\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_pstatic.bestpriceninja.com_0.localstorage-journal
[-] File Deleted : C:\Users\Monika\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\eBay.lnk
[-] File Deleted : C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\searchplugins\Askcom.xml
[-] File Deleted : C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\searchplugins\Conduit.xml
[-] File Deleted : C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\searchplugins\MyStart Search.xml
[-] File Deleted : C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\searchplugins\SweetIm.xml
[-] File Deleted : C:\Users\Monika\Desktop\Search The Web.url

***** [ Shortcuts ] *****

[-] Shortcut Disinfected : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox\Mozilla Firefox (Núdzový režim).lnk
[-] Shortcut Disinfected : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox\Mozilla Firefox.lnk
[-] Shortcut Disinfected : C:\Users\Monika\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
[-] Shortcut Disinfected : C:\Users\Monika\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
[-] Shortcut Disinfected : C:\Users\Monika\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk

***** [ Scheduled tasks ] *****

[-] Task Deleted : globalUpdateUpdateTaskMachineCore
[-] Task Deleted : globalUpdateUpdateTaskMachineUA
[-] Task Deleted : Scheduled Update for Ask Toolbar
[-] Task Deleted : amiupdaterExd
[-] Task Deleted : amiupdaterExi
[-] Task Deleted : globalUpdateUpdateTaskMachineCore
[-] Task Deleted : globalUpdateUpdateTaskMachineUA

***** [ Registry ] *****

[-] Key Deleted : HKCU\Software\Classes\pokki
[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\ICQ\ICQToolBar
[-] Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Main [ICQ Search]
[-] Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [SpeedUpMyComputer]
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\escort.DLL
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\Extension.DLL
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\GenericAskToolbar.DLL
[-] Key Deleted : HKLM\SOFTWARE\Classes\Applications\ilividsetup.exe
[-] Key Deleted : HKLM\SOFTWARE\Classes\bhoclass.bho.bhoclass.bho
[-] Key Deleted : HKLM\SOFTWARE\Classes\bhoclass.bho.bhoclass.bho.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\escort.escortIEPane
[-] Key Deleted : HKLM\SOFTWARE\Classes\escort.escortIEPane.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\Extension.ExtensionHelperObject
[-] Key Deleted : HKLM\SOFTWARE\Classes\Extension.ExtensionHelperObject.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd
[-] Key Deleted : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.OneClickCtrl.10
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.Update3WebControl.4
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc
[-] Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc.1.0
[-] Key Deleted : HKLM\SOFTWARE\Classes\Incredibar.dskBnd
[-] Key Deleted : HKLM\SOFTWARE\Classes\Incredibar.dskBnd.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\Incredibar.IncredibarHlpr
[-] Key Deleted : HKLM\SOFTWARE\Classes\Incredibar.IncredibarHlpr.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\SWEETIE.IEToolbar
[-] Key Deleted : HKLM\SOFTWARE\Classes\SWEETIE.IEToolbar.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\sweetim_urlsearchhook.toolbarurlsearchhook
[-] Key Deleted : HKLM\SOFTWARE\Classes\sweetim_urlsearchhook.toolbarurlsearchhook.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar3.sweetie
[-] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar3.sweetie.1
[-] Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [ApnUpdater]
[-] Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=10
[-] Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=4
[-] Key Deleted : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WindowsMangerProtect
[-] Key Deleted : HKCU\Software\Mozilla\Extends
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\globalupdate.exe
[-] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT2304157
[-] Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{336D0C35-8A85-403a-B9D2-65C292C39087}]
[-] Value Deleted : [x64] HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{336D0C35-8A85-403a-B9D2-65C292C39087}]
[-] Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{FE1DEEEA-DB6D-44B8-83F0-34FC0F9D1052}]
[-] Value Deleted : [x64] HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{FE1DEEEA-DB6D-44B8-83F0-34FC0F9D1052}]
[-] Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [deskCutv2@gmail.com]
[-] Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [503b50b921eb3@503b50b921eeb.info]
[-] Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [506305a8cb633@506305a8cb66c.com]
[-] Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd
[-] Key Deleted : [x64] HKLM\SOFTWARE\Google\Chrome\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd
[-] Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn
[-] Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\jifflliplgeajjdhmkcfnngfpgbjonjg
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{608D3067-77E8-463D-9084-908966806826}
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{B302A1BD-0157-49FA-90F1-4E94F22C7B4B}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{336D0C35-8A85-403A-B9D2-65C292C39087}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3B5702BA-7F4C-4D1A-B026-1E9A01D43978}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{69F256DF-BA98-45E9-86EA-FC3CFECF9D30}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6E87FC94-9866-49B9-8E93-5736D6DE3DD7}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{7E49F793-B3CD-4BF7-8419-B34B8BD30E61}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{834469E3-CA2B-4F21-A5CA-4F6F4DBCDE87}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{8529FAA3-5BFD-43C1-AB35-B53C4B96C6E5}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{ADBC39BE-3D20-4333-8D99-E91EB1B62474}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CFC47BB5-5FB5-4AD0-8427-6AA04334A3FC}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E06CA7F5-BA34-4FF6-8D24-B1BDC594D91F}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E0ADB535-D7B5-4D8B-B15D-578BDD20D76A}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{ED0E67AD-926C-4008-87E5-03CF72AA2A7E}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{EEE6C35B-6118-11DC-9C72-001320C79847}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{EEE6C35C-6118-11DC-9C72-001320C79847}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{EEE6C35D-6118-11DC-9C72-001320C79847}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F6421EE5-A5BE-4D31-81D5-C16B7BF48E4C}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F9639E4A-801B-4843-AEE3-03D9DA199E77}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FD8E81D0-F5FE-4CB1-9AEA-1E163D2BAB78}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6EDBF8C0-C94C-4A13-956F-E393BCA5BA4B}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A36867C6-302D-49FC-9D8E-1EB037B5F1AB}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{BBA74401-6D6F-4BBD-9F65-E8623814F3BB}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D2F39980-399F-492E-8D88-5FF7CCB3B47F}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{EEE6C358-6118-11DC-9C72-001320C79847}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{EEE6C359-6118-11DC-9C72-001320C79847}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{EEE6C35A-6118-11DC-9C72-001320C79847}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{1D5A4199-956E-49BC-B89F-6A35C57C0D13}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{C2CF0D01-7657-48AA-98C9-AE5E64757FCC}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{EEE6C35E-6118-11DC-9C72-001320C79847}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{EEE6C35F-6118-11DC-9C72-001320C79847}
[!] Key Not Deleted : HKLM\SOFTWARE\Classes\TypeLib\{C2CF0D01-7657-48AA-98C9-AE5E64757FCC}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{336D0C35-8A85-403A-B9D2-65C292C39087}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35B-6118-11DC-9C72-001320C79847}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35C-6118-11DC-9C72-001320C79847}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F9639E4A-801B-4843-AEE3-03D9DA199E77}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{336D0C35-8A85-403A-B9D2-65C292C39087}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35B-6118-11DC-9C72-001320C79847}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35C-6118-11DC-9C72-001320C79847}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{F9639E4A-801B-4843-AEE3-03D9DA199E77}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EEE6C367-6118-11DC-9C72-001320C79847}
[-] Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{D4027C7F-154A-4066-A1AD-4243D8127440}]
[-] Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{21FA44EF-376D-4D53-9B0F-8A89D3229068}]
[-] Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{00000000-6E41-4FD3-8538-502F5495E5FC}]
[-] Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{855F3B16-6D32-4FE6-8A56-BBB695989046}]
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{336D0C35-8A85-403A-B9D2-65C292C39087}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{22B0769F-794B-4422-AC84-47B123C8986D}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{255E0B2A-D747-4EEF-B7CE-159D73A3656D}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{28ED590D-F5ED-4E05-A87F-1D759F1C6169}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{45D5B93F-E2ED-4AF2-915E-DCDDBDA8C33C}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{771B99AB-636F-4A11-9039-8DFEB927B061}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{A36867C6-302D-49FC-9D8E-1EB037B5F1AB}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{A8321AA2-2227-40C7-8525-6C2F4E1B0EBE}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{AA41A731-6814-4A70-A6F1-C0A20FBBFBD5}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{ABBB8A9E-D8AF-40D1-94BE-5175077465FC}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{BBA74401-6D6F-4BBD-9F65-E8623814F3BB}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{BF737694-56F6-46FA-9FDC-FA99A5B25FAD}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{CFCD164E-8AC9-478E-9ECC-B616A932016C}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{D2F39980-399F-492E-8D88-5FF7CCB3B47F}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{D5961CC0-B442-4567-8030-67E241EF4CC2}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{E450067F-1C93-41A7-928E-07E5C2EEC680}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{EEE6C358-6118-11DC-9C72-001320C79847}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{EEE6C359-6118-11DC-9C72-001320C79847}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{EEE6C35A-6118-11DC-9C72-001320C79847}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{F977D9F2-4BDC-44A6-B508-7C0284C61EED}
[-] Key Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}
[-] Key Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
[-] Key Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{CFF4DB9B-135F-47C0-9269-B4C6572FD61A}
[-] Key Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
[-] Key Deleted : HKU\.DEFAULT\Software\IM
[-] Key Deleted : HKU\.DEFAULT\Software\ImInstaller
[-] Key Deleted : HKU\.DEFAULT\Software\SweetIM
[-] Key Deleted : HKU\.DEFAULT\Software\WNLT
[-] Key Deleted : HKU\.DEFAULT\Software\AppDataLow\Software\_CrossriderRegNamePlaceHolder_
[-] Key Deleted : HKCU\Software\APN
[-] Key Deleted : HKCU\Software\Ask.com
[-] Key Deleted : HKCU\Software\GlobalUpdate
[-] Key Deleted : HKCU\Software\IM
[-] Key Deleted : HKCU\Software\ImInstaller
[-] Key Deleted : HKCU\Software\smarttweak
[-] Key Deleted : HKCU\Software\Softonic
[-] Key Deleted : HKCU\Software\SweetIM
[-] Key Deleted : HKCU\Software\Crossbrowse
[-] Key Deleted : HKCU\Software\YorkNewCin
[-] Key Deleted : HKCU\Software\HighDefAction
[-] Key Deleted : HKCU\Software\ArenaHD
[-] Key Deleted : HKCU\Software\AppDataLow\Software\AskToolbar
[-] Key Deleted : HKCU\Software\AppDataLow\Software\Conduit
[-] Key Deleted : HKCU\Software\AppDataLow\Software\ConduitSearchScopes
[-] Key Deleted : HKCU\Software\AppDataLow\Software\Crossrider
[-] Key Deleted : HKLM\SOFTWARE\AppDataLow\SOFTWARE\Crossrider
[-] Key Deleted : HKLM\SOFTWARE\AppDataLow\SOFTWARE\_CrossriderRegNamePlaceHolder_
[-] Key Deleted : HKLM\SOFTWARE\APN
[-] Key Deleted : HKLM\SOFTWARE\AskToolbar
[-] Key Deleted : HKLM\SOFTWARE\Conduit
[-] Key Deleted : HKLM\SOFTWARE\GlobalUpdate
[-] Key Deleted : HKLM\SOFTWARE\ICQ\ICQToolbar
[-] Key Deleted : HKLM\SOFTWARE\supWindowsMangerProtect
[-] Key Deleted : HKLM\SOFTWARE\SweetIM
[-] Key Deleted : HKLM\SOFTWARE\Web Assistant
[-] Key Deleted : HKLM\SOFTWARE\Crossbrowse
[-] Key Deleted : HKLM\SOFTWARE\YorkNewCin
[-] Key Deleted : HKLM\SOFTWARE\HighDefAction
[-] Key Deleted : HKLM\SOFTWARE\oursurfingSoftware
[-] Key Deleted : HKLM\SOFTWARE\ArenaHD
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
[!] Key Not Deleted : [x64] HKCU\Software\APN
[!] Key Not Deleted : [x64] HKCU\Software\Ask.com
[!] Key Not Deleted : [x64] HKCU\Software\GlobalUpdate
[!] Key Not Deleted : [x64] HKCU\Software\IM
[!] Key Not Deleted : [x64] HKCU\Software\ImInstaller
[!] Key Not Deleted : [x64] HKCU\Software\smarttweak
[!] Key Not Deleted : [x64] HKCU\Software\Softonic
[!] Key Not Deleted : [x64] HKCU\Software\SweetIM
[!] Key Not Deleted : [x64] HKCU\Software\Crossbrowse
[!] Key Not Deleted : [x64] HKCU\Software\YorkNewCin
[!] Key Not Deleted : [x64] HKCU\Software\HighDefAction
[!] Key Not Deleted : [x64] HKCU\Software\ArenaHD
[-] Key Deleted : [x64] HKLM\SOFTWARE\Web Assistant
[-] Key Deleted : [x64] HKLM\SOFTWARE\YorkNewCin
[-] Key Deleted : [x64] HKLM\SOFTWARE\HighDefAction
[-] Key Deleted : [x64] HKLM\SOFTWARE\ArenaHD
[!] Key Not Deleted : HKU\.DEFAULT\Software\AppDataLow\Software\_CrossriderRegNamePlaceHolder_
[!] Key Not Deleted : HKU\S-1-5-21-1888807756-2181008117-2529089694-1002\Software\AppDataLow\Software\AskToolbar
[!] Key Not Deleted : HKU\S-1-5-21-1888807756-2181008117-2529089694-1002\Software\AppDataLow\Software\Conduit
[!] Key Not Deleted : HKU\S-1-5-21-1888807756-2181008117-2529089694-1002\Software\AppDataLow\Software\ConduitSearchScopes
[!] Key Not Deleted : HKU\S-1-5-21-1888807756-2181008117-2529089694-1002\Software\AppDataLow\Software\Crossrider
[!] Key Not Deleted : HKU\S-1-5-18\Software\AppDataLow\Software\_CrossriderRegNamePlaceHolder_
[-] Key Deleted : HKLM\SOFTWARE\Classes\Installer\Features\A28B4D68DEBAA244EB686953B7074FEF
[-] Key Deleted : HKLM\SOFTWARE\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF
[-] Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0CFE535C35F99574E8340BFA75BF92C2
[-] Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0E12F736682067FDE4D1158D5940A82E
[-] Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1A24B5BB8521B03E0C8D908F5ABC0AE6
[-] Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\261F213D1F55267499B1F87D0CC3BCF7
[-] Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2B0D56C4F4C46D844A57FFED6F0D2852
[-] Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\49D4375FE41653242AEA4C969E4E65E0
[-] Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6AA0923513360135B272E8289C5F13FA
[-] Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6F7467AF8F29C134CBBAB394ECCFDE96
[-] Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\741B4ADF27276464790022C965AB6DA8
[-] Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7DE196B10195F5647A2B21B761F3DE01
[-] Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\922525DCC5199162F8935747CA3D8E59
[-] Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9D4F5849367142E4685ED8C25E44C5ED
[-] Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A5875B04372C19545BEB90D4D606C472
[-] Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A876D9E80B896EC44A8620248CC79296
[-] Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B66FFAB725B92594C986DE826A867888
[-] Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BCDA179D619B91648538E3394CAC94CC
[-] Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D677B1A9671D4D4004F6F2A4469E86EA
[-] Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DD1402A9DD4215A43ABDE169A41AFA0E
[-] Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E36E114A0EAD2AD46B381D23AD69CDDF
[-] Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EF8E618DB3AEDFBB384561B5C548F65E
[-] Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\120DFADEB50841F408F04D2A278F9509
[-] Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF
[-] Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\F928123A039649549966D4C29D35B1C9
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\GLOBALUPDATE.EXE
[-] Data Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]
[!] Data Not Restored : HKCU\Software\Microsoft\Internet Explorer\Main [ICQ Search]
[-] Data Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL]
[-] Data Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
[-] Data Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
[-] Data Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
[-] Data Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
[-] Data Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
[-] Data Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
[-] Data Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
[-] Data Restored : HKU\S-1-5-21-1888807756-2181008117-2529089694-1002\Software\Microsoft\Internet Explorer\Main [Start Page]
[!] Data Not Restored : HKU\S-1-5-21-1888807756-2181008117-2529089694-1002\Software\Microsoft\Internet Explorer\Main [ICQ Search]
[-] Data Restored : HKU\S-1-5-21-1888807756-2181008117-2529089694-1002\Software\Microsoft\Internet Explorer\Main [Default_Page_URL]
[!] Key Not Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}
[!] Key Not Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{B111FD80-AB79-4356-8A03-F225FC82E996}
[!] Key Not Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A}
[!] Key Not Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
[-] Data Restored : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [DefaultScope]
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
[!] Key Not Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}
[!] Key Not Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
[!] Key Not Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{B111FD80-AB79-4356-8A03-F225FC82E996}
[!] Key Not Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A}
[!] Key Not Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
[-] Data Restored : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes [DefaultScope]
[!] Key Not Deleted : HKU\S-1-5-21-1888807756-2181008117-2529089694-1002\Software\Microsoft\Internet Explorer\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}
[!] Key Not Deleted : HKU\S-1-5-21-1888807756-2181008117-2529089694-1002\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
[!] Key Not Deleted : HKU\S-1-5-21-1888807756-2181008117-2529089694-1002\Software\Microsoft\Internet Explorer\SearchScopes\{B111FD80-AB79-4356-8A03-F225FC82E996}
[!] Key Not Deleted : HKU\S-1-5-21-1888807756-2181008117-2529089694-1002\Software\Microsoft\Internet Explorer\SearchScopes\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A}
[!] Key Not Deleted : HKU\S-1-5-21-1888807756-2181008117-2529089694-1002\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
[-] Data Restored : HKU\S-1-5-21-1888807756-2181008117-2529089694-1002\Software\Microsoft\Internet Explorer\SearchScopes [DefaultScope]
[-] Data Restored : HKLM\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command []
[-] Data Restored : HKLM\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command []

***** [ Web browsers ] *****

[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157..clientLogIsEnabled", false);
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/default.aspx");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.AppTrackingLastCheckTime", "Sat Sep 29 2012 16:45:39 GMT+0200");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.BrowserCompStateIsOpen_130074581282195192", true);
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.CT2304157", "CT2304157");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.CurrentServerDate", "11-5-2014");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.DSChangedManually", false);
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.DSInstall", true);
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.DSProtectChoice", true);
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.DSProtectCount", 1);
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.DialogsAlignMode", "LTR");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.DialogsGetterLastCheckTime", "Sun May 11 2014 15:43:16 GMT+0200");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.DownloadReferralCookieData", "");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.FeedLastCount129078895246717929", 50);
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.FeedLastCount129095439763593837", 0);
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.FeedPollDate129078895250311712", "Wed Dec 25 2013 19:34:09 GMT+0100");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.FeedPollDate129095439763593837", "Wed Dec 25 2013 19:34:09 GMT+0100");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.FeedPollDate129604942912022444", "Wed Dec 25 2013 19:34:09 GMT+0100");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.FeedTTL129078895250311712", 40);
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.FirstServerDate", "12-1-2012");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.FirstTime", true);
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.FirstTimeFF3", true);
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.FixPageNotFoundErrors", true);
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.GroupingServerCheckInterval", 1440);
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.HPChangedManually", true);
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.HPInstall", true);
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.HPProtectChoice", true);
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.HPProtectCount", 1);
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.HasUserGlobalKeys", true);
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.HomePageProtectorEnabled", false);
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.HomepageBeforeUnload", "hxxp://search.conduit.com/?ctid=CT2304157&SearchSource=13");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.Initialize", true);
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.InitializeCommonPrefs", true);
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.InstallationAndCookieDataSentCount", 3);
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.InstallationType", "Unknown");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.InstalledDate", "Thu Jan 12 2012 19:38:58 GMT+0100");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.IsAlertDBUpdated", true);
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.IsGrouping", false);
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.IsInitSetupIni", true);
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.IsMulticommunity", false);
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.IsOpenThankYouPage", true);
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.IsOpenUninstallPage", true);
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.IsProtectorsInit", true);
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.LanguagePackLastCheckTime", "Sun May 11 2014 15:43:15 GMT+0200");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.LanguagePackReloadIntervalMM", 1440);
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.LastLogin_3.8.1.0", "Sun May 11 2014 19:45:02 GMT+0200");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.LatestVersion", "3.20.0.4");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.Locale", "en");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.MCDetectTooltipHeight", "83");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.MCDetectTooltipWidth", "295");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.MyStuffEnabledAtInstallation", true);
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.OriginalFirstVersion", "3.8.1.0");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.SavedHomepage", "hxxp://www.facebook.com/");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.SearchCaption", "XfireXO Customized Web Search");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.SearchEngineBeforeUnload", "XfireXO Customized Web Search");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.SearchFromAddressBarIsInit", true);
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2304157&SearchSource=2&q=");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.SearchInNewTabEnabled", true);
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.SearchInNewTabIntervalMM", 1440);
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.SearchInNewTabLastCheckTime", "Sun May 11 2014 15:43:15 GMT+0200");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID&UM=UM_ID");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.SearchInNewTabUsageUrl", "hxxp://usage.hosting.toolbar.conduit-services.com/usage.ashx?ctid=EB_TOOLBAR_ID");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.SearchProtectorEnabled", false);
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.SearchProtectorToolbarDisabled", false);
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.SendProtectorDataViaLogin", true);
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.ServiceMapLastCheckTime", "Sun May 11 2014 15:43:14 GMT+0200");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.SettingsLastCheckTime", "Sun May 11 2014 15:43:14 GMT+0200");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.SettingsLastUpdate", "1398851260");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.TBHomePageUrl", "hxxp://search.conduit.com/?ctid=CT2304157&SearchSource=13");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.ThirdPartyComponentsInterval", 504);
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.ThirdPartyComponentsLastCheck", "Sun May 11 2014 15:43:14 GMT+0200");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.ThirdPartyComponentsLastUpdate", "1331805997");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.ToolbarShrinkedFromSetup", false);
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2304157");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,client.conduit-storage.com,codefuel.com,tbccint.com,trovi.com,seccint.com,cpccint.com,appstrm.com,OurTool[...]
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.UserID", "UN60490869497832279");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.alertChannelId", "700614");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.backendstorage./9b+7e+x305", "2423");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.backendstorage./9b+7e,x305", "2423");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.backendstorage./9b+7e-x305", "2423");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.backendstorage./9b+7e.:2z527", "2423");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.backendstorage./9b+7e.x305", "2423");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.backendstorage./9b+7e/x305", "2423");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.backendstorage./9b+7e06cg5el8:", "6E6D696B6A6B6F727077");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.backendstorage./9b+7e06cg5el;8i:k", "247E2D2F226A74736F7170717578767D242F4B49474F42357D5D5C3D");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.backendstorage./9b+7e0x305", "2423");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.backendstorage./9b+7e1x305", "2423");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.backendstorage./9b+7e2x305", "2423");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.backendstorage./9b+7e3x305", "2423");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.backendstorage./9b+7e4x305", "2423");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.backendstorage./9b+7e5x305", "2423");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.backendstorage./9b+7e6x305", "2423");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.backendstorage./9b+7e7x305", "2423");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.backendstorage./9b+7e8x305", "2423");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.backendstorage./9b+7e9x305", "2423");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.backendstorage./9b+7e:x305", "2423");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.backendstorage./9b+7e;x305", "2423");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.backendstorage./9b+7e<x305", "2423");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.backendstorage./9b+7e=x305", "2423");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.backendstorage./9b+7e>x305", "2423");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.backendstorage./9b+7e?x305", "2423");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.backendstorage./9b+7e@x305", "2423");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.backendstorage./9b+7eax305", "2423");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.backendstorage./9b+7ebe3g=;d9n9=d", "372C2D326975762E3A3C7B3A39434A494841434B265146492965504656496571734D337D56545138505C");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.backendstorage./9b+7ebx305", "2423");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.backendstorage./9b+7ecx305", "2423");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.backendstorage./9b+7edx305", "2423");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.backendstorage./9b+7etx305", "2423");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.backendstorage./9b-0?3g>d", "39673B4172746F457A45714472207A76497B25797A7E252A7E2755545A2C2629295E2D2F");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.backendstorage./9b-0?3g@6:5;", "");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.backendstorage./9b-3=3eccja=f>", "247E333D2C452F4135276F297B7E7D21202F26313E4249357D37382F3A494D5D513F283338435D6554695B65546D57695D5D686365533C70766C66755E");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.backendstorage./9b/>01=9a6k6<im;krie@pdawm", "6E6A68707374757677");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.backendstorage./9b3=>@44i48?", "372C2D3269757633423633414847203E3D474E4D4C45474F2A554A4D2D5858585E4B554E366352564F");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.backendstorage./9b5ba==9cjag", "3E68707070416C707A7773797A467D4D207D507E20");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.backendstorage./9b6b11g4c56b>f;p;anr@p", "6E6D696B6A6B6F727170737376");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.backendstorage./9b9643g3/9e", "6A");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.backendstorage./9b;45>:bi9i7ie", "2B2E2C3D");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.backendstorage./9b<:222h64<", "393F352F3E");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.backendstorage./9b<:222h64<l8daj", "6D70706F7673737975732A7973727A7A757D22");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.backendstorage./9b=+03eh8h8j?:", "4443");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.backendstorage./9b?+e2a52d8", "372C2D326975762E3A3C7B3A39434A494841434B2651464929655046566470727951555E5E52");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.backendstorage./9b?b0d:8aj62<h", "6D");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.backendstorage./9ba@0<0bi6a7gn:6@l?", "6C");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.backendstorage.2304157a129604967990223179000000paramsgk2", "7B2275706461746552657154696D65223A313338373939363436343734332C227570646174655265737054696D65223A31333837393936343635383[...]
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.backendstorage.pg_enable", "74727565");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.conduit.com;apps.conduit.com;services.apps.conduit.com\",\"AppsDetectionUrlPattern\":\"hxxp://appdown[...]
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.globalFirstTimeInfoLastCheckTime", "Sun May 11 2014 15:43:16 GMT+0200");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.homepageProtectorEnableByLogin", true);
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.initDone", true);
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.isAppTrackingManagerOn", false);
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.myStuffEnabled", true);
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.myStuffPublihserMinWidth", 400);
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.myStuffSearchUrl", "hxxp://appstrm.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.myStuffServiceIntervalMM", 1440);
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUFF_LUT");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.oldAppsList", "128883653123969059,128883653123969060,111,128883659132094175,129605088190464378,129604976926455284,129604961880467453,129604111228560478,129605074722423533,12909543[...]
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.revertSettingsEnabled", true);
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.searchProtectorDialogDelayInSec", 10);
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.searchProtectorEnableByLogin", true);
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.testingCtid", "");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.toolbarAppMetaDataLastCheckTime", "Sun May 11 2014 15:43:15 GMT+0200");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.toolbarContextMenuLastCheckTime", "Sun May 11 2014 15:43:15 GMT+0200");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CT2304157.usagesFlag", 1);
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.ConduitHomepagesList", "hxxp://search.conduit.com/?ctid=CT2304157&SearchSource=13");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.ConduitSearchList", "XfireXO Customized Web Search");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit.com/root/CT2304157/CT2304157", "\"a73c469122f55b94f97107158bffae3e3\"");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/700614/696475/SK", "\"3069c813b6ca72adf34c731c310fc991\"");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2304157", "\"1396366943\"");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&locale=en", "eSzELtoCN6VQCYiv1tPI+g==");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&locale=en&ctid=CT2304157", "SA8f/YRfs6V19wkAK/I6CA==");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&locale=en", "HYogGBUvv90IWu2NxeLYvA==");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&locale=en&ctid=CT2304157", "B6IX5R5ADEz7jZ1dTY4lpQ==");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&locale=en", "aXc5Vsxqu/hbyzW/5Q4N6w==");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&locale=en&ctid=CT2304157", "8Pf+ZNlIALQFEm53aS9FRw==");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&locale=en", "9tP0a9tLQ7LYpUSrjHx9xA==");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&locale=en&ctid=CT2304157&UM=UM_UNINSTALL_ID", "Eqyi+rnB/8DP7DHXRtMrLg==");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\"c70353cabc2ce1:0\"");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.8.1.0", "\"dfe74040abc2ce1:0\"");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2304157", "\"7097fd37277b6a1b754b125bd11d0197\"");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=en", "\"ca42534684e848da75347a6640ab1cb5\"");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/21817319.xml", "\"541ba163645a61eaba88312028684d35\"");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.LatestLibsPath", "file:///C:\\Users\\Monika\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\jnbcia4p.default\\conduitCommon\\modules\\3.8.1.0");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.LatestToolbarVersionInstalled", "3.8.1.0");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "chrome://browser-region/locale/region.properties");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.ToolbarsList", "CT2304157");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.ToolbarsList2", "CT2304157");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.ToolbarsList4", "CT2304157");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.globalUserId", "df132ce9-c59f-4687-a271-1ba0d65e87c3");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true);
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true);
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.keywordURLSelectedCTID", "CT2304157");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.notifications.alertDialogsGetterLastCheckTime", "Sun May 11 2014 15:43:17 GMT+0200");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.notifications.alertEnabled", true);
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.notifications.alertInfoInterval", 1440);
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.notifications.alertInfoLastCheckTime", "Sun May 11 2014 15:43:24 GMT+0200");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.notifications.clientsServerUrl", "hxxp://alert.client.conduit.com");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.notifications.locale", "en");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.notifications.loginIntervalMin", 1440);
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.notifications.loginLastCheckTime", "Sun May 11 2014 15:43:15 GMT+0200");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.notifications.loginLastUpdateTime", "1313487611");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.notifications.messageShowTimeSec", 20);
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.notifications.servicesServerUrl", "hxxp://alert.services.conduit.com");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.notifications.showTrayIcon", false);
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.notifications.userCloseIntervalMin", 300);
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.notifications.userId", "55281e95-10b4-4c81-bdb2-ca52b2d181cb");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.originalHomepage", "hxxp://www.facebook.com/");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.originalSearchEngine", "Atlas");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.twitter.user_21817319.LastCheckTime", "Wed Dec 25 2013 19:34:17 GMT+0100");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("browser.newtab.url", "hxxp://mystart.incredibar.com/?a=6R905I3VPN&i=26&did=10963&loc=skw");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("browser.search.defaultengine", "Ask.com");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("browser.search.defaultenginename", "oursurfing");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("browser.search.defaultthis.engineName", "XfireXO Customized Web Search");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("browser.search.order.1", "Ask.com");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("browser.search.selectedEngine", "oursurfing");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("browser.startup.homepage", "hxxp://mystart.incredibar.com/?a=6R905I3VPN&i=26&did=10963&loc=skw");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("extensions.503b50b921f5e.scode", "(function(){try{if('aol.com,mail.google.com,mystart.incredibar.com,premiumreports.info,search.babylon.com,search.funmoods.com,search.gboxapp.com,search.swe[...]
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("extensions.506305a8cb6df.scode", "(function(){try{if('aol.com,mail.google.com,mystart.incredibar.com,premiumreports.info,search.babylon.com,search.funmoods.com,search.gboxapp.com,search.swe[...]
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("extensions.asktb.InstallDir", "C:\\Program Files (x86)\\Ask.com\\");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("extensions.asktb.abar-war-timeout", "4000");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("extensions.asktb.cbid", "8R");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("extensions.asktb.config-updated", false);
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("extensions.asktb.crumb", "2012.05.09+13.15.35-toolbar008iad-SK-QnJhdGlzbGF2YSxTbG92YWtpYQ%3D%3D");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("extensions.asktb.default-channel-url-mask", "hxxp://eu.ask.com/web?qsrc={qsrc}&o={o}&l={l}&q={query}&dm=all");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("extensions.asktb.dtid", "YYYYYYYYSK");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("extensions.asktb.ff-original-keyword-url", "hxxp://mystart.incredibar.com/mb139/?loc=IB_DS&a=6PQHON7W4E&&i=26&search=");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("extensions.asktb.guid", "59FFF5F0-D6F7-4390-BD01-532C3CB41C16");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("extensions.asktb.hxxp-header-whitelist-hosts", "[\"static-dev.en.dev.ask.com\", \"ask.com\", \"www.facebook.com\", \"www.playsushi.com\", \"WWW.google.com\", \"hxxps://websearch.ask.com\", [...]
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("extensions.asktb.if", "first");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("extensions.asktb.l", "dis");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("extensions.asktb.last-config-req", "1348929923288");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("extensions.asktb.last-v", "3.11.3.100013");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("extensions.asktb.locale", "en_EU");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("extensions.asktb.location", "Bratislava,Slovakia");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("extensions.asktb.new-tab-enabled", true);
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("extensions.asktb.o", "41647960");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("extensions.asktb.qsrc", "2871");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("extensions.asktb.sa", "YES");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("extensions.asktb.saguid", "01982F5C-6677-4535-A37E-EFDBE73A8997");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("extensions.asktb.search-suggestions-enabled", true);
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("extensions.asktb.silent-upgrade-from-pre-newtabs-build", false);
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("extensions.asktb.themeid", "");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("extensions.asktb.to", "");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("extensions.enabledItems", "503b50b921eb3@503b50b921eeb.info:1.0,506305a8cb633@506305a8cb66c.com:3.2,{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}:5.5.0.8013,ffxtlbr@incredibar.com:1.5.0,{EEE6C361-[...]
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("extensions.incredibar.admin", false);
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("extensions.incredibar.aflt", "orgnl");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("extensions.incredibar.cntry", "SK");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("extensions.incredibar.dfltLng", "");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("extensions.incredibar.dfltSrch", false);
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("extensions.incredibar.did", "10650");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("extensions.incredibar.envrmnt", "production");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("extensions.incredibar.excTlbr", false);
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("extensions.incredibar.hdrMd5", "F1FDAB8B540033D0A60A03D161390522");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("extensions.incredibar.hmpg", false);
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("extensions.incredibar.id", "dcfc9d7800000000000020cf30db4d63");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("extensions.incredibar.installerproductid", "26");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("extensions.incredibar.instlDay", "15579");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("extensions.incredibar.instlRef", "");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("extensions.incredibar.lastVrsnTs", "1.5.11.1412:53:37");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("extensions.incredibar.mntrvrsn", "1.2.0");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("extensions.incredibar.newTab", false);
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("extensions.incredibar.noFFXTlbr", false);
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("extensions.incredibar.ppd", "201%5F5");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("extensions.incredibar.prdct", "incredibar");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("extensions.incredibar.productid", "26");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("extensions.incredibar.prtnrId", "Incredibar");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("extensions.incredibar.sg", "none");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("extensions.incredibar.smplGrp", "none");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("extensions.incredibar.tlbrId", "base");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("extensions.incredibar.tlbrSrchUrl", "hxxp://mystart.Incredibar.com/?a=6PQHON7W4E&loc=IB_TB&i=26&search=");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("extensions.incredibar.upn2", "6PQHON7W4E");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("extensions.incredibar.upn2n", "92543477564637536");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("extensions.incredibar.vrsn", "1.5.11.14");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("extensions.incredibar.vrsnTs", "1.5.11.1412:53:37");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("extensions.incredibar.vrsni", "1.5.11.14");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("extensions.incredibar_i.aflt", "orgnl");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("extensions.incredibar_i.dfltLng", "");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("extensions.incredibar_i.did", "10650");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("extensions.incredibar_i.excTlbr", false);
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("extensions.incredibar_i.id", "dcfc9d7800000000000020cf30db4d63");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("extensions.incredibar_i.installerproductid", "26");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("extensions.incredibar_i.instlDay", "15579");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("extensions.incredibar_i.instlRef", "");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("extensions.incredibar_i.ms_url_id", "");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("extensions.incredibar_i.newTab", false);
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("extensions.incredibar_i.ppd", "201%5F5");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("extensions.incredibar_i.prdct", "incredibar");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("extensions.incredibar_i.productid", "26");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("extensions.incredibar_i.prtnrId", "Incredibar");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("extensions.incredibar_i.smplGrp", "none");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("extensions.incredibar_i.tlbrId", "base");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("extensions.incredibar_i.tlbrSrchUrl", "hxxp://mystart.Incredibar.com/?a=6PQHON7W4E&loc=IB_TB&i=26&search=");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("extensions.incredibar_i.upn2", "6PQHON7W4E");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("extensions.incredibar_i.upn2n", "92543477564637536");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("extensions.incredibar_i.vrsn", "1.5.11.14");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("extensions.incredibar_i.vrsnTs", "1.5.11.1412:53:37");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("extensions.incredibar_i.vrsni", "1.5.11.14");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("sweetim.toolbar.dialogs.0.url", "hxxp://www.sweetim.com/simffbar/options_remote_ff_1_6.html");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("sweetim.toolbar.dialogs.2.url", "hxxp://www.sweetim.com/simffbar/simcdadialog.asp");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("sweetim.toolbar.dnscatch.domain-blacklist", ".*.sweetim.com/.*.*.facebook.com/.*.*.google.com/.*.*.google.co.in/.*.*.google.com.br/.*.*.google.es/.*.*.youtube.com/.*.*.yahoo.com/.*.[...]
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("sweetim.toolbar.previous.browser.search.defaultenginename", "Ask.com");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("sweetim.toolbar.previous.browser.search.selectedEngine", "XfireXO Customized Web Search");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("sweetim.toolbar.previous.browser.startup.homepage", "hxxp://search.conduit.com/?ctid=CT2304157&SearchSource=13");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("sweetim.toolbar.previous.keyword.URL", "hxxp://search.sweetim.com/search.asp?src=2&q=");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("sweetim.toolbar.scripts.0.url", "hxxp://sc.sweetim.com/apps/in/fb/infb.js");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("sweetim.toolbar.scripts.1.domain-blacklist", ".*.google..*.*.bing..*.*.live..*.*.msn..*.*.yahoo..*.*.youtube.com.*.*ask.com.*.*.sweetim.com.*");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("sweetim.toolbar.scripts.2.url", "hxxps://sc.sweetim.com/apps/in/fb/infb.js");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("sweetim.toolbar.urls.homepage", "hxxp://home.sweetim.com/?st=6&barid={B41B7CB0-993B-11E1-BCE8-20CF30DB4D63}");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("{336D0C35-8A85-403a-B9D2-65C292C39087}.ScriptData_WSG_referrer", "hxxp://home.sweetim.com/?st=6&barid={B41B7CB0-993B-11E1-BCE8-20CF30DB4D63}/8641354894215953");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("{336D0C35-8A85-403a-B9D2-65C292C39087}.ScriptData_WSG_temp_referer", "hxxp://home.sweetim.com/?st=6&barid={B41B7CB0-993B-11E1-BCE8-20CF30DB4D63}/#old_value8641354894215953");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("{336D0C35-8A85-403a-B9D2-65C292C39087}.ScriptData_WSG_whiteList", "{\"search.babylon.com\":\"q\",\"search.sweetim.com\":\"q\",\"search.imesh.net\":\"q\",\"www.search-results.com\":\"q\",\"h[...]
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("{FE1DEEEA-DB6D-44b8-83F0-34FC0F9D1052}.ScriptData_WSG_referrer", "hxxp://home.sweetim.com/?st=6&barid={B41B7CB0-993B-11E1-BCE8-20CF30DB4D63}/8641362253318786");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("{FE1DEEEA-DB6D-44b8-83F0-34FC0F9D1052}.ScriptData_WSG_temp_referer", "hxxp://home.sweetim.com/?st=6&barid={B41B7CB0-993B-11E1-BCE8-20CF30DB4D63}/#old_value8641363891218675");
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("{FE1DEEEA-DB6D-44b8-83F0-34FC0F9D1052}.ScriptData_WSG_whiteList", "{\"search.babylon.com\":\"q\",\"search.sweetim.com\":\"q\",\"search.imesh.net\":\"q\",\"www.search-results.com\":\"q\",\"h[...]
[-] [C:\Users\Monika\AppData\Roaming\Mozilla\Firefox\Profiles\jnbcia4p.default\prefs.js] [Preference] Deleted : user_pref("keyword.URL", "hxxp://mystart.incredibar.com/?a=6R905I3VPN&i=26&did=10963&loc=skw&search=");
[-] [C:\Users\Monika\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : mystart.incredibar.com/mb139
[-] [C:\Users\Monika\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : search.sweetim.com
[-] [C:\Users\Monika\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : virtual-dj-free-home-edition.softonic.de
[-] [C:\Users\Monika\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : virtualdj.en.softonic.com
[-] [C:\Users\Monika\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : oursurfing
[-] [C:\Users\Monika\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Default_Search_Provider] Deleted : hxxp://www.oursurfing.com/webfavicon.ico
[-] [C:\Users\Monika\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Deleted : jcdgjdiieiljkfkdcloehkohchhpekkn
[-] [C:\Users\Monika\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Deleted : jifflliplgeajjdhmkcfnngfpgbjonjg
[-] [C:\Users\Monika\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Deleted : kmabjcmofdemkaaekcmpocognlfonepb
[-] [C:\Users\Monika\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Deleted : kmabjcmofdemkaaekcmpocognlfonepb
[-] [C:\Users\Monika\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Homepage] Deleted : hxxp://www.oursurfing.com/?type=hp&ts=14398855 ... 9_DCFC9D78

*************************

:: Winsock settings cleared

########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [93277 bytes] ##########

Fajn. Jeste jedna dulezita vec. Posledni dve kontroly jste nedokoncil. Pokud se to bude opakovat, budou dalsi pripadne zadosti o pomoc ignorovany. Je to pak zbytecna ztrata casu a takova spoluprace nas pak opravdu nebavi



Udelejte kontrolu s MBAM. Test nastavte podle tohoto navodu (cili Vlastni sken vsech disku) http://forum.viry.cz/viewtopic.php?f=29&t=144868 a dejte sem vysledky. Predem nic nemazte, miva obcas falesne detekce

Jasne, chápem a ospravedlnujem sa, uy sa to nestane

jacho6380 píše:uy sa to nestane

Uvidime
Kdyz se pc nedocisti, je pak havet obvykle docela brzy zpatky
Vim, ze nekdy to dokoncit nejde, treba kdyz cistite pc nekomu z rodiny a musite uz odjet, nebo pc vratit a tak, ale neni prece tak tezke to napsat Pak aspon vime, ze se nic nestalo a tema se uzavre, pripadne se domluvime na pozdejsim dokonceni atd.

Kontrola opet nedokoncena. Vase volba