Prosím o kontrolu logu

[Htman]

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:05:39, on 1.6.2001
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\OSD\OSD.EXE
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\system32\VTtrayp.exe
C:\WINDOWS\system32\VTTimer.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\Ask.com\Updater\Updater.exe
C:\Program Files\Guard-ICQ\GuardICQ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\SweetIM\Messenger\SweetIM.exe
C:\Program Files\SweetIM\Communicator\SweetPacksUpdateManager.exe
C:\Documents and Settings\Domča\Local Settings\Data aplikací\Facebook\Update\FacebookUpdate.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\ICQ7M\ICQ.exe
C:\Program Files\RALINK\Common\RaUI.exe
C:\Program Files\winbond\w89c33\wwu.exe
C:\Program Files\Guard-ICQ\GuardICQ.exe
C:\PROGRA~1\ICQ6TO~1\ICQSER~1.EXE
C:\Documents and Settings\All Users\Data aplikací\Skype\Toolbars\Skype C2C Service\c2c_service.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wbsecsvc.exe
C:\WINDOWS\system32\wbem\unsecapp.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Domča\Dokumenty\Stažené soubory\hijackthis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com/?crg=3.1010000&st=12&barid={B798DBD9-D8DC-478B-AD14-6F7A1DB3C0CE}
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com/?crg=3.1010000&st=12&barid={B798DBD9-D8DC-478B-AD14-6F7A1DB3C0CE}
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.smarttweak.net/?setlang=cs&r ... ref_28447/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files\Ask.com\GenericAskToolbar.dll
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: SweetIM ToolbarURLSearchHook Class - {EEE6C35D-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgHelper.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O2 - BHO: SWEETIE - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
O3 - Toolbar: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O3 - Toolbar: SweetPacks Toolbar for Internet Explorer - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [OSD] C:\Program Files\OSD\OSD.EXE
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [VTTrayp] VTtrayp.exe
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [ApnUpdater] "C:\Program Files\Ask.com\Updater\Updater.exe"
O4 - HKLM\..\Run: [Guard.Mail.ru.gui] "C:\Program Files\Guard-ICQ\GuardICQ.exe" /gui
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [SweetIM] C:\Program Files\SweetIM\Messenger\SweetIM.exe
O4 - HKLM\..\Run: [Sweetpacks Communicator] C:\Program Files\SweetIM\Communicator\SweetPacksUpdateManager.exe
O4 - HKLM\..\RunOnce: [Malwarebytes Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
O4 - HKCU\..\Run: [cz.seznam.software.autoupdate] "C:\Documents and Settings\Domča\Data aplikací\Seznam.cz\szninstall.exe" -c
O4 - HKCU\..\Run: [ICQ] ~"C:\Program Files\ICQ7M\ICQ.exe" silent loginmode=4
O4 - HKCU\..\Run: [Facebook Update] "C:\Documents and Settings\Domča\Local Settings\Data aplikací\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Domča\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe" /c
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Ralink Wireless Utility.lnk = C:\Program Files\RALINK\Common\RaUI.exe
O4 - Global Startup: WWU.lnk = C:\Program Files\winbond\w89c33\wwu.exe
O9 - Extra button: ICQ7M - {781B39EC-2E18-41FC-9B00-B84E4FFCA85F} - C:\Program Files\ICQ7M\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7M - {781B39EC-2E18-41FC-9B00-B84E4FFCA85F} - C:\Program Files\ICQ7M\ICQ.exe
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Guard.Mail.ru - Unknown owner - C:\Program Files\Guard-ICQ\GuardICQ.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: ICQ Service - Unknown owner - C:\PROGRA~1\ICQ6TO~1\ICQSER~1.EXE
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: Skype C2C Service - Skype Technologies S.A. - C:\Documents and Settings\All Users\Data aplikací\Skype\Toolbars\Skype C2C Service\c2c_service.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: wbsecsvc - Winbond - C:\WINDOWS\system32\wbsecsvc.exe

--
End of file - 8190 bytes

[Reklama]

[Htman]

Malwarebytes Anti-Malware (Zkušební verze Malwarebytes Anti-Malware.) 1.70.0.1100
www.malwarebytes.org

Verze: v2013.03.07.07

Windows XP Service Pack 2 x86 NTFS
Internet Explorer 6.0.2900.2180
Domča :: DOMULKA [administrátor]

Ochrana: Povolena

1.6.2001 12:29:13
mbam-log-2001-06-01 (12-29-13).txt

Typ: Kompletní kontrola (C:\|)
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 200412
Uplynulý čas: 13 minut, 1 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 0
(Žádné škodlivé položky nebyly zjištěny)

(konec)

[memphisto]

Stáhni AdwCleaner

Ulož si ho na svojí plochu
Ukonči všechny programy, okna a prohlížeče
Spusť program poklepáním a klikni na „Search“
Po skenu se objeví log (jinak je uložen systémovem disku jako AdwCleaner[R?].txt), jeho obsah sem celý vlož.

[Htman]

# AdwCleaner v2.200 - Log vytvooen 03/04/2013 v 16:50:02
# Aktualizováno 02/04/2013 Xplode
# Operaení systém : Microsoft Windows XP Service Pack 2 (32 bits)
# Uživatel : Domča - DOMULKA
# Spuštin systém : Normální
# Spuštino z : C:\Documents and Settings\Domča\Dokumenty\Downloads\adwcleaner.exe
# Volba [Prohledat]


***** [Služby] *****

Nalezeno : CltMngSvc

***** [Soubory / Složky] *****

Složka Nalezeno : C:\DOCUME~1\DOMA~1\LOCALS~1\Temp\CT3282816
Složka Nalezeno : C:\Documents and Settings\All Users\Data aplikací\ICQ\ICQToolbar
Složka Nalezeno : C:\Documents and Settings\Domča\Data aplikací\Mozilla\Firefox\Profiles\rvv89l5e.default\CT3282816
Složka Nalezeno : C:\Documents and Settings\Domča\Data aplikací\Mozilla\Firefox\Profiles\rvv89l5e.default\extensions\{39825cdc-02d9-4d80-93fe-fdb3860b69ee}
Složka Nalezeno : C:\Documents and Settings\Domča\Data aplikací\Mozilla\Firefox\Profiles\rvv89l5e.default\Smartbar
Složka Nalezeno : C:\Documents and Settings\Domča\Data aplikací\OpenCandy
Složka Nalezeno : C:\Documents and Settings\Domča\Data aplikací\SearchProtect
Složka Nalezeno : C:\Documents and Settings\Domča\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\ogccgbmabaphcakpiclgcnmcnimhokcj
Složka Nalezeno : C:\Documents and Settings\Domča\Local Settings\Data aplikací\PackageAware
Složka Nalezeno : C:\Program Files\ICQ6Toolbar
Složka Nalezeno : C:\Program Files\SearchProtect
Soubor Nalezeno : C:\END

***** [Registry] *****

Hodnota Nalezeno : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Hodnota Nalezeno : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{EEE6C35B-6118-11DC-9C72-001320C79847}]
Hodnota Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [searchprotect]
Hodnota Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [SearchProtectAll]
Klíe Nalezeno : HKCU\Software\Conduit
Klíe Nalezeno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40B7-AC73-056A5EBA4A7E}
Klíe Nalezeno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{855F3B16-6D32-4FE6-8A56-BBB695989046}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{855F3B16-6D32-4FE6-8A56-BBB695989046}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35B-6118-11DC-9C72-001320C79847}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35C-6118-11DC-9C72-001320C79847}
Klíe Nalezeno : HKCU\Software\SearchProtect
Klíe Nalezeno : HKCU\Software\SmartBar
Klíe Nalezeno : HKLM\SOFTWARE\Google\Chrome\Extensions\ogccgbmabaphcakpiclgcnmcnimhokcj
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\SearchProtect
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect
Klíe Nalezeno : HKLM\Software\SearchProtect
Klíe Nalezeno : HKU\S-1-5-21-1202660629-436374069-725345543-1004\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40B7-AC73-056A5EBA4A7E}
Klíe Nalezeno : HKU\S-1-5-21-1202660629-436374069-725345543-1004\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}

***** [Internetové prohlížeee] *****

-\\ Internet Explorer v6.0.2900.2180

[HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://home.sweetim.com/?crg=3.1010000&st=12&barid={B798DBD9-D8DC-478B-AD14-6F7A1DB3C0CE}
[HKCU\Software\Microsoft\Internet Explorer\Main - ICQ Search] = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Main - Start Page] = hxxp://home.sweetim.com/?crg=3.1010000&st=12&barid={B798DBD9-D8DC-478B-AD14-6F7A1DB3C0CE}

-\\ Mozilla Firefox v19.0.2 (en-US)

Soubor : C:\Documents and Settings\Domča\Data aplikací\Mozilla\Firefox\Profiles\rvv89l5e.default\prefs.js

Nalezeno : user_pref("CT3282816.1000082.isPlayDisplay", "true");
Nalezeno : user_pref("CT3282816.1000082.state", "{\"state\":\"stopped\",\"text\":\"Rap (Unce...\",\"description[...]
Nalezeno : user_pref("CT3282816.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
Nalezeno : user_pref("CT3282816.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"tru[...]
Nalezeno : user_pref("CT3282816.FirstTime", "true");
Nalezeno : user_pref("CT3282816.FirstTimeFF3", "true");
Nalezeno : user_pref("CT3282816.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT328[...]
Nalezeno : user_pref("CT3282816.UserID", "UN12170447723971785");
Nalezeno : user_pref("CT3282816.addressBarTakeOverEnabledInHidden", "true");
Nalezeno : user_pref("CT3282816.browser.search.defaultthis.engineName", true);
Nalezeno : user_pref("CT3282816.enableFix404ByUser", "TRUE");
Nalezeno : user_pref("CT3282816.firstTimeDialogOpened", "true");
Nalezeno : user_pref("CT3282816.fixPageNotFoundErrorByUser", "TRUE");
Nalezeno : user_pref("CT3282816.fixPageNotFoundErrorInHidden", "true");
Nalezeno : user_pref("CT3282816.fixUrls", true);
Nalezeno : user_pref("CT3282816.installType", "Unknown");
Nalezeno : user_pref("CT3282816.isCheckedStartAsHidden", true);
Nalezeno : user_pref("CT3282816.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
Nalezeno : user_pref("CT3282816.isFirstTimeToolbarLoading", "false");
Nalezeno : user_pref("CT3282816.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
Nalezeno : user_pref("CT3282816.isWelcomPage", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
Nalezeno : user_pref("CT3282816.keyword", true);
Nalezeno : user_pref("CT3282816.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"hxxp://search.conduit[...]
Nalezeno : user_pref("CT3282816.lastVersion", "10.15.0.562");
Nalezeno : user_pref("CT3282816.mam_gk_currentVersion.enc", "MS40LjQuNg==");
Nalezeno : user_pref("CT3282816.mam_gk_installer_preapproved.enc", "VFJVRQ==");
Nalezeno : user_pref("CT3282816.mam_gk_pgUnloadedOnce.enc", "dHJ1ZQ==");
Nalezeno : user_pref("CT3282816.mam_gk_userId.enc", "N2EyODMyMTAtY2Y5ZS00ZDNlLWE0MWMtNzliZjE4YTBmMGQy");
Nalezeno : user_pref("CT3282816.migrateAppsAndComponents", true);
Nalezeno : user_pref("CT3282816.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"hxxp%[...]
Nalezeno : user_pref("CT3282816.revertSettingsEnabled", "false");
Nalezeno : user_pref("CT3282816.search.searchAppId", "130040117713707653");
Nalezeno : user_pref("CT3282816.search.searchCount", "0");
Nalezeno : user_pref("CT3282816.searchFromAddressBarEnabledByUser", "true");
Nalezeno : user_pref("CT3282816.searchInNewTabEnabledByUser", "true");
Nalezeno : user_pref("CT3282816.searchInNewTabEnabledInHidden", "true");
Nalezeno : user_pref("CT3282816.searchUserMode", "2");
Nalezeno : user_pref("CT3282816.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
Nalezeno : user_pref("CT3282816.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"d[...]
Nalezeno : user_pref("CT3282816.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\[...]
Nalezeno : user_pref("CT3282816.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"d[...]
Nalezeno : user_pref("CT3282816.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"strin[...]
Nalezeno : user_pref("CT3282816.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"strin[...]
Nalezeno : user_pref("CT3282816.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data[...]
Nalezeno : user_pref("CT3282816.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1364969835296");
Nalezeno : user_pref("CT3282816.serviceLayer_services_appsMetadata_lastUpdate", "1364969835536");
Nalezeno : user_pref("CT3282816.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1364969835378");
Nalezeno : user_pref("CT3282816.serviceLayer_services_location_lastUpdate", "1364969831769");
Nalezeno : user_pref("CT3282816.serviceLayer_services_login_10.15.0.562_lastUpdate", "1364999455577");
Nalezeno : user_pref("CT3282816.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1364969834842");
Nalezeno : user_pref("CT3282816.serviceLayer_services_searchAPI_lastUpdate", "1364969833688");
Nalezeno : user_pref("CT3282816.serviceLayer_services_serviceMap_lastUpdate", "1364969831624");
Nalezeno : user_pref("CT3282816.serviceLayer_services_setupAPI_lastUpdate", "1364969831894");
Nalezeno : user_pref("CT3282816.serviceLayer_services_toolbarContextMenu_lastUpdate", "1364969835305");
Nalezeno : user_pref("CT3282816.serviceLayer_services_toolbarSettings_lastUpdate", "1364997325614");
Nalezeno : user_pref("CT3282816.serviceLayer_services_translation_lastUpdate", "1364969834945");
Nalezeno : user_pref("CT3282816.settingsINI", true);
Nalezeno : user_pref("CT3282816.showToolbarPermission", "false");
Nalezeno : user_pref("CT3282816.smartbar.CTID", "CT3282816");
Nalezeno : user_pref("CT3282816.smartbar.Uninstall", "0");
Nalezeno : user_pref("CT3282816.smartbar.homepage", true);
Nalezeno : user_pref("CT3282816.smartbar.isHidden", true);
Nalezeno : user_pref("CT3282816.smartbar.toolbarName", "Mario Forever B ");
Nalezeno : user_pref("CT3282816.toolbarBornServerTime", "3-4-2013");
Nalezeno : user_pref("CT3282816.toolbarCurrentServerTime", "3-4-2013");
Nalezeno : user_pref("CT3282816.toolbarLoginClientTime", "Wed Apr 03 2013 08:17:42 GMT+0200");
Nalezeno : user_pref("CT3282816_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\"[...]
Nalezeno : user_pref("Smartbar.ConduitHomepagesList", "");
Nalezeno : user_pref("Smartbar.ConduitSearchEngineList", "Mario Forever B Customized Web Search");
Nalezeno : user_pref("Smartbar.ConduitSearchUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3282816[...]
Nalezeno : user_pref("Smartbar.SearchFromAddressBarSavedUrl", "");
Nalezeno : user_pref("Smartbar.keywordURLSelectedCTID", "CT3282816");
Nalezeno : user_pref("browser.search.defaultthis.engineName", "Mario Forever B Customized Web Search");
Nalezeno : user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3282816&CUI[...]
Nalezeno : user_pref("browser.search.selectedEngine", "Mario Forever B Customized Web Search");
Nalezeno : user_pref("browser.startup.homepage", "hxxp://search.conduit.com/?ctid=CT3282816&octid=CT3282816&Sea[...]
Nalezeno : user_pref("keyword.URL", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3282816&SearchSource=2&CU[...]
Nalezeno : user_pref("smartbar.conduitHomepageList", "hxxp://search.conduit.com/?ctid=CT3282816&SearchSource=13[...]
Nalezeno : user_pref("smartbar.conduitSearchAddressUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT[...]
Nalezeno : user_pref("smartbar.machineId", "+S3XV7W7ANJNRQSB99/PA9KTOCE");
Nalezeno : user_pref("smartbar.originalHomepage", "hxxp://search.conduit.com/?ctid=CT3282816&octid=CT3282816&Se[...]
Nalezeno : user_pref("smartbar.originalSearchAddressUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT328[...]
Nalezeno : user_pref("smartbar.originalSearchEngine", "Mario Forever B Customized Web Search");

-\\ Google Chrome v26.0.1410.43

Soubor : C:\Documents and Settings\Domča\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Preferences

[OK] Soubor je eistý.

*************************

AdwCleaner[R1].txt - [11819 octets] - [03/04/2013 16:50:02]

########## EOF - C:\AdwCleaner[R1].txt - [11880 octets] ##########

[jaro3]

Spusť znovu AdwCleaner (u Windows Vista či Windows7, klikni na AdwCleaner pravým a vyber „Spustit jako správce“
Klikni na „ Delete“
Program provede opravu, po automatickém restartu neukáže log (C:\AdwCleaner [S?].txt) , jeho obsah sem celý vlož.

Stáhni si RogueKiller
32bit.:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
64bit.:
http://www.sur-la-toile.com/RogueKiller ... lerX64.exe
na svojí plochu.
- Zavři všechny ostatní programy a prohlížeče.
- Pro OS Vista a win7 spusť program RogueKiller.exe jako správce , u XP poklepáním.
- počkej až skončí Prescan.
- Zkontroluj , zda máš zaškrtnuto:
Kontrola MBR
Kontrola Faked
Antirootkit
-Potom klikni na „Prohledat“.
- Program skenuje PC. Po proskenování klikni na „Zpráva“celý obsah logu sem zkopíruj.
Pokud je program blokován , zkus ho spustit několikrát. Pokud dále program nepůjde spustit a pracovat, přejmenuj ho na winlogon.exe.