Prosím o kontrolu - modrá obrazovka Vyřešeno

Místo pro vaše HiJackThis logy a logy z dalších programů…

Moderátoři: Mods_senior, Security team

Zamčeno
Uživatelský avatar
karbi02
Level 2.5
Level 2.5
Příspěvky: 383
Registrován: březen 07
Pohlaví: Nespecifikováno
Stav:
Offline

Prosím o kontrolu - modrá obrazovka

Příspěvekod karbi02 » 06 čer 2013 21:30

Dobrý den,
padnulo mi pc a vyskočila modrá obrazovka s angličtinou. Celý jsem to nepřepisoval, jeden řádek byl tento:
IRQL_NOT_LESS_OR_EQUAL
Zdá se mi, že je dost zpomalenej internet... Po restartu pc naběhlo, ale třeba Firefox nechce nic stáhnout.

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:26:40, on 6.6.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16576)
Boot mode: Normal

Running processes:
C:\Windows\PixArt\PAC7302\Monitor.exe
C:\Windows\System32\spool\drivers\x64\3\WrtMon.exe
C:\Windows\System32\spool\drivers\x64\3\WrtProc.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Users\Uživatel\Downloads\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSource= ... =CT3072253
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: SaversPlanet Toolbar - {d930602d-a752-4287-828b-ef0b1f48825c} - C:\Program Files (x86)\SaversPlanet\prxtbSav0.dll
R3 - URLSearchHook: (no name) - - (no file)
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: E-Web Print - {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll
O2 - BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\prxConduitEngine.dll
O2 - BHO: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - (no file)
O2 - BHO: AMD SteadyVideo BHO - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - (no file)
O2 - BHO: Pomocná služba pro přihlášení ke službě Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
O2 - BHO: SaversPlanet - {d930602d-a752-4287-828b-ef0b1f48825c} - C:\Program Files (x86)\SaversPlanet\prxtbSav0.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: PandoraTV Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll
O3 - Toolbar: SaversPlanet Toolbar - {d930602d-a752-4287-828b-ef0b1f48825c} - C:\Program Files (x86)\SaversPlanet\prxtbSav0.dll
O3 - Toolbar: (no name) - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - (no file)
O3 - Toolbar: E-Web Print - {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll
O4 - HKLM\..\Run: [HDAudDeck] C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe -r
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [IObit Malware Fighter] "C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe" /autostart
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {0067DBFC-A752-458C-AE6E-B9C7E63D4824} (Detekce zařízení) - http://www.logitech.com/devicedetector/ ... tion32.cab
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll
O18 - Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: IMF Service (IMFservice) - IObit - C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Keyboard And Mouse Communication Service (KMWDSERVICE) - UASSOFT.COM - C:\Program Files (x86)\Mouse Driver\KMWDSrv.exe
O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files (x86)\McAfee Security Scan\3.0.285\McCHSvc.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @C:\Program Files (x86)\Nero\Update\NASvc.exe,-200 (NAUpdate) - Nero AG - C:\Program Files (x86)\Nero\Update\NASvc.exe
O23 - Service: O&O Defrag (OODefragAgent) - O&O Software GmbH - C:\Program Files\OO Software\Defrag\oodag.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: Soluto Launcher Service (SolutoLauncherService) - Soluto - C:\Program Files\Soluto\SolutoLauncherService.exe
O23 - Service: Soluto Remote Service (SolutoRemoteService) - Soluto - C:\Program Files\Soluto\SolutoRemoteService.exe
O23 - Service: Soluto PCGenome Core Service (SolutoService) - Soluto - C:\Program Files\Soluto\SolutoService.exe
O23 - Service: SPAMfighter Update Service - SPAMfighter ApS - C:\Program Files (x86)\Fighters\SPAMfighter\sfus.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: Suite Service - SPAMfighter ApS - C:\Program Files (x86)\Fighters\FighterSuiteService.exe
O23 - Service: TeamViewer 7 (TeamViewer7) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe
O23 - Service: TomTomHOMEService - TomTom - C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: VIA Karaoke digital mixer Service (VIAKaraokeService) - Unknown owner - C:\Windows\system32\viakaraokesrv.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 10721 bytes
Nahoru
Reklama
Top
Uživatelský avatar
jaro3
člen Security týmu
Guru Level 15
Guru Level 15
Příspěvky: 43298
Registrován: červen 07
Bydliště: Jižní Čechy
Pohlaví: Muž
Stav:
Offline

Re: Prosím o kontrolu - modrá obrazovka

Příspěvekod jaro3 » 06 čer 2013 21:49

Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected. Poté klikni na Main (hlavní stránku ) a klikni na Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranění historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit dočasné soubory Windows, vysypat koš atd.


Stáhni si TFC
Otevři soubor a zavři všechny ostatní okna, Klikni na Start k zahájení procesu. Program by neměl trvat dlouho.
Poté by se měl PC restartovat, pokud ne , proveď sám.

Stáhni AdwCleaner

Ulož si ho na svojí plochu
Ukonči všechny programy , okna a prohlížeče
Spusť program poklepáním a klikni na „Prohledat“
Po skenu se objeví log ( jinak je uložen systémovem disku jako AdwCleaner[R?].txt), jeho obsah sem celý vlož.

Stáhni si Malwarebytes' Anti-Malware
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Aktualizace Malwarebytes' Anti-Malware a Spustit aplikaci Malwarebytes' Anti-Malware, pokud jo tak klikni na tlačítko konec
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a nech vybranou možnost Provést rychlý sken a klikni na tlačítko Skenovat
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Zobrazit výsledky
- pak zvol možnost uložit log a ulož si log na plochu
- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).
Vlož sem pak obsah toho logu.

Pokud budou problémy , spusť v nouz. režimu.
Při práci s programy HJT, ComboFix,MbAM, SDFix aj. zavřete všechny ostatní aplikace a prohlížeče!
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
Nahoru
Uživatelský avatar
karbi02
Level 2.5
Level 2.5
Příspěvky: 383
Registrován: březen 07
Pohlaví: Nespecifikováno
Stav:
Offline

Re: Prosím o kontrolu - modrá obrazovka

Příspěvekod karbi02 » 06 čer 2013 22:03

Adw:
# AdwCleaner v2.301 - Log vytvooen 06/06/2013 v 22:01:47
# Aktualizováno 16/05/2013 Xplode
# Operaení systém : Windows 7 Home Premium Service Pack 1 (64 bits)
# Uživatel : Uživatel - AMD
# Spuštin systém : Normální
# Spuštino z : C:\Users\Uživatel\Downloads\adwcleaner.exe
# Volba [Prohledat]


***** [Služby] *****


***** [Soubory / Složky] *****

Složka Nalezeno : C:\Program Files (x86)\Ask.com
Složka Nalezeno : C:\Program Files (x86)\Common Files\Software Update Utility
Složka Nalezeno : C:\Program Files (x86)\Conduit
Složka Nalezeno : C:\Program Files (x86)\ConduitEngine
Složka Nalezeno : C:\Program Files (x86)\ICQ6Toolbar
Složka Nalezeno : C:\Program Files (x86)\SaversPlanet
Složka Nalezeno : C:\Program Files (x86)\Winamp Toolbar
Složka Nalezeno : C:\ProgramData\ICQ\ICQToolbar
Složka Nalezeno : C:\ProgramData\InstallMate
Složka Nalezeno : C:\Users\Uživatel\AppData\Local\Conduit
Složka Nalezeno : C:\Users\Uživatel\AppData\Local\OpenCandy
Složka Nalezeno : C:\Users\Uživatel\AppData\LocalLow\Conduit
Složka Nalezeno : C:\Users\Uživatel\AppData\LocalLow\ConduitEngine
Složka Nalezeno : C:\Users\Uživatel\AppData\LocalLow\PriceGong
Složka Nalezeno : C:\Users\Uživatel\AppData\LocalLow\SaversPlanet
Složka Nalezeno : C:\Users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\ug9pn33s.default\Conduit
Složka Nalezeno : C:\Users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\ug9pn33s.default\ConduitCommon
Složka Nalezeno : C:\Users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\ug9pn33s.default\ConduitEngine
Složka Nalezeno : C:\Users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\ug9pn33s.default\CT1394623
Složka Nalezeno : C:\Users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\ug9pn33s.default\CT3072253
Složka Nalezeno : C:\Users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\ug9pn33s.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f}
Složka Nalezeno : C:\Users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\ug9pn33s.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}
Složka Nalezeno : C:\Users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\ug9pn33s.default\extensions\{d930602d-a752-4287-828b-ef0b1f48825c}
Složka Nalezeno : C:\Users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\ug9pn33s.default\WinampToolbarData
Složka Nalezeno : C:\Users\Uživatel\AppData\Roaming\OpenCandy
Soubor Nalezeno : C:\Program Files (x86)\Mozilla Firefox\plugins\npdnu.dll
Soubor Nalezeno : C:\Program Files (x86)\Mozilla Firefox\plugins\npdnu.xpt
Soubor Nalezeno : C:\Program Files (x86)\Mozilla Firefox\plugins\npdnupdater2.dll
Soubor Nalezeno : C:\Program Files (x86)\Mozilla Firefox\plugins\npdnupdater2.xpt
Soubor Nalezeno : C:\Users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\ug9pn33s.default\searchplugins\Conduit.xml
Soubor Nalezeno : C:\Users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\ug9pn33s.default\searchplugins\daemon-search.xml
Soubor Nalezeno : C:\Users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\ug9pn33s.default\searchplugins\icqplugin.xml
Soubor Nalezeno : C:\Users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\ug9pn33s.default\searchplugins\icqplugin-1.xml

***** [Registry] *****

Hodnota Nalezeno : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Hodnota Nalezeno : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D930602D-A752-4287-828B-EF0B1F48825C}]
Hodnota Nalezeno : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{D930602D-A752-4287-828B-EF0B1F48825C}]
Hodnota Nalezeno : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{855F3B16-6D32-4FE6-8A56-BBB695989046}]
Hodnota Nalezeno : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{D930602D-A752-4287-828B-EF0B1F48825C}]
Hodnota Nalezeno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Hodnota Nalezeno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{D930602D-A752-4287-828B-EF0B1F48825C}]
Hodnota Nalezeno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{32099AAC-C132-4136-9E9A-4E364A424E17}]
Klíe Nalezeno : HKCU\Software\AppDataLow\AskToolbarInfo
Klíe Nalezeno : HKCU\Software\AppDataLow\Software\AskToolbar
Klíe Nalezeno : HKCU\Software\AppDataLow\Software\Conduit
Klíe Nalezeno : HKCU\Software\AppDataLow\Software\conduitEngine
Klíe Nalezeno : HKCU\Software\AppDataLow\Software\conduitEngine
Klíe Nalezeno : HKCU\Software\AppDataLow\Software\ConduitSearchScopes
Klíe Nalezeno : HKCU\Software\AppDataLow\Software\PriceGong
Klíe Nalezeno : HKCU\Software\AppDataLow\Software\SaversPlanet
Klíe Nalezeno : HKCU\Software\AppDataLow\Software\SmartBar
Klíe Nalezeno : HKCU\Software\AppDataLow\Toolbar
Klíe Nalezeno : HKCU\Software\Ask.com
Klíe Nalezeno : HKCU\Software\IGearSettings
Klíe Nalezeno : HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{30F9B915-B755-4826-820B-08FBA6BD249D}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{30F9B915-B755-4826-820B-08FBA6BD249D}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D930602D-A752-4287-828B-EF0B1F48825C}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{30F9B915-B755-4826-820B-08FBA6BD249D}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{30F9B915-B755-4826-820B-08FBA6BD249D}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D930602D-A752-4287-828B-EF0B1F48825C}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F25AF245-4A81-40DC-92F9-E9021F207706}
Klíe Nalezeno : HKCU\Software\YahooPartnerToolbar
Klíe Nalezeno : HKCU\Software\Zugo
Klíe Nalezeno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}
Klíe Nalezeno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AD22EBAF-0D18-4FC7-90CC-5EA0ABBE9EB8}
Klíe Nalezeno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EEE7E0A3-AE64-4DC8-84D1-F5D7BAF2DB0C}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\AppID\{6C259840-5BA8-46E6-8ED1-EF3BA47D8BA1}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\AppID\dnu.EXE
Klíe Nalezeno : HKLM\SOFTWARE\Classes\AppID\GenericAskToolbar.DLL
Klíe Nalezeno : HKLM\SOFTWARE\Classes\AppID\secman.DLL
Klíe Nalezeno : HKLM\SOFTWARE\Classes\dnUpdate
Klíe Nalezeno : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUIBrowser
Klíe Nalezeno : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUIBrowser.1
Klíe Nalezeno : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUpdController
Klíe Nalezeno : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUpdController.1
Klíe Nalezeno : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd
Klíe Nalezeno : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd.1
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Toolbar.CT1394623
Klíe Nalezeno : HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\TypeLib\{92380354-381A-471F-BE2E-DD9ACD9777EA}
Klíe Nalezeno : HKLM\Software\Conduit
Klíe Nalezeno : HKLM\Software\conduitEngine
Klíe Nalezeno : HKLM\Software\conduitEngine
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{1E3EFEE8-596C-4F27-93A9-73EFBA832423}
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7B089B94-D1DC-4C6B-87E1-8156E22C1D96}
Klíe Nalezeno : HKLM\Software\SaversPlanet
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{1E3EFEE8-596C-4F27-93A9-73EFBA832423}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{30F9B915-B755-4826-820B-08FBA6BD249D}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{30F9B915-B755-4826-820B-08FBA6BD249D}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{7B089B94-D1DC-4C6B-87E1-8156E22C1D96}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{D930602D-A752-4287-828B-EF0B1F48825C}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E15A9BFD-D16D-496D-8222-44CADF316E70}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{660E6F4F-840D-436D-B668-433D9591BAC5}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E7435878-65B9-44D1-A443-81754E5DFC90}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{0BCAC9EE-91AC-4F29-A456-5258898E63B1}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2803F5F0-0EDE-45DD-9108-F7345FC1AE24}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{AC6519B7-DA8F-4723-9CDC-8E0B7B95DA89}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{EEE7E0A3-AE64-4DC8-84D1-F5D7BAF2DB0C}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D930602D-A752-4287-828B-EF0B1F48825C}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SaversPlanet Toolbar
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SoftwareUpdUtility
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{660E6F4F-840D-436D-B668-433D9591BAC5}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{E7435878-65B9-44D1-A443-81754E5DFC90}
Klíe Nalezeno : HKLM\SOFTWARE\Software
Klíe Nalezeno : HKU\S-1-5-21-3056490246-2549413826-2647440247-1000\Software\Microsoft\Internet Explorer\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}
Klíe Nalezeno : HKU\S-1-5-21-3056490246-2549413826-2647440247-1000\Software\Microsoft\Internet Explorer\SearchScopes\{AD22EBAF-0D18-4FC7-90CC-5EA0ABBE9EB8}
Klíe Nalezeno : HKU\S-1-5-21-3056490246-2549413826-2647440247-1000\Software\Microsoft\Internet Explorer\SearchScopes\{EEE7E0A3-AE64-4DC8-84D1-F5D7BAF2DB0C}

***** [Internetové prohlížeee] *****

-\\ Internet Explorer v10.0.9200.16576

[HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://search.conduit.com?SearchSource= ... =CT3072253
[HKCU\Software\Microsoft\Internet Explorer\Main - Start Page Restore] = hxxp://search.conduit.com?SearchSource= ... =CT1394623
[HKCU\Software\Microsoft\Internet Explorer\Main - ICQ Search] = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd

-\\ Mozilla Firefox v21.0 (cs)

Soubor : C:\Users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\ug9pn33s.default\prefs.js

Nalezeno : user_pref("CT1394623..clientLogIsEnabled", false);
Nalezeno : user_pref("CT1394623..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...]
Nalezeno : user_pref("CT1394623..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...]
Nalezeno : user_pref("CT1394623.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);
Nalezeno : user_pref("CT1394623.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
Nalezeno : user_pref("CT1394623.BrowserCompStateIsOpen_129615987464022422", true);
Nalezeno : user_pref("CT1394623.CTID", "CT1394623");
Nalezeno : user_pref("CT1394623.Chat.Meebo.ServerLastCheckTime", "");
Nalezeno : user_pref("CT1394623.Chat.Meebo.ServerLastResponseTime", "Tue Nov 29 2011 15:39:26 GMT+0100");
Nalezeno : user_pref("CT1394623.Chat.Meebo.rooms.2030dff2c5edb1", 1);
Nalezeno : user_pref("CT1394623.Chat.Meebo.rooms.30plusa87dca4f", 2);
Nalezeno : user_pref("CT1394623.Chat.Meebo.rooms.entertainmentc0ed09fb", 1);
Nalezeno : user_pref("CT1394623.Chat.Meebo.rooms.health3693b665", 0);
Nalezeno : user_pref("CT1394623.Chat.Meebo.rooms.musicj375cf270", 2);
Nalezeno : user_pref("CT1394623.Chat.Meebo.rooms.newsxu117b840d", 12);
Nalezeno : user_pref("CT1394623.Chat.Meebo.rooms.recreationab17d1f9", 2);
Nalezeno : user_pref("CT1394623.Chat.Meebo.rooms.saversplanetcommunitychat5a104123", 0);
Nalezeno : user_pref("CT1394623.Chat.Meebo.rooms.spirituality39155c53", 0);
Nalezeno : user_pref("CT1394623.Chat.Meebo.rooms.sports522528d3", 4);
Nalezeno : user_pref("CT1394623.Chat.Meebo.rooms.technology8bb9fd5b", 0);
Nalezeno : user_pref("CT1394623.Chat.Meebo.rooms.teenagers833b8249", 2);
Nalezeno : user_pref("CT1394623.Chat.Meebo.rooms.travel8c2e48db", 0);
Nalezeno : user_pref("CT1394623.Chat.Meebo.rooms.videogames2fe066e0", 0);
Nalezeno : user_pref("CT1394623.Chat.ServerLastCheckTime", "Tue Nov 29 2011 15:39:25 GMT+0100");
Nalezeno : user_pref("CT1394623.CurrentServerDate", "29-11-2011");
Nalezeno : user_pref("CT1394623.DialogsAlignMode", "LTR");
Nalezeno : user_pref("CT1394623.DialogsGetterLastCheckTime", "Tue Nov 29 2011 15:39:28 GMT+0100");
Nalezeno : user_pref("CT1394623.DownloadReferralCookieData", "");
Nalezeno : user_pref("CT1394623.EMailNotifierPollDate", "Tue Nov 29 2011 15:39:25 GMT+0100");
Nalezeno : user_pref("CT1394623.FeedLastCount129269795695788400", 500);
Nalezeno : user_pref("CT1394623.FeedPollDate128880331793868879", "Tue Nov 29 2011 15:39:26 GMT+0100");
Nalezeno : user_pref("CT1394623.FeedPollDate128880331793868882", "Tue Nov 29 2011 15:39:25 GMT+0100");
Nalezeno : user_pref("CT1394623.FeedPollDate128880331793868883", "Tue Nov 29 2011 15:39:25 GMT+0100");
Nalezeno : user_pref("CT1394623.FeedPollDate128932492092456574", "Tue Nov 29 2011 15:39:25 GMT+0100");
Nalezeno : user_pref("CT1394623.FeedPollDate129001790474356366", "Tue Nov 29 2011 15:39:25 GMT+0100");
Nalezeno : user_pref("CT1394623.FeedPollDate129109436547186794", "Tue Nov 29 2011 15:39:26 GMT+0100");
Nalezeno : user_pref("CT1394623.FeedPollDate129109873604992905", "Tue Nov 29 2011 15:39:25 GMT+0100");
Nalezeno : user_pref("CT1394623.FeedPollDate129265582362820300", "Tue Nov 29 2011 15:39:26 GMT+0100");
Nalezeno : user_pref("CT1394623.FeedPollDate129266745437038199", "Tue Nov 29 2011 15:39:26 GMT+0100");
Nalezeno : user_pref("CT1394623.FeedPollDate129267614305788316", "Tue Nov 29 2011 15:39:25 GMT+0100");
Nalezeno : user_pref("CT1394623.FeedTTL128880331793868879", 40);
Nalezeno : user_pref("CT1394623.FeedTTL128880331793868882", 40);
Nalezeno : user_pref("CT1394623.FeedTTL128880331793868883", 40);
Nalezeno : user_pref("CT1394623.FeedTTL128932492092456574", 40);
Nalezeno : user_pref("CT1394623.FeedTTL129001790474356366", 40);
Nalezeno : user_pref("CT1394623.FeedTTL129109436547186794", 40);
Nalezeno : user_pref("CT1394623.FeedTTL129109873604992905", 40);
Nalezeno : user_pref("CT1394623.FeedTTL129265582362820300", 40);
Nalezeno : user_pref("CT1394623.FeedTTL129266745437038199", 40);
Nalezeno : user_pref("CT1394623.FeedTTL129267614305788316", 40);
Nalezeno : user_pref("CT1394623.FirstServerDate", "6-3-2011");
Nalezeno : user_pref("CT1394623.FirstTime", true);
Nalezeno : user_pref("CT1394623.FirstTimeFF3", true);
Nalezeno : user_pref("CT1394623.FirstTimeSettingsDone", true);
Nalezeno : user_pref("CT1394623.FixPageNotFoundErrors", true);
Nalezeno : user_pref("CT1394623.GroupingServerCheckInterval", 1440);
Nalezeno : user_pref("CT1394623.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
Nalezeno : user_pref("CT1394623.HasUserGlobalKeys", true);
Nalezeno : user_pref("CT1394623.HomePageProtectorEnabled", false);
Nalezeno : user_pref("CT1394623.HomepageBeforeUnload", "hxxp://www.idnes.cz/");
Nalezeno : user_pref("CT1394623.Initialize", true);
Nalezeno : user_pref("CT1394623.InitializeCommonPrefs", true);
Nalezeno : user_pref("CT1394623.InstallationAndCookieDataSentCount", 3);
Nalezeno : user_pref("CT1394623.InstallationType", "Unknown");
Nalezeno : user_pref("CT1394623.InstalledDate", "Sun Mar 06 2011 11:51:14 GMT+0100");
Nalezeno : user_pref("CT1394623.InvalidateCache", false);
Nalezeno : user_pref("CT1394623.IsAlertDBUpdated", true);
Nalezeno : user_pref("CT1394623.IsGrouping", false);
Nalezeno : user_pref("CT1394623.IsMulticommunity", false);
Nalezeno : user_pref("CT1394623.IsOpenThankYouPage", true);
Nalezeno : user_pref("CT1394623.IsOpenUninstallPage", true);
Nalezeno : user_pref("CT1394623.LanguagePackLastCheckTime", "Tue Nov 29 2011 15:39:26 GMT+0100");
Nalezeno : user_pref("CT1394623.LanguagePackReloadIntervalMM", 1440);
Nalezeno : user_pref("CT1394623.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...]
Nalezeno : user_pref("CT1394623.LastLogin_2.7.1.3", "Sun Mar 06 2011 11:51:20 GMT+0100");
Nalezeno : user_pref("CT1394623.LastLogin_3.3.3.2", "Sun Mar 27 2011 10:04:56 GMT+0200");
Nalezeno : user_pref("CT1394623.LastLogin_3.8.0.8", "Tue Nov 29 2011 15:39:26 GMT+0100");
Nalezeno : user_pref("CT1394623.LatestVersion", "3.8.1.0");
Nalezeno : user_pref("CT1394623.Locale", "en-us");
Nalezeno : user_pref("CT1394623.LoginCache", 4);
Nalezeno : user_pref("CT1394623.MCDetectTooltipHeight", "83");
Nalezeno : user_pref("CT1394623.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
Nalezeno : user_pref("CT1394623.MCDetectTooltipWidth", "295");
Nalezeno : user_pref("CT1394623.MyStuffEnabledAtInstallation", true);
Nalezeno : user_pref("CT1394623.RadioIsPodcast", false);
Nalezeno : user_pref("CT1394623.RadioLastCheckTime", "Tue Nov 29 2011 15:39:25 GMT+0100");
Nalezeno : user_pref("CT1394623.RadioLastUpdateIPServer", "3");
Nalezeno : user_pref("CT1394623.RadioLastUpdateServer", "129167856085070000");
Nalezeno : user_pref("CT1394623.RadioMediaID", "20504133");
Nalezeno : user_pref("CT1394623.RadioMediaType", "Media Player");
Nalezeno : user_pref("CT1394623.RadioMenuSelectedID", "EBRadioMenu_CT139462320504133");
Nalezeno : user_pref("CT1394623.RadioShrinkedFromSetup", false);
Nalezeno : user_pref("CT1394623.RadioStationName", "Metal%20Rock");
Nalezeno : user_pref("CT1394623.RadioStationURL", "hxxp://syndication.choiceradio.com/asxplay/asx-music/bb/389_[...]
Nalezeno : user_pref("CT1394623.SavedHomepage", "hxxp://ics.asksearch.com/?cfg=2-441-0-...");
Nalezeno : user_pref("CT1394623.SearchEngine", "Search||hxxp://search.conduit.com/Results.aspx?q=UCM_SEARCH_TER[...]
Nalezeno : user_pref("CT1394623.SearchEngineBeforeUnload", "Google Blogs");
Nalezeno : user_pref("CT1394623.SearchFromAddressBarIsInit", true);
Nalezeno : user_pref("CT1394623.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT139[...]
Nalezeno : user_pref("CT1394623.SearchInNewTabEnabled", true);
Nalezeno : user_pref("CT1394623.SearchInNewTabIntervalMM", 1440);
Nalezeno : user_pref("CT1394623.SearchInNewTabLastCheckTime", "Tue Nov 29 2011 15:39:26 GMT+0100");
Nalezeno : user_pref("CT1394623.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...]
Nalezeno : user_pref("CT1394623.SearchInNewTabUsageUrl", "hxxp://usage.hosting.toolbar.conduit-services.com/usa[...]
Nalezeno : user_pref("CT1394623.SearchProtectorEnabled", false);
Nalezeno : user_pref("CT1394623.SearchProtectorToolbarDisabled", false);
Nalezeno : user_pref("CT1394623.ServiceMapLastCheckTime", "Tue Nov 29 2011 15:39:25 GMT+0100");
Nalezeno : user_pref("CT1394623.SettingsCheckIntervalMin", 120);
Nalezeno : user_pref("CT1394623.SettingsLastCheckTime", "Tue Nov 29 2011 15:39:25 GMT+0100");
Nalezeno : user_pref("CT1394623.SettingsLastUpdate", "1321999273");
Nalezeno : user_pref("CT1394623.ThirdPartyComponentsInterval", 504);
Nalezeno : user_pref("CT1394623.ThirdPartyComponentsLastCheck", "Tue Nov 29 2011 15:39:25 GMT+0100");
Nalezeno : user_pref("CT1394623.ThirdPartyComponentsLastUpdate", "1312887586");
Nalezeno : user_pref("CT1394623.ToolbarDisabled", true);
Nalezeno : user_pref("CT1394623.ToolbarShrinkedFromSetup", false);
Nalezeno : user_pref("CT1394623.TrusteLinkUrl", "hxxp://trust.conduit.com/CT1394623");
Nalezeno : user_pref("CT1394623.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,clien[...]
Nalezeno : user_pref("CT1394623.UserID", "UN65205784948322128");
Nalezeno : user_pref("CT1394623.WeatherNetwork", "");
Nalezeno : user_pref("CT1394623.WeatherPollDate", "Tue Nov 29 2011 15:39:26 GMT+0100");
Nalezeno : user_pref("CT1394623.WeatherUnit", "C");
Nalezeno : user_pref("CT1394623.alertChannelId", "3869");
Nalezeno : user_pref("CT1394623.backendstorage.activationstep", "31");
Nalezeno : user_pref("CT1394623.backendstorage.firstrun", "31333232353737353639393430");
Nalezeno : user_pref("CT1394623.backendstorage.loadtimes", "31");
Nalezeno : user_pref("CT1394623.clientLogIsEnabled", true);
Nalezeno : user_pref("CT1394623.clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asm[...]
Nalezeno : user_pref("CT1394623.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.c[...]
Nalezeno : user_pref("CT1394623.globalFirstTimeInfoLastCheckTime", "Tue Nov 29 2011 15:39:26 GMT+0100");
Nalezeno : user_pref("CT1394623.homepageProtectorEnableByLogin", true);
Nalezeno : user_pref("CT1394623.initDone", true);
Nalezeno : user_pref("CT1394623.isAppTrackingManagerOn", true);
Nalezeno : user_pref("CT1394623.isFirstRadioInstallation", false);
Nalezeno : user_pref("CT1394623.myStuffEnabled", true);
Nalezeno : user_pref("CT1394623.myStuffPublihserMinWidth", 400);
Nalezeno : user_pref("CT1394623.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...]
Nalezeno : user_pref("CT1394623.myStuffServiceIntervalMM", 1440);
Nalezeno : user_pref("CT1394623.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...]
Nalezeno : user_pref("CT1394623.oldAppsList", "128421370034619386,128421370119306267,111,128829175611556846,128[...]
Nalezeno : user_pref("CT1394623.revertSettingsEnabled", true);
Nalezeno : user_pref("CT1394623.searchProtectorDialogDelayInSec", 10);
Nalezeno : user_pref("CT1394623.searchProtectorEnableByLogin", true);
Nalezeno : user_pref("CT1394623.testingCtid", "");
Nalezeno : user_pref("CT1394623.toolbarAppMetaDataLastCheckTime", "Tue Nov 29 2011 15:39:26 GMT+0100");
Nalezeno : user_pref("CT1394623.toolbarContextMenuLastCheckTime", "Tue Nov 29 2011 15:39:26 GMT+0100");
Nalezeno : user_pref("CT1394623.uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Reg[...]
Nalezeno : user_pref("CT1394623.usagesFlag", 2);
Nalezeno : user_pref("CT3072253..clientLogIsEnabled", true);
Nalezeno : user_pref("CT3072253..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...]
Nalezeno : user_pref("CT3072253..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...]
Nalezeno : user_pref("CT3072253.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);
Nalezeno : user_pref("CT3072253.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
Nalezeno : user_pref("CT3072253.AppTrackingLastCheckTime", "Sun May 06 2012 14:39:27 GMT+0200");
Nalezeno : user_pref("CT3072253.BrowserCompStateIsOpen_129573915102477663", true);
Nalezeno : user_pref("CT3072253.BrowserCompStateIsOpen_129749445881800338", true);
Nalezeno : user_pref("CT3072253.BrowserCompStateIsOpen_129805375651312503", true);
Nalezeno : user_pref("CT3072253.CTID", "CT3072253");
Nalezeno : user_pref("CT3072253.CurrentServerDate", "10-11-2012");
Nalezeno : user_pref("CT3072253.DSInstall", true);
Nalezeno : user_pref("CT3072253.DialogsAlignMode", "LTR");
Nalezeno : user_pref("CT3072253.DialogsGetterLastCheckTime", "Wed Nov 07 2012 12:30:58 GMT+0100");
Nalezeno : user_pref("CT3072253.DownloadReferralCookieData", "");
Nalezeno : user_pref("CT3072253.FirstServerDate", "6-5-2012");
Nalezeno : user_pref("CT3072253.FirstTime", true);
Nalezeno : user_pref("CT3072253.FirstTimeFF3", true);
Nalezeno : user_pref("CT3072253.FixPageNotFoundErrors", true);
Nalezeno : user_pref("CT3072253.GroupingServerCheckInterval", 1440);
Nalezeno : user_pref("CT3072253.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
Nalezeno : user_pref("CT3072253.HPInstall", true);
Nalezeno : user_pref("CT3072253.HasUserGlobalKeys", true);
Nalezeno : user_pref("CT3072253.HomePageProtectorEnabled", true);
Nalezeno : user_pref("CT3072253.HomepageBeforeUnload", "hxxp://search.conduit.com/?ctid=CT3072253&SearchSource=[...]
Nalezeno : user_pref("CT3072253.Initialize", true);
Nalezeno : user_pref("CT3072253.InitializeCommonPrefs", true);
Nalezeno : user_pref("CT3072253.InstallationAndCookieDataSentCount", 3);
Nalezeno : user_pref("CT3072253.InstallationId", "fft624C.tmp.exe");
Nalezeno : user_pref("CT3072253.InstallationType", "XPE");
Nalezeno : user_pref("CT3072253.InstalledDate", "Sun May 06 2012 14:39:04 GMT+0200");
Nalezeno : user_pref("CT3072253.IsGrouping", false);
Nalezeno : user_pref("CT3072253.IsInitSetupIni", true);
Nalezeno : user_pref("CT3072253.IsMulticommunity", false);
Nalezeno : user_pref("CT3072253.IsOpenThankYouPage", true);
Nalezeno : user_pref("CT3072253.IsOpenUninstallPage", false);
Nalezeno : user_pref("CT3072253.IsProtectorsInit", true);
Nalezeno : user_pref("CT3072253.LanguagePackLastCheckTime", "Fri Nov 09 2012 16:23:32 GMT+0100");
Nalezeno : user_pref("CT3072253.LanguagePackReloadIntervalMM", 1440);
Nalezeno : user_pref("CT3072253.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...]
Nalezeno : user_pref("CT3072253.LastLogin_3.12.0.8", "Sat Nov 10 2012 09:53:21 GMT+0100");
Nalezeno : user_pref("CT3072253.LatestVersion", "3.16.0.3");
Nalezeno : user_pref("CT3072253.Locale", "en");
Nalezeno : user_pref("CT3072253.MCDetectTooltipHeight", "83");
Nalezeno : user_pref("CT3072253.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
Nalezeno : user_pref("CT3072253.MCDetectTooltipWidth", "295");
Nalezeno : user_pref("CT3072253.MyStuffEnabledAtInstallation", true);
Nalezeno : user_pref("CT3072253.OriginalFirstVersion", "3.12.0.8");
Nalezeno : user_pref("CT3072253.SavedHomepage", "hxxp://www.idnes.cz/");
Nalezeno : user_pref("CT3072253.SearchCaption", "uTorrentControl2 Customized Web Search");
Nalezeno : user_pref("CT3072253.SearchEngineBeforeUnload", "uTorrentControl2 Customized Web Search");
Nalezeno : user_pref("CT3072253.SearchFromAddressBarIsInit", true);
Nalezeno : user_pref("CT3072253.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT307[...]
Nalezeno : user_pref("CT3072253.SearchInNewTabEnabled", true);
Nalezeno : user_pref("CT3072253.SearchInNewTabIntervalMM", 1440);
Nalezeno : user_pref("CT3072253.SearchInNewTabLastCheckTime", "Fri Nov 09 2012 16:23:32 GMT+0100");
Nalezeno : user_pref("CT3072253.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...]
Nalezeno : user_pref("CT3072253.SearchProtectorEnabled", true);
Nalezeno : user_pref("CT3072253.SearchProtectorToolbarDisabled", false);
Nalezeno : user_pref("CT3072253.SendProtectorDataViaLogin", true);
Nalezeno : user_pref("CT3072253.ServiceMapLastCheckTime", "Fri Nov 09 2012 16:23:32 GMT+0100");
Nalezeno : user_pref("CT3072253.SettingsLastCheckTime", "Sat Nov 10 2012 09:53:20 GMT+0100");
Nalezeno : user_pref("CT3072253.SettingsLastUpdate", "1352142245");
Nalezeno : user_pref("CT3072253.TBHomePageUrl", "hxxp://search.conduit.com/?ctid=CT3072253&SearchSource=13");
Nalezeno : user_pref("CT3072253.ThirdPartyComponentsInterval", 504);
Nalezeno : user_pref("CT3072253.ThirdPartyComponentsLastCheck", "Sun May 06 2012 14:39:03 GMT+0200");
Nalezeno : user_pref("CT3072253.ThirdPartyComponentsLastUpdate", "1312887586");
Nalezeno : user_pref("CT3072253.ToolbarShrinkedFromSetup", false);
Nalezeno : user_pref("CT3072253.TrusteLinkUrl", "hxxp://trust.conduit.com/CT3072253");
Nalezeno : user_pref("CT3072253.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,clien[...]
Nalezeno : user_pref("CT3072253.UserID", "UN81271552765198874");
Nalezeno : user_pref("CT3072253.alertChannelId", "1463702");
Nalezeno : user_pref("CT3072253.autoDisableScopes", -1);
Nalezeno : user_pref("CT3072253.backendstorage.cbcountry_000", "435A");
Nalezeno : user_pref("CT3072253.backendstorage.cbfirsttime", "53756E204D617920303620323031322031343A33393A30372[...]
Nalezeno : user_pref("CT3072253.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.c[...]
Nalezeno : user_pref("CT3072253.globalFirstTimeInfoLastCheckTime", "Sun May 06 2012 14:39:04 GMT+0200");
Nalezeno : user_pref("CT3072253.homepageProtectorEnableByLogin", true);
Nalezeno : user_pref("CT3072253.initDone", true);
Nalezeno : user_pref("CT3072253.isAppTrackingManagerOn", true);
Nalezeno : user_pref("CT3072253.myStuffEnabled", true);
Nalezeno : user_pref("CT3072253.myStuffPublihserMinWidth", 400);
Nalezeno : user_pref("CT3072253.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...]
Nalezeno : user_pref("CT3072253.myStuffServiceIntervalMM", 1440);
Nalezeno : user_pref("CT3072253.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...]
Nalezeno : user_pref("CT3072253.navigateToUrlOnSearch", false);
Nalezeno : user_pref("CT3072253.revertSettingsEnabled", true);
Nalezeno : user_pref("CT3072253.searchProtectorDialogDelayInSec", 10);
Nalezeno : user_pref("CT3072253.searchProtectorEnableByLogin", true);
Nalezeno : user_pref("CT3072253.testingCtid", "");
Nalezeno : user_pref("CT3072253.toolbarAppMetaDataLastCheckTime", "Fri Nov 09 2012 16:23:32 GMT+0100");
Nalezeno : user_pref("CT3072253.toolbarContextMenuLastCheckTime", "Sun May 06 2012 14:39:06 GMT+0200");
Nalezeno : user_pref("CT3072253.usagesFlag", 2);
Nalezeno : user_pref("CommunityToolbar.CantToolbarBeEngineOwner", "CT1394623");
Nalezeno : user_pref("CommunityToolbar.ConduitHomepagesList", "hxxp://search.conduit.com/?ctid=CT3072253&Search[...]
Nalezeno : user_pref("CommunityToolbar.ConduitSearchList", "uTorrentControl2 Customized Web Search");
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit. ... /CT3072253[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root ... 1011733/CZ", "\"0\"[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root ... 1108619/CZ", "\"0\"[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root ... 1164621/CZ", "\"0\"[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root ... 1168048/CZ", "\"0\"[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root ... 1206965/CZ", "\"0\"[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root ... 1285333/CZ", "\"0\"[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root ... 1348482/CZ", "\"0\"[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root ... /905414/CZ", "\"0\"")[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-ser ... =CT1394623", [...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-ser ... =CT3072253", [...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-serv ... tenApps&lo[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-serv ... tenApps&lo[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-serv ... erApps&loc[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-serv ... erApps&loc[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-serv ... redApps&lo[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-serv ... redApps&lo[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-serv ... lbar&local[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-serv ... lbar&local[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-ser ... rt/dlg.pkg", "\[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.engine.conduit-se ... ?ver=3.3.3[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-s ... g?ver=3.12[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-s ... kg?ver=3.3.[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-s ... kg?ver=3.8.[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/ ... =CT1394623",[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/ ... =CT3072253",[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services ... r=FF&lut=0", "63[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services ... ut=3/13/20[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.conduit-service ... 623&octid=[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit. ... /CT1394623[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/R ... t/equalize[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/R ... t/minimize[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/R ... t/play.gif[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/R ... t/stop.gif[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/R ... et/vol.gif"[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-serv ... ?locale=en", "\"7ed[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-serv ... cale=en-us", "\"[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/11348282.xml", "\"820759f1edf5ddc6b6e[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/1344951.xml", "\"d5b9ff4b9145f86e0d67[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/14293310.xml", "\"88e6c8591e934c7b49f[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/16727535.xml", "\"44dbd4669cbaae75be9[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/19058681.xml", "\"e9adc8c6ab6f63d59cb[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/20536157.xml", "\"011575903ea4d1fda92[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/2883841.xml", "\"845a6c7bfab8aaed4467[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/428333.xml", "\"f302eae3279640e35a00f[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/807095.xml", "\"7b289632afae853572c95[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/816653.xml", "\"38a0ffd603b66fb4a06ed[...]
Nalezeno : user_pref("CommunityToolbar.EngineHiddenByUser", false);
Nalezeno : user_pref("CommunityToolbar.EngineOwner", "ConduitEngine");
Nalezeno : user_pref("CommunityToolbar.EngineOwnerGuid", "engine@conduit.com");
Nalezeno : user_pref("CommunityToolbar.EngineOwnerToolbarId", "conduitengine");
Nalezeno : user_pref("CommunityToolbar.IsEngineShown", true);
Nalezeno : user_pref("CommunityToolbar.IsMyStuffImportedToEngine", true);
Nalezeno : user_pref("CommunityToolbar.LatestLibsPath", "file:///C:\\Users\\U~ivatel\\AppData\\Roaming\\Mozilla[...]
Nalezeno : user_pref("CommunityToolbar.LatestToolbarVersionInstalled", "3.12.0.8");
Nalezeno : user_pref("CommunityToolbar.MiniIPageGadgetPosition.hxxp://storage.conduit.com/MarketPlace/47/ca/47c[...]
Nalezeno : user_pref("CommunityToolbar.MiniIPageGadgetSize.hxxp://gmaps.conduitapps.com/v3.0.4/gadget.html", "8[...]
Nalezeno : user_pref("CommunityToolbar.OriginalEngineOwner", "ConduitEngine");
Nalezeno : user_pref("CommunityToolbar.OriginalEngineOwnerGuid", "engine@conduit.com");
Nalezeno : user_pref("CommunityToolbar.OriginalEngineOwnerToolbarId", "conduitengine");
Nalezeno : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "chrome://browser-region/locale/region.pr[...]
Nalezeno : user_pref("CommunityToolbar.ToolbarsList", "CT1394623,ConduitEngine,CT3072253");
Nalezeno : user_pref("CommunityToolbar.ToolbarsList2", "CT1394623,CT3072253");
Nalezeno : user_pref("CommunityToolbar.ToolbarsList4", "CT3072253");
Nalezeno : user_pref("CommunityToolbar.alert.alertDialogsGetterLastCheckTime", "Sat Mar 26 2011 10:08:47 GMT+01[...]
Nalezeno : user_pref("CommunityToolbar.alert.alertInfoInterval", 1440);
Nalezeno : user_pref("CommunityToolbar.alert.alertInfoLastCheckTime", "Thu Sep 29 2011 20:33:32 GMT+0200");
Nalezeno : user_pref("CommunityToolbar.alert.clientsServerUrl", "hxxp://alert.client.conduit.com");
Nalezeno : user_pref("CommunityToolbar.alert.firstTimeAlertShown", true);
Nalezeno : user_pref("CommunityToolbar.alert.locale", "en");
Nalezeno : user_pref("CommunityToolbar.alert.loginIntervalMin", 1440);
Nalezeno : user_pref("CommunityToolbar.alert.loginLastCheckTime", "Fri Sep 30 2011 18:44:52 GMT+0200");
Nalezeno : user_pref("CommunityToolbar.alert.loginLastUpdateTime", "1313487611");
Nalezeno : user_pref("CommunityToolbar.alert.messageShowTimeSec", 20);
Nalezeno : user_pref("CommunityToolbar.alert.servicesServerUrl", "hxxp://alert.services.conduit.com");
Nalezeno : user_pref("CommunityToolbar.alert.showTrayIcon", false);
Nalezeno : user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300);
Nalezeno : user_pref("CommunityToolbar.alert.userId", "81314215-5cc6-4793-983e-66e632a518ea");
Nalezeno : user_pref("CommunityToolbar.facebook.settingsLastCheckTime", "Tue Nov 29 2011 15:39:26 GMT+0100");
Nalezeno : user_pref("CommunityToolbar.globalUserId", "f69e3dfd-69c1-4e29-a6b4-1b76d0a3b22d");
Nalezeno : user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true);
Nalezeno : user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true);
Nalezeno : user_pref("CommunityToolbar.keywordURLSelectedCTID", "CT3072253");
Nalezeno : user_pref("CommunityToolbar.notifications.firstTimeAlertShown", true);
Nalezeno : user_pref("CommunityToolbar.originalHomepage", "hxxp://www.idnes.cz/");
Nalezeno : user_pref("CommunityToolbar.originalSearchEngine", "Google Blogs");
Nalezeno : user_pref("CommunityToolbar.twitter.user_11348282.LastCheckTime", "Tue Nov 29 2011 15:39:27 GMT+0100[...]
Nalezeno : user_pref("CommunityToolbar.twitter.user_1344951.LastCheckTime", "Tue Nov 29 2011 15:39:27 GMT+0100"[...]
Nalezeno : user_pref("CommunityToolbar.twitter.user_14293310.LastCheckTime", "Tue Nov 29 2011 15:39:27 GMT+0100[...]
Nalezeno : user_pref("CommunityToolbar.twitter.user_16727535.LastCheckTime", "Tue Nov 29 2011 15:39:27 GMT+0100[...]
Nalezeno : user_pref("CommunityToolbar.twitter.user_19058681.LastCheckTime", "Tue Nov 29 2011 15:39:27 GMT+0100[...]
Nalezeno : user_pref("CommunityToolbar.twitter.user_20536157.LastCheckTime", "Tue Nov 29 2011 15:39:27 GMT+0100[...]
Nalezeno : user_pref("CommunityToolbar.twitter.user_2883841.LastCheckTime", "Tue Nov 29 2011 15:39:27 GMT+0100"[...]
Nalezeno : user_pref("CommunityToolbar.twitter.user_428333.LastCheckTime", "Tue Nov 29 2011 15:39:27 GMT+0100")[...]
Nalezeno : user_pref("CommunityToolbar.twitter.user_807095.LastCheckTime", "Tue Nov 29 2011 15:39:27 GMT+0100")[...]
Nalezeno : user_pref("CommunityToolbar.twitter.user_816653.LastCheckTime", "Tue Nov 29 2011 15:39:27 GMT+0100")[...]
Nalezeno : user_pref("ConduitEngine.AppTrackingLastCheckTime", "Sat Mar 26 2011 15:55:07 GMT+0100");
Nalezeno : user_pref("ConduitEngine.BrowserCompStateIsOpen_3074119389266289102", true);
Nalezeno : user_pref("ConduitEngine.BrowserCompStateIsOpen_8556964412163870795", true);
Nalezeno : user_pref("ConduitEngine.CTID", "ConduitEngine");
Nalezeno : user_pref("ConduitEngine.DialogsGetterLastCheckTime", "Fri Sep 30 2011 14:45:55 GMT+0200");
Nalezeno : user_pref("ConduitEngine.FirstServerDate", "03/26/2011 12");
Nalezeno : user_pref("ConduitEngine.FirstTime", true);
Nalezeno : user_pref("ConduitEngine.FirstTimeFF3", true);
Nalezeno : user_pref("ConduitEngine.HasUserGlobalKeys", true);
Nalezeno : user_pref("ConduitEngine.Initialize", true);
Nalezeno : user_pref("ConduitEngine.InitializeCommonPrefs", true);
Nalezeno : user_pref("ConduitEngine.InstalledDate", "Sat Mar 26 2011 10:08:49 GMT+0100");
Nalezeno : user_pref("ConduitEngine.IsMulticommunity", false);
Nalezeno : user_pref("ConduitEngine.IsOpenThankYouPage", false);
Nalezeno : user_pref("ConduitEngine.IsOpenUninstallPage", true);
Nalezeno : user_pref("ConduitEngine.LanguagePackLastCheckTime", "Fri Sep 30 2011 18:44:52 GMT+0200");
Nalezeno : user_pref("ConduitEngine.LastLogin_3.3.3.2", "Fri Sep 30 2011 19:05:35 GMT+0200");
Nalezeno : user_pref("ConduitEngine.SearchFromAddressBarIsInit", true);
Nalezeno : user_pref("ConduitEngine.SettingsLastCheckTime", "Fri Sep 30 2011 19:05:34 GMT+0200");
Nalezeno : user_pref("ConduitEngine.UserID", "UN59327772828274561");
Nalezeno : user_pref("ConduitEngine.approveUntrustedApps", false);
Nalezeno : user_pref("ConduitEngine.backendstorage._fb_dailyactivity", "31333032343535353636353437");
Nalezeno : user_pref("ConduitEngine.backendstorage._fb_lifetimesent", "54525545");
Nalezeno : user_pref("ConduitEngine.backendstorage.facebbok_user_cuid_100001810296770", "32666332303030312D3763[...]
Nalezeno : user_pref("ConduitEngine.backendstorage.facebbok_user_id", "313030303031383130323936373730");
Nalezeno : user_pref("ConduitEngine.backendstorage.facebook_conduit_social_sskey_100001810296770", "6446767A6F4[...]
Nalezeno : user_pref("ConduitEngine.backendstorage.facebook_ctid_connect_send", "73656E646564");
Nalezeno : user_pref("ConduitEngine.backendstorage.facebook_ctid_connect_send_n", "73656E646564");
Nalezeno : user_pref("ConduitEngine.backendstorage.facebook_ctid_connect_send_new", "73656E646564");
Nalezeno : user_pref("ConduitEngine.backendstorage.facebook_first_visit", "6E6F744669727374");
Nalezeno : user_pref("ConduitEngine.backendstorage.facebook_last_message_choice", "756E72656164");
Nalezeno : user_pref("ConduitEngine.backendstorage.facebook_loggedin", "796573");
Nalezeno : user_pref("ConduitEngine.backendstorage.facebook_login_refresh", "302E373634393230363939313833383034[...]
Nalezeno : user_pref("ConduitEngine.backendstorage.facebook_login_status", "33");
Nalezeno : user_pref("ConduitEngine.backendstorage.facebook_lust_recieve", "333233323636332C333233323635382C");
Nalezeno : user_pref("ConduitEngine.backendstorage.facebook_lust_recievegadet", "353334313033382C");
Nalezeno : user_pref("ConduitEngine.backendstorage.facebook_mode", "32");
Nalezeno : user_pref("ConduitEngine.backendstorage.facebook_permission_allow_100001810296770", "31");
Nalezeno : user_pref("ConduitEngine.backendstorage.facebook_permission_lastshow_100001810296770", "313331313530[...]
Nalezeno : user_pref("ConduitEngine.backendstorage.facebook_toolbar_not_numer", "36");
Nalezeno : user_pref("ConduitEngine.backendstorage.facebook_user_locale", "656E");
Nalezeno : user_pref("ConduitEngine.backendstorage.facebook_user_name", "3078303034432C3078303036392C3078303036[...]
Nalezeno : user_pref("ConduitEngine.backendstorage.facebook_user_token", "3230393834353033353330347C63376432643[...]
Nalezeno : user_pref("ConduitEngine.backendstorage.facebooknotifications", "31");
Nalezeno : user_pref("ConduitEngine.backendstorage.fb_dailyactivity", "31333033373439353432323238");
Nalezeno : user_pref("ConduitEngine.backendstorage.fb_lifetimesent", "54525545");
Nalezeno : user_pref("ConduitEngine.backendstorage.hxxp://facebook_conduitapps_com/v3_2_4_ ... last_visit[...]
Nalezeno : user_pref("ConduitEngine.backendstorage.hxxp://facebook_conduitapps_com/v3_3.fa ... _visit_tab[...]
Nalezeno : user_pref("ConduitEngine.backendstorage.hxxp://facebook_conduitapps_com/v3_5.fa ... _visit_tab[...]
Nalezeno : user_pref("ConduitEngine.backendstorage.hxxp://facebook_conduitapps_com/v3_6.fa ... _visit_tab[...]
Nalezeno : user_pref("ConduitEngine.backendstorage.hxxp://facebook_conduitapps_com/v3_8.fa ... _visit_tab[...]
Nalezeno : user_pref("ConduitEngine.backendstorage.hxxp://facebook_conduitapps_com/v3_8.fa ... ission_sho[...]
Nalezeno : user_pref("ConduitEngine.backendstorage.hxxp://facebook_conduitapps_com/v3_9.fa ... _visit_tab[...]
Nalezeno : user_pref("ConduitEngine.backendstorage.hxxp://gmaps_conduitapps_com/v3_0_4.gmaps_country", "4F50415[...]
Nalezeno : user_pref("ConduitEngine.backendstorage.hxxp://gmaps_conduitapps_com/v3_0_4.gmaps_homelocation", "34[...]
Nalezeno : user_pref("ConduitEngine.backendstorage.hxxp://gmaps_conduitapps_com/v3_0_4.gmaps_ip", "38342E323434[...]
Nalezeno : user_pref("ConduitEngine.backendstorage.hxxp://gmaps_conduitapps_com/v3_0_4.gmaps_language", "456E67[...]
Nalezeno : user_pref("ConduitEngine.backendstorage.hxxp://gmaps_conduitapps_com/v3_0_4.gmaps_languagealias", "6[...]
Nalezeno : user_pref("ConduitEngine.backendstorage.hxxp://gmaps_conduitapps_com/v3_0_4.gma ... barcontent", "[...]
Nalezeno : user_pref("ConduitEngine.backendstorage.maps_user_first_login_date", "73656E64");
Nalezeno : user_pref("ConduitEngine.backendstorage.maps_user_survey_visit", "56495349544544");
Nalezeno : user_pref("ConduitEngine.componentAlertEnabled", true);
Nalezeno : user_pref("ConduitEngine.counterAppsAdded", 7);
Nalezeno : user_pref("ConduitEngine.counterAppsRemoved", 3);
Nalezeno : user_pref("ConduitEngine.engineLocale", "cs");
Nalezeno : user_pref("ConduitEngine.enngineContextMenuLastCheckTime", "Fri Sep 30 2011 18:44:52 GMT+0200");
Nalezeno : user_pref("ConduitEngine.globalFirstTimeInfoLastCheckTime", "Fri Sep 30 2011 18:44:52 GMT+0200");
Nalezeno : user_pref("ConduitEngine.initDone", true);
Nalezeno : user_pref("ConduitEngine.isAppTrackingManagerOn", true);
Nalezeno : user_pref("ConduitEngine.usagesFlag", 2);
Nalezeno : user_pref("browser.search.defaultthis.engineName", "uTorrentControl2 Customized Web Search");
Nalezeno : user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3072253&Sea[...]
Nalezeno : user_pref("icqtoolbar.allowSendURL", false);
Nalezeno : user_pref("icqtoolbar.defSearchChange", true);
Nalezeno : user_pref("icqtoolbar.engineVerified", true);
Nalezeno : user_pref("icqtoolbar.geolastmodified", 1316939121);
Nalezeno : user_pref("icqtoolbar.hiddenElements", "itb_options");
Nalezeno : user_pref("icqtoolbar.history", "hxxp%3A%2F%2Fwww.kssp.cz%2Fchov-stenata.php||mountfield||nejlevn%C4[...]
Nalezeno : user_pref("icqtoolbar.hpChange", true);
Nalezeno : user_pref("icqtoolbar.icqgeo", 42);
Nalezeno : user_pref("icqtoolbar.installTime", "1317360412");
Nalezeno : user_pref("icqtoolbar.newtab_state", "1");
Nalezeno : user_pref("icqtoolbar.numberOfSearches", 0);
Nalezeno : user_pref("icqtoolbar.previousFFVersion", "4.0");
Nalezeno : user_pref("icqtoolbar.skip_default_search", "no");
Nalezeno : user_pref("icqtoolbar.suggestions", false);
Nalezeno : user_pref("icqtoolbar.uninstStatSent", true);
Nalezeno : user_pref("icqtoolbar.uniqueID", "158736817315873686311316331189872");
Nalezeno : user_pref("icqtoolbar.usageStatstTimestamp", 1317321207);
Nalezeno : user_pref("icqtoolbar.userEngineApproved", true);
Nalezeno : user_pref("icqtoolbar.userHpApproved", true);
Nalezeno : user_pref("icqtoolbar.voucherHideClicks", 0);
Nalezeno : user_pref("icqtoolbar.voucherMoreLinkClicks", 0);
Nalezeno : user_pref("icqtoolbar.voucherRedeemClicks", 0);
Nalezeno : user_pref("icqtoolbar.voucherWasShown", 0);
Nalezeno : user_pref("icqtoolbar.xmlEnableHomePageDsGuard", true);
Nalezeno : user_pref("icqtoolbar.xmlEnableSuggestions", false);
Nalezeno : user_pref("icqtoolbar.xmlLanguage", "cs");
Nalezeno : user_pref("keyword.URL", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3072253&SearchSource=2&q=[...]

*************************

AdwCleaner[R1].txt - [50913 octets] - [06/06/2013 22:01:47]

########## EOF - C:\AdwCleaner[R1].txt - [50974 octets] ##########
Nahoru
Uživatelský avatar
karbi02
Level 2.5
Level 2.5
Příspěvky: 383
Registrován: březen 07
Pohlaví: Nespecifikováno
Stav:
Offline

Re: Prosím o kontrolu - modrá obrazovka

Příspěvekod karbi02 » 06 čer 2013 22:15

Malwarebytes Anti-Malware (Zkušební verze Malwarebytes Anti-Malware.) 1.75.0.1300
www.malwarebytes.org

Verze: v2013.06.06.08

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 10.0.9200.16576
Uživatel :: AMD [administrátor]

Ochrana: Povolena

6.6.2013 22:07:27
MBAM-log-2013-06-06 (22-15-20).txt

Typ: Rychlá kontrola
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 227327
Uplynulý čas: 6 minut, 6 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 8
C:\Users\Uživatel\Downloads\daemon-tools-pro-advanced-4-41-0314-0232-snd.rar.mwt (RiskWare.Tool.CK) -> Nebyla provedena žádná instrukce.
C:\Users\Uživatel\Downloads\Daemon-Tools-Pro-Advanced-v4.41.0315.0262-Retail+patch.rar (RiskWare.Tool.CK) -> Nebyla provedena žádná instrukce.
C:\Users\Uživatel\Downloads\DAEMON.Tools.5.1.0.0333(1).rar (Trojan.Swisyn) -> Nebyla provedena žádná instrukce.
C:\Users\Uživatel\Downloads\DAEMON.Tools.5.1.0.0333.rar (Trojan.Swisyn) -> Nebyla provedena žádná instrukce.
C:\Users\Uživatel\Downloads\GotClip_Setup(1).exe (PUP.Adware.Gotclip.ScamLotto) -> Nebyla provedena žádná instrukce.
C:\Users\Uživatel\Downloads\GotClip_Setup.exe (PUP.Adware.Gotclip.ScamLotto) -> Nebyla provedena žádná instrukce.
C:\Users\Uživatel\Downloads\TomTom_Keygen_2.1.A(1).zip (Trojan.Agent) -> Nebyla provedena žádná instrukce.
C:\Users\Uživatel\Downloads\TomTom_Keygen_2.1.A.zip (Trojan.Agent) -> Nebyla provedena žádná instrukce.

(konec)
Nahoru
Uživatelský avatar
memphisto
Guru Level 13
Guru Level 13
Příspěvky: 21113
Registrován: září 06
Bydliště: Zlín - České Budějovice
Pohlaví: Muž
Stav:
Offline

Re: Prosím o kontrolu - modrá obrazovka

Příspěvekod memphisto » 06 čer 2013 22:46

V Mbam i adw nech vše smazat a dodej logy po mazání

Stáhni si RogueKiller
32bit.:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
64bit.:
http://www.sur-la-toile.com/RogueKiller ... lerX64.exe
na svojí plochu.
- Zavři všechny ostatní programy a prohlížeče.
- Pro OS Vista a win7 spusť program RogueKiller.exe jako správce , u XP poklepáním.
- počkej až skončí Prescan -vyhledávání škodlivých procesů.
- Zkontroluj , zda máš zaškrtnuto:
Kontrola MBR
Kontrola Faked
Antirootkit
-Potom klikni na „Prohledat“.
- Program skenuje procesy PC. Po proskenování klikni na „Zpráva“celý obsah logu sem zkopíruj.
Pokud je program blokován , zkus ho spustit několikrát. Pokud dále program nepůjde spustit a pracovat, přejmenuj ho na winlogon.exe.
PRAVIDLA PC-HELP.CZ, PRAVIDLA sekce HijackThis, HijackThis návod, Memtest, CCleaner
Logy z programu HijackThis neposílejte prosím přes SZ, ale vkládejte je do patřičné sekce. Děkuji
Nahoru
Uživatelský avatar
karbi02
Level 2.5
Level 2.5
Příspěvky: 383
Registrován: březen 07
Pohlaví: Nespecifikováno
Stav:
Offline

Re: Prosím o kontrolu - modrá obrazovka

Příspěvekod karbi02 » 07 čer 2013 14:40

RogueKiller V8.5.4 _x64_ [Mar 18 2013] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Podpora : http://www.geekstogo.com/forum/files/fi ... guekiller/
Webové stránky : http://tigzy.geekstogo.com/roguekiller.php
: http://tigzyrk.blogspot.com/

Operační systém : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Spuštěno v : Normální režim
Uživatel : Uživatel [Práva správce]
Mód : Kontrola -- Datum : 06/07/2013 14:31:29
| ARK || FAK || MBR |

¤¤¤ Škodlivé procesy: : 0 ¤¤¤

¤¤¤ ¤¤¤ Záznamy Registrů: : 2 ¤¤¤
[HJ DESK] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> NALEZENO
[HJ DESK] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> NALEZENO

¤¤¤ Zvláštní soubory / Složky: ¤¤¤

¤¤¤ Ovladač : [NENAHRÁNO] ¤¤¤

¤¤¤ Soubor HOSTS: ¤¤¤
--> C:\Windows\system32\drivers\etc\hosts

127.0.0.1 www.iobit.com


¤¤¤ Kontrola MBR: ¤¤¤

+++++ PhysicalDrive0: SAMSUNG HD103SJ ATA Device +++++
--- User ---
[MBR] 77146d76e59a69724b2a77313bf4a04f
[BSP] 9f6cbe41f8e7b024444951d5b86b9a2c : Windows 7/8 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 100 Mo
1 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 206848 | Size: 253768 Mo
2 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 519923712 | Size: 699999 Mo
User = LL1 ... OK!
User = LL2 ... OK!

Dokončeno : << RKreport[1]_S_06072013_02d1431.txt >>
RKreport[1]_S_06072013_02d1431.txt




# AdwCleaner v2.301 - Log vytvooen 07/06/2013 v 14:32:53
# Aktualizováno 16/05/2013 Xplode
# Operaení systém : Windows 7 Home Premium Service Pack 1 (64 bits)
# Uživatel : Uživatel - AMD
# Spuštin systém : Normální
# Spuštino z : C:\Users\Uživatel\Downloads\adwcleaner.exe
# Volba [Prohledat]


***** [Služby] *****


***** [Soubory / Složky] *****


***** [Registry] *****


***** [Internetové prohlížeee] *****

-\\ Internet Explorer v10.0.9200.16576

[OK] Registry jsou eisté.

-\\ Mozilla Firefox v21.0 (cs)

Soubor : C:\Users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\ug9pn33s.default\prefs.js

[OK] Soubor je eistý.

*************************

AdwCleaner[R1].txt - [51022 octets] - [06/06/2013 22:01:47]
AdwCleaner[R2].txt - [51083 octets] - [07/06/2013 14:08:52]
AdwCleaner[R3].txt - [51203 octets] - [07/06/2013 14:09:58]
AdwCleaner[R4].txt - [873 octets] - [07/06/2013 14:32:53]
AdwCleaner[S1].txt - [326 octets] - [07/06/2013 14:09:14]
AdwCleaner[S2].txt - [50422 octets] - [07/06/2013 14:10:15]

########## EOF - C:\AdwCleaner[R4].txt - [1052 octets] ##########



Malwarebytes Anti-Malware (Zkušební verze Malwarebytes Anti-Malware.) 1.75.0.1300
www.malwarebytes.org

Verze: v2013.06.06.08

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 10.0.9200.16576
Uživatel :: AMD [administrátor]

Ochrana: Povolena

7.6.2013 14:33:48
mbam-log-2013-06-07 (14-33-48).txt

Typ: Rychlá kontrola
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 227128
Uplynulý čas: 6 minut, 5 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 0
(Žádné škodlivé položky nebyly zjištěny)

(konec)
Nahoru
Uživatelský avatar
memphisto
Guru Level 13
Guru Level 13
Příspěvky: 21113
Registrován: září 06
Bydliště: Zlín - České Budějovice
Pohlaví: Muž
Stav:
Offline

Re: Prosím o kontrolu - modrá obrazovka

Příspěvekod memphisto » 07 čer 2013 18:33

Spusť RogueKiller ( Pro Windows Vista nebo Windows 7, klepni pravým a vyber "Spustit jako správce", ve Windows XP poklepej ke spuštění).
- Počkej, až Prescan dokončí práci...
- Počkej, dokud status okno zobrazuje "Prohledat "

- Klikni na "Smazat"
- Počkej, dokud Status box zobrazuje "Smazání- Finished "
- Klikni na "Zprávy " a zkopíruj a vlož obsah té zprávy prosím sem. Log je možno nalézt v RKreport [číslo]. txt na ploše.
- Zavři RogueKiller


Jak je na tom PC? + nový HJT
PRAVIDLA PC-HELP.CZ, PRAVIDLA sekce HijackThis, HijackThis návod, Memtest, CCleaner
Logy z programu HijackThis neposílejte prosím přes SZ, ale vkládejte je do patřičné sekce. Děkuji
Nahoru
Uživatelský avatar
karbi02
Level 2.5
Level 2.5
Příspěvky: 383
Registrován: březen 07
Pohlaví: Nespecifikováno
Stav:
Offline

Re: Prosím o kontrolu - modrá obrazovka

Příspěvekod karbi02 » 09 čer 2013 10:41

PC se chová normálně, stahovat jde, do modré obrazovky to zatím nespadlo. Ještě chci poprosit, jestli jsou tam nějaké zbytečné aplikace, které by šly vypnout......


RogueKiller V8.5.4 _x64_ [Mar 18 2013] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Podpora : http://www.geekstogo.com/forum/files/fi ... guekiller/
Webové stránky : http://tigzy.geekstogo.com/roguekiller.php
: http://tigzyrk.blogspot.com/

Operační systém : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Spuštěno v : Normální režim
Uživatel : Uživatel [Práva správce]
Mód : Odebrat -- Datum : 06/09/2013 10:29:15
| ARK || FAK || MBR |

¤¤¤ Škodlivé procesy: : 0 ¤¤¤

¤¤¤ ¤¤¤ Záznamy Registrů: : 0 ¤¤¤

¤¤¤ Zvláštní soubory / Složky: ¤¤¤

¤¤¤ Ovladač : [NENAHRÁNO] ¤¤¤

¤¤¤ Soubor HOSTS: ¤¤¤
--> C:\Windows\system32\drivers\etc\hosts

127.0.0.1 www.iobit.com


¤¤¤ Kontrola MBR: ¤¤¤

+++++ PhysicalDrive0: SAMSUNG HD103SJ ATA Device +++++
--- User ---
[MBR] 77146d76e59a69724b2a77313bf4a04f
[BSP] 9f6cbe41f8e7b024444951d5b86b9a2c : Windows 7/8 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 100 Mo
1 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 206848 | Size: 253768 Mo
2 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 519923712 | Size: 699999 Mo
User = LL1 ... OK!
User = LL2 ... OK!

Dokončeno : << RKreport[4]_D_06092013_02d1029.txt >>
RKreport[1]_S_06082013_02d0759.txt ; RKreport[2]_D_06082013_02d0800.txt ; RKreport[3]_S_06092013_02d1028.txt ; RKreport[4]_D_06092013_02d1029.txt




U hijackthisu mi vyskočilo na začátku toto, jen ta lomítka jsou obráceně v tom řádku, neumím je napsat:

For some reason your system denied write a access to the HOsts file. If any hijacked domains are in this file, HijackThis may NOT be able to fix this.

If that happens, you need to edit the file yourself. To do this, click Start, Run and type:

notepad C:/Windows/System32/drivers/etc/hosts

and press Enter. Find the line(s) HijakdThis reports and delete them. Save the file as ´hosts.´ (with quotes), and reboot.

For Vista: simply, exit HijackThis, riht click on the HijackThis icon, choose Ŕun as administrator´.


Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:41:18, on 9.6.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16576)
Boot mode: Normal

Running processes:
C:\Windows\PixArt\PAC7302\Monitor.exe
C:\Windows\System32\spool\drivers\x64\3\WrtMon.exe
C:\Windows\System32\spool\drivers\x64\3\WrtProc.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_202.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_202.exe
C:\Users\Uživatel\Downloads\hijackthis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: E-Web Print - {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll
O2 - BHO: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - (no file)
O2 - BHO: AMD SteadyVideo BHO - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - (no file)
O2 - BHO: Pomocná služba pro přihlášení ke službě Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: (no name) - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - (no file)
O3 - Toolbar: E-Web Print - {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll
O4 - HKLM\..\Run: [HDAudDeck] C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe -r
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {0067DBFC-A752-458C-AE6E-B9C7E63D4824} (Detekce zařízení) - http://www.logitech.com/devicedetector/ ... tion32.cab
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll
O18 - Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Keyboard And Mouse Communication Service (KMWDSERVICE) - UASSOFT.COM - C:\Program Files (x86)\Mouse Driver\KMWDSrv.exe
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files (x86)\McAfee Security Scan\3.0.285\McCHSvc.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @C:\Program Files (x86)\Nero\Update\NASvc.exe,-200 (NAUpdate) - Nero AG - C:\Program Files (x86)\Nero\Update\NASvc.exe
O23 - Service: O&O Defrag (OODefragAgent) - O&O Software GmbH - C:\Program Files\OO Software\Defrag\oodag.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: Soluto Launcher Service (SolutoLauncherService) - Soluto - C:\Program Files\Soluto\SolutoLauncherService.exe
O23 - Service: Soluto Remote Service (SolutoRemoteService) - Soluto - C:\Program Files\Soluto\SolutoRemoteService.exe
O23 - Service: Soluto PCGenome Core Service (SolutoService) - Soluto - C:\Program Files\Soluto\SolutoService.exe
O23 - Service: SPAMfighter Update Service - SPAMfighter ApS - C:\Program Files (x86)\Fighters\SPAMfighter\sfus.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: Suite Service - SPAMfighter ApS - C:\Program Files (x86)\Fighters\FighterSuiteService.exe
O23 - Service: TeamViewer 7 (TeamViewer7) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe
O23 - Service: TomTomHOMEService - TomTom - C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: VIA Karaoke digital mixer Service (VIAKaraokeService) - Unknown owner - C:\Windows\system32\viakaraokesrv.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 10078 bytes
Nahoru
Uživatelský avatar
jaro3
člen Security týmu
Guru Level 15
Guru Level 15
Příspěvky: 43298
Registrován: červen 07
Bydliště: Jižní Čechy
Pohlaví: Muž
Stav:
Offline

Re: Prosím o kontrolu - modrá obrazovka

Příspěvekod jaro3 » 09 čer 2013 11:27

Odinstaluj:
McAfee Security Scan

Zavři ostatní aplikace a prohlížeče, odpoj se od netu a fixni v HJT:
Návod


Kód: Vybrat vše

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - (no file)
O2 - BHO: AMD SteadyVideo BHO - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - (no file)
O3 - Toolbar: (no name) - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - (no file)

Stáhni si na svojí plochu StartupLite .exe by MalwareBytes

Tento program identifikuje a dává volbu k odstranění nepotřebných položek k vyprázdnění paměti.
Poklepej na ikonu StartupLite.exe (by MalwareBytes ) ke spuštění programu. Ve vistě a windows 7 spusť jako správce (pravým klik na ikonu a vyber-spustit jako správce).Vytvoří se list nepotřebných vstupů po spuštění. Nech všechny položky jako deaktivované a klikni na Continue . Restartuj PC.

Jinak je to OK?
Při práci s programy HJT, ComboFix,MbAM, SDFix aj. zavřete všechny ostatní aplikace a prohlížeče!
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
Nahoru
Uživatelský avatar
karbi02
Level 2.5
Level 2.5
Příspěvky: 383
Registrován: březen 07
Pohlaví: Nespecifikováno
Stav:
Offline

Re: Prosím o kontrolu - modrá obrazovka

Příspěvekod karbi02 » 09 čer 2013 12:35

Startuplite nic nepotřebného nenašel, ten hijackthis furt vyhazuje tu hlášku, ale předpokládám, že to nevadí. Vypadá to že vše je OK. Díky moc .-)
Nahoru
Uživatelský avatar
memphisto
Guru Level 13
Guru Level 13
Příspěvky: 21113
Registrován: září 06
Bydliště: Zlín - České Budějovice
Pohlaví: Muž
Stav:
Offline

Re: Prosím o kontrolu - modrá obrazovka  Vyřešeno

Příspěvekod memphisto » 09 čer 2013 12:48

Té hlášky se zbavíš tak, že na spouštěcí soubor klikneš pravým a dáš možnost spustit jako správce (run as administrator). Máš to tam napsané. Pro rychlejší start PC můžeš taky vypnout spouštění Skype a Deamon Tools po stratu PC. Zpomaluje to náběh PC.
PRAVIDLA PC-HELP.CZ, PRAVIDLA sekce HijackThis, HijackThis návod, Memtest, CCleaner
Logy z programu HijackThis neposílejte prosím přes SZ, ale vkládejte je do patřičné sekce. Děkuji
Nahoru
Zamčeno

Zpět na “HiJackThis”

Kdo je online

Uživatelé prohlížející si toto fórum: Žádní registrovaní uživatelé a 111 hostů