PC-HELP.CZ

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:32:45, on 1.7.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v8.00 (8.00.7601.17514)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe
C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe
C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe
C:\Windows\AsScrPro.exe
C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
C:\Program Files (x86)\McAfee Security Scan\3.0.318\SSScheduler.exe
C:\Program Files (x86)\Internet Explorer\IELowutil.exe
C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe
I:\HiJackThis\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://asus.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.crawler.com/search/dispatche ... p=aus&qkw=%s&tbid=60515
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://eu.ask.com/?l=dis&o=APN10272&gct=hp&apn_ptnrs=^AH3&apn_dtid=^pfm022^VO^CZ&p2=^AH3^pfm022^VO^CZ&tpid=KMP-SAT&apn_dbr=ff_19.0&apn_uid=34C23308-B90C-4A95-B248-018BE350073B&itbv=11.7.1.1225&doi=2013-03-11
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://toolbar.inbox.com/search/ie.aspx ... 096&lng=cs
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://toolbar.inbox.com/help/sa_custom ... tbid=80096
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://toolbar.inbox.com/search/ie.aspx ... 096&lng=cs
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://toolbar.inbox.com/help/sa_custom ... tbid=80096
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: SearchHook Class - {D8278076-BC68-4484-9233-6E7F1628B56C} - "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\searchhook.dll" (file missing)
R3 - URLSearchHook: UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (file missing)
R3 - URLSearchHook: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~2\Crawler\Toolbar\ctbr.dll
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files (x86)\McAfee Security Scan\3.0.318\McAfeeMSS_IE.dll
O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~2\Crawler\Toolbar\ctbr.dll
O2 - BHO: Bing Bar Helper - {1dad3af3-ef2f-4f64-ac4b-11789189fcb6} - C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\BingExt.dll
O2 - BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll
O2 - BHO: Lync Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O2 - BHO: Ask Shopping Toolbar BHO - {4B4D502D-5341-5400-76A7-7A786E7484D7} - "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\KMP-SAT\Passport.dll" (file missing)
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Pomocná služba pro přihlášení ke službě Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office15\URLREDIR.DLL
O2 - BHO: uTorrentBar Toolbar - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files (x86)\uTorrentBar\tbuTor.dll (file missing)
O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MICROS~1\Office15\GROOVEEX.DLL
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (file missing)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: uTorrentBar Toolbar - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files (x86)\uTorrentBar\tbuTor.dll (file missing)
O3 - Toolbar: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll (file missing)
O3 - Toolbar: &Crawler lišta - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - C:\PROGRA~2\Crawler\Toolbar\ctbr.dll
O3 - Toolbar: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (file missing)
O3 - Toolbar: Bing Bar - {eec0f710-38b5-4aba-99bf-ec87564a4e13} - "C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\BingExt.dll" (file missing)
O3 - Toolbar: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O3 - Toolbar: Ask Shopping Toolbar - {4B4D502D-5341-5400-76A7-7A786E7484D7} - "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\KMP-SAT\Passport.dll" (file missing)
O4 - HKLM\..\Run: [UpdateLBPShortCut] "C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\LabelPrint" UpdateWithCreateOnce "Software\CyberLink\LabelPrint\2.5"
O4 - HKLM\..\Run: [UpdateP2GoShortCut] "C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\6.0"
O4 - HKLM\..\Run: [ATKOSD2] C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
O4 - HKLM\..\Run: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
O4 - HKLM\..\Run: [HControlUser] C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
O4 - HKLM\..\Run: [Setwallpaper] c:\programdata\SetWallpaper.cmd
O4 - HKLM\..\Run: [VirtualCloneDrive] "C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
O4 - HKLM\..\Run: [amd_dc_opt] C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe
O4 - HKLM\..\Run: [ApnUpdater] "C:\Program Files (x86)\Ask.com\Updater\Updater.exe"
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [ApnTBMon] "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe"
O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
O4 - HKCU\..\Run: [AARC] C:\Users\Tomas\Documents\System\winsystem.exe
O4 - HKCU\..\Run: [uTorrent] "C:\Program Files (x86)\uTorrent\uTorrent.exe" /MINIMIZED
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: FancyStart daemon.lnk = ?
O4 - Global Startup: McAfee Security Scan Plus.lnk = C:\Program Files (x86)\McAfee Security Scan\3.0.318\SSScheduler.exe
O4 - Global Startup: SRS Premium Sound.lnk = ?
O8 - Extra context menu item: Crawler Search - tbr:iemenu
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do Microsoft Excelu - res://C:\PROGRA~2\MICROS~1\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105
O8 - Extra context menu item: Od&eslat do OneNotu - res://C:\PROGRA~2\MICROS~1\Office15\ONBttnIE.dll/105
O9 - Extra button: Přidat na blog - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Přidat na blog Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odeslat do OneNotu - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do OneNotu - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra button: Volání kliknutím v Lyncu - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra 'Tools' menuitem: Volání kliknutím v Lyncu - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL
O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - C:\PROGRA~2\Crawler\Toolbar\ctbr.dll
O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: ADSM Service (ADSMService) - ASUSTek Computer Inc. - C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe
O23 - Service: AFBAgent - Unknown owner - C:\Windows\system32\FBAgent.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Ask Update Service (APNMCP) - APN LLC. - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe
O23 - Service: ASLDR Service (ASLDRService) - ASUS - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - ASUS - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files (x86)\McAfee Security Scan\3.0.318\McCHSvc.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: spmgr - Unknown owner - C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Windows\SysWOW64\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 17032 bytes

Odinstaluj:
McAfee Security Scan

Zavři ostatní aplikace a prohlížeče, odpoj se od netu a fixni v HJT:
Návod




Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected. Poté klikni na Main (hlavní stránku ) a klikni na Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranění historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit dočasné soubory Windows, vysypat koš atd.


Stáhni si TFC
Otevři soubor a zavři všechny ostatní okna, Klikni na Start k zahájení procesu. Program by neměl trvat dlouho.
Poté by se měl PC restartovat, pokud ne , proveď sám.

Stáhni AdwCleaner

Ulož si ho na svojí plochu
Ukonči všechny programy , okna a prohlížeče
Spusť program poklepáním a klikni na „Prohledat“
Po skenu se objeví log ( jinak je uložen systémovem disku jako AdwCleaner[R?].txt), jeho obsah sem celý vlož.

Stáhni si Malwarebytes' Anti-Malware
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Aktualizace Malwarebytes' Anti-Malware a Spustit aplikaci Malwarebytes' Anti-Malware, pokud jo tak klikni na tlačítko konec
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a nech vybranou možnost Provést rychlý sken a klikni na tlačítko Skenovat
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Zobrazit výsledky
- pak zvol možnost uložit log a ulož si log na plochu
- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).
Vlož sem pak obsah toho logu.

Pokud budou problémy , spusť v nouz. režimu.

# AdwCleaner v2.303 - Log vytvooen 02/07/2013 v 14:13:09
# Aktualizováno 08/06/2013 Xplode
# Operaení systém : Windows 7 Home Premium Service Pack 1 (64 bits)
# Uživatel : Tomas - TOMASPC
# Spuštin systém : Normální
# Spuštino z : D:\Desktop\adwcleaner.exe
# Volba [Prohledat]


***** [Služby] *****


***** [Soubory / Složky] *****

Složka Nalezeno : C:\Program Files (x86)\Conduit
Složka Nalezeno : C:\Program Files (x86)\ConduitEngine
Složka Nalezeno : C:\ProgramData\APN
Složka Nalezeno : C:\ProgramData\Ask
Složka Nalezeno : C:\ProgramData\Partner
Složka Nalezeno : C:\Users\Tomas\AppData\LocalLow\Conduit
Složka Nalezeno : C:\Users\Tomas\AppData\LocalLow\ConduitEngine
Složka Nalezeno : C:\Users\Tomas\AppData\LocalLow\PriceGong
Složka Nalezeno : C:\Users\Tomas\AppData\LocalLow\uTorrentBar
Složka Nalezeno : C:\Users\Tomas\AppData\Roaming\Mozilla\Firefox\Profiles\e76iqpxb.default\Conduit
Složka Nalezeno : C:\Users\Tomas\AppData\Roaming\Mozilla\Firefox\Profiles\e76iqpxb.default\ConduitCommon
Složka Nalezeno : C:\Users\Tomas\AppData\Roaming\Mozilla\Firefox\Profiles\e76iqpxb.default\ConduitEngine
Složka Nalezeno : C:\Users\Tomas\AppData\Roaming\Mozilla\Firefox\Profiles\e76iqpxb.default\CT2786678
Složka Nalezeno : C:\Users\Tomas\AppData\Roaming\Mozilla\Firefox\Profiles\e76iqpxb.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}
Složka Nalezeno : C:\Users\Tomas\AppData\Roaming\Mozilla\Firefox\Profiles\e76iqpxb.default\extensions\DTToolbar@toolbarnet.com
Složka Nalezeno : C:\Users\Tomas\AppData\Roaming\Mozilla\Firefox\Profiles\e76iqpxb.default\extensions\engine@conduit.com
Soubor Nalezeno : C:\Program Files (x86)\Mozilla Firefox\searchplugins\crawlersrch.xml
Soubor Nalezeno : C:\Users\Tomas\AppData\Roaming\Mozilla\Firefox\Profiles\e76iqpxb.default\searchplugins\Askcom.xml
Soubor Nalezeno : C:\Users\Tomas\AppData\Roaming\Mozilla\Firefox\Profiles\e76iqpxb.default\searchplugins\askcomsearch.xml
Soubor Nalezeno : C:\Users\Tomas\AppData\Roaming\Mozilla\Firefox\Profiles\e76iqpxb.default\searchplugins\Conduit.xml
Soubor Nalezeno : C:\Users\Tomas\AppData\Roaming\Mozilla\Firefox\Profiles\e76iqpxb.default\searchplugins\daemon-search.xml

***** [Registry] *****

Hodnota Nalezeno : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{32099AAC-C132-4136-9E9A-4E364A424E17}]
Hodnota Nalezeno : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{4B3803EA-5230-4DC3-A7FC-33638F3D3542}]
Hodnota Nalezeno : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC}]
Hodnota Nalezeno : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Hodnota Nalezeno : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC}]
Hodnota Nalezeno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{32099AAC-C132-4136-9E9A-4E364A424E17}]
Klíe Nalezeno : HKCU\Software\APN PIP
Klíe Nalezeno : HKCU\Software\AppDataLow\Software\Conduit
Klíe Nalezeno : HKCU\Software\AppDataLow\Software\conduitEngine
Klíe Nalezeno : HKCU\Software\AppDataLow\Software\conduitEngine
Klíe Nalezeno : HKCU\Software\AppDataLow\Software\PriceGong
Klíe Nalezeno : HKCU\Software\AppDataLow\Software\uTorrentBar
Klíe Nalezeno : HKCU\Software\AppDataLow\Toolbar
Klíe Nalezeno : HKCU\Software\Conduit
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{30F9B915-B755-4826-820B-08FBA6BD249D}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{30F9B915-B755-4826-820B-08FBA6BD249D}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{32099AAC-C132-4136-9E9A-4E364A424E17}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{4B3803EA-5230-4DC3-A7FC-33638F3D3542}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{83FF80F4-8C74-4B80-B5BA-C8DDD434E5C4}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{23E47A90-8C46-42E0-9F40-276844353FA2}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{30F9B915-B755-4826-820B-08FBA6BD249D}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{30F9B915-B755-4826-820B-08FBA6BD249D}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{32099AAC-C132-4136-9E9A-4E364A424E17}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4B3803EA-5230-4DC3-A7FC-33638F3D3542}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{83FF80F4-8C74-4B80-B5BA-C8DDD434E5C4}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8736C681-37A0-40C6-A0F0-4C083409151C}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
Klíe Nalezeno : HKCU\Software\Softonic
Klíe Nalezeno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}
Klíe Nalezeno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AD22EBAF-0D18-4FC7-90CC-5EA0ABBE9EB8}
Klíe Nalezeno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
Klíe Nalezeno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{C04B7D22-5AEC-4561-8F49-27F6269208F6}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\AppID\GenericAskToolbar.DLL
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Conduit.Engine
Klíe Nalezeno : HKLM\SOFTWARE\Classes\DTToolbar.ToolBandObj
Klíe Nalezeno : HKLM\SOFTWARE\Classes\DTToolbar.ToolBandObj.1
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Toolbar.CT2786678
Klíe Nalezeno : HKLM\SOFTWARE\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}
Klíe Nalezeno : HKLM\Software\Conduit
Klíe Nalezeno : HKLM\Software\conduitEngine
Klíe Nalezeno : HKLM\Software\conduitEngine
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Tracing\CToolbar_RASMANCS
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{23E47A90-8C46-42E0-9F40-276844353FA2}
Klíe Nalezeno : HKLM\Software\PIP
Klíe Nalezeno : HKLM\Software\uTorrentBar
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{02DF5308-1059-4D92-A2EE-A016FC0E3F0A}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{540AD342-647D-4185-A335-B999DB575B37}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\conduitEngine
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\conduitEngine
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
Klíe Nalezeno : HKU\S-1-5-21-616582096-447061266-1765324328-1001\Software\Microsoft\Internet Explorer\SearchScopes\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}
Klíe Nalezeno : HKU\S-1-5-21-616582096-447061266-1765324328-1001\Software\Microsoft\Internet Explorer\SearchScopes\{AD22EBAF-0D18-4FC7-90CC-5EA0ABBE9EB8}
Klíe Nalezeno : HKU\S-1-5-21-616582096-447061266-1765324328-1001\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
Klíe Nalezeno : HKU\S-1-5-21-616582096-447061266-1765324328-1001\Software\Microsoft\Internet Explorer\SearchScopes\{C04B7D22-5AEC-4561-8F49-27F6269208F6}

***** [Internetové prohlížeee] *****

-\\ Internet Explorer v8.0.7601.17514

[HKCU\Software\Microsoft\Internet Explorer\Main - Search Bar] = hxxp://www.crawler.com/search/dispatche ... p=aus&qkw=%s&tbid=60515

-\\ Mozilla Firefox v21.0 (cs)

Soubor : C:\Users\Tomas\AppData\Roaming\Mozilla\Firefox\Profiles\e76iqpxb.default\prefs.js

Nalezeno : user_pref("CT2786678..clientLogIsEnabled", true);
Nalezeno : user_pref("CT2786678..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...]
Nalezeno : user_pref("CT2786678..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...]
Nalezeno : user_pref("CT2786678.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);
Nalezeno : user_pref("CT2786678.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
Nalezeno : user_pref("CT2786678.BrowserCompStateIsOpen_129579220236217502", true);
Nalezeno : user_pref("CT2786678.BrowserCompStateIsOpen_130067977588633691", true);
Nalezeno : user_pref("CT2786678.BrowserCompStateIsOpen_1359634298000", true);
Nalezeno : user_pref("CT2786678.CTID", "CT2786678");
Nalezeno : user_pref("CT2786678.CommunitiesChangesLastCheckTime", "0");
Nalezeno : user_pref("CT2786678.CurrentServerDate", "29-6-2013");
Nalezeno : user_pref("CT2786678.DialogsAlignMode", "LTR");
Nalezeno : user_pref("CT2786678.DialogsGetterLastCheckTime", "Fri Jun 28 2013 19:30:37 GMT+0200");
Nalezeno : user_pref("CT2786678.DownloadReferralCookieData", "");
Nalezeno : user_pref("CT2786678.EMailNotifierPollDate", "Fri Jan 07 2011 18:27:23 GMT+0100");
Nalezeno : user_pref("CT2786678.FeedLastCount5690698542593514850", 283);
Nalezeno : user_pref("CT2786678.FeedPollDate129301619375443753", "Fri Jan 07 2011 17:46:26 GMT+0100");
Nalezeno : user_pref("CT2786678.FeedPollDate129301619375443759", "Fri Jan 07 2011 17:46:26 GMT+0100");
Nalezeno : user_pref("CT2786678.FeedPollDate129301619375444699", "Fri Jan 07 2011 17:46:24 GMT+0100");
Nalezeno : user_pref("CT2786678.FeedPollDate129301619375444705", "Fri Jan 07 2011 17:46:24 GMT+0100");
Nalezeno : user_pref("CT2786678.FeedPollDate129301619375444711", "Fri Jan 07 2011 17:46:25 GMT+0100");
Nalezeno : user_pref("CT2786678.FeedPollDate129301619375444717", "Fri Jan 07 2011 17:46:25 GMT+0100");
Nalezeno : user_pref("CT2786678.FeedPollDate129301619375444723", "Fri Jan 07 2011 17:46:25 GMT+0100");
Nalezeno : user_pref("CT2786678.FeedPollDate129301619375444729", "Fri Jan 07 2011 17:46:25 GMT+0100");
Nalezeno : user_pref("CT2786678.FeedPollDate129301619375444735", "Fri Jan 07 2011 17:46:25 GMT+0100");
Nalezeno : user_pref("CT2786678.FeedPollDate129301619375444741", "Fri Jan 07 2011 17:46:25 GMT+0100");
Nalezeno : user_pref("CT2786678.FeedPollDate129301619375444747", "Fri Jan 07 2011 17:46:25 GMT+0100");
Nalezeno : user_pref("CT2786678.FeedTTL129301619375444699", 10);
Nalezeno : user_pref("CT2786678.FeedTTL129301619375444723", 15);
Nalezeno : user_pref("CT2786678.FeedTTL129301619375444735", 5);
Nalezeno : user_pref("CT2786678.FeedTTL129301619375444747", 5);
Nalezeno : user_pref("CT2786678.FirstServerDate", "7-1-2011");
Nalezeno : user_pref("CT2786678.FirstTime", true);
Nalezeno : user_pref("CT2786678.FirstTimeFF3", true);
Nalezeno : user_pref("CT2786678.FixPageNotFoundErrors", false);
Nalezeno : user_pref("CT2786678.GroupingInvalidateCache", false);
Nalezeno : user_pref("CT2786678.GroupingLastCheckTime", "0");
Nalezeno : user_pref("CT2786678.GroupingLastServerUpdateTime", "0");
Nalezeno : user_pref("CT2786678.GroupingServerCheckInterval", 1440);
Nalezeno : user_pref("CT2786678.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
Nalezeno : user_pref("CT2786678.HasUserGlobalKeys", true);
Nalezeno : user_pref("CT2786678.Initialize", true);
Nalezeno : user_pref("CT2786678.InitializeCommonPrefs", true);
Nalezeno : user_pref("CT2786678.InstallationAndCookieDataSentCount", 3);
Nalezeno : user_pref("CT2786678.InstallationType", "UnknownIntegration");
Nalezeno : user_pref("CT2786678.InstalledDate", "Fri Jan 07 2011 14:11:12 GMT+0100");
Nalezeno : user_pref("CT2786678.InvalidateCache", false);
Nalezeno : user_pref("CT2786678.IsGrouping", false);
Nalezeno : user_pref("CT2786678.IsMulticommunity", false);
Nalezeno : user_pref("CT2786678.IsOpenThankYouPage", true);
Nalezeno : user_pref("CT2786678.IsOpenUninstallPage", false);
Nalezeno : user_pref("CT2786678.LanguagePackLastCheckTime", "Sat Jun 29 2013 20:10:13 GMT+0200");
Nalezeno : user_pref("CT2786678.LanguagePackReloadIntervalMM", 1440);
Nalezeno : user_pref("CT2786678.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...]
Nalezeno : user_pref("CT2786678.LastLogin_3.14.1.0", "Mon Aug 27 2012 14:31:43 GMT+0200");
Nalezeno : user_pref("CT2786678.LastLogin_3.15.1.0", "Wed Nov 07 2012 10:03:49 GMT+0100");
Nalezeno : user_pref("CT2786678.LastLogin_3.16.0.3", "Fri Feb 08 2013 16:28:36 GMT+0100");
Nalezeno : user_pref("CT2786678.LastLogin_3.18.0.7", "Sat Jun 29 2013 20:10:13 GMT+0200");
Nalezeno : user_pref("CT2786678.LastLogin_3.2.5.2", "Fri Jan 07 2011 18:11:12 GMT+0100");
Nalezeno : user_pref("CT2786678.LatestVersion", "3.18.0.7");
Nalezeno : user_pref("CT2786678.Locale", "en");
Nalezeno : user_pref("CT2786678.MCDetectTooltipHeight", "83");
Nalezeno : user_pref("CT2786678.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
Nalezeno : user_pref("CT2786678.MCDetectTooltipWidth", "295");
Nalezeno : user_pref("CT2786678.MyStuffEnabledAtInstallation", true);
Nalezeno : user_pref("CT2786678.RadioLastCheckTime", "0");
Nalezeno : user_pref("CT2786678.RadioLastUpdateIPServer", "0");
Nalezeno : user_pref("CT2786678.RadioLastUpdateServer", "0");
Nalezeno : user_pref("CT2786678.SavedHomepage", "hxxp://search.conduit.com/?ctid=&SearchSource=13");
Nalezeno : user_pref("CT2786678.SearchFromAddressBarIsInit", true);
Nalezeno : user_pref("CT2786678.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT278[...]
Nalezeno : user_pref("CT2786678.SearchInNewTabEnabled", true);
Nalezeno : user_pref("CT2786678.SearchInNewTabIntervalMM", 1440);
Nalezeno : user_pref("CT2786678.SearchInNewTabLastCheckTime", "Sat Jun 29 2013 20:10:12 GMT+0200");
Nalezeno : user_pref("CT2786678.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...]
Nalezeno : user_pref("CT2786678.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageServic[...]
Nalezeno : user_pref("CT2786678.SearchProtectorToolbarDisabled", true);
Nalezeno : user_pref("CT2786678.ServiceMapLastCheckTime", "Sat Jun 29 2013 20:10:13 GMT+0200");
Nalezeno : user_pref("CT2786678.SettingsLastCheckTime", "Sat Jun 29 2013 20:10:11 GMT+0200");
Nalezeno : user_pref("CT2786678.SettingsLastUpdate", "1372493506");
Nalezeno : user_pref("CT2786678.ThirdPartyComponentsInterval", 504);
Nalezeno : user_pref("CT2786678.ThirdPartyComponentsLastCheck", "Fri Jan 07 2011 14:11:10 GMT+0100");
Nalezeno : user_pref("CT2786678.ThirdPartyComponentsLastUpdate", "1246790578");
Nalezeno : user_pref("CT2786678.ToolbarDisabled", true);
Nalezeno : user_pref("CT2786678.ToolbarShrinkedFromSetup", false);
Nalezeno : user_pref("CT2786678.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2786678");
Nalezeno : user_pref("CT2786678.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,clien[...]
Nalezeno : user_pref("CT2786678.UserID", "UN04106641109544148");
Nalezeno : user_pref("CT2786678.WeatherNetwork", "");
Nalezeno : user_pref("CT2786678.WeatherPollDate", "Fri Jan 07 2011 17:46:26 GMT+0100");
Nalezeno : user_pref("CT2786678.WeatherUnit", "C");
Nalezeno : user_pref("CT2786678.alertChannelId", "1178763");
Nalezeno : user_pref("CT2786678.components.1000234", false);
Nalezeno : user_pref("CT2786678.components.129315411424256896", false);
Nalezeno : user_pref("CT2786678.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.c[...]
Nalezeno : user_pref("CT2786678.homepageProtectorEnableByLogin", true);
Nalezeno : user_pref("CT2786678.initDone", true);
Nalezeno : user_pref("CT2786678.myStuffEnabled", true);
Nalezeno : user_pref("CT2786678.myStuffPublihserMinWidth", 400);
Nalezeno : user_pref("CT2786678.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...]
Nalezeno : user_pref("CT2786678.myStuffServiceIntervalMM", 1440);
Nalezeno : user_pref("CT2786678.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...]
Nalezeno : user_pref("CT2786678.revertSettingsEnabled", true);
Nalezeno : user_pref("CT2786678.searchProtectorDialogDelayInSec", 10);
Nalezeno : user_pref("CT2786678.searchProtectorEnableByLogin", true);
Nalezeno : user_pref("CT2786678.testingCtid", "");
Nalezeno : user_pref("CT2786678.toolbarAppMetaDataLastCheckTime", "Sat Jun 29 2013 20:10:13 GMT+0200");
Nalezeno : user_pref("CT2786678.toolbarContextMenuLastCheckTime", "Fri Jan 07 2011 14:11:14 GMT+0100");
Nalezeno : user_pref("CT2786678.usagesFlag", 2);
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit. ... /CT2786678[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root ... 1174448/CZ", "\"0\"[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root ... /905414/CZ", "\"0\"")[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-ser ... =CT2786678", [...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-serv ... tenApps&lo[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-serv ... erApps&loc[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-serv ... redApps&lo[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-serv ... lbar&local[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-ser ... rt/dlg.pkg", "\[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.engine.conduit-se ... ?ver=3.3.3[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-s ... g?ver=3.14[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-s ... g?ver=3.15[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-s ... g?ver=3.16[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-s ... g?ver=3.18[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/ ... =CT2786678",[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/toolbar/", "\"63428984078257[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services ... r=FF&lut=0", "63[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services ... ut=12/30/2[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services ... ut=3/13/20[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit. ... /CT2786678[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-serv ... ?locale=en", "\"0e6[...]
Nalezeno : user_pref("CommunityToolbar.EngineHiddenByUser", true);
Nalezeno : user_pref("CommunityToolbar.EngineOwner", "ConduitEngine");
Nalezeno : user_pref("CommunityToolbar.EngineOwnerGuid", "engine@conduit.com");
Nalezeno : user_pref("CommunityToolbar.EngineOwnerToolbarId", "conduitengine");
Nalezeno : user_pref("CommunityToolbar.IsEngineShown", false);
Nalezeno : user_pref("CommunityToolbar.IsMyStuffImportedToEngine", true);
Nalezeno : user_pref("CommunityToolbar.OriginalEngineOwner", "CT2786678");
Nalezeno : user_pref("CommunityToolbar.OriginalEngineOwnerGuid", "{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}");
Nalezeno : user_pref("CommunityToolbar.OriginalEngineOwnerToolbarId", "utorrentbar");
Nalezeno : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "hxxp://search.seznam.cz/?sourceid=FF_5&q[...]
Nalezeno : user_pref("CommunityToolbar.ToolbarsList", "ConduitEngine,CT2786678");
Nalezeno : user_pref("CommunityToolbar.ToolbarsList2", "ConduitEngine,CT2786678");
Nalezeno : user_pref("CommunityToolbar.alert.alertDialogsGetterLastCheckTime", "Sat Apr 02 2011 07:03:31 GMT+02[...]
Nalezeno : user_pref("CommunityToolbar.alert.alertInfoInterval", 1440);
Nalezeno : user_pref("CommunityToolbar.alert.alertInfoLastCheckTime", "Wed Jun 22 2011 09:35:35 GMT+0200");
Nalezeno : user_pref("CommunityToolbar.alert.clientsServerUrl", "hxxp://alert.client.conduit.com");
Nalezeno : user_pref("CommunityToolbar.alert.locale", "en");
Nalezeno : user_pref("CommunityToolbar.alert.loginIntervalMin", 1440);
Nalezeno : user_pref("CommunityToolbar.alert.loginLastCheckTime", "Wed Jun 22 2011 09:42:20 GMT+0200");
Nalezeno : user_pref("CommunityToolbar.alert.loginLastUpdateTime", "1305622559");
Nalezeno : user_pref("CommunityToolbar.alert.messageShowTimeSec", 20);
Nalezeno : user_pref("CommunityToolbar.alert.servicesServerUrl", "hxxp://alert.services.conduit.com");
Nalezeno : user_pref("CommunityToolbar.alert.showTrayIcon", false);
Nalezeno : user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300);
Nalezeno : user_pref("CommunityToolbar.alert.userId", "e3968143-f1ca-4e3a-a607-bcc079e6898e");
Nalezeno : user_pref("CommunityToolbar.facebook.settingsLastCheckTime", "Fri Jan 07 2011 14:11:16 GMT+0100");
Nalezeno : user_pref("CommunityToolbar.globalUserId", "03653456-cc7f-463b-ad0e-e6af9e4d95e7");
Nalezeno : user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true);
Nalezeno : user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true);
Nalezeno : user_pref("CommunityToolbar.keywordURLSelectedCTID", "CT2786678");
Nalezeno : user_pref("ConduitEngine.AppTrackingLastCheckTime", "Wed May 25 2011 16:35:37 GMT+0200");
Nalezeno : user_pref("ConduitEngine.CTID", "ConduitEngine");
Nalezeno : user_pref("ConduitEngine.DialogsGetterLastCheckTime", "Sat Apr 23 2011 19:43:48 GMT+0200");
Nalezeno : user_pref("ConduitEngine.FirstServerDate", "01/07/2011 16");
Nalezeno : user_pref("ConduitEngine.FirstTime", true);
Nalezeno : user_pref("ConduitEngine.FirstTimeFF3", true);
Nalezeno : user_pref("ConduitEngine.FixPageNotFoundErrors", false);
Nalezeno : user_pref("ConduitEngine.HasUserGlobalKeys", true);
Nalezeno : user_pref("ConduitEngine.Initialize", true);
Nalezeno : user_pref("ConduitEngine.InitializeCommonPrefs", true);
Nalezeno : user_pref("ConduitEngine.InstallationType", "UnknownIntegration");
Nalezeno : user_pref("ConduitEngine.InstalledDate", "Fri Jan 07 2011 14:11:10 GMT+0100");
Nalezeno : user_pref("ConduitEngine.IsMulticommunity", false);
Nalezeno : user_pref("ConduitEngine.IsOpenThankYouPage", false);
Nalezeno : user_pref("ConduitEngine.IsOpenUninstallPage", false);
Nalezeno : user_pref("ConduitEngine.LanguagePackLastCheckTime", "Sat Apr 23 2011 19:43:48 GMT+0200");
Nalezeno : user_pref("ConduitEngine.LastLogin_3.2.5.2", "Fri Jan 07 2011 17:11:12 GMT+0100");
Nalezeno : user_pref("ConduitEngine.LastLogin_3.3.3.2", "Sun Apr 24 2011 16:59:57 GMT+0200");
Nalezeno : user_pref("ConduitEngine.PublisherContainerWidth", 0);
Nalezeno : user_pref("ConduitEngine.SavedHomepage", "hxxp://www.seznam.cz/");
Nalezeno : user_pref("ConduitEngine.SearchFromAddressBarIsInit", true);
Nalezeno : user_pref("ConduitEngine.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=C[...]
Nalezeno : user_pref("ConduitEngine.SettingsLastCheckTime", "Sun Apr 24 2011 16:59:57 GMT+0200");
Nalezeno : user_pref("ConduitEngine.UserID", "UN18595808396257874");
Nalezeno : user_pref("ConduitEngine.engineLocale", "cs");
Nalezeno : user_pref("ConduitEngine.enngineContextMenuLastCheckTime", "Sat Apr 23 2011 19:43:48 GMT+0200");
Nalezeno : user_pref("ConduitEngine.globalFirstTimeInfoLastCheckTime", "Sun Apr 24 2011 16:59:57 GMT+0200");
Nalezeno : user_pref("ConduitEngine.initDone", true);
Nalezeno : user_pref("ConduitEngine.isAppTrackingManagerOn", true);
Nalezeno : user_pref("ConduitEngine.usagesFlag", 2);
Nalezeno : user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2786678&Sea[...]
Nalezeno : user_pref("extensions.inboxcomtoolbar@inbox.com.update.url", "hxxp://toolbar.inbox.com/toolbar/firef[...]
Nalezeno : user_pref("keyword.URL", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2786678&q=");

-\\ Google Chrome v27.0.1453.116

Soubor : C:\Users\Tomas\AppData\Local\Google\Chrome\User Data\Default\Preferences

Nalezeno [l.41] : icon_url = "hxxp://www.ask.com/favicon.ico",
Nalezeno [l.48] : search_url = "hxxp://asksearch.ask.com/redirect?client=cr&src=kw&tb=KMP-SAT&o=APN10272&itbv=11.7.1.1225&doi=2013-03-11&locale=en_EU&apn_uid=34C23308-B90C-4A95-B248-018BE350073B&apn_ptnrs=^AH3&apn_dtid=^pfm022^VO^CZ&apn_dbr=ff_19.0&&q={searchTerms}",
Nalezeno [l.49] : suggest_url = "hxxp://ss.websearch.ask.com/query?qsrc={qsrc}&li=ff&sstype=prefix&q={searchTerms}"
Nalezeno [l.2138] : homepage = "hxxp://eu.ask.com/?l=dis&o=APN10272cr&gct=hp&apn_ptnrs=^AH3&apn_dtid=^pfm022^VO^CZ&p2=^AH3^pfm022^VO^CZ&tpid=KMP-SAT&apn_dbr=ff_19.0&apn_uid=34C23308-B90C-4A95-B248-018BE350073B&itbv=11.7.1.1225&doi=2013-03-11",

*************************

AdwCleaner[R1].txt - [26317 octets] - [02/07/2013 14:13:09]

########## EOF - C:\AdwCleaner[R1].txt - [26378 octets] ##########

Malwarebytes Anti-Malware (Zkušební verze Malwarebytes Anti-Malware.) 1.75.0.1300
www.malwarebytes.org

Verze: v2013.07.02.03

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 8.0.7601.17514
Tomas :: TOMASPC [administrátor]

Ochrana: Povolena

2.7.2013 14:21:42
mbam-log-2013-07-02 (14-21-42).txt

Typ: Rychlá kontrola
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 241619
Uplynulý čas: 5 minut, 21 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 0
(Žádné škodlivé položky nebyly zjištěny)

(konec)

Spusť znovu AdwCleaner (u Windows Vista či Windows7, klikni na AdwCleaner pravým a vyber „Spustit jako správce“)
Klikni na „ Delete“
Program provede opravu, po automatickém restartu neukáže log (C:\AdwCleaner [S?].txt), jeho obsah sem celý vlož.

Stáhni si RogueKiller
32bit:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
64bit:
http://www.sur-la-toile.com/RogueKiller ... lerX64.exe
na svojí plochu.
- Zavři všechny ostatní programy a prohlížeče.
- Pro OS Vista a WIN7 spusť program jako správce, u XP poklepáním.
- Počkej až skončí Prescan.
- Zkontroluj, zda máš zaškrtnuto:
Kontrola MBR
Kontrola Faked
Antirootkit
- Potom klikni na „Prohledat“.
- Program skenuje PC. Po proskenování klikni na „Zpráva“ - celý obsah logu sem zkopíruj.
Pokud je program blokován, zkus ho spustit několikrát. Pokud dále program nepůjde spustit, přejmenuj ho na winlogon.exe.

# AdwCleaner v2.303 - Log vytvooen 02/07/2013 v 18:29:46
# Aktualizováno 08/06/2013 Xplode
# Operaení systém : Windows 7 Home Premium Service Pack 1 (64 bits)
# Uživatel : Tomas - TOMASPC
# Spuštin systém : Normální
# Spuštino z : D:\Desktop\adwcleaner.exe
# Volba [Vymazat]


***** [Služby] *****


***** [Soubory / Složky] *****

Složka Vymazáno : C:\Program Files (x86)\Conduit
Složka Vymazáno : C:\Program Files (x86)\ConduitEngine
Složka Vymazáno : C:\ProgramData\APN
Složka Vymazáno : C:\ProgramData\Ask
Složka Vymazáno : C:\ProgramData\Partner
Složka Vymazáno : C:\Users\Tomas\AppData\LocalLow\Conduit
Složka Vymazáno : C:\Users\Tomas\AppData\LocalLow\ConduitEngine
Složka Vymazáno : C:\Users\Tomas\AppData\LocalLow\PriceGong
Složka Vymazáno : C:\Users\Tomas\AppData\LocalLow\uTorrentBar
Složka Vymazáno : C:\Users\Tomas\AppData\Roaming\Mozilla\Firefox\Profiles\e76iqpxb.default\Conduit
Složka Vymazáno : C:\Users\Tomas\AppData\Roaming\Mozilla\Firefox\Profiles\e76iqpxb.default\ConduitCommon
Složka Vymazáno : C:\Users\Tomas\AppData\Roaming\Mozilla\Firefox\Profiles\e76iqpxb.default\ConduitEngine
Složka Vymazáno : C:\Users\Tomas\AppData\Roaming\Mozilla\Firefox\Profiles\e76iqpxb.default\CT2786678
Složka Vymazáno : C:\Users\Tomas\AppData\Roaming\Mozilla\Firefox\Profiles\e76iqpxb.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}
Složka Vymazáno : C:\Users\Tomas\AppData\Roaming\Mozilla\Firefox\Profiles\e76iqpxb.default\extensions\DTToolbar@toolbarnet.com
Složka Vymazáno : C:\Users\Tomas\AppData\Roaming\Mozilla\Firefox\Profiles\e76iqpxb.default\extensions\engine@conduit.com
Soubor Vymazáno : C:\Program Files (x86)\Mozilla Firefox\searchplugins\crawlersrch.xml
Soubor Vymazáno : C:\Users\Tomas\AppData\Roaming\Mozilla\Firefox\Profiles\e76iqpxb.default\searchplugins\Askcom.xml
Soubor Vymazáno : C:\Users\Tomas\AppData\Roaming\Mozilla\Firefox\Profiles\e76iqpxb.default\searchplugins\askcomsearch.xml
Soubor Vymazáno : C:\Users\Tomas\AppData\Roaming\Mozilla\Firefox\Profiles\e76iqpxb.default\searchplugins\Conduit.xml
Soubor Vymazáno : C:\Users\Tomas\AppData\Roaming\Mozilla\Firefox\Profiles\e76iqpxb.default\searchplugins\daemon-search.xml

***** [Registry] *****

Hodnota Vymazáno : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{32099AAC-C132-4136-9E9A-4E364A424E17}]
Hodnota Vymazáno : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{4B3803EA-5230-4DC3-A7FC-33638F3D3542}]
Hodnota Vymazáno : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC}]
Hodnota Vymazáno : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Hodnota Vymazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC}]
Hodnota Vymazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{32099AAC-C132-4136-9E9A-4E364A424E17}]
Klíe Vymazáno : HKCU\Software\APN PIP
Klíe Vymazáno : HKCU\Software\AppDataLow\Software\Conduit
Klíe Vymazáno : HKCU\Software\AppDataLow\Software\conduitEngine
Klíe Vymazáno : HKCU\Software\AppDataLow\Software\PriceGong
Klíe Vymazáno : HKCU\Software\AppDataLow\Software\uTorrentBar
Klíe Vymazáno : HKCU\Software\AppDataLow\Toolbar
Klíe Vymazáno : HKCU\Software\Conduit
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{30F9B915-B755-4826-820B-08FBA6BD249D}
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{32099AAC-C132-4136-9E9A-4E364A424E17}
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{4B3803EA-5230-4DC3-A7FC-33638F3D3542}
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{83FF80F4-8C74-4B80-B5BA-C8DDD434E5C4}
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC}
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{23E47A90-8C46-42E0-9F40-276844353FA2}
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{30F9B915-B755-4826-820B-08FBA6BD249D}
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{32099AAC-C132-4136-9E9A-4E364A424E17}
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4B3803EA-5230-4DC3-A7FC-33638F3D3542}
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{83FF80F4-8C74-4B80-B5BA-C8DDD434E5C4}
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8736C681-37A0-40C6-A0F0-4C083409151C}
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC}
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
Klíe Vymazáno : HKCU\Software\Softonic
Klíe Vymazáno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}
Klíe Vymazáno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AD22EBAF-0D18-4FC7-90CC-5EA0ABBE9EB8}
Klíe Vymazáno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
Klíe Vymazáno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{C04B7D22-5AEC-4561-8F49-27F6269208F6}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\AppID\GenericAskToolbar.DLL
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Conduit.Engine
Klíe Vymazáno : HKLM\SOFTWARE\Classes\DTToolbar.ToolBandObj
Klíe Vymazáno : HKLM\SOFTWARE\Classes\DTToolbar.ToolBandObj.1
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Toolbar.CT2786678
Klíe Vymazáno : HKLM\SOFTWARE\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}
Klíe Vymazáno : HKLM\Software\Conduit
Klíe Vymazáno : HKLM\Software\conduitEngine
Klíe Vymazáno : HKLM\SOFTWARE\Microsoft\Tracing\CToolbar_RASMANCS
Klíe Vymazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{23E47A90-8C46-42E0-9F40-276844353FA2}
Klíe Vymazáno : HKLM\Software\PIP
Klíe Vymazáno : HKLM\Software\uTorrentBar
Klíe Vymazáno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Klíe Vymazáno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
Klíe Vymazáno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
Klíe Vymazáno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
Klíe Vymazáno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{02DF5308-1059-4D92-A2EE-A016FC0E3F0A}
Klíe Vymazáno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{540AD342-647D-4185-A335-B999DB575B37}
Klíe Vymazáno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
Klíe Vymazáno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\conduitEngine
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}

***** [Internetové prohlížeee] *****

-\\ Internet Explorer v8.0.7601.17514

Zaminino : [HKCU\Software\Microsoft\Internet Explorer\Main - Search Bar] = hxxp://www.crawler.com/search/dispatche ... p=aus&qkw=%s&tbid=60515 --> hxxp://www.google.com

-\\ Mozilla Firefox v21.0 (cs)

Soubor : C:\Users\Tomas\AppData\Roaming\Mozilla\Firefox\Profiles\e76iqpxb.default\prefs.js

Vymazáno : user_pref("CT2786678..clientLogIsEnabled", true);
Vymazáno : user_pref("CT2786678..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...]
Vymazáno : user_pref("CT2786678..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...]
Vymazáno : user_pref("CT2786678.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);
Vymazáno : user_pref("CT2786678.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
Vymazáno : user_pref("CT2786678.BrowserCompStateIsOpen_129579220236217502", true);
Vymazáno : user_pref("CT2786678.BrowserCompStateIsOpen_130067977588633691", true);
Vymazáno : user_pref("CT2786678.BrowserCompStateIsOpen_1359634298000", true);
Vymazáno : user_pref("CT2786678.CTID", "CT2786678");
Vymazáno : user_pref("CT2786678.CommunitiesChangesLastCheckTime", "0");
Vymazáno : user_pref("CT2786678.CurrentServerDate", "29-6-2013");
Vymazáno : user_pref("CT2786678.DialogsAlignMode", "LTR");
Vymazáno : user_pref("CT2786678.DialogsGetterLastCheckTime", "Fri Jun 28 2013 19:30:37 GMT+0200");
Vymazáno : user_pref("CT2786678.DownloadReferralCookieData", "");
Vymazáno : user_pref("CT2786678.EMailNotifierPollDate", "Fri Jan 07 2011 18:27:23 GMT+0100");
Vymazáno : user_pref("CT2786678.FeedLastCount5690698542593514850", 283);
Vymazáno : user_pref("CT2786678.FeedPollDate129301619375443753", "Fri Jan 07 2011 17:46:26 GMT+0100");
Vymazáno : user_pref("CT2786678.FeedPollDate129301619375443759", "Fri Jan 07 2011 17:46:26 GMT+0100");
Vymazáno : user_pref("CT2786678.FeedPollDate129301619375444699", "Fri Jan 07 2011 17:46:24 GMT+0100");
Vymazáno : user_pref("CT2786678.FeedPollDate129301619375444705", "Fri Jan 07 2011 17:46:24 GMT+0100");
Vymazáno : user_pref("CT2786678.FeedPollDate129301619375444711", "Fri Jan 07 2011 17:46:25 GMT+0100");
Vymazáno : user_pref("CT2786678.FeedPollDate129301619375444717", "Fri Jan 07 2011 17:46:25 GMT+0100");
Vymazáno : user_pref("CT2786678.FeedPollDate129301619375444723", "Fri Jan 07 2011 17:46:25 GMT+0100");
Vymazáno : user_pref("CT2786678.FeedPollDate129301619375444729", "Fri Jan 07 2011 17:46:25 GMT+0100");
Vymazáno : user_pref("CT2786678.FeedPollDate129301619375444735", "Fri Jan 07 2011 17:46:25 GMT+0100");
Vymazáno : user_pref("CT2786678.FeedPollDate129301619375444741", "Fri Jan 07 2011 17:46:25 GMT+0100");
Vymazáno : user_pref("CT2786678.FeedPollDate129301619375444747", "Fri Jan 07 2011 17:46:25 GMT+0100");
Vymazáno : user_pref("CT2786678.FeedTTL129301619375444699", 10);
Vymazáno : user_pref("CT2786678.FeedTTL129301619375444723", 15);
Vymazáno : user_pref("CT2786678.FeedTTL129301619375444735", 5);
Vymazáno : user_pref("CT2786678.FeedTTL129301619375444747", 5);
Vymazáno : user_pref("CT2786678.FirstServerDate", "7-1-2011");
Vymazáno : user_pref("CT2786678.FirstTime", true);
Vymazáno : user_pref("CT2786678.FirstTimeFF3", true);
Vymazáno : user_pref("CT2786678.FixPageNotFoundErrors", false);
Vymazáno : user_pref("CT2786678.GroupingInvalidateCache", false);
Vymazáno : user_pref("CT2786678.GroupingLastCheckTime", "0");
Vymazáno : user_pref("CT2786678.GroupingLastServerUpdateTime", "0");
Vymazáno : user_pref("CT2786678.GroupingServerCheckInterval", 1440);
Vymazáno : user_pref("CT2786678.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
Vymazáno : user_pref("CT2786678.HasUserGlobalKeys", true);
Vymazáno : user_pref("CT2786678.Initialize", true);
Vymazáno : user_pref("CT2786678.InitializeCommonPrefs", true);
Vymazáno : user_pref("CT2786678.InstallationAndCookieDataSentCount", 3);
Vymazáno : user_pref("CT2786678.InstallationType", "UnknownIntegration");
Vymazáno : user_pref("CT2786678.InstalledDate", "Fri Jan 07 2011 14:11:12 GMT+0100");
Vymazáno : user_pref("CT2786678.InvalidateCache", false);
Vymazáno : user_pref("CT2786678.IsGrouping", false);
Vymazáno : user_pref("CT2786678.IsMulticommunity", false);
Vymazáno : user_pref("CT2786678.IsOpenThankYouPage", true);
Vymazáno : user_pref("CT2786678.IsOpenUninstallPage", false);
Vymazáno : user_pref("CT2786678.LanguagePackLastCheckTime", "Sat Jun 29 2013 20:10:13 GMT+0200");
Vymazáno : user_pref("CT2786678.LanguagePackReloadIntervalMM", 1440);
Vymazáno : user_pref("CT2786678.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...]
Vymazáno : user_pref("CT2786678.LastLogin_3.14.1.0", "Mon Aug 27 2012 14:31:43 GMT+0200");
Vymazáno : user_pref("CT2786678.LastLogin_3.15.1.0", "Wed Nov 07 2012 10:03:49 GMT+0100");
Vymazáno : user_pref("CT2786678.LastLogin_3.16.0.3", "Fri Feb 08 2013 16:28:36 GMT+0100");
Vymazáno : user_pref("CT2786678.LastLogin_3.18.0.7", "Sat Jun 29 2013 20:10:13 GMT+0200");
Vymazáno : user_pref("CT2786678.LastLogin_3.2.5.2", "Fri Jan 07 2011 18:11:12 GMT+0100");
Vymazáno : user_pref("CT2786678.LatestVersion", "3.18.0.7");
Vymazáno : user_pref("CT2786678.Locale", "en");
Vymazáno : user_pref("CT2786678.MCDetectTooltipHeight", "83");
Vymazáno : user_pref("CT2786678.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
Vymazáno : user_pref("CT2786678.MCDetectTooltipWidth", "295");
Vymazáno : user_pref("CT2786678.MyStuffEnabledAtInstallation", true);
Vymazáno : user_pref("CT2786678.RadioLastCheckTime", "0");
Vymazáno : user_pref("CT2786678.RadioLastUpdateIPServer", "0");
Vymazáno : user_pref("CT2786678.RadioLastUpdateServer", "0");
Vymazáno : user_pref("CT2786678.SavedHomepage", "hxxp://search.conduit.com/?ctid=&SearchSource=13");
Vymazáno : user_pref("CT2786678.SearchFromAddressBarIsInit", true);
Vymazáno : user_pref("CT2786678.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT278[...]
Vymazáno : user_pref("CT2786678.SearchInNewTabEnabled", true);
Vymazáno : user_pref("CT2786678.SearchInNewTabIntervalMM", 1440);
Vymazáno : user_pref("CT2786678.SearchInNewTabLastCheckTime", "Sat Jun 29 2013 20:10:12 GMT+0200");
Vymazáno : user_pref("CT2786678.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...]
Vymazáno : user_pref("CT2786678.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageServic[...]
Vymazáno : user_pref("CT2786678.SearchProtectorToolbarDisabled", true);
Vymazáno : user_pref("CT2786678.ServiceMapLastCheckTime", "Sat Jun 29 2013 20:10:13 GMT+0200");
Vymazáno : user_pref("CT2786678.SettingsLastCheckTime", "Sat Jun 29 2013 20:10:11 GMT+0200");
Vymazáno : user_pref("CT2786678.SettingsLastUpdate", "1372493506");
Vymazáno : user_pref("CT2786678.ThirdPartyComponentsInterval", 504);
Vymazáno : user_pref("CT2786678.ThirdPartyComponentsLastCheck", "Fri Jan 07 2011 14:11:10 GMT+0100");
Vymazáno : user_pref("CT2786678.ThirdPartyComponentsLastUpdate", "1246790578");
Vymazáno : user_pref("CT2786678.ToolbarDisabled", true);
Vymazáno : user_pref("CT2786678.ToolbarShrinkedFromSetup", false);
Vymazáno : user_pref("CT2786678.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2786678");
Vymazáno : user_pref("CT2786678.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,clien[...]
Vymazáno : user_pref("CT2786678.UserID", "UN04106641109544148");
Vymazáno : user_pref("CT2786678.WeatherNetwork", "");
Vymazáno : user_pref("CT2786678.WeatherPollDate", "Fri Jan 07 2011 17:46:26 GMT+0100");
Vymazáno : user_pref("CT2786678.WeatherUnit", "C");
Vymazáno : user_pref("CT2786678.alertChannelId", "1178763");
Vymazáno : user_pref("CT2786678.components.1000234", false);
Vymazáno : user_pref("CT2786678.components.129315411424256896", false);
Vymazáno : user_pref("CT2786678.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.c[...]
Vymazáno : user_pref("CT2786678.homepageProtectorEnableByLogin", true);
Vymazáno : user_pref("CT2786678.initDone", true);
Vymazáno : user_pref("CT2786678.myStuffEnabled", true);
Vymazáno : user_pref("CT2786678.myStuffPublihserMinWidth", 400);
Vymazáno : user_pref("CT2786678.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...]
Vymazáno : user_pref("CT2786678.myStuffServiceIntervalMM", 1440);
Vymazáno : user_pref("CT2786678.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...]
Vymazáno : user_pref("CT2786678.revertSettingsEnabled", true);
Vymazáno : user_pref("CT2786678.searchProtectorDialogDelayInSec", 10);
Vymazáno : user_pref("CT2786678.searchProtectorEnableByLogin", true);
Vymazáno : user_pref("CT2786678.testingCtid", "");
Vymazáno : user_pref("CT2786678.toolbarAppMetaDataLastCheckTime", "Sat Jun 29 2013 20:10:13 GMT+0200");
Vymazáno : user_pref("CT2786678.toolbarContextMenuLastCheckTime", "Fri Jan 07 2011 14:11:14 GMT+0100");
Vymazáno : user_pref("CT2786678.usagesFlag", 2);
Vymazáno : user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit. ... /CT2786678[...]
Vymazáno : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root ... 1174448/CZ", "\"0\"[...]
Vymazáno : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root ... /905414/CZ", "\"0\"")[...]
Vymazáno : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-ser ... =CT2786678", [...]
Vymazáno : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-serv ... tenApps&lo[...]
Vymazáno : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-serv ... erApps&loc[...]
Vymazáno : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-serv ... redApps&lo[...]
Vymazáno : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-serv ... lbar&local[...]
Vymazáno : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-ser ... rt/dlg.pkg", "\[...]
Vymazáno : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.engine.conduit-se ... ?ver=3.3.3[...]
Vymazáno : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-s ... g?ver=3.14[...]
Vymazáno : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-s ... g?ver=3.15[...]
Vymazáno : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-s ... g?ver=3.16[...]
Vymazáno : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-s ... g?ver=3.18[...]
Vymazáno : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/ ... =CT2786678",[...]
Vymazáno : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/toolbar/", "\"63428984078257[...]
Vymazáno : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services ... r=FF&lut=0", "63[...]
Vymazáno : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services ... ut=12/30/2[...]
Vymazáno : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services ... ut=3/13/20[...]
Vymazáno : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit. ... /CT2786678[...]
Vymazáno : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-serv ... ?locale=en", "\"0e6[...]
Vymazáno : user_pref("CommunityToolbar.EngineHiddenByUser", true);
Vymazáno : user_pref("CommunityToolbar.EngineOwner", "ConduitEngine");
Vymazáno : user_pref("CommunityToolbar.EngineOwnerGuid", "engine@conduit.com");
Vymazáno : user_pref("CommunityToolbar.EngineOwnerToolbarId", "conduitengine");
Vymazáno : user_pref("CommunityToolbar.IsEngineShown", false);
Vymazáno : user_pref("CommunityToolbar.IsMyStuffImportedToEngine", true);
Vymazáno : user_pref("CommunityToolbar.OriginalEngineOwner", "CT2786678");
Vymazáno : user_pref("CommunityToolbar.OriginalEngineOwnerGuid", "{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}");
Vymazáno : user_pref("CommunityToolbar.OriginalEngineOwnerToolbarId", "utorrentbar");
Vymazáno : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "hxxp://search.seznam.cz/?sourceid=FF_5&q[...]
Vymazáno : user_pref("CommunityToolbar.ToolbarsList", "ConduitEngine,CT2786678");
Vymazáno : user_pref("CommunityToolbar.ToolbarsList2", "ConduitEngine,CT2786678");
Vymazáno : user_pref("CommunityToolbar.alert.alertDialogsGetterLastCheckTime", "Sat Apr 02 2011 07:03:31 GMT+02[...]
Vymazáno : user_pref("CommunityToolbar.alert.alertInfoInterval", 1440);
Vymazáno : user_pref("CommunityToolbar.alert.alertInfoLastCheckTime", "Wed Jun 22 2011 09:35:35 GMT+0200");
Vymazáno : user_pref("CommunityToolbar.alert.clientsServerUrl", "hxxp://alert.client.conduit.com");
Vymazáno : user_pref("CommunityToolbar.alert.locale", "en");
Vymazáno : user_pref("CommunityToolbar.alert.loginIntervalMin", 1440);
Vymazáno : user_pref("CommunityToolbar.alert.loginLastCheckTime", "Wed Jun 22 2011 09:42:20 GMT+0200");
Vymazáno : user_pref("CommunityToolbar.alert.loginLastUpdateTime", "1305622559");
Vymazáno : user_pref("CommunityToolbar.alert.messageShowTimeSec", 20);
Vymazáno : user_pref("CommunityToolbar.alert.servicesServerUrl", "hxxp://alert.services.conduit.com");
Vymazáno : user_pref("CommunityToolbar.alert.showTrayIcon", false);
Vymazáno : user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300);
Vymazáno : user_pref("CommunityToolbar.alert.userId", "e3968143-f1ca-4e3a-a607-bcc079e6898e");
Vymazáno : user_pref("CommunityToolbar.facebook.settingsLastCheckTime", "Fri Jan 07 2011 14:11:16 GMT+0100");
Vymazáno : user_pref("CommunityToolbar.globalUserId", "03653456-cc7f-463b-ad0e-e6af9e4d95e7");
Vymazáno : user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true);
Vymazáno : user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true);
Vymazáno : user_pref("CommunityToolbar.keywordURLSelectedCTID", "CT2786678");
Vymazáno : user_pref("ConduitEngine.AppTrackingLastCheckTime", "Wed May 25 2011 16:35:37 GMT+0200");
Vymazáno : user_pref("ConduitEngine.CTID", "ConduitEngine");
Vymazáno : user_pref("ConduitEngine.DialogsGetterLastCheckTime", "Sat Apr 23 2011 19:43:48 GMT+0200");
Vymazáno : user_pref("ConduitEngine.FirstServerDate", "01/07/2011 16");
Vymazáno : user_pref("ConduitEngine.FirstTime", true);
Vymazáno : user_pref("ConduitEngine.FirstTimeFF3", true);
Vymazáno : user_pref("ConduitEngine.FixPageNotFoundErrors", false);
Vymazáno : user_pref("ConduitEngine.HasUserGlobalKeys", true);
Vymazáno : user_pref("ConduitEngine.Initialize", true);
Vymazáno : user_pref("ConduitEngine.InitializeCommonPrefs", true);
Vymazáno : user_pref("ConduitEngine.InstallationType", "UnknownIntegration");
Vymazáno : user_pref("ConduitEngine.InstalledDate", "Fri Jan 07 2011 14:11:10 GMT+0100");
Vymazáno : user_pref("ConduitEngine.IsMulticommunity", false);
Vymazáno : user_pref("ConduitEngine.IsOpenThankYouPage", false);
Vymazáno : user_pref("ConduitEngine.IsOpenUninstallPage", false);
Vymazáno : user_pref("ConduitEngine.LanguagePackLastCheckTime", "Sat Apr 23 2011 19:43:48 GMT+0200");
Vymazáno : user_pref("ConduitEngine.LastLogin_3.2.5.2", "Fri Jan 07 2011 17:11:12 GMT+0100");
Vymazáno : user_pref("ConduitEngine.LastLogin_3.3.3.2", "Sun Apr 24 2011 16:59:57 GMT+0200");
Vymazáno : user_pref("ConduitEngine.PublisherContainerWidth", 0);
Vymazáno : user_pref("ConduitEngine.SavedHomepage", "hxxp://www.seznam.cz/");
Vymazáno : user_pref("ConduitEngine.SearchFromAddressBarIsInit", true);
Vymazáno : user_pref("ConduitEngine.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=C[...]
Vymazáno : user_pref("ConduitEngine.SettingsLastCheckTime", "Sun Apr 24 2011 16:59:57 GMT+0200");
Vymazáno : user_pref("ConduitEngine.UserID", "UN18595808396257874");
Vymazáno : user_pref("ConduitEngine.engineLocale", "cs");
Vymazáno : user_pref("ConduitEngine.enngineContextMenuLastCheckTime", "Sat Apr 23 2011 19:43:48 GMT+0200");
Vymazáno : user_pref("ConduitEngine.globalFirstTimeInfoLastCheckTime", "Sun Apr 24 2011 16:59:57 GMT+0200");
Vymazáno : user_pref("ConduitEngine.initDone", true);
Vymazáno : user_pref("ConduitEngine.isAppTrackingManagerOn", true);
Vymazáno : user_pref("ConduitEngine.usagesFlag", 2);
Vymazáno : user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2786678&Sea[...]
Vymazáno : user_pref("extensions.inboxcomtoolbar@inbox.com.update.url", "hxxp://toolbar.inbox.com/toolbar/firef[...]
Vymazáno : user_pref("keyword.URL", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2786678&q=");

-\\ Google Chrome v27.0.1453.116

Soubor : C:\Users\Tomas\AppData\Local\Google\Chrome\User Data\Default\Preferences

Vymazáno [l.41] : icon_url = "hxxp://www.ask.com/favicon.ico",
Vymazáno [l.48] : search_url = "hxxp://asksearch.ask.com/redirect?client=cr&src=kw&tb=KMP-SAT&o=APN10272&itbv=1[...]
Vymazáno [l.49] : suggest_url = "hxxp://ss.websearch.ask.com/query?qsrc={qsrc}&li=ff&sstype=prefix&q={searchTer[...]
Vymazáno [l.2134] : homepage = "hxxp://eu.ask.com/?l=dis&o=APN10272cr&gct=hp&apn_ptnrs=^AH3&apn_dtid=^pfm022^VO^CZ&p[...]

*************************

AdwCleaner[R1].txt - [26432 octets] - [02/07/2013 14:13:09]
AdwCleaner[S1].txt - [25082 octets] - [02/07/2013 18:29:46]

########## EOF - C:\AdwCleaner[S1].txt - [25143 octets] ##########

RogueKiller V8.6.2 _x64_ [Jul 2 2013] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Podpora : hxxp://www.adlice.com/forum/
Webové stránky : hxxp://www.adlice.com/softwares/roguekiller/
: http://tigzyrk.blogspot.com/

Operační systém : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Spuštěno v : Normální režim
Uživatel : Tomas [Práva správce]
Mód : Kontrola -- Datum : 07/02/2013 18:43:38
| ARK || FAK || MBR |

¤¤¤ Škodlivé procesy: : 0 ¤¤¤

¤¤¤ ¤¤¤ Záznamy Registrů: : 2 ¤¤¤
[HJ DESK] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> NALEZENO
[HJ DESK] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> NALEZENO

¤¤¤ naplánované úlohy : 0 ¤¤¤

¤¤¤ spuštění položky : 0 ¤¤¤

¤¤¤ Webové prohlížeče : 0 ¤¤¤

¤¤¤ Zvláštní soubory / Složky: ¤¤¤

¤¤¤ Ovladač : [NENAHRÁNO 0x0] ¤¤¤

¤¤¤ Externí včelstvo: ¤¤¤

¤¤¤ Nákaza : ¤¤¤

¤¤¤ Soubor HOSTS: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts




¤¤¤ Kontrola MBR: ¤¤¤

+++++ PhysicalDrive0: ST950032 5AS SCSI Disk Device +++++
--- User ---
[MBR] 0cd6ad52f5165f1aee84dad147ddf121
[BSP] 430eaf6ed8558d670d2c84579f07828f : Windows Vista MBR Code
Partition table:
0 - [XXXXXX] FAT32-LBA (0x1c) [HIDDEN!] Offset (sectors): 2048 | Size: 14997 Mo
1 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 30716280 | Size: 119232 Mo
2 - [XXXXXX] EXTEN-LBA (0x0f) [VISIBLE] Offset (sectors): 274904280 | Size: 342706 Mo
User = LL1 ... OK!
Error reading LL2 MBR!

Dokončeno : << RKreport[0]_S_07022013_184338.txt >>

Spusť RogueKiller ( Pro Windows Vista nebo Windows 7, klepni pravým a vyber "Spustit jako správce", ve Windows XP poklepej ke spuštění).
- Počkej, až Prescan dokončí práci...
- Počkej, dokud status okno zobrazuje "Prohledat "

- Klikni na "Smazat"
- Počkej, dokud Status box zobrazuje "Smazání- Finished "
- Klikni na "Zprávy " a zkopíruj a vlož obsah té zprávy prosím sem. Log je možno nalézt v RKreport [číslo]. txt na ploše.
- Zavři RogueKiller


Jak je na tom PC?

RogueKiller V8.6.2 _x64_ [Jul 2 2013] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Podpora : hxxp://www.adlice.com/forum/
Webové stránky : hxxp://www.adlice.com/softwares/roguekiller/
: http://tigzyrk.blogspot.com/

Operační systém : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Spuštěno v : Normální režim
Uživatel : Tomas [Práva správce]
Mód : Odebrat -- Datum : 07/02/2013 21:07:07
| ARK || FAK || MBR |

¤¤¤ Škodlivé procesy: : 0 ¤¤¤

¤¤¤ ¤¤¤ Záznamy Registrů: : 2 ¤¤¤
[HJ DESK] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> NAHRAZENO (0)
[HJ DESK] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> NAHRAZENO (0)

¤¤¤ naplánované úlohy : 0 ¤¤¤

¤¤¤ spuštění položky : 0 ¤¤¤

¤¤¤ Webové prohlížeče : 0 ¤¤¤

¤¤¤ Zvláštní soubory / Složky: ¤¤¤

¤¤¤ Ovladač : [NENAHRÁNO 0x0] ¤¤¤

¤¤¤ Externí včelstvo: ¤¤¤

¤¤¤ Nákaza : ¤¤¤

¤¤¤ Soubor HOSTS: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts




¤¤¤ Kontrola MBR: ¤¤¤

+++++ PhysicalDrive0: ST950032 5AS SCSI Disk Device +++++
--- User ---
[MBR] 0cd6ad52f5165f1aee84dad147ddf121
[BSP] 430eaf6ed8558d670d2c84579f07828f : Windows Vista MBR Code
Partition table:
0 - [XXXXXX] FAT32-LBA (0x1c) [HIDDEN!] Offset (sectors): 2048 | Size: 14997 Mo
1 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 30716280 | Size: 119232 Mo
2 - [XXXXXX] EXTEN-LBA (0x0f) [VISIBLE] Offset (sectors): 274904280 | Size: 342706 Mo
User = LL1 ... OK!
Error reading LL2 MBR!

Dokončeno : << RKreport[0]_D_07022013_210707.txt >>
RKreport[0]_S_07022013_184338.txt


Už je to lepší, moc děkuji za váš čas a pomoc

Ještě si dej....

Stáhni si Junkware Removal Tool

na svojí plochu.
Deaktivuj si svůj antivirový program.
Pravým tl. myši klikni na JRT.exe a vyber „spustit jako správce“. Pro pokračování budeš vyzván ke stisknutí jakékoliv klávesy. Na nějakou klikni.
Začne skenování programu. Skenování může trvat dloho , podle množství nákaz. Po ukončení skenu se objeví log (JRT.txt) , který se uloží na ploše.
Zkopíruj sem prosím celý jeho obsah.

+ nový log z HJT

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 4.9.4 (05.06.2013:1)
OS: Windows 7 Home Premium x64
Ran by Tomas on st 03.07.2013 at 9:57:32,85
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\systweak
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{368C933F-8C85-488C-809C-E156397DA083}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{8172f457-818d-46db-941f-2bbe53e156af}



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\Users\Tomas\AppData\Roaming\systweak"



~~~ FireFox

Emptied folder: C:\Users\Tomas\AppData\Roaming\mozilla\firefox\profiles\e76iqpxb.default\minidumps [37 files]



~~~ Chrome

Successfully deleted: [Registry Key] hkey_local_machine\software\policies\google\chrome\extensioninstallforcelist



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on st 03.07.2013 at 10:16:52,45
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:23:24, on 3.7.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16618)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe
C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe
C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe
C:\Windows\AsScrPro.exe
C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
C:\Windows\SysWOW64\ctfmon.exe
C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://asus.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
O2 - BHO: Lync Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Pomocná služba pro přihlášení ke službě Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office15\URLREDIR.DLL
O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MICROS~1\Office15\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [UpdateLBPShortCut] "C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\LabelPrint" UpdateWithCreateOnce "Software\CyberLink\LabelPrint\2.5"
O4 - HKLM\..\Run: [UpdateP2GoShortCut] "C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\6.0"
O4 - HKLM\..\Run: [ATKOSD2] C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
O4 - HKLM\..\Run: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
O4 - HKLM\..\Run: [HControlUser] C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
O4 - HKLM\..\Run: [VirtualCloneDrive] "C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do Microsoft Excelu - res://C:\PROGRA~2\MICROS~1\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105
O8 - Extra context menu item: Od&eslat do OneNotu - res://C:\PROGRA~2\MICROS~1\Office15\ONBttnIE.dll/105
O9 - Extra button: Přidat na blog - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Přidat na blog Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odeslat do OneNotu - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do OneNotu - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra button: Volání kliknutím v Lyncu - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra 'Tools' menuitem: Volání kliknutím v Lyncu - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL
O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: ADSM Service (ADSMService) - ASUSTek Computer Inc. - C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe
O23 - Service: AFBAgent - Unknown owner - C:\Windows\system32\FBAgent.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: ASLDR Service (ASLDRService) - ASUS - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - ASUS - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: spmgr - Unknown owner - C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Windows\SysWOW64\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 11481 bytes