PC-HELP.CZ

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:56:38, on 8.7.2013
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.19437)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\AVG Secure Search\vprot.exe
D:\Program Files\Mount&Blade Warband\Modules\bin\TSVNCache.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\McAfee Security Scan\3.0.318\SSScheduler.exe
C:\Windows\System32\mobsync.exe
C:\Acer\Empowering Technology\eRecovery\ERAGENT.EXE
C:\Windows\ehome\ehmsas.exe
C:\Users\Ondra\Downloads\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://isearch.babylon.com/?affID=11663 ... 19212e14c0
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
O2 - BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.0.318\McAfeeMSS_IE.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG Secure Search\13.2.0.5\AVG Secure Search_toolbar.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG Secure Search\13.2.0.5\AVG Secure Search_toolbar.dll
O3 - Toolbar: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [WarReg_PopUp] C:\Acer\WR_PopUp\WarReg_PopUp.exe
O4 - HKLM\..\Run: [amd_dc_opt] C:\Program Files\AMD\Dual-Core Optimizer\amd_dc_opt.exe
O4 - HKLM\..\Run: [vProt] "C:\Program Files\AVG Secure Search\vprot.exe"
O4 - HKLM\..\Run: [ROC_ROC_JULY_P1] "C:\Program Files\AVG Secure Search\ROC_ROC_JULY_P1.exe" / /PROMPT /CMPID=ROC_JULY_P1
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\RunOnce: [AvgUninstallURL] cmd.exe /c start http://www.avg.com/ww.special-uninstall ... AEgAMABQAA"&"inst=NwA2AC0AMQAzADUAOQA5ADQAOAAzADcANAAtAFAATAArADkALQBYAE8AMwA2ACsAMQAtAE4AMQBEACsAMQAtAEMASQBQACsAMgAtAEQARABUACsANQA2ADYAOQAzAC0ARABEADkAMAArADEALQBTAFQAOQAwAEEAUABQACsAMQAtAEYAVQBJACsAMgAtAEMASQBEACsAMQAtAEkASQBTAEEAKwA2AA"&"prod=94"&"ver=9.0.914
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - Startup: Cyber-shot Viewer Media Check Tool.lnk = C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
O4 - Global Startup: Empowering Technology Launcher.lnk = ?
O4 - Global Startup: McAfee Security Scan Plus.lnk = C:\Program Files\McAfee Security Scan\3.0.318\SSScheduler.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Users\Ondra\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
O8 - Extra context menu item: WikiKomentáře Google... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_E11712C84EA7E12B.dll/cmsidewiki.html
O9 - Extra button: ICQ7.5 - {7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - C:\Program Files\ICQ7.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.5 - {7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - C:\Program Files\ICQ7.5\ICQ.exe
O9 - Extra button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Programs\PartyGaming\PartyPoker\RunApp.exe (file missing)
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Programs\PartyGaming\PartyPoker\RunApp.exe (file missing)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{98F178C4-DBEC-4468-A176-2C093E8879F4}: NameServer = 213.250.192.1,213.250.194.1
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files\Common Files\AVG Secure Search\ViProtocolInstaller\13.2.0\ViProtocol.dll
O20 - AppInit_DLLs: C:\Windows\System32\avgrsstx.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files\McAfee Security Scan\3.0.318\McCHSvc.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: MSSQL$SONY_MEDIAMGR - Unknown owner - C:\Program Files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlservr.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: SQLAgent$SONY_MEDIAMGR - Unknown owner - C:\Program Files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlagent.EXE (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: TOSHIBA Bluetooth Service - Unknown owner - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe (file missing)

--
End of file - 9357 bytes

Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranìní historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit doèasné soubory Windows, vysypat koš atd.

Stáhni si Malwarebytes' Anti-Malware
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Update Malwarebytes' Anti-Malware (Aktualizace Malwarebytes' Anti-Malware) a Launch Malwarebytes' Anti-Malware (Spustit aplikaci Malwarebytes' Anti-Malware), pokud jo tak klikni na tlačítko Finish
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a nech vybranou možnost Perform Quick Scan (Provést rychlý sken) a klikni na tlačítko Scan (Skenovat)
- po probìhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Show Results
- pak zvol možnost Save Logfile a ulož si log na plochu
- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).
Vlož sem pak obsah toho logu.

Stáhni AdwCleaner
Ulož si ho na svojí plochu
Ukonči všechny programy, okna a prohlížeče
Spusť program poklepáním a klikni na „Search“
Po skenu se objeví log (jinak je uložen systémovem disku jako AdwCleaner[R?].txt), jeho obsah sem celý vlož.

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Verze: v2013.07.07.05

Windows Vista Service Pack 2 x86 NTFS (Nouzový režim s podporou sítě)
Internet Explorer 8.0.6001.19437
Ondra :: COMP [administrátor]

9.7.2013 19:50:29
MBAM-log-2013-07-09 (20-01-59).txt

Typ: Rychlá kontrola
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 270728
Uplynulý čas: 9 minut, 4 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 1
C:\Users\Ondra\Downloads\CardRecovery6.0Build1012Activator.rar (PUP.Hacktool.Patcher) -> Nebyla provedena žádná instrukce.

(konec)

# AdwCleaner v2.304 - Log vytvooen 09/07/2013 v 20:04:54
# Aktualizováno 03/07/2013 Xplode
# Operaení systém : Windows Vista (TM) Home Premium Service Pack 2 (32 bits)
# Uživatel : Ondra - COMP
# Spuštin systém : Nouzový režim s prací v síti
# Spuštino z : C:\Users\Ondra\Downloads\adwcleaner.exe
# Volba [Prohledat]


***** [Služby] *****


***** [Soubory / Složky] *****

Složka Nalezeno : C:\Program Files\AVG Secure Search
Složka Nalezeno : C:\Program Files\Bandoo
Složka Nalezeno : C:\Program Files\Common Files\AVG Secure Search
Složka Nalezeno : C:\Program Files\Common Files\DVDVideoSoft\TB
Složka Nalezeno : C:\Program Files\Conduit
Složka Nalezeno : C:\Program Files\DAEMON Tools Toolbar
Složka Nalezeno : C:\Program Files\ICQ6Toolbar
Složka Nalezeno : C:\Program Files\Mozilla Firefox\Extensions\ffxtlbr@babylon.com
Složka Nalezeno : C:\ProgramData\AVG Secure Search
Složka Nalezeno : C:\ProgramData\Babylon
Složka Nalezeno : C:\ProgramData\ICQ\ICQToolbar
Složka Nalezeno : C:\ProgramData\InstallMate
Složka Nalezeno : C:\ProgramData\Premium
Složka Nalezeno : C:\ProgramData\Trymedia
Složka Nalezeno : C:\Users\Ondra\AppData\Local\AVG Secure Search
Složka Nalezeno : C:\Users\Ondra\AppData\Local\Conduit
Složka Nalezeno : C:\Users\Ondra\AppData\Local\PackageAware
Složka Nalezeno : C:\Users\Ondra\AppData\Local\RavenBleuSA
Složka Nalezeno : C:\Users\Ondra\AppData\LocalLow\AVG Secure Search
Složka Nalezeno : C:\Users\Ondra\AppData\LocalLow\BabylonToolbar
Složka Nalezeno : C:\Users\Ondra\AppData\LocalLow\Conduit
Složka Nalezeno : C:\Users\Ondra\AppData\LocalLow\FunWebProducts
Složka Nalezeno : C:\Users\Ondra\AppData\LocalLow\MyWebSearch
Složka Nalezeno : C:\Users\Ondra\AppData\Roaming\Babylon
Složka Nalezeno : C:\Users\Ondra\AppData\Roaming\dvdvideosoftiehelpers
Složka Nalezeno : C:\Users\Ondra\AppData\Roaming\Mozilla\Firefox\Profiles\1yy4ijrx.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
Složka Nalezeno : C:\Users\Ondra\AppData\Roaming\Mozilla\Firefox\Profiles\1yy4ijrx.default\extensions\{ACAA314B-EEBA-48E4-AD47-84E31C44796C}
Složka Nalezeno : C:\Users\Ondra\AppData\Roaming\Mozilla\Firefox\Profiles\89dezo23.default\ConduitCommon
Složka Nalezeno : C:\Users\Ondra\AppData\Roaming\Mozilla\Firefox\Profiles\89dezo23.default\CT3072253
Složka Nalezeno : C:\Users\Ondra\AppData\Roaming\Mozilla\Firefox\Profiles\89dezo23.default\extensions\{1283e7d0-b598-4b2d-a20f-59a9dde270a8}(26)
Složka Nalezeno : C:\Users\Ondra\AppData\Roaming\Mozilla\Firefox\Profiles\89dezo23.default\extensions\{5e5ab302-7f65-44cd-8211-c1d4caaccea3}
Složka Nalezeno : C:\Users\Ondra\AppData\Roaming\Mozilla\Firefox\Profiles\89dezo23.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}(27)
Složka Nalezeno : C:\Users\Ondra\AppData\Roaming\Mozilla\Firefox\Profiles\89dezo23.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
Složka Nalezeno : C:\Users\Ondra\AppData\Roaming\Mozilla\Firefox\Profiles\89dezo23.default\SweetIMToolbarData
Složka Nalezeno : C:\Users\Ondra\AppData\Roaming\yourfiledownloader
Složka Nalezeno : C:\Windows\Installer\{1577A05B-EE62-4BBC-9DB7-FE748FA44EC2}
Soubor Nalezeno : C:\Program Files\Mozilla Firefox\searchplugins\avg-secure-search.xml
Soubor Nalezeno : C:\Program Files\Mozilla Firefox\searchplugins\babylon.xml
Soubor Nalezeno : C:\user.js
Soubor Nalezeno : C:\Users\Ondra\AppData\Roaming\Mozilla\Firefox\Profiles\1yy4ijrx.default\searchplugins\Askcom.xml
Soubor Nalezeno : C:\Users\Ondra\AppData\Roaming\Mozilla\Firefox\Profiles\1yy4ijrx.default\searchplugins\icqplugin.xml
Soubor Nalezeno : C:\Users\Ondra\AppData\Roaming\Mozilla\Firefox\Profiles\89dezo23.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}.xpi
Soubor Nalezeno : C:\Users\Ondra\AppData\Roaming\Mozilla\Firefox\Profiles\89dezo23.default\searchplugins\Conduit.xml
Soubor Nalezeno : C:\Users\Ondra\AppData\Roaming\Mozilla\Firefox\Profiles\89dezo23.default\searchplugins\daemon-search.xml
Soubor Nalezeno : C:\Users\Ondra\AppData\Roaming\Mozilla\Firefox\Profiles\89dezo23.default\searchplugins\icqplugin.xml
Soubor Nalezeno : C:\Users\Ondra\AppData\Roaming\Mozilla\Firefox\Profiles\89dezo23.default\searchplugins\SweetIm.xml

***** [Registry] *****

Hodnota Nalezeno : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{32099AAC-C132-4136-9E9A-4E364A424E17}]
Hodnota Nalezeno : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}]
Hodnota Nalezeno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{95B7759C-8C7F-4BF1-B163-73684A933233}]
Hodnota Nalezeno : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{855F3B16-6D32-4FE6-8A56-BBB695989046}]
Hodnota Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [vProt]
Hodnota Nalezeno : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [Avg@toolbar]
Klíe Nalezeno : HKCU\Software\AppDataLow\Software\Conduit
Klíe Nalezeno : HKCU\Software\AppDataLow\Software\ConduitSearchScopes
Klíe Nalezeno : HKCU\Software\AppDataLow\Software\Fun Web Products
Klíe Nalezeno : HKCU\Software\AppDataLow\Software\SmartBar
Klíe Nalezeno : HKCU\Software\AVG Secure Search
Klíe Nalezeno : HKCU\Software\GamePlayLabs
Klíe Nalezeno : HKCU\Software\Headlight
Klíe Nalezeno : HKCU\Software\IGearSettings
Klíe Nalezeno : HKCU\Software\InstallCore
Klíe Nalezeno : HKCU\Software\Microsoft\Babylon
Klíe Nalezeno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Klíe Nalezeno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40B7-AC73-056A5EBA4A7E}
Klíe Nalezeno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}
Klíe Nalezeno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
Klíe Nalezeno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AD22EBAF-0D18-4FC7-90CC-5EA0ABBE9EB8}
Klíe Nalezeno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AD22EBAF-0D18-4FC7-90CC-5EA0ABBE9EB9}
Klíe Nalezeno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Klíe Nalezeno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{83AA2913-C123-4146-85BD-AD8F93971D39}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\AVG Secure Search
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\conduitEngine
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2EECD738-5844-4A99-B4B6-146BF802613B}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{32099AAC-C132-4136-9E9A-4E364A424E17}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{855F3B16-6D32-4FE6-8A56-BBB695989046}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{95B7759C-8C7F-4BF1-B163-73684A933233}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49DD-99D7-DC866BE87DBC}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35C-6118-11DC-9C72-001320C79847}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4A99-B4B6-146BF802613B}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{32099AAC-C132-4136-9E9A-4E364A424E17}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{855F3B16-6D32-4FE6-8A56-BBB695989046}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{98889811-442D-49DD-99D7-DC866BE87DBC}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35C-6118-11DC-9C72-001320C79847}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F25AF245-4A81-40DC-92F9-E9021F207706}
Klíe Nalezeno : HKCU\Software\Softonic
Klíe Nalezeno : HKCU\Software\YahooPartnerToolbar
Klíe Nalezeno : HKCU\Software\YourFileDownloader
Klíe Nalezeno : HKLM\Software\AVG Secure Search
Klíe Nalezeno : HKLM\Software\Babylon
Klíe Nalezeno : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\AppID\{65C994A2-C65A-4A20-BA92-AADAFC0DCE49}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\AppID\BHO.DLL
Klíe Nalezeno : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Klíe Nalezeno : HKLM\SOFTWARE\Classes\AppID\NCTAudioCDGrabber2.DLL
Klíe Nalezeno : HKLM\SOFTWARE\Classes\AppID\ScriptHelper.EXE
Klíe Nalezeno : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL
Klíe Nalezeno : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI
Klíe Nalezeno : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI.1
Klíe Nalezeno : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj
Klíe Nalezeno : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj.1
Klíe Nalezeno : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr
Klíe Nalezeno : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr.1
Klíe Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{94496571-6AC5-4836-82D5-D46260C44B17}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{BC9FD17D-30F6-4464-9E53-596A90AFF023}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Conduit.Engine
Klíe Nalezeno : HKLM\Software\Classes\Installer\Features\3192AA38321C641458DBDAF83979D193
Klíe Nalezeno : HKLM\Software\Classes\Installer\Products\3192AA38321C641458DBDAF83979D193
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{2BEF239C-752E-4001-8048-F256E0D8CD93}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{2E9937FC-CF2F-4F56-AF54-5A6A3DD375CC}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{3F607E46-0D3C-4442-B1DE-DE7FA4768F5C}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{49C00A51-6E59-41FE-B3FA-2D2157FAD67B}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{6DFF5DBA-AE3A-46DB-B301-ECFFC6DB2982}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{8E7AD93B-3E87-423D-947F-A321FA7E31C4}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{DE34CD67-F1C8-4001-9A23-B8A68F63F377}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{FE0273D1-99DF-4AC0-87D5-1371C6271785}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Prod.cap
Klíe Nalezeno : HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\viprotocol
Klíe Nalezeno : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi
Klíe Nalezeno : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Toolbar.CT2304157
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Toolbar.CT2776682
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Toolbar.CT3072253
Klíe Nalezeno : HKLM\SOFTWARE\Classes\TypeLib\{13ABD093-D46F-40DF-A608-47E162EC799D}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\TypeLib\{93E3D79C-0786-48FF-9329-93BC9F6DC2B3}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE
Klíe Nalezeno : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1
Klíe Nalezeno : HKLM\Software\Conduit
Klíe Nalezeno : HKLM\SOFTWARE\Google\Chrome\Extensions\dhkplhfnhceodhffomolpfigojocbpcb
Klíe Nalezeno : HKLM\SOFTWARE\Google\Chrome\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof
Klíe Nalezeno : HKLM\SOFTWARE\Google\Chrome\Extensions\ocphobfcfafpclibolpjdafgaffkaoci
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC}
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706}
Klíe Nalezeno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1DA5BD2D3CA2D6943A1A233CD3F88CE7
Klíe Nalezeno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\45FC9EFC5C3366B4DB850DAB49330C52
Klíe Nalezeno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4B2468513CA2D6943A1A233CD3F88CE7
Klíe Nalezeno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7E98451C7CA808F47AFE467BDABD02FA
Klíe Nalezeno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BFD11FD45FC7B9E46A8F4B69F3A66E35
Klíe Nalezeno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D5979AD63CA2D6943A1A233CD3F88CE7
Klíe Nalezeno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DF9BD2952384A9C49B4A5D3D95329890
Klíe Nalezeno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FABA2A33488410A4AA40489BD2224282
Klíe Nalezeno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\3192AA38321C641458DBDAF83979D193
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{83AA2913-C123-4146-85BD-AD8F93971D39}
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG Secure Search
Klíe Nalezeno : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin
Klíe Nalezeno : HKLM\Software\YourFileDownloader
Klíe Nalezeno : HKU\S-1-5-21-2173778668-643321604-1992859200-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Klíe Nalezeno : HKU\S-1-5-21-2173778668-643321604-1992859200-1000\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40B7-AC73-056A5EBA4A7E}
Klíe Nalezeno : HKU\S-1-5-21-2173778668-643321604-1992859200-1000\Software\Microsoft\Internet Explorer\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}
Klíe Nalezeno : HKU\S-1-5-21-2173778668-643321604-1992859200-1000\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
Klíe Nalezeno : HKU\S-1-5-21-2173778668-643321604-1992859200-1000\Software\Microsoft\Internet Explorer\SearchScopes\{AD22EBAF-0D18-4FC7-90CC-5EA0ABBE9EB8}
Klíe Nalezeno : HKU\S-1-5-21-2173778668-643321604-1992859200-1000\Software\Microsoft\Internet Explorer\SearchScopes\{AD22EBAF-0D18-4FC7-90CC-5EA0ABBE9EB9}
Klíe Nalezeno : HKU\S-1-5-21-2173778668-643321604-1992859200-1000\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Klíe Nalezeno : HKU\S-1-5-21-2173778668-643321604-1992859200-1000\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}

***** [Internetové prohlížeee] *****

-\\ Internet Explorer v8.0.6001.19437

[HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://isearch.babylon.com/?affID=11663 ... 19212e14c0
[HKCU\Software\Microsoft\Internet Explorer\Main - ICQ Search] = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd
[HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls - Tabs] = hxxp://isearch.babylon.com/?affID=11663 ... 19212e14c0

-\\ Mozilla Firefox v13.0 (cs)

Soubor : C:\Users\Ondra\AppData\Roaming\Mozilla\Firefox\Profiles\1yy4ijrx.default\prefs.js

Nalezeno : user_pref("browser.search.defaultenginename", "AVG Secure Search");
Nalezeno : user_pref("browser.search.selectedEngine", "AVG Secure Search");
Nalezeno : user_pref("icqtoolbar.skip_default_search", "yes");
Nalezeno : user_pref("browser.search.defaultengine", "Ask.com");
Nalezeno : user_pref("browser.search.order.1", "Ask.com");
Nalezeno : user_pref("browser.startup.homepage", "hxxp://start.icq.com/");
Nalezeno : user_pref("icqtoolbar.installsource", "1");

Soubor : C:\Users\Ondra\AppData\Roaming\Mozilla\Firefox\Profiles\89dezo23.default\prefs.js

Nalezeno : user_pref("CT2776682..clientLogIsEnabled", false);
Nalezeno : user_pref("CT2776682..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...]
Nalezeno : user_pref("CT2776682..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...]
Nalezeno : user_pref("CT2776682.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);
Nalezeno : user_pref("CT2776682.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
Nalezeno : user_pref("CT2776682.AppTrackingLastCheckTime", "Wed Jan 11 2012 15:17:24 GMT+0100");
Nalezeno : user_pref("CT2776682.BrowserCompStateIsOpen_129664534406620501", true);
Nalezeno : user_pref("CT2776682.BrowserCompStateIsOpen_129678129407612905", true);
Nalezeno : user_pref("CT2776682.BrowserCompStateIsOpen_129681725882385585", true);
Nalezeno : user_pref("CT2776682.CTID", "CT2776682");
Nalezeno : user_pref("CT2776682.CurrentServerDate", "11-1-2012");
Nalezeno : user_pref("CT2776682.DSInstall", true);
Nalezeno : user_pref("CT2776682.DialogsAlignMode", "LTR");
Nalezeno : user_pref("CT2776682.DialogsGetterLastCheckTime", "Sun Jan 08 2012 20:57:18 GMT+0100");
Nalezeno : user_pref("CT2776682.DownloadReferralCookieData", "");
Nalezeno : user_pref("CT2776682.FirstServerDate", "8-1-2012");
Nalezeno : user_pref("CT2776682.FirstTime", true);
Nalezeno : user_pref("CT2776682.FirstTimeFF3", true);
Nalezeno : user_pref("CT2776682.FixPageNotFoundErrors", true);
Nalezeno : user_pref("CT2776682.GroupingServerCheckInterval", 1440);
Nalezeno : user_pref("CT2776682.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
Nalezeno : user_pref("CT2776682.HPChangedManually", false);
Nalezeno : user_pref("CT2776682.HPInstall", true);
Nalezeno : user_pref("CT2776682.HPProtectChoice", true);
Nalezeno : user_pref("CT2776682.HPProtectCount", 3);
Nalezeno : user_pref("CT2776682.HasUserGlobalKeys", true);
Nalezeno : user_pref("CT2776682.HomePageProtectorEnabled", false);
Nalezeno : user_pref("CT2776682.HomepageBeforeUnload", "hxxp://search.conduit.com/?ctid=CT2776682&SearchSource=[...]
Nalezeno : user_pref("CT2776682.Initialize", true);
Nalezeno : user_pref("CT2776682.InitializeCommonPrefs", true);
Nalezeno : user_pref("CT2776682.InstallationAndCookieDataSentCount", 3);
Nalezeno : user_pref("CT2776682.InstallationId", "ct2776682_brothersoft_extreme.exe");
Nalezeno : user_pref("CT2776682.InstallationType", "ConduitXPEIntegration");
Nalezeno : user_pref("CT2776682.InstalledDate", "Sun Jan 08 2012 20:57:10 GMT+0100");
Nalezeno : user_pref("CT2776682.InvalidateCache", false);
Nalezeno : user_pref("CT2776682.IsAlertDBUpdated", true);
Nalezeno : user_pref("CT2776682.IsGrouping", false);
Nalezeno : user_pref("CT2776682.IsInitSetupIni", true);
Nalezeno : user_pref("CT2776682.IsMulticommunity", false);
Nalezeno : user_pref("CT2776682.IsOpenThankYouPage", false);
Nalezeno : user_pref("CT2776682.IsOpenUninstallPage", true);
Nalezeno : user_pref("CT2776682.IsProtectorsInit", true);
Nalezeno : user_pref("CT2776682.LanguagePackLastCheckTime", "Tue Jan 10 2012 22:21:26 GMT+0100");
Nalezeno : user_pref("CT2776682.LanguagePackReloadIntervalMM", 1440);
Nalezeno : user_pref("CT2776682.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...]
Nalezeno : user_pref("CT2776682.LastLogin_3.8.1.501", "Wed Jan 11 2012 15:17:19 GMT+0100");
Nalezeno : user_pref("CT2776682.LatestVersion", "3.9.0.3");
Nalezeno : user_pref("CT2776682.Locale", "en");
Nalezeno : user_pref("CT2776682.MCDetectTooltipHeight", "83");
Nalezeno : user_pref("CT2776682.MCDetectTooltipShow", false);
Nalezeno : user_pref("CT2776682.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
Nalezeno : user_pref("CT2776682.MCDetectTooltipWidth", "295");
Nalezeno : user_pref("CT2776682.MyStuffEnabledAtInstallation", true);
Nalezeno : user_pref("CT2776682.OriginalFirstVersion", "3.8.1.501");
Nalezeno : user_pref("CT2776682.RadioIsPodcast", false);
Nalezeno : user_pref("CT2776682.RadioLastCheckTime", "Tue Jan 10 2012 22:21:28 GMT+0100");
Nalezeno : user_pref("CT2776682.RadioLastUpdateIPServer", "3");
Nalezeno : user_pref("CT2776682.RadioLastUpdateServer", "3");
Nalezeno : user_pref("CT2776682.RadioMediaID", "9962");
Nalezeno : user_pref("CT2776682.RadioMediaType", "Media Player");
Nalezeno : user_pref("CT2776682.RadioMenuSelectedID", "EBRadioMenu_CT27766829962");
Nalezeno : user_pref("CT2776682.RadioShrinkedFromSetup", false);
Nalezeno : user_pref("CT2776682.RadioStationName", "California%20Rock");
Nalezeno : user_pref("CT2776682.RadioStationURL", "hxxp://feedlive.net/california.asx");
Nalezeno : user_pref("CT2776682.SavedHomepage", "hxxp://www.seznam.cz/");
Nalezeno : user_pref("CT2776682.SearchCaption", "BrotherSoft Extreme Customized Web Search");
Nalezeno : user_pref("CT2776682.SearchEngineBeforeUnload", "BrotherSoft Extreme Customized Web Search");
Nalezeno : user_pref("CT2776682.SearchFromAddressBarIsInit", true);
Nalezeno : user_pref("CT2776682.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT277[...]
Nalezeno : user_pref("CT2776682.SearchInNewTabEnabled", true);
Nalezeno : user_pref("CT2776682.SearchInNewTabIntervalMM", 1440);
Nalezeno : user_pref("CT2776682.SearchInNewTabLastCheckTime", "Tue Jan 10 2012 22:21:25 GMT+0100");
Nalezeno : user_pref("CT2776682.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...]
Nalezeno : user_pref("CT2776682.SearchInNewTabUsageUrl", "hxxp://usage.hosting.toolbar.conduit-services.com/usa[...]
Nalezeno : user_pref("CT2776682.SearchProtectorEnabled", true);
Nalezeno : user_pref("CT2776682.SearchProtectorToolbarDisabled", false);
Nalezeno : user_pref("CT2776682.SendProtectorDataViaLogin", true);
Nalezeno : user_pref("CT2776682.ServiceMapLastCheckTime", "Tue Jan 10 2012 22:21:25 GMT+0100");
Nalezeno : user_pref("CT2776682.SettingsLastCheckTime", "Wed Jan 11 2012 15:17:05 GMT+0100");
Nalezeno : user_pref("CT2776682.SettingsLastUpdate", "1326169248");
Nalezeno : user_pref("CT2776682.TBHomePageUrl", "hxxp://search.conduit.com/?ctid=CT2776682&SearchSource=13");
Nalezeno : user_pref("CT2776682.ThirdPartyComponentsInterval", 504);
Nalezeno : user_pref("CT2776682.ThirdPartyComponentsLastCheck", "Sun Jan 08 2012 20:57:02 GMT+0100");
Nalezeno : user_pref("CT2776682.ThirdPartyComponentsLastUpdate", "1312887586");
Nalezeno : user_pref("CT2776682.ToolbarShrinkedFromSetup", false);
Nalezeno : user_pref("CT2776682.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2776682");
Nalezeno : user_pref("CT2776682.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,clien[...]
Nalezeno : user_pref("CT2776682.UserID", "UN99820774440109284");
Nalezeno : user_pref("CT2776682.ValidationData_Search", 0);
Nalezeno : user_pref("CT2776682.ValidationData_Toolbar", 2);
Nalezeno : user_pref("CT2776682.alertChannelId", "1168776");
Nalezeno : user_pref("CT2776682.approveUntrustedApps", false);
Nalezeno : user_pref("CT2776682.backendstorage.autocompletepro_enable", "31");
Nalezeno : user_pref("CT2776682.backendstorage.autocompletepro_enable_auto", "31");
Nalezeno : user_pref("CT2776682.backendstorage.c2p_iframe_md5", "6537663536626130396366633837326231393531333264[...]
Nalezeno : user_pref("CT2776682.backendstorage.cbfirsttime", "53756E204A616E20303820323031322032303A35373A33342[...]
Nalezeno : user_pref("CT2776682.backendstorage.installationdatefcd0b5ea-2655-4a3f-8a7f-5fbabeb287ff", "31333236[...]
Nalezeno : user_pref("CT2776682.backendstorage.shoppingapp.gk.exipres", "467269204A616E20313320323031322032303A[...]
Nalezeno : user_pref("CT2776682.backendstorage.shoppingapp.gk.geolocation", "637A6563682072657075626C6963");
Nalezeno : user_pref("CT2776682.backendstorage.toolbarappheartbeat", "7B2266636430623565612D323635352D346133662[...]
Nalezeno : user_pref("CT2776682.backendstorage.toolbarnotificationheartbeat", "7B2274797065223A2268656172746265[...]
Nalezeno : user_pref("CT2776682.backendstorage.toolbarnotificationqueue", "5B5D");
Nalezeno : user_pref("CT2776682.backendstorage.toolbarnotificationsettings", "7B2273656E644E6F74696669636174696[...]
Nalezeno : user_pref("CT2776682.backendstorage.toolbarnotificationuserid", "3931383233353934373836");
Nalezeno : user_pref("CT2776682.backendstorage.url_history", "687474703A2F2F7777772E73657A6E616D2E637A2F");
Nalezeno : user_pref("CT2776682.backendstorage.url_history_time", "31333236323934373339313931");
Nalezeno : user_pref("CT2776682.components.1000082", false);
Nalezeno : user_pref("CT2776682.components.129288498426163451", false);
Nalezeno : user_pref("CT2776682.components.129317966246600942", false);
Nalezeno : user_pref("CT2776682.components.129348059348463281", false);
Nalezeno : user_pref("CT2776682.components.129378290255256948", false);
Nalezeno : user_pref("CT2776682.components.129472433557631732", false);
Nalezeno : user_pref("CT2776682.components.129625171796543175", false);
Nalezeno : user_pref("CT2776682.components.129664534406620501", false);
Nalezeno : user_pref("CT2776682.components.129678129407612905", false);
Nalezeno : user_pref("CT2776682.components.129681725882385585", false);
Nalezeno : user_pref("CT2776682.components.129687522643660664", false);
Nalezeno : user_pref("CT2776682.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.c[...]
Nalezeno : user_pref("CT2776682.globalFirstTimeInfoLastCheckTime", "Wed Jan 11 2012 15:17:17 GMT+0100");
Nalezeno : user_pref("CT2776682.homepageProtectorEnableByLogin", true);
Nalezeno : user_pref("CT2776682.initDone", true);
Nalezeno : user_pref("CT2776682.isAppTrackingManagerOn", true);
Nalezeno : user_pref("CT2776682.isFirstRadioInstallation", false);
Nalezeno : user_pref("CT2776682.myStuffEnabled", true);
Nalezeno : user_pref("CT2776682.myStuffPublihserMinWidth", 400);
Nalezeno : user_pref("CT2776682.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...]
Nalezeno : user_pref("CT2776682.myStuffServiceIntervalMM", 1440);
Nalezeno : user_pref("CT2776682.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...]
Nalezeno : user_pref("CT2776682.oldAppsList", "129288498392881552,129288498393350308,111,129625171796543175,129[...]
Nalezeno : user_pref("CT2776682.revertSettingsEnabled", true);
Nalezeno : user_pref("CT2776682.searchProtectorDialogDelayInSec", 10);
Nalezeno : user_pref("CT2776682.searchProtectorEnableByLogin", true);
Nalezeno : user_pref("CT2776682.testingCtid", "");
Nalezeno : user_pref("CT2776682.toolbarAppMetaDataLastCheckTime", "Tue Jan 10 2012 22:21:26 GMT+0100");
Nalezeno : user_pref("CT2776682.toolbarContextMenuLastCheckTime", "Sun Jan 08 2012 20:57:15 GMT+0100");
Nalezeno : user_pref("CT2776682.usagesFlag", 2);
Nalezeno : user_pref("CT3072253..clientLogIsEnabled", true);
Nalezeno : user_pref("CT3072253..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...]
Nalezeno : user_pref("CT3072253..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...]
Nalezeno : user_pref("CT3072253.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);
Nalezeno : user_pref("CT3072253.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
Nalezeno : user_pref("CT3072253.BrowserCompStateIsOpen_129573915102477663", true);
Nalezeno : user_pref("CT3072253.BrowserCompStateIsOpen_129749445881800338", true);
Nalezeno : user_pref("CT3072253.BrowserCompStateIsOpen_129805375651312503", true);
Nalezeno : user_pref("CT3072253.CTID", "CT3072253");
Nalezeno : user_pref("CT3072253.CurrentServerDate", "5-11-2012");
Nalezeno : user_pref("CT3072253.DSInstall", true);
Nalezeno : user_pref("CT3072253.DialogsAlignMode", "LTR");
Nalezeno : user_pref("CT3072253.DialogsGetterLastCheckTime", "Mon Nov 05 2012 15:45:38 GMT+0100");
Nalezeno : user_pref("CT3072253.DownloadReferralCookieData", "");
Nalezeno : user_pref("CT3072253.FirstServerDate", "16-5-2012");
Nalezeno : user_pref("CT3072253.FirstTime", true);
Nalezeno : user_pref("CT3072253.FirstTimeFF3", true);
Nalezeno : user_pref("CT3072253.FixPageNotFoundErrors", true);
Nalezeno : user_pref("CT3072253.GroupingServerCheckInterval", 1440);
Nalezeno : user_pref("CT3072253.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
Nalezeno : user_pref("CT3072253.HPInstall", true);
Nalezeno : user_pref("CT3072253.HasUserGlobalKeys", true);
Nalezeno : user_pref("CT3072253.Initialize", true);
Nalezeno : user_pref("CT3072253.InitializeCommonPrefs", true);
Nalezeno : user_pref("CT3072253.InstallationAndCookieDataSentCount", 3);
Nalezeno : user_pref("CT3072253.InstallationId", "fftB9DA.tmp.exe");
Nalezeno : user_pref("CT3072253.InstallationType", "XPE");
Nalezeno : user_pref("CT3072253.InstalledDate", "Tue May 15 2012 23:30:46 GMT+0200");
Nalezeno : user_pref("CT3072253.IsGrouping", false);
Nalezeno : user_pref("CT3072253.IsInitSetupIni", true);
Nalezeno : user_pref("CT3072253.IsMulticommunity", false);
Nalezeno : user_pref("CT3072253.IsOpenThankYouPage", true);
Nalezeno : user_pref("CT3072253.IsOpenUninstallPage", false);
Nalezeno : user_pref("CT3072253.IsProtectorsInit", true);
Nalezeno : user_pref("CT3072253.LanguagePackLastCheckTime", "Mon Nov 05 2012 21:23:56 GMT+0100");
Nalezeno : user_pref("CT3072253.LanguagePackReloadIntervalMM", 1440);
Nalezeno : user_pref("CT3072253.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...]
Nalezeno : user_pref("CT3072253.LastLogin_3.12.0.8", "Wed May 16 2012 15:38:39 GMT+0200");
Nalezeno : user_pref("CT3072253.LastLogin_3.12.2.3", "Wed May 30 2012 23:17:24 GMT+0200");
Nalezeno : user_pref("CT3072253.LastLogin_3.13.0.6", "Mon Jul 16 2012 22:52:56 GMT+0200");
Nalezeno : user_pref("CT3072253.LastLogin_3.14.1.0", "Tue Aug 28 2012 11:06:49 GMT+0200");
Nalezeno : user_pref("CT3072253.LastLogin_3.15.1.0", "Mon Nov 05 2012 20:54:38 GMT+0100");
Nalezeno : user_pref("CT3072253.LatestVersion", "3.14.1.0");
Nalezeno : user_pref("CT3072253.Locale", "en");
Nalezeno : user_pref("CT3072253.MCDetectTooltipHeight", "83");
Nalezeno : user_pref("CT3072253.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
Nalezeno : user_pref("CT3072253.MCDetectTooltipWidth", "295");
Nalezeno : user_pref("CT3072253.MyStuffEnabledAtInstallation", true);
Nalezeno : user_pref("CT3072253.OriginalFirstVersion", "3.12.0.8");
Nalezeno : user_pref("CT3072253.SHRINK_TOOLBAR", 1);
Nalezeno : user_pref("CT3072253.SavedHomepage", "hxxp://www.seznam.cz/");
Nalezeno : user_pref("CT3072253.SearchBoxWidth", 802);
Nalezeno : user_pref("CT3072253.SearchCaption", "uTorrentControl2 Customized Web Search");
Nalezeno : user_pref("CT3072253.SearchEngineBeforeUnload", "uTorrentControl2 Customized Web Search");
Nalezeno : user_pref("CT3072253.SearchFromAddressBarIsInit", true);
Nalezeno : user_pref("CT3072253.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT307[...]
Nalezeno : user_pref("CT3072253.SearchInNewTabEnabled", true);
Nalezeno : user_pref("CT3072253.SearchInNewTabIntervalMM", 1440);
Nalezeno : user_pref("CT3072253.SearchInNewTabLastCheckTime", "Mon Nov 05 2012 21:23:55 GMT+0100");
Nalezeno : user_pref("CT3072253.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...]
Nalezeno : user_pref("CT3072253.SearchProtectorEnabled", true);
Nalezeno : user_pref("CT3072253.SearchProtectorToolbarDisabled", false);
Nalezeno : user_pref("CT3072253.SendProtectorDataViaLogin", true);
Nalezeno : user_pref("CT3072253.ServiceMapLastCheckTime", "Mon Nov 05 2012 21:23:56 GMT+0100");
Nalezeno : user_pref("CT3072253.SettingsLastCheckTime", "Mon Nov 05 2012 20:54:37 GMT+0100");
Nalezeno : user_pref("CT3072253.SettingsLastUpdate", "1352142245");
Nalezeno : user_pref("CT3072253.TBHomePageUrl", "hxxp://search.conduit.com/?ctid=CT3072253&SearchSource=13");
Nalezeno : user_pref("CT3072253.ThirdPartyComponentsInterval", 504);
Nalezeno : user_pref("CT3072253.ThirdPartyComponentsLastCheck", "Tue May 15 2012 23:30:45 GMT+0200");
Nalezeno : user_pref("CT3072253.ThirdPartyComponentsLastUpdate", "1312887586");
Nalezeno : user_pref("CT3072253.ToolbarShrinkedFromSetup", false);
Nalezeno : user_pref("CT3072253.TrusteLinkUrl", "hxxp://trust.conduit.com/CT3072253");
Nalezeno : user_pref("CT3072253.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,clien[...]
Nalezeno : user_pref("CT3072253.UserID", "UN91086739693960877");
Nalezeno : user_pref("CT3072253.ValidationData_Search", 1);
Nalezeno : user_pref("CT3072253.ValidationData_Toolbar", 2);
Nalezeno : user_pref("CT3072253.alertChannelId", "1463702");
Nalezeno : user_pref("CT3072253.autoDisableScopes", -1);
Nalezeno : user_pref("CT3072253.backendstorage.cbcountry_000", "435A");
Nalezeno : user_pref("CT3072253.backendstorage.cbfirsttime", "547565204D617920313520323031322032333A33303A35372[...]
Nalezeno : user_pref("CT3072253.backendstorage.facebook_mode", "32");
Nalezeno : user_pref("CT3072253.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.c[...]
Nalezeno : user_pref("CT3072253.globalFirstTimeInfoLastCheckTime", "Tue May 15 2012 23:30:46 GMT+0200");
Nalezeno : user_pref("CT3072253.homepageProtectorEnableByLogin", true);
Nalezeno : user_pref("CT3072253.initDone", true);
Nalezeno : user_pref("CT3072253.isAppTrackingManagerOn", true);
Nalezeno : user_pref("CT3072253.myStuffEnabled", true);
Nalezeno : user_pref("CT3072253.myStuffPublihserMinWidth", 400);
Nalezeno : user_pref("CT3072253.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...]
Nalezeno : user_pref("CT3072253.myStuffServiceIntervalMM", 1440);
Nalezeno : user_pref("CT3072253.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...]
Nalezeno : user_pref("CT3072253.navigateToUrlOnSearch", false);
Nalezeno : user_pref("CT3072253.revertSettingsEnabled", true);
Nalezeno : user_pref("CT3072253.searchProtectorDialogDelayInSec", 10);
Nalezeno : user_pref("CT3072253.searchProtectorEnableByLogin", true);
Nalezeno : user_pref("CT3072253.testingCtid", "");
Nalezeno : user_pref("CT3072253.toolbarAppMetaDataLastCheckTime", "Mon Nov 05 2012 21:23:59 GMT+0100");
Nalezeno : user_pref("CT3072253.toolbarContextMenuLastCheckTime", "Tue May 15 2012 23:30:55 GMT+0200");
Nalezeno : user_pref("CT3072253.usagesFlag", 2);
Nalezeno : user_pref("CommunityToolbar.ConduitHomepagesList", "hxxp://search.conduit.com/?ctid=CT2776682&Search[...]
Nalezeno : user_pref("CommunityToolbar.ConduitSearchList", "BrotherSoft Extreme Customized Web Search,uTorrentC[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit. ... /CT2776682[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit. ... /CT3072253[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root ... 1164461/CZ", "\"0\"[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-ser ... =CT2776682", [...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-ser ... =CT3072253", [...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-serv ... tenApps&lo[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-serv ... erApps&loc[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-serv ... redApps&lo[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-serv ... lbar&local[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-ser ... rt/dlg.pkg", "\[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-s ... g?ver=3.12[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-s ... g?ver=3.12[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-s ... g?ver=3.13[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-s ... g?ver=3.14[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-s ... g?ver=3.15[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-s ... kg?ver=3.8.[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/ ... =CT2776682",[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/ ... =CT3072253",[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/R ... alizer_dea[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/R ... nimize.gif"[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/R ... t/play.gif", "\[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/R ... t/stop.gif", "\[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/R ... nt/vol.gif", "\"[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-serv ... ?locale=en", "\"e20[...]
Nalezeno : user_pref("CommunityToolbar.LatestLibsPath", "file:///C:\\Users\\Ondra\\AppData\\Roaming\\Mozilla\\F[...]
Nalezeno : user_pref("CommunityToolbar.LatestToolbarVersionInstalled", "3.12.0.8");
Nalezeno : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "hxxp://search.sweetim.com/search.asp?src[...]
Nalezeno : user_pref("CommunityToolbar.ToolbarsList", "CT2776682,CT3072253");
Nalezeno : user_pref("CommunityToolbar.ToolbarsList2", "CT2776682,CT3072253");
Nalezeno : user_pref("CommunityToolbar.ToolbarsList4", "CT2776682,CT3072253");
Nalezeno : user_pref("CommunityToolbar.globalUserId", "3123332c-faf6-4b08-aca6-65db942bc39b");
Nalezeno : user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true);
Nalezeno : user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true);
Nalezeno : user_pref("CommunityToolbar.keywordURLSelectedCTID", "CT3072253");
Nalezeno : user_pref("CommunityToolbar.notifications.alertDialogsGetterLastCheckTime", "Sun Jan 08 2012 20:57:1[...]
Nalezeno : user_pref("CommunityToolbar.notifications.alertInfoInterval", 1440);
Nalezeno : user_pref("CommunityToolbar.notifications.alertInfoLastCheckTime", "Tue Jan 10 2012 22:21:34 GMT+010[...]
Nalezeno : user_pref("CommunityToolbar.notifications.clientsServerUrl", "hxxp://alert.client.conduit.com");
Nalezeno : user_pref("CommunityToolbar.notifications.locale", "en");
Nalezeno : user_pref("CommunityToolbar.notifications.loginIntervalMin", 1440);
Nalezeno : user_pref("CommunityToolbar.notifications.loginLastCheckTime", "Tue Jan 10 2012 22:21:26 GMT+0100");
Nalezeno : user_pref("CommunityToolbar.notifications.loginLastUpdateTime", "1313487611");
Nalezeno : user_pref("CommunityToolbar.notifications.messageShowTimeSec", 20);
Nalezeno : user_pref("CommunityToolbar.notifications.servicesServerUrl", "hxxp://alert.services.conduit.com");
Nalezeno : user_pref("CommunityToolbar.notifications.showTrayIcon", false);
Nalezeno : user_pref("CommunityToolbar.notifications.userCloseIntervalMin", 300);
Nalezeno : user_pref("CommunityToolbar.notifications.userId", "717731b6-c3f4-4ca0-8433-5e0d5caec172");
Nalezeno : user_pref("CommunityToolbar.originalHomepage", "hxxp://www.seznam.cz/");
Nalezeno : user_pref("CommunityToolbar.originalSearchEngine", "SweetIM Search");
Nalezeno : user_pref("browser.babylon.HPOnNewTab", "search.babylon.com");
Nalezeno : user_pref("browser.newtab.url", "hxxp://isearch.babylon.com/?affID=116632&babsrc=NT_ss&mntrId=1c704c[...]
Nalezeno : user_pref("browser.search.defaultenginename", "AVG Secure Search");
Nalezeno : user_pref("browser.search.defaultthis.engineName", "uTorrentControl2 Customized Web Search");
Nalezeno : user_pref("browser.search.order.1", "Search the web (Babylon)");
Nalezeno : user_pref("browser.search.selectedEngine", "Search the web (Babylon)");
Nalezeno : user_pref("extensions.BabylonToolbar.admin", false);
Nalezeno : user_pref("extensions.BabylonToolbar.aflt", "orgnl");
Nalezeno : user_pref("extensions.BabylonToolbar.babTrack", "affID=100489");
Nalezeno : user_pref("extensions.BabylonToolbar.bbDpng", 20);
Nalezeno : user_pref("extensions.BabylonToolbar.dfltLng", "en");
Nalezeno : user_pref("extensions.BabylonToolbar.dfltSrch", true);
Nalezeno : user_pref("extensions.BabylonToolbar.hmpg", true);
Nalezeno : user_pref("extensions.BabylonToolbar.id", "1c704c020000000000000019212e14c0");
Nalezeno : user_pref("extensions.BabylonToolbar.instlDay", "15256");
Nalezeno : user_pref("extensions.BabylonToolbar.instlRef", "sst");
Nalezeno : user_pref("extensions.BabylonToolbar.keyWordUrl", "hxxp://search.babylon.com/?babsrc=SP_ss&q={search[...]
Nalezeno : user_pref("extensions.BabylonToolbar.lastDP", 20);
Nalezeno : user_pref("extensions.BabylonToolbar.lastVrsnTs", "");
Nalezeno : user_pref("extensions.BabylonToolbar.mntrFFxVrsn", "3.6");
Nalezeno : user_pref("extensions.BabylonToolbar.newTab", true);
Nalezeno : user_pref("extensions.BabylonToolbar.newTabUrl", "hxxp://search.babylon.com/?babsrc=NT_ss&affID=1004[...]
Nalezeno : user_pref("extensions.BabylonToolbar.noFFXTlbr", false);
Nalezeno : user_pref("extensions.BabylonToolbar.prdct", "BabylonToolbar");
Nalezeno : user_pref("extensions.BabylonToolbar.propectorlck", 73513755);
Nalezeno : user_pref("extensions.BabylonToolbar.prtkDS", 0);
Nalezeno : user_pref("extensions.BabylonToolbar.prtkHmpg", 1);
Nalezeno : user_pref("extensions.BabylonToolbar.prtnrId", "babylon");
Nalezeno : user_pref("extensions.BabylonToolbar.ptch_0717", true);
Nalezeno : user_pref("extensions.BabylonToolbar.smplGrp", "free");
Nalezeno : user_pref("extensions.BabylonToolbar.srcExt", "ss");
Nalezeno : user_pref("extensions.BabylonToolbar.srchPrvdr", "Search the web (Babylon)");
Nalezeno : user_pref("extensions.BabylonToolbar.tlbrId", "tb9");
Nalezeno : user_pref("extensions.BabylonToolbar.vrsn", "1.4.35.10");
Nalezeno : user_pref("extensions.BabylonToolbar.vrsnTs", "1.4.35.1014:40:10");
Nalezeno : user_pref("extensions.BabylonToolbar_i.newTab", true);
Nalezeno : user_pref("extensions.BabylonToolbar_i.newTabUrl", "hxxp://search.babylon.com/?affID=112560&tt=23051[...]
Nalezeno : user_pref("extensions.basicscan.init", true);
Nalezeno : user_pref("extensions.plugin2@gameplaylabs.com.fr", "1300980382");
Nalezeno : user_pref("extensions.plugin2@gameplaylabs.com.ranonce", true);
Nalezeno : user_pref("extensions.plugin2@gameplaylabs.com.rule_/", "1300980383");
Nalezeno : user_pref("extensions.plugin2@gameplaylabs.com.rule_dealsplugin.com/", "1300980383");
Nalezeno : user_pref("extensions.plugin2@gameplaylabs.com.rule_facebook.com", "1300980383");
Nalezeno : user_pref("extensions.plugin2@gameplaylabs.com.rule_h", "1300980383");
Nalezeno : user_pref("extensions.plugin2@gameplaylabs.com.rule_hxxp", "1300980383");
Nalezeno : user_pref("extensions.plugin2@gameplaylabs.com.rule_iqquizgame.com/", "1300980383");
Nalezeno : user_pref("extensions.plugin2@gameplaylabs.com.rule_play-ga.me/", "1300980383");
Nalezeno : user_pref("extensions.plugin2@gameplaylabs.com.rule_revealmycrush.com/", "1300980383");
Nalezeno : user_pref("extensions.plugin2@gameplaylabs.com.rule_unlock-this.com/browserplugin", "1300980383");
Nalezeno : user_pref("extensions.plugin2@gameplaylabs.com.rule_unlock-this.com/plugin", "1300980383");
Nalezeno : user_pref("extensions.plugin@gameplaylabs.com.fr", "1299435598");
Nalezeno : user_pref("extensions.plugin@gameplaylabs.com.rule_.google.", "1299531590");
Nalezeno : user_pref("extensions.plugin@gameplaylabs.com.rule_/", "1299531590");
Nalezeno : user_pref("extensions.plugin@gameplaylabs.com.rule_dealsplugin.com/", "1299531590");
Nalezeno : user_pref("extensions.plugin@gameplaylabs.com.rule_facebook.com", "1299531590");
Nalezeno : user_pref("extensions.plugin@gameplaylabs.com.rule_h", "1300940039");
Nalezeno : user_pref("extensions.plugin@gameplaylabs.com.rule_hxxp", "1299531590");
Nalezeno : user_pref("extensions.plugin@gameplaylabs.com.rule_hxxp://www.facebook.com/plugins/like.php?href=htt[...]
Nalezeno : user_pref("extensions.plugin@gameplaylabs.com.rule_iqquizgame.com/", "1299531590");
Nalezeno : user_pref("extensions.plugin@gameplaylabs.com.rule_play-ga.me/", "1299531590");
Nalezeno : user_pref("extensions.plugin@gameplaylabs.com.rule_revealmycrush.com/", "1299531590");
Nalezeno : user_pref("extensions.plugin@gameplaylabs.com.rule_unlock-this.com/browserplugin", "1299531590");
Nalezeno : user_pref("extensions.plugin@gameplaylabs.com.rule_unlock-this.com/plugin", "1299531590");
Nalezeno : user_pref("icqtoolbar.installsource", "1");
Nalezeno : user_pref("icqtoolbar.skip_default_search", "yes");
Nalezeno : user_pref("sweetim.toolbar.highlight.colors", "#FFFF00,#00FFE4,#5AFF00,#0087FF,#FFCC00,#FF00F0");
Nalezeno : user_pref("sweetim.toolbar.logger.ConsoleHandler.MinReportLevel", "7");
Nalezeno : user_pref("sweetim.toolbar.logger.FileHandler.FileName", "ff-toolbar.log");
Nalezeno : user_pref("sweetim.toolbar.logger.FileHandler.MaxFileSize", "200000");
Nalezeno : user_pref("sweetim.toolbar.logger.FileHandler.MinReportLevel", "7");
Nalezeno : user_pref("sweetim.toolbar.mode.debug", "false");
Nalezeno : user_pref("sweetim.toolbar.previous.browser.search.defaultenginename", "Search the web (Babylon)");
Nalezeno : user_pref("sweetim.toolbar.previous.browser.search.defaulturl", "");
Nalezeno : user_pref("sweetim.toolbar.previous.browser.search.selectedEngine", "Search the web (Babylon)");
Nalezeno : user_pref("sweetim.toolbar.previous.browser.startup.homepage", "hxxp://www.seznam.cz/");
Nalezeno : user_pref("sweetim.toolbar.previous.keyword.URL", "hxxp://search.babylon.com/?babsrc=SP_ss&q={search[...]
Nalezeno : user_pref("sweetim.toolbar.search.external", "<?xml version=\"1.0\"?><TOOLBAR><EXTERNAL_SEARCH engin[...]
Nalezeno : user_pref("sweetim.toolbar.search.history.capacity", "10");
Nalezeno : user_pref("sweetim.toolbar.searchguard.enable", "true");
Nalezeno : user_pref("sweetim.toolbar.simapp_id", "{5A710E2F-FA82-11E0-9714-0019212E14C0}");
Nalezeno : user_pref("sweetim.toolbar.urls.homepage", "hxxp://home.sweetim.com");
Nalezeno : user_pref("sweetim.toolbar.version", "1.2.0.2");

-\\ Chromium v window_placement: {
bottom: 728

Soubor : C:\Users\Ondra\AppData\Local\Chromium\User Data\Default\Preferences

[OK] Soubor je eistý.

*************************

AdwCleaner[R1].txt - [49434 octets] - [09/07/2013 20:04:54]

########## EOF - C:\AdwCleaner[R1].txt - [49495 octets] ##########

. Takže spusť znovu MbAM a dej Scan
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Ukaž výsledky
- ujisti se že máš zatrhnuté všechny vypsané nálezy a klikni na tlačítko Odstranit označené
- když skončí odstraňování tak se ti zobrazí log, tak ho sem dej.
- pak zvol v programu OK a pak program ukonči přes Exit
Můžeš sem pak vložit nový log z MbAM.

Spusť znovu AdwCleaner (u Windows Vista či Windows7, klikni na AdwCleaner pravým a vyber „Spustit jako správce“
Klikni na „ Vymazat“
Program provede opravu, po automatickém restartu neukáže log (C:\AdwCleaner [S?].txt) , jeho obsah sem celý vlož.

Stáhni si Junkware Removal Tool

na svojí plochu.

Deaktivuj si svůj antivirový program. Pravým tl. myši klikni na JRT.exe a vyber „spustit jako správce“. Pro pokračování budeš vyzván ke stisknutí jakékoliv klávesy. Na nějakou klikni.
Začne skenování programu. Skenování může trvat dloho , podle množství nákaz. Po ukončení skenu se objeví log (JRT.txt) , který se uloží na ploše.
Zkopíruj sem prosím celý jeho obsah.

Stáhni si RogueKiller
32bit.:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
64bit.:
http://www.sur-la-toile.com/RogueKiller ... lerX64.exe
na svojí plochu.
- Zavři všechny ostatní programy a prohlížeče.
- Pro OS Vista a win7 spusť program RogueKiller.exe jako správce , u XP poklepáním.
- počkej až skončí Prescan -vyhledávání škodlivých procesů.
- Zkontroluj , zda máš zaškrtnuto:
Kontrola MBR
Kontrola Faked
Antirootkit
-Potom klikni na „Prohledat“.
- Program skenuje procesy PC. Po proskenování klikni na „Zpráva“celý obsah logu sem zkopíruj.
Pokud je program blokován , zkus ho spustit několikrát. Pokud dále program nepůjde spustit a pracovat, přejmenuj ho na winlogon.exe.

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Verze: v2013.07.07.05

Windows Vista Service Pack 2 x86 NTFS (Nouzový režim s podporou sítě)
Internet Explorer 8.0.6001.19437
Ondra :: COMP [administrátor]

10.7.2013 20:09:18
mbam-log-2013-07-10 (20-09-18).txt

Typ: Rychlá kontrola
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 270841
Uplynulý čas: 8 minut, 31 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 1
C:\Users\Ondra\Downloads\CardRecovery6.0Build1012Activator.rar (PUP.Hacktool.Patcher) -> Přesun do karantény a smazání se zdařilo.

(konec)
(nalezený soubor byl odstraněn)


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 5.0.4 (07.10.2013:1)
OS: Windows Vista (TM) Home Premium x86
Ran by Ondra on st 10.07.2013 at 21:01:34,25
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values

Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\\DisplayName
Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\\URL
Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\AboutURLs\\Tabs



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\appid\escort.dll
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\appid\{09c554c3-109b-483c-a06b-f14172f1a947}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\babylon
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\conduit
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\igearsettings
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\softonic
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\sweetim
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\sweetim
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\systweak
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\yourfiledownloader
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\yourfiledownloader
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\conduit
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\conduitsearchscopes
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\fun web products
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\smartbar
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\babylon
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\appid\bho.dll
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\appid\nctaudiocdgrabber2.dll
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\appid\scripthelper.exe
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\appid\viprotocol.dll
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\bbylntlbr.bbylntlbrhlpr
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\bbylntlbr.bbylntlbrhlpr.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\conduit.engine
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\installer\products\3192aa38321c641458dbdaf83979d193
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\prod.cap
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\protocols\handler\viprotocol
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\scripthelper.scripthelperapi
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\scripthelper.scripthelperapi.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\viprotocol.viprotocolole
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\viprotocol.viprotocolole.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\classes\Toolbar.CT2304157
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\classes\Toolbar.CT2776682
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\classes\Toolbar.CT3072253
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{59400722-1E17-4C4B-A696-C329FDCD01CE}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB8}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB9}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{E977DF1B-46B5-B449-EE8E-6143A3D0FA23}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\babylon"
Successfully deleted: [Folder] "C:\ProgramData\installmate"
Successfully deleted: [Folder] "C:\ProgramData\premium"
Successfully deleted: [Folder] "C:\ProgramData\trymedia"
Successfully deleted: [Folder] "C:\Users\Ondra\AppData\Roaming\babylon"
Successfully deleted: [Folder] "C:\Users\Ondra\AppData\Roaming\dvdvideosoftiehelpers"
Successfully deleted: [Folder] "C:\Users\Ondra\AppData\Roaming\goforfiles"
Successfully deleted: [Folder] "C:\Users\Ondra\AppData\Roaming\systweak"
Successfully deleted: [Folder] "C:\Users\Ondra\AppData\Roaming\yourfiledownloader"
Successfully deleted: [Folder] "C:\Users\Ondra\appdata\local\conduit"
Successfully deleted: [Folder] "C:\Users\Ondra\appdata\locallow\babylontoolbar"
Successfully deleted: [Folder] "C:\Users\Ondra\appdata\locallow\conduit"
Successfully deleted: [Folder] "C:\Users\Ondra\appdata\locallow\funwebproducts"
Successfully deleted: [Folder] "C:\Users\Ondra\appdata\locallow\mywebsearch"
Successfully deleted: [Folder] "C:\Program Files\bandoo"
Successfully deleted: [Folder] "C:\Program Files\conduit"
Successfully deleted: [Folder] "C:\Program Files\daemon tools toolbar"
Successfully deleted: [Folder] "C:\Program Files\goforfiles"
Successfully deleted: [Folder] "C:\Program Files\icq6toolbar"



~~~ FireFox

Successfully deleted: [File] C:\user.js
Successfully deleted: [File] "C:\Program Files\Mozilla Firefox\searchplugins\babylon.xml"
Successfully deleted: [File] C:\Users\Ondra\AppData\Roaming\mozilla\firefox\profiles\89dezo23.default\extensions\{eee6c361-6118-11dc-9c72-001320c79847}.xpi
Successfully deleted: [File] C:\Users\Ondra\AppData\Roaming\mozilla\firefox\profiles\89dezo23.default\searchplugins\conduit.xml
Successfully deleted: [File] C:\Users\Ondra\AppData\Roaming\mozilla\firefox\profiles\89dezo23.default\searchplugins\sweetim.xml
Successfully deleted: [Folder] "C:\Program Files\Mozilla Firefox\extensions\ffxtlbr@babylon.com"
Successfully deleted: [Folder] C:\Users\Ondra\AppData\Roaming\mozilla\firefox\profiles\89dezo23.default\conduitcommon
Successfully deleted the following from C:\Users\Ondra\AppData\Roaming\mozilla\firefox\profiles\89dezo23.default\prefs.js

user_pref("CT2776682..clientLogIsEnabled", false);
user_pref("CT2776682..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
user_pref("CT2776682..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
user_pref("CT2776682.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);
user_pref("CT2776682.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
user_pref("CT2776682.AppTrackingLastCheckTime", "Wed Jan 11 2012 15:17:24 GMT+0100");
user_pref("CT2776682.BrowserCompStateIsOpen_129664534406620501", true);
user_pref("CT2776682.BrowserCompStateIsOpen_129678129407612905", true);
user_pref("CT2776682.BrowserCompStateIsOpen_129681725882385585", true);
user_pref("CT2776682.CTID", "CT2776682");
user_pref("CT2776682.CurrentServerDate", "11-1-2012");
user_pref("CT2776682.DSInstall", true);
user_pref("CT2776682.DialogsAlignMode", "LTR");
user_pref("CT2776682.DialogsGetterLastCheckTime", "Sun Jan 08 2012 20:57:18 GMT+0100");
user_pref("CT2776682.DownloadReferralCookieData", "");
user_pref("CT2776682.FirstServerDate", "8-1-2012");
user_pref("CT2776682.FirstTime", true);
user_pref("CT2776682.FirstTimeFF3", true);
user_pref("CT2776682.FixPageNotFoundErrors", true);
user_pref("CT2776682.GroupingServerCheckInterval", 1440);
user_pref("CT2776682.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
user_pref("CT2776682.HPChangedManually", false);
user_pref("CT2776682.HPInstall", true);
user_pref("CT2776682.HPProtectChoice", true);
user_pref("CT2776682.HPProtectCount", 3);
user_pref("CT2776682.HasUserGlobalKeys", true);
user_pref("CT2776682.HomePageProtectorEnabled", false);
user_pref("CT2776682.HomepageBeforeUnload", "hxxp://search.conduit.com/?ctid=CT2776682&SearchSource=13");
user_pref("CT2776682.Initialize", true);
user_pref("CT2776682.InitializeCommonPrefs", true);
user_pref("CT2776682.InstallationAndCookieDataSentCount", 3);
user_pref("CT2776682.InstallationId", "ct2776682_brothersoft_extreme.exe");
user_pref("CT2776682.InstallationType", "ConduitXPEIntegration");
user_pref("CT2776682.InstalledDate", "Sun Jan 08 2012 20:57:10 GMT+0100");
user_pref("CT2776682.InvalidateCache", false);
user_pref("CT2776682.IsAlertDBUpdated", true);
user_pref("CT2776682.IsGrouping", false);
user_pref("CT2776682.IsInitSetupIni", true);
user_pref("CT2776682.IsMulticommunity", false);
user_pref("CT2776682.IsOpenThankYouPage", false);
user_pref("CT2776682.IsOpenUninstallPage", true);
user_pref("CT2776682.IsProtectorsInit", true);
user_pref("CT2776682.LanguagePackLastCheckTime", "Tue Jan 10 2012 22:21:26 GMT+0100");
user_pref("CT2776682.LanguagePackReloadIntervalMM", 1440);
user_pref("CT2776682.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx");
user_pref("CT2776682.LastLogin_3.8.1.501", "Wed Jan 11 2012 15:17:19 GMT+0100");
user_pref("CT2776682.LatestVersion", "3.9.0.3");
user_pref("CT2776682.Locale", "en");
user_pref("CT2776682.MCDetectTooltipHeight", "83");
user_pref("CT2776682.MCDetectTooltipShow", false);
user_pref("CT2776682.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
user_pref("CT2776682.MCDetectTooltipWidth", "295");
user_pref("CT2776682.MyStuffEnabledAtInstallation", true);
user_pref("CT2776682.OriginalFirstVersion", "3.8.1.501");
user_pref("CT2776682.RadioIsPodcast", false);
user_pref("CT2776682.RadioLastCheckTime", "Tue Jan 10 2012 22:21:28 GMT+0100");
user_pref("CT2776682.RadioLastUpdateIPServer", "3");
user_pref("CT2776682.RadioLastUpdateServer", "3");
user_pref("CT2776682.RadioMediaID", "9962");
user_pref("CT2776682.RadioMediaType", "Media Player");
user_pref("CT2776682.RadioMenuSelectedID", "EBRadioMenu_CT27766829962");
user_pref("CT2776682.RadioShrinkedFromSetup", false);
user_pref("CT2776682.RadioStationName", "California%20Rock");
user_pref("CT2776682.RadioStationURL", "hxxp://feedlive.net/california.asx");
user_pref("CT2776682.SavedHomepage", "hxxp://www.seznam.cz/");
user_pref("CT2776682.SearchCaption", "BrotherSoft Extreme Customized Web Search");
user_pref("CT2776682.SearchEngineBeforeUnload", "BrotherSoft Extreme Customized Web Search");
user_pref("CT2776682.SearchFromAddressBarIsInit", true);
user_pref("CT2776682.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2776682&SearchSource=2&q=");
user_pref("CT2776682.SearchInNewTabEnabled", true);
user_pref("CT2776682.SearchInNewTabIntervalMM", 1440);
user_pref("CT2776682.SearchInNewTabLastCheckTime", "Tue Jan 10 2012 22:21:25 GMT+0100");
user_pref("CT2776682.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID");
user_pref("CT2776682.SearchInNewTabUsageUrl", "hxxp://usage.hosting.toolbar.conduit-services.com/usage.ashx?ctid=EB_TOOLBAR_ID");
user_pref("CT2776682.SearchProtectorEnabled", true);
user_pref("CT2776682.SearchProtectorToolbarDisabled", false);
user_pref("CT2776682.SendProtectorDataViaLogin", true);
user_pref("CT2776682.ServiceMapLastCheckTime", "Tue Jan 10 2012 22:21:25 GMT+0100");
user_pref("CT2776682.SettingsLastCheckTime", "Wed Jan 11 2012 15:17:05 GMT+0100");
user_pref("CT2776682.SettingsLastUpdate", "1326169248");
user_pref("CT2776682.TBHomePageUrl", "hxxp://search.conduit.com/?ctid=CT2776682&SearchSource=13");
user_pref("CT2776682.ThirdPartyComponentsInterval", 504);
user_pref("CT2776682.ThirdPartyComponentsLastCheck", "Sun Jan 08 2012 20:57:02 GMT+0100");
user_pref("CT2776682.ThirdPartyComponentsLastUpdate", "1312887586");
user_pref("CT2776682.ToolbarShrinkedFromSetup", false);
user_pref("CT2776682.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2776682");
user_pref("CT2776682.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,client.conduit-storage.com,OurToolbar.com,CommunityToolbars.com,ForumToolbar.com
user_pref("CT2776682.UserID", "UN99820774440109284");
user_pref("CT2776682.ValidationData_Search", 0);
user_pref("CT2776682.ValidationData_Toolbar", 2);
user_pref("CT2776682.alertChannelId", "1168776");
user_pref("CT2776682.approveUntrustedApps", false);
user_pref("CT2776682.backendstorage.autocompletepro_enable", "31");
user_pref("CT2776682.backendstorage.autocompletepro_enable_auto", "31");
user_pref("CT2776682.backendstorage.c2p_iframe_md5", "6537663536626130396366633837326231393531333264383732343030346463");
user_pref("CT2776682.backendstorage.cbfirsttime", "53756E204A616E20303820323031322032303A35373A333420474D542B30313030");
user_pref("CT2776682.backendstorage.installationdatefcd0b5ea-2655-4a3f-8a7f-5fbabeb287ff", "31333236323931343630393633");
user_pref("CT2776682.backendstorage.shoppingapp.gk.exipres", "467269204A616E20313320323031322032303A35373A333120474D542B30313030");
user_pref("CT2776682.backendstorage.shoppingapp.gk.geolocation", "637A6563682072657075626C6963");
user_pref("CT2776682.backendstorage.toolbarappheartbeat", "7B2266636430623565612D323635352D346133662D386137662D356662616265623238376666223A313332363239313435393933347D");
user_pref("CT2776682.backendstorage.toolbarnotificationheartbeat", "7B2274797065223A22686561727462656174222C2274696D65223A313332363239313530303932302C2275726C223A22687474703A2
user_pref("CT2776682.backendstorage.toolbarnotificationqueue", "5B5D");
user_pref("CT2776682.backendstorage.toolbarnotificationsettings", "7B2273656E644E6F74696669636174696F6E73223A7B22616C6C223A747275652C2261707073223A7B2266636430623565612D323635
user_pref("CT2776682.backendstorage.toolbarnotificationuserid", "3931383233353934373836");
user_pref("CT2776682.backendstorage.url_history", "687474703A2F2F7777772E73657A6E616D2E637A2F");
user_pref("CT2776682.backendstorage.url_history_time", "31333236323934373339313931");
user_pref("CT2776682.components.1000082", false);
user_pref("CT2776682.components.129288498426163451", false);
user_pref("CT2776682.components.129317966246600942", false);
user_pref("CT2776682.components.129348059348463281", false);
user_pref("CT2776682.components.129378290255256948", false);
user_pref("CT2776682.components.129472433557631732", false);
user_pref("CT2776682.components.129625171796543175", false);
user_pref("CT2776682.components.129664534406620501", false);
user_pref("CT2776682.components.129678129407612905", false);
user_pref("CT2776682.components.129681725882385585", false);
user_pref("CT2776682.components.129687522643660664", false);
user_pref("CT2776682.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.conduit.com;apps.conduit.com;services.apps.conduit.com\",\"AppsDetectionUrlP
user_pref("CT2776682.globalFirstTimeInfoLastCheckTime", "Wed Jan 11 2012 15:17:17 GMT+0100");
user_pref("CT2776682.homepageProtectorEnableByLogin", true);
user_pref("CT2776682.initDone", true);
user_pref("CT2776682.isAppTrackingManagerOn", true);
user_pref("CT2776682.isFirstRadioInstallation", false);
user_pref("CT2776682.myStuffEnabled", true);
user_pref("CT2776682.myStuffPublihserMinWidth", 400);
user_pref("CT2776682.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID");
user_pref("CT2776682.myStuffServiceIntervalMM", 1440);
user_pref("CT2776682.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUFF_LUT");
user_pref("CT2776682.oldAppsList", "129288498392881552,129288498393350308,111,129625171796543175,129687522643660664,129678129407612905,129664534406620501,129348059348463281,12
user_pref("CT2776682.revertSettingsEnabled", true);
user_pref("CT2776682.searchProtectorDialogDelayInSec", 10);
user_pref("CT2776682.searchProtectorEnableByLogin", true);
user_pref("CT2776682.testingCtid", "");
user_pref("CT2776682.toolbarAppMetaDataLastCheckTime", "Tue Jan 10 2012 22:21:26 GMT+0100");
user_pref("CT2776682.toolbarContextMenuLastCheckTime", "Sun Jan 08 2012 20:57:15 GMT+0100");
user_pref("CT2776682.usagesFlag", 2);
user_pref("CT3072253..clientLogIsEnabled", true);
user_pref("CT3072253..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
user_pref("CT3072253..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
user_pref("CT3072253.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);
user_pref("CT3072253.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
user_pref("CT3072253.BrowserCompStateIsOpen_129573915102477663", true);
user_pref("CT3072253.BrowserCompStateIsOpen_129749445881800338", true);
user_pref("CT3072253.BrowserCompStateIsOpen_129805375651312503", true);
user_pref("CT3072253.CTID", "CT3072253");
user_pref("CT3072253.CurrentServerDate", "5-11-2012");
user_pref("CT3072253.DSInstall", true);
user_pref("CT3072253.DialogsAlignMode", "LTR");
user_pref("CT3072253.DialogsGetterLastCheckTime", "Mon Nov 05 2012 15:45:38 GMT+0100");
user_pref("CT3072253.DownloadReferralCookieData", "");
user_pref("CT3072253.FirstServerDate", "16-5-2012");
user_pref("CT3072253.FirstTime", true);
user_pref("CT3072253.FirstTimeFF3", true);
user_pref("CT3072253.FixPageNotFoundErrors", true);
user_pref("CT3072253.GroupingServerCheckInterval", 1440);
user_pref("CT3072253.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
user_pref("CT3072253.HPInstall", true);
user_pref("CT3072253.HasUserGlobalKeys", true);
user_pref("CT3072253.Initialize", true);
user_pref("CT3072253.InitializeCommonPrefs", true);
user_pref("CT3072253.InstallationAndCookieDataSentCount", 3);
user_pref("CT3072253.InstallationId", "fftB9DA.tmp.exe");
user_pref("CT3072253.InstallationType", "XPE");
user_pref("CT3072253.InstalledDate", "Tue May 15 2012 23:30:46 GMT+0200");
user_pref("CT3072253.IsGrouping", false);
user_pref("CT3072253.IsInitSetupIni", true);
user_pref("CT3072253.IsMulticommunity", false);
user_pref("CT3072253.IsOpenThankYouPage", true);
user_pref("CT3072253.IsOpenUninstallPage", false);
user_pref("CT3072253.IsProtectorsInit", true);
user_pref("CT3072253.LanguagePackLastCheckTime", "Mon Nov 05 2012 21:23:56 GMT+0100");
user_pref("CT3072253.LanguagePackReloadIntervalMM", 1440);
user_pref("CT3072253.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx");
user_pref("CT3072253.LastLogin_3.12.0.8", "Wed May 16 2012 15:38:39 GMT+0200");
user_pref("CT3072253.LastLogin_3.12.2.3", "Wed May 30 2012 23:17:24 GMT+0200");
user_pref("CT3072253.LastLogin_3.13.0.6", "Mon Jul 16 2012 22:52:56 GMT+0200");
user_pref("CT3072253.LastLogin_3.14.1.0", "Tue Aug 28 2012 11:06:49 GMT+0200");
user_pref("CT3072253.LastLogin_3.15.1.0", "Mon Nov 05 2012 20:54:38 GMT+0100");
user_pref("CT3072253.LatestVersion", "3.14.1.0");
user_pref("CT3072253.Locale", "en");
user_pref("CT3072253.MCDetectTooltipHeight", "83");
user_pref("CT3072253.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
user_pref("CT3072253.MCDetectTooltipWidth", "295");
user_pref("CT3072253.MyStuffEnabledAtInstallation", true);
user_pref("CT3072253.OriginalFirstVersion", "3.12.0.8");
user_pref("CT3072253.SHRINK_TOOLBAR", 1);
user_pref("CT3072253.SavedHomepage", "hxxp://www.seznam.cz/");
user_pref("CT3072253.SearchBoxWidth", 802);
user_pref("CT3072253.SearchCaption", "uTorrentControl2 Customized Web Search");
user_pref("CT3072253.SearchEngineBeforeUnload", "uTorrentControl2 Customized Web Search");
user_pref("CT3072253.SearchFromAddressBarIsInit", true);
user_pref("CT3072253.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3072253&SearchSource=2&q=");
user_pref("CT3072253.SearchInNewTabEnabled", true);
user_pref("CT3072253.SearchInNewTabIntervalMM", 1440);
user_pref("CT3072253.SearchInNewTabLastCheckTime", "Mon Nov 05 2012 21:23:55 GMT+0100");
user_pref("CT3072253.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID");
user_pref("CT3072253.SearchProtectorEnabled", true);
user_pref("CT3072253.SearchProtectorToolbarDisabled", false);
user_pref("CT3072253.SendProtectorDataViaLogin", true);
user_pref("CT3072253.ServiceMapLastCheckTime", "Mon Nov 05 2012 21:23:56 GMT+0100");
user_pref("CT3072253.SettingsLastCheckTime", "Mon Nov 05 2012 20:54:37 GMT+0100");
user_pref("CT3072253.SettingsLastUpdate", "1352142245");
user_pref("CT3072253.TBHomePageUrl", "hxxp://search.conduit.com/?ctid=CT3072253&SearchSource=13");
user_pref("CT3072253.ThirdPartyComponentsInterval", 504);
user_pref("CT3072253.ThirdPartyComponentsLastCheck", "Tue May 15 2012 23:30:45 GMT+0200");
user_pref("CT3072253.ThirdPartyComponentsLastUpdate", "1312887586");
user_pref("CT3072253.ToolbarShrinkedFromSetup", false);
user_pref("CT3072253.TrusteLinkUrl", "hxxp://trust.conduit.com/CT3072253");
user_pref("CT3072253.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,client.conduit-storage.com,OurToolbar.com,CommunityToolbars.com,ForumToolbar.com
user_pref("CT3072253.UserID", "UN91086739693960877");
user_pref("CT3072253.ValidationData_Search", 1);
user_pref("CT3072253.ValidationData_Toolbar", 2);
user_pref("CT3072253.alertChannelId", "1463702");
user_pref("CT3072253.autoDisableScopes", -1);
user_pref("CT3072253.backendstorage.cbcountry_000", "435A");
user_pref("CT3072253.backendstorage.cbfirsttime", "547565204D617920313520323031322032333A33303A353720474D542B30323030");
user_pref("CT3072253.backendstorage.facebook_mode", "32");
user_pref("CT3072253.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.conduit.com;apps.conduit.com;services.apps.conduit.com\",\"AppsDetectionUrlP
user_pref("CT3072253.globalFirstTimeInfoLastCheckTime", "Tue May 15 2012 23:30:46 GMT+0200");
user_pref("CT3072253.homepageProtectorEnableByLogin", true);
user_pref("CT3072253.initDone", true);
user_pref("CT3072253.isAppTrackingManagerOn", true);
user_pref("CT3072253.myStuffEnabled", true);
user_pref("CT3072253.myStuffPublihserMinWidth", 400);
user_pref("CT3072253.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID");
user_pref("CT3072253.myStuffServiceIntervalMM", 1440);
user_pref("CT3072253.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUFF_LUT");
user_pref("CT3072253.navigateToUrlOnSearch", false);
user_pref("CT3072253.revertSettingsEnabled", true);
user_pref("CT3072253.searchProtectorDialogDelayInSec", 10);
user_pref("CT3072253.searchProtectorEnableByLogin", true);
user_pref("CT3072253.testingCtid", "");
user_pref("CT3072253.toolbarAppMetaDataLastCheckTime", "Mon Nov 05 2012 21:23:59 GMT+0100");
user_pref("CT3072253.toolbarContextMenuLastCheckTime", "Tue May 15 2012 23:30:55 GMT+0200");
user_pref("CT3072253.usagesFlag", 2);
user_pref("CommunityToolbar.ConduitHomepagesList", "hxxp://search.conduit.com/?ctid=CT2776682&SearchSource=13,hxxp://search.conduit.com/?ctid=CT3072253&SearchSource=13");
user_pref("CommunityToolbar.ConduitSearchList", "BrotherSoft Extreme Customized Web Search,uTorrentControl2 Customized Web Search");
user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit. ... /CT2776682", "\"1326169249\"");
user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit. ... /CT3072253", "\"9a485b013ce3421fbb7e5afe0fc509853\"");
user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root ... 1164461/CZ", "\"0\"");
user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-ser ... =CT2776682", "\"1323698988\"");
user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-ser ... =CT3072253", "\"1336063965\"");
user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-serv ... &locale=en", "C5ZJe6gL80JBW5CuLy+wkg==");
user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-serv ... &locale=en", "mfQ70fvlD2zuBxSBj8rQqA==");
user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-serv ... &locale=en", "k9un27OkAvkwB2ZmvXxTnA==");
user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-serv ... &locale=en", "9zRvKErdMb8hJOq85ft5Vg==");
user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-ser ... rt/dlg.pkg", "\"07879643d3acc1:0\"");
user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-s ... r=3.12.0.8", "\"4ead38b3e6bcd1:0\"");
user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-s ... r=3.12.2.3", "\"4ead38b3e6bcd1:0\"");
user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-s ... r=3.13.0.6", "\"0d648794549cd1:0\"");
user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-s ... r=3.14.1.0", "\"0e0a4327275cd1:0\"");
user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-s ... r=3.15.1.0", "\"0343677cfb1cd1:0\"");
user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-s ... =3.8.1.501", "\"6a637346d78ccc1:0\"");
user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/ ... =CT2776682", "\"567c96be3ef640e157660940cadc2edb\"");
user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/ ... =CT3072253", "\"f1c77625c0e9bd1c80a2fd6901845fa9\"");
user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/R ... r_dead.gif", "\"0594c8b730c81:0\"");
user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/R ... nimize.gif", "\"03dd14b630c81:0\"");
user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/R ... t/play.gif", "\"0e68497830c81:0\"");
user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/R ... t/stop.gif", "\"086aabd830c81:0\"");
user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/R ... nt/vol.gif", "\"066c1cd630c81:0\"");
user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-serv ... ?locale=en", "\"e20848adcc9f63369aac91b7a8f5f90e\"");
user_pref("CommunityToolbar.LatestLibsPath", "file:///C:\\Users\\Ondra\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\89dezo23.default\\conduitCommon\\modules\\3.12.0.8");
user_pref("CommunityToolbar.LatestToolbarVersionInstalled", "3.12.0.8");
user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "hxxp://search.sweetim.com/search.asp?src=2&q=");
user_pref("CommunityToolbar.ToolbarsList", "CT2776682,CT3072253");
user_pref("CommunityToolbar.ToolbarsList2", "CT2776682,CT3072253");
user_pref("CommunityToolbar.ToolbarsList4", "CT2776682,CT3072253");
user_pref("CommunityToolbar.globalUserId", "3123332c-faf6-4b08-aca6-65db942bc39b");
user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true);
user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true);
user_pref("CommunityToolbar.keywordURLSelectedCTID", "CT3072253");
user_pref("CommunityToolbar.notifications.alertDialogsGetterLastCheckTime", "Sun Jan 08 2012 20:57:14 GMT+0100");
user_pref("CommunityToolbar.notifications.alertInfoInterval", 1440);
user_pref("CommunityToolbar.notifications.alertInfoLastCheckTime", "Tue Jan 10 2012 22:21:34 GMT+0100");
user_pref("CommunityToolbar.notifications.clientsServerUrl", "hxxp://alert.client.conduit.com");
user_pref("CommunityToolbar.notifications.locale", "en");
user_pref("CommunityToolbar.notifications.loginIntervalMin", 1440);
user_pref("CommunityToolbar.notifications.loginLastCheckTime", "Tue Jan 10 2012 22:21:26 GMT+0100");
user_pref("CommunityToolbar.notifications.loginLastUpdateTime", "1313487611");
user_pref("CommunityToolbar.notifications.messageShowTimeSec", 20);
user_pref("CommunityToolbar.notifications.servicesServerUrl", "hxxp://alert.services.conduit.com");
user_pref("CommunityToolbar.notifications.showTrayIcon", false);
user_pref("CommunityToolbar.notifications.userCloseIntervalMin", 300);
user_pref("CommunityToolbar.notifications.userId", "717731b6-c3f4-4ca0-8433-5e0d5caec172");
user_pref("CommunityToolbar.originalHomepage", "hxxp://www.seznam.cz/");
user_pref("CommunityToolbar.originalSearchEngine", "SweetIM Search");
user_pref("browser.babylon.HPOnNewTab", "search.babylon.com");
user_pref("browser.newtab.url", "hxxp://isearch.babylon.com/?affID=116632&babsrc=NT_ss&mntrId=1c704c020000000000000019212e14c0");
user_pref("browser.search.defaultthis.engineName", "uTorrentControl2 Customized Web Search");
user_pref("browser.search.order.1", "Search the web (Babylon)");
user_pref("browser.search.selectedEngine", "Search the web (Babylon)");
user_pref("extensions.BabylonToolbar.admin", false);
user_pref("extensions.BabylonToolbar.aflt", "orgnl");
user_pref("extensions.BabylonToolbar.babTrack", "affID=100489");
user_pref("extensions.BabylonToolbar.bbDpng", 20);
user_pref("extensions.BabylonToolbar.dfltLng", "en");
user_pref("extensions.BabylonToolbar.dfltSrch", true);
user_pref("extensions.BabylonToolbar.hmpg", true);
user_pref("extensions.BabylonToolbar.id", "1c704c020000000000000019212e14c0");
user_pref("extensions.BabylonToolbar.instlDay", "15256");
user_pref("extensions.BabylonToolbar.instlRef", "sst");
user_pref("extensions.BabylonToolbar.keyWordUrl", "hxxp://search.babylon.com/?babsrc=SP_ss&q={searchTerms}&mntrId=1c704c020000000000000019212e14c0&tlver=1.4.35.10&affID=100489
user_pref("extensions.BabylonToolbar.lastDP", 20);
user_pref("extensions.BabylonToolbar.lastVrsnTs", "");
user_pref("extensions.BabylonToolbar.mntrFFxVrsn", "3.6");
user_pref("extensions.BabylonToolbar.newTab", true);
user_pref("extensions.BabylonToolbar.newTabUrl", "hxxp://search.babylon.com/?babsrc=NT_ss&affID=100489&mntrId=1c704c020000000000000019212e14c0");
user_pref("extensions.BabylonToolbar.noFFXTlbr", false);
user_pref("extensions.BabylonToolbar.prdct", "BabylonToolbar");
user_pref("extensions.BabylonToolbar.propectorlck", 73513755);
user_pref("extensions.BabylonToolbar.prtkDS", 0);
user_pref("extensions.BabylonToolbar.prtkHmpg", 1);
user_pref("extensions.BabylonToolbar.prtnrId", "babylon");
user_pref("extensions.BabylonToolbar.ptch_0717", true);
user_pref("extensions.BabylonToolbar.smplGrp", "free");
user_pref("extensions.BabylonToolbar.srcExt", "ss");
user_pref("extensions.BabylonToolbar.srchPrvdr", "Search the web (Babylon)");
user_pref("extensions.BabylonToolbar.tlbrId", "tb9");
user_pref("extensions.BabylonToolbar.vrsn", "1.4.35.10");
user_pref("extensions.BabylonToolbar.vrsnTs", "1.4.35.1014:40:10");
user_pref("extensions.BabylonToolbar_i.newTab", true);
user_pref("extensions.BabylonToolbar_i.newTabUrl", "hxxp://search.babylon.com/?affID=112560&tt=230512_54x&babsrc=NT_ss&mntrId=1c704c020000000000000019212e14c0");
user_pref("extensions.foxcub.config.encodedConfig", "{\"core\":{\"configUrl\":\"hxxp://download.seznam.cz/software/conf/\",\"updateUrl\":\"hxxp://download.seznam.cz/software/c
user_pref("sweetim.toolbar.highlight.colors", "#FFFF00,#00FFE4,#5AFF00,#0087FF,#FFCC00,#FF00F0");
user_pref("sweetim.toolbar.logger.ConsoleHandler.MinReportLevel", "7");
user_pref("sweetim.toolbar.logger.FileHandler.FileName", "ff-toolbar.log");
user_pref("sweetim.toolbar.logger.FileHandler.MaxFileSize", "200000");
user_pref("sweetim.toolbar.logger.FileHandler.MinReportLevel", "7");
user_pref("sweetim.toolbar.mode.debug", "false");
user_pref("sweetim.toolbar.previous.browser.search.defaultenginename", "Search the web (Babylon)");
user_pref("sweetim.toolbar.previous.browser.search.defaulturl", "");
user_pref("sweetim.toolbar.previous.browser.search.selectedEngine", "Search the web (Babylon)");
user_pref("sweetim.toolbar.previous.browser.startup.homepage", "hxxp://www.seznam.cz/");
user_pref("sweetim.toolbar.previous.keyword.URL", "hxxp://search.babylon.com/?babsrc=SP_ss&q={searchTerms}&mntrId=1c704c020000000000000019212e14c0&tlver=1.4.35.10&affID=100489
user_pref("sweetim.toolbar.search.external", "<?xml version=\"1.0\"?><TOOLBAR><EXTERNAL_SEARCH engine=\"hxxp://*google.*\" param=\"q=\" /><EXTERNAL_SEARCH engine=\"hxxp://sear
user_pref("sweetim.toolbar.search.history.capacity", "10");
user_pref("sweetim.toolbar.searchguard.enable", "true");
user_pref("sweetim.toolbar.simapp_id", "{5A710E2F-FA82-11E0-9714-0019212E14C0}");
user_pref("sweetim.toolbar.urls.homepage", "hxxp://home.sweetim.com");
user_pref("sweetim.toolbar.version", "1.2.0.2");
Emptied folder: C:\Users\Ondra\AppData\Roaming\mozilla\firefox\profiles\89dezo23.default\minidumps [1012 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on st 10.07.2013 at 21:04:32,44
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

RogueKiller V8.6.2 [Jul 5 2013] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Podpora : http://www.adlice.com/forum/
Webové stránky : http://www.adlice.com/softwares/roguekiller/
: http://tigzyrk.blogspot.com/

Operační systém : Windows Vista (6.0.6002 Service Pack 2) 32 bits version
Spuštěno v : Nouzový režim s prací v síti
Uživatel : Ondra [Práva správce]
Mód : Kontrola -- Datum : 07/10/2013 21:09:03
| ARK || FAK || MBR |

¤¤¤ Škodlivé procesy: : 0 ¤¤¤

¤¤¤ ¤¤¤ Záznamy Registrů: : 8 ¤¤¤
[DNS] HKLM\[...]\CCSet\[...]\{98F178C4-DBEC-4468-A176-2C093E8879F4} : NameServer (213.250.192.1,213.250.194.1) -> NALEZENO
[DNS] HKLM\[...]\CS001\[...]\{98F178C4-DBEC-4468-A176-2C093E8879F4} : NameServer (213.250.192.1,213.250.194.1) -> NALEZENO
[DNS] HKLM\[...]\CS002\[...]\{98F178C4-DBEC-4468-A176-2C093E8879F4} : NameServer (213.250.192.1,213.250.194.1) -> NALEZENO
[HJ POL] HKCU\[...]\System : DisableTaskMgr (0) -> NALEZENO
[HJ POL] HKCU\[...]\System : DisableRegistryTools (0) -> NALEZENO
[HJ POL] HKLM\[...]\System : DisableRegistryTools (0) -> NALEZENO
[HJ DESK] HKCU\[...]\ClassicStartMenu : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> NALEZENO
[HJ DESK] HKCU\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> NALEZENO

¤¤¤ naplánované úlohy : 0 ¤¤¤

¤¤¤ spuštění položky : 0 ¤¤¤

¤¤¤ Webové prohlížeče : 0 ¤¤¤

¤¤¤ Zvláštní soubory / Složky: ¤¤¤

¤¤¤ Ovladač : [NENAHRÁNO 0xc000035f] ¤¤¤

¤¤¤ Externí včelstvo: ¤¤¤

¤¤¤ Nákaza : ¤¤¤

¤¤¤ Soubor HOSTS: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts


127.0.0.1 localhost


¤¤¤ Kontrola MBR: ¤¤¤

+++++ PhysicalDrive0: ST332082 0AS SCSI Disk Device +++++
--- User ---
[MBR] be07f36201506e03336fd4c1efbb0dc3
[BSP] 415b1c5fb7cef1912cc966191c47ae55 : Acer MBR Code
Partition table:
0 - [XXXXXX] ACER (0x27) [VISIBLE] Offset (sectors): 63 | Size: 6997 Mo
1 - [ACTIVE] FAT16 (0x06) [VISIBLE] Offset (sectors): 14329980 | Size: 149299 Mo
2 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 320095125 | Size: 148946 Mo
User = LL1 ... OK!
Error reading LL2 MBR!

Dokončeno : << RKreport[0]_S_07102013_210903.txt >>

# AdwCleaner v2.304 - Log vytvooen 10/07/2013 v 20:43:28
# Aktualizováno 03/07/2013 Xplode
# Operaení systém : Windows Vista (TM) Home Premium Service Pack 2 (32 bits)
# Uživatel : Ondra - COMP
# Spuštin systém : Normální
# Spuštino z : C:\Users\Ondra\Downloads\adwcleaner.exe
# Volba [Prohledat]


***** [Služby] *****


***** [Soubory / Složky] *****

Složka Nalezeno : C:\Program Files\AVG Secure Search
Složka Nalezeno : C:\Program Files\Bandoo
Složka Nalezeno : C:\Program Files\Common Files\AVG Secure Search
Složka Nalezeno : C:\Program Files\Common Files\DVDVideoSoft\TB
Složka Nalezeno : C:\Program Files\Conduit
Složka Nalezeno : C:\Program Files\DAEMON Tools Toolbar
Složka Nalezeno : C:\Program Files\ICQ6Toolbar
Složka Nalezeno : C:\Program Files\Mozilla Firefox\Extensions\ffxtlbr@babylon.com
Složka Nalezeno : C:\ProgramData\AVG Secure Search
Složka Nalezeno : C:\ProgramData\Babylon
Složka Nalezeno : C:\ProgramData\ICQ\ICQToolbar
Složka Nalezeno : C:\ProgramData\InstallMate
Složka Nalezeno : C:\ProgramData\Premium
Složka Nalezeno : C:\ProgramData\Trymedia
Složka Nalezeno : C:\Users\Ondra\AppData\Local\AVG Secure Search
Složka Nalezeno : C:\Users\Ondra\AppData\Local\Conduit
Složka Nalezeno : C:\Users\Ondra\AppData\Local\PackageAware
Složka Nalezeno : C:\Users\Ondra\AppData\Local\RavenBleuSA
Složka Nalezeno : C:\Users\Ondra\AppData\LocalLow\AVG Secure Search
Složka Nalezeno : C:\Users\Ondra\AppData\LocalLow\BabylonToolbar
Složka Nalezeno : C:\Users\Ondra\AppData\LocalLow\Conduit
Složka Nalezeno : C:\Users\Ondra\AppData\LocalLow\FunWebProducts
Složka Nalezeno : C:\Users\Ondra\AppData\LocalLow\MyWebSearch
Složka Nalezeno : C:\Users\Ondra\AppData\Roaming\Babylon
Složka Nalezeno : C:\Users\Ondra\AppData\Roaming\dvdvideosoftiehelpers
Složka Nalezeno : C:\Users\Ondra\AppData\Roaming\Mozilla\Firefox\Profiles\1yy4ijrx.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
Složka Nalezeno : C:\Users\Ondra\AppData\Roaming\Mozilla\Firefox\Profiles\1yy4ijrx.default\extensions\{ACAA314B-EEBA-48E4-AD47-84E31C44796C}
Složka Nalezeno : C:\Users\Ondra\AppData\Roaming\Mozilla\Firefox\Profiles\89dezo23.default\ConduitCommon
Složka Nalezeno : C:\Users\Ondra\AppData\Roaming\Mozilla\Firefox\Profiles\89dezo23.default\CT3072253
Složka Nalezeno : C:\Users\Ondra\AppData\Roaming\Mozilla\Firefox\Profiles\89dezo23.default\extensions\{1283e7d0-b598-4b2d-a20f-59a9dde270a8}(26)
Složka Nalezeno : C:\Users\Ondra\AppData\Roaming\Mozilla\Firefox\Profiles\89dezo23.default\extensions\{5e5ab302-7f65-44cd-8211-c1d4caaccea3}
Složka Nalezeno : C:\Users\Ondra\AppData\Roaming\Mozilla\Firefox\Profiles\89dezo23.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}(27)
Složka Nalezeno : C:\Users\Ondra\AppData\Roaming\Mozilla\Firefox\Profiles\89dezo23.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
Složka Nalezeno : C:\Users\Ondra\AppData\Roaming\Mozilla\Firefox\Profiles\89dezo23.default\SweetIMToolbarData
Složka Nalezeno : C:\Users\Ondra\AppData\Roaming\yourfiledownloader
Složka Nalezeno : C:\Windows\Installer\{1577A05B-EE62-4BBC-9DB7-FE748FA44EC2}
Soubor Nalezeno : C:\Program Files\Mozilla Firefox\searchplugins\avg-secure-search.xml
Soubor Nalezeno : C:\Program Files\Mozilla Firefox\searchplugins\babylon.xml
Soubor Nalezeno : C:\user.js
Soubor Nalezeno : C:\Users\Ondra\AppData\Roaming\Mozilla\Firefox\Profiles\1yy4ijrx.default\searchplugins\Askcom.xml
Soubor Nalezeno : C:\Users\Ondra\AppData\Roaming\Mozilla\Firefox\Profiles\1yy4ijrx.default\searchplugins\icqplugin.xml
Soubor Nalezeno : C:\Users\Ondra\AppData\Roaming\Mozilla\Firefox\Profiles\89dezo23.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}.xpi
Soubor Nalezeno : C:\Users\Ondra\AppData\Roaming\Mozilla\Firefox\Profiles\89dezo23.default\searchplugins\Conduit.xml
Soubor Nalezeno : C:\Users\Ondra\AppData\Roaming\Mozilla\Firefox\Profiles\89dezo23.default\searchplugins\daemon-search.xml
Soubor Nalezeno : C:\Users\Ondra\AppData\Roaming\Mozilla\Firefox\Profiles\89dezo23.default\searchplugins\icqplugin.xml
Soubor Nalezeno : C:\Users\Ondra\AppData\Roaming\Mozilla\Firefox\Profiles\89dezo23.default\searchplugins\SweetIm.xml

***** [Registry] *****

Hodnota Nalezeno : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{32099AAC-C132-4136-9E9A-4E364A424E17}]
Hodnota Nalezeno : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}]
Hodnota Nalezeno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{95B7759C-8C7F-4BF1-B163-73684A933233}]
Hodnota Nalezeno : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{855F3B16-6D32-4FE6-8A56-BBB695989046}]
Hodnota Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [vProt]
Hodnota Nalezeno : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [Avg@toolbar]
Klíe Nalezeno : HKCU\Software\AppDataLow\Software\Conduit
Klíe Nalezeno : HKCU\Software\AppDataLow\Software\ConduitSearchScopes
Klíe Nalezeno : HKCU\Software\AppDataLow\Software\Fun Web Products
Klíe Nalezeno : HKCU\Software\AppDataLow\Software\SmartBar
Klíe Nalezeno : HKCU\Software\AVG Secure Search
Klíe Nalezeno : HKCU\Software\GamePlayLabs
Klíe Nalezeno : HKCU\Software\Headlight
Klíe Nalezeno : HKCU\Software\IGearSettings
Klíe Nalezeno : HKCU\Software\InstallCore
Klíe Nalezeno : HKCU\Software\Microsoft\Babylon
Klíe Nalezeno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Klíe Nalezeno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40B7-AC73-056A5EBA4A7E}
Klíe Nalezeno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}
Klíe Nalezeno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
Klíe Nalezeno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AD22EBAF-0D18-4FC7-90CC-5EA0ABBE9EB8}
Klíe Nalezeno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AD22EBAF-0D18-4FC7-90CC-5EA0ABBE9EB9}
Klíe Nalezeno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Klíe Nalezeno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{83AA2913-C123-4146-85BD-AD8F93971D39}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\AVG Secure Search
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\conduitEngine
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2EECD738-5844-4A99-B4B6-146BF802613B}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{32099AAC-C132-4136-9E9A-4E364A424E17}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{855F3B16-6D32-4FE6-8A56-BBB695989046}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{95B7759C-8C7F-4BF1-B163-73684A933233}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49DD-99D7-DC866BE87DBC}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35C-6118-11DC-9C72-001320C79847}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4A99-B4B6-146BF802613B}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{32099AAC-C132-4136-9E9A-4E364A424E17}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{855F3B16-6D32-4FE6-8A56-BBB695989046}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{98889811-442D-49DD-99D7-DC866BE87DBC}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35C-6118-11DC-9C72-001320C79847}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F25AF245-4A81-40DC-92F9-E9021F207706}
Klíe Nalezeno : HKCU\Software\Softonic
Klíe Nalezeno : HKCU\Software\YahooPartnerToolbar
Klíe Nalezeno : HKCU\Software\YourFileDownloader
Klíe Nalezeno : HKLM\Software\AVG Secure Search
Klíe Nalezeno : HKLM\Software\Babylon
Klíe Nalezeno : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\AppID\{65C994A2-C65A-4A20-BA92-AADAFC0DCE49}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\AppID\BHO.DLL
Klíe Nalezeno : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Klíe Nalezeno : HKLM\SOFTWARE\Classes\AppID\NCTAudioCDGrabber2.DLL
Klíe Nalezeno : HKLM\SOFTWARE\Classes\AppID\ScriptHelper.EXE
Klíe Nalezeno : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL
Klíe Nalezeno : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI
Klíe Nalezeno : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI.1
Klíe Nalezeno : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj
Klíe Nalezeno : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj.1
Klíe Nalezeno : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr
Klíe Nalezeno : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr.1
Klíe Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{94496571-6AC5-4836-82D5-D46260C44B17}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{BC9FD17D-30F6-4464-9E53-596A90AFF023}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Conduit.Engine
Klíe Nalezeno : HKLM\Software\Classes\Installer\Features\3192AA38321C641458DBDAF83979D193
Klíe Nalezeno : HKLM\Software\Classes\Installer\Products\3192AA38321C641458DBDAF83979D193
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{2BEF239C-752E-4001-8048-F256E0D8CD93}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{2E9937FC-CF2F-4F56-AF54-5A6A3DD375CC}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{3F607E46-0D3C-4442-B1DE-DE7FA4768F5C}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{49C00A51-6E59-41FE-B3FA-2D2157FAD67B}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{6DFF5DBA-AE3A-46DB-B301-ECFFC6DB2982}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{8E7AD93B-3E87-423D-947F-A321FA7E31C4}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{DE34CD67-F1C8-4001-9A23-B8A68F63F377}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{FE0273D1-99DF-4AC0-87D5-1371C6271785}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Prod.cap
Klíe Nalezeno : HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\viprotocol
Klíe Nalezeno : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi
Klíe Nalezeno : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Toolbar.CT2304157
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Toolbar.CT2776682
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Toolbar.CT3072253
Klíe Nalezeno : HKLM\SOFTWARE\Classes\TypeLib\{13ABD093-D46F-40DF-A608-47E162EC799D}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\TypeLib\{93E3D79C-0786-48FF-9329-93BC9F6DC2B3}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE
Klíe Nalezeno : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1
Klíe Nalezeno : HKLM\Software\Conduit
Klíe Nalezeno : HKLM\SOFTWARE\Google\Chrome\Extensions\dhkplhfnhceodhffomolpfigojocbpcb
Klíe Nalezeno : HKLM\SOFTWARE\Google\Chrome\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof
Klíe Nalezeno : HKLM\SOFTWARE\Google\Chrome\Extensions\ocphobfcfafpclibolpjdafgaffkaoci
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC}
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706}
Klíe Nalezeno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1DA5BD2D3CA2D6943A1A233CD3F88CE7
Klíe Nalezeno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\45FC9EFC5C3366B4DB850DAB49330C52
Klíe Nalezeno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4B2468513CA2D6943A1A233CD3F88CE7
Klíe Nalezeno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7E98451C7CA808F47AFE467BDABD02FA
Klíe Nalezeno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BFD11FD45FC7B9E46A8F4B69F3A66E35
Klíe Nalezeno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D5979AD63CA2D6943A1A233CD3F88CE7
Klíe Nalezeno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DF9BD2952384A9C49B4A5D3D95329890
Klíe Nalezeno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FABA2A33488410A4AA40489BD2224282
Klíe Nalezeno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\3192AA38321C641458DBDAF83979D193
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{83AA2913-C123-4146-85BD-AD8F93971D39}
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG Secure Search
Klíe Nalezeno : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin
Klíe Nalezeno : HKLM\Software\YourFileDownloader
Klíe Nalezeno : HKU\S-1-5-21-2173778668-643321604-1992859200-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Klíe Nalezeno : HKU\S-1-5-21-2173778668-643321604-1992859200-1000\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40B7-AC73-056A5EBA4A7E}
Klíe Nalezeno : HKU\S-1-5-21-2173778668-643321604-1992859200-1000\Software\Microsoft\Internet Explorer\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}
Klíe Nalezeno : HKU\S-1-5-21-2173778668-643321604-1992859200-1000\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
Klíe Nalezeno : HKU\S-1-5-21-2173778668-643321604-1992859200-1000\Software\Microsoft\Internet Explorer\SearchScopes\{AD22EBAF-0D18-4FC7-90CC-5EA0ABBE9EB8}
Klíe Nalezeno : HKU\S-1-5-21-2173778668-643321604-1992859200-1000\Software\Microsoft\Internet Explorer\SearchScopes\{AD22EBAF-0D18-4FC7-90CC-5EA0ABBE9EB9}
Klíe Nalezeno : HKU\S-1-5-21-2173778668-643321604-1992859200-1000\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Klíe Nalezeno : HKU\S-1-5-21-2173778668-643321604-1992859200-1000\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}

***** [Internetové prohlížeee] *****

-\\ Internet Explorer v8.0.6001.19437

[HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://isearch.babylon.com/?affID=11663 ... 19212e14c0
[HKCU\Software\Microsoft\Internet Explorer\Main - ICQ Search] = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd
[HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls - Tabs] = hxxp://isearch.babylon.com/?affID=11663 ... 19212e14c0

-\\ Mozilla Firefox v13.0 (cs)

Soubor : C:\Users\Ondra\AppData\Roaming\Mozilla\Firefox\Profiles\1yy4ijrx.default\prefs.js

Nalezeno : user_pref("browser.search.defaultenginename", "AVG Secure Search");
Nalezeno : user_pref("browser.search.selectedEngine", "AVG Secure Search");
Nalezeno : user_pref("icqtoolbar.skip_default_search", "yes");
Nalezeno : user_pref("browser.search.defaultengine", "Ask.com");
Nalezeno : user_pref("browser.search.order.1", "Ask.com");
Nalezeno : user_pref("browser.startup.homepage", "hxxp://start.icq.com/");
Nalezeno : user_pref("icqtoolbar.installsource", "1");

Soubor : C:\Users\Ondra\AppData\Roaming\Mozilla\Firefox\Profiles\89dezo23.default\prefs.js

Nalezeno : user_pref("CT2776682..clientLogIsEnabled", false);
Nalezeno : user_pref("CT2776682..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...]
Nalezeno : user_pref("CT2776682..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...]
Nalezeno : user_pref("CT2776682.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);
Nalezeno : user_pref("CT2776682.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
Nalezeno : user_pref("CT2776682.AppTrackingLastCheckTime", "Wed Jan 11 2012 15:17:24 GMT+0100");
Nalezeno : user_pref("CT2776682.BrowserCompStateIsOpen_129664534406620501", true);
Nalezeno : user_pref("CT2776682.BrowserCompStateIsOpen_129678129407612905", true);
Nalezeno : user_pref("CT2776682.BrowserCompStateIsOpen_129681725882385585", true);
Nalezeno : user_pref("CT2776682.CTID", "CT2776682");
Nalezeno : user_pref("CT2776682.CurrentServerDate", "11-1-2012");
Nalezeno : user_pref("CT2776682.DSInstall", true);
Nalezeno : user_pref("CT2776682.DialogsAlignMode", "LTR");
Nalezeno : user_pref("CT2776682.DialogsGetterLastCheckTime", "Sun Jan 08 2012 20:57:18 GMT+0100");
Nalezeno : user_pref("CT2776682.DownloadReferralCookieData", "");
Nalezeno : user_pref("CT2776682.FirstServerDate", "8-1-2012");
Nalezeno : user_pref("CT2776682.FirstTime", true);
Nalezeno : user_pref("CT2776682.FirstTimeFF3", true);
Nalezeno : user_pref("CT2776682.FixPageNotFoundErrors", true);
Nalezeno : user_pref("CT2776682.GroupingServerCheckInterval", 1440);
Nalezeno : user_pref("CT2776682.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
Nalezeno : user_pref("CT2776682.HPChangedManually", false);
Nalezeno : user_pref("CT2776682.HPInstall", true);
Nalezeno : user_pref("CT2776682.HPProtectChoice", true);
Nalezeno : user_pref("CT2776682.HPProtectCount", 3);
Nalezeno : user_pref("CT2776682.HasUserGlobalKeys", true);
Nalezeno : user_pref("CT2776682.HomePageProtectorEnabled", false);
Nalezeno : user_pref("CT2776682.HomepageBeforeUnload", "hxxp://search.conduit.com/?ctid=CT2776682&SearchSource=[...]
Nalezeno : user_pref("CT2776682.Initialize", true);
Nalezeno : user_pref("CT2776682.InitializeCommonPrefs", true);
Nalezeno : user_pref("CT2776682.InstallationAndCookieDataSentCount", 3);
Nalezeno : user_pref("CT2776682.InstallationId", "ct2776682_brothersoft_extreme.exe");
Nalezeno : user_pref("CT2776682.InstallationType", "ConduitXPEIntegration");
Nalezeno : user_pref("CT2776682.InstalledDate", "Sun Jan 08 2012 20:57:10 GMT+0100");
Nalezeno : user_pref("CT2776682.InvalidateCache", false);
Nalezeno : user_pref("CT2776682.IsAlertDBUpdated", true);
Nalezeno : user_pref("CT2776682.IsGrouping", false);
Nalezeno : user_pref("CT2776682.IsInitSetupIni", true);
Nalezeno : user_pref("CT2776682.IsMulticommunity", false);
Nalezeno : user_pref("CT2776682.IsOpenThankYouPage", false);
Nalezeno : user_pref("CT2776682.IsOpenUninstallPage", true);
Nalezeno : user_pref("CT2776682.IsProtectorsInit", true);
Nalezeno : user_pref("CT2776682.LanguagePackLastCheckTime", "Tue Jan 10 2012 22:21:26 GMT+0100");
Nalezeno : user_pref("CT2776682.LanguagePackReloadIntervalMM", 1440);
Nalezeno : user_pref("CT2776682.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...]
Nalezeno : user_pref("CT2776682.LastLogin_3.8.1.501", "Wed Jan 11 2012 15:17:19 GMT+0100");
Nalezeno : user_pref("CT2776682.LatestVersion", "3.9.0.3");
Nalezeno : user_pref("CT2776682.Locale", "en");
Nalezeno : user_pref("CT2776682.MCDetectTooltipHeight", "83");
Nalezeno : user_pref("CT2776682.MCDetectTooltipShow", false);
Nalezeno : user_pref("CT2776682.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
Nalezeno : user_pref("CT2776682.MCDetectTooltipWidth", "295");
Nalezeno : user_pref("CT2776682.MyStuffEnabledAtInstallation", true);
Nalezeno : user_pref("CT2776682.OriginalFirstVersion", "3.8.1.501");
Nalezeno : user_pref("CT2776682.RadioIsPodcast", false);
Nalezeno : user_pref("CT2776682.RadioLastCheckTime", "Tue Jan 10 2012 22:21:28 GMT+0100");
Nalezeno : user_pref("CT2776682.RadioLastUpdateIPServer", "3");
Nalezeno : user_pref("CT2776682.RadioLastUpdateServer", "3");
Nalezeno : user_pref("CT2776682.RadioMediaID", "9962");
Nalezeno : user_pref("CT2776682.RadioMediaType", "Media Player");
Nalezeno : user_pref("CT2776682.RadioMenuSelectedID", "EBRadioMenu_CT27766829962");
Nalezeno : user_pref("CT2776682.RadioShrinkedFromSetup", false);
Nalezeno : user_pref("CT2776682.RadioStationName", "California%20Rock");
Nalezeno : user_pref("CT2776682.RadioStationURL", "hxxp://feedlive.net/california.asx");
Nalezeno : user_pref("CT2776682.SavedHomepage", "hxxp://www.seznam.cz/");
Nalezeno : user_pref("CT2776682.SearchCaption", "BrotherSoft Extreme Customized Web Search");
Nalezeno : user_pref("CT2776682.SearchEngineBeforeUnload", "BrotherSoft Extreme Customized Web Search");
Nalezeno : user_pref("CT2776682.SearchFromAddressBarIsInit", true);
Nalezeno : user_pref("CT2776682.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT277[...]
Nalezeno : user_pref("CT2776682.SearchInNewTabEnabled", true);
Nalezeno : user_pref("CT2776682.SearchInNewTabIntervalMM", 1440);
Nalezeno : user_pref("CT2776682.SearchInNewTabLastCheckTime", "Tue Jan 10 2012 22:21:25 GMT+0100");
Nalezeno : user_pref("CT2776682.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...]
Nalezeno : user_pref("CT2776682.SearchInNewTabUsageUrl", "hxxp://usage.hosting.toolbar.conduit-services.com/usa[...]
Nalezeno : user_pref("CT2776682.SearchProtectorEnabled", true);
Nalezeno : user_pref("CT2776682.SearchProtectorToolbarDisabled", false);
Nalezeno : user_pref("CT2776682.SendProtectorDataViaLogin", true);
Nalezeno : user_pref("CT2776682.ServiceMapLastCheckTime", "Tue Jan 10 2012 22:21:25 GMT+0100");
Nalezeno : user_pref("CT2776682.SettingsLastCheckTime", "Wed Jan 11 2012 15:17:05 GMT+0100");
Nalezeno : user_pref("CT2776682.SettingsLastUpdate", "1326169248");
Nalezeno : user_pref("CT2776682.TBHomePageUrl", "hxxp://search.conduit.com/?ctid=CT2776682&SearchSource=13");
Nalezeno : user_pref("CT2776682.ThirdPartyComponentsInterval", 504);
Nalezeno : user_pref("CT2776682.ThirdPartyComponentsLastCheck", "Sun Jan 08 2012 20:57:02 GMT+0100");
Nalezeno : user_pref("CT2776682.ThirdPartyComponentsLastUpdate", "1312887586");
Nalezeno : user_pref("CT2776682.ToolbarShrinkedFromSetup", false);
Nalezeno : user_pref("CT2776682.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2776682");
Nalezeno : user_pref("CT2776682.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,clien[...]
Nalezeno : user_pref("CT2776682.UserID", "UN99820774440109284");
Nalezeno : user_pref("CT2776682.ValidationData_Search", 0);
Nalezeno : user_pref("CT2776682.ValidationData_Toolbar", 2);
Nalezeno : user_pref("CT2776682.alertChannelId", "1168776");
Nalezeno : user_pref("CT2776682.approveUntrustedApps", false);
Nalezeno : user_pref("CT2776682.backendstorage.autocompletepro_enable", "31");
Nalezeno : user_pref("CT2776682.backendstorage.autocompletepro_enable_auto", "31");
Nalezeno : user_pref("CT2776682.backendstorage.c2p_iframe_md5", "6537663536626130396366633837326231393531333264[...]
Nalezeno : user_pref("CT2776682.backendstorage.cbfirsttime", "53756E204A616E20303820323031322032303A35373A33342[...]
Nalezeno : user_pref("CT2776682.backendstorage.installationdatefcd0b5ea-2655-4a3f-8a7f-5fbabeb287ff", "31333236[...]
Nalezeno : user_pref("CT2776682.backendstorage.shoppingapp.gk.exipres", "467269204A616E20313320323031322032303A[...]
Nalezeno : user_pref("CT2776682.backendstorage.shoppingapp.gk.geolocation", "637A6563682072657075626C6963");
Nalezeno : user_pref("CT2776682.backendstorage.toolbarappheartbeat", "7B2266636430623565612D323635352D346133662[...]
Nalezeno : user_pref("CT2776682.backendstorage.toolbarnotificationheartbeat", "7B2274797065223A2268656172746265[...]
Nalezeno : user_pref("CT2776682.backendstorage.toolbarnotificationqueue", "5B5D");
Nalezeno : user_pref("CT2776682.backendstorage.toolbarnotificationsettings", "7B2273656E644E6F74696669636174696[...]
Nalezeno : user_pref("CT2776682.backendstorage.toolbarnotificationuserid", "3931383233353934373836");
Nalezeno : user_pref("CT2776682.backendstorage.url_history", "687474703A2F2F7777772E73657A6E616D2E637A2F");
Nalezeno : user_pref("CT2776682.backendstorage.url_history_time", "31333236323934373339313931");
Nalezeno : user_pref("CT2776682.components.1000082", false);
Nalezeno : user_pref("CT2776682.components.129288498426163451", false);
Nalezeno : user_pref("CT2776682.components.129317966246600942", false);
Nalezeno : user_pref("CT2776682.components.129348059348463281", false);
Nalezeno : user_pref("CT2776682.components.129378290255256948", false);
Nalezeno : user_pref("CT2776682.components.129472433557631732", false);
Nalezeno : user_pref("CT2776682.components.129625171796543175", false);
Nalezeno : user_pref("CT2776682.components.129664534406620501", false);
Nalezeno : user_pref("CT2776682.components.129678129407612905", false);
Nalezeno : user_pref("CT2776682.components.129681725882385585", false);
Nalezeno : user_pref("CT2776682.components.129687522643660664", false);
Nalezeno : user_pref("CT2776682.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.c[...]
Nalezeno : user_pref("CT2776682.globalFirstTimeInfoLastCheckTime", "Wed Jan 11 2012 15:17:17 GMT+0100");
Nalezeno : user_pref("CT2776682.homepageProtectorEnableByLogin", true);
Nalezeno : user_pref("CT2776682.initDone", true);
Nalezeno : user_pref("CT2776682.isAppTrackingManagerOn", true);
Nalezeno : user_pref("CT2776682.isFirstRadioInstallation", false);
Nalezeno : user_pref("CT2776682.myStuffEnabled", true);
Nalezeno : user_pref("CT2776682.myStuffPublihserMinWidth", 400);
Nalezeno : user_pref("CT2776682.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...]
Nalezeno : user_pref("CT2776682.myStuffServiceIntervalMM", 1440);
Nalezeno : user_pref("CT2776682.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...]
Nalezeno : user_pref("CT2776682.oldAppsList", "129288498392881552,129288498393350308,111,129625171796543175,129[...]
Nalezeno : user_pref("CT2776682.revertSettingsEnabled", true);
Nalezeno : user_pref("CT2776682.searchProtectorDialogDelayInSec", 10);
Nalezeno : user_pref("CT2776682.searchProtectorEnableByLogin", true);
Nalezeno : user_pref("CT2776682.testingCtid", "");
Nalezeno : user_pref("CT2776682.toolbarAppMetaDataLastCheckTime", "Tue Jan 10 2012 22:21:26 GMT+0100");
Nalezeno : user_pref("CT2776682.toolbarContextMenuLastCheckTime", "Sun Jan 08 2012 20:57:15 GMT+0100");
Nalezeno : user_pref("CT2776682.usagesFlag", 2);
Nalezeno : user_pref("CT3072253..clientLogIsEnabled", true);
Nalezeno : user_pref("CT3072253..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...]
Nalezeno : user_pref("CT3072253..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...]
Nalezeno : user_pref("CT3072253.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);
Nalezeno : user_pref("CT3072253.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
Nalezeno : user_pref("CT3072253.BrowserCompStateIsOpen_129573915102477663", true);
Nalezeno : user_pref("CT3072253.BrowserCompStateIsOpen_129749445881800338", true);
Nalezeno : user_pref("CT3072253.BrowserCompStateIsOpen_129805375651312503", true);
Nalezeno : user_pref("CT3072253.CTID", "CT3072253");
Nalezeno : user_pref("CT3072253.CurrentServerDate", "5-11-2012");
Nalezeno : user_pref("CT3072253.DSInstall", true);
Nalezeno : user_pref("CT3072253.DialogsAlignMode", "LTR");
Nalezeno : user_pref("CT3072253.DialogsGetterLastCheckTime", "Mon Nov 05 2012 15:45:38 GMT+0100");
Nalezeno : user_pref("CT3072253.DownloadReferralCookieData", "");
Nalezeno : user_pref("CT3072253.FirstServerDate", "16-5-2012");
Nalezeno : user_pref("CT3072253.FirstTime", true);
Nalezeno : user_pref("CT3072253.FirstTimeFF3", true);
Nalezeno : user_pref("CT3072253.FixPageNotFoundErrors", true);
Nalezeno : user_pref("CT3072253.GroupingServerCheckInterval", 1440);
Nalezeno : user_pref("CT3072253.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
Nalezeno : user_pref("CT3072253.HPInstall", true);
Nalezeno : user_pref("CT3072253.HasUserGlobalKeys", true);
Nalezeno : user_pref("CT3072253.Initialize", true);
Nalezeno : user_pref("CT3072253.InitializeCommonPrefs", true);
Nalezeno : user_pref("CT3072253.InstallationAndCookieDataSentCount", 3);
Nalezeno : user_pref("CT3072253.InstallationId", "fftB9DA.tmp.exe");
Nalezeno : user_pref("CT3072253.InstallationType", "XPE");
Nalezeno : user_pref("CT3072253.InstalledDate", "Tue May 15 2012 23:30:46 GMT+0200");
Nalezeno : user_pref("CT3072253.IsGrouping", false);
Nalezeno : user_pref("CT3072253.IsInitSetupIni", true);
Nalezeno : user_pref("CT3072253.IsMulticommunity", false);
Nalezeno : user_pref("CT3072253.IsOpenThankYouPage", true);
Nalezeno : user_pref("CT3072253.IsOpenUninstallPage", false);
Nalezeno : user_pref("CT3072253.IsProtectorsInit", true);
Nalezeno : user_pref("CT3072253.LanguagePackLastCheckTime", "Mon Nov 05 2012 21:23:56 GMT+0100");
Nalezeno : user_pref("CT3072253.LanguagePackReloadIntervalMM", 1440);
Nalezeno : user_pref("CT3072253.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...]
Nalezeno : user_pref("CT3072253.LastLogin_3.12.0.8", "Wed May 16 2012 15:38:39 GMT+0200");
Nalezeno : user_pref("CT3072253.LastLogin_3.12.2.3", "Wed May 30 2012 23:17:24 GMT+0200");
Nalezeno : user_pref("CT3072253.LastLogin_3.13.0.6", "Mon Jul 16 2012 22:52:56 GMT+0200");
Nalezeno : user_pref("CT3072253.LastLogin_3.14.1.0", "Tue Aug 28 2012 11:06:49 GMT+0200");
Nalezeno : user_pref("CT3072253.LastLogin_3.15.1.0", "Mon Nov 05 2012 20:54:38 GMT+0100");
Nalezeno : user_pref("CT3072253.LatestVersion", "3.14.1.0");
Nalezeno : user_pref("CT3072253.Locale", "en");
Nalezeno : user_pref("CT3072253.MCDetectTooltipHeight", "83");
Nalezeno : user_pref("CT3072253.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
Nalezeno : user_pref("CT3072253.MCDetectTooltipWidth", "295");
Nalezeno : user_pref("CT3072253.MyStuffEnabledAtInstallation", true);
Nalezeno : user_pref("CT3072253.OriginalFirstVersion", "3.12.0.8");
Nalezeno : user_pref("CT3072253.SHRINK_TOOLBAR", 1);
Nalezeno : user_pref("CT3072253.SavedHomepage", "hxxp://www.seznam.cz/");
Nalezeno : user_pref("CT3072253.SearchBoxWidth", 802);
Nalezeno : user_pref("CT3072253.SearchCaption", "uTorrentControl2 Customized Web Search");
Nalezeno : user_pref("CT3072253.SearchEngineBeforeUnload", "uTorrentControl2 Customized Web Search");
Nalezeno : user_pref("CT3072253.SearchFromAddressBarIsInit", true);
Nalezeno : user_pref("CT3072253.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT307[...]
Nalezeno : user_pref("CT3072253.SearchInNewTabEnabled", true);
Nalezeno : user_pref("CT3072253.SearchInNewTabIntervalMM", 1440);
Nalezeno : user_pref("CT3072253.SearchInNewTabLastCheckTime", "Mon Nov 05 2012 21:23:55 GMT+0100");
Nalezeno : user_pref("CT3072253.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...]
Nalezeno : user_pref("CT3072253.SearchProtectorEnabled", true);
Nalezeno : user_pref("CT3072253.SearchProtectorToolbarDisabled", false);
Nalezeno : user_pref("CT3072253.SendProtectorDataViaLogin", true);
Nalezeno : user_pref("CT3072253.ServiceMapLastCheckTime", "Mon Nov 05 2012 21:23:56 GMT+0100");
Nalezeno : user_pref("CT3072253.SettingsLastCheckTime", "Mon Nov 05 2012 20:54:37 GMT+0100");
Nalezeno : user_pref("CT3072253.SettingsLastUpdate", "1352142245");
Nalezeno : user_pref("CT3072253.TBHomePageUrl", "hxxp://search.conduit.com/?ctid=CT3072253&SearchSource=13");
Nalezeno : user_pref("CT3072253.ThirdPartyComponentsInterval", 504);
Nalezeno : user_pref("CT3072253.ThirdPartyComponentsLastCheck", "Tue May 15 2012 23:30:45 GMT+0200");
Nalezeno : user_pref("CT3072253.ThirdPartyComponentsLastUpdate", "1312887586");
Nalezeno : user_pref("CT3072253.ToolbarShrinkedFromSetup", false);
Nalezeno : user_pref("CT3072253.TrusteLinkUrl", "hxxp://trust.conduit.com/CT3072253");
Nalezeno : user_pref("CT3072253.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,clien[...]
Nalezeno : user_pref("CT3072253.UserID", "UN91086739693960877");
Nalezeno : user_pref("CT3072253.ValidationData_Search", 1);
Nalezeno : user_pref("CT3072253.ValidationData_Toolbar", 2);
Nalezeno : user_pref("CT3072253.alertChannelId", "1463702");
Nalezeno : user_pref("CT3072253.autoDisableScopes", -1);
Nalezeno : user_pref("CT3072253.backendstorage.cbcountry_000", "435A");
Nalezeno : user_pref("CT3072253.backendstorage.cbfirsttime", "547565204D617920313520323031322032333A33303A35372[...]
Nalezeno : user_pref("CT3072253.backendstorage.facebook_mode", "32");
Nalezeno : user_pref("CT3072253.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.c[...]
Nalezeno : user_pref("CT3072253.globalFirstTimeInfoLastCheckTime", "Tue May 15 2012 23:30:46 GMT+0200");
Nalezeno : user_pref("CT3072253.homepageProtectorEnableByLogin", true);
Nalezeno : user_pref("CT3072253.initDone", true);
Nalezeno : user_pref("CT3072253.isAppTrackingManagerOn", true);
Nalezeno : user_pref("CT3072253.myStuffEnabled", true);
Nalezeno : user_pref("CT3072253.myStuffPublihserMinWidth", 400);
Nalezeno : user_pref("CT3072253.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...]
Nalezeno : user_pref("CT3072253.myStuffServiceIntervalMM", 1440);
Nalezeno : user_pref("CT3072253.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...]
Nalezeno : user_pref("CT3072253.navigateToUrlOnSearch", false);
Nalezeno : user_pref("CT3072253.revertSettingsEnabled", true);
Nalezeno : user_pref("CT3072253.searchProtectorDialogDelayInSec", 10);
Nalezeno : user_pref("CT3072253.searchProtectorEnableByLogin", true);
Nalezeno : user_pref("CT3072253.testingCtid", "");
Nalezeno : user_pref("CT3072253.toolbarAppMetaDataLastCheckTime", "Mon Nov 05 2012 21:23:59 GMT+0100");
Nalezeno : user_pref("CT3072253.toolbarContextMenuLastCheckTime", "Tue May 15 2012 23:30:55 GMT+0200");
Nalezeno : user_pref("CT3072253.usagesFlag", 2);
Nalezeno : user_pref("CommunityToolbar.ConduitHomepagesList", "hxxp://search.conduit.com/?ctid=CT2776682&Search[...]
Nalezeno : user_pref("CommunityToolbar.ConduitSearchList", "BrotherSoft Extreme Customized Web Search,uTorrentC[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit. ... /CT2776682[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit. ... /CT3072253[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root ... 1164461/CZ", "\"0\"[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-ser ... =CT2776682", [...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-ser ... =CT3072253", [...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-serv ... tenApps&lo[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-serv ... erApps&loc[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-serv ... redApps&lo[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-serv ... lbar&local[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-ser ... rt/dlg.pkg", "\[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-s ... g?ver=3.12[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-s ... g?ver=3.12[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-s ... g?ver=3.13[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-s ... g?ver=3.14[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-s ... g?ver=3.15[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-s ... kg?ver=3.8.[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/ ... =CT2776682",[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/ ... =CT3072253",[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/R ... alizer_dea[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/R ... nimize.gif"[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/R ... t/play.gif", "\[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/R ... t/stop.gif", "\[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/R ... nt/vol.gif", "\"[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-serv ... ?locale=en", "\"e20[...]
Nalezeno : user_pref("CommunityToolbar.LatestLibsPath", "file:///C:\\Users\\Ondra\\AppData\\Roaming\\Mozilla\\F[...]
Nalezeno : user_pref("CommunityToolbar.LatestToolbarVersionInstalled", "3.12.0.8");
Nalezeno : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "hxxp://search.sweetim.com/search.asp?src[...]
Nalezeno : user_pref("CommunityToolbar.ToolbarsList", "CT2776682,CT3072253");
Nalezeno : user_pref("CommunityToolbar.ToolbarsList2", "CT2776682,CT3072253");
Nalezeno : user_pref("CommunityToolbar.ToolbarsList4", "CT2776682,CT3072253");
Nalezeno : user_pref("CommunityToolbar.globalUserId", "3123332c-faf6-4b08-aca6-65db942bc39b");
Nalezeno : user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true);
Nalezeno : user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true);
Nalezeno : user_pref("CommunityToolbar.keywordURLSelectedCTID", "CT3072253");
Nalezeno : user_pref("CommunityToolbar.notifications.alertDialogsGetterLastCheckTime", "Sun Jan 08 2012 20:57:1[...]
Nalezeno : user_pref("CommunityToolbar.notifications.alertInfoInterval", 1440);
Nalezeno : user_pref("CommunityToolbar.notifications.alertInfoLastCheckTime", "Tue Jan 10 2012 22:21:34 GMT+010[...]
Nalezeno : user_pref("CommunityToolbar.notifications.clientsServerUrl", "hxxp://alert.client.conduit.com");
Nalezeno : user_pref("CommunityToolbar.notifications.locale", "en");
Nalezeno : user_pref("CommunityToolbar.notifications.loginIntervalMin", 1440);
Nalezeno : user_pref("CommunityToolbar.notifications.loginLastCheckTime", "Tue Jan 10 2012 22:21:26 GMT+0100");
Nalezeno : user_pref("CommunityToolbar.notifications.loginLastUpdateTime", "1313487611");
Nalezeno : user_pref("CommunityToolbar.notifications.messageShowTimeSec", 20);
Nalezeno : user_pref("CommunityToolbar.notifications.servicesServerUrl", "hxxp://alert.services.conduit.com");
Nalezeno : user_pref("CommunityToolbar.notifications.showTrayIcon", false);
Nalezeno : user_pref("CommunityToolbar.notifications.userCloseIntervalMin", 300);
Nalezeno : user_pref("CommunityToolbar.notifications.userId", "717731b6-c3f4-4ca0-8433-5e0d5caec172");
Nalezeno : user_pref("CommunityToolbar.originalHomepage", "hxxp://www.seznam.cz/");
Nalezeno : user_pref("CommunityToolbar.originalSearchEngine", "SweetIM Search");
Nalezeno : user_pref("browser.babylon.HPOnNewTab", "search.babylon.com");
Nalezeno : user_pref("browser.newtab.url", "hxxp://isearch.babylon.com/?affID=116632&babsrc=NT_ss&mntrId=1c704c[...]
Nalezeno : user_pref("browser.search.defaultenginename", "AVG Secure Search");
Nalezeno : user_pref("browser.search.defaultthis.engineName", "uTorrentControl2 Customized Web Search");
Nalezeno : user_pref("browser.search.order.1", "Search the web (Babylon)");
Nalezeno : user_pref("browser.search.selectedEngine", "Search the web (Babylon)");
Nalezeno : user_pref("extensions.BabylonToolbar.admin", false);
Nalezeno : user_pref("extensions.BabylonToolbar.aflt", "orgnl");
Nalezeno : user_pref("extensions.BabylonToolbar.babTrack", "affID=100489");
Nalezeno : user_pref("extensions.BabylonToolbar.bbDpng", 20);
Nalezeno : user_pref("extensions.BabylonToolbar.dfltLng", "en");
Nalezeno : user_pref("extensions.BabylonToolbar.dfltSrch", true);
Nalezeno : user_pref("extensions.BabylonToolbar.hmpg", true);
Nalezeno : user_pref("extensions.BabylonToolbar.id", "1c704c020000000000000019212e14c0");
Nalezeno : user_pref("extensions.BabylonToolbar.instlDay", "15256");
Nalezeno : user_pref("extensions.BabylonToolbar.instlRef", "sst");
Nalezeno : user_pref("extensions.BabylonToolbar.keyWordUrl", "hxxp://search.babylon.com/?babsrc=SP_ss&q={search[...]
Nalezeno : user_pref("extensions.BabylonToolbar.lastDP", 20);
Nalezeno : user_pref("extensions.BabylonToolbar.lastVrsnTs", "");
Nalezeno : user_pref("extensions.BabylonToolbar.mntrFFxVrsn", "3.6");
Nalezeno : user_pref("extensions.BabylonToolbar.newTab", true);
Nalezeno : user_pref("extensions.BabylonToolbar.newTabUrl", "hxxp://search.babylon.com/?babsrc=NT_ss&affID=1004[...]
Nalezeno : user_pref("extensions.BabylonToolbar.noFFXTlbr", false);
Nalezeno : user_pref("extensions.BabylonToolbar.prdct", "BabylonToolbar");
Nalezeno : user_pref("extensions.BabylonToolbar.propectorlck", 73513755);
Nalezeno : user_pref("extensions.BabylonToolbar.prtkDS", 0);
Nalezeno : user_pref("extensions.BabylonToolbar.prtkHmpg", 1);
Nalezeno : user_pref("extensions.BabylonToolbar.prtnrId", "babylon");
Nalezeno : user_pref("extensions.BabylonToolbar.ptch_0717", true);
Nalezeno : user_pref("extensions.BabylonToolbar.smplGrp", "free");
Nalezeno : user_pref("extensions.BabylonToolbar.srcExt", "ss");
Nalezeno : user_pref("extensions.BabylonToolbar.srchPrvdr", "Search the web (Babylon)");
Nalezeno : user_pref("extensions.BabylonToolbar.tlbrId", "tb9");
Nalezeno : user_pref("extensions.BabylonToolbar.vrsn", "1.4.35.10");
Nalezeno : user_pref("extensions.BabylonToolbar.vrsnTs", "1.4.35.1014:40:10");
Nalezeno : user_pref("extensions.BabylonToolbar_i.newTab", true);
Nalezeno : user_pref("extensions.BabylonToolbar_i.newTabUrl", "hxxp://search.babylon.com/?affID=112560&tt=23051[...]
Nalezeno : user_pref("extensions.basicscan.init", true);
Nalezeno : user_pref("extensions.plugin2@gameplaylabs.com.fr", "1300980382");
Nalezeno : user_pref("extensions.plugin2@gameplaylabs.com.ranonce", true);
Nalezeno : user_pref("extensions.plugin2@gameplaylabs.com.rule_/", "1300980383");
Nalezeno : user_pref("extensions.plugin2@gameplaylabs.com.rule_dealsplugin.com/", "1300980383");
Nalezeno : user_pref("extensions.plugin2@gameplaylabs.com.rule_facebook.com", "1300980383");
Nalezeno : user_pref("extensions.plugin2@gameplaylabs.com.rule_h", "1300980383");
Nalezeno : user_pref("extensions.plugin2@gameplaylabs.com.rule_hxxp", "1300980383");
Nalezeno : user_pref("extensions.plugin2@gameplaylabs.com.rule_iqquizgame.com/", "1300980383");
Nalezeno : user_pref("extensions.plugin2@gameplaylabs.com.rule_play-ga.me/", "1300980383");
Nalezeno : user_pref("extensions.plugin2@gameplaylabs.com.rule_revealmycrush.com/", "1300980383");
Nalezeno : user_pref("extensions.plugin2@gameplaylabs.com.rule_unlock-this.com/browserplugin", "1300980383");
Nalezeno : user_pref("extensions.plugin2@gameplaylabs.com.rule_unlock-this.com/plugin", "1300980383");
Nalezeno : user_pref("extensions.plugin@gameplaylabs.com.fr", "1299435598");
Nalezeno : user_pref("extensions.plugin@gameplaylabs.com.rule_.google.", "1299531590");
Nalezeno : user_pref("extensions.plugin@gameplaylabs.com.rule_/", "1299531590");
Nalezeno : user_pref("extensions.plugin@gameplaylabs.com.rule_dealsplugin.com/", "1299531590");
Nalezeno : user_pref("extensions.plugin@gameplaylabs.com.rule_facebook.com", "1299531590");
Nalezeno : user_pref("extensions.plugin@gameplaylabs.com.rule_h", "1300940039");
Nalezeno : user_pref("extensions.plugin@gameplaylabs.com.rule_hxxp", "1299531590");
Nalezeno : user_pref("extensions.plugin@gameplaylabs.com.rule_hxxp://www.facebook.com/plugins/like.php?href=htt[...]
Nalezeno : user_pref("extensions.plugin@gameplaylabs.com.rule_iqquizgame.com/", "1299531590");
Nalezeno : user_pref("extensions.plugin@gameplaylabs.com.rule_play-ga.me/", "1299531590");
Nalezeno : user_pref("extensions.plugin@gameplaylabs.com.rule_revealmycrush.com/", "1299531590");
Nalezeno : user_pref("extensions.plugin@gameplaylabs.com.rule_unlock-this.com/browserplugin", "1299531590");
Nalezeno : user_pref("extensions.plugin@gameplaylabs.com.rule_unlock-this.com/plugin", "1299531590");
Nalezeno : user_pref("icqtoolbar.installsource", "1");
Nalezeno : user_pref("icqtoolbar.skip_default_search", "yes");
Nalezeno : user_pref("sweetim.toolbar.highlight.colors", "#FFFF00,#00FFE4,#5AFF00,#0087FF,#FFCC00,#FF00F0");
Nalezeno : user_pref("sweetim.toolbar.logger.ConsoleHandler.MinReportLevel", "7");
Nalezeno : user_pref("sweetim.toolbar.logger.FileHandler.FileName", "ff-toolbar.log");
Nalezeno : user_pref("sweetim.toolbar.logger.FileHandler.MaxFileSize", "200000");
Nalezeno : user_pref("sweetim.toolbar.logger.FileHandler.MinReportLevel", "7");
Nalezeno : user_pref("sweetim.toolbar.mode.debug", "false");
Nalezeno : user_pref("sweetim.toolbar.previous.browser.search.defaultenginename", "Search the web (Babylon)");
Nalezeno : user_pref("sweetim.toolbar.previous.browser.search.defaulturl", "");
Nalezeno : user_pref("sweetim.toolbar.previous.browser.search.selectedEngine", "Search the web (Babylon)");
Nalezeno : user_pref("sweetim.toolbar.previous.browser.startup.homepage", "hxxp://www.seznam.cz/");
Nalezeno : user_pref("sweetim.toolbar.previous.keyword.URL", "hxxp://search.babylon.com/?babsrc=SP_ss&q={search[...]
Nalezeno : user_pref("sweetim.toolbar.search.external", "<?xml version=\"1.0\"?><TOOLBAR><EXTERNAL_SEARCH engin[...]
Nalezeno : user_pref("sweetim.toolbar.search.history.capacity", "10");
Nalezeno : user_pref("sweetim.toolbar.searchguard.enable", "true");
Nalezeno : user_pref("sweetim.toolbar.simapp_id", "{5A710E2F-FA82-11E0-9714-0019212E14C0}");
Nalezeno : user_pref("sweetim.toolbar.urls.homepage", "hxxp://home.sweetim.com");
Nalezeno : user_pref("sweetim.toolbar.version", "1.2.0.2");

-\\ Chromium v window_placement: {
bottom: 728

Soubor : C:\Users\Ondra\AppData\Local\Chromium\User Data\Default\Preferences

[OK] Soubor je eistý.

*************************

AdwCleaner[R1].txt - [49565 octets] - [09/07/2013 20:04:54]
AdwCleaner[R2].txt - [49475 octets] - [10/07/2013 20:43:28]

########## EOF - C:\AdwCleaner[R2].txt - [49536 octets] ##########

Ještě jednou:
Spusť znovu AdwCleaner (u Windows Vista či Windows7, klikni na AdwCleaner pravým a vyber „Spustit jako správce“
Klikni na „ Vymazat“
Program provede opravu, po automatickém restartu neukáže log (C:\AdwCleaner [S?].txt) , jeho obsah sem celý vlož.

Zavři všechny programy a prohlížeče. Deaktivuj antivir a firewall.
Prosím, odpoj všechny USB nebo externí disky z počítače před spuštěním tohoto programu.

Spusť RogueKiller ( Pro Windows Vista nebo Windows 7, klepni pravým a vyber "Spustit jako správce", ve Windows XP poklepej ke spuštění).
- Počkej, až Prescan dokončí práci...
- Počkej, dokud status okno zobrazuje "Prohledat "

- Klikni na "Smazat"
- Počkej, dokud Status box zobrazuje "Smazání skončeno "
- Klikni na "Zprávy " a zkopíruj a vlož obsah té zprávy prosím sem. Log je možno nalézt v RKreport [číslo]. txt na ploše.
- Zavři RogueKiller

Stáhni si TDSSKiller
Na svojí plochu.Ujisti se , že máš zavřeny všechny ostatní aplikace a prohlížeče. Rozbal soubor a spusť TDSSKiller.exe. Restartuj PC . Log z TDSSKilleru najdeš zde:
C:\TDSSKiller. 2.8.16.0_(datum)_log.txt , vlož sem prosím celý obsah logu.

# AdwCleaner v2.304 - Log vytvooen 11/07/2013 v 17:14:02
# Aktualizováno 03/07/2013 Xplode
# Operaení systém : Windows Vista (TM) Home Premium Service Pack 2 (32 bits)
# Uživatel : Ondra - COMP
# Spuštin systém : Normální
# Spuštino z : C:\Users\Ondra\Downloads\adwcleaner.exe
# Volba [Vymazat]


***** [Služby] *****


***** [Soubory / Složky] *****

Složka Vymazáno : C:\Program Files\AVG Secure Search
Složka Vymazáno : C:\Program Files\Common Files\AVG Secure Search
Složka Vymazáno : C:\Program Files\Common Files\DVDVideoSoft\TB
Složka Vymazáno : C:\ProgramData\AVG Secure Search
Složka Vymazáno : C:\ProgramData\ICQ\ICQToolbar
Složka Vymazáno : C:\Users\Ondra\AppData\Local\AVG Secure Search
Složka Vymazáno : C:\Users\Ondra\AppData\Local\PackageAware
Složka Vymazáno : C:\Users\Ondra\AppData\Local\RavenBleuSA
Složka Vymazáno : C:\Users\Ondra\AppData\LocalLow\AVG Secure Search
Složka Vymazáno : C:\Users\Ondra\AppData\Roaming\Mozilla\Firefox\Profiles\1yy4ijrx.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
Složka Vymazáno : C:\Users\Ondra\AppData\Roaming\Mozilla\Firefox\Profiles\1yy4ijrx.default\extensions\{ACAA314B-EEBA-48E4-AD47-84E31C44796C}
Složka Vymazáno : C:\Users\Ondra\AppData\Roaming\Mozilla\Firefox\Profiles\89dezo23.default\CT3072253
Složka Vymazáno : C:\Users\Ondra\AppData\Roaming\Mozilla\Firefox\Profiles\89dezo23.default\extensions\{1283e7d0-b598-4b2d-a20f-59a9dde270a8}(26)
Složka Vymazáno : C:\Users\Ondra\AppData\Roaming\Mozilla\Firefox\Profiles\89dezo23.default\extensions\{5e5ab302-7f65-44cd-8211-c1d4caaccea3}
Složka Vymazáno : C:\Users\Ondra\AppData\Roaming\Mozilla\Firefox\Profiles\89dezo23.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}(27)
Složka Vymazáno : C:\Users\Ondra\AppData\Roaming\Mozilla\Firefox\Profiles\89dezo23.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
Složka Vymazáno : C:\Users\Ondra\AppData\Roaming\Mozilla\Firefox\Profiles\89dezo23.default\SweetIMToolbarData
Složka Vymazáno : C:\Windows\Installer\{1577A05B-EE62-4BBC-9DB7-FE748FA44EC2}
Soubor Vymazáno : C:\Program Files\Mozilla Firefox\searchplugins\avg-secure-search.xml
Soubor Vymazáno : C:\Users\Ondra\AppData\Roaming\Mozilla\Firefox\Profiles\1yy4ijrx.default\searchplugins\Askcom.xml
Soubor Vymazáno : C:\Users\Ondra\AppData\Roaming\Mozilla\Firefox\Profiles\1yy4ijrx.default\searchplugins\icqplugin.xml
Soubor Vymazáno : C:\Users\Ondra\AppData\Roaming\Mozilla\Firefox\Profiles\89dezo23.default\searchplugins\daemon-search.xml
Soubor Vymazáno : C:\Users\Ondra\AppData\Roaming\Mozilla\Firefox\Profiles\89dezo23.default\searchplugins\icqplugin.xml

***** [Registry] *****

Hodnota Vymazáno : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{32099AAC-C132-4136-9E9A-4E364A424E17}]
Hodnota Vymazáno : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}]
Hodnota Vymazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{95B7759C-8C7F-4BF1-B163-73684A933233}]
Hodnota Vymazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{855F3B16-6D32-4FE6-8A56-BBB695989046}]
Hodnota Vymazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [vProt]
Hodnota Vymazáno : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [Avg@toolbar]
Klíe Vymazáno : HKCU\Software\AVG Secure Search
Klíe Vymazáno : HKCU\Software\GamePlayLabs
Klíe Vymazáno : HKCU\Software\Headlight
Klíe Vymazáno : HKCU\Software\InstallCore
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{83AA2913-C123-4146-85BD-AD8F93971D39}
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\AVG Secure Search
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\conduitEngine
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2EECD738-5844-4A99-B4B6-146BF802613B}
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{32099AAC-C132-4136-9E9A-4E364A424E17}
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{855F3B16-6D32-4FE6-8A56-BBB695989046}
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{95B7759C-8C7F-4BF1-B163-73684A933233}
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49DD-99D7-DC866BE87DBC}
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35C-6118-11DC-9C72-001320C79847}
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4A99-B4B6-146BF802613B}
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{32099AAC-C132-4136-9E9A-4E364A424E17}
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{855F3B16-6D32-4FE6-8A56-BBB695989046}
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{98889811-442D-49DD-99D7-DC866BE87DBC}
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35C-6118-11DC-9C72-001320C79847}
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Klíe Vymazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F25AF245-4A81-40DC-92F9-E9021F207706}
Klíe Vymazáno : HKCU\Software\YahooPartnerToolbar
Klíe Vymazáno : HKLM\Software\AVG Secure Search
Klíe Vymazáno : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\AppID\{65C994A2-C65A-4A20-BA92-AADAFC0DCE49}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI
Klíe Vymazáno : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI.1
Klíe Vymazáno : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj
Klíe Vymazáno : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj.1
Klíe Vymazáno : HKLM\SOFTWARE\Classes\CLSID\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\CLSID\{94496571-6AC5-4836-82D5-D46260C44B17}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\CLSID\{BC9FD17D-30F6-4464-9E53-596A90AFF023}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\CLSID\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}
Klíe Vymazáno : HKLM\Software\Classes\Installer\Features\3192AA38321C641458DBDAF83979D193
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Interface\{2BEF239C-752E-4001-8048-F256E0D8CD93}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Interface\{2E9937FC-CF2F-4F56-AF54-5A6A3DD375CC}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Interface\{3F607E46-0D3C-4442-B1DE-DE7FA4768F5C}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Interface\{49C00A51-6E59-41FE-B3FA-2D2157FAD67B}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Interface\{6DFF5DBA-AE3A-46DB-B301-ECFFC6DB2982}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Interface\{8E7AD93B-3E87-423D-947F-A321FA7E31C4}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Interface\{DE34CD67-F1C8-4001-9A23-B8A68F63F377}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\Interface\{FE0273D1-99DF-4AC0-87D5-1371C6271785}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\TypeLib\{13ABD093-D46F-40DF-A608-47E162EC799D}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\TypeLib\{93E3D79C-0786-48FF-9329-93BC9F6DC2B3}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Klíe Vymazáno : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}
Klíe Vymazáno : HKLM\SOFTWARE\Google\Chrome\Extensions\dhkplhfnhceodhffomolpfigojocbpcb
Klíe Vymazáno : HKLM\SOFTWARE\Google\Chrome\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof
Klíe Vymazáno : HKLM\SOFTWARE\Google\Chrome\Extensions\ocphobfcfafpclibolpjdafgaffkaoci
Klíe Vymazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Klíe Vymazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}
Klíe Vymazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC}
Klíe Vymazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706}
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1DA5BD2D3CA2D6943A1A233CD3F88CE7
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\45FC9EFC5C3366B4DB850DAB49330C52
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4B2468513CA2D6943A1A233CD3F88CE7
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7E98451C7CA808F47AFE467BDABD02FA
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BFD11FD45FC7B9E46A8F4B69F3A66E35
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D5979AD63CA2D6943A1A233CD3F88CE7
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DF9BD2952384A9C49B4A5D3D95329890
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FABA2A33488410A4AA40489BD2224282
Klíe Vymazáno : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\3192AA38321C641458DBDAF83979D193
Klíe Vymazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{83AA2913-C123-4146-85BD-AD8F93971D39}
Klíe Vymazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG Secure Search
Klíe Vymazáno : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin

***** [Internetové prohlížeee] *****

-\\ Internet Explorer v8.0.6001.19437

Zaminino : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://isearch.babylon.com/?affID=11663 ... 19212e14c0 --> hxxp://www.google.com
Zaminino : [HKCU\Software\Microsoft\Internet Explorer\Main - ICQ Search] = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd --> hxxp://www.google.com

-\\ Mozilla Firefox v13.0 (cs)

Soubor : C:\Users\Ondra\AppData\Roaming\Mozilla\Firefox\Profiles\1yy4ijrx.default\prefs.js

Vymazáno : user_pref("browser.search.defaultenginename", "AVG Secure Search");
Vymazáno : user_pref("browser.search.selectedEngine", "AVG Secure Search");
Vymazáno : user_pref("icqtoolbar.skip_default_search", "yes");
Vymazáno : user_pref("browser.search.defaultengine", "Ask.com");
Vymazáno : user_pref("browser.search.order.1", "Ask.com");
Vymazáno : user_pref("browser.startup.homepage", "hxxp://start.icq.com/");
Vymazáno : user_pref("icqtoolbar.installsource", "1");

Soubor : C:\Users\Ondra\AppData\Roaming\Mozilla\Firefox\Profiles\89dezo23.default\prefs.js

Vymazáno : user_pref("CT2776682.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.c[...]
Vymazáno : user_pref("CT3072253.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.c[...]
Vymazáno : user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit. ... /CT2776682[...]
Vymazáno : user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit. ... /CT3072253[...]
Vymazáno : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root ... 1164461/CZ", "\"0\"[...]
Vymazáno : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-ser ... =CT2776682", [...]
Vymazáno : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-ser ... =CT3072253", [...]
Vymazáno : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-ser ... rt/dlg.pkg", "\[...]
Vymazáno : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-s ... g?ver=3.12[...]
Vymazáno : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-s ... g?ver=3.12[...]
Vymazáno : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-s ... g?ver=3.13[...]
Vymazáno : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-s ... g?ver=3.14[...]
Vymazáno : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-s ... g?ver=3.15[...]
Vymazáno : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-s ... kg?ver=3.8.[...]
Vymazáno : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/ ... =CT2776682",[...]
Vymazáno : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/ ... =CT3072253",[...]
Vymazáno : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/R ... alizer_dea[...]
Vymazáno : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/R ... nimize.gif"[...]
Vymazáno : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/R ... t/play.gif", "\[...]
Vymazáno : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/R ... t/stop.gif", "\[...]
Vymazáno : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/R ... nt/vol.gif", "\"[...]
Vymazáno : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-serv ... ?locale=en", "\"e20[...]
Vymazáno : user_pref("CommunityToolbar.LatestLibsPath", "file:///C:\\Users\\Ondra\\AppData\\Roaming\\Mozilla\\F[...]
Vymazáno : user_pref("browser.search.defaultenginename", "AVG Secure Search");
Vymazáno : user_pref("extensions.basicscan.init", true);
Vymazáno : user_pref("extensions.plugin2@gameplaylabs.com.fr", "1300980382");
Vymazáno : user_pref("extensions.plugin2@gameplaylabs.com.ranonce", true);
Vymazáno : user_pref("extensions.plugin2@gameplaylabs.com.rule_/", "1300980383");
Vymazáno : user_pref("extensions.plugin2@gameplaylabs.com.rule_dealsplugin.com/", "1300980383");
Vymazáno : user_pref("extensions.plugin2@gameplaylabs.com.rule_facebook.com", "1300980383");
Vymazáno : user_pref("extensions.plugin2@gameplaylabs.com.rule_h", "1300980383");
Vymazáno : user_pref("extensions.plugin2@gameplaylabs.com.rule_hxxp", "1300980383");
Vymazáno : user_pref("extensions.plugin2@gameplaylabs.com.rule_iqquizgame.com/", "1300980383");
Vymazáno : user_pref("extensions.plugin2@gameplaylabs.com.rule_play-ga.me/", "1300980383");
Vymazáno : user_pref("extensions.plugin2@gameplaylabs.com.rule_revealmycrush.com/", "1300980383");
Vymazáno : user_pref("extensions.plugin2@gameplaylabs.com.rule_unlock-this.com/browserplugin", "1300980383");
Vymazáno : user_pref("extensions.plugin2@gameplaylabs.com.rule_unlock-this.com/plugin", "1300980383");
Vymazáno : user_pref("extensions.plugin@gameplaylabs.com.fr", "1299435598");
Vymazáno : user_pref("extensions.plugin@gameplaylabs.com.rule_.google.", "1299531590");
Vymazáno : user_pref("extensions.plugin@gameplaylabs.com.rule_/", "1299531590");
Vymazáno : user_pref("extensions.plugin@gameplaylabs.com.rule_dealsplugin.com/", "1299531590");
Vymazáno : user_pref("extensions.plugin@gameplaylabs.com.rule_facebook.com", "1299531590");
Vymazáno : user_pref("extensions.plugin@gameplaylabs.com.rule_h", "1300940039");
Vymazáno : user_pref("extensions.plugin@gameplaylabs.com.rule_hxxp", "1299531590");
Vymazáno : user_pref("extensions.plugin@gameplaylabs.com.rule_hxxp://www.facebook.com/plugins/like.php?href=htt[...]
Vymazáno : user_pref("extensions.plugin@gameplaylabs.com.rule_iqquizgame.com/", "1299531590");
Vymazáno : user_pref("extensions.plugin@gameplaylabs.com.rule_play-ga.me/", "1299531590");
Vymazáno : user_pref("extensions.plugin@gameplaylabs.com.rule_revealmycrush.com/", "1299531590");
Vymazáno : user_pref("extensions.plugin@gameplaylabs.com.rule_unlock-this.com/browserplugin", "1299531590");
Vymazáno : user_pref("extensions.plugin@gameplaylabs.com.rule_unlock-this.com/plugin", "1299531590");
Vymazáno : user_pref("icqtoolbar.installsource", "1");
Vymazáno : user_pref("icqtoolbar.skip_default_search", "yes");
Vymazáno : user_pref("sweetim.toolbar.search.external", "<?xml version=\"1.0\"?><TOOLBAR><EXTERNAL_SEARCH engin[...]

-\\ Chromium v window_placement: {
bottom: 728

Soubor : C:\Users\Ondra\AppData\Local\Chromium\User Data\Default\Preferences

[OK] Soubor je eistý.

*************************

AdwCleaner[R1].txt - [49565 octets] - [09/07/2013 20:04:54]
AdwCleaner[R2].txt - [49606 octets] - [10/07/2013 20:43:28]
AdwCleaner[R3].txt - [18364 octets] - [11/07/2013 17:13:34]
AdwCleaner[S1].txt - [18366 octets] - [11/07/2013 17:14:02]

########## EOF - C:\AdwCleaner[S1].txt - [18427 octets] ##########

RogueKiller V8.6.2 [Jul 5 2013] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Podpora : http://www.adlice.com/forum/
Webové stránky : http://www.adlice.com/softwares/roguekiller/
: http://tigzyrk.blogspot.com/

Operační systém : Windows Vista (6.0.6002 Service Pack 2) 32 bits version
Spuštěno v : Normální režim
Uživatel : Ondra [Práva správce]
Mód : Odebrat -- Datum : 07/11/2013 17:37:16
| ARK || FAK || MBR |

¤¤¤ Škodlivé procesy: : 0 ¤¤¤

¤¤¤ ¤¤¤ Záznamy Registrů: : 8 ¤¤¤
[DNS] HKLM\[...]\CCSet\[...]\{98F178C4-DBEC-4468-A176-2C093E8879F4} : NameServer (213.250.192.1,213.250.194.1) -> NEBYLO ODSTRANĚNO, POUŽIJTE DNSFIX
[DNS] HKLM\[...]\CS001\[...]\{98F178C4-DBEC-4468-A176-2C093E8879F4} : NameServer (213.250.192.1,213.250.194.1) -> NEBYLO ODSTRANĚNO, POUŽIJTE DNSFIX
[DNS] HKLM\[...]\CS002\[...]\{98F178C4-DBEC-4468-A176-2C093E8879F4} : NameServer (213.250.192.1,213.250.194.1) -> NEBYLO ODSTRANĚNO, POUŽIJTE DNSFIX
[HJ POL] HKCU\[...]\System : DisableTaskMgr (0) -> VYMAZÁNO
[HJ POL] HKCU\[...]\System : DisableRegistryTools (0) -> VYMAZÁNO
[HJ POL] HKLM\[...]\System : DisableRegistryTools (0) -> VYMAZÁNO
[HJ DESK] HKCU\[...]\ClassicStartMenu : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> NAHRAZENO (0)
[HJ DESK] HKCU\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> NAHRAZENO (0)

¤¤¤ naplánované úlohy : 1 ¤¤¤
[V2][SUSP PATH] RunAsStdUser Task : "C:\Users\Ondra\AppData\Local\RavenBleuSA\bin\1.0.11.0\RavenBleuSA.exe" [x] -> VYMAZÁNO

¤¤¤ spuštění položky : 0 ¤¤¤

¤¤¤ Webové prohlížeče : 0 ¤¤¤

¤¤¤ Zvláštní soubory / Složky: ¤¤¤

¤¤¤ Ovladač : [NAHRÁNO] ¤¤¤
[Address] IRP[IRP_MJ_CREATE] : C:\Windows\System32\drivers\mountmgr.sys -> HOOKED ([Address] Unknown @ 0x8541C1F8)
[Address] IRP[IRP_MJ_CLOSE] : C:\Windows\System32\drivers\mountmgr.sys -> HOOKED ([Address] Unknown @ 0x8541C1F8)
[Address] IRP[IRP_MJ_DEVICE_CONTROL] : C:\Windows\System32\drivers\mountmgr.sys -> HOOKED ([Address] Unknown @ 0x8541C1F8)
[Address] IRP[IRP_MJ_INTERNAL_DEVICE_CONTROL] : C:\Windows\System32\drivers\mountmgr.sys -> HOOKED ([Address] Unknown @ 0x8541C1F8)
[Address] IRP[IRP_MJ_POWER] : C:\Windows\System32\drivers\mountmgr.sys -> HOOKED ([Address] Unknown @ 0x8541C1F8)
[Address] IRP[IRP_MJ_SYSTEM_CONTROL] : C:\Windows\System32\drivers\mountmgr.sys -> HOOKED ([Address] Unknown @ 0x8541C1F8)
[Address] IRP[IRP_MJ_PNP] : C:\Windows\System32\drivers\mountmgr.sys -> HOOKED ([Address] Unknown @ 0x8541C1F8)

¤¤¤ Externí včelstvo: ¤¤¤

¤¤¤ Nákaza : ¤¤¤

¤¤¤ Soubor HOSTS: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts


127.0.0.1 localhost


¤¤¤ Kontrola MBR: ¤¤¤

+++++ PhysicalDrive0: ST332082 0AS SCSI Disk Device +++++
--- User ---
[MBR] be07f36201506e03336fd4c1efbb0dc3
[BSP] 415b1c5fb7cef1912cc966191c47ae55 : Acer MBR Code
Partition table:
0 - [XXXXXX] ACER (0x27) [VISIBLE] Offset (sectors): 63 | Size: 6997 Mo
1 - [ACTIVE] FAT16 (0x06) [VISIBLE] Offset (sectors): 14329980 | Size: 149299 Mo
2 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 320095125 | Size: 148946 Mo
User = LL1 ... OK!
Error reading LL2 MBR!

Dokončeno : << RKreport[0]_D_07112013_173716.txt >>
RKreport[0]_S_07102013_210903.txt;RKreport[0]_S_07112013_173634.txt

TDSSKiller má v logu 140 000 znaků nevím jak ho sem vložit sobor nejde připojit k odpovědi.Tak sem log rozdelil doufam že to nevadí.

17:40:50.0936 2384 TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42
17:40:51.0216 2384 ============================================================
17:40:51.0216 2384 Current date / time: 2013/07/11 17:40:51.0216
17:40:51.0216 2384 SystemInfo:
17:40:51.0216 2384
17:40:51.0216 2384 OS Version: 6.0.6002 ServicePack: 2.0
17:40:51.0216 2384 Product type: Workstation
17:40:51.0216 2384 ComputerName: COMP
17:40:51.0216 2384 UserName: Ondra
17:40:51.0216 2384 Windows directory: C:\Windows
17:40:51.0216 2384 System windows directory: C:\Windows
17:40:51.0216 2384 Processor architecture: Intel x86
17:40:51.0216 2384 Number of processors: 2
17:40:51.0216 2384 Page size: 0x1000
17:40:51.0216 2384 Boot type: Normal boot
17:40:51.0216 2384 ============================================================
17:40:52.0480 2384 Drive \Device\Harddisk0\DR0 - Size: 0x4A85D56000 (298.09 Gb), SectorSize: 0x200, Cylinders: 0x9801, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
17:40:52.0496 2384 ============================================================
17:40:52.0496 2384 \Device\Harddisk0\DR0:
17:40:52.0511 2384 MBR partitions:
17:40:52.0511 2384 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x6, StartLBA 0xDAA87C, BlocksNum 0x12399B19
17:40:52.0511 2384 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x13144395, BlocksNum 0x122E932C
17:40:52.0511 2384 ============================================================
17:40:52.0730 2384 C: <-> \Device\Harddisk0\DR0\Partition1
17:40:52.0823 2384 D: <-> \Device\Harddisk0\DR0\Partition2
17:40:52.0823 2384 ============================================================
17:40:52.0823 2384 Initialize success
17:40:52.0823 2384 ============================================================
17:40:54.0149 3792 ============================================================
17:40:54.0149 3792 Scan started
17:40:54.0149 3792 Mode: Manual;
17:40:54.0149 3792 ============================================================
17:40:55.0538 3792 ================ Scan system memory ========================
17:40:55.0538 3792 System memory - ok
17:40:55.0538 3792 ================ Scan services =============================
17:40:55.0896 3792 [ 82B296AE1892FE3DBEE00C9CF92F8AC7 ] ACPI C:\Windows\system32\drivers\acpi.sys
17:40:55.0896 3792 ACPI - ok
17:40:56.0333 3792 [ ADDA5E1951B90D3D23C56D3CF0622ADC ] AdobeARMservice C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
17:40:56.0349 3792 AdobeARMservice - ok
17:40:56.0474 3792 [ 9915504F602D277EE47FD843A677FD15 ] AdobeFlashPlayerUpdateSvc C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
17:40:56.0474 3792 AdobeFlashPlayerUpdateSvc - ok
17:40:56.0552 3792 [ 2EDC5BBAC6C651ECE337BDE8ED97C9FB ] adp94xx C:\Windows\system32\drivers\adp94xx.sys
17:40:56.0552 3792 adp94xx - ok
17:40:56.0598 3792 [ B84088CA3CDCA97DA44A984C6CE1CCAD ] adpahci C:\Windows\system32\drivers\adpahci.sys
17:40:56.0598 3792 adpahci - ok
17:40:56.0614 3792 [ 7880C67BCCC27C86FD05AA2AFB5EA469 ] adpu160m C:\Windows\system32\drivers\adpu160m.sys
17:40:56.0630 3792 adpu160m - ok
17:40:56.0645 3792 [ 9AE713F8E30EFC2ABCCD84904333DF4D ] adpu320 C:\Windows\system32\drivers\adpu320.sys
17:40:56.0661 3792 adpu320 - ok
17:40:56.0708 3792 [ 9D1FDA9E086BA64E3C93C9DE32461BCF ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
17:40:56.0708 3792 AeLookupSvc - ok
17:40:56.0786 3792 [ 3911B972B55FEA0478476B2E777B29FA ] AFD C:\Windows\system32\drivers\afd.sys
17:40:56.0786 3792 AFD - ok
17:40:56.0942 3792 [ EF23439CDD587F64C2C1B8825CEAD7D8 ] agp440 C:\Windows\system32\drivers\agp440.sys
17:40:56.0942 3792 agp440 - ok
17:40:57.0020 3792 [ AE1FDF7BF7BB6C6A70F67699D880592A ] aic78xx C:\Windows\system32\drivers\djsvs.sys
17:40:57.0035 3792 aic78xx - ok
17:40:57.0051 3792 [ A1545B731579895D8CC44FC0481C1192 ] ALG C:\Windows\System32\alg.exe
17:40:57.0051 3792 ALG - ok
17:40:57.0066 3792 [ 90395B64600EBB4552E26E178C94B2E4 ] aliide C:\Windows\system32\drivers\aliide.sys
17:40:57.0066 3792 aliide - ok
17:40:57.0098 3792 [ 2B13E304C9DFDFA5EB582F6A149FA2C7 ] amdagp C:\Windows\system32\drivers\amdagp.sys
17:40:57.0098 3792 amdagp - ok
17:40:57.0113 3792 [ 0577DF1D323FE75A739C787893D300EA ] amdide C:\Windows\system32\drivers\amdide.sys
17:40:57.0113 3792 amdide - ok
17:40:57.0144 3792 [ DC487885BCEF9F28EECE6FAC0E5DDFC5 ] AmdK7 C:\Windows\system32\drivers\amdk7.sys
17:40:57.0144 3792 AmdK7 - ok
17:40:57.0160 3792 [ 93AE7F7DD54AB986A6F1A1B37BE7442D ] AmdK8 C:\Windows\system32\DRIVERS\amdk8.sys
17:40:57.0160 3792 AmdK8 - ok
17:40:57.0316 3792 [ AD8FA28D8ED0D0A689A0559085CE0F18 ] AmdLLD C:\Windows\system32\DRIVERS\AmdLLD.sys
17:40:57.0316 3792 AmdLLD - ok
17:40:57.0363 3792 [ C6D704C7F0434DC791AAC37CAC4B6E14 ] Appinfo C:\Windows\System32\appinfo.dll
17:40:57.0363 3792 Appinfo - ok
17:40:57.0815 3792 [ 5F673180268BB1FDB69C99B6619FE379 ] arc C:\Windows\system32\drivers\arc.sys
17:40:57.0831 3792 arc - ok
17:40:57.0862 3792 [ 957F7540B5E7F602E44648C7DE5A1C05 ] arcsas C:\Windows\system32\drivers\arcsas.sys
17:40:57.0862 3792 arcsas - ok
17:40:58.0018 3792 [ 776ACEFA0CA9DF0FAA51A5FB2F435705 ] aspnet_state C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe
17:40:58.0034 3792 aspnet_state - ok
17:40:58.0080 3792 [ 4AF5F360BA1E8794D32B366E45A64A0A ] aswFsBlk C:\Windows\system32\drivers\aswFsBlk.sys
17:40:58.0096 3792 aswFsBlk - ok
17:40:58.0112 3792 [ 1F7094D4268D46F718C51286DC189791 ] aswMonFlt C:\Windows\system32\drivers\aswMonFlt.sys
17:40:58.0112 3792 aswMonFlt - ok
17:40:58.0143 3792 [ 7B43265F92257A21CBFD88E7A651044C ] AswRdr C:\Windows\system32\drivers\AswRdr.sys
17:40:58.0143 3792 AswRdr - ok
17:40:58.0158 3792 [ B680134BA1813B78B47FDD1DFF223CA5 ] aswRvrt C:\Windows\system32\drivers\aswRvrt.sys
17:40:58.0158 3792 aswRvrt - ok
17:40:58.0205 3792 [ CCD565A8A72AF7D45F9A242013870926 ] aswSnx C:\Windows\system32\drivers\aswSnx.sys
17:40:58.0236 3792 aswSnx - ok
17:40:58.0268 3792 [ 937300BC7C4CDF7576BCCE44E19BBB9D ] aswSP C:\Windows\system32\drivers\aswSP.sys
17:40:58.0268 3792 aswSP - ok
17:40:58.0299 3792 [ 1F71F170D90E42EFDE9633D81D5E12DC ] aswTdi C:\Windows\system32\drivers\aswTdi.sys
17:40:58.0314 3792 aswTdi - ok
17:40:58.0361 3792 [ 8CFAA2B965773A653F48F1207A9CB9C4 ] aswVmm C:\Windows\system32\drivers\aswVmm.sys
17:40:58.0361 3792 aswVmm - ok
17:40:58.0392 3792 [ 53B202ABEE6455406254444303E87BE1 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
17:40:58.0392 3792 AsyncMac - ok
17:40:58.0424 3792 [ 1F05B78AB91C9075565A9D8A4B880BC4 ] atapi C:\Windows\system32\drivers\atapi.sys
17:40:58.0424 3792 atapi - ok
17:40:58.0470 3792 [ 2A5E4F4C40E1394F213DB1027507D5FE ] Ati External Event Utility C:\Windows\system32\Ati2evxx.exe
17:40:58.0486 3792 Ati External Event Utility - ok
17:40:58.0533 3792 [ F0D933B42CD0594048E4D5200AE9E417 ] atksgt C:\Windows\system32\DRIVERS\atksgt.sys
17:40:58.0533 3792 atksgt - ok
17:40:58.0642 3792 [ 68E2A1A0407A66CF50DA0300852424AB ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
17:40:58.0642 3792 AudioEndpointBuilder - ok
17:40:58.0658 3792 [ 68E2A1A0407A66CF50DA0300852424AB ] Audiosrv C:\Windows\System32\Audiosrv.dll
17:40:58.0658 3792 Audiosrv - ok
17:40:58.0751 3792 [ 28D6701C710AD7BA3CB95E75F8F1A9AA ] avast! Antivirus C:\Program Files\AVAST Software\Avast\AvastSvc.exe
17:40:58.0751 3792 avast! Antivirus - ok
17:40:58.0923 3792 [ 57D83B82117C2DDB9D7E9AEA691CEDFC ] avgtp C:\Windows\system32\drivers\avgtpx86.sys
17:40:58.0923 3792 avgtp - ok
17:40:58.0970 3792 [ 67E506B75BD5326A3EC7B70BD014DFB6 ] Beep C:\Windows\system32\drivers\Beep.sys
17:40:58.0970 3792 Beep - ok
17:40:59.0016 3792 [ C789AF0F724FDA5852FB9A7D3A432381 ] BFE C:\Windows\System32\bfe.dll
17:40:59.0032 3792 BFE - ok
17:40:59.0110 3792 [ 93952506C6D67330367F7E7934B6A02F ] BITS C:\Windows\System32\qmgr.dll
17:40:59.0141 3792 BITS - ok
17:40:59.0157 3792 blbdrive - ok
17:40:59.0328 3792 [ 73686FE0B2E0469F89FD2075BE724704 ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe
17:40:59.0328 3792 Bonjour Service - ok
17:40:59.0344 3792 [ 35F376253F687BDE63976CCB3F2108CA ] bowser C:\Windows\system32\DRIVERS\bowser.sys
17:40:59.0360 3792 bowser - ok
17:40:59.0391 3792 [ 9F9ACC7F7CCDE8A15C282D3F88B43309 ] BrFiltLo C:\Windows\system32\drivers\brfiltlo.sys
17:40:59.0391 3792 BrFiltLo - ok
17:40:59.0406 3792 [ 56801AD62213A41F6497F96DEE83755A ] BrFiltUp C:\Windows\system32\drivers\brfiltup.sys
17:40:59.0406 3792 BrFiltUp - ok
17:40:59.0422 3792 [ A3629A0C4226F9E9C72FAAEEBC3AD33C ] Browser C:\Windows\System32\browser.dll
17:40:59.0422 3792 Browser - ok
17:40:59.0453 3792 [ B304E75CFF293029EDDF094246747113 ] Brserid C:\Windows\system32\drivers\brserid.sys
17:40:59.0453 3792 Brserid - ok
17:40:59.0469 3792 [ 203F0B1E73ADADBBB7B7B1FABD901F6B ] BrSerWdm C:\Windows\system32\drivers\brserwdm.sys
17:40:59.0469 3792 BrSerWdm - ok
17:40:59.0484 3792 [ BD456606156BA17E60A04E18016AE54B ] BrUsbMdm C:\Windows\system32\drivers\brusbmdm.sys
17:40:59.0484 3792 BrUsbMdm - ok
17:40:59.0484 3792 [ AF72ED54503F717A43268B3CC5FAEC2E ] BrUsbSer C:\Windows\system32\drivers\brusbser.sys
17:40:59.0484 3792 BrUsbSer - ok
17:40:59.0516 3792 [ AD07C1EC6665B8B35741AB91200C6B68 ] BTHMODEM C:\Windows\system32\drivers\bthmodem.sys
17:40:59.0516 3792 BTHMODEM - ok
17:40:59.0640 3792 catchme - ok
17:40:59.0672 3792 [ 7ADD03E75BEB9E6DD102C3081D29840A ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
17:40:59.0672 3792 cdfs - ok
17:40:59.0718 3792 [ 6B4BFFB9BECD728097024276430DB314 ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys
17:40:59.0718 3792 cdrom - ok
17:40:59.0765 3792 [ 312EC3E37A0A1F2006534913E37B4423 ] CertPropSvc C:\Windows\System32\certprop.dll
17:40:59.0765 3792 CertPropSvc - ok
17:40:59.0828 3792 [ DA8E0AFC7BAA226C538EF53AC2F90897 ] circlass C:\Windows\system32\drivers\circlass.sys
17:40:59.0828 3792 circlass - ok
17:40:59.0874 3792 [ D7659D3B5B92C31E84E53C1431F35132 ] CLFS C:\Windows\system32\CLFS.sys
17:40:59.0874 3792 CLFS - ok
17:40:59.0937 3792 [ 8EE772032E2FE80A924F3B8DD5082194 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
17:40:59.0937 3792 clr_optimization_v2.0.50727_32 - ok
17:40:59.0968 3792 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
17:40:59.0984 3792 clr_optimization_v4.0.30319_32 - ok
17:40:59.0999 3792 CLTNetCnService - ok
17:41:00.0030 3792 [ 45201046C776FFDAF3FC8A0029C581C8 ] cmdide C:\Windows\system32\drivers\cmdide.sys
17:41:00.0030 3792 cmdide - ok
17:41:00.0046 3792 [ 82B8C91D327CFECF76CB58716F7D4997 ] Compbatt C:\Windows\system32\drivers\compbatt.sys
17:41:00.0062 3792 Compbatt - ok
17:41:00.0062 3792 COMSysApp - ok
17:41:00.0093 3792 [ 2A213AE086BBEC5E937553C7D9A2B22C ] crcdisk C:\Windows\system32\drivers\crcdisk.sys
17:41:00.0093 3792 crcdisk - ok
17:41:00.0108 3792 [ 22A7F883508176489F559EE745B5BF5D ] Crusoe C:\Windows\system32\drivers\crusoe.sys
17:41:00.0124 3792 Crusoe - ok
17:41:00.0171 3792 [ 3EDE4C1F9672C972479201544969ADCB ] CryptSvc C:\Windows\system32\cryptsvc.dll
17:41:00.0171 3792 CryptSvc - ok
17:41:00.0280 3792 [ 3B5B4D53FEC14F7476CA29A20CC31AC9 ] DcomLaunch C:\Windows\system32\rpcss.dll
17:41:00.0296 3792 DcomLaunch - ok
17:41:00.0311 3792 [ 622C41A07CA7E6DD91770F50D532CB6C ] DfsC C:\Windows\system32\Drivers\dfsc.sys
17:41:00.0311 3792 DfsC - ok
17:41:00.0576 3792 [ 2CC3DCFB533A1035B13DCAB6160AB38B ] DFSR C:\Windows\system32\DFSR.exe
17:41:00.0748 3792 DFSR - ok
17:41:00.0810 3792 [ 9028559C132146FB75EB7ACF384B086A ] Dhcp C:\Windows\System32\dhcpcsvc.dll
17:41:00.0810 3792 Dhcp - ok
17:41:00.0857 3792 [ 5D4AEFC3386920236A548271F8F1AF6A ] disk C:\Windows\system32\drivers\disk.sys
17:41:00.0857 3792 disk - ok
17:41:00.0888 3792 [ 57D762F6F5974AF0DA2BE88A3349BAAA ] Dnscache C:\Windows\System32\dnsrslvr.dll
17:41:00.0888 3792 Dnscache - ok
17:41:00.0935 3792 [ 324FD74686B1EF5E7C19A8AF49E748F6 ] dot3svc C:\Windows\System32\dot3svc.dll
17:41:00.0935 3792 dot3svc - ok
17:41:00.0951 3792 [ A622E888F8AA2F6B49E9BC466F0E5DEF ] DPS C:\Windows\system32\dps.dll
17:41:00.0951 3792 DPS - ok
17:41:00.0982 3792 [ 97FEF831AB90BEE128C9AF390E243F80 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
17:41:00.0982 3792 drmkaud - ok
17:41:01.0013 3792 [ 555E54AC2F601A8821CEF58961653991 ] dtsoftbus01 C:\Windows\system32\DRIVERS\dtsoftbus01.sys
17:41:01.0013 3792 dtsoftbus01 - ok
17:41:01.0076 3792 [ 28CD50265B55F5F8B4432450D021446E ] DwProt C:\Windows\system32\drivers\dwprot.sys
17:41:01.0076 3792 DwProt - ok
17:41:01.0294 3792 [ 5DE0FAEC9E5D1AAE74F8568897891A01 ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
17:41:01.0310 3792 DXGKrnl - ok
17:41:01.0512 3792 [ F88FB26547FD2CE6D0A5AF2985892C48 ] E1G60 C:\Windows\system32\DRIVERS\E1G60I32.sys
17:41:01.0528 3792 E1G60 - ok
17:41:01.0606 3792 [ C0B95E40D85CD807D614E264248A45B9 ] EapHost C:\Windows\System32\eapsvc.dll
17:41:01.0606 3792 EapHost - ok
17:41:01.0700 3792 [ 7F64EA048DCFAC7ACF8B4D7B4E6FE371 ] Ecache C:\Windows\system32\drivers\ecache.sys
17:41:01.0700 3792 Ecache - ok
17:41:01.0918 3792 [ 9BE3744D295A7701EB425332014F0797 ] ehRecvr C:\Windows\ehome\ehRecvr.exe
17:41:01.0918 3792 ehRecvr - ok
17:41:01.0934 3792 [ AD1870C8E5D6DD340C829E6074BF3C3F ] ehSched C:\Windows\ehome\ehsched.exe
17:41:01.0934 3792 ehSched - ok
17:41:01.0949 3792 [ C27C4EE8926E74AA72EFCAB24C5242C3 ] ehstart C:\Windows\ehome\ehstart.dll
17:41:01.0949 3792 ehstart - ok
17:41:02.0012 3792 [ E8F3F21A71720C84BCF423B80028359F ] elxstor C:\Windows\system32\drivers\elxstor.sys
17:41:02.0027 3792 elxstor - ok
17:41:02.0261 3792 [ 4E6B23DFC917EA39306B529B773950F4 ] EMDMgmt C:\Windows\system32\emdmgmt.dll
17:41:02.0308 3792 EMDMgmt - ok
17:41:02.0558 3792 [ A2580C15D2664D18C3E140C7F98B366C ] eRecoveryService C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
17:41:02.0589 3792 eRecoveryService - ok
17:41:02.0620 3792 [ 67058C46504BC12D821F38CF99B7B28F ] EventSystem C:\Windows\system32\es.dll
17:41:02.0620 3792 EventSystem - ok
17:41:02.0714 3792 [ 22B408651F9123527BCEE54B4F6C5CAE ] exfat C:\Windows\system32\drivers\exfat.sys
17:41:02.0760 3792 exfat - ok
17:41:02.0776 3792 [ 1E9B9A70D332103C52995E957DC09EF8 ] fastfat C:\Windows\system32\drivers\fastfat.sys
17:41:02.0776 3792 fastfat - ok
17:41:02.0807 3792 [ 63BDADA84951B9C03E641800E176898A ] fdc C:\Windows\system32\DRIVERS\fdc.sys
17:41:02.0807 3792 fdc - ok
17:41:02.0870 3792 [ 6629B5F0E98151F4AFDD87567EA32BA3 ] fdPHost C:\Windows\system32\fdPHost.dll
17:41:02.0870 3792 fdPHost - ok
17:41:02.0885 3792 [ 89ED56DCE8E47AF40892778A5BD31FD2 ] FDResPub C:\Windows\system32\fdrespub.dll
17:41:02.0885 3792 FDResPub - ok
17:41:02.0932 3792 [ A8C0139A884861E3AAE9CFE73B208A9F ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
17:41:02.0932 3792 FileInfo - ok
17:41:02.0948 3792 [ 0AE429A696AECBC5970E3CF2C62635AE ] Filetrace C:\Windows\system32\drivers\filetrace.sys
17:41:02.0948 3792 Filetrace - ok
17:41:03.0072 3792 [ 227846995AFEEFA70D328BF5334A86A5 ] FLEXnet Licensing Service C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
17:41:03.0119 3792 FLEXnet Licensing Service - ok
17:41:03.0150 3792 [ 6603957EFF5EC62D25075EA8AC27DE68 ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys
17:41:03.0150 3792 flpydisk - ok
17:41:03.0197 3792 [ 01334F9EA68E6877C4EF05D3EA8ABB05 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
17:41:03.0213 3792 FltMgr - ok
17:41:03.0322 3792 [ 8CE364388C8ECA59B14B539179276D44 ] FontCache C:\Windows\system32\FntCache.dll
17:41:03.0338 3792 FontCache - ok
17:41:03.0400 3792 [ C7FBDD1ED42F82BFA35167A5C9803EA3 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
17:41:03.0400 3792 FontCache3.0.0.0 - ok
17:41:03.0431 3792 [ B972A66758577E0BFD1DE0F91AAA27B5 ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
17:41:03.0431 3792 Fs_Rec - ok
17:41:03.0462 3792 [ 4E1CD0A45C50A8882616CAE5BF82F3C5 ] gagp30kx C:\Windows\system32\drivers\gagp30kx.sys
17:41:03.0462 3792 gagp30kx - ok
17:41:03.0509 3792 [ CD5D0AEEE35DFD4E986A5AA1500A6E66 ] gpsvc C:\Windows\System32\gpsvc.dll
17:41:03.0525 3792 gpsvc - ok
17:41:03.0650 3792 [ D30B31375C40309425C21EFE75DB90BB ] hamachi C:\Windows\system32\DRIVERS\hamachi.sys
17:41:03.0665 3792 hamachi - ok
17:41:03.0696 3792 [ CB04C744BE0A61B1D648FAED182C3B59 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
17:41:03.0696 3792 HdAudAddService - ok
17:41:03.0759 3792 [ 062452B7FFD68C8C042A6261FE8DFF4A ] HDAudBus C:\Windows\system32\DRIVERS\HDAudBus.sys
17:41:03.0774 3792 HDAudBus - ok
17:41:03.0774 3792 [ 1338520E78D90154ED6BE8F84DE5FCEB ] HidBth C:\Windows\system32\drivers\hidbth.sys
17:41:03.0790 3792 HidBth - ok
17:41:04.0008 3792 [ FF3160C3A2445128C5A6D9B076DA519E ] HidIr C:\Windows\system32\drivers\hidir.sys
17:41:04.0008 3792 HidIr - ok
17:41:04.0040 3792 [ 84067081F3318162797385E11A8F0582 ] hidserv C:\Windows\System32\hidserv.dll
17:41:04.0040 3792 hidserv - ok
17:41:04.0071 3792 [ CCA4B519B17E23A00B826C55716809CC ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys
17:41:04.0071 3792 HidUsb - ok
17:41:04.0102 3792 [ D8AD255B37DA92434C26E4876DB7D418 ] hkmsvc C:\Windows\system32\kmsvc.dll
17:41:04.0102 3792 hkmsvc - ok
17:41:04.0118 3792 [ DF353B401001246853763C4B7AAA6F50 ] HpCISSs C:\Windows\system32\drivers\hpcisss.sys
17:41:04.0118 3792 HpCISSs - ok
17:41:04.0274 3792 [ F870AA3E254628EBEAFE754108D664DE ] HTTP C:\Windows\system32\drivers\HTTP.sys
17:41:04.0289 3792 HTTP - ok
17:41:04.0320 3792 [ 324C2152FF2C61ABAE92D09F3CCA4D63 ] i2omp C:\Windows\system32\drivers\i2omp.sys
17:41:04.0320 3792 i2omp - ok
17:41:04.0617 3792 [ 22D56C8184586B7A1F6FA60BE5F5A2BD ] i8042prt C:\Windows\system32\DRIVERS\i8042prt.sys
17:41:04.0617 3792 i8042prt - ok
17:41:04.0664 3792 [ C957BF4B5D80B46C5017BF0101E6C906 ] iaStorV C:\Windows\system32\drivers\iastorv.sys
17:41:04.0679 3792 iaStorV - ok
17:41:04.0757 3792 [ 1CF03C69B49ACB70C722DF92755C0C8C ] IDriverT C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
17:41:04.0773 3792 IDriverT - ok
17:41:04.0835 3792 [ 98477B08E61945F974ED9FDC4CB6BDAB ] idsvc C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
17:41:04.0898 3792 idsvc - ok
17:41:04.0929 3792 [ 2D077BF86E843F901D8DB709C95B49A5 ] iirsp C:\Windows\system32\drivers\iirsp.sys
17:41:04.0929 3792 iirsp - ok
17:41:04.0960 3792 [ 9908D8A397B76CD8D31D0D383C5773C9 ] IKEEXT C:\Windows\System32\ikeext.dll
17:41:04.0976 3792 IKEEXT - ok
17:41:04.0991 3792 [ 9D64201C9E5AC8D1F088762BA00FF3AB ] int15 C:\Acer\Empowering Technology\eRecovery\int15.sys
17:41:05.0007 3792 int15 - ok
17:41:05.0069 3792 [ AEF2FA29204056B81BC4CBF30260DEE1 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHDA.sys
17:41:05.0132 3792 IntcAzAudAddService - ok
17:41:05.0163 3792 [ 97469037714070E45194ED318D636401 ] intelide C:\Windows\system32\drivers\intelide.sys
17:41:05.0178 3792 intelide - ok
17:41:05.0194 3792 [ CE44CC04262F28216DD4341E9E36A16F ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys
17:41:05.0210 3792 intelppm - ok
17:41:05.0225 3792 [ 9AC218C6E6105477484C6FDBE7D409A4 ] IPBusEnum C:\Windows\system32\ipbusenum.dll
17:41:05.0225 3792 IPBusEnum - ok
17:41:05.0241 3792 [ 62C265C38769B864CB25B4BCF62DF6C3 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
17:41:05.0256 3792 IpFilterDriver - ok
17:41:05.0272 3792 [ 1998BD97F950680BB55F55A7244679C2 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
17:41:05.0272 3792 iphlpsvc - ok
17:41:05.0288 3792 IpInIp - ok
17:41:05.0319 3792 [ 40F34F8ABA2A015D780E4B09138B6C17 ] IPMIDRV C:\Windows\system32\drivers\ipmidrv.sys
17:41:05.0319 3792 IPMIDRV - ok
17:41:05.0334 3792 [ 8793643A67B42CEC66490B2A0CF92D68 ] IPNAT C:\Windows\system32\DRIVERS\ipnat.sys
17:41:05.0334 3792 IPNAT - ok
17:41:05.0350 3792 [ 109C0DFB82C3632FBD11949B73AEEAC9 ] IRENUM C:\Windows\system32\drivers\irenum.sys
17:41:05.0350 3792 IRENUM - ok
17:41:05.0366 3792 [ 350FCA7E73CF65BCEF43FAE1E4E91293 ] isapnp C:\Windows\system32\drivers\isapnp.sys
17:41:05.0366 3792 isapnp - ok
17:41:05.0412 3792 [ 232FA340531D940AAC623B121A595034 ] iScsiPrt C:\Windows\system32\DRIVERS\msiscsi.sys
17:41:05.0412 3792 iScsiPrt - ok
17:41:05.0428 3792 [ BCED60D16156E428F8DF8CF27B0DF150 ] iteatapi C:\Windows\system32\drivers\iteatapi.sys
17:41:05.0428 3792 iteatapi - ok
17:41:05.0444 3792 [ 06FA654504A498C30ADCA8BEC4E87E7E ] iteraid C:\Windows\system32\drivers\iteraid.sys
17:41:05.0444 3792 iteraid - ok
17:41:05.0459 3792 [ 37605E0A8CF00CBBA538E753E4344C6E ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys
17:41:05.0459 3792 kbdclass - ok
17:41:05.0490 3792 [ EDE59EC70E25C24581ADD1FBEC7325F7 ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys
17:41:05.0490 3792 kbdhid - ok
17:41:05.0522 3792 [ A3E186B4B935905B829219502557314E ] KeyIso C:\Windows\system32\lsass.exe
17:41:05.0522 3792 KeyIso - ok
17:41:05.0568 3792 [ 4A1445EFA932A3BAF5BDB02D7131EE20 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
17:41:05.0584 3792 KSecDD - ok
17:41:05.0631 3792 [ 8078F8F8F7A79E2E6B494523A828C585 ] KtmRm C:\Windows\system32\msdtckrm.dll
17:41:05.0631 3792 KtmRm - ok
17:41:05.0662 3792 [ 1BF5EEBFD518DD7298434D8C862F825D ] LanmanServer C:\Windows\System32\srvsvc.dll
17:41:05.0662 3792 LanmanServer - ok
17:41:05.0693 3792 [ 1DB69705B695B987082C8BAEC0C6B34F ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
17:41:05.0709 3792 LanmanWorkstation - ok
17:41:05.0849 3792 [ 559C9B7800FAC92FC515CD0003D7C631 ] LightScribeService C:\Program Files\Common Files\LightScribe\LSSrvc.exe
17:41:05.0865 3792 LightScribeService - ok
17:41:05.0943 3792 [ F8A7212D0864EF5E9185FB95E6623F4D ] lirsgt C:\Windows\system32\DRIVERS\lirsgt.sys
17:41:05.0943 3792 lirsgt - ok
17:41:05.0974 3792 [ D1C5883087A0C3F1344D9D55A44901F6 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
17:41:05.0974 3792 lltdio - ok
17:41:05.0990 3792 [ 2D5A428872F1442631D0959A34ABFF63 ] lltdsvc C:\Windows\System32\lltdsvc.dll
17:41:06.0005 3792 lltdsvc - ok
17:41:06.0036 3792 [ 35D40113E4A5B961B6CE5C5857702518 ] lmhosts C:\Windows\System32\lmhsvc.dll
17:41:06.0036 3792 lmhosts - ok
17:41:06.0083 3792 [ A2262FB9F28935E862B4DB46438C80D2 ] LSI_FC C:\Windows\system32\drivers\lsi_fc.sys
17:41:06.0083 3792 LSI_FC - ok
17:41:06.0099 3792 [ 30D73327D390F72A62F32C103DAF1D6D ] LSI_SAS C:\Windows\system32\drivers\lsi_sas.sys
17:41:06.0099 3792 LSI_SAS - ok
17:41:06.0130 3792 [ E1E36FEFD45849A95F1AB81DE0159FE3 ] LSI_SCSI C:\Windows\system32\drivers\lsi_scsi.sys
17:41:06.0130 3792 LSI_SCSI - ok
17:41:06.0161 3792 [ 8F5C7426567798E62A3B3614965D62CC ] luafv C:\Windows\system32\drivers\luafv.sys
17:41:06.0161 3792 luafv - ok
17:41:06.0224 3792 [ A8382713F5870E4AF1DE4E8F7AF9D882 ] Macromedia Licensing Service C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
17:41:06.0224 3792 Macromedia Licensing Service - ok
17:41:06.0286 3792 [ 4470E3C1E0C3378E4CAB137893C12C3A ] MBAMProtector C:\Windows\system32\drivers\mbam.sys
17:41:06.0286 3792 MBAMProtector - ok
17:41:06.0364 3792 [ 65085456FD9A74D7F1A999520C299ECB ] MBAMScheduler C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
17:41:06.0380 3792 MBAMScheduler - ok
17:41:06.0567 3792 [ E0D7732F2D2E24B2DB3F67B6750295B8 ] MBAMService C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
17:41:07.0830 3792 MBAMService - ok
17:41:08.0501 3792 [ 0DB7527DB188C7D967A37BB51BBF3963 ] MBAMSwissArmy C:\Windows\system32\drivers\mbamswissarmy.sys
17:41:08.0517 3792 MBAMSwissArmy - ok
17:41:08.0595 3792 [ DDCC236009C707761D60E5C76D639176 ] McComponentHostService C:\Program Files\McAfee Security Scan\3.0.318\McCHSvc.exe
17:41:08.0595 3792 McComponentHostService - ok
17:41:08.0626 3792 [ AEF9BABB8A506BC4CE0451A64AADED46 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
17:41:08.0673 3792 Mcx2Svc - ok
17:41:08.0720 3792 [ D153B14FC6598EAE8422A2037553ADCE ] megasas C:\Windows\system32\drivers\megasas.sys
17:41:08.0720 3792 megasas - ok
17:41:08.0766 3792 [ 1076FFCFFAAE8385FD62DFCB25AC4708 ] MMCSS C:\Windows\system32\mmcss.dll
17:41:08.0766 3792 MMCSS - ok
17:41:08.0782 3792 [ E13B5EA0F51BA5B1512EC671393D09BA ] Modem C:\Windows\system32\drivers\modem.sys
17:41:08.0782 3792 Modem - ok
17:41:08.0798 3792 [ 0A9BB33B56E294F686ABB7C1E4E2D8A8 ] monitor C:\Windows\system32\DRIVERS\monitor.sys
17:41:08.0798 3792 monitor - ok
17:41:08.0829 3792 [ 5BF6A1326A335C5298477754A506D263 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys
17:41:08.0829 3792 mouclass - ok
17:41:08.0860 3792 [ 93B8D4869E12CFBE663915502900876F ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
17:41:08.0860 3792 mouhid - ok
17:41:08.0891 3792 [ BDAFC88AA6B92F7842416EA6A48E1600 ] MountMgr C:\Windows\system32\drivers\mountmgr.sys
17:41:08.0891 3792 MountMgr - ok
17:41:09.0047 3792 [ 7EDBBB9351A38C6BB0FE98CFD44DB430 ] MozillaMaintenance C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
17:41:09.0047 3792 MozillaMaintenance - ok
17:41:09.0078 3792 [ 583A41F26278D9E0EA548163D6139397 ] mpio C:\Windows\system32\drivers\mpio.sys
17:41:09.0078 3792 mpio - ok
17:41:09.0094 3792 [ 22241FEBA9B2DEFA669C8CB0A8DD7D2E ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
17:41:09.0110 3792 mpsdrv - ok
17:41:09.0125 3792 [ 5DE62C6E9108F14F6794060A9BDECAEC ] MpsSvc C:\Windows\system32\mpssvc.dll
17:41:09.0141 3792 MpsSvc - ok
17:41:09.0172 3792 [ 4FBBB70D30FD20EC51F80061703B001E ] Mraid35x C:\Windows\system32\drivers\mraid35x.sys
17:41:09.0172 3792 Mraid35x - ok
17:41:09.0203 3792 [ 82CEA0395524AACFEB58BA1448E8325C ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
17:41:09.0203 3792 MRxDAV - ok
17:41:09.0234 3792 [ 1E94971C4B446AB2290DEB71D01CF0C2 ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
17:41:09.0234 3792 mrxsmb - ok
17:41:09.0266 3792 [ 4FCCB34D793B116423209C0F8B7A3B03 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
17:41:09.0266 3792 mrxsmb10 - ok
17:41:09.0266 3792 [ C3CB1B40AD4A0124D617A1199B0B9D7C ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
17:41:09.0281 3792 mrxsmb20 - ok
17:41:09.0297 3792 [ 742AED7939E734C36B7E8D6228CE26B7 ] msahci C:\Windows\system32\drivers\msahci.sys
17:41:09.0297 3792 msahci - ok
17:41:09.0312 3792 [ 3FC82A2AE4CC149165A94699183D3028 ] msdsm C:\Windows\system32\drivers\msdsm.sys
17:41:09.0312 3792 msdsm - ok
17:41:09.0344 3792 [ FD7520CC3A80C5FC8C48852BB24C6DED ] MSDTC C:\Windows\System32\msdtc.exe
17:41:09.0344 3792 MSDTC - ok
17:41:09.0375 3792 [ A9927F4A46B816C92F461ACB90CF8515 ] Msfs C:\Windows\system32\drivers\Msfs.sys
17:41:09.0375 3792 Msfs - ok
17:41:09.0531 3792 [ 0F400E306F385C56317357D6DEA56F62 ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
17:41:09.0531 3792 msisadrv - ok
17:41:09.0562 3792 [ 85466C0757A23D9A9AECDC0755203CB2 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
17:41:09.0562 3792 MSiSCSI - ok
17:41:09.0578 3792 msiserver - ok
17:41:09.0609 3792 [ D8C63D34D9C9E56C059E24EC7185CC07 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
17:41:09.0609 3792 MSKSSRV - ok
17:41:09.0624 3792 [ 1D373C90D62DDB641D50E55B9E78D65E ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
17:41:09.0624 3792 MSPCLOCK - ok
17:41:09.0640 3792 [ B572DA05BF4E098D4BBA3A4734FB505B ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
17:41:09.0640 3792 MSPQM - ok
17:41:09.0671 3792 [ B49456D70555DE905C311BCDA6EC6ADB ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
17:41:09.0671 3792 MsRPC - ok
17:41:09.0702 3792 [ E384487CB84BE41D09711C30CA79646C ] mssmbios C:\Windows\system32\DRIVERS\mssmbios.sys
17:41:09.0702 3792 mssmbios - ok
17:41:09.0749 3792 MSSQL$SONY_MEDIAMGR - ok
17:41:09.0796 3792 [ CB7524C21727404BD3140DCA32DEB7DE ] MSSQLServerADHelper C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqladhlp.exe
17:41:09.0796 3792 MSSQLServerADHelper - ok
17:41:09.0812 3792 [ 7199C1EEC1E4993CAF96B8C0A26BD58A ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
17:41:09.0812 3792 MSTEE - ok
17:41:09.0843 3792 [ 6A57B5733D4CB702C8EA4542E836B96C ] Mup C:\Windows\system32\Drivers\mup.sys
17:41:09.0843 3792 Mup - ok
17:41:09.0874 3792 [ E4EAF0C5C1B41B5C83386CF212CA9584 ] napagent C:\Windows\system32\qagentRT.dll
17:41:09.0890 3792 napagent - ok
17:41:09.0952 3792 [ 85C44FDFF9CF7E72A40DCB7EC06A4416 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
17:41:09.0968 3792 NativeWifiP - ok
17:41:09.0999 3792 [ 1357274D1883F68300AEADD15D7BBB42 ] NDIS C:\Windows\system32\drivers\ndis.sys
17:41:10.0014 3792 NDIS - ok
17:41:10.0030 3792 [ 0E186E90404980569FB449BA7519AE61 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
17:41:10.0046 3792 NdisTapi - ok
17:41:10.0061 3792 [ D6973AA34C4D5D76C0430B181C3CD389 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
17:41:10.0061 3792 Ndisuio - ok
17:41:10.0061 3792 [ 818F648618AE34F729FDB47EC68345C3 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
17:41:10.0077 3792 NdisWan - ok
17:41:10.0077 3792 [ 71DAB552B41936358F3B541AE5997FB3 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
17:41:10.0092 3792 NDProxy - ok
17:41:10.0108 3792 [ BCD093A5A6777CF626434568DC7DBA78 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
17:41:10.0108 3792 NetBIOS - ok
17:41:10.0139 3792 [ ECD64230A59CBD93C85F1CD1CAB9F3F6 ] netbt C:\Windows\system32\DRIVERS\netbt.sys
17:41:10.0155 3792 netbt - ok
17:41:10.0170 3792 [ A3E186B4B935905B829219502557314E ] Netlogon C:\Windows\system32\lsass.exe
17:41:10.0170 3792 Netlogon - ok
17:41:10.0202 3792 [ C8052711DAECC48B982434C5116CA401 ] Netman C:\Windows\System32\netman.dll
17:41:10.0217 3792 Netman - ok
17:41:10.0248 3792 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
17:41:10.0264 3792 NetMsmqActivator - ok
17:41:10.0264 3792 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetPipeActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
17:41:10.0280 3792 NetPipeActivator - ok
17:41:10.0295 3792 [ 2EF3BBE22E5A5ACD1428EE387A0D0172 ] netprofm C:\Windows\System32\netprofm.dll
17:41:10.0295 3792 netprofm - ok
17:41:10.0311 3792 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
17:41:10.0311 3792 NetTcpActivator - ok
17:41:10.0326 3792 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
17:41:10.0326 3792 NetTcpPortSharing - ok
17:41:10.0358 3792 [ 2E7FB731D4790A1BC6270ACCEFACB36E ] nfrd960 C:\Windows\system32\drivers\nfrd960.sys
17:41:10.0358 3792 nfrd960 - ok
17:41:10.0373 3792 [ 2997B15415F9BBE05B5A4C1C85E0C6A2 ] NlaSvc C:\Windows\System32\nlasvc.dll
17:41:10.0389 3792 NlaSvc - ok
17:41:10.0404 3792 [ D36F239D7CCE1931598E8FB90A0DBC26 ] Npfs C:\Windows\system32\drivers\Npfs.sys
17:41:10.0420 3792 Npfs - ok
17:41:10.0436 3792 [ 8BB86F0C7EEA2BDED6FE095D0B4CA9BD ] nsi C:\Windows\system32\nsisvc.dll
17:41:10.0436 3792 nsi - ok
17:41:10.0451 3792 [ 609773E344A97410CE4EBF74A8914FCF ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
17:41:10.0451 3792 nsiproxy - ok
17:41:10.0498 3792 [ 2C1121F2B87E9A6B12485DF53CD848C7 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
17:41:10.0529 3792 Ntfs - ok
17:41:10.0576 3792 [ 7F1C1F78D709C4A54CBB46EDE7E0B48D ] NTIDrvr C:\Windows\system32\DRIVERS\NTIDrvr.sys
17:41:10.0576 3792 NTIDrvr - ok
17:41:10.0592 3792 [ E875C093AEC0C978A90F30C9E0DFBB72 ] ntrigdigi C:\Windows\system32\drivers\ntrigdigi.sys
17:41:10.0592 3792 ntrigdigi - ok
17:41:10.0623 3792 [ C5DBBCDA07D780BDA9B685DF333BB41E ] Null C:\Windows\system32\drivers\Null.sys
17:41:10.0623 3792 Null - ok
17:41:10.0841 3792 [ B69E6F70CE1151C8D62ABC9DEF64DFBE ] nvlddmkm C:\Windows\system32\DRIVERS\nvlddmkm.sys
17:41:11.0060 3792 nvlddmkm - ok
17:41:11.0091 3792 [ E69E946F80C1C31C53003BFBF50CBB7C ] nvraid C:\Windows\system32\drivers\nvraid.sys
17:41:11.0091 3792 nvraid - ok
17:41:11.0106 3792 [ 9E0BA19A28C498A6D323D065DB76DFFC ] nvstor C:\Windows\system32\drivers\nvstor.sys
17:41:11.0106 3792 nvstor - ok
17:41:11.0122 3792 [ 4A9A6368BEF61C9608FE7CC21B1F8886 ] nvstor32 C:\Windows\system32\drivers\nvstor32.sys
17:41:11.0122 3792 nvstor32 - ok
17:41:11.0184 3792 [ E4284FCF99FEA13A7E1836F87AE356F6 ] nvsvc C:\Windows\system32\nvvsvc.exe
17:41:11.0184 3792 nvsvc - ok
17:41:11.0278 3792 [ 03E60E0BFA53ED15DC984FA34B44BB0F ] nvUpdatusService C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
17:41:11.0294 3792 nvUpdatusService - ok
17:41:11.0309 3792 [ 07C186427EB8FCC3D8D7927187F260F7 ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
17:41:11.0325 3792 nv_agp - ok
17:41:11.0325 3792 NwlnkFlt - ok
17:41:11.0340 3792 NwlnkFwd - ok
17:41:11.0372 3792 [ 6F310E890D46E246E0E261A63D9B36B4 ] ohci1394 C:\Windows\system32\DRIVERS\ohci1394.sys
17:41:11.0372 3792 ohci1394 - ok
17:41:11.0481 3792 [ 223653A726E8A9B7A78B6BF5F18055AA ] OODefragAgent C:\Program Files\OO Software\Defrag\oodag.exe
17:41:11.0528 3792 OODefragAgent - ok
17:41:11.0590 3792 [ 5A432A042DAE460ABE7199B758E8606C ] ose C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
17:41:11.0590 3792 ose - ok
17:41:11.0668 3792 [ 0C8E8E61AD1EB0B250B846712C917506 ] p2pimsvc C:\Windows\system32\p2psvc.dll
17:41:11.0668 3792 p2pimsvc - ok
17:41:11.0699 3792 [ 0C8E8E61AD1EB0B250B846712C917506 ] p2psvc C:\Windows\system32\p2psvc.dll
17:41:11.0699 3792 p2psvc - ok
17:41:11.0715 3792 [ 8A79FDF04A73428597E2CAF9D0D67850 ] Parport C:\Windows\system32\DRIVERS\parport.sys
17:41:11.0730 3792 Parport - ok
17:41:11.0746 3792 [ B9C2B89F08670E159F7181891E449CD9 ] partmgr C:\Windows\system32\drivers\partmgr.sys
17:41:11.0762 3792 partmgr - ok
17:41:11.0762 3792 [ 6C580025C81CAF3AE9E3617C22CAD00E ] Parvdm C:\Windows\system32\DRIVERS\parvdm.sys
17:41:11.0777 3792 Parvdm - ok
17:41:11.0793 3792 [ C6276AD11F4BB49B58AA1ED88537F14A ] PcaSvc C:\Windows\System32\pcasvc.dll
17:41:11.0793 3792 PcaSvc - ok
17:41:11.0824 3792 [ 941DC1D19E7E8620F40BBC206981EFDB ] pci C:\Windows\system32\drivers\pci.sys
17:41:11.0824 3792 pci - ok
17:41:11.0824 3792 [ 1636D43F10416AEB483BC6001097B26C ] pciide C:\Windows\system32\drivers\pciide.sys
17:41:11.0840 3792 pciide - ok
17:41:11.0855 3792 [ E6F3FB1B86AA519E7698AD05E58B04E5 ] pcmcia C:\Windows\system32\drivers\pcmcia.sys
17:41:11.0871 3792 pcmcia - ok
17:41:11.0918 3792 [ 6349F6ED9C623B44B52EA3C63C831A92 ] PEAUTH C:\Windows\system32\drivers\peauth.sys
17:41:11.0949 3792 PEAUTH - ok
17:41:12.0042 3792 [ B1689DF169143F57053F795390C99DB3 ] pla C:\Windows\system32\pla.dll
17:41:12.0074 3792 pla - ok
17:41:12.0105 3792 [ C5E7F8A996EC0A82D508FD9064A5569E ] PlugPlay C:\Windows\system32\umpnpmgr.dll
17:41:12.0120 3792 PlugPlay - ok
17:41:12.0152 3792 [ 205E1B699FD3F2F9B036EEA2EC30C620 ] PnkBstrA C:\Windows\system32\PnkBstrA.exe
17:41:12.0167 3792 PnkBstrA - ok
17:41:12.0198 3792 [ 0C8E8E61AD1EB0B250B846712C917506 ] PNRPAutoReg C:\Windows\system32\p2psvc.dll
17:41:12.0214 3792 PNRPAutoReg - ok
17:41:12.0230 3792 [ 0C8E8E61AD1EB0B250B846712C917506 ] PNRPsvc C:\Windows\system32\p2psvc.dll
17:41:12.0245 3792 PNRPsvc - ok
17:41:12.0276 3792 [ D0494460421A03CD5225CCA0059AA146 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
17:41:12.0292 3792 PolicyAgent - ok
17:41:12.0308 3792 [ ECFFFAEC0C1ECD8DBC77F39070EA1DB1 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
17:41:12.0323 3792 PptpMiniport - ok
17:41:12.0339 3792 [ 0E3CEF5D28B40CF273281D620C50700A ] Processor C:\Windows\system32\drivers\processr.sys
17:41:12.0339 3792 Processor - ok
17:41:12.0370 3792 [ 876462149CDD6120C365ACE93C8784E8 ] prodrv06 C:\Windows\System32\drivers\prodrv06.sys
17:41:12.0370 3792 prodrv06 - ok
17:41:12.0386 3792 [ 0508FAA222D28835310B7BFCA7A77346 ] ProfSvc C:\Windows\system32\profsvc.dll
17:41:12.0386 3792 ProfSvc - ok
17:41:12.0417 3792 [ 915DC37BCEA0697FEDB2EF66CE02DBEB ] prohlp02 C:\Windows\system32\drivers\prohlp02.sys
17:41:12.0432 3792 prohlp02 - ok
17:41:12.0432 3792 [ A3E186B4B935905B829219502557314E ] ProtectedStorage C:\Windows\system32\lsass.exe
17:41:12.0432 3792 ProtectedStorage - ok
17:41:12.0479 3792 [ 99514FAA8DF93D34B5589187DB3AA0BA ] PSched C:\Windows\system32\DRIVERS\pacer.sys
17:41:12.0479 3792 PSched - ok
17:41:12.0510 3792 [ E42E3433DBB4CFFE8FDD91EAB29AEA8E ] PxHelp20 C:\Windows\system32\Drivers\PxHelp20.sys
17:41:12.0510 3792 PxHelp20 - ok
17:41:12.0557 3792 [ CCDAC889326317792480C0A67156A1EC ] ql2300 C:\Windows\system32\drivers\ql2300.sys
17:41:12.0588 3792 ql2300 - ok
17:41:12.0604 3792 [ 81A7E5C076E59995D54BC1ED3A16E60B ] ql40xx C:\Windows\system32\drivers\ql40xx.sys
17:41:12.0604 3792 ql40xx - ok
17:41:12.0651 3792 [ E9ECAE663F47E6CB43962D18AB18890F ] QWAVE C:\Windows\system32\qwave.dll
17:41:12.0666 3792 QWAVE - ok
17:41:12.0682 3792 [ 9F5E0E1926014D17486901C88ECA2DB7 ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
17:41:12.0682 3792 QWAVEdrv - ok
17:41:12.0791 3792 [ DFCEC4A3A3D49BB15932460F3D4F6C55 ] R300 C:\Windows\system32\DRIVERS\atikmdag.sys
17:41:12.0932 3792 R300 - ok
17:41:12.0963 3792 [ 147D7F9C556D259924351FEB0DE606C3 ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
17:41:12.0994 3792 RasAcd - ok
17:41:13.0010 3792 [ F6A452EB4CEADBB51C9E0EE6B3ECEF0F ] RasAuto C:\Windows\System32\rasauto.dll
17:41:13.0010 3792 RasAuto - ok
17:41:13.0041 3792 [ A214ADBAF4CB47DD2728859EF31F26B0 ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
17:41:13.0041 3792 Rasl2tp - ok
17:41:13.0056 3792 [ 75D47445D70CA6F9F894B032FBC64FCF ] RasMan C:\Windows\System32\rasmans.dll
17:41:13.0072 3792 RasMan - ok
17:41:13.0088 3792 [ 509A98DD18AF4375E1FC40BC175F1DEF ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
17:41:13.0088 3792 RasPppoe - ok
17:41:13.0103 3792 [ 2005F4A1E05FA09389AC85840F0A9E4D ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
17:41:13.0103 3792 RasSstp - ok
17:41:13.0119 3792 [ B14C9D5B9ADD2F84F70570BBBFAA7935 ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
17:41:13.0134 3792 rdbss - ok
17:41:13.0150 3792 [ 89E59BE9A564262A3FB6C4F4F1CD9899 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
17:41:13.0150 3792 RDPCDD - ok
17:41:13.0197 3792 [ E8BD98D46F2ED77132BA927FCCB47D8B ] rdpdr C:\Windows\system32\drivers\rdpdr.sys
17:41:13.0197 3792 rdpdr - ok
17:41:13.0212 3792 [ 9D91FE5286F748862ECFFA05F8A0710C ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
17:41:13.0212 3792 RDPENCDD - ok
17:41:13.0259 3792 [ C127EBD5AFAB31524662C48DFCEB773A ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
17:41:13.0259 3792 RDPWD - ok
17:41:13.0306 3792 [ BCDD6B4804D06B1F7EBF29E53A57ECE9 ] RemoteAccess C:\Windows\System32\mprdim.dll
17:41:13.0322 3792 RemoteAccess - ok
17:41:13.0337 3792 [ 9E6894EA18DAFF37B63E1005F83AE4AB ] RemoteRegistry C:\Windows\system32\regsvc.dll
17:41:13.0353 3792 RemoteRegistry - ok
17:41:13.0384 3792 [ 5123F83CBC4349D065534EEB6BBDC42B ] RpcLocator C:\Windows\system32\locator.exe
17:41:13.0384 3792 RpcLocator - ok
17:41:13.0415 3792 [ 3B5B4D53FEC14F7476CA29A20CC31AC9 ] RpcSs C:\Windows\system32\rpcss.dll
17:41:13.0431 3792 RpcSs - ok
17:41:13.0462 3792 [ 9C508F4074A39E8B4B31D27198146FAD ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
17:41:13.0462 3792 rspndr - ok
17:41:13.0478 3792 [ A3E186B4B935905B829219502557314E ] SamSs C:\Windows\system32\lsass.exe
17:41:13.0478 3792 SamSs - ok
17:41:13.0509 3792 [ 3CE8F073A557E172B330109436984E30 ] sbp2port C:\Windows\system32\drivers\sbp2port.sys
17:41:13.0509 3792 sbp2port - ok
17:41:13.0540 3792 [ 77B7A11A0C3D78D3386398FBBEA1B632 ] SCardSvr C:\Windows\System32\SCardSvr.dll
17:41:13.0556 3792 SCardSvr - ok
17:41:13.0618 3792 [ 1A58069DB21D05EB2AB58EE5753EBE8D ] Schedule C:\Windows\system32\schedsvc.dll
17:41:13.0634 3792 Schedule - ok
17:41:13.0649 3792 [ 312EC3E37A0A1F2006534913E37B4423 ] SCPolicySvc C:\Windows\System32\certprop.dll
17:41:13.0649 3792 SCPolicySvc - ok
17:41:13.0665 3792 [ 716313D9F6B0529D03F726D5AAF6F191 ] SDRSVC C:\Windows\System32\SDRSVC.dll
17:41:13.0680 3792 SDRSVC - ok
17:41:13.0696 3792 [ 90A3935D05B494A5A39D37E71F09A677 ] secdrv C:\Windows\system32\drivers\secdrv.sys
17:41:13.0696 3792 secdrv - ok
17:41:13.0727 3792 [ FD5199D4D8A521005E4B5EE7FE00FA9B ] seclogon C:\Windows\system32\seclogon.dll
17:41:13.0727 3792 seclogon - ok
17:41:13.0743 3792 [ A9BBAB5759771E523F55563D6CBE140F ] SENS C:\Windows\system32\sens.dll
17:41:13.0743 3792 SENS - ok
17:41:13.0774 3792 [ CE9EC966638EF0B10B864DDEDF62A099 ] Serenum C:\Windows\system32\DRIVERS\serenum.sys
17:41:13.0774 3792 Serenum - ok
17:41:13.0805 3792 [ 6D663022DB3E7058907784AE14B69898 ] Serial C:\Windows\system32\DRIVERS\serial.sys
17:41:13.0805 3792 Serial - ok
17:41:13.0836 3792 [ 8AF3D28A879BF75DB53A0EE7A4289624 ] sermouse C:\Windows\system32\drivers\sermouse.sys
17:41:13.0836 3792 sermouse - ok
17:41:13.0852 3792 [ D2193326F729B163125610DBF3E17D57 ] SessionEnv C:\Windows\system32\sessenv.dll
17:41:13.0852 3792 SessionEnv - ok
17:41:13.0883 3792 [ 103B79418DA647736EE95645F305F68A ] sffdisk C:\Windows\system32\drivers\sffdisk.sys
17:41:13.0883 3792 sffdisk - ok
17:41:13.0899 3792 [ 8FD08A310645FE872EEEC6E08C6BF3EE ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys
17:41:13.0899 3792 sffp_mmc - ok
17:41:13.0914 3792 [ 9CFA05FCFCB7124E69CFC812B72F9614 ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys
17:41:13.0914 3792 sffp_sd - ok
17:41:13.0961 3792 [ 462AEE0EA0481EA8BD45CAC876A4CCC4 ] sfhlp01 C:\Windows\system32\drivers\sfhlp01.sys
17:41:13.0961 3792 sfhlp01 - ok
17:41:14.0024 3792 [ C33BFBD6E9E41FCD9FFEF9729E9FAED6 ] sfloppy C:\Windows\system32\DRIVERS\sfloppy.sys
17:41:14.0024 3792 sfloppy - ok
17:41:14.0055 3792 [ E1499BD0FF76B1B2FBBF1AF339D91165 ] SharedAccess C:\Windows\System32\ipnathlp.dll
17:41:14.0070 3792 SharedAccess - ok
17:41:14.0102 3792 [ C7230FBEE14437716701C15BE02C27B8 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
17:41:14.0117 3792 ShellHWDetection - ok
17:41:14.0148 3792 [ D2A595D6EEBEEAF4334F8E50EFBC9931 ] sisagp C:\Windows\system32\drivers\sisagp.sys
17:41:14.0148 3792 sisagp - ok
17:41:14.0164 3792 [ CEDD6F4E7D84E9F98B34B3FE988373AA ] SiSRaid2 C:\Windows\system32\drivers\sisraid2.sys
17:41:14.0180 3792 SiSRaid2 - ok
17:41:14.0195 3792 [ DF843C528C4F69D12CE41CE462E973A7 ] SiSRaid4 C:\Windows\system32\drivers\sisraid4.sys
17:41:14.0195 3792 SiSRaid4 - ok
17:41:14.0273 3792 [ F07AF60B152221472FBDB2FECEC4896D ] SkypeUpdate C:\Program Files\Skype\Updater\Updater.exe
17:41:14.0273 3792 SkypeUpdate - ok
17:41:14.0398 3792 [ 862BB4CBC05D80C5B45BE430E5EF872F ] slsvc C:\Windows\system32\SLsvc.exe
17:41:14.0429 3792 slsvc - ok
17:41:14.0476 3792 [ 6EDC422215CD78AA8A9CDE6B30ABBD35 ] SLUINotify C:\Windows\system32\SLUINotify.dll
17:41:14.0476 3792 SLUINotify - ok
17:41:14.0507 3792 [ 7B75299A4D201D6A6533603D6914AB04 ] Smb C:\Windows\system32\DRIVERS\smb.sys
17:41:14.0507 3792 Smb - ok
17:41:14.0538 3792 [ 2A146A055B4401C16EE62D18B8E2A032 ] SNMPTRAP C:\Windows\System32\snmptrap.exe
17:41:14.0554 3792 SNMPTRAP - ok
17:41:14.0570 3792 [ 7AEBDEEF071FE28B0EEF2CDD69102BFF ] spldr C:\Windows\system32\drivers\spldr.sys
17:41:14.0570 3792 spldr - ok
17:41:14.0616 3792 [ 8554097E5136C3BF9F69FE578A1B35F4 ] Spooler C:\Windows\System32\spoolsv.exe
17:41:14.0632 3792 Spooler - ok
17:41:14.0679 3792 [ CDDDEC541BC3C96F91ECB48759673505 ] sptd C:\Windows\system32\Drivers\sptd.sys
17:41:14.0679 3792 Suspicious file (NoAccess): C:\Windows\system32\Drivers\sptd.sys. md5: CDDDEC541BC3C96F91ECB48759673505
17:41:14.0679 3792 sptd ( LockedFile.Multi.Generic ) - warning
17:41:14.0679 3792 sptd - detected LockedFile.Multi.Generic (1)
17:41:14.0694 3792 SQLAgent$SONY_MEDIAMGR - ok
17:41:14.0726 3792 [ 41987F9FC0E61ADF54F581E15029AD91 ] srv C:\Windows\system32\DRIVERS\srv.sys
17:41:14.0741 3792 srv - ok
17:41:14.0757 3792 [ FF33AFF99564B1AA534F58868CBE41EF ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
17:41:14.0757 3792 srv2 - ok
17:41:14.0788 3792 [ 7605C0E1D01A08F3ECD743F38B834A44 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
17:41:14.0788 3792 srvnet - ok
17:41:14.0819 3792 [ 03D50B37234967433A5EA5BA72BC0B62 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
17:41:14.0835 3792 SSDPSRV - ok
17:41:14.0850 3792 [ 6F1A32E7B7B30F004D9A20AFADB14944 ] SstpSvc C:\Windows\system32\sstpsvc.dll
17:41:14.0850 3792 SstpSvc - ok
17:41:14.0882 3792 Steam Client Service - ok
17:41:14.0944 3792 [ 5A19667A580B1CE886EAF968B9743F45 ] Stereo Service C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
17:41:14.0944 3792 Stereo Service - ok
17:41:14.0975 3792 [ 5DE7D67E49B88F5F07F3E53C4B92A352 ] stisvc C:\Windows\System32\wiaservc.dll

17:41:15.0038 3792 stisvc - ok
17:41:15.0053 3792 [ 7BA58ECF0C0A9A69D44B3DCA62BECF56 ] swenum C:\Windows\system32\DRIVERS\swenum.sys
17:41:15.0053 3792 swenum - ok
17:41:15.0084 3792 [ F21FD248040681CCA1FB6C9A03AAA93D ] swprv C:\Windows\System32\swprv.dll
17:41:15.0100 3792 swprv - ok
17:41:15.0131 3792 [ 192AA3AC01DF071B541094F251DEED10 ] Symc8xx C:\Windows\system32\drivers\symc8xx.sys
17:41:15.0131 3792 Symc8xx - ok
17:41:15.0147 3792 [ 8C8EB8C76736EBAF3B13B633B2E64125 ] Sym_hi C:\Windows\system32\drivers\sym_hi.sys
17:41:15.0147 3792 Sym_hi - ok
17:41:15.0162 3792 [ 8072AF52B5FD103BBBA387A1E49F62CB ] Sym_u3 C:\Windows\system32\drivers\sym_u3.sys
17:41:15.0162 3792 Sym_u3 - ok
17:41:15.0209 3792 [ 9A51B04E9886AA4EE90093586B0BA88D ] SysMain C:\Windows\system32\sysmain.dll
17:41:15.0225 3792 SysMain - ok
17:41:15.0240 3792 [ 2DCA225EAE15F42C0933E998EE0231C3 ] TabletInputService C:\Windows\System32\TabSvc.dll
17:41:15.0256 3792 TabletInputService - ok
17:41:15.0287 3792 [ D7673E4B38CE21EE54C59EEEB65E2483 ] TapiSrv C:\Windows\System32\tapisrv.dll
17:41:15.0303 3792 TapiSrv - ok
17:41:15.0318 3792 [ CB05822CD9CC6C688168E113C603DBE7 ] TBS C:\Windows\System32\tbssvc.dll
17:41:15.0318 3792 TBS - ok
17:41:15.0365 3792 [ 548E198BAE21EFC21F8B5F0C1728AD27 ] Tcpip C:\Windows\system32\drivers\tcpip.sys
17:41:15.0396 3792 Tcpip - ok
17:41:15.0428 3792 [ 548E198BAE21EFC21F8B5F0C1728AD27 ] Tcpip6 C:\Windows\system32\DRIVERS\tcpip.sys
17:41:15.0428 3792 Tcpip6 - ok
17:41:15.0474 3792 [ 608C345A255D82A6289C2D468EB41FD7 ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
17:41:15.0474 3792 tcpipreg - ok
17:41:15.0490 3792 [ 5DCF5E267BE67A1AE926F2DF77FBCC56 ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
17:41:15.0506 3792 TDPIPE - ok
17:41:15.0521 3792 [ 389C63E32B3CEFED425B61ED92D3F021 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
17:41:15.0521 3792 TDTCP - ok
17:41:15.0537 3792 [ 76B06EB8A01FC8624D699E7045303E54 ] tdx C:\Windows\system32\DRIVERS\tdx.sys
17:41:15.0537 3792 tdx - ok
17:41:15.0552 3792 [ 3CAD38910468EAB9A6479E2F01DB43C7 ] TermDD C:\Windows\system32\DRIVERS\termdd.sys
17:41:15.0552 3792 TermDD - ok
17:41:15.0584 3792 [ BB95DA09BEF6E7A131BFF3BA5032090D ] TermService C:\Windows\System32\termsrv.dll
17:41:15.0599 3792 TermService - ok
17:41:15.0615 3792 [ C7230FBEE14437716701C15BE02C27B8 ] Themes C:\Windows\system32\shsvcs.dll
17:41:15.0615 3792 Themes - ok
17:41:15.0630 3792 [ 1076FFCFFAAE8385FD62DFCB25AC4708 ] THREADORDER C:\Windows\system32\mmcss.dll
17:41:15.0630 3792 THREADORDER - ok
17:41:15.0662 3792 TOSHIBA Bluetooth Service - ok
17:41:15.0677 3792 Tosrfcom - ok
17:41:15.0708 3792 [ EC74E77D0EB004BD3A809B5F8FB8C2CE ] TrkWks C:\Windows\System32\trkwks.dll
17:41:15.0724 3792 TrkWks - ok
17:41:15.0755 3792 [ 97D9D6A04E3AD9B6C626B9931DB78DBA ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
17:41:15.0755 3792 TrustedInstaller - ok
17:41:15.0786 3792 [ DCF0F056A2E4F52287264F5AB29CF206 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
17:41:15.0786 3792 tssecsrv - ok
17:41:15.0833 3792 [ CAECC0120AC49E3D2F758B9169872D38 ] tunmp C:\Windows\system32\DRIVERS\tunmp.sys
17:41:15.0833 3792 tunmp - ok
17:41:15.0849 3792 [ 300DB877AC094FEAB0BE7688C3454A9C ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
17:41:15.0849 3792 tunnel - ok
17:41:15.0880 3792 [ C3ADE15414120033A36C0F293D4A4121 ] uagp35 C:\Windows\system32\drivers\uagp35.sys
17:41:15.0880 3792 uagp35 - ok
17:41:15.0896 3792 [ D9728AF68C4C7693CB100B8441CBDEC6 ] udfs C:\Windows\system32\DRIVERS\udfs.sys
17:41:15.0896 3792 udfs - ok
17:41:15.0942 3792 [ ECEF404F62863755951E09C802C94AD5 ] UI0Detect C:\Windows\system32\UI0Detect.exe
17:41:15.0942 3792 UI0Detect - ok
17:41:15.0958 3792 [ 75E6890EBFCE0841D3291B02E7A8BDB0 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys
17:41:15.0958 3792 uliagpkx - ok
17:41:15.0974 3792 [ 3CD4EA35A6221B85DCC25DAA46313F8D ] uliahci C:\Windows\system32\drivers\uliahci.sys
17:41:15.0974 3792 uliahci - ok
17:41:16.0005 3792 [ 8514D0E5CD0534467C5FC61BE94A569F ] UlSata C:\Windows\system32\drivers\ulsata.sys
17:41:16.0036 3792 UlSata - ok
17:41:16.0052 3792 [ 38C3C6E62B157A6BC46594FADA45C62B ] ulsata2 C:\Windows\system32\drivers\ulsata2.sys
17:41:16.0052 3792 ulsata2 - ok
17:41:16.0067 3792 [ 32CFF9F809AE9AED85464492BF3E32D2 ] umbus C:\Windows\system32\DRIVERS\umbus.sys
17:41:16.0067 3792 umbus - ok
17:41:16.0098 3792 [ 68308183F4AE0BE7BF8ECD07CB297999 ] upnphost C:\Windows\System32\upnphost.dll
17:41:16.0114 3792 upnphost - ok
17:41:16.0145 3792 [ 0916972FB98080355AC1E9A4F92183F7 ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys
17:41:16.0145 3792 usbccgp - ok
17:41:16.0161 3792 [ E9476E6C486E76BC4898074768FB7131 ] usbcir C:\Windows\system32\drivers\usbcir.sys
17:41:16.0161 3792 usbcir - ok
17:41:16.0223 3792 [ 79E96C23A97CE7B8F14D310DA2DB0C9B ] usbehci C:\Windows\system32\DRIVERS\usbehci.sys
17:41:16.0223 3792 usbehci - ok
17:41:16.0254 3792 [ 4673BBCB006AF60E7ABDDBE7A130BA42 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys
17:41:16.0254 3792 usbhub - ok
17:41:16.0270 3792 [ CE697FEE0D479290D89BEC80DFE793B7 ] usbohci C:\Windows\system32\DRIVERS\usbohci.sys
17:41:16.0270 3792 usbohci - ok
17:41:16.0286 3792 [ B51E52ACF758BE00EF3A58EA452FE360 ] usbprint C:\Windows\system32\drivers\usbprint.sys
17:41:16.0286 3792 usbprint - ok
17:41:16.0301 3792 [ BE3DA31C191BC222D9AD503C5224F2AD ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
17:41:16.0301 3792 USBSTOR - ok
17:41:16.0317 3792 [ 325DBBACB8A36AF9988CCF40EAC228CC ] usbuhci C:\Windows\system32\DRIVERS\usbuhci.sys
17:41:16.0317 3792 usbuhci - ok
17:41:16.0348 3792 [ 1509E705F3AC1D474C92454A5C2DD81F ] UxSms C:\Windows\System32\uxsms.dll
17:41:16.0348 3792 UxSms - ok
17:41:16.0364 3792 VClone - ok
17:41:16.0410 3792 [ CD88D1B7776DC17A119049742EC07EB4 ] vds C:\Windows\System32\vds.exe
17:41:16.0426 3792 vds - ok
17:41:16.0473 3792 [ 87B06E1F30B749A114F74622D013F8D4 ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
17:41:16.0473 3792 vga - ok
17:41:16.0488 3792 [ 2E93AC0A1D8C79D019DB6C51F036636C ] VgaSave C:\Windows\System32\drivers\vga.sys
17:41:16.0488 3792 VgaSave - ok
17:41:16.0520 3792 [ 045D9961E591CF0674A920B6BA3BA5CB ] viaagp C:\Windows\system32\drivers\viaagp.sys
17:41:16.0520 3792 viaagp - ok
17:41:16.0535 3792 [ 56A4DE5F02F2E88182B0981119B4DD98 ] ViaC7 C:\Windows\system32\drivers\viac7.sys
17:41:16.0535 3792 ViaC7 - ok
17:41:16.0551 3792 [ FD2E3175FCADA350C7AB4521DCA187EC ] viaide C:\Windows\system32\drivers\viaide.sys
17:41:16.0551 3792 viaide - ok
17:41:16.0566 3792 [ 69503668AC66C77C6CD7AF86FBDF8C43 ] volmgr C:\Windows\system32\drivers\volmgr.sys
17:41:16.0582 3792 volmgr - ok
17:41:16.0598 3792 [ 23E41B834759917BFD6B9A0D625D0C28 ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
17:41:16.0598 3792 volmgrx - ok
17:41:16.0644 3792 [ 786DB5771F05EF300390399F626BF30A ] volsnap C:\Windows\system32\drivers\volsnap.sys
17:41:16.0644 3792 volsnap - ok
17:41:16.0691 3792 [ D984439746D42B30FC65A4C3546C6829 ] vsmraid C:\Windows\system32\drivers\vsmraid.sys
17:41:16.0691 3792 vsmraid - ok
17:41:16.0754 3792 [ DB3D19F850C6EB32BDCB9BC0836ACDDB ] VSS C:\Windows\system32\vssvc.exe
17:41:16.0800 3792 VSS - ok
17:41:16.0800 3792 vToolbarUpdater13.2.0 - ok
17:41:16.0832 3792 [ 96EA68B9EB310A69C25EBB0282B2B9DE ] W32Time C:\Windows\system32\w32time.dll
17:41:16.0847 3792 W32Time - ok
17:41:16.0863 3792 [ 48DFEE8F1AF7C8235D4E626F0C4FE031 ] WacomPen C:\Windows\system32\drivers\wacompen.sys
17:41:16.0863 3792 WacomPen - ok
17:41:16.0894 3792 [ 55201897378CCA7AF8B5EFD874374A26 ] Wanarp C:\Windows\system32\DRIVERS\wanarp.sys
17:41:16.0910 3792 Wanarp - ok
17:41:16.0910 3792 [ 55201897378CCA7AF8B5EFD874374A26 ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
17:41:16.0925 3792 Wanarpv6 - ok
17:41:16.0941 3792 [ A3CD60FD826381B49F03832590E069AF ] wcncsvc C:\Windows\System32\wcncsvc.dll
17:41:16.0956 3792 wcncsvc - ok
17:41:16.0988 3792 [ 11BCB7AFCDD7AADACB5746F544D3A9C7 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
17:41:16.0988 3792 WcsPlugInService - ok
17:41:17.0003 3792 [ AFC5AD65B991C1E205CF25CFDBF7A6F4 ] Wd C:\Windows\system32\drivers\wd.sys
17:41:17.0003 3792 Wd - ok
17:41:17.0066 3792 [ A840213F1ACDCC175B4D1D5AAEAC0D7A ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
17:41:17.0081 3792 Wdf01000 - ok
17:41:17.0097 3792 [ ABFC76B48BB6C96E3338D8943C5D93B5 ] WdiServiceHost C:\Windows\system32\wdi.dll
17:41:17.0112 3792 WdiServiceHost - ok
17:41:17.0128 3792 [ ABFC76B48BB6C96E3338D8943C5D93B5 ] WdiSystemHost C:\Windows\system32\wdi.dll
17:41:17.0128 3792 WdiSystemHost - ok
17:41:17.0159 3792 [ 04C37D8107320312FBAE09926103D5E2 ] WebClient C:\Windows\System32\webclnt.dll
17:41:17.0175 3792 WebClient - ok
17:41:17.0206 3792 [ AE3736E7E8892241C23E4EBBB7453B60 ] Wecsvc C:\Windows\system32\wecsvc.dll
17:41:17.0206 3792 Wecsvc - ok
17:41:17.0222 3792 [ 670FF720071ED741206D69BD995EA453 ] wercplsupport C:\Windows\System32\wercplsupport.dll
17:41:17.0222 3792 wercplsupport - ok
17:41:17.0253 3792 [ 32B88481D3B326DA6DEB07B1D03481E7 ] WerSvc C:\Windows\System32\WerSvc.dll
17:41:17.0268 3792 WerSvc - ok
17:41:17.0315 3792 [ 4575AA12561C5648483403541D0D7F2B ] WinDefend C:\Program Files\Windows Defender\mpsvc.dll
17:41:17.0315 3792 WinDefend - ok
17:41:17.0331 3792 WinHttpAutoProxySvc - ok
17:41:17.0362 3792 [ 6B2A1D0E80110E3D04E6863C6E62FD8A ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
17:41:17.0378 3792 Winmgmt - ok
17:41:17.0440 3792 [ 7CFE68BDC065E55AA5E8421607037511 ] WinRM C:\Windows\system32\WsmSvc.dll
17:41:17.0471 3792 WinRM - ok
17:41:17.0518 3792 [ C008405E4FEEB069E30DA1D823910234 ] Wlansvc C:\Windows\System32\wlansvc.dll
17:41:17.0534 3792 Wlansvc - ok
17:41:17.0643 3792 [ 5144AE67D60EC653F97DDF3FEED29E77 ] wlidsvc C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
17:41:17.0705 3792 wlidsvc - ok
17:41:17.0736 3792 [ 701A9F884A294327E9141D73746EE279 ] WmiAcpi C:\Windows\system32\drivers\wmiacpi.sys
17:41:17.0736 3792 WmiAcpi - ok
17:41:17.0768 3792 [ 43BE3875207DCB62A85C8C49970B66CC ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
17:41:17.0783 3792 wmiApSrv - ok
17:41:17.0846 3792 [ 3978704576A121A9204F8CC49A301A9B ] WMPNetworkSvc C:\Program Files\Windows Media Player\wmpnetwk.exe
17:41:17.0877 3792 WMPNetworkSvc - ok
17:41:17.0892 3792 [ CFC5A04558F5070CEE3E3A7809F3FF52 ] WPCSvc C:\Windows\System32\wpcsvc.dll
17:41:17.0908 3792 WPCSvc - ok
17:41:17.0924 3792 [ 801FBDB89D472B3C467EB112A0FC9246 ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
17:41:17.0955 3792 WPDBusEnum - ok
17:41:18.0017 3792 [ DCF3E3EDF5109EE8BC02FE6E1F045795 ] WPFFontCache_v0400 C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
17:41:18.0064 3792 WPFFontCache_v0400 - ok
17:41:18.0095 3792 [ E3A3CB253C0EC2494D4A61F5E43A389C ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
17:41:18.0095 3792 ws2ifsl - ok
17:41:18.0126 3792 [ 1CA6C40261DDC0425987980D0CD2AAAB ] wscsvc C:\Windows\system32\wscsvc.dll
17:41:18.0126 3792 wscsvc - ok
17:41:18.0142 3792 WSearch - ok
17:41:18.0220 3792 [ FC3EC24FCE372C89423E015A2AC1A31E ] wuauserv C:\Windows\system32\wuaueng.dll
17:41:18.0282 3792 wuauserv - ok
17:41:18.0407 3792 [ 06E6F32C8D0A3F66D956F57B43A2E070 ] WudfPf C:\Windows\system32\drivers\WudfPf.sys
17:41:18.0407 3792 WudfPf - ok
17:41:18.0438 3792 [ 867C301E8B790040AE9CF6486E8041DF ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys
17:41:18.0438 3792 WUDFRd - ok
17:41:18.0454 3792 [ FE47B7BC8EA320C2D9B5E5BF6E303765 ] wudfsvc C:\Windows\System32\WUDFSvc.dll
17:41:18.0454 3792 wudfsvc - ok
17:41:18.0516 3792 [ BFAB14D10543963DBDA7128ADABFA51D ] yukonwlh C:\Windows\system32\DRIVERS\yk60x86.sys
17:41:18.0516 3792 yukonwlh - ok
17:41:18.0532 3792 ================ Scan global ===============================
17:41:18.0563 3792 [ F31EEBC1A1C81FD04005489CC3DCDFE7 ] C:\Windows\system32\basesrv.dll
17:41:18.0594 3792 [ A508314231C49AEE86987CEA3EAECAD1 ] C:\Windows\system32\winsrv.dll
17:41:18.0626 3792 [ A508314231C49AEE86987CEA3EAECAD1 ] C:\Windows\system32\winsrv.dll
17:41:18.0672 3792 [ D4E6D91C1349B7BFB3599A6ADA56851B ] C:\Windows\system32\services.exe
17:41:18.0688 3792 [Global] - ok
17:41:18.0688 3792 ================ Scan MBR ==================================
17:41:18.0704 3792 [ A863475757CC50891AA8458C415E4B25 ] \Device\Harddisk0\DR0
17:41:21.0278 3792 \Device\Harddisk0\DR0 - ok
17:41:21.0278 3792 ================ Scan VBR ==================================
17:41:21.0278 3792 [ 3482BDEFDEA2AC160BD8A30537E9EE8E ] \Device\Harddisk0\DR0\Partition1
17:41:21.0278 3792 \Device\Harddisk0\DR0\Partition1 - ok
17:41:21.0309 3792 [ 9C69C158B023661AF22683B65C350292 ] \Device\Harddisk0\DR0\Partition2
17:41:21.0309 3792 \Device\Harddisk0\DR0\Partition2 - ok
17:41:21.0309 3792 ============================================================
17:41:21.0309 3792 Scan finished
17:41:21.0309 3792 ============================================================
17:41:21.0324 0604 Detected object count: 1
17:41:21.0324 0604 Actual detected object count: 1
17:42:58.0575 0604 sptd ( LockedFile.Multi.Generic ) - skipped by user
17:42:58.0575 0604 sptd ( LockedFile.Multi.Generic ) - User select action: Skip
17:43:07.0670 3144 ============================================================
17:43:07.0670 3144 Scan started
17:43:07.0670 3144 Mode: Manual;
17:43:07.0670 3144 ============================================================
17:43:07.0935 3144 ================ Scan system memory ========================
17:43:07.0935 3144 System memory - ok
17:43:07.0935 3144 ================ Scan services =============================
17:43:08.0106 3144 [ 82B296AE1892FE3DBEE00C9CF92F8AC7 ] ACPI C:\Windows\system32\drivers\acpi.sys
17:43:08.0106 3144 ACPI - ok
17:43:08.0184 3144 [ ADDA5E1951B90D3D23C56D3CF0622ADC ] AdobeARMservice C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
17:43:08.0184 3144 AdobeARMservice - ok
17:43:08.0231 3144 [ 9915504F602D277EE47FD843A677FD15 ] AdobeFlashPlayerUpdateSvc C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
17:43:08.0247 3144 AdobeFlashPlayerUpdateSvc - ok
17:43:08.0278 3144 [ 2EDC5BBAC6C651ECE337BDE8ED97C9FB ] adp94xx C:\Windows\system32\drivers\adp94xx.sys
17:43:08.0278 3144 adp94xx - ok
17:43:08.0294 3144 [ B84088CA3CDCA97DA44A984C6CE1CCAD ] adpahci C:\Windows\system32\drivers\adpahci.sys
17:43:08.0294 3144 adpahci - ok
17:43:08.0325 3144 [ 7880C67BCCC27C86FD05AA2AFB5EA469 ] adpu160m C:\Windows\system32\drivers\adpu160m.sys
17:43:08.0325 3144 adpu160m - ok
17:43:08.0340 3144 [ 9AE713F8E30EFC2ABCCD84904333DF4D ] adpu320 C:\Windows\system32\drivers\adpu320.sys
17:43:08.0356 3144 adpu320 - ok
17:43:08.0372 3144 [ 9D1FDA9E086BA64E3C93C9DE32461BCF ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
17:43:08.0372 3144 AeLookupSvc - ok
17:43:08.0418 3144 [ 3911B972B55FEA0478476B2E777B29FA ] AFD C:\Windows\system32\drivers\afd.sys
17:43:08.0418 3144 AFD - ok
17:43:08.0434 3144 [ EF23439CDD587F64C2C1B8825CEAD7D8 ] agp440 C:\Windows\system32\drivers\agp440.sys
17:43:08.0450 3144 agp440 - ok
17:43:08.0496 3144 [ AE1FDF7BF7BB6C6A70F67699D880592A ] aic78xx C:\Windows\system32\drivers\djsvs.sys
17:43:08.0496 3144 aic78xx - ok
17:43:08.0512 3144 [ A1545B731579895D8CC44FC0481C1192 ] ALG C:\Windows\System32\alg.exe
17:43:08.0512 3144 ALG - ok
17:43:08.0528 3144 [ 90395B64600EBB4552E26E178C94B2E4 ] aliide C:\Windows\system32\drivers\aliide.sys
17:43:08.0528 3144 aliide - ok
17:43:08.0559 3144 [ 2B13E304C9DFDFA5EB582F6A149FA2C7 ] amdagp C:\Windows\system32\drivers\amdagp.sys
17:43:08.0559 3144 amdagp - ok
17:43:08.0574 3144 [ 0577DF1D323FE75A739C787893D300EA ] amdide C:\Windows\system32\drivers\amdide.sys
17:43:08.0574 3144 amdide - ok
17:43:08.0590 3144 [ DC487885BCEF9F28EECE6FAC0E5DDFC5 ] AmdK7 C:\Windows\system32\drivers\amdk7.sys
17:43:08.0590 3144 AmdK7 - ok
17:43:08.0606 3144 [ 93AE7F7DD54AB986A6F1A1B37BE7442D ] AmdK8 C:\Windows\system32\DRIVERS\amdk8.sys
17:43:08.0606 3144 AmdK8 - ok
17:43:08.0637 3144 [ AD8FA28D8ED0D0A689A0559085CE0F18 ] AmdLLD C:\Windows\system32\DRIVERS\AmdLLD.sys
17:43:08.0637 3144 AmdLLD - ok
17:43:08.0652 3144 [ C6D704C7F0434DC791AAC37CAC4B6E14 ] Appinfo C:\Windows\System32\appinfo.dll
17:43:08.0652 3144 Appinfo - ok
17:43:08.0684 3144 [ 5F673180268BB1FDB69C99B6619FE379 ] arc C:\Windows\system32\drivers\arc.sys
17:43:08.0684 3144 arc - ok
17:43:08.0715 3144 [ 957F7540B5E7F602E44648C7DE5A1C05 ] arcsas C:\Windows\system32\drivers\arcsas.sys
17:43:08.0715 3144 arcsas - ok
17:43:08.0793 3144 [ 776ACEFA0CA9DF0FAA51A5FB2F435705 ] aspnet_state C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe
17:43:08.0793 3144 aspnet_state - ok
17:43:08.0824 3144 [ 4AF5F360BA1E8794D32B366E45A64A0A ] aswFsBlk C:\Windows\system32\drivers\aswFsBlk.sys
17:43:08.0824 3144 aswFsBlk - ok
17:43:08.0855 3144 [ 1F7094D4268D46F718C51286DC189791 ] aswMonFlt C:\Windows\system32\drivers\aswMonFlt.sys
17:43:08.0855 3144 aswMonFlt - ok
17:43:08.0886 3144 [ 7B43265F92257A21CBFD88E7A651044C ] AswRdr C:\Windows\system32\drivers\AswRdr.sys
17:43:08.0886 3144 AswRdr - ok
17:43:08.0886 3144 [ B680134BA1813B78B47FDD1DFF223CA5 ] aswRvrt C:\Windows\system32\drivers\aswRvrt.sys
17:43:08.0902 3144 aswRvrt - ok
17:43:08.0933 3144 [ CCD565A8A72AF7D45F9A242013870926 ] aswSnx C:\Windows\system32\drivers\aswSnx.sys
17:43:08.0949 3144 aswSnx - ok
17:43:08.0964 3144 [ 937300BC7C4CDF7576BCCE44E19BBB9D ] aswSP C:\Windows\system32\drivers\aswSP.sys
17:43:08.0964 3144 aswSP - ok
17:43:08.0980 3144 [ 1F71F170D90E42EFDE9633D81D5E12DC ] aswTdi C:\Windows\system32\drivers\aswTdi.sys
17:43:08.0980 3144 aswTdi - ok
17:43:09.0011 3144 [ 8CFAA2B965773A653F48F1207A9CB9C4 ] aswVmm C:\Windows\system32\drivers\aswVmm.sys
17:43:09.0011 3144 aswVmm - ok
17:43:09.0042 3144 [ 53B202ABEE6455406254444303E87BE1 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
17:43:09.0042 3144 AsyncMac - ok
17:43:09.0074 3144 [ 1F05B78AB91C9075565A9D8A4B880BC4 ] atapi C:\Windows\system32\drivers\atapi.sys
17:43:09.0074 3144 atapi - ok
17:43:09.0120 3144 [ 2A5E4F4C40E1394F213DB1027507D5FE ] Ati External Event Utility C:\Windows\system32\Ati2evxx.exe
17:43:09.0120 3144 Ati External Event Utility - ok
17:43:09.0167 3144 [ F0D933B42CD0594048E4D5200AE9E417 ] atksgt C:\Windows\system32\DRIVERS\atksgt.sys
17:43:09.0167 3144 atksgt - ok
17:43:09.0214 3144 [ 68E2A1A0407A66CF50DA0300852424AB ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
17:43:09.0214 3144 AudioEndpointBuilder - ok
17:43:09.0230 3144 [ 68E2A1A0407A66CF50DA0300852424AB ] Audiosrv C:\Windows\System32\Audiosrv.dll
17:43:09.0230 3144 Audiosrv - ok
17:43:09.0308 3144 [ 28D6701C710AD7BA3CB95E75F8F1A9AA ] avast! Antivirus C:\Program Files\AVAST Software\Avast\AvastSvc.exe
17:43:09.0308 3144 avast! Antivirus - ok
17:43:09.0464 3144 [ 57D83B82117C2DDB9D7E9AEA691CEDFC ] avgtp C:\Windows\system32\drivers\avgtpx86.sys
17:43:09.0464 3144 avgtp - ok
17:43:09.0495 3144 [ 67E506B75BD5326A3EC7B70BD014DFB6 ] Beep C:\Windows\system32\drivers\Beep.sys
17:43:09.0495 3144 Beep - ok
17:43:09.0542 3144 [ C789AF0F724FDA5852FB9A7D3A432381 ] BFE C:\Windows\System32\bfe.dll
17:43:09.0542 3144 BFE - ok
17:43:09.0588 3144 [ 93952506C6D67330367F7E7934B6A02F ] BITS C:\Windows\System32\qmgr.dll
17:43:09.0604 3144 BITS - ok
17:43:09.0604 3144 blbdrive - ok
17:43:09.0651 3144 [ 73686FE0B2E0469F89FD2075BE724704 ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe
17:43:09.0651 3144 Bonjour Service - ok
17:43:09.0666 3144 [ 35F376253F687BDE63976CCB3F2108CA ] bowser C:\Windows\system32\DRIVERS\bowser.sys
17:43:09.0682 3144 bowser - ok
17:43:09.0713 3144 [ 9F9ACC7F7CCDE8A15C282D3F88B43309 ] BrFiltLo C:\Windows\system32\drivers\brfiltlo.sys
17:43:09.0713 3144 BrFiltLo - ok
17:43:09.0729 3144 [ 56801AD62213A41F6497F96DEE83755A ] BrFiltUp C:\Windows\system32\drivers\brfiltup.sys
17:43:09.0729 3144 BrFiltUp - ok
17:43:09.0729 3144 [ A3629A0C4226F9E9C72FAAEEBC3AD33C ] Browser C:\Windows\System32\browser.dll
17:43:09.0744 3144 Browser - ok
17:43:09.0760 3144 [ B304E75CFF293029EDDF094246747113 ] Brserid C:\Windows\system32\drivers\brserid.sys
17:43:09.0760 3144 Brserid - ok
17:43:09.0776 3144 [ 203F0B1E73ADADBBB7B7B1FABD901F6B ] BrSerWdm C:\Windows\system32\drivers\brserwdm.sys
17:43:09.0776 3144 BrSerWdm - ok
17:43:09.0807 3144 [ BD456606156BA17E60A04E18016AE54B ] BrUsbMdm C:\Windows\system32\drivers\brusbmdm.sys
17:43:09.0807 3144 BrUsbMdm - ok
17:43:09.0807 3144 [ AF72ED54503F717A43268B3CC5FAEC2E ] BrUsbSer C:\Windows\system32\drivers\brusbser.sys
17:43:09.0807 3144 BrUsbSer - ok
17:43:09.0822 3144 [ AD07C1EC6665B8B35741AB91200C6B68 ] BTHMODEM C:\Windows\system32\drivers\bthmodem.sys
17:43:09.0822 3144 BTHMODEM - ok
17:43:09.0978 3144 catchme - ok
17:43:09.0994 3144 [ 7ADD03E75BEB9E6DD102C3081D29840A ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
17:43:09.0994 3144 cdfs - ok
17:43:10.0025 3144 [ 6B4BFFB9BECD728097024276430DB314 ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys
17:43:10.0025 3144 cdrom - ok
17:43:10.0072 3144 [ 312EC3E37A0A1F2006534913E37B4423 ] CertPropSvc C:\Windows\System32\certprop.dll
17:43:10.0072 3144 CertPropSvc - ok
17:43:10.0088 3144 [ DA8E0AFC7BAA226C538EF53AC2F90897 ] circlass C:\Windows\system32\drivers\circlass.sys
17:43:10.0103 3144 circlass - ok
17:43:10.0134 3144 [ D7659D3B5B92C31E84E53C1431F35132 ] CLFS C:\Windows\system32\CLFS.sys
17:43:10.0134 3144 CLFS - ok
17:43:10.0197 3144 [ 8EE772032E2FE80A924F3B8DD5082194 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
17:43:10.0197 3144 clr_optimization_v2.0.50727_32 - ok
17:43:10.0228 3144 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
17:43:10.0228 3144 clr_optimization_v4.0.30319_32 - ok
17:43:10.0228 3144 CLTNetCnService - ok
17:43:10.0259 3144 [ 45201046C776FFDAF3FC8A0029C581C8 ] cmdide C:\Windows\system32\drivers\cmdide.sys
17:43:10.0259 3144 cmdide - ok
17:43:10.0275 3144 [ 82B8C91D327CFECF76CB58716F7D4997 ] Compbatt C:\Windows\system32\drivers\compbatt.sys
17:43:10.0275 3144 Compbatt - ok
17:43:10.0290 3144 COMSysApp - ok
17:43:10.0306 3144 [ 2A213AE086BBEC5E937553C7D9A2B22C ] crcdisk C:\Windows\system32\drivers\crcdisk.sys
17:43:10.0306 3144 crcdisk - ok
17:43:10.0322 3144 [ 22A7F883508176489F559EE745B5BF5D ] Crusoe C:\Windows\system32\drivers\crusoe.sys
17:43:10.0322 3144 Crusoe - ok
17:43:10.0368 3144 [ 3EDE4C1F9672C972479201544969ADCB ] CryptSvc C:\Windows\system32\cryptsvc.dll
17:43:10.0368 3144 CryptSvc - ok
17:43:10.0415 3144 [ 3B5B4D53FEC14F7476CA29A20CC31AC9 ] DcomLaunch C:\Windows\system32\rpcss.dll
17:43:10.0431 3144 DcomLaunch - ok
17:43:10.0431 3144 [ 622C41A07CA7E6DD91770F50D532CB6C ] DfsC C:\Windows\system32\Drivers\dfsc.sys
17:43:10.0431 3144 DfsC - ok
17:43:10.0556 3144 [ 2CC3DCFB533A1035B13DCAB6160AB38B ] DFSR C:\Windows\system32\DFSR.exe
17:43:10.0571 3144 DFSR - ok
17:43:10.0602 3144 [ 9028559C132146FB75EB7ACF384B086A ] Dhcp C:\Windows\System32\dhcpcsvc.dll
17:43:10.0618 3144 Dhcp - ok
17:43:10.0634 3144 [ 5D4AEFC3386920236A548271F8F1AF6A ] disk C:\Windows\system32\drivers\disk.sys
17:43:10.0634 3144 disk - ok
17:43:10.0665 3144 [ 57D762F6F5974AF0DA2BE88A3349BAAA ] Dnscache C:\Windows\System32\dnsrslvr.dll
17:43:10.0665 3144 Dnscache - ok
17:43:10.0712 3144 [ 324FD74686B1EF5E7C19A8AF49E748F6 ] dot3svc C:\Windows\System32\dot3svc.dll
17:43:10.0712 3144 dot3svc - ok
17:43:10.0727 3144 [ A622E888F8AA2F6B49E9BC466F0E5DEF ] DPS C:\Windows\system32\dps.dll
17:43:10.0727 3144 DPS - ok
17:43:10.0758 3144 [ 97FEF831AB90BEE128C9AF390E243F80 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
17:43:10.0758 3144 drmkaud - ok
17:43:10.0790 3144 [ 555E54AC2F601A8821CEF58961653991 ] dtsoftbus01 C:\Windows\system32\DRIVERS\dtsoftbus01.sys
17:43:10.0790 3144 dtsoftbus01 - ok
17:43:10.0821 3144 [ 28CD50265B55F5F8B4432450D021446E ] DwProt C:\Windows\system32\drivers\dwprot.sys
17:43:10.0821 3144 DwProt - ok
17:43:10.0883 3144 [ 5DE0FAEC9E5D1AAE74F8568897891A01 ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
17:43:10.0883 3144 DXGKrnl - ok
17:43:10.0930 3144 [ F88FB26547FD2CE6D0A5AF2985892C48 ] E1G60 C:\Windows\system32\DRIVERS\E1G60I32.sys
17:43:10.0930 3144 E1G60 - ok
17:43:10.0961 3144 [ C0B95E40D85CD807D614E264248A45B9 ] EapHost C:\Windows\System32\eapsvc.dll
17:43:10.0961 3144 EapHost - ok
17:43:10.0992 3144 [ 7F64EA048DCFAC7ACF8B4D7B4E6FE371 ] Ecache C:\Windows\system32\drivers\ecache.sys
17:43:10.0992 3144 Ecache - ok
17:43:11.0070 3144 [ 9BE3744D295A7701EB425332014F0797 ] ehRecvr C:\Windows\ehome\ehRecvr.exe
17:43:11.0086 3144 ehRecvr - ok
17:43:11.0086 3144 [ AD1870C8E5D6DD340C829E6074BF3C3F ] ehSched C:\Windows\ehome\ehsched.exe
17:43:11.0086 3144 ehSched - ok
17:43:11.0102 3144 [ C27C4EE8926E74AA72EFCAB24C5242C3 ] ehstart C:\Windows\ehome\ehstart.dll
17:43:11.0102 3144 ehstart - ok
17:43:11.0148 3144 [ E8F3F21A71720C84BCF423B80028359F ] elxstor C:\Windows\system32\drivers\elxstor.sys
17:43:11.0164 3144 elxstor - ok
17:43:11.0195 3144 [ 4E6B23DFC917EA39306B529B773950F4 ] EMDMgmt C:\Windows\system32\emdmgmt.dll
17:43:11.0211 3144 EMDMgmt - ok
17:43:11.0304 3144 [ A2580C15D2664D18C3E140C7F98B366C ] eRecoveryService C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
17:43:11.0304 3144 eRecoveryService - ok
17:43:11.0351 3144 [ 67058C46504BC12D821F38CF99B7B28F ] EventSystem C:\Windows\system32\es.dll
17:43:11.0351 3144 EventSystem - ok
17:43:11.0382 3144 [ 22B408651F9123527BCEE54B4F6C5CAE ] exfat C:\Windows\system32\drivers\exfat.sys
17:43:11.0382 3144 exfat - ok
17:43:11.0429 3144 [ 1E9B9A70D332103C52995E957DC09EF8 ] fastfat C:\Windows\system32\drivers\fastfat.sys
17:43:11.0429 3144 fastfat - ok
17:43:11.0460 3144 [ 63BDADA84951B9C03E641800E176898A ] fdc C:\Windows\system32\DRIVERS\fdc.sys
17:43:11.0460 3144 fdc - ok
17:43:11.0492 3144 [ 6629B5F0E98151F4AFDD87567EA32BA3 ] fdPHost C:\Windows\system32\fdPHost.dll
17:43:11.0492 3144 fdPHost - ok
17:43:11.0507 3144 [ 89ED56DCE8E47AF40892778A5BD31FD2 ] FDResPub C:\Windows\system32\fdrespub.dll
17:43:11.0507 3144 FDResPub - ok
17:43:11.0523 3144 [ A8C0139A884861E3AAE9CFE73B208A9F ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
17:43:11.0523 3144 FileInfo - ok
17:43:11.0538 3144 [ 0AE429A696AECBC5970E3CF2C62635AE ] Filetrace C:\Windows\system32\drivers\filetrace.sys
17:43:11.0554 3144 Filetrace - ok
17:43:11.0585 3144 [ 227846995AFEEFA70D328BF5334A86A5 ] FLEXnet Licensing Service C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
17:43:11.0601 3144 FLEXnet Licensing Service - ok
17:43:11.0616 3144 [ 6603957EFF5EC62D25075EA8AC27DE68 ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys
17:43:11.0616 3144 flpydisk - ok
17:43:11.0648 3144 [ 01334F9EA68E6877C4EF05D3EA8ABB05 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
17:43:11.0648 3144 FltMgr - ok
17:43:11.0694 3144 [ 8CE364388C8ECA59B14B539179276D44 ] FontCache C:\Windows\system32\FntCache.dll
17:43:11.0694 3144 FontCache - ok
17:43:11.0757 3144 [ C7FBDD1ED42F82BFA35167A5C9803EA3 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
17:43:11.0757 3144 FontCache3.0.0.0 - ok
17:43:11.0788 3144 [ B972A66758577E0BFD1DE0F91AAA27B5 ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
17:43:11.0788 3144 Fs_Rec - ok
17:43:11.0804 3144 [ 4E1CD0A45C50A8882616CAE5BF82F3C5 ] gagp30kx C:\Windows\system32\drivers\gagp30kx.sys
17:43:11.0804 3144 gagp30kx - ok
17:43:11.0835 3144 [ CD5D0AEEE35DFD4E986A5AA1500A6E66 ] gpsvc C:\Windows\System32\gpsvc.dll
17:43:11.0850 3144 gpsvc - ok
17:43:11.0866 3144 [ D30B31375C40309425C21EFE75DB90BB ] hamachi C:\Windows\system32\DRIVERS\hamachi.sys
17:43:11.0866 3144 hamachi - ok
17:43:11.0897 3144 [ CB04C744BE0A61B1D648FAED182C3B59 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
17:43:11.0897 3144 HdAudAddService - ok
17:43:11.0944 3144 [ 062452B7FFD68C8C042A6261FE8DFF4A ] HDAudBus C:\Windows\system32\DRIVERS\HDAudBus.sys
17:43:11.0960 3144 HDAudBus - ok
17:43:11.0960 3144 [ 1338520E78D90154ED6BE8F84DE5FCEB ] HidBth C:\Windows\system32\drivers\hidbth.sys
17:43:11.0960 3144 HidBth - ok
17:43:11.0991 3144 [ FF3160C3A2445128C5A6D9B076DA519E ] HidIr C:\Windows\system32\drivers\hidir.sys
17:43:11.0991 3144 HidIr - ok
17:43:12.0022 3144 [ 84067081F3318162797385E11A8F0582 ] hidserv C:\Windows\System32\hidserv.dll
17:43:12.0022 3144 hidserv - ok
17:43:12.0069 3144 [ CCA4B519B17E23A00B826C55716809CC ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys
17:43:12.0069 3144 HidUsb - ok
17:43:12.0100 3144 [ D8AD255B37DA92434C26E4876DB7D418 ] hkmsvc C:\Windows\system32\kmsvc.dll
17:43:12.0100 3144 hkmsvc - ok
17:43:12.0116 3144 [ DF353B401001246853763C4B7AAA6F50 ] HpCISSs C:\Windows\system32\drivers\hpcisss.sys
17:43:12.0116 3144 HpCISSs - ok
17:43:12.0225 3144 [ F870AA3E254628EBEAFE754108D664DE ] HTTP C:\Windows\system32\drivers\HTTP.sys
17:43:12.0225 3144 HTTP - ok
17:43:12.0256 3144 [ 324C2152FF2C61ABAE92D09F3CCA4D63 ] i2omp C:\Windows\system32\drivers\i2omp.sys
17:43:12.0256 3144 i2omp - ok
17:43:12.0272 3144 [ 22D56C8184586B7A1F6FA60BE5F5A2BD ] i8042prt C:\Windows\system32\DRIVERS\i8042prt.sys
17:43:12.0272 3144 i8042prt - ok
17:43:12.0303 3144 [ C957BF4B5D80B46C5017BF0101E6C906 ] iaStorV C:\Windows\system32\drivers\iastorv.sys
17:43:12.0303 3144 iaStorV - ok
17:43:12.0381 3144 [ 1CF03C69B49ACB70C722DF92755C0C8C ] IDriverT C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
17:43:12.0381 3144 IDriverT - ok
17:43:12.0443 3144 [ 98477B08E61945F974ED9FDC4CB6BDAB ] idsvc C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
17:43:12.0443 3144 idsvc - ok
17:43:12.0459 3144 [ 2D077BF86E843F901D8DB709C95B49A5 ] iirsp C:\Windows\system32\drivers\iirsp.sys
17:43:12.0459 3144 iirsp - ok
17:43:12.0490 3144 [ 9908D8A397B76CD8D31D0D383C5773C9 ] IKEEXT C:\Windows\System32\ikeext.dll
17:43:12.0506 3144 IKEEXT - ok
17:43:12.0537 3144 [ 9D64201C9E5AC8D1F088762BA00FF3AB ] int15 C:\Acer\Empowering Technology\eRecovery\int15.sys
17:43:12.0537 3144 int15 - ok
17:43:12.0584 3144 [ AEF2FA29204056B81BC4CBF30260DEE1 ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHDA.sys
17:43:12.0599 3144 IntcAzAudAddService - ok
17:43:12.0615 3144 [ 97469037714070E45194ED318D636401 ] intelide C:\Windows\system32\drivers\intelide.sys
17:43:12.0615 3144 intelide - ok
17:43:12.0662 3144 [ CE44CC04262F28216DD4341E9E36A16F ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys
17:43:12.0662 3144 intelppm - ok
17:43:12.0693 3144 [ 9AC218C6E6105477484C6FDBE7D409A4 ] IPBusEnum C:\Windows\system32\ipbusenum.dll
17:43:12.0693 3144 IPBusEnum - ok
17:43:12.0724 3144 [ 62C265C38769B864CB25B4BCF62DF6C3 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
17:43:12.0724 3144 IpFilterDriver - ok
17:43:12.0740 3144 [ 1998BD97F950680BB55F55A7244679C2 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
17:43:12.0740 3144 iphlpsvc - ok
17:43:12.0755 3144 IpInIp - ok
17:43:12.0786 3144 [ 40F34F8ABA2A015D780E4B09138B6C17 ] IPMIDRV C:\Windows\system32\drivers\ipmidrv.sys
17:43:12.0786 3144 IPMIDRV - ok
17:43:12.0802 3144 [ 8793643A67B42CEC66490B2A0CF92D68 ] IPNAT C:\Windows\system32\DRIVERS\ipnat.sys
17:43:12.0802 3144 IPNAT - ok
17:43:12.0818 3144 [ 109C0DFB82C3632FBD11949B73AEEAC9 ] IRENUM C:\Windows\system32\drivers\irenum.sys
17:43:12.0818 3144 IRENUM - ok
17:43:12.0818 3144 [ 350FCA7E73CF65BCEF43FAE1E4E91293 ] isapnp C:\Windows\system32\drivers\isapnp.sys
17:43:12.0833 3144 isapnp - ok
17:43:12.0849 3144 [ 232FA340531D940AAC623B121A595034 ] iScsiPrt C:\Windows\system32\DRIVERS\msiscsi.sys
17:43:12.0849 3144 iScsiPrt - ok
17:43:12.0864 3144 [ BCED60D16156E428F8DF8CF27B0DF150 ] iteatapi C:\Windows\system32\drivers\iteatapi.sys
17:43:12.0880 3144 iteatapi - ok
17:43:12.0880 3144 [ 06FA654504A498C30ADCA8BEC4E87E7E ] iteraid C:\Windows\system32\drivers\iteraid.sys
17:43:12.0896 3144 iteraid - ok
17:43:12.0911 3144 [ 37605E0A8CF00CBBA538E753E4344C6E ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys
17:43:12.0911 3144 kbdclass - ok
17:43:12.0927 3144 [ EDE59EC70E25C24581ADD1FBEC7325F7 ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys
17:43:12.0942 3144 kbdhid - ok
17:43:12.0958 3144 [ A3E186B4B935905B829219502557314E ] KeyIso C:\Windows\system32\lsass.exe
17:43:12.0974 3144 KeyIso - ok
17:43:13.0020 3144 [ 4A1445EFA932A3BAF5BDB02D7131EE20 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
17:43:13.0020 3144 KSecDD - ok
17:43:13.0052 3144 [ 8078F8F8F7A79E2E6B494523A828C585 ] KtmRm C:\Windows\system32\msdtckrm.dll
17:43:13.0052 3144 KtmRm - ok
17:43:13.0083 3144 [ 1BF5EEBFD518DD7298434D8C862F825D ] LanmanServer C:\Windows\System32\srvsvc.dll
17:43:13.0098 3144 LanmanServer - ok
17:43:13.0130 3144 [ 1DB69705B695B987082C8BAEC0C6B34F ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
17:43:13.0130 3144 LanmanWorkstation - ok
17:43:13.0161 3144 [ 559C9B7800FAC92FC515CD0003D7C631 ] LightScribeService C:\Program Files\Common Files\LightScribe\LSSrvc.exe
17:43:13.0161 3144 LightScribeService - ok
17:43:13.0192 3144 [ F8A7212D0864EF5E9185FB95E6623F4D ] lirsgt C:\Windows\system32\DRIVERS\lirsgt.sys
17:43:13.0192 3144 lirsgt - ok
17:43:13.0208 3144 [ D1C5883087A0C3F1344D9D55A44901F6 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
17:43:13.0208 3144 lltdio - ok
17:43:13.0239 3144 [ 2D5A428872F1442631D0959A34ABFF63 ] lltdsvc C:\Windows\System32\lltdsvc.dll
17:43:13.0239 3144 lltdsvc - ok
17:43:13.0270 3144 [ 35D40113E4A5B961B6CE5C5857702518 ] lmhosts C:\Windows\System32\lmhsvc.dll
17:43:13.0270 3144 lmhosts - ok
17:43:13.0301 3144 [ A2262FB9F28935E862B4DB46438C80D2 ] LSI_FC C:\Windows\system32\drivers\lsi_fc.sys
17:43:13.0301 3144 LSI_FC - ok
17:43:13.0317 3144 [ 30D73327D390F72A62F32C103DAF1D6D ] LSI_SAS C:\Windows\system32\drivers\lsi_sas.sys
17:43:13.0317 3144 LSI_SAS - ok
17:43:13.0332 3144 [ E1E36FEFD45849A95F1AB81DE0159FE3 ] LSI_SCSI C:\Windows\system32\drivers\lsi_scsi.sys
17:43:13.0332 3144 LSI_SCSI - ok
17:43:13.0348 3144 [ 8F5C7426567798E62A3B3614965D62CC ] luafv C:\Windows\system32\drivers\luafv.sys
17:43:13.0348 3144 luafv - ok
17:43:13.0395 3144 [ A8382713F5870E4AF1DE4E8F7AF9D882 ] Macromedia Licensing Service C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
17:43:13.0395 3144 Macromedia Licensing Service - ok
17:43:13.0426 3144 [ 4470E3C1E0C3378E4CAB137893C12C3A ] MBAMProtector C:\Windows\system32\drivers\mbam.sys
17:43:13.0426 3144 MBAMProtector - ok
17:43:13.0488 3144 [ 65085456FD9A74D7F1A999520C299ECB ] MBAMScheduler C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
17:43:13.0504 3144 MBAMScheduler - ok
17:43:13.0644 3144 [ E0D7732F2D2E24B2DB3F67B6750295B8 ] MBAMService C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
17:43:13.0660 3144 MBAMService - ok
17:43:13.0691 3144 [ 0DB7527DB188C7D967A37BB51BBF3963 ] MBAMSwissArmy C:\Windows\system32\drivers\mbamswissarmy.sys
17:43:13.0691 3144 MBAMSwissArmy - ok
17:43:13.0769 3144 [ DDCC236009C707761D60E5C76D639176 ] McComponentHostService C:\Program Files\McAfee Security Scan\3.0.318\McCHSvc.exe
17:43:13.0769 3144 McComponentHostService - ok
17:43:13.0816 3144 [ AEF9BABB8A506BC4CE0451A64AADED46 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
17:43:13.0816 3144 Mcx2Svc - ok
17:43:13.0847 3144 [ D153B14FC6598EAE8422A2037553ADCE ] megasas C:\Windows\system32\drivers\megasas.sys
17:43:13.0847 3144 megasas - ok
17:43:13.0863 3144 [ 1076FFCFFAAE8385FD62DFCB25AC4708 ] MMCSS C:\Windows\system32\mmcss.dll
17:43:13.0878 3144 MMCSS - ok
17:43:13.0878 3144 [ E13B5EA0F51BA5B1512EC671393D09BA ] Modem C:\Windows\system32\drivers\modem.sys
17:43:13.0894 3144 Modem - ok
17:43:13.0910 3144 [ 0A9BB33B56E294F686ABB7C1E4E2D8A8 ] monitor C:\Windows\system32\DRIVERS\monitor.sys
17:43:13.0910 3144 monitor - ok
17:43:13.0941 3144 [ 5BF6A1326A335C5298477754A506D263 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys
17:43:13.0941 3144 mouclass - ok
17:43:13.0972 3144 [ 93B8D4869E12CFBE663915502900876F ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
17:43:13.0972 3144 mouhid - ok
17:43:13.0988 3144 [ BDAFC88AA6B92F7842416EA6A48E1600 ] MountMgr C:\Windows\system32\drivers\mountmgr.sys
17:43:13.0988 3144 MountMgr - ok
17:43:14.0034 3144 [ 7EDBBB9351A38C6BB0FE98CFD44DB430 ] MozillaMaintenance C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
17:43:14.0050 3144 MozillaMaintenance - ok
17:43:14.0066 3144 [ 583A41F26278D9E0EA548163D6139397 ] mpio C:\Windows\system32\drivers\mpio.sys
17:43:14.0066 3144 mpio - ok

17:43:14.0097 3144 [ 22241FEBA9B2DEFA669C8CB0A8DD7D2E ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
17:43:14.0097 3144 mpsdrv - ok
17:43:14.0144 3144 [ 5DE62C6E9108F14F6794060A9BDECAEC ] MpsSvc C:\Windows\system32\mpssvc.dll
17:43:14.0144 3144 MpsSvc - ok
17:43:14.0159 3144 [ 4FBBB70D30FD20EC51F80061703B001E ] Mraid35x C:\Windows\system32\drivers\mraid35x.sys
17:43:14.0159 3144 Mraid35x - ok
17:43:14.0190 3144 [ 82CEA0395524AACFEB58BA1448E8325C ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
17:43:14.0190 3144 MRxDAV - ok
17:43:14.0206 3144 [ 1E94971C4B446AB2290DEB71D01CF0C2 ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
17:43:14.0206 3144 mrxsmb - ok
17:43:14.0237 3144 [ 4FCCB34D793B116423209C0F8B7A3B03 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
17:43:14.0237 3144 mrxsmb10 - ok
17:43:14.0237 3144 [ C3CB1B40AD4A0124D617A1199B0B9D7C ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
17:43:14.0237 3144 mrxsmb20 - ok
17:43:14.0268 3144 [ 742AED7939E734C36B7E8D6228CE26B7 ] msahci C:\Windows\system32\drivers\msahci.sys
17:43:14.0268 3144 msahci - ok
17:43:14.0284 3144 [ 3FC82A2AE4CC149165A94699183D3028 ] msdsm C:\Windows\system32\drivers\msdsm.sys
17:43:14.0284 3144 msdsm - ok
17:43:14.0300 3144 [ FD7520CC3A80C5FC8C48852BB24C6DED ] MSDTC C:\Windows\System32\msdtc.exe
17:43:14.0315 3144 MSDTC - ok
17:43:14.0331 3144 [ A9927F4A46B816C92F461ACB90CF8515 ] Msfs C:\Windows\system32\drivers\Msfs.sys
17:43:14.0346 3144 Msfs - ok
17:43:14.0362 3144 [ 0F400E306F385C56317357D6DEA56F62 ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
17:43:14.0362 3144 msisadrv - ok
17:43:14.0393 3144 [ 85466C0757A23D9A9AECDC0755203CB2 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
17:43:14.0393 3144 MSiSCSI - ok
17:43:14.0393 3144 msiserver - ok
17:43:14.0424 3144 [ D8C63D34D9C9E56C059E24EC7185CC07 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
17:43:14.0424 3144 MSKSSRV - ok
17:43:14.0440 3144 [ 1D373C90D62DDB641D50E55B9E78D65E ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
17:43:14.0440 3144 MSPCLOCK - ok
17:43:14.0471 3144 [ B572DA05BF4E098D4BBA3A4734FB505B ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
17:43:14.0471 3144 MSPQM - ok
17:43:14.0502 3144 [ B49456D70555DE905C311BCDA6EC6ADB ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
17:43:14.0502 3144 MsRPC - ok
17:43:14.0518 3144 [ E384487CB84BE41D09711C30CA79646C ] mssmbios C:\Windows\system32\DRIVERS\mssmbios.sys
17:43:14.0518 3144 mssmbios - ok
17:43:14.0565 3144 MSSQL$SONY_MEDIAMGR - ok
17:43:14.0596 3144 [ CB7524C21727404BD3140DCA32DEB7DE ] MSSQLServerADHelper C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqladhlp.exe
17:43:14.0596 3144 MSSQLServerADHelper - ok
17:43:14.0627 3144 [ 7199C1EEC1E4993CAF96B8C0A26BD58A ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
17:43:14.0627 3144 MSTEE - ok
17:43:14.0658 3144 [ 6A57B5733D4CB702C8EA4542E836B96C ] Mup C:\Windows\system32\Drivers\mup.sys
17:43:14.0658 3144 Mup - ok
17:43:14.0690 3144 [ E4EAF0C5C1B41B5C83386CF212CA9584 ] napagent C:\Windows\system32\qagentRT.dll
17:43:14.0705 3144 napagent - ok
17:43:14.0736 3144 [ 85C44FDFF9CF7E72A40DCB7EC06A4416 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
17:43:14.0736 3144 NativeWifiP - ok
17:43:14.0768 3144 [ 1357274D1883F68300AEADD15D7BBB42 ] NDIS C:\Windows\system32\drivers\ndis.sys
17:43:14.0783 3144 NDIS - ok
17:43:14.0799 3144 [ 0E186E90404980569FB449BA7519AE61 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
17:43:14.0799 3144 NdisTapi - ok
17:43:14.0814 3144 [ D6973AA34C4D5D76C0430B181C3CD389 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
17:43:14.0814 3144 Ndisuio - ok
17:43:14.0830 3144 [ 818F648618AE34F729FDB47EC68345C3 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
17:43:14.0830 3144 NdisWan - ok
17:43:14.0861 3144 [ 71DAB552B41936358F3B541AE5997FB3 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
17:43:14.0861 3144 NDProxy - ok
17:43:14.0892 3144 [ BCD093A5A6777CF626434568DC7DBA78 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
17:43:14.0892 3144 NetBIOS - ok
17:43:14.0955 3144 [ ECD64230A59CBD93C85F1CD1CAB9F3F6 ] netbt C:\Windows\system32\DRIVERS\netbt.sys
17:43:14.0955 3144 netbt - ok
17:43:14.0986 3144 [ A3E186B4B935905B829219502557314E ] Netlogon C:\Windows\system32\lsass.exe
17:43:14.0986 3144 Netlogon - ok
17:43:15.0017 3144 [ C8052711DAECC48B982434C5116CA401 ] Netman C:\Windows\System32\netman.dll
17:43:15.0017 3144 Netman - ok
17:43:15.0048 3144 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
17:43:15.0048 3144 NetMsmqActivator - ok
17:43:15.0064 3144 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetPipeActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
17:43:15.0064 3144 NetPipeActivator - ok
17:43:15.0095 3144 [ 2EF3BBE22E5A5ACD1428EE387A0D0172 ] netprofm C:\Windows\System32\netprofm.dll
17:43:15.0095 3144 netprofm - ok
17:43:15.0111 3144 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
17:43:15.0111 3144 NetTcpActivator - ok
17:43:15.0126 3144 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
17:43:15.0126 3144 NetTcpPortSharing - ok
17:43:15.0158 3144 [ 2E7FB731D4790A1BC6270ACCEFACB36E ] nfrd960 C:\Windows\system32\drivers\nfrd960.sys
17:43:15.0158 3144 nfrd960 - ok
17:43:15.0173 3144 [ 2997B15415F9BBE05B5A4C1C85E0C6A2 ] NlaSvc C:\Windows\System32\nlasvc.dll
17:43:15.0173 3144 NlaSvc - ok
17:43:15.0204 3144 [ D36F239D7CCE1931598E8FB90A0DBC26 ] Npfs C:\Windows\system32\drivers\Npfs.sys
17:43:15.0220 3144 Npfs - ok
17:43:15.0236 3144 [ 8BB86F0C7EEA2BDED6FE095D0B4CA9BD ] nsi C:\Windows\system32\nsisvc.dll
17:43:15.0236 3144 nsi - ok
17:43:15.0251 3144 [ 609773E344A97410CE4EBF74A8914FCF ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
17:43:15.0251 3144 nsiproxy - ok
17:43:15.0298 3144 [ 2C1121F2B87E9A6B12485DF53CD848C7 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
17:43:15.0314 3144 Ntfs - ok
17:43:15.0345 3144 [ 7F1C1F78D709C4A54CBB46EDE7E0B48D ] NTIDrvr C:\Windows\system32\DRIVERS\NTIDrvr.sys
17:43:15.0345 3144 NTIDrvr - ok
17:43:15.0360 3144 [ E875C093AEC0C978A90F30C9E0DFBB72 ] ntrigdigi C:\Windows\system32\drivers\ntrigdigi.sys
17:43:15.0360 3144 ntrigdigi - ok
17:43:15.0376 3144 [ C5DBBCDA07D780BDA9B685DF333BB41E ] Null C:\Windows\system32\drivers\Null.sys
17:43:15.0392 3144 Null - ok
17:43:15.0594 3144 [ B69E6F70CE1151C8D62ABC9DEF64DFBE ] nvlddmkm C:\Windows\system32\DRIVERS\nvlddmkm.sys
17:43:15.0657 3144 nvlddmkm - ok
17:43:15.0672 3144 [ E69E946F80C1C31C53003BFBF50CBB7C ] nvraid C:\Windows\system32\drivers\nvraid.sys
17:43:15.0688 3144 nvraid - ok
17:43:15.0688 3144 [ 9E0BA19A28C498A6D323D065DB76DFFC ] nvstor C:\Windows\system32\drivers\nvstor.sys
17:43:15.0688 3144 nvstor - ok
17:43:15.0704 3144 [ 4A9A6368BEF61C9608FE7CC21B1F8886 ] nvstor32 C:\Windows\system32\drivers\nvstor32.sys
17:43:15.0704 3144 nvstor32 - ok
17:43:15.0766 3144 [ E4284FCF99FEA13A7E1836F87AE356F6 ] nvsvc C:\Windows\system32\nvvsvc.exe
17:43:15.0766 3144 nvsvc - ok
17:43:15.0860 3144 [ 03E60E0BFA53ED15DC984FA34B44BB0F ] nvUpdatusService C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
17:43:15.0875 3144 nvUpdatusService - ok
17:43:15.0891 3144 [ 07C186427EB8FCC3D8D7927187F260F7 ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
17:43:15.0891 3144 nv_agp - ok
17:43:15.0906 3144 NwlnkFlt - ok
17:43:15.0906 3144 NwlnkFwd - ok
17:43:15.0938 3144 [ 6F310E890D46E246E0E261A63D9B36B4 ] ohci1394 C:\Windows\system32\DRIVERS\ohci1394.sys
17:43:15.0938 3144 ohci1394 - ok
17:43:16.0031 3144 [ 223653A726E8A9B7A78B6BF5F18055AA ] OODefragAgent C:\Program Files\OO Software\Defrag\oodag.exe
17:43:16.0047 3144 OODefragAgent - ok
17:43:16.0125 3144 [ 5A432A042DAE460ABE7199B758E8606C ] ose C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
17:43:16.0125 3144 ose - ok
17:43:16.0187 3144 [ 0C8E8E61AD1EB0B250B846712C917506 ] p2pimsvc C:\Windows\system32\p2psvc.dll
17:43:16.0187 3144 p2pimsvc - ok
17:43:16.0218 3144 [ 0C8E8E61AD1EB0B250B846712C917506 ] p2psvc C:\Windows\system32\p2psvc.dll
17:43:16.0234 3144 p2psvc - ok
17:43:16.0250 3144 [ 8A79FDF04A73428597E2CAF9D0D67850 ] Parport C:\Windows\system32\DRIVERS\parport.sys
17:43:16.0250 3144 Parport - ok
17:43:16.0281 3144 [ B9C2B89F08670E159F7181891E449CD9 ] partmgr C:\Windows\system32\drivers\partmgr.sys
17:43:16.0281 3144 partmgr - ok
17:43:16.0296 3144 [ 6C580025C81CAF3AE9E3617C22CAD00E ] Parvdm C:\Windows\system32\DRIVERS\parvdm.sys
17:43:16.0296 3144 Parvdm - ok
17:43:16.0328 3144 [ C6276AD11F4BB49B58AA1ED88537F14A ] PcaSvc C:\Windows\System32\pcasvc.dll
17:43:16.0328 3144 PcaSvc - ok
17:43:16.0343 3144 [ 941DC1D19E7E8620F40BBC206981EFDB ] pci C:\Windows\system32\drivers\pci.sys
17:43:16.0343 3144 pci - ok
17:43:16.0359 3144 [ 1636D43F10416AEB483BC6001097B26C ] pciide C:\Windows\system32\drivers\pciide.sys
17:43:16.0359 3144 pciide - ok
17:43:16.0390 3144 [ E6F3FB1B86AA519E7698AD05E58B04E5 ] pcmcia C:\Windows\system32\drivers\pcmcia.sys
17:43:16.0390 3144 pcmcia - ok
17:43:16.0421 3144 [ 6349F6ED9C623B44B52EA3C63C831A92 ] PEAUTH C:\Windows\system32\drivers\peauth.sys
17:43:16.0437 3144 PEAUTH - ok
17:43:16.0515 3144 [ B1689DF169143F57053F795390C99DB3 ] pla C:\Windows\system32\pla.dll
17:43:16.0530 3144 pla - ok
17:43:16.0562 3144 [ C5E7F8A996EC0A82D508FD9064A5569E ] PlugPlay C:\Windows\system32\umpnpmgr.dll
17:43:16.0562 3144 PlugPlay - ok
17:43:16.0577 3144 [ 205E1B699FD3F2F9B036EEA2EC30C620 ] PnkBstrA C:\Windows\system32\PnkBstrA.exe
17:43:16.0593 3144 PnkBstrA - ok
17:43:16.0624 3144 [ 0C8E8E61AD1EB0B250B846712C917506 ] PNRPAutoReg C:\Windows\system32\p2psvc.dll
17:43:16.0640 3144 PNRPAutoReg - ok
17:43:16.0655 3144 [ 0C8E8E61AD1EB0B250B846712C917506 ] PNRPsvc C:\Windows\system32\p2psvc.dll
17:43:16.0671 3144 PNRPsvc - ok
17:43:16.0702 3144 [ D0494460421A03CD5225CCA0059AA146 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
17:43:16.0702 3144 PolicyAgent - ok
17:43:16.0733 3144 [ ECFFFAEC0C1ECD8DBC77F39070EA1DB1 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
17:43:16.0733 3144 PptpMiniport - ok
17:43:16.0764 3144 [ 0E3CEF5D28B40CF273281D620C50700A ] Processor C:\Windows\system32\drivers\processr.sys
17:43:16.0764 3144 Processor - ok
17:43:16.0796 3144 [ 876462149CDD6120C365ACE93C8784E8 ] prodrv06 C:\Windows\System32\drivers\prodrv06.sys
17:43:16.0796 3144 prodrv06 - ok
17:43:16.0811 3144 [ 0508FAA222D28835310B7BFCA7A77346 ] ProfSvc C:\Windows\system32\profsvc.dll
17:43:16.0811 3144 ProfSvc - ok
17:43:16.0842 3144 [ 915DC37BCEA0697FEDB2EF66CE02DBEB ] prohlp02 C:\Windows\system32\drivers\prohlp02.sys
17:43:16.0842 3144 prohlp02 - ok
17:43:16.0858 3144 [ A3E186B4B935905B829219502557314E ] ProtectedStorage C:\Windows\system32\lsass.exe
17:43:16.0858 3144 ProtectedStorage - ok
17:43:16.0905 3144 [ 99514FAA8DF93D34B5589187DB3AA0BA ] PSched C:\Windows\system32\DRIVERS\pacer.sys
17:43:16.0905 3144 PSched - ok
17:43:16.0920 3144 [ E42E3433DBB4CFFE8FDD91EAB29AEA8E ] PxHelp20 C:\Windows\system32\Drivers\PxHelp20.sys
17:43:16.0920 3144 PxHelp20 - ok
17:43:16.0967 3144 [ CCDAC889326317792480C0A67156A1EC ] ql2300 C:\Windows\system32\drivers\ql2300.sys
17:43:16.0967 3144 ql2300 - ok
17:43:16.0983 3144 [ 81A7E5C076E59995D54BC1ED3A16E60B ] ql40xx C:\Windows\system32\drivers\ql40xx.sys
17:43:16.0983 3144 ql40xx - ok
17:43:17.0030 3144 [ E9ECAE663F47E6CB43962D18AB18890F ] QWAVE C:\Windows\system32\qwave.dll
17:43:17.0030 3144 QWAVE - ok
17:43:17.0061 3144 [ 9F5E0E1926014D17486901C88ECA2DB7 ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
17:43:17.0061 3144 QWAVEdrv - ok
17:43:17.0139 3144 [ DFCEC4A3A3D49BB15932460F3D4F6C55 ] R300 C:\Windows\system32\DRIVERS\atikmdag.sys
17:43:17.0154 3144 R300 - ok
17:43:17.0170 3144 [ 147D7F9C556D259924351FEB0DE606C3 ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
17:43:17.0170 3144 RasAcd - ok
17:43:17.0186 3144 [ F6A452EB4CEADBB51C9E0EE6B3ECEF0F ] RasAuto C:\Windows\System32\rasauto.dll
17:43:17.0201 3144 RasAuto - ok
17:43:17.0217 3144 [ A214ADBAF4CB47DD2728859EF31F26B0 ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
17:43:17.0217 3144 Rasl2tp - ok
17:43:17.0248 3144 [ 75D47445D70CA6F9F894B032FBC64FCF ] RasMan C:\Windows\System32\rasmans.dll
17:43:17.0248 3144 RasMan - ok
17:43:17.0279 3144 [ 509A98DD18AF4375E1FC40BC175F1DEF ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
17:43:17.0279 3144 RasPppoe - ok
17:43:17.0279 3144 [ 2005F4A1E05FA09389AC85840F0A9E4D ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
17:43:17.0295 3144 RasSstp - ok
17:43:17.0310 3144 [ B14C9D5B9ADD2F84F70570BBBFAA7935 ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
17:43:17.0310 3144 rdbss - ok
17:43:17.0326 3144 [ 89E59BE9A564262A3FB6C4F4F1CD9899 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
17:43:17.0326 3144 RDPCDD - ok
17:43:17.0357 3144 [ E8BD98D46F2ED77132BA927FCCB47D8B ] rdpdr C:\Windows\system32\drivers\rdpdr.sys
17:43:17.0357 3144 rdpdr - ok
17:43:17.0373 3144 [ 9D91FE5286F748862ECFFA05F8A0710C ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
17:43:17.0373 3144 RDPENCDD - ok
17:43:17.0404 3144 [ C127EBD5AFAB31524662C48DFCEB773A ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
17:43:17.0404 3144 RDPWD - ok
17:43:17.0451 3144 [ BCDD6B4804D06B1F7EBF29E53A57ECE9 ] RemoteAccess C:\Windows\System32\mprdim.dll
17:43:17.0451 3144 RemoteAccess - ok
17:43:17.0466 3144 [ 9E6894EA18DAFF37B63E1005F83AE4AB ] RemoteRegistry C:\Windows\system32\regsvc.dll
17:43:17.0466 3144 RemoteRegistry - ok
17:43:17.0498 3144 [ 5123F83CBC4349D065534EEB6BBDC42B ] RpcLocator C:\Windows\system32\locator.exe
17:43:17.0498 3144 RpcLocator - ok
17:43:17.0544 3144 [ 3B5B4D53FEC14F7476CA29A20CC31AC9 ] RpcSs C:\Windows\system32\rpcss.dll
17:43:17.0544 3144 RpcSs - ok
17:43:17.0576 3144 [ 9C508F4074A39E8B4B31D27198146FAD ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
17:43:17.0576 3144 rspndr - ok
17:43:17.0591 3144 [ A3E186B4B935905B829219502557314E ] SamSs C:\Windows\system32\lsass.exe
17:43:17.0591 3144 SamSs - ok
17:43:17.0607 3144 [ 3CE8F073A557E172B330109436984E30 ] sbp2port C:\Windows\system32\drivers\sbp2port.sys
17:43:17.0607 3144 sbp2port - ok
17:43:17.0638 3144 [ 77B7A11A0C3D78D3386398FBBEA1B632 ] SCardSvr C:\Windows\System32\SCardSvr.dll
17:43:17.0638 3144 SCardSvr - ok
17:43:17.0700 3144 [ 1A58069DB21D05EB2AB58EE5753EBE8D ] Schedule C:\Windows\system32\schedsvc.dll
17:43:17.0700 3144 Schedule - ok
17:43:17.0716 3144 [ 312EC3E37A0A1F2006534913E37B4423 ] SCPolicySvc C:\Windows\System32\certprop.dll
17:43:17.0716 3144 SCPolicySvc - ok
17:43:17.0732 3144 [ 716313D9F6B0529D03F726D5AAF6F191 ] SDRSVC C:\Windows\System32\SDRSVC.dll
17:43:17.0732 3144 SDRSVC - ok
17:43:17.0747 3144 [ 90A3935D05B494A5A39D37E71F09A677 ] secdrv C:\Windows\system32\drivers\secdrv.sys
17:43:17.0763 3144 secdrv - ok
17:43:17.0778 3144 [ FD5199D4D8A521005E4B5EE7FE00FA9B ] seclogon C:\Windows\system32\seclogon.dll
17:43:17.0778 3144 seclogon - ok
17:43:17.0794 3144 [ A9BBAB5759771E523F55563D6CBE140F ] SENS C:\Windows\system32\sens.dll
17:43:17.0794 3144 SENS - ok
17:43:17.0825 3144 [ CE9EC966638EF0B10B864DDEDF62A099 ] Serenum C:\Windows\system32\DRIVERS\serenum.sys
17:43:17.0825 3144 Serenum - ok
17:43:17.0841 3144 [ 6D663022DB3E7058907784AE14B69898 ] Serial C:\Windows\system32\DRIVERS\serial.sys
17:43:17.0841 3144 Serial - ok
17:43:17.0856 3144 [ 8AF3D28A879BF75DB53A0EE7A4289624 ] sermouse C:\Windows\system32\drivers\sermouse.sys
17:43:17.0856 3144 sermouse - ok
17:43:17.0888 3144 [ D2193326F729B163125610DBF3E17D57 ] SessionEnv C:\Windows\system32\sessenv.dll
17:43:17.0888 3144 SessionEnv - ok
17:43:17.0919 3144 [ 103B79418DA647736EE95645F305F68A ] sffdisk C:\Windows\system32\drivers\sffdisk.sys
17:43:17.0919 3144 sffdisk - ok
17:43:17.0934 3144 [ 8FD08A310645FE872EEEC6E08C6BF3EE ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys
17:43:17.0934 3144 sffp_mmc - ok
17:43:17.0950 3144 [ 9CFA05FCFCB7124E69CFC812B72F9614 ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys
17:43:17.0950 3144 sffp_sd - ok
17:43:17.0981 3144 [ 462AEE0EA0481EA8BD45CAC876A4CCC4 ] sfhlp01 C:\Windows\system32\drivers\sfhlp01.sys
17:43:17.0981 3144 sfhlp01 - ok
17:43:17.0997 3144 [ C33BFBD6E9E41FCD9FFEF9729E9FAED6 ] sfloppy C:\Windows\system32\DRIVERS\sfloppy.sys
17:43:17.0997 3144 sfloppy - ok
17:43:18.0028 3144 [ E1499BD0FF76B1B2FBBF1AF339D91165 ] SharedAccess C:\Windows\System32\ipnathlp.dll
17:43:18.0028 3144 SharedAccess - ok
17:43:18.0059 3144 [ C7230FBEE14437716701C15BE02C27B8 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
17:43:18.0075 3144 ShellHWDetection - ok
17:43:18.0106 3144 [ D2A595D6EEBEEAF4334F8E50EFBC9931 ] sisagp C:\Windows\system32\drivers\sisagp.sys
17:43:18.0106 3144 sisagp - ok
17:43:18.0137 3144 [ CEDD6F4E7D84E9F98B34B3FE988373AA ] SiSRaid2 C:\Windows\system32\drivers\sisraid2.sys
17:43:18.0137 3144 SiSRaid2 - ok
17:43:18.0153 3144 [ DF843C528C4F69D12CE41CE462E973A7 ] SiSRaid4 C:\Windows\system32\drivers\sisraid4.sys
17:43:18.0153 3144 SiSRaid4 - ok
17:43:18.0215 3144 [ F07AF60B152221472FBDB2FECEC4896D ] SkypeUpdate C:\Program Files\Skype\Updater\Updater.exe
17:43:18.0215 3144 SkypeUpdate - ok
17:43:18.0324 3144 [ 862BB4CBC05D80C5B45BE430E5EF872F ] slsvc C:\Windows\system32\SLsvc.exe
17:43:18.0356 3144 slsvc - ok
17:43:18.0387 3144 [ 6EDC422215CD78AA8A9CDE6B30ABBD35 ] SLUINotify C:\Windows\system32\SLUINotify.dll
17:43:18.0402 3144 SLUINotify - ok
17:43:18.0434 3144 [ 7B75299A4D201D6A6533603D6914AB04 ] Smb C:\Windows\system32\DRIVERS\smb.sys
17:43:18.0434 3144 Smb - ok
17:43:18.0465 3144 [ 2A146A055B4401C16EE62D18B8E2A032 ] SNMPTRAP C:\Windows\System32\snmptrap.exe
17:43:18.0465 3144 SNMPTRAP - ok
17:43:18.0496 3144 [ 7AEBDEEF071FE28B0EEF2CDD69102BFF ] spldr C:\Windows\system32\drivers\spldr.sys
17:43:18.0496 3144 spldr - ok
17:43:18.0527 3144 [ 8554097E5136C3BF9F69FE578A1B35F4 ] Spooler C:\Windows\System32\spoolsv.exe
17:43:18.0543 3144 Spooler - ok
17:43:18.0590 3144 [ CDDDEC541BC3C96F91ECB48759673505 ] sptd C:\Windows\system32\Drivers\sptd.sys
17:43:18.0590 3144 Suspicious file (NoAccess): C:\Windows\system32\Drivers\sptd.sys. md5: CDDDEC541BC3C96F91ECB48759673505
17:43:18.0590 3144 sptd ( LockedFile.Multi.Generic ) - warning
17:43:18.0590 3144 sptd - detected LockedFile.Multi.Generic (1)
17:43:18.0590 3144 SQLAgent$SONY_MEDIAMGR - ok
17:43:18.0636 3144 [ 41987F9FC0E61ADF54F581E15029AD91 ] srv C:\Windows\system32\DRIVERS\srv.sys
17:43:18.0636 3144 srv - ok
17:43:18.0652 3144 [ FF33AFF99564B1AA534F58868CBE41EF ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
17:43:18.0652 3144 srv2 - ok
17:43:18.0668 3144 [ 7605C0E1D01A08F3ECD743F38B834A44 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
17:43:18.0668 3144 srvnet - ok
17:43:18.0683 3144 [ 03D50B37234967433A5EA5BA72BC0B62 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
17:43:18.0699 3144 SSDPSRV - ok
17:43:18.0714 3144 [ 6F1A32E7B7B30F004D9A20AFADB14944 ] SstpSvc C:\Windows\system32\sstpsvc.dll
17:43:18.0714 3144 SstpSvc - ok
17:43:18.0761 3144 Steam Client Service - ok
17:43:18.0824 3144 [ 5A19667A580B1CE886EAF968B9743F45 ] Stereo Service C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
17:43:18.0824 3144 Stereo Service - ok
17:43:18.0839 3144 [ 5DE7D67E49B88F5F07F3E53C4B92A352 ] stisvc C:\Windows\System32\wiaservc.dll
17:43:18.0855 3144 stisvc - ok
17:43:18.0870 3144 [ 7BA58ECF0C0A9A69D44B3DCA62BECF56 ] swenum C:\Windows\system32\DRIVERS\swenum.sys
17:43:18.0870 3144 swenum - ok
17:43:18.0886 3144 [ F21FD248040681CCA1FB6C9A03AAA93D ] swprv C:\Windows\System32\swprv.dll
17:43:18.0902 3144 swprv - ok
17:43:18.0917 3144 [ 192AA3AC01DF071B541094F251DEED10 ] Symc8xx C:\Windows\system32\drivers\symc8xx.sys
17:43:18.0917 3144 Symc8xx - ok
17:43:18.0933 3144 [ 8C8EB8C76736EBAF3B13B633B2E64125 ] Sym_hi C:\Windows\system32\drivers\sym_hi.sys
17:43:18.0933 3144 Sym_hi - ok
17:43:18.0948 3144 [ 8072AF52B5FD103BBBA387A1E49F62CB ] Sym_u3 C:\Windows\system32\drivers\sym_u3.sys
17:43:18.0948 3144 Sym_u3 - ok
17:43:18.0995 3144 [ 9A51B04E9886AA4EE90093586B0BA88D ] SysMain C:\Windows\system32\sysmain.dll
17:43:19.0011 3144 SysMain - ok
17:43:19.0058 3144 [ 2DCA225EAE15F42C0933E998EE0231C3 ] TabletInputService C:\Windows\System32\TabSvc.dll
17:43:19.0058 3144 TabletInputService - ok
17:43:19.0073 3144 [ D7673E4B38CE21EE54C59EEEB65E2483 ] TapiSrv C:\Windows\System32\tapisrv.dll
17:43:19.0089 3144 TapiSrv - ok
17:43:19.0104 3144 [ CB05822CD9CC6C688168E113C603DBE7 ] TBS C:\Windows\System32\tbssvc.dll
17:43:19.0120 3144 TBS - ok
17:43:19.0167 3144 [ 548E198BAE21EFC21F8B5F0C1728AD27 ] Tcpip C:\Windows\system32\drivers\tcpip.sys
17:43:19.0167 3144 Tcpip - ok
17:43:19.0214 3144 [ 548E198BAE21EFC21F8B5F0C1728AD27 ] Tcpip6 C:\Windows\system32\DRIVERS\tcpip.sys
17:43:19.0214 3144 Tcpip6 - ok
17:43:19.0260 3144 [ 608C345A255D82A6289C2D468EB41FD7 ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
17:43:19.0260 3144 tcpipreg - ok
17:43:19.0276 3144 [ 5DCF5E267BE67A1AE926F2DF77FBCC56 ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
17:43:19.0276 3144 TDPIPE - ok
17:43:19.0292 3144 [ 389C63E32B3CEFED425B61ED92D3F021 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
17:43:19.0292 3144 TDTCP - ok
17:43:19.0323 3144 [ 76B06EB8A01FC8624D699E7045303E54 ] tdx C:\Windows\system32\DRIVERS\tdx.sys
17:43:19.0323 3144 tdx - ok
17:43:19.0323 3144 [ 3CAD38910468EAB9A6479E2F01DB43C7 ] TermDD C:\Windows\system32\DRIVERS\termdd.sys
17:43:19.0338 3144 TermDD - ok
17:43:19.0354 3144 [ BB95DA09BEF6E7A131BFF3BA5032090D ] TermService C:\Windows\System32\termsrv.dll
17:43:19.0370 3144 TermService - ok
17:43:19.0385 3144 [ C7230FBEE14437716701C15BE02C27B8 ] Themes C:\Windows\system32\shsvcs.dll
17:43:19.0385 3144 Themes - ok
17:43:19.0401 3144 [ 1076FFCFFAAE8385FD62DFCB25AC4708 ] THREADORDER C:\Windows\system32\mmcss.dll
17:43:19.0416 3144 THREADORDER - ok
17:43:19.0432 3144 TOSHIBA Bluetooth Service - ok
17:43:19.0448 3144 Tosrfcom - ok
17:43:19.0463 3144 [ EC74E77D0EB004BD3A809B5F8FB8C2CE ] TrkWks C:\Windows\System32\trkwks.dll
17:43:19.0479 3144 TrkWks - ok
17:43:19.0510 3144 [ 97D9D6A04E3AD9B6C626B9931DB78DBA ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
17:43:19.0510 3144 TrustedInstaller - ok
17:43:19.0541 3144 [ DCF0F056A2E4F52287264F5AB29CF206 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
17:43:19.0541 3144 tssecsrv - ok
17:43:19.0572 3144 [ CAECC0120AC49E3D2F758B9169872D38 ] tunmp C:\Windows\system32\DRIVERS\tunmp.sys
17:43:19.0572 3144 tunmp - ok
17:43:19.0588 3144 [ 300DB877AC094FEAB0BE7688C3454A9C ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
17:43:19.0588 3144 tunnel - ok
17:43:19.0619 3144 [ C3ADE15414120033A36C0F293D4A4121 ] uagp35 C:\Windows\system32\drivers\uagp35.sys
17:43:19.0619 3144 uagp35 - ok
17:43:19.0666 3144 [ D9728AF68C4C7693CB100B8441CBDEC6 ] udfs C:\Windows\system32\DRIVERS\udfs.sys
17:43:19.0666 3144 udfs - ok
17:43:19.0697 3144 [ ECEF404F62863755951E09C802C94AD5 ] UI0Detect C:\Windows\system32\UI0Detect.exe
17:43:19.0697 3144 UI0Detect - ok
17:43:19.0697 3144 [ 75E6890EBFCE0841D3291B02E7A8BDB0 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys
17:43:19.0697 3144 uliagpkx - ok
17:43:19.0728 3144 [ 3CD4EA35A6221B85DCC25DAA46313F8D ] uliahci C:\Windows\system32\drivers\uliahci.sys
17:43:19.0728 3144 uliahci - ok
17:43:19.0744 3144 [ 8514D0E5CD0534467C5FC61BE94A569F ] UlSata C:\Windows\system32\drivers\ulsata.sys
17:43:19.0744 3144 UlSata - ok
17:43:19.0760 3144 [ 38C3C6E62B157A6BC46594FADA45C62B ] ulsata2 C:\Windows\system32\drivers\ulsata2.sys
17:43:19.0760 3144 ulsata2 - ok
17:43:19.0775 3144 [ 32CFF9F809AE9AED85464492BF3E32D2 ] umbus C:\Windows\system32\DRIVERS\umbus.sys
17:43:19.0775 3144 umbus - ok
17:43:19.0806 3144 [ 68308183F4AE0BE7BF8ECD07CB297999 ] upnphost C:\Windows\System32\upnphost.dll
17:43:19.0822 3144 upnphost - ok
17:43:19.0853 3144 [ 0916972FB98080355AC1E9A4F92183F7 ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys
17:43:19.0853 3144 usbccgp - ok
17:43:19.0869 3144 [ E9476E6C486E76BC4898074768FB7131 ] usbcir C:\Windows\system32\drivers\usbcir.sys
17:43:19.0869 3144 usbcir - ok
17:43:19.0900 3144 [ 79E96C23A97CE7B8F14D310DA2DB0C9B ] usbehci C:\Windows\system32\DRIVERS\usbehci.sys
17:43:19.0900 3144 usbehci - ok
17:43:19.0916 3144 [ 4673BBCB006AF60E7ABDDBE7A130BA42 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys
17:43:19.0916 3144 usbhub - ok
17:43:19.0931 3144 [ CE697FEE0D479290D89BEC80DFE793B7 ] usbohci C:\Windows\system32\DRIVERS\usbohci.sys
17:43:19.0947 3144 usbohci - ok
17:43:19.0947 3144 [ B51E52ACF758BE00EF3A58EA452FE360 ] usbprint C:\Windows\system32\drivers\usbprint.sys
17:43:19.0947 3144 usbprint - ok
17:43:19.0962 3144 [ BE3DA31C191BC222D9AD503C5224F2AD ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
17:43:19.0978 3144 USBSTOR - ok
17:43:19.0994 3144 [ 325DBBACB8A36AF9988CCF40EAC228CC ] usbuhci C:\Windows\system32\DRIVERS\usbuhci.sys
17:43:19.0994 3144 usbuhci - ok
17:43:20.0025 3144 [ 1509E705F3AC1D474C92454A5C2DD81F ] UxSms C:\Windows\System32\uxsms.dll
17:43:20.0040 3144 UxSms - ok
17:43:20.0040 3144 VClone - ok
17:43:20.0087 3144 [ CD88D1B7776DC17A119049742EC07EB4 ] vds C:\Windows\System32\vds.exe
17:43:20.0087 3144 vds - ok
17:43:20.0118 3144 [ 87B06E1F30B749A114F74622D013F8D4 ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
17:43:20.0118 3144 vga - ok
17:43:20.0134 3144 [ 2E93AC0A1D8C79D019DB6C51F036636C ] VgaSave C:\Windows\System32\drivers\vga.sys
17:43:20.0150 3144 VgaSave - ok
17:43:20.0165 3144 [ 045D9961E591CF0674A920B6BA3BA5CB ] viaagp C:\Windows\system32\drivers\viaagp.sys
17:43:20.0181 3144 viaagp - ok
17:43:20.0196 3144 [ 56A4DE5F02F2E88182B0981119B4DD98 ] ViaC7 C:\Windows\system32\drivers\viac7.sys
17:43:20.0196 3144 ViaC7 - ok
17:43:20.0212 3144 [ FD2E3175FCADA350C7AB4521DCA187EC ] viaide C:\Windows\system32\drivers\viaide.sys
17:43:20.0212 3144 viaide - ok
17:43:20.0228 3144 [ 69503668AC66C77C6CD7AF86FBDF8C43 ] volmgr C:\Windows\system32\drivers\volmgr.sys
17:43:20.0228 3144 volmgr - ok
17:43:20.0259 3144 [ 23E41B834759917BFD6B9A0D625D0C28 ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
17:43:20.0259 3144 volmgrx - ok
17:43:20.0306 3144 [ 786DB5771F05EF300390399F626BF30A ] volsnap C:\Windows\system32\drivers\volsnap.sys
17:43:20.0306 3144 volsnap - ok
17:43:20.0337 3144 [ D984439746D42B30FC65A4C3546C6829 ] vsmraid C:\Windows\system32\drivers\vsmraid.sys
17:43:20.0337 3144 vsmraid - ok
17:43:20.0368 3144 [ DB3D19F850C6EB32BDCB9BC0836ACDDB ] VSS C:\Windows\system32\vssvc.exe
17:43:20.0384 3144 VSS - ok
17:43:20.0384 3144 vToolbarUpdater13.2.0 - ok
17:43:20.0415 3144 [ 96EA68B9EB310A69C25EBB0282B2B9DE ] W32Time C:\Windows\system32\w32time.dll
17:43:20.0430 3144 W32Time - ok
17:43:20.0446 3144 [ 48DFEE8F1AF7C8235D4E626F0C4FE031 ] WacomPen C:\Windows\system32\drivers\wacompen.sys
17:43:20.0446 3144 WacomPen - ok
17:43:20.0477 3144 [ 55201897378CCA7AF8B5EFD874374A26 ] Wanarp C:\Windows\system32\DRIVERS\wanarp.sys
17:43:20.0477 3144 Wanarp - ok
17:43:20.0477 3144 [ 55201897378CCA7AF8B5EFD874374A26 ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
17:43:20.0477 3144 Wanarpv6 - ok
17:43:20.0493 3144 [ A3CD60FD826381B49F03832590E069AF ] wcncsvc C:\Windows\System32\wcncsvc.dll
17:43:20.0508 3144 wcncsvc - ok
17:43:20.0540 3144 [ 11BCB7AFCDD7AADACB5746F544D3A9C7 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
17:43:20.0540 3144 WcsPlugInService - ok
17:43:20.0555 3144 [ AFC5AD65B991C1E205CF25CFDBF7A6F4 ] Wd C:\Windows\system32\drivers\wd.sys
17:43:20.0555 3144 Wd - ok
17:43:20.0602 3144 [ A840213F1ACDCC175B4D1D5AAEAC0D7A ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
17:43:20.0618 3144 Wdf01000 - ok
17:43:20.0633 3144 [ ABFC76B48BB6C96E3338D8943C5D93B5 ] WdiServiceHost C:\Windows\system32\wdi.dll
17:43:20.0649 3144 WdiServiceHost - ok
17:43:20.0649 3144 [ ABFC76B48BB6C96E3338D8943C5D93B5 ] WdiSystemHost C:\Windows\system32\wdi.dll
17:43:20.0649 3144 WdiSystemHost - ok
17:43:20.0696 3144 [ 04C37D8107320312FBAE09926103D5E2 ] WebClient C:\Windows\System32\webclnt.dll
17:43:20.0696 3144 WebClient - ok
17:43:20.0727 3144 [ AE3736E7E8892241C23E4EBBB7453B60 ] Wecsvc C:\Windows\system32\wecsvc.dll
17:43:20.0727 3144 Wecsvc - ok
17:43:20.0727 3144 [ 670FF720071ED741206D69BD995EA453 ] wercplsupport C:\Windows\System32\wercplsupport.dll
17:43:20.0742 3144 wercplsupport - ok
17:43:20.0774 3144 [ 32B88481D3B326DA6DEB07B1D03481E7 ] WerSvc C:\Windows\System32\WerSvc.dll
17:43:20.0774 3144 WerSvc - ok
17:43:20.0820 3144 [ 4575AA12561C5648483403541D0D7F2B ] WinDefend C:\Program Files\Windows Defender\mpsvc.dll
17:43:20.0820 3144 WinDefend - ok
17:43:20.0836 3144 WinHttpAutoProxySvc - ok
17:43:20.0867 3144 [ 6B2A1D0E80110E3D04E6863C6E62FD8A ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
17:43:20.0867 3144 Winmgmt - ok
17:43:20.0930 3144 [ 7CFE68BDC065E55AA5E8421607037511 ] WinRM C:\Windows\system32\WsmSvc.dll
17:43:20.0945 3144 WinRM - ok
17:43:20.0992 3144 [ C008405E4FEEB069E30DA1D823910234 ] Wlansvc C:\Windows\System32\wlansvc.dll
17:43:21.0008 3144 Wlansvc - ok
17:43:21.0101 3144 [ 5144AE67D60EC653F97DDF3FEED29E77 ] wlidsvc C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
17:43:21.0117 3144 wlidsvc - ok
17:43:21.0132 3144 [ 701A9F884A294327E9141D73746EE279 ] WmiAcpi C:\Windows\system32\drivers\wmiacpi.sys
17:43:21.0132 3144 WmiAcpi - ok
17:43:21.0179 3144 [ 43BE3875207DCB62A85C8C49970B66CC ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
17:43:21.0179 3144 wmiApSrv - ok
17:43:21.0242 3144 [ 3978704576A121A9204F8CC49A301A9B ] WMPNetworkSvc C:\Program Files\Windows Media Player\wmpnetwk.exe
17:43:21.0242 3144 WMPNetworkSvc - ok
17:43:21.0273 3144 [ CFC5A04558F5070CEE3E3A7809F3FF52 ] WPCSvc C:\Windows\System32\wpcsvc.dll
17:43:21.0273 3144 WPCSvc - ok
17:43:21.0288 3144 [ 801FBDB89D472B3C467EB112A0FC9246 ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
17:43:21.0304 3144 WPDBusEnum - ok
17:43:21.0351 3144 [ DCF3E3EDF5109EE8BC02FE6E1F045795 ] WPFFontCache_v0400 C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
17:43:21.0366 3144 WPFFontCache_v0400 - ok
17:43:21.0382 3144 [ E3A3CB253C0EC2494D4A61F5E43A389C ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
17:43:21.0382 3144 ws2ifsl - ok
17:43:21.0398 3144 [ 1CA6C40261DDC0425987980D0CD2AAAB ] wscsvc C:\Windows\system32\wscsvc.dll
17:43:21.0413 3144 wscsvc - ok
17:43:21.0413 3144 WSearch - ok
17:43:21.0507 3144 [ FC3EC24FCE372C89423E015A2AC1A31E ] wuauserv C:\Windows\system32\wuaueng.dll
17:43:21.0522 3144 wuauserv - ok
17:43:21.0554 3144 [ 06E6F32C8D0A3F66D956F57B43A2E070 ] WudfPf C:\Windows\system32\drivers\WudfPf.sys
17:43:21.0554 3144 WudfPf - ok
17:43:21.0569 3144 [ 867C301E8B790040AE9CF6486E8041DF ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys
17:43:21.0585 3144 WUDFRd - ok
17:43:21.0600 3144 [ FE47B7BC8EA320C2D9B5E5BF6E303765 ] wudfsvc C:\Windows\System32\WUDFSvc.dll
17:43:21.0600 3144 wudfsvc - ok
17:43:21.0632 3144 [ BFAB14D10543963DBDA7128ADABFA51D ] yukonwlh C:\Windows\system32\DRIVERS\yk60x86.sys
17:43:21.0632 3144 yukonwlh - ok
17:43:21.0647 3144 ================ Scan global ===============================
17:43:21.0678 3144 [ F31EEBC1A1C81FD04005489CC3DCDFE7 ] C:\Windows\system32\basesrv.dll
17:43:21.0725 3144 [ A508314231C49AEE86987CEA3EAECAD1 ] C:\Windows\system32\winsrv.dll
17:43:21.0741 3144 [ A508314231C49AEE86987CEA3EAECAD1 ] C:\Windows\system32\winsrv.dll
17:43:21.0788 3144 [ D4E6D91C1349B7BFB3599A6ADA56851B ] C:\Windows\system32\services.exe
17:43:21.0788 3144 [Global] - ok
17:43:21.0788 3144 ================ Scan MBR ==================================
17:43:21.0819 3144 [ A863475757CC50891AA8458C415E4B25 ] \Device\Harddisk0\DR0
17:43:24.0393 3144 \Device\Harddisk0\DR0 - ok
17:43:24.0393 3144 ================ Scan VBR ==================================
17:43:24.0393 3144 [ 3482BDEFDEA2AC160BD8A30537E9EE8E ] \Device\Harddisk0\DR0\Partition1
17:43:24.0408 3144 \Device\Harddisk0\DR0\Partition1 - ok
17:43:24.0424 3144 [ 9C69C158B023661AF22683B65C350292 ] \Device\Harddisk0\DR0\Partition2
17:43:24.0424 3144 \Device\Harddisk0\DR0\Partition2 - ok
17:43:24.0424 3144 ============================================================
17:43:24.0424 3144 Scan finished
17:43:24.0424 3144 ============================================================
17:43:24.0440 3488 Detected object count: 1
17:43:24.0440 3488 Actual detected object count: 1
17:43:27.0996 3488 sptd ( LockedFile.Multi.Generic ) - skipped by user
17:43:27.0996 3488 sptd ( LockedFile.Multi.Generic ) - User select action: Skip
17:43:31.0226 3080 Deinitialize success