Stránka 1 z 1

Prosím o kontrolu  Vyřešeno

Napsal: 04 kvě 2014 19:20
od TomášCH
Nefungují mi stránky Facebook, Youtube a Google. Ostatní jde.

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:18:21, on 4.5.2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16470)
CHROME: 34.0.1847.131
FIREFOX: 28.0 (cs)
Boot mode: Normal

Running processes:
C:\Windows\MHotKey.exe
C:\Windows\ChiFuncExt.exe
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE
C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
C:\Windows\HKExt3.exe
C:\Program Files (x86)\Gaming Keyboard\Monitor.EXE
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Gaming Keyboard\OSD.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_206.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_206.exe
C:\Users\PC\Desktop\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.bearshare.net?appid=876
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: CENZURA Toolbar - {F3FEE66E-E034-436a-86E4-9690573BEE8A} - (no file)
R3 - URLSearchHook: Softonic-Eng7 Toolbar - {414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3} - C:\Program Files (x86)\Softonic-Eng7\tbSoft.dll
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: lookinglink - {02a8433a-1da4-41be-8f4a-d7e5b15aab40} - C:\Program Files (x86)\lookinglink\lookinglinkbho.dll
O2 - BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.141\McAfeeMSS_IE.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll
O2 - BHO: Softonic-Eng7 Toolbar - {414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3} - C:\Program Files (x86)\Softonic-Eng7\tbSoft.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~2\Office14\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~2\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O2 - BHO: CENZURA Toolbar - {F3FEE66E-E034-436a-86E4-9690573BEE8A} - (no file)
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll
O3 - Toolbar: Softonic-Eng7 Toolbar - {414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3} - C:\Program Files (x86)\Softonic-Eng7\tbSoft.dll
O3 - Toolbar: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll
O3 - Toolbar: CENZURA Toolbar - {F3FEE66E-E034-436a-86E4-9690573BEE8A} - (no file)
O3 - Toolbar: avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [reset] regedit /s reset.reg
O4 - HKLM\..\Run: [LchDrvKey] LchDrvKey.exe
O4 - HKLM\..\Run: [HKExt3] HKExt3.exe
O4 - HKLM\..\Run: [BCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [VICTORY Gaming Keyboard] "C:\Program Files (x86)\Gaming Keyboard\Monitor.exe"
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [Google Update] "C:\Users\PC\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [EPSON SX210 Series] C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIFDE.EXE /FU "C:\Windows\TEMP\E_S67B.tmp" /EF "HKCU"
O4 - HKCU\..\Run: [OfficeSyncProcess] "C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE"
O4 - HKCU\..\Run: [Pando Media Booster] C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'Default user')
O4 - Global Startup: McAfee Security Scan Plus.lnk = C:\Program Files\McAfee Security Scan\3.8.141\SSScheduler.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~2\MICROS~2\Office14\ONBttnIE.dll/105
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~2\Office12\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O20 - AppInit_DLLs:
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: EPSON V5 Service4(01) (EPSON_EB_RPCV4_01) - SEIKO EPSON CORPORATION - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40STB.EXE
O23 - Service: EPSON V3 Service4(01) (EPSON_PM_RPCV4_01) - SEIKO EPSON CORPORATION - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE
O23 - Service: ES lite Service for program management. (ES lite Service) - Unknown owner - C:\Program Files (x86)\Gigabyte\EasySaver\ESSVR.EXE
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files\McAfee Security Scan\3.8.141\McCHSvc.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: TunngleService - Tunngle.net GmbH - C:\Program Files (x86)\Tunngle\TnglCtrl.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 13289 bytes

Re: Prosím o kontrolu

Napsal: 05 kvě 2014 08:48
od TomášCH
adwcleaner log

# AdwCleaner v3.207 - Report created 05/05/2014 at 08:42:02
# Updated 05/05/2014 by Xplode
# Operating System : Windows 7 Ultimate Service Pack 1 (64 bits)
# Username : PC - PC-PC
# Running from : C:\Users\PC\Desktop\adwcleaner.exe
# Option : Scan

***** [ Services ] *****


***** [ Files / Folders ] *****

File Found : C:\Program Files (x86)\Mozilla Firefox\Extensions\wtxpcom@mybrowserbar.com
File Found : C:\Users\PC\AppData\Local\Temp\Uninstall.exe
File Found : C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\zftca4cq.default\searchplugins\daemon-search.xml
File Found : C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\zftca4cq.default\searchplugins\icqplugin.xml
File Found : C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\zftca4cq.default\searchplugins\icqplugin-1.xml
File Found : C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\zftca4cq.default\searchplugins\icqplugin-2.xml
File Found : C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\zftca4cq.default\searchplugins\Search_Results.xml
File Found : C:\Windows\System32\roboot64.exe
Folder Found : C:\Program Files (x86)\Application Updater
Folder Found : C:\Program Files (x86)\Common Files\Spigot
Folder Found : C:\Program Files (x86)\Conduit
Folder Found : C:\Program Files (x86)\ConduitEngine
Folder Found : C:\Program Files (x86)\DAEMON Tools Toolbar
Folder Found : C:\Program Files (x86)\ICQ6Toolbar
Folder Found : C:\Program Files (x86)\iMesh Applications
Folder Found : C:\Program Files (x86)\Softonic-Eng7
Folder Found : C:\Program Files (x86)\CENZURA Toolbar
Folder Found : C:\ProgramData\AlawarWrapper
Folder Found : C:\ProgramData\ICQ\ICQToolbar
Folder Found : C:\ProgramData\Trymedia
Folder Found : C:\Users\PC\AppData\Local\AlawarWrapper
Folder Found : C:\Users\PC\AppData\Local\Conduit
Folder Found : C:\Users\PC\AppData\Local\iMesh
Folder Found : C:\Users\PC\AppData\Local\PackageAware
Folder Found : C:\Users\PC\AppData\LocalLow\Conduit
Folder Found : C:\Users\PC\AppData\LocalLow\ConduitEngine
Folder Found : C:\Users\PC\AppData\LocalLow\PriceGong
Folder Found : C:\Users\PC\AppData\LocalLow\Search Settings
Folder Found : C:\Users\PC\AppData\LocalLow\Softonic-Eng7
Folder Found : C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\zftca4cq.default\Conduit
Folder Found : C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\zftca4cq.default\ConduitCommon
Folder Found : C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\zftca4cq.default\ICQToolbarData
Folder Found : C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\zftca4cq.default\Smartbar
Folder Found : C:\Users\PC\Documents\iMesh
Folder Found : C:\Users\Public\Documents\AlawarWrapper
Folder Found : C:\Users\Public\Documents\iWin

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Found : HKCU\Software\AppDataLow\Software\Conduit
Key Found : HKCU\Software\AppDataLow\Software\conduitEngine
Key Found : HKCU\Software\AppDataLow\Software\conduitEngine
Key Found : HKCU\Software\AppDataLow\Software\PriceGong
Key Found : HKCU\Software\AppDataLow\Software\Search Settings
Key Found : HKCU\Software\AppDataLow\Software\SmartBar
Key Found : HKCU\Software\AppDataLow\Software\Softonic-Eng7
Key Found : HKCU\Software\AppDataLow\Toolbar
Key Found : HKCU\Software\Conduit
Key Found : HKCU\Software\dt soft\daemon tools toolbar
Key Found : HKCU\Software\Headlight
Key Found : HKCU\Software\ICQ\ICQToolbar
Key Found : HKCU\Software\Imesh
Key Found : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\ICQ\ICQToolBar
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2002}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AD22EBAF-0D18-4FC7-90CC-5EA0ABBE9EB8}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{74322BF9-DF26-493F-B0DA-6D2FC5E6429E}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F3FEE66E-E034-436A-86E4-9690573BEE8A}
Key Found : HKCU\Software\Softonic
Key Found : HKCU\Software\YahooPartnerToolbar
Key Found : [x64] HKCU\Software\Conduit
Key Found : [x64] HKCU\Software\dt soft\daemon tools toolbar
Key Found : [x64] HKCU\Software\Headlight
Key Found : [x64] HKCU\Software\ICQ\ICQToolbar
Key Found : [x64] HKCU\Software\Imesh
Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}
Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2002}
Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AD22EBAF-0D18-4FC7-90CC-5EA0ABBE9EB8}
Key Found : [x64] HKCU\Software\Softonic
Key Found : [x64] HKCU\Software\YahooPartnerToolbar
Key Found : HKLM\SOFTWARE\14919ea49a8f3b4aa3cf1058d9a64cec
Key Found : HKLM\Software\Application Updater
Key Found : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{F3FEE66E-E034-436A-86E4-9690573BEE8A}
Key Found : HKLM\SOFTWARE\Classes\Conduit.Engine
Key Found : HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
Key Found : HKLM\SOFTWARE\Classes\Toolbar.CT2405280
Key Found : HKLM\Software\Conduit
Key Found : HKLM\Software\conduitEngine
Key Found : HKLM\Software\conduitEngine
Key Found : HKLM\Software\DataMngr
Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\bopakagnckmlgajfccecajhnimjiiedh
Key Found : HKLM\Software\ICQ\ICQToolbar
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{15A0413E-9F45-4D45-9A75-2C20B15B5B51}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2002}
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\AskInstallChecker-1_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\AskInstallChecker-1_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\iMesh_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\iMesh_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_directx_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_directx_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{414B6D9D-4A95-4E8D-B5B1-149DD2D93BB3}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F3FEE66E-E034-436A-86E4-9690573BEE8A}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\conduitEngine
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\conduitEngine
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Softonic-Eng7 Toolbar
Key Found : HKLM\Software\Search Settings
Key Found : HKLM\Software\Softonic-Eng7
Key Found : [x64] HKLM\SOFTWARE\Classes\CLSID\{32099AAC-C132-4136-9E9A-4E364A424E17}
Key Found : [x64] HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{D54C859C-6066-4F31-8FE0-2AAEDCAE67D7}
Key Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2002}
Value Found : HKCU\Software\Microsoft\Internet Explorer\Main [ICQ Search]
Value Found : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{32099AAC-C132-4136-9E9A-4E364A424E17}]
Value Found : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{414B6D9D-4A95-4E8D-B5B1-149DD2D93BB3}]
Value Found : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{414B6D9D-4A95-4E8D-B5B1-149DD2D93BB3}]
Value Found : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{F3FEE66E-E034-436A-86E4-9690573BEE8A}]
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{30F9B915-B755-4826-820B-08FBA6BD249D}]
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{30F9B915-B755-4826-820B-08FBA6BD249D}]
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{414B6D9D-4A95-4E8D-B5B1-149DD2D93BB3}]
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{F3FEE66E-E034-436A-86E4-9690573BEE8A}]
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{414B6D9D-4A95-4E8D-B5B1-149DD2D93BB3}]
Value Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{32099AAC-C132-4136-9E9A-4E364A424E17}]

***** [ Browsers ] *****

-\\ Internet Explorer v9.0.8112.16470

Setting Found : HKCU\Software\Microsoft\Internet Explorer\Main [ICQ Search] - hxxp://search.icq.com/search/results.php?ch_id=xmas&q={searchTerms}

-\\ Mozilla Firefox v28.0 (cs)

[ File : C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\zftca4cq.default\prefs.js ]

Line Found : user_pref("CT2405280..clientLogIsEnabled", true);
Line Found : user_pref("CT2405280..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
Line Found : user_pref("CT2405280..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
Line Found : user_pref("CT2405280.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);
Line Found : user_pref("CT2405280.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
Line Found : user_pref("CT2405280.BrowserCompStateIsOpen_129659301444269038", true);
Line Found : user_pref("CT2405280.BrowserCompStateIsOpen_129774179987157757", true);
Line Found : user_pref("CT2405280.BrowserCompStateIsOpen_129784483889712321", true);
Line Found : user_pref("CT2405280.BrowserCompStateIsOpen_129791224268491262", true);
Line Found : user_pref("CT2405280.BrowserCompStateIsOpen_1366638805000", true);
Line Found : user_pref("CT2405280.BrowserCompStateIsOpen_1367226336000", true);
Line Found : user_pref("CT2405280.CTID", "CT2405280");
Line Found : user_pref("CT2405280.CommunitiesChangesLastCheckTime", "0");
Line Found : user_pref("CT2405280.ConfigurationLastCheckTime", "Thu Nov 07 2013 10:33:51 GMT+0100");
Line Found : user_pref("CT2405280.CurrentServerDate", "7-11-2013");
Line Found : user_pref("CT2405280.DialogsAlignMode", "LTR");
Line Found : user_pref("CT2405280.DialogsGetterLastCheckTime", "Sun Nov 03 2013 00:29:20 GMT+0100");
Line Found : user_pref("CT2405280.DownloadReferralCookieData", "");
Line Found : user_pref("CT2405280.EMailNotifierPollDate", "Sat Dec 11 2010 20:43:52 GMT+0100");
Line Found : user_pref("CT2405280.FeedLastCount1783261708582779529", 0);
Line Found : user_pref("CT2405280.FeedPollDate129255180392415092", "Sat Dec 11 2010 20:43:52 GMT+0100");
Line Found : user_pref("CT2405280.FeedPollDate129255180392415098", "Sat Dec 11 2010 20:43:52 GMT+0100");
Line Found : user_pref("CT2405280.FeedPollDate129255180392415104", "Sat Dec 11 2010 20:43:52 GMT+0100");
Line Found : user_pref("CT2405280.FeedPollDate129255180392415110", "Sat Dec 11 2010 20:43:52 GMT+0100");
Line Found : user_pref("CT2405280.FeedPollDate129255180392415116", "Sat Dec 11 2010 20:43:52 GMT+0100");
Line Found : user_pref("CT2405280.FeedPollDate129255180392415122", "Sat Dec 11 2010 20:43:52 GMT+0100");
Line Found : user_pref("CT2405280.FeedPollDate129255180392571378", "Sat Dec 11 2010 20:43:52 GMT+0100");
Line Found : user_pref("CT2405280.FeedPollDate129255180392571384", "Sat Dec 11 2010 20:43:52 GMT+0100");
Line Found : user_pref("CT2405280.FeedPollDate129255180392571390", "Sat Dec 11 2010 20:43:52 GMT+0100");
Line Found : user_pref("CT2405280.FeedPollDate129255180392571396", "Sat Dec 11 2010 20:43:53 GMT+0100");
Line Found : user_pref("CT2405280.FeedPollDate129255180392571402", "Sat Dec 11 2010 20:43:53 GMT+0100");
Line Found : user_pref("CT2405280.FeedPollDate129255180392571408", "Sat Dec 11 2010 20:43:53 GMT+0100");
Line Found : user_pref("CT2405280.FeedPollDate129255180392571414", "Sat Dec 11 2010 20:43:53 GMT+0100");
Line Found : user_pref("CT2405280.FeedPollDate129255180392571420", "Sat Dec 11 2010 20:43:53 GMT+0100");
Line Found : user_pref("CT2405280.FeedPollDate129255180392571426", "Sat Dec 11 2010 20:43:53 GMT+0100");
Line Found : user_pref("CT2405280.FeedPollDate129255180392571432", "Sat Dec 11 2010 20:43:53 GMT+0100");
Line Found : user_pref("CT2405280.FeedPollDate129255180392571438", "Sat Dec 11 2010 20:43:53 GMT+0100");
Line Found : user_pref("CT2405280.FeedPollDate129255180392571444", "Sat Dec 11 2010 20:43:53 GMT+0100");
Line Found : user_pref("CT2405280.FeedPollDate129255180392727700", "Sat Dec 11 2010 20:43:53 GMT+0100");
Line Found : user_pref("CT2405280.FeedPollDate129255180392727706", "Sat Dec 11 2010 20:43:54 GMT+0100");
Line Found : user_pref("CT2405280.FeedPollDate129255180392727712", "Sat Dec 11 2010 20:43:54 GMT+0100");
Line Found : user_pref("CT2405280.FeedPollDate129255180392727718", "Sat Dec 11 2010 20:43:54 GMT+0100");
Line Found : user_pref("CT2405280.FeedPollDate129255180392727724", "Sat Dec 11 2010 20:43:54 GMT+0100");
Line Found : user_pref("CT2405280.FeedPollDate129255180392727730", "Sat Dec 11 2010 20:43:54 GMT+0100");
Line Found : user_pref("CT2405280.FeedPollDate129255180392727736", "Sat Dec 11 2010 20:43:54 GMT+0100");
Line Found : user_pref("CT2405280.FeedPollDate129255180392727742", "Sat Dec 11 2010 20:43:54 GMT+0100");
Line Found : user_pref("CT2405280.FeedPollDate129255180392727748", "Sat Dec 11 2010 20:43:54 GMT+0100");
Line Found : user_pref("CT2405280.FeedPollDate129255180392727754", "Sat Dec 11 2010 20:43:54 GMT+0100");
Line Found : user_pref("CT2405280.FeedPollDate129255180392727760", "Sat Dec 11 2010 20:43:54 GMT+0100");
Line Found : user_pref("CT2405280.FeedPollDate129255180392727766", "Sat Dec 11 2010 20:43:55 GMT+0100");
Line Found : user_pref("CT2405280.FeedPollDate129255180392727772", "Sat Dec 11 2010 20:43:55 GMT+0100");
Line Found : user_pref("CT2405280.FeedPollDate129255180392727778", "Sat Dec 11 2010 20:43:55 GMT+0100");
Line Found : user_pref("CT2405280.FeedPollDate129255180392727784", "Sat Dec 11 2010 20:43:55 GMT+0100");
Line Found : user_pref("CT2405280.FeedPollDate129255180392727790", "Sat Dec 11 2010 20:43:55 GMT+0100");
Line Found : user_pref("CT2405280.FeedPollDate129255180392727796", "Sat Dec 11 2010 20:43:55 GMT+0100");
Line Found : user_pref("CT2405280.FeedPollDate129255180392727802", "Sat Dec 11 2010 20:43:55 GMT+0100");
Line Found : user_pref("CT2405280.FeedPollDate129255180392727808", "Sat Dec 11 2010 20:43:55 GMT+0100");
Line Found : user_pref("CT2405280.FeedPollDate129255180392727814", "Sat Dec 11 2010 20:43:55 GMT+0100");
Line Found : user_pref("CT2405280.FeedPollDate129255180392727820", "Sat Dec 11 2010 20:43:55 GMT+0100");
Line Found : user_pref("CT2405280.FeedPollDate129255180392727826", "Sat Dec 11 2010 20:43:56 GMT+0100");
Line Found : user_pref("CT2405280.FeedPollDate129255180392727832", "Sat Dec 11 2010 20:43:56 GMT+0100");
Line Found : user_pref("CT2405280.FeedPollDate129255180392727838", "Sat Dec 11 2010 20:43:56 GMT+0100");
Line Found : user_pref("CT2405280.FeedPollDate129255180392727844", "Sat Dec 11 2010 20:43:56 GMT+0100");
Line Found : user_pref("CT2405280.FeedPollDate129255180392727850", "Sat Dec 11 2010 20:43:56 GMT+0100");
Line Found : user_pref("CT2405280.FeedPollDate129255180392727856", "Sat Dec 11 2010 20:43:56 GMT+0100");
Line Found : user_pref("CT2405280.FeedPollDate129255180392727862", "Sat Dec 11 2010 20:43:56 GMT+0100");
Line Found : user_pref("CT2405280.FeedPollDate129255180392727868", "Sat Dec 11 2010 20:43:56 GMT+0100");
Line Found : user_pref("CT2405280.FeedPollDate129255180392727874", "Sat Dec 11 2010 20:43:56 GMT+0100");
Line Found : user_pref("CT2405280.FeedPollDate129255180392727880", "Sat Dec 11 2010 20:43:56 GMT+0100");
Line Found : user_pref("CT2405280.FeedPollDate129255180392727886", "Sat Dec 11 2010 20:43:57 GMT+0100");
Line Found : user_pref("CT2405280.FeedPollDate129255180392727892", "Sat Dec 11 2010 20:43:57 GMT+0100");
Line Found : user_pref("CT2405280.FeedPollDate129255180392727898", "Sat Dec 11 2010 20:43:57 GMT+0100");
Line Found : user_pref("CT2405280.FirstServerDate", "11-12-2010");
Line Found : user_pref("CT2405280.FirstTime", true);
Line Found : user_pref("CT2405280.FirstTimeFF3", true);
Line Found : user_pref("CT2405280.FixPageNotFoundErrors", true);
Line Found : user_pref("CT2405280.GroupingInvalidateCache", false);
Line Found : user_pref("CT2405280.GroupingLastCheckTime", "0");
Line Found : user_pref("CT2405280.GroupingLastServerUpdateTime", "0");
Line Found : user_pref("CT2405280.GroupingServerCheckInterval", 1440);
Line Found : user_pref("CT2405280.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
Line Found : user_pref("CT2405280.HasUserGlobalKeys", true);
Line Found : user_pref("CT2405280.Initialize", true);
Line Found : user_pref("CT2405280.InitializeCommonPrefs", true);
Line Found : user_pref("CT2405280.InstallationAndCookieDataSentCount", 3);
Line Found : user_pref("CT2405280.InstallationId", "integrated_CT2405280 .exe");
Line Found : user_pref("CT2405280.InstallationType", "ConduitIntegration");
Line Found : user_pref("CT2405280.InstalledDate", "Sat Dec 11 2010 20:43:52 GMT+0100");
Line Found : user_pref("CT2405280.InvalidateCache", false);
Line Found : user_pref("CT2405280.IsAlertDBUpdated", true);
Line Found : user_pref("CT2405280.IsGrouping", false);
Line Found : user_pref("CT2405280.IsMulticommunity", false);
Line Found : user_pref("CT2405280.IsOpenThankYouPage", false);
Line Found : user_pref("CT2405280.IsOpenUninstallPage", true);
Line Found : user_pref("CT2405280.LanguagePackLastCheckTime", "Thu Nov 07 2013 10:33:51 GMT+0100");
Line Found : user_pref("CT2405280.LanguagePackReloadIntervalMM", 1440);
Line Found : user_pref("CT2405280.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx");
Line Found : user_pref("CT2405280.LastLogin_3.12.0.7", "Tue May 01 2012 19:01:34 GMT+0200");
Line Found : user_pref("CT2405280.LastLogin_3.12.2.3", "Wed May 30 2012 07:38:27 GMT+0200");
Line Found : user_pref("CT2405280.LastLogin_3.13.0.6", "Sun Jul 15 2012 21:54:47 GMT+0200");
Line Found : user_pref("CT2405280.LastLogin_3.14.1.0", "Wed Aug 22 2012 16:49:47 GMT+0200");
Line Found : user_pref("CT2405280.LastLogin_3.15.1.0", "Tue Nov 06 2012 17:42:47 GMT+0100");
Line Found : user_pref("CT2405280.LastLogin_3.16.0.100", "Sun Feb 10 2013 19:33:12 GMT+0100");
Line Found : user_pref("CT2405280.LastLogin_3.16.0.3", "Fri Dec 28 2012 14:22:01 GMT+0100");
Line Found : user_pref("CT2405280.LastLogin_3.18.0.7", "Tue Jul 16 2013 10:16:34 GMT+0200");
Line Found : user_pref("CT2405280.LastLogin_3.19.0.3", "Tue Sep 03 2013 17:41:30 GMT+0200");
Line Found : user_pref("CT2405280.LastLogin_3.2.1.3", "Sat Dec 11 2010 20:25:53 GMT+0100");
Line Found : user_pref("CT2405280.LastLogin_3.20.0.4", "Thu Nov 07 2013 09:03:51 GMT+0100");
Line Found : user_pref("CT2405280.LatestVersion", "3.20.0.4");
Line Found : user_pref("CT2405280.Locale", "en-us");
Line Found : user_pref("CT2405280.MCDetectTooltipHeight", "83");
Line Found : user_pref("CT2405280.MCDetectTooltipShow", false);
Line Found : user_pref("CT2405280.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
Line Found : user_pref("CT2405280.MCDetectTooltipWidth", "295");
Line Found : user_pref("CT2405280.MyStuffEnabledAtInstallation", true);
Line Found : user_pref("CT2405280.RadioLastCheckTime", "0");
Line Found : user_pref("CT2405280.RadioLastUpdateIPServer", "0");
Line Found : user_pref("CT2405280.RadioLastUpdateServer", "0");
Line Found : user_pref("CT2405280.RestartDialogFirstTime", "false");
Line Found : user_pref("CT2405280.RestartDialogShouldDisplay", "false");
Line Found : user_pref("CT2405280.SearchAPILastCheckTime", "Thu Nov 07 2013 10:33:51 GMT+0100");
Line Found : user_pref("CT2405280.SearchBoxWidth", 100);
Line Found : user_pref("CT2405280.SearchFromAddressBarIsInit", true);
Line Found : user_pref("CT2405280.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2405280&q=");
Line Found : user_pref("CT2405280.SearchInNewTabEnabled", true);
Line Found : user_pref("CT2405280.SearchInNewTabIntervalMM", 1440);
Line Found : user_pref("CT2405280.SearchInNewTabLastCheckTime", "Tue Sep 03 2013 17:41:29 GMT+0200");
Line Found : user_pref("CT2405280.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID&UM=UM_ID");
Line Found : user_pref("CT2405280.SearchInNewTabURLFromSearchAPI", "hxxp://search.conduit.com/?ctid=CT2405280&octid=CT2405280&SearchSource=15&CUI=SB_CUI&SSPV=EB_SSPV&Lay=1&UM=UM_ID");
Line Found : user_pref("CT2405280.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageService.asmx/UsersRequests?ctid=EB_TOOLBAR_ID");
Line Found : user_pref("CT2405280.ServiceMapLastCheckTime", "Thu Nov 07 2013 10:33:51 GMT+0100");
Line Found : user_pref("CT2405280.SettingsLastCheckTime", "Thu Nov 07 2013 09:03:49 GMT+0100");
Line Found : user_pref("CT2405280.SettingsLastUpdate", "1383793885");
Line Found : user_pref("CT2405280.ThirdPartyComponentsInterval", 504);
Line Found : user_pref("CT2405280.ThirdPartyComponentsLastCheck", "Mon Apr 23 2012 16:50:56 GMT+0200");
Line Found : user_pref("CT2405280.ThirdPartyComponentsLastUpdate", "1312887586");
Line Found : user_pref("CT2405280.ToolbarShrinkedFromSetup", false);
Line Found : user_pref("CT2405280.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,client.conduit-storage.com,OurToolbar.com,CommunityToolbars.com,ForumToolbar.com,MyBlogToolbar.com,MyCity[...]
Line Found : user_pref("CT2405280.UserID", "UN12607258772548047");
Line Found : user_pref("CT2405280.ValidationData_Toolbar", 2);
Line Found : user_pref("CT2405280.addressBarTakeOverEnabledInHidden", "true");
Line Found : user_pref("CT2405280.alertChannelId", "799768");
Line Found : user_pref("CT2405280.approveUntrustedApps", false);
Line Found : user_pref("CT2405280.autocompletepro_enable.from_oldbar.enc", "MQ==");
Line Found : user_pref("CT2405280.autocompletepro_enable_auto.from_oldbar.enc", "MQ==");
Line Found : user_pref("CT2405280.backendstorage.autocompletepro_enable", "31");
Line Found : user_pref("CT2405280.backendstorage.autocompletepro_enable_auto", "31");
Line Found : user_pref("CT2405280.backendstorage.cbcountry_000", "435A");
Line Found : user_pref("CT2405280.backendstorage.cbfirsttime", "4D6F6E2041707220323320323031322031363A35313A303520474D542B30323030");
Line Found : user_pref("CT2405280.backendstorage.ct2405280isadsdisabled", "66616C7365");
Line Found : user_pref("CT2405280.backendstorage.hxxp://api18_thetrafficstat_net.pid2", "65663061383638626236616665303936");
Line Found : user_pref("CT2405280.backendstorage.hxxp://api25_thetrafficstat_net.pid2", "65663061383638626236616665303936");
Line Found : user_pref("CT2405280.backendstorage.hxxp://api26_thetrafficstat_net.pid2", "65663061383638626236616665303936");
Line Found : user_pref("CT2405280.backendstorage.shoppingapp.gk.exipres", "5361742041707220323820323031322031363A35313A303320474D542B30323030");
Line Found : user_pref("CT2405280.backendstorage.shoppingapp.gk.geolocation", "637A6563682072657075626C6963");
Line Found : user_pref("CT2405280.cbcountry_000.from_oldbar.enc", "Q1o=");
Line Found : user_pref("CT2405280.cbfirsttime.from_oldbar.enc", "TW9uIEFwciAyMyAyMDEyIDE2OjUxOjA1IEdNVCswMjAw");
Line Found : user_pref("CT2405280.components.1000034", false);
Line Found : user_pref("CT2405280.components.1000082", false);
Line Found : user_pref("CT2405280.components.1000234", false);
Line Found : user_pref("CT2405280.components.129115070377500765", false);
Line Found : user_pref("CT2405280.components.129460356363731287", false);
Line Found : user_pref("CT2405280.components.129460356364043788", false);
Line Found : user_pref("CT2405280.components.129460356720606270", false);
Line Found : user_pref("CT2405280.components.129530456275961869", false);
Line Found : user_pref("CT2405280.components.129530456401347705", false);
Line Found : user_pref("CT2405280.components.129635774053319306", false);
Line Found : user_pref("CT2405280.components.129659301444269038", false);
Line Found : user_pref("CT2405280.components.129774179987157757", false);
Line Found : user_pref("CT2405280.components.129784483889712321", false);
Line Found : user_pref("CT2405280.components.129791224268491262", false);
Line Found : user_pref("CT2405280.components.1783261708582779529", false);
Line Found : user_pref("CT2405280.components.205576709465425410", false);
Line Found : user_pref("CT2405280.components.2763939488594394893", false);
Line Found : user_pref("CT2405280.components.3212677392820717368", false);
Line Found : user_pref("CT2405280.components.3789243233269290664", false);
Line Found : user_pref("CT2405280.components.4483181016027223104", false);
Line Found : user_pref("CT2405280.components.5498874625112287408", false);
Line Found : user_pref("CT2405280.components.5700970090767386265", false);
Line Found : user_pref("CT2405280.components.7794790390421175448", false);
Line Found : user_pref("CT2405280.components.944375478163563274", false);
Line Found : user_pref("CT2405280.countryCode", "CZ");
Line Found : user_pref("CT2405280.ct2405280isadsdisabled.from_oldbar.enc", "ZmFsc2U=");
Line Found : user_pref("CT2405280.firstTimeDialogOpened", true);
Line Found : user_pref("CT2405280.fixPageNotFoundErrorByUser", "TRUE");
Line Found : user_pref("CT2405280.fixPageNotFoundErrorInHidden", "true");
Line Found : user_pref("CT2405280.fullUserID", "UN12607258772548047.UP.202407115330");
Line Found : user_pref("CT2405280.globalFirstTimeInfoLastCheckTime", "Mon Apr 23 2012 16:51:00 GMT+0200");
Line Found : user_pref("CT2405280.homepageProtectorEnableByLogin", true);
Line Found : user_pref("CT2405280.hxxp___api18_thetrafficstat_net.pid2.from_oldbar.enc", "ZWYwYTg2OGJiNmFmZTA5Ng==");
Line Found : user_pref("CT2405280.hxxp___api25_thetrafficstat_net.pid2.from_oldbar.enc", "ZWYwYTg2OGJiNmFmZTA5Ng==");
Line Found : user_pref("CT2405280.hxxp___api26_thetrafficstat_net.pid2.from_oldbar.enc", "ZWYwYTg2OGJiNmFmZTA5Ng==");
Line Found : user_pref("CT2405280.initDone", true);
Line Found : user_pref("CT2405280.installId", "integrated_CT2405280 .exe");
Line Found : user_pref("CT2405280.installType", "ConduitIntegration");
Line Found : user_pref("CT2405280.isAppTrackingManagerOn", true);
Line Found : user_pref("CT2405280.isCheckedStartAsHidden", true);
Line Found : user_pref("CT2405280.isFirstTimeToolbarLoading", "false");
Line Found : user_pref("CT2405280.isPerformedSmartBarTransition", "true");
Line Found : user_pref("CT2405280.lastVersion", "10.29.0.520");
Line Found : user_pref("CT2405280.myStuffEnabled", true);
Line Found : user_pref("CT2405280.myStuffPublihserMinWidth", 400);
Line Found : user_pref("CT2405280.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID");
Line Found : user_pref("CT2405280.myStuffServiceIntervalMM", 1440);
Line Found : user_pref("CT2405280.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUFF_LUT");
Line Found : user_pref("CT2405280.oldAppsList", "128325851945531999,128310509462438058,111,129791224268491262,129460356720606270,129530456275961869,129530456401347705,129460356364043788,1000082,129460356363731287,[...]
Line Found : user_pref("CT2405280.originalSearchAddressUrl", "hxxp://search.icq.com/search/results.php?ch_id=xmas&tb_ver=1.1.7&q=");
Line Found : user_pref("CT2405280.performedDomainChangesMigration", "true");
Line Found : user_pref("CT2405280.revertSettingsEnabled", true);
Line Found : user_pref("CT2405280.searchFromAddressBarEnabledByUser", "false");
Line Found : user_pref("CT2405280.searchInNewTabEnabledByUser", "true");
Line Found : user_pref("CT2405280.searchInNewTabEnabledInHidden", "true");
Line Found : user_pref("CT2405280.searchProtectorDialogDelayInSec", 10);
Line Found : user_pref("CT2405280.searchProtectorEnableByLogin", true);
Line Found : user_pref("CT2405280.searchSuggestEnabledByUser", "false");
Line Found : user_pref("CT2405280.serviceLayer_services_Configuration_lastUpdate", "1398692541257");
Line Found : user_pref("CT2405280.serviceLayer_services_login_10.20.101.5_lastUpdate", "1383995055621");
Line Found : user_pref("CT2405280.serviceLayer_services_login_10.21.1.507_lastUpdate", "1384434476128");
Line Found : user_pref("CT2405280.serviceLayer_services_login_10.22.3.518_lastUpdate", "1385027849722");
Line Found : user_pref("CT2405280.serviceLayer_services_login_10.22.5.510_lastUpdate", "1386857063365");
Line Found : user_pref("CT2405280.serviceLayer_services_login_10.23.0.822_lastUpdate", "1396446646626");
Line Found : user_pref("CT2405280.serviceLayer_services_login_10.29.0.520_lastUpdate", "1398761894551");
Line Found : user_pref("CT2405280.serviceLayer_services_searchAPI_lastUpdate", "1398692541273");
Line Found : user_pref("CT2405280.serviceLayer_services_serviceMap_lastUpdate", "1398692540633");
Line Found : user_pref("CT2405280.serviceLayer_services_toolbarSettings_lastUpdate", "1398761894774");
Line Found : user_pref("CT2405280.serviceLayer_services_translation_lastUpdate", "1398692540796");
Line Found : user_pref("CT2405280.settingsINI", true);
Line Found : user_pref("CT2405280.showToolbarPermission", "false");
Line Found : user_pref("CT2405280.smartbar.CTID", "CT2405280");
Line Found : user_pref("CT2405280.smartbar.Uninstall", "0");
Line Found : user_pref("CT2405280.smartbar.toolbarName", "ST-Eng7 ");
Line Found : user_pref("CT2405280.testingCtid", "");
Line Found : user_pref("CT2405280.toolbarAppMetaDataLastCheckTime", "Thu Nov 07 2013 10:33:51 GMT+0100");
Line Found : user_pref("CT2405280.toolbarBornServerTime", "11-12-2010");
Line Found : user_pref("CT2405280.toolbarContextMenuLastCheckTime", "Mon Apr 23 2012 16:51:00 GMT+0200");
Line Found : user_pref("CT2405280.toolbarCurrentServerTime", "29-4-2014");
Line Found : user_pref("CT2405280.toolbarLoginClientTime", "Thu Nov 07 2013 11:53:36 GMT+0100");
Line Found : user_pref("CT2405280.upgradeFromOBVersion", true);
Line Found : user_pref("CT2405280.usagesFlag", 2);
Line Found : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-serv ... cale=en-us", "m4Df43NZ+9lr21ZNdyYrjA==");
Line Found : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-serv ... cale=en-us", "B8Px/Te74hi98N2hb9yOAQ==");
Line Found : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-serv ... cale=en-us", "ktZKgREPsk5m13TY9rsX+A==");
Line Found : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-serv ... cale=en-us", "cTVrc75U9YwdI74PAhUYFw==");
Line Found : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services ... r=FF&lut=0", "634248284990000000");
Line Found : user_pref("CommunityToolbar.EngineOwner", "");
Line Found : user_pref("CommunityToolbar.EngineOwnerGuid", "{414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3}");
Line Found : user_pref("CommunityToolbar.EngineOwnerToolbarId", "softonic-eng7");
Line Found : user_pref("CommunityToolbar.IsMyStuffImportedToEngine", true);
Line Found : user_pref("CommunityToolbar.LatestLibsPath", "file:///C:\\Users\\PC\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\zftca4cq.default\\conduitCommon\\modules\\3.12.2.3");
Line Found : user_pref("CommunityToolbar.LatestToolbarVersionInstalled", "3.12.2.3");
Line Found : user_pref("CommunityToolbar.OriginalEngineOwner", "CT2405280");
Line Found : user_pref("CommunityToolbar.OriginalEngineOwnerGuid", "{414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3}");
Line Found : user_pref("CommunityToolbar.OriginalEngineOwnerToolbarId", "softonic-eng7");
Line Found : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "hxxp://search.icq.com/search/results.php?ch_id=xmas&tb_ver=1.1.7&q=");
Line Found : user_pref("CommunityToolbar.ToolbarsList", "CT2405280");
Line Found : user_pref("CommunityToolbar.ToolbarsList2", "CT2405280");
Line Found : user_pref("CommunityToolbar.alert.alertInfoInterval", 60);
Line Found : user_pref("CommunityToolbar.alert.alertInfoLastCheckTime", "Fri Sep 30 2011 19:25:27 GMT+0200");
Line Found : user_pref("CommunityToolbar.alert.clientsServerUrl", "hxxp://alert.client.conduit.com");
Line Found : user_pref("CommunityToolbar.alert.firstTimeAlertShown", true);
Line Found : user_pref("CommunityToolbar.alert.locale", "en");
Line Found : user_pref("CommunityToolbar.alert.loginIntervalMin", 1440);
Line Found : user_pref("CommunityToolbar.alert.loginLastCheckTime", "Fri Sep 30 2011 15:25:27 GMT+0200");
Line Found : user_pref("CommunityToolbar.alert.loginLastUpdateTime", "1313487611");
Line Found : user_pref("CommunityToolbar.alert.messageShowTimeSec", 20);
Line Found : user_pref("CommunityToolbar.alert.servicesServerUrl", "hxxp://alert.services.conduit.com");
Line Found : user_pref("CommunityToolbar.alert.showTrayIcon", false);
Line Found : user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300);
Line Found : user_pref("CommunityToolbar.alert.userId", "9abfd75f-6abf-468a-bc23-8cb30d58aa2a");
Line Found : user_pref("CommunityToolbar.facebook.settingsLastCheckTime", "Sat Dec 11 2010 20:44:34 GMT+0100");
Line Found : user_pref("CommunityToolbar.globalUserId", "e55d555a-dc9c-4dff-b48a-5b9f13766984");
Line Found : user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true);
Line Found : user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true);
Line Found : user_pref("CommunityToolbar.killedEngine", true);
Line Found : user_pref("CommunityToolbar.notifications.alertDialogsGetterLastCheckTime", "Tue May 01 2012 21:07:45 GMT+0200");
Line Found : user_pref("CommunityToolbar.notifications.alertInfoInterval", 60);
Line Found : user_pref("CommunityToolbar.notifications.alertInfoLastCheckTime", "Tue May 01 2012 21:07:52 GMT+0200");
Line Found : user_pref("CommunityToolbar.notifications.clientsServerUrl", "hxxp://alert.client.conduit.com");
Line Found : user_pref("CommunityToolbar.notifications.firstTimeAlertShown", true);
Line Found : user_pref("CommunityToolbar.notifications.locale", "en");
Line Found : user_pref("CommunityToolbar.notifications.loginIntervalMin", 1440);
Line Found : user_pref("CommunityToolbar.notifications.loginLastCheckTime", "Tue May 01 2012 21:07:44 GMT+0200");
Line Found : user_pref("CommunityToolbar.notifications.loginLastUpdateTime", "1313487611");
Line Found : user_pref("CommunityToolbar.notifications.messageShowTimeSec", 20);
Line Found : user_pref("CommunityToolbar.notifications.servicesServerUrl", "hxxp://alert.services.conduit.com");
Line Found : user_pref("CommunityToolbar.notifications.showTrayIcon", false);
Line Found : user_pref("CommunityToolbar.notifications.userCloseIntervalMin", 300);
Line Found : user_pref("CommunityToolbar.notifications.userId", "d3a37e86-4c6f-49e5-b509-8adac7bb5615");
Line Found : user_pref("CommunityToolbar.undefined", "");
Line Found : user_pref("Smartbar.SearchFromAddressBarSavedUrl", "hxxp://search.icq.com/search/results.php?ch_id=xmas&tb_ver=1.1.7&q=");
Line Found : user_pref("extensions.enabledItems", "engine@conduit.com:3.2.1.3,{414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3}:3.2.1.3,wtxpcom@mybrowserbar.com:4.3,youtubedownloader@mybrowserbar.com:4.3,{b9db16a4-6edc-47ec-[...]
Line Found : user_pref("icqtoolbar.allowSendURL", false);
Line Found : user_pref("icqtoolbar.engineVerified", false);
Line Found : user_pref("icqtoolbar.geolastmodified", 1291990146);
Line Found : user_pref("icqtoolbar.hiddenElements", "itb_options");
Line Found : user_pref("icqtoolbar.history", "prekladac||manager%20download%20free||rofl||skarifikace||stratifikace||skini%20sipek%20do%20stepmanie||skiny%20sipek%20do%20stepmanie||Rangiku%20matsumoto||kurosaki%20[...]
Line Found : user_pref("icqtoolbar.icqgeo", 42);
Line Found : user_pref("icqtoolbar.installTime", "1291385345");
Line Found : user_pref("icqtoolbar.installsource", "1");
Line Found : user_pref("icqtoolbar.newtab_state", "1");
Line Found : user_pref("icqtoolbar.numberOfSearches", 0);
Line Found : user_pref("icqtoolbar.previousFFVersion", "3.6.12");
Line Found : user_pref("icqtoolbar.skip_default_search", "no");
Line Found : user_pref("icqtoolbar.suggestions", false);
Line Found : user_pref("icqtoolbar.uniqueID", "174640871610105719631283866472513");
Line Found : user_pref("icqtoolbar.usageStatstTimestamp", 1292007755);
Line Found : user_pref("icqtoolbar.version", "1.1.7");
Line Found : user_pref("icqtoolbar.voucherHideClicks", 0);
Line Found : user_pref("icqtoolbar.voucherMoreLinkClicks", 0);
Line Found : user_pref("icqtoolbar.voucherRedeemClicks", 0);
Line Found : user_pref("icqtoolbar.voucherWasShown", 0);
Line Found : user_pref("icqtoolbar.xmlEnableSuggestions", false);
Line Found : user_pref("icqtoolbar.xmlLanguage", "cs");
Line Found : user_pref("plugin.state.npconduitfirefoxplugin", 2);
Line Found : user_pref("smartbar.conduitSearchAddressUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2405280&q=");
Line Found : user_pref("smartbar.machineId", "LQKUWQWLTI45YMGT1NFB3T36C0+FRY9MVFPMZ/W9WVMBUT2ALFVXOXSJ3ZXTIRIKBK+UNAGZCTH7DY4+ISHATA");
Line Found : user_pref("smartbar.searchAddressUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2405280&q=");
Line Found : user_pref("valueApps.CT2405280.mam_gk_currentVersion", "312E31332E302E3137");
Line Found : user_pref("valueApps.CT2405280.mam_gk_currentVersion.storedInFile", false);
Line Found : user_pref("valueApps.CT2405280.mam_gk_globalKeysMigratedToLocalStorage", "31");
Line Found : user_pref("valueApps.CT2405280.mam_gk_globalKeysMigratedToLocalStorage.storedInFile", false);
Line Found : user_pref("valueApps.CT2405280.mam_gk_migrated_from_ls", "31");
Line Found : user_pref("valueApps.CT2405280.mam_gk_migrated_from_ls.storedInFile", false);
Line Found : user_pref("valueApps.CT2405280.mam_gk_userBornDate", "4E2F41");
Line Found : user_pref("valueApps.CT2405280.mam_gk_userBornDate.storedInFile", false);

-\\ Google Chrome v

[ File : C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Found [Search Provider] : hxxp://search.icq.com/search/results.php?ch_id=xmas&q={searchTerms}&icid=chrome
Found [Search Provider] : hxxp://dts.search-results.com/sr?src=cr ... nrs=AG2&q={searchTerms}
Found [Startup_urls] : hxxp://search.bearshare.net?appid=876
Found [Homepage] : hxxp://search.bearshare.net?appid=876
Found [Extension] : bopakagnckmlgajfccecajhnimjiiedh

*************************

AdwCleaner[R0].txt - [39299 octets] - [05/05/2014 08:42:02]

########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [39360 octets] ##########

Re: Prosím o kontrolu

Napsal: 05 kvě 2014 09:45
od jaro3
Odinstaluj:
McAfee Security Scan

Spusť znovu AdwCleaner (u Windows Vista či Windows7, klikni na AdwCleaner pravým a vyber „Spustit jako správce
klikni na „Prohledat-Scan“, po prohledání klikni na „ Vymazat-Clean

Program provede opravu, po automatickém restartu neukáže log (C:\AdwCleaner [S?].txt) , jeho obsah sem celý vlož.

Stáhni si Junkware Removal Tool by Thisisu

na svojí plochu.

Deaktivuj si svůj antivirový program. Pravým tl. myši klikni na JRT.exe a vyber „spustit jako správce“. Pro pokračování budeš vyzván ke stisknutí jakékoliv klávesy. Na nějakou klikni.
Začne skenování programu. Skenování může trvat dloho , podle množství nákaz. Po ukončení skenu se objeví log (JRT.txt) , který se uloží na ploše.
Zkopíruj sem prosím celý jeho obsah.


Stáhni si Malwarebytes' Anti-Malware
- Při instalaci odeber zatržítko u „Povolit bezplatnou zkušební verzi Malwarebytes' Anti-Malware Premium“
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Aktualizace Malwarebytes' Anti-Malware a Spustit aplikaci Malwarebytes' Anti-Malware, pokud jo tak klikni na tlačítko konec
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a klikni na Skenovat nyní a
- po proběhnutí programu se ti objeví hláška vpravo dole tak klikni na b] Kopírovat do schránky [/b]a a vlož sem celý log.

- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).

Pokud budou problémy , spusť v nouz. režimu.

Re: Prosím o kontrolu

Napsal: 05 kvě 2014 11:36
od TomášCH
MacAfee Security Scan odinstalován.

log po AdwCleaner a následném restartu PC.

# AdwCleaner v3.207 - Report created 05/05/2014 at 11:31:03
# Updated 05/05/2014 by Xplode
# Operating System : Windows 7 Ultimate Service Pack 1 (64 bits)
# Username : PC - PC-PC
# Running from : C:\Users\PC\Desktop\adwcleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\ICQ\ICQToolbar
Folder Deleted : C:\ProgramData\Trymedia
Folder Deleted : C:\ProgramData\AlawarWrapper
Folder Deleted : C:\Program Files (x86)\Application Updater
Folder Deleted : C:\Program Files (x86)\Conduit
Folder Deleted : C:\Program Files (x86)\ConduitEngine
Folder Deleted : C:\Program Files (x86)\DAEMON Tools Toolbar
Folder Deleted : C:\Program Files (x86)\ICQ6Toolbar
Folder Deleted : C:\Program Files (x86)\iMesh Applications
Folder Deleted : C:\Program Files (x86)\CENZURA Toolbar
Folder Deleted : C:\Program Files (x86)\Softonic-Eng7
Folder Deleted : C:\Program Files (x86)\Common Files\Spigot
Folder Deleted : C:\Users\PC\AppData\Local\Conduit
Folder Deleted : C:\Users\PC\AppData\Local\iMesh
Folder Deleted : C:\Users\PC\AppData\Local\PackageAware
Folder Deleted : C:\Users\PC\AppData\Local\AlawarWrapper
Folder Deleted : C:\Users\PC\AppData\LocalLow\Conduit
Folder Deleted : C:\Users\PC\AppData\LocalLow\ConduitEngine
Folder Deleted : C:\Users\PC\AppData\LocalLow\PriceGong
Folder Deleted : C:\Users\PC\AppData\LocalLow\Search Settings
Folder Deleted : C:\Users\PC\AppData\LocalLow\Softonic-Eng7
Folder Deleted : C:\Users\PC\Documents\iMesh
Folder Deleted : C:\Users\Public\Documents\iWin
Folder Deleted : C:\Users\Public\Documents\AlawarWrapper
Folder Deleted : C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\zftca4cq.default\Conduit
Folder Deleted : C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\zftca4cq.default\ConduitCommon
Folder Deleted : C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\zftca4cq.default\ICQToolbarData
Folder Deleted : C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\zftca4cq.default\Smartbar
File Deleted : C:\Program Files (x86)\Mozilla Firefox\Extensions\wtxpcom@mybrowserbar.com
File Deleted : C:\Windows\System32\roboot64.exe
File Deleted : C:\Users\PC\AppData\Local\Temp\Uninstall.exe
File Deleted : C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\zftca4cq.default\searchplugins\daemon-search.xml
File Deleted : C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\zftca4cq.default\searchplugins\icqplugin.xml
File Deleted : C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\zftca4cq.default\searchplugins\icqplugin-1.xml
File Deleted : C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\zftca4cq.default\searchplugins\icqplugin-2.xml
File Deleted : C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\zftca4cq.default\searchplugins\Search_Results.xml

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\ICQ\ICQToolBar
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Main [ICQ Search]
Key Deleted : HKLM\SOFTWARE\Classes\Conduit.Engine
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\AskInstallChecker-1_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\AskInstallChecker-1_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\iMesh_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\iMesh_RASMANCS
Key Deleted : HKLM\SOFTWARE\14919ea49a8f3b4aa3cf1058d9a64cec
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT2405280
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_directx_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_directx_RASMANCS
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F3FEE66E-E034-436A-86E4-9690573BEE8A}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F3FEE66E-E034-436A-86E4-9690573BEE8A}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{414B6D9D-4A95-4E8D-B5B1-149DD2D93BB3}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F3FEE66E-E034-436A-86E4-9690573BEE8A}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{74322BF9-DF26-493F-B0DA-6D2FC5E6429E}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{15A0413E-9F45-4D45-9A75-2C20B15B5B51}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2002}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AD22EBAF-0D18-4FC7-90CC-5EA0ABBE9EB8}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2002}
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{30F9B915-B755-4826-820B-08FBA6BD249D}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{F3FEE66E-E034-436A-86E4-9690573BEE8A}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{414B6D9D-4A95-4E8D-B5B1-149DD2D93BB3}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{32099AAC-C132-4136-9E9A-4E364A424E17}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{414B6D9D-4A95-4E8D-B5B1-149DD2D93BB3}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{F3FEE66E-E034-436A-86E4-9690573BEE8A}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{414B6D9D-4A95-4E8D-B5B1-149DD2D93BB3}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{414B6D9D-4A95-4E8D-B5B1-149DD2D93BB3}]
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{32099AAC-C132-4136-9E9A-4E364A424E17}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{D54C859C-6066-4F31-8FE0-2AAEDCAE67D7}
Value Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{32099AAC-C132-4136-9E9A-4E364A424E17}]
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2002}
Key Deleted : HKCU\Software\Conduit
Key Deleted : HKCU\Software\dt soft\daemon tools toolbar
Key Deleted : HKCU\Software\Headlight
Key Deleted : HKCU\Software\ICQ\ICQToolbar
Key Deleted : HKCU\Software\Imesh
Key Deleted : HKCU\Software\Softonic
Key Deleted : HKCU\Software\YahooPartnerToolbar
Key Deleted : HKCU\Software\AppDataLow\Toolbar
Key Deleted : HKCU\Software\AppDataLow\Software\Conduit
Key Deleted : HKCU\Software\AppDataLow\Software\conduitEngine
Key Deleted : HKCU\Software\AppDataLow\Software\PriceGong
Key Deleted : HKCU\Software\AppDataLow\Software\Search Settings
Key Deleted : HKCU\Software\AppDataLow\Software\SmartBar
Key Deleted : HKCU\Software\AppDataLow\Software\Softonic-Eng7
Key Deleted : HKLM\Software\Application Updater
Key Deleted : HKLM\Software\Conduit
Key Deleted : HKLM\Software\conduitEngine
Key Deleted : HKLM\Software\DataMngr
Key Deleted : HKLM\Software\ICQ\ICQToolbar
Key Deleted : HKLM\Software\Search Settings
Key Deleted : HKLM\Software\Softonic-Eng7
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\conduitEngine
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Softonic-Eng7 Toolbar

***** [ Browsers ] *****

-\\ Internet Explorer v9.0.8112.16470

Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [ICQ Search]

-\\ Mozilla Firefox v28.0 (cs)

[ File : C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\zftca4cq.default\prefs.js ]

Line Deleted : user_pref("CT2405280..clientLogIsEnabled", true);
Line Deleted : user_pref("CT2405280..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
Line Deleted : user_pref("CT2405280..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
Line Deleted : user_pref("CT2405280.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);
Line Deleted : user_pref("CT2405280.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
Line Deleted : user_pref("CT2405280.BrowserCompStateIsOpen_129659301444269038", true);
Line Deleted : user_pref("CT2405280.BrowserCompStateIsOpen_129774179987157757", true);
Line Deleted : user_pref("CT2405280.BrowserCompStateIsOpen_129784483889712321", true);
Line Deleted : user_pref("CT2405280.BrowserCompStateIsOpen_129791224268491262", true);
Line Deleted : user_pref("CT2405280.BrowserCompStateIsOpen_1366638805000", true);
Line Deleted : user_pref("CT2405280.BrowserCompStateIsOpen_1367226336000", true);
Line Deleted : user_pref("CT2405280.CTID", "CT2405280");
Line Deleted : user_pref("CT2405280.CommunitiesChangesLastCheckTime", "0");
Line Deleted : user_pref("CT2405280.ConfigurationLastCheckTime", "Thu Nov 07 2013 10:33:51 GMT+0100");
Line Deleted : user_pref("CT2405280.CurrentServerDate", "7-11-2013");
Line Deleted : user_pref("CT2405280.DialogsAlignMode", "LTR");
Line Deleted : user_pref("CT2405280.DialogsGetterLastCheckTime", "Sun Nov 03 2013 00:29:20 GMT+0100");
Line Deleted : user_pref("CT2405280.DownloadReferralCookieData", "");
Line Deleted : user_pref("CT2405280.EMailNotifierPollDate", "Sat Dec 11 2010 20:43:52 GMT+0100");
Line Deleted : user_pref("CT2405280.FeedLastCount1783261708582779529", 0);
Line Deleted : user_pref("CT2405280.FeedPollDate129255180392415092", "Sat Dec 11 2010 20:43:52 GMT+0100");
Line Deleted : user_pref("CT2405280.FeedPollDate129255180392415098", "Sat Dec 11 2010 20:43:52 GMT+0100");
Line Deleted : user_pref("CT2405280.FeedPollDate129255180392415104", "Sat Dec 11 2010 20:43:52 GMT+0100");
Line Deleted : user_pref("CT2405280.FeedPollDate129255180392415110", "Sat Dec 11 2010 20:43:52 GMT+0100");
Line Deleted : user_pref("CT2405280.FeedPollDate129255180392415116", "Sat Dec 11 2010 20:43:52 GMT+0100");
Line Deleted : user_pref("CT2405280.FeedPollDate129255180392415122", "Sat Dec 11 2010 20:43:52 GMT+0100");
Line Deleted : user_pref("CT2405280.FeedPollDate129255180392571378", "Sat Dec 11 2010 20:43:52 GMT+0100");
Line Deleted : user_pref("CT2405280.FeedPollDate129255180392571384", "Sat Dec 11 2010 20:43:52 GMT+0100");
Line Deleted : user_pref("CT2405280.FeedPollDate129255180392571390", "Sat Dec 11 2010 20:43:52 GMT+0100");
Line Deleted : user_pref("CT2405280.FeedPollDate129255180392571396", "Sat Dec 11 2010 20:43:53 GMT+0100");
Line Deleted : user_pref("CT2405280.FeedPollDate129255180392571402", "Sat Dec 11 2010 20:43:53 GMT+0100");
Line Deleted : user_pref("CT2405280.FeedPollDate129255180392571408", "Sat Dec 11 2010 20:43:53 GMT+0100");
Line Deleted : user_pref("CT2405280.FeedPollDate129255180392571414", "Sat Dec 11 2010 20:43:53 GMT+0100");
Line Deleted : user_pref("CT2405280.FeedPollDate129255180392571420", "Sat Dec 11 2010 20:43:53 GMT+0100");
Line Deleted : user_pref("CT2405280.FeedPollDate129255180392571426", "Sat Dec 11 2010 20:43:53 GMT+0100");
Line Deleted : user_pref("CT2405280.FeedPollDate129255180392571432", "Sat Dec 11 2010 20:43:53 GMT+0100");
Line Deleted : user_pref("CT2405280.FeedPollDate129255180392571438", "Sat Dec 11 2010 20:43:53 GMT+0100");
Line Deleted : user_pref("CT2405280.FeedPollDate129255180392571444", "Sat Dec 11 2010 20:43:53 GMT+0100");
Line Deleted : user_pref("CT2405280.FeedPollDate129255180392727700", "Sat Dec 11 2010 20:43:53 GMT+0100");
Line Deleted : user_pref("CT2405280.FeedPollDate129255180392727706", "Sat Dec 11 2010 20:43:54 GMT+0100");
Line Deleted : user_pref("CT2405280.FeedPollDate129255180392727712", "Sat Dec 11 2010 20:43:54 GMT+0100");
Line Deleted : user_pref("CT2405280.FeedPollDate129255180392727718", "Sat Dec 11 2010 20:43:54 GMT+0100");
Line Deleted : user_pref("CT2405280.FeedPollDate129255180392727724", "Sat Dec 11 2010 20:43:54 GMT+0100");
Line Deleted : user_pref("CT2405280.FeedPollDate129255180392727730", "Sat Dec 11 2010 20:43:54 GMT+0100");
Line Deleted : user_pref("CT2405280.FeedPollDate129255180392727736", "Sat Dec 11 2010 20:43:54 GMT+0100");
Line Deleted : user_pref("CT2405280.FeedPollDate129255180392727742", "Sat Dec 11 2010 20:43:54 GMT+0100");
Line Deleted : user_pref("CT2405280.FeedPollDate129255180392727748", "Sat Dec 11 2010 20:43:54 GMT+0100");
Line Deleted : user_pref("CT2405280.FeedPollDate129255180392727754", "Sat Dec 11 2010 20:43:54 GMT+0100");
Line Deleted : user_pref("CT2405280.FeedPollDate129255180392727760", "Sat Dec 11 2010 20:43:54 GMT+0100");
Line Deleted : user_pref("CT2405280.FeedPollDate129255180392727766", "Sat Dec 11 2010 20:43:55 GMT+0100");
Line Deleted : user_pref("CT2405280.FeedPollDate129255180392727772", "Sat Dec 11 2010 20:43:55 GMT+0100");
Line Deleted : user_pref("CT2405280.FeedPollDate129255180392727778", "Sat Dec 11 2010 20:43:55 GMT+0100");
Line Deleted : user_pref("CT2405280.FeedPollDate129255180392727784", "Sat Dec 11 2010 20:43:55 GMT+0100");
Line Deleted : user_pref("CT2405280.FeedPollDate129255180392727790", "Sat Dec 11 2010 20:43:55 GMT+0100");
Line Deleted : user_pref("CT2405280.FeedPollDate129255180392727796", "Sat Dec 11 2010 20:43:55 GMT+0100");
Line Deleted : user_pref("CT2405280.FeedPollDate129255180392727802", "Sat Dec 11 2010 20:43:55 GMT+0100");
Line Deleted : user_pref("CT2405280.FeedPollDate129255180392727808", "Sat Dec 11 2010 20:43:55 GMT+0100");
Line Deleted : user_pref("CT2405280.FeedPollDate129255180392727814", "Sat Dec 11 2010 20:43:55 GMT+0100");
Line Deleted : user_pref("CT2405280.FeedPollDate129255180392727820", "Sat Dec 11 2010 20:43:55 GMT+0100");
Line Deleted : user_pref("CT2405280.FeedPollDate129255180392727826", "Sat Dec 11 2010 20:43:56 GMT+0100");
Line Deleted : user_pref("CT2405280.FeedPollDate129255180392727832", "Sat Dec 11 2010 20:43:56 GMT+0100");
Line Deleted : user_pref("CT2405280.FeedPollDate129255180392727838", "Sat Dec 11 2010 20:43:56 GMT+0100");
Line Deleted : user_pref("CT2405280.FeedPollDate129255180392727844", "Sat Dec 11 2010 20:43:56 GMT+0100");
Line Deleted : user_pref("CT2405280.FeedPollDate129255180392727850", "Sat Dec 11 2010 20:43:56 GMT+0100");
Line Deleted : user_pref("CT2405280.FeedPollDate129255180392727856", "Sat Dec 11 2010 20:43:56 GMT+0100");
Line Deleted : user_pref("CT2405280.FeedPollDate129255180392727862", "Sat Dec 11 2010 20:43:56 GMT+0100");
Line Deleted : user_pref("CT2405280.FeedPollDate129255180392727868", "Sat Dec 11 2010 20:43:56 GMT+0100");
Line Deleted : user_pref("CT2405280.FeedPollDate129255180392727874", "Sat Dec 11 2010 20:43:56 GMT+0100");
Line Deleted : user_pref("CT2405280.FeedPollDate129255180392727880", "Sat Dec 11 2010 20:43:56 GMT+0100");
Line Deleted : user_pref("CT2405280.FeedPollDate129255180392727886", "Sat Dec 11 2010 20:43:57 GMT+0100");
Line Deleted : user_pref("CT2405280.FeedPollDate129255180392727892", "Sat Dec 11 2010 20:43:57 GMT+0100");
Line Deleted : user_pref("CT2405280.FeedPollDate129255180392727898", "Sat Dec 11 2010 20:43:57 GMT+0100");
Line Deleted : user_pref("CT2405280.FirstServerDate", "11-12-2010");
Line Deleted : user_pref("CT2405280.FirstTime", true);
Line Deleted : user_pref("CT2405280.FirstTimeFF3", true);
Line Deleted : user_pref("CT2405280.FixPageNotFoundErrors", true);
Line Deleted : user_pref("CT2405280.GroupingInvalidateCache", false);
Line Deleted : user_pref("CT2405280.GroupingLastCheckTime", "0");
Line Deleted : user_pref("CT2405280.GroupingLastServerUpdateTime", "0");
Line Deleted : user_pref("CT2405280.GroupingServerCheckInterval", 1440);
Line Deleted : user_pref("CT2405280.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
Line Deleted : user_pref("CT2405280.HasUserGlobalKeys", true);
Line Deleted : user_pref("CT2405280.Initialize", true);
Line Deleted : user_pref("CT2405280.InitializeCommonPrefs", true);
Line Deleted : user_pref("CT2405280.InstallationAndCookieDataSentCount", 3);
Line Deleted : user_pref("CT2405280.InstallationId", "integrated_CT2405280 .exe");
Line Deleted : user_pref("CT2405280.InstallationType", "ConduitIntegration");
Line Deleted : user_pref("CT2405280.InstalledDate", "Sat Dec 11 2010 20:43:52 GMT+0100");
Line Deleted : user_pref("CT2405280.InvalidateCache", false);
Line Deleted : user_pref("CT2405280.IsAlertDBUpdated", true);
Line Deleted : user_pref("CT2405280.IsGrouping", false);
Line Deleted : user_pref("CT2405280.IsMulticommunity", false);
Line Deleted : user_pref("CT2405280.IsOpenThankYouPage", false);
Line Deleted : user_pref("CT2405280.IsOpenUninstallPage", true);
Line Deleted : user_pref("CT2405280.LanguagePackLastCheckTime", "Thu Nov 07 2013 10:33:51 GMT+0100");
Line Deleted : user_pref("CT2405280.LanguagePackReloadIntervalMM", 1440);
Line Deleted : user_pref("CT2405280.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx");
Line Deleted : user_pref("CT2405280.LastLogin_3.12.0.7", "Tue May 01 2012 19:01:34 GMT+0200");
Line Deleted : user_pref("CT2405280.LastLogin_3.12.2.3", "Wed May 30 2012 07:38:27 GMT+0200");
Line Deleted : user_pref("CT2405280.LastLogin_3.13.0.6", "Sun Jul 15 2012 21:54:47 GMT+0200");
Line Deleted : user_pref("CT2405280.LastLogin_3.14.1.0", "Wed Aug 22 2012 16:49:47 GMT+0200");
Line Deleted : user_pref("CT2405280.LastLogin_3.15.1.0", "Tue Nov 06 2012 17:42:47 GMT+0100");
Line Deleted : user_pref("CT2405280.LastLogin_3.16.0.100", "Sun Feb 10 2013 19:33:12 GMT+0100");
Line Deleted : user_pref("CT2405280.LastLogin_3.16.0.3", "Fri Dec 28 2012 14:22:01 GMT+0100");
Line Deleted : user_pref("CT2405280.LastLogin_3.18.0.7", "Tue Jul 16 2013 10:16:34 GMT+0200");
Line Deleted : user_pref("CT2405280.LastLogin_3.19.0.3", "Tue Sep 03 2013 17:41:30 GMT+0200");
Line Deleted : user_pref("CT2405280.LastLogin_3.2.1.3", "Sat Dec 11 2010 20:25:53 GMT+0100");
Line Deleted : user_pref("CT2405280.LastLogin_3.20.0.4", "Thu Nov 07 2013 09:03:51 GMT+0100");
Line Deleted : user_pref("CT2405280.LatestVersion", "3.20.0.4");
Line Deleted : user_pref("CT2405280.Locale", "en-us");
Line Deleted : user_pref("CT2405280.MCDetectTooltipHeight", "83");
Line Deleted : user_pref("CT2405280.MCDetectTooltipShow", false);
Line Deleted : user_pref("CT2405280.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
Line Deleted : user_pref("CT2405280.MCDetectTooltipWidth", "295");
Line Deleted : user_pref("CT2405280.MyStuffEnabledAtInstallation", true);
Line Deleted : user_pref("CT2405280.RadioLastCheckTime", "0");
Line Deleted : user_pref("CT2405280.RadioLastUpdateIPServer", "0");
Line Deleted : user_pref("CT2405280.RadioLastUpdateServer", "0");
Line Deleted : user_pref("CT2405280.RestartDialogFirstTime", "false");
Line Deleted : user_pref("CT2405280.RestartDialogShouldDisplay", "false");
Line Deleted : user_pref("CT2405280.SearchAPILastCheckTime", "Thu Nov 07 2013 10:33:51 GMT+0100");
Line Deleted : user_pref("CT2405280.SearchBoxWidth", 100);
Line Deleted : user_pref("CT2405280.SearchFromAddressBarIsInit", true);
Line Deleted : user_pref("CT2405280.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2405280&q=");
Line Deleted : user_pref("CT2405280.SearchInNewTabEnabled", true);
Line Deleted : user_pref("CT2405280.SearchInNewTabIntervalMM", 1440);
Line Deleted : user_pref("CT2405280.SearchInNewTabLastCheckTime", "Tue Sep 03 2013 17:41:29 GMT+0200");
Line Deleted : user_pref("CT2405280.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID&UM=UM_ID");
Line Deleted : user_pref("CT2405280.SearchInNewTabURLFromSearchAPI", "hxxp://search.conduit.com/?ctid=CT2405280&octid=CT2405280&SearchSource=15&CUI=SB_CUI&SSPV=EB_SSPV&Lay=1&UM=UM_ID");
Line Deleted : user_pref("CT2405280.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageService.asmx/UsersRequests?ctid=EB_TOOLBAR_ID");
Line Deleted : user_pref("CT2405280.ServiceMapLastCheckTime", "Thu Nov 07 2013 10:33:51 GMT+0100");
Line Deleted : user_pref("CT2405280.SettingsLastCheckTime", "Thu Nov 07 2013 09:03:49 GMT+0100");
Line Deleted : user_pref("CT2405280.SettingsLastUpdate", "1383793885");
Line Deleted : user_pref("CT2405280.ThirdPartyComponentsInterval", 504);
Line Deleted : user_pref("CT2405280.ThirdPartyComponentsLastCheck", "Mon Apr 23 2012 16:50:56 GMT+0200");
Line Deleted : user_pref("CT2405280.ThirdPartyComponentsLastUpdate", "1312887586");
Line Deleted : user_pref("CT2405280.ToolbarShrinkedFromSetup", false);
Line Deleted : user_pref("CT2405280.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,client.conduit-storage.com,OurToolbar.com,CommunityToolbars.com,ForumToolbar.com,MyBlogToolbar.com,MyCity[...]
Line Deleted : user_pref("CT2405280.UserID", "UN12607258772548047");
Line Deleted : user_pref("CT2405280.ValidationData_Toolbar", 2);
Line Deleted : user_pref("CT2405280.addressBarTakeOverEnabledInHidden", "true");
Line Deleted : user_pref("CT2405280.alertChannelId", "799768");
Line Deleted : user_pref("CT2405280.approveUntrustedApps", false);
Line Deleted : user_pref("CT2405280.autocompletepro_enable.from_oldbar.enc", "MQ==");
Line Deleted : user_pref("CT2405280.autocompletepro_enable_auto.from_oldbar.enc", "MQ==");
Line Deleted : user_pref("CT2405280.backendstorage.autocompletepro_enable", "31");
Line Deleted : user_pref("CT2405280.backendstorage.autocompletepro_enable_auto", "31");
Line Deleted : user_pref("CT2405280.backendstorage.cbcountry_000", "435A");
Line Deleted : user_pref("CT2405280.backendstorage.cbfirsttime", "4D6F6E2041707220323320323031322031363A35313A303520474D542B30323030");
Line Deleted : user_pref("CT2405280.backendstorage.ct2405280isadsdisabled", "66616C7365");
Line Deleted : user_pref("CT2405280.backendstorage.hxxp://api18_thetrafficstat_net.pid2", "65663061383638626236616665303936");
Line Deleted : user_pref("CT2405280.backendstorage.hxxp://api25_thetrafficstat_net.pid2", "65663061383638626236616665303936");
Line Deleted : user_pref("CT2405280.backendstorage.hxxp://api26_thetrafficstat_net.pid2", "65663061383638626236616665303936");
Line Deleted : user_pref("CT2405280.backendstorage.shoppingapp.gk.exipres", "5361742041707220323820323031322031363A35313A303320474D542B30323030");
Line Deleted : user_pref("CT2405280.backendstorage.shoppingapp.gk.geolocation", "637A6563682072657075626C6963");
Line Deleted : user_pref("CT2405280.cbcountry_000.from_oldbar.enc", "Q1o=");
Line Deleted : user_pref("CT2405280.cbfirsttime.from_oldbar.enc", "TW9uIEFwciAyMyAyMDEyIDE2OjUxOjA1IEdNVCswMjAw");
Line Deleted : user_pref("CT2405280.components.1000034", false);
Line Deleted : user_pref("CT2405280.components.1000082", false);
Line Deleted : user_pref("CT2405280.components.1000234", false);
Line Deleted : user_pref("CT2405280.components.129115070377500765", false);
Line Deleted : user_pref("CT2405280.components.129460356363731287", false);
Line Deleted : user_pref("CT2405280.components.129460356364043788", false);
Line Deleted : user_pref("CT2405280.components.129460356720606270", false);
Line Deleted : user_pref("CT2405280.components.129530456275961869", false);
Line Deleted : user_pref("CT2405280.components.129530456401347705", false);
Line Deleted : user_pref("CT2405280.components.129635774053319306", false);
Line Deleted : user_pref("CT2405280.components.129659301444269038", false);
Line Deleted : user_pref("CT2405280.components.129774179987157757", false);
Line Deleted : user_pref("CT2405280.components.129784483889712321", false);
Line Deleted : user_pref("CT2405280.components.129791224268491262", false);
Line Deleted : user_pref("CT2405280.components.1783261708582779529", false);
Line Deleted : user_pref("CT2405280.components.205576709465425410", false);
Line Deleted : user_pref("CT2405280.components.2763939488594394893", false);
Line Deleted : user_pref("CT2405280.components.3212677392820717368", false);
Line Deleted : user_pref("CT2405280.components.3789243233269290664", false);
Line Deleted : user_pref("CT2405280.components.4483181016027223104", false);
Line Deleted : user_pref("CT2405280.components.5498874625112287408", false);
Line Deleted : user_pref("CT2405280.components.5700970090767386265", false);
Line Deleted : user_pref("CT2405280.components.7794790390421175448", false);
Line Deleted : user_pref("CT2405280.components.944375478163563274", false);
Line Deleted : user_pref("CT2405280.countryCode", "CZ");
Line Deleted : user_pref("CT2405280.ct2405280isadsdisabled.from_oldbar.enc", "ZmFsc2U=");
Line Deleted : user_pref("CT2405280.firstTimeDialogOpened", true);
Line Deleted : user_pref("CT2405280.fixPageNotFoundErrorByUser", "TRUE");
Line Deleted : user_pref("CT2405280.fixPageNotFoundErrorInHidden", "true");
Line Deleted : user_pref("CT2405280.fullUserID", "UN12607258772548047.UP.202407115330");
Line Deleted : user_pref("CT2405280.globalFirstTimeInfoLastCheckTime", "Mon Apr 23 2012 16:51:00 GMT+0200");
Line Deleted : user_pref("CT2405280.homepageProtectorEnableByLogin", true);
Line Deleted : user_pref("CT2405280.hxxp___api18_thetrafficstat_net.pid2.from_oldbar.enc", "ZWYwYTg2OGJiNmFmZTA5Ng==");
Line Deleted : user_pref("CT2405280.hxxp___api25_thetrafficstat_net.pid2.from_oldbar.enc", "ZWYwYTg2OGJiNmFmZTA5Ng==");
Line Deleted : user_pref("CT2405280.hxxp___api26_thetrafficstat_net.pid2.from_oldbar.enc", "ZWYwYTg2OGJiNmFmZTA5Ng==");
Line Deleted : user_pref("CT2405280.initDone", true);
Line Deleted : user_pref("CT2405280.installId", "integrated_CT2405280 .exe");
Line Deleted : user_pref("CT2405280.installType", "ConduitIntegration");
Line Deleted : user_pref("CT2405280.isAppTrackingManagerOn", true);
Line Deleted : user_pref("CT2405280.isCheckedStartAsHidden", true);
Line Deleted : user_pref("CT2405280.isFirstTimeToolbarLoading", "false");
Line Deleted : user_pref("CT2405280.isPerformedSmartBarTransition", "true");
Line Deleted : user_pref("CT2405280.lastVersion", "10.29.0.520");
Line Deleted : user_pref("CT2405280.myStuffEnabled", true);
Line Deleted : user_pref("CT2405280.myStuffPublihserMinWidth", 400);
Line Deleted : user_pref("CT2405280.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID");
Line Deleted : user_pref("CT2405280.myStuffServiceIntervalMM", 1440);
Line Deleted : user_pref("CT2405280.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUFF_LUT");
Line Deleted : user_pref("CT2405280.oldAppsList", "128325851945531999,128310509462438058,111,129791224268491262,129460356720606270,129530456275961869,129530456401347705,129460356364043788,1000082,129460356363731287,[...]
Line Deleted : user_pref("CT2405280.originalSearchAddressUrl", "hxxp://search.icq.com/search/results.php?ch_id=xmas&tb_ver=1.1.7&q=");
Line Deleted : user_pref("CT2405280.performedDomainChangesMigration", "true");
Line Deleted : user_pref("CT2405280.revertSettingsEnabled", true);
Line Deleted : user_pref("CT2405280.searchFromAddressBarEnabledByUser", "false");
Line Deleted : user_pref("CT2405280.searchInNewTabEnabledByUser", "true");
Line Deleted : user_pref("CT2405280.searchInNewTabEnabledInHidden", "true");
Line Deleted : user_pref("CT2405280.searchProtectorDialogDelayInSec", 10);
Line Deleted : user_pref("CT2405280.searchProtectorEnableByLogin", true);
Line Deleted : user_pref("CT2405280.searchSuggestEnabledByUser", "false");
Line Deleted : user_pref("CT2405280.serviceLayer_services_Configuration_lastUpdate", "1398692541257");
Line Deleted : user_pref("CT2405280.serviceLayer_services_login_10.20.101.5_lastUpdate", "1383995055621");
Line Deleted : user_pref("CT2405280.serviceLayer_services_login_10.21.1.507_lastUpdate", "1384434476128");
Line Deleted : user_pref("CT2405280.serviceLayer_services_login_10.22.3.518_lastUpdate", "1385027849722");
Line Deleted : user_pref("CT2405280.serviceLayer_services_login_10.22.5.510_lastUpdate", "1386857063365");
Line Deleted : user_pref("CT2405280.serviceLayer_services_login_10.23.0.822_lastUpdate", "1396446646626");
Line Deleted : user_pref("CT2405280.serviceLayer_services_login_10.29.0.520_lastUpdate", "1398761894551");
Line Deleted : user_pref("CT2405280.serviceLayer_services_searchAPI_lastUpdate", "1398692541273");
Line Deleted : user_pref("CT2405280.serviceLayer_services_serviceMap_lastUpdate", "1398692540633");
Line Deleted : user_pref("CT2405280.serviceLayer_services_toolbarSettings_lastUpdate", "1398761894774");
Line Deleted : user_pref("CT2405280.serviceLayer_services_translation_lastUpdate", "1398692540796");
Line Deleted : user_pref("CT2405280.settingsINI", true);
Line Deleted : user_pref("CT2405280.showToolbarPermission", "false");
Line Deleted : user_pref("CT2405280.smartbar.CTID", "CT2405280");
Line Deleted : user_pref("CT2405280.smartbar.Uninstall", "0");
Line Deleted : user_pref("CT2405280.smartbar.toolbarName", "ST-Eng7 ");
Line Deleted : user_pref("CT2405280.testingCtid", "");
Line Deleted : user_pref("CT2405280.toolbarAppMetaDataLastCheckTime", "Thu Nov 07 2013 10:33:51 GMT+0100");
Line Deleted : user_pref("CT2405280.toolbarBornServerTime", "11-12-2010");
Line Deleted : user_pref("CT2405280.toolbarContextMenuLastCheckTime", "Mon Apr 23 2012 16:51:00 GMT+0200");
Line Deleted : user_pref("CT2405280.toolbarCurrentServerTime", "29-4-2014");
Line Deleted : user_pref("CT2405280.toolbarLoginClientTime", "Thu Nov 07 2013 11:53:36 GMT+0100");
Line Deleted : user_pref("CT2405280.upgradeFromOBVersion", true);
Line Deleted : user_pref("CT2405280.usagesFlag", 2);
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-serv ... cale=en-us", "m4Df43NZ+9lr21ZNdyYrjA==");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-serv ... cale=en-us", "B8Px/Te74hi98N2hb9yOAQ==");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-serv ... cale=en-us", "ktZKgREPsk5m13TY9rsX+A==");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-serv ... cale=en-us", "cTVrc75U9YwdI74PAhUYFw==");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services ... r=FF&lut=0", "634248284990000000");
Line Deleted : user_pref("CommunityToolbar.EngineOwner", "");
Line Deleted : user_pref("CommunityToolbar.EngineOwnerGuid", "{414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3}");
Line Deleted : user_pref("CommunityToolbar.EngineOwnerToolbarId", "softonic-eng7");
Line Deleted : user_pref("CommunityToolbar.IsMyStuffImportedToEngine", true);
Line Deleted : user_pref("CommunityToolbar.LatestLibsPath", "file:///C:\\Users\\PC\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\zftca4cq.default\\conduitCommon\\modules\\3.12.2.3");
Line Deleted : user_pref("CommunityToolbar.LatestToolbarVersionInstalled", "3.12.2.3");
Line Deleted : user_pref("CommunityToolbar.OriginalEngineOwner", "CT2405280");
Line Deleted : user_pref("CommunityToolbar.OriginalEngineOwnerGuid", "{414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3}");
Line Deleted : user_pref("CommunityToolbar.OriginalEngineOwnerToolbarId", "softonic-eng7");
Line Deleted : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "hxxp://search.icq.com/search/results.php?ch_id=xmas&tb_ver=1.1.7&q=");
Line Deleted : user_pref("CommunityToolbar.ToolbarsList", "CT2405280");
Line Deleted : user_pref("CommunityToolbar.ToolbarsList2", "CT2405280");
Line Deleted : user_pref("CommunityToolbar.alert.alertInfoInterval", 60);
Line Deleted : user_pref("CommunityToolbar.alert.alertInfoLastCheckTime", "Fri Sep 30 2011 19:25:27 GMT+0200");
Line Deleted : user_pref("CommunityToolbar.alert.clientsServerUrl", "hxxp://alert.client.conduit.com");
Line Deleted : user_pref("CommunityToolbar.alert.firstTimeAlertShown", true);
Line Deleted : user_pref("CommunityToolbar.alert.locale", "en");
Line Deleted : user_pref("CommunityToolbar.alert.loginIntervalMin", 1440);
Line Deleted : user_pref("CommunityToolbar.alert.loginLastCheckTime", "Fri Sep 30 2011 15:25:27 GMT+0200");
Line Deleted : user_pref("CommunityToolbar.alert.loginLastUpdateTime", "1313487611");
Line Deleted : user_pref("CommunityToolbar.alert.messageShowTimeSec", 20);
Line Deleted : user_pref("CommunityToolbar.alert.servicesServerUrl", "hxxp://alert.services.conduit.com");
Line Deleted : user_pref("CommunityToolbar.alert.showTrayIcon", false);
Line Deleted : user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300);
Line Deleted : user_pref("CommunityToolbar.alert.userId", "9abfd75f-6abf-468a-bc23-8cb30d58aa2a");
Line Deleted : user_pref("CommunityToolbar.facebook.settingsLastCheckTime", "Sat Dec 11 2010 20:44:34 GMT+0100");
Line Deleted : user_pref("CommunityToolbar.globalUserId", "e55d555a-dc9c-4dff-b48a-5b9f13766984");
Line Deleted : user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true);
Line Deleted : user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true);
Line Deleted : user_pref("CommunityToolbar.killedEngine", true);
Line Deleted : user_pref("CommunityToolbar.notifications.alertDialogsGetterLastCheckTime", "Tue May 01 2012 21:07:45 GMT+0200");
Line Deleted : user_pref("CommunityToolbar.notifications.alertInfoInterval", 60);
Line Deleted : user_pref("CommunityToolbar.notifications.alertInfoLastCheckTime", "Tue May 01 2012 21:07:52 GMT+0200");
Line Deleted : user_pref("CommunityToolbar.notifications.clientsServerUrl", "hxxp://alert.client.conduit.com");
Line Deleted : user_pref("CommunityToolbar.notifications.firstTimeAlertShown", true);
Line Deleted : user_pref("CommunityToolbar.notifications.locale", "en");
Line Deleted : user_pref("CommunityToolbar.notifications.loginIntervalMin", 1440);
Line Deleted : user_pref("CommunityToolbar.notifications.loginLastCheckTime", "Tue May 01 2012 21:07:44 GMT+0200");
Line Deleted : user_pref("CommunityToolbar.notifications.loginLastUpdateTime", "1313487611");
Line Deleted : user_pref("CommunityToolbar.notifications.messageShowTimeSec", 20);
Line Deleted : user_pref("CommunityToolbar.notifications.servicesServerUrl", "hxxp://alert.services.conduit.com");
Line Deleted : user_pref("CommunityToolbar.notifications.showTrayIcon", false);
Line Deleted : user_pref("CommunityToolbar.notifications.userCloseIntervalMin", 300);
Line Deleted : user_pref("CommunityToolbar.notifications.userId", "d3a37e86-4c6f-49e5-b509-8adac7bb5615");
Line Deleted : user_pref("CommunityToolbar.undefined", "");
Line Deleted : user_pref("Smartbar.SearchFromAddressBarSavedUrl", "hxxp://search.icq.com/search/results.php?ch_id=xmas&tb_ver=1.1.7&q=");
Line Deleted : user_pref("extensions.enabledItems", "engine@conduit.com:3.2.1.3,{414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3}:3.2.1.3,wtxpcom@mybrowserbar.com:4.3,youtubedownloader@mybrowserbar.com:4.3,{b9db16a4-6edc-47ec-[...]
Line Deleted : user_pref("icqtoolbar.allowSendURL", false);
Line Deleted : user_pref("icqtoolbar.engineVerified", false);
Line Deleted : user_pref("icqtoolbar.geolastmodified", 1291990146);
Line Deleted : user_pref("icqtoolbar.hiddenElements", "itb_options");
Line Deleted : user_pref("icqtoolbar.history", "prekladac||manager%20download%20free||rofl||skarifikace||stratifikace||skini%20sipek%20do%20stepmanie||skiny%20sipek%20do%20stepmanie||Rangiku%20matsumoto||kurosaki%20[...]
Line Deleted : user_pref("icqtoolbar.icqgeo", 42);
Line Deleted : user_pref("icqtoolbar.installTime", "1291385345");
Line Deleted : user_pref("icqtoolbar.installsource", "1");
Line Deleted : user_pref("icqtoolbar.newtab_state", "1");
Line Deleted : user_pref("icqtoolbar.numberOfSearches", 0);
Line Deleted : user_pref("icqtoolbar.previousFFVersion", "3.6.12");
Line Deleted : user_pref("icqtoolbar.skip_default_search", "no");
Line Deleted : user_pref("icqtoolbar.suggestions", false);
Line Deleted : user_pref("icqtoolbar.uniqueID", "174640871610105719631283866472513");
Line Deleted : user_pref("icqtoolbar.usageStatstTimestamp", 1292007755);
Line Deleted : user_pref("icqtoolbar.version", "1.1.7");
Line Deleted : user_pref("icqtoolbar.voucherHideClicks", 0);
Line Deleted : user_pref("icqtoolbar.voucherMoreLinkClicks", 0);
Line Deleted : user_pref("icqtoolbar.voucherRedeemClicks", 0);
Line Deleted : user_pref("icqtoolbar.voucherWasShown", 0);
Line Deleted : user_pref("icqtoolbar.xmlEnableSuggestions", false);
Line Deleted : user_pref("icqtoolbar.xmlLanguage", "cs");
Line Deleted : user_pref("plugin.state.npconduitfirefoxplugin", 2);
Line Deleted : user_pref("smartbar.conduitSearchAddressUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2405280&q=");
Line Deleted : user_pref("smartbar.machineId", "LQKUWQWLTI45YMGT1NFB3T36C0+FRY9MVFPMZ/W9WVMBUT2ALFVXOXSJ3ZXTIRIKBK+UNAGZCTH7DY4+ISHATA");
Line Deleted : user_pref("smartbar.searchAddressUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2405280&q=");
Line Deleted : user_pref("valueApps.CT2405280.mam_gk_currentVersion", "312E31332E302E3137");
Line Deleted : user_pref("valueApps.CT2405280.mam_gk_currentVersion.storedInFile", false);
Line Deleted : user_pref("valueApps.CT2405280.mam_gk_globalKeysMigratedToLocalStorage", "31");
Line Deleted : user_pref("valueApps.CT2405280.mam_gk_globalKeysMigratedToLocalStorage.storedInFile", false);
Line Deleted : user_pref("valueApps.CT2405280.mam_gk_migrated_from_ls", "31");
Line Deleted : user_pref("valueApps.CT2405280.mam_gk_migrated_from_ls.storedInFile", false);
Line Deleted : user_pref("valueApps.CT2405280.mam_gk_userBornDate", "4E2F41");
Line Deleted : user_pref("valueApps.CT2405280.mam_gk_userBornDate.storedInFile", false);

-\\ Google Chrome v

[ File : C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Deleted [Search Provider] : hxxp://search.icq.com/search/results.php?ch_id=xmas&q={searchTerms}&icid=chrome
Deleted [Search Provider] : hxxp://dts.search-results.com/sr?src=cr ... nrs=AG2&q={searchTerms}
Deleted [Startup_urls] : hxxp://search.bearshare.net?appid=876
Deleted [Homepage] : hxxp://search.bearshare.net?appid=876
Deleted [Extension] : bopakagnckmlgajfccecajhnimjiiedh

*************************

AdwCleaner[R0].txt - [39501 octets] - [05/05/2014 08:42:02]
AdwCleaner[R1].txt - [39477 octets] - [05/05/2014 11:29:53]
AdwCleaner[S0].txt - [39080 octets] - [05/05/2014 11:31:03]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [39141 octets] ##########

Re: Prosím o kontrolu

Napsal: 05 kvě 2014 11:48
od TomášCH
JRT log.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 7 Ultimate x64
Ran by PC on po 05.05.2014 at 11:37:19,75
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\Users\PC\AppData\Roaming\getrighttogo"



~~~ FireFox

Failed to delete: [Folder] "C:\Program Files (x86)\Mozilla Firefox\extensions\youtubedownloader@mybrowserbar.com"
Failed to delete: [Folder] "C:\Program Files (x86)\Mozilla Firefox\extensions\youtubedownloader@mybrowserbar.com"
Emptied folder: C:\Users\PC\AppData\Roaming\mozilla\firefox\profiles\zftca4cq.default\minidumps [291 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on po 05.05.2014 at 11:46:37,94
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Re: Prosím o kontrolu

Napsal: 05 kvě 2014 12:01
od TomášCH
Malwarebytes Anti Malware log.

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 5.5.2014
Scan Time: 12:00:29
Logfile: MAM.txt
Administrator: Yes

Version: 2.00.1.1004
Malware Database: v2014.05.05.04
Rootkit Database: v2014.03.27.01
License: Trial
Malware Protection: Enabled
Malicious Website Protection: Enabled
Chameleon: Disabled

OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: PC

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 261509
Time Elapsed: 10 min, 0 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Shuriken: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 9
PUP.Optional.Lookinglink.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{02a8433a-1da4-41be-8f4a-d7e5b15aab40}, , [8c3ca9a4087369cd593d7149e023768a],
PUP.Optional.Lookinglink.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{6c2c1ce8-1be7-4974-9562-235eba661640}, , [8c3ca9a4087369cd593d7149e023768a],
PUP.Optional.Lookinglink.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{6A4E1F74-0375-4CFF-9406-281C94F865C5}, , [8c3ca9a4087369cd593d7149e023768a],
PUP.Optional.Lookinglink.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{6A4E1F74-0375-4CFF-9406-281C94F865C5}, , [8c3ca9a4087369cd593d7149e023768a],
PUP.Optional.Lookinglink.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{6c2c1ce8-1be7-4974-9562-235eba661640}, , [8c3ca9a4087369cd593d7149e023768a],
PUP.Optional.Lookinglink.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{02A8433A-1DA4-41BE-8F4A-D7E5B15AAB40}, , [8c3ca9a4087369cd593d7149e023768a],
PUP.Optional.Lookinglink.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\lookinglink, , [8c3ca9a4087369cd593d7149e023768a],
PUP.Optional.Lookinglink.A, HKLM\SOFTWARE\WOW6432NODE\lookinglink, , [b315301d98e395a1edab7a40a75cf907],
PUP.Optional.Lookinglink.A, HKU\S-1-5-21-1433028858-1675464811-3937215136-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\lookinglink, , [8444dc7124579c9a3661596147bc0af6],

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 1
PUP.Optional.Lookinglink.A, C:\Program Files (x86)\lookinglink, , [8c3ca9a4087369cd593d7149e023768a],

Files: 3
PUP.Optional.Lookinglink.A, C:\Program Files (x86)\lookinglink\lookinglink.ico, , [8c3ca9a4087369cd593d7149e023768a],
PUP.Optional.Lookinglink.A, C:\Program Files (x86)\lookinglink\lookinglinkBHO.dll, , [8c3ca9a4087369cd593d7149e023768a],
PUP.Optional.Lookinglink.A, C:\Program Files (x86)\lookinglink\lookinglinkUninstall.exe, , [8c3ca9a4087369cd593d7149e023768a],

Physical Sectors: 0
(No malicious items detected)


(end)

Re: Prosím o kontrolu

Napsal: 05 kvě 2014 18:55
od jaro3
. spusť znovu MbAM a dej Skenovat nyní
- po proběhnutí programu se ti objeví hláška tak klikni na „Vše do karantény“ a na „Exportovat záznam“ a vyber „textový soubor“ , soubor nějak pojmenuj a někam ho ulož. Zkopíruj se celý obsah toho logu.

Stáhni si RogueKiller by Adlice Software
32bit.:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
64bit.:
http://www.sur-la-toile.com/RogueKiller ... lerX64.exe
na svojí plochu.
- Zavři všechny ostatní programy a prohlížeče.
- Pro OS Vista a win7 spusť program RogueKiller.exe jako správce , u XP poklepáním.
- počkej až skončí Prescan -vyhledávání škodlivých procesů.
- Zkontroluj , zda máš zaškrtnuto:
Kontrola MBR
Kontrola Faked
Antirootkit

-Potom klikni na „Prohledat“.
- Program skenuje procesy PC. Po proskenování klikni na „Zpráva“celý obsah logu sem zkopíruj.
Pokud je program blokován , zkus ho spustit několikrát. Pokud dále program nepůjde spustit a pracovat, přejmenuj ho na winlogon.exe.