Ale Avast mi normálně hlýsá, že je aktuální... Kontroloval jsem to...
Log z ADWcleaner:
================# AdwCleaner v3.309 - Report created 04/09/2014 at 21:18:01
# Updated 02/09/2014 by Xplode
# Operating System : Windows Vista (TM) Home Premium Service Pack 2 (32 bits)
# Username : Eva - EVA-PC
# Running from : C:\Users\Eva\Desktop\AdwCleaner.exe
# Option : Clean
***** [ Services ] *****
***** [ Files / Folders ] *****
Folder Deleted : C:\ProgramData\Ask
Folder Deleted : C:\ProgramData\AVG Secure Search
Folder Deleted : C:\ProgramData\Babylon
Folder Deleted : C:\ProgramData\FileCure
Folder Deleted : C:\ProgramData\ICQ\ICQToolbar
Folder Deleted : C:\ProgramData\Tarma Installer
Folder Deleted : C:\ProgramData\AlawarWrapper
Folder Deleted : C:\Program Files\AVG Secure Search
Folder Deleted : C:\Program Files\Conduit
Folder Deleted : C:\Program Files\Crawler
Folder Deleted : C:\Program Files\ICQ6Toolbar
Folder Deleted : C:\Program Files\Mobogenie
Folder Deleted : C:\Program Files\MyPC Backup
Folder Deleted : C:\Program Files\VideoDownloadConverter_4z
Folder Deleted : C:\Program Files\Common Files\AVG Secure Search
Folder Deleted : C:\Users\Adéla\AppData\Local\VideoDownloadConverter_4z
Folder Deleted : C:\Users\Adéla\AppData\LocalLow\AskToolbar
Folder Deleted : C:\Users\Adéla\AppData\LocalLow\AVG Secure Search
Folder Deleted : C:\Users\Adéla\AppData\LocalLow\FunWebProducts
Folder Deleted : C:\Users\Adéla\AppData\LocalLow\Inbox Toolbar
Folder Deleted : C:\Users\Adéla\AppData\LocalLow\Internet Saving Optimizer
Folder Deleted : C:\Users\Adéla\AppData\LocalLow\Media Access Startup
Folder Deleted : C:\Users\Adéla\AppData\LocalLow\MyWebSearch
Folder Deleted : C:\Users\Adéla\AppData\LocalLow\VideoDownloadConverter_4z
Folder Deleted : C:\Users\Adéla\AppData\Roaming\pdfforge
Folder Deleted : C:\Users\Eva\AppData\Local\genienext
Folder Deleted : C:\Users\Eva\AppData\Local\Mobogenie
Folder Deleted : C:\Users\Eva\AppData\Local\OpenCandy
Folder Deleted : C:\Users\Eva\AppData\LocalLow\AVG Secure Search
Folder Deleted : C:\Users\Eva\AppData\LocalLow\Conduit
Folder Deleted : C:\Users\Eva\AppData\LocalLow\Internet Saving Optimizer
Folder Deleted : C:\Users\Eva\AppData\LocalLow\Media Access Startup
Folder Deleted : C:\Users\Eva\AppData\LocalLow\MyWebSearch
Folder Deleted : C:\Users\Eva\AppData\Roaming\0F1F1C2Y1H1P1C0I0T
Folder Deleted : C:\Users\Eva\AppData\Roaming\Babylon
Folder Deleted : C:\Users\Eva\AppData\Roaming\newnext.me
Folder Deleted : C:\Users\Eva\AppData\Roaming\OpenCandy
Folder Deleted : C:\Users\Eva\AppData\Roaming\pdfforge
Folder Deleted : C:\Users\Eva\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mobogenie
Folder Deleted : C:\Users\Eva\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup
Folder Deleted : C:\Users\Eva\Documents\Mobogenie
Folder Deleted : C:\Users\Kaku\AppData\LocalLow\AskToolbar
Folder Deleted : C:\Users\Kaku\AppData\LocalLow\AVG Secure Search
Folder Deleted : C:\Users\Public\Documents\AlawarWrapper
Folder Deleted : C:\Users\Adéla\AppData\Roaming\Mozilla\Firefox\Profiles\cvwrnd3t.default\ICQToolbarData
Folder Deleted : C:\Users\Eva\AppData\Roaming\Mozilla\Firefox\Profiles\mgx5xa5t.default\ICQToolbarData
Folder Deleted : C:\Program Files\Mozilla Firefox\Extensions\{800B5000-A755-47E1-992B-48A1C1357F07}
Folder Deleted : C:\Users\Adéla\AppData\Roaming\Mozilla\Firefox\Profiles\cvwrnd3t.default\Extensions\4zffxtbr@VideoDownloadConverter_4z.com
Folder Deleted : C:\Users\Kaku\AppData\Local\Google\Chrome\User Data\Default\Extensions\angobeimajilfhlcpeiccndaifchnppl
Folder Deleted : C:\Users\Adéla\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhjbpmkagjlnhcmdpmbagjldaknbgnff
Folder Deleted : C:\Users\Kaku\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhjbpmkagjlnhcmdpmbagjldaknbgnff
Folder Deleted : C:\Users\Kaku\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof
[!] Folder Deleted : C:\Users\Kaku\AppData\Local\Google\Chrome\User Data\Default\Extensions\angobeimajilfhlcpeiccndaifchnppl
File Deleted : C:\Users\Adéla\daemonprocess.txt
File Deleted : C:\Users\Eva\daemonprocess.txt
File Deleted : C:\Users\Kaku\daemonprocess.txt
File Deleted : C:\Users\Eva\AppData\Roaming\Mozilla\Firefox\Profiles\mgx5xa5t.default\searchplugins\Askcom.xml
File Deleted : C:\Users\Eva\AppData\Roaming\Mozilla\Firefox\Profiles\mgx5xa5t.default\searchplugins\Conduit.xml
File Deleted : C:\Users\Adéla\AppData\Roaming\Mozilla\Firefox\Profiles\cvwrnd3t.default\searchplugins\icqplugin.xml
File Deleted : C:\Users\Eva\AppData\Roaming\Mozilla\Firefox\Profiles\mgx5xa5t.default\searchplugins\icqplugin.xml
File Deleted : C:\Users\Eva\AppData\Roaming\Mozilla\Firefox\Profiles\mgx5xa5t.default\searchplugins\icqplugin-1.xml
File Deleted : C:\Users\Eva\AppData\Roaming\Mozilla\Firefox\Profiles\mgx5xa5t.default\searchplugins\icqplugin-2.xml
File Deleted : C:\Users\Eva\AppData\Roaming\Mozilla\Firefox\Profiles\mgx5xa5t.default\searchplugins\icqplugin-3.xml
File Deleted : C:\Users\Eva\AppData\Roaming\Mozilla\Firefox\Profiles\mgx5xa5t.default\searchplugins\icqplugin-4.xml
File Deleted : C:\Users\Adéla\AppData\Roaming\Mozilla\Firefox\Profiles\cvwrnd3t.default\searchplugins\mywebsearch.xml
File Deleted : C:\Users\Eva\AppData\Roaming\Mozilla\Firefox\Profiles\mgx5xa5t.default\searchplugins\mywebsearch.xml
***** [ Scheduled Tasks ] *****
***** [ Shortcuts ] *****
***** [ Registry ] *****
Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [4zffxtbr@VideoDownloadConverter_4z.com]
Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [Avg@toolbar]
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\angobeimajilfhlcpeiccndaifchnppl
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\ICQ\ICQToolBar
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Main [ICQ Search]
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\ScriptHelper.EXE
Key Deleted : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI
Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI.1
Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj
Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj.1
Key Deleted : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr
Key Deleted : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr.1
Key Deleted : HKLM\SOFTWARE\Classes\Prod.cap
Key Deleted : HKLM\SOFTWARE\Classes\protocols\handler\viprotocol
Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi
Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1
Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.DynamicBarButton
Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.DynamicBarButton.1
Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.FeedManager
Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.FeedManager.1
Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.HTMLMenu
Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.HTMLMenu.1
Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.HTMLPanel
Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.HTMLPanel.1
Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.MultipleButton
Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.MultipleButton.1
Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.PseudoTransparentPlugin
Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.PseudoTransparentPlugin.1
Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.Radio
Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.Radio.1
Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.RadioSettings
Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.RadioSettings.1
Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.ScriptButton
Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.ScriptButton.1
Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.SettingsPlugin
Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.SettingsPlugin.1
Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.SkinLauncher
Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.SkinLauncher.1
Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.ThirdPartyInstaller
Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.ThirdPartyInstaller.1
Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.UrlAlertButton
Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.UrlAlertButton.1
Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.XMLSessionPlugin
Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.XMLSessionPlugin.1
Key Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE
Key Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@VideoDownloadConverter_4z.com/Plugin
Key Deleted : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\webcakeupdater
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{408CFAD9-8F13-4747-8EC7-770A339C7237}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{933B95E2-E7B7-4AD9-B952-7AC336682AE3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{94496571-6AC5-4836-82D5-D46260C44B17}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{9AFB8248-617F-460D-9366-D71CDEDA3179}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A4730EBE-43A6-443E-9776-36915D323AD3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{BC9FD17D-30F6-4464-9E53-596A90AFF023}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FB684D26-01F4-4D9D-87CB-F486BEBA56DC}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{17B10E59-09E1-4C39-A738-6774D7AB7778}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{1AD2049E-E483-4425-8555-8E0775ACB631}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{2D73F2D0-2FAB-458E-977D-2F9050E0ED60}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{2D9083CE-8758-4704-BA57-3C891D7452BD}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3E9469AF-E866-4476-B767-810630F1F6E7}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{47700C35-9E3E-4DAD-934C-0CE28A87237C}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{716E443D-7CAA-44F1-866B-F45D00E712CC}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{72063D77-7590-4DA9-A7F8-F5ECAF3632C4}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{7FC87AC5-FA93-476E-A32C-A941229DED0B}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{DB507187-9746-458C-97DA-C458131EEDE7}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{07CAC314-E962-4F78-89AB-DD002F2490EE}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{13ABD093-D46F-40DF-A608-47E162EC799D}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{192F487E-E812-40C0-B0DE-CB4BFA20F37B}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{2D3826A1-F3E8-45D6-94B5-C26D8EC0073B}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{3EE17DD1-E28B-4AED-A3B2-9C29CB2C19D6}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{79332472-47F3-4E32-B07F-CF8DF4C58499}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{886F93AD-3CBB-4424-8442-A7340243540F}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{AA289DBC-59B6-40A5-AC7D-C90DF850289C}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{BC153A3C-0BB7-4EED-83AE-28E6E398F56E}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{CA723163-6FAD-43D4-8B93-0D8C52BD9974}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{F1F328EB-F5A5-432B-A54C-05F3EF5B0BD8}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{FB0E8A09-F08C-44CF-9E15-97ADAC016248}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{FE8DBB09-C3D3-4477-80CB-D38914B94BB8}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{312F84FB-8970-4FD3-BDDB-7012EAC4AFC9}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C547C6C2-561B-4169-A2A5-20BA771CA93B}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00A6FAF6-072E-44CF-8957-5838F569A31D}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{07B18EAB-A523-4961-B6BB-170DE4475CCA}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{312F84FB-8970-4FD3-BDDB-7012EAC4AFC9}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8736C681-37A0-40C6-A0F0-4C083409151C}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C547C6C2-561B-4169-A2A5-20BA771CA93B}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{CC99A798-FD3D-4AB4-969E-6071612524F9}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DF780F87-FF2B-4DF8-92D0-73DB16A1543A}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{1E0DE227-5CE4-4EA3-AB0C-8B03E1AA76BC}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{6F6A5334-78E9-4D9B-8182-8B41EA8C39EF}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{CCB69577-088B-4004-9ED8-FF5BCC83A039}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{08858AF6-42AD-4914-95D2-AC3AB0DC8E28}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{1F6F39C1-00A8-4752-A94C-D0EA92D978B6}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5354D921-3F52-47C5-938D-77A2FB6DEFE7}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{71144427-1368-4D18-8DC9-2AE3CC4C4F83}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{99E1F6FD-2E94-4CF6-8344-1BA63CD3BD9B}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A86782D8-7B41-452F-A217-1854F72DBA54}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{ED345812-2722-4DCA-9976-D01832DB44EE}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{11BF46C6-B3DE-48BD-BF70-3AD85CAB80B6}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2D9083CE-8758-4704-BA57-3C891D7452BD}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3D429207-4689-492D-A0E5-CDC5DFBB5005}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{59C7FC09-1C83-4648-B3E6-003D2BBC7481}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68AF847F-6E91-45DD-9B68-D6A12C30E5D7}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9170B96C-28D4-4626-8358-27E6CAEEF907}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D1A71FA0-FF48-48DD-9B6D-7A13A3E42127}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DDB1968E-EAD6-40FD-8DAE-FF14757F60C7}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F138D901-86F0-4383-99B6-9CDD406036DA}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F84D69AA-3E20-4305-984E-18E640D7F7FF}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{C04B7D22-5AEC-4561-8F49-27F6269208F6}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{48586425-6BB7-4F51-8DC6-38C88E3EBB58}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{95B7759C-8C7F-4BF1-B163-73684A933233}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{4B3803EA-5230-4DC3-A7FC-33638F3D3542}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{93A3111F-4F74-4ED8-895E-D9708497629E}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{D3D233D5-9F6D-436C-B6C7-E63F77503B30}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{855F3B16-6D32-4FE6-8A56-BBB695989046}]
Key Deleted : HKCU\Software\AVG Secure Search
Key Deleted : HKCU\Software\BI
Key Deleted : HKCU\Software\MyWebSearch
Key Deleted : HKCU\Software\ParetoLogic
Key Deleted : HKCU\Software\Softonic
Key Deleted : HKCU\Software\AppDataLow\{5617ECA9-488D-4BA2-8562-9710B9AB78D2}
Key Deleted : HKCU\Software\AppDataLow\Software\Conduit
Key Deleted : HKCU\Software\AppDataLow\Software\DoubleD
Key Deleted : HKCU\Software\AppDataLow\Software\Fun Web Products
Key Deleted : HKCU\Software\AppDataLow\Software\FunWebProducts
Key Deleted : HKCU\Software\AppDataLow\Software\Internet Saving Optimizer
Key Deleted : HKCU\Software\AppDataLow\Software\Media Access Startup
Key Deleted : HKCU\Software\AppDataLow\Software\MyWebSearch
Key Deleted : HKCU\Software\AppDataLow\Software\VideoDownloadConverter_4z
Key Deleted : HKLM\SOFTWARE\AVG Secure Search
Key Deleted : HKLM\SOFTWARE\AVG Security Toolbar
Key Deleted : HKLM\SOFTWARE\Babylon
Key Deleted : HKLM\SOFTWARE\Conduit
Key Deleted : HKLM\SOFTWARE\Fun Web Products
Key Deleted : HKLM\SOFTWARE\ICQ\ICQToolbar
Key Deleted : HKLM\SOFTWARE\MyWebSearch
Key Deleted : HKLM\SOFTWARE\Tarma Installer
Key Deleted : HKLM\SOFTWARE\VideoDownloadConverter_4z
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG Secure Search
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Mobogenie
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{6F6A5334-78E9-4D9B-8182-8B41EA8C39EF}_is1
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{79A765E1-C399-405B-85AF-466F52E918B0}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{A957F04C-49F4-4375-8C8A-D04B769EFE47}_is1
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{C4ED781C-7394-4906-AAFF-D6AB64FF7C38}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Mobogenie
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\MyPC Backup
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\VideoDownloadConverter_4zbar Uninstall
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\08121C32A9C319F4CB0C11FF059552A4
***** [ Browsers ] *****
-\\ Internet Explorer v9.0.8112.16563
Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [ICQ Search]
-\\ Mozilla Firefox v31.0 (x86 cs)
[ File : C:\Users\Adéla\AppData\Roaming\Mozilla\Firefox\Profiles\cvwrnd3t.default\prefs.js ]
Line Deleted : user_pref("browser.search.defaultengine", "Ask.com");
Line Deleted : user_pref("browser.search.order.1", "Ask.com");
Line Deleted : user_pref("browser.search.selectedEngine", "Ask.com");
Line Deleted : user_pref("browser.startup.homepage", "hxxp://home.mywebsearch.com/index.jhtml?ptb=31D2536B-8AC9-4AEF-9501-27BC0AC7D40A&n=77ee6361&ptnrS=HJxdm073YYcz&si=pconverter");
Line Deleted : user_pref("extensions.asktb.ff-original-keyword-url", "hxxp://www.mywebsearch.com/jsp/cfg_redir2.jsp?id=ZCman000&fl=0&ptb=f4QqUC5BF15QlOyD0zmmQw&url=hxxp://search.mywebsearch.com/mywebsearch/dft_redir[...]
Line Deleted : user_pref("extensions.enabledItems", "{800b5000-a755-47e1-992b-48a1c1357f07}:1.1.5,{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24,{20a82645-c095-46ed-80e3-08825760534b}:1.1,{4B3803EA-5230-4DC3-A7FC-336[...]
Line Deleted : user_pref("extensions.mywebsearch.openSearchURL", "hxxp://search.mywebsearch.com/mywebsearch/opensearch.jhtml?id=ZCman000&ptb=f4QqUC5BF15QlOyD0zmmQw");
Line Deleted : user_pref("extensions.mywebsearch.prevDefaultEngine", "AVG Secure Search");
Line Deleted : user_pref("extensions.mywebsearch.prevKwdEnabled", true);
Line Deleted : user_pref("extensions.mywebsearch.prevKwdURL", "hxxp://search.icq.com/search/afe_results.php?ch_id=afex&q=");
Line Deleted : user_pref("extensions.mywebsearch.prevSelectedEngine", "AVG Secure Search");
Line Deleted : user_pref("extensions.toolbar.mindspark._4zMembers_.homepage", "hxxp://home.mywebsearch.com/index.jhtml?ptb=31D2536B-8AC9-4AEF-9501-27BC0AC7D40A&n=77ee6361&ptnrS=HJxdm073YYcz&si=pconverter");
Line Deleted : user_pref("extensions.toolbar.mindspark._4zMembers_.hp.enabled", true);
Line Deleted : user_pref("extensions.toolbar.mindspark._4zMembers_.initialized", true);
Line Deleted : user_pref("extensions.toolbar.mindspark._4zMembers_.installation.contextKey", "");
Line Deleted : user_pref("extensions.toolbar.mindspark._4zMembers_.installation.installDate", "2012111713");
Line Deleted : user_pref("extensions.toolbar.mindspark._4zMembers_.installation.partnerId", "HJxdm073YYcz");
Line Deleted : user_pref("extensions.toolbar.mindspark._4zMembers_.installation.partnerSubId", "pconverter");
Line Deleted : user_pref("extensions.toolbar.mindspark._4zMembers_.installation.success", true);
Line Deleted : user_pref("extensions.toolbar.mindspark._4zMembers_.installation.toolbarId", "31D2536B-8AC9-4AEF-9501-27BC0AC7D40A");
Line Deleted : user_pref("extensions.toolbar.mindspark._4zMembers_.lastActivePing", "1403109881881");
Line Deleted : user_pref("extensions.toolbar.mindspark._4zMembers_.options.defaultSearch", true);
Line Deleted : user_pref("extensions.toolbar.mindspark._4zMembers_.options.homePageEnabled", true);
Line Deleted : user_pref("extensions.toolbar.mindspark._4zMembers_.options.keywordEnabled", true);
Line Deleted : user_pref("extensions.toolbar.mindspark._4zMembers_.options.tabEnabled", true);
Line Deleted : user_pref("extensions.toolbar.mindspark._4zMembers_.searchHistory", "facebook.com");
Line Deleted : user_pref("extensions.toolbar.mindspark._4zMembers_.weather.location", "10001");
Line Deleted : user_pref("extensions.toolbar.mindspark.hp.enabled", true);
Line Deleted : user_pref("extensions.toolbar.mindspark.hp.enabled.guid", "videodownloadconverter@mindspark.com");
Line Deleted : user_pref("extensions.toolbar.mindspark.lastInstalled", "videodownloadconverter@mindspark.com");
Line Deleted : user_pref("extensions.wrc.SearchRules.ask.com.style", ".WRCN {display:none} #yui-main .tsrc_vnru .title + .WRCN, #yui-main #teoma-results .title + .WRCN {display:inline !important; background: url(\"I[...]
Line Deleted : user_pref("extensions.wrc.SearchRules.ask.com.url", "^hxxp(s)?\\:\\/\\/(.+\\.)?ask\\.com\\/.*");
Line Deleted : user_pref("icqtoolbar.allowSendURL", false);
Line Deleted : user_pref("icqtoolbar.engineVerified", false);
Line Deleted : user_pref("icqtoolbar.hiddenElements", "itb_options");
Line Deleted : user_pref("icqtoolbar.history", "seznam");
Line Deleted : user_pref("icqtoolbar.numberOfSearches", 0);
Line Deleted : user_pref("icqtoolbar.previousFFVersion", "3.5.5");
Line Deleted : user_pref("icqtoolbar.skip_default_search", "no");
Line Deleted : user_pref("icqtoolbar.suggestions", false);
Line Deleted : user_pref("icqtoolbar.uniqueID", "128706460512870646041287064608024");
Line Deleted : user_pref("icqtoolbar.usageStatstTimestamp", 1350818370);
Line Deleted : user_pref("icqtoolbar.version", "1.1.5");
Line Deleted : user_pref("icqtoolbar.xmlEnableSuggestions", false);
Line Deleted : user_pref("icqtoolbar.xmlLanguage", "cs");
Line Deleted : user_pref("keyword.URL", "hxxp://search.mywebsearch.com/mywebsearch/GGmain.jhtml?st=kwd&ptb=31D2536B-8AC9-4AEF-9501-27BC0AC7D40A&n=77ee6361&ind=2012111713&id=HJxdm073YYcz&ptnrS=HJxdm073YYcz&si=pconver[...]
[ File : C:\Users\Eva\AppData\Roaming\Mozilla\Firefox\Profiles\mgx5xa5t.default\prefs.js ]
Line Deleted : user_pref("CT2247187.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
Line Deleted : user_pref("CT2247187.CTID", "CT2247187");
Line Deleted : user_pref("CT2247187.Chat.Meebo.ServerLastCheckTime", "Fri Dec 16 2011 18:04:56 GMT+0100");
Line Deleted : user_pref("CT2247187.Chat.Meebo.ServerLastResponseTime", "Fri Dec 16 2011 18:04:56 GMT+0100");
Line Deleted : user_pref("CT2247187.Chat.Meebo.rooms.2030of7a78203f", 2);
Line Deleted : user_pref("CT2247187.Chat.Meebo.rooms.30plus683ec0a3", 0);
Line Deleted : user_pref("CT2247187.Chat.Meebo.rooms.entertainment3d98c8ee", 1);
Line Deleted : user_pref("CT2247187.Chat.Meebo.rooms.healthed7eb5ea", 0);
Line Deleted : user_pref("CT2247187.Chat.Meebo.rooms.marioforevercommunitychatdf56fc21", 0);
Line Deleted : user_pref("CT2247187.Chat.Meebo.rooms.musicpca565a36", 0);
Line Deleted : user_pref("CT2247187.Chat.Meebo.rooms.newstu0548025d", 0);
Line Deleted : user_pref("CT2247187.Chat.Meebo.rooms.recreation2b6006ec", 0);
Line Deleted : user_pref("CT2247187.Chat.Meebo.rooms.spirituality9440382e", 0);
Line Deleted : user_pref("CT2247187.Chat.Meebo.rooms.sports84029aeb", 6);
Line Deleted : user_pref("CT2247187.Chat.Meebo.rooms.technology9fc01102", 1);
Line Deleted : user_pref("CT2247187.Chat.Meebo.rooms.travel0e02ee8e", 0);
Line Deleted : user_pref("CT2247187.Chat.Meebo.rooms.videogames58dc7b74", 0);
Line Deleted : user_pref("CT2247187.Chat.ServerLastCheckTime", "Fri Dec 16 2011 17:04:56 GMT+0100");
Line Deleted : user_pref("CT2247187.CommunitiesChangesLastCheckTime", "Fri Dec 16 2011 17:04:53 GMT+0100");
Line Deleted : user_pref("CT2247187.CommunityChanged", true);
Line Deleted : user_pref("CT2247187.DialogsAlignMode", "LTR");
Line Deleted : user_pref("CT2247187.DownloadDomainsCheckInterval", "168");
Line Deleted : user_pref("CT2247187.DownloadDomainsListLastCheckTime", "Thu Dec 15 2011 19:49:27 GMT+0100");
Line Deleted : user_pref("CT2247187.DownloadDomainsListLastServerUpdateTime", "1201069983");
Line Deleted : user_pref("CT2247187.EMailNotifierPollDate", "Fri Dec 16 2011 18:04:57 GMT+0100");
Line Deleted : user_pref("CT2247187.FirstTime", true);
Line Deleted : user_pref("CT2247187.FirstTimeFF3", true);
Line Deleted : user_pref("CT2247187.FixPageNotFoundErrors", true);
Line Deleted : user_pref("CT2247187.GroupingServerCheckInterval", 1440);
Line Deleted : user_pref("CT2247187.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
Line Deleted : user_pref("CT2247187.Initialize", true);
Line Deleted : user_pref("CT2247187.InitializeCommonPrefs", true);
Line Deleted : user_pref("CT2247187.InstalledDate", "Fri Sep 23 2011 13:08:33 GMT+0200");
Line Deleted : user_pref("CT2247187.InvalidateCache", false);
Line Deleted : user_pref("CT2247187.IsGrouping", false);
Line Deleted : user_pref("CT2247187.IsMulticommunity", true);
Line Deleted : user_pref("CT2247187.IsOpenThankYouPage", true);
Line Deleted : user_pref("CT2247187.IsOpenUninstallPage", true);
Line Deleted : user_pref("CT2247187.LanguagePackLastCheckTime", "Thu Dec 15 2011 19:49:34 GMT+0100");
Line Deleted : user_pref("CT2247187.LanguagePackReloadIntervalMM", 1440);
Line Deleted : user_pref("CT2247187.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx");
Line Deleted : user_pref("CT2247187.LastLogin_2.1.0.15", "Fri Dec 16 2011 17:04:55 GMT+0100");
Line Deleted : user_pref("CT2247187.LatestVersion", "3.8.1.0");
Line Deleted : user_pref("CT2247187.Locale", "en");
Line Deleted : user_pref("CT2247187.LoginCache", 4);
Line Deleted : user_pref("CT2247187.MCDetectTooltipHeight", "83");
Line Deleted : user_pref("CT2247187.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
Line Deleted : user_pref("CT2247187.MCDetectTooltipWidth", "295");
Line Deleted : user_pref("CT2247187.RadioIsPodcast", false);
Line Deleted : user_pref("CT2247187.RadioLastCheckTime", "Thu Dec 15 2011 19:49:33 GMT+0100");
Line Deleted : user_pref("CT2247187.RadioLastUpdateIPServer", "3");
Line Deleted : user_pref("CT2247187.RadioLastUpdateServer", "128929877726170000");
Line Deleted : user_pref("CT2247187.RadioMediaID", "10957728");
Line Deleted : user_pref("CT2247187.RadioMediaType", "Media Player");
Line Deleted : user_pref("CT2247187.RadioMenuSelectedID", "EBRadioMenu_CT224718710957728");
Line Deleted : user_pref("CT2247187.RadioShrinked", "shrinked");
Line Deleted : user_pref("CT2247187.RadioStationName", "Rap%20(Uncensored)");
Line Deleted : user_pref("CT2247187.RadioStationURL", "hxxp://www.1club.fm/go/tunein.aspx?station=raw");
Line Deleted : user_pref("CT2247187.RadioVolume", "100");
Line Deleted : user_pref("CT2247187.SHRINK_TOOLBAR", 1);
Line Deleted : user_pref("CT2247187.SearchFromAddressBarIsInit", true);
Line Deleted : user_pref("CT2247187.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2247187&SearchSource=2&q=");
Line Deleted : user_pref("CT2247187.SettingsCheckIntervalMin", 120);
Line Deleted : user_pref("CT2247187.SettingsLastCheckTime", "Fri Dec 16 2011 17:04:53 GMT+0100");
Line Deleted : user_pref("CT2247187.SettingsLastUpdate", "1320749725");
Line Deleted : user_pref("CT2247187.ThirdPartyComponentsInterval", 504);
Line Deleted : user_pref("CT2247187.ThirdPartyComponentsLastCheck", "Thu Dec 15 2011 19:49:26 GMT+0100");
Line Deleted : user_pref("CT2247187.ThirdPartyComponentsLastUpdate", "1312887586");
Line Deleted : user_pref("CT2247187.TrusteLinkUrl", "hxxp://trust.conduit.com/EB_ORIGINAL_CTID");
Line Deleted : user_pref("CT2247187.UserID", "UN24827853259944055");
Line Deleted : user_pref("CT2247187.WeatherNetwork", "");
Line Deleted : user_pref("CT2247187.WeatherPollDate", "Fri Dec 16 2011 17:34:58 GMT+0100");
Line Deleted : user_pref("CT2247187.WeatherUnit", "C");
Line Deleted : user_pref("CT2247187.clientLogIsEnabled", true);
Line Deleted : user_pref("CT2247187.clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
Line Deleted : user_pref("CT2247187.myStuffEnabled", true);
Line Deleted : user_pref("CT2247187.myStuffPublihserMinWidth", 400);
Line Deleted : user_pref("CT2247187.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID");
Line Deleted : user_pref("CT2247187.myStuffServiceIntervalMM", 1440);
Line Deleted : user_pref("CT2247187.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUFF_LUT");
Line Deleted : user_pref("CT2247187.uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
Line Deleted : user_pref("CommunityToolbar.ToolbarsList", "CT2247187");
Line Deleted : user_pref("CommunityToolbar.ToolbarsList2", "CT2247187");
Line Deleted : user_pref("browser.babylon.HPOnNewTab", "search.babylon.com");
Line Deleted : user_pref("dom.ipc.plugins.enabled.npmywebs.dll", false);
Line Deleted : user_pref("extensions.BabylonToolbar.admin", false);
Line Deleted : user_pref("extensions.BabylonToolbar.aflt", "babsst");
Line Deleted : user_pref("extensions.BabylonToolbar.babExt", "");
Line Deleted : user_pref("extensions.BabylonToolbar.babTrack", "affID=108758");
Line Deleted : user_pref("extensions.BabylonToolbar.bbDpng", 28);
Line Deleted : user_pref("extensions.BabylonToolbar.dfltLng", "en");
Line Deleted : user_pref("extensions.BabylonToolbar.dfltSrch", true);
Line Deleted : user_pref("extensions.BabylonToolbar.hmpg", true);
Line Deleted : user_pref("extensions.BabylonToolbar.id", "c275a845000000000000001fd034c547");
Line Deleted : user_pref("extensions.BabylonToolbar.instlDay", "15380");
Line Deleted : user_pref("extensions.BabylonToolbar.instlRef", "sst");
Line Deleted : user_pref("extensions.BabylonToolbar.keyWordUrl", "hxxp://search.babylon.com/?AF=108758&babsrc=adbartrp&mntrId=c275a845000000000000001fd034c547&q=");
Line Deleted : user_pref("extensions.BabylonToolbar.lastDP", 28);
Line Deleted : user_pref("extensions.BabylonToolbar.lastVrsnTs", "1.5.3.1715:28:34");
Line Deleted : user_pref("extensions.BabylonToolbar.mntrFFxVrsn", "29.0");
Line Deleted : user_pref("extensions.BabylonToolbar.newTab", true);
Line Deleted : user_pref("extensions.BabylonToolbar.newTabUrl", "hxxp://search.babylon.com/?babsrc=NT_FFUP");
Line Deleted : user_pref("extensions.BabylonToolbar.noFFXTlbr", false);
Line Deleted : user_pref("extensions.BabylonToolbar.prdct", "BabylonToolbar");
Line Deleted : user_pref("extensions.BabylonToolbar.propectorlck", 139863026);
Line Deleted : user_pref("extensions.BabylonToolbar.prtkDS", 1);
Line Deleted : user_pref("extensions.BabylonToolbar.prtkHmpg", 1);
Line Deleted : user_pref("extensions.BabylonToolbar.prtnrId", "babylon");
Line Deleted : user_pref("extensions.BabylonToolbar.ptch_0717", true);
Line Deleted : user_pref("extensions.BabylonToolbar.smplGrp", "azb");
Line Deleted : user_pref("extensions.BabylonToolbar.srcExt", "ss");
Line Deleted : user_pref("extensions.BabylonToolbar.tlbrId", "base");
Line Deleted : user_pref("extensions.BabylonToolbar.vrsn", "1.5.3.17");
Line Deleted : user_pref("extensions.BabylonToolbar.vrsnTs", "1.5.3.1715:28:34");
Line Deleted : user_pref("extensions.BabylonToolbar.vrsni", "1.5.3.17");
Line Deleted : user_pref("extensions.BabylonToolbar_i.aflt", "babsst");
Line Deleted : user_pref("extensions.BabylonToolbar_i.babExt", "");
Line Deleted : user_pref("extensions.BabylonToolbar_i.babTrack", "affID=108758");
Line Deleted : user_pref("extensions.BabylonToolbar_i.hardId", "c275a845000000000000001fd034c547");
Line Deleted : user_pref("extensions.BabylonToolbar_i.id", "c275a845000000000000001fd034c547");
Line Deleted : user_pref("extensions.BabylonToolbar_i.instlDay", "15380");
Line Deleted : user_pref("extensions.BabylonToolbar_i.instlRef", "sst");
Line Deleted : user_pref("extensions.BabylonToolbar_i.newTab", false);
Line Deleted : user_pref("extensions.BabylonToolbar_i.prdct", "BabylonToolbar");
Line Deleted : user_pref("extensions.BabylonToolbar_i.prtnrId", "babylon");
Line Deleted : user_pref("extensions.BabylonToolbar_i.smplGrp", "none");
Line Deleted : user_pref("extensions.BabylonToolbar_i.srcExt", "ss");
Line Deleted : user_pref("extensions.BabylonToolbar_i.tlbrId", "base");
Line Deleted : user_pref("extensions.BabylonToolbar_i.vrsn", "1.5.3.17");
Line Deleted : user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.5.3.1715:28:34");
Line Deleted : user_pref("extensions.BabylonToolbar_i.vrsni", "1.5.3.17");
Line Deleted : user_pref("extensions.enabledItems", "wrc@avast.com:7.0.1426,ffxtlbr@babylon.com:1.2.0,{4B3803EA-5230-4DC3-A7FC-33638F3D3542}:1.3,inboxcomtoolbar@inbox.com:1.2.0.0,{CAFEEFAC-0016-0000-0024-ABCDEFFEDCB[...]
Line Deleted : user_pref("extensions.foxcub.prev.KWD", "hxxp://www.mywebsearch.com/jsp/cfg_redir2.jsp?id=ZCman000&fl=0&ptb=f4QqUC5BF15QlOyD0zmmQw&url=hxxp://search.mywebsearch.com/mywebsearch/dft_redir.jhtml&st=kwd&[...]
Line Deleted : user_pref("extensions.mywebsearch.openSearchURL", "hxxp://search.mywebsearch.com/mywebsearch/opensearch.jhtml?id=ZCxdm490YYCZ&ptb=WXjHv1pOK5nVe5O0ePPuhw&ind=2011040811&ptnrS=ZCxdm490YYCZ&si=&n=77de0c2[...]
Line Deleted : user_pref("extensions.mywebsearch.prevKwdEnabled", true);
Line Deleted : user_pref("extensions.mywebsearch.prevKwdURL", "chrome://browser-region/locale/region.properties");
Line Deleted : user_pref("extensions.wrc.SearchRules.ask.com.url", "^hxxp(s)?\\:\\/\\/(.+\\.)?ask\\.com\\/.*");
Line Deleted : user_pref("icqtoolbar.allowSendURL", false);
Line Deleted : user_pref("icqtoolbar.engineVerified", true);
Line Deleted : user_pref("icqtoolbar.geolastmodified", 1346001456);
Line Deleted : user_pref("icqtoolbar.hiddenElements", "itb_options");
Line Deleted : user_pref("icqtoolbar.history", "fhs%20utb||Love||zlin.priluky.kk||facebook%20chat||facebook||PYRENEJSK%C3%9D%20OV%C4%8C%C3%81K%2C%20S%20HLADKOU%20SRST%C3%8D%20V%20OBLI%C4%8CEJI||PYRENEJSK%C3%9D%20OV%[...]
Line Deleted : user_pref("icqtoolbar.icqgeo", 42);
Line Deleted : user_pref("icqtoolbar.installTime", "1346491879");
Line Deleted : user_pref("icqtoolbar.installsource", "1");
Line Deleted : user_pref("icqtoolbar.newtab_state", "1");
Line Deleted : user_pref("icqtoolbar.numberOfSearches", 0);
Line Deleted : user_pref("icqtoolbar.previousFFVersion", "3.5.5");
Line Deleted : user_pref("icqtoolbar.skip_default_search", "no");
Line Deleted : user_pref("icqtoolbar.suggestions", false);
Line Deleted : user_pref("icqtoolbar.uniqueID", "125976343412597634341261413213301");
Line Deleted : user_pref("icqtoolbar.usageStatstTimestamp", 1346491883);
Line Deleted : user_pref("icqtoolbar.version", "1.4.7");
Line Deleted : user_pref("icqtoolbar.voucherHideClicks", 0);
Line Deleted : user_pref("icqtoolbar.voucherMoreLinkClicks", 0);
Line Deleted : user_pref("icqtoolbar.voucherRedeemClicks", 0);
Line Deleted : user_pref("icqtoolbar.voucherWasShown", 0);
Line Deleted : user_pref("icqtoolbar.xmlEnableSuggestions", false);
Line Deleted : user_pref("icqtoolbar.xmlLanguage", "cs");
-\\ Google Chrome v36.0.1985.143
[ File : C:\Users\Adéla\AppData\Local\Google\Chrome\User Data\Default\preferences ]
Deleted [Search Provider] :
hxxp://ask.com/web?q={searchTerms}&search=&qsrc=364&o=0&l=dir
Deleted [Search Provider] :
hxxp://ww2.tiketportal.cz/?epl=asxJWeLu ... ADw&query={searchTerms}&afdToken=CooDChMI3bHO9u7juQIVQnveCh0magBZEAIYAyAAODBA76S5vpDe_YbrAVDk2sQJUO-qqA5QiPfiDlD7-ZgPUNT_mA9Q87TOD1DE5M4PUMy63A9QlLvcD1DQu9wPUM-s9g9Q_f-gEFDTv70QUKi3mxFQqbebEVCZvbURUJ69tRFQpr21EVCrvbURULS9tRFQooDxEVCh7f8TUKnu_xNQ_-q3FVCv67cVUL7l6RVQ4cLdF1C6g8UYUNauuR1Qo4L9IFDTqpEhUInCkSFQqeGRIVCq4ZEhUKHskSFQhNjtJlCF2O0mUOycrSlQhp2tKVDUsa0pUNaxrSlQtMO1KVC-w7UpUJjVyzBQmtXLMFCAh6ZRUOrxt1FQiJCTjwFQ8ej7kwFQ-buUlQFQtPvtlwFQgd2IogFQ3MjkqwFQqcrkqwFQj7WLsgFQuOrUuQFQhPzJvwFQjJfzwAFQoIvJnQNQ7orMnQNxTJhBPhasH_eCARMIgNvT9u7juQIVApfeCh25PACKkQG9ZUTgBkYR5hIZAJyFAkrmawK4Y0Rtgfuf7Pggy4YUuhwx_Q&search=1
Deleted [Startup_urls] :
hxxp://isearch.avg.com/?cid={B02EEC65-5199-4595-AF7E-C5CEE844C3AF}&mid=cc50d5b0171447d0a281d15696d02cb4-77980187689e01f368d258b7c1e86db5d79e224a&lang=cs&ds=pd011&pr=sa&d=2012-10-28 15:42:30&v=14.2.0.1&pid=avg&sg=&sap=hp
Deleted [Startup_urls] :
hxxp://isearch.avg.com/?cid={B02EEC65-5199-4595-AF7E-C5CEE844C3AF}&mid=cc50d5b0171447d0a281d15696d02cb4-77980187689e01f368d258b7c1e86db5d79e224a&lang=cs&ds=pd011&pr=sa&d=2012-10-28 15:42:30&v=15.3.0.11&pid=avg&sg=0&sap=hp
Deleted [Startup_urls] :
hxxp://isearch.avg.com/?cid={B02EEC65-5199-4595-AF7E-C5CEE844C3AF}&mid=cc50d5b0171447d0a281d15696d02cb4-77980187689e01f368d258b7c1e86db5d79e224a&lang=cs&ds=pd011&pr=sa&d=2012-10-28 15:42:30&v=18.0.5.292&pid=avg&sg=0&sap=hp|hxxp://isearch.avg.com/?cid={B02EEC65-5199-4595-AF7E-C5CEE844C3AF}&mid=cc50d5b0171447d0a281d15696d02cb4-77980187689e01f368d258b7c1e86db5d79e224a&lang=cs&ds=pd011&pr=sa&d=2012-10-28 15:42:30&v=15.3.0.11&pid=avg&sg=0&sap=hp
Deleted [Startup_urls] :
hxxp://isearch.avg.com/?cid={B02EEC65-5199-4595-AF7E-C5CEE844C3AF}&mid=cc50d5b0171447d0a281d15696d02cb4-77980187689e01f368d258b7c1e86db5d79e224a&lang=cs&ds=pd011&pr=sa&d=2012-10-28 15:42:30&v=18.1.0.443&pid=avg&sg=0&sap=hp
Deleted [Homepage] :
hxxp://isearch.avg.com/?cid={B02EEC65-5199-4595-AF7E-C5CEE844C3AF}&mid=cc50d5b0171447d0a281d15696d02cb4-77980187689e01f368d258b7c1e86db5d79e224a&lang=cs&ds=pd011&pr=sa&d=2012-10-28 15:42:30&v=14.2.0.1&pid=avg&sg=&sap=hp
Deleted [Extension] : aaaaojmikegpiepcfdkkjaplodkpfmlo
Deleted [Extension] : dhjbpmkagjlnhcmdpmbagjldaknbgnff
[ File : C:\Users\Eva\AppData\Local\Google\Chrome\User Data\Default\preferences ]
Deleted [Extension] : aaaaojmikegpiepcfdkkjaplodkpfmlo
Deleted [Extension] : ndibdjnfmopecpmkdieinmbadjfpblof
[ File : C:\Users\Kaku\AppData\Local\Google\Chrome\User Data\Default\preferences ]
Deleted [Search Provider] :
hxxp://isearch.avg.com/search?cid={B02EEC65-5199-4595-AF7E-C5CEE844C3AF}&mid=cc50d5b0171447d0a281d15696d02cb4-77980187689e01f368d258b7c1e86db5d79e224a&lang=cs&ds=pd011&pr=sa&d=2012-10-28 15:42:30&v=15.5.0.2&pid=avg&sg=0&sap=dsp&q={searchTerms}
*************************
AdwCleaner[R0].txt - [42580 octets] - [04/09/2014 16:37:39]
AdwCleaner[R1].txt - [42641 octets] - [04/09/2014 21:12:46]
AdwCleaner[S0].txt - [43338 octets] - [04/09/2014 21:18:01]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [43399 octets] ##########
Log z JRT:
=================~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows Vista (TM) Home Premium x86
Ran by Eva on źt 04.09.2014 at 21:29:53,06
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
~~~ Registry Keys
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{FB684D26-01F4-4D9D-87CB-F486BEBA56DC}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{780EE620-1C79-42D8-87C7-5F63D0A0874C}
~~~ Files
~~~ Folders
Successfully deleted: [Folder] "C:\Program Files\video download converter"
Successfully deleted: [Empty Folder] C:\Users\Eva\appdata\local\{3E1EAA2A-1078-488F-98DC-4CBD2B9D0246}
Successfully deleted: [Empty Folder] C:\Users\Eva\appdata\local\{76ABA36B-424B-4B07-942D-B320AC96F17E}
Successfully deleted: [Empty Folder] C:\Users\Eva\appdata\local\{A73581F0-C58B-4DE9-97BA-BC10FEE6A048}
Successfully deleted: [Empty Folder] C:\Users\Eva\appdata\local\{C024BDB9-9174-4324-92F8-262EEC7BC07A}
Successfully deleted: [Empty Folder] C:\Users\Eva\appdata\local\{C54E6A89-2179-4524-A3C7-C49A908E6080}
~~~ FireFox
Successfully deleted: [File] C:\user.js
Successfully deleted the following from C:\Users\Eva\AppData\Roaming\mozilla\firefox\profiles\mgx5xa5t.default\prefs.js
user_pref("extensions.inboxcomtoolbar@inbox.com.update.url", "hxxp://toolbar.inbox.com/toolbar/firefox/update.aspx?version=%ITEM_VERSION%&status=%ITEM_STATUS%&appVersion=%APP_
Emptied folder: C:\Users\Eva\AppData\Roaming\mozilla\firefox\profiles\mgx5xa5t.default\minidumps [21 files]
~~~ Chrome
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Policies\Google [Blacklisted Policy]
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on źt 04.09.2014 at 21:42:50,83
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log z MBAM:
=================Malwarebytes Anti-Malware
www.malwarebytes.orgDatum skenování: 4.9.2014
Čas skenování: 21:49:38
Protokol: mabm.txt
Správce: Ano
Verze: 2.00.2.1012
Databáze malwaru: v2014.03.04.09
Databáze rootkitů: v2014.02.20.01
Licence: Bezplatná verze
Ochrana proti malwaru: Vypnuto
Ochrana proti škodlivým webovým stránkám: Vypnuto
Self-protection: Vypnuto
OS: Windows Vista Service Pack 2
CPU: x86
Souborový systém: NTFS
Uživatel: Eva
Typ skenu: Sken hrozeb
Výsledek: Dokončeno
Prohledaných objektů: 311374
Uplynulý čas: 35 min, 32 sek
Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Vypnuto
Heuristics: Zapnuto
PUP: Zapnuto
PUM: Zapnuto
Procesy: 0
(No malicious items detected)
Moduly: 0
(No malicious items detected)
Klíče registru: 0
(No malicious items detected)
Hodnoty registru: 0
(No malicious items detected)
Data registru: 0
(No malicious items detected)
Složky: 0
(No malicious items detected)
Soubory: 0
(No malicious items detected)
Fyzické sektory: 0
(No malicious items detected)
(end)
Log z RogueKiller:
=================RogueKiller V9.2.9.0 [Jul 11 2014] by Adlice Software
mail :
http://www.adlice.com/contact/Podpora :
http://forum.adlice.comWebové stránky :
https://www.adlice.com/softwares/roguekiller/ :
http://www.adlice.comOperační systém : Windows Vista (6.0.6002 Service Pack 2) 32 bits version
Spuštěno v : Normální režim
Uživatel : Eva [Práva správce]
Mód : Kontrola -- Datum : 09/04/2014 22:53:00
¤¤¤ Škodlivé procesy: : 0 ¤¤¤
¤¤¤ ¤¤¤ Záznamy Registrů: : 17 ¤¤¤
[PUM.Dns] HKEY_LOCAL_MACHINE\System\ControlSet002\Services\Tcpip\Parameters | DhcpNameServer : 10.0.0.138 -> NALEZENO
[PUM.Dns] HKEY_LOCAL_MACHINE\System\ControlSet003\Services\Tcpip\Parameters | DhcpNameServer : 10.0.0.138 -> NALEZENO
[PUM.Dns] HKEY_LOCAL_MACHINE\System\ControlSet002\Services\Tcpip\Parameters\Interfaces\{5FCAAB53-3391-4E95-AB5D-753F2DF24E75} | NameServer : 194.228.2.1 -> NALEZENO
[PUM.Dns] HKEY_LOCAL_MACHINE\System\ControlSet002\Services\Tcpip\Parameters\Interfaces\{5FCAAB53-3391-4E95-AB5D-753F2DF24E75} | DhcpNameServer : 10.0.0.138 -> NALEZENO
[PUM.Dns] HKEY_LOCAL_MACHINE\System\ControlSet003\Services\Tcpip\Parameters\Interfaces\{5FCAAB53-3391-4E95-AB5D-753F2DF24E75} | NameServer : 194.228.2.1 -> NALEZENO
[PUM.Dns] HKEY_LOCAL_MACHINE\System\ControlSet003\Services\Tcpip\Parameters\Interfaces\{5FCAAB53-3391-4E95-AB5D-753F2DF24E75} | DhcpNameServer : 10.0.0.138 -> NALEZENO
[PUM.Policies] HKEY_USERS\S-1-5-21-2229433316-4178244195-4092863301-1000\Software\Microsoft\Windows\CurrentVersion\Policies\System | DisableRegistryTools : 0 -> NALEZENO
[PUM.Policies] HKEY_USERS\S-1-5-21-2229433316-4178244195-4092863301-1000\Software\Microsoft\Windows\CurrentVersion\Policies\System | DisableTaskMgr : 0 -> NALEZENO
[PUM.DesktopIcons] HKEY_USERS\S-1-5-21-2229433316-4178244195-4092863301-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\ClassicStartMenu | {59031A47-3F72-44A7-89C5-5595FE6B30EE} : 1 -> NALEZENO
[PUM.DesktopIcons] HKEY_USERS\S-1-5-21-2229433316-4178244195-4092863301-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\ClassicStartMenu | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1 -> NALEZENO
[PUM.DesktopIcons] HKEY_USERS\S-1-5-21-2229433316-4178244195-4092863301-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\ClassicStartMenu | {645FF040-5081-101B-9F08-00AA002F954E} : 1 -> NALEZENO
[PUM.DesktopIcons] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1 -> NALEZENO
[PUM.DesktopIcons] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {59031a47-3f72-44a7-89c5-5595fe6b30ee} : 1 -> NALEZENO
[PUM.DesktopIcons] HKEY_USERS\S-1-5-21-2229433316-4178244195-4092863301-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {59031A47-3F72-44A7-89C5-5595FE6B30EE} : 1 -> NALEZENO
[PUM.DesktopIcons] HKEY_USERS\S-1-5-21-2229433316-4178244195-4092863301-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1 -> NALEZENO
[PUM.DesktopIcons] HKEY_USERS\S-1-5-21-2229433316-4178244195-4092863301-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {645FF040-5081-101B-9F08-00AA002F954E} : 1 -> NALEZENO
[PUM.HomePage] HKEY_USERS\S-1-5-21-2229433316-4178244195-4092863301-1000\Software\Microsoft\Internet Explorer\Main | Start Page :
http://www.seznam.cz/ -> NALEZENO
¤¤¤ naplánované úlohy : 4 ¤¤¤
[Suspicious.Path] AVG-Secure-Search-Update_JUNE2013_HP_rmv.job -- C:\Windows\TEMP\{3353AF86-9182-4E68-969D-418548B831AE}.exe (--uninstall=1) -> NALEZENO
[Suspicious.Path] AVG-Secure-Search-Update_JUNE2013_TB_rmv.job -- C:\Windows\TEMP\{50C9F61C-EE7B-4906-B968-D3B789B3B442}.exe (--uninstall=1) -> NALEZENO
[Suspicious.Path] \\AVG-Secure-Search-Update_JUNE2013_HP_rmv -- C:\Windows\TEMP\{3353AF86-9182-4E68-969D-418548B831AE}.exe (--uninstall=1) -> NALEZENO
[Suspicious.Path] \\AVG-Secure-Search-Update_JUNE2013_TB_rmv -- C:\Windows\TEMP\{50C9F61C-EE7B-4906-B968-D3B789B3B442}.exe (--uninstall=1) -> NALEZENO
¤¤¤ Soubory : 0 ¤¤¤
¤¤¤ Soubor HOSTS : 2 ¤¤¤
[C:\Windows\System32\drivers\etc\hosts] 127.0.0.1 localhost
[C:\Windows\System32\drivers\etc\hosts] ::1 localhost
¤¤¤ Antirootkit : 0 (Driver: NAHRÁNO) ¤¤¤
¤¤¤ Webové prohlížeče : 1 ¤¤¤
[PUM.HomePage][FIREFX:Config] mgx5xa5t.default : user_pref("browser.startup.homepage", "www.seznam.cz"); -> NALEZENO
¤¤¤ Kontrola MBR : ¤¤¤
+++++ PhysicalDrive0: SAMSUNG HD322HJ SCSI Disk Device +++++
--- User ---
[MBR] 104ba06c77ed2d7cbe799ab42f332a5b
[BSP] ebbaba802650105ad6b444168769693d : HP MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 305243 MB
User = LL1 ... OK
Error reading LL2 MBR! ([1] Nesprávná funkce. )