Kontrola logu HijackThis

Místo pro vaše HiJackThis logy a logy z dalších programů…

Moderátoři: Mods_senior, Security team

Odpovědět
jakub666
nováček
Příspěvky: 4
Registrován: říjen 15
Pohlaví: Muž
Stav:
Offline

Kontrola logu HijackThis

Příspěvekod jakub666 » 05 říj 2015 10:08

Problém s windows prieskumník, skúšal som všetko, Dneska sa mi ho podarilo vypnúť cez možnosti priečinka/zobrazenie/vždy povoliť ikony namiesto miniatur. Každopádne budem rád aj za kontorlu logu. Ďakujem

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9:57:32, on 05.10.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18015)

FIREFOX: 3.6.13 (sk)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Dell\Dell ControlPoint\Dell.ControlPoint.exe
C:\Program Files\DellTPad\Apoint.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\DellTPad\ApMsgFwd.exe
C:\ProgramData\Ad-Aware Browsing Protection\adawarebp.exe
C:\Program Files\DellTPad\HidFind.exe
C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
C:\Program Files\DellTPad\Apntex.exe
C:\Windows\system32\conhost.exe
C:\ProgramData\Search Protection\SearchProtection.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Dell\Dell ControlPoint\System Manager\DCPSysMgr.exe
C:\Users\Ing.Marián Faško\AppData\Local\Apps\2.0\Y1GC3W0M.EKW\JBKW1Y0H.G44\dell..tion_0f612f649c4a10af_0005.0004_3ddfe37344028d2c\DellSystemDetect.exe
C:\Windows\system32\GWX\GWX.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Common Files\Java\Java Update\jucheck.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Users\Ing.Marián Faško\Desktop\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.search.ask.com/?tpid=ATU4-V7 ... 06-04&psv=
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 127.0.0.1:20069
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: CyberDefender-TB Toolbar - {ffb11c0c-da90-4969-a995-8dca2e0fc10a} - C:\Program Files\CyberDefender-TB\prxtbCyb0.dll (file missing)
R3 - URLSearchHook: (no name) - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - (no file)
O2 - BHO: Ask Toolbar BHO - {41545534-2D56-3743-00A7-7A786E7484D7} - "C:\Program Files\AskPartnerNetwork\Toolbar\ATU4-V7C\Passport.dll" (file missing)
O2 - BHO: Ad-Aware Security Add-on - {6c97a91e-4524-4019-86af-2aa2d567bf5c} - C:\Program Files\adawaretb\adawareDx.dll (file missing)
O2 - BHO: RoboForm - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll (file missing)
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - "C:\Program Files\Microsoft\BingBar\BingExt.dll" (file missing)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O2 - BHO: (no name) - {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - (no file)
O2 - BHO: CyberDefender-TB - {ffb11c0c-da90-4969-a995-8dca2e0fc10a} - C:\Program Files\CyberDefender-TB\prxtbCyb0.dll (file missing)
O3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll (file missing)
O3 - Toolbar: Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files\Microsoft\BingBar\BingExt.dll" (file missing)
O3 - Toolbar: CyberDefender-TB Toolbar - {ffb11c0c-da90-4969-a995-8dca2e0fc10a} - C:\Program Files\CyberDefender-TB\prxtbCyb0.dll (file missing)
O3 - Toolbar: WebTranslator - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - C:\PROGRA~1\PCTRAN~1\webie.dll
O3 - Toolbar: Ad-Aware Security Add-on - {6c97a91e-4524-4019-86af-2aa2d567bf5c} - C:\Program Files\adawaretb\adawareDx.dll (file missing)
O3 - Toolbar: Ask Toolbar - {41545534-2D56-3743-00A7-7A786E7484D7} - "C:\Program Files\AskPartnerNetwork\Toolbar\ATU4-V7C\Passport.dll" (file missing)
O4 - HKLM\..\Run: [DellControlPoint] "C:\Program Files\Dell\Dell ControlPoint\Dell.ControlPoint.exe"
O4 - HKLM\..\Run: [OrderReminder] C:\Program Files\Hewlett-Packard\OrderReminder\OrderReminder.exe
O4 - HKLM\..\Run: [Apoint] C:\Program Files\DellTPad\Apoint.exe
O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray.exe
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [Family Tree Builder Update] C:\Program Files\MyHeritage\Bin\FTBCheckUpdates.exe
O4 - HKLM\..\Run: [StatusAlerts] "C:\Program Files\HP\StatusAlerts\bin\HPStatusAlerts.exe" /enum:on /alerts:on /notifications:on /fl:on /fr:on /appData:on /tmcp:on
O4 - HKLM\..\Run: [HP LJ300-400 color MFP M375-M475 Series Fax] C:\Program Files\HP\Digital Imaging\Fax\Fax Driver 0.6 Base\hppfaxprintersrv.exe "HP LJ300-400 color MFP M375-M475 Series Fax"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [Ad-Aware Browsing Protection] "C:\ProgramData\Ad-Aware Browsing Protection\adawarebp.exe"
O4 - HKLM\..\Run: [SearchProtection] C:\ProgramData\Search Protection\_run.bat
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKLM\..\Run: [amd_dc_opt] C:\Program Files\AMD\Dual-Core Optimizer\amd_dc_opt.exe
O4 - HKLM\..\Run: [ApnTBMon] "C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKCU\..\Run: [8FBEDE27F5F240E9D091E3D36B290FA109F47753._service_run] "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=service
O4 - HKCU\..\Run: [Driver Mender] C:\Program Files\Driver Mender\Driver Mender\DriverMender.exe /applicationMode:systemTray /showWelcome:false
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [DellSystemDetect] C:\Users\Ing.Marián Faško\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dell\Dell System Detect.appref-ms
O4 - HKCU\..\Run: [Google+ Auto Backup] "C:\Users\Ing.Marián Faško\AppData\Local\Programs\Google\Google+ Auto Backup\Google+ Auto Backup.exe" /autostart
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [GoogleChromeAutoLaunch_EDE77604EFE8E10B49EE58F324D8A11A] "C:\Program Files\Google\Chrome\Application\chrome.exe" --no-startup-window
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\RunOnce: [AutoLaunch] C:\Program Files\Lavasoft\Ad-Aware\AutoLaunch.exe monthly (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [AutoLaunch] C:\Program Files\Lavasoft\Ad-Aware\AutoLaunch.exe monthly (User 'Default user')
O4 - Startup: Google Chrome.lnk = C:\Program Files\Google\Chrome\Application\chrome.exe
O4 - Global Startup: Dell ControlPoint System Manager.lnk = C:\Program Files\Dell\Dell ControlPoint\System Manager\DCPSysMgr.exe
O4 - Global Startup: Service Manager.lnk = C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Nástrojová lišta RoboFormu - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O8 - Extra context menu item: Od&oslať do programu OneNote - res://C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105
O8 - Extra context menu item: Send image to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Send page to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O8 - Extra context menu item: Uložiť formulár - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O8 - Extra context menu item: Vyplniť formulár - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Vyplniť formulár - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html (file missing)
O9 - Extra 'Tools' menuitem: Vyplniť formulár - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html (file missing)
O9 - Extra button: Uložiť - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html (file missing)
O9 - Extra 'Tools' menuitem: Uložiť formulár - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html (file missing)
O9 - Extra button: RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html (file missing)
O9 - Extra 'Tools' menuitem: Nástrojová lišta RoboFormu - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html (file missing)
O9 - Extra button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: WebTran - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - C:\PROGRA~1\PCTRAN~1\webie.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\PROGRA~1\PCTRAN~1\webie.dll
O9 - Extra 'Tools' menuitem: &Nastaviť prekladač - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\PROGRA~1\PCTRAN~1\webie.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\PROGRA~1\PCTRAN~1\webie.dll
O9 - Extra 'Tools' menuitem: Preložiť &označený text - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\PROGRA~1\PCTRAN~1\webie.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\PROGRA~1\PCTRAN~1\webie.dll
O9 - Extra 'Tools' menuitem: Preložiť &stránku - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\PROGRA~1\PCTRAN~1\webie.dll
O9 - Extra button: @C:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @C:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: *.dell.com
O16 - DPF: {6A060448-60F9-11D5-A6CD-0002B31F7455} (ExentInf Class) -
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_b8f542503f95f21b\aestsrv.exe
O23 - Service: Ask Update Service (APNMCP) - APN LLC. - C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
O23 - Service: Dell ControlPoint Button Service (buttonsvc32) - Dell Inc. - C:\Program Files\Dell\Dell ControlPoint\DCPButtonSvc.exe
O23 - Service: Credential Vault Host Control Service - Unknown owner - C:\Program Files\Broadcom Corporation\Broadcom USH Host Components\CV\bin\HostControlService.exe (file missing)
O23 - Service: Credential Vault Host Storage - Unknown owner - C:\Program Files\Broadcom Corporation\Broadcom USH Host Components\CV\bin\HostStorageService.exe (file missing)
O23 - Service: Dell ControlPoint System Manager (dcpsysmgrsvc) - Dell Inc. - C:\Program Files\Dell\Dell ControlPoint\System Manager\DCPSysMgrSvc.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: HP DS Service - Unknown owner - C:\Program Files\HP\HPBDSService\HPBDSService.exe (file missing)
O23 - Service: HP LaserJet Service - Unknown owner - C:\Program Files\HP\HPLaserJetService\HPLaserJetService.exe (file missing)
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: KMService - Unknown owner - C:\Windows\system32\srvany.exe
O23 - Service: LMIGuardianSvc - LogMeIn, Inc. - C:\Program Files\LogMeIn Hamachi\LMIGuardianSvc.exe
O23 - Service: MSSQL$WSN - Unknown owner - C:\WSN\MSDE_PROG\MSSQL$WSN\Binn\sqlservr.exe (file missing)
O23 - Service: MSSQLServerADHelper - Unknown owner - C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqladhlp.exe (file missing)
O23 - Service: Norton PC Checkup Application Launcher - Unknown owner - C:\Program Files\Norton PC Checkup 3.0\SymcPCCULaunchSvc.exe (file missing)
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - C:\Program Files\WinPcap\rpcapd.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: SQLAgent$WSN - Unknown owner - C:\WSN\MSDE_PROG\MSSQL$WSN\Binn\sqlagent.EXE (file missing)
O23 - Service: Audio Service (STacSV) - IDT, Inc. - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_b8f542503f95f21b\STacSV.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: vseamps - Authentium, Inc - C:\Program Files\Common Files\Authentium\AntiVirus5\vseamps.exe
O23 - Service: vsedsps - Authentium, Inc - C:\Program Files\Common Files\Authentium\AntiVirus5\vsedsps.exe
O23 - Service: vseqrts - Authentium, Inc - C:\Program Files\Common Files\Authentium\AntiVirus5\vseqrts.exe
O23 - Service: WinTab Service (WinTabService) - Tablet Driver - C:\Windows\System32\Drivers\WTSRV.EXE

--
End of file - 18723 bytes
Naposledy upravil(a) Ltb dne 09 říj 2015 12:59, celkem upraveno 1 x.
Důvod: Přesun do správné sekce
Nahoru
Reklama
Top
Uživatelský avatar
Orcus
člen Security týmu
Elite Level 10.5
Elite Level 10.5
Příspěvky: 10645
Registrován: duben 10
Bydliště: Okolo rostou 3 růže =o)
Pohlaví: Muž
Stav:
Offline

Re: Kontrola logu HijackThis

Příspěvekod Orcus » 09 říj 2015 11:56

Založil jsi to ve špatné sekci.;) Příspěvek jsem nahlásil a moderátoři jej přesunou.

Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected. Poté klikni na Main (hlavní stránku ) a klikni na Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranění historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit dočasné soubory Windows, vysypat koš atd.

- Pokud používáš jen Google Chrome , tak ATF nemusíš použít.

===================================================

Stáhni si TFC
Otevři soubor a zavři všechny ostatní okna, Klikni na Start k zahájení procesu. Program by neměl trvat dlouho.
Poté by se měl PC restartovat, pokud ne , proveď sám.

===================================================

Stáhni AdwCleaner (by Xplode)

Ulož si ho na svojí plochu
Ukonči všechny programy , okna a prohlížeče
Spusť program poklepáním a klikni na „Prohledat-Scan“
Po skenu se objeví log ( jinak je uložen systémovem disku jako AdwCleaner[R?].txt), jeho obsah sem celý vlož.

===================================================

Stáhni si Malwarebytes' Anti-Malware
- Při instalaci odeber zatržítko u „Povolit bezplatnou zkušební verzi Malwarebytes' Anti-Malware Premium“
- Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:

Aktualizace Malwarebytes' Anti-Malware
Spustit aplikaci Malwarebytes' Anti-Malware, pokud jo tak klikni na tlačítko konec

- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a klikni na Skenovat nyní a
- po proběhnutí programu se ti objeví hláška vpravo dole tak klikni na Kopírovat do schránky a a vlož sem celý log.

- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).

Pokud budou problémy , spusť v nouz. režimu.
Láska hřeje, ale uhlí je uhlí. :fire:


Log z HJT vkládejte do HJT sekce. Je-li moc dlouhý, rozděl jej do více zpráv.

Pár rad k bezpečnosti PC.

Po dobu mé nepřítomnosti mě zastupuje memphisto, jaro3 a Diallix

Pokud budete spokojeni , můžete podpořit naše fórum.
Nahoru
jakub666
nováček
Příspěvky: 4
Registrován: říjen 15
Pohlaví: Muž
Stav:
Offline

Re: Kontrola logu HijackThis

Příspěvekod jakub666 » 21 říj 2015 11:42

Ďakujem za radu, začal som TFC nakoľko používam chrome, po reštarte som spustil Adwcleaner prikladám log :

# AdwCleaner v5.014 - Logfile created 21/10/2015 at 11:33:17
# Updated 18/10/2015 by Xplode
# Database : 2015-10-18.5 [Server]
# Operating system : Windows 7 Ultimate Service Pack 1 (x86)
# Username : Ing.Marián Faško - DELL_LATITUDE
# Running from : C:\Users\Ing.Marián Faško\Desktop\AdwCleaner.exe
# Option : Cleaning
# Support : http://toolslib.net/forum

***** [ Services ] *****

[-] Service Deleted : APNMCP

***** [ Folders ] *****

[#] Folder Deleted : C:\Program Files\AskPartnerNetwork
[-] Folder Deleted : C:\Program Files\Free Ride Games
[-] Folder Deleted : C:\Program Files\Common Files\Software Update Utility
[-] Folder Deleted : C:\ProgramData\apn
[-] Folder Deleted : C:\ProgramData\AskPartnerNetwork
[-] Folder Deleted : C:\ProgramData\blekko toolbars
[-] Folder Deleted : C:\ProgramData\Search Protection
[-] Folder Deleted : C:\ProgramData\Driver Mender
[-] Folder Deleted : C:\Users\Ing.Marián Faško\AppData\Local\AskPartnerNetwork
[-] Folder Deleted : C:\Users\Ing.Marián Faško\AppData\Local\Conduit
[-] Folder Deleted : C:\Users\Ing.Marián Faško\AppData\Local\VNT
[-] Folder Deleted : C:\Users\Ing.Marián Faško\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\cmaiofennmphjldldcpphcechfnnohja
[-] Folder Deleted : C:\Users\Ing.Marián Faško\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\aaaalipaokhkccgmgkdglfinfnfhflko
[-] Folder Deleted : C:\Users\Ing.Marián Faško\AppData\Local\Google\Chrome\User Data\Default\Extensions\gjndloejlcbpkholmagjbddfkjmmploh
[-] Folder Deleted : C:\Users\Ing.Marián Faško\AppData\LocalLow\adawaretb
[-] Folder Deleted : C:\Users\Ing.Marián Faško\AppData\LocalLow\Conduit
[-] Folder Deleted : C:\Users\Ing.Marián Faško\AppData\LocalLow\HPAppData
[-] Folder Deleted : C:\Users\Ing.Marián Faško\AppData\LocalLow\PriceGong
[-] Folder Deleted : C:\Users\Ing.Marián Faško\AppData\Roaming\Complitly
[-] Folder Deleted : C:\Users\Ing.Marián Faško\AppData\Roaming\pccustubinstaller
[-] Folder Deleted : C:\Users\Ing.Marián Faško\AppData\Roaming\pdfforge
[-] Folder Deleted : C:\Users\Ing.Marián Faško\AppData\Roaming\Uniblue
[-] Folder Deleted : C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\bd4yyduh.default\Extensions\{33E0DAA6-3AF3-D8B5-6752-10E949C61516}
[!] Folder Not Deleted : C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\bd4yyduh.default\Extensions\{33E0DAA6-3AF3-D8B5-6752-10E949C61516}
[-] Folder Deleted : C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\adawaretb
[-] Folder Deleted : C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\Conduit
[-] Folder Deleted : C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\ConduitCommon
[-] Folder Deleted : C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\WinampToolbarData
[-] Folder Deleted : C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\Extensions\{0B38152B-1B20-484D-A11F-5E04A9B0661F}
[-] Folder Deleted : C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\Extensions\{33E0DAA6-3AF3-D8B5-6752-10E949C61516}
[!] Folder Not Deleted : C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\Extensions\{33E0DAA6-3AF3-D8B5-6752-10E949C61516}
[-] Folder Deleted : C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\Extensions\{87934c42-161d-45bc-8cef-ef18abe2a30c}
[-] Folder Deleted : C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\Extensions\{1392b8d2-5c05-419f-a8f6-b9f15a596612}
[-] Folder Deleted : C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\Extensions\{1280606b-2510-4fe0-97ef-9b5a22eafe30}
[-] Folder Deleted : C:\Users\ING~1.MAR\AppData\Local\Temp\apn

***** [ Files ] *****

[-] File Deleted : C:\Users\Ing.Marián Faško\AppData\Local\Comodo\Dragon\User Data\Default\Local Storage\chrome-extension_cmaiofennmphjldldcpphcechfnnohja_0.localstorage
[-] File Deleted : C:\Users\Ing.Marián Faško\AppData\Local\Comodo\Dragon\User Data\Default\Local Storage\chrome-extension_cmaiofennmphjldldcpphcechfnnohja_0.localstorage-journal
[-] File Deleted : C:\Users\Ing.Marián Faško\AppData\Local\Comodo\Dragon\User Data\Default\Local Storage\chrome-extension_aaaalipaokhkccgmgkdglfinfnfhflko_0.localstorage
[-] File Deleted : C:\Users\Ing.Marián Faško\AppData\Local\Comodo\Dragon\User Data\Default\Local Storage\chrome-extension_aaaalipaokhkccgmgkdglfinfnfhflko_0.localstorage-journal
[-] File Deleted : C:\Users\Ing.Marián Faško\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_gjndloejlcbpkholmagjbddfkjmmploh_0.localstorage
[-] File Deleted : C:\Users\Ing.Marián Faško\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_gjndloejlcbpkholmagjbddfkjmmploh_0.localstorage-journal
[-] File Deleted : C:\Users\Ing.Marián Faško\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_wlogin.icq.com_0.localstorage
[-] File Deleted : C:\Users\Ing.Marián Faško\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_wlogin.icq.com_0.localstorage-journal
[-] File Deleted : C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\searchplugins\aol-web-search.xml
[-] File Deleted : C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\searchplugins\Askcom.xml
[-] File Deleted : C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\searchplugins\Conduit.xml
[-] File Deleted : C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\searchplugins\winamp-search.xml

***** [ DLLs ] *****


***** [ Shortcuts ] *****


***** [ Scheduled tasks ] *****

[-] Task Deleted : Driver Mender-RTMRules
[-] Task Deleted : Driver Mender-RTMScan
[-] Task Deleted : Driver Mender-RTMUpdater

***** [ Registry ] *****

[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\DOMStorage\conduit.com
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\Complitly.DLL
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\dnu.EXE
[-] Key Deleted : HKLM\SOFTWARE\Classes\dnUpdate
[-] Key Deleted : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUIBrowser
[-] Key Deleted : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUIBrowser.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUpdController
[-] Key Deleted : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUpdController.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\SuggestMeYes.SuggestMeYesBHO
[-] Key Deleted : HKLM\SOFTWARE\Classes\SuggestMeYes.SuggestMeYesBHO.1
[-] Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [ApnTbMon]
[-] Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [SearchProtection]
[-] Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Driver Mender]
[-] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT1060933
[-] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT1750559
[-] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT2953735
[-] Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\dlfienamagdnkekbbbocojppncdambda
[-] Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\lfffjahnfbocnaooecgijfnbpcfekoik
[-] Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\nkjddnjnldjjnbjahcinkhkchijbjcmn
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{442F13BC-2031-42D5-9520-437F65271153}
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{6C259840-5BA8-46E6-8ED1-EF3BA47D8BA1}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{44CBC005-6243-4502-8A02-3A096A282664}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6C97A91E-4524-4019-86AF-2AA2D567BF5C}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{7B089B94-D1DC-4C6B-87E1-8156E22C1D96}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{80703783-E415-4EE3-AB60-D36981C5A6F1}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D8278076-BC68-4484-9233-6E7F1628B56C}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E1164984-B567-47BD-A7FF-240C2594404A}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E15A9BFD-D16D-496D-8222-44CADF316E70}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F297534D-7B06-459D-BC19-2DD8EF69297B}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{363F46BE-27B4-4C8D-99E7-B1E049B84376}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3CCC052E-BDEE-408A-BEA7-90914EF2964B}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{61F47056-E400-43D3-AF1E-AB7DFFD4C4AD}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A753A1EC-973E-4718-AF8E-A3F554D45C44}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E2B98EEA-EE55-4E9B-A8C1-6E5288DF785A}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{02AFA80F-4BEE-41FD-8572-214B58A9EF90}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{660E6F4F-840D-436D-B668-433D9591BAC5}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{80703783-E415-4EE3-AB60-D36981C5A6F1}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C9AE652B-8C99-4AC2-B556-8B501182874E}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E7435878-65B9-44D1-A443-81754E5DFC90}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{884189CF-7C10-41E8-A014-F7B2BE40AADB}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{BD125908-5F10-409F-9C01-F2207CA18887}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{01BCB858-2F62-4F06-A8F4-48F927C15333}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{92380354-381A-471F-BE2E-DD9ACD9777EA}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{9945959C-AAD8-4312-8B57-2DE11927E770}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{EEA63863-87BC-4DCA-A5B5-EB97E3B04806}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6C97A91E-4524-4019-86AF-2AA2D567BF5C}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FED66DC5-1B74-4A04-8F5C-15C5ACE2B9A5}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{6C97A91E-4524-4019-86AF-2AA2D567BF5C}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{6C97A91E-4524-4019-86AF-2AA2D567BF5C}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7B089B94-D1DC-4C6B-87E1-8156E22C1D96}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6978F29A-3493-40B2-8CDC-9C13A02F85A4}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D7949A66-D936-4028-9552-14F7DC50F38D}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{87934C42-161D-45BC-8CEF-EF18ABE2A30C}
[-] Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{6C97A91E-4524-4019-86AF-2AA2D567BF5C}]
[-] Key Deleted : HKU\.DEFAULT\Software\AskPartnerNetwork
[-] Key Deleted : HKCU\Software\APN PIP
[-] Key Deleted : HKCU\Software\Ask&Record
[-] Key Deleted : HKCU\Software\AskPartnerNetwork
[-] Key Deleted : HKCU\Software\Complitly
[-] Key Deleted : HKCU\Software\Conduit
[-] Key Deleted : HKCU\Software\YahooPartnerToolbar
[-] Key Deleted : HKCU\Software\AppDataLow\Toolbar
[-] Key Deleted : HKCU\Software\AppDataLow\Software\adawarebp
[-] Key Deleted : HKCU\Software\AppDataLow\Software\adawaretb
[-] Key Deleted : HKCU\Software\AppDataLow\Software\Conduit
[-] Key Deleted : HKCU\Software\AppDataLow\Software\ConduitSearchScopes
[-] Key Deleted : HKCU\Software\AppDataLow\Software\PriceGong
[-] Key Deleted : HKLM\SOFTWARE\adawaretb
[-] Key Deleted : HKLM\SOFTWARE\AskPartnerNetwork
[-] Key Deleted : HKLM\SOFTWARE\Conduit
[-] Key Deleted : HKLM\SOFTWARE\PIP
[-] Key Deleted : HKLM\SOFTWARE\SimplyGen
[-] Key Deleted : HKLM\SOFTWARE\Toolbar Cleaner
[-] Key Deleted : HKLM\SOFTWARE\Uniblue
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{4FFBB818-B13C-11E0-931D-B2664824019B}_is1
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SoftwareUpdUtility
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Toolbar Cleaner
[!] Key Not Deleted : HKU\S-1-5-21-899656359-1895322170-4069286326-1000\Software\AppDataLow\Toolbar
[!] Key Not Deleted : HKU\S-1-5-21-899656359-1895322170-4069286326-1000\Software\AppDataLow\Software\adawarebp
[!] Key Not Deleted : HKU\S-1-5-21-899656359-1895322170-4069286326-1000\Software\AppDataLow\Software\adawaretb
[!] Key Not Deleted : HKU\S-1-5-21-899656359-1895322170-4069286326-1000\Software\AppDataLow\Software\Conduit
[!] Key Not Deleted : HKU\S-1-5-21-899656359-1895322170-4069286326-1000\Software\AppDataLow\Software\ConduitSearchScopes
[!] Key Not Deleted : HKU\S-1-5-21-899656359-1895322170-4069286326-1000\Software\AppDataLow\Software\PriceGong
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8036C72171EF4ba46856BF57969F6A36
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\89BB7852687BDC34B9A81E01C7FF9173
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8CBC85D72B148084ABE8C2F072F781F4
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8CC5A38A64D6098468BC8395BA0EFF03
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8DF9A1AC557F56c49B56F6B83E293C15
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A97C590397DCC454AA8923563BAB10E4
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B08932C78B697C244BE7BA3E6FF09B62
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CFA51B44D54927c4E9B7BC1D3FD1E49F
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D14A7F65792054F418578C78367D13F7
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DFE9F0BD163D827438CB6AD6B100EC48
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F739A19A8327dc64C9A8B641A9E89646
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\158D6D9E3FE81fa428925F22ACB3A965
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\15E6C514FEFC09f45BAFAAE1D7546ED4
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1DB42320A8525634AA089F0BEC86473B
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\22468B0D6050b2e46B9C4B67A8F59577
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2251BF05A2F606d43BB064BD63CBD87E
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3255D95681398614190EDF0A4F3F77DB
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3CDF313E9B28c944FBC7579CF4949414
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\71E54748EDD3dc1468548785DC856EDA
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\754590DD06DE8d249B526503432F99D4
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\7AB5857A57A0687786597A857BFFFFFF
[-] Data Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]
[-] Data Restored : HKU\S-1-5-21-899656359-1895322170-4069286326-1000\Software\Microsoft\Internet Explorer\Main [Start Page]
[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{054057C4-C915-4D2A-B33E-1C39D0E0BA7B}
[-] Data Restored : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [DefaultScope]
[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}
[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{3BD44F0E-0596-4008-AEE0-45D47E3A8F0E}
[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C}
[!] Key Not Deleted : HKU\S-1-5-21-899656359-1895322170-4069286326-1000\Software\Microsoft\Internet Explorer\SearchScopes\{054057C4-C915-4D2A-B33E-1C39D0E0BA7B}
[-] Data Restored : HKU\S-1-5-21-899656359-1895322170-4069286326-1000\Software\Microsoft\Internet Explorer\SearchScopes [DefaultScope]
[!] Key Not Deleted : HKU\S-1-5-21-899656359-1895322170-4069286326-1000\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}
[!] Key Not Deleted : HKU\S-1-5-21-899656359-1895322170-4069286326-1000\Software\Microsoft\Internet Explorer\SearchScopes\{3BD44F0E-0596-4008-AEE0-45D47E3A8F0E}
[!] Key Not Deleted : HKU\S-1-5-21-899656359-1895322170-4069286326-1000\Software\Microsoft\Internet Explorer\SearchScopes\{EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C}

***** [ Web browsers ] *****

[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933..clientLogIsEnabled", false);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.AppTrackingLastCheckTime", "Wed Feb 29 2012 23:24:28 GMT+0100");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.BrowserCompStateIsOpen_129681785283868963", true);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.BrowserCompStateIsOpen_129686665230467549", true);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.CTID", "CT1060933");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.CurrentServerDate", "1-3-2012");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.DSInstall", true);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.DialogsAlignMode", "LTR");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.DialogsGetterLastCheckTime", "Wed Feb 29 2012 23:24:19 GMT+0100");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.DownloadReferralCookieData", "");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.FirstServerDate", "1-3-2012");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.FirstTime", true);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.FirstTimeFF3", true);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.FixPageNotFoundErrors", true);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.GroupingServerCheckInterval", 1440);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.HPInstall", true);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.HasUserGlobalKeys", true);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.HomePageProtectorEnabled", true);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.HomepageBeforeUnload", "hxxp://search.conduit.com/?ctid=CT1060933&SearchSource=13");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.Initialize", true);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.InitializeCommonPrefs", true);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.InstallationAndCookieDataSentCount", 1);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.InstallationId", "ConduitNSISIntegration");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.InstallationType", "ConduitXPEIntegration");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.InstalledDate", "Wed Feb 29 2012 23:24:17 GMT+0100");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.InvalidateCache", false);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.IsAlertDBUpdated", true);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.IsGrouping", false);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.IsInitSetupIni", true);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.IsMulticommunity", false);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.IsOpenThankYouPage", false);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.IsOpenUninstallPage", true);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.IsProtectorsInit", true);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.LanguagePackLastCheckTime", "Wed Feb 29 2012 23:24:17 GMT+0100");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.LanguagePackReloadIntervalMM", 1440);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.LastLogin_3.10.0.1", "Wed Feb 29 2012 23:24:18 GMT+0100");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.LatestVersion", "3.10.0.1");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.Locale", "en-us");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.MCDetectTooltipHeight", "83");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.MCDetectTooltipWidth", "295");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.MyStuffEnabledAtInstallation", true);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.OriginalFirstVersion", "3.10.0.1");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.RadioIsPodcast", false);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.RadioLastCheckTime", "Wed Feb 29 2012 23:24:18 GMT+0100");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.RadioLastUpdateIPServer", "0");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.RadioLastUpdateServer", "129326918102570000");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.RadioMediaID", "21504191");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.RadioMediaType", "Media Player");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.RadioMenuSelectedID", "EBRadioMenu_CT106093321504191");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.RadioShrinkedFromSetup", false);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.RadioStationName", "KFOG");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.RadioStationURL", "hxxp://live.cumulusstreaming.com/KFOG-FM");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.SavedHomepage", "hxxp://search.conduit.com/?ctid=CT2953735&SearchSource=13");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.SearchCaption", "Freecorder Customized Web Search");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.SearchEngineBeforeUnload", "Freecorder Customized Web Search");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.SearchFromAddressBarIsInit", true);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT1060933&SearchSource=2&q=");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.SearchInNewTabEnabled", true);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.SearchInNewTabIntervalMM", 1440);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.SearchInNewTabLastCheckTime", "Wed Feb 29 2012 23:24:18 GMT+0100");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.SearchProtectorEnabled", true);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.SearchProtectorToolbarDisabled", false);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.SendProtectorDataViaLogin", true);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.ServiceMapLastCheckTime", "Wed Feb 29 2012 23:24:16 GMT+0100");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.SettingsLastCheckTime", "Wed Feb 29 2012 23:24:16 GMT+0100");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.SettingsLastUpdate", "1328097762");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.TBHomePageUrl", "hxxp://search.conduit.com/?ctid=CT1060933&SearchSource=13");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.ThirdPartyComponentsInterval", 504);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.ThirdPartyComponentsLastCheck", "Wed Feb 29 2012 23:24:16 GMT+0100");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.ThirdPartyComponentsLastUpdate", "1312887586");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.ToolbarShrinkedFromSetup", false);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.TrusteLinkUrl", "hxxp://trust.conduit.com/CT1060933");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,client.conduit-storage.com,OurToolbar.com,CommunityToolbars.com,ForumToolbar.com,MyBlogToolbar.com,MyCity[...]
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.UserID", "UN25362539141616479");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.ValidationData_Toolbar", 2);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.alertChannelId", "15651");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.appApproved.129272674122038321", true);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.backendstorage.autocompletepro_enable_auto", "31");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.backendstorage.cbfirsttime", "5765642046656220323920323031322032333A32343A323520474D542B30313030");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.backendstorage.shoppingapp.gk.exipres", "4D6F6E204D617220303520323031322032333A32343A313920474D542B30313030");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.backendstorage.shoppingapp.gk.geolocation", "736C6F76616B6961");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.backendstorage.url_history0001", "68747470733A2F2F6163636F756E74732E676F6F676C652E636F6D2F536572766963654C6F67696E3F75696C656C3D3326736572766963653D796F757475626526706173736976653[...]
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.conduit.com;apps.conduit.com;services.apps.conduit.com\",\"AppsDetectionUrlPattern\":\"hxxp://appdown[...]
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.globalFirstTimeInfoLastCheckTime", "Wed Feb 29 2012 23:24:17 GMT+0100");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.homepageProtectorEnableByLogin", true);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.initDone", true);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.isAppTrackingManagerOn", true);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.isFirstRadioInstallation", false);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.myStuffEnabled", true);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.myStuffPublihserMinWidth", 400);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.myStuffServiceIntervalMM", 1440);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUFF_LUT");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.navigateToUrlOnSearch", false);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.revertSettingsEnabled", true);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.searchProtectorDialogDelayInSec", 10);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.searchProtectorEnableByLogin", true);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.testingCtid", "");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.toolbarAppMetaDataLastCheckTime", "Wed Feb 29 2012 23:24:16 GMT+0100");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.toolbarContextMenuLastCheckTime", "Wed Feb 29 2012 23:24:18 GMT+0100");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1060933.usagesFlag", 2);
Nahoru
jakub666
nováček
Příspěvky: 4
Registrován: říjen 15
Pohlaví: Muž
Stav:
Offline

Re: Kontrola logu HijackThis

Příspěvekod jakub666 » 21 říj 2015 11:43

[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1750559.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1750559.CTID", "CT1750559");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1750559.CurrentServerDate", "20-10-2010");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1750559.DialogsAlignMode", "LTR");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1750559.DownloadReferralCookieData", "");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1750559.FirstServerDate", "6-5-2010");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1750559.FirstTime", true);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1750559.FirstTimeFF3", true);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1750559.FirstTimeSettingsDone", true);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1750559.FixPageNotFoundErrors", true);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1750559.GroupingServerCheckInterval", 1440);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1750559.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1750559.Initialize", true);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1750559.InitializeCommonPrefs", true);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1750559.InstallationAndCookieDataSentCount", 1);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1750559.InstalledDate", "Sun Jan 24 2010 17:39:41 GMT+0100");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1750559.InvalidateCache", false);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1750559.IsGrouping", false);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1750559.IsMulticommunity", false);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1750559.IsOpenThankYouPage", true);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1750559.IsOpenUninstallPage", true);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1750559.LanguagePackLastCheckTime", "Wed Oct 20 2010 21:08:12 GMT+0200");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1750559.LanguagePackReloadIntervalMM", 1440);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1750559.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1750559.LastLogin_2.1.0.19", "Tue Jan 26 2010 18:15:33 GMT+0100");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1750559.LastLogin_2.5.6.0", "Tue May 18 2010 21:17:52 GMT+0200");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1750559.LastLogin_2.7.2.0", "Wed Oct 20 2010 21:08:03 GMT+0200");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1750559.LatestVersion", "2.7.2.0");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1750559.Locale", "en-us");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1750559.LoginCache", 4);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1750559.MCDetectTooltipHeight", "83");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1750559.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1750559.MCDetectTooltipWidth", "295");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1750559.RadioIsPodcast", false);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1750559.RadioLastCheckTime", "Wed Oct 20 2010 21:08:03 GMT+0200");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1750559.RadioLastUpdateIPServer", "4");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1750559.RadioLastUpdateServer", "128929877726170000");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1750559.RadioMediaID", "11237206");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1750559.RadioMediaType", "Media Player");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1750559.RadioMenuSelectedID", "EBRadioMenu_CT175055911237206");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1750559.RadioShrinked", "expanded");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1750559.RadioStationName", "1.FM%20Dance");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1750559.RadioStationURL", "hxxp://dance.1.fm/energydance128k?MSWMExt=.asf");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1750559.RadioVolume", "90");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1750559.SHRINK_TOOLBAR", 1);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1750559.SearchEngine", "Searchhxxp://search.conduit.com/Results.aspx?q=UCM_SEARCH_TERM&ctid=CT1750559&octid=EB_ORIGINAL_CTID&SearchSource=1");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1750559.SearchFromAddressBarIsInit", true);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1750559.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT1750559&SearchSource=2&q=");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1750559.SearchInNewTabEnabled", true);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1750559.SearchInNewTabIntervalMM", 1440);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1750559.SearchInNewTabLastCheckTime", "Wed Oct 20 2010 21:08:03 GMT+0200");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1750559.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1750559.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageService.asmx/UsersRequests?ctid=EB_TOOLBAR_ID");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1750559.SettingsCheckIntervalMin", 120);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1750559.SettingsLastCheckTime", "Wed Oct 20 2010 21:08:02 GMT+0200");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1750559.SettingsLastUpdate", "1285580322");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1750559.ThirdPartyComponentsInterval", 504);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1750559.ThirdPartyComponentsLastCheck", "Wed Oct 20 2010 21:08:02 GMT+0200");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1750559.ThirdPartyComponentsLastUpdate", "1269531679");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1750559.TrusteLinkUrl", "hxxp://www.truste.org/pvr.php?page=validate&softwareProgramId=101&sealid=112");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1750559.UserID", "UN26683472322614965");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1750559.ValidationData_Search", 0);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1750559.ValidationData_Toolbar", 2);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1750559.WeatherNetwork", "");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1750559.WeatherPollDate", "Wed Oct 20 2010 21:08:03 GMT+0200");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1750559.WeatherUnit", "C");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1750559.alertChannelId", "31130");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1750559.clientLogIsEnabled", true);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1750559.clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1750559.myStuffEnabled", true);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1750559.myStuffPublihserMinWidth", 400);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1750559.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1750559.myStuffServiceIntervalMM", 1440);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1750559.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUFF_LUT");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT1750559.uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735..clientLogIsEnabled", true);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735.AppTrackingLastCheckTime", "Wed Feb 29 2012 23:24:23 GMT+0100");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735.BrowserCompStateIsOpen_129453716422169264", true);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735.CT2953735", "CT2953735");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735.CurrentServerDate", "1-3-2012");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735.DialogsAlignMode", "LTR");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735.DialogsGetterLastCheckTime", "Wed Feb 29 2012 23:24:16 GMT+0100");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735.DownloadReferralCookieData", "");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735.EMailNotifierPollDate", "Thu Mar 01 2012 00:04:34 GMT+0100");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735.FirstServerDate", "19-7-2011");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735.FirstTime", true);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735.FirstTimeFF3", true);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735.FixPageNotFoundErrors", true);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735.GroupingServerCheckInterval", 1440);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735.HasUserGlobalKeys", true);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735.Initialize", true);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735.InitializeCommonPrefs", true);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735.InstallationAndCookieDataSentCount", 3);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735.InstallationType", "UnknownIntegration");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735.InstalledDate", "Sat Oct 01 2011 17:24:35 GMT+0200");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735.InvalidateCache", false);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735.IsAlertDBUpdated", true);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735.IsGrouping", false);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735.IsInitSetupIni", true);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735.IsMulticommunity", false);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735.IsOpenThankYouPage", true);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735.IsOpenUninstallPage", true);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735.LanguagePackLastCheckTime", "Wed Feb 29 2012 23:24:13 GMT+0100");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735.LanguagePackReloadIntervalMM", 1440);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735.LastLogin_3.5.0.12", "Wed Feb 29 2012 23:24:15 GMT+0100");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735.LatestVersion", "3.10.0.1");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735.Locale", "en");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735.MCDetectTooltipHeight", "83");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735.MCDetectTooltipWidth", "295");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735.MyStuffEnabledAtInstallation", true);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735.OriginalFirstVersion", "3.5.0.12");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735.RadioIsPodcast", false);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735.RadioLastCheckTime", "Wed Feb 29 2012 23:24:16 GMT+0100");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735.RadioLastUpdateIPServer", "3");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735.RadioLastUpdateServer", "0");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735.RadioMediaID", "9962");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735.RadioMediaType", "Media Player");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735.RadioMenuSelectedID", "EBRadioMenu_CT29537359962");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735.RadioShrinkedFromSetup", false);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735.RadioStationName", "California%20Rock");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735.RadioStationURL", "hxxp://feedlive.net/california.asx");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735.SavedHomepage", "hxxp://eu.ask.com?o=15425&l=dis");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735.SearchFromAddressBarIsInit", true);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2953735&SearchSource=2&q=");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735.SearchInNewTabEnabled", true);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735.SearchInNewTabIntervalMM", 1440);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735.SearchInNewTabLastCheckTime", "Wed Feb 29 2012 23:24:13 GMT+0100");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735.SearchInNewTabUsageUrl", "hxxp://usage.hosting.toolbar.conduit-services.com/usage.ashx?ctid=EB_TOOLBAR_ID");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735.ServiceMapLastCheckTime", "Wed Feb 29 2012 23:24:12 GMT+0100");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735.SettingsLastCheckTime", "Wed Feb 29 2012 23:24:12 GMT+0100");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735.SettingsLastUpdate", "1330342873");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735.ThirdPartyComponentsInterval", 504);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735.ThirdPartyComponentsLastCheck", "Wed Feb 29 2012 23:24:11 GMT+0100");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735.ThirdPartyComponentsLastUpdate", "1312887586");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735.ToolbarShrinkedFromSetup", false);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2953735");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,client.conduit-storage.com,OurToolbar.com,CommunityToolbars.com,ForumToolbar.com,MyBlogToolbar.com,MyCity[...]
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735.UserID", "UN15494023339642593");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735.ValidationData_Toolbar", 0);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735.WeatherNetwork", "");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735.WeatherPollDate", "Wed Feb 29 2012 23:54:17 GMT+0100");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735.WeatherUnit", "C");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735.alertChannelId", "1345594");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735.backendstorage. appgroupon_dailyactivity", "31333131303830333336363931");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735.backendstorage. appgroupon_lifetimesent", "54525545");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735.components.1000082", true);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.conduit.com;apps.conduit.com;services.apps.conduit.com\",\"AppsDetectionUrlPattern\":\"hxxp://appdown[...]
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735.globalFirstTimeInfoLastCheckTime", "Wed Feb 29 2012 23:24:16 GMT+0100");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735.homepageProtectorEnableByLogin", true);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735.initDone", true);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735.isAppTrackingManagerOn", true);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735.isFirstRadioInstallation", false);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735.myStuffEnabled", true);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735.myStuffPublihserMinWidth", 400);
Nahoru
jakub666
nováček
Příspěvky: 4
Registrován: říjen 15
Pohlaví: Muž
Stav:
Offline

Re: Kontrola logu HijackThis

Příspěvekod jakub666 » 21 říj 2015 11:44

[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735.myStuffServiceIntervalMM", 1440);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUFF_LUT");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735.oldAppsList", "129431530826194137,129431530826194138,111,129431530826350391,129578061591323042,1000034,1000080,129453716422169264,129453716421387971,1000234,1000082,1000,1001,1002[...]
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735.searchProtectorDialogDelayInSec", 10);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735.searchProtectorEnableByLogin", true);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735.testingCtid", "");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735.toolbarAppMetaDataLastCheckTime", "Wed Feb 29 2012 23:24:15 GMT+0100");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735.toolbarContextMenuLastCheckTime", "Wed Feb 29 2012 23:24:15 GMT+0100");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CT2953735.usagesFlag", 1);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.ConduitHomepagesList", "hxxp://search.conduit.com/?ctid=CT2953735&SearchSource=13,hxxp://search.conduit.com/?ctid=CT1060933&SearchSource=13");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.ConduitSearchList", "CyberDefender-TB Customized Web Search,Freecorder Customized Web Search");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit. ... /CT1060933", "\"99ff13dc24ed8ed7cabefbd76cdbaeeb1\"");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-ser ... =CT1060933", "\"1324192924\"");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-ser ... =CT2953735", "\"1300303514\"");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-serv ... &locale=en", "wVmmvqqOMqrv5xct1cJIHg==");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-serv ... cale=en-us", "wVmmvqqOMqrv5xct1cJIHg==");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-serv ... &locale=en", "0uSPYx+Kl2jpu8sJZMeHjw==");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-serv ... cale=en-us", "0uSPYx+Kl2jpu8sJZMeHjw==");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-serv ... &locale=en", "Dclc8oo4TTv7+mAkSlUSWg==");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-serv ... cale=en-us", "Dclc8oo4TTv7+mAkSlUSWg==");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-serv ... &locale=en", "K4Vqu91uAzWURlxJRdXJOg==");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-serv ... cale=en-us", "K4Vqu91uAzWURlxJRdXJOg==");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-s ... r=3.10.0.1", "\"801a319dd78ccc1:0\"");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-s ... r=3.5.0.12", "\"801a319dd78ccc1:0\"");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/ ... =CT1060933", "\"7097bb27983d23fb65dfbd9398fad22c\"");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/ ... =CT2953735", "\"7097bb27983d23fb65dfbd9398fad22c\"");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.conduit-service ... =CT2953735", "\"2824a7587c4b38fa901362b655e89b651\"");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit. ... /CT2953735", "\"1315298307\"");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/R ... r_dead.gif", "\"0678fe477ac91:0\"");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/R ... nimize.gif", "\"046c7ab477ac91:0\"");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/R ... r/play.gif", "\"0484de117c4c91:0\"");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/R ... r/stop.gif", "\"0e7a152347ac91:0\"");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/R ... er/vol.gif", "\"087c778347ac91:0\"");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-serv ... ?locale=en", "\"cde759bd30c070995eab32eddc00c079\"");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-serv ... cale=en-us", "\"7224033f77526ced5394365c60157a39\"");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.LatestLibsPath", "file:///C:\\Users\\Ing.Mari?n Faako\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\qc1luq0y.default\\conduitCommon\\modules\\3.10.0.1");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.LatestToolbarVersionInstalled", "3.10.0.1");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.MiniIPageGadgetSize.hxxp://freecorder.com/fc6/gadget/video.html", "833x247");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "hxxp://www.google.com/search?sourceid=navclient&hl=sk&q=");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.ToolbarsList", "CT1750559,CT2953735,CT1060933");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.ToolbarsList2", "CT1750559,CT2953735,CT1060933");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.ToolbarsList4", "CT2953735,CT1060933");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.alert.alertInfoInterval", 60);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.alert.alertInfoLastCheckTime", "Tue Jan 26 2010 23:15:32 GMT+0100");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.alert.clientsServerUrl", "hxxp://alert.client.conduit.com");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.alert.locale", "en");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.alert.loginIntervalMin", 1440);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.alert.loginLastCheckTime", "Tue Jan 26 2010 19:57:05 GMT+0100");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.alert.loginLastUpdateTime", "1234796400");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.alert.messageShowTimeSec", 20);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.alert.servicesServerUrl", "hxxp://alert.services.conduit.com");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.alert.showTrayIcon", false);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.alert.userId", "{f19587fc-158b-4001-8992-51d36f69cb21}");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.facebook.settingsLastCheckTime", "Wed Oct 20 2010 21:08:10 GMT+0200");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.globalUserId", "2ce34039-a182-483c-b1c3-25ce3477c6f1");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.keywordURLSelectedCTID", "CT1060933");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.originalHomepage", "hxxp://search.conduit.com/?ctid=CT2953735&SearchSource=13");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("CommunityToolbar.originalSearchEngine", "CyberDefender-TB Customized Web Search");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("aol_toolbar.surf.date", "12");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("aol_toolbar.surf.lastDate", "29");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("aol_toolbar.surf.lastMonth", "1");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("aol_toolbar.surf.lastYear", "2012");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("aol_toolbar.surf.month", "12");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("aol_toolbar.surf.prevMonth", "12");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("aol_toolbar.surf.total", "77");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("aol_toolbar.surf.week", "12");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("aol_toolbar.surf.year", "12");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("browser.search.defaultengine", "Ask.com");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("browser.search.defaultenginename", "AOL Web Search");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("browser.search.defaultthis.engineName", "Freecorder Customized Web Search");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT1060933&SearchSource=3&q={searchTerms}");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("browser.search.order.1", "Ask.com");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("browser.search.selectedEngine", "Freecorder Customized Web Search");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("browser.startup.homepage", "hxxp://search.conduit.com/?ctid=CT1060933&SearchSource=13");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("winamp_toolbar.buttons.layout", "shoutcast_30026;mobile/android_33522;post_to_twitter_33500;post_to_facebook_33511;post_to_AIM_33511;skins_btn_wa;plugins_btn_wa;shout_btn_wa;video_btn_wa;ai[...]
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("winamp_toolbar.firsttime.showwindow", false);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("winamp_toolbar.guid", "{5E37BA62-A4DD-CCCA-CD51-6CD22666CBCA}");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("winamp_toolbar.install.lastTbVersion", "5.6.14.1");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("winamp_toolbar.metrics.activestampdate", "1");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("winamp_toolbar.metrics.activestampmonth", "2");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("winamp_toolbar.metrics.activestampyear", "2012");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("winamp_toolbar.metrics.originalDate", "21");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("winamp_toolbar.metrics.originalHours", "21");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("winamp_toolbar.metrics.originalMinutes", "43");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("winamp_toolbar.metrics.originalMonth", "11");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("winamp_toolbar.metrics.originalSeconds", "56");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("winamp_toolbar.metrics.originalYear", "2010");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("winamp_toolbar.remote.publish.xml", "1330554246429");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("winamp_toolbar.search.cid", "19-07-2011");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("winamp_toolbar.search.instd", "20110526181329718");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("winamp_toolbar.search.oid", "21-11-2010");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("winamp_toolbar.search.populateoncomplete", false);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("winamp_toolbar.search.searchtype", "web");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("winamp_toolbar.search.source", "tb50-ff-winamp");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("winamp_toolbar.skin.custom", true);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("winamp_toolbar.strbundle.msg", "Winamp Toolbar");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("winamp_toolbar.upgrade.showwindow", false);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("winamp_toolbar.winamp.appversion", "1");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("winamp_toolbar.winamp.artist", "");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("winamp_toolbar.winamp.button.focus", true);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("winamp_toolbar.winamp.button.forward", true);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("winamp_toolbar.winamp.button.open", true);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("winamp_toolbar.winamp.button.pause", true);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("winamp_toolbar.winamp.button.play", true);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("winamp_toolbar.winamp.button.rewind", true);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("winamp_toolbar.winamp.button.stop", false);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("winamp_toolbar.winamp.button.volume", true);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("winamp_toolbar.winamp.info.url", "hxxp://music.aol.com/artist/{artist}");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("winamp_toolbar.winamp.ticker.show", true);
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("winamp_toolbar.winamp.title", "-999999");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("winamp_toolbar.winamp.tracklength", "-999999");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("winamp_toolbar.winamp.tracktime", "-999999");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("browser.search.selectedEngine", "blekko");
[-] [C:\Users\Ing.Marián Faško\AppData\Roaming\Mozilla\Firefox\Profiles\qc1luq0y.default\prefs.js] [Preference] Deleted : user_pref("browser.startup.homepage", "hxxp://safesearchr.lavasoft.com/?source=3336ca5f&tbp=homepage&toolbarid=adawaretb&v=2_2&u=C0313403E7FAA24E88BFAD50FCFD5F94");
[-] [C:\Users\Ing.Marián Faško\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Deleted : gjndloejlcbpkholmagjbddfkjmmploh
[-] [C:\Users\Ing.Marián Faško\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Deleted : nkjddnjnldjjnbjahcinkhkchijbjcmn
[-] [C:\Users\Ing.Marián Faško\AppData\Local\Comodo\Dragon\User Data\Default\Web Data] [Search Provider] Deleted : ask.com

*************************

:: Winsock settings cleared

########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [94733 bytes] ##########

A k tomu poslednému som sa ešte nedostal :)
Nahoru
Uživatelský avatar
jaro3
člen Security týmu
Guru Level 15
Guru Level 15
Příspěvky: 43298
Registrován: červen 07
Bydliště: Jižní Čechy
Pohlaví: Muž
Stav:
Offline

Re: Kontrola logu HijackThis

Příspěvekod jaro3 » 21 říj 2015 16:23

ještě mbam.

Spusť znovu AdwCleaner (u Windows Vista či Windows7, klikni na AdwCleaner pravým a vyber „Spustit jako správce“
klikni na „Prohledat-Scan“, po prohledání klikni na „ Cleaning (Vymazat)“

Program provede opravu, po automatickém restartu neukáže log (C:\AdwCleaner [C?].txt) , jeho obsah sem celý vlož.

Stáhni si Junkware Removal Tool by Thisisu
http://www.bleepingcomputer.com/downloa ... oval-tool/
na svojí plochu.

Deaktivuj si svůj antivirový program. Pravým tl. myši klikni na JRT.exe a vyber „spustit jako správce“. Pro pokračování budeš vyzván ke stisknutí jakékoliv klávesy. Na nějakou klikni.
Začne skenování programu. Skenování může trvat dloho , podle množství nákaz. Po ukončení skenu se objeví log (JRT.txt) , který se uloží na ploše.
Zkopíruj sem prosím celý jeho obsah.
Při práci s programy HJT, ComboFix,MbAM, SDFix aj. zavřete všechny ostatní aplikace a prohlížeče!
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
Nahoru
Odpovědět

Zpět na “HiJackThis”

Kdo je online

Uživatelé prohlížející si toto fórum: Žádní registrovaní uživatelé a 71 hostů