Prosím o kontrolu logu

[mistr moskva]

Dobrý den,
můj notebook začal vykazovat drobné problémy - trošku se zpomalil při prohlížení webových stránek a často mi spadne prohlížeč Chrome.

Stáhnul jsem si trial verzi anitviru NOD32 prohledal a vyčistil disk. Totéž jsem udělal pomocí programu Spybot. Vyčistil registry CCleanerem, ale problémy stále přetrvávají.

Prosím tedy o kontrolu logu. Předem děkuji za vaše rady a podněty. :)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:05:31, on 4.2.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16457)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\Garmin\Lifetime Updater\GarminLifetime.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe
C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
C:\Program Files (x86)\ControlCenter4\BrCtrlCntr.exe
C:\Program Files (x86)\ControlCenter4\BrCcUxSys.exe
C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe
C:\Windows\SysWOW64\DllHost.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.certified-toolbar.com?si= ... bs=true&q=
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.certified-toolbar.com?si= ... bs=true&q=
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.certified-toolbar.com?si= ... bs=true&q=
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.certified-toolbar.com?si= ... e&tid=3231
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.certified-toolbar.com?si= ... bs=true&q=
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.certified-toolbar.com?si= ... bs=true&q=
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.certified-toolbar.com?si= ... bs=true&q=
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.certified-toolbar.com?si= ... e&tid=3231
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://search.certified-toolbar.com?si= ... bs=true&q=
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://search.certified-toolbar.com?si= ... bs=true&q=
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = proxy.nasi.ova.czf:3128
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - - (no file)
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDHelper.dll
O2 - BHO: DownTango Launcher - {5bfbc635-8e77-459e-b715-9cdd671b323d} - C:\Users\Moskva\AppData\Roaming\DDownTango6bToolbar\DDownTango6bToolbar.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll
O2 - BHO: IESpeakDoc - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Vizuální záložky - {C93F72A2-2162-4BBA-A07A-F13663C297A6} - C:\Program Files (x86)\Yandex\YandexBarIE\fastdial.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O2 - BHO: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll
O2 - BHO: Ukazatel S-Rank - {EA837F48-5AD1-443E-AE34-FFE03CBF3099} - C:\Program Files (x86)\Seznam.cz\bin\listicka.dll
O3 - Toolbar: Yandex.Bar - {91397D20-1446-11D4-8AF4-0040CA1127B6} - C:\Program Files (x86)\Yandex\YandexBarIE\yndbar.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O3 - Toolbar: Nástroje Lištičky - {1EA00BE1-6E54-4E2A-8099-680300BF23E1} - C:\Program Files (x86)\Seznam.cz\bin\toolbar\toolbar.dll
O3 - Toolbar: DownTango Launcher - {5bfbc635-8e77-459e-b715-9cdd671b323d} - C:\Users\Moskva\AppData\Roaming\DDownTango6bToolbar\DDownTango6bToolbar.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [HP Quick Launch] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
O4 - HKLM\..\Run: [HPOSD] C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe
O4 - HKLM\..\Run: [HPConnectionManager] C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [Garmin Lifetime Updater] C:\Program Files (x86)\Garmin\Lifetime Updater\GarminLifetime.exe /StartMinimized
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [AdobeCS5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [ControlCenter4] C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe /autorun
O4 - HKLM\..\Run: [BrStsMon00] C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe /AUTORUN
O4 - HKLM\..\Run: [SDTray] "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [swg] "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files (x86)\Microsoft Office\Office\OSA9.EXE
O9 - Extra button: Nastavení Lištičky ... - {0E46D7B6-887D-4F81-B4CA-FCC92AF73610} - C:\Program Files (x86)\Seznam.cz\bin\listicka.dll
O9 - Extra 'Tools' menuitem: Nastavení Lištičky ... - {0E46D7B6-887D-4F81-B4CA-FCC92AF73610} - C:\Program Files (x86)\Seznam.cz\bin\listicka.dll
O9 - Extra button: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-103 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-102 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
O9 - Extra button: Zvýrazňovač slov Lištičky - {4E6D6F90-31CA-4878-A7A3-1CD50F115A69} - C:\Program Files (x86)\Seznam.cz\bin\listicka.dll
O9 - Extra 'Tools' menuitem: Zvýrazňovač slov Lištičky - {4E6D6F90-31CA-4878-A7A3-1CD50F115A69} - C:\Program Files (x86)\Seznam.cz\bin\listicka.dll
O9 - Extra button: (no name) - {55779267-c8bb-4991-8599-4bf2be3214e2} - C:\Users\Moskva\AppData\Roaming\DDownTango6bToolbar\DDownTango6bToolbar.dll
O9 - Extra button: (no name) - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
O9 - Extra 'Tools' menuitem: Send by Bluetooth to - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDHelper.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {1ABA5FAC-1417-422B-BA82-45C35E2C908B} (20-20 3D Viewer for IKEA) - http://kitchenplanner.ikea.com/CZ/Core/ ... _Win32.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{05831E23-C81B-4064-8F5E-8BE232B68F10}: NameServer = 217.77.165.81 217.77.161.131
O17 - HKLM\System\CS1\Services\Tcpip\..\{05831E23-C81B-4064-8F5E-8BE232B68F10}: NameServer = 217.77.165.81 217.77.161.131
O17 - HKLM\System\CS2\Services\Tcpip\..\{05831E23-C81B-4064-8F5E-8BE232B68F10}: NameServer = 217.77.165.81 217.77.161.131
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: SDWinLogon - SDWinLogon.dll (file missing)
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: AMD Reservation Manager - Advanced Micro Devices - C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe
O23 - Service: Atheros Bt&Wlan Coex Agent - Atheros - C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
O23 - Service: AtherosSvc - Atheros Commnucations - C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: BrYNSvc - Brother Industries, Ltd. - C:\Program Files (x86)\Browny02\BrYNSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP Support Assistant Service - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
O23 - Service: HP Connection Manager 4.0 Service (hpCMSrv) - Hewlett-Packard Development Company L.P. - C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe
O23 - Service: HP Software Framework Service (hpqwmiex) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
O23 - Service: HPWMISVC - Hewlett-Packard Development Company, L.P. - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
O23 - Service: IconMan_R - Realsil Microelectronics Inc. - C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
O23 - Service: Inkjet Printer/Scanner Extended Survey Program (IJPLMSVC) - Unknown owner - C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: PandoraService (PanService) - Pandora.TV - C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Spybot-S&D 2 Scanner Service (SDScannerService) - Safer-Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
O23 - Service: Spybot-S&D 2 Updating Service (SDUpdateService) - Safer-Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
O23 - Service: Spybot-S&D 2 Security Center Service (SDWSCService) - Safer-Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\stlang64.dll,-10122 (STacSV) - IDT, Inc. - C:\Program Files\IDT\WDM\STacSV64.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 15966 bytes

[Reklama]

[Žbeky]

Stáhni AdwCleaner

Ulož si ho na svojí plochu
Ukonči všechny programy, okna a prohlížeče
Spusť program poklepáním a klikni na „Search“
Po skenu se objeví log (jinak je uložen systémovem disku jako AdwCleaner[R?].txt), jeho obsah sem celý vlož.

[mistr moskva]

Dobrý den, děkuji za věnovaný čas. :)

# AdwCleaner v2.110 - Logfile created 02/05/2013 at 08:56:28
# Updated 03/02/2013 by Xplode
# Operating system : Windows 7 Home Premium Service Pack 1 (64 bits)
# User : Moskva - MOSKVA-HP
# Boot Mode : Normal
# Running from : C:\Users\Moskva\Desktop\adwcleaner.exe
# Option [Search]


***** [Services] *****


***** [Files / Folders] *****

File Found : C:\END
File Found : C:\Users\Moskva\AppData\Roaming\Mozilla\Firefox\Profiles\us41thkr.default\searchplugins\Askcom.xml
File Found : C:\Users\Moskva\AppData\Roaming\Mozilla\Firefox\Profiles\us41thkr.default\searchplugins\icqplugin.xml
File Found : C:\Users\Moskva\AppData\Roaming\Mozilla\Firefox\Profiles\us41thkr.default\searchplugins\icqplugin-1.xml
File Found : C:\Users\Moskva\AppData\Roaming\Mozilla\Firefox\Profiles\us41thkr.default\searchplugins\icqplugin-2.xml
File Found : C:\Users\Moskva\AppData\Roaming\Mozilla\Firefox\Profiles\us41thkr.default\searchplugins\icqplugin-3.xml
File Found : C:\Users\Moskva\AppData\Roaming\Mozilla\Firefox\Profiles\us41thkr.default\searchplugins\Web Search.xml
Folder Found : C:\Program Files (x86)\ICQ6Toolbar
Folder Found : C:\Program Files (x86)\Protected Search
Folder Found : C:\ProgramData\~0
Folder Found : C:\ProgramData\Ask
Folder Found : C:\ProgramData\ICQ\ICQToolbar
Folder Found : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Protected Search
Folder Found : C:\Users\Moskva\AppData\Local\APN
Folder Found : C:\Users\Moskva\AppData\Local\DownTango
Folder Found : C:\Users\Moskva\AppData\Roaming\Mozilla\Firefox\Profiles\us41thkr.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}

***** [Registry] *****

Key Found : HKCU\Software\APN PIP
Key Found : HKCU\Software\Conduit
Key Found : HKCU\Software\PIP
Key Found : HKCU\Software\ProtectedSearch
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Key Found : HKLM\SOFTWARE\Classes\AppID\{3FC27B34-0C19-49DA-875E-1875DDD4A6B2}
Key Found : HKLM\SOFTWARE\Classes\wtb.Band
Key Found : HKLM\SOFTWARE\Classes\wtb.Band.1
Key Found : HKLM\SOFTWARE\Classes\wtb.NotificationSource
Key Found : HKLM\SOFTWARE\Classes\wtb.NotificationSource.1
Key Found : HKLM\SOFTWARE\Classes\wtb.SourceSinkImpl
Key Found : HKLM\SOFTWARE\Classes\wtb.SourceSinkImpl.1
Key Found : HKLM\SOFTWARE\Classes\wtb.ToolbarInfo
Key Found : HKLM\SOFTWARE\Classes\wtb.ToolbarInfo.1
Key Found : HKLM\Software\Conduit
Key Found : HKLM\Software\PIP
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{A928E66C-F501-4E66-9953-855C712F93B2}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{8DA8B89E-0C65-403B-8231-AB22ECFA0687}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{A928E66C-F501-4E66-9953-855C712F93B2}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{B0E28FA0-DF07-44B6-95CE-48BE26DB9266}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E6B4EE8F-C38E-4994-BE28-229A3F92262C}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{FCA8936E-403A-4487-A966-70F80F1D5A6A}
Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Protected Search_is1
Key Found : HKLM\SOFTWARE\Classes\Interface\{8DA8B89E-0C65-403B-8231-AB22ECFA0687}
Key Found : HKLM\SOFTWARE\Classes\Interface\{A928E66C-F501-4E66-9953-855C712F93B2}
Key Found : HKLM\SOFTWARE\Classes\Interface\{B0E28FA0-DF07-44B6-95CE-48BE26DB9266}
Key Found : HKLM\SOFTWARE\Classes\Interface\{E6B4EE8F-C38E-4994-BE28-229A3F92262C}
Key Found : HKLM\SOFTWARE\Classes\Interface\{FCA8936E-403A-4487-A966-70F80F1D5A6A}
Key Found : HKU\S-1-5-21-1301442857-1089937886-3826583495-1001\Software\Microsoft\Internet Explorer\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}
Key Found : HKU\S-1-5-21-1301442857-1089937886-3826583495-1001\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Value Found : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]

***** [Internet Browsers] *****

-\\ Internet Explorer v9.0.8112.16457

[HKCU\Software\Microsoft\Internet Explorer\Main - Search Page] = hxxp://search.certified-toolbar.com?si= ... bs=true&q=
[HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://search.certified-toolbar.com?si= ... e&tid=3231
[HKCU\Software\Microsoft\Internet Explorer\Main - ICQ Search] = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd
[HKCU\Software\Microsoft\Internet Explorer\Main - Start Default_Page_URL] = hxxp://search.certified-toolbar.com?si= ... e&tid=3231
[HKCU\Software\Microsoft\Internet Explorer\Main - Default_Search_URL] = hxxp://search.certified-toolbar.com?si= ... bs=true&q=
[HKCU\Software\Microsoft\Internet Explorer\Main - Search Bar] = hxxp://search.certified-toolbar.com?si= ... bs=true&q=
[HKCU\Software\Microsoft\Internet Explorer\Search - Start Page] = hxxp://search.certified-toolbar.com?si= ... e&tid=3231
[HKCU\Software\Microsoft\Internet Explorer\Search - Start Default_Page_URL] = hxxp://search.certified-toolbar.com?si= ... e&tid=3231
[HKCU\Software\Microsoft\Internet Explorer\Search - Default_Search_URL] = hxxp://search.certified-toolbar.com?si= ... bs=true&q=
[HKCU\Software\Microsoft\Internet Explorer\Search - Search Bar] = hxxp://search.certified-toolbar.com?si= ... bs=true&q=
[HKCU\Software\Microsoft\Internet Explorer\Search - Search Page] = hxxp://search.certified-toolbar.com?si= ... bs=true&q=
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Search - Start Page] = hxxp://search.certified-toolbar.com?si= ... e&tid=3231
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Search - Start Default_Page_URL] = hxxp://search.certified-toolbar.com?si= ... e&tid=3231
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Search - Default_Search_URL] = hxxp://search.certified-toolbar.com?si= ... bs=true&q=
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Search - Search Bar] = hxxp://search.certified-toolbar.com?si= ... bs=true&q=
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Search - Search Page] = hxxp://search.certified-toolbar.com?si= ... bs=true&q=
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main - Default_Search_URL] = hxxp://search.certified-toolbar.com?si= ... bs=true&q=
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main - Start Page] = hxxp://search.certified-toolbar.com?si= ... e&tid=3231
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main - Search Page] = hxxp://search.certified-toolbar.com?si= ... bs=true&q=
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main - Start Default_Page_URL] = hxxp://search.certified-toolbar.com?si= ... e&tid=3231
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main - Search Bar] = hxxp://search.certified-toolbar.com?si= ... bs=true&q=

-\\ Mozilla Firefox v18.0.1 (cs)

File : C:\Users\Moskva\AppData\Roaming\Mozilla\Firefox\Profiles\us41thkr.default\prefs.js

Found : user_pref("browser.search.defaultengine", "Web Search");
Found : user_pref("browser.search.defaultenginename", "Web Search");
Found : user_pref("browser.search.order.1", "Web Search");
Found : user_pref("keyword.URL", "hxxp://search.certified-toolbar.com?si=41460&tid=3231&bs=true&q=");

[mistr moskva]

-\\ Google Chrome v24.0.1312.57

File : C:\Users\Moskva\AppData\Local\Google\Chrome\User Data\Default\Preferences

Found [l.1] : icon_url ={"sync":{"suppress_start":true}, "devtools":{"split_location":210}, "default_apps_install_state":2, "backup":{"extensions":{"ids":["ahfgeienlihckogmohjhadlkjgocpleb", "eemcgdkfndhakfknompkggombfjjjeno", "icmlaeflemplmjndnaapfdbbnpncnbda", "jbhadopkkbkjmnjmifbbofhnbmhacoae", "mfehgcgbbipciphmccgaenjidiccnmng"]}, "_version":4, "_signature":"BFijWvSmF4RRr3bCNSQN93RfapUmy9ePVnmtsLkFzkg="}, "plugins":{"plugins_list":[{"name":"Shockwave Flash", "version":"11.5.31.5", "path":"C:\\Program Files (x86)\\Google\\Chrome\\Application\\24.0.1312.57\\PepperFlash\\pepflashplayer.dll", "enabled":true}, {"name":"Chrome Remote Desktop Viewer", "version":"", "path":"internal-remoting-viewer", "enabled":true}, {"name":"Native Client", "version":"", "path":"C:\\Program Files (x86)\\Google\\Chrome\\Application\\24.0.1312.57\\ppGoogleNaClPluginChrome.dll", "enabled":true}, {"name":"Chrome PDF Viewer", "version":"", "path":"C:\\Program Files (x86)\\Google\\Chrome\\Application\\24.0.1312.57\\pdf.dll", "enabled":true}, {"name":"Adobe Acrobat", "version":"10.1.4.38", "path":"C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\Browser\\nppdf32.dll", "enabled":true}, {"name":"Microsoft\u00ae Windows Media Player Firefox Plugin", "version":"1.0.0.8", "path":"C:\\Program Files (x86)\\Mozilla Firefox\\plugins\\np-mswmp.dll", "enabled":true}, {"name":"QuickTime Plug-in 7.7.2", "version":"7.7.2 (1680.56)", "path":"C:\\Program Files (x86)\\Mozilla Firefox\\plugins\\npqtplugin.dll", "enabled":true}, {"name":"QuickTime Plug-in 7.7.2", "version":"7.7.2 (1680.56)", "path":"C:\\Program Files (x86)\\Mozilla Firefox\\plugins\\npqtplugin2.dll", "enabled":true}, {"name":"QuickTime Plug-in 7.7.2", "version":"7.7.2 (1680.56)", "path":"C:\\Program Files (x86)\\Mozilla Firefox\\plugins\\npqtplugin3.dll", "enabled":true}, {"name":"QuickTime Plug-in 7.7.2", "version":"7.7.2 (1680.56)", "path":"C:\\Program Files (x86)\\Mozilla Firefox\\plugins\\npqtplugin4.dll", "enabled":true}, {"name":"QuickTime Plug-in 7.7.2", "version":"7.7.2 (1680.56)", "path":"C:\\Program Files (x86)\\Mozilla Firefox\\plugins\\npqtplugin5.dll", "enabled":true}, {"name":"QuickTime Plug-in 7.7.2", "version":"7.7.2 (1680.56)", "path":"C:\\Program Files (x86)\\Mozilla Firefox\\plugins\\npqtplugin6.dll", "enabled":true}, {"name":"QuickTime Plug-in 7.7.2", "version":"7.7.2 (1680.56)", "path":"C:\\Program Files (x86)\\Mozilla Firefox\\plugins\\npqtplugin7.dll", "enabled":true}, {"name":"Garmin Communicator Plug-In", "version":"4.0.1.0", "path":"C:\\Program Files (x86)\\Garmin GPS Plugin\\npGarmin.dll", "enabled":true}, {"name":"Google Update", "version":"1.3.21.123", "path":"C:\\Program Files (x86)\\Google\\Update\\1.3.21.123\\npGoogleUpdate3.dll", "enabled":true}, {"name":"Java(TM) Platform SE 6 U37", "version":"6.0.370.6", "path":"C:\\Program Files (x86)\\Java\\jre6\\bin\\plugin2\\npjp2.dll", "enabled":true}, {"name":"VLC Web Plugin", "version":"2.0.0", "path":"C:\\Program Files (x86)\\VideoLAN\\VLC\\npvlc.dll", "enabled":true}, {"name":"Shockwave Flash", "version":"11,5,502,135", "path":"C:\\Windows\\SysWOW64\\Macromed\\Flash\\NPSWF32_11_5_502_135.dll", "enabled":true}, {"name":"Java Deployment Toolkit 6.0.370.6", "version":"6.0.370.6", "path":"C:\\Windows\\SysWOW64\\npdeployJava1.dll", "enabled":true}, {"name":"Adobe Flash Player", "enabled":true}, {"name":"Adobe Reader", "enabled":false}, {"name":"Chrome PDF Viewer", "enabled":true}, {"name":"Chrome Remote Desktop Viewer", "enabled":true}, {"name":"Garmin Communicator Plug-In", "enabled":true}, {"name":"Google Update", "enabled":true}, {"name":"Java(TM)", "enabled":true}, {"name":"Native Client", "enabled":true}, {"name":"QuickTime Player", "enabled":true}, {"name":"VLC Web Plugin", "enabled":true}, {"name":"Windows Media Player", "enabled":true}], "enabled_nacl":true, "migrated_to_pepper_flash":true, "enabled_internal_pdf3":true, "last_internal_directory":"C:\\Program Files (x86)\\Google\\Chrome\\Application\\24.0.1312.57"}, "bookmark_bar":{"show_on_all_tabs":true}, "profile":{"avatar_index":0, "exit_type":"Normal", "content_settings":{"clear_on_exit_migrated":true, "pref_version":1}, "exited_cleanly":true, "name":"Prvn\u00ed u\u017eivatel"}, "countryid_at_install":17242, "download":{"directory_upgrade":true, "extensions_to_open":""}, "extensions":{"alerts":{"initialized":true}, "toolbar":["icmlaeflemplmjndnaapfdbbnpncnbda", "jbhadopkkbkjmnjmifbbofhnbmhacoae"], "chrome_url_overrides":{"newtab":["chrome-extension://jbhadopkkbkjmnjmifbbofhnbmhacoae/bundler/newtab.html"], "bookmarks":["chrome-extension://eemcgdkfndhakfknompkggombfjjjeno/main.html"]}, "blacklistupdate":{"lastpingday":"13004265592637756", "version":"0.0.0.139"}, "autoupdate":{"last_check":"13004397466531000", "next_check":"13004538575603145"}, "last_chrome_version":"24.0.1312.57", "toolbarsize":-1, "settings":{"bndahdijlcnncjbpammoedeapmlobllc":{"blacklist":true}, "pihcfdffalbcnmbghijdfcaanagapelf":{"blacklist":true}, "lndempehphjoeimfchjflohpmhamiamf":{"blacklist":true}, "mfncimdpmknolnnnccdmkpnpkaofonkc":{"blacklist":true}, "loldehkdjdncebfnncknlkdchjclifbn":{"blacklist":true}, "ggkpicnfnljflddbdoeeaajjgepapcbf":{"blacklist":true}, "ojglppmhgfohhfeinlhklglifnbfebak":{"blacklist":true}, "fpbkafpphnhlpakobppekmkebmbhkoco":{"blacklist":true}, "ghgphbmpcfgkfneodjpbdanmdoemklio":{"blacklist":true}, "acomnmbomlajgjbcijkflekoojdfcldj":{"blacklist":true}, "ehgoiaffgjoinpkllmmnikghgpghnabc":{"blacklist":true}, "efbeabpbbkahnnjalakldjfhljboclkf":{"blacklist":true}, "cmjphjljejnfgdbkdgdlclaabimpknna":{"blacklist":true}, "icihfeaofpcfehanhbnjigdlpfahjlee":{"blacklist":true}, "nibohffepnilngkecenfdgnokfhmnkod":{"blacklist":true}, "iggjepemmdkieakihpomccndhdfcljdp":{"blacklist":true}, "jbhadopkkbkjmnjmifbbofhnbmhacoae":{"from_bookmark":false, "active_permissions":{"scriptable_host":["hxxp://*/*", "hxxps://*/*"], "api":["bookmarks", "browsingData", "contextMenus", "cookies", "geolocation", "history", "idle", "management", "notifications", "plugin", "tabs", "topSites", "unlimitedStorage", "webRequest", "webRequestBlocking", "webRequestInternal"], "explicit_host":["<all_urls>"]}, "ack_external":true, "location":3, "was_installed_by_default":false, "install_time":"13001961965701158", "manifest":{"plugins":[{"public":true, "path":"npwiddit.dll"}], "description":"DownTango Launcher", "key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCvQ9iNCkesNP0DblYXjw/9cn/TkszgYAaz0oU0toSUpxXgJsszDgdXHNyedxoFN8WnJAlk2Yqq3ghOpyfCSV6pDSXeS+H988ZJrj2nKa8Sx69Il9CUV2I17OX7L9OeOwbFLYZ4KPXSdPSQsXl61hujvUZNeWD5aMiv4PheWnpL+wIDAQAB", "content_security_policy":"script-src 'self' hxxps://ajax.googleapis.com hxxps://widdit.com hxxps://geo.widdit.com hxxps://fad.widdit.com hxxps://adds.widdit.com hxxps://ads.widdit.com hxxps://landing.widdit.com hxxps://rp.widdit.com hxxps://suggest.widdit.com hxxps://ssl.google-analytics.com hxxps://www.certified-toolbar.com hxxps://cdn1.certified-toolbar.com hxxps://cdn1.certified-apps.com hxxps://www.certified-apps.com hxxps://static.apps.widdit.com hxxps://ssl.widdit.com hxxps://sslcdn.widdit.com 'unsafe-eval'; object-src 'self' ", "chrome_url_overrides":{"newtab":"bundler/newtab.html"}, "update_url":"hxxp://update.toolbar.widdit.com/chrome/?si=41460&ti=3231&ver=2.1", "name":"DownTango Launcher", "icons":{"128":"images/widdit_icon_large.png", "48":"images/widdit_icon_med.png", "16":"images/widdit_icon_small.png"}, "background":{"page":"background.html"}, "version":"2.1", "content_scripts":[{"matches":["hxxp://*/*", "hxxps://*/*"], "css":["css/widdit.css"], "run_at":"document_start", "js":["js/widdit.js"]}, {"run_at":"document_end", "matches":["hxxp://*/*", "hxxps://*/*"], "js":["js/widdit_end.js"]}], "permissions":["contextMenus", "management", "tabs", "<all_urls>", "notifications", "unlimitedStorage", "browsingData", "bookmarks", "cookies", "geolocation", "history", "idle", "webRequest", "topSites", "webRequestBlocking"], "browser_action":{"default_title":"DownTango Launcher", "default_icon":"images/widdit_icon_small.png"}, "web_accessible_resources":["js/*.js", "*.html", "*.htm", "*.js", "*.png", "*.jpg", "*.gif"], "manifest_version":2}, "state":1, "from_webstore":false, "path":"jbhadopkkbkjmnjmifbbofhnbmhacoae\\2.1_0"}, "goedioiidkokkbobdnopnlnaaalniegm":{"blacklist":true}, "ookcgejbfhcmcanfkfmmmpahflnlajbl":{"blacklist":true}, "cbhhdkemlehgodemcigfabmcdnohhhef":{"blacklist":true}, "iljfgjkppapinhcgonhjnipfppfmfedh":{"blacklist":true}, "gnapdhmknipknfmhhnhdmhakdfhgeing":{"blacklist":true}, "cbbbpmlnlpnjojeplppgeilanlihoojg":{"blacklist":true}, "pobponmhkpmphbnfhpjdagklbkmjhked":{"blacklist":true}, "nckmikohoilfkcoahbjpbgbpegcjgngm":{"blacklist":true}, "dkhkecikbdfpoiopnnpoeglbdphgflmf":{"blacklist":true}, "jbnafcjbcfgejacaanogofkkehcomamp":{"blacklist":true}, "amoobcjlpgloocplpikcldcpjjdnoeii":{"blacklist":true}, "jkmhalpofmlfeglboejbchpoijnkmcgh":{"blacklist":true}, "hcpndbchnlgojmnijaldkicigmihmdca":{"blacklist":true}, "mgdgiplcofghdmpekdeeceolepakodcb":{"blacklist":true}, "lkhcbijhgfchgdmklonlobkfbcadbokg":{"blacklist":true}, "kljhmdlkclaglodecegamnpioaflmage":{"blacklist":true}, "nloaaepkhcnmoakooihnefhhggbmemed":{"blacklist":true}, "cekdjgnecpoooikhmceokdhojckkkhmh":{"blacklist":true}, "gchbiabnbdikkgfhnkclecjncojnkmhb":{"blacklist":true}, "jpeijjbllejgmokmahkeommcodahoobm":{"blacklist":true}, "bldgnkigdcpgnbfehgbameigoohecdfl":{"blacklist":true}, "lcmpleboacinanffcdgenhhbkboclkjb":{"blacklist":true}, "kkhomejdleoonmbdhcigkhkjcghngncf":{"blacklist":true}, "jpgidahfcgiajlcbleeiaibpmmblcmnb":{"blacklist":true}, "fbjjhbijaiopkcdolheliknnjlkaekeb":{"blacklist":true}, "pkhidkonipdjidjglnkfcfhnkfnlefbk":{"blacklist":true}, "pgelifedkjaohmjehecojkfldinjlamn":{"blacklist":true}, "hjnigaibahdeadcdnpnommdehajodlhc":{"blacklist":true}, "lookpbabilcplifjdeifacodednpacmk":{"blacklist":true}, "gkjmgdpdndoaiholejnmdbbpdaafahmm":{"blacklist":true}, "ogjbodghhojomghbdfnlkppdagkfjede":{"blacklist":true}, "hecijapnccjhonbmacmkmffooodfokoo":{"blacklist":true}, "lnjgjionmhobdfdegbciceafphgemjnc":{"blacklist":true}, "eijbdinddjecmebnlienfoijpjjobkjh":{"blacklist":true}, "jjnkfllhcgkgnfbekpnmoikpfihpjfli":{"blacklist":true}, "mlmegahemifabfmdnndafagnncfbnahn":{"blacklist":true}, "nmmnodocfckpoddcgihiihcdinaonckb":{"blacklist":true}, "lceaiepehinnomgijphkmjccbigkljkj":{"blacklist":true}, "jhhabiomopkibeecgngiggmopkeofacl":{"blacklist":true}, "hmmoglffhpmacaacfbbmbbkcbdkjphnc":{"blacklist":true}, "gandihaiobadcggbfkhpbkocmiemjlnf":{"blacklist":true}, "ahfgeienlihckogmohjhadlkjgocpleb":{"page_ordinal":"n", "app_launcher_ordinal":"n", "active_permissions":{"api":["appNotifications", "management", "webstorePrivate"]}}, "dinhjcapnfbffhiihdlnbdfjdjjfhcbk":{"blacklist":true}, "clapnamcglekekmamicmbahkghdcjaeh":{"blacklist":true}, "gkjeccpmibljcfpfapfljciimedljpnm":{"blacklist":true}, "bnffnggkphadlnoopcoakdnkellnifjp":{"blacklist":true}, "boclfockfmgcppbajihcgajhpggaakgl":{"blacklist":true}, "pgldfhecfiofkhnbgcncepnkjkeoahlk":{"blacklist":true}, "pjloefkigphblpjminnlpbhjchjafcfc":{"blacklist":true}, "hnkcpoijaeegompjgbjjhkdmljldaccg":{"blacklist":true}, "amfgdngndpfldigimkcindjalokfnmem":{"blacklist":true}, "jljfnkmkkdkppfndippkedacgfkafped":{"blacklist":true}, "kelljdoinjlkmkncffgadbebgpmlcang":{"blacklist":true}, "bhdkpmneahdelgdgfhddianklldfoell":{"blacklist":true}, "gngmkbiihflpghldjnbpemaicedhdddk":{"blacklist":true}, "hhlgbfcfbkhlmajakkcjippgpcmejkko":{"blacklist":true}, "lambangeielkjcnmioccboaphdfcffib":{"blacklist":true}, "jiofcofpcbijcnlpekdkpmgjdppajbjb":{"blacklist":true}, "fbhiehmngojjcmljddjmgpmcockbccmo":{"blacklist":true}, "omnicnmbagoinlpamknknbcgopadcoci":{"blacklist":true}, "mknjbohhleiicbpagpgmhoaigbblmnic":{"blacklist":true}, "akadaakimgegecohlifeejdnnjbnobop":{"blacklist":true}, "fjhfnfakmfcejgmfkmnapemgblmehppf":{"blacklist":true}, "hgbaomphocgmdpmiohjclchaaljpaelp":{"blacklist":true}, "oidjdpbndkjhmhmgdoggibcjnippkcgo":{"blacklist":true}, "aldalonecchncedclgcndcndgilaclnk":{"blacklist":true}, "ijenlpgidnapbndonoinbkhekgjonojg":{"blacklist":true}, "eofejpelggimkodeojpeojnbijgiglgh":{"blacklist":true}, "opnnngnphijodjhemhdafpnnpdjggofe":{"blacklist":true}, "kelcbonmemlciepjdmfcifnhloeammhj":{"blacklist":true}, "nfecfkjnlkbphobjbcnphimihniieehc":{"blacklist":true}, "iiiinekimabooeihccihfopoadcaaphn":{"blacklist":true}, "pkbkgagehkkoajkpgnmjegibihpalfdk":{"blacklist":true}, "nhbfbnmmdjkjahhfdeklgphihfodfgnb":{"blacklist":true}, "fhlkffpjoajppmhcakbkjndbjfljccpi":{"blacklist":true}, "hgboiaecclcbjphldpbgfgggcbihmnai":{"blacklist":true}, "kbipembkfhbdmkkkfbigmohilmknjnof":{"blacklist":true}, "hfpfbhnmbbigpmoodjemilggabklpopj":{"blacklist":true}, "bioeopenmokdgbekbgpgnacecjmpckbb":{"blacklist":true}, "jdiakcmbpmcnniggjcmcjknnklpdlogc":{"blacklist":true}, "hnonhhpgjnjcjfbkjdpfbkfpaodcmncb":{"blacklist":true}, "igkdgkdiiolilocklmiolkpoohacojop":{"blacklist":true}, "digmihafmlfkgdbjjdgbcojghcgcoeoa":{"blacklist":true}, "doneghboglgnflpdicnkaojmmljgejkj":{"blacklist":true}, "dgkemngdheppgohkjjelnkjmdeimmfml":{"blacklist":true}, "mjhlngjakabhonjagnlimeicooahajpl":{"blacklist":true}, "bokkificjhapflinbdejegngffgkcgfe":{"blacklist":true}, "gfmmoiakbmdohkgeoekiokjgljcminig":{"blacklist":true}, "kdfahjokahcbmecgaandpobmgiiknagf":{"blacklist":true}, "aofechiiopolnegcjcddgedjabmkemhf":{"blacklist":true}, "gekkhpjigmckhgmgngadbeknekgpgolb":{"blacklist":true}, "ifbkndkaolfbjjhnnhfmkbkoclpdkpli":{"blacklist":true}, "eihjeehdobnpkonebmpanonopghepfle":{"blacklist":true}, "jabpdgllijbnknhkgjideeajfofafckp":{"blacklist":true}, "odeckaficnaplobiiaomegfbokokehhb":{"blacklist":true}, "onfbaaifbbahonepmednhkjbhdgogkbl":{"blacklist":true}, "maakimnachffhlgdhfomaejeeaikgjap":{"blacklist":true}, "ejijgghlncnaphklndknkbkclebfboca":{"blacklist":true}, "mkobblpffgbncfhijabakfafmkjdmmnm":{"blacklist":true}, "pkdlpbfmpolnhligegklimbccminkioc":{"blacklist":true}, "fclheclkknbgfndeahkfdomollhmfkcn":{"blacklist":true}, "dfoegfajplmijblljfancdapbdaopebb":{"blacklist":true}, "kojkdbedffnppdoalcfkkeelbhbklhgp":{"blacklist":true}, "nnioepmjbjjlflmdgjanlcmbjahljeeo":{"blacklist":true}, "oomelpjfeldbopnleifpjibbpekflhlg":{"blacklist":true}, "lodollblmkailkkdiijmoccefdfjohgk":{"blacklist":true}, "hhjmkijkgojfifipdgmiemghfikbohcm":{"blacklist":true}, "oghphhcagopecifjblgdcfihjnlcbcfc":{"blacklist":true}, "jmifipgdcllamghkhdplfjffkciekbgo":{"blacklist":true}, "fihepkmlkmciffbhijldnpmifhbkiinp":{"blacklist":true}, "mndoohjdoechinpkfbkolflbonciahfo":{"blacklist":true}, "elcaigjcaijbfpjngaekbblphmfjdhfo":{"blacklist":true}, "diinokaoicgobepmadnmedlhdfnpehcj":{"blacklist":true}, "jindbcpkhnnnjgcjgmkjedbibibiojjf":{"blacklist":true}, "bkkchglolnigbfncnbnnbhhempjkdpkf":{"blacklist":true}, "echngajnlpjeacbanjejlhcajjfoedcc":{"blacklist":true}, "aphncaagnlabkeipnbbicmcahnamibgb":{"blacklist":true}, "bilgncckogfgfipdlejkffnbkgjkmflh":{"blacklist":true}, "jfjagidcpadkoaonbogmbgfimmnefeie":{"blacklist":true}, "hhfiljkpjapjjphcocclhhaldpfkkjbi":{"blacklist":true}, "mmjodihhmnpkldljaifiajmlnpflfhpm":{"blacklist":true}, "lnlaeblencbjjjeaanegaldcjfekeled":{"blacklist":true}, "dadcalgappognjbjpalfophhcfakoeac":{"blacklist":true}, "eiflkkehgogioennialfbilppmegcpoa":{"blacklist":true}, "fnhcgnmfccojojojacgeiaaeacefdohb":{"blacklist":true}, "kcgplbmkmfcpngilmhjmebdgkkpbdemp":{"blacklist":true}, "fnoadkjdjfgafomgmablhmffooijcfbn":{"blacklist":true}, "gplgjmecjpbfcdikpbicknafcnfcidek":{"blacklist":true}, "gifglngcdbggmlgkcombebegdaoknkho":{"blacklist":true}, "kincjchfokkeneeofpeefomkikfkiedl":{"blacklist":true}, "bhmahaiplmeodpakkcchmolaihbhkpdl":{"blacklist":true}, "mogepbcllienegdibkfpmombhefhcoic":{"blacklist":true}, "fnkaadkanmfgpfbmdcllhjdgmdbgljpi":{"blacklist":true}, "pkbbbncikcipejaiiiioboongndhmjgl":{"blacklist":true}, "benclngoadbppljglhphhnfknoppmjoa":{"blacklist":true}, "pcaedgdgamlfffkfblocmakhgieggoak":{"blacklist":true}, "gbenikfjhilhpgagllmfgggdjaflbmbi":{"blacklist":true}, "lhajoamjgchgljkdjigcgmmcehjkagan":{"blacklist":true}, "npadaghbcdejfngcjpbnoikajdnongca":{"blacklist":true}, "ljeihpebkahejeacdalhkhmckmggppif":{"blacklist":true}, "hdnbmmfjbblajkjkcaeofolgfnljpnim":{"blacklist":true}, "pkbkkendemaimikinaefldfljliecapm":{"blacklist":true}, "nhboiakpmibkbkbeehchlfkggmhphpnk":{"blacklist":true}, "hcapokajkngndbglnfglpfdpoeidmpha":{"blacklist":true}, "jcmipejepoimfflnoapdmkdephgjinck":{"blacklist":true}, "odnamglmogfldajnhkfodmloofeokcmm":{"blacklist":true}, "emcdpbapjmnjgoannclkongdfboaabho":{"blacklist":true}, "lplmcpcnhpbffpcfiaddbeaplhhbengd":{"blacklist":true}, "hjkhligcnpfjhjlapmejaiaiigibofif":{"blacklist":true}, "echjhfifjidfhoappglfmoffcpmpkigb":{"blacklist":true}, "leccghfplhenabeogpibljliijgapfgb":{"blacklist":true}, "nhooocacdhkpbmoocdclodjlddcebfoe":{"blacklist":true}, "mdiehnlecbjlppbpaaipmlnhhjgepfcg":{"blacklist":true}, "mnichagcickblneeijmfnmoiakigmmhf":{"blacklist":true}, "cfnfobbpdaccoljfahpmfjdmbfmmkeof":{"blacklist":true}, "cfogpbanfnocakdckmgafapdlmclpiln":{"blacklist":true}, "kmlebjoghkhpapfhbdikannggmmffnco":{"blacklist":true}, "cbbjhegipokkofhhicbckicchjpcpeni":{"blacklist":true}, "mfooalpniplhaaealemjpchkchmmgdko":{"blacklist":true}, "pndadpldhngimdmhnajebjldbmcbpjol":{"blacklist":true}, "mplhbhmkccidaokcelbcbcmhhedebcng":{"blacklist":true}, "cbjlfaogacjpkplebfbijaakaifoflno":{"blacklist":true}, "pbdgmppmccanplobanhfkjndjkmmabgk":{"blacklist":true}, "ghmaokcegalalefnhlfcnjhnpdbanjkj":{"blacklist":true}, "jbfebbkjjmkcoldeaeelhpconkmgjhbg":{"blacklist":true}, "icmlaeflemplmjndnaapfdbbnpncnbda":{"from_bookmark":false, "active_permissions":{"scriptable_host":["hxxp://*/*", "hxxps://*/*"], "api":["cookies", "tabs", "webNavigation"], "explicit_host":["*://*.avast.com/*", "hxxp://*/*", "hxxps://*/*"]}, "ack_external":true, "location":3, "was_installed_by_default":false, "install_time":"13001961970709158", "lastpingday":"13004351989996000", "state":1, "from_webstore":false, "manifest":{"name":"avast! WebRep", "description":"Web Reputation Plugin", "key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDfBBgbBomL+8Ze0I3H5diuRW5XcxzEGzMgmCWRwf/XB4gdxIKK880IIDrKW13wW/RjlB5M6CipuiERx/91yBYP6Oz+56h22Chwgn0zIiGq35MJpP1cfYbnp4bzl1odIIX/d8j8LZ+Ur22y76sZP+WtoFphr+7axJRXC8IrXhAEcQIDAQAB", "default_locale":"en", "current_locale":"cs", "icons":{"256":"skin/images/icons/green3-24.png", "64":"skin/images/icons/green3-24.png", "128":"skin/images/icons/green3-24.png", "48":"skin/images/icons/green3-24.png"}, "background":{"scripts":["libs/protobuf.js", "libs/pbj.js", "libs/wrc_gpb.js", "libs/jquery.1.8.js", "scripts/ratings.js", "libs/query.js", "libs/dateFormat.js", "libs/avastwrc.js", "scripts/background.js"]}, "version":"7.0.1474", "content_scripts":[{"matches":["hxxp://*/*", "hxxps://*/*"], "css":["skin/css/anchor.css"], "all_frames":true}], "permissions":["cookies", "*://*.avast.com/*", "hxxp://*/*", "hxxps://*/*", "tabs", "webNavigation"], "browser_action":{"default_title":"avast! WebRep", "default_popup":"popup.html", "default_icon":"skin/images/icons/grey0-16.png"}, "web_accessible_resources":["skin/*", "skin/images/*", "skin/images/icons/*", "skin/images/background-body.jpg", "skin/images/background-sitecorrect.png", "skin/images/avast_logo.png", "skin/images/background-right-top.jpg", "skin/images/disabled.png", "skin/images/horizontal-line-white.jpg", "skin/images/logo.jpg", "background-body.jpg", "skin/images/background-sitecorrect.png", "skin/images/grey.png", "skin/images/icon_incorrect.png", "skin/images/vertical-line.jpg", "skin/images/background-right-bottom.jpg", "skin/images/close.png", "skin/images/horizontal-line.jpg", "skin/images/icons/corporate.png", "skin/images/icons/grey0-16.png", "skin/images/icons/orange1-16.png", "skin/images/icons/social.png", "skin/images/icons/corporate-small-disable.png", "skin/images/icons/grey-3.png", "skin/images/icons/orange2-16.png", "skin/images/icons/social-small-disable.png", "skin/images/icons/corporate-small-selected.png", "skin/images/icons/grey3-16.png", "skin/images/icons/orange3-16.png", "skin/images/icons/social-small-selected.png", "skin/images/icons/drugs.png", "skin/images/icons/grey-small.png", "skin/images/icons/orange-hover.png", "skin/images/icons/violence.png", "skin/images/icons/drugs-small-disable.png", "skin/images/icons/illegal.png", "skin/images/icons/orange-selected.png", "skin/images/icons/violence-small-disable.png", "skin/images/icons/drugs-small-selected.png", "skin/images/icons/illegal-small-disable.png", "skin/images/icons/pornography.png", "skin/images/icons/violence-small-selected.png", "skin/images/icons/gambling.png", "skin/images/icons/illegal-small-selected.png", "skin/images/icons/pornography-small-disable.png", "skin/images/icons/weapons.png", "skin/images/icons/gambling-small-disable.png", "skin/images/icons/it.png", "skin/images/icons/pornography-small-selected.png", "skin/images/icons/weapons-small-disable.png", "skin/images/icons/gambling-small-selected.png", "skin/images/icons/it-small-disable.png", "skin/images/icons/red.png", "skin/images/icons/weapons-small-selected.png", "skin/images/icons/green.png", "skin/images/icons/it-small-selected.png", "skin/images/icons/red-1.png", "skin/images/icons/yellow.png", "skin/images/icons/green-1.png", "skin/images/icons/limet.png", "skin/images/icons/red1-16.png", "skin/images/icons/yellow-1.png", "skin/images/icons/green1-16.png", "skin/images/icons/limet-hover.png", "skin/images/icons/red1-small.png", "skin/images/icons/yellow1-16.png", "skin/images/icons/green1-small.png", "skin/images/icons/limet-selected.png", "skin/images/icons/red-2.png", "skin/images/icons/yellow1-small.png", "skin/images/icons/green-2.png", "skin/images/icons/line-dark-horizontal.png", "skin/images/icons/red2-16.png", "skin/images/icons/yellow-2.png", "skin/images/icons/green2-16.png", "skin/images/icons/line-light-horizontal.png", "skin/images/icons/red2-small.png", "skin/images/icons/yellow2-16.png", "skin/images/icons/green2-small.png", "skin/images/icons/logo128.jpg", "skin/images/icons/red-3.png", "skin/images/icons/yellow2-small.png", "skin/images/icons/green-3.png", "skin/images/icons/logo256.jpg", "skin/images/icons/red3-16.png", "skin/images/icons/yellow-3.png", "skin/images/icons/green3-16.png", "skin/images/icons/logo48.jpg", "skin/images/icons/red3-small.png", "skin/images/icons/yellow3-16.png", "skin/images/icons/green3-24.png", "skin/images/icons/logo64.jpg", "skin/images/icons/red-hover.png", "skin/images/icons/yellow3-small.png", "skin/images/icons/green3-small.png", "skin/images/icons/news.png", "skin/images/icons/red-selected.png", "skin/images/icons/yellow-hover.png", "skin/images/icons/green-hover.png", "skin/images/icons/news-small-disable.png", "skin/images/icons/shopping.png", "skin/images/icons/yellow-selected.png", "skin/images/icons/green-selected.png", "skin/images/icons/news-small-selected.png", "skin/images/icons/shopping-small-disable.png", "skin/images/icons/grey-0.png", "skin/images/icons/orange.png", "skin/images/icons/shopping-small-selected.png"], "manifest_version":2}, "path":"icmlaeflemplmjndnaapfdbbnpncnbda\\7.0.1474_0"}, "lgalokbapphhklmilicdefmgbjkcmldf":{"blacklist":true}, "afenhmponmfmdmbmccbmglppcmjhmhmh":{"blacklist":true}, "mlnoedbhndgbjcbeadjfnmjloejlgojk":{"blacklist":true}, "fpbippbofbmgmbojjmgfcifpmdaelcmd":{"blacklist":true}, "dpaphgcjeeochbiafgbochohgmpcmlbj":{"blacklist":true}, "kdjhalklkkcmodeicjiaekcgifkcepaf":{"blacklist":true}, "ahjfgnikolodijnpakeknpilnemojlhc":{"blacklist":true}, "egljdhfnbjahogjahnigfnbpidlmdagi":{"blacklist":true}, "gncfgndgeoddelbfhlndhljnecoednaa":{"blacklist":true}, "ehmjnpjodmgeocfphkjjnheiheehcoid":{"blacklist":true}, "gkhbgnodbilglgholifcjdblbgdaieah":{"blacklist":true}, "hnbcdmfeoldeppcbnnjmjkdofohaljbn":{"blacklist":true}, "agmhonoepgcnakccfpidhjehlocaeaaj":{"blacklist":true}, "onjaecbdddgibdijafoemfiachlbcgkj":{"blacklist":true}, "kdcnnmifdmlmjffdgeieikcokcogpbej":{"blacklist":true}, "bcddmcejgphfgofbpoocakaeapfomlek":{"blacklist":true}, "glhhlafadlhkgbklgbjnmblfhnkfknbm":{"blacklist":true}, "megkcfpbmemnpkgadkoompnoajcolpni":{"blacklist":true}, "hnnebfeppcbhhbhiifeaajgcjnkljlld":{"blacklist":true}, "mplpabdbfbloeiboikmdbnggfnjbjmlh":{"blacklist":true}, "hpibmhghjndideebpackbdlpncgkcppp":{"blacklist":true}, "fjjeecfjmgfnleghoellhldedkaocjfc":{"blacklist":true}, "pbglijbamgmlcpnnpbfjkbdeheejjloj":{"blacklist":true}, "loggadfheaoeabmkgolecncpfdfioefa":{"blacklist":true}, "nlgapikcofpablcmfgaoodlhiejiehhh":{"blacklist":true}, "kgdmldjagfciieddcnlhampgkajkpanc":{"blacklist":true}, "iomejadoamfilglofmeaffghddcgapmf":{"blacklist":true}, "foenbafkkmajnmfnlcmejonkfaipdmme":{"blacklist":true}, "djnahdkbfgnhgpakidinfonfcjbagkgp":{"blacklist":true}, "cepfogmgfkddnllaopgknbdfkceejmhk":{"blacklist":true}, "lojppnndedobolgfepahepphhloediji":{"blacklist":true}, "ocnlnkjmfnolmbclblfhfhcakldceiec":{"blacklist":true}, "aojicjocmihiopalnhjikigammkhgckb":{"blacklist":true}, "gaicmfjflflabagobdiodejfpjikheeo":{"blacklist":true}, "pfgmgcnbngcnhjddppmnloflcidemopc":{"blacklist":true}, "pjdhkkcnlbfebiokpeghfffajaabahfo":{"blacklist":true}, "dmhjdbigobajgnfoabodjgmcdgoeoljm":{"blacklist":true}, "peahabnpipmmfiajjjhgfggbeigbmbgp":{"blacklist":true}, "bdgijcibmhjjccgbdohofncdjcophknj":{"blacklist":true}, "igaajdmlejbjcbmpmnigopikfdaccdcm":{"blacklist":true}, "apdebchnkegjokdjplmfmepcdgneemhe":{"blacklist":true}, "negkalblfongjbphdcbbhddlickhlamd":{"blacklist":true}, "dpmloehicimdjkibmobhmpgdndgbcced":{"blacklist":true}, "fpmajanjndhgpifbcbnklbiehgnpkgmf":{"blacklist":true}, "gjmhdmobkhfhkpfmfegnkkimlamjdldi":{"blacklist":true}, "dmkdhgkknhnfpdjeicefnpmhcpbimden":{"blacklist":true}, "onpnpccdagncipgnoofbhchlbajcjnkd":{"blacklist":true}, "noefghcilkpcabnhhilojimkkjplhcnd":{"blacklist":true}, "pfonklmafadkmcedjlodommcoipgbcde":{"blacklist":true}, "bkplhcigeaiiliajeehehiikokgocbhb":{"blacklist":true}, "iemfpgbdjfoihicbocpbjppipdbfimeh":{"blacklist":true}, "hhbihfbjoifhhebcnchglobmkmapgjkm":{"blacklist":true}, "cihlkpohodpdkdnfalhdkhhlhmhffmbe":{"blacklist":true}, "naopgnjebjeeedbbhcadkhkmeefmloho":{"blacklist":true}, "aakhlmakppmkkmfkoibponkmmpgpmjgl":{"blacklist":true}, "oanjogmonneelfpnfmdlalfddkeckdej":{"blacklist":true}, "pajgiddgjidlcajihkjoacjbplimkgfe":{"blacklist":true}, "kcanfkmhccbaheheaackijegkclkaeic":{"blacklist":true}, "obfnipbbnnhkbafmdbbfpgfgbjmmkgpm":{"blacklist":true}, "fommcgokigkhmnhlhlkckfjhefnmfohd":{"blacklist":true}, "kinhljbhjmcmoddhdoodekeklmjapjff":{"blacklist":true}, "ecinfbhalenfhdhnljmkglajfjjfehoj":{"blacklist":true}, "pnpfkfanlgljpkpilhgiimfadggfmhcd":{"blacklist":true}, "kiipngoehgkgkackngaidmhmnchfbmio":{"blacklist":true}, "iedogbkombgmapifenoojnmpcnjighfm":{"blacklist":true}, "abfclfmhaemoockhhinpplncjehfpdbd":{"blacklist":true}, "fnnmbghphdnmmjdapccfobgjemjadeli":{"blacklist":true}, "ckckpgefkpjfopjppjfcikppehdhceah":{"blacklist":true}, "fmonlemffgbabjifjfaoamdflijecdbk":{"blacklist":true}, "hbaajkahagmlkdekmbdabikbopdgpaac":{"blacklist":true}, "nochkknnbahbhmmknnmdhagelcnfagom":{"blacklist":true}, "bkhafliomebnpccanacmlfaemgfiofko":{"blacklist":true}, "oocfbmollajebjjpkahmlnclfhkjijea":{"blacklist":true}, "dhclobcklknojliojkkclgjndemadnig":{"blacklist":true}, "jfhmafmjfdblceidmfdmoihamolaaeco":{"blacklist":true}, "ihnembcpodnfgkafmiojebccomjekopm":{"blacklist":true}, "gpgehbjbkfhngdlfpfeokjgbkmmokjhe":{"blacklist":true}, "pfhlnanelpgjbhndafjamnpfhkjadoip":{"blacklist":true}, "aljdncnajablgppdcfbehhmidlmbndda":{"blacklist":true}, "idbdlnkdnaodonmgnimcfelpngbmcpjk":{"blacklist":true}, "nmgpbidjnaebdlbdbpjggenmbaolmfoi":{"blacklist":true}, "gmghjgfdialcnhadahmjefeflgnhcjeb":{"blacklist":true}, "kibgmcdcfmcglajcfbecilngejnfppjp":{"blacklist":true}, "ijecjbcgpblkacpijljpaienknanaloa":{"blacklist":true}, "kgbkdabomfdpfoibliicpmibceaoohgh":{"blacklist":true}, "cjohbbapkbkkhpohinffggbphnhoblea":{"blacklist":true}, "ejakhnjbomgngodiidgbkapjgbdckhnh":{"blacklist":true}, "jgoljhcbgajhbhnchplgjdkknendhjnn":{"blacklist":true}, "mfffdpnblflpobcnekhekiahepofaane":{"blacklist":true}, "acmpfcamncegnhjdeiodgilikjafcamg":{"blacklist":true}, "fiiblakkkkgeljngobmpeljjapemenhi":{"blacklist":true}, "pbekednmpdekknlffkiopooofokfmkla":{"blacklist":true}, "obgljnmbldahelaakfdbjkplokjoneip":{"blacklist":true}, "phkpgooenaonkpnabopdbjjfmphclela":{"blacklist":true}, "fmcccidacjgnfiafddkngmeolkoiihil":{"blacklist":true}, "mpgehpkneknbopplhmmkfijfiniddipf":{"blacklist":true}, "efnaljpgehfilpmkhobibbjceeeondmn":{"blacklist":true}, "edmnikahahfkfilbbjbdoiabnghbkmjc":{"blacklist":true}, "mcbkimglepddodbiongpohpeidioafgk":{"blacklist":true}, "hbmlheccjkodhfejcmblndjodllmnlnl":{"blacklist":true}, "epbmnbdplhcomkedpjfceakddnbgfjmf":{"blacklist":true}, "iablioliielnhdianpbiijaoncbmfend":{"blacklist":true}, "ijjmbbddenkbenbcfldgghhjgjmcnioo":{"blacklist":true}, "lnbeebaenahmkbffnimghceldeeihfak":{"blacklist":true}, "dbmdicehacbaohlockjgdglcobimmjkh":{"blacklist":true}, "fleljamdchegbjeiipbnmiebnhgheeld":{"blacklist":true}, "coajchbkdbfhmhbgcjepiofllfjjcpfp":{"blacklist":true}, "efhjelcghjkfigiagdfbfilndaffpmdj":{"blacklist":true}, "fngolbdmkneakeaoiieafkilnogbocda":{"blacklist":true}, "fibgploapkhokkbncddlkcmbmiengcfp":{"blacklist":true}, "mnhcgaghminpdabllkbkecahjfkdiabk":{"blacklist":true}, "cgnegjfmdfenjojhjffejinpnpoglmlh":{"blacklist":true}, "fomljmklmcefndkgpakgifbiiidgbjej":{"blacklist":true}, "hhfffemhgkginfafaoapljdllodppana":{"blacklist":true}, "nepfiodmbijheamafkiglonfkjebdjmf":{"blacklist":true}, "jgmpapdckakiohhebmeoemejibommimi":{"blacklist":true}, "lpgiafapdmlapiokjnmpbbfkomiceoml":{"blacklist":true}, "jpkdlckejfjidmplieobnhijmoiecbhl":{"blacklist":true}, "dgcfmgdfbfbgcpbendbhbkfjppboebed":{"blacklist":true}, "mjolnadmlahbpepjaemohnkhpjkbhmef":{"blacklist":true}, "kffhenjbibjnbnjhlkcdlmpeccpaohio":{"blacklist":true}, "gobjcjhhebpjbmjdgmejhebbleadnceo":{"blacklist":true}, "ljcicfibknpmlcmcecddjlbgkejehhpa":{"blacklist":true}, "liomofjeffddiiccaolcnllbhnipbkhe":{"blacklist":true}, "cdogaeccgljmkecjmoedambgiekkllij":{"blacklist":true}, "hefmoncdemhjembgbnkgglhlookbipdc":{"blacklist":true}, "dlobhinihbmedmheccecfnkcadpehmbf":{"blacklist":true}, "fpjdackpllilinpkgmhkpidkanmccblc":{"blacklist":true}, "copjbedljgpkaakkmbhgkpoaadeahido":{"blacklist":true}, "cfbdodejdeejbkffcmiaknpmojjeibpn":{"blacklist":true}, "nhkmojkfnknbbmhbnacjdlodokeophkl":{"blacklist":true}, "jmeanodbelbflfmnkfdjgpikmldgjjko":{"blacklist":true}, "gfjfhihpkmehdmblhfaikkipeplpdcla":{"blacklist":true}, "jaejgaoiipdjjlbnapngknalafalbkej":{"blacklist":true}, "hdijkiondgomjpehfhopomicjbiodmcm":{"blacklist":true}, "dgaehaeahdegbdlenicbmkbakhdgoeml":{"blacklist":true}, "eopmhecjnginkckggjmhombbopmkjpam":{"blacklist":true}, "kgdkcodealpfjolmiagcogfbgmaamegh":{"blacklist":true}, "jmbkhogpjgjpfjhpdikloblkbkljkgao":{"blacklist":true}, "kleaapgdkahaekcocmkbgfainbhihccj":{"blacklist":true}, "cjhklhdjonhcohlacgggcbklpnldleck":{"blacklist":true}, "ldgfapfmnplpaohbbadnecegcpfkfall":{"blacklist":true}, "omceiakkomngangmllpgbjcoeloglald":{"blacklist":true}, "hkbgccpdcpbdckohbknjlamamelcnlki":{"blacklist":true}, "cpiiakoibaohkfoaijaigdnocfolnmll":{"blacklist":true}, "aemcjbfajnnmhblifaejadoecfoaebld":{"blacklist":true}, "hfjpjodbolkmheaehcnmfhjakjileoof":{"blacklist":true}, "ejlekamipdcfcfpgfepjmklllbpeecaj":{"blacklist":true}, "hgjgaeknhmidehalnmokomhpfhbfmpcm":{"blacklist":true}, "ehomcoocpagnlcakcbecdaknmacmedld":{"blacklist":true}, "jeehjhnmgohgpfpjneglogiholalkeip":{"blacklist":true}, "mjgobkikdipfikmaoakdcdbicpioljgg":{"blacklist":true}, "jpehgolpfgnknboibogccapmdcadjkbd":{"blacklist":true}, "ilhjicgcglhjigdehkcehjdokmkahbjl":{"blacklist":true}, "iobnpmeeecphddicmhhmdjbnlbdhjlne":{"blacklist":true}, "pjgbfgdpkbfimabdalhjmmeeelbmkcac":{"blacklist":true}, "iccblehkchfmjgfafjcpjlkjcponhdhl":{"blacklist":true}, "ncpdanjmicnihdlijomcggnnekloephc":{"blacklist":true}, "lcfkojlnjnedeoepfemhdgkhiabkeadc":{"blacklist":true}, "pnpgiaejfbdapllkchhgchjpdbcpiooa":{"blacklist":true}, "hilncbjbdpnfepdidfchmdclhpnlegpj":{"blacklist":true}, "bandboadndbkchlpicmfkpoedgnocblf":{"blacklist":true}, "aandpgohbohmlknpjbblpmoladhoochg":{"blacklist":true}, "hbdhabpmbbanaopgkbaondabkkepjfaf":{"blacklist":true}, "dbiblcmlcgdjjbdpbmbcpineegngkiip":{"blacklist":true}, "mjalegijammcloleihdmooifidcjggjp":{"blacklist":true}, "nmphbnbmgfccfhcmibikmhcgajjpelpf":{"blacklist":true}, "gjkbghdignnlcknknflbigpammebiolo":{"blacklist":true}, "fopgndklnkecillfbdmfknhmadmenikm":{"blacklist":true}, "kdchmeaiapjkejkcbeclgjklemecieeg":{"blacklist":true}, "jkihmglffmfjedfbpbpdbbimcodjbmdh":{"blacklist":true}, "clfhanhcjmgjnbpjfopldmnabimhmcmp":{"blacklist":true}, "aieglpnmmhleoenpbmfaffppfomgjmba":{"blacklist":true}, "ljmjoloiepllcndinchenhomcdcgbgef":{"blacklist":true}, "pnnbdjcjeiobikdfikegpclkcimgafpp":{"blacklist":true}, "hfcgbiofoebieldldghfocjfnnajmpej":{"blacklist":true}, "boaoagnmpennjoigkkmnjhecapibhfko":{"blacklist":true}, "ppmfajacidhcjbddpgmcmigffpppcadd":{"blacklist":true}, "danapgfidmepmcfbjjacceiaiiioieio":{"blacklist":true}, "ldmoahefokhfelhpbgfjpelcdbahdofk":{"blacklist":true}, "igghanohiioehififjoalfkdoicafjof":{"blacklist":true}, "dibljdngacjhpccjckmlmeklpgjeinjd":{"blacklist":true}, "jgdkappiifgomhgikcjbanhnmlekpeje":{"blacklist":true}, "dmabikjmolgegjajdhmgpmgffajlmmkb":{"blacklist":true}, "jddbdddmbfencninofcgnodekclofpaj":{"blacklist":true}, "hkjcejgfmaanpncnpoidgbhoikcaeepd":{"blacklist":true}, "dbanhghadfmjndnjmmejdgfdmgidlbpm":{"blacklist":true}, "fpokembamndopkflopmplkklbdngnknd":{"blacklist":true}, "imkffpjpdngdkpgadcmnlkhhmhdocijn":{"blacklist":true}, "fafoohpbicgbcejffcplajonhhooddle":{"blacklist":true}, "aebfkgcamgnimcbnbiopgdakknjgggnm":{"blacklist":true}, "igbaoknfddliiaoimhehfbkfekpmmfll":{"blacklist":true}, "nifbebeekindefklojhchehidpikbjfc":{"blacklist":true}, "lkfdchejjogilmloogbbjlnlpbhgjfab":{"blacklist":true}, "ilmknaabackgdbnkgbihgpgiopnlkjek":{"blacklist":true}, "mdngbiejioalifclonjepjjfppmbgned":{"blacklist":true}, "magllcifjcllaafcdplnajmobccbcdlo":{"blacklist":true}, "abciiempgohamehppammbkhkicmkgkob":{"blacklist":true}, "gdggdkkjecogagaffaemnbfmllcoihjp":{"blacklist":true}, "ndhkiimgbjnendpcfbiadlifmangejoa":{"blacklist":true}, "mhbffdldpckobeihgebaamjalehefnia":{"blacklist":true}, "cnimdnlablahacgompaahbgohcokcclp":{"blacklist":true}, "oakhllhnbcpgagdafgbninlpjdemdmjk":{"blacklist":true}, "mbmdaiddhfoljplpdhohimgieioblfif":{"blacklist":true}, "deonbedlmakdddidplniclflladdjoep":{"blacklist":true}, "npolaghondefgiomhkbiiompikfjneep":{"blacklist":true}, "caphkimknlmnhpjoneddiaakmcaajagb":{"blacklist":true}, "jbmbiepnidbnhbbfdbgioomdkgnbcacj":{"blacklist":true}, "lgcnahanhlfpceencjmlehpfklokhojk":{"blacklist":true}, "ebdcdchjcndpjhehacedepnggfdbfkpn":{"blacklist":true}, "deocpjmfifplhepinpkmpinpnbiemfje":{"blacklist":true}, "likifpgnijjfbdegfepoalpamlgnfofi":{"blacklist":true}, "cedclbokcakighlpbnbhfjffdjeihfdp":{"blacklist":true}, "lbficnmfealeidppcbgdcbemgfjodbkg":{"blacklist":true}, "fiapkdjniadkodmdibdnchoifkpfoiid":{"blacklist":true}, "hkjfdgjkgpbbdmadbglcgljjjddkcdha":{"blacklist":true}, "aifmjmboebdkdelpjenakhaodgneempp":{"blacklist":true}, "lljnngafekbnkpdfophmcdlbfebcbcld":{"blacklist":true}, "fcfepemfihgibdacjlnlecebknaaepmj":{"blacklist":true}, "kcfnnanmpghdnoompcfclakpacapnfbn":{"blacklist":true}, "bjihddggcgnblgojnmhpnngonofbnkaj":{"blacklist":true}, "mlmmbepkgelpbenpobinockmiehdahai":{"blacklist":true}, "pfcelnbmkeoaeicedjomcjkcammlkdbk":{"blacklist":true}, "pfoiaildicnbcjojocjlpcibenphhbln":{"blacklist":true}, "imfbomjbodpfgfhfahlgkkcllmhbelhk":{"blacklist":true}, "hncomkjbbkchfjelocejkbbflmjhlhfp":{"blacklist":true}, "lkdimamelhbiijkiljlnedmhnnkkmlbl":{"blacklist":true}, "hnipgljcblpgnnojcfldehpeknhakbgj":{"blacklist":true}, "mamfageekafifnickhgkibkofcclfefe":{"blacklist":true}, "apdmgffkfhjfeejmbjidennfjdkmmmbl":{"blacklist":true}, "mandondadnlimicalgkbkaohmeopdojj":{"blacklist":true}, "nbieffehfdniifkgdckbndjhojohbfjj":{"blacklist":true}, "mcknnlhkkdbcppajgefagceglahcafjd":{"blacklist":true}, "flmmgcfcpbfddenepkfmgfpbaceolcoe":{"blacklist":true}, "hpcdoodjfcmpcpkeendjnjkeinimhkih":{"blacklist":true}, "ocmhjnhildbnglmlfimkjnnfgddelacb":{"blacklist":true}, "pkcbihpffghlanbclfmkegjmbijcpobj":{"blacklist":true}, "fpoajjnnpmledpmohlgpgbmlhbgkgahg":{"blacklist":true}, "pgjpnfpidejcmjibaaohcmehfohacckf":{"blacklist":true}, "jfalnphfjdoalcdhlnhdpekbmmopkgkj":{"blacklist":true}, "peiijdmlgbelnnmnkighhkpeihmmamio":{"blacklist":true}, "lncjcfkpannmofmpgdfoonkniofdnaba":{"blacklist":true}, "ojmdhklabgbnnkkilmkcfcemdhognifc":{"blacklist":true}, "ckphhghhpjbfddcgkpfbelfeojcciglo":{"blacklist":true}, "cgnkbnaiipmfbakpmhllalggoepniemh":{"blacklist":true}, "nidodbfomffkfabciljelkbdiabkeehe":{"blacklist":true}, "pnaiiipilbpcceggeanphcpkkihnojan":{"blacklist":true}, "anmjpohfnlopdfaojooicpemopnliimn":{"blacklist":true}, "aglmapjbjphdidmnileogpjkgpdoliep":{"blacklist":true}, "nihhbeikpchdddoillfdcdinnnnllmna":{"blacklist":true}, "dmhgenmamfphbclmhdgmffajkfommkom":{"blacklist":true}, "dejippphmhbpgckbhdidnjmdcpfccbaj":{"blacklist":true}, "ffgfbfakpcnngelphjnppokmoicdollk":{"blacklist":true}, "indfhnliadamglhalanplbajgenpjdml":{"blacklist":true}, "alfahpoknocfdebmiclonikapcnljlob":{"blacklist":true}, "aconhjfogglfnkjhkjipaifepjklolog":{"blacklist":true}, "ifeijfpkjckedpclgncedmgdiaoeahmk":{"blacklist":true}, "plfijddblbcdcnammpdmfccchkbdekmm":{"blacklist":true}, "lnahlgmhpghkhmafjppdidhcoaomipfg":{"blacklist":true}, "nidmbljkkcbdfklgdkklgjgmhejmbojn":{"blacklist":true}, "dnemhlkdpajbbniphgkgceplmnkfnhfo":{"blacklist":true}, "oilfokmpgejhjhecdjjpikloibggpenf":{"blacklist":true}, "pfaooklcbjnkgconjjepimkohgcjmdji":{"blacklist":true}, "mfhfkclojmdocagbmecgcnlofppebebd":{"blacklist":true}, "kgdhnhadbnpeibkghaebmhmngobdafag":{"blacklist":true}, "lbaddolhebpnhdcdkicpcflhnfamcemn":{"blacklist":true}, "cmlokmkdolieoaoddlfhaidnlmiadhik":{"blacklist":true}, "aieihijcjcccdiepockaiekhpflicdii":{"blacklist":true}, "lfggokjjaanlfikbbapgnfemifmddalf":{"blacklist":true}, "alcbnnpmipohgdllkkglhkbncijplago":{"blacklist":true}, "akbdojiajlefghcdclgkgmbbljamgehd":{"blacklist":true}, "ndiogongcmocdgjciemhagfhpjamehpe":{"blacklist":true}, "kolbbghckjilleabphhgeggcgpfidofi":{"blacklist":true}, "janhdpmhnighonkkbkdpnljcoenpfkbh":{"blacklist":true}, "dpgenihgggagjjggfocjceeobjkadcbc":{"blacklist":true}, "jafnimahlamccccjbkhjjpeiipiedpik":{"blacklist":true}, "mnllienogacopjnkmhgnniopjpgjpopp":{"blacklist":true}, "ajlkjjdbgcjdiklbcomhnfghjigfccoh":{"blacklist":true}, "dfafokiagoiocidlpglcanjkcdbdnioi":{"blacklist":true}}}, "ntp":{"app_page_names":["Aplikace"], "promo_resource_cache_update":"1360050850.847276"}, "promo":{"ntp_bubble_promo":[{"increment_max":1, "end":1361228340, "closed":false, "increment":1, "views":0, "increment_frequency":0, "max_views":1, "start":1352329200, "text":"Prohl\u00ed\u017ee\u010d Chrome byl automaticky aktualizov\u00e1n.<br/>\n Nyn\u00ed pou\u017e\u00edv\u00e1te nejnov\u011bj\u0161\u00ed a nejvy\u0161\u0161\u00ed verzi.", "segment":1, "group":0, "num_groups":1, "gplus_required":false}], "ntp_notification_promo":[{"increment_max":1, "end":1357685940, "closed":false, "increment":1, "views":0, "increment_frequency":0, "max_views":15, "start":1356303600, "text":"M\u00e1te chytr\u00fd telefon nebo tablet? <a href=\"hxxps://www.google.com/chrome/mobile/?utm_source=chrome&utm_medium=ntp&utm_campaign=ntp-promo\"> Po\u0159i\u010fte si Chrome pro mobiln\u00ed za\u0159\u00edzen\u00ed</a>", "segment":1, "group":0, "num_groups":1, "gplus_required":false}]}, "translate_denied_count":{"el":0, "en":6}, "autofill":{"negative_upload_rate":1, "positive_upload_rate":1}, "net":{"hxxp_server_properties":{"version":1, "servers":{"administrace.hosting90.cz:443":{"supports_spdy":true}, "ssl.gstatic.com:443":{"settings":{"4":100, "5":10}, "supports_spdy":true}, "graph.facebook.com:443":{"supports_spdy":true}, "maps.gstatic.com:443":{"supports_spdy":true}, "www.facebook.com:443":{"settings":{"4":100, "5":16, "7":16384}, "supports_spdy":true}, "plus.google.com:443":{"supports_spdy":true}, "googleads.g.doubleclick.net:443":{"settings":{"4":100}, "supports_spdy":true}, "accounts.youtube.com:443":{"supports_spdy":true}, "www.google.cz:443":{"supports_spdy":true}, "cm.g.doubleclick.net:443":{"supports_spdy":true}, "apis.google.com:443":{"settings":{"4":100, "5":16, "6":0}, "supports_spdy":true}, "www.gstatic.com:443":{"supports_spdy":true}, "id.google.cz:443":{"supports_spdy":true}, "maps.googleapis.com:443":{"supports_spdy":true}, "www.google-analytics.com:443":{"supports_spdy":true}, "lh4.googleusercontent.com:443":{"settings":{"4":100, "5":32, "6":0}, "supports_spdy":true}, "r.twimg.com:443":{"supports_spdy":true}, "maps.google.cz:443":{"supports_spdy":true}, "www.youtube.com:443":{"settings":{"4":100}, "supports_spdy":true}, "clients1.google.com:443":{"settings":{"4":100, "5":16, "6":0}, "supports_spdy":true}, "s.ytimg.com:443":{"settings":{"4":100, "5":69, "6":0}, "supports_spdy":true}, "gmail.com:443":{"supports_spdy":true}, "accounts.google.com:443":{"supports_spdy":true}, "encrypted-tbn2.gstatic.com:443":{"supports_spdy":true}, "i4.ytimg.com:443":{"supports_spdy":true}, "khms1.google.cz:443":{"supports_spdy":true}, "chatenabled.mail.google.com:443":{"supports_spdy":true}, "lh3.googleusercontent.com:443":{"supports_spdy":true}, "translate.googleapis.com:443":{"supports_spdy":true}, "twitter.com:443":{"supports_spdy":true}, "cdnjs.cloudflare.com:443":{"supports_spdy":true}, "www.googleapis.com:443":{"supports_spdy":true}, "mail-attachment.googleusercontent.com:443":{"supports_spdy":true}, "www.google.com:443":{"supports_spdy":true}, "accounts.google.cz:443":{"supports_spdy":true}, "lh5.googleusercontent.com:443":{"supports_spdy":true}, "www.youtube-nocookie.com:443":{"supports_spdy":true}, "plusone.google.com:443":{"settings":{"4":100}, "supports_spdy":true}, "ad.doubleclick.net:443":{"supports_spdy":true}, "maps.google.com:443":{"supports_spdy":true}, "hosting90.cz:443":{"supports_spdy":true}, "ajax.googleapis.com:443":{"settings":{"4":100}, "supports_spdy":true}, "www.googleadservices.com:443":{"supports_spdy":true}, "mail.google.com:443":{"supports_spdy":true}, "lh6.googleusercontent.com:443":{"supports_spdy":true}, "ssl.google-analytics.com:443":{"settings":{"4":100, "5":10, "6":0}, "supports_spdy":true}, "csi.gstatic.com:443":{"supports_spdy":true}, "clients2.google.com:443":{"supports_spdy":true}, "mts1.google.com:443":{"supports_spdy":true}}}}, "session":

[mistr moskva]

A poslední část...

{"restore_on_startup_migrated":true}, "default_search_provider":{"id":"213", "instant_url":"", "keyword":"search.certified-toolbar.com", "suggest_url":"", "name":"Web Search", "prepopulate_id":"0", "search_url":"hxxp://search.certified-toolbar.com?si=41460&bs=true&tid=3231&q={searchTerms}", "enabled":true, "encodings":"UTF-8", ""}, "translate_accepted_count":{"el":1, "en":0}, "browser":{"window_placement":{"work_area_top":0, "work_area_right":1366, "top":22, "left":345, "bottom":730, "maximized":true, "right":1395, "work_area_left":0, "work_area_bottom":728}, "last_prompted_google_url":"hxxps://www.google.cz/", "last_known_google_url":"hxxps://www.google.cz/", "check_default_browser":false}, "selectfile":{"last_directory":"C:\\Users\\Moskva\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\JDYLOEF0"}}

*************************

AdwCleaner[R1].txt - [50897 octets] - [05/02/2013 08:56:28]

########## EOF - C:\AdwCleaner[R1].txt - [50958 octets] ##########

[jaro3]

Spusť znovu AdwCleaner (u Windows Vista či Windows7, klikni na AdwCleaner pravým a vyber „Spustit jako správce“
Klikni na „ Delete“
Program provede opravu, po automatickém restartu neukáže log (C:\AdwCleaner [S?].txt) , jeho obsah sem celý vlož.

Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected. Poté klikni na Main (hlavní stránku ) a klikni na Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranění historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit dočasné soubory Windows, vysypat koš atd.


Stáhni si TFC
Otevři soubor a zavři všechny ostatní okna, Klikni na Start k zahájení procesu. Program by neměl trvat dlouho.
Poté by se měl PC restartovat, pokud ne , proveď sám.

Stáhni si Malwarebytes' Anti-Malware
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Aktualizace Malwarebytes' Anti-Malware a Spustit aplikaci Malwarebytes' Anti-Malware, pokud jo tak klikni na tlačítko konec
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a nech vybranou možnost Provést rychlý sken a klikni na tlačítko Skenovat
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Zobrazit výsledky
- pak zvol možnost uložit log a ulož si log na plochu
- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).
Vlož sem pak obsah toho logu.

Pokud budou problémy , spusť v nouz. režimu.

[Žbeky]

+ Nový HJT

[mistr moskva]

Aplikoval jsem ten postup s AdwCleanerem. Tady je log:

# AdwCleaner v2.111 - Logfile created 02/07/2013 at 20:11:43
# Updated 05/02/2013 by Xplode
# Operating system : Windows 7 Home Premium Service Pack 1 (64 bits)
# User : Moskva - MOSKVA-HP
# Boot Mode : Normal
# Running from : C:\Users\Moskva\Downloads\adwcleaner.exe
# Option [Delete]


***** [Services] *****


***** [Files / Folders] *****

File Deleted : C:\END
File Deleted : C:\Users\Moskva\AppData\Roaming\Mozilla\Firefox\Profiles\us41thkr.default\searchplugins\Askcom.xml
File Deleted : C:\Users\Moskva\AppData\Roaming\Mozilla\Firefox\Profiles\us41thkr.default\searchplugins\icqplugin.xml
File Deleted : C:\Users\Moskva\AppData\Roaming\Mozilla\Firefox\Profiles\us41thkr.default\searchplugins\icqplugin-1.xml
File Deleted : C:\Users\Moskva\AppData\Roaming\Mozilla\Firefox\Profiles\us41thkr.default\searchplugins\icqplugin-2.xml
File Deleted : C:\Users\Moskva\AppData\Roaming\Mozilla\Firefox\Profiles\us41thkr.default\searchplugins\icqplugin-3.xml
File Deleted : C:\Users\Moskva\AppData\Roaming\Mozilla\Firefox\Profiles\us41thkr.default\searchplugins\Web Search.xml
Folder Deleted : C:\Program Files (x86)\ICQ6Toolbar
Folder Deleted : C:\Program Files (x86)\Protected Search
Folder Deleted : C:\ProgramData\~0
Folder Deleted : C:\ProgramData\Ask
Folder Deleted : C:\ProgramData\ICQ\ICQToolbar
Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Protected Search
Folder Deleted : C:\Users\Moskva\AppData\Local\APN
Folder Deleted : C:\Users\Moskva\AppData\Local\DownTango
Folder Deleted : C:\Users\Moskva\AppData\Roaming\Mozilla\Firefox\Profiles\us41thkr.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}

***** [Registry] *****

Key Deleted : HKCU\Software\APN PIP
Key Deleted : HKCU\Software\Conduit
Key Deleted : HKCU\Software\PIP
Key Deleted : HKCU\Software\ProtectedSearch
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{3FC27B34-0C19-49DA-875E-1875DDD4A6B2}
Key Deleted : HKLM\SOFTWARE\Classes\wtb.Band
Key Deleted : HKLM\SOFTWARE\Classes\wtb.Band.1
Key Deleted : HKLM\SOFTWARE\Classes\wtb.NotificationSource
Key Deleted : HKLM\SOFTWARE\Classes\wtb.NotificationSource.1
Key Deleted : HKLM\SOFTWARE\Classes\wtb.SourceSinkImpl
Key Deleted : HKLM\SOFTWARE\Classes\wtb.SourceSinkImpl.1
Key Deleted : HKLM\SOFTWARE\Classes\wtb.ToolbarInfo
Key Deleted : HKLM\SOFTWARE\Classes\wtb.ToolbarInfo.1
Key Deleted : HKLM\Software\Conduit
Key Deleted : HKLM\Software\PIP
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{A928E66C-F501-4E66-9953-855C712F93B2}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{8DA8B89E-0C65-403B-8231-AB22ECFA0687}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{A928E66C-F501-4E66-9953-855C712F93B2}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{B0E28FA0-DF07-44B6-95CE-48BE26DB9266}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E6B4EE8F-C38E-4994-BE28-229A3F92262C}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{FCA8936E-403A-4487-A966-70F80F1D5A6A}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Protected Search_is1
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{8DA8B89E-0C65-403B-8231-AB22ECFA0687}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A928E66C-F501-4E66-9953-855C712F93B2}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B0E28FA0-DF07-44B6-95CE-48BE26DB9266}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E6B4EE8F-C38E-4994-BE28-229A3F92262C}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{FCA8936E-403A-4487-A966-70F80F1D5A6A}
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]

***** [Internet Browsers] *****

-\\ Internet Explorer v9.0.8112.16457

Replaced : [HKCU\Software\Microsoft\Internet Explorer\Main - Search Page] = hxxp://search.certified-toolbar.com?si= ... bs=true&q= --> hxxp://www.google.com
Replaced : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://search.certified-toolbar.com?si= ... e&tid=3231 --> hxxp://www.google.com
Replaced : [HKCU\Software\Microsoft\Internet Explorer\Main - ICQ Search] = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd --> hxxp://www.google.com
Replaced : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Default_Page_URL] = hxxp://search.certified-toolbar.com?si= ... e&tid=3231 --> hxxp://www.google.com
Replaced : [HKCU\Software\Microsoft\Internet Explorer\Main - Default_Search_URL] = hxxp://search.certified-toolbar.com?si= ... bs=true&q= --> hxxp://www.google.com
Replaced : [HKCU\Software\Microsoft\Internet Explorer\Main - Search Bar] = hxxp://search.certified-toolbar.com?si= ... bs=true&q= --> hxxp://www.google.com
Replaced : [HKCU\Software\Microsoft\Internet Explorer\Search - Start Page] = hxxp://search.certified-toolbar.com?si= ... e&tid=3231 --> hxxp://www.google.com
Replaced : [HKCU\Software\Microsoft\Internet Explorer\Search - Start Default_Page_URL] = hxxp://search.certified-toolbar.com?si= ... e&tid=3231 --> hxxp://www.google.com
Replaced : [HKCU\Software\Microsoft\Internet Explorer\Search - Default_Search_URL] = hxxp://search.certified-toolbar.com?si= ... bs=true&q= --> hxxp://www.google.com
Replaced : [HKCU\Software\Microsoft\Internet Explorer\Search - Search Bar] = hxxp://search.certified-toolbar.com?si= ... bs=true&q= --> hxxp://www.google.com
Replaced : [HKCU\Software\Microsoft\Internet Explorer\Search - Search Page] = hxxp://search.certified-toolbar.com?si= ... bs=true&q= --> hxxp://www.google.com
Replaced : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Search - Start Page] = hxxp://search.certified-toolbar.com?si= ... e&tid=3231 --> hxxp://www.google.com
Replaced : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Search - Start Default_Page_URL] = hxxp://search.certified-toolbar.com?si= ... e&tid=3231 --> hxxp://www.google.com
Replaced : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Search - Default_Search_URL] = hxxp://search.certified-toolbar.com?si= ... bs=true&q= --> hxxp://www.google.com
Replaced : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Search - Search Bar] = hxxp://search.certified-toolbar.com?si= ... bs=true&q= --> hxxp://www.google.com
Replaced : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Search - Search Page] = hxxp://search.certified-toolbar.com?si= ... bs=true&q= --> hxxp://www.google.com
Replaced : [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main - Default_Search_URL] = hxxp://search.certified-toolbar.com?si= ... bs=true&q= --> hxxp://www.google.com
Replaced : [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main - Start Page] = hxxp://search.certified-toolbar.com?si= ... e&tid=3231 --> hxxp://www.google.com
Replaced : [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main - Search Page] = hxxp://search.certified-toolbar.com?si= ... bs=true&q= --> hxxp://www.google.com
Replaced : [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main - Start Default_Page_URL] = hxxp://search.certified-toolbar.com?si= ... e&tid=3231 --> hxxp://www.google.com
Replaced : [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main - Search Bar] = hxxp://search.certified-toolbar.com?si= ... bs=true&q= --> hxxp://www.google.com

-\\ Mozilla Firefox v18.0.1 (cs)

File : C:\Users\Moskva\AppData\Roaming\Mozilla\Firefox\Profiles\us41thkr.default\prefs.js

C:\Users\Moskva\AppData\Roaming\Mozilla\Firefox\Profiles\us41thkr.default\user.js ... Deleted !

Deleted : user_pref("browser.search.defaultengine", "Web Search");
Deleted : user_pref("browser.search.defaultenginename", "Web Search");
Deleted : user_pref("browser.search.order.1", "Web Search");
Deleted : user_pref("keyword.URL", "hxxp://search.certified-toolbar.com?si=41460&tid=3231&bs=true&q=");

-\\ Google Chrome v24.0.1312.57

File : C:\Users\Moskva\AppData\Local\Google\Chrome\User Data\Default\Preferences

Deleted [l.40] : keyword = "search.certified-toolbar.com",
Deleted [l.43] : search_url = "hxxp://search.certified-toolbar.com?si=41460&bs=true&tid=3231&q={searchTerms}",

*************************

AdwCleaner[R1].txt - [51014 octets] - [05/02/2013 08:56:28]
AdwCleaner[R2].txt - [8130 octets] - [07/02/2013 20:11:29]
AdwCleaner[S1].txt - [8751 octets] - [07/02/2013 20:11:43]

########## EOF - C:\AdwCleaner[S1].txt - [8811 octets] #########

Jdu stáhnou ostatní. :)

[mistr moskva]

Výpis z Malwarebytes' Anti-MalwareMalwarebytes Anti-Malware (Zkušební verze Malwarebytes Anti-Malware.) 1.70.0.1100
www.malwarebytes.org

Verze: v2013.02.07.08

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
Moskva :: MOSKVA-HP [administrátor]

Ochrana: Povolena

7.2.2013 20:57:31
mbam-log-2013-02-07 (20-57-31).txt

Typ: Rychlá kontrola
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 230594
Uplynulý čas: 3 minut, 9 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 0
(Žádné škodlivé položky nebyly zjištěny)

(konec)

[mistr moskva]

A zde výpis z HijackThis v2.0.4

Scan saved at 21:04:54, on 7.2.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16457)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\Garmin\Lifetime Updater\GarminLifetime.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe
C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
C:\Program Files (x86)\ControlCenter4\BrCtrlCntr.exe
C:\Program Files (x86)\ControlCenter4\BrCcUxSys.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = proxy.nasi.ova.czf:3128
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - - (no file)
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDHelper.dll
O2 - BHO: DownTango Launcher - {5bfbc635-8e77-459e-b715-9cdd671b323d} - C:\Users\Moskva\AppData\Roaming\DDownTango6bToolbar\DDownTango6bToolbar.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll
O2 - BHO: IESpeakDoc - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Vizuální záložky - {C93F72A2-2162-4BBA-A07A-F13663C297A6} - C:\Program Files (x86)\Yandex\YandexBarIE\fastdial.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O2 - BHO: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll
O2 - BHO: Ukazatel S-Rank - {EA837F48-5AD1-443E-AE34-FFE03CBF3099} - C:\Program Files (x86)\Seznam.cz\bin\listicka.dll
O3 - Toolbar: Yandex.Bar - {91397D20-1446-11D4-8AF4-0040CA1127B6} - C:\Program Files (x86)\Yandex\YandexBarIE\yndbar.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O3 - Toolbar: Nástroje Lištičky - {1EA00BE1-6E54-4E2A-8099-680300BF23E1} - C:\Program Files (x86)\Seznam.cz\bin\toolbar\toolbar.dll
O3 - Toolbar: DownTango Launcher - {5bfbc635-8e77-459e-b715-9cdd671b323d} - C:\Users\Moskva\AppData\Roaming\DDownTango6bToolbar\DDownTango6bToolbar.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [HP Quick Launch] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
O4 - HKLM\..\Run: [HPOSD] C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe
O4 - HKLM\..\Run: [HPConnectionManager] C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [Garmin Lifetime Updater] C:\Program Files (x86)\Garmin\Lifetime Updater\GarminLifetime.exe /StartMinimized
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [AdobeCS5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [ControlCenter4] C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe /autorun
O4 - HKLM\..\Run: [BrStsMon00] C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe /AUTORUN
O4 - HKLM\..\Run: [SDTray] "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe"
O4 - HKLM\..\RunOnce: [Malwarebytes Anti-Malware] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [swg] "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files (x86)\Microsoft Office\Office\OSA9.EXE
O9 - Extra button: Nastavení Lištičky ... - {0E46D7B6-887D-4F81-B4CA-FCC92AF73610} - C:\Program Files (x86)\Seznam.cz\bin\listicka.dll
O9 - Extra 'Tools' menuitem: Nastavení Lištičky ... - {0E46D7B6-887D-4F81-B4CA-FCC92AF73610} - C:\Program Files (x86)\Seznam.cz\bin\listicka.dll
O9 - Extra button: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-103 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-102 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe
O9 - Extra button: Zvýrazňovač slov Lištičky - {4E6D6F90-31CA-4878-A7A3-1CD50F115A69} - C:\Program Files (x86)\Seznam.cz\bin\listicka.dll
O9 - Extra 'Tools' menuitem: Zvýrazňovač slov Lištičky - {4E6D6F90-31CA-4878-A7A3-1CD50F115A69} - C:\Program Files (x86)\Seznam.cz\bin\listicka.dll
O9 - Extra button: (no name) - {55779267-c8bb-4991-8599-4bf2be3214e2} - C:\Users\Moskva\AppData\Roaming\DDownTango6bToolbar\DDownTango6bToolbar.dll
O9 - Extra button: (no name) - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
O9 - Extra 'Tools' menuitem: Send by Bluetooth to - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDHelper.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {1ABA5FAC-1417-422B-BA82-45C35E2C908B} (20-20 3D Viewer for IKEA) - http://kitchenplanner.ikea.com/CZ/Core/ ... _Win32.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{05831E23-C81B-4064-8F5E-8BE232B68F10}: NameServer = 217.77.165.81 217.77.161.131
O17 - HKLM\System\CS1\Services\Tcpip\..\{05831E23-C81B-4064-8F5E-8BE232B68F10}: NameServer = 217.77.165.81 217.77.161.131
O17 - HKLM\System\CS2\Services\Tcpip\..\{05831E23-C81B-4064-8F5E-8BE232B68F10}: NameServer = 217.77.165.81 217.77.161.131
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: SDWinLogon - SDWinLogon.dll (file missing)
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: AMD Reservation Manager - Advanced Micro Devices - C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe
O23 - Service: Atheros Bt&Wlan Coex Agent - Atheros - C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
O23 - Service: AtherosSvc - Atheros Commnucations - C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: BrYNSvc - Brother Industries, Ltd. - C:\Program Files (x86)\Browny02\BrYNSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP Support Assistant Service - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
O23 - Service: HP Connection Manager 4.0 Service (hpCMSrv) - Hewlett-Packard Development Company L.P. - C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe
O23 - Service: HP Software Framework Service (hpqwmiex) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
O23 - Service: HPWMISVC - Hewlett-Packard Development Company, L.P. - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
O23 - Service: IconMan_R - Realsil Microelectronics Inc. - C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
O23 - Service: Inkjet Printer/Scanner Extended Survey Program (IJPLMSVC) - Unknown owner - C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: PandoraService (PanService) - Pandora.TV - C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Spybot-S&D 2 Scanner Service (SDScannerService) - Safer-Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
O23 - Service: Spybot-S&D 2 Updating Service (SDUpdateService) - Safer-Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
O23 - Service: Spybot-S&D 2 Security Center Service (SDWSCService) - Safer-Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\stlang64.dll,-10122 (STacSV) - IDT, Inc. - C:\Program Files\IDT\WDM\STacSV64.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 15579 bytes

[memphisto]

Máš tam AVAST, ESET, Spybot. Nech jen jeden antivir a Spybot odinstaluj a s ním i:
Google toolbar
Yandex.Bar
DownTango Launcher
S-Rank

pak znovu HJT