Prosím o kontrolu logu

[Valder]

Zdravím,
po dlouhé době provádím menší čistku, tak chci poprosit o kontrolu logu :)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9:50:52, on 6.7.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16611)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Windows\AsScrPro.exe
C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMTray.exe
C:\Users\Sthep\Downloads\hijackthis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.crawler.com/search/dispatche ... p=aus&qkw=%s&tbid=60747
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.babylon.com/?affID=119816 ... 5D60503750
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG2012\avgssie.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll" (file missing)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll" (file missing)
O4 - HKLM\..\Run: [UpdateLBPShortCut] "C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\LabelPrint" UpdateWithCreateOnce "Software\CyberLink\LabelPrint\2.5"
O4 - HKLM\..\Run: [UpdateP2GoShortCut] "C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\6.0"
O4 - HKLM\..\Run: [ATKOSD2] C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
O4 - HKLM\..\Run: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
O4 - HKLM\..\Run: [HControlUser] C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [ASUS Screen Saver Protector] C:\Windows\AsScrPro.exe
O4 - HKLM\..\Run: [ADSMTray] C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMTray.exe
O4 - Global Startup: SRS Premium Sound.lnk = ?
O4 - Global Startup: tmchlang.lnk = C:\Program Files\Trend Micro\Internet Security\TmChLang.exe
O9 - Extra button: Přidat na blog - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Přidat na blog Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG2012\avgpp.dll
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: ADSM Service (ADSMService) - ASUSTek Computer Inc. - C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: ASLDR Service (ASLDRService) - ASUS - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - ASUS - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2012\avgidsagent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: StarWind AE Service (StarWindServiceAE) - StarWind Software - C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: System Explorer Service (SystemExplorerHelpService) - Mister Group - C:\Program Files (x86)\System Explorer\service\SystemExplorerService64.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: Vodafone Connector Service (VodafoneConnectorService) - Vodafone Group - C:\Program Files (x86)\Vodafone\Via The Phone\VodafoneConnectorService.exe
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)

--
End of file - 9106 bytes

[Reklama]

[jaro3]

Trend Micro\Internet Security\
AVG2012
jeden antivir odinstaluj!

Zavři ostatní aplikace a prohlížeče, odpoj se od netu a fixni v HJT:
Návod

Kód: Vybrat vše

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.crawler.com/search/dispatche ... p=aus&qkw=%s&tbid=60747
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.babylon.com/?affID=119816 ... 5D60503750
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll" (file missing)
O3 - Toolbar: Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll" (file missing)
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"


Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected. Poté klikni na Main (hlavní stránku ) a klikni na Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranění historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit dočasné soubory Windows, vysypat koš atd.


Stáhni si TFC
Otevři soubor a zavři všechny ostatní okna, Klikni na Start k zahájení procesu. Program by neměl trvat dlouho.
Poté by se měl PC restartovat, pokud ne , proveď sám.

Stáhni AdwCleaner

Ulož si ho na svojí plochu
Ukonči všechny programy , okna a prohlížeče
Spusť program poklepáním a klikni na „Prohledat“
Po skenu se objeví log ( jinak je uložen systémovem disku jako AdwCleaner[R?].txt), jeho obsah sem celý vlož.

Stáhni si Malwarebytes' Anti-Malware
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Aktualizace Malwarebytes' Anti-Malware a Spustit aplikaci Malwarebytes' Anti-Malware, pokud jo tak klikni na tlačítko konec
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a nech vybranou možnost Provést rychlý sken a klikni na tlačítko Skenovat
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Zobrazit výsledky
- pak zvol možnost uložit log a ulož si log na plochu
- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).
Vlož sem pak obsah toho logu.

Pokud budou problémy , spusť v nouz. režimu.

[Valder]

# AdwCleaner v2.304 - Log vytvooen 06/07/2013 v 12:15:18
# Aktualizováno 03/07/2013 Xplode
# Operaení systém : Windows 7 Home Premium Service Pack 1 (64 bits)
# Uživatel : Sthep - STHEP-PC
# Spuštin systém : Normální
# Spuštino z : C:\Users\Sthep\Desktop\adwcleaner.exe
# Volba [Prohledat]


***** [Služby] *****


***** [Soubory / Složky] *****

Složka Nalezeno : C:\Program Files (x86)\DAEMON Tools Toolbar
Složka Nalezeno : C:\Program Files (x86)\ICQ6Toolbar
Složka Nalezeno : C:\ProgramData\Ask
Složka Nalezeno : C:\ProgramData\Babylon
Složka Nalezeno : C:\ProgramData\ICQ\ICQToolbar
Složka Nalezeno : C:\ProgramData\InstallMate
Složka Nalezeno : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Optimizer Pro
Složka Nalezeno : C:\ProgramData\Partner
Složka Nalezeno : C:\ProgramData\Premium
Složka Nalezeno : C:\Users\Sthep\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn
Složka Nalezeno : C:\Users\Sthep\AppData\Local\OpenCandy
Složka Nalezeno : C:\Users\Sthep\AppData\Local\PackageAware
Složka Nalezeno : C:\Users\Sthep\AppData\LocalLow\Conduit
Složka Nalezeno : C:\Users\Sthep\AppData\LocalLow\facemoods.com
Složka Nalezeno : C:\Users\Sthep\AppData\LocalLow\PriceGong
Složka Nalezeno : C:\Users\Sthep\AppData\Roaming\AVG Secure Search
Složka Nalezeno : C:\Users\Sthep\AppData\Roaming\Babylon
Složka Nalezeno : C:\Users\Sthep\AppData\Roaming\facemoods.com
Složka Nalezeno : C:\Users\Sthep\AppData\Roaming\Funmoods
Složka Nalezeno : C:\Users\Sthep\AppData\Roaming\Mozilla\Firefox\Profiles\a25z1crc.default\Conduit
Složka Nalezeno : C:\Users\Sthep\AppData\Roaming\Mozilla\Firefox\Profiles\a25z1crc.default\ConduitCommon
Složka Nalezeno : C:\Users\Sthep\AppData\Roaming\Mozilla\Firefox\Profiles\a25z1crc.default\CT1060933
Složka Nalezeno : C:\Users\Sthep\AppData\Roaming\Mozilla\Firefox\Profiles\a25z1crc.default\extensions\{1392b8d2-5c05-419f-a8f6-b9f15a596612}
Složka Nalezeno : C:\Users\Sthep\AppData\Roaming\Optimizer Pro
Soubor Nalezeno : C:\Program Files (x86)\Mozilla Firefox\plugins\npclntax_ClickPotatoLiteSA.dll
Soubor Nalezeno : C:\Program Files (x86)\Mozilla Firefox\searchplugins\avg-secure-search.xml
Soubor Nalezeno : C:\Program Files (x86)\Mozilla Firefox\searchplugins\babylon.xml
Soubor Nalezeno : C:\Program Files (x86)\Mozilla Firefox\searchplugins\crawlersrch.xml
Soubor Nalezeno : C:\Program Files (x86)\Mozilla Firefox\searchplugins\fcmdSrch.xml
Soubor Nalezeno : C:\Program Files (x86)\Mozilla Firefox\searchplugins\Mp3Tube.xml
Soubor Nalezeno : C:\Users\Sthep\AppData\Roaming\Mozilla\Firefox\Profiles\a25z1crc.default\bProtector_extensions.rdf
Soubor Nalezeno : C:\Users\Sthep\AppData\Roaming\Mozilla\Firefox\Profiles\a25z1crc.default\searchplugins\Askcom.xml
Soubor Nalezeno : C:\Users\Sthep\AppData\Roaming\Mozilla\Firefox\Profiles\a25z1crc.default\searchplugins\Babylon.xml
Soubor Nalezeno : C:\Users\Sthep\AppData\Roaming\Mozilla\Firefox\Profiles\a25z1crc.default\searchplugins\Conduit.xml
Soubor Nalezeno : C:\Users\Sthep\AppData\Roaming\Mozilla\Firefox\Profiles\a25z1crc.default\searchplugins\daemon-search.xml
Soubor Nalezeno : C:\Users\Sthep\AppData\Roaming\Mozilla\Firefox\Profiles\a25z1crc.default\searchplugins\icqplugin.xml
Soubor Nalezeno : C:\Users\Sthep\AppData\Roaming\Mozilla\Firefox\Profiles\a25z1crc.default\searchplugins\icqplugin-1.xml
Soubor Nalezeno : C:\Users\Sthep\AppData\Roaming\Mozilla\Firefox\Profiles\a25z1crc.default\searchplugins\icqplugin-10.xml
Soubor Nalezeno : C:\Users\Sthep\AppData\Roaming\Mozilla\Firefox\Profiles\a25z1crc.default\searchplugins\icqplugin-2.xml
Soubor Nalezeno : C:\Users\Sthep\AppData\Roaming\Mozilla\Firefox\Profiles\a25z1crc.default\searchplugins\icqplugin-3.xml
Soubor Nalezeno : C:\Users\Sthep\AppData\Roaming\Mozilla\Firefox\Profiles\a25z1crc.default\searchplugins\icqplugin-4.xml
Soubor Nalezeno : C:\Users\Sthep\AppData\Roaming\Mozilla\Firefox\Profiles\a25z1crc.default\searchplugins\icqplugin-5.xml
Soubor Nalezeno : C:\Users\Sthep\AppData\Roaming\Mozilla\Firefox\Profiles\a25z1crc.default\searchplugins\icqplugin-6.xml
Soubor Nalezeno : C:\Users\Sthep\AppData\Roaming\Mozilla\Firefox\Profiles\a25z1crc.default\searchplugins\icqplugin-7.xml
Soubor Nalezeno : C:\Users\Sthep\AppData\Roaming\Mozilla\Firefox\Profiles\a25z1crc.default\searchplugins\icqplugin-8.xml
Soubor Nalezeno : C:\Users\Sthep\AppData\Roaming\Mozilla\Firefox\Profiles\a25z1crc.default\searchplugins\icqplugin-9.xml
Soubor Nalezeno : C:\Users\Sthep\AppData\Roaming\Mozilla\Firefox\Profiles\a25z1crc.default\searchplugins\SweetIm.xml

***** [Registry] *****

Hodnota Nalezeno : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{32099AAC-C132-4136-9E9A-4E364A424E17}]
Hodnota Nalezeno : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{4B3803EA-5230-4DC3-A7FC-33638F3D3542}]
Hodnota Nalezeno : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Hodnota Nalezeno : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}]
Hodnota Nalezeno : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{EEE6C35B-6118-11DC-9C72-001320C79847}]
Hodnota Nalezeno : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{855F3B16-6D32-4FE6-8A56-BBB695989046}]
Hodnota Nalezeno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{32099AAC-C132-4136-9E9A-4E364A424E17}]
Klíe Nalezeno : HKCU\Software\AppDataLow\Software\AVG Security Toolbar
Klíe Nalezeno : HKCU\Software\AppDataLow\Software\Mp3Tube
Klíe Nalezeno : HKCU\Software\AppDataLow\Software\PriceGong
Klíe Nalezeno : HKCU\Software\BabSolution
Klíe Nalezeno : HKCU\Software\BI
Klíe Nalezeno : HKCU\Software\Conduit
Klíe Nalezeno : HKCU\Software\DataMngr
Klíe Nalezeno : HKCU\Software\Funmoods
Klíe Nalezeno : HKCU\Software\IGearSettings
Klíe Nalezeno : HKCU\Software\InstallCore
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{4B3803EA-5230-4DC3-A7FC-33638F3D3542}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D3D233D5-9F6D-436C-B6C7-E63F77503B30}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D7E97865-918F-41E4-9CD0-25AB1C574CE8}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{32099AAC-C132-4136-9E9A-4E364A424E17}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{46897C77-E7A6-4C33-BFFB-E9C2E2718942}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{64182481-4F71-486B-A045-B233BD0DA8FC}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{83FF80F4-8C74-4B80-B5BA-C8DDD434E5C4}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{855F3B16-6D32-4FE6-8A56-BBB695989046}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{DB4E9724-F518-4DFD-9C7C-78B52103CAB9}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35B-6118-11DC-9C72-001320C79847}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35C-6118-11DC-9C72-001320C79847}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{32099AAC-C132-4136-9E9A-4E364A424E17}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{64182481-4F71-486B-A045-B233BD0DA8FC}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{83FF80F4-8C74-4B80-B5BA-C8DDD434E5C4}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8736C681-37A0-40C6-A0F0-4C083409151C}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DB4E9724-F518-4DFD-9C7C-78B52103CAB9}
Klíe Nalezeno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F25AF245-4A81-40DC-92F9-E9021F207706}
Klíe Nalezeno : HKCU\Software\Optimizer Pro
Klíe Nalezeno : HKCU\Software\YahooPartnerToolbar
Klíe Nalezeno : HKCU\Software\5255ddd0b068bf42
Klíe Nalezeno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0D7562AE-8EF6-416D-A838-AB665251703A}
Klíe Nalezeno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Klíe Nalezeno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}
Klíe Nalezeno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}
Klíe Nalezeno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AD22EBAF-0D18-4FC7-90CC-5EA0ABBE9EB8}
Klíe Nalezeno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Klíe Nalezeno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{C04B7D22-5AEC-4561-8F49-27F6269208F6}
Klíe Nalezeno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Klíe Nalezeno : HKLM\Software\Babylon
Klíe Nalezeno : HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\AppID\{5B1881D1-D9C7-46DF-B041-1E593282C7D0}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\AppID\secman.DLL
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Prod.cap
Klíe Nalezeno : HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\TypeLib\{13ABD093-D46F-40DF-A608-47E162EC799D}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Klíe Nalezeno : HKLM\Software\Conduit
Klíe Nalezeno : HKLM\Software\DataMngr
Klíe Nalezeno : HKLM\Software\InstallCore
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Tracing\CToolbar_RASMANCS
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Tracing\facemoodssrv_RASAPI32
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Tracing\facemoodssrv_RASMANCS
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Tracing\SweetIM_RASAPI32
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Tracing\SweetIM_RASMANCS
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Tracing\SweetPacksUpdateManager_RASAPI32
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Tracing\SweetPacksUpdateManager_RASMANCS
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{4B3803EA-5230-4DC3-A7FC-33638F3D3542}
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{B58926D6-CFB0-45D2-9C28-4B5A0F0368AE}
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D3D233D5-9F6D-436C-B6C7-E63F77503B30}
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D7E97865-918F-41E4-9CD0-25AB1C574CE8}
Klíe Nalezeno : HKLM\Software\OpenCandy
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{813A22E0-3E2B-4188-9BDA-ECA9878B8D48}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{BCFF5F55-6F44-11D2-86F8-00104B265ED5}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\jmfkcklnlgedgbglfkkgedjfmejoahla
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Klíe Nalezeno : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\CLSID\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{813A22E0-3E2B-4188-9BDA-ECA9878B8D48}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Klíe Nalezeno : HKLM\SOFTWARE\Classes\Interface\{BCFF5F55-6F44-11D2-86F8-00104B265ED5}
Klíe Nalezeno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
Klíe Nalezeno : HKU\S-1-5-21-3477090561-2621128281-3737590920-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0D7562AE-8EF6-416D-A838-AB665251703A}
Klíe Nalezeno : HKU\S-1-5-21-3477090561-2621128281-3737590920-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Klíe Nalezeno : HKU\S-1-5-21-3477090561-2621128281-3737590920-1000\Software\Microsoft\Internet Explorer\SearchScopes\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}
Klíe Nalezeno : HKU\S-1-5-21-3477090561-2621128281-3737590920-1000\Software\Microsoft\Internet Explorer\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}
Klíe Nalezeno : HKU\S-1-5-21-3477090561-2621128281-3737590920-1000\Software\Microsoft\Internet Explorer\SearchScopes\{AD22EBAF-0D18-4FC7-90CC-5EA0ABBE9EB8}
Klíe Nalezeno : HKU\S-1-5-21-3477090561-2621128281-3737590920-1000\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Klíe Nalezeno : HKU\S-1-5-21-3477090561-2621128281-3737590920-1000\Software\Microsoft\Internet Explorer\SearchScopes\{C04B7D22-5AEC-4561-8F49-27F6269208F6}
Klíe Nalezeno : HKU\S-1-5-21-3477090561-2621128281-3737590920-1000\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}

***** [Internetové prohlížeee] *****

-\\ Internet Explorer v10.0.9200.16611

[HKCU\Software\Microsoft\Internet Explorer\Main - ICQ Search] = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd

-\\ Mozilla Firefox v [Nemohu získat verzi]

Soubor : C:\Users\Sthep\AppData\Roaming\Mozilla\Firefox\Profiles\a25z1crc.default\prefs.js

Nalezeno : user_pref("browser.newtab.url", "hxxp://search.babylon.com/?affID=120316&babsrc=NT_ss&mntrId=9C39F8D[...]
Nalezeno : user_pref("browser.search.defaultengine", "Ask.com");
Nalezeno : user_pref("browser.search.defaultenginename", "Ask.com");
Nalezeno : user_pref("browser.search.defaultthis.engineName", "Freecorder Customized Web Search");
Nalezeno : user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT1060933&Sea[...]
Nalezeno : user_pref("browser.search.order.1", "Ask.com");
Nalezeno : user_pref("browser.search.selectedEngine", "Ask.com");
Nalezeno : user_pref("browser.startup.homepage", "hxxp://search.babylon.com/?affID=120316&babsrc=HP_ss&mntrId=9[...]
Nalezeno : user_pref("CommunityToolbar.alert.alertDialogsGetterLastCheckTime", "Sat Jul 16 2011 09:48:21 GMT+02[...]
Nalezeno : user_pref("CommunityToolbar.alert.alertInfoInterval", 60);
Nalezeno : user_pref("CommunityToolbar.alert.alertInfoLastCheckTime", "Sun Dec 04 2011 13:41:17 GMT+0100");
Nalezeno : user_pref("CommunityToolbar.alert.clientsServerUrl", "hxxp://alert.client.conduit.com");
Nalezeno : user_pref("CommunityToolbar.alert.locale", "en");
Nalezeno : user_pref("CommunityToolbar.alert.loginIntervalMin", 1440);
Nalezeno : user_pref("CommunityToolbar.alert.loginLastCheckTime", "Sun Dec 04 2011 13:41:06 GMT+0100");
Nalezeno : user_pref("CommunityToolbar.alert.loginLastUpdateTime", "1313487611");
Nalezeno : user_pref("CommunityToolbar.alert.messageShowTimeSec", 20);
Nalezeno : user_pref("CommunityToolbar.alert.servicesServerUrl", "hxxp://alert.services.conduit.com");
Nalezeno : user_pref("CommunityToolbar.alert.showTrayIcon", false);
Nalezeno : user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300);
Nalezeno : user_pref("CommunityToolbar.alert.userId", "{0cf5aef7-142f-49d6-b875-591ff0570d58}");
Nalezeno : user_pref("CommunityToolbar.CantToolbarBeEngineOwner", "");
Nalezeno : user_pref("CommunityToolbar.ConduitHomepagesList", "hxxp://search.conduit.com/?ctid=CT1060933&Search[...]
Nalezeno : user_pref("CommunityToolbar.ConduitSearchList", "Freecorder Customized Web Search,Freecorder Customi[...]
Nalezeno : user_pref("CommunityToolbar.EngineOwner", "");
Nalezeno : user_pref("CommunityToolbar.EngineOwnerGuid", "{1392b8d2-5c05-419f-a8f6-b9f15a596612}");
Nalezeno : user_pref("CommunityToolbar.EngineOwnerToolbarId", "freecorder");
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-ser ... =CT1060933", [...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-serv ... tenApps&lo[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-serv ... tenApps&lo[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-serv ... erApps&loc[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-serv ... erApps&loc[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-serv ... redApps&lo[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-serv ... redApps&lo[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-serv ... lbar&local[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-serv ... lbar&local[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-ser ... rt/dlg.pkg", "\[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-s ... g?ver=3.18[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/ ... =CT1060933",[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit. ... /CT1060933[...]
Nalezeno : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-serv ... cale=en-us", "\"[...]
Nalezeno : user_pref("CommunityToolbar.globalUserId", "4fed93a7-0329-4814-8741-0f1a4577c64d");
Nalezeno : user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true);
Nalezeno : user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true);
Nalezeno : user_pref("CommunityToolbar.keywordURLSelectedCTID", "CT1060933");
Nalezeno : user_pref("CommunityToolbar.LatestLibsPath", "file:///C:\\Users\\Sthep\\AppData\\Roaming\\Mozilla\\F[...]
Nalezeno : user_pref("CommunityToolbar.LatestToolbarVersionInstalled", "3.18.0.7");
Nalezeno : user_pref("CommunityToolbar.notifications.alertDialogsGetterLastCheckTime", "Fri Apr 12 2013 01:23:3[...]
Nalezeno : user_pref("CommunityToolbar.notifications.alertEnabled", false);
Nalezeno : user_pref("CommunityToolbar.notifications.alertInfoInterval", 1440);
Nalezeno : user_pref("CommunityToolbar.notifications.alertInfoLastCheckTime", "Fri Apr 12 2013 01:23:41 GMT+020[...]
Nalezeno : user_pref("CommunityToolbar.notifications.clientsServerUrl", "hxxp://alert.client.conduit.com");
Nalezeno : user_pref("CommunityToolbar.notifications.locale", "en");
Nalezeno : user_pref("CommunityToolbar.notifications.loginIntervalMin", 1440);
Nalezeno : user_pref("CommunityToolbar.notifications.loginLastCheckTime", "Fri Apr 12 2013 01:23:33 GMT+0200");
Nalezeno : user_pref("CommunityToolbar.notifications.loginLastUpdateTime", "1313487611");
Nalezeno : user_pref("CommunityToolbar.notifications.messageShowTimeSec", 20);
Nalezeno : user_pref("CommunityToolbar.notifications.servicesServerUrl", "hxxp://alert.services.conduit.com");
Nalezeno : user_pref("CommunityToolbar.notifications.showTrayIcon", false);
Nalezeno : user_pref("CommunityToolbar.notifications.userCloseIntervalMin", 300);
Nalezeno : user_pref("CommunityToolbar.notifications.userId", "6e2a31ee-e8b3-47b0-9b62-00aa70393d1d");
Nalezeno : user_pref("CommunityToolbar.originalHomepage", "hxxp://search.babylon.com/?affID=120316&babsrc=HP_ss[...]
Nalezeno : user_pref("CommunityToolbar.originalSearchEngine", "Search the web (Babylon)");
Nalezeno : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "");
Nalezeno : user_pref("CommunityToolbar.ToolbarsList", "CT1060933");
Nalezeno : user_pref("CommunityToolbar.ToolbarsList2", "CT1060933");
Nalezeno : user_pref("CommunityToolbar.ToolbarsList4", "CT1060933");
Nalezeno : user_pref("CT1060933..clientLogIsEnabled", false);
Nalezeno : user_pref("CT1060933..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...]
Nalezeno : user_pref("CT1060933..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...]
Nalezeno : user_pref("CT1060933.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
Nalezeno : user_pref("CT1060933.alertChannelId", "15651");
Nalezeno : user_pref("CT1060933.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);
Nalezeno : user_pref("CT1060933.approveUntrustedApps", false);
Nalezeno : user_pref("CT1060933.backendstorage./9b+7e+x305", "2423");
Nalezeno : user_pref("CT1060933.backendstorage./9b+7e,x305", "2423");
Nalezeno : user_pref("CT1060933.backendstorage./9b+7e-x305", "2423");
Nalezeno : user_pref("CT1060933.backendstorage./9b+7e.:2z527", "2423");
Nalezeno : user_pref("CT1060933.backendstorage./9b+7e.x305", "2423");
Nalezeno : user_pref("CT1060933.backendstorage./9b+7e/x305", "2423");
Nalezeno : user_pref("CT1060933.backendstorage./9b+7e06cg5el8:", "6E6D6B6D6C7273757374");
Nalezeno : user_pref("CT1060933.backendstorage./9b+7e06cg5el;8i:k", "247E2D2F226A747371737278797B797A242F4B4947[...]
Nalezeno : user_pref("CT1060933.backendstorage./9b+7e0x305", "2423");
Nalezeno : user_pref("CT1060933.backendstorage./9b+7e1x305", "2423");
Nalezeno : user_pref("CT1060933.backendstorage./9b+7e2x305", "2423");
Nalezeno : user_pref("CT1060933.backendstorage./9b+7e3x305", "2423");
Nalezeno : user_pref("CT1060933.backendstorage./9b+7e4x305", "2423");
Nalezeno : user_pref("CT1060933.backendstorage./9b+7e5x305", "2423");
Nalezeno : user_pref("CT1060933.backendstorage./9b+7e6x305", "2423");
Nalezeno : user_pref("CT1060933.backendstorage./9b+7e7x305", "2423");
Nalezeno : user_pref("CT1060933.backendstorage./9b+7e8x305", "2423");
Nalezeno : user_pref("CT1060933.backendstorage./9b+7e9x305", "2423");
Nalezeno : user_pref("CT1060933.backendstorage./9b+7e:x305", "2423");
Nalezeno : user_pref("CT1060933.backendstorage./9b+7e;x305", "2423");
Nalezeno : user_pref("CT1060933.backendstorage./9b+7e<x305", "2423");
Nalezeno : user_pref("CT1060933.backendstorage./9b+7e=x305", "2423");
Nalezeno : user_pref("CT1060933.backendstorage./9b+7e>x305", "2423");
Nalezeno : user_pref("CT1060933.backendstorage./9b+7e?x305", "2423");
Nalezeno : user_pref("CT1060933.backendstorage./9b+7e@x305", "2423");
Nalezeno : user_pref("CT1060933.backendstorage./9b+7eax305", "2423");
Nalezeno : user_pref("CT1060933.backendstorage./9b+7ebe3g=;d9n9=d", "372C2D326975762E3A3C7B3A39434A494841434B26[...]
Nalezeno : user_pref("CT1060933.backendstorage./9b+7ebx305", "2423");
Nalezeno : user_pref("CT1060933.backendstorage./9b+7ecx305", "2423");
Nalezeno : user_pref("CT1060933.backendstorage./9b+7edx305", "2423");
Nalezeno : user_pref("CT1060933.backendstorage./9b+7etx305", "2423");
Nalezeno : user_pref("CT1060933.backendstorage./9b-0?3g>d", "6B676A726A726C727A6F45787520767D797E257C23207C2A22[...]
Nalezeno : user_pref("CT1060933.backendstorage./9b-0?3g@6:5;", "");
Nalezeno : user_pref("CT1060933.backendstorage./9b-0?3gfa7ef", "2B2E2C3D");
Nalezeno : user_pref("CT1060933.backendstorage./9b-3=3eccja=f>", "247E333D2C452F4135276F297B7E7D21202F26313E424[...]
Nalezeno : user_pref("CT1060933.backendstorage./9b/>01=9a6k6<im;krie@pdawm", "6E6A68707374757677");
Nalezeno : user_pref("CT1060933.backendstorage./9b3=>@44i48?", "372C2D326975763342363341484777213F3E484F4E4D464[...]
Nalezeno : user_pref("CT1060933.backendstorage./9b5ba==9cjag", "393D3D6C734044407A7175764676477678207E4E24");
Nalezeno : user_pref("CT1060933.backendstorage./9b6b11g4c56b>f;p;anr@p", "6E6D6B6D6C727370757679797B");
Nalezeno : user_pref("CT1060933.backendstorage./9b9643g3/9e", "6A");
Nalezeno : user_pref("CT1060933.backendstorage./9b;45>:bi9i7ie", "2B2E2C3D");
Nalezeno : user_pref("CT1060933.backendstorage./9b<:222h64<", "393F352F3E");
Nalezeno : user_pref("CT1060933.backendstorage./9b<:222h64<l8daj", "6D70706F7674717976772A7878727C79757C7D");
Nalezeno : user_pref("CT1060933.backendstorage./9b=+03eh8h8j?:", "4443");
Nalezeno : user_pref("CT1060933.backendstorage./9b?+e2a52d8", "372C2D326975762E3A3C7B3A39434A494841434B26514649[...]
Nalezeno : user_pref("CT1060933.backendstorage./9b?b0d:8aj62<h", "6D");
Nalezeno : user_pref("CT1060933.backendstorage./9ba@0<0bi6a7gn:6@l?", "6E6B");
Nalezeno : user_pref("CT1060933.backendstorage.cb_experience_000", "31");
Nalezeno : user_pref("CT1060933.backendstorage.cb_firstuse0100", "31");
Nalezeno : user_pref("CT1060933.backendstorage.cb_user_id_000", "43423931313334333332343236375F3133363537323236[...]
Nalezeno : user_pref("CT1060933.backendstorage.cbfirsttime", "4672692041707220313220323031332030313A32333A34302[...]
Nalezeno : user_pref("CT1060933.backendstorage.mam_gk_appsdata", "7B2261707073223A5B7B226964223A225072696365476[...]
Nalezeno : user_pref("CT1060933.backendstorage.mam_gk_appsdefaultenabled", "6E756C6C");
Nalezeno : user_pref("CT1060933.backendstorage.mam_gk_appstate_couponbuddy", "6F6E");
Nalezeno : user_pref("CT1060933.backendstorage.mam_gk_appstate_pricegong", "6F6E");
Nalezeno : user_pref("CT1060933.backendstorage.mam_gk_appstatereporttime", "31333635373232363138373337");
Nalezeno : user_pref("CT1060933.backendstorage.mam_gk_configuration", "7B22636F6E66696775726174696F6E223A5B7B22[...]
Nalezeno : user_pref("CT1060933.backendstorage.mam_gk_currentversion", "312E342E342E36");
Nalezeno : user_pref("CT1060933.backendstorage.mam_gk_eventscache", "7B2238363839346133332D353861662D343939312D[...]
Nalezeno : user_pref("CT1060933.backendstorage.mam_gk_first_time", "31");
Nalezeno : user_pref("CT1060933.backendstorage.mam_gk_gadgetopen", "30");
Nalezeno : user_pref("CT1060933.backendstorage.mam_gk_lastlogintime", "31333635373232363138343435");
Nalezeno : user_pref("CT1060933.backendstorage.mam_gk_localization", "7B22676164676574436F6E74656E74506F6C69637[...]
Nalezeno : user_pref("CT1060933.backendstorage.mam_gk_settings1.4.4.6", "7B22537461747573223A227375636365656465[...]
Nalezeno : user_pref("CT1060933.backendstorage.mam_gk_showclosebutton", "74727565");
Nalezeno : user_pref("CT1060933.backendstorage.mam_gk_showwelcomegadget", "66616C7365");
Nalezeno : user_pref("CT1060933.backendstorage.mam_gk_userid", "30333862383936392D616137632D343864662D623037662[...]
Nalezeno : user_pref("CT1060933.backendstorage.pg_enable", "74727565");
Nalezeno : user_pref("CT1060933.backendstorage.printitgreenstatus", "74727565");
Nalezeno : user_pref("CT1060933.backendstorage.url_history0001", "687474703A2F2F7777772E676F6F676C652E637A2F616[...]
Nalezeno : user_pref("CT1060933.BrowserCompStateIsOpen_1000515", true);
Nalezeno : user_pref("CT1060933.BrowserCompStateIsOpen_129686665230467549", true);
Nalezeno : user_pref("CT1060933.BrowserCompStateIsOpen_130040833450137909", true);
Nalezeno : user_pref("CT1060933.BrowserCompStateIsOpen_130068876516309164", true);
Nalezeno : user_pref("CT1060933.components.1000082", false);
Nalezeno : user_pref("CT1060933.components.1000515", false);
Nalezeno : user_pref("CT1060933.components.129272674122038321", false);
Nalezeno : user_pref("CT1060933.CT1060933", "CT1060933");
Nalezeno : user_pref("CT1060933.CurrentServerDate", "12-4-2013");
Nalezeno : user_pref("CT1060933.DialogsAlignMode", "LTR");
Nalezeno : user_pref("CT1060933.DialogsGetterLastCheckTime", "Fri Apr 12 2013 01:23:33 GMT+0200");
Nalezeno : user_pref("CT1060933.DownloadReferralCookieData", "");
Nalezeno : user_pref("CT1060933.DSInstall", true);
Nalezeno : user_pref("CT1060933.FirstServerDate", "12-4-2013");
Nalezeno : user_pref("CT1060933.FirstTime", true);
Nalezeno : user_pref("CT1060933.FirstTimeFF3", true);
Nalezeno : user_pref("CT1060933.FirstTimeHiddenVer", true);
Nalezeno : user_pref("CT1060933.FixPageNotFoundErrors", true);
Nalezeno : user_pref("CT1060933.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.c[...]
Nalezeno : user_pref("CT1060933.globalFirstTimeInfoLastCheckTime", "Fri Apr 12 2013 01:23:35 GMT+0200");
Nalezeno : user_pref("CT1060933.GroupingServerCheckInterval", 1440);
Nalezeno : user_pref("CT1060933.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
Nalezeno : user_pref("CT1060933.HasUserGlobalKeys", true);
Nalezeno : user_pref("CT1060933.HomepageBeforeUnload", "hxxp://search.babylon.com/?affID=120316&babsrc=HP_ss&mn[...]
Nalezeno : user_pref("CT1060933.homepageProtectorEnableByLogin", true);
Nalezeno : user_pref("CT1060933.HomePageProtectorEnabled", false);
Nalezeno : user_pref("CT1060933.HPInstall", true);
Nalezeno : user_pref("CT1060933.initDone", true);
Nalezeno : user_pref("CT1060933.Initialize", true);
Nalezeno : user_pref("CT1060933.InitializeCommonPrefs", true);
Nalezeno : user_pref("CT1060933.InstallationAndCookieDataSentCount", 1);
Nalezeno : user_pref("CT1060933.InstallationType", "Unknown");
Nalezeno : user_pref("CT1060933.InstalledDate", "Fri Apr 12 2013 01:23:47 GMT+0200");
Nalezeno : user_pref("CT1060933.InvalidateCache", false);
Nalezeno : user_pref("CT1060933.isAppTrackingManagerOn", false);
Nalezeno : user_pref("CT1060933.isFirstRadioInstallation", false);
Nalezeno : user_pref("CT1060933.IsGrouping", false);
Nalezeno : user_pref("CT1060933.IsInitSetupIni", true);
Nalezeno : user_pref("CT1060933.IsMulticommunity", false);
Nalezeno : user_pref("CT1060933.IsOpenThankYouPage", true);
Nalezeno : user_pref("CT1060933.IsOpenUninstallPage", true);
Nalezeno : user_pref("CT1060933.IsProtectorsInit", true);
Nalezeno : user_pref("CT1060933.LanguagePackLastCheckTime", "Fri Apr 12 2013 01:23:35 GMT+0200");
Nalezeno : user_pref("CT1060933.LanguagePackReloadIntervalMM", 1440);
Nalezeno : user_pref("CT1060933.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...]
Nalezeno : user_pref("CT1060933.LastLogin_3.18.0.7", "Fri Apr 12 2013 01:23:51 GMT+0200");
Nalezeno : user_pref("CT1060933.LatestVersion", "3.18.0.7");
Nalezeno : user_pref("CT1060933.Locale", "en-us");
Nalezeno : user_pref("CT1060933.MCDetectTooltipHeight", "83");
Nalezeno : user_pref("CT1060933.MCDetectTooltipShow", false);
Nalezeno : user_pref("CT1060933.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
Nalezeno : user_pref("CT1060933.MCDetectTooltipWidth", "295");
Nalezeno : user_pref("CT1060933.myStuffEnabled", true);
Nalezeno : user_pref("CT1060933.MyStuffEnabledAtInstallation", true);
Nalezeno : user_pref("CT1060933.myStuffPublihserMinWidth", 400);
Nalezeno : user_pref("CT1060933.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...]
Nalezeno : user_pref("CT1060933.myStuffServiceIntervalMM", 1440);
Nalezeno : user_pref("CT1060933.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...]
Nalezeno : user_pref("CT1060933.navigateToUrlOnSearch", false);
Nalezeno : user_pref("CT1060933.OriginalFirstVersion", "3.18.0.7");
Nalezeno : user_pref("CT1060933.RadioIsPodcast", false);
Nalezeno : user_pref("CT1060933.RadioLastCheckTime", "Fri Apr 12 2013 01:23:32 GMT+0200");
Nalezeno : user_pref("CT1060933.RadioLastUpdateIPServer", "0");
Nalezeno : user_pref("CT1060933.RadioLastUpdateServer", "129326918102570000");
Nalezeno : user_pref("CT1060933.RadioMediaID", "21504191");
Nalezeno : user_pref("CT1060933.RadioMediaType", "Media Player");
Nalezeno : user_pref("CT1060933.RadioMenuSelectedID", "EBRadioMenu_CT106093321504191");
Nalezeno : user_pref("CT1060933.RadioShrinkedFromSetup", false);
Nalezeno : user_pref("CT1060933.RadioStationName", "KFOG");
Nalezeno : user_pref("CT1060933.RadioStationURL", "hxxp://live.cumulusstreaming.com/KFOG-FM");
Nalezeno : user_pref("CT1060933.revertSettingsEnabled", true);
Nalezeno : user_pref("CT1060933.SavedHomepage", "hxxp://search.babylon.com/?affID=120316&babsrc=HP_ss&mntrId=9C[...]
Nalezeno : user_pref("CT1060933.SearchCaption", "Freecorder Customized Web Search");
Nalezeno : user_pref("CT1060933.SearchFromAddressBarIsInit", true);
Nalezeno : user_pref("CT1060933.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT106[...]
Nalezeno : user_pref("CT1060933.SearchInNewTabEnabled", true);
Nalezeno : user_pref("CT1060933.SearchInNewTabIntervalMM", 1440);
Nalezeno : user_pref("CT1060933.SearchInNewTabLastCheckTime", "Fri Apr 12 2013 01:23:51 GMT+0200");
Nalezeno : user_pref("CT1060933.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...]
Nalezeno : user_pref("CT1060933.searchProtectorDialogDelayInSec", 10);
Nalezeno : user_pref("CT1060933.searchProtectorEnableByLogin", true);
Nalezeno : user_pref("CT1060933.SearchProtectorEnabled", true);
Nalezeno : user_pref("CT1060933.SearchProtectorToolbarDisabled", false);
Nalezeno : user_pref("CT1060933.SendProtectorDataViaLogin", true);
Nalezeno : user_pref("CT1060933.ServiceMapLastCheckTime", "Fri Apr 12 2013 01:23:33 GMT+0200");
Nalezeno : user_pref("CT1060933.SettingsLastCheckTime", "Fri Apr 12 2013 01:23:32 GMT+0200");
Nalezeno : user_pref("CT1060933.SettingsLastUpdate", "1365667940");
Nalezeno : user_pref("CT1060933.TBHomePageUrl", "hxxp://search.conduit.com/?ctid=CT1060933&SearchSource=13");
Nalezeno : user_pref("CT1060933.testingCtid", "");
Nalezeno : user_pref("CT1060933.ThirdPartyComponentsInterval", 504);
Nalezeno : user_pref("CT1060933.ThirdPartyComponentsLastCheck", "Fri Apr 12 2013 01:23:31 GMT+0200");
Nalezeno : user_pref("CT1060933.ThirdPartyComponentsLastUpdate", "1331805997");
Nalezeno : user_pref("CT1060933.toolbarAppMetaDataLastCheckTime", "Fri Apr 12 2013 01:23:35 GMT+0200");
Nalezeno : user_pref("CT1060933.toolbarContextMenuLastCheckTime", "Fri Apr 12 2013 01:23:35 GMT+0200");
Nalezeno : user_pref("CT1060933.ToolbarShrinkedFromSetup", false);
Nalezeno : user_pref("CT1060933.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,clien[...]
Nalezeno : user_pref("CT1060933.TrusteLinkUrl", "hxxp://trust.conduit.com/CT1060933");
Nalezeno : user_pref("CT1060933.usagesFlag", 2);
Nalezeno : user_pref("CT1060933.UserID", "UN96462812027965579");
Nalezeno : user_pref("CT1060933.ValidationData_Toolbar", 2);
Nalezeno : user_pref("extensions.asktb.ff-original-keyword-url", "hxxp://search.conduit.com/ResultsExt.aspx?cti[...]

-\\ Google Chrome v27.0.1453.116

Soubor : C:\Users\Sthep\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] Soubor je eistý.

*************************

AdwCleaner[R1].txt - [36192 octets] - [06/07/2013 12:15:18]

########## EOF - C:\AdwCleaner[R1].txt - [36253 octets] ##########

[Valder]

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Verze: v2013.07.06.03

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 10.0.9200.16618
Sthep :: STHEP-PC [administrátor]

6.7.2013 12:19:57
MBAM-log-2013-07-06 (12-25-02).txt

Typ: Rychlá kontrola
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 242694
Uplynulý čas: 4 minut, 54 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 5
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{46897C77-E7A6-4C33-BFFB-E9C2E2718942} (Adware.Mp3Tube) -> Nebyla provedena žádná instrukce.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{B58926D6-CFB0-45D2-9C28-4B5A0F0368AE} (Adware.ClickPotato) -> Nebyla provedena žádná instrukce.
HKCU\SOFTWARE\Funmoods (PUP.FunMoods) -> Nebyla provedena žádná instrukce.
HKCU\SOFTWARE\InstallCore\funmoods (PUP.FunMoods) -> Nebyla provedena žádná instrukce.
HKLM\SOFTWARE\InstallCore\funmoods (PUP.FunMoods) -> Nebyla provedena žádná instrukce.

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 2
C:\Program Files (x86)\Mozilla Firefox\plugins\npclntax_ClickPotatoLiteSA.dll (Adware.ClickPotato) -> Nebyla provedena žádná instrukce.
C:\Program Files (x86)\Mozilla Firefox\searchplugins\Mp3Tube.xml (Adware.Mp3Tube) -> Nebyla provedena žádná instrukce.

(konec)

[jaro3]

Spusť znovu AdwCleaner (u Windows Vista či Windows7, klikni na AdwCleaner pravým a vyber „Spustit jako správce“
Klikni na „ Vymazat“
Program provede opravu, po automatickém restartu neukáže log (C:\AdwCleaner [S?].txt) , jeho obsah sem celý vlož.

. Takže spusť znovu MbAM a dej Scan
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Ukaž výsledky
- ujisti se že máš zatrhnuté všechny vypsané nálezy a klikni na tlačítko Odstranit označené
- když skončí odstraňování tak se ti zobrazí log, tak ho sem dej.
- pak zvol v programu OK a pak program ukonči přes Exit
Můžeš sem pak vložit nový log z MbAM.

Stáhni si Junkware Removal Tool

na svojí plochu.

Deaktivuj si svůj antivirový program. Pravým tl. myši klikni na JRT.exe a vyber „spustit jako správce“. Pro pokračování budeš vyzván ke stisknutí jakékoliv klávesy. Na nějakou klikni.
Začne skenování programu. Skenování může trvat dloho , podle množství nákaz. Po ukončení skenu se objeví log (JRT.txt) , který se uloží na ploše.
Zkopíruj sem prosím celý jeho obsah.

Stáhni si RogueKiller
32bit.:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
64bit.:
http://www.sur-la-toile.com/RogueKiller ... lerX64.exe
na svojí plochu.
- Zavři všechny ostatní programy a prohlížeče.
- Pro OS Vista a win7 spusť program RogueKiller.exe jako správce , u XP poklepáním.
- počkej až skončí Prescan -vyhledávání škodlivých procesů.
- Zkontroluj , zda máš zaškrtnuto:
Kontrola MBR
Kontrola Faked
Antirootkit
-Potom klikni na „Prohledat“.
- Program skenuje procesy PC. Po proskenování klikni na „Zpráva“celý obsah logu sem zkopíruj.
Pokud je program blokován , zkus ho spustit několikrát. Pokud dále program nepůjde spustit a pracovat, přejmenuj ho na winlogon.exe.