prosze o sprawdzenie log otl.txt

Wszystko co dotyczy bezpieczeństwa systemów oraz walki z malware, w szczególności analiza logów

Awatar użytkownika
XMan

Globalny Moderator
Posty: 13385
Rejestracja: 30 lis 2008, 00:40

prosze o sprawdzenie log otl.txt

Post25 lip 2012, 18:10

bezpieczenstwo/regulamin-bezpiecze-stwa-t19001.html
Proszę dodatkowo opisać dokładnie z czym masz problem ?
Kto pyta - nie błądzi, kto szuka - znajduje.
Obrazek
Dostępne tylko dla zarejestrowanych użytkowników

Awatar użytkownika
djkamil09061991

Globalny Moderator
Posty: 8250
Rejestracja: 18 lut 2009, 11:54
Lokalizacja: Wrocław
Kontaktowanie:

prosze o sprawdzenie log otl.txt

Post25 lip 2012, 18:11

Oraz popraw drugi link bo log sie nie pokazuje.

Awatar użytkownika
kominekl

Ekspert
Posty: 5855
Rejestracja: 27 lis 2011, 14:25
Kontaktowanie:

prosze o sprawdzenie log otl.txt

Post25 lip 2012, 21:42

"{79155F2B-9895-49D7-8612-D92580E0DE5B}" = Bonjour
"BearShare 2 MediaBar" = MediaBar
"DVDVideoSoft Toolbar" = DVDVideoSoft Toolbar
"DVDVideoSoftTB Toolbar" = DVDVideoSoftTB Toolbar
"McAfee Security Scan" = McAfee Security Scan Plus
"Microsoft Security Client" = Microsoft Security Essentials
"MSC" = McAfee SecurityCenter
"Yahoo! BrowserPlus" = Yahoo! BrowserPlus 2.9.8


Odinstaluj to oprogramowanie.

Logi.


Uruchom OTL -> w oknie Własne opcje skanowania/skrypt wklej:

:OTL

:Files
c:\program files\common files\mcafee
c:\users\kominek\appdata\local\temp

:Reg
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]

:Commands
[emptyflash]
[clearallrestorepoints]
[emptytemp]


Klikasz Wykonaj skrypt. Dajesz log z usuwania. Następnie podaj log z ADWCleaner (z opcji Delete) -> Dostępne tylko dla zarejestrowanych użytkowników + log z TDSSKiller -> http://www.hotfix.pl/instrukcja-obslugi ... r-a341.htm + nowe logi z OTL -> http://www.hotfix.pl/obsluga-programu-otl-a143.htm.

Optymalizacja.


Jeśli jej pragniesz to podaj log z Autoruns -> http://www.hotfix.pl/optymalizacja-auto ... s-a128.htm.
Kiedy komputery staną się twoim jedynym życiem, jedynym totemem odstraszającym klątwę nudy, wtedy prędzej czy później granica między tymi dwoma wymiarami zniknie i postacie z Błękitnej Pustki zaczną pojawiać się w Realu. Czasem są twoimi przyjaciółmi. A czasem nie.

komalex

Użytkownik
Posty: 15
Rejestracja: 25 lip 2012, 14:03

prosze o sprawdzenie log otl.txt

Post26 lip 2012, 17:38

To logi ze skryptu

All processes killed
========== OTL ==========
========== FILES ==========
File\Folder c:\program files\common files\mcafee not found.
c:\users\kominek\appdata\local\Temp\WPDNSE folder moved successfully.
c:\users\kominek\appdata\local\Temp\BTN%Copy%1\BTN%Copy%2 folder moved successfully.
c:\users\kominek\appdata\local\Temp\BTN%Copy%1 folder moved successfully.
c:\users\kominek\appdata\local\Temp folder moved successfully.
========== REGISTRY ==========
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\ not found.
========== COMMANDS ==========

[EMPTYFLASH]

User: Administrator

User: Administrator.kominek-PC
->Flash cache emptied: 198 bytes

User: Administrator.kominek-PC.000
->Flash cache emptied: 833 bytes

User: All Users

User: Default
->Flash cache emptied: 198 bytes

User: Default User
->Flash cache emptied: 0 bytes

User: kominek
->Flash cache emptied: 28340 bytes

User: Public

Total Flash Files Cleaned = 0,00 mb

System Restore Service not available.

[EMPTYTEMP]

User: Administrator

User: Administrator.kominek-PC
->Temp folder emptied: 49742 bytes
->Temporary Internet Files folder emptied: 32768 bytes
->Flash cache emptied: 0 bytes

User: Administrator.kominek-PC.000
->Temp folder emptied: 1433582 bytes
->Temporary Internet Files folder emptied: 1648341 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 54953440 bytes
->Google Chrome cache emptied: 7056459 bytes
->Flash cache emptied: 0 bytes

User: All Users

User: Default
->Temp folder emptied: 16384 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Flash cache emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: kominek
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 166440997 bytes
->Java cache emptied: 40103007 bytes
->FireFox cache emptied: 249440141 bytes
->Google Chrome cache emptied: 1474790348 bytes
->Apple Safari cache emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Public

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 14740727 bytes
RecycleBin emptied: 67185771 bytes

Total Files Cleaned = 1 982,00 mb


OTL by OldTimer - Version 3.2.54.1 log created on 07262012_151115

Files\Folders moved on Reboot...
File\Folder C:\Windows\temp\mcafee_9Shm91zpr9eCucB not found!
File\Folder C:\Windows\temp\sqlite_aEqUOoaORFJ0byr not found!
File\Folder C:\Windows\temp\sqlite_AHkuad02BxR1tFh not found!
File\Folder C:\Windows\temp\sqlite_SyE35qai1mU1B6a not found!

PendingFileRenameOperations files...
File C:\Windows\temp\mcafee_9Shm91zpr9eCucB not found!
File C:\Windows\temp\sqlite_aEqUOoaORFJ0byr not found!
File C:\Windows\temp\sqlite_AHkuad02BxR1tFh not found!
File C:\Windows\temp\sqlite_SyE35qai1mU1B6a not found!

Registry entries deleted on Reboot...

-- 26 lip 2012, 17:38 --

To log z adw cleaner

# AdwCleaner v1.703 - Logfile created 07/26/2012 at 16:31:25
# Updated 20/07/2012 by Xplode
# Operating system : Windows Vista (TM) Home Premium Service Pack 2 (32 bits)
# User : kominek - KOMINEK-PC
# Running from : C:\Users\kominek\Downloads\adwcleaner.exe
# Option [Delete]


***** [Services] *****


***** [Files / Folders] *****

Folder Deleted : C:\Users\kominek\AppData\Local\OpenCandy
Folder Deleted : C:\Users\kominek\AppData\LocalLow\Conduit
Folder Deleted : C:\Users\kominek\AppData\Roaming\Mozilla\Firefox\Profiles\z3j1m9ub.default\Conduit
Folder Deleted : C:\Users\kominek\AppData\Roaming\Mozilla\Firefox\Profiles\z3j1m9ub.default\ConduitCommon
Folder Deleted : C:\Users\kominek\AppData\Roaming\Mozilla\Firefox\Profiles\z3j1m9ub.default\ConduitEngine
Folder Deleted : C:\Users\kominek\AppData\Roaming\Mozilla\Firefox\Profiles\z3j1m9ub.default\FCTB
Folder Deleted : C:\Users\kominek\AppData\Roaming\Mozilla\Firefox\Profiles\z3j1m9ub.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}
Folder Deleted : C:\Users\kominek\AppData\Roaming\Mozilla\Firefox\Profiles\z3j1m9ub.default\extensions\engine@conduit.com
Folder Deleted : C:\ProgramData\~0
Folder Deleted : C:\Program Files\Conduit
File Deleted : C:\Users\kominek\AppData\Roaming\Mozilla\Firefox\Profiles\z3j1m9ub.default\searchplugins\Ask.xml
File Deleted : C:\Users\kominek\AppData\Roaming\Mozilla\Firefox\Profiles\z3j1m9ub.default\searchplugins\Askcom.xml
File Deleted : C:\Users\kominek\AppData\Roaming\Mozilla\Firefox\Profiles\z3j1m9ub.default\searchplugins\Conduit.xml
File Deleted : C:\Program Files\Mozilla FireFox\Components\AskHPRFF.js
File Deleted : C:\Program Files\Mozilla FireFox\Components\AskSearch.js

***** [Registry] *****

[*] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT2269050
Key Deleted : HKCU\Software\AppDataLow\Software\Conduit
Key Deleted : HKCU\Software\DataMngr
Key Deleted : HKCU\Software\Headlight
Key Deleted : HKCU\Software\Softonic
Key Deleted : HKLM\SOFTWARE\Conduit

***** [Registre - GUID] *****

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{0974BA1E-64EC-11DE-B2A5-E43756D89593}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{CF739809-1C6C-47C0-85B9-569DBB141420}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{CF739809-1C6C-47C0-85B9-569DBB141420}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0974BA1E-64EC-11DE-B2A5-E43756D89593}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{0974BA1E-64EC-11DE-B2A5-E43756D89593}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0974BA1E-64EC-11DE-B2A5-E43756D89593}
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{0974BA1E-64EC-11DE-B2A5-E43756D89593}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]

***** [Internet Browsers] *****

-\\ Internet Explorer v9.0.8112.16421

[OK] Registry is clean.

-\\ Mozilla Firefox v12.0 (pl)

Profile name : default
File : C:\Users\kominek\AppData\Roaming\Mozilla\Firefox\Profiles\z3j1m9ub.default\prefs.js

C:\Users\kominek\AppData\Roaming\Mozilla\Firefox\Profiles\z3j1m9ub.default\user.js ... Deleted !

Deleted : user_pref("CT2269050..clientLogIsEnabled", false);
Deleted : user_pref("CT2269050..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...]
Deleted : user_pref("CT2269050..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...]
Deleted : user_pref("CT2269050.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);
Deleted : user_pref("CT2269050.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
Deleted : user_pref("CT2269050.AppTrackingLastCheckTime", "Fri Jul 06 2012 18:08:28 GMT+0100 (GMT Daylight Tim[...]
Deleted : user_pref("CT2269050.BrowserCompStateIsOpen_129575150554007677", true);
Deleted : user_pref("CT2269050.BrowserCompStateIsOpen_129681780741097243", true);
Deleted : user_pref("CT2269050.BrowserCompStateIsOpen_129705015340022508", true);
Deleted : user_pref("CT2269050.BrowserCompStateIsOpen_129853623028165512", true);
Deleted : user_pref("CT2269050.CTID", "CT2269050");
Deleted : user_pref("CT2269050.CurrentServerDate", "7-7-2012");
Deleted : user_pref("CT2269050.DialogsAlignMode", "LTR");
Deleted : user_pref("CT2269050.DialogsGetterLastCheckTime", "Thu Jul 05 2012 15:55:27 GMT+0100 (GMT Daylight T[...]
Deleted : user_pref("CT2269050.DownloadReferralCookieData", "");
Deleted : user_pref("CT2269050.EMailNotifierPollDate", "Sat Jul 07 2012 17:00:59 GMT+0100 (GMT Daylight Time)"[...]
Deleted : user_pref("CT2269050.ExternalComponentPollDate8877840225553681985", "Mon Apr 12 2010 12:56:12 GMT+01[...]
Deleted : user_pref("CT2269050.FirstServerDate", "10-2-2010");
Deleted : user_pref("CT2269050.FirstTime", true);
Deleted : user_pref("CT2269050.FirstTimeFF3", true);
Deleted : user_pref("CT2269050.FixPageNotFoundErrors", true);
Deleted : user_pref("CT2269050.GroupingServerCheckInterval", 1440);
Deleted : user_pref("CT2269050.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
Deleted : user_pref("CT2269050.HasUserGlobalKeys", true);
Deleted : user_pref("CT2269050.HomePageProtectorEnabled", false);
Deleted : user_pref("CT2269050.Initialize", true);
Deleted : user_pref("CT2269050.InitializeCommonPrefs", true);
Deleted : user_pref("CT2269050.InstallationAndCookieDataSentCount", 3);
Deleted : user_pref("CT2269050.InstalledDate", "Wed Feb 10 2010 20:01:32 GMT+0000 (GMT Standard Time)");
Deleted : user_pref("CT2269050.InvalidateCache", false);
Deleted : user_pref("CT2269050.IsAlertDBUpdated", true);
Deleted : user_pref("CT2269050.IsGrouping", false);
Deleted : user_pref("CT2269050.IsMulticommunity", false);
Deleted : user_pref("CT2269050.IsOpenThankYouPage", false);
Deleted : user_pref("CT2269050.IsOpenUninstallPage", false);
Deleted : user_pref("CT2269050.LanguagePackLastCheckTime", "Fri Jul 06 2012 18:08:18 GMT+0100 (GMT Daylight Ti[...]
Deleted : user_pref("CT2269050.LanguagePackReloadIntervalMM", 1440);
Deleted : user_pref("CT2269050.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...]
Deleted : user_pref("CT2269050.LastLogin_2.5.6.0", "Wed Sep 29 2010 13:56:50 GMT+0100 (GMT Daylight Time)");
Deleted : user_pref("CT2269050.LastLogin_3.12.2.3", "Sun Jun 03 2012 18:22:15 GMT+0100 (GMT Daylight Time)");
Deleted : user_pref("CT2269050.LastLogin_3.13.0.6", "Sun Jul 01 2012 17:10:24 GMT+0100 (GMT Daylight Time)");
Deleted : user_pref("CT2269050.LastLogin_3.14.1.0", "Sat Jul 07 2012 16:06:00 GMT+0100 (GMT Daylight Time)");
Deleted : user_pref("CT2269050.LastLogin_3.3.0.19", "Sat Feb 05 2011 22:06:16 GMT+0000 (GMT Standard Time)");
Deleted : user_pref("CT2269050.LastLogin_3.5.0.12", "Mon Oct 03 2011 16:18:20 GMT+0100 (GMT Daylight Time)");
Deleted : user_pref("CT2269050.LastLogin_3.7.0.6", "Sat Nov 19 2011 21:44:54 GMT+0000 (GMT Standard Time)");
Deleted : user_pref("CT2269050.LastLogin_3.8.0.8", "Sun Jan 15 2012 22:43:58 GMT+0000 (GMT Standard Time)");
Deleted : user_pref("CT2269050.LastLogin_3.9.0.3", "Sun May 13 2012 20:27:28 GMT+0100 (GMT Daylight Time)");
Deleted : user_pref("CT2269050.LatestVersion", "3.13.0.6");
Deleted : user_pref("CT2269050.Locale", "en");
Deleted : user_pref("CT2269050.LoginCache", 4);
Deleted : user_pref("CT2269050.MCDetectTooltipHeight", "83");
Deleted : user_pref("CT2269050.MCDetectTooltipShow", false);
Deleted : user_pref("CT2269050.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
Deleted : user_pref("CT2269050.MCDetectTooltipWidth", "295");
Deleted : user_pref("CT2269050.MyStuffEnabledAtInstallation", true);
Deleted : user_pref("CT2269050.RadioIsPodcast", false);
Deleted : user_pref("CT2269050.RadioLastCheckTime", "Fri Jul 06 2012 18:08:26 GMT+0100 (GMT Daylight Time)");
Deleted : user_pref("CT2269050.RadioLastUpdateIPServer", "3");
Deleted : user_pref("CT2269050.RadioLastUpdateServer", "129132338014870000");
Deleted : user_pref("CT2269050.RadioMediaID", "12473383");
Deleted : user_pref("CT2269050.RadioMediaType", "Media Player");
Deleted : user_pref("CT2269050.RadioMenuSelectedID", "EBRadioMenu_CT226905012473383");
Deleted : user_pref("CT2269050.RadioShrinkedFromSetup", false);
Deleted : user_pref("CT2269050.RadioStationName", "Hotmix%20108");
Deleted : user_pref("CT2269050.RadioStationURL", "hxxp://67.202.67.18:8082");
Deleted : user_pref("CT2269050.SHRINK_TOOLBAR", 1);
Deleted : user_pref("CT2269050.SavedHomepage", "hxxp://uk.ask.com?o=15153&l=dis");
Deleted : user_pref("CT2269050.SearchBoxWidth", 150);
Deleted : user_pref("CT2269050.SearchEngine", "Search||hxxp://search.conduit.com/Results.aspx?q=UCM_SEARCH_TER[...]
Deleted : user_pref("CT2269050.SearchEngineBeforeUnload", "Yahoo");
Deleted : user_pref("CT2269050.SearchFromAddressBarIsInit", true);
Deleted : user_pref("CT2269050.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT226[...]
Deleted : user_pref("CT2269050.SearchInNewTabEnabled", true);
Deleted : user_pref("CT2269050.SearchInNewTabIntervalMM", 1440);
Deleted : user_pref("CT2269050.SearchInNewTabLastCheckTime", "Fri Jul 06 2012 18:08:15 GMT+0100 (GMT Daylight [...]
Deleted : user_pref("CT2269050.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...]
Deleted : user_pref("CT2269050.SearchInNewTabUsageUrl", "hxxp://usage.hosting.toolbar.conduit-services.com/usa[...]
Deleted : user_pref("CT2269050.SearchProtectorEnabled", false);
Deleted : user_pref("CT2269050.SearchProtectorToolbarDisabled", false);
Deleted : user_pref("CT2269050.ServiceMapLastCheckTime", "Fri Jul 06 2012 18:08:17 GMT+0100 (GMT Daylight Time[...]
Deleted : user_pref("CT2269050.SettingsCheckIntervalMin", 120);
Deleted : user_pref("CT2269050.SettingsLastCheckTime", "Sat Jul 07 2012 17:53:43 GMT+0100 (GMT Daylight Time)"[...]
Deleted : user_pref("CT2269050.SettingsLastUpdate", "1341342425");
Deleted : user_pref("CT2269050.ThirdPartyComponentsInterval", 504);
Deleted : user_pref("CT2269050.ThirdPartyComponentsLastCheck", "Tue Jul 03 2012 22:44:47 GMT+0100 (GMT Dayligh[...]
Deleted : user_pref("CT2269050.ThirdPartyComponentsLastUpdate", "1331805997");
Deleted : user_pref("CT2269050.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2269050");
Deleted : user_pref("CT2269050.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,clien[...]
Deleted : user_pref("CT2269050.UserID", "UN62201325479268540");
Deleted : user_pref("CT2269050.ValidationData_Search", 2);
Deleted : user_pref("CT2269050.ValidationData_Toolbar", 2);
Deleted : user_pref("CT2269050.WeatherNetwork", "");
Deleted : user_pref("CT2269050.WeatherPollDate", "Sat Jul 07 2012 16:36:00 GMT+0100 (GMT Daylight Time)");
Deleted : user_pref("CT2269050.WeatherUnit", "C");
Deleted : user_pref("CT2269050.alertChannelId", "666138");
Deleted : user_pref("CT2269050.approveUntrustedApps", false);
Deleted : user_pref("CT2269050.backendstorage./9b+7e+x305", "247E27413334363379453A3D2A722C797A7E7A3128333B4D4[...]
Deleted : user_pref("CT2269050.backendstorage./9b+7e,x305", "247E28412F3F3E3779453A3D2A722C797B787D3128333C474[...]
Deleted : user_pref("CT2269050.backendstorage./9b+7e-x305", "247E2936303C363679453A3D2A722C797A207B3128333D462[...]
Deleted : user_pref("CT2269050.backendstorage./9b+7e.:2z527", "247E70756B74757945473D3E3C3D3F3B224D4245327A342[...]
Deleted : user_pref("CT2269050.backendstorage./9b+7e.x305", "247E2A4137374434337A463B3E2B732D7A7D7C213229343F5[...]
Deleted : user_pref("CT2269050.backendstorage./9b+7e/x305", "247E2B413536327844393C29712B787C7B773027323E4C434[...]
Deleted : user_pref("CT2269050.backendstorage./9b+7e06cg5el8:", "6E6D6F6F6D726D757071");
Deleted : user_pref("CT2269050.backendstorage./9b+7e06cg5el;8i:k", "247E2D2F226A747375757378737B7677242F4B4947[...]
Deleted : user_pref("CT2269050.backendstorage./9b+7e0x305", "247E2C403A407743383B28702A777C757D2F26313E4129554[...]
Deleted : user_pref("CT2269050.backendstorage./9b+7e1x305", "247E2D41313D403279453A3D2A722C7A77797E31283341473[...]
Deleted : user_pref("CT2269050.backendstorage./9b+7e2x305", "247E2E3542313D3D393A7B473C3F2C742E79207D322934435[...]
Deleted : user_pref("CT2269050.backendstorage./9b+7e31;cj6cglm\"mbe", "247E61393F236B25707271772A212C6E414F444[...]
Deleted : user_pref("CT2269050.backendstorage./9b+7e31;cj7@3=i\"mbe", "247E61393F236B25707876792A212C6E414F444[...]
Deleted : user_pref("CT2269050.backendstorage./9b+7e31;cj7fk;kg#8qkef)til", "247E61393F236B25737476742A212C6E4[...]
Deleted : user_pref("CT2269050.backendstorage./9b+7e31;cj7fk;kg#ncep@mc+vkn", "247E61393F236B25737471712A212C6[...]
Deleted : user_pref("CT2269050.backendstorage./9b+7e31;cj;y~j?\";f", "247E61393F236B256F70727A2A212C6E414F444D[...]
Deleted : user_pref("CT2269050.backendstorage./9b+7e31;cjc<=fbj#nc&?j", "247E61393F236B25757674752A212C6E414F4[...]
Deleted : user_pref("CT2269050.backendstorage./9b+7e31;cjc<=fbj#ncf", "247E61393F236B25757677712A212C6E414F444[...]
Deleted : user_pref("CT2269050.backendstorage./9b+7e31;cjeik4!la$=h", "247E61393F236B25767179722A212C6E414F444[...]
Deleted : user_pref("CT2269050.backendstorage./9b+7e31;cji68>:=omma'rg*cn", "247E61393F236B2573787429202B6D404[...]
Deleted : user_pref("CT2269050.backendstorage./9b+7e31;cjyrz k@c", "247E61393F236B25707276712A212C6E414F444D32[...]
Deleted : user_pref("CT2269050.backendstorage./9b+7e31;cjyyy!<ji$od'@k", "247E61393F236B25707274772A212C6E414F[...]
Deleted : user_pref("CT2269050.backendstorage./9b+7e3x305", "247E2F413F3B36333F47463F7D493E412E76307E222421352[...]
Deleted : user_pref("CT2269050.backendstorage./9b+7e4x305", "247E302C407642373A276F29777B74762E2530413E4F494A5[...]
Deleted : user_pref("CT2269050.backendstorage./9b+7e5x305", "247E3136422B7743383B28702A79757A772F2631434B3D495[...]
Deleted : user_pref("CT2269050.backendstorage./9b+7e6x305", "247E322C3E32323238453E7C483D402D752F7E7B2424342B3[...]
Deleted : user_pref("CT2269050.backendstorage./9b+7e7x305", "247E333D2C3F3E3F79453A3D2A722C7B7A797A31283347474[...]
Deleted : user_pref("CT2269050.backendstorage./9b+7e8x305", "247E343D3F3B35373B3F367C47472C742E7E7823322934495[...]
Deleted : user_pref("CT2269050.backendstorage./9b+7e9x305", "247E35332C3F327844393C29712B7B757979302732484C4F4[...]
Deleted : user_pref("CT2269050.backendstorage./9b+7e:x305", "247E36333B38327844393C29712B7B76797A3027324948554[...]
Deleted : user_pref("CT2269050.backendstorage./9b+7e;x305", "247E373F333F3738422F7B473C3F2C742E7E7A7A22332A354[...]
Deleted : user_pref("CT2269050.backendstorage./9b+7e<x305", "247E38343030442F463644377D493E412E7630217D2426352[...]
Deleted : user_pref("CT2269050.backendstorage./9b+7e=x305", "247E3933363F41413739357C483D402D752F207E2022342B3[...]
Deleted : user_pref("CT2269050.backendstorage./9b+7e>x305", "247E3A41363F323238387B473C3F2C742E7E20217C332A355[...]
Deleted : user_pref("CT2269050.backendstorage./9b+7e?x305", "247E3B2D2F2F334134403A3A7D494C2D752F2023207E342B3[...]
Deleted : user_pref("CT2269050.backendstorage./9b+7e@x305", "247E3C40422B7743383B28702A7B767E782F26314E52543D2[...]
Deleted : user_pref("CT2269050.backendstorage./9b+7eax305", "247E3D3D37387743383B28702A7B7A757E2F26314F4F544A5[...]
Deleted : user_pref("CT2269050.backendstorage./9b+7ebe3g=;d9n9=d", "372C2D326975762E3A3C7B3A39434A494841434B26[...]
Deleted : user_pref("CT2269050.backendstorage./9b+7ebx305", "247E3E393141303D33454036327E4A3F422F77317B7D23352[...]
Deleted : user_pref("CT2269050.backendstorage./9b+7ecx305", "247E3F3D303043312E7A463B3E2B732D7B207E31283353515[...]
Deleted : user_pref("CT2269050.backendstorage./9b+7edx305", "247E4035422A363879453A3D2A722C7D202F26315247543C4[...]
Deleted : user_pref("CT2269050.backendstorage./9b+7etx305", "247E6E2F2E3B323342357B44392B732D7A7B7B7C322934215[...]
Deleted : user_pref("CT2269050.backendstorage./9b-0?3g>d", "6C3A6A716E406D457A4346787A20494A4D4D254F4D22502A20[...]
Deleted : user_pref("CT2269050.backendstorage./9b-0?3g@6:5;", "");
Deleted : user_pref("CT2269050.backendstorage./9b-0?3gfa7ef", "2B2E2C3D");
Deleted : user_pref("CT2269050.backendstorage./9b-3=3eccja=f>", "247E333D2C452F4135276F292A212C393D44307832332[...]
Deleted : user_pref("CT2269050.backendstorage./9b/>01=9a6k6<im;krie@pdawm", "6A696B7273747576");
Deleted : user_pref("CT2269050.backendstorage./9b3=>@44i48?", "372C2D32697576334236334148477A213F3E484F4E4D464[...]
Deleted : user_pref("CT2269050.backendstorage./9b5ba==9cjag", "666F6A6E404070447A767149754B7C75204D7B507B");
Deleted : user_pref("CT2269050.backendstorage./9b6b11g4c56b>f;p;anr@p", "6E6D6F6F6D726D757371727474");
Deleted : user_pref("CT2269050.backendstorage./9b9643g3/9e", "6A");
Deleted : user_pref("CT2269050.backendstorage./9b<:222h64<", "393F352F3E");
Deleted : user_pref("CT2269050.backendstorage./9b=+03eh8h8j?:", "4443");
Deleted : user_pref("CT2269050.backendstorage./9b?+e2a52d8", "372C2D326975762E3A3C7B3A39434A494841434B26514649[...]
Deleted : user_pref("CT2269050.backendstorage./9b?b0d:8aj62<h", "6D");
Deleted : user_pref("CT2269050.backendstorage./9ba@0<0bi6a7gn:6@l?", "6E6B");
Deleted : user_pref("CT2269050.backendstorage.autocompletepro_enable", "31");
Deleted : user_pref("CT2269050.backendstorage.autocompletepro_enable_auto", "31");
Deleted : user_pref("CT2269050.backendstorage.cbcountry_000", "4742");
Deleted : user_pref("CT2269050.backendstorage.cbcountry_001", "4742");
Deleted : user_pref("CT2269050.backendstorage.cbfirsttime", "4D6F6E204A616E20303220323031322031313A32313A35302[...]
Deleted : user_pref("CT2269050.backendstorage.ct2269050ads1", "25374225323261647325323225334125354225374225323[...]
Deleted : user_pref("CT2269050.backendstorage.ct2269050current_term", "");
Deleted : user_pref("CT2269050.backendstorage.ct2269050isadsdisabled", "66616C7365");
Deleted : user_pref("CT2269050.backendstorage.ct2269050sdate", "36");
Deleted : user_pref("CT2269050.backendstorage.hxxp://cmg1_conduit-widgets_com/pitsi.state", "434C4F5345");
Deleted : user_pref("CT2269050.backendstorage.shoppingapp.gk.exipres", "576564204A756C20313120323031322031383A[...]
Deleted : user_pref("CT2269050.backendstorage.shoppingapp.gk.geolocation", "756E69746564206B696E67646F6D");
Deleted : user_pref("CT2269050.backendstorage.url_history", "687474703A2F2F7777772E6B696E6F6D616E69616B2E74762[...]
Deleted : user_pref("CT2269050.backendstorage.url_history0001", "687474703A2F2F756B2E6D6734312E6D61696C2E79616[...]
Deleted : user_pref("CT2269050.backendstorage.url_history_time", "31333238303530393833303230");
Deleted : user_pref("CT2269050.clientLogIsEnabled", false);
Deleted : user_pref("CT2269050.clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asm[...]
Deleted : user_pref("CT2269050.components.1000080", true);
Deleted : user_pref("CT2269050.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.c[...]
Deleted : user_pref("CT2269050.globalFirstTimeInfoLastCheckTime", "Sun Jul 01 2012 17:10:33 GMT+0100 (GMT Dayl[...]
Deleted : user_pref("CT2269050.homepageProtectorEnableByLogin", true);
Deleted : user_pref("CT2269050.initDone", true);
Deleted : user_pref("CT2269050.isAppTrackingManagerOn", true);
Deleted : user_pref("CT2269050.isFirstRadioInstallation", false);
Deleted : user_pref("CT2269050.myStuffEnabled", true);
Deleted : user_pref("CT2269050.myStuffPublihserMinWidth", 400);
Deleted : user_pref("CT2269050.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...]
Deleted : user_pref("CT2269050.myStuffServiceIntervalMM", 1440);
Deleted : user_pref("CT2269050.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...]
Deleted : user_pref("CT2269050.oldAppsList", "128834881989343894,128834881989343895,111,129853623028165512,129[...]
Deleted : user_pref("CT2269050.revertSettingsEnabled", true);
Deleted : user_pref("CT2269050.searchProtectorDialogDelayInSec", 10);
Deleted : user_pref("CT2269050.searchProtectorEnableByLogin", true);
Deleted : user_pref("CT2269050.testingCtid", "");
Deleted : user_pref("CT2269050.toolbarAppMetaDataLastCheckTime", "Fri Jul 06 2012 18:08:18 GMT+0100 (GMT Dayli[...]
Deleted : user_pref("CT2269050.toolbarContextMenuLastCheckTime", "Sun Jul 01 2012 17:10:34 GMT+0100 (GMT Dayli[...]
Deleted : user_pref("CT2269050.uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Reg[...]
Deleted : user_pref("CT2269050.usagesFlag", 2);
Deleted : user_pref("CT2856415..clientLogIsEnabled", false);
Deleted : user_pref("CT2856415..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...]
Deleted : user_pref("CT2856415..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...]
Deleted : user_pref("CT2856415.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
Deleted : user_pref("CT2856415.CT2856415", "CT2856415");
Deleted : user_pref("CT2856415.CurrentServerDate", "11-1-2011");
Deleted : user_pref("CT2856415.DialogsAlignMode", "LTR");
Deleted : user_pref("CT2856415.DialogsGetterLastCheckTime", "Sun Jan 09 2011 20:18:37 GMT+0000 (GMT Standard T[...]
Deleted : user_pref("CT2856415.DownloadReferralCookieData", "{\"BannerName\":\"\",\"BannerTypeId\":\"\",\"Bann[...]
Deleted : user_pref("CT2856415.FirstServerDate", "9-1-2011");
Deleted : user_pref("CT2856415.FirstTime", true);
Deleted : user_pref("CT2856415.FirstTimeFF3", true);
Deleted : user_pref("CT2856415.FixPageNotFoundErrors", false);
Deleted : user_pref("CT2856415.GroupingServerCheckInterval", 1440);
Deleted : user_pref("CT2856415.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
Deleted : user_pref("CT2856415.HasUserGlobalKeys", true);
Deleted : user_pref("CT2856415.Initialize", true);
Deleted : user_pref("CT2856415.InitializeCommonPrefs", true);
Deleted : user_pref("CT2856415.InstallationAndCookieDataSentCount", 3);
Deleted : user_pref("CT2856415.InstalledDate", "Sun Jan 09 2011 20:18:37 GMT+0000 (GMT Standard Time)");
Deleted : user_pref("CT2856415.IsGrouping", false);
Deleted : user_pref("CT2856415.IsMulticommunity", false);
Deleted : user_pref("CT2856415.IsOpenThankYouPage", true);
Deleted : user_pref("CT2856415.IsOpenUninstallPage", true);
Deleted : user_pref("CT2856415.LanguagePackLastCheckTime", "Mon Jan 10 2011 20:29:20 GMT+0000 (GMT Standard Ti[...]
Deleted : user_pref("CT2856415.LanguagePackReloadIntervalMM", 1440);
Deleted : user_pref("CT2856415.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...]
Deleted : user_pref("CT2856415.LastLogin_3.3.0.19", "Tue Jan 11 2011 06:32:56 GMT+0000 (GMT Standard Time)");
Deleted : user_pref("CT2856415.LatestVersion", "3.2.5.2");
Deleted : user_pref("CT2856415.Locale", "en");
Deleted : user_pref("CT2856415.MCDetectTooltipHeight", "83");
Deleted : user_pref("CT2856415.MCDetectTooltipShow", false);
Deleted : user_pref("CT2856415.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
Deleted : user_pref("CT2856415.MCDetectTooltipWidth", "295");
Deleted : user_pref("CT2856415.SavedHomepage", "hxxp://vshare.toolbarhome.com/?hp=df");
Deleted : user_pref("CT2856415.SearchFromAddressBarIsInit", true);
Deleted : user_pref("CT2856415.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT285[...]
Deleted : user_pref("CT2856415.SearchInNewTabEnabled", true);
Deleted : user_pref("CT2856415.SearchInNewTabIntervalMM", 1440);
Deleted : user_pref("CT2856415.SearchInNewTabLastCheckTime", "Mon Jan 10 2011 20:29:18 GMT+0000 (GMT Standard [...]
Deleted : user_pref("CT2856415.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...]
Deleted : user_pref("CT2856415.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageServic[...]
Deleted : user_pref("CT2856415.ServiceMapLastCheckTime", "Mon Jan 10 2011 20:29:22 GMT+0000 (GMT Standard Time[...]
Deleted : user_pref("CT2856415.SettingsLastCheckTime", "Mon Jan 10 2011 19:34:34 GMT+0000 (GMT Standard Time)"[...]
Deleted : user_pref("CT2856415.SettingsLastUpdate", "1294239661");
Deleted : user_pref("CT2856415.ThirdPartyComponentsInterval", 504);
Deleted : user_pref("CT2856415.ThirdPartyComponentsLastCheck", "Sun Jan 09 2011 20:18:30 GMT+0000 (GMT Standar[...]
Deleted : user_pref("CT2856415.ThirdPartyComponentsLastUpdate", "1246790578");
Deleted : user_pref("CT2856415.TrusteLinkUrl", "hxxp://www.truste.org/pvr.php?page=validate&softwareProgramId=[...]
Deleted : user_pref("CT2856415.Uninstall", true);
Deleted : user_pref("CT2856415.UserID", "UN71825565568262981");
Deleted : user_pref("CT2856415.ValidationData_Search", 0);
Deleted : user_pref("CT2856415.ValidationData_Toolbar", 0);
Deleted : user_pref("CT2856415.alertChannelId", "1248439");
Deleted : user_pref("CT2856415.approveUntrustedApps", true);
Deleted : user_pref("CT2856415.globalFirstTimeInfoLastCheckTime", "Sun Jan 09 2011 20:18:36 GMT+0000 (GMT Stan[...]
Deleted : user_pref("CT2856415.isAppTrackingManagerOn", false);
Deleted : user_pref("CT2856415.myStuffEnabled", true);
Deleted : user_pref("CT2856415.myStuffPublihserMinWidth", 400);
Deleted : user_pref("CT2856415.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...]
Deleted : user_pref("CT2856415.myStuffServiceIntervalMM", 1440);
Deleted : user_pref("CT2856415.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...]
Deleted : user_pref("CT2856415.testingCtid", "");
Deleted : user_pref("CT2856415.toolbarAppMetaDataLastCheckTime", "Mon Jan 10 2011 20:29:19 GMT+0000 (GMT Stand[...]
Deleted : user_pref("CT2856415.toolbarContextMenuLastCheckTime", "Sun Jan 09 2011 20:18:35 GMT+0000 (GMT Stand[...]
Deleted : user_pref("CT2856415.usagesFlag", 1);
Deleted : user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit. ... /CT2269050[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root ... 1244112/UK", "\"0\"[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root ... /661999/UK", "\"0\"")[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root ... /905414/UK", "\"0\"")[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-ser ... =CT2269050", [...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-ser ... =CT2856415", [...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-serv ... tenApps&lo[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-serv ... erApps&loc[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-serv ... redApps&lo[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-serv ... lbar&local[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-ser ... rt/dlg.pkg", "\[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.engine.conduit-se ... ?ver=3.3.0[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-s ... kg?ver=2.7.[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-s ... g?ver=3.12[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-s ... g?ver=3.13[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-s ... g?ver=3.14[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-s ... kg?ver=3.3.[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-s ... kg?ver=3.5.[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-s ... kg?ver=3.7.[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-s ... kg?ver=3.8.[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-s ... kg?ver=3.9.[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/ ... =CT2269050",[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/ ... =CT2856415",[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/toolbar/", "\"63428984078257[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services ... r=FF&lut=0", "63[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services ... ut=1/11/20[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services ... ut=12/30/2[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.conduit-service ... 050&octid=[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit. ... /CT2269050[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit. ... /CT2856415[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/R ... /equalizer[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/R ... e/minimize.[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/R ... e/play.gif"[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/R ... e/stop.gif"[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/R ... te/vol.gif",[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-serv ... ?locale=en", "\"21b[...]
Deleted : user_pref("CommunityToolbar.EngineHiddenByUser", true);
Deleted : user_pref("CommunityToolbar.EngineOwner", "CT2856415");
Deleted : user_pref("CommunityToolbar.EngineOwnerGuid", "{22e03916-85c5-44b0-8dc9-1830c11238d9}");
Deleted : user_pref("CommunityToolbar.EngineOwnerToolbarId", "elf_1");
Deleted : user_pref("CommunityToolbar.IsEngineShown", false);
Deleted : user_pref("CommunityToolbar.IsMyStuffImportedToEngine", true);
Deleted : user_pref("CommunityToolbar.LatestLibsPath", "file:///C:\\Users\\kominek\\AppData\\Roaming\\Mozilla\[...]
Deleted : user_pref("CommunityToolbar.LatestToolbarVersionInstalled", "3.14.1.0");
Deleted : user_pref("CommunityToolbar.MiniIPageGadgetSize.hxxp://pgcff.pricegong.com/agreement/agree.html#pg_e[...]
Deleted : user_pref("CommunityToolbar.OriginalEngineOwner", "CT2856415");
Deleted : user_pref("CommunityToolbar.OriginalEngineOwnerGuid", "{22e03916-85c5-44b0-8dc9-1830c11238d9}");
Deleted : user_pref("CommunityToolbar.OriginalEngineOwnerToolbarId", "elf_1");
Deleted : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "hxxp://search.conduit.com/ResultsExt.asp[...]
Deleted : user_pref("CommunityToolbar.ToolbarsList", "CT2269050,ConduitEngine,CT2856415");
Deleted : user_pref("CommunityToolbar.ToolbarsList2", "CT2269050,CT2856415");
Deleted : user_pref("CommunityToolbar.alert.alertDialogsGetterLastCheckTime", "Fri May 06 2011 22:10:19 GMT+01[...]
Deleted : user_pref("CommunityToolbar.alert.alertEnabled", true);
Deleted : user_pref("CommunityToolbar.alert.alertInfoInterval", 1440);
Deleted : user_pref("CommunityToolbar.alert.alertInfoLastCheckTime", "Tue May 10 2011 11:03:05 GMT+0100 (GMT D[...]
Deleted : user_pref("CommunityToolbar.alert.clientsServerUrl", "hxxp://alert.client.conduit.com");
Deleted : user_pref("CommunityToolbar.alert.locale", "en");
Deleted : user_pref("CommunityToolbar.alert.loginIntervalMin", 1440);
Deleted : user_pref("CommunityToolbar.alert.loginLastCheckTime", "Mon Jun 27 2011 22:09:01 GMT+0100 (GMT Dayli[...]
Deleted : user_pref("CommunityToolbar.alert.loginLastUpdateTime", "1305622559");
Deleted : user_pref("CommunityToolbar.alert.messageShowTimeSec", 20);
Deleted : user_pref("CommunityToolbar.alert.servicesServerUrl", "hxxp://alert.services.conduit.com");
Deleted : user_pref("CommunityToolbar.alert.showTrayIcon", false);
Deleted : user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300);
Deleted : user_pref("CommunityToolbar.alert.userId", "2cfe0d47-1b74-4944-97b5-f16b945455fc");
Deleted : user_pref("CommunityToolbar.facebook.settingsLastCheckTime", "Tue Jan 18 2011 12:43:44 GMT+0000 (GMT[...]
Deleted : user_pref("CommunityToolbar.globalUserId", "f153c5a9-0680-453a-8506-973ae5a1f66c");
Deleted : user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true);
Deleted : user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true);
Deleted : user_pref("CommunityToolbar.keywordURLSelectedCTID", "CT2856415");
Deleted : user_pref("CommunityToolbar.notifications.alertDialogsGetterLastCheckTime", "Sun Jul 01 2012 17:28:1[...]
Deleted : user_pref("CommunityToolbar.notifications.alertEnabled", true);
Deleted : user_pref("CommunityToolbar.notifications.alertInfoInterval", 1440);
Deleted : user_pref("CommunityToolbar.notifications.alertInfoLastCheckTime", "Thu Jul 05 2012 17:59:58 GMT+010[...]
Deleted : user_pref("CommunityToolbar.notifications.clientsServerUrl", "hxxp://alert.client.conduit.com");
Deleted : user_pref("CommunityToolbar.notifications.firstTimeAlertShown", true);
Deleted : user_pref("CommunityToolbar.notifications.locale", "en");
Deleted : user_pref("CommunityToolbar.notifications.loginIntervalMin", 1440);
Deleted : user_pref("CommunityToolbar.notifications.loginLastCheckTime", "Thu Jul 05 2012 17:59:46 GMT+0100 (G[...]
Deleted : user_pref("CommunityToolbar.notifications.loginLastUpdateTime", "1313487611");
Deleted : user_pref("CommunityToolbar.notifications.messageShowTimeSec", 20);
Deleted : user_pref("CommunityToolbar.notifications.servicesServerUrl", "hxxp://alert.services.conduit.com");
Deleted : user_pref("CommunityToolbar.notifications.showTrayIcon", false);
Deleted : user_pref("CommunityToolbar.notifications.userCloseIntervalMin", 300);
Deleted : user_pref("CommunityToolbar.notifications.userId", "ef6b1716-d75b-4afb-a692-aea2347b2a80");
Deleted : user_pref("ConduitEngine.AppTrackingLastCheckTime", "Fri May 06 2011 22:10:54 GMT+0100 (GMT Daylight[...]
Deleted : user_pref("ConduitEngine.DialogsGetterLastCheckTime", "Mon Feb 07 2011 12:49:02 GMT+0000 (GMT Standa[...]
Deleted : user_pref("ConduitEngine.FirstServerDate", "01/09/2011 23");
Deleted : user_pref("ConduitEngine.FirstTime", true);
Deleted : user_pref("ConduitEngine.FirstTimeFF3", true);
Deleted : user_pref("ConduitEngine.HasUserGlobalKeys", true);
Deleted : user_pref("ConduitEngine.HideEngineAfterRestart", true);
Deleted : user_pref("ConduitEngine.Initialize", true);
Deleted : user_pref("ConduitEngine.InitializeCommonPrefs", true);
Deleted : user_pref("ConduitEngine.InstalledDate", "Sun Jan 09 2011 20:18:37 GMT+0000 (GMT Standard Time)");
Deleted : user_pref("ConduitEngine.IsMulticommunity", false);
Deleted : user_pref("ConduitEngine.IsOpenThankYouPage", false);
Deleted : user_pref("ConduitEngine.IsOpenUninstallPage", true);
Deleted : user_pref("ConduitEngine.LanguagePackLastCheckTime", "Mon Feb 07 2011 12:49:02 GMT+0000 (GMT Standar[...]
Deleted : user_pref("ConduitEngine.LastLogin_3.3.0.19", "Mon Feb 07 2011 12:49:03 GMT+0000 (GMT Standard Time)[...]
Deleted : user_pref("ConduitEngine.PublisherContainerWidth", 0);
Deleted : user_pref("ConduitEngine.SearchFromAddressBarIsInit", true);
Deleted : user_pref("ConduitEngine.SettingsLastCheckTime", "Mon Feb 07 2011 12:49:02 GMT+0000 (GMT Standard Ti[...]
Deleted : user_pref("ConduitEngine.UserID", "UN36105123395019191");
Deleted : user_pref("ConduitEngine.engineLocale", "en-US");
Deleted : user_pref("ConduitEngine.enngineContextMenuLastCheckTime", "Mon Feb 07 2011 12:49:02 GMT+0000 (GMT S[...]
Deleted : user_pref("ConduitEngine.globalFirstTimeInfoLastCheckTime", "Fri Feb 04 2011 11:03:46 GMT+0000 (GMT [...]
Deleted : user_pref("ConduitEngine.initDone", true);
Deleted : user_pref("ConduitEngine.isAppTrackingManagerOn", true);
Deleted : user_pref("ConduitEngine.usagesFlag", 1);
Deleted : user_pref("browser.search.defaultengine", "Ask.com");
Deleted : user_pref("browser.search.defaultenginename", "BearShare Web Search");
Deleted : user_pref("browser.search.defaultthis.engineName", "Elf 1 Customized Web Search");
Deleted : user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2856415&Sea[...]
Deleted : user_pref("browser.search.order.1", "BearShare Web Search");
Deleted : user_pref("extensions.snipit.askTbInstalled", true);
Deleted : user_pref("extensions.snipit.chromeURL", "hxxp://toolbar.ask.com/toolbarv/askRedirect?o=101757&gct=&[...]
Deleted : user_pref("extensions.vshare@toolbar.update.enabled", false);
Deleted : user_pref("freecause2fba511aef964742b322986fef420695.AutoSearchEventData", "auto%20search");
Deleted : user_pref("freecause2fba511aef964742b322986fef420695.ClearCacheDate", 2);
Deleted : user_pref("freecause2fba511aef964742b322986fef420695.DnsCatchEventData", "dns%20catch");
Deleted : user_pref("freecause2fba511aef964742b322986fef420695.FirstLaunchShown", true);
Deleted : user_pref("freecause2fba511aef964742b322986fef420695.LoadLayoutDate.62275", 2);
Deleted : user_pref("freecause2fba511aef964742b322986fef420695.NewTabSearchEventData", "tab%20search");
Deleted : user_pref("freecause2fba511aef964742b322986fef420695.ShowRecommendedOptions", true);
Deleted : user_pref("freecause2fba511aef964742b322986fef420695.StateReportDate", "1304326597862");
Deleted : user_pref("freecause2fba511aef964742b322986fef420695.TopRightSearchEventData", "top%20right%20search[...]
Deleted : user_pref("freecause2fba511aef964742b322986fef420695.customNewTab", true);
Deleted : user_pref("freecause2fba511aef964742b322986fef420695.data", "970E0D327E91ACB7AE5FC2C7B268ABD9A70C71F[...]
Deleted : user_pref("freecause2fba511aef964742b322986fef420695.helpUsImprove", true);
Deleted : user_pref("freecause2fba511aef964742b322986fef420695.hideOthers", false);
Deleted : user_pref("freecause2fba511aef964742b322986fef420695.processAddrBar", true);
Deleted : user_pref("freecause2fba511aef964742b322986fef420695.restoreSearch", false);
Deleted : user_pref("freecause2fba511aef964742b322986fef420695.searchHistory", true);
Deleted : user_pref("freecause2fba511aef964742b322986fef420695.showFirstLaunchOptions", false);
Deleted : user_pref("freecause2fba511aef964742b322986fef420695.stday", "2");
Deleted : user_pref("freecause2fba511aef964742b322986fef420695.sthour", "16");
Deleted : user_pref("freecause2fba511aef964742b322986fef420695.tb_lang", "en");
Deleted : user_pref("freecause2fba511aef964742b322986fef420695.tool_id", "62275");
Deleted : user_pref("freecause2fba511aef964742b322986fef420695.user_id", "30424509");
Deleted : user_pref("freecause2fba511aef964742b322986fef420695.user_key", "1bfe73004a5c6c3635eaf25b18c7ca6581c[...]
Deleted : user_pref("freecause2fba511aef964742b322986fef420695.user_layouts", "62275");
Deleted : user_pref("freecause2fba511aef964742b322986fef420695.user_lnames", "City%20Life");
Deleted : user_pref("freecause2fba511aef964742b322986fef420695.yahooSearch", true);
Deleted : user_pref("keyword.URL", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2269050&q=");

Profile name : default
File : C:\Users\Administrator.kominek-PC.000\AppData\Roaming\Mozilla\Firefox\Profiles\k1mvpdrq.default\prefs.js

[OK] File is clean.

-\\ Google Chrome v20.0.1132.57

File : C:\Users\kominek\AppData\Local\Google\Chrome\User Data\Default\Preferences

Deleted : "description": "The fastest way to search the web.",

File : C:\Users\Administrator.kominek-PC.000\AppData\Local\Google\Chrome\User Data\Default\Preferences

Deleted : "description": "The fastest way to search the web.",

*************************

AdwCleaner[R1].txt - [39774 octets] - [26/07/2012 16:30:42]
AdwCleaner[S1].txt - [40674 octets] - [26/07/2012 16:31:25]

########## EOF - C:\AdwCleaner[S1].txt - [40803 octets] ##########

Awatar użytkownika
kominekl

Ekspert
Posty: 5855
Rejestracja: 27 lis 2011, 14:25
Kontaktowanie:

prosze o sprawdzenie log otl.txt

Post26 lip 2012, 17:41

Reasumacja.


Wszelkie logi wstawiaj na -> Dostępne tylko dla zarejestrowanych użytkowników. Czekamy na wykonanie reszty instrukcji.
Kiedy komputery staną się twoim jedynym życiem, jedynym totemem odstraszającym klątwę nudy, wtedy prędzej czy później granica między tymi dwoma wymiarami zniknie i postacie z Błękitnej Pustki zaczną pojawiać się w Realu. Czasem są twoimi przyjaciółmi. A czasem nie.


Awatar użytkownika
kominekl

Ekspert
Posty: 5855
Rejestracja: 27 lis 2011, 14:25
Kontaktowanie:

prosze o sprawdzenie log otl.txt

Post26 lip 2012, 18:44

"{08A6039D-A5B8-46E8-A3F9-7E2AE5C1B191}" = Nitro PDF Professional
"{121634B0-2F4B-11D3-ADA3-00C04F52DD52}" = Windows Installer Clean Up
"{3248F0A8-6813-11D6-A77B-00B0D0160060}" = Java(TM) 6 Update 6
"{3E2C691B-B7E6-4053-B5C3-94B8BC407E7A}" = Adobe Premiere Elements 4.0
"{45338B07-A236-4270-9A77-EBB4115517B5}" = Windows Live Sign-in Assistant
"{1316AEF2-E086-46C7-B1FB-8C9A39A2ABF9}" = VAIO Media plus
"{2018C019-30D9-4240-8C01-0865C10DCF5A}" = VAIO Presentation Support
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live Upload Tool
"{326DC400-1FC4-4D7D-946D-06D1EAB93200}" = VAIO Guide 
"{4EA55D20-27FB-45D7-8726-147E8A5F6C62}" = VAIO MusicBox
"{57B955CE-B5D3-495D-AF1B-FAEE0540BFEF}" = VAIO Data Restore Tool
"{5BEE8F1F-BD32-4553-8107-500439E43BD7}" = VAIO Update
"{6FA8BA2C-052B-4072-B8E2-2302C268BE9E}" = VAIO Movie Story Template Data
"{72042FA6-5609-489F-A8EA-3C2DD650F667}" = VAIO Control Center
"{79155F2B-9895-49D7-8612-D92580E0DE5B}" = Bonjour
"{8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E}" = Choice Guard
"{98FC7A64-774B-49B5-B046-4B4EBC053FA9}" = VAIO MusicBox Sample Music
"{A552C4EA-D41E-4C61-A0FB-C0E05440F7D7}" = VAIO Entertainment Platform
"{AC76BA86-1033-F400-BA7E-000000000003}" = Adobe Acrobat 8 Standard - English, Français, Deutsch
"{B25563A0-41F4-4A81-A6C1-6DBC0911B1F3}" = VAIO Movie Story
"{B7C03E84-AF46-42F4-809D-D4127D9086D0}" = VAIO Edit Components 6.4
"{BACD22AE-5B6B-4F23-B506-3FCFF13AC137}" = VAIO Media plus
"Adobe Acrobat 8 Standard - English, Français, Deutsch" = Adobe Acrobat 8.3.1 Standard
"Adobe Acrobat 8 Standard - English, Français, Deutsch_831" = Adobe Acrobat 8.3.1 - CPSID_83708
"Google Desktop" = Google Desktop
"InstallShield_{C1083DBC-C541-4E8C-91EA-D92397AB9A2C}" = OpenMG Secure Module 5.1.00
"MarketingTools" = VAIO Marketing Tools
"MozillaMaintenanceService" = Mozilla Maintenance Service
"MSC" = McAfee SecurityCenter
"Rapport_msi" = Rapport
"Uninstall_is1" = Uninstall 1.0.0.1
"VAIO Help and Support" =


Odinstaluj to oprogramowanie (tym razem się przyłóż) za pomocą Revo Uninstaller`a w trybie zaawansowanym (po wcześniejszym zaznaczeniu w Nim opcji -> Pokazuj Elementy Systemowe) -> Dostępne tylko dla zarejestrowanych użytkowników.

Logi.


Uruchom OTL -> w oknie Własne opcje skanowania/skrypt wklej:

:Processes
killallprocesses

:OTL

SRV - File not found [Auto | Stopped] -- c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe -- (McProxy)
SRV - File not found [Auto | Stopped] -- c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe -- (McNASvc)
DRV - File not found [Kernel | Disabled | Stopped] -- system32\DRIVERS\UIUSYS.SYS -- (UIUSys)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\drivers\RtHDMIV.sys -- (RTHDMIAzAudService)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\drivers\RTKVHDA.sys -- (IntcAzAudAddService)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ewusbmdm.sys -- (hwdatacard)
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = Dostępne tylko dla zarejestrowanych użytkowników
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = Dostępne tylko dla zarejestrowanych użytkowników
IE - HKLM\..\SearchScopes,DefaultScope = {9BB47C17-9C68-4BB3-B188-DD9AF0FD2A69}
IE - HKLM\..\SearchScopes\{6BE6BE36-0285-4779-BDB3-51009CE7EB92}: "URL" = Dostępne tylko dla zarejestrowanych użytkowników{searchTerms}&meta=
IE - HKLM\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2A69}: "URL" = Dostępne tylko dla zarejestrowanych użytkowników{searchTerms}
IE - HKLM\..\SearchScopes\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}: "URL" = Dostępne tylko dla zarejestrowanych użytkowników{searchTerms}
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = Dostępne tylko dla zarejestrowanych użytkowników
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [Binary data over 100 bytes]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
IE - HKCU\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = Dostępne tylko dla zarejestrowanych użytkowników{searchTerms}&rlz=1I7SNYK_en-GB&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
FF - prefs.js..extensions.enabledItems: moveplayer@movenetworks.com:1.0.0.071303000006
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22
FF - prefs.js..extensions.enabledItems: vshare@toolbar:1.0.2
FF - prefs.js..extensions.enabledItems: engine@conduit.com:3.3.0.19
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23
FF - prefs.js..extensions.enabledItems: fastYoutubeDownloader@yevgenyandrov.net:1.2.2
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Player Plugin,version=1.0.0: File not found
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found
FF - HKCU\Software\MozillaPlugins\@movenetworks.com/Quantum Media Player: File not found
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\kominek\AppData\Local\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\kominek\AppData\Local\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.)
[2010-06-30 09:23:36 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\kominek\AppData\Roaming\Mozilla\Firefox\Profiles\z3j1m9ub.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2012-05-23 02:01:13 | 000,000,000 | ---D | M] (Yahoo! Toolbar) -- C:\Users\kominek\AppData\Roaming\Mozilla\Firefox\Profiles\z3j1m9ub.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
[2012-05-13 20:26:43 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Users\kominek\AppData\Roaming\Mozilla\Firefox\Profiles\z3j1m9ub.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2011-01-25 10:56:45 | 000,000,000 | ---D | M] (User Agent Switcher) -- C:\Users\kominek\AppData\Roaming\Mozilla\Firefox\Profiles\z3j1m9ub.default\extensions\{e968fc70-8f95-4ab9-9e79-304de2a71ee1}
[2010-02-10 08:46:08 | 000,000,000 | ---D | M] (DVDVideoSoft Toolbar) -- C:\Users\kominek\AppData\Roaming\Mozilla\Firefox\Profiles\z3j1m9ub.default\extensions\{e9911ec6-1bcc-40b0-9993-e0eea7f6953f}
[2010-01-22 17:43:14 | 000,000,000 | ---D | M] (WeFi Toolbar) -- C:\Users\kominek\AppData\Roaming\Mozilla\Firefox\Profiles\z3j1m9ub.default\extensions\{ee1a404c-5714-451f-9365-a94936993d19}
[2011-02-07 21:28:44 | 000,000,000 | ---D | M] (Fast Youtube Downloader) -- C:\Users\kominek\AppData\Roaming\Mozilla\Firefox\Profiles\z3j1m9ub.default\extensions\fastYoutubeDownloader@yevgenyandrov.net
[2009-07-17 18:02:21 | 000,000,000 | ---D | M] (Move Media Player) -- C:\Users\kominek\AppData\Roaming\Mozilla\Firefox\Profiles\z3j1m9ub.default\extensions\moveplayer@movenetworks.com
[2010-09-14 13:48:25 | 000,002,506 | ---- | M] () -- C:\Users\kominek\AppData\Roaming\Mozilla\Firefox\Profiles\z3j1m9ub.default\searchplugins\BearShareWebSearch.xml
[2009-03-05 15:41:45 | 000,001,632 | ---- | M] () -- C:\Users\kominek\AppData\Roaming\Mozilla\Firefox\Profiles\z3j1m9ub.default\searchplugins\live-search.xml
[2010-03-11 20:39:47 | 000,001,741 | ---- | M] () -- C:\Users\kominek\AppData\Roaming\Mozilla\Firefox\Profiles\z3j1m9ub.default\searchplugins\search-the-web.xml
[2011-06-30 09:13:22 | 000,001,763 | ---- | M] () -- C:\Users\kominek\AppData\Roaming\Mozilla\Firefox\Profiles\z3j1m9ub.default\searchplugins\yahoo-1.xml
[2011-01-10 11:20:26 | 000,001,763 | ---- | M] () -- C:\Users\kominek\AppData\Roaming\Mozilla\Firefox\Profiles\z3j1m9ub.default\searchplugins\yahoo.xml
[2010-09-14 13:48:25 | 000,002,506 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\BearShareWebSearch.xml
O2 - BHO: (no name) - {1428A472-5260-404E-9977-7ECDF1DAF936} - No CLSID value found.
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (no name) - {B035573A-5F43-4862-A194-87D027C63012} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O4 - HKLM..\Run: [] File not found
O4 - HKCU..\Run: [Facebook Update] C:\Users\kominek\AppData\Local\Facebook\Update\FacebookUpdate.exe (Facebook Inc.)
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 File not found
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_950DF09FAB501E03.dll/cmsidewiki.html File not found
O15 - HKCU\..Trusted Domains: localhost ([]http in Local intranet)
O15 - HKCU\..Trusted Ranges: GD ([http] in Local intranet)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} Dostępne tylko dla zarejestrowanych użytkowników (Java Plug-in 10.5.1)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} Dostępne tylko dla zarejestrowanych użytkowników (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} Dostępne tylko dla zarejestrowanych użytkowników (Java Plug-in 10.5.1)
O20 - Winlogon\Notify\edeebfcdddbaaae: DllName - (C:\Windows\system32\edeebfcdddbaaae.dll) - File not found
O29 - HKLM SecurityProviders - (msapsspc.dll) - File not found
O29 - HKLM SecurityProviders - (digest.dll) - File not found
O29 - HKLM SecurityProviders - (msnsspc.dll) - File not found
@Alternate Data Stream - 141 bytes -> C:\ProgramData\TEMP:E41EAF13
@Alternate Data Stream - 104 bytes -> C:\ProgramData\TEMP:D1B5B4F1

:Files
c:\PROGRA~1\COMMON~1\mcafee
C:\Users\kominek\AppData\Local\Google\Update
c:\Program Files\McAfee
C:\Program Files\Adobe\Acrobat 8.0
C:\Users\kominek\AppData\Local\Facebook\Update
C:\Program Files\McAfee.com
C:\found.*
C:\Windows\tasks\*.*
C:\Users\kominek\AppData\Local\607925617
C:\ProgramData\607925617
C:\ProgramData\ClUP5
C:\Users\kominek\AppData\Local\ClUP5
C:\Users\kominek\AppData\Roaming\Nitro PDF
C:\Users\kominek\AppData\Roaming\Obucqo
C:\Users\kominek\AppData\Roaming\Ofochi
C:\Users\kominek\AppData\Roaming\RDRM
C:\Users\kominek\AppData\Roaming\Registry Mechanic
C:\Users\kominek\AppData\Roaming\RST
C:\Users\kominek\AppData\Roaming\Tific
C:\Users\kominek\AppData\Roaming\Xyxuf
C:\Users\kominek\AppData\Roaming\Ytdi

:Reg
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{5C5EE8F2-0B38-4C13-AE4E-A87A237FE718}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{96D0B6C6-5A72-4B47-8583-A87E55F5FE81}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{F570A6CC-53ED-4AA9-8B08-551CD3E38D8B}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\dt icon module]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\gtfirstboot Setting Request]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\cMFU Module]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\VAIO Help and Support]

:Commands
[resethosts]
[emptyflash]
[clearallrestorepoints]
[emptytemp]


Klikasz Wykonaj skrypt. Dajesz log z usuwania. Następnie podajesz nowe logi z OTL.

Autoruns.


Odpowiedz na pytanie.
Kiedy komputery staną się twoim jedynym życiem, jedynym totemem odstraszającym klątwę nudy, wtedy prędzej czy później granica między tymi dwoma wymiarami zniknie i postacie z Błękitnej Pustki zaczną pojawiać się w Realu. Czasem są twoimi przyjaciółmi. A czasem nie.

komalex

Użytkownik
Posty: 15
Rejestracja: 25 lip 2012, 14:03

prosze o sprawdzenie log otl.txt

Post31 lip 2012, 14:38


Awatar użytkownika
kominekl

Ekspert
Posty: 5855
Rejestracja: 27 lis 2011, 14:25
Kontaktowanie:

prosze o sprawdzenie log otl.txt

Post31 lip 2012, 15:09

log ze skryptu


OK. Teraz wykonaj resztę instrukcji.
Kiedy komputery staną się twoim jedynym życiem, jedynym totemem odstraszającym klątwę nudy, wtedy prędzej czy później granica między tymi dwoma wymiarami zniknie i postacie z Błękitnej Pustki zaczną pojawiać się w Realu. Czasem są twoimi przyjaciółmi. A czasem nie.

komalex

Użytkownik
Posty: 15
Rejestracja: 25 lip 2012, 14:03

prosze o sprawdzenie log otl.txt

Post31 lip 2012, 15:11


Awatar użytkownika
kominekl

Ekspert
Posty: 5855
Rejestracja: 27 lis 2011, 14:25
Kontaktowanie:

prosze o sprawdzenie log otl.txt

Post31 lip 2012, 15:18

pokazuje mi sie taki komunikat


Zainstaluj.
Kiedy komputery staną się twoim jedynym życiem, jedynym totemem odstraszającym klątwę nudy, wtedy prędzej czy później granica między tymi dwoma wymiarami zniknie i postacie z Błękitnej Pustki zaczną pojawiać się w Realu. Czasem są twoimi przyjaciółmi. A czasem nie.

komalex

Użytkownik
Posty: 15
Rejestracja: 25 lip 2012, 14:03

prosze o sprawdzenie log otl.txt

Post31 lip 2012, 17:03

kominekl pisze:
pokazuje mi sie taki komunikat


Zainstaluj.

wlasnie probowalem kilka razy ale skonczylo sie niepowodzeniem nie moze znalezc drivera , ten sam problem mam z updatem windows rowniez pojawia sie komunikat o bledzie

-- 31 lip 2012, 17:03 --

zamieszczam logi z otl
Dostępne tylko dla zarejestrowanych użytkowników
Dostępne tylko dla zarejestrowanych użytkowników

Awatar użytkownika
kominekl

Ekspert
Posty: 5855
Rejestracja: 27 lis 2011, 14:25
Kontaktowanie:

prosze o sprawdzenie log otl.txt

Post31 lip 2012, 18:50

wlasnie probowalem kilka razy ale skonczylo sie niepowodzeniem nie moze znalezc drivera , ten sam problem mam z updatem windows rowniez pojawia sie komunikat o bledzie


Zajmę sie tym później.

Autoruns.


Czekam z niecierpliwością na ten log.

Logi.


Uruchom OTL -> w oknie Własne opcje skanowania/skrypt wklej:

:OTL

DRV - File not found [Kernel | On_Demand | Stopped] -- c:\programdata\trusteer\rapport\store\exts\rapportms\39624\rapportiaso.sys -- (RapportIaso)
DRV - File not found [Kernel | System | Stopped] -- C:\Windows\system32\drivers\RapportBuka.sys -- (RapportBuka)
DRV - [2009-04-09 15:23:02 | 000,130,424 | ---- | M] (McAfee, Inc.) [Kernel | System | Running] -- C:\Windows\System32\drivers\Mpfp.sys -- (MPFP)
[2010-03-11 20:38:41 | 000,000,000 | ---D | M] (City Life) -- C:\Users\kominek\AppData\Roaming\Mozilla\Firefox\Profiles\z3j1m9ub.default\extensions\{2fba511a-ef96-4742-b322-986fef420695}
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found.
O4 - HKCU..\Run: [Google Update] "C:\Users\kominek\AppData\Local\Google\Update\GoogleUpdate.exe" /c File not found

:Files
C:\Windows\tasks\*.*

:Commands
[emptyflash]
[clearallrestorepoints]
[emptytemp]


Klikasz Wykonaj skrypt. Dajesz log z usuwania. Następnie podajesz nowe logi z OTL.
Kiedy komputery staną się twoim jedynym życiem, jedynym totemem odstraszającym klątwę nudy, wtedy prędzej czy później granica między tymi dwoma wymiarami zniknie i postacie z Błękitnej Pustki zaczną pojawiać się w Realu. Czasem są twoimi przyjaciółmi. A czasem nie.

komalex

Użytkownik
Posty: 15
Rejestracja: 25 lip 2012, 14:03

prosze o sprawdzenie log otl.txt

Post01 sie 2012, 11:18




  • Reklama

Wróć do „Bezpieczeństwo”



Kto jest online

Użytkownicy przeglądający to forum: Obecnie na forum nie ma żadnego zarejestrowanego użytkownika i 3 gości