Reklamy, PC zamrzává Vyřešeno

Místo pro vaše HiJackThis logy a logy z dalších programů…

Moderátoři: Mods_senior, Security team

Uživatelský avatar
LosMajos
Level 3.5
Level 3.5
Příspěvky: 663
Registrován: prosinec 13
Pohlaví: Muž
Stav:
Offline

Re: Reklamy, PC zamrzává

Příspěvekod LosMajos » 24 kvě 2015 11:50

Mám odpojit ani síťovou kartu když je připojená přes USB?
Don’t panic, it’s organic!

Intel Core i5-10400F, Gigabyte GTX 1660 Super OC, HyperX Predator 16GB (2x8GB) DDR4 2666 CL13, Seasonic CORE GM-500 - 500W, ASRock B460M PRO4 - Intel B460, Kingston A2000, M.2 - 1TB, Arctic Freezer 34 eSports, Ducky Shine 7 MX silent red, Endgame Gear XM1.

Reklama
Uživatelský avatar
LosMajos
Level 3.5
Level 3.5
Příspěvky: 663
Registrován: prosinec 13
Pohlaví: Muž
Stav:
Offline

Re: Reklamy, PC zamrzává

Příspěvekod LosMajos » 24 kvě 2015 12:03

RogueKiller V10.6.5.0 (x64) [May 20 2015] by Adlice Software
mail : http://www.adlice.com/contact/
Feedback : http://forum.adlice.com
Webová stránka : http://www.adlice.com/softwares/roguekiller/
Blog : http://www.adlice.com

Operační systém : Windows 8.1 (6.3.9200 ) 64 bits version
Spuštěno : Normální režim
Uživatel : Pepa7 [Práva správce]
Started from : C:\Users\Pepa7\Desktop\RogueKillerX64.exe
Mód : Smazat -- Datum : 05/24/2015 12:01:49

¤¤¤ Procesy : 0 ¤¤¤

¤¤¤ Registry : 17 ¤¤¤
[PUM.Orphan] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad | WebCheck : {E6FB5E20-DE35-11CF-9C87-00AA005127ED} -> Smazáno
[PUM.Orphan] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad | WebCheck : {E6FB5E20-DE35-11CF-9C87-00AA005127ED} -> Smazáno
[PUM.Orphan] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\00avast | (default) : {472083B0-C522-11CF-8763-00608CC02F24} -> Smazáno
[PUM.Orphan] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> Smazáno
[PUM.Orphan] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9} -> Smazáno
[Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\GPUZ (\??\C:\WINDOWS\TEMP\GPUZ.sys) -> Smazáno
[Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\GPUZ (\??\C:\WINDOWS\TEMP\GPUZ.sys) -> Smazáno
[PUM.HomePage] (X64) HKEY_USERS\S-1-5-21-1765931364-2895769979-1631063868-1001\Software\Microsoft\Internet Explorer\Main | Start Page : http://www.goolge.com/ -> Nahrazeno (http://go.microsoft.com/fwlink/p/?LinkId=255141)
[PUM.HomePage] (X86) HKEY_USERS\S-1-5-21-1765931364-2895769979-1631063868-1001\Software\Microsoft\Internet Explorer\Main | Start Page : http://www.goolge.com/ -> Nahrazeno (http://go.microsoft.com/fwlink/p/?LinkId=255141)
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters | DhcpNameServer : 213.194.204.126 85.132.148.70 [X][X] -> Nahrazeno ()
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters | DhcpNameServer : 213.194.204.126 85.132.148.70 [X][X] -> Nahrazeno ()
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{87D0EC6C-D6FB-4148-8303-F6792D713566} | DhcpNameServer : 213.194.204.126 85.132.148.70 [X][X] -> Nahrazeno ()
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters\Interfaces\{87D0EC6C-D6FB-4148-8303-F6792D713566} | DhcpNameServer : 213.194.204.126 85.132.148.70 [X][X] -> Nahrazeno ()
[PUM.DesktopIcons] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1 -> Nahrazeno (0)
[PUM.DesktopIcons] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {59031a47-3f72-44a7-89c5-5595fe6b30ee} : 1 -> Nahrazeno (0)
[PUM.DesktopIcons] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1 -> Nahrazeno (0)
[PUM.DesktopIcons] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {59031a47-3f72-44a7-89c5-5595fe6b30ee} : 1 -> Nahrazeno (0)

¤¤¤ Úlohy : 0 ¤¤¤

¤¤¤ Soubory : 0 ¤¤¤

¤¤¤ Soubor HOSTS : 0 ¤¤¤

¤¤¤ Antirootkit : 0 (Driver: Nahrán) ¤¤¤

¤¤¤ Webové prohlížeče : 0 ¤¤¤

¤¤¤ Kontrola MBR : ¤¤¤
+++++ PhysicalDrive0: ST1000DM003-1ER162 +++++
--- User ---
[MBR] 69c0e4614604ec23307f6b0ade6c6985
[BSP] 9e3a52cca858d4834a3730397757b01d : Windows Vista/7/8 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 350 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
1 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 718848 | Size: 953517 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
User = LL1 ... OK
User = LL2 ... OK


============================================
RKreport_SCN_05242015_114407.log - RKreport_SCN_05242015_120034.log


EDIT: SPUSTIL JSEM HO JEŠTĚ JEDNOU
RogueKiller V10.6.5.0 (x64) [May 20 2015] by Adlice Software
mail : http://www.adlice.com/contact/
Feedback : http://forum.adlice.com
Webová stránka : http://www.adlice.com/softwares/roguekiller/
Blog : http://www.adlice.com

Operační systém : Windows 8.1 (6.3.9200 ) 64 bits version
Spuštěno : Normální režim
Uživatel : Pepa7 [Práva správce]
Started from : C:\Users\Pepa7\Desktop\RogueKillerX64.exe
Mód : Smazat -- Datum : 05/24/2015 12:07:44

¤¤¤ Procesy : 0 ¤¤¤

¤¤¤ Registry : 4 ¤¤¤
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters | DhcpNameServer : 213.194.204.126 85.132.148.70 [-][CZ] -> Nahrazeno ()
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters | DhcpNameServer : 213.194.204.126 85.132.148.70 [-][CZ] -> Nahrazeno ()
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{87D0EC6C-D6FB-4148-8303-F6792D713566} | DhcpNameServer : 213.194.204.126 85.132.148.70 [-][CZ] -> Nahrazeno ()
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters\Interfaces\{87D0EC6C-D6FB-4148-8303-F6792D713566} | DhcpNameServer : 213.194.204.126 85.132.148.70 [-][CZ] -> Nahrazeno ()

¤¤¤ Úlohy : 0 ¤¤¤

¤¤¤ Soubory : 0 ¤¤¤

¤¤¤ Soubor HOSTS : 0 ¤¤¤

¤¤¤ Antirootkit : 0 (Driver: Nahrán) ¤¤¤

¤¤¤ Webové prohlížeče : 0 ¤¤¤

¤¤¤ Kontrola MBR : ¤¤¤
+++++ PhysicalDrive0: ST1000DM003-1ER162 +++++
--- User ---
[MBR] 69c0e4614604ec23307f6b0ade6c6985
[BSP] 9e3a52cca858d4834a3730397757b01d : Windows Vista/7/8 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 350 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
1 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 718848 | Size: 953517 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
User = LL1 ... OK
User = LL2 ... OK


============================================
RKreport_SCN_05242015_114407.log - RKreport_SCN_05242015_120034.log - RKreport_DEL_05242015_120149.log - RKreport_DEL_05242015_120212.log
RKreport_SCN_05242015_120638.log
Don’t panic, it’s organic!

Intel Core i5-10400F, Gigabyte GTX 1660 Super OC, HyperX Predator 16GB (2x8GB) DDR4 2666 CL13, Seasonic CORE GM-500 - 500W, ASRock B460M PRO4 - Intel B460, Kingston A2000, M.2 - 1TB, Arctic Freezer 34 eSports, Ducky Shine 7 MX silent red, Endgame Gear XM1.

Uživatelský avatar
LosMajos
Level 3.5
Level 3.5
Příspěvky: 663
Registrován: prosinec 13
Pohlaví: Muž
Stav:
Offline

Re: Reklamy, PC zamrzává

Příspěvekod LosMajos » 24 kvě 2015 12:30

Zoek.exe v5.0.0.0 Updated 04-May-2015
Tool run by Pepa7 on ne 24. 05. 2015 at 12:14:39,55.
Microsoft Windows 8.1 6.3.9600 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Pepa7\Desktop\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

24. 5. 2015 12:16:23 Zoek.exe System Restore Point Created Successfully.

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

127.0.0.1 localhost

==== Empty Folders Check ======================

C:\PROGRA~2\COMMON~1\Blizzard Entertainment deleted successfully
C:\Program Files\ATI Technologies deleted successfully
C:\Program Files\Google deleted successfully
C:\PROGRA~3\Riot Games deleted successfully
C:\Users\Pepa7\AppData\Roaming\Publish Providers deleted successfully
C:\Users\Pepa7\AppData\Roaming\uTorrent deleted successfully
C:\Users\Pepa7\AppData\Local\GHISLER deleted successfully

==== Deleting CLSID Registry Keys ======================


==== Deleting CLSID Registry Values ======================


==== Deleting Services ======================


==== Deleting Files \ Folders ======================

C:\Users\Pepa7\AppData\Roaming\.technic deleted
C:\PROGRA~3\Package Cache deleted
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Search.lnk deleted
C:\windows\SysNative\Tasks\avastBCLRestartS-1-5-21-1765931364-2895769979-1631063868-1001 deleted
C:\WINDOWS\SysNative\config\systemprofile\Searches deleted
C:\windows\SysNative\GroupPolicy\machine deleted
C:\windows\SysNative\GroupPolicy\gpt.ini deleted

==== Chromium Look ======================

Google Chrome Version: 43.0.2357.65


Nordic Forest - Pepa7\AppData\Local\Google\Chrome\User Data\Default\Extensions\amekpplpfocpmaimnmgfjoibodpjedie
Bookmark Manager - Pepa7\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik

==== Chromium Startpages ======================

C:\Users\Pepa7\AppData\Local\Google\Chrome\User Data\Default\Preferences
sk:80,http://free.zoznam.sk:80":{"fullscreen":1},"http://mobilni-telefony.heureka.cz:80,http://mobilni-telefony.heureka.cz:80":{"geolocation":1,"last_used":{"geolocation":1432111959.004417}},"http://www.kfc.cz:80,http://www.kfc.cz:80":{"geolocation":1,"last_used":{"geolocation":1432222661.129627}},"https://www.youtube.com:443,https://www.youtube.com:443":{"fullscreen":1}},"plugin_whitelist":{"adobe-flash-player":true,"adobe-shockwave":true,"npAdobeAAMDetect32":{"dll":true},"npbattlelog":{"dll":true}},"pref_version":1},"created_by_version":"39.0.2171.95","default_content_settings":{},"exit_type":"Normal","exited_cleanly":true,"gaia_info_picture_url":"https://lh6.googleusercontent.com/-ONrl9Cd6jHs/AAAAAAAAAAI/AAAAAAAAAtI/3zdNJp50uAI/s256-c/photo.jpg","gaia_info_update_time":"13076881560492312","icon_version":3,"managed_user_id":"","managed_users":{},"migrated_content_settings_exceptions":true,"migrated_default_content_settings":true,"migrated_default_media_stream_content_settings":true,"name":"První uživatel","per_host_zoom_levels":{}},"protection":{"macs":{}},"reverse_autologin":{"enabled":false},"savefile":{"default_directory":"C:\\Users\\Pepa7\\Desktop","type":1},"selectfile":{"last_directory":"C:\\Users\\Pepa7\\Desktop"},"session":{"restore_on_startup_migrated":true,"startup_urls_migration_time":"13063933383734813"},"shelf_alignment_local":"Bottom","signin":{"signedin_time":"13065374308216457"},"sync":{"app_list":true,"app_settings":true,"apps":true,"autofill":true,"autofill_profile":true,"autofill_wallet":true,"bookmarks":true,"dictionary":true,"encryption_bootstrap_token":"AQAAANCMnd8BFdERjHoAwE/Cl+sBAAAAKmR10ZBq30WKqMWiWJ3j7wAAAAACAAAAAAAQZgAAAAEAACAAAAAQyPOHQeU+F3ldbZPl9IMBb6y2SDVWk7uwrsD38GVstgAAAAAOgAAAAAIAACAAAAB+XSzsKAiDIMwzTjmcK97m6Xi8ljU0A/CxfZkv8wsI0UAAAAC7mx47S1LSBSI4484gNFxZVXXLIrKaYD7B1hdMuKsRZgldNr53OEPRpt1XuQP1p2V9H8bC1aCT6q9mnqVPf882QAAAAAFjEisf8BPtMySkjeeIsPZ9oHDCib9iHbFThVmMZH1qxahbayVYX9KtpagDSDVe9tDlz8zYA8YSru5XSTVbAXs=","extension_settings":true,"extensions":true,"favicon_images":true,"favicon_tracking":true,"first_sync_time":"13063933411210509","has_auth_error":false,"has_setup_completed":true,"history_delete_directives":true,"keystore_encryption_bootstrap_token":"AQAAANCMnd8BFdERjHoAwE/Cl+sBAAAAKmR10ZBq30WKqMWiWJ3j7wAAAAACAAAAAAAQZgAAAAEAACAAAACj9Zkepbhly1MkBd/xzsDpZtnkKOfYcdz/SUk/eCAzLQAAAAAOgAAAAAIAACAAAAC+Q5/sEZB7nWVinhJaHQPdw+I7saI6l984l4p0+5OEu1AAAABoK0oYocz8pJQeVjZ7IF7n3torV3IhLFNanVSg0ca0UcwU5sQ6ouR/sJou3wPtLDCSe2WwYrjsQ1igkDMBXRX0JgHiRCHdxHTpM+pj6eHExEAAAAC6VlTXnU4WwCXT73dFvj4B8HjzOajcBR2crO6/iY1yf8LPD0dYFpd6jl78kOOnIl2k+c6OYRUaSNs2SuKv32fQ","last_synced_time":"13076936017180516","managed_user_settings":true,"managed_user_shared_settings":true,"managed_user_whitelists":true,"managed_users":true,"passwords":true,"preferences":true,"priority_preferences":true,"search_engines":true,"session_sync_guid":"session_syncydNjGKtD23xXkzojK+sdcQ==","sessions":true,"suppress_start":false,"tabs":true,"themes":true,"typed_urls":true},"sync_promo":{"startup_count":1},"translate_accepted_count":{"de":0,"en":19,"es":0,"fr":0,"hu":0,"it":1,"lt":0,"pl":0,"pt":0,"ru":9,"sk":1,"tr":0,"und":0},"translate_blocked_languages":[],"translate_denied_count":{"de":5,"en":0,"es":1,"fr":3,"hu":1,"it":0,"lt":5,"pl":3,"pt":3,"ru":0,"sk":0,"tr":1,"und":1},"translate_last_denied_time":1419460348381.0,"translate_site_blacklist":["orteil.dashnet.org","s2vin.daemu.cz"],"translate_too_often_denied":true,"translate_whitelists":{},"zerosuggest":{"cachedresults":""}}
_oem":false},"pafkbggdmjlpgkdkcbjmhmfcdpncadgh":{"active_permissions":{"api":["alarms","gcm","identity","metricsPrivate","notifications","storage","tabs","webstorePrivate"],"explicit_host":["*://*.google.com/*","*://*.gstatic.com/*","https://*.googleapis.com/*","https://*.googleusercontent.com/*"],"manifest_permissions":[]},"commands":{},"content_settings":[],"creation_flags":1,"events":["alarms.onAlarm","gcm.onMessage","identity.onSignInChanged","notifications.onButtonClicked","notifications.onClicked","notifications.onClosed","notifications.onPermissionLevelChanged","notifications.onShowSettings","pushMessaging.onMessage","runtime.onInstalled","runtime.onStartup","runtime.onSuspend","storage.onChanged"],"from_bookmark":false,"from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"initial_keybindings_set":true,"install_time":"13063933501327831","location":5,"manifest":{"background":{"persistent":false,"scripts":["utility.js","cards.js","background.js"]},"description":"Integrates Google Now into Chrome.","icons":{"128":"images/icon128.png","16":"images/icon16.png","48":"images/icon48.png"},"key":"MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhqJr32OFD/bMXW4Md7jMfd7LbwHXVc6x5bBQG5U+dloofoxrICDR20yur/40mQ8O//0sS1b8srvbab1CRlSrxoNCr9T80NAkfzx0gHyVS+p1Zow+1FzLMu9PiGwwFyN80HIB7GI/dIa0wC9K/2OrrzcHEhVH96DacTtWQqjfDVtZPjT7Xwv23dgoWcpbkRC86jMJot3dmX9xnn0KzoVc9gDOHSIkBLbkkr6Sp3LGXCCM4L0DJgxdFwaLr5WBzgC3y5x0/wwPIwN4PtIaK3BhH6njlksfnKwwIJ9iRT41V4BqbWu4mszO/7VJ3HJyw2DBpIc2grU9ZRRxrV3fRQG4wIDAQAB","manifest_version":2,"name":"Google Now","oauth2":{"auto_approve":true,"scopes":["https://www.googleapis.com/auth/googlenow"]},"optional_permissions":["background"],"permissions":["alarms","identity","metricsPrivate","notifications","pushMessaging","storage","tabs","webstorePrivate","*://*.google.com/*","*://*.gstatic.com/*","https://*.googleapis.com/chromenow/v1/*","https://*.googleusercontent.com/*"],"version":"1.2.0.1"},"path":"C:\\Program Files (x86)\\Google\\Chrome\\Application\\39.0.2171.95\\resources\\google_now","preferences":{},"regular_only_preferences":{},"state":1,"was_installed_by_default":false,"was_installed_by_oem":false},"pjkljhegncpnkpknbcohdijeoejaedia":{"ack_external":true,"active_bit":false,"active_permissions":{"api":["notifications"],"manifest_permissions":[]},"app_launcher_ordinal":"y","commands":{},"content_settings":[],"creation_flags":137,"events":[],"from_bookmark":false,"from_webstore":true,"granted_permissions":{"api":["notifications"],"manifest_permissions":[]},"incognito_content_settings":[],"incognito_preferences":{},"install_time":"13072013492636637","last_active_pingday":"13068979201100358","last_launch_time":"13069063334192433","lastpingday":"13076924398812115","location":1,"manifest":{"app":{"launch":{"container":"tab","web_url":"https://mail.google.com/mail/ca"},"urls":["*://mail.google.com/mail/ca"]},"current_locale":"cs","default_locale":"en","description":"Rychlý e-mail s možností vyhledávání a menším množstvím spamu.","icons":{"128":"128.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDCuGglK43iAz3J9BEYK/Mz6ZhloIMMDqQSAaf3vJt4eHbTbSDsu4WdQ9dQDRcKlg8nwQdePBt0C3PSUBtiSNSS37Z3qEGfS7LCju3h6pI1Yr9MQtxw+jUa7kXXIS09VV73pEFUT/F7c6Qe8L5ZxgAcBvXBh1Fie63qb02I9XQ/CQIDAQAB","manifest_version":2,"name":"Gmail","options_page":"https://mail.google.com/mail/ca/#settings","permissions":["notifications"],"update_url":"http://clients2.google.com/service/update2/crx","version":"8.1"},"page_ordinal":"n","path":"pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0","preferences":{},"regular_only_preferences":{},"state":1,"was_installed_by_default":true,"was_installed_by_oem":false}}},"google":{"services":{"last_username":"JosefMik8@gmail.com","username":"JosefMik8@gmail.com"}},"homepage":"","homepage_is_newtabpage":true,"pinned_tabs":[],"protection":{"macs":{"browser":{"show_home_button":"9F407E381A3C7E2D6E214ECA3E11ACF52C02FFDA76F7D041C311F2CACB2C4A74"},"default_search_provider":{"keyword":"DFB954171633EBC12D958AA625612AAC38F81E1FC269591ADF51A96BDB89BC8E","name":"CA6156647EEAAE11DAF448A71BCAC8BDCED4C1FF808EADAC753B54B2D4C0055D","search_url":"824F8D4CF41EE7A9C1996E35962316DD1B7D8FCC9D06E2C04544724C4B41E044"},"default_search_provider_data":{"template_url_data":"469C7CEB22B3F88CBA5D76548C0EFD4A0AEBD555C7D52D0B5BE849EA189784EC"},"extensions":{"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":"B52590AD9302971396D4D9B4241E7CA87EA769AE151F0B05CDE0638F880B0A40","amekpplpfocpmaimnmgfjoibodpjedie":"1BFC97C05C422CAB4D67EA75C5AFEB60D5465668C8183E20F82B7143BF0A29A5","apdfllckaahabafndbhieahigkjlhalf":"5F64E8E956421DF531F6AA1491C030E2491A097478753717F608701CF039652E","bepbmhgboaologfdajaanbcjmnhjmhfn":"08CE30A098470FFD1A483CBE55BF03BF5A8335CB1B2682F13605E24CBF595378","blpcfgokakmgnkcojhhkbfbldkacnbeo":"8889BDDBAD2445A51D9AEE48DC396912178FD5676FD1F304ADF07E5992B7D63B","coobgpohoikkiipiblmjeljniedjpjpf":"245217140969CC145DEAF0349ED860DE62F882C5F1016E398E3D4BA00476721E","eemcgdkfndhakfknompkggombfjjjeno":"960F48AAFC2B2BCE3A77A1045246D91B220A53C18CBDAAC938D4FF5736AE3BBC","ennkphjdgehloodpbhlhldgbnhmacadg":"2BE8C019BF9DB5BDAD8C0AB472C2AD36CBD75E644365FE30E0376828B1F1302C","gfdkimpbcpahaombhbimeihdjnejgicl":"F5583B115EF7A363D07E0E8DB33AB3CA443560BB3E854FFDAC6CD37E78E6B2A0","gmlllbghnfkpflemihljekbapjopfjik":"132B81E782C3F501B18F7E328538DC4CE2DFE8DE8A2EFBB1358FA708BA2692F0","gomekmidlodglbbmalcneegieacbdmki":"81B677F5632FD20F301EA084134C07CFB9F511FFB218AF97FB1C3305F22A9DFB","kmendfapggjehodndflmmgagdbamhnfd":"8D88286CA81A0D8C617642CD534B511BAD56357031FACD93423D09FC28B4E513","mfehgcgbbipciphmccgaenjidiccnmng":"FAEBF745DCC5B8CD632CB7BD03EAE931453C10D76D2FDBA2B159DE64FBF74F9B","mfffpogegjflfpflabcdkioaeobkgjik":"87506B22F61E58229064C1EC2E177953590CFA53FF4B5C97CC50F99232E56170","mgndgikekgjfcpckkfioiadnlibdjbkf":"F2C90A34B00C99B1B292D8D0CF99CF9C47F39D652251FCBCF3D239C71BF2CA08","mhjfbmdgcfjbbpaeojofohoefgiehjai":"B8DDE89A80CEBD983D506E95965A967383DC03995FC4B7F26A91B5F79D7C2A05","neajdppkdcdipfabeoofebfddakdcjhd":"78C940A424C8583268FE90AB765438CBD056F98AFD2EF5C95B8BD43F9E1CD127","nkeimhogjdpnpccoofpliimaahmaaome":"A43AA7BBA275F4E2F9EDB9561E0B0AA6394009FF95C0A9FDB526A9D4611AAD37","nmmhkkegccagdldgiimedpiccmgmieda":"2B501147D650DE8A31F73EC8418B773B59C75A06EA84CD4E01BC387020F9ADCA","pafkbggdmjlpgkdkcbjmhmfcdpncadgh":"06ED6B8905AACA0E5D7534D31F343A445509399F879D71812E8D50FBA70F95EB","pjkljhegncpnkpknbcohdijeoejaedia":"652A62DA06C165E2C51CA956C9EBF32FB0DBDCEA4101482750DC8E1481AC2BB4"}},"google":{"services":{"last_username":"9817EC6653A027983962467B57E66CBF228BCF76CD7BA5CA9F027BC708C25B17","username":"6CFFD96C4572D7F80B2020B1F269C8B68FDB614D2518170C20F5F61D3A5EDE66"}},"homepage":"1650D993B3FEFD4E8FB540F9BE87359BCCE468BB4D3F933D6CD0FB8732B0EFAC","homepage_is_newtabpage":"8868DA3885DB5137C2FBCD9C3763CEFA16AF30B10236139CE6A28CECF2841A1B","pinned_tabs":"BD230B84FFB02566B57A81D7CF02486F12F5A75909DABC6066A880B0A38C50A2","prefs":{"preference_reset_time":"356B2FD9BF827238E4FA347064E523F4275215473B35D959055A8C8224092DD2"},"profile":{"reset_prompt_memento":"5DB632D1DE691356702C167BB872FE06DF3A4AF7A3F5BB5A3BD09A66A6504FA3"},"safebrowsing":{"incidents_sent":"9611246FE90E71782265164E646B5532E47D233CE76F902F69FB3E94A3762981"},"search_provider_overrides":"BA98E7D3D13C08CBCFAA92671056421F47FE71E4D90DF6968FCD69D839F21EDE","session":{"restore_on_startup":"B86D40DE96313278544346A6A1F4A023CD4E9ED52ED8A29DCBA0665C3CCA46D2","startup_urls":"14AB2B1AF3ADD9BE2E7C8AD2891B9A8F45E1223E80C6B9D9E318DB886BDFC807"},"software_reporter":{"prompt_reason":"8D7AD2F1CCF805D3135E0F9EB4EB3DBCC799EBA940E612322C4E295057BC92BE","prompt_seed":"3B8688975B514C8A36766137BBFEF941A4E5B2DC48E5D26EDA0CA93A0C0C8628","prompt_version":"4B369BB9E39C1DCE9BF542FF7B513C9F49AA5E5ED20BC13C78897C4137460A6A"},"sync":{"remaining_rollback_tries":"A9FF4E38B3B473BE897687DC641D0A1657B2D424111AA8A13C513F59314D7568"}},"super_mac":"26F06C45F9A9CCF8A2A91F8B82DF151FD526DB2A1FF7C87F7ADE7450F8E7BCB6"},"session":{"restore_on_startup":5,"startup_urls":["http://www.seznam.cz/"]},"software_reporter":{"prompt_reason":0,"prompt_version":"3.20.1"},"sync":{"remaining_rollback_tries":0}}


==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/p/?LinkId=255141"
"Old Start Page"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com"
"Default_Page_URL"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com"
"Default_Page_URL"="http://www.google.com"

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/p/?LinkId=255141"
"Old Start Page"="http://go.microsoft.com/fwlink/p/?LinkId=255141"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
{012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC"
{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7"

==== Reset Google Chrome ======================

C:\Users\Pepa7\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\Pepa7\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences was reset successfully
C:\Users\Pepa7\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully
C:\Users\Pepa7\AppData\Local\Google\Chrome\User Data\Default\Web Data-journal was reset successfully

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\Software\wow6432node\Policies\Google deleted successfully

==== Empty IE Cache ======================

C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Pepa7\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Users\Pepa7\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5 emptied successfully
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\WINDOWS\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\WINDOWS\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Users\Pepa7\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully
C:\Users\Pepa7\AppData\Local\Microsoft\Windows\INetCache\Low\IE emptied successfully
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully
C:\WINDOWS\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully

==== Empty FireFox Cache ======================

No FireFox Profiles found

==== Empty Chrome Cache ======================

C:\Users\Pepa7\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

No Flash Cache Found

==== Empty All Java Cache ======================

No Java Cache Found

==== C:\zoek_backup content ======================

C:\zoek_backup (files=2625 folders=532 510714447 bytes)

==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\Pepa7\AppData\Local\Temp will be emptied at reboot
C:\WINDOWS\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\WINDOWS\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\WINDOWS\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\WINDOWS\Temp successfully emptied
C:\Users\Pepa7\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== EOF on ne 24. 05. 2015 at 12:25:16,66 ======================
Don’t panic, it’s organic!

Intel Core i5-10400F, Gigabyte GTX 1660 Super OC, HyperX Predator 16GB (2x8GB) DDR4 2666 CL13, Seasonic CORE GM-500 - 500W, ASRock B460M PRO4 - Intel B460, Kingston A2000, M.2 - 1TB, Arctic Freezer 34 eSports, Ducky Shine 7 MX silent red, Endgame Gear XM1.

Uživatelský avatar
LosMajos
Level 3.5
Level 3.5
Příspěvky: 663
Registrován: prosinec 13
Pohlaví: Muž
Stav:
Offline

Re: Reklamy, PC zamrzává

Příspěvekod LosMajos » 24 kvě 2015 12:32

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:31:40, on 24. 5. 2015
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.17416)


Boot mode: Normal

Running processes:
C:\PROGRA~2\Raptr\raptr.exe
C:\PROGRA~2\Raptr\raptr_im.exe
C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Users\Pepa7\Desktop\PC testy\HijackThis.exe
C:\Users\Pepa7\Desktop\HijackThis.exe
C:\WINDOWS\SysWOW64\DllHost.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O4 - HKLM\..\Run: [Imperator] C:\Program Files (x86)\Genius\Imperator\IMhid.exe
O4 - HKLM\..\Run: [Raptr] "C:\Program Files (x86)\Raptr\raptrstub.exe" --startup
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [Adobe Creative Cloud] "C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe" --showwindow=false --onOSstartup=true
O4 - HKLM\..\Run: [Live Update] C:\Program Files (x86)\MSI\Live Update\Live Update.exe /REMINDER
O4 - HKCU\..\Run: [EADM] "C:\Program Files (x86)\Origin\Origin.exe" -AutoStart
O4 - HKCU\..\Run: [OscarEditor] "C:\Program Files (x86)\OSCAR Editor X7\OscarEditor.exe" Minimum
O4 - Global Startup: Dual Smart Solution.lnk = ?
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\PROGRA~1\MICROS~1\Office15\ONBttnIE.dll/105
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\WINDOWS\system32\atiesrxx.exe (file missing)
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Futuremark SystemInfo Service - Futuremark - C:\Program Files (x86)\Futuremark\SystemInfo\FMSISvc.exe
O23 - Service: GamingApp_Service - Micro-Star Int'l Co., Ltd. - C:\Program Files (x86)\MSI\MSI Gaming APP\GamingApp_Service.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: Intel(R) Integrated Clock Controller Service - Intel(R) ICCS (ICCS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService1.0.0.0) - Unknown owner - C:\WINDOWS\system32\igfxCUIService.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: MSI_LiveUpdate_Service - Micro-Star INT'L CO., LTD. - C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Origin Client Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginClientService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: SuperRAIDSvc - Micro-Star International - C:\MSI\Smart Utilities\SuperRAIDSvc.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: Intel(R) Extreme Tuning Utility Service (XTU3SERVICE) - Intel(R) Corporation - C:\Program Files (x86)\Intel\Extreme Tuning Utility\XtuService.exe

--
End of file - 8026 bytes
Don’t panic, it’s organic!

Intel Core i5-10400F, Gigabyte GTX 1660 Super OC, HyperX Predator 16GB (2x8GB) DDR4 2666 CL13, Seasonic CORE GM-500 - 500W, ASRock B460M PRO4 - Intel B460, Kingston A2000, M.2 - 1TB, Arctic Freezer 34 eSports, Ducky Shine 7 MX silent red, Endgame Gear XM1.

Uživatelský avatar
jerabina
člen Security týmu
Level 6
Level 6
Příspěvky: 3647
Registrován: březen 13
Bydliště: Litoměřice
Pohlaví: Muž
Stav:
Offline

Re: Reklamy, PC zamrzává

Příspěvekod jerabina » 24 kvě 2015 12:46

Tak ještě dočistíme :-)

Zavři ostatní programy/prohlížeče, odpoj se od internetu a v HJT fixni:
NÁVOD

Kód: Vybrat vše

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O4 - HKLM\..\Run: [Live Update] C:\Program Files (x86)\MSI\Live Update\Live Update.exe /REMINDER
O4 - HKCU\..\Run: [EADM] "C:\Program Files (x86)\Origin\Origin.exe" -AutoStart
O4 - HKCU\..\Run: [OscarEditor] "C:\Program Files (x86)\OSCAR Editor X7\OscarEditor.exe" Minimum



Stáhni si zde DelFix
https://toolslib.net/downloads/viewdownload/2-delfix/

ulož si soubor na plochu.
Poklepáním na ikonu spusť nástroj Delfix.exe
( Ve Windows Vista, Windows 7 a 8, musíš spustit soubor pravým tlačítkem myši -> Spustit jako správce .
V hlavním menu, zkontroluj tyto možnosti - Odstranění dezinfekce nástrojů (Remove desinfection tools) – Vyčistit body obnovy (Purge System Restore) .
Poté klikněte na tlačítko Spustit (Run) a nech nástroj dělat svoji práci.

Poté se zpráva se otevře (DelFix.txt). Vlož celý obsah zprávy sem. Jinak je zpráva zde:
v C: \ DelFix.txt

Co problémy?
Když nevíš jak dál, přichází na řadu prostudovat manuál!
HJT návod

Pokud neodpovídám do vašich témat v sekci HJT když jsem online, tak je to jen proto, že jsem na mobilu kde je studování logů a psaní skriptů nemožné. Neberte to tedy prosím jako ignoraci.

Uživatelský avatar
LosMajos
Level 3.5
Level 3.5
Příspěvky: 663
Registrován: prosinec 13
Pohlaví: Muž
Stav:
Offline

Re: Reklamy, PC zamrzává

Příspěvekod LosMajos » 24 kvě 2015 12:57

# DelFix v1.010 - Logfile created 24/05/2015 at 12:54:32
# Updated 26/04/2015 by Xplode
# Username : Pepa7 - PEPA
# Operating System : Windows 8.1 (64 bits)

~ Removing disinfection tools ...

Deleted : C:\zoek_backup
Deleted : C:\AdwCleaner
Deleted : C:\RegBackup
Deleted : C:\zoek-results.log
Deleted : C:\Users\Pepa7\Desktop\AdwCleaner.exe
Deleted : C:\Users\Pepa7\Desktop\JRT.exe
Deleted : C:\Users\Pepa7\Desktop\JRT.txt
Deleted : C:\Users\Pepa7\Desktop\HijackThis.exe
Deleted : C:\Users\Pepa7\Desktop\hijackthis.log
Deleted : C:\Users\Pepa7\Desktop\RogueKillerX64.exe
Deleted : C:\Users\Pepa7\Desktop\zoek.exe
Deleted : C:\Users\Pepa7\Downloads\AdwCleaner.exe
Deleted : C:\Users\Pepa7\Downloads\JRT.exe
Deleted : C:\Users\Pepa7\Downloads\HijackThis (1).exe
Deleted : C:\Users\Pepa7\Downloads\HijackThis (2).exe
Deleted : C:\Users\Pepa7\Downloads\HijackThis.exe
Deleted : C:\Users\Pepa7\Downloads\RogueKillerX64.exe
Deleted : C:\Users\Pepa7\Downloads\TFC.exe
Deleted : C:\Users\Pepa7\Downloads\zoek.exe
Deleted : HKLM\SOFTWARE\OldTimer Tools
Deleted : HKLM\SOFTWARE\AdwCleaner
Deleted : HKLM\SOFTWARE\TrendMicro\Hijackthis

~ Cleaning system restore ...

Deleted : RP #32 [Installed Dual Smart Solution | 05/07/2015 18:46:53]
Deleted : RP #33 [Installed OSCAR Editor | 05/09/2015 16:25:13]
Deleted : RP #34 [Nainstalováno rozhraní DirectX | 05/10/2015 16:33:30]
Deleted : RP #35 [Software Removal Tool | 05/15/2015 07:30:00]
Deleted : RP #36 [Windows Update | 05/20/2015 20:31:45]
Deleted : RP #37 [zoek.exe restore point | 05/24/2015 10:16:05]

New restore point created !

########## - EOF - ##########

Vypadá to zatím v pohodě. Když tak napíšu. :-) jestli je to všechno tak moc děkuji za rady a za tvůj čas :) díky!

EDIT: PC se mi zdá celkově takové rychlejší.. :thumbup:
Don’t panic, it’s organic!

Intel Core i5-10400F, Gigabyte GTX 1660 Super OC, HyperX Predator 16GB (2x8GB) DDR4 2666 CL13, Seasonic CORE GM-500 - 500W, ASRock B460M PRO4 - Intel B460, Kingston A2000, M.2 - 1TB, Arctic Freezer 34 eSports, Ducky Shine 7 MX silent red, Endgame Gear XM1.

Uživatelský avatar
jerabina
člen Security týmu
Level 6
Level 6
Příspěvky: 3647
Registrován: březen 13
Bydliště: Litoměřice
Pohlaví: Muž
Stav:
Offline

Re: Reklamy, PC zamrzává  Vyřešeno

Příspěvekod jerabina » 24 kvě 2015 13:25

Ano, mělo by být rychlejší :-)

Pokud je to tedy doopravdy vše, tak můžeš téma uzamknout zelenou fajfkou :-)
Když nevíš jak dál, přichází na řadu prostudovat manuál!
HJT návod

Pokud neodpovídám do vašich témat v sekci HJT když jsem online, tak je to jen proto, že jsem na mobilu kde je studování logů a psaní skriptů nemožné. Neberte to tedy prosím jako ignoraci.


Zpět na “HiJackThis”

Kdo je online

Uživatelé prohlížející si toto fórum: Žádní registrovaní uživatelé a 67 hostů