Prosím o kontrolu logu - PC pracuje příliš nahlas Vyřešeno

[MachrCZ]

po vymazani:

RogueKiller V10.7.0.0 (x64) [May 25 2015] by Adlice Software
mail : http://www.adlice.com/contact/
Feedback : http://forum.adlice.com
Webová stránka : http://www.adlice.com/softwares/roguekiller/
Blog : http://www.adlice.com

Operační systém : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Spuštěno : Normální režim
Uživatel : Blejzr [Práva správce]
Started from : C:\Users\Blejzr\Downloads\RogueKillerX64(1).exe
Mód : Smazat -- Datum : 05/30/2015 16:09:19

¤¤¤ Procesy : 0 ¤¤¤

¤¤¤ Registry : 6 ¤¤¤
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters | DhcpNameServer : 94.142.233.120 94.142.233.140 [-][(Unknown Country?) (XX)] -> Nahrazeno ()
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters | DhcpNameServer : 94.142.233.120 94.142.233.140 [-][(Unknown Country?) (XX)] -> Nahrazeno ()
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet002\Services\Tcpip\Parameters | DhcpNameServer : 94.142.233.120 94.142.233.140 [-][(Unknown Country?) (XX)] -> Nahrazeno ()
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{DB9B2177-6D44-4B50-83BB-2ADB7231C2CD} | DhcpNameServer : 94.142.233.120 94.142.233.140 [-][(Unknown Country?) (XX)] -> Nahrazeno ()
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters\Interfaces\{DB9B2177-6D44-4B50-83BB-2ADB7231C2CD} | DhcpNameServer : 94.142.233.120 94.142.233.140 [-][(Unknown Country?) (XX)] -> Nahrazeno ()
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet002\Services\Tcpip\Parameters\Interfaces\{DB9B2177-6D44-4B50-83BB-2ADB7231C2CD} | DhcpNameServer : 94.142.233.120 94.142.233.140 [-][(Unknown Country?) (XX)] -> Nahrazeno ()

¤¤¤ Úlohy : 0 ¤¤¤

¤¤¤ Soubory : 0 ¤¤¤

¤¤¤ Soubor HOSTS : 0 ¤¤¤

¤¤¤ Antirootkit : 0 (Driver: Nahrán) ¤¤¤

¤¤¤ Webové prohlížeče : 0 ¤¤¤

¤¤¤ Kontrola MBR : ¤¤¤
+++++ PhysicalDrive0: ST1000DM003-1ER162 ATA Device +++++
--- User ---
[MBR] 6a3cceb7ec0db9102ede18a32452e885
[BSP] 6ec86c022a0192d9f9180418ce2d1304 : Windows Vista/7/8 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 100 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
1 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 206848 | Size: 953767 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
User = LL1 ... OK
User = LL2 ... OK

+++++ PhysicalDrive1: SAMSUNG HD501LJ ATA Device +++++
--- User ---
[MBR] 84c25c329e976c0b8bcbd63b51089119
[BSP] 914ad823ee5f0ba729cb059c1329d57c : HP MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 476938 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
User = LL1 ... OK
User = LL2 ... OK


============================================
RKreport_SCN_10252014_000805.log - RKreport_SCN_11152014_180909.log - RKreport_SCN_11192014_234010.log - RKreport_DEL_11192014_234119.log
RKreport_SCN_05302015_153434.log - RKreport_DEL_05302015_154200.log - RKreport_DEL_05302015_154211.log - RKreport_DEL_05302015_155311.log
RKreport_SCN_05302015_160843.log

[Reklama]

[MachrCZ]

Zoek.exe v5.0.0.0 Updated 04-May-2015
Tool run by Blejzr on so 30.05.2015 at 16:10:05,16.
Microsoft Windows 7 Ultimate 6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Blejzr\Desktop\zoek.exe [Scan all users] [Script inserted]

==== Older Logs ======================

C:\zoek-results2014-11-19-225746.log 8766 bytes

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

# localhost name resolution is handled within DNS itself.
127.0.0.1 localhost
::1 localhost

==== Empty Folders Check ======================

C:\PROGRA~2\InterLok deleted successfully
C:\Program Files\ATI Technologies deleted successfully
C:\Program Files\stinger deleted successfully
C:\Users\Blejzr\AppData\Roaming\JAM Software deleted successfully
C:\Users\Blejzr\AppData\Local\WMTools Downloaded Files deleted successfully

==== Deleting CLSID Registry Keys ======================


==== Deleting CLSID Registry Values ======================


==== Deleting Services ======================


==== FireFox Fix ======================

Deleted from C:\Users\Blejzr\AppData\Roaming\Mozilla\Firefox\Profiles\onelrn77.default\prefs.js:
user_pref("browser.search.defaulturl", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.search.defaultengine", "Google");
user_pref("browser.search.order.1", "Google");
user_pref("browser.search.useDBForOrder", true);

Added to C:\Users\Blejzr\AppData\Roaming\Mozilla\Firefox\Profiles\onelrn77.default\prefs.js:
user_pref("browser.startup.homepage", "about:home");
user_pref("browser.newtab.url", "about:newtab");

==== Deleting Files \ Folders ======================

C:\PROGRA~2\InterLok not found
C:\PROGRA~2\Auto-Tune Evo VST deleted
C:\PROGRA~3\Package Cache deleted
C:\Windows\SysNative\config\systemprofile\Searches deleted
C:\Users\Blejzr\AppData\Roaming\Mozilla\Firefox\Profiles\onelrn77.default\Invalidprefs.js deleted
C:\Users\Blejzr\AppData\Roaming\Mozilla\Firefox\Profiles\onelrn77.default\jetpack deleted
"C:\Windows\Installer\16c63e.msi" deleted

==== Firefox Start and Search pages ======================

ProfilePath: C:\Users\Blejzr\AppData\Roaming\Mozilla\Firefox\Profiles\onelrn77.default
user_pref("browser.startup.homepage", "about:home");
user_pref("browser.newtab.url", "about:newtab");

==== Firefox Extensions ======================

AppDir: C:\Program Files (x86)\Mozilla Firefox
- Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

==== Firefox Plugins ======================

Profilepath: C:\Users\Blejzr\AppData\Roaming\Mozilla\Firefox\Profiles\onelrn77.default
2E661988463BCFA1B95D4DAAB9B0B6FA - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_188.dll - Shockwave Flash
A850CDD9B02AD865A18FAE00A95B9D63 - C:\Users\Blejzr\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll - Unity Player


==== Chromium Look ======================

Google Chrome Version: 43.0.2357.81


Comodo Drag&Drop Service - Blejzr\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\aneodkojaglhnkkdbbdnmmmgimlcaogo
Comodo Web Inspector - Blejzr\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bdngekjahnmlkinegnhdmmbcfnmbclnn
Comodo Media Downloader - Blejzr\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dihmnpngfonlhjmgkflpnibiaaliendo
Bookmark Manager - Blejzr\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik

==== Chromium Startpages ======================

C:\Users\Blejzr\AppData\Local\Google\Chrome\User Data\Default\Preferences
02,"protocol_str":"quic"}],"settings":{"4":100,"5":32,"6":0},"supports_spdy":true},"p5-p3w5df3zuvfxm-7xso5xkuvc562mnk-211391-i1-v6exp3-v4.metric.gstatic.com:443":{"alternative_service":[{"port":443,"probability":0.02,"protocol_str":"quic"}],"settings":{"4":100,"5":32,"6":0},"supports_spdy":true},"p5-p3w5df3zuvfxm-7xso5xkuvc562mnk-211391-i2-v6exp3-ds.metric.gstatic.com:443":{"alternative_service":[{"port":443,"probability":0.02,"protocol_str":"quic"}],"settings":{"4":100,"5":25,"6":0},"supports_spdy":true},"p5-xirj5h4o6e5yc-av4idctwdnhl5ibd-155558-i1-v6exp3-ds.metric.gstatic.com:443":{"alternative_service":[{"port":443,"probability":0.02,"protocol_str":"quic"}],"settings":{"4":100,"5":32,"6":0},"supports_spdy":true},"p5-xirj5h4o6e5yc-av4idctwdnhl5ibd-155558-i2-v6exp3-v4.metric.gstatic.com:443":{"alternative_service":[{"port":443,"probability":0.02,"protocol_str":"quic"}],"settings":{"4":100,"5":32,"6":0},"supports_spdy":true},"p5-xirj5h4o6e5yc-av4idctwdnhl5ibd-155558-s1-v6exp3-v4.metric.gstatic.com:443":{"alternative_service":[{"port":443,"probability":0.02,"protocol_str":"quic"}],"settings":{"4":100,"5":32,"6":0},"supports_spdy":true},"pagead2.googlesyndication.com:443":{"network_stats":{"srtt":29173},"supports_spdy":true},"pagead2.googlesyndication.com:80":{"network_stats":{"srtt":22486}},"partner.googleadservices.com:80":{"alternative_service":[{"port":80,"probability":1,"protocol_str":"quic"}],"network_stats":{"srtt":22486}},"plus.google.com:443":{"supports_spdy":true},"pubads.g.doubleclick.net:443":{"supports_spdy":true},"r1---sn-2gv1xu5-2gbe.c.pack.google.com:80":{"alternative_service":[{"port":80,"probability":0,"protocol_str":"quic"}]},"r2---sn-2gv1xu5-2gbe.c.pack.google.com:80":{"alternative_service":[{"port":80,"probability":0,"protocol_str":"quic"}]},"r3---sn-2gv1xu5-2gbe.c.pack.google.com:80":{"alternative_service":[{"port":80,"probability":0,"protocol_str":"quic"}]},"r3---sn-2gv1xu5-2gbe.googlevideo.com:443":{"alternative_service":[{"port":443,"probability":0.01,"protocol_str":"quic"}]},"s.yimg.com:443":{"supports_spdy":true},"s.youtube.com:443":{"network_stats":{"srtt":62143},"supports_spdy":true},"s.ytimg.com:443":{"alternative_service":[{"port":443,"probability":1,"protocol_str":"quic"}],"network_stats":{"srtt":38742},"settings":{"4":100,"5":31,"6":9},"supports_spdy":true},"s0.2mdn.net:80":{"alternative_service":[{"port":80,"probability":1,"protocol_str":"quic"}]},"scontent-a-fra.xx.fbcdn.net:443":{"supports_spdy":true},"scontent-fra.xx.fbcdn.net:443":{"supports_spdy":true},"scontent-fra3-1.xx.fbcdn.net:443":{"supports_spdy":true},"scontent-vie.xx.fbcdn.net:443":{"supports_spdy":true},"securepubads.g.doubleclick.net:443":{"network_stats":{"srtt":25899},"supports_spdy":true},"ssl.google-analytics.com:443":{"supports_spdy":true},"ssl.gstatic.com:443":{"network_stats":{"srtt":27891},"settings":{"4":100,"5":88,"6":0},"supports_spdy":true},"static.doubleclick.net:443":{"alternative_service":[{"port":443,"probability":1,"protocol_str":"quic"}]},"static1.globalsign.com:443":{"supports_spdy":true},"stats.g.doubleclick.net:443":{"alternative_service":[{"port":443,"probability":1,"protocol_str":"quic"}],"network_stats":{"srtt":39468},"settings":{"4":100,"5":32,"6":0},"supports_spdy":true},"sync.liverail.com:443":{"supports_spdy":true},"syndication.twitter.com:443":{"supports_spdy":true},"themes.googleusercontent.com:443":{"settings":{"4":100,"5":17,"6":26},"supports_spdy":true},"tpc.googlesyndication.com:443":{"network_stats":{"srtt":27671},"supports_spdy":true},"tpc.googlesyndication.com:80":{"network_stats":{"srtt":23585}},"twitter.com:443":{"supports_spdy":true},"upload.facebook.com:443":{"supports_spdy":true},"www.facebook.com:443":{"supports_spdy":true},"www.google-analytics.com:443":{"settings":{"4":100,"5":32,"6":0},"supports_spdy":true},"www.google-analytics.com:80":{"network_stats":{"srtt":20657}},"www.google.com:443":{"network_stats":{"srtt":40986},"settings":{"4":100,"5":15,"6":13},"supports_spdy":true},"www.google.cz:443":{"network_stats":{"srtt":49154},"settings":{"4":100,"5":96,"6":0},"supports_spdy":true},"www.googleapis.com:443":{"settings":{"4":100,"5":32,"6":0},"supports_spdy":true},"www.googletagmanager.com:80":{"network_stats":{"srtt":43049}},"www.googletagservices.com:443":{"network_stats":{"srtt":20076},"supports_spdy":true},"www.googletagservices.com:80":{"network_stats":{"srtt":22486}},"www.gstatic.com:443":{"network_stats":{"srtt":27891},"settings":{"4":100,"5":63,"6":1},"supports_spdy":true},"www.gstatic.com:80":{"alternative_service":[{"port":80,"probability":0.02,"protocol_str":"quic"}]},"www.youtube-nocookie.com:443":{"alternative_service":[{"port":443,"probability":1,"protocol_str":"quic"}],"network_stats":{"srtt":33702},"supports_spdy":true},"www.youtube.com:443":{"alternative_service":[{"port":443,"probability":1,"protocol_str":"quic"}],"network_stats":{"srtt":43162},"settings":{"4":100,"5":15,"6":0},"supports_spdy":true},"yt3.ggpht.com:443":{"supports_spdy":true}},"supports_quic":{"address":"192.168.10.187","used_quic":true},"version":3}},"plugins":{"migrated_to_pepper_flash":true,"plugins_list":[],"removed_old_component_pepper_flash_settings":true},"profile":{"avatar_index":0,"content_settings":{"clear_on_exit_migrated":true,"exceptions":{"app_banner":{},"auto_select_certificate":{},"automatic_downloads":{},"cookies":{},"fullscreen":{"[*.]hlascs.nova.cz,*":{"setting":1},"https://www.youtube.com:443,https://www.youtube.com:443":{"setting":1}},"geolocation":{},"images":{},"javascript":{},"media_stream":{},"media_stream_camera":{},"media_stream_mic":{},"metro_switch_to_desktop":{},"midi_sysex":{},"mixed_script":{},"mouselock":{},"notifications":{},"plugins":{},"popups":{},"ppapi_broker":{},"protocol_handlers":{},"push_messaging":{},"ssl_cert_decisions":{}},"pattern_pairs":{"[*.]hlascs.nova.cz,*":{"fullscreen":1},"https://www.youtube.com:443,https://www.youtube.com:443":{"fullscreen":1}},"pref_version":1},"created_by_version":"39.0.2171.65","exit_type":"Normal","exited_cleanly":true,"icon_version":3,"managed_user_id":"","migrated_content_settings_exceptions":true,"migrated_default_content_settings":true,"migrated_default_media_stream_content_settings":true,"name":"First user","per_host_zoom_levels":{}},"protection":{"macs":{}},"selectfile":{"last_directory":"C:\\Games\\Riot Games\\League of Legends\\Screenshots"},"session":{"restore_on_startup_migrated":true,"startup_urls_migration_time":"13060990462538745"},"translate_accepted_count":{"en":0},"translate_blocked_languages":["cs"],"translate_denied_count":{"en":2},"translate_last_denied_time":1420569000000,"translate_too_often_denied":true,"translate_whitelists":{}}
":true,"install_time":"13055802679733235","location":5,"manifest":{"background":{"persistent":false,"scripts":["utility.js","cards.js","background.js"]},"description":"Integrates Google Now into Chrome.","icons":{"128":"images/icon128.png","16":"images/icon16.png","48":"images/icon48.png"},"key":"MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhqJr32OFD/bMXW4Md7jMfd7LbwHXVc6x5bBQG5U+dloofoxrICDR20yur/40mQ8O//0sS1b8srvbab1CRlSrxoNCr9T80NAkfzx0gHyVS+p1Zow+1FzLMu9PiGwwFyN80HIB7GI/dIa0wC9K/2OrrzcHEhVH96DacTtWQqjfDVtZPjT7Xwv23dgoWcpbkRC86jMJot3dmX9xnn0KzoVc9gDOHSIkBLbkkr6Sp3LGXCCM4L0DJgxdFwaLr5WBzgC3y5x0/wwPIwN4PtIaK3BhH6njlksfnKwwIJ9iRT41V4BqbWu4mszO/7VJ3HJyw2DBpIc2grU9ZRRxrV3fRQG4wIDAQAB","manifest_version":2,"name":"Google Now","oauth2":{"auto_approve":true,"scopes":["https://www.googleapis.com/auth/googlenow"]},"optional_permissions":["background"],"permissions":["alarms","identity","metricsPrivate","notifications","pushMessaging","storage","tabs","webstorePrivate","*://*.google.com/*","*://*.gstatic.com/*","https://*.googleapis.com/chromenow/v1/*","https://*.googleusercontent.com/*"],"version":"1.2.0.1"},"path":"C:\\Program Files (x86)\\Google\\Chrome\\Application\\37.0.2062.120\\resources\\google_now","preferences":{},"regular_only_preferences":{},"was_installed_by_default":false,"was_installed_by_oem":false},"pjkljhegncpnkpknbcohdijeoejaedia":{"ack_external":true,"active_permissions":{"api":["notifications"],"manifest_permissions":[]},"app_launcher_ordinal":"x","commands":{},"content_settings":[],"creation_flags":137,"events":[],"from_bookmark":false,"from_webstore":true,"granted_permissions":{"api":["notifications"],"manifest_permissions":[]},"incognito_content_settings":[],"incognito_preferences":{},"install_time":"13075751286222930","lastpingday":"13076492397847320","location":1,"manifest":{"app":{"launch":{"container":"tab","web_url":"https://mail.google.com/mail/ca"},"urls":["*://mail.google.com/mail/ca"]},"current_locale":"cs","default_locale":"en","description":"Rychlý e-mail s možností vyhledávání a menším množstvím spamu.","icons":{"128":"128.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDCuGglK43iAz3J9BEYK/Mz6ZhloIMMDqQSAaf3vJt4eHbTbSDsu4WdQ9dQDRcKlg8nwQdePBt0C3PSUBtiSNSS37Z3qEGfS7LCju3h6pI1Yr9MQtxw+jUa7kXXIS09VV73pEFUT/F7c6Qe8L5ZxgAcBvXBh1Fie63qb02I9XQ/CQIDAQAB","manifest_version":2,"name":"Gmail","options_page":"https://mail.google.com/mail/ca/#settings","permissions":["notifications"],"update_url":"http://clients2.google.com/service/update2/crx","version":"8.1"},"page_ordinal":"n","path":"pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0","preferences":{},"regular_only_preferences":{},"state":1,"was_installed_by_default":true,"was_installed_by_oem":false}}},"pinned_tabs":[],"prefs":{"preference_reset_time":"13055707218857558"},"protection":{"macs":{"browser":{"show_home_button":"7E159196EFA0D62C19D6819B0FF43D4D7A69416CEC1707B57E116161A4E546E9"},"default_search_provider":{"keyword":"728DC24F841ED599D56D6F59491D651F3136C437D19349CB50FDBC8F8A71BB55","name":"AF26DE3C92225698245815C1635CB264976D635D36F24F77AF77569B542617A2","search_url":"702282F9BEE37E1F7B8068773003F2DA44341DF35637AFDF23AF35C151C2B36B"},"default_search_provider_data":{"template_url_data":"BF54AE1125F17072AC6F45060ACD00D5F9939A80E1C13E56F3E3C18E83F3020E"},"extensions":{"settings":{"aapocclcgogkmnckokdopfmhonfmgoek":"BBCC04778E006F5B794DB55B7D3992F32044083DEA78A567D3F2A686889D8775","ahfgeienlihckogmohjhadlkjgocpleb":"E95BFFF4F6B75F885743441A15AE711A7AE709DDF8277CD0A44E563CBC6F0843","aohghmighlieiainnegkcijnfilokake":"94736C113C070F01C869CC9366ACA180BCFE3F579FC28475236A59F2DC32DC12","apdfllckaahabafndbhieahigkjlhalf":"9D543B0E6D35D02B20FFD1E95D4BEC257B109809D46563D9DAF2CCBBF4FE8C22","bepbmhgboaologfdajaanbcjmnhjmhfn":"94837B183E219A4D1F594197597A1910A25CC39E4BF2DAEB674737E4524F1C9B","blpcfgokakmgnkcojhhkbfbldkacnbeo":"30816D8E739842FAA0CB86DD0E123B1247E9B715D86DA44984FD453950802924","coobgpohoikkiipiblmjeljniedjpjpf":"E35051D53E76D67DCA4C19EEFB03C4C632AB2FFAF5B4448CBD38D210B1E8ED18","dnhpdliibojhegemfjheidglijccjfmc":"617492BC0BE00DCE74A5A46DFC787FFE4FD2B62576F21EA9AE3B0E14B0D215AC","eemcgdkfndhakfknompkggombfjjjeno":"BC7DB91839EE5F230BCD46FB0B867DC763B1207D46A0F3BAAC9BEE6AC41A8FC7","ennkphjdgehloodpbhlhldgbnhmacadg":"5112D5C40E918CBD5237ADD2BD97A0A3953C2628283111B976F5851290B02BDF","felcaaldnbdncclmgdcncolpebgiejap":"E3A84A640F35FBB7949563009FE83A27B691D709271B4329EB264F17FAEBAAE1","gfdkimpbcpahaombhbimeihdjnejgicl":"1CA7EE0BC2200067BFC0062BA2945916C445EB1C7E537EA7D0CB7332DFAC1A5D","gmlllbghnfkpflemihljekbapjopfjik":"1C3EFAA9C6D08BCF9F315EDB1CAAD39D260B19A59A66A58115860D4AD86175EC","kmendfapggjehodndflmmgagdbamhnfd":"70947C086E5F1C8763995D9E0DC98D5ED85D09DE5BBAD389FED005E4CC44E814","mfehgcgbbipciphmccgaenjidiccnmng":"66F7DB13FB380202A010FFA4E3F4D5AD43E1FD9E498A6CD875E811912C5B84A9","mfffpogegjflfpflabcdkioaeobkgjik":"5E63E92DAA8AC189D33622579F02B266EA6B170A649DFD189E4C70683DB318BF","mgndgikekgjfcpckkfioiadnlibdjbkf":"EF6FC677DA042C2DCE6259D6662D3CF6A2A88B627A3F07F80AC80D2FFD9A9A65","mhjfbmdgcfjbbpaeojofohoefgiehjai":"C36F5ABB317AADF3C2C2FD9105A310CEE719EB1A1172CC464510CFAA44120798","neajdppkdcdipfabeoofebfddakdcjhd":"90338D3D51C1AC8E54C4876C7EE235A62F90551A0E32D7986E5EB75EA0E9C7A5","nkeimhogjdpnpccoofpliimaahmaaome":"4D3D93B15907256F4DB03E1AD81D78C60584BB0451739D70A16941A47B41C986","nmmhkkegccagdldgiimedpiccmgmieda":"DA715A4AAE8EE9DBD48F153B9304B5098959C6DCC1A5008B8B129479C97D01BC","pafkbggdmjlpgkdkcbjmhmfcdpncadgh":"AA16D25B46DA62E970151DA69A9EC3712600B204E9ECB198BA049D4CC75BF99B","pjkljhegncpnkpknbcohdijeoejaedia":"A3F561C44D8A77DEEDF9CB9AF6C3236BADFF8BBCB43D623E7966ED129997FBFD"}},"google":{"services":{"last_username":"721609EA9B8E695C9A0A44F36B93ADB0308850335CE71A2D8B4E7BEBE1689F6F","username":"C8C4DA65CCCE7EAB135C5472E0EA7650233447CF53B8612795045D876AB96983"}},"homepage":"FAC9B3A0B37E9DA0FBDEED4F30E0CA46D31067B02050E4B0992812E15E758F21","homepage_is_newtabpage":"EEA7D0F54403A6DA20747C4CA8D9908A1FB480FFCD304351008813A2E8FB7FE9","pinned_tabs":"3E818682E0E0188EFFED2FA9F861F3181CAB75C7D479218595899550F98AA966","prefs":{"preference_reset_time":"D00B54304A710D4D64A3415EB4D357E3AF1CEBC23617523EBDAEDDF9641A77A8"},"profile":{"reset_prompt_memento":"93BF1A702A9E40C519FEB9DB1A9D9D9F663E2D9589227D1C953D16B1BF19BDDF"},"safebrowsing":{"incidents_sent":"60DA27C0DAB738A1C8C1CE2B8E294FBBC4D640DD4B6EB1A237A5F0722286113B"},"search_provider_overrides":"4ECA4F01D3D75C6F8DA41474C4C57D71831CA69FB6028794EE75C6056136F58F","session":{"restore_on_startup":"6E7FEE435F140E1DB69AE720BB2FF673169CB646745090D27AC639F9412C3EA7","startup_urls":"397D624573EA2243A201B66E9163D8BF0B54A30D195D282E4176FB056139F984"},"software_reporter":{"prompt_reason":"4E6039114D5E75B41E3AB82FC1C445D822DC0C4701B4CB16421F7011AB75EBA8","prompt_seed":"46EDF85FCDD97C2CADC89F48FEB62BDDBC53D889FD9FA26CD6BA5471834EBA05","prompt_version":"5B70725E80E36D96E7724E70CD88F27A506E53644D95927659504C1946500CBF"},"sync":{"remaining_rollback_tries":"5E1C9F3C7406DE75EFEFF8462BD4E34A2D95BE1DA32F7C1D8DF023CCDDD98E89"}},"super_mac":"B5FECA9AB9057907F0035ACD985B9AAAFAA4B1A0E55EA29F62DE3B9D0D5BC6AB"},"session":{"startup_urls":["http://www.google.com"]},"sync":{"remaining_rollback_tries":0}}


==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Old Start Page"="http://www.google.com"

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Old Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
"DefaultScope"="{012E1000-F331-11DB-8314-0800200C9A66}"
{012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC"
{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7"

==== Reset Google Chrome ======================

C:\Users\Blejzr\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\Blejzr\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences was reset successfully
C:\Users\Blejzr\AppData\Local\Comodo\Dragon\User Data\Default\Web Data was reset successfully
C:\Users\Blejzr\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully
C:\Users\Blejzr\AppData\Local\Google\Chrome\User Data\Default\Web Data-journal was reset successfully

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\9CE47FFF4FF16544993EF45021F9F4BA deleted successfully
HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{FFF74EC9-1FF4-4456-99E3-4F05129F4FAB} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\9CE47FFF4FF16544993EF45021F9F4BA deleted successfully

==== Empty IE Cache ======================

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Blejzr\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

==== Empty FireFox Cache ======================

C:\Users\Blejzr\AppData\Local\Mozilla\Firefox\Profiles\onelrn77.default\cache2 emptied successfully

==== Empty Chrome Cache ======================

C:\Users\Blejzr\AppData\Local\Comodo\Dragon\User Data\Default\Cache emptied successfully
C:\Users\Blejzr\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== C:\zoek_backup content ======================

C:\zoek_backup (files=282 folders=148 86281904 bytes)

==== Empty Temp Folders ======================

C:\Users\Blejzr\AppData\Local\Temp will be emptied at reboot
C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp will be emptied at reboot
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied
C:\Users\Blejzr\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== Deleting Files / Folders ======================

"C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp\MpCmdRun.log" not found

==== EOF on so 30.05.2015 at 16:22:38,15 ======================

[MachrCZ]

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 16:26:27, on 30.5.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17801)
Boot mode: Normal

Running processes:
C:\Windows\SysWOW64\notepad.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\Steam\Steam.exe
C:\Program Files (x86)\CompControl 2.01\control.exe
C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
C:\Program Files (x86)\MSI\SUPER CHARGER\SUPER CHARGER.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe
C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_17_0_0_188.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_17_0_0_188.exe
C:\Users\Blejzr\Downloads\hijackthis(2).exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O1 - Hosts: ::1 localhost
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [IMSS] "C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe"
O4 - HKLM\..\Run: [USB3MON] "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
O4 - HKLM\..\Run: [SUPER CHARGER] C:\Program Files (x86)\MSI\SUPER CHARGER\SUPER CHARGER.exe
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [Raptr] "C:\Program Files (x86)\Raptr\raptrstub.exe" --startup
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [LWS] C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe -hide
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [swg] "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\Run: [Steam] "C:\Program Files (x86)\Steam\steam.exe" -silent
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: CompControl 2.01.lnk = C:\Program Files (x86)\CompControl 2.01\control.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~3\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do Microsoft Excelu - res://C:\PROGRA~1\MICROS~3\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do OneNotu - res://C:\PROGRA~1\MICROS~3\Office15\ONBttnIE.dll/105
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~3\Office12\ONBttnIE.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: COMODO Dragon Update Service (DragonUpdater) - Comodo Security Solutions, Inc. - C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe
O23 - Service: EasyAntiCheat - EasyAntiCheat Ltd - C:\Windows\system32\EasyAntiCheat.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
O23 - Service: Intel(R) Update Manager (iumsvc) - Unknown owner - C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: MSI_SuperCharger - MSI - C:\Program Files (x86)\MSI\SUPER CHARGER\ChargeService.exe
O23 - Service: MSI_Trigger_Service - MICRO-STAR INTERNATIONAL CO., LTD. - C:\Program Files (x86)\MSI\MSITrigger\MSI_Trigger_Service.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Origin Client Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginClientService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 11611 bytes

[MachrCZ]

Ackoliv jsem si vsude odklikl mazani historie a veskereho infa ve firefoxu, nakonec mi nejak zmizel skin firefoxu a celej firefox se chova jako by byl spusten na PC poprve (Prejete si vypnout firefox, i kdyz jsou zaple dalsi "tabs"? a takove srajdy Ale to je detail...

PC se zda byt tichy a svete div se i zase mnohem rychleji nabiha system..

[jerabina]

To udělal Zoek, resetoval FireFox do výchozího nastavení.

Po startu se ti tam spouští Steam, Skype, Daemon Tools Lite a CCleaner, mám to povypínat pro rychlejší start počítače?

[MachrCZ]

V pohode dík, sám to mám takto nastavené.. i kdyz daemona si vypnu, pac jsem ho pouzil vsehovsudy tak 2x ..

Kazdopadne diky :)

[jerabina]

Dobře, tak ještě dočistíme a máme hotovo

Zavři ostatní programy/prohlížeče, odpoj se od internetu a v HJT fixni:
NÁVOD

Kód: Vybrat vše

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O1 - Hosts: ::1 localhost
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')

Stáhni si zde DelFix
https://toolslib.net/downloads/viewdownload/2-delfix/

ulož si soubor na plochu.
Poklepáním na ikonu spusť nástroj Delfix.exe
( Ve Windows Vista, Windows 7 a 8, musíš spustit soubor pravým tlačítkem myši -> Spustit jako správce .
V hlavním menu, zkontroluj tyto možnosti - Odstranění dezinfekce nástrojů (Remove desinfection tools) – Vyčistit body obnovy (Purge System Restore) .
Poté klikněte na tlačítko Spustit (Run) a nech nástroj dělat svoji práci.

Poté se zpráva se otevře (DelFix.txt). Vlož celý obsah zprávy sem. Jinak je zpráva zde:
v C: \ DelFix.txt

Pokud nejsou problémy, je to vše a můžeš dát vyřešeno - zelenou "fajfku"

[MachrCZ]

# DelFix v1.010 - Logfile created 30/05/2015 at 21:08:53
# Updated 26/04/2015 by Xplode
# Username : Blejzr - BLEJZR-PC
# Operating System : Windows 7 Ultimate Service Pack 1 (64 bits)

~ Removing disinfection tools ...

Deleted : C:\zoek_backup
Deleted : C:\AdwCleaner
Deleted : C:\RegBackup
Deleted : C:\zoek-results.log
Deleted : C:\zoek-results2014-11-19-225746.log
Deleted : C:\Users\Blejzr\Desktop\adwcleaner_4.101.exe
Deleted : C:\Users\Blejzr\Desktop\JRT(2).exe
Deleted : C:\Users\Blejzr\Desktop\RogueKillerX64(1).exe
Deleted : C:\Users\Blejzr\Desktop\zoek.exe
Deleted : C:\Users\Blejzr\Downloads\adwcleaner_3.311.exe
Deleted : C:\Users\Blejzr\Downloads\adwcleaner_4.001.exe
Deleted : C:\Users\Blejzr\Downloads\JRT(1).exe
Deleted : C:\Users\Blejzr\Downloads\JRT.exe
Deleted : C:\Users\Blejzr\Downloads\HijackThis(1).exe
Deleted : C:\Users\Blejzr\Downloads\hijackthis(2).exe
Deleted : C:\Users\Blejzr\Downloads\HijackThis.exe
Deleted : C:\Users\Blejzr\Downloads\mkvtoolnix-7.5.0-setup.exe
Deleted : C:\Users\Blejzr\Downloads\RogueKillerX64(1).exe
Deleted : C:\Users\Blejzr\Downloads\RogueKillerX64.exe
Deleted : C:\Users\Blejzr\Downloads\TFC(1).exe
Deleted : C:\Users\Blejzr\Downloads\TFC.exe
Deleted : HKLM\SOFTWARE\OldTimer Tools
Deleted : HKLM\SOFTWARE\AdwCleaner
Deleted : HKLM\SOFTWARE\TrendMicro\Hijackthis

~ Cleaning system restore ...

Deleted : RP #137 [Windows Update | 05/28/2015 09:05:36]

New restore point created !

########## - EOF - ##########

Dík :)