PC-HELP.CZ

České diskuzní fórum o počítačích
https://pc-help.cnews.cz/

Kontrola logu

https://pc-help.cnews.cz/viewtopic.php?f=70&t=158284

Stránka 1 z 5

Kontrola logu  Vyřešeno

Napsal: 26 črc 2015 13:50
od Ashar
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 13:46:56, on 26.7.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17910)


Boot mode: Normal

Running processes:
C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files (x86)\Fujitsu\DeskUpdate\DeskUpdateNotifier.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Users\Stepan\Desktop\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll
O2 - BHO: DialuxBHO - {F586CB96-7091-42ec-9829-F5D5CE65AFC1} - C:\Program Files (x86)\DIALux\Dialux.BHO_x86.dll
O4 - HKLM\..\Run: [DeskUpdateNotifier] "C:\Program Files (x86)\Fujitsu\DeskUpdate\DeskUpdateNotifier.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKCU\..\Run: [iCloudServices] C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
O4 - HKCU\..\Run: [ApplePhotoStreams] C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'Default user')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - http://download.eset.com/special/eos/OnlineScanner.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{C35282A5-21B1-489C-BD20-3B59893A3B03}: NameServer = 8.8.8.8,8.8.4.4
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device Service - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: DIAL Communication Service (DialComService) - DIAL GmbH - C:\Program Files (x86)\DIAL GmbH\DIAL Communication Framework\DialComService.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Fujitsu Diagnostic Testhandler (TestHandler) - Fujitsu Technology Solutions - C:\Program Files (x86)\Fujitsu\SystemDiagnostics\OnlineDiagnostic\TestManager\HaDTMan.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: Bluetooth Feature Support (VFPRadioSupportService) - CSR, plc - C:\Program Files\CSR\Bluetooth Feature Pack 5.0\VFPRadioSupportService.exe
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 8754 bytes

Re: Kontrola logu

Napsal: 26 črc 2015 14:58
od memphisto
Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranìní historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit doèasné soubory Windows, vysypat koš atd.
- Pokud používáš jen Google Chrome , tak ATF nemusíš použít.

Stáhni si TFC
Otevři soubor a zavři všechny ostatní okna, Klikni na Start k zahájení procesu. Program by neměl trvat dlouho.
Poté by se měl PC restartovat, pokud ne , proveď sám.

Stáhni AdwCleaner
Ulož si ho na svojí plochu
Ukonči všechny programy, okna a prohlížeče
Spusť program poklepáním a klikni na „Search“
Po skenu se objeví log (jinak je uložen systémovem disku jako AdwCleaner[R?].txt), jeho obsah sem celý vlož.


Stáhni si Malwarebytes' Anti-Malware
- Při instalaci odeber zatržítko u „Povolit bezplatnou zkušební verzi Malwarebytes' Anti-Malware Premium“
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Aktualizace Malwarebytes' Anti-Malware a Spustit aplikaci Malwarebytes' Anti-Malware, pokud jo tak klikni na tlačítko konec
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a klikni na Skenovat nyní a
- po proběhnutí programu se ti objeví hláška vpravo dole tak klikni na Kopírovat do schránky a a vlož sem celý log.

- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).

Pokud budou problémy , spusť v nouz. režimu.

Re: Kontrola logu

Napsal: 26 črc 2015 15:52
od Ashar
# AdwCleaner v4.201 - Log vytvořen 26/07/2015 v 15:48:14
# Aktualizováno 08/04/2015 by Xplode
# Databáze : 2015-07-26.1 [Server]
# Operační system : Windows 7 Professional Service Pack 1 (x64)
# Uživatelské jméno : Stepan - AMILOXI
# Spuštěno z : C:\Users\Stepan\Desktop\adwcleaner_4.201.exe
# Nastavení : Sken

***** [ Služby ] *****


***** [ Soubory / Složky ] *****


***** [ Naplánované úlohy ] *****


***** [ Zástupci ] *****


***** [ Registry ] *****


***** [ Prohlížeče ] *****

-\\ Internet Explorer v11.0.9600.17909


-\\ Google Chrome v44.0.2403.107

[C:\Users\Stepan\AppData\Local\Google\Chrome\User Data\Default\Web data] - Nalezeno [Search Provider] : hxxp://websearch.coolsearches.info/?l=1&q={searchTerms}&pid=2921&r=2015/03/16&hid=3352636497099076024&lg=EN&cc=CZ&unqvl=85
[C:\Users\Stepan\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Nalezeno [Homepage] : ","homepage_is_newtabpage":true,"pinned_tabs":[],"protection":{"macs":{"browser":{"show_home_button":"C89F0FD2DBF9EF1DB857BACA4EB9BB0332052B668071CFEFCC800246EAE50891"},"default_search_provider":{"keyword":"3C47903FC2C799BE6462FFDB8FE902DD3E5270CE8EA1E5C41D27722FC6EFDDEF","name":"E9D2BDE85FBDFF7A53BB383E5017F76CE7FCA8C7DEB503B4CBC413806CA7C146","search_url":"41ED94A8D4FB1A6FEA9E8B0D38A9F54E164AE76B9130EBA8A0C2334394E881AD"},"default_search_provider_data":{"template_url_data":"456AFA07E979AE6CD1EF74AF72B6AD731789855F3102D3E9C00CE20706D2E456"},"extensions":{"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":"CF53DD637C441D5D7E94C21F4E2A4AD0BEEF6CBD06F701C4FCA7307AB6F97CC7","bepbmhgboaologfdajaanbcjmnhjmhfn":"7242FDC4226FC131C0CE52462FC4A4F44842B24CE85D451B34B1302E4F2EF4F2","eemcgdkfndhakfknompkggombfjjjeno":"F190BC8E42721D56B98346928ED0D42DA3AA6FD1EF3502EA7125747393BD7819","ennkphjdgehloodpbhlhldgbnhmacadg":"581CAC00402BB6BCD87D3B281015F4E26099FD5A2623509D7C4F7E1282897915","gfdkimpbcpahaombhbimeihdjnejgicl":"6F7A34C86DD8E7C17A2C0194CE079090035FD99E40D963945954848F645EF777","kmendfapggjehodndflmmgagdbamhnfd":"2E7A03ED274F0FA58B3C77D3B2EEB7980E9B020577A55A5A84914A5A2303D963","mfehgcgbbipciphmccgaenjidiccnmng":"CC10A1431B26F69223F3E8A09C834C17979545D083D258DC749635006BC48CA0","mfffpogegjflfpflabcdkioaeobkgjik":"4B0F427F2B55DACFF002CA9794B79DC3905517E9BF5AAA6144A10DC8F69A5775","mgndgikekgjfcpckkfioiadnlibdjbkf":"656191A47AB1A789208B11A8B5665FFD54FE631BF307F90ACD5D3AA551B02A56","mhjfbmdgcfjbbpaeojofohoefgiehjai":"53F37CF2D9991D4C4FE658482DA2C6FB9D04BA5F1D3F1E989EEA2AF57954A583","neajdppkdcdipfabeoofebfddakdcjhd":"FB4F20F812357BB2CFDA8975196B577E9EA32F1165E6F2434E67ACE83FC49D38","nkeimhogjdpnpccoofpliimaahmaaome":"39BBE1366B4F8627D2B12CCA7821DD25637344E8595A1F8207CA220F599E3059","nmmhkkegccagdldgiimedpiccmgmieda":"5E00BBE98F53C914CD082046A7E53B1CD44A8B58F8D4AD57CEE520C8D166725B","nnocoggcoknkjehhjjpanophojgknbpd":"F533CF907690EFAE1E01C2D4E7B7B34CC97C8B69E99BE29A74CD0543AC1B4CE0","pafkbggdmjlpgkdkcbjmhmfcdpncadgh":"E6E1888792B57402462DF98FA1CB3F00CB608854D7F28A34B0AB03F82AC2C786"}},"google":{"services":{"account_id":"8DA77C196035A5F0A7C36E0FF3554828A4C27463152DDB19DFAE30B6444A1B1C","last_username":"915ED509952656EDAC7BD643EA79F6BEC7C47CE630F85952310C5039379B361D","username":"48BC2B035F733CF0FF498818F3C4B96F21950E4923D115D0C8D34B6A0FE35CE4"}},"homepage":"4BE2CEE4D6ABCE3EB457BD45D19347377CF820C392C16680529EDD1A78971196","homepage_is_newtabpage":"F4DE3EA0DC351EDD1C75E674EB7CD50D5B1F9902ED4454A1F3CECAFBEE295BA7","pinned_tabs":"9398F32E07AA41B33516A8F629DFC553AD691C5C1645DEAA2A4067037F07F65C","prefs":{"preference_reset_time":"F6FA1BEF7E2AB8A878077CFDD36E392E9039F123A07F9173C43D5C542727577C"},"profile":{"reset_prompt_memento":"5ACD47FCA643493F1BAAEEE93DDF9A80B508AA8F355632AE6ADD31A461BDF274"},"safebrowsing":{"incidents_sent":"68A66EA9FA6153CE9AFE73FF7C61C22C42E7608246AE01162DD8860A92C56C99"},"search_provider_overrides":"90A11B48D70E78EC13EF767AC203B860835326FF1A834B325B222B970608F7A3","session":{"restore_on_startup":"F1B2EB57854BF21B973AAB7A179B38F2E6464AA85E79372C4107267365215C51","startup_urls":"A707BDE9AF4217F2193146282D80FB93CB5B81CDA60712BDAC039DB629AA1CEE"},"software_reporter":{"prompt_reason":"BE4A7F7F50258D23687379AF3800C20D6F0B9AA6FB7D1FF8128D3B66DF456AB4","prompt_seed":"DBA5C97F794319C88B9EC6C244FB41D6D817A67730729DDD140E4C7FD562E298","prompt_version":"92990FA09B916FA03835E4168615FE4E7BA582B7F03162A46692551920955272"},"sync":{"remaining_rollback_tries":"1ED745A8AE3120994D465BA86D6E1EB2835D05D81F262B1D3A2D61CD769F470C"}},"super_mac":"8CED84A6D8B2BFCFB5B977A4825AB15A368F254451BBC111A7EA57E76781633B"},"session":{"restore_on_startup":5,"startup_urls":["hxxp://www.searchnu.com/406
[C:\Users\Stepan\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Nalezeno [Startup_URLs] : A707BDE9AF4217F2193146282D80FB93CB5B81CDA60712BDAC039DB629AA1CEE"},"software_reporter":{"prompt_reason":"BE4A7F7F50258D23687379AF3800C20D6F0B9AA6FB7D1FF8128D3B66DF456AB4","prompt_seed":"DBA5C97F794319C88B9EC6C244FB41D6D817A67730729DDD140E4C7FD562E298","prompt_version":"92990FA09B916FA03835E4168615FE4E7BA582B7F03162A46692551920955272"},"sync":{"remaining_rollback_tries":"1ED745A8AE3120994D465BA86D6E1EB2835D05D81F262B1D3A2D61CD769F470C"}},"super_mac":"8CED84A6D8B2BFCFB5B977A4825AB15A368F254451BBC111A7EA57E76781633B"},"session":{"restore_on_startup":5,"startup_urls":["hxxp://www.searchnu.com/406

*************************

AdwCleaner[R0].txt - [1276 bytů] - [16/03/2015 14:47:02]
AdwCleaner[R10].txt - [5469 bytů] - [26/07/2015 15:48:14]
AdwCleaner[R1].txt - [4640 bytů] - [16/03/2015 18:52:46]
AdwCleaner[R2].txt - [2311 bytů] - [10/04/2015 14:12:09]
AdwCleaner[R3].txt - [1763 bytů] - [13/04/2015 15:16:54]
AdwCleaner[R4].txt - [1878 bytů] - [16/04/2015 16:39:52]
AdwCleaner[R5].txt - [2636 bytů] - [23/04/2015 15:27:43]
AdwCleaner[R6].txt - [2093 bytů] - [23/04/2015 19:14:09]
AdwCleaner[R7].txt - [1941 bytů] - [23/04/2015 19:39:55]
AdwCleaner[R8].txt - [15174 bytů] - [25/06/2015 17:32:53]
AdwCleaner[R9].txt - [6732 bytů] - [19/07/2015 14:41:06]
AdwCleaner[S0].txt - [1314 bytů] - [16/03/2015 14:50:08]
AdwCleaner[S1].txt - [4344 bytů] - [16/03/2015 18:56:56]
AdwCleaner[S2].txt - [2364 bytů] - [10/04/2015 14:13:28]
AdwCleaner[S3].txt - [1821 bytů] - [13/04/2015 15:18:46]
AdwCleaner[S4].txt - [1936 bytů] - [16/04/2015 16:42:04]
AdwCleaner[S5].txt - [2689 bytů] - [23/04/2015 15:29:31]
AdwCleaner[S6].txt - [2151 bytů] - [23/04/2015 19:15:28]
AdwCleaner[S7].txt - [2001 bytů] - [23/04/2015 19:42:04]
AdwCleaner[S8].txt - [4972 bytů] - [25/06/2015 17:35:03]
AdwCleaner[S9].txt - [2137 bytů] - [19/07/2015 14:43:02]

########## EOF - C:\AdwCleaner\AdwCleaner[R10].txt - [6631 bytů] ##########

Re: Kontrola logu

Napsal: 26 črc 2015 17:52
od Ashar
Malwarebytes Anti-Malware
www.malwarebytes.org

Datum skenování: 26.7.2015
Čas skenování: 16:02
Protokol:
Správce: Ano

Verze: 2.1.8.1057
Databáze malwaru: v2015.07.26.03
Databáze rootkitů: v2015.07.22.01
Licence: Bezplatná verze
Ochrana proti malwaru: Vypnuto
Ochrana proti škodlivým webovým stránkám: Vypnuto
Ochrana programu: Vypnuto

OS: Windows 7 Service Pack 1
CPU: x64
Souborový systém: NTFS
Uživatel: Stepan

Typ skenu: Sken hrozeb
Výsledek: Dokončeno
Prohledaných objektů: 449888
Uplynulý čas: 41 min, 4 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Vypnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto

Procesy: 0
(Nenalezeny žádné škodlivé položky)

Moduly: 0
(Nenalezeny žádné škodlivé položky)

Klíče registru: 3
PUM.Security.Hijack.DisableChromeUpdates, HKLM\SOFTWARE\POLICIES\GOOGLE\UPDATE, , [7be030b63b4f2d096ee0dbbe0ef61fe1],
PUM.Security.Hijack.DisableChromeUpdates, HKLM\SOFTWARE\WOW6432NODE\POLICIES\GOOGLE\UPDATE, , [0754ac3a1d6d1323a5a98a0f94701ce4],
PUP.Optional.Crossrider.C, HKU\S-1-5-18\SOFTWARE\APPDATALOW\SOFTWARE\_CrossriderRegNamePlaceHolder_, , [1e3d697dbad0280efb10b4e0ef155ba5],

Hodnoty registru: 2
PUM.Security.Hijack.DisableChromeUpdates, HKLM\SOFTWARE\POLICIES\GOOGLE\UPDATE|DisableAutoUpdateChecksCheckboxValue, 1, , [7be030b63b4f2d096ee0dbbe0ef61fe1]
PUM.Security.Hijack.DisableChromeUpdates, HKLM\SOFTWARE\WOW6432NODE\POLICIES\GOOGLE\UPDATE|DisableAutoUpdateChecksCheckboxValue, 1, , [0754ac3a1d6d1323a5a98a0f94701ce4]

Data registru: 0
(Nenalezeny žádné škodlivé položky)

Složky: 2
PUP.Optional.MultiPlug, C:\ProgramData\hgiglbkniikocjgjakmobgmgjhodgfnl, , [e7749254bdcd59dd0f0d474b798b8878],
PUP.Optional.MultiPlug.Gen, C:\ProgramData\4987765407692365560, , [88d3786e1278fa3cfafd4d5334d07888],

Soubory: 11
PUP.Optional.MultiPlug, C:\ProgramData\hgiglbkniikocjgjakmobgmgjhodgfnl\lsdb.js, , [e7749254bdcd59dd0f0d474b798b8878],
PUP.Optional.MultiPlug, C:\ProgramData\hgiglbkniikocjgjakmobgmgjhodgfnl\background.html, , [e7749254bdcd59dd0f0d474b798b8878],
PUP.Optional.MultiPlug, C:\ProgramData\hgiglbkniikocjgjakmobgmgjhodgfnl\content.js, , [e7749254bdcd59dd0f0d474b798b8878],
PUP.Optional.MultiPlug, C:\ProgramData\hgiglbkniikocjgjakmobgmgjhodgfnl\hFYO.js, , [e7749254bdcd59dd0f0d474b798b8878],
PUP.Optional.MultiPlug, C:\ProgramData\hgiglbkniikocjgjakmobgmgjhodgfnl\manifest.json, , [e7749254bdcd59dd0f0d474b798b8878],
PUP.Optional.MultiPlug.Gen, C:\ProgramData\4987765407692365560\61993ca4391fb4a42e86f5218e99b1b8.ini, , [88d3786e1278fa3cfafd4d5334d07888],
PUP.Optional.MultiPlug.Gen, C:\ProgramData\4987765407692365560\cd534dfb311582362e86f5218e99b1b8.ini, , [88d3786e1278fa3cfafd4d5334d07888],
PUP.Optional.MultiPlug.Gen, C:\ProgramData\4987765407692365560\cd5b15e575e1c3d02e86f5218e99b1b8.ini, , [88d3786e1278fa3cfafd4d5334d07888],
PUP.Optional.MultiPlug.Gen, C:\ProgramData\4987765407692365560\d825cdc76cfe72972e86f5218e99b1b8.ini, , [88d3786e1278fa3cfafd4d5334d07888],
PUP.Optional.MultiPlug.Gen, C:\ProgramData\4987765407692365560\f1c22c8931795a202e86f5218e99b1b8.ini, , [88d3786e1278fa3cfafd4d5334d07888],
PUP.Optional.MultiPlug.Gen, C:\ProgramData\4987765407692365560\fc17866aa2267bd22e86f5218e99b1b8.ini, , [88d3786e1278fa3cfafd4d5334d07888],

Fyzické sektory: 0
(Nenalezeny žádné škodlivé položky)


(end)

Re: Kontrola logu

Napsal: 26 črc 2015 19:16
od jaro3
Spusť znovu AdwCleaner (u Windows Vista či Windows7, klikni na AdwCleaner pravým a vyber „Spustit jako správce“
klikni na „Prohledat-Scan“, po prohledání klikni na „ Vymazat-Clean“

Program provede opravu, po automatickém restartu neukáže log (C:\AdwCleaner [S?].txt) , jeho obsah sem celý vlož.

Stáhni si Junkware Removal Tool by Thisisu

na svojí plochu.

Deaktivuj si svůj antivirový program. Pravým tl. myši klikni na JRT.exe a vyber „spustit jako správce“. Pro pokračování budeš vyzván ke stisknutí jakékoliv klávesy. Na nějakou klikni.
Začne skenování programu. Skenování může trvat dloho , podle množství nákaz. Po ukončení skenu se objeví log (JRT.txt) , který se uloží na ploše.
Zkopíruj sem prosím celý jeho obsah.

. spusť znovu MbAM a dej Skenovat nyní
- po proběhnutí programu se ti objeví hláška tak klikni na „Vše do karantény(smazat vybrané)“ a na „Exportovat záznam“ a vyber „textový soubor“ , soubor nějak pojmenuj a někam ho ulož. Zkopíruj se celý obsah toho logu.

Stáhni si RogueKiller by Adlice Software
32bit.:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
64bit.:
http://www.sur-la-toile.com/RogueKiller ... lerX64.exe
na svojí plochu.
- Zavři všechny ostatní programy a prohlížeče.
- Pro OS Vista a win7 spusť program RogueKiller.exe jako správce , u XP poklepáním.
- počkej až skončí Prescan -vyhledávání škodlivých procesů.
-Potom klikni na „Prohledat“.
- Program skenuje procesy PC. Po proskenování klikni na „Zpráva“celý obsah logu sem zkopíruj.
Pokud je program blokován , zkus ho spustit několikrát. Pokud dále program nepůjde spustit a pracovat, přejmenuj ho na winlogon.exe.

Re: Kontrola logu

Napsal: 26 črc 2015 19:51
od Ashar
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 7.5.1 (07.16.2015:1)
OS: Windows 7 Professional x64
Ran by Stepan on ne 26.07.2015 at 19:38:12,04
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Tasks



~~~ Registry Values



~~~ Registry Keys



~~~ Files

Successfully deleted: [File] C:\Users\Stepan\AppData\Roaming\appdataFr3.bin
Successfully deleted: [File] C:\Users\Stepan\Appdata\Local\google\chrome\user data\default\local storage\chrome-extension_ogminpmldncgcmokldnmmapddoccmhfl_0.localstorage



~~~ Folders

Successfully deleted: [Folder] C:\ProgramData\google



~~~ Chrome


[C:\Users\Stepan\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - default search provider reset

[C:\Users\Stepan\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - Extensions Deleted:

[C:\Users\Stepan\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - default search provider reset

[C:\Users\Stepan\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - Extensions Deleted:
[]





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on ne 26.07.2015 at 19:50:27,36
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Re: Kontrola logu

Napsal: 26 črc 2015 19:55
od Ashar
Chyby u AdwCleaner i MbAM jsem již smazal předtím. Hraje to nějakou roli? (Doufám že ne)
V log byly ale jen ze se úspěšně smazaly škodlive soubory.

Re: Kontrola logu

Napsal: 26 črc 2015 20:04
od jerabina
V pořádku, pokud jsi nálezy vymazal, nic se neděje :-)

Pokračuj dál.

Re: Kontrola logu

Napsal: 26 črc 2015 20:08
od Ashar
RogueKiller V10.9.3.0 (x64) [Jul 21 2015] by Adlice Software
mail : http://www.adlice.com/contact/
Feedback : http://forum.adlice.com
Webová stránka : http://www.adlice.com/softwares/roguekiller/
Blog : http://www.adlice.com

Operační systém : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Spuštěno : Normální režim
Uživatel : Stepan [Práva správce]
Started from : C:\Users\Stepan\Desktop\RogueKillerX64.exe
Mód : Prohledat -- Datum : 07/26/2015 20:04:26

¤¤¤ Procesy : 0 ¤¤¤

¤¤¤ Registry : 10 ¤¤¤
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters | DhcpNameServer : 213.155.229.197 62.84.129.4 ([-][CZECH REPUBLIC (CZ)]) -> Nalezeno
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet002\Services\Tcpip\Parameters | DhcpNameServer : 213.155.229.197 62.84.129.4 ([-][CZECH REPUBLIC (CZ)]) -> Nalezeno
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet003\Services\Tcpip\Parameters | DhcpNameServer : 213.155.229.197 62.84.129.4 ([-][CZECH REPUBLIC (CZ)]) -> Nalezeno
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{C35282A5-21B1-489C-BD20-3B59893A3B03} | DhcpNameServer : 213.155.229.197 62.84.129.4 ([-][CZECH REPUBLIC (CZ)]) -> Nalezeno
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet002\Services\Tcpip\Parameters\Interfaces\{C35282A5-21B1-489C-BD20-3B59893A3B03} | DhcpNameServer : 213.155.229.197 62.84.129.4 ([-][CZECH REPUBLIC (CZ)]) -> Nalezeno
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet003\Services\Tcpip\Parameters\Interfaces\{C35282A5-21B1-489C-BD20-3B59893A3B03} | DhcpNameServer : 213.155.229.197 62.84.129.4 ([-][CZECH REPUBLIC (CZ)]) -> Nalezeno
[PUM.Policies] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System | ConsentPromptBehaviorAdmin : 0 -> Nalezeno
[PUM.Policies] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System | ConsentPromptBehaviorAdmin : 0 -> Nalezeno
[PUM.StartMenu] (X64) HKEY_USERS\S-1-5-21-3897676544-3640133890-4283349807-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowMyGames : 0 -> Nalezeno
[PUM.StartMenu] (X86) HKEY_USERS\S-1-5-21-3897676544-3640133890-4283349807-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowMyGames : 0 -> Nalezeno

¤¤¤ Úlohy : 0 ¤¤¤

¤¤¤ Soubory : 0 ¤¤¤

¤¤¤ Soubor HOSTS : 0 ¤¤¤

¤¤¤ Antirootkit : 0 (Driver: Nahrán) ¤¤¤

¤¤¤ Webové prohlížeče : 0 ¤¤¤

¤¤¤ Kontrola MBR : ¤¤¤
+++++ PhysicalDrive0: WDC WD5000BEVT-22A0RT0 +++++
--- User ---
[MBR] 125525769be07fe1d530407a95418411
[BSP] b80549dd8af815529836b43c58002f50 : Windows Vista/7/8|VT.Unknown MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 100 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
1 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 206848 | Size: 241030 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
2 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 493836288 | Size: 235807 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
User = LL1 ... OK
User = LL2 ... OK

Re: Kontrola logu

Napsal: 26 črc 2015 20:09
od Ashar
Tak zadání splněno , mohu nechat smazat "odpad" z Rogue Killer?

Re: Kontrola logu

Napsal: 26 črc 2015 20:11
od jerabina
Ano +

Vypni antivir
Stáhni
Zoek.exe

a uloz si ho na plochu.
Zavři všechny ostatní programy , okna i prohlížeče.
Spusť Zoek.exe ( u win vista , win7, 8 klikni na něj pravým a vyber : „Spustit jako správce“
- pozor , náběh programu může trvat déle.

Do okna programu vlož skript níže:

Kód: Vybrat vše

autoclean;
emptyclsid;
iedefaults;
FFdefaults;
CHRdefaults;
emptyalltemp;
resethosts;


klikni na Run Script
Program provede sken , opravu, sken i oprava může trvat i více minut ,je třeba posečkat do konce. Do okna neklikej!
Program nabídne restart , potvrď .

Po restartu se může nějaký čas ukázat pouze černá plocha , to je normální. Je třeba počkat až se vytvoří log. Ten si můžeš uložit třeba do dokumentů , jinak se sám ukládá do:
C:\zoek-results.log
Zkopíruj sem celý obsah toho logu.

Vlož nový log z HJT + informuj o problémech.

Re: Kontrola logu

Napsal: 26 črc 2015 20:36
od Ashar
Zoek.exe v5.0.0.0 Updated 04-May-2015
Tool run by Stepan on ne 26.07.2015 at 20:15:20,53.
Microsoft Windows 7 Professional 6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Stepan\Desktop\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

26.7.2015 20:17:18 Zoek.exe System Restore Point Created Successfully.

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

# localhost name resolution is handled within DNS itself.
127.0.0.1 localhost
::1 localhost

==== Empty Folders Check ======================

C:\PROGRA~2\Seznam.cz deleted successfully
C:\PROGRA~2\SystemMuscle deleted successfully
C:\PROGRA~2\COMMON~1\Blizzard Entertainment deleted successfully
C:\Program Files\Google deleted successfully
C:\PROGRA~3\Alwil Software deleted successfully
C:\PROGRA~3\LumaEmu_SteamCloud deleted successfully
C:\Users\Franta\AppData\Roaming\Publish Providers deleted successfully
C:\Users\Joch\AppData\Roaming\AdobeUM deleted successfully
C:\Users\Joch\AppData\Roaming\Apple Computer deleted successfully
C:\Users\Stepan\AppData\Roaming\Publish Providers deleted successfully
C:\Users\Franta\AppData\Local\GHISLER deleted successfully
C:\Users\Joch\AppData\Local\GHISLER deleted successfully
C:\Users\Stepan\AppData\Local\EmieBrowserModeList deleted successfully
C:\Users\Stepan\AppData\Local\EmieSiteList deleted successfully
C:\Users\Stepan\AppData\Local\EmieUserList deleted successfully

==== Deleting CLSID Registry Keys ======================


==== Deleting CLSID Registry Values ======================

HKEY_USERS\S-1-5-21-3897676544-3640133890-4283349807-1003\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{2318C2B1-4965-11D4-9B18-009027A5CD4F} deleted successfully

==== Deleting Services ======================


==== Deleting Files \ Folders ======================

C:\PROGRA~2\Seznam.cz not found
C:\PROGRA~2\SystemMuscle not found
C:\PROGRA~2\BandiMPEG1 deleted
C:\PROGRA~2\Free Visio Viewer deleted
C:\PROGRA~3\{09118536-2270-b787-0911-1853622714d8} deleted
C:\PROGRA~3\{fe16a18b-3c47-bc56-fe16-6a18b3c4862c} deleted
C:\PROGRA~3\{ffc43971-2286-525c-ffc4-43971228e5c4} deleted
C:\Users\Franta\AppData\Roaming\appdataFr3.bin deleted
C:\PROGRA~3\Package Cache deleted

==== Chromium Look ======================

AdBlock - Franta\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom
LastPass - Joch\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdokiejnpimakedhajhdlcegeplioahd
Booking.com - Joch\AppData\Local\Google\Chrome\User Data\Default\Extensions\pficdecjkdlnacnnbkociacmdbpmhdoc
FB Chat Pop-Outs - Stepan\AppData\Local\Google\Chrome\User Data\Default\Extensions\nnocoggcoknkjehhjjpanophojgknbpd

==== Chromium Startpages ======================

C:\Users\Joch\AppData\Local\Google\Chrome\User Data\Default\Preferences
e.com/service/update2/crx","version":"1.0"},"path":"pgbdhkpacgdhfabeceekiafonfkipohm\\1.0_0","preferences":{},"regular_only_preferences":{},"state":1,"was_installed_by_default":false,"was_installed_by_oem":false},"pjkljhegncpnkpknbcohdijeoejaedia":{"ack_external":true,"active_permissions":{"api":["notifications"],"manifest_permissions":[]},"app_launcher_ordinal":"q","commands":{},"content_settings":[],"creation_flags":137,"events":[],"from_bookmark":false,"from_webstore":true,"granted_permissions":{"api":["notifications"],"manifest_permissions":[]},"incognito_content_settings":[],"incognito_preferences":{},"install_time":"13077838636961632","lastpingday":"13077788397238374","location":1,"manifest":{"app":{"launch":{"container":"tab","web_url":"https://mail.google.com/mail/ca"},"urls":["*://mail.google.com/mail/ca"]},"current_locale":"cs","default_locale":"en","description":"Rychlý e-mail s možností vyhledávání a menším množstvím spamu.","icons":{"128":"128.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDCuGglK43iAz3J9BEYK/Mz6ZhloIMMDqQSAaf3vJt4eHbTbSDsu4WdQ9dQDRcKlg8nwQdePBt0C3PSUBtiSNSS37Z3qEGfS7LCju3h6pI1Yr9MQtxw+jUa7kXXIS09VV73pEFUT/F7c6Qe8L5ZxgAcBvXBh1Fie63qb02I9XQ/CQIDAQAB","manifest_version":2,"name":"Gmail","options_page":"https://mail.google.com/mail/ca/#settings","permissions":["notifications"],"update_url":"http://clients2.google.com/service/update2/crx","version":"8.1"},"page_ordinal":"n","path":"pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0","preferences":{},"regular_only_preferences":{},"state":1,"was_installed_by_default":true,"was_installed_by_oem":false}}},"google":{"services":{"last_username":"radek.k03@gmail.com","username":"radek.k03@gmail.com"}},"homepage":"http://intranet/","homepage_is_newtabpage":false,"pinned_tabs":[],"protection":{"macs":{"browser":{"show_home_button":"D4868425CF3D8624CE5630C07924DD8AD78FA01AE398862FD1D1ED511346B259"},"default_search_provider":{"keyword":"3C47903FC2C799BE6462FFDB8FE902DD3E5270CE8EA1E5C41D27722FC6EFDDEF","name":"E9D2BDE85FBDFF7A53BB383E5017F76CE7FCA8C7DEB503B4CBC413806CA7C146","search_url":"41ED94A8D4FB1A6FEA9E8B0D38A9F54E164AE76B9130EBA8A0C2334394E881AD"},"default_search_provider_data":{"template_url_data":"456AFA07E979AE6CD1EF74AF72B6AD731789855F3102D3E9C00CE20706D2E456"},"extensions":{"settings":{"aapocclcgogkmnckokdopfmhonfmgoek":"0D2ADE12FCD4B6D5470E1B3824593AC421A46F1DEB66A13BCB3D275F3B5C00B2","ahfgeienlihckogmohjhadlkjgocpleb":"DD07344E8A0064C5D32088DF022010447EE2B3436BC0DB57F74DDF22F7DAD9A5","aohghmighlieiainnegkcijnfilokake":"83075DBE08BDC749F438F72E55496A74DC25B69E47F74B1C11C506BD7F8257B8","apdfllckaahabafndbhieahigkjlhalf":"F170FD7F6800884FF96F8AD080196F39078996EA2B63FA5D2B5C55E85FDA5E22","bepbmhgboaologfdajaanbcjmnhjmhfn":"7242FDC4226FC131C0CE52462FC4A4F44842B24CE85D451B34B1302E4F2EF4F2","blpcfgokakmgnkcojhhkbfbldkacnbeo":"20ADFFA3712445A6680A55F1D950663F634C0204064568A2020993175D057F3F","coobgpohoikkiipiblmjeljniedjpjpf":"435C2C5D0519513F6D4BBA971FE3A503C3DE9E70C7E475151683399997CA818B","eabmdbblmkempjmeemihgnkoiedjkgol":"D635914458F6D96A0FD72D680CEECC29FCE90834006FF99BC061D7449852B2FF","eemcgdkfndhakfknompkggombfjjjeno":"32072138D868CE1BC63E6011F3786308B98597AF6F47F0651C17B5D9B253DAE3","ennkphjdgehloodpbhlhldgbnhmacadg":"5EC9BE585EE9E566F95D453464375AB9A2FC7B51BCCC26F21BF38C780661AD06","felcaaldnbdncclmgdcncolpebgiejap":"DF48199A7F0EA45DEB3D3F6ACAE4C14749925847451E2C9163EF7F83C6DBC506","gfdkimpbcpahaombhbimeihdjnejgicl":"79229BD63BD332DDEE6E5BB9ECEB797D2E0AE9ACDDE68BDB3051B31AE985FE85","hdokiejnpimakedhajhdlcegeplioahd":"53CCF421895D1CF51A17C216F7490E2F54B0EB4A59B5C7EB1B067E244F73F11A","icignjnkigenpihdnaiblfanlhgchkhg":"331C1E4C09640468AC8A1EBEBCC7D8EC43359B7E4F86D7AF58BACEFEBF613A24","jbnkijekempmdlleaimfelifcejbkmcd":"9ED13DD52177446F7A0FD296864F2E19A837F44D6ACFE4AA64F22178E53FDA0D","kdcpiboakkbnhlmemlmbhjcibnniapjf":"B4D239BB58D59B3C54A463EA2F3CE548500E12DCBFCC6BD0A9CCC9471A837BCE","kmendfapggjehodndflmmgagdbamhnfd":"F297A64793A327B17DAD500CDB884B247BD811D8B5C713AA5F20F673CB60FFE5","mfehgcgbbipciphmccgaenjidiccnmng":"B01398534800AFD1D03BD381D2C5B60BB00B7C6D4487B447927B059B61522F92","mfffpogegjflfpflabcdkioaeobkgjik":"4E7AE1C8D39C620F4E4FFCCC52F3914471879675BEB5EB8D3F9F033A35D6865C","mgndgikekgjfcpckkfioiadnlibdjbkf":"D7ACD4E12446623E406B768737B9FAC3D9012DB635DC6B12FB4033C53E33DCBA","mhjfbmdgcfjbbpaeojofohoefgiehjai":"97D9E3509A8396FA8ED4EEC868539868D1740324E607FEA8D2B17AF46BDD3136","mjpieolhcmajmolkhbbeljknkcdcmffk":"37F70093AD9BB7A95B7DA9831D76337156BB354B46A55D139682FA4D1C4A7307","neajdppkdcdipfabeoofebfddakdcjhd":"A3252487C8EE4E318FC0754C640DEA3F38B9DB9967EBA3C76C7CBF23239F8112","nkeimhogjdpnpccoofpliimaahmaaome":"E37F2AA5C5F8908B859DE4F34B33DF3832CF113BFD7A2479B8BB23EBB9C0CD6F","nmmhkkegccagdldgiimedpiccmgmieda":"C5F8647FF721B117C24A7FC1059B36CED6A3545E9F92997414164DB209DF5119","nnbmlagghjjcbdhgmkedmbmedengocbn":"8EB0B99E2735440DFE8D4551EB3938000263058B61B89B170FD42F881D3BF847","pafkbggdmjlpgkdkcbjmhmfcdpncadgh":"DC295A9BC1A7DC40242595D0F71D01FDF770B91A6A9D1A0E04179BB75873E07B","pficdecjkdlnacnnbkociacmdbpmhdoc":"9A913FB41CEAACF43EF0C758DB7058B1335028B25ECB5154F8D66955DF3F5C07","pgbdhkpacgdhfabeceekiafonfkipohm":"BD4A70B3B5DA1131134FA381E689DEFFC707CE1498183F182A3C64E9E140483D","pjkljhegncpnkpknbcohdijeoejaedia":"B74E669EF8148C3F50B71E1D939FFB93F7994ADA399AF1339FC7BA668360F7EA"}},"google":{"services":{"last_username":"E34F62CBF643FED36384A4D50A4DF0F477F8A6A968CCD93B3977A950B574FA20","username":"D147CA7AE620C2B8DDF6C0269DA1A9F18EDAC3A9A3556B60E0878BF9833A48AD"}},"homepage":"4A48B5F6D0B113FF132F49D36830F66EA83828A3744A7784522A9961C59A2B4A","homepage_is_newtabpage":"06EE78D27889A688D10A56BACD728CF04B49097E4970F4462C2F3F78F3FEF98B","pinned_tabs":"9398F32E07AA41B33516A8F629DFC553AD691C5C1645DEAA2A4067037F07F65C","prefs":{"preference_reset_time":"F6FA1BEF7E2AB8A878077CFDD36E392E9039F123A07F9173C43D5C542727577C"},"profile":{"reset_prompt_memento":"5ACD47FCA643493F1BAAEEE93DDF9A80B508AA8F355632AE6ADD31A461BDF274"},"safebrowsing":{"incidents_sent":"68A66EA9FA6153CE9AFE73FF7C61C22C42E7608246AE01162DD8860A92C56C99"},"search_provider_overrides":"90A11B48D70E78EC13EF767AC203B860835326FF1A834B325B222B970608F7A3","session":{"restore_on_startup":"8F8299F3CFBFE17021CF76CD1862607A71D96C364F3D277B0420A4BE74D2D6DF","startup_urls":,,""]},"sync":{"remaining_rollback_tries":0}}

C:\Users\Stepan\AppData\Local\Google\Chrome\User Data\Default\Preferences
"C89F0FD2DBF9EF1DB857BACA4EB9BB0332052B668071CFEFCC800246EAE50891"},"default_search_provider":{"keyword":"3C47903FC2C799BE6462FFDB8FE902DD3E5270CE8EA1E5C41D27722FC6EFDDEF","name":"E9D2BDE85FBDFF7A53BB383E5017F76CE7FCA8C7DEB503B4CBC413806CA7C146","search_url":"41ED94A8D4FB1A6FEA9E8B0D38A9F54E164AE76B9130EBA8A0C2334394E881AD"},"default_search_provider_data":{"template_url_data":"0AF0B32BF5DD1D651D258993669CFC4B40A892F96CA735686A9F580BE8E8F09A"},"extensions":{"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":"02DB26891A32FD1F6C29BC6622D3D422AAB552828A5A59043E3AACF36B525215","bepbmhgboaologfdajaanbcjmnhjmhfn":"7242FDC4226FC131C0CE52462FC4A4F44842B24CE85D451B34B1302E4F2EF4F2","eemcgdkfndhakfknompkggombfjjjeno":"1F243880070C56BC4E3E9A08385D9278E4102A9D4B54C390F9480E2EDD1B09A9","ennkphjdgehloodpbhlhldgbnhmacadg":"0BFC2F411AF9E42E730A3DFF4C106E8E16E2F4AE1716ECD843A5A7049421CA84","gfdkimpbcpahaombhbimeihdjnejgicl":"5626DB659EED21C1EDBC52BF93392570C9D4F32818944A333B855A97ADAF3943","kmendfapggjehodndflmmgagdbamhnfd":"8A4A86273F381A1A535CE605109E4C55AE82E230D32C9474B8DCD215C02B246C","mfehgcgbbipciphmccgaenjidiccnmng":"602829E2C08ABD19C231752ECD8B7EECD07C7D93FE5501D3EAAF746BB4FDD7FC","mfffpogegjflfpflabcdkioaeobkgjik":"8F5ABBCCB43B928CFA9CBACCAFFB2EB05FF2DF31A39B53DF7AB46ED58254CD30","mgndgikekgjfcpckkfioiadnlibdjbkf":"1F99B1DC8B9B9F3D65D340C331D5C5B25CCCEE94149F40FEF63CA4925BB10047","mhjfbmdgcfjbbpaeojofohoefgiehjai":"B52F268E98D6B89D8B470734836359A2B61C916C6174498817515801517AF907","neajdppkdcdipfabeoofebfddakdcjhd":"97D6AC0F2143AC2C0965537BFF65ED2D7C9897606EEBDEE0F4D9D2F9ECA51FAF","nkeimhogjdpnpccoofpliimaahmaaome":"8050F9FFC1AC5592FAF2184EDF0573253E21744356735AE32A709164DC44BEBC","nnocoggcoknkjehhjjpanophojgknbpd":"E5556DEC026BBC34948E4B6ED7AEECA18D4C1C3AEC3CA44A7DACAC6AB55F488D","pafkbggdmjlpgkdkcbjmhmfcdpncadgh":"ADE9366E88447AA4649F55AB54D89E7AC02E2295C8B13BDACD52732DAE4C82F4"}},"google":{"services":{"account_id":"8DA77C196035A5F0A7C36E0FF3554828A4C27463152DDB19DFAE30B6444A1B1C","last_username":"915ED509952656EDAC7BD643EA79F6BEC7C47CE630F85952310C5039379B361D","username":"48BC2B035F733CF0FF498818F3C4B96F21950E4923D115D0C8D34B6A0FE35CE4"}},"homepage":"4BE2CEE4D6ABCE3EB457BD45D19347377CF820C392C16680529EDD1A78971196","homepage_is_newtabpage":"F4DE3EA0DC351EDD1C75E674EB7CD50D5B1F9902ED4454A1F3CECAFBEE295BA7","pinned_tabs":"9398F32E07AA41B33516A8F629DFC553AD691C5C1645DEAA2A4067037F07F65C","prefs":{"preference_reset_time":"F6FA1BEF7E2AB8A878077CFDD36E392E9039F123A07F9173C43D5C542727577C"},"profile":{"reset_prompt_memento":"5ACD47FCA643493F1BAAEEE93DDF9A80B508AA8F355632AE6ADD31A461BDF274"},"safebrowsing":{"incidents_sent":"68A66EA9FA6153CE9AFE73FF7C61C22C42E7608246AE01162DD8860A92C56C99"},"search_provider_overrides":"90A11B48D70E78EC13EF767AC203B860835326FF1A834B325B222B970608F7A3","session":{"restore_on_startup":"F1B2EB57854BF21B973AAB7A179B38F2E6464AA85E79372C4107267365215C51","startup_urls":"A707BDE9AF4217F2193146282D80FB93CB5B81CDA60712BDAC039DB629AA1CEE"},"software_reporter":{"prompt_reason":"BE4A7F7F50258D23687379AF3800C20D6F0B9AA6FB7D1FF8128D3B66DF456AB4","prompt_seed":"DBA5C97F794319C88B9EC6C244FB41D6D817A67730729DDD140E4C7FD562E298","prompt_version":"92990FA09B916FA03835E4168615FE4E7BA582B7F03162A46692551920955272"},"sync":{"remaining_rollback_tries":"1ED745A8AE3120994D465BA86D6E1EB2835D05D81F262B1D3A2D61CD769F470C"}},"super_mac":"B29209C0E2D184DE6841C8E01D0F7A7E4120697AF909CA3E1BE9453F1CFE0734"},"session":{"restore_on_startup":5,"startup_urls":["http://www.searchnu.com/406","http://search.babylon.com/home?affID=114680&tt=111012_1_4112_2","","http://websearch.searchguru.info/?pid=1678&r=2013/12/14&hid=14832946507269692054&lg=EN&cc=CZ&unqvl=43"]},"sync":{"remaining_rollback_tries":0}}


==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com/"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com"

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com/"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
{012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC"
{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="https://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:{language}:{referrer:source}&ie={inputEncoding?}&oe={outputEncoding?}"

==== Reset Google Chrome ======================

C:\Users\Franta\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\Franta\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences was reset successfully
C:\Users\Joch\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\Joch\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences was reset successfully
C:\Users\Stepan\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\Stepan\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences was reset successfully
C:\Users\Stepan\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences.bad was reset successfully
C:\Users\Franta\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully
C:\Users\Franta\AppData\Local\Google\Chrome\User Data\Default\Web Data-journal was reset successfully
C:\Users\Joch\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully
C:\Users\Stepan\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully
C:\Users\Stepan\AppData\Local\Google\Chrome\User Data\Default\Web Data-journal was reset successfully

==== Empty IE Cache ======================

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Stepan\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Stepan\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully

==== Empty FireFox Cache ======================

No FireFox Profiles found

==== Empty Chrome Cache ======================

C:\Users\Franta\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully
C:\Users\Joch\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully
C:\Users\Stepan\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

No Java Cache Found

==== C:\zoek_backup content ======================

C:\zoek_backup (files=25 folders=20 18189484 bytes)

==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\Franta\AppData\Local\Temp emptied successfully
C:\Users\Joch\AppData\Local\Temp emptied successfully
C:\Users\Stepan\AppData\Local\Temp will be emptied at reboot
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied
C:\Users\Stepan\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== EOF on ne 26.07.2015 at 20:34:36,18 ======================
Časové pásmo: UTC+02:00
Stránka 1 z 5
Powered by phpBB® Forum Software © phpBB Limited
https://www.phpbb.com/