# AdwCleaner v5.005 - Logfile created 05/09/2015 at 17:54:52
# Updated 31/08/2015 by Xplode
# Database : 2015-09-04.4 [Server]
# Operating system : Windows 7 Professional Service Pack 1 (x64)
# Username : Radek - RADEK-PC
# Running from : C:\Users\Radek\Desktop\AdwCleaner.exe
# Option : Cleaning
# Support :
http://toolslib.net/forum***** [ Services ] *****
***** [ Folders ] *****
[-] Folder Deleted : C:\ftb
[-] Folder Deleted : C:\ProgramData\saophase
[-] Folder Deleted : C:\Users\Radek\AppData\Local\slimware utilities inc
***** [ Files ] *****
[-] File Deleted : C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\findit.xml
[-] File Deleted : C:\Program Files\Common Files\System\SysMenu.dll
[-] File Deleted : C:\Program Files\Common Files\System\SysMenu64.dll
[-] File Deleted : C:\Users\Radek\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_search.safefinder.com_0.localstorage
[-] File Deleted : C:\Users\Radek\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_search.safefinder.com_0.localstorage-journal
[-] File Deleted : C:\Users\Radek\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_search.snapdo.com_0.localstorage
[-] File Deleted : C:\Users\Radek\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_search.snapdo.com_0.localstorage-journal
[-] File Deleted : C:\Users\Radek\AppData\Roaming\Mozilla\Firefox\Profiles\nkkvlc85.default-1439732266531\searchplugins\findit.xml
***** [ Shortcuts ] *****
***** [ Scheduled tasks ] *****
[-] Task Deleted : snp
[-] Task Deleted : snf
[-] Task Deleted : UNELEVATE_5740
***** [ Registry ] *****
[-] Value Deleted : HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [YTDownloader]
[-] Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [YTDownloader]
[-] Key Deleted : HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\IELNKSRCH
[-] Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION [SensePlus-bg.exe]
[-] Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION [iWebar-bg.exe]
[-] Key Deleted : HKLM\SOFTWARE\08347c3e-cb36-4cba-af68-9c1dfaf6d1ca
[-] Key Deleted : HKLM\SOFTWARE\4abc6713-790b-4b06-8b9b-8369f5fc3bc7
[-] Key Deleted : HKLM\SOFTWARE\654b423a-fbde-47cf-aed8-7db6b1e776b9
[-] Key Deleted : HKLM\SOFTWARE\a7174c60-f4d9-41d1-8574-f4da3417acd8
[-] Key Deleted : HKLM\SOFTWARE\fb723689-6ff5-884f-5b1d-98953927b5a8
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6EDBF8C0-C94C-4A13-956F-E393BCA5BA4B}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{61AB12E1-A5FF-11D1-B2E9-444553540000}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{82351441-9094-11D1-A24B-00A0C932C7DF}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{82351433-9094-11D1-A24B-00A0C932C7DF}
[-] Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{1F91A9A1-01BA-4C81-863D-3BA0751E1419}]
[-] Key Deleted : HKCU\Software\InstalledBrowserExtensions
[-] Key Deleted : HKCU\Software\SimpleFiles
[-] Key Deleted : HKCU\Software\Appscion
[-] Key Deleted : HKCU\Software\Kromtech
[-] Key Deleted : HKCU\Software\SlimWare Utilities Inc
[-] Key Deleted : HKLM\SOFTWARE\InstalledBrowserExtensions
[-] Key Deleted : HKLM\SOFTWARE\SimpleFiles
[-] Key Deleted : HKLM\SOFTWARE\AIM Toolbar
[-] Key Deleted : HKLM\SOFTWARE\SecureWebChannel
[-] Key Deleted : HKLM\SOFTWARE\SlimWare Utilities Inc
[-] Key Deleted : HKLM\SOFTWARE\SecureWeb
[!] Key Not Deleted : [x64] HKCU\Software\InstalledBrowserExtensions
[!] Key Not Deleted : [x64] HKCU\Software\SimpleFiles
[!] Key Not Deleted : [x64] HKCU\Software\Appscion
[!] Key Not Deleted : [x64] HKCU\Software\Kromtech
[!] Key Not Deleted : [x64] HKCU\Software\SlimWare Utilities Inc
[-] Key Deleted : [x64] HKLM\SOFTWARE\InstalledBrowserExtensions
[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{ielnksrch}
[-] Data Restored : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [DefaultScope]
[!] Key Not Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\ielnksrch
[!] Key Not Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{ielnksrch}
[-] Data Restored : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes [DefaultScope]
[!] Key Not Deleted : HKU\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\SearchScopes\{ielnksrch}
[-] Data Restored : HKU\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\SearchScopes [DefaultScope]
[-] Data Restored : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs]
[-] Data Restored : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs]
***** [ Web browsers ] *****
[-] [C:\Users\Radek\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : feed.snapdo.com
[-] [C:\Users\Radek\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : aol.com
[-] [C:\Users\Radek\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : ask.com
[-] [C:\Users\Radek\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Default_Search_Provider] Deleted :
hxxp://www.oursurfing.com/webfavicon.ico*************************
:: Winsock settings cleared
########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [5413 bytes] ##########
Malwarebytes Anti-Malware
http://www.malwarebytes.orgDatum skenování: 5.9.2015
Čas skenování: 17:58
Protokol: Malwarebytes scan log.txt
Správce: Ano
Verze: 2.1.8.1057
Databáze malwaru: v2015.09.05.04
Databáze rootkitů: v2015.08.16.01
Licence: Zkušební verze
Ochrana proti malwaru: Zapnuto
Ochrana proti škodlivým webovým stránkám: Zapnuto
Ochrana programu: Vypnuto
OS: Windows 7 Service Pack 1
CPU: x64
Souborový systém: NTFS
Uživatel: Radek
Typ skenu: Sken hrozeb
Výsledek: Dokončeno
Prohledaných objektů: 355749
Uplynulý čas: 10 min, 11 sek
Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Zapnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto
Procesy: 0
(Nenalezeny žádné škodlivé položky)
Moduly: 0
(Nenalezeny žádné škodlivé položky)
Klíče registru: 0
(Nenalezeny žádné škodlivé položky)
Hodnoty registru: 0
(Nenalezeny žádné škodlivé položky)
Data registru: 0
(Nenalezeny žádné škodlivé položky)
Složky: 0
(Nenalezeny žádné škodlivé položky)
Soubory: 0
(Nenalezeny žádné škodlivé položky)
Fyzické sektory: 0
(Nenalezeny žádné škodlivé položky)
(end)
RogueKiller V10.10.4.0 (x64) [Sep 4 2015] by Adlice Software
mail :
http://www.adlice.com/contact/Feedback :
http://forum.adlice.comWebová stránka :
http://www.adlice.com/software/roguekiller/Blog :
http://www.adlice.comOperační systém : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Spuštěno : Normální režim
Uživatel : Radek [Práva správce]
Started from : C:\Users\Radek\Desktop\RogueKillerX64.exe
Mód : Prohledat -- Datum : 09/05/2015 18:24:26
¤¤¤ Procesy : 1 ¤¤¤
[Suspicious.Path|VT.UDS:DangerousObject.Multi.Generic] malwarebytes.exe(2872) -- C:\Users\Radek\AppData\Local\MalwarebytesAntiExploit\malwarebytes.exe[-] -> Zastaveno [TermProc]
¤¤¤ Registry : 16 ¤¤¤
[Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ITHelper (C:\ProgramData\ITHelper\ITHelper) -> Nalezeno
[Suspicious.Path|VT.UDS:DangerousObject.Multi.Generic] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NYW41 ("C:\Users\Radek\AppData\Local\MalwarebytesAntiExploit\malwarebytes.exe" "/s") -> Nalezeno
[Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\ITHelper (C:\ProgramData\ITHelper\ITHelper) -> Nalezeno
[Suspicious.Path|VT.UDS:DangerousObject.Multi.Generic] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\NYW41 ("C:\Users\Radek\AppData\Local\MalwarebytesAntiExploit\malwarebytes.exe" "/s") -> Nalezeno
[Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\System\ControlSet002\Services\ITHelper (C:\ProgramData\ITHelper\ITHelper) -> Nalezeno
[Suspicious.Path|VT.UDS:DangerousObject.Multi.Generic] (X64) HKEY_LOCAL_MACHINE\System\ControlSet002\Services\NYW41 ("C:\Users\Radek\AppData\Local\MalwarebytesAntiExploit\malwarebytes.exe" "/s") -> Nalezeno
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters | DhcpNameServer : 10.0.0.138 ([X]) -> Nalezeno
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters | DhcpNameServer : 10.0.0.138 ([X]) -> Nalezeno
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet002\Services\Tcpip\Parameters | DhcpNameServer : 10.0.0.138 ([X]) -> Nalezeno
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{23629C23-5CD0-4FC2-A03D-9D50014CBA16} | DhcpNameServer : 10.0.0.138 ([X]) -> Nalezeno
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters\Interfaces\{23629C23-5CD0-4FC2-A03D-9D50014CBA16} | DhcpNameServer : 10.0.0.138 ([X]) -> Nalezeno
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet002\Services\Tcpip\Parameters\Interfaces\{23629C23-5CD0-4FC2-A03D-9D50014CBA16} | DhcpNameServer : 10.0.0.138 ([X]) -> Nalezeno
[PUM.StartMenu] (X64) HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowMyGames : 0 -> Nalezeno
[PUM.StartMenu] (X86) HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowMyGames : 0 -> Nalezeno
[Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows | AppInit_DLLs : C:\ProgramData\Saophase\3oywsxx0.dll [x] -> Nalezeno
[Suspicious.Path] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows | AppInit_DLLs : C:\ProgramData\Saophase\tqkr3tex.dll [x] -> Nalezeno
¤¤¤ Úlohy : 3 ¤¤¤
[Suspicious.Path] %WINDIR%\Tasks\PZOHSQ.job -- C:\Users\Radek\AppData\Roaming\PZOHSQ.exe (/infocmdline=TTQCgENqWZrOgTvLTjEJ6vpN8w3T4QYTM75mPEL5KIJnnfTKHviGlYTNDG4Q+ywiZ9WoKGqXSfVjCT6qTWbw2UHGpL62sVTPf5L/NTwheYZZokhxfc2Mbh58ELOaZdSVLIJPIAoiV2P3KCpDMpf81bfpDBqsVJ7tt+GLFDMM3LKyWHRGSasAdVLVwBr4qfezYSfj+24xRujnJ46QHL7EZzSSv/UH69e5PFEcCG3FxSCqR8h9fiGBtQ+ht4DFbHDYcYqBMlB+vEIxggRUf9bxSGZdAZfvePZ0e2dx/bBZnNXj8gbdvG/R1fjGcnN5peuIMsLBVWDMnEqVH2TcfqOrIGAt8Y1d/QikSL7Xrwq1Ce6v0OaHlQBYVQvogG92mJ78VC0zk8SbpTjTP3Ylk3xs/G90b71kpdi5HUCOPDpIT+uWyswWNW3ABi7hFtyhJATA33MoTwQUazyn2Gf8J2AoEcbutyXMHLVnr5eIdLSZvJnyRjHFA+jV9dzDHF9dh/Q+) -> Nalezeno
[Suspicious.Path] \PZOHSQ -- C:\Users\Radek\AppData\Roaming\PZOHSQ.exe (/infocmdline=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) -> Nalezeno
[Suspicious.Path] \System Update -- C:\Users\Radek\AppData\Roaming\Updater\winupd.exe -> Nalezeno
¤¤¤ Soubory : 0 ¤¤¤
¤¤¤ Soubor HOSTS : 0 [Too big!] ¤¤¤
¤¤¤ Antirootkit : 0 (Driver: Nahrán) ¤¤¤
¤¤¤ Webové prohlížeče : 1 ¤¤¤
[PUM.HomePage][FIREFX:Config] nkkvlc85.default-1439732266531 : user_pref("browser.startup.homepage", "https://www.malwarebytes.org/restorebrowser/"); -> Nalezeno
¤¤¤ Kontrola MBR : ¤¤¤
+++++ PhysicalDrive0: WDC WD30 EZRX-00DC0B0 SATA Disk Device +++++
--- User ---
[MBR] 0a8dd15d54651ce194823c95ae2a167e
[BSP] 3f3cf9ea95f265539e5da0449b8b8ca2 : Windows Vista/7/8|VT.Unknown MBR Code
Partition table:
0 - [XXXXXX] FAT16 (0x6) [VISIBLE] Offset (sectors): 2048 | Size: 100 MB
1 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 206848 | Size: 204800 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
2 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 419637248 | Size: 1892251 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
User = LL1 ... OK
User = LL2 ... OK
+++++ PhysicalDrive1: Giga-Byte WDC WD30 EZRX-00DC0B0 Serial ATA Dev +++++
--- User ---
[MBR] 546a8c9c0741c3a6b4b2bd3def869675
[BSP] 7edd36a1675d76c6ec92e4e98c940e7f : Windows Vista/7/8|VT.Unknown MBR Code
Partition table:
0 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 764434 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
Error reading LL1 MBR! ([1] Incorrect function. )
Error reading LL2 MBR! ([1] Incorrect function. )
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 7.6.0 (08.31.2015:1)
OS: Windows 7 Professional x64
Ran by Radek on so 05.09.2015 at 18:28:36,90
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Tasks
~~~ Registry Values
~~~ Registry Keys
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Eventlog\Application\Update Ttessab
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Eventlog\Application\Util Ttessab
~~~ Files
~~~ Folders
Successfully deleted: [Folder] C:\users\Public\Documents\downloaded installers
Successfully deleted: [Folder] C:\Users\Radek\Appdata\Local\crashrpt
~~~ Chrome
[C:\Users\Radek\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - default search provider reset
[C:\Users\Radek\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - Extensions Deleted:
[C:\Users\Radek\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - default search provider reset
[C:\Users\Radek\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - Extensions Deleted:
[]
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on so 05.09.2015 at 18:31:00,87
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Zoek.exe v5.0.0.0 Updated 04-September-2015
Tool run by Radek on so 05.09.2015 at 18:32:22,91.
Microsoft Windows 7 Professional 6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Radek\Desktop\zoek.exe [Scan all users] [Script inserted]
==== System Restore Info ======================
5.9.2015 18:33:35 Zoek.exe System Restore Point Created Successfully.
==== Reset Hosts File ======================
# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host
# localhost name resolution is handled within DNS itself.
127.0.0.1 localhost
::1 localhost
==== Empty Folders Check ======================
C:\PROGRA~2\R.G. Games deleted successfully
C:\PROGRA~2\R.G. Mechanics deleted successfully
C:\Program Files\ATI Technologies deleted successfully
C:\Users\Radek\AppData\Local\EmieBrowserModeList deleted successfully
C:\Users\Radek\AppData\Local\EmieSiteList deleted successfully
C:\Users\Radek\AppData\Local\EmieUserList deleted successfully
C:\Users\Radek\AppData\Local\Opera Software deleted successfully
==== Deleting CLSID Registry Keys ======================
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{12545E2E-DE99-4143-9946-5FD6553E315F} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{12ED2458-8E70-4469-987-429834816CB} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{153F1647-D97E-4518-9772-F07BC22CCCE3} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{155DBA51-C516-4DEC-A934-F16F1373748} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{156AACF3-747E-4112-AC40-693510109FD6} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{15EB3DD4-C3-4D33-AF7D-516CBEACD9EF} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1643F567-D521-48E4-983E-B0937124ED2E} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1769A22A-1C2B-4630-845E-3911BC803C19} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{17E2384C-9042-4896-8CE2-346F46DF3EDA} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1850A135-20CF-43E6-8D7F-CF7E56C6507A} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{19229C83-F786-4453-8495-1C83CAF246C} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{19460903-E7F9-467A-BEC9-D5D61FF6B8} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1cbcde8c-f460-427b-a80f-8c72196c4ab9} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1D1B3D60-2A1A-4CB5-8BE1-DAB06D285D24} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1E78D546-68AD-4D7B-B452-493B3592C9C} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1F2A80F-BD62-40C0-89C1-C0AFC286AD9D} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2169612F-2D99-40E0-87EF-62491082DEE} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{225ECF10-4FE3-40E6-8B1F-8A302D3E855} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{22BE414D-CE26-4FCD-9291-C8D6286859} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{23D04BB2-55F0-42D8-934-6ACAD7A8CAA} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{27478617-2D7-4728-92B4-BFB77D6FD44B} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{27786B96-7471-4FED-AE65-8EEBBC1965D} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2D60ABD6-D5A3-46F8-90CD-9E3A7CF06AC4} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2EA67F6E-D5B2-4308-B9F1-39095D2FAF1} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{315E7FC4-44C7-4396-927B-824E43BD4B20} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{32DAC9F0-74D5-48C2-83AC-A61A53C9B9CF} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{33F3189-7924-40D2-A515-B555F861BDD} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{33FFDD40-9D53-4543-AD7C-8FE340532260} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{34689ACE-2EA-4948-8D2D-D11157D456E6} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{346ED2E6-DE27-4D53-B14-9F3EEC2F72} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3479248E-36F4-42D4-975E-B13812B4AD5C} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{35573F26-29BD-4427-9164-F45EB4B1AC6D} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3801DD08-3116-418C-AE1F-EFD992A24FF} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3AFAEC1B-1C63-43BB-BA6E-ECB47B7EF2A} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3E12A53D-3240-4261-9A8C-8263CDB8A718} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3E38C5C0-DFCF-4013-A4D0-185FA84316} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3F2665E-E1FC-4256-89AB-C3E8C1328122} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{401182BB-4B63-4E5F-80AC-233FFDA44E0} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{402E781B-A4F4-4A79-8FA6-A3B184E6880} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{41A79231-161A-4CC8-8C40-5063A642938} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4201A1D6-30E8-4BA7-8A29-BBE188CE3B4} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4554A4AC-4746-455B-8AEE-3FE2B670875} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{46606F44-5A7A-4BB9-9E1D-3B41F37C495} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4682DB66-5617-4654-A56B-947E65D7DB9} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{47661903-F891-45B9-B9F6-55EADC60605} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{47FF03EE-D659-46AB-B835-35178A3D419} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{490C6A35-9927-4C90-B234-CC87157DADFE} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4AC4EDF4-5801-443C-918C-1FB6E2958ED8} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4AD90245-887A-4B27-A1D-3113EF546D7B} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4BC92833-F24E-4F76-B4DD-4F592E57B3F2} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4C6ED084-E066-4E89-9316-DD9012A944C} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4ED983E3-F161-4A00-9FF5-25AA66B7B4C} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4F88DA98-4120-4826-99C5-EDF8C71BF052} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5121C33D-1DF7-4D60-B03-F02E17EA149D} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5694E17-D0BB-4BE6-ACAD-C2168C75D9E2} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5917EC25-131-41E8-8F68-F9ABF9E96B1} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{626658a9-e0eb-4c56-9bc5-1664d03e39eb} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{62B4039-5758-494D-BE2C-6F8CFF661B93} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{63E60105-CE4B-4823-8CE4-A362A1DDDF6} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{65FE5C0E-F5D1-4E75-924E-8F7772B8D386} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6658FD3E-2FCB-40EC-BD73-6218D24A31A} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{670C570-91E9-48F6-87F0-1BB4D047F6B} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{680D2660-98D4-4D8D-82B-1BAFAD89A1F} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B1D30A-FA65-4403-A82D-EAF879EDD14} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6A7C9216-F1E2-4DA6-8B8D-5F6380321051} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6AB875D9-EA38-491F-914A-DB6FF2E1B123} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6AF42B0E-E34B-46A0-AE36-64F6689E037} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6B2BC385-197D-4AD4-8564-56EBC19F55A} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6BB4C91F-E1C4-47D4-A3C5-C86A648FDE4} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6E576C3D-F1C8-4FD3-8146-9DCA95CC502} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6E91F077-5AA-436D-AC9D-104B606C596D} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6F66B7CD-6270-4B0C-A87-829E9586395} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{70ABCE33-3668-4741-8B10-0244F4DC6CE} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{70BED69C-7520-4016-AE1F-F8BBB2165B17} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7323BC8F-1401-4F87-B519-AE73F29CA04A} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{74772A7F-8F8E-46EC-B9E2-7A1FED10911D} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7478014E-FEBA-44C2-9B36-7A15B5C1FFED} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{75459E17-988D-4A30-B198-290B68533AB} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7605D7F8-46B9-4720-9C5A-4D40E686E5C0} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{76B39420-1990-43B3-8DE9-22A0A1A412F} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7718202B-DF82-48B4-A825-D2A6D69DBF65} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{77D87F50-40FA-45A1-A447-BF84A4CBBE9} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{77F01B1A-423E-46A8-B441-C2B0D6AA7E22} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7A83B275-1B0-4F6B-A914-C376A86B9F2F} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7AE08A0F-C140-4A03-BEF3-B734EDBD379} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7B3C39C3-A527-4592-B99A-A6BFBDE1DAE} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7DCBF548-9432-4DB0-AD36-378E7A03759} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7DEDEC1D-7D36-43D0-9ECC-9185859836} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7E3FB6BD-19E7-4EFD-857D-162479762BB1} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7ED3E1BB-B105-4842-B6F8-394E38245C} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7F831C2B-448-48D2-84C-42CD20CA5C63} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7FBB82DF-7D14-4933-9EEF-F94555D58BFD} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7FCFE9AD-6FF9-4DEB-9B92-19ADB2223BF9} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8173F82F-4D37-40F3-91DD-66D24246223} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{81F3331B-DF63-4E81-960-770FC4DCDA4} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{837033-35DF-4D13-8093-FD9A31CFE39D} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{84E1E868-F5C5-425F-8EF0-9613C43EBEE} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{84E67241-1894-4747-AC5D-1522CA73CC} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{85DE72D0-C1C-44D1-96F2-C0C094B7F521} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{87A2BFB6-CAB2-40F3-ABEC-D893B2E8381} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{886EDEBA-FDF0-435D-BF9C-5C7BD7C1DF4} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{889CD0A8-6E15-4831-BCDC-8CA7C2BE62A9} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{891BD9D6-79BF-4B0D-BC87-8C5C44472E2} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8BB8E76C-5BC8-46DB-86DB-435D72FFE96A} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8DF2C6C0-E67F-47B6-9AA2-98CFAC9DEF1D} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8E06EA12-CAB-4B7F-BB69-D12066C03A8E} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8F24D0BA-81D-4938-ACE5-E722D8090A4} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8FF9A60A-EFFC-44B6-86E1-5263C46DF7F} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{914D42F8-EBFD-47B9-9115-5154DB04575} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9153E215-86BF-479A-8AE8-45F132A3BA47} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{91DB7292-1C2-43A9-BE86-ECDDB989913} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{91DC86DB-A479-4ABE-864D-C42397B1C1FB} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{92CDC798-7E07-4EC5-931A-B7BB9BF3181} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{963DC1CA-7F61-4596-9B2B-1E67494BAA94} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{97BEAD7D-4330-43B1-9376-D7A5A32B8110} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9C2993C4-BFB8-4444-B9B5-3C341E83E8D} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9DAAF29D-EC88-4917-B0F5-2898DF6B622} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9ED7BF5E-F8BB-48D1-93DF-AD5D334D647C} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9F4DB297-D4EA-417F-BD5D-42198E64876B} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A11F7DA5-2E52-4F71-8D47-854588DC9636} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A3828A3A-24BB-4C01-AF7-55AC881753E9} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A3E56262-A85B-4917-928E-6C36D62AA561} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A4A1A8A7-AF5D-4014-A81D-46968DD5423E} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A4F6E3AA-8C8C-465F-9E60-5224DE173B4D} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A61EE49-9427-40FC-A270-8F53F25C8215} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A6404CE6-F856-47EA-A628-D13553A9977} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A6B7185A-B3DA-4C94-B332-4A1F45A32086} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A87EB65D-3C01-4A1C-89BF-8FD57CD7D6D9} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{AA8D1071-80BE-4706-A19B-79201EF483F8} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{AAA0F667-917F-4B15-ACD-D218F2F5ED24} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{AACEAFEA-CEF4-448A-8BD8-244C4399B8D} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{ACF91B7B-4EC9-4DF7-8045-70FF61A42028} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{AD4C5229-F7E1-483B-9262-6021327EC98} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{AF743533-21A0-4495-BA5B-5B477F460BA} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{AFB7808C-37FC-4998-AF8C-F1F17C1119D4} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B1525AB4-2C45-441D-ACFF-3FA6567E7251} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B230F34C-DA67-4D01-96F6-3DB0EE17A6D} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B26118A7-44A0-4833-B035-86D8924550} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B2817F9E-EA21-49CB-AFD6-6B628D8B4849} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B5693C95-F0BC-4AA3-9DFD-55C2D740E5} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B579A064-49-461F-A88C-D53D2023FBD4} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B582DE65-66E2-4344-8F50-A390B53C70AD} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B59E9FC0-409-4F2F-97D9-9BEE801D7831} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B647685A-EF03-4B36-82E1-9AD665DE525} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{BAC281C7-9588-4A3F-A0D9-363FF522DEB} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{BB2F3745-F0EB-4491-BF2B-BCADCB271AB} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{BB360D31-C636-447D-8A11-26F57AB2D45} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{BBF8AABC-C5BD-472D-B055-714775FBB058} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{BCA38172-CC9A-4DA4-AEA-559CEEB4BB0} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{BCAFD257-B844-487A-8893-42B2D17964B} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{BCCADF4B-4726-4860-AE5-5511B1C26EE8} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{BD874837-7A39-4AA8-BC7E-B93AC2D51DB} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{BDBC1C74-2269-4CAE-A192-88A21454EF0} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{BDD66CA2-DD06-4F45-A27D-B88A5298E5FE} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{BE88BD7B-867B-4C57-A655-8657F0726EB5} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{BEEDCC5C-D31D-4571-AE16-C6903A7ED285} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C1A65E1C-AC4C-4F93-A3CD-5991DF1FF75A} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C2114C2D-4008-4F41-90C7-3D4CE5A05298} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C6550CC2-CD24-422B-BF1E-47105CD247C5} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C7C202D6-ADFF-418B-834-D54BC79FBE5} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C8D8FCAE-8165-42B2-BC3B-1EA0CA4A3850} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CA048844-AA4C-4258-BB1B-9248B8B01B56} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CA34EF20-2D81-410A-B96E-1CE73337267C} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CA8EACB5-A7D3-4857-8653-525016E65DF6} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CAEECFDD-AF57-48EF-81F4-3F509714FAD6} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CD7F0612-C99B-4A7E-BE88-8DBEF8B7AAC8} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CF468F0E-8E2B-4E76-A4B6-93271A9583F} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D23BC06C-DE25-465F-8789-CE10AC94EFA4} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D3CFEB28-A14A-4138-B6E9-49BF92B87D4C} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D464F80B-3DB8-4668-B5D2-A67EBFD5914E} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D4ECDC41-7BD7-4613-83CF-EA9524679E1} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D82FA4DA-BA6F-4EBC-BAF1-B6A0D222113} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E02011B9-D4F4-490A-91B3-E41E89C8C618} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E25A7C8D-779D-49C1-89E4-BAC4AF5EB8D1} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E2D84950-A372-472D-81B7-324BCBD5FD4D} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E4AF81F2-F137-485A-A92-D4B9322785C0} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E5C504D9-5D46-4497-93D-1EBB35DBBD3E} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E5F85176-EDD6-4296-A0C8-E3CFF778EBDE} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E9F2507-87E0-4798-BB6A-2A363BEF26E} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EA328F57-32E2-41A1-B2ED-12EFB34C164} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EB980639-58B0-4EE9-809D-64BF6CCB9EB0} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EC489966-6531-4EC4-9454-27382381960} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{ED173E42-9244-49A7-A179-5AFDCE1F33C4} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EEA7A59-563E-4F4D-B1F4-C07CADC91BA9} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F059857C-1C74-449C-A678-A6B2DDF1AC5} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F7CB572C-48C1-473A-A31A-E6973E76D4} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F8507447-1E02-4F22-9A3C-4AFADAE2DFB1} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F897D15C-175E-46B7-9747-545632CB498E} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F8C2E6B1-793A-4D34-9A6-F139F8F479E} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FA0D6594-59C3-42A3-9A3E-F8FF756DC25B} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FA9A5953-410-43CB-A874-945E3EE9FE59} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FBA04E0C-84F6-405B-84CB-FF4F3D0B142} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FC5FF5D-F80-468A-89E3-A2F1B964E133} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FCADAD1C-686B-4330-9DAF-5B36B13742C3} deleted successfully
HKEY_USERS\S-1-5-21-2731555163-1214082887-1406298696-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FEA4DBEB-B28-4B70-A3DA-A4F115585362} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1cbcde8c-f460-427b-a80f-8c72196c4ab9} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{626658a9-e0eb-4c56-9bc5-1664d03e39eb} deleted successfully
==== Deleting CLSID Registry Values ======================
==== Deleting Services ======================
==== FireFox Fix ======================
Deleted from C:\Users\Radek\AppData\Roaming\Mozilla\Firefox\Profiles\nkkvlc85.default-1439732266531\prefs.js:
user_pref("browser.startup.homepage", "https://www.malwarebytes.org/restorebrowser/");
Added to C:\Users\Radek\AppData\Roaming\Mozilla\Firefox\Profiles\nkkvlc85.default-1439732266531\prefs.js:
user_pref("browser.startup.homepage", "about:home");
user_pref("browser.newtab.url", "about:newtab");
==== Deleting Files \ Folders ======================
C:\PROGRA~2\R.G. Games not found
C:\PROGRA~2\R.G. Mechanics not found
C:\PROGRA~2\Deus.Ex.Human.Revolution.Directors.Cut deleted
C:\Windows\wininit.ini deleted
C:\windows\SysNative\tasks\Microsoft\Windows\Maintenance\SMupdate2 deleted
C:\windows\SysNative\tasks\Microsoft\Windows\Multimedia\SMupdate3 deleted
C:\Windows\SysNative\config\systemprofile\Searches deleted
C:\windows\SysNative\GroupPolicy\machine deleted
C:\windows\SysNative\GroupPolicy\User deleted
C:\windows\SysNative\GroupPolicy\gpt.ini deleted
C:\Windows\Syswow64\GroupPolicy\gpt.ini deleted
"C:\Users\Radek\AppData\Roaming\PZOHSQ" deleted
==== Firefox Start and Search pages ======================
ProfilePath: C:\Users\Radek\AppData\Roaming\Mozilla\Firefox\Profiles\nkkvlc85.default-1439732266531
user_pref("browser.startup.homepage", "about:home");
user_pref("browser.newtab.url", "about:newtab");
==== Firefox Extensions ======================
AppDir: C:\Program Files (x86)\Mozilla Firefox
- Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
==== Firefox Plugins ======================
Profilepath: C:\Users\Radek\AppData\Roaming\Mozilla\Firefox\Profiles\nkkvlc85.default-1439732266531
EC55112EDB2CE5BC2BFCACDB9C2150F4 - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_232.dll - Shockwave Flash
==== Chromium Look ======================
Google Chrome Version: 45.0.2454.85
HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
lifbcibllhkdhoafpjfnlhfpfgnpldfl - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx[01.05.2015 11:17]
http //torrentz.eu/ - Radek\AppData\Local\Google\Chrome\User Data\Default\Extensions\blojkkpcfjmhjbcdbdlifkflodghjeng
http //orteil.dashnet.org/cookieclicker/ - Radek\AppData\Local\Google\Chrome\User Data\Default\Extensions\gfnjlkpkoaohejhimcmcmgpopolbjdeg
Chrome Hotword Shared Module - Radek\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg
http //www.gymn-dacice.cz/ - Radek\AppData\Local\Google\Chrome\User Data\Default\Extensions\llkhkpnpncppomekpgnmhojoabejihjd
==== Set IE to Default ======================
Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Use Search Asst"="yes"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}] not found
New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Use Search Asst"="no"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{012E1000-F331-11DB-8314-0800200C9A66}"
==== All HKCU SearchScopes ======================
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
{012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC"
==== Reset Google Chrome ======================
C:\Users\Radek\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\Radek\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences was reset successfully
C:\Users\Radek\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences.bad was reset successfully
C:\Users\Radek\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully
C:\Users\Radek\AppData\Local\Google\Chrome\User Data\Default\Web Data-journal was reset successfully
==== Deleting Registry Keys ======================
HKEY_LOCAL_MACHINE\Software\wow6432node\Policies\Google deleted successfully
==== Empty IE Cache ======================
C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Radek\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
==== Empty FireFox Cache ======================
No FireFox Cache found
==== Empty Chrome Cache ======================
C:\Users\Radek\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully
==== Empty All Flash Cache ======================
No Flash Cache Found
==== Empty All Java Cache ======================
No Java Cache Found
==== C:\zoek_backup content ======================
C:\zoek_backup (files=13 folders=4 12587903 bytes)
==== Empty Temp Folders ======================
C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\Radek\AppData\Local\Temp will be emptied at reboot
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp will be emptied at reboot
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot
==== After Reboot ======================
==== Empty Temp Folders ======================
C:\Windows\Temp successfully emptied
C:\Users\Radek\AppData\Local\Temp successfully emptied
==== Empty Recycle Bin ======================
C:\$RECYCLE.BIN successfully emptied
==== Deleting Files / Folders ======================
"C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp\Low" not deleted
==== EOF on so 05.09.2015 at 18:49:53,10 ======================