Prosím o kontrolu logu / bezpečnostní odhlášení z google učtu Vyřešeno

[dz61]

Fix result of Farbar Recovery Scan Tool (x64) Version: 20-10-2021
Ran by dzavel (22-10-2021 16:39:44) Run:1
Running from C:\Users\dzave\Desktop
Loaded Profiles: dzavel & DevToolsUser
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
CreateRestorePoint:
CloseProcesses:
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
Task: {597C2E0F-D640-48CA-A3FF-FC86054DC8AC} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2018-02-28] (Google Inc -> Google Inc.)
Task: {F59B3D7F-593F-42F1-8AD8-A60201F7107C} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2018-02-28] (Google Inc -> Google Inc.)
CHR HKU\S-1-5-21-2856598848-2235660964-1980335571-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [apdfllckaahabafndbhieahigkjlhalf] - <no Path/update_url>
CHR HKU\S-1-5-21-2856598848-2235660964-1980335571-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh]
S2 AppServicee; C:\WINDOWS\system32\WYQP1QL75V.tmp [X] <==== ATTENTION
U2 MediaMall Server; no ImagePath
C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
HKU\S-1-5-21-2856598848-2235660964-1980335571-1001\...\ChromeHTML: -> <==== ATTENTION
ContextMenuHandlers4: [FormatFactoryShell] -> {A3888923-CFD3-4A6B-89BF-08E6B95716E8} => -> No File
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp//www.bing.com/search?q={searchTerms}&FORM=IE8SRC
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp//www.bing.com/search?q={searchTerms}&FORM=IE8SRC
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp//www.bing.com/search?q={searchTerms}&FORM=IE8SRC
SearchScopes: HKU\S-1-5-21-2856598848-2235660964-1980335571-1001 -> DefaultScope {012E1000-F331-11DB-8314-0800200C9A66} URL = hxxp//www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-2856598848-2235660964-1980335571-1001 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = hxxp//www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-2856598848-2235660964-1980335571-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp//www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
Virustotal: C:\Users\dzave\AppData\Roaming\6048711.scr

EmptyTemp:
End

*****************

Restore point was successfully created.
Processes closed successfully.
C:\ProgramData\NTUSER.pol => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{597C2E0F-D640-48CA-A3FF-FC86054DC8AC}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{597C2E0F-D640-48CA-A3FF-FC86054DC8AC}" => removed successfully
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineUA" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{F59B3D7F-593F-42F1-8AD8-A60201F7107C}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F59B3D7F-593F-42F1-8AD8-A60201F7107C}" => removed successfully
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineCore" => removed successfully
HKU\S-1-5-21-2856598848-2235660964-1980335571-1001\SOFTWARE\Google\Chrome\Extensions\apdfllckaahabafndbhieahigkjlhalf => removed successfully
HKU\S-1-5-21-2856598848-2235660964-1980335571-1001\SOFTWARE\Google\Chrome\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh => removed successfully
HKLM\System\CurrentControlSet\Services\AppServicee => removed successfully
AppServicee => service removed successfully
HKLM\System\CurrentControlSet\Services\MediaMall Server => removed successfully
MediaMall Server => service removed successfully
"C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA" => not found
"C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore" => not found
HKU\S-1-5-21-2856598848-2235660964-1980335571-1001_Classes\ChromeHTML => removed successfully
HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\FormatFactoryShell => removed successfully
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => removed successfully
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\\"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" => value restored successfully
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => removed successfully
"HKU\S-1-5-21-2856598848-2235660964-1980335571-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope" => removed successfully
HKU\S-1-5-21-2856598848-2235660964-1980335571-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{012E1000-F331-11DB-8314-0800200C9A66} => removed successfully
HKU\S-1-5-21-2856598848-2235660964-1980335571-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => removed successfully
VirusTotal: C:\Users\dzave\AppData\Roaming\6048711.scr => https://www.virustotal.com/gui/file/35c ... 1634231568

=========== EmptyTemp: ==========

BITS transfer queue => 1835008 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 288749981 B
Java, Flash, Steam htmlcache => 530425408 B
Windows/system/drivers => 5366702 B
Edge => 0 B
Chrome => 393216 B
Brave => 467706477 B
Firefox => 0 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 0 B
NetworkService => 5358 B
dzave => 41217049 B
DevToolsUser => 41217049 B
DefaultAppPool => 41217049 B

RecycleBin => 0 B
EmptyTemp: => 1.3 GB temporary data Removed.

================================


The system needed a reboot.

==== End of Fixlog 16:41:40 ====

[Reklama]

[jaro3]

Stáhni si zde DelFix
Další odkazy:
https://toolslib.net/downloads/viewdownload/2-delfix/
http://ccm.net/download/download-24087-delfix
https://www.bleepingcomputer.com/download/delfix/

ulož si soubor na plochu.
Poklepáním na ikonu spusť nástroj Delfix.exe
( Ve Windows Vista, Windows 7, 8 a10 musíš spustit soubor pravým tlačítkem myši -> Spustit jako správce .
V hlavním menu, zkontroluj tyto možnosti - Odstranění dezinfekce nástrojů (Remove desinfection tools) – Vyčistit body obnovy (Purge System Restore)
Poté klikněte na tlačítko Spustit (Run) a nech nástroj dělat svoji práci

Poté se zpráva se otevře (DelFix.txt). Vlož celý obsah zprávy sem.Jinak je zpráva zde:
v C: \ DelFix.txt

Pokud nejsou problémy , je to vše a můžeš dát vyřešeno , zelenou fajfku.

[dz61]

Děkuji za trpělivost.

# DelFix v1.010 - Logfile created 22/10/2021 at 17:32:03
# Updated 26/04/2015 by Xplode
# Username : dzavel - DZAVEL-PC
# Operating System : Windows 10 Enterprise (64 bits)

~ Removing disinfection tools ...

Deleted : C:\FRST
Deleted : C:\zoek_backup
Deleted : C:\AdwCleaner
Deleted : C:\zoek-results.log
Deleted : C:\Users\dzave\Desktop\Addition.txt
Deleted : C:\Users\dzave\Desktop\Fixlog.txt
Deleted : C:\Users\dzave\Desktop\FRST.txt
Deleted : C:\Users\dzave\Desktop\FRST64.exe
Deleted : C:\Users\dzave\Downloads\JRT.txt
Deleted : C:\Users\dzave\Downloads\hijackthis.log
Deleted : HKLM\SOFTWARE\TrendMicro\Hijackthis

~ Cleaning system restore ...

Deleted : RP #78 [JRT Pre-Junkware Removal | 10/16/2021 12:47:14]
Deleted : RP #79 [JRT Pre-Junkware Removal | 10/16/2021 17:50:54]
Deleted : RP #80 [Removed Sophos Virus Removal Tool. | 10/20/2021 14:43:10]

New restore point created !

########## - EOF - ##########

[jaro3]

Nemáš zač! je to vše a můžeš dát vyřešeno , zelenou fajfku.