Kontrola logu, velké využití RAM

Místo pro vaše HiJackThis logy a logy z dalších programů…

Moderátoři: Mods_senior, Security team

Odpovědět
Patrikz
Level 1
Level 1
Příspěvky: 65
Registrován: duben 16
Pohlaví: Muž
Stav:
Offline

Re: Kontrola logu, velké využití RAM

Příspěvekod Patrikz » 13 dub 2016 20:46

Rogue Killer log:

RogueKiller V12.1.2.0 (x64) [Apr 11 2016] (Free) by Adlice Software
mail : http://www.adlice.com/contact/
Feedback : http://forum.adlice.com
Webová stránka : http://www.adlice.com/software/roguekiller/
Blog : http://www.adlice.com

Operační systém : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Spuštěno : Normální režim
Uživatel : Patrik [Práva správce]
Started from : C:\Users\Patrik\Desktop\RogueKillerX64.exe
Mód : Prohledat -- Datum : 04/13/2016 20:36:50

¤¤¤ Procesy : 4 ¤¤¤
[Suspicious.Path] HiSuiteOuc64.exe(1652) -- C:\ProgramData\HiSuiteOuc\HiSuiteOuc64.exe[x] -> Nalezeno
[Suspicious.Path] HuaweiHiSuiteService64.exe(1952) -- C:\ProgramData\HandSetService\HuaweiHiSuiteService64.exe[x] -> Nalezeno
[Suspicious.Path] (SVC) HiSuiteOuc64.exe -- "C:\ProgramData\HiSuiteOuc\HiSuiteOuc64.exe" -/service[x] -> Nalezeno
[Suspicious.Path] (SVC) HuaweiHiSuiteService64.exe -- "C:\ProgramData\HandSetService\HuaweiHiSuiteService64.exe" -/service[x] -> Nalezeno

¤¤¤ Registry : 19 ¤¤¤
[Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\GPU-Z (\??\C:\Users\Patrik\AppData\Local\Temp\GPU-Z.sys) -> Nalezeno
[Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\HiSuiteOuc64.exe ("C:\ProgramData\HiSuiteOuc\HiSuiteOuc64.exe" -/service) -> Nalezeno
[Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\HuaweiHiSuiteService64.exe ("C:\ProgramData\HandSetService\HuaweiHiSuiteService64.exe" -/service) -> Nalezeno
[Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\GPU-Z (\??\C:\Users\Patrik\AppData\Local\Temp\GPU-Z.sys) -> Nalezeno
[Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\HiSuiteOuc64.exe ("C:\ProgramData\HiSuiteOuc\HiSuiteOuc64.exe" -/service) -> Nalezeno
[Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\HuaweiHiSuiteService64.exe ("C:\ProgramData\HandSetService\HuaweiHiSuiteService64.exe" -/service) -> Nalezeno
[Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\System\ControlSet002\Services\GPU-Z (\??\C:\Users\Patrik\AppData\Local\Temp\GPU-Z.sys) -> Nalezeno
[Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\System\ControlSet002\Services\HiSuiteOuc64.exe ("C:\ProgramData\HiSuiteOuc\HiSuiteOuc64.exe" -/service) -> Nalezeno
[Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\System\ControlSet002\Services\HuaweiHiSuiteService64.exe ("C:\ProgramData\HandSetService\HuaweiHiSuiteService64.exe" -/service) -> Nalezeno
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{4C94520B-01CF-46C0-971E-976C408EE73E} | DhcpNameServer : 83.240.0.214 83.240.0.135 192.168.1.1 ([X][X][-]) -> Nalezeno
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{6F675AD7-8B8D-4BB8-9DA3-EDB6C87A783A} | DhcpNameServer : 160.216.40.10 160.216.40.20 ([X][X]) -> Nalezeno
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters\Interfaces\{4C94520B-01CF-46C0-971E-976C408EE73E} | DhcpNameServer : 83.240.0.214 83.240.0.135 192.168.1.1 ([X][X][-]) -> Nalezeno
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters\Interfaces\{6F675AD7-8B8D-4BB8-9DA3-EDB6C87A783A} | DhcpNameServer : 160.216.40.10 160.216.40.20 ([X][X]) -> Nalezeno
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet002\Services\Tcpip\Parameters\Interfaces\{4C94520B-01CF-46C0-971E-976C408EE73E} | DhcpNameServer : 83.240.0.214 83.240.0.135 192.168.1.1 ([X][X][-]) -> Nalezeno
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet002\Services\Tcpip\Parameters\Interfaces\{6F675AD7-8B8D-4BB8-9DA3-EDB6C87A783A} | DhcpNameServer : 160.216.40.10 160.216.40.20 ([X][X]) -> Nalezeno
[PUM.Policies] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System | ConsentPromptBehaviorAdmin : 0 -> Nalezeno
[PUM.Policies] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System | ConsentPromptBehaviorAdmin : 0 -> Nalezeno
[PUM.StartMenu] (X64) HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowMyGames : 0 -> Nalezeno
[PUM.StartMenu] (X86) HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowMyGames : 0 -> Nalezeno

¤¤¤ Úlohy : 0 ¤¤¤

¤¤¤ Soubory : 0 ¤¤¤

¤¤¤ Soubor HOSTS : 0 ¤¤¤

¤¤¤ Antirootkit : 0 (Driver: Nahrán) ¤¤¤

¤¤¤ Webové prohlížeče : 1 ¤¤¤
[PUM.HomePage][FIREFX:Config] u6zuo40y.default-1431584290621 : user_pref("browser.startup.homepage", "http://www.seznam.cz/"); -> Nalezeno

¤¤¤ Kontrola MBR : ¤¤¤
+++++ PhysicalDrive0: HGST HTS541075A9E680 ATA Device +++++
--- User ---
[MBR] 352354e9a7c2e6ef98a20936d292d57d
[BSP] 86deadb1f21df4e6375cc3b42f4da159 : Windows Vista/7/8 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 100 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
1 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 206848 | Size: 69900 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
2 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 143362048 | Size: 645402 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
User = LL1 ... OK
User = LL2 ... OK
Nahoru
Reklama
Top
Uživatelský avatar
jaro3
člen Security týmu
Guru Level 15
Guru Level 15
Příspěvky: 43298
Registrován: červen 07
Bydliště: Jižní Čechy
Pohlaví: Muž
Stav:
Offline

Re: Kontrola logu, velké využití RAM

Příspěvekod jaro3 » 14 dub 2016 09:07

Zavři všechny programy a prohlížeče. Deaktivuj antivir a firewall.
Prosím, odpoj všechny USB (kromě myši s klávesnice) nebo externí disky z počítače před spuštěním tohoto programu.
Spusť znovu RogueKiller ( Pro Windows Vista nebo Windows 7, klepni pravým a vyber "Spustit jako správce", ve Windows XP poklepej ke spuštění).
- Počkej, až Prescan dokončí práci...
- Pak klikni na "Prohledat " ,po jeho skončení:

- V záložkách (Registry , Tasks , Web Browser apod.) vše zatrhni (dej zatržítka)
kromě:
[PUM.HomePage][FIREFX:Config] u6zuo40y.default-1431584290621 : user_pref("browser.startup.homepage", "http://www.seznam.cz/"); -> Nalezeno
(musíš dát myší zatržítko do toho čtverečku vlevo od registru ap.)

- Klikni na "Smazat"
- Počkej, dokud Status box nezobrazí " Mazání dokončeno "
- Klikni na "Zpráva " a zkopíruj a vlož obsah té zprávy prosím sem. Log je možno nalézt v RKreport [číslo]. txt na ploše.
- Zavři RogueKiller

Vypni antivir i firewall.
Stáhni
Zoek.exe

a uloz si ho na plochu.
Zavři všechny ostatní programy , okna i prohlížeče.
Spusť Zoek.exe ( u win vista , win7, 8 klikni na něj pravým a vyber : „Spustit jako správce“
- pozor , náběh programu může trvat déle.

Do okna programu vlož skript níže:

Kód: Vybrat vše

autoclean;
emptyclsid;
iedefaults;
FFdefaults;
CHRdefaults;
emptyalltemp;
resethosts;


klikni na Run Script
Program provede sken , opravu, sken i oprava může trvat i více minut ,je třeba posečkat do konce. Do okna neklikej!
Program nabídne restart , potvrď .

Po restartu se může nějaký čas ukázat pouze černá plocha , to je normální. Je třeba počkat až se vytvoří log. Ten si můžeš uložit třeba do dokumentů , jinak se sám ukládá do:
C:\zoek-results.log
Zkopíruj sem celý obsah toho logu.

Vlož nový log z HJT + informuj o problémech.
Při práci s programy HJT, ComboFix,MbAM, SDFix aj. zavřete všechny ostatní aplikace a prohlížeče!
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
Nahoru
Patrikz
Level 1
Level 1
Příspěvky: 65
Registrován: duben 16
Pohlaví: Muž
Stav:
Offline

Re: Kontrola logu, velké využití RAM

Příspěvekod Patrikz » 14 dub 2016 20:39

RogueKiller log:

RogueKiller V12.1.2.0 (x64) [Apr 11 2016] (Free) by Adlice Software
mail : http://www.adlice.com/contact/
Feedback : http://forum.adlice.com
Webová stránka : http://www.adlice.com/software/roguekiller/
Blog : http://www.adlice.com

Operační systém : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Spuštěno : Normální režim
Uživatel : Patrik [Práva správce]
Started from : C:\Users\Patrik\Desktop\Kontrola PC\RogueKillerX64.exe
Mód : Smazat -- Datum : 04/14/2016 19:45:58

¤¤¤ Procesy : 4 ¤¤¤
[Suspicious.Path] HiSuiteOuc64.exe(1240) -- C:\ProgramData\HiSuiteOuc\HiSuiteOuc64.exe[7] -> Zastaveno [TermProc]
[Suspicious.Path] HuaweiHiSuiteService64.exe(1668) -- C:\ProgramData\HandSetService\HuaweiHiSuiteService64.exe[7] -> Zastaveno [TermProc]
[Suspicious.Path] (SVC) HiSuiteOuc64.exe -- "C:\ProgramData\HiSuiteOuc\HiSuiteOuc64.exe" -/service[7] -> Zastaveno
[Suspicious.Path] (SVC) HuaweiHiSuiteService64.exe -- "C:\ProgramData\HandSetService\HuaweiHiSuiteService64.exe" -/service[7] -> Zastaveno

¤¤¤ Registry : 22 ¤¤¤
[Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\GPU-Z (\??\C:\Users\Patrik\AppData\Local\Temp\GPU-Z.sys) -> Smazáno
[Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\HiSuiteOuc64.exe ("C:\ProgramData\HiSuiteOuc\HiSuiteOuc64.exe" -/service) -> Smazáno
[Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\HuaweiHiSuiteService64.exe ("C:\ProgramData\HandSetService\HuaweiHiSuiteService64.exe" -/service) -> Smazáno
[Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\GPU-Z (\??\C:\Users\Patrik\AppData\Local\Temp\GPU-Z.sys) -> Smazáno
[Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\HiSuiteOuc64.exe ("C:\ProgramData\HiSuiteOuc\HiSuiteOuc64.exe" -/service) -> Smazáno
[Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\HuaweiHiSuiteService64.exe ("C:\ProgramData\HandSetService\HuaweiHiSuiteService64.exe" -/service) -> Smazáno
[Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\System\ControlSet002\Services\GPU-Z (\??\C:\Users\Patrik\AppData\Local\Temp\GPU-Z.sys) -> Smazáno
[Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\System\ControlSet002\Services\HiSuiteOuc64.exe ("C:\ProgramData\HiSuiteOuc\HiSuiteOuc64.exe" -/service) -> Smazáno
[Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\System\ControlSet002\Services\HuaweiHiSuiteService64.exe ("C:\ProgramData\HandSetService\HuaweiHiSuiteService64.exe" -/service) -> Smazáno
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters | DhcpNameServer : 83.240.0.214 83.240.0.135 192.168.1.1 ([X][X][-]) -> Nahrazeno ()
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters | DhcpNameServer : 83.240.0.214 83.240.0.135 192.168.1.1 ([X][X][-]) -> Nahrazeno ()
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet002\Services\Tcpip\Parameters | DhcpNameServer : 83.240.0.214 83.240.0.135 192.168.1.1 ([X][X][-]) -> Nahrazeno ()
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{4C94520B-01CF-46C0-971E-976C408EE73E} | DhcpNameServer : 83.240.0.214 83.240.0.135 192.168.1.1 ([X][X][-]) -> Nahrazeno ()
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{6F675AD7-8B8D-4BB8-9DA3-EDB6C87A783A} | DhcpNameServer : 160.216.40.10 160.216.40.20 ([X][X]) -> Nahrazeno ()
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters\Interfaces\{4C94520B-01CF-46C0-971E-976C408EE73E} | DhcpNameServer : 83.240.0.214 83.240.0.135 192.168.1.1 ([X][X][-]) -> Nahrazeno ()
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters\Interfaces\{6F675AD7-8B8D-4BB8-9DA3-EDB6C87A783A} | DhcpNameServer : 160.216.40.10 160.216.40.20 ([X][X]) -> Nahrazeno ()
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet002\Services\Tcpip\Parameters\Interfaces\{4C94520B-01CF-46C0-971E-976C408EE73E} | DhcpNameServer : 83.240.0.214 83.240.0.135 192.168.1.1 ([X][X][-]) -> Nahrazeno ()
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet002\Services\Tcpip\Parameters\Interfaces\{6F675AD7-8B8D-4BB8-9DA3-EDB6C87A783A} | DhcpNameServer : 160.216.40.10 160.216.40.20 ([X][X]) -> Nahrazeno ()
[PUM.Policies] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System | ConsentPromptBehaviorAdmin : 0 -> Nahrazeno (2)
[PUM.Policies] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System | ConsentPromptBehaviorAdmin : 0 -> Nahrazeno (2)
[PUM.StartMenu] (X64) HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowMyGames : 0 -> Nahrazeno (1)
[PUM.StartMenu] (X86) HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowMyGames : 0 -> Nahrazeno (1)

¤¤¤ Úlohy : 0 ¤¤¤

¤¤¤ Soubory : 0 ¤¤¤

¤¤¤ Soubor HOSTS : 0 ¤¤¤

¤¤¤ Antirootkit : 0 (Driver: Nahrán) ¤¤¤

¤¤¤ Webové prohlížeče : 1 ¤¤¤
[PUM.HomePage][FIREFX:Config] u6zuo40y.default-1431584290621 : user_pref("browser.startup.homepage", "http://www.seznam.cz/"); -> Nevybráno

¤¤¤ Kontrola MBR : ¤¤¤
+++++ PhysicalDrive0: HGST HTS541075A9E680 ATA Device +++++
--- User ---
[MBR] 352354e9a7c2e6ef98a20936d292d57d
[BSP] 86deadb1f21df4e6375cc3b42f4da159 : Windows Vista/7/8 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 100 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
1 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 206848 | Size: 69900 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
2 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 143362048 | Size: 645402 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
User = LL1 ... OK
User = LL2 ... OK
Nahoru
Patrikz
Level 1
Level 1
Příspěvky: 65
Registrován: duben 16
Pohlaví: Muž
Stav:
Offline

Re: Kontrola logu, velké využití RAM

Příspěvekod Patrikz » 14 dub 2016 20:41

Zoek log:


Zoek.exe v5.0.0.1 Updated 27-09-2015
Tool run by Patrik on źt 14.04.2016 at 19:53:15,00.
Microsoft Windows 7 Professional 6.1.7601 Service Pack 1 x64
Running in: Normal Mode No Internet Access Detected
Launched: C:\Users\Patrik\Desktop\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

14.4.2016 19:53:59 Zoek.exe System Restore Point Created Successfully.

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

# localhost name resolution is handled within DNS itself.
127.0.0.1 localhost
::1 localhost

==== Empty Folders Check ======================

C:\PROGRA~2\Autodesk deleted successfully
C:\PROGRA~2\CyberLink deleted successfully
C:\Users\Patrik\AppData\Roaming\WinRAR deleted successfully
C:\Users\Patrik\AppData\Local\EmieBrowserModeList deleted successfully
C:\Users\Patrik\AppData\Local\EmieSiteList deleted successfully
C:\Users\Patrik\AppData\Local\EmieUserList deleted successfully
C:\Users\Patrik\AppData\Local\VirtualStore deleted successfully

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{102B14FA-48B-4AF0-A7F6-D0DFFD865056} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1051CEB2-6A96-4A57-AFEB-E0378874FD1C} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{10F2C4C2-E737-4402-98DE-8CE1EF6EE38A} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{10FA9455-DF4F-4043-AEB-3AEA92297717} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1159E4A9-2081-4935-A93C-7E2B3A9A4593} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{11D0E90F-F56-441D-A3EE-96C1E1B165C6} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{11F5FED8-B0C1-490F-A0B3-4411146CE3C} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{124FDB9D-DA60-41D0-BFDC-7EE681B8C6} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{126584C4-9E2-4091-9E3C-BC6566352255} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{127F698B-B4E-43F4-99A-81F59779A855} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1299A6B6-9170-4702-A839-E036A631E4} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{12AF4DED-CBC1-4841-B321-2C96FA4D1B9B} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{13143979-5F9C-4A39-AAF3-72B62426D752} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{13315732-F275-4EDF-8490-EC55E1973F1} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1371D25-4C3E-46A7-9480-EF8A93667FB0} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{13ABBDCB-58E-48EC-B918-4DDAD3357ED7} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{13D95F67-F37B-46C5-B0D2-912742ACB232} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{140B483-D841-4BC5-AFD4-1E562EF876} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{14ABD33D-4020-4C06-83F0-B528928F8C} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1516883A-4F2C-4378-982B-C96771E3CB3} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{160249DC-DE46-47A3-B678-1B856B05515} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{163879A6-5D38-4F22-ADEA-6A2D2F6FC2C6} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1661437-A5A3-4870-8FD2-E96CD43D1037} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{17F202CD-C73A-4BC9-B057-3A623763BE78} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{182CE881-9F26-4237-98AD-5197E5CC9BE8} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1959AAAB-4157-40F5-A0C6-953D8771B1A6} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1A7ED64B-E5A8-491F-9A2-5667DE49A6EB} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1AABE6A0-29F5-4E05-917-E14447EEEBAB} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1B8051D0-7FFA-4F56-AEA5-7329CCCD120} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1B9B402-1662-437A-B2BE-E19CCD44CC29} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1CFD01B-4AAF-451F-9B91-FB7BBA516924} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1D16E769-F2D1-48BE-B48C-DCCA4C93EFD} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1D67E718-D179-42D8-93FB-948F34167DD5} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1DACAF20-7F2F-4767-8ECF-4C82158A6F4} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1DB71E28-9E2D-4502-9C0-6911B920CA55} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1DE41E3B-608D-4CD5-A6F5-5B8CD2B7552E} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1DEB2453-660C-491E-85C2-595C2F0479} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1ED9E93D-39BE-42D2-B9B1-1663E475} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1F1FF601-B1D7-4CCD-99F3-26B2D0E8491F} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1F83B8D1-4CEF-4E5F-9C19-2384903DCADC} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1FEE10B3-31E-4577-9558-96E23E265D42} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{20D9A993-417C-48DC-B37F-E818C865C839} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{22092C40-3961-4308-823F-E868E812CE4E} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{223DBFFD-4DEC-4409-B541-D1DDF62F7AC} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2367A4DB-4187-4763-B9A5-42EA702920A6} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{23FA93C4-63AD-4D63-9A52-1E1E9777CAB} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2462E1C6-2898-486C-A78B-43DDA911B850} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{246CA8F9-61AC-42BC-9BCB-21D6535BE63} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{248C998B-ACC2-4E2F-BBBA-2B3C831DCBFA} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2492B169-7CC9-4C53-AFF4-21E41229AC15} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{24A1B0DC-5DD8-4475-B7EA-32D4986C9F59} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{24F3836A-52F-4507-9F49-364A24175568} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{25F854B2-E9DC-48CF-9458-4264522292E3} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2606AC33-279-4169-8D63-A01C8B6764A6} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2608D917-9BDC-45C8-8A6-79A2FE372899} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{262F32C1-EBD0-40D6-AE2C-6612D084BC7A} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{27C77E7E-47FA-45DA-A872-4D844A42D74} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{282EAA1B-B7CA-4842-8452-98B013D76EB} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{28DA3FE1-CE43-45DE-A85C-DA3C7811CF9} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2987372D-9BDC-483D-9AEB-9AB960EE446D} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{298D3133-D500-4E20-8F8C-4029D0F1E4B4} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{298EF01E-C87F-4F73-843D-AA83573FB77} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{29F574E9-89A6-4EA2-A79D-55A725CD77F1} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2A2E98AD-E810-4842-B23C-A97372EA671} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2ABAB16E-14D0-4AC4-AD13-358B8B85255} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2B83781A-1B68-4767-A97C-64279DDB27EF} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2D16D94D-FA0D-4BDC-AD88-DEA0D7FD46B} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2D6B6ECA-B775-4E02-A2BC-915B14B58A9} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2DCE2A68-C8E5-4F11-BC88-8464E136FF23} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2DDE223F-BAC1-42C3-A871-B78EF18AD633} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2E5EB6CD-830E-4C9F-9BE9-3F7442BA399} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2E6F173C-5467-4020-BE2B-4826529BD41} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2F53009-AAE6-49DF-AFD5-7250A5FF4EF9} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2F5F5CE-BE7F-4452-918C-11432FA68356} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2F9B1F50-578A-433B-8369-CB22E620CC33} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2FAD62F-9840-4B05-8E24-F1F964DCA39F} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2FB22AF-6E4-4E7C-B66E-ABC93D89931D} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2FC9BFB0-EC8C-4466-925F-8A6D67F696C} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2FDBB0F7-3405-4744-8888-B7C5B9D2213} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3036521-EBA2-4800-8E41-FEB523E31BA} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3047CC10-9A31-4E39-ADF1-34F094B843E} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{30608AEE-3EEC-4066-82E8-49173C2DC412} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{30B41CEC-C520-4F4D-A34E-53EB4DD2840} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{30E9AD83-7C6E-4113-BF79-70E398FA1591} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{32332BA0-EAD2-4FD4-8F49-C320ED13AF87} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{33121983-9B7C-428F-9A5B-5C9555230F0} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3519E545-2EEA-4977-8238-CD5CE9D67A8} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{355FF9FD-EC11-4131-9859-5ADD802A741} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{35F229A6-3F5D-4FD7-AA77-EE9375D8224C} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{361C578D-94A7-45B0-AFEF-2A77C38CA4DC} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{36BA7C44-8987-4825-897-F3CFA3725DC8} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{374198C4-9867-4844-90C6-633F5EE9022} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{37E7FD7D-BCB8-4670-8055-625ADC33C93C} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{384BB727-16C7-4BD3-95B0-242BFB5654C} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3A8D52E5-8BDB-440E-B3E-B9D574DEF7EE} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3AA63241-F122-452C-B4E-9A43CB3312CD} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3AFF9847-1620-4660-A74A-1BBD706DEA} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3B4EBD17-DC89-4AB0-BC31-99A34753475} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3CCAE467-52D1-481F-8F75-8A884241685} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3D00AFC8-17BA-48E2-A62C-C1EA891EC9C} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3D2F81A8-39F9-4D91-906-E9B21C70E3A6} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3DB8664-7627-4149-B851-B985B57F7D9} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3E44553F-DD1F-4496-BDDA-5A3DF980F6C9} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3E529384-74E-4D04-91CB-544396B248F6} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3EE347BB-9FEA-47D6-A58B-E78CEF32E035} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3EF39199-D5BC-4830-B66E-AD1B903CE1F} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{408FEC7D-B60D-4710-A3D4-81AFAD6AF638} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{40A2A4DC-D940-4A36-BA4F-D82A1D2978C1} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{40CE2984-8DDE-4106-AA62-E6E93B5C34C0} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4227093E-614F-474A-BEA5-DFBF2C2BECB} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{423B0074-9808-457F-99C0-BC24AD8C194} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{424413C9-3F0E-4B74-A46-5E7A2A8C849} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{42812815-D8FD-4461-B851-FDB38A1930} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{42C890A5-E018-4E1A-ADDA-A61158E4B363} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{430CFFE5-2A8A-4D13-853E-8F4E1BBB4834} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{435C9DBA-CC98-462A-893-FB4EBC2624D} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{43DE91BB-D8D8-4D1D-BFE0-524D338D2459} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{442EC26-B213-4F87-ADBC-B6B321FCB9D3} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{46C0C22C-FD7B-4147-99B5-6D5131C34A84} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4796B134-68A9-46B1-92FC-F458CC15F1D} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{48AA07C4-B063-4823-8545-2AD17D989E0} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4A33BFA6-317-4C88-BD1D-43B9A591A86} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4A74D8F6-969D-4705-BD8E-B5435C5CF173} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4AA94E76-2883-4DCB-8E9F-3FE7B039EE49} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4B1E6FFC-850F-4520-BDFD-594A3D722931} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4BD43133-22BC-4B6D-AB12-85E40548797} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4CAEE6FE-3914-486F-89E2-5C51FFBB028} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4D9F2621-3C8D-4455-93F5-FF969166398} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4DBDFA9C-1143-4DBE-9EC-F9258A9F298A} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4DDC007C-B15-4936-B3E4-EB3BC9E77518} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4DDE3955-2BEB-4111-9298-C0E359A47E4F} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4E34676F-8099-4050-A2AC-3938626ED3F3} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4E41FBCC-571C-4B82-B86A-D16E9CE953BF} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4E7A0C64-6D7E-4A39-A9CA-9E2AFD6A289} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4FD008CF-3B8A-407F-A4DF-19EF604F9667} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{503813D3-6203-41B0-92EE-31938E4157B} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{50467331-AB46-424D-9755-B752FA6741A8} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{508E07FB-959-44B4-94EE-6ABE70C48748} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{513CF19B-B386-470D-AB32-AC5C6E4020B9} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{51BD18F5-7BFD-406F-94F7-C7E433D51CD8} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{521F0AED-4511-441C-BEE9-8689B675D359} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{52461B9-AEB4-4DB1-A32D-994CCECBDAF} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{53548ECB-C401-440F-B4B0-B5AC3F35A2} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{53ABAF8D-B23F-4759-AF30-96E8AC9BB8C} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{53EC1A50-1A13-4EB0-BAB2-829C1BB36A6F} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{53FAE9D9-2B41-444C-A73B-D13D12B14D2} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{54D4AF9E-D8D3-4194-A434-2AE24B74F22} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{550FB245-C75A-41B9-9DF-4A8E73F707E} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{552C4C44-548E-4E8F-87AB-29E25BF93AF3} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{55A9F7DD-DE2D-4C74-AAF8-234A6118551B} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{56EA5500-47B5-4AC6-B051-569ABCBD76F} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{574D6934-4B5A-43A1-832-888435353C89} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{57952407-B0D5-41F4-AFB7-D78932412C0} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5850DDB5-76D0-484C-B039-C1158EAD5E84} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{58722647-6E2F-4F0B-A6C8-F6FDEE4D8A} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5B8DACD1-1EB2-400C-A240-E19BD8111FCB} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5BF1A81D-349-4831-BE81-57BD2DF5C46} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5E5E561A-F8F8-490C-B8D-88C812A283B2} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5E62CCB4-AC4E-4795-929E-9370D2502ACE} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5EFB29EC-6560-44BF-B56D-439A6793B5E} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5F926DBC-16E3-44FB-BDEC-FE2C2D734E59} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{61050DC0-1767-4942-BD4C-E334DC099E} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{613991B4-8E2D-40DD-8367-38C59610947} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{618629BC-5528-440C-91DB-6B472469B42} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{61CD7F1-AEB9-462B-A885-291F7197799} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{636E60FD-610E-487C-B8A0-89886CCEBC28} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{638B58E4-B2BC-4EF1-9079-C9FF1343C48} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{63A0A55B-4E30-4E56-8880-873DCAD56F10} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{643EF2F3-F3CD-4543-8F6C-E6506E91B945} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{648E9470-716D-4F4B-A1DC-6776BEEAEE} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6660709C-12D3-4AC7-8FED-205BC7D5385A} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6742849D-6198-429A-9432-6BC78F919C32} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{674A826E-30A-42EE-A95C-B075CCEE58CC} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{67936E56-CA80-4574-A3DF-A8C79AAB17C} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{67F398A6-5554-4633-A7D4-7E6D11E8254} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6830359A-F156-4148-BF4B-4706061629F} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6867E807-6564-4F20-92EF-6EEA6E8CC3E} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{689E6FB6-448-401D-BADA-D1FDA07B371A} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{691BB92F-DED5-4BC9-901A-8DB341D11B} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6A23AF59-C369-48D0-99BB-5252C08E54} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6A555C3D-E265-458C-88C8-A21989D6AAE} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6AC85E9A-A203-4D35-BAF2-7A92D695DA85} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6AF32EAD-D15D-465C-A4C3-C735697344A} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6BE14169-B021-4D69-AB69-A0C4488533D3} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6C9E5954-765A-49C4-9A47-2F45B8306414} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6D682FF1-EE38-4F21-B3E2-F0AFC59FE432} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6DDBCF2-5B7E-4CAD-B2CB-A838961AF71} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6E705F1B-4DD9-43D6-8E52-7A7C455AB54} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6E8B1D9D-289A-4E3A-BA3F-7D5B84BD933} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6E8CCA53-D7B0-4264-ABBE-1BE0B23F463} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6EE9F138-B3FD-4053-85E3-764EF894B78} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6F90EB8-B56F-4DCD-ADB5-45498D24FCC2} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{70064E3D-4945-4AF3-83B0-6112F27D485} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{70250AC1-17CC-40B4-B7D-DC88EB67478F} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{717AC58B-15EF-441D-8459-EF62E499203E} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{71851E71-FA8A-4389-80F0-76CCF769CC1B} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{72A3B48A-F099-4118-9F86-3CE1E9DA6C9} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{72F795B2-5EEF-4888-BBA5-D13D59229C60} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7363E294-E091-4469-BF1E-E95149EACF8} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{73AE6F4D-9A8B-4D8D-8D6B-E59A16BF487} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{740518E3-D566-4D50-8775-5C49FF21A3D1} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{744DFCA8-2F91-4812-8E9A-8921EE8B24A} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{758C1329-8F32-45A6-99A2-C3BB5E75A69} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{75D4F10F-60B3-4305-9FBD-681ACDBCB} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{76075262-455B-4B0C-A5E-D4443F24244E} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{76147111-8ECE-4FE2-9EBF-8DC954D67D5} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{76476469-49BF-4D52-ADA5-CCF91B2CD5B8} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7694258C-3D85-40A8-B4DC-F6DCB1D449D} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{769D82ED-371E-4B70-998-6AA55CE18D8C} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{76D27715-3D5F-44E2-A3F-98B8BAFB128B} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{76ED2A1F-9A0E-4117-B8B0-66548CEAE48} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7772372D-C7C2-4BA3-B9BA-C1F69F7C1D6} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{77A91C9B-4BCC-412D-9B75-45A256686744} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{77AA91F9-38A0-4E3B-AD22-5CAC286025D1} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{77D2E67-615E-4E4E-AD36-C049C08BD6F9} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{78A89DD3-4798-4C59-BD33-A4C7E9E0365} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{78B1BAA-60E5-4976-9CD1-C0D0F7871B7} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{79A7FFAB-3B40-43D6-B3AF-CCB0F9F6C8C} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{79E2AEB-A4D3-46AE-A3A2-F3C56B35D7FF} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7A2940EF-526A-485F-8B6C-BCC1493B3A3F} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7A99FBDB-50D5-44DB-BFF8-CA12856E2F3B} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7B5D2785-B636-4CDC-BD41-6692F665FAA1} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7BCD8ED4-BB52-48B4-927F-39197FA32EC} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7BE8D898-1A89-442A-AB87-435E8B163A9} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7EB82D51-E49-4BE1-A2F5-996BF58BAF9} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7EFABF32-836A-4344-8D91-DEFF60F51AB8} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7F436E4D-FA63-4B82-B826-5FC15DAC0D7} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7F51B518-C90C-45A8-AB43-0CDBA985DB} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7F96FFD7-A3EE-4F81-8E71-CB74854D13D} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7FC281AF-F0A9-490C-8AD1-3011E6EE5FD} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{80A89C6F-1673-4C7B-A70-D4601119353C} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{812DB48E-D04-4F61-A960-84C581C1971C} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{813DEB84-96E2-43C4-A845-E67F4801B63} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8190A284-3A5C-46DF-BDB4-93989A7D57F} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{81B938E3-1E00-45E3-8AD0-93B0C1CD3840} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{81F8815D-C105-4B63-A9C1-A034FFAAFCF} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{81F9B246-A9DA-453B-96B-FF8FA931FC66} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8319B527-A23D-457A-8378-5AB50BCF439} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{833C95A8-74F1-4554-A78B-5AA7E32D261B} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{83A5CF1A-2823-4F41-A45D-D2C276184F} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{84741FBB-507B-49D1-B499-670F1F1216D} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{84830CA0-65E7-42ED-BE76-E463B87E939} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{85C98222-C828-4C26-8BFF-BBA86B46C184} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{86BAE12C-14A7-453A-884D-5FC08865FEE} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{86CDA31F-684E-46CC-A3E7-388DB7A2A6} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{88B3BF89-C6D7-4EE0-8E8F-5ED53DE7E455} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8922BD40-2B51-47D8-A872-7F1B42B7C36B} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{892BB78-E692-463D-942D-4481FA182C7B} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{89577F2D-A2C5-429F-B4E6-7B8833C425D3} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{89772DE3-BBA8-4720-BFF3-7430CE1A8B} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8A44FE82-129F-4814-BE25-691107A4CC} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8A4CCE63-697-470F-AADA-98ADBA8791EA} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8AD1F8FE-9817-4413-92BA-99881348A5DE} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8B4205D-2043-4361-B34E-7439ED7CFEE8} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8B879E16-2FA4-41AC-935D-DD5A3A519E2B} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8BAA0271-5FF2-4E99-AB83-BCC24A576EED} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8BFAFFDB-77CA-4DD7-9BB5-207BB1E2B9F9} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8D0FB4B5-AB50-4587-871A-DA88CDF2812D} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8D198B45-B1B5-4A5E-911B-FE4A6EB1EF77} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8DBC7F3F-2A3E-4108-B744-8C896AA365E2} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8DE565C2-9FFE-49CF-B773-0D67357E9C} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8F5837C2-8827-4A49-9FE7-7078DF84CC1} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8F9BD5AA-E7BA-4E9C-992D-A1F65B4D46B2} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8FB2464C-616B-4614-8CFB-8ADFCB43679} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8FC79938-944A-4185-ADC1-DDC4C1CA84B} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{91E4D392-EC80-4175-BC2F-AD4B6D8FE9B} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{92BCF204-E829-4985-A3B3-E12393A4A2E} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{935B738D-9A15-483A-BE3E-8B79910B8BF} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{93893ED5-4F56-49A7-AE7B-9BC9B67D58B4} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{94256206-5165-421B-93DA-B9A1FADCC7D} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{94CB5110-2A29-4663-B072-821466E4CEA} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{955CA0CF-BCA6-4F02-B3BF-A84FBDA24CF9} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9576F528-5FD8-4612-BD7B-D1DA8F1B45} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{958C1733-720D-4ED0-8D61-A8E7B7E8D973} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{95CA086-1DB1-40F3-86CD-964FF7EFAA68} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9625756C-2D38-4AD8-951-97ABF8AE1543} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{96F4BCCD-FD10-4525-8AFA-93D41A73F6B} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{974F09A0-88A1-4FA7-86F5-0C31CA183E2} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{980C4AA-9032-40DB-8515-DC759C97B353} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{98449F7C-4381-42E6-BD15-171CDDB5CE9} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{98C8064C-38EF-443D-8020-C1317B123E46} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9A0D94CA-5C01-412C-BAD7-1F99F07161C9} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9A23ACCE-4579-4415-98E6-3C4E33C3D6B} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9CB27666-3A23-4328-8180-370B1E8C569} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9CDE643-EA2B-4001-81D4-2D72255C7329} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9CDE8745-95DA-441D-8269-229CF01AACAA} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9CE3D71C-C857-4769-A84E-30F7B854A2} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9CE934A8-A192-41CE-90CE-A09870BE5548} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9D176631-3838-4BD7-893B-A0399073C91} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9D367D47-633C-4998-B71-B158C33B928D} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9D4A3B2-88-447D-9D44-A1C56B2A45BD} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9D9D388F-E2EE-4590-BEEE-91E502DA2C} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9E4E2648-6AAF-4416-A445-AF63B8501656} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9EA9D2D-E048-4D33-AB75-A5411C1D3F0} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9F102452-D3C6-430B-9F52-F2CD83CC8F80} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A0D3577C-B9FA-4ABB-AC2-B1FF863E3723} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A1A280C4-7F1E-4889-B9B6-1B2F1B32A4F8} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A1A39144-D1B1-4B92-AF52-94C4618C23F} deleted successfully
Nahoru
Patrikz
Level 1
Level 1
Příspěvky: 65
Registrován: duben 16
Pohlaví: Muž
Stav:
Offline

Re: Kontrola logu, velké využití RAM

Příspěvekod Patrikz » 14 dub 2016 20:42

HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A1E1036-7074-4A45-BC5B-CEE048DBBD63} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A214FB27-7E26-4756-BEF9-A8D94F78352} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A2269269-B844-424F-BDF2-5931231EBFE0} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A2846FAD-309D-4803-AFC5-4E7315F8AB7} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A2D37862-A242-403A-BB27-53E1E4222D3} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A353BBEF-9F2C-4AAF-9570-B9545F704BA0} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A3DC97FA-6868-48D9-9989-281123A6473} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A53C7838-B92D-45F9-AFC5-83777FC5DB0} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A55190C2-BF89-4AEB-83E-5F875EC65E4} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5706742-FC9A-4A4C-87A-E01D865CF24E} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5D017AD-BFE4-417F-A011-C9CEC1BA8C9A} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5F67953-DE40-404B-9C4F-6025CFC44AE0} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A6261623-EBCD-4B3B-8B5E-9C03D82E9A} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A652B0F-B98B-47B8-929B-BDC216CFD187} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A7198B47-A5EC-4AB4-B62B-1C92688F829} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A75253B3-75D8-4D37-9716-93BFBB29B59} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A78C3F5B-BF30-4ACF-A98C-73A96377E5A0} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A7B408F6-2C88-4DE2-84D0-E7371AB48820} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A7CDD1EA-1597-4523-9876-2DBAC2EFAC4F} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A7D1D499-D6C6-4E46-B9EC-6DCEF2D33621} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A82F215A-20A1-4BB5-BE24-9F456FB5EC8B} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A82FEEAA-9F1C-423E-A171-A73898A1860} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A8447367-E26-4754-8EF4-A4F20A64C41} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A86665B9-601D-4166-AAC0-49169B422791} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A8A4D05E-E359-4A9D-8DAD-3F665977328} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A8CC8F0A-6DEB-4E16-9829-A3FDE479A24} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A9B6A475-317C-4F6F-B713-23E06D31E9A} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A9D1D618-CE2E-41CB-8481-867DC24629B} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{AA77E44E-3410-4E90-B5C9-D245C16AA51} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{AC058F2-DF3A-4F2A-B4F3-104A7A90DC66} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{ACA0E20C-DC47-43FC-8C24-CFD48A7B678} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{AD677DCF-C8B4-4438-813B-2CB34856A036} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{ADA11A0F-B6E4-417B-9955-7AB829E47C8} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{AEEA483B-3700-4DC0-B85-4BC36C3A7E74} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{AEEEDEEE-8C77-4007-879A-173091E5E4AD} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{AF17FB85-3557-477B-9BC5-9E58D85D65F1} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{AF2157DA-88CD-40B0-A4C6-EAF251D0233} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{AF5FAD36-EC76-47A7-99CD-2B3A4DDAE1C2} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{AFBF81B7-231B-4214-86E6-F3A12EF39D55} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{AFD8D5E8-39B3-4BAB-9730-6D36DD4A8F2} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B09259BB-74ED-4D98-A8BC-84769BA967BC} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B0B39B44-F599-4382-A1FC-46C2469542DE} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B23A6028-DB91-4FC0-98C8-2068DD7C3E6F} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B3788F24-58FF-4841-978D-DFFB5D946F35} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B55564C1-6441-409F-A94E-D6E78176B22} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B6539DB-8201-4002-9C65-3718AB75491A} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B65476-16E4-4CDF-808B-5E62DB48C011} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B6830D27-78B6-4ADB-B0CA-F136A716A962} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B6EA58E7-40FB-4C93-ACBF-DD861AFE2183} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B70CEE75-5B9F-405E-ABA3-4FACD940BA1} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B79BCBD-587F-4C0F-B0C5-2CD7FF351248} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B7EE280C-8606-4EC9-B9E7-CD326178E7E} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B7F55C27-DC6B-4696-B7C0-1FDF2BC5BF69} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B86C5322-B55F-4F95-B5CA-85CFA4E2971E} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B88DCD0B-76D5-478A-BD39-43367CCD4BE} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B94B49D8-74DF-498B-82B2-548876BD4D22} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B9907FE5-ED8D-479E-A3DD-635E28274A} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B9C31E81-E290-4061-AD9C-A6A8BEDC874} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{BA99285-FDB4-451E-A1A6-415BA71EDCB6} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{BAAC4B25-BBF7-40E3-9DFF-286571ABBE4} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{BABB6852-5078-40A9-A9FC-F398565078E5} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{BC46A753-1DBB-4A11-B6C2-7CAA57DC409F} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{BC54DA-E7A1-43E7-8F6B-737D012A55B} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{BEDEEECD-925E-47E5-9FD7-602DE114ACE2} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{BF94F394-513F-4491-BDDB-A550D303F63} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{BFD3C539-140B-4A83-B034-FD7129EBE48C} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C02ABEA6-B8C5-4E61-878-1737DC3CFAE0} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C154F2EF-6425-4757-9B6-52E03841C598} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C1A646EB-D8B0-4139-AC9E-1AB8D4E5F83} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C1ACE7F-8648-4E20-B64F-DCEC41798E7C} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C1E7A14-9FFF-4AC9-91DD-C5514111F3FA} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C275BB40-9343-448C-B8F-7D4AD488F354} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C2B114CB-46AF-4AF5-834D-61AA66604BD2} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C4D41A24-951D-4E30-99DB-DA4628A9D1A} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C4F6BEFC-334E-4DD6-B7C-C72172416354} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C51F039-42FA-43D0-8331-9CB94B578971} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C5262DCA-A3D2-4937-87C2-453680F76FB} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C6CBAC01-6530-4CED-92F5-2FF0F9DDE635} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C6CEC82C-A030-46F1-A4CB-29378CB3BCBC} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C6D27197-4F18-4C2F-8C97-8EC612AD7F} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C6FD5275-C569-4063-91DC-3DC27D2945FF} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C7A6A658-787F-4AA7-B44-6FA463EFF10} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C916F795-9E7B-43E4-9A3F-1C88BFD29} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C9B27AB1-3173-4E08-B2F5-EE07331DBF6} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CAD0348F-6922-434E-ABC5-2DD2B05C6425} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CAEE1EEA-401-4BC1-9BA1-195D3849BAF0} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CB5534AC-F6CD-499A-8B42-8F917A6B4331} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CB6890A7-17F-4719-BA66-478B5DA1BA38} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CB997C91-FE78-49E3-80CE-52109A2E6B3} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CCD070BD-4508-416A-B255-B1194A4E2A31} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CCF3E097-413A-4111-B352-37B030A7FFF} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CD91BC35-A7DD-4320-A79-64C6F01E9B4C} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CDA2D63B-3663-41EE-85C7-8D45B9ED07B} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CDA668BE-2E55-42D7-85E4-D52A4409D31} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CE1703B9-A4B5-4534-B97D-BEF166A6587} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CE2BBD3B-4A1-4EA3-A3FD-614B79118BF8} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CE59C1B9-AE3-43B5-B035-29DBB46FAAB2} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CE98D3DE-AF3A-4664-8998-A49164F23CA} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CEB681BE-9BAE-4ED3-9A44-B1DE4AB85737} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CECCE872-2820-4258-B24D-2967DC8D96} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CF3CB4FC-B42A-4761-A098-B2ADA98751C} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CF7BEBB0-43AD-4023-9E7-2D2C235016} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CF8270B2-A322-4058-B881-4169AF7465A} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CFA60BA9-C910-488A-92A3-692A56B7AB1} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CFBBEAE3-A2F-46D9-9282-EC7DBC141516} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D0FD8BF1-551D-40EA-BDA8-366E3658AA24} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D1425662-E99-43D3-90BD-97BD62823516} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D1C33619-65A5-43E9-AC40-5A6DCAFB05E} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D1C3B3DA-CEF3-4D4A-9FF8-1117D94BE6CA} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D1E939D7-F221-4080-8F24-1F1646454F31} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D2061FFC-E97-4390-9DB-FB508ECD4F27} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D26F2053-800-4A2F-A3AD-F085A3DDB9E} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D2E4E871-D94A-4CEE-8232-CCF0EB391C16} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D3C24EF8-D784-4D83-938D-31AD42992810} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D4060338-EEF6-4FDD-833C-8DE02F31DAAB} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D44D4A8B-5B33-4F54-B440-12423EACCF9} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D5088804-158B-497F-9ED0-32E6A69A16B} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D59C7921-CE2C-445C-8CD2-D692FF16CFBF} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D5C669CC-E19E-4D07-98E2-D482754E2F2} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D6AA19ED-2378-4C5C-8CCF-48CA2C5C8098} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D77B3883-C268-479B-AA54-9A63728BEFA7} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D78F9446-9AB1-434B-B54A-5A4945F1E41} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D7D2D3A8-9B37-488F-BCDE-BD3B4D1F2694} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D92F0846-D29F-4727-867E-6D4B44BDFCE1} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D97C1A09-7A4-4B26-A190-FC63DFDC938} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DA654DC8-E8AD-4BA9-A941-33B812FDA34D} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DBB6AF65-E09F-4F4C-870-9E4A1828FCA} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DBBA3CBD-3155-49E8-B23D-DB3DF3BFE0BD} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DBCF1902-8176-4F17-ACF1-FF77F943865D} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DC59BBD3-23F1-405D-92F4-25379831E42} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DC772B51-91F1-42AD-8B6B-3BA4BACD13D} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DC9B8888-D24C-4D36-8635-5147278844} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DCE7B069-3AC5-4777-9AC7-52DE4EE6B8F5} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DD57C2D1-317-4186-9EE3-517F6A6C2134} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DD8191E-A8DF-48E9-A381-34145550C5A0} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DE6F1A3B-6E80-414B-AF2B-19EB70612CA4} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DEC42B84-618B-4712-AA2C-F5EDE19189A} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DF53B458-EAC1-4477-B2B5-E13E45648231} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DF5BF6C6-E706-477F-AE37-229CA59EBA84} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DF6B8AC0-3C98-4A90-A84F-4CB6B62D314} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E007568F-CB76-40AC-AE46-A299612E9599} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E0B05625-A9A3-4CBA-9F60-DAEAAA81E7} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E276DF2E-A67-45EF-9022-FB8F79F6F04F} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E2BAF29E-DEC8-4883-9F96-9DDD4745B1FB} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E334952B-831D-4789-BF4-FEB6307CDA48} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E381CB54-BA20-4D8C-9694-C5434E165B62} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E3A0D7C1-C451-47B3-81AD-F67D3A314E5} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E41DB3AB-B04F-49FB-87E-99D9B1B459A} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E420A3F1-29AB-4143-B699-7E719D7CAA} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E528A116-36A-4E08-8A82-48705E94DAD0} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E5926A71-A5A0-4AAD-AE84-C839F5AA55} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E596A2F8-5991-401F-A292-2F5259F4D633} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E63F7B5-61AE-4757-B0D3-7726E9952B} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E69A2ABE-634E-4DDF-87D0-29FE8D71124} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6F00C1B-C114-498C-AE9D-99E776CC94E} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E752528B-6BA6-4852-B58F-F9F18D8B146} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7755359-5006-40A2-83E-B97DE2404D8B} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E822A0CB-15A-4D28-844E-AB61EB93FB2C} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E827B73B-F49-4D57-B3A9-21977C0AE69} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EA49A6AE-F07B-405B-B2A3-8798CCC05E} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EA9C8443-BD90-4A79-8DE3-D235C5C5BAD2} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EAF38332-B7C6-4A39-AA3A-968AA5F936F} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EB6ED07E-DA59-459D-A26D-5A73B0D9B957} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EB89ABF1-31F4-4921-9914-E501D08E82} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EB9CE36B-2E5-4E90-A175-E97D3D7D1349} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EC81A98-77FD-45C5-A14E-E0A3614320FE} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{ECCFFFBE-5718-4590-BF95-BF1585C8CA33} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EDC6FCDE-B11A-4141-B9CF-FD7473FC85E} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EDD6CE08-E4EA-498A-BB82-4619FA046BC} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EE468F2E-6A17-4FE4-8962-226B3FE80D5} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EE9E66B1-26F9-4F6E-B457-47A4CB0AF42} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EEC8500E-A890-478C-AB92-41F46CDDE38} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F0730FC9-494D-4758-AEA0-EA6063A24F88} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F0963B11-BE55-4D94-A2AC-3F44115E82A6} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F0AFA681-6E99-4D77-9681-E9F8F3BD161} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F0EAD0EA-189E-4127-B87E-3A152D2C685} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F19D3A34-9368-4176-9D63-754B42AE6C7} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F1EDC053-EE01-466F-9428-FD24B13F459} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F1FA8D7A-B700-4C85-9557-A843A85CE5BE} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F2697990-4F62-4A5D-9C54-A551556B30D2} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F29C8100-517E-4229-9785-328BC65A644} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F38FC45B-3DC7-42E1-8E60-EA1B206ABF2} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F3C5A929-BDBF-42B7-B2C6-4BC5FE0FDC} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F439158A-1779-4B74-A2A-70285ACEC677} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F5AD8578-892C-41E7-A59-884772E39BB3} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F5F1F1AE-D710-42C1-8C0-6E8DE7A364FA} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F68C3B-D76D-4342-9934-C5B92D759A98} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F78CD070-6A9E-4AAA-8B2C-A0CBC056C9A3} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F87646C-A609-42A5-809F-48ACEACC1371} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F897DBBA-E811-4E27-B6B2-E492C5928287} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F8EF24F2-1EDE-421F-B049-EE7930F5B9F4} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F925F67B-3BE5-4D17-923D-80D46EEEC30} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F94A910B-F31C-4DEA-AFBB-E9E4C8C75BB} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F96F5D2B-904F-4D76-ABE9-4BCE1E9029} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F9CBD420-26D1-4B30-8C2E-3A5957EF220} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FA060899-E44A-4F28-9F0-C02FE9FA3746} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FAE5557E-DFFF-441F-B23E-25414192DF5} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FAF00AB6-F1CA-4D3A-8968-D1622D920F1} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FB1B3816-4F2C-4EB5-806C-9C132628453} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FB84E086-9266-450C-AECB-B71FE3C94E90} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FBFE3719-E9E4-4772-87B1-3CF2BF38BCF5} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FCEE9E1F-DFA1-4D77-AF1F-74D3D08D9321} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FD66CB04-B4AA-4329-98DF-0B938DDA1E} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FEF65679-4154-4C5A-AC80-73581364BFB} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FF20845F-7CE8-47B8-90AE-ED93C070DA84} deleted successfully
HKEY_USERS\S-1-5-21-1417787955-3659935388-2253728127-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FF526FF4-33C6-4128-BB8-4E8A84BE66E6} deleted successfully

==== Deleting CLSID Registry Values ======================


==== Deleting Services ======================


==== FireFox Fix ======================

Deleted from C:\Users\Patrik\AppData\Roaming\Mozilla\Firefox\Profiles\u6zuo40y.default-1431584290621\prefs.js:
user_pref("browser.startup.homepage", "http://www.seznam.cz/");

Added to C:\Users\Patrik\AppData\Roaming\Mozilla\Firefox\Profiles\u6zuo40y.default-1431584290621\prefs.js:
user_pref("browser.startup.homepage", "about:home");
user_pref("browser.newtab.url", "about:newtab");

==== Deleting Files \ Folders ======================

C:\PROGRA~2\Autodesk not found
C:\PROGRA~2\CyberLink not found
C:\Users\Patrik\.android deleted
C:\PROGRA~3\Package Cache deleted
C:\Users\Patrik\AppData\Local\Unity deleted
C:\Users\Patrik\AppData\LocalLow\Unity deleted
C:\Windows\SysNative\config\systemprofile\Searches deleted

==== Firefox Start and Search pages ======================

ProfilePath: C:\Users\Patrik\AppData\Roaming\Mozilla\Firefox\Profiles\u6zuo40y.default-1431584290621
user_pref("browser.startup.homepage", "about:home");
user_pref("browser.newtab.url", "about:newtab");

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]
"{F003DA68-8256-4b37-A6C4-350FA04494DF}"="C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt" [29.01.2016 09:01]

==== Firefox Extensions ======================

ProfilePath: C:\Users\Patrik\AppData\Roaming\Mozilla\Firefox\Profiles\u6zuo40y.default-1431584290621
- Adblock Plus - %ProfilePath%\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi

AppDir: C:\Program Files (x86)\Mozilla Firefox
- Undetermined - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}.xpi

==== Firefox Plugins ======================

Profilepath: C:\Users\Patrik\AppData\Roaming\Mozilla\Firefox\Profiles\u6zuo40y.default-1431584290621
57C7E359ED8D049132EED23EFA444C63 - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_21_0_0_213.dll - Shockwave Flash


==== Chromium Look ======================


Assassin's Creed IV Black Flag - Patrik\AppData\Local\Google\Chrome\User Data\Default\Extensions\agibflpbghgmiinfaefgnldmfajdance
AdBlock - Patrik\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom

==== Chromium Startpages ======================

C:\Users\Patrik\AppData\Local\Google\Chrome\User Data\Default\Preferences
"homepage": "http://www.seznam.cz/",


==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
{012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02"
{540CA0BA-0226-418F-81AD-CCCA7D17FC56} Seznam TV Program Url="http://tv.seznam.cz/hledej?w={searchTerms}&sourceid=QuickSearch_13415"

==== Reset Google Chrome ======================

C:\Users\Patrik\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\Patrik\AppData\Local\Google\Chrome\User Data\Default\Preferences.bad was reset successfully
C:\Users\Patrik\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully

==== Deleting Registry Keys ======================

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\UnityWebPlayer deleted successfully
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite deleted successfully

==== Empty IE Cache ======================

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Patrik\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

==== Empty FireFox Cache ======================

C:\Users\Patrik\AppData\Local\Mozilla\Firefox\Profiles\u6zuo40y.default-1431584290621\cache2 emptied successfully

==== Empty Chrome Cache ======================

C:\Users\Patrik\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== C:\zoek_backup content ======================

C:\zoek_backup (files=50 folders=45 56260692 bytes)

==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\Patrik\AppData\Local\Temp will be emptied at reboot
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied
C:\Users\Patrik\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== EOF on źt 14.04.2016 at 20:30:22,01 ======================
Nahoru
Patrikz
Level 1
Level 1
Příspěvky: 65
Registrován: duben 16
Pohlaví: Muž
Stav:
Offline

Re: Kontrola logu, velké využití RAM

Příspěvekod Patrikz » 14 dub 2016 20:42

HJT log:

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:35:55, on 14.4.2016
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18283)

FIREFOX: 45.0.2 (x86 cs)
Boot mode: Normal

Running processes:
D:\DAEMON Tools Pro\DTShellHlp.exe
C:\Users\Patrik\AppData\Local\Akamai\netsession_win.exe
C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Users\Patrik\AppData\Local\Akamai\netsession_win.exe
C:\Users\Patrik\Desktop\Kontrola PC\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O1 - Hosts: ::1 localhost
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_77\bin\ssv.dll
O2 - BHO: Logitech SetPoint - {AF949550-9094-4807-95EC-D1C317803333} - C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~2\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_77\bin\jp2ssv.dll
O4 - HKLM\..\Run: [QLBController] C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe /start
O4 - HKLM\..\Run: [USB3MON] "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
O4 - HKLM\..\Run: [AccelerometerSysTrayApplet] C:\Program Files (x86)\Hewlett-Packard\HP 3D DriveGuard\AccelerometerST.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [Akamai NetSession Interface] "C:\Users\Patrik\AppData\Local\Akamai\netsession_win.exe"
O4 - HKCU\..\Run: [ShowBatteryBar] "C:\Program Files\BatteryBar\ShowBatteryBar.exe" show
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - ESC Trusted Zone: http://*.connectify.me
O15 - ESC Trusted Zone: http://*.fastspring.com
O15 - ESC Trusted Zone: http://*.connectify.me (HKLM)
O15 - ESC Trusted Zone: http://*.fastspring.com (HKLM)
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Connectify - Connectify - C:\Program Files (x86)\Connectify\ConnectifyService.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: Disc Soft Bus Service - Disc Soft Ltd - D:\DAEMON Tools Pro\DiscSoftBusService.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FlexNet Licensing Service 64 - Flexera Software LLC - C:\Program Files\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService64.exe
O23 - Service: hpHotkeyMonitor - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe
O23 - Service: HP Software Framework Service (hpqwmiex) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
O23 - Service: HP Service (hpsrv) - Unknown owner - C:\Windows\system32\Hpservice.exe (file missing)
O23 - Service: HP Support Solutions Framework Service (HPSupportSolutionsFrameworkService) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
O23 - Service: Intel(R) Integrated Clock Controller Service - Intel(R) ICCS (ICCS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService1.0.0.0) - Unknown owner - C:\Windows\system32\igfxCUIService.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe
O23 - Service: Správce úloh aplikace Autodesk Simulation Moldflow MITSI 2016 (mitsijm2016) - Autodesk, Inc. - D:\Autodesk\Inventor 2016\Moldflow\bin\mitsijm.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\stlang64.dll,-10122 (STacSV) - IDT, Inc. - C:\Program Files\IDT\WDM\STacSV64.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)

--
End of file - 9532 bytes
Nahoru
Patrikz
Level 1
Level 1
Příspěvky: 65
Registrován: duben 16
Pohlaví: Muž
Stav:
Offline

Re: Kontrola logu, velké využití RAM

Příspěvekod Patrikz » 14 dub 2016 21:07

Při skenu PC pomocí programu Zoek mi vyskočila hláška Program DaS21 přestal pracovat. Co se týče problémů tak se to zlepšilo, využití RAM kleslo na cca 45%. Zároveň bych se chtěl zeptat, jaký antivir nejmíň zatěžuje PC a je použitelnej? Já mám původní Microsoft security essential. Jinak jsem zpozoroval, že od té doby co jsem začal projíždět PC (HJT, Mbam,...) tak už několikrát windows stahl a nainstaloval několik aktualizací. A taky se mi zdá, že spouštění systému trvá déle než obvykle.
Nahoru
Uživatelský avatar
Orcus
člen Security týmu
Elite Level 10.5
Elite Level 10.5
Příspěvky: 10645
Registrován: duben 10
Bydliště: Okolo rostou 3 růže =o)
Pohlaví: Muž
Stav:
Offline

Re: Kontrola logu, velké využití RAM

Příspěvekod Orcus » 15 dub 2016 08:41

Odinstaluj Microsoft Security Essentials a nahraď jedním z tohoto:
Avast
Avira
AVG
Comodo


Vypni rezidentní štít antiviru a antispywaru
Stáhni si ComboFix (by sUBs)
a ulož si ho na plochu.
Ukonči všechna aktivní okna a spusť ho.
- Po spuštění se zobrazí podmínky užití, potvrď je stiskem tlačítka Ano
- Dále postupuj dle pokynů, během aplikování ComboFixu neklikej do zobrazujícího se okna
- Po dokončení skenování by měl program vytvořit log - C:\ComboFix.txt - zkopíruj sem prosím celý jeho obsah
Pokud bude po kontrole problém spustit aplikace nebo bude vyskakovat hláška o pokusu použít neplatnou operaci na klíč registru, který je označen pro odstranění, stačí restartovat počítač.

Pokud budou problémy , spusť v nouz. režimu.
Láska hřeje, ale uhlí je uhlí. :fire:


Log z HJT vkládejte do HJT sekce. Je-li moc dlouhý, rozděl jej do více zpráv.

Pár rad k bezpečnosti PC.

Po dobu mé nepřítomnosti mě zastupuje memphisto, jaro3 a Diallix

Pokud budete spokojeni , můžete podpořit naše fórum.
Nahoru
Patrikz
Level 1
Level 1
Příspěvky: 65
Registrován: duben 16
Pohlaví: Muž
Stav:
Offline

Re: Kontrola logu, velké využití RAM

Příspěvekod Patrikz » 15 dub 2016 15:47

Combofix log:

ComboFix 16-04-13.01 - Patrik 15.04.2016 15:34:07.1.4 - x64
Microsoft Windows 7 Professional 6.1.7601.1.1250.420.1029.18.3945.2194 [GMT 2:00]
Spuštěný z: c:\users\Patrik\Desktop\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}
SP: avast! Antivirus *Disabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\Downloaded Program Files\IDropPTB.dll
c:\windows\SysWow64\DEBUG.log
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2016-03-15 do 2016-04-15 )))))))))))))))))))))))))))))))
.
.
2016-04-15 13:41 . 2016-04-15 13:41 -------- d-----w- c:\users\Default\AppData\Local\temp
2016-04-15 13:33 . 2016-04-15 13:33 75888 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{2FA33143-9573-4C65-9F34-264F54945306}\offreg.2896.dll
2016-04-15 13:25 . 2016-04-15 13:25 -------- d-----w- c:\users\Patrik\AppData\Roaming\AVAST Software
2016-04-15 13:25 . 2016-04-15 13:24 166432 ----a-w- c:\windows\system32\drivers\aswStm.sys
2016-04-15 13:25 . 2016-04-15 13:25 287528 ----a-w- c:\windows\system32\drivers\aswvmm.sys
2016-04-15 13:25 . 2016-04-15 13:24 465792 ----a-w- c:\windows\system32\drivers\aswSP.sys
2016-04-15 13:25 . 2016-04-15 13:24 74544 ----a-w- c:\windows\system32\drivers\aswRvrt.sys
2016-04-15 13:25 . 2016-04-15 13:24 107792 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2016-04-15 13:25 . 2016-04-15 13:24 37656 ----a-w- c:\windows\system32\drivers\aswHwid.sys
2016-04-15 13:25 . 2016-04-15 13:24 103064 ----a-w- c:\windows\system32\drivers\aswRdr2.sys
2016-04-15 13:25 . 2016-04-15 13:24 1070904 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2016-04-15 13:24 . 2016-04-15 13:24 398152 ----a-w- c:\windows\system32\aswBoot.exe
2016-04-15 13:24 . 2016-04-15 13:24 52184 ----a-w- c:\windows\avastSS.scr
2016-04-15 13:24 . 2016-04-15 13:24 -------- d-----w- c:\program files\AVAST Software
2016-04-15 13:15 . 2016-03-28 10:07 11686560 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{2FA33143-9573-4C65-9F34-264F54945306}\mpengine.dll
2016-04-15 13:08 . 2016-04-15 13:08 -------- d-----w- c:\windows\SysWow64\config\systemprofile\.oracle_jre_usage
2016-04-15 13:07 . 2016-04-15 13:07 -------- d-----w- c:\program files\Common Files\AV
2016-04-15 13:07 . 2016-04-15 13:07 -------- d-----w- c:\program files (x86)\Common Files\AV
2016-04-15 13:04 . 2016-04-15 13:22 -------- d-----w- c:\programdata\AVAST Software
2016-04-14 20:07 . 2016-04-14 20:07 -------- d-----w- c:\users\Patrik\AppData\Local\VirtualStore
2016-04-14 20:06 . 2016-04-14 20:06 144 ----a-w- c:\windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2016-04-14 18:27 . 2016-04-15 13:41 -------- d-----w- c:\users\Patrik\AppData\Local\Temp
2016-04-14 18:27 . 2016-04-14 17:53 24064 ----a-w- c:\windows\zoek-delete.exe
2016-04-14 18:12 . 2016-04-14 18:12 -------- d-----w- c:\users\Patrik\AppData\Local\CrashDumps
2016-04-14 17:51 . 2016-04-14 18:24 -------- d-----w- C:\zoek_backup
2016-04-13 20:05 . 2016-03-16 18:50 156672 ----a-w- c:\windows\system32\mtxoci.dll
2016-04-13 20:05 . 2016-03-16 18:28 111616 ----a-w- c:\windows\SysWow64\mtxoci.dll
2016-04-13 20:05 . 2016-03-16 18:28 176128 ----a-w- c:\windows\SysWow64\msorcl32.dll
2016-04-13 20:05 . 2016-03-16 18:27 286720 ----a-w- c:\program files (x86)\Common Files\System\Ole DB\msdaora.dll
2016-04-13 18:28 . 2016-04-14 17:26 28272 ----a-w- c:\windows\system32\drivers\TrueSight.sys
2016-04-13 18:27 . 2016-04-13 18:40 -------- d-----w- c:\programdata\RogueKiller
2016-04-12 17:25 . 2016-04-13 08:29 192216 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys
2016-04-12 17:25 . 2016-03-10 12:09 64896 ----a-w- c:\windows\system32\drivers\mwac.sys
2016-04-12 17:25 . 2016-03-10 12:08 140672 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys
2016-04-12 17:25 . 2016-03-10 12:08 27008 ----a-w- c:\windows\system32\drivers\mbam.sys
2016-04-12 17:25 . 2016-04-12 17:25 -------- d-----w- c:\program files (x86)\Malwarebytes Anti-Malware
2016-04-12 17:25 . 2016-04-12 17:25 -------- d-----w- c:\programdata\Malwarebytes
2016-04-12 17:17 . 2016-04-13 09:01 -------- d-----w- C:\AdwCleaner
2016-03-30 15:42 . 2016-03-30 15:42 -------- d-----w- c:\program files (x86)\Common Files\Java
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2016-04-13 20:14 . 2013-10-21 14:27 135176864 ----a-w- c:\windows\system32\MRT.exe
2016-04-07 17:28 . 2014-10-06 06:43 797376 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2016-04-07 17:28 . 2014-10-06 06:43 142528 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2016-04-06 08:18 . 2013-10-19 11:17 453280 ------w- c:\windows\system32\MpSigStub.exe
2016-03-30 15:42 . 2015-04-09 12:20 97856 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2016-03-17 22:57 . 2016-04-13 20:04 344064 ----a-w- c:\windows\system32\schannel.dll
2016-03-17 22:57 . 2016-04-13 20:04 190464 ----a-w- c:\windows\system32\rpchttp.dll
2016-03-17 22:29 . 2016-04-13 20:04 251392 ----a-w- c:\windows\SysWow64\schannel.dll
2016-03-17 22:29 . 2016-04-13 20:04 141312 ----a-w- c:\windows\SysWow64\rpchttp.dll
2016-03-17 22:24 . 2016-04-13 20:04 44032 ----a-w- c:\windows\apppatch\acwow64.dll
2016-02-12 18:52 . 2016-03-09 13:31 98816 ----a-w- c:\windows\system32\wudriver.dll
2016-02-12 18:52 . 2016-03-09 13:31 3169792 ----a-w- c:\windows\system32\wucltux.dll
2016-02-12 18:52 . 2016-03-09 13:31 192512 ----a-w- c:\windows\system32\wuwebv.dll
2016-02-12 18:44 . 2016-03-09 13:31 91136 ----a-w- c:\windows\system32\WinSetupUI.dll
2016-02-12 18:39 . 2016-03-09 13:31 174080 ----a-w- c:\windows\SysWow64\wuwebv.dll
2016-02-12 18:22 . 2016-03-09 13:31 2610688 ----a-w- c:\windows\system32\wuaueng.dll
2016-02-12 18:19 . 2016-03-09 13:31 709120 ----a-w- c:\windows\system32\wuapi.dll
2016-02-12 18:18 . 2016-03-09 13:31 140288 ----a-w- c:\windows\system32\wuauclt.exe
2016-02-12 18:18 . 2016-03-09 13:31 37888 ----a-w- c:\windows\system32\wuapp.exe
2016-02-12 18:18 . 2016-03-09 13:31 36864 ----a-w- c:\windows\system32\wups.dll
2016-02-12 18:18 . 2016-03-09 13:31 37888 ----a-w- c:\windows\system32\wups2.dll
2016-02-12 18:18 . 2016-03-09 13:31 12288 ----a-w- c:\windows\system32\wu.upgrade.ps.dll
2016-02-12 18:06 . 2016-03-09 13:31 573440 ----a-w- c:\windows\SysWow64\wuapi.dll
2016-02-12 18:05 . 2016-03-09 13:31 93696 ----a-w- c:\windows\SysWow64\wudriver.dll
2016-02-12 18:05 . 2016-03-09 13:31 30208 ----a-w- c:\windows\SysWow64\wups.dll
2016-02-12 18:05 . 2016-03-09 13:31 35328 ----a-w- c:\windows\SysWow64\wuapp.exe
2016-02-09 09:57 . 2016-03-09 13:27 12625920 ----a-w- c:\windows\system32\wmploc.DLL
2016-02-09 09:57 . 2016-03-09 13:27 14634496 ----a-w- c:\windows\system32\wmp.dll
2016-02-09 09:56 . 2016-03-09 13:27 5120 ----a-w- c:\windows\system32\msdxm.ocx
2016-02-09 09:56 . 2016-03-09 13:27 5120 ----a-w- c:\windows\system32\dxmasf.dll
2016-02-09 09:55 . 2016-03-09 13:27 30720 ----a-w- c:\windows\system32\seclogon.dll
2016-02-09 09:54 . 2016-03-09 13:27 9728 ----a-w- c:\windows\system32\spwmp.dll
2016-02-09 09:51 . 2016-03-09 13:27 12625408 ----a-w- c:\windows\SysWow64\wmploc.DLL
2016-02-09 09:13 . 2016-03-09 13:27 4096 ----a-w- c:\windows\SysWow64\msdxm.ocx
2016-02-09 09:13 . 2016-03-09 13:27 4096 ----a-w- c:\windows\SysWow64\dxmasf.dll
2016-02-09 09:13 . 2016-03-09 13:27 8192 ----a-w- c:\windows\SysWow64\spwmp.dll
2016-02-05 18:54 . 2016-03-09 13:27 41472 ----a-w- c:\windows\system32\lpk.dll
2016-02-05 18:54 . 2016-03-09 13:27 100864 ----a-w- c:\windows\system32\fontsub.dll
2016-02-05 18:53 . 2016-03-09 13:27 14336 ----a-w- c:\windows\system32\dciman32.dll
2016-02-05 18:53 . 2016-03-09 13:27 46080 ----a-w- c:\windows\system32\atmlib.dll
2016-02-05 18:50 . 2016-03-09 13:27 25600 ----a-w- c:\windows\SysWow64\lpk.dll
2016-02-05 18:44 . 2016-03-09 13:27 70656 ----a-w- c:\windows\SysWow64\fontsub.dll
2016-02-05 18:42 . 2016-03-09 13:27 10240 ----a-w- c:\windows\SysWow64\dciman32.dll
2016-02-05 17:48 . 2016-03-09 13:27 372736 ----a-w- c:\windows\system32\atmfd.dll
2016-02-05 17:43 . 2016-03-09 13:27 299520 ----a-w- c:\windows\SysWow64\atmfd.dll
2016-02-05 17:43 . 2016-03-09 13:27 34304 ----a-w- c:\windows\SysWow64\atmlib.dll
2016-02-05 01:19 . 2016-03-09 13:27 381440 ----a-w- c:\windows\system32\mfds.dll
2016-02-04 18:41 . 2016-03-09 13:27 296448 ----a-w- c:\windows\SysWow64\mfds.dll
2016-02-03 18:58 . 2016-03-09 13:30 862208 ----a-w- c:\windows\system32\oleaut32.dll
2016-02-03 18:52 . 2016-03-09 13:30 84992 ----a-w- c:\windows\system32\asycfilt.dll
2016-02-03 18:49 . 2016-03-09 13:30 572416 ----a-w- c:\windows\SysWow64\oleaut32.dll
2016-02-03 18:43 . 2016-03-09 13:30 67584 ----a-w- c:\windows\SysWow64\asycfilt.dll
2016-02-03 18:07 . 2016-03-09 13:30 91648 ----a-w- c:\windows\system32\drivers\USBSTOR.SYS
2016-01-29 07:01 . 2013-11-14 18:53 18960 ----a-w- c:\windows\system32\drivers\LNonPnP.sys
2016-01-22 06:19 . 2016-02-10 18:00 14179840 ----a-w- c:\windows\system32\shell32.dll
2016-01-22 06:18 . 2016-02-10 18:01 961024 ----a-w- c:\windows\system32\CPFilters.dll
2016-01-22 06:18 . 2016-02-10 18:01 723968 ----a-w- c:\windows\system32\EncDec.dll
2016-01-22 06:15 . 2016-02-10 18:00 1866752 ----a-w- c:\windows\system32\ExplorerFrame.dll
2016-01-22 06:12 . 2016-02-10 18:00 1940992 ----a-w- c:\windows\system32\authui.dll
2016-01-22 06:04 . 2016-02-10 18:01 642048 ----a-w- c:\windows\SysWow64\CPFilters.dll
2016-01-22 06:04 . 2016-02-10 18:01 535040 ----a-w- c:\windows\SysWow64\EncDec.dll
2016-01-22 06:00 . 2016-02-10 18:00 1498624 ----a-w- c:\windows\SysWow64\ExplorerFrame.dll
2016-01-22 05:59 . 2016-02-10 18:00 1805824 ----a-w- c:\windows\SysWow64\authui.dll
2016-01-22 05:19 . 2016-02-10 18:00 3231232 ----a-w- c:\windows\explorer.exe
2016-01-22 05:12 . 2016-02-10 18:00 2973184 ----a-w- c:\windows\SysWow64\explorer.exe
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1475584]
"Akamai NetSession Interface"="c:\users\Patrik\AppData\Local\Akamai\netsession_win.exe" [2015-09-10 4691384]
"ShowBatteryBar"="c:\program files\BatteryBar\ShowBatteryBar.exe" [2014-09-19 89600]
"CCleaner Monitoring"="c:\program files\CCleaner\CCleaner64.exe" [2016-02-12 8641240]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"QLBController"="c:\program files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe" [2013-07-31 337184]
"USB3MON"="c:\program files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe" [2012-12-20 291280]
"AccelerometerSysTrayApplet"="c:\program files (x86)\Hewlett-Packard\HP 3D DriveGuard\AccelerometerST.exe" [2013-03-11 77088]
"StartCCC"="c:\program files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe" [2015-08-21 767176]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2016-03-20 595480]
"AvastUI.exe"="c:\program files\AVAST Software\Avast\AvastUI.exe" [2016-04-15 7390096]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
"SoftwareSASGeneration"= 1 (0x1)
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 clwvd6;CyberLink WebCam Virtual Driver 6.0 Service;c:\windows\system32\DRIVERS\clwvd6.sys;c:\windows\SYSNATIVE\DRIVERS\clwvd6.sys [x]
R3 FlexNet Licensing Service 64;FlexNet Licensing Service 64;c:\program files\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService64.exe;c:\program files\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService64.exe [x]
R3 ICCS;Intel(R) Integrated Clock Controller Service - Intel(R) ICCS;c:\program files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe;c:\program files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 ose64;Office 64 Source Engine;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 RTL8168;Realtek 8168 NT Driver;c:\windows\system32\DRIVERS\Rt630x64.sys;c:\windows\SYSNATIVE\DRIVERS\Rt630x64.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R4 AdAppMgrSvc;Autodesk Application Manager Service;c:\program files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe ;c:\program files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe [x]
R4 sptd;sptd;c:\windows\System32\Drivers\sptd.sys;c:\windows\SYSNATIVE\Drivers\sptd.sys [x]
S0 amdkmpfd;AMD PCI Root Bus Lower Filter;c:\windows\system32\DRIVERS\amdkmpfd.sys;c:\windows\SYSNATIVE\DRIVERS\amdkmpfd.sys [x]
S0 iusb3hcs;Ovladač přepínání hostitelského řadiče Intel(R) USB 3.0;c:\windows\system32\DRIVERS\iusb3hcs.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hcs.sys [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 DiagTrack;Diagnostics Tracking Service;c:\windows\System32\svchost.exe;c:\windows\SYSNATIVE\svchost.exe [x]
S2 hpHotkeyMonitor;hpHotkeyMonitor;c:\program files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe;c:\program files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe [x]
S2 hpsrv;HP Service;c:\windows\system32\Hpservice.exe;c:\windows\SYSNATIVE\Hpservice.exe [x]
S2 HPSupportSolutionsFrameworkService;HP Support Solutions Framework Service;c:\program files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe;c:\program files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [x]
S2 igfxCUIService1.0.0.0;Intel(R) HD Graphics Control Panel Service;c:\windows\system32\igfxCUIService.exe;c:\windows\SYSNATIVE\igfxCUIService.exe [x]
S2 mitsijm2016;Správce úloh aplikace Autodesk Simulation Moldflow MITSI 2016;d:\autodesk\Inventor 2016\Moldflow\bin\mitsijm.exe;d:\autodesk\Inventor 2016\Moldflow\bin\mitsijm.exe [x]
S3 Disc Soft Bus Service;Disc Soft Bus Service;d:\daemon tools pro\DiscSoftBusService.exe;d:\daemon tools pro\DiscSoftBusService.exe [x]
S3 dtscsibus;DAEMON Tools Virtual SCSI Bus;c:\windows\system32\DRIVERS\dtscsibus.sys;c:\windows\SYSNATIVE\DRIVERS\dtscsibus.sys [x]
S3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x]
S3 iusb3hub;Ovladač rozbočovače Intel(R) USB 3.0;c:\windows\system32\DRIVERS\iusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hub.sys [x]
S3 iusb3xhc;Ovladač rozšiřitelného hostitelského řadiče Intel(R) USB 3.0;c:\windows\system32\DRIVERS\iusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3xhc.sys [x]
S3 LEqdUsb;Logitech SetPoint Unifying KMDF USB Filter;c:\windows\system32\DRIVERS\LEqdUsb.Sys;c:\windows\SYSNATIVE\DRIVERS\LEqdUsb.Sys [x]
S3 LHidEqd;Logitech SetPoint Unifying KMDF HID Filter;c:\windows\system32\DRIVERS\LHidEqd.Sys;c:\windows\SYSNATIVE\DRIVERS\LHidEqd.Sys [x]
S3 netr28x;Ralink 802.11n Extensible Wireless Driver;c:\windows\system32\DRIVERS\netr28x.sys;c:\windows\SYSNATIVE\DRIVERS\netr28x.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
S3 SPUVCbv;SPUVCb Driver Service;c:\windows\system32\Drivers\SPUVCbv_x64.sys;c:\windows\SYSNATIVE\Drivers\SPUVCbv_x64.sys [x]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - AMTVVWWJ
*NewlyCreated* - LTAWQRYG
*NewlyCreated* - ONZUMKBD
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
LocalServiceAndNoImpersonation REG_MULTI_SZ SSDPSRV upnphost SCardSvr QWAVE wcncsvc
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{A6EADE66-0000-0000-484E-7E8A45000000}]
2015-12-18 15:42 286904 ----a-w- c:\program files (x86)\Adobe\Acrobat Reader DC\Esl\AiodLite.dll
.
Obsah adresáře 'Naplánované úlohy'
.
2016-04-15 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-10-06 17:28]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2016-04-15 13:24 920784 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SysTrayApp"="c:\program files\IDT\WDM\sttray64.exe" [2013-08-16 1703424]
"EvtMgr6"="c:\program files\Logitech\SetPointP\SetPoint.exe" [2015-08-26 3113592]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = <local>
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office14\EXCEL.EXE/3000
IE: Od&eslat do aplikace OneNote - c:\progra~1\MICROS~2\Office14\ONBttnIE.dll/105
TCP: DhcpNameServer = 83.240.0.214 83.240.0.135 192.168.1.1
FF - ProfilePath - c:\users\Patrik\AppData\Roaming\Mozilla\Firefox\Profiles\u6zuo40y.default-1431584290621\
FF - prefs.js: browser.startup.homepage - hxxps://www.seznam.cz/
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Wow6432Node-HKLM-Run-<NO NAME> - (no file)
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe
AddRemove-4F6D5E84-5826-4394-9F40-3A9A19165651_is1 - c:\program files (x86)\PANDORA.TV\PanService\unins000.exe
AddRemove-Autodesk Design Review 2013 - c:\program files (x86)\Autodesk\Autodesk Design Review 2013\Setup\Setup.exe
AddRemove-{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f} - c:\programdata\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
AddRemove-{3B0882A4-C127-8B85-3031-A4A4D0364111}_is1 - c:\program files (x86)\Win_7_Loader_v.1.7.9_by_Daz\unins000.exe
AddRemove-{8409c4f7-2340-4933-a304-5d37db4fb48b} - c:\programdata\Package Cache\{8409c4f7-2340-4933-a304-5d37db4fb48b}\Intel® Driver Update Utility Installer.exe
AddRemove-{95716cce-fc71-413f-8ad5-56c2892d4b3a} - c:\programdata\Package Cache\{95716cce-fc71-413f-8ad5-56c2892d4b3a}\vcredist_x86.exe
AddRemove-{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6} - c:\programdata\Package Cache\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\vcredist_x64.exe
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2016-04-15 15:44:20
ComboFix-quarantined-files.txt 2016-04-15 13:44
.
Před spuštěním: 4 364 664 832
Po spuštění: 4 255 363 072
.
- - End Of File - - 31D8C45E39DF1A94609D46436C7773AA
A36C5E4F47E84449FF07ED3517B43A31
Nahoru
Uživatelský avatar
jaro3
člen Security týmu
Guru Level 15
Guru Level 15
Příspěvky: 43298
Registrován: červen 07
Bydliště: Jižní Čechy
Pohlaví: Muž
Stav:
Offline

Re: Kontrola logu, velké využití RAM

Příspěvekod jaro3 » 15 dub 2016 16:08

Zavři ostatní aplikace a prohlížeče, odpoj se od netu a fixni v HJT:
Návod

Kód: Vybrat vše

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O1 - Hosts: ::1 localhost
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O15 - ESC Trusted Zone: http://*.connectify.me
O15 - ESC Trusted Zone: http://*.fastspring.com
O15 - ESC Trusted Zone: http://*.connectify.me (HKLM)
O15 - ESC Trusted Zone: http://*.fastspring.com (HKLM)


Vypni rez. ochranu u antiviru a antispywaru,příp. firewall..

Otevři si Poznámkový blok (Start -> Spustit... a napiš do okna Notepad a dej Ok.
Zkopíruj do něj následující celý text označený zeleně:

Kód: Vybrat vše

ClearJavaCache::
KillAll::
Folder::
c:\program files (x86)\Skype\Updater

Driver::
SkypeUpdate

DDS::
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = <local>

RegLock::
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)


Zvol možnost Soubor -> Uložit jako... a nastav tyto parametry:
Název souboru: zde napiš: CFScript.txt
Uložit jako typ: tak tam vyber Všechny soubory
Ulož soubor na plochu.
Ukonči všechna aktivní okna.

Uchop myší vytvořený skript CFScript.txt, přemísti ho nad stažený program ComboFix.exe a když se oba soubory překryjí, skript upusť.
- Automaticky se spustí ComboFix
- Vlož sem log, který vyběhne v závěru čistícího procesu + nový log z HJT

Upozornění : Může se stát, že po aplikaci Combofixu a restartu počítače, Windows nenaběhnou , nebo nenajede plocha , budou problémy s připojením, pak znovu restartuj počítač, pokud to nepomůže , po restartu mačkej klávesu F8 a pak zvol poslední známou funkční konfiguraci. , či použij bod obnovy.

Stáhni si aswMBR
na svojí plochu. Uzavři všechna okna , programy a prohlížeče. Poklepej na aswMBR.exe. Pokud se objeví hláška o možnosti stáhnutí databáze Avastu , klikni na NE. Poté klikni na „Scan“ . Po skenu klikni na „Save Log“ a ulož si log na plochu .Zkopíruj sem celý obsah toho logu. Pak klikni na „Exit“ k zavření programu.
Při práci s programy HJT, ComboFix,MbAM, SDFix aj. zavřete všechny ostatní aplikace a prohlížeče!
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
Nahoru
Patrikz
Level 1
Level 1
Příspěvky: 65
Registrován: duben 16
Pohlaví: Muž
Stav:
Offline

Re: Kontrola logu, velké využití RAM

Příspěvekod Patrikz » 15 dub 2016 19:40

Combofix log:

ComboFix 16-04-13.01 - Patrik 15.04.2016 19:00:38.2.4 - x64
Microsoft Windows 7 Professional 6.1.7601.1.1250.420.1029.18.3945.2316 [GMT 2:00]
Spuštěný z: c:\users\Patrik\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\Patrik\Desktop\CFScript.txt
AV: avast! Antivirus *Disabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}
SP: avast! Antivirus *Disabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\Skype\Updater
c:\program files (x86)\Skype\Updater\Updater.dll
c:\program files (x86)\Skype\Updater\Updater.exe
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_SkypeUpdate
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2016-03-15 do 2016-04-15 )))))))))))))))))))))))))))))))
.
.
2016-04-15 13:25 . 2016-04-15 13:25 -------- d-----w- c:\users\Patrik\AppData\Roaming\AVAST Software
2016-04-15 13:25 . 2016-04-15 13:24 166432 ----a-w- c:\windows\system32\drivers\aswStm.sys
2016-04-15 13:25 . 2016-04-15 13:25 287528 ----a-w- c:\windows\system32\drivers\aswvmm.sys
2016-04-15 13:25 . 2016-04-15 13:24 465792 ----a-w- c:\windows\system32\drivers\aswSP.sys
2016-04-15 13:25 . 2016-04-15 13:24 74544 ----a-w- c:\windows\system32\drivers\aswRvrt.sys
2016-04-15 13:25 . 2016-04-15 13:24 107792 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2016-04-15 13:25 . 2016-04-15 13:24 37656 ----a-w- c:\windows\system32\drivers\aswHwid.sys
2016-04-15 13:25 . 2016-04-15 13:24 103064 ----a-w- c:\windows\system32\drivers\aswRdr2.sys
2016-04-15 13:25 . 2016-04-15 13:24 1070904 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2016-04-15 13:24 . 2016-04-15 13:24 398152 ----a-w- c:\windows\system32\aswBoot.exe
2016-04-15 13:24 . 2016-04-15 13:24 52184 ----a-w- c:\windows\avastSS.scr
2016-04-15 13:24 . 2016-04-15 13:24 -------- d-----w- c:\program files\AVAST Software
2016-04-15 13:15 . 2016-03-28 10:07 11686560 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{2FA33143-9573-4C65-9F34-264F54945306}\mpengine.dll
2016-04-15 13:08 . 2016-04-15 13:08 -------- d-----w- c:\windows\SysWow64\config\systemprofile\.oracle_jre_usage
2016-04-15 13:07 . 2016-04-15 13:07 -------- d-----w- c:\program files\Common Files\AV
2016-04-15 13:07 . 2016-04-15 13:07 -------- d-----w- c:\program files (x86)\Common Files\AV
2016-04-15 13:04 . 2016-04-15 13:22 -------- d-----w- c:\programdata\AVAST Software
2016-04-14 20:07 . 2016-04-14 20:07 -------- d-----w- c:\users\Patrik\AppData\Local\VirtualStore
2016-04-14 20:06 . 2016-04-14 20:06 144 ----a-w- c:\windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2016-04-14 18:27 . 2016-04-15 17:09 -------- d-----w- c:\users\Patrik\AppData\Local\Temp
2016-04-14 18:27 . 2016-04-14 17:53 24064 ----a-w- c:\windows\zoek-delete.exe
2016-04-14 18:12 . 2016-04-14 18:12 -------- d-----w- c:\users\Patrik\AppData\Local\CrashDumps
2016-04-14 17:51 . 2016-04-14 18:24 -------- d-----w- C:\zoek_backup
2016-04-13 20:05 . 2016-03-16 18:50 156672 ----a-w- c:\windows\system32\mtxoci.dll
2016-04-13 20:05 . 2016-03-16 18:28 111616 ----a-w- c:\windows\SysWow64\mtxoci.dll
2016-04-13 20:05 . 2016-03-16 18:28 176128 ----a-w- c:\windows\SysWow64\msorcl32.dll
2016-04-13 20:05 . 2016-03-16 18:27 286720 ----a-w- c:\program files (x86)\Common Files\System\Ole DB\msdaora.dll
2016-04-13 18:28 . 2016-04-14 17:26 28272 ----a-w- c:\windows\system32\drivers\TrueSight.sys
2016-04-13 18:27 . 2016-04-13 18:40 -------- d-----w- c:\programdata\RogueKiller
2016-04-12 17:25 . 2016-04-13 08:29 192216 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys
2016-04-12 17:25 . 2016-03-10 12:09 64896 ----a-w- c:\windows\system32\drivers\mwac.sys
2016-04-12 17:25 . 2016-03-10 12:08 140672 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys
2016-04-12 17:25 . 2016-03-10 12:08 27008 ----a-w- c:\windows\system32\drivers\mbam.sys
2016-04-12 17:25 . 2016-04-12 17:25 -------- d-----w- c:\program files (x86)\Malwarebytes Anti-Malware
2016-04-12 17:25 . 2016-04-12 17:25 -------- d-----w- c:\programdata\Malwarebytes
2016-04-12 17:17 . 2016-04-13 09:01 -------- d-----w- C:\AdwCleaner
2016-03-30 15:42 . 2016-03-30 15:42 -------- d-----w- c:\program files (x86)\Common Files\Java
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2016-04-13 20:14 . 2013-10-21 14:27 135176864 ----a-w- c:\windows\system32\MRT.exe
2016-04-07 17:28 . 2014-10-06 06:43 797376 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2016-04-07 17:28 . 2014-10-06 06:43 142528 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2016-04-06 08:18 . 2013-10-19 11:17 453280 ------w- c:\windows\system32\MpSigStub.exe
2016-03-30 15:42 . 2015-04-09 12:20 97856 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2016-03-17 22:57 . 2016-04-13 20:04 344064 ----a-w- c:\windows\system32\schannel.dll
2016-03-17 22:57 . 2016-04-13 20:04 190464 ----a-w- c:\windows\system32\rpchttp.dll
2016-03-17 22:29 . 2016-04-13 20:04 251392 ----a-w- c:\windows\SysWow64\schannel.dll
2016-03-17 22:29 . 2016-04-13 20:04 141312 ----a-w- c:\windows\SysWow64\rpchttp.dll
2016-03-17 22:24 . 2016-04-13 20:04 44032 ----a-w- c:\windows\apppatch\acwow64.dll
2016-02-12 18:52 . 2016-03-09 13:31 98816 ----a-w- c:\windows\system32\wudriver.dll
2016-02-12 18:52 . 2016-03-09 13:31 3169792 ----a-w- c:\windows\system32\wucltux.dll
2016-02-12 18:52 . 2016-03-09 13:31 192512 ----a-w- c:\windows\system32\wuwebv.dll
2016-02-12 18:44 . 2016-03-09 13:31 91136 ----a-w- c:\windows\system32\WinSetupUI.dll
2016-02-12 18:39 . 2016-03-09 13:31 174080 ----a-w- c:\windows\SysWow64\wuwebv.dll
2016-02-12 18:22 . 2016-03-09 13:31 2610688 ----a-w- c:\windows\system32\wuaueng.dll
2016-02-12 18:19 . 2016-03-09 13:31 709120 ----a-w- c:\windows\system32\wuapi.dll
2016-02-12 18:18 . 2016-03-09 13:31 140288 ----a-w- c:\windows\system32\wuauclt.exe
2016-02-12 18:18 . 2016-03-09 13:31 37888 ----a-w- c:\windows\system32\wuapp.exe
2016-02-12 18:18 . 2016-03-09 13:31 36864 ----a-w- c:\windows\system32\wups.dll
2016-02-12 18:18 . 2016-03-09 13:31 37888 ----a-w- c:\windows\system32\wups2.dll
2016-02-12 18:18 . 2016-03-09 13:31 12288 ----a-w- c:\windows\system32\wu.upgrade.ps.dll
2016-02-12 18:06 . 2016-03-09 13:31 573440 ----a-w- c:\windows\SysWow64\wuapi.dll
2016-02-12 18:05 . 2016-03-09 13:31 93696 ----a-w- c:\windows\SysWow64\wudriver.dll
2016-02-12 18:05 . 2016-03-09 13:31 30208 ----a-w- c:\windows\SysWow64\wups.dll
2016-02-12 18:05 . 2016-03-09 13:31 35328 ----a-w- c:\windows\SysWow64\wuapp.exe
2016-02-09 09:57 . 2016-03-09 13:27 12625920 ----a-w- c:\windows\system32\wmploc.DLL
2016-02-09 09:57 . 2016-03-09 13:27 14634496 ----a-w- c:\windows\system32\wmp.dll
2016-02-09 09:56 . 2016-03-09 13:27 5120 ----a-w- c:\windows\system32\msdxm.ocx
2016-02-09 09:56 . 2016-03-09 13:27 5120 ----a-w- c:\windows\system32\dxmasf.dll
2016-02-09 09:55 . 2016-03-09 13:27 30720 ----a-w- c:\windows\system32\seclogon.dll
2016-02-09 09:54 . 2016-03-09 13:27 9728 ----a-w- c:\windows\system32\spwmp.dll
2016-02-09 09:51 . 2016-03-09 13:27 12625408 ----a-w- c:\windows\SysWow64\wmploc.DLL
2016-02-09 09:13 . 2016-03-09 13:27 4096 ----a-w- c:\windows\SysWow64\msdxm.ocx
2016-02-09 09:13 . 2016-03-09 13:27 4096 ----a-w- c:\windows\SysWow64\dxmasf.dll
2016-02-09 09:13 . 2016-03-09 13:27 8192 ----a-w- c:\windows\SysWow64\spwmp.dll
2016-02-05 18:54 . 2016-03-09 13:27 41472 ----a-w- c:\windows\system32\lpk.dll
2016-02-05 18:54 . 2016-03-09 13:27 100864 ----a-w- c:\windows\system32\fontsub.dll
2016-02-05 18:53 . 2016-03-09 13:27 14336 ----a-w- c:\windows\system32\dciman32.dll
2016-02-05 18:53 . 2016-03-09 13:27 46080 ----a-w- c:\windows\system32\atmlib.dll
2016-02-05 18:50 . 2016-03-09 13:27 25600 ----a-w- c:\windows\SysWow64\lpk.dll
2016-02-05 18:44 . 2016-03-09 13:27 70656 ----a-w- c:\windows\SysWow64\fontsub.dll
2016-02-05 18:42 . 2016-03-09 13:27 10240 ----a-w- c:\windows\SysWow64\dciman32.dll
2016-02-05 17:48 . 2016-03-09 13:27 372736 ----a-w- c:\windows\system32\atmfd.dll
2016-02-05 17:43 . 2016-03-09 13:27 299520 ----a-w- c:\windows\SysWow64\atmfd.dll
2016-02-05 17:43 . 2016-03-09 13:27 34304 ----a-w- c:\windows\SysWow64\atmlib.dll
2016-02-05 01:19 . 2016-03-09 13:27 381440 ----a-w- c:\windows\system32\mfds.dll
2016-02-04 18:41 . 2016-03-09 13:27 296448 ----a-w- c:\windows\SysWow64\mfds.dll
2016-02-03 18:58 . 2016-03-09 13:30 862208 ----a-w- c:\windows\system32\oleaut32.dll
2016-02-03 18:52 . 2016-03-09 13:30 84992 ----a-w- c:\windows\system32\asycfilt.dll
2016-02-03 18:49 . 2016-03-09 13:30 572416 ----a-w- c:\windows\SysWow64\oleaut32.dll
2016-02-03 18:43 . 2016-03-09 13:30 67584 ----a-w- c:\windows\SysWow64\asycfilt.dll
2016-02-03 18:07 . 2016-03-09 13:30 91648 ----a-w- c:\windows\system32\drivers\USBSTOR.SYS
2016-01-29 07:01 . 2013-11-14 18:53 18960 ----a-w- c:\windows\system32\drivers\LNonPnP.sys
2016-01-22 06:19 . 2016-02-10 18:00 14179840 ----a-w- c:\windows\system32\shell32.dll
2016-01-22 06:18 . 2016-02-10 18:01 961024 ----a-w- c:\windows\system32\CPFilters.dll
2016-01-22 06:18 . 2016-02-10 18:01 723968 ----a-w- c:\windows\system32\EncDec.dll
2016-01-22 06:15 . 2016-02-10 18:00 1866752 ----a-w- c:\windows\system32\ExplorerFrame.dll
2016-01-22 06:12 . 2016-02-10 18:00 1940992 ----a-w- c:\windows\system32\authui.dll
2016-01-22 06:04 . 2016-02-10 18:01 642048 ----a-w- c:\windows\SysWow64\CPFilters.dll
2016-01-22 06:04 . 2016-02-10 18:01 535040 ----a-w- c:\windows\SysWow64\EncDec.dll
2016-01-22 06:00 . 2016-02-10 18:00 1498624 ----a-w- c:\windows\SysWow64\ExplorerFrame.dll
2016-01-22 05:59 . 2016-02-10 18:00 1805824 ----a-w- c:\windows\SysWow64\authui.dll
2016-01-22 05:19 . 2016-02-10 18:00 3231232 ----a-w- c:\windows\explorer.exe
2016-01-22 05:12 . 2016-02-10 18:00 2973184 ----a-w- c:\windows\SysWow64\explorer.exe
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1475584]
"Akamai NetSession Interface"="c:\users\Patrik\AppData\Local\Akamai\netsession_win.exe" [2015-09-10 4691384]
"ShowBatteryBar"="c:\program files\BatteryBar\ShowBatteryBar.exe" [2014-09-19 89600]
"CCleaner Monitoring"="c:\program files\CCleaner\CCleaner64.exe" [2016-02-12 8641240]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"QLBController"="c:\program files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe" [2013-07-31 337184]
"USB3MON"="c:\program files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe" [2012-12-20 291280]
"AccelerometerSysTrayApplet"="c:\program files (x86)\Hewlett-Packard\HP 3D DriveGuard\AccelerometerST.exe" [2013-03-11 77088]
"StartCCC"="c:\program files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe" [2015-08-21 767176]
"AvastUI.exe"="c:\program files\AVAST Software\Avast\AvastUI.exe" [2016-04-15 7390608]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
"SoftwareSASGeneration"= 1 (0x1)
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 HPSupportSolutionsFrameworkService;HP Support Solutions Framework Service;c:\program files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe;c:\program files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [x]
R3 clwvd6;CyberLink WebCam Virtual Driver 6.0 Service;c:\windows\system32\DRIVERS\clwvd6.sys;c:\windows\SYSNATIVE\DRIVERS\clwvd6.sys [x]
R3 Disc Soft Bus Service;Disc Soft Bus Service;d:\daemon tools pro\DiscSoftBusService.exe;d:\daemon tools pro\DiscSoftBusService.exe [x]
R3 FlexNet Licensing Service 64;FlexNet Licensing Service 64;c:\program files\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService64.exe;c:\program files\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService64.exe [x]
R3 ICCS;Intel(R) Integrated Clock Controller Service - Intel(R) ICCS;c:\program files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe;c:\program files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 ose64;Office 64 Source Engine;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 RTL8168;Realtek 8168 NT Driver;c:\windows\system32\DRIVERS\Rt630x64.sys;c:\windows\SYSNATIVE\DRIVERS\Rt630x64.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R4 AdAppMgrSvc;Autodesk Application Manager Service;c:\program files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe ;c:\program files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe [x]
R4 sptd;sptd;c:\windows\System32\Drivers\sptd.sys;c:\windows\SYSNATIVE\Drivers\sptd.sys [x]
S0 amdkmpfd;AMD PCI Root Bus Lower Filter;c:\windows\system32\DRIVERS\amdkmpfd.sys;c:\windows\SYSNATIVE\DRIVERS\amdkmpfd.sys [x]
S0 aswRvrt;avast! Revert; [x]
S0 aswVmm;avast! VM Monitor; [x]
S0 iusb3hcs;Ovladač přepínání hostitelského řadiče Intel(R) USB 3.0;c:\windows\system32\DRIVERS\iusb3hcs.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hcs.sys [x]
S1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys;c:\windows\SYSNATIVE\drivers\aswSnx.sys [x]
S1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys;c:\windows\SYSNATIVE\drivers\aswSP.sys [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 aswHwid;avast! HardwareID;c:\windows\system32\drivers\aswHwid.sys;c:\windows\SYSNATIVE\drivers\aswHwid.sys [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys;c:\windows\SYSNATIVE\drivers\aswMonFlt.sys [x]
S2 aswStm;aswStm;c:\windows\system32\drivers\aswStm.sys;c:\windows\SYSNATIVE\drivers\aswStm.sys [x]
S2 DiagTrack;Diagnostics Tracking Service;c:\windows\System32\svchost.exe;c:\windows\SYSNATIVE\svchost.exe [x]
S2 hpHotkeyMonitor;hpHotkeyMonitor;c:\program files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe;c:\program files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe [x]
S2 hpsrv;HP Service;c:\windows\system32\Hpservice.exe;c:\windows\SYSNATIVE\Hpservice.exe [x]
S2 igfxCUIService1.0.0.0;Intel(R) HD Graphics Control Panel Service;c:\windows\system32\igfxCUIService.exe;c:\windows\SYSNATIVE\igfxCUIService.exe [x]
S2 mitsijm2016;Správce úloh aplikace Autodesk Simulation Moldflow MITSI 2016;d:\autodesk\Inventor 2016\Moldflow\bin\mitsijm.exe;d:\autodesk\Inventor 2016\Moldflow\bin\mitsijm.exe [x]
S3 dtscsibus;DAEMON Tools Virtual SCSI Bus;c:\windows\system32\DRIVERS\dtscsibus.sys;c:\windows\SYSNATIVE\DRIVERS\dtscsibus.sys [x]
S3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x]
S3 iusb3hub;Ovladač rozbočovače Intel(R) USB 3.0;c:\windows\system32\DRIVERS\iusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hub.sys [x]
S3 iusb3xhc;Ovladač rozšiřitelného hostitelského řadiče Intel(R) USB 3.0;c:\windows\system32\DRIVERS\iusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3xhc.sys [x]
S3 LEqdUsb;Logitech SetPoint Unifying KMDF USB Filter;c:\windows\system32\DRIVERS\LEqdUsb.Sys;c:\windows\SYSNATIVE\DRIVERS\LEqdUsb.Sys [x]
S3 LHidEqd;Logitech SetPoint Unifying KMDF HID Filter;c:\windows\system32\DRIVERS\LHidEqd.Sys;c:\windows\SYSNATIVE\DRIVERS\LHidEqd.Sys [x]
S3 netr28x;Ralink 802.11n Extensible Wireless Driver;c:\windows\system32\DRIVERS\netr28x.sys;c:\windows\SYSNATIVE\DRIVERS\netr28x.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
S3 SPUVCbv;SPUVCb Driver Service;c:\windows\system32\Drivers\SPUVCbv_x64.sys;c:\windows\SYSNATIVE\Drivers\SPUVCbv_x64.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
LocalServiceAndNoImpersonation REG_MULTI_SZ SSDPSRV upnphost SCardSvr QWAVE wcncsvc
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{A6EADE66-0000-0000-484E-7E8A45000000}]
2015-12-18 15:42 286904 ----a-w- c:\program files (x86)\Adobe\Acrobat Reader DC\Esl\AiodLite.dll
.
Obsah adresáře 'Naplánované úlohy'
.
2016-04-15 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-10-06 17:28]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2016-04-15 13:24 920784 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SysTrayApp"="c:\program files\IDT\WDM\sttray64.exe" [2013-08-16 1703424]
"SynTPEnh"="c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe" [BU]
"EvtMgr6"="c:\program files\Logitech\SetPointP\SetPoint.exe" [2015-08-26 3113592]
.
------- Doplňkový sken -------
.
uLocal Page = %SystemRoot%\system32\blank.htm
mLocal Page = c:\windows\SYSTEM32\blank.htm
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office14\EXCEL.EXE/3000
IE: Od&eslat do aplikace OneNote - c:\progra~1\MICROS~2\Office14\ONBttnIE.dll/105
TCP: DhcpNameServer = 83.240.0.214 83.240.0.135 192.168.1.1
FF - ProfilePath - c:\users\Patrik\AppData\Roaming\Mozilla\Firefox\Profiles\u6zuo40y.default-1431584290621\
FF - prefs.js: browser.startup.homepage - hxxps://www.seznam.cz/
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Wow6432Node-HKLM-Run-<NO NAME> - (no file)
AddRemove-4F6D5E84-5826-4394-9F40-3A9A19165651_is1 - c:\program files (x86)\PANDORA.TV\PanService\unins000.exe
AddRemove-Autodesk Design Review 2013 - c:\program files (x86)\Autodesk\Autodesk Design Review 2013\Setup\Setup.exe
AddRemove-{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f} - c:\programdata\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
AddRemove-{3B0882A4-C127-8B85-3031-A4A4D0364111}_is1 - c:\program files (x86)\Win_7_Loader_v.1.7.9_by_Daz\unins000.exe
AddRemove-{8409c4f7-2340-4933-a304-5d37db4fb48b} - c:\programdata\Package Cache\{8409c4f7-2340-4933-a304-5d37db4fb48b}\Intel® Driver Update Utility Installer.exe
AddRemove-{95716cce-fc71-413f-8ad5-56c2892d4b3a} - c:\programdata\Package Cache\{95716cce-fc71-413f-8ad5-56c2892d4b3a}\vcredist_x86.exe
AddRemove-{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6} - c:\programdata\Package Cache\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\vcredist_x64.exe
.
.
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\AVAST Software\Avast\AvastSvc.exe
c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\windows\SysWOW64\PnkBstrA.exe
c:\program files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
.
**************************************************************************
.
Celkový čas: 2016-04-15 19:14:14 - počítač byl restartován
ComboFix-quarantined-files.txt 2016-04-15 17:14
ComboFix2.txt 2016-04-15 13:44
.
Před spuštěním: 4 409 786 368
Po spuštění: 4 172 304 384
.
- - End Of File - - F1D01A2DA54668B9B495C75FD4C813C5
A36C5E4F47E84449FF07ED3517B43A31
Nahoru
Patrikz
Level 1
Level 1
Příspěvky: 65
Registrován: duben 16
Pohlaví: Muž
Stav:
Offline

Re: Kontrola logu, velké využití RAM

Příspěvekod Patrikz » 15 dub 2016 19:41

aswMBR log:

aswMBR version 1.0.1.2290 Copyright(c) 2014 AVAST Software
Run date: 2016-04-15 19:21:00
-----------------------------
19:21:00.406 OS Version: Windows x64 6.1.7601 Service Pack 1
19:21:00.406 Number of processors: 4 586 0x3A09
19:21:00.406 ComputerName: PATRIK-PC UserName: Patrik
19:21:00.812 Initialize success
19:21:00.952 VM: initialized successfully
19:21:00.952 VM: Intel CPU BiosDisabled
19:21:02.528 AVAST engine defs: 16041500
19:21:28.237 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0
19:21:28.237 Disk 0 Vendor: HGST_HTS541075A9E680 JA2OA590 Size: 715404MB BusType: 11
19:21:28.393 Disk 0 MBR read successfully
19:21:28.393 Disk 0 MBR scan
19:21:28.393 Disk 0 Windows 7 default MBR code
19:21:28.409 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 100 MB offset 2048
19:21:28.440 Disk 0 Boot: NTFS code=1
19:21:28.455 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 69900 MB offset 206848
19:21:28.471 Disk 0 Partition 3 00 07 HPFS/NTFS NTFS 645402 MB offset 143362048
19:21:28.580 Disk 0 scanning C:\Windows\system32\drivers
19:21:38.330 Service scanning
19:22:09.561 Modules scanning
19:22:09.561 Disk 0 trace - called modules:
19:22:09.593 ntoskrnl.exe CLASSPNP.SYS disk.sys hpdskflt.sys ataport.SYS PCIIDEX.SYS hal.dll msahci.sys
19:22:09.593 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa8005153060]
19:22:09.608 3 CLASSPNP.SYS[fffff8800185043f] -> nt!IofCallDriver -> [0xfffffa8004fe7b10]
19:22:09.608 5 hpdskflt.sys[fffff880019e942b] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP0T0L0-0[0xfffffa8004001680]
19:22:09.920 AVAST engine scan C:\Windows
19:22:11.745 AVAST engine scan C:\Windows\system32
19:24:49.789 AVAST engine scan C:\Windows\system32\drivers
19:25:00.475 AVAST engine scan C:\Users\Patrik
19:29:05.536 AVAST engine scan C:\ProgramData
19:30:45.626 Disk 0 statistics 4166575/0/0 @ 4,52 MB/s
19:30:45.626 Scan finished successfully
19:31:30.133 Disk 0 MBR has been saved successfully to "C:\Users\Patrik\Desktop\MBR.dat"
19:31:30.133 The log file has been saved successfully to "C:\Users\Patrik\Desktop\aswMBR.txt"


aswMBR version 1.0.1.2290 Copyright(c) 2014 AVAST Software
Run date: 2016-04-15 19:21:00
-----------------------------
19:21:00.406 OS Version: Windows x64 6.1.7601 Service Pack 1
19:21:00.406 Number of processors: 4 586 0x3A09
19:21:00.406 ComputerName: PATRIK-PC UserName: Patrik
19:21:00.812 Initialize success
19:21:00.952 VM: initialized successfully
19:21:00.952 VM: Intel CPU BiosDisabled
19:21:02.528 AVAST engine defs: 16041500
19:21:28.237 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0
19:21:28.237 Disk 0 Vendor: HGST_HTS541075A9E680 JA2OA590 Size: 715404MB BusType: 11
19:21:28.393 Disk 0 MBR read successfully
19:21:28.393 Disk 0 MBR scan
19:21:28.393 Disk 0 Windows 7 default MBR code
19:21:28.409 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 100 MB offset 2048
19:21:28.440 Disk 0 Boot: NTFS code=1
19:21:28.455 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 69900 MB offset 206848
19:21:28.471 Disk 0 Partition 3 00 07 HPFS/NTFS NTFS 645402 MB offset 143362048
19:21:28.580 Disk 0 scanning C:\Windows\system32\drivers
19:21:38.330 Service scanning
19:22:09.561 Modules scanning
19:22:09.561 Disk 0 trace - called modules:
19:22:09.593 ntoskrnl.exe CLASSPNP.SYS disk.sys hpdskflt.sys ataport.SYS PCIIDEX.SYS hal.dll msahci.sys
19:22:09.593 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa8005153060]
19:22:09.608 3 CLASSPNP.SYS[fffff8800185043f] -> nt!IofCallDriver -> [0xfffffa8004fe7b10]
19:22:09.608 5 hpdskflt.sys[fffff880019e942b] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP0T0L0-0[0xfffffa8004001680]
19:22:09.920 AVAST engine scan C:\Windows
19:22:11.745 AVAST engine scan C:\Windows\system32
19:24:49.789 AVAST engine scan C:\Windows\system32\drivers
19:25:00.475 AVAST engine scan C:\Users\Patrik
19:29:05.536 AVAST engine scan C:\ProgramData
19:30:45.626 Disk 0 statistics 4166575/0/0 @ 4,52 MB/s
19:30:45.626 Scan finished successfully
19:31:30.133 Disk 0 MBR has been saved successfully to "C:\Users\Patrik\Desktop\MBR.dat"
19:31:30.133 The log file has been saved successfully to "C:\Users\Patrik\Desktop\aswMBR.txt"
19:32:10.965 Disk 0 MBR has been saved successfully to "C:\Users\Patrik\Desktop\MBR.dat"
19:32:10.965 The log file has been saved successfully to "C:\Users\Patrik\Desktop\aswMBR.txt"
Nahoru
Odpovědět

Zpět na “HiJackThis”

Kdo je online

Uživatelé prohlížející si toto fórum: Žádní registrovaní uživatelé a 81 hostů