- Skopiruj nasledujuci text a vloz ho do poznamkoveho bloku:
Kód: Vybrat vše
Start CloseProcesses: CreateRestorePoint: GroupPolicy: Restriction <==== ATTENTION HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus.msn.com HKU\S-1-5-21-4224010459-2142079050-1490898530-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus.msn.com/ HKU\S-1-5-21-4224010459-2142079050-1490898530-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus.msn.com SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\.DEFAULT -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-4224010459-2142079050-1490898530-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-4224010459-2142079050-1490898530-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File FF HKLM-x32\...\Firefox\Extensions: [siteranker@siteranker.com] - C:\Program Files (x86)\SiteRanker\firefox => not found FF HKU\S-1-5-21-4224010459-2142079050-1490898530-1000\...\Firefox\Extensions: [rebate_informer_wp@rebateblast.com] - C:\Program Files (x86)\RebateInformer\Firefox => not found FF Plugin: @microsoft.com/GENUINE -> disabled [No File] FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File] CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx <not found> CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx <not found> S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [3046688 2016-07-29] (IObit) S2 Service KMSELDI; C:\Program Files\KMSpico\Service_KMS.exe [1050904 2013-12-11] () [File not signed] S4 IMFFilter; \??\C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\IMFFilter.sys [X] S1 nlfpmdnb; \??\C:\Windows\system32\drivers\nlfpmdnb.sys [X] S3 RegFilter; \??\C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\regfilter.sys [X] 2018-03-02 17:33 - 2014-05-23 21:09 - 000000000 ____D C:\ProgramData\IObit 2018-03-01 15:05 - 2014-05-23 21:09 - 000000000 ____D C:\Program Files (x86)\IObit 2018-03-01 15:03 - 2014-05-23 21:18 - 000000000 ____D C:\ProgramData\ProductData 2018-02-27 13:27 - 2014-05-23 21:09 - 000000000 ____D C:\Users\katka\AppData\Roaming\IObit 2018-02-27 13:22 - 2014-05-23 21:18 - 000000000 ____D C:\Users\katka\AppData\LocalLow\IObit 2012-12-16 21:59 - 2012-12-17 16:47 - 004096000 _____ () C:\Program Files (x86)\GUT102D.tmp ContextMenuHandlers1: [UnLockerMenu] -> {A6FF0E3A-8437-482C-8E04-4F9E15C57538} => -> No File Task: {014905ED-84F2-4018-AF33-D4D06B1CB089} - System32\Tasks\Uninstaller_SkipUac_Administrator => C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe Task: {3497FBDE-8C70-40FB-82FB-945DB4AFCB49} - System32\Tasks\Uninstaller_SkipUac_katka => C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe Task: {A4365566-8461-4E67-B828-958DE1560708} - System32\Tasks\Driver Booster SkipUAC (katka) => C:\Program Files (x86)\IObit\Driver Booster\5.2.0\DriverBooster.exe Task: {C5AD2024-4500-422C-9A74-9E0B80B77225} - System32\Tasks\{9504AE7E-0B85-46B1-9DFD-C925BD36928C} => C:\Windows\system32\pcalua.exe -a C:\Users\katka\Downloads\Poradce1.50.1(3).exe -d C:\Users\katka\Downloads Task: {C74B5355-822D-41B4-93F6-EDD2C0881A2F} - System32\Tasks\SmartDefrag_Startup => C:\Program Files (x86)\IObit\Smart Defrag\SmartDefrag.exe Task: {D742F80A-715E-4D35-9010-95895977AC7C} - System32\Tasks\ASC9_SkipUac_katka => C:\Program Files (x86)\IObit\Advanced SystemCare\ASC.exe FirewallRules: [{A9E6DEFC-CB0B-4E76-B241-8DD6228F2FF5}] => (Allow) C:\Program Files\KMSpico\AutoPico.exe FirewallRules: [{F465FFDF-D6A7-425C-820A-679C58CE7BDC}] => (Allow) C:\Program Files\KMSpico\AutoPico.exe FirewallRules: [{4BDE45D3-969C-4980-8498-278A19BD44C8}] => (Allow) C:\Program Files\KMSpico\Service_KMS.exe FirewallRules: [{3061D739-761E-4A60-A35E-E20729D3109C}] => (Allow) C:\Program Files\KMSpico\Service_KMS.exe FirewallRules: [{C1B8A91D-4FB3-432B-80EE-B362744A0EFF}] => (Allow) C:\Program Files\KMSpico\Service_KMS.exe FirewallRules: [{EEBD0ADB-47A0-4217-81BF-76681C5000EF}] => (Allow) C:\Program Files\KMSpico\Service_KMS.exe FirewallRules: [{C7058918-7F15-470C-9AE7-DC00ADE282DA}] => (Allow) C:\Program Files\KMSpico\AutoPico.exe FirewallRules: [{515EF4BD-08F3-417C-B780-919A00AD6F8A}] => (Allow) C:\Program Files\KMSpico\AutoPico.exe C:\Program Files (x86)\Common Files\IObit C:\ProgramData\IObit C:\ProgramData\Application Data\IObit C:\Windows\System32\config\systemprofile\AppData\Roaming\IObit C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\IObit C:\Users\All Users\IObit C:\Windows\IObit C:\Program Files\KMSpico DeleteKey: HKU\S-1-5-21-4224010459-2142079050-1490898530-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains Hosts: EmptyTemp: End
- Uloz na plochu s nazvom fixlist.txt
- Spusti znovu FRST a klikni na Fix
- Po dokonceni si FRST vyziada restart PC, potvrd kliknutim na OK
- Po restartovani PC bude na ploche subor Fixlog.txt, jeho obsah sem skopiruj
Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
win 7 , nejde přihlásit, pouze nouzový režim
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Re: win 7 , nejde přihlásit, pouze nouzový režim
Otvor poznamkovy blok (Win+R -> notepad -> enter)
Absolvent skoly pre novacikov
E-mail: conder (zavinac) forum.viry.cz
Ak nieco nie je jasne, pytaj sa. Odporucam mat vzdy zalohovat dolezite data (dokumenty, fotky a ine).
Fixlisty a ine scripty su pisane len pre konkretny PC. Nepouzivajte ich na inych zariadeniach, inak hrozi poskodenie systemu alebo strata dat.
Ak mate podobny problem ako iny uzivatel, prosim, zalozte si vlastnu temu.
V pripade spokojnosti je mozne podporit forum. Dakujeme!
E-mail: conder (zavinac) forum.viry.cz
Ak nieco nie je jasne, pytaj sa. Odporucam mat vzdy zalohovat dolezite data (dokumenty, fotky a ine).
Fixlisty a ine scripty su pisane len pre konkretny PC. Nepouzivajte ich na inych zariadeniach, inak hrozi poskodenie systemu alebo strata dat.
Ak mate podobny problem ako iny uzivatel, prosim, zalozte si vlastnu temu.
V pripade spokojnosti je mozne podporit forum. Dakujeme!
Re: win 7 , nejde přihlásit, pouze nouzový režim
provedeno
log:
Fix result of Farbar Recovery Scan Tool (x64) Version: 28.02.2018
Ran by katka (03-03-2018 17:28:45) Run:4
Running from C:\Users\katka\Desktop
Loaded Profiles: katka (Available Profiles: katka & Mcx1-KATKA-PC)
Boot Mode: Normal
==============================================
fixlist content:
*****************
Start
CloseProcesses:
CreateRestorePoint:
GroupPolicy: Restriction <==== ATTENTION
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus.msn.com
HKU\S-1-5-21-4224010459-2142079050-1490898530-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus.msn.com/
HKU\S-1-5-21-4224010459-2142079050-1490898530-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus.msn.com
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\.DEFAULT -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-4224010459-2142079050-1490898530-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-4224010459-2142079050-1490898530-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
FF HKLM-x32\...\Firefox\Extensions: [siteranker@siteranker.com] - C:\Program Files (x86)\SiteRanker\firefox => not found
FF HKU\S-1-5-21-4224010459-2142079050-1490898530-1000\...\Firefox\Extensions: [rebate_informer_wp@rebateblast.com] - C:\Program Files (x86)\RebateInformer\Firefox => not found
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx <not found>
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx <not found>
S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [3046688 2016-07-29] (IObit)
S2 Service KMSELDI; C:\Program Files\KMSpico\Service_KMS.exe [1050904 2013-12-11] () [File not signed]
S4 IMFFilter; \??\C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\IMFFilter.sys [X]
S1 nlfpmdnb; \??\C:\Windows\system32\drivers\nlfpmdnb.sys [X]
S3 RegFilter; \??\C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\regfilter.sys [X]
2018-03-02 17:33 - 2014-05-23 21:09 - 000000000 ____D C:\ProgramData\IObit
2018-03-01 15:05 - 2014-05-23 21:09 - 000000000 ____D C:\Program Files (x86)\IObit
2018-03-01 15:03 - 2014-05-23 21:18 - 000000000 ____D C:\ProgramData\ProductData
2018-02-27 13:27 - 2014-05-23 21:09 - 000000000 ____D C:\Users\katka\AppData\Roaming\IObit
2018-02-27 13:22 - 2014-05-23 21:18 - 000000000 ____D C:\Users\katka\AppData\LocalLow\IObit
2012-12-16 21:59 - 2012-12-17 16:47 - 004096000 _____ () C:\Program Files (x86)\GUT102D.tmp
ContextMenuHandlers1: [UnLockerMenu] -> {A6FF0E3A-8437-482C-8E04-4F9E15C57538} => -> No File
Task: {014905ED-84F2-4018-AF33-D4D06B1CB089} - System32\Tasks\Uninstaller_SkipUac_Administrator => C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe
Task: {3497FBDE-8C70-40FB-82FB-945DB4AFCB49} - System32\Tasks\Uninstaller_SkipUac_katka => C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe
Task: {A4365566-8461-4E67-B828-958DE1560708} - System32\Tasks\Driver Booster SkipUAC (katka) => C:\Program Files (x86)\IObit\Driver Booster\5.2.0\DriverBooster.exe
Task: {C5AD2024-4500-422C-9A74-9E0B80B77225} - System32\Tasks\{9504AE7E-0B85-46B1-9DFD-C925BD36928C} => C:\Windows\system32\pcalua.exe -a C:\Users\katka\Downloads\Poradce1.50.1(3).exe -d C:\Users\katka\Downloads
Task: {C74B5355-822D-41B4-93F6-EDD2C0881A2F} - System32\Tasks\SmartDefrag_Startup => C:\Program Files (x86)\IObit\Smart Defrag\SmartDefrag.exe
Task: {D742F80A-715E-4D35-9010-95895977AC7C} - System32\Tasks\ASC9_SkipUac_katka => C:\Program Files (x86)\IObit\Advanced SystemCare\ASC.exe
FirewallRules: [{A9E6DEFC-CB0B-4E76-B241-8DD6228F2FF5}] => (Allow) C:\Program Files\KMSpico\AutoPico.exe
FirewallRules: [{F465FFDF-D6A7-425C-820A-679C58CE7BDC}] => (Allow) C:\Program Files\KMSpico\AutoPico.exe
FirewallRules: [{4BDE45D3-969C-4980-8498-278A19BD44C8}] => (Allow) C:\Program Files\KMSpico\Service_KMS.exe
FirewallRules: [{3061D739-761E-4A60-A35E-E20729D3109C}] => (Allow) C:\Program Files\KMSpico\Service_KMS.exe
FirewallRules: [{C1B8A91D-4FB3-432B-80EE-B362744A0EFF}] => (Allow) C:\Program Files\KMSpico\Service_KMS.exe
FirewallRules: [{EEBD0ADB-47A0-4217-81BF-76681C5000EF}] => (Allow) C:\Program Files\KMSpico\Service_KMS.exe
FirewallRules: [{C7058918-7F15-470C-9AE7-DC00ADE282DA}] => (Allow) C:\Program Files\KMSpico\AutoPico.exe
FirewallRules: [{515EF4BD-08F3-417C-B780-919A00AD6F8A}] => (Allow) C:\Program Files\KMSpico\AutoPico.exe
C:\Program Files (x86)\Common Files\IObit
C:\ProgramData\IObit
C:\ProgramData\Application Data\IObit
C:\Windows\System32\config\systemprofile\AppData\Roaming\IObit
C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\IObit
C:\Users\All Users\IObit
C:\Windows\IObit
C:\Program Files\KMSpico
DeleteKey: HKU\S-1-5-21-4224010459-2142079050-1490898530-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains
Hosts:
EmptyTemp:
End
*****************
Processes closed successfully.
Restore point was successfully created.
C:\Windows\system32\GroupPolicy\Machine => moved successfully
C:\Windows\system32\GroupPolicy\GPT.ini => moved successfully
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Start Page => value restored successfully
HKU\S-1-5-21-4224010459-2142079050-1490898530-1000\Software\Microsoft\Internet Explorer\Main\\Start Page => value restored successfully
HKU\S-1-5-21-4224010459-2142079050-1490898530-1000\Software\Microsoft\Internet Explorer\Main\\Default_Page_URL => value restored successfully
"HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope" => removed successfully
"HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" => removed successfully
HKLM\Software\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => key not found
"HKU\S-1-5-21-4224010459-2142079050-1490898530-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope" => removed successfully
"HKU\S-1-5-21-4224010459-2142079050-1490898530-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" => removed successfully
HKLM\Software\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => key not found
"HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}" => removed successfully
"HKLM\Software\Classes\CLSID\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F}" => removed successfully
HKLM\Software\Classes\CLSID\{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} => key not found
"HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\siteranker@siteranker.com" => removed successfully
"HKU\S-1-5-21-4224010459-2142079050-1490898530-1000\Software\Mozilla\Firefox\Extensions\\rebate_informer_wp@rebateblast.com" => removed successfully
"HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE" => removed successfully
"HKLM\Software\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE" => removed successfully
"HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\eofcbnmajmjmplflapaojjnihcjkigck" => removed successfully
"HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\gomekmidlodglbbmalcneegieacbdmki" => removed successfully
"HKLM\System\CurrentControlSet\Services\LiveUpdateSvc" => removed successfully
LiveUpdateSvc => service removed successfully
"HKLM\System\CurrentControlSet\Services\Service KMSELDI" => removed successfully
Service KMSELDI => service removed successfully
"HKLM\System\CurrentControlSet\Services\IMFFilter" => removed successfully
IMFFilter => service removed successfully
"HKLM\System\CurrentControlSet\Services\nlfpmdnb" => removed successfully
nlfpmdnb => service removed successfully
"HKLM\System\CurrentControlSet\Services\RegFilter" => removed successfully
RegFilter => service removed successfully
C:\ProgramData\IObit => moved successfully
C:\Program Files (x86)\IObit => moved successfully
C:\ProgramData\ProductData => moved successfully
C:\Users\katka\AppData\Roaming\IObit => moved successfully
C:\Users\katka\AppData\LocalLow\IObit => moved successfully
C:\Program Files (x86)\GUT102D.tmp => moved successfully
"HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\UnLockerMenu" => removed successfully
HKLM\Software\Classes\CLSID\{A6FF0E3A-8437-482C-8E04-4F9E15C57538} => key not found
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{014905ED-84F2-4018-AF33-D4D06B1CB089} => could not remove key. ErrorCode1: 0x00000002
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{014905ED-84F2-4018-AF33-D4D06B1CB089} => could not remove key. ErrorCode1: 0x00000002
C:\Windows\System32\Tasks\Uninstaller_SkipUac_Administrator => moved successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Uninstaller_SkipUac_Administrator => could not remove key. ErrorCode1: 0x00000002
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{3497FBDE-8C70-40FB-82FB-945DB4AFCB49} => could not remove key. ErrorCode1: 0x00000002
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3497FBDE-8C70-40FB-82FB-945DB4AFCB49} => could not remove key. ErrorCode1: 0x00000002
C:\Windows\System32\Tasks\Uninstaller_SkipUac_katka => moved successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Uninstaller_SkipUac_katka => could not remove key. ErrorCode1: 0x00000002
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{A4365566-8461-4E67-B828-958DE1560708} => could not remove key. ErrorCode1: 0x00000002
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A4365566-8461-4E67-B828-958DE1560708} => could not remove key. ErrorCode1: 0x00000002
C:\Windows\System32\Tasks\Driver Booster SkipUAC (katka) => moved successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Driver Booster SkipUAC (katka) => could not remove key. ErrorCode1: 0x00000002
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{C5AD2024-4500-422C-9A74-9E0B80B77225} => could not remove key. ErrorCode1: 0x00000002
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C5AD2024-4500-422C-9A74-9E0B80B77225} => could not remove key. ErrorCode1: 0x00000002
C:\Windows\System32\Tasks\{9504AE7E-0B85-46B1-9DFD-C925BD36928C} => moved successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{9504AE7E-0B85-46B1-9DFD-C925BD36928C} => could not remove key. ErrorCode1: 0x00000002
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{C74B5355-822D-41B4-93F6-EDD2C0881A2F} => could not remove key. ErrorCode1: 0x00000002
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C74B5355-822D-41B4-93F6-EDD2C0881A2F} => could not remove key. ErrorCode1: 0x00000002
C:\Windows\System32\Tasks\SmartDefrag_Startup => moved successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\SmartDefrag_Startup => could not remove key. ErrorCode1: 0x00000002
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{D742F80A-715E-4D35-9010-95895977AC7C} => could not remove key. ErrorCode1: 0x00000002
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D742F80A-715E-4D35-9010-95895977AC7C} => could not remove key. ErrorCode1: 0x00000002
C:\Windows\System32\Tasks\ASC9_SkipUac_katka => moved successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\ASC9_SkipUac_katka => could not remove key. ErrorCode1: 0x00000002
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{A9E6DEFC-CB0B-4E76-B241-8DD6228F2FF5}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{F465FFDF-D6A7-425C-820A-679C58CE7BDC}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{4BDE45D3-969C-4980-8498-278A19BD44C8}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{3061D739-761E-4A60-A35E-E20729D3109C}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{C1B8A91D-4FB3-432B-80EE-B362744A0EFF}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{EEBD0ADB-47A0-4217-81BF-76681C5000EF}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{C7058918-7F15-470C-9AE7-DC00ADE282DA}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{515EF4BD-08F3-417C-B780-919A00AD6F8A}" => removed successfully
C:\Program Files (x86)\Common Files\IObit => moved successfully
"C:\ProgramData\IObit" => not found
"C:\ProgramData\Application Data\IObit" => not found
C:\Windows\System32\config\systemprofile\AppData\Roaming\IObit => moved successfully
C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\IObit => moved successfully
"C:\Users\All Users\IObit" => not found
C:\Windows\IObit => moved successfully
C:\Program Files\KMSpico => moved successfully
"HKU\S-1-5-21-4224010459-2142079050-1490898530-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains" => removed successfully
C:\Windows\System32\Drivers\etc\hosts => moved successfully
Hosts restored successfully.
=========== EmptyTemp: ==========
BITS transfer queue => 8388608 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 6323509 B
Java, Flash, Steam htmlcache => 35186 B
Windows/system/drivers => 1973268 B
Edge => 0 B
Chrome => 19249085 B
Firefox => 303162563 B
Opera => 0 B
Temp, IE cache, history, cookies, recent:
Users => 0 B
Default => 0 B
Public => 0 B
ProgramData => 0 B
systemprofile => 23971618 B
systemprofile32 => 44042830 B
LocalService => 0 B
NetworkService => 0 B
katka => 101453357 B
katka => 0 B
Mcx1-KATKA-PC => 52050391 B
RecycleBin => 0 B
EmptyTemp: => 534.7 MB temporary data Removed.
================================
Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 03-03-2018 17:30:52)
Result of scheduled keys to remove after reboot:
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{014905ED-84F2-4018-AF33-D4D06B1CB089}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{014905ED-84F2-4018-AF33-D4D06B1CB089}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Uninstaller_SkipUac_Administrator" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{3497FBDE-8C70-40FB-82FB-945DB4AFCB49}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3497FBDE-8C70-40FB-82FB-945DB4AFCB49}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Uninstaller_SkipUac_katka" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{A4365566-8461-4E67-B828-958DE1560708}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A4365566-8461-4E67-B828-958DE1560708}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Driver Booster SkipUAC (katka)" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{C5AD2024-4500-422C-9A74-9E0B80B77225}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C5AD2024-4500-422C-9A74-9E0B80B77225}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{9504AE7E-0B85-46B1-9DFD-C925BD36928C}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{C74B5355-822D-41B4-93F6-EDD2C0881A2F}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C74B5355-822D-41B4-93F6-EDD2C0881A2F}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\SmartDefrag_Startup" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{D742F80A-715E-4D35-9010-95895977AC7C}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D742F80A-715E-4D35-9010-95895977AC7C}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\ASC9_SkipUac_katka" => removed successfully
==== End of Fixlog 17:30:52 ====
log:
Fix result of Farbar Recovery Scan Tool (x64) Version: 28.02.2018
Ran by katka (03-03-2018 17:28:45) Run:4
Running from C:\Users\katka\Desktop
Loaded Profiles: katka (Available Profiles: katka & Mcx1-KATKA-PC)
Boot Mode: Normal
==============================================
fixlist content:
*****************
Start
CloseProcesses:
CreateRestorePoint:
GroupPolicy: Restriction <==== ATTENTION
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus.msn.com
HKU\S-1-5-21-4224010459-2142079050-1490898530-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus.msn.com/
HKU\S-1-5-21-4224010459-2142079050-1490898530-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus.msn.com
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\.DEFAULT -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-4224010459-2142079050-1490898530-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-4224010459-2142079050-1490898530-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
FF HKLM-x32\...\Firefox\Extensions: [siteranker@siteranker.com] - C:\Program Files (x86)\SiteRanker\firefox => not found
FF HKU\S-1-5-21-4224010459-2142079050-1490898530-1000\...\Firefox\Extensions: [rebate_informer_wp@rebateblast.com] - C:\Program Files (x86)\RebateInformer\Firefox => not found
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx <not found>
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx <not found>
S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [3046688 2016-07-29] (IObit)
S2 Service KMSELDI; C:\Program Files\KMSpico\Service_KMS.exe [1050904 2013-12-11] () [File not signed]
S4 IMFFilter; \??\C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\IMFFilter.sys [X]
S1 nlfpmdnb; \??\C:\Windows\system32\drivers\nlfpmdnb.sys [X]
S3 RegFilter; \??\C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\regfilter.sys [X]
2018-03-02 17:33 - 2014-05-23 21:09 - 000000000 ____D C:\ProgramData\IObit
2018-03-01 15:05 - 2014-05-23 21:09 - 000000000 ____D C:\Program Files (x86)\IObit
2018-03-01 15:03 - 2014-05-23 21:18 - 000000000 ____D C:\ProgramData\ProductData
2018-02-27 13:27 - 2014-05-23 21:09 - 000000000 ____D C:\Users\katka\AppData\Roaming\IObit
2018-02-27 13:22 - 2014-05-23 21:18 - 000000000 ____D C:\Users\katka\AppData\LocalLow\IObit
2012-12-16 21:59 - 2012-12-17 16:47 - 004096000 _____ () C:\Program Files (x86)\GUT102D.tmp
ContextMenuHandlers1: [UnLockerMenu] -> {A6FF0E3A-8437-482C-8E04-4F9E15C57538} => -> No File
Task: {014905ED-84F2-4018-AF33-D4D06B1CB089} - System32\Tasks\Uninstaller_SkipUac_Administrator => C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe
Task: {3497FBDE-8C70-40FB-82FB-945DB4AFCB49} - System32\Tasks\Uninstaller_SkipUac_katka => C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe
Task: {A4365566-8461-4E67-B828-958DE1560708} - System32\Tasks\Driver Booster SkipUAC (katka) => C:\Program Files (x86)\IObit\Driver Booster\5.2.0\DriverBooster.exe
Task: {C5AD2024-4500-422C-9A74-9E0B80B77225} - System32\Tasks\{9504AE7E-0B85-46B1-9DFD-C925BD36928C} => C:\Windows\system32\pcalua.exe -a C:\Users\katka\Downloads\Poradce1.50.1(3).exe -d C:\Users\katka\Downloads
Task: {C74B5355-822D-41B4-93F6-EDD2C0881A2F} - System32\Tasks\SmartDefrag_Startup => C:\Program Files (x86)\IObit\Smart Defrag\SmartDefrag.exe
Task: {D742F80A-715E-4D35-9010-95895977AC7C} - System32\Tasks\ASC9_SkipUac_katka => C:\Program Files (x86)\IObit\Advanced SystemCare\ASC.exe
FirewallRules: [{A9E6DEFC-CB0B-4E76-B241-8DD6228F2FF5}] => (Allow) C:\Program Files\KMSpico\AutoPico.exe
FirewallRules: [{F465FFDF-D6A7-425C-820A-679C58CE7BDC}] => (Allow) C:\Program Files\KMSpico\AutoPico.exe
FirewallRules: [{4BDE45D3-969C-4980-8498-278A19BD44C8}] => (Allow) C:\Program Files\KMSpico\Service_KMS.exe
FirewallRules: [{3061D739-761E-4A60-A35E-E20729D3109C}] => (Allow) C:\Program Files\KMSpico\Service_KMS.exe
FirewallRules: [{C1B8A91D-4FB3-432B-80EE-B362744A0EFF}] => (Allow) C:\Program Files\KMSpico\Service_KMS.exe
FirewallRules: [{EEBD0ADB-47A0-4217-81BF-76681C5000EF}] => (Allow) C:\Program Files\KMSpico\Service_KMS.exe
FirewallRules: [{C7058918-7F15-470C-9AE7-DC00ADE282DA}] => (Allow) C:\Program Files\KMSpico\AutoPico.exe
FirewallRules: [{515EF4BD-08F3-417C-B780-919A00AD6F8A}] => (Allow) C:\Program Files\KMSpico\AutoPico.exe
C:\Program Files (x86)\Common Files\IObit
C:\ProgramData\IObit
C:\ProgramData\Application Data\IObit
C:\Windows\System32\config\systemprofile\AppData\Roaming\IObit
C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\IObit
C:\Users\All Users\IObit
C:\Windows\IObit
C:\Program Files\KMSpico
DeleteKey: HKU\S-1-5-21-4224010459-2142079050-1490898530-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains
Hosts:
EmptyTemp:
End
*****************
Processes closed successfully.
Restore point was successfully created.
C:\Windows\system32\GroupPolicy\Machine => moved successfully
C:\Windows\system32\GroupPolicy\GPT.ini => moved successfully
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Start Page => value restored successfully
HKU\S-1-5-21-4224010459-2142079050-1490898530-1000\Software\Microsoft\Internet Explorer\Main\\Start Page => value restored successfully
HKU\S-1-5-21-4224010459-2142079050-1490898530-1000\Software\Microsoft\Internet Explorer\Main\\Default_Page_URL => value restored successfully
"HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope" => removed successfully
"HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" => removed successfully
HKLM\Software\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => key not found
"HKU\S-1-5-21-4224010459-2142079050-1490898530-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope" => removed successfully
"HKU\S-1-5-21-4224010459-2142079050-1490898530-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" => removed successfully
HKLM\Software\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => key not found
"HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}" => removed successfully
"HKLM\Software\Classes\CLSID\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F}" => removed successfully
HKLM\Software\Classes\CLSID\{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} => key not found
"HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\siteranker@siteranker.com" => removed successfully
"HKU\S-1-5-21-4224010459-2142079050-1490898530-1000\Software\Mozilla\Firefox\Extensions\\rebate_informer_wp@rebateblast.com" => removed successfully
"HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE" => removed successfully
"HKLM\Software\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE" => removed successfully
"HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\eofcbnmajmjmplflapaojjnihcjkigck" => removed successfully
"HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\gomekmidlodglbbmalcneegieacbdmki" => removed successfully
"HKLM\System\CurrentControlSet\Services\LiveUpdateSvc" => removed successfully
LiveUpdateSvc => service removed successfully
"HKLM\System\CurrentControlSet\Services\Service KMSELDI" => removed successfully
Service KMSELDI => service removed successfully
"HKLM\System\CurrentControlSet\Services\IMFFilter" => removed successfully
IMFFilter => service removed successfully
"HKLM\System\CurrentControlSet\Services\nlfpmdnb" => removed successfully
nlfpmdnb => service removed successfully
"HKLM\System\CurrentControlSet\Services\RegFilter" => removed successfully
RegFilter => service removed successfully
C:\ProgramData\IObit => moved successfully
C:\Program Files (x86)\IObit => moved successfully
C:\ProgramData\ProductData => moved successfully
C:\Users\katka\AppData\Roaming\IObit => moved successfully
C:\Users\katka\AppData\LocalLow\IObit => moved successfully
C:\Program Files (x86)\GUT102D.tmp => moved successfully
"HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\UnLockerMenu" => removed successfully
HKLM\Software\Classes\CLSID\{A6FF0E3A-8437-482C-8E04-4F9E15C57538} => key not found
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{014905ED-84F2-4018-AF33-D4D06B1CB089} => could not remove key. ErrorCode1: 0x00000002
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{014905ED-84F2-4018-AF33-D4D06B1CB089} => could not remove key. ErrorCode1: 0x00000002
C:\Windows\System32\Tasks\Uninstaller_SkipUac_Administrator => moved successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Uninstaller_SkipUac_Administrator => could not remove key. ErrorCode1: 0x00000002
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{3497FBDE-8C70-40FB-82FB-945DB4AFCB49} => could not remove key. ErrorCode1: 0x00000002
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3497FBDE-8C70-40FB-82FB-945DB4AFCB49} => could not remove key. ErrorCode1: 0x00000002
C:\Windows\System32\Tasks\Uninstaller_SkipUac_katka => moved successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Uninstaller_SkipUac_katka => could not remove key. ErrorCode1: 0x00000002
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{A4365566-8461-4E67-B828-958DE1560708} => could not remove key. ErrorCode1: 0x00000002
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A4365566-8461-4E67-B828-958DE1560708} => could not remove key. ErrorCode1: 0x00000002
C:\Windows\System32\Tasks\Driver Booster SkipUAC (katka) => moved successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Driver Booster SkipUAC (katka) => could not remove key. ErrorCode1: 0x00000002
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{C5AD2024-4500-422C-9A74-9E0B80B77225} => could not remove key. ErrorCode1: 0x00000002
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C5AD2024-4500-422C-9A74-9E0B80B77225} => could not remove key. ErrorCode1: 0x00000002
C:\Windows\System32\Tasks\{9504AE7E-0B85-46B1-9DFD-C925BD36928C} => moved successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{9504AE7E-0B85-46B1-9DFD-C925BD36928C} => could not remove key. ErrorCode1: 0x00000002
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{C74B5355-822D-41B4-93F6-EDD2C0881A2F} => could not remove key. ErrorCode1: 0x00000002
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C74B5355-822D-41B4-93F6-EDD2C0881A2F} => could not remove key. ErrorCode1: 0x00000002
C:\Windows\System32\Tasks\SmartDefrag_Startup => moved successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\SmartDefrag_Startup => could not remove key. ErrorCode1: 0x00000002
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{D742F80A-715E-4D35-9010-95895977AC7C} => could not remove key. ErrorCode1: 0x00000002
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D742F80A-715E-4D35-9010-95895977AC7C} => could not remove key. ErrorCode1: 0x00000002
C:\Windows\System32\Tasks\ASC9_SkipUac_katka => moved successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\ASC9_SkipUac_katka => could not remove key. ErrorCode1: 0x00000002
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{A9E6DEFC-CB0B-4E76-B241-8DD6228F2FF5}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{F465FFDF-D6A7-425C-820A-679C58CE7BDC}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{4BDE45D3-969C-4980-8498-278A19BD44C8}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{3061D739-761E-4A60-A35E-E20729D3109C}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{C1B8A91D-4FB3-432B-80EE-B362744A0EFF}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{EEBD0ADB-47A0-4217-81BF-76681C5000EF}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{C7058918-7F15-470C-9AE7-DC00ADE282DA}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{515EF4BD-08F3-417C-B780-919A00AD6F8A}" => removed successfully
C:\Program Files (x86)\Common Files\IObit => moved successfully
"C:\ProgramData\IObit" => not found
"C:\ProgramData\Application Data\IObit" => not found
C:\Windows\System32\config\systemprofile\AppData\Roaming\IObit => moved successfully
C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\IObit => moved successfully
"C:\Users\All Users\IObit" => not found
C:\Windows\IObit => moved successfully
C:\Program Files\KMSpico => moved successfully
"HKU\S-1-5-21-4224010459-2142079050-1490898530-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains" => removed successfully
C:\Windows\System32\Drivers\etc\hosts => moved successfully
Hosts restored successfully.
=========== EmptyTemp: ==========
BITS transfer queue => 8388608 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 6323509 B
Java, Flash, Steam htmlcache => 35186 B
Windows/system/drivers => 1973268 B
Edge => 0 B
Chrome => 19249085 B
Firefox => 303162563 B
Opera => 0 B
Temp, IE cache, history, cookies, recent:
Users => 0 B
Default => 0 B
Public => 0 B
ProgramData => 0 B
systemprofile => 23971618 B
systemprofile32 => 44042830 B
LocalService => 0 B
NetworkService => 0 B
katka => 101453357 B
katka => 0 B
Mcx1-KATKA-PC => 52050391 B
RecycleBin => 0 B
EmptyTemp: => 534.7 MB temporary data Removed.
================================
Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 03-03-2018 17:30:52)
Result of scheduled keys to remove after reboot:
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{014905ED-84F2-4018-AF33-D4D06B1CB089}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{014905ED-84F2-4018-AF33-D4D06B1CB089}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Uninstaller_SkipUac_Administrator" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{3497FBDE-8C70-40FB-82FB-945DB4AFCB49}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3497FBDE-8C70-40FB-82FB-945DB4AFCB49}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Uninstaller_SkipUac_katka" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{A4365566-8461-4E67-B828-958DE1560708}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A4365566-8461-4E67-B828-958DE1560708}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Driver Booster SkipUAC (katka)" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{C5AD2024-4500-422C-9A74-9E0B80B77225}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C5AD2024-4500-422C-9A74-9E0B80B77225}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{9504AE7E-0B85-46B1-9DFD-C925BD36928C}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{C74B5355-822D-41B4-93F6-EDD2C0881A2F}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C74B5355-822D-41B4-93F6-EDD2C0881A2F}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\SmartDefrag_Startup" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{D742F80A-715E-4D35-9010-95895977AC7C}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D742F80A-715E-4D35-9010-95895977AC7C}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\ASC9_SkipUac_katka" => removed successfully
==== End of Fixlog 17:30:52 ====
Re: win 7 , nejde přihlásit, pouze nouzový režim
Vyzera to uz OK. Su este s PC nejake problemy?
Ak nie, tak este upraceme po pouzitych nastrojoch:
Ak nie, tak este upraceme po pouzitych nastrojoch:
- Stiahni DelFix: https://toolslib.net/downloads/finish/2-delfix/
- Uloz na plochu a spusti
- Nechaj oznacenu moznost "Remove disinfection tools"
- Klikni na "Run"
Absolvent skoly pre novacikov
E-mail: conder (zavinac) forum.viry.cz
Ak nieco nie je jasne, pytaj sa. Odporucam mat vzdy zalohovat dolezite data (dokumenty, fotky a ine).
Fixlisty a ine scripty su pisane len pre konkretny PC. Nepouzivajte ich na inych zariadeniach, inak hrozi poskodenie systemu alebo strata dat.
Ak mate podobny problem ako iny uzivatel, prosim, zalozte si vlastnu temu.
V pripade spokojnosti je mozne podporit forum. Dakujeme!
E-mail: conder (zavinac) forum.viry.cz
Ak nieco nie je jasne, pytaj sa. Odporucam mat vzdy zalohovat dolezite data (dokumenty, fotky a ine).
Fixlisty a ine scripty su pisane len pre konkretny PC. Nepouzivajte ich na inych zariadeniach, inak hrozi poskodenie systemu alebo strata dat.
Ak mate podobny problem ako iny uzivatel, prosim, zalozte si vlastnu temu.
V pripade spokojnosti je mozne podporit forum. Dakujeme!
Re: win 7 , nejde přihlásit, pouze nouzový režim
super, vypadá že funguje výborně, děkuji mnohokrát
Re: win 7 , nejde přihlásit, pouze nouzový režim
Nie je zaco, rad som pomohol
Absolvent skoly pre novacikov
E-mail: conder (zavinac) forum.viry.cz
Ak nieco nie je jasne, pytaj sa. Odporucam mat vzdy zalohovat dolezite data (dokumenty, fotky a ine).
Fixlisty a ine scripty su pisane len pre konkretny PC. Nepouzivajte ich na inych zariadeniach, inak hrozi poskodenie systemu alebo strata dat.
Ak mate podobny problem ako iny uzivatel, prosim, zalozte si vlastnu temu.
V pripade spokojnosti je mozne podporit forum. Dakujeme!
E-mail: conder (zavinac) forum.viry.cz
Ak nieco nie je jasne, pytaj sa. Odporucam mat vzdy zalohovat dolezite data (dokumenty, fotky a ine).
Fixlisty a ine scripty su pisane len pre konkretny PC. Nepouzivajte ich na inych zariadeniach, inak hrozi poskodenie systemu alebo strata dat.
Ak mate podobny problem ako iny uzivatel, prosim, zalozte si vlastnu temu.
V pripade spokojnosti je mozne podporit forum. Dakujeme!