Dobrý den, potřeboval bych pomoci s řešením problému s vyskakujícími reklamami v problížeči. Používám prohlížrč Mozilla. V příloze přikládám skeny počítače
Děkuji za rady
Honza
Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
Reklama při procházení Internetu
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Reklama při procházení Internetu
- Přílohy
-
- FRST.rar
- sken počítače FRST.txt
- (10.84 KiB) Staženo 49 x
-
Rudy
- Site Admin
- Příspěvky: 119677
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Reklama při procházení Internetu
Zdravím!
Spusťte tuto utilitu:
Spusťte tuto utilitu:
Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Reklama při procházení Internetu
Dobrý večer provedl jsem sken v příloze zasílám výsledek programu avšak nevím jestli je kompletní poté co jsem dal clean počítač zatuhnul a musel jsem jej restartovat.
- Přílohy
-
- AdwCleaner[S0].rar
- (1.76 KiB) Staženo 44 x
-
Rudy
- Site Admin
- Příspěvky: 119677
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Reklama při procházení Internetu
Log je kompletní. Dejte nový log FRST.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Reklama při procházení Internetu
Dobrý večer v příloze zasílám nový sken
- Přílohy
-
- FRST.rar
- (10.51 KiB) Staženo 60 x
-
Rudy
- Site Admin
- Příspěvky: 119677
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Reklama při procházení Internetu
Otevřte poznámkový blok a zkopírujte do něj:
Na ploše máte příliš mnoho dat (>14GB). Přesuňte je do jiného adresáře ve vašem profilu a na plochu dejte jen zástupcě pro snazší přístup. Takové množství dat zpomaluje start PC.
Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.Start
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKU\S-1-5-21-906914393-2084146445-2146558855-1000\...\MountPoints2: F - F:\StartVMCLite.exe
HKU\S-1-5-21-906914393-2084146445-2146558855-1000\...\MountPoints2: G - G:\StartVMCLite.exe
HKU\S-1-5-21-906914393-2084146445-2146558855-1000\...\MountPoints2: H - H:\StartVMCLite.exe
HKU\S-1-5-21-906914393-2084146445-2146558855-1000\...\MountPoints2: {192f09f0-fa1c-11e3-94b0-a8bc0da777ee} - G:\setup_vmb_lite.exe /checkApplicationPresence
HKU\S-1-5-21-906914393-2084146445-2146558855-1000\...\MountPoints2: {2008a457-8e70-11de-8a1f-806e6f6e6963} - F:\StartVMCLite.exe
HKU\S-1-5-21-906914393-2084146445-2146558855-1000\...\MountPoints2: {2be597c7-820a-11e1-a7a4-b911ee47faa1} - G:\AutoRun.exe
HKU\S-1-5-21-906914393-2084146445-2146558855-1000\...\MountPoints2: {6dcf74a5-db47-11dd-a7b9-001d72cee65b} - F:\StartVMCLite.exe
HKU\S-1-5-21-906914393-2084146445-2146558855-1000\...\MountPoints2: {6dcf74a6-db47-11dd-a7b9-001d72cee65b} - G:\StartVMCLite.exe
HKU\S-1-5-21-906914393-2084146445-2146558855-1000\...\MountPoints2: {78876db6-9dc8-11dd-a524-001d72cee65b} - F:\StartVMCLite.exe
HKU\S-1-5-21-906914393-2084146445-2146558855-1000\...\MountPoints2: {78876dbc-9dc8-11dd-a524-001d72cee65b} - H:\StartVMCLite.exe
HKU\S-1-5-21-906914393-2084146445-2146558855-1000\...\MountPoints2: {82ffa37d-b873-11e3-8c27-ae1e25c6b3f5} - F:\setup.exe
HKU\S-1-5-21-906914393-2084146445-2146558855-1000\...\MountPoints2: {8a80e311-b407-11dd-a75f-001d72cee65b} - C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL F:\.\RECYCLER\UExecute.exe
HKU\S-1-5-21-906914393-2084146445-2146558855-1000\...\MountPoints2: {b244d088-7efb-11e0-acc5-b71fc7f81fa7} - F:\LGAutoRun.exe
HKU\S-1-5-21-906914393-2084146445-2146558855-1000\...\MountPoints2: {bd51fcc2-816b-11e1-8dbe-c02597fd120a} - F:\AutoRun.exe
HKU\S-1-5-21-906914393-2084146445-2146558855-1000\...\MountPoints2: {c0eb2c3d-c70f-11de-bede-806e6f6e6963} - F:\StartVMCLite.exe
ShortcutTarget: Orion.lnk -> C:\Program Files\Convesoft\Orion\Messenger.exe (No File)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.omniboxes.com/?type=hp&ts=14 ... C5811C5811
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.omniboxes.com/web/?type=ds&t ... earchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.omniboxes.com/?type=hp&ts=14 ... C5811C5811
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.omniboxes.com/web/?type=ds&t ... earchTerms}
HKU\S-1-5-21-906914393-2084146445-2146558855-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.omniboxes.com/?type=hp&ts=14 ... C5811C5811
HKU\S-1-5-21-906914393-2084146445-2146558855-1000\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages =
http://www.omniboxes.com/?type=hp&ts=14 ... C5811C5811
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.omniboxes.com/web/?type=ds&t ... earchTerms}
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2015-03-10] (Google Inc.)
BHO: Skype Browser Helper -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll No File
C:\Program Files\Google\Google Toolbar
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll No File
Toolbar: HKLM - No Name - {0BF43445-2F28-4351-9252-17FE6E806AA0} - No File
Toolbar: HKLM - Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll No File
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2015-03-10] (Google Inc.)
Toolbar: HKU\S-1-5-21-906914393-2084146445-2146558855-1000 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2015-03-10] (Google Inc.)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll No File []
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://www.omniboxes.com/?type=sc&ts=14 ... C5811C5811
FF DefaultSearchEngine: omniboxes
FF SearchEngineOrder.3: Bing
FF SelectedSearchEngine: omniboxes
FF Keyword.URL: hxxp://www.bing.com/search?FORM=UP97DF&PC=UP97&q=
StartMenuInternet: FIREFOX.EXE - C:\Program Files\Mozilla Firefox\firefox.exe http://www.omniboxes.com/?type=sc&ts=14 ... C5811C5811
CHR HomePage: Default -> hxxp://www.omniboxes.com/?type=hp&ts=142537903 ... C5811C5811
CHR StartupUrls: Default -> "hxxp://www.omniboxes.com/?type=hp&ts=142537903 ... C5811C5811"
CHR DefaultSearchKeyword: Default -> omniboxes
CHR DefaultSearchURL: Default -> http://www.omniboxes.com/web/?type=ds&t ... earchTerms}
CHR Extension: (GeoGebra) - C:\Users\Mirka\AppData\Local\Google\Chrome\User Data\Default\Extensions\bnbaboaihhkjoaolfnfoablhllahjnee [2014-03-30]
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2013-10-09]
StartMenuInternet: Google Chrome - C:\Program Files\Google\Chrome\Application\chrome.exe http://www.omniboxes.com/?type=sc&ts=14 ... C5811C5811
StartMenuInternet: (HKLM) Opera.exe - C:\Program Files\Opera\Opera.exe http://www.omniboxes.com/?type=sc&ts=14 ... C5811C5811
S2 McNASvc; "c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe"
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\system32\LogConfigTemp.xml
C:\Users\Mirka\AppData\Local\Temp
End
Na ploše máte příliš mnoho dat (>14GB). Přesuňte je do jiného adresáře ve vašem profilu a na plochu dejte jen zástupcě pro snazší přístup. Takové množství dat zpomaluje start PC.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Reklama při procházení Internetu
Dobrý večer posílám požadovaná log po provedení fixu:
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 11-03-2015
Ran by Mirka at 2015-03-11 20:24:15 Run:1
Running from C:\Users\Mirka\Desktop
Loaded Profiles: Mirka (Available profiles: Mirka)
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
Start
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKU\S-1-5-21-906914393-2084146445-2146558855-1000\...\MountPoints2: F - F:\StartVMCLite.exe
HKU\S-1-5-21-906914393-2084146445-2146558855-1000\...\MountPoints2: G - G:\StartVMCLite.exe
HKU\S-1-5-21-906914393-2084146445-2146558855-1000\...\MountPoints2: H - H:\StartVMCLite.exe
HKU\S-1-5-21-906914393-2084146445-2146558855-1000\...\MountPoints2: {192f09f0-fa1c-11e3-94b0-a8bc0da777ee} - G:\setup_vmb_lite.exe /checkApplicationPresence
HKU\S-1-5-21-906914393-2084146445-2146558855-1000\...\MountPoints2: {2008a457-8e70-11de-8a1f-806e6f6e6963} - F:\StartVMCLite.exe
HKU\S-1-5-21-906914393-2084146445-2146558855-1000\...\MountPoints2: {2be597c7-820a-11e1-a7a4-b911ee47faa1} - G:\AutoRun.exe
HKU\S-1-5-21-906914393-2084146445-2146558855-1000\...\MountPoints2: {6dcf74a5-db47-11dd-a7b9-001d72cee65b} - F:\StartVMCLite.exe
HKU\S-1-5-21-906914393-2084146445-2146558855-1000\...\MountPoints2: {6dcf74a6-db47-11dd-a7b9-001d72cee65b} - G:\StartVMCLite.exe
HKU\S-1-5-21-906914393-2084146445-2146558855-1000\...\MountPoints2: {78876db6-9dc8-11dd-a524-001d72cee65b} - F:\StartVMCLite.exe
HKU\S-1-5-21-906914393-2084146445-2146558855-1000\...\MountPoints2: {78876dbc-9dc8-11dd-a524-001d72cee65b} - H:\StartVMCLite.exe
HKU\S-1-5-21-906914393-2084146445-2146558855-1000\...\MountPoints2: {82ffa37d-b873-11e3-8c27-ae1e25c6b3f5} - F:\setup.exe
HKU\S-1-5-21-906914393-2084146445-2146558855-1000\...\MountPoints2: {8a80e311-b407-11dd-a75f-001d72cee65b} - C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL F:\.\RECYCLER\UExecute.exe
HKU\S-1-5-21-906914393-2084146445-2146558855-1000\...\MountPoints2: {b244d088-7efb-11e0-acc5-b71fc7f81fa7} - F:\LGAutoRun.exe
HKU\S-1-5-21-906914393-2084146445-2146558855-1000\...\MountPoints2: {bd51fcc2-816b-11e1-8dbe-c02597fd120a} - F:\AutoRun.exe
HKU\S-1-5-21-906914393-2084146445-2146558855-1000\...\MountPoints2: {c0eb2c3d-c70f-11de-bede-806e6f6e6963} - F:\StartVMCLite.exe
ShortcutTarget: Orion.lnk -> C:\Program Files\Convesoft\Orion\Messenger.exe (No File)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.omniboxes.com/?type=hp&ts=14 ... C5811C5811
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.omniboxes.com/web/?type=ds&t ... 11C5811&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.omniboxes.com/?type=hp&ts=14 ... C5811C5811
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.omniboxes.com/web/?type=ds&t ... 11C5811&q={searchTerms}
HKU\S-1-5-21-906914393-2084146445-2146558855-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.omniboxes.com/?type=hp&ts=14 ... C5811C5811
HKU\S-1-5-21-906914393-2084146445-2146558855-1000\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages =
http://www.omniboxes.com/?type=hp&ts=14 ... C5811C5811
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.omniboxes.com/web/?type=ds&t ... 11C5811&q={searchTerms}
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2015-03-10] (Google Inc.)
BHO: Skype Browser Helper -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll No File
C:\Program Files\Google\Google Toolbar
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll No File
Toolbar: HKLM - No Name - {0BF43445-2F28-4351-9252-17FE6E806AA0} - No File
Toolbar: HKLM - Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll No File
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2015-03-10] (Google Inc.)
Toolbar: HKU\S-1-5-21-906914393-2084146445-2146558855-1000 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2015-03-10] (Google Inc.)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll No File []
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://www.omniboxes.com/?type=sc&ts=14 ... C5811C5811
FF DefaultSearchEngine: omniboxes
FF SearchEngineOrder.3: Bing
FF SelectedSearchEngine: omniboxes
FF Keyword.URL: hxxp://www.bing.com/search?FORM=UP97DF&PC=UP97&q=
StartMenuInternet: FIREFOX.EXE - C:\Program Files\Mozilla Firefox\firefox.exe http://www.omniboxes.com/?type=sc&ts=14 ... C5811C5811
CHR HomePage: Default -> hxxp://www.omniboxes.com/?type=hp&ts=14 ... C5811C5811
CHR StartupUrls: Default -> "hxxp://www.omniboxes.com/?type=hp&ts=142537903 ... C5811C5811"
CHR DefaultSearchKeyword: Default -> omniboxes
CHR DefaultSearchURL: Default -> http://www.omniboxes.com/web/?type=ds&t ... 11C5811&q={searchTerms}
CHR Extension: (GeoGebra) - C:\Users\Mirka\AppData\Local\Google\Chrome\User Data\Default\Extensions\bnbaboaihhkjoaolfnfoablhllahjnee [2014-03-30]
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2013-10-09]
StartMenuInternet: Google Chrome - C:\Program Files\Google\Chrome\Application\chrome.exe http://www.omniboxes.com/?type=sc&ts=14 ... C5811C5811
StartMenuInternet: (HKLM) Opera.exe - C:\Program Files\Opera\Opera.exe http://www.omniboxes.com/?type=sc&ts=14 ... C5811C5811
S2 McNASvc; "c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe"
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\system32\LogConfigTemp.xml
C:\Users\Mirka\AppData\Local\Temp
End
*****************
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched => value deleted successfully.
"HKU\S-1-5-21-906914393-2084146445-2146558855-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\F" => Key deleted successfully.
"HKU\S-1-5-21-906914393-2084146445-2146558855-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\G" => Key deleted successfully.
"HKU\S-1-5-21-906914393-2084146445-2146558855-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\H" => Key deleted successfully.
"HKU\S-1-5-21-906914393-2084146445-2146558855-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{192f09f0-fa1c-11e3-94b0-a8bc0da777ee}" => Key deleted successfully.
HKCR\CLSID\{192f09f0-fa1c-11e3-94b0-a8bc0da777ee} => Key not found.
"HKU\S-1-5-21-906914393-2084146445-2146558855-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{2008a457-8e70-11de-8a1f-806e6f6e6963}" => Key deleted successfully.
HKCR\CLSID\{2008a457-8e70-11de-8a1f-806e6f6e6963} => Key not found.
"HKU\S-1-5-21-906914393-2084146445-2146558855-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{2be597c7-820a-11e1-a7a4-b911ee47faa1}" => Key deleted successfully.
HKCR\CLSID\{2be597c7-820a-11e1-a7a4-b911ee47faa1} => Key not found.
"HKU\S-1-5-21-906914393-2084146445-2146558855-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{6dcf74a5-db47-11dd-a7b9-001d72cee65b}" => Key deleted successfully.
HKCR\CLSID\{6dcf74a5-db47-11dd-a7b9-001d72cee65b} => Key not found.
"HKU\S-1-5-21-906914393-2084146445-2146558855-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{6dcf74a6-db47-11dd-a7b9-001d72cee65b}" => Key deleted successfully.
HKCR\CLSID\{6dcf74a6-db47-11dd-a7b9-001d72cee65b} => Key not found.
"HKU\S-1-5-21-906914393-2084146445-2146558855-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{78876db6-9dc8-11dd-a524-001d72cee65b}" => Key deleted successfully.
HKCR\CLSID\{78876db6-9dc8-11dd-a524-001d72cee65b} => Key not found.
"HKU\S-1-5-21-906914393-2084146445-2146558855-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{78876dbc-9dc8-11dd-a524-001d72cee65b}" => Key deleted successfully.
HKCR\CLSID\{78876dbc-9dc8-11dd-a524-001d72cee65b} => Key not found.
"HKU\S-1-5-21-906914393-2084146445-2146558855-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{82ffa37d-b873-11e3-8c27-ae1e25c6b3f5}" => Key deleted successfully.
HKCR\CLSID\{82ffa37d-b873-11e3-8c27-ae1e25c6b3f5} => Key not found.
"HKU\S-1-5-21-906914393-2084146445-2146558855-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{8a80e311-b407-11dd-a75f-001d72cee65b}" => Key deleted successfully.
HKCR\CLSID\{8a80e311-b407-11dd-a75f-001d72cee65b} => Key not found.
"HKU\S-1-5-21-906914393-2084146445-2146558855-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b244d088-7efb-11e0-acc5-b71fc7f81fa7}" => Key deleted successfully.
HKCR\CLSID\{b244d088-7efb-11e0-acc5-b71fc7f81fa7} => Key not found.
"HKU\S-1-5-21-906914393-2084146445-2146558855-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{bd51fcc2-816b-11e1-8dbe-c02597fd120a}" => Key deleted successfully.
HKCR\CLSID\{bd51fcc2-816b-11e1-8dbe-c02597fd120a} => Key not found.
"HKU\S-1-5-21-906914393-2084146445-2146558855-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c0eb2c3d-c70f-11de-bede-806e6f6e6963}" => Key deleted successfully.
HKCR\CLSID\{c0eb2c3d-c70f-11de-bede-806e6f6e6963} => Key not found.
C:\Program Files\Convesoft\Orion\Messenger.exe not found.
C:\Windows\system32\GroupPolicy\Machine => Moved successfully.
C:\Windows\system32\GroupPolicy\GPT.ini => Moved successfully.
"HKLM\SOFTWARE\Policies\Google" => Key deleted successfully.
HKLM\Software\\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully.
HKLM\Software\\Microsoft\Internet Explorer\Main\\Search Page => Value was restored successfully.
HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Page_URL => Value was restored successfully.
HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Search_URL => Value was restored successfully.
HKU\S-1-5-21-906914393-2084146445-2146558855-1000\Software\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully.
HKU\S-1-5-21-906914393-2084146445-2146558855-1000\Software\Microsoft\Internet Explorer\Main\\Secondary Start Pages => value deleted successfully.
http://www.omniboxes.com/?type=hp&ts=14 ... C5811C5811 => Error: No automatic fix found for this entry.
"HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}" => Key deleted successfully.
HKCR\CLSID\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => Key not found.
HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}" => Key deleted successfully.
"HKCR\CLSID\{AA58ED58-01DD-4d91-8333-CF10577473F7}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}" => Key deleted successfully.
"HKCR\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}" => Key deleted successfully.
C:\Program Files\Google\Google Toolbar => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}" => Key deleted successfully.
"HKCR\CLSID\{DBC80044-A445-435b-BC74-9C25C1C588A9}" => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{0BF43445-2F28-4351-9252-17FE6E806AA0} => value deleted successfully.
HKCR\CLSID\{0BF43445-2F28-4351-9252-17FE6E806AA0} => Key not found.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{5CBE3B7C-1E47-477e-A7DD-396DB0476E29} => value deleted successfully.
"HKCR\CLSID\{5CBE3B7C-1E47-477e-A7DD-396DB0476E29}" => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{2318C2B1-4965-11d4-9B18-009027A5CD4F} => value deleted successfully.
"HKCR\CLSID\{2318C2B1-4965-11d4-9B18-009027A5CD4F}" => Key deleted successfully.
HKU\S-1-5-21-906914393-2084146445-2146558855-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{2318C2B1-4965-11D4-9B18-009027A5CD4F} => value deleted successfully.
HKCR\CLSID\{2318C2B1-4965-11D4-9B18-009027A5CD4F} => Key not found.
"HKCR\PROTOCOLS\Handler\skype-ie-addon-data" => Key deleted successfully.
"HKCR\CLSID\{91774881-D725-4E58-B298-07617B9B86A8}" => Key deleted successfully.
HKLM\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command\\Default => Value was restored successfully.
Firefox DefaultSearchEngine deleted successfully.
Firefox SearchEngineOrder.3 deleted successfully.
Firefox SelectedSearchEngine deleted successfully.
Firefox Keyword.URL deleted successfully.
HKLM\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command\\Default => Value was restored successfully.
Chrome HomePage deleted successfully.
Chrome StartupUrls deleted successfully.
Chrome DefaultSearchKeyword not detected.
Chrome DefaultSearchURL not detected.
C:\Users\Mirka\AppData\Local\Google\Chrome\User Data\Default\Extensions\bnbaboaihhkjoaolfnfoablhllahjnee => Moved successfully.
"HKLM\SOFTWARE\Google\Chrome\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl" => Key deleted successfully.
C:\Program Files\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx => Moved successfully.
HKLM\SOFTWARE\Clients\StartMenuInternet\Google Chrome\shell\open\command\\Default => Value was restored successfully.
HKLM\SOFTWARE\Clients\StartMenuInternet\Opera.exe\shell\open\command\\Default => Value was restored successfully.
McNASvc => Service deleted successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => Moved successfully.
Could not move "C:\Windows\system32\LogConfigTemp.xml" => Scheduled to move on reboot.
"C:\Users\Mirka\AppData\Local\Temp" directory move:
Could not move "C:\Users\Mirka\AppData\Local\Temp" directory. => Scheduled to move on reboot.
=> Result of Scheduled Files to move (Boot Mode: Normal) (Date&Time: 2015-03-11 20:27:14)<=
"C:\Windows\system32\LogConfigTemp.xml" => File could not move.
C:\Users\Mirka\AppData\Local\Temp => Moved successfully.
==== End of Fixlog 20:27:16 ====
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 11-03-2015
Ran by Mirka at 2015-03-11 20:24:15 Run:1
Running from C:\Users\Mirka\Desktop
Loaded Profiles: Mirka (Available profiles: Mirka)
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
Start
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKU\S-1-5-21-906914393-2084146445-2146558855-1000\...\MountPoints2: F - F:\StartVMCLite.exe
HKU\S-1-5-21-906914393-2084146445-2146558855-1000\...\MountPoints2: G - G:\StartVMCLite.exe
HKU\S-1-5-21-906914393-2084146445-2146558855-1000\...\MountPoints2: H - H:\StartVMCLite.exe
HKU\S-1-5-21-906914393-2084146445-2146558855-1000\...\MountPoints2: {192f09f0-fa1c-11e3-94b0-a8bc0da777ee} - G:\setup_vmb_lite.exe /checkApplicationPresence
HKU\S-1-5-21-906914393-2084146445-2146558855-1000\...\MountPoints2: {2008a457-8e70-11de-8a1f-806e6f6e6963} - F:\StartVMCLite.exe
HKU\S-1-5-21-906914393-2084146445-2146558855-1000\...\MountPoints2: {2be597c7-820a-11e1-a7a4-b911ee47faa1} - G:\AutoRun.exe
HKU\S-1-5-21-906914393-2084146445-2146558855-1000\...\MountPoints2: {6dcf74a5-db47-11dd-a7b9-001d72cee65b} - F:\StartVMCLite.exe
HKU\S-1-5-21-906914393-2084146445-2146558855-1000\...\MountPoints2: {6dcf74a6-db47-11dd-a7b9-001d72cee65b} - G:\StartVMCLite.exe
HKU\S-1-5-21-906914393-2084146445-2146558855-1000\...\MountPoints2: {78876db6-9dc8-11dd-a524-001d72cee65b} - F:\StartVMCLite.exe
HKU\S-1-5-21-906914393-2084146445-2146558855-1000\...\MountPoints2: {78876dbc-9dc8-11dd-a524-001d72cee65b} - H:\StartVMCLite.exe
HKU\S-1-5-21-906914393-2084146445-2146558855-1000\...\MountPoints2: {82ffa37d-b873-11e3-8c27-ae1e25c6b3f5} - F:\setup.exe
HKU\S-1-5-21-906914393-2084146445-2146558855-1000\...\MountPoints2: {8a80e311-b407-11dd-a75f-001d72cee65b} - C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL F:\.\RECYCLER\UExecute.exe
HKU\S-1-5-21-906914393-2084146445-2146558855-1000\...\MountPoints2: {b244d088-7efb-11e0-acc5-b71fc7f81fa7} - F:\LGAutoRun.exe
HKU\S-1-5-21-906914393-2084146445-2146558855-1000\...\MountPoints2: {bd51fcc2-816b-11e1-8dbe-c02597fd120a} - F:\AutoRun.exe
HKU\S-1-5-21-906914393-2084146445-2146558855-1000\...\MountPoints2: {c0eb2c3d-c70f-11de-bede-806e6f6e6963} - F:\StartVMCLite.exe
ShortcutTarget: Orion.lnk -> C:\Program Files\Convesoft\Orion\Messenger.exe (No File)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.omniboxes.com/?type=hp&ts=14 ... C5811C5811
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.omniboxes.com/web/?type=ds&t ... 11C5811&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.omniboxes.com/?type=hp&ts=14 ... C5811C5811
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.omniboxes.com/web/?type=ds&t ... 11C5811&q={searchTerms}
HKU\S-1-5-21-906914393-2084146445-2146558855-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.omniboxes.com/?type=hp&ts=14 ... C5811C5811
HKU\S-1-5-21-906914393-2084146445-2146558855-1000\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages =
http://www.omniboxes.com/?type=hp&ts=14 ... C5811C5811
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.omniboxes.com/web/?type=ds&t ... 11C5811&q={searchTerms}
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2015-03-10] (Google Inc.)
BHO: Skype Browser Helper -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll No File
C:\Program Files\Google\Google Toolbar
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll No File
Toolbar: HKLM - No Name - {0BF43445-2F28-4351-9252-17FE6E806AA0} - No File
Toolbar: HKLM - Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll No File
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2015-03-10] (Google Inc.)
Toolbar: HKU\S-1-5-21-906914393-2084146445-2146558855-1000 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2015-03-10] (Google Inc.)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll No File []
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://www.omniboxes.com/?type=sc&ts=14 ... C5811C5811
FF DefaultSearchEngine: omniboxes
FF SearchEngineOrder.3: Bing
FF SelectedSearchEngine: omniboxes
FF Keyword.URL: hxxp://www.bing.com/search?FORM=UP97DF&PC=UP97&q=
StartMenuInternet: FIREFOX.EXE - C:\Program Files\Mozilla Firefox\firefox.exe http://www.omniboxes.com/?type=sc&ts=14 ... C5811C5811
CHR HomePage: Default -> hxxp://www.omniboxes.com/?type=hp&ts=14 ... C5811C5811
CHR StartupUrls: Default -> "hxxp://www.omniboxes.com/?type=hp&ts=142537903 ... C5811C5811"
CHR DefaultSearchKeyword: Default -> omniboxes
CHR DefaultSearchURL: Default -> http://www.omniboxes.com/web/?type=ds&t ... 11C5811&q={searchTerms}
CHR Extension: (GeoGebra) - C:\Users\Mirka\AppData\Local\Google\Chrome\User Data\Default\Extensions\bnbaboaihhkjoaolfnfoablhllahjnee [2014-03-30]
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2013-10-09]
StartMenuInternet: Google Chrome - C:\Program Files\Google\Chrome\Application\chrome.exe http://www.omniboxes.com/?type=sc&ts=14 ... C5811C5811
StartMenuInternet: (HKLM) Opera.exe - C:\Program Files\Opera\Opera.exe http://www.omniboxes.com/?type=sc&ts=14 ... C5811C5811
S2 McNASvc; "c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe"
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\system32\LogConfigTemp.xml
C:\Users\Mirka\AppData\Local\Temp
End
*****************
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched => value deleted successfully.
"HKU\S-1-5-21-906914393-2084146445-2146558855-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\F" => Key deleted successfully.
"HKU\S-1-5-21-906914393-2084146445-2146558855-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\G" => Key deleted successfully.
"HKU\S-1-5-21-906914393-2084146445-2146558855-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\H" => Key deleted successfully.
"HKU\S-1-5-21-906914393-2084146445-2146558855-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{192f09f0-fa1c-11e3-94b0-a8bc0da777ee}" => Key deleted successfully.
HKCR\CLSID\{192f09f0-fa1c-11e3-94b0-a8bc0da777ee} => Key not found.
"HKU\S-1-5-21-906914393-2084146445-2146558855-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{2008a457-8e70-11de-8a1f-806e6f6e6963}" => Key deleted successfully.
HKCR\CLSID\{2008a457-8e70-11de-8a1f-806e6f6e6963} => Key not found.
"HKU\S-1-5-21-906914393-2084146445-2146558855-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{2be597c7-820a-11e1-a7a4-b911ee47faa1}" => Key deleted successfully.
HKCR\CLSID\{2be597c7-820a-11e1-a7a4-b911ee47faa1} => Key not found.
"HKU\S-1-5-21-906914393-2084146445-2146558855-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{6dcf74a5-db47-11dd-a7b9-001d72cee65b}" => Key deleted successfully.
HKCR\CLSID\{6dcf74a5-db47-11dd-a7b9-001d72cee65b} => Key not found.
"HKU\S-1-5-21-906914393-2084146445-2146558855-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{6dcf74a6-db47-11dd-a7b9-001d72cee65b}" => Key deleted successfully.
HKCR\CLSID\{6dcf74a6-db47-11dd-a7b9-001d72cee65b} => Key not found.
"HKU\S-1-5-21-906914393-2084146445-2146558855-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{78876db6-9dc8-11dd-a524-001d72cee65b}" => Key deleted successfully.
HKCR\CLSID\{78876db6-9dc8-11dd-a524-001d72cee65b} => Key not found.
"HKU\S-1-5-21-906914393-2084146445-2146558855-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{78876dbc-9dc8-11dd-a524-001d72cee65b}" => Key deleted successfully.
HKCR\CLSID\{78876dbc-9dc8-11dd-a524-001d72cee65b} => Key not found.
"HKU\S-1-5-21-906914393-2084146445-2146558855-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{82ffa37d-b873-11e3-8c27-ae1e25c6b3f5}" => Key deleted successfully.
HKCR\CLSID\{82ffa37d-b873-11e3-8c27-ae1e25c6b3f5} => Key not found.
"HKU\S-1-5-21-906914393-2084146445-2146558855-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{8a80e311-b407-11dd-a75f-001d72cee65b}" => Key deleted successfully.
HKCR\CLSID\{8a80e311-b407-11dd-a75f-001d72cee65b} => Key not found.
"HKU\S-1-5-21-906914393-2084146445-2146558855-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b244d088-7efb-11e0-acc5-b71fc7f81fa7}" => Key deleted successfully.
HKCR\CLSID\{b244d088-7efb-11e0-acc5-b71fc7f81fa7} => Key not found.
"HKU\S-1-5-21-906914393-2084146445-2146558855-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{bd51fcc2-816b-11e1-8dbe-c02597fd120a}" => Key deleted successfully.
HKCR\CLSID\{bd51fcc2-816b-11e1-8dbe-c02597fd120a} => Key not found.
"HKU\S-1-5-21-906914393-2084146445-2146558855-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c0eb2c3d-c70f-11de-bede-806e6f6e6963}" => Key deleted successfully.
HKCR\CLSID\{c0eb2c3d-c70f-11de-bede-806e6f6e6963} => Key not found.
C:\Program Files\Convesoft\Orion\Messenger.exe not found.
C:\Windows\system32\GroupPolicy\Machine => Moved successfully.
C:\Windows\system32\GroupPolicy\GPT.ini => Moved successfully.
"HKLM\SOFTWARE\Policies\Google" => Key deleted successfully.
HKLM\Software\\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully.
HKLM\Software\\Microsoft\Internet Explorer\Main\\Search Page => Value was restored successfully.
HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Page_URL => Value was restored successfully.
HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Search_URL => Value was restored successfully.
HKU\S-1-5-21-906914393-2084146445-2146558855-1000\Software\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully.
HKU\S-1-5-21-906914393-2084146445-2146558855-1000\Software\Microsoft\Internet Explorer\Main\\Secondary Start Pages => value deleted successfully.
http://www.omniboxes.com/?type=hp&ts=14 ... C5811C5811 => Error: No automatic fix found for this entry.
"HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}" => Key deleted successfully.
HKCR\CLSID\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => Key not found.
HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}" => Key deleted successfully.
"HKCR\CLSID\{AA58ED58-01DD-4d91-8333-CF10577473F7}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}" => Key deleted successfully.
"HKCR\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}" => Key deleted successfully.
C:\Program Files\Google\Google Toolbar => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}" => Key deleted successfully.
"HKCR\CLSID\{DBC80044-A445-435b-BC74-9C25C1C588A9}" => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{0BF43445-2F28-4351-9252-17FE6E806AA0} => value deleted successfully.
HKCR\CLSID\{0BF43445-2F28-4351-9252-17FE6E806AA0} => Key not found.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{5CBE3B7C-1E47-477e-A7DD-396DB0476E29} => value deleted successfully.
"HKCR\CLSID\{5CBE3B7C-1E47-477e-A7DD-396DB0476E29}" => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{2318C2B1-4965-11d4-9B18-009027A5CD4F} => value deleted successfully.
"HKCR\CLSID\{2318C2B1-4965-11d4-9B18-009027A5CD4F}" => Key deleted successfully.
HKU\S-1-5-21-906914393-2084146445-2146558855-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{2318C2B1-4965-11D4-9B18-009027A5CD4F} => value deleted successfully.
HKCR\CLSID\{2318C2B1-4965-11D4-9B18-009027A5CD4F} => Key not found.
"HKCR\PROTOCOLS\Handler\skype-ie-addon-data" => Key deleted successfully.
"HKCR\CLSID\{91774881-D725-4E58-B298-07617B9B86A8}" => Key deleted successfully.
HKLM\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command\\Default => Value was restored successfully.
Firefox DefaultSearchEngine deleted successfully.
Firefox SearchEngineOrder.3 deleted successfully.
Firefox SelectedSearchEngine deleted successfully.
Firefox Keyword.URL deleted successfully.
HKLM\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command\\Default => Value was restored successfully.
Chrome HomePage deleted successfully.
Chrome StartupUrls deleted successfully.
Chrome DefaultSearchKeyword not detected.
Chrome DefaultSearchURL not detected.
C:\Users\Mirka\AppData\Local\Google\Chrome\User Data\Default\Extensions\bnbaboaihhkjoaolfnfoablhllahjnee => Moved successfully.
"HKLM\SOFTWARE\Google\Chrome\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl" => Key deleted successfully.
C:\Program Files\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx => Moved successfully.
HKLM\SOFTWARE\Clients\StartMenuInternet\Google Chrome\shell\open\command\\Default => Value was restored successfully.
HKLM\SOFTWARE\Clients\StartMenuInternet\Opera.exe\shell\open\command\\Default => Value was restored successfully.
McNASvc => Service deleted successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => Moved successfully.
Could not move "C:\Windows\system32\LogConfigTemp.xml" => Scheduled to move on reboot.
"C:\Users\Mirka\AppData\Local\Temp" directory move:
Could not move "C:\Users\Mirka\AppData\Local\Temp" directory. => Scheduled to move on reboot.
=> Result of Scheduled Files to move (Boot Mode: Normal) (Date&Time: 2015-03-11 20:27:14)<=
"C:\Windows\system32\LogConfigTemp.xml" => File could not move.
C:\Users\Mirka\AppData\Local\Temp => Moved successfully.
==== End of Fixlog 20:27:16 ====
-
Rudy
- Site Admin
- Příspěvky: 119677
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Reklama při procházení Internetu
Smazáno. Nastala nějaká změna?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Reklama při procházení Internetu
Dobrý večer ano reklamy již nevyskakují, vypadá to že je problém vyřešen. Děkuji za pomoc
-
Rudy
- Site Admin
- Příspěvky: 119677
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Reklama při procházení Internetu
Rádo se stalo! 
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Přispějete na provoz fóra?