
Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
Jak odstranit Omniboxes - prosím o radu
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Jak odstranit Omniboxes - prosím o radu
Zdravím,
prosím o pomoc: po aktualizaci KMPlayeru se mi v Chrome místo Googlu objevilo jakési Omniboxes, nepomohla ani Revo odinstalace. Teď mi v prohlížeči pořád vyskakují nějaká okna, reklamy, vyhledávací lišty a jiné blbosti... Můžu poprosit o radu, jak se toho zbavit? Předem díky moc a přikládám logy:
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 18-07-2015
Ran by Lubosh (administrator) on POPO-498C751C3E on 18-07-2015 13:56:34
Running from C:\Documents and Settings\Lubosh\Plocha
Loaded Profiles: Lubosh (Available Profiles: Lubosh)
Platform: Systém Microsoft Windows XP Professional Service Pack 3 (X86) OS Language: Čeština
Internet Explorer Version 8 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(DTools LIMITED) C:\Documents and Settings\All Users\Data aplikací\WindowsMangerProtect\ProtectWindowsManager.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Microsoft Corporation) C:\WINDOWS\system32\wbem\unsecapp.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
() C:\Program Files\Common Files\87737dd0-ad90-4193-bd48-336966b8d777\updater.exe
() C:\Documents and Settings\All Users\Data aplikací\87737dd0-ad90-4193-bd48-336966b8d777\plugincontainer.exe
() C:\Documents and Settings\All Users\Data aplikací\87737dd0-ad90-4193-bd48-336966b8d777\plugins\2\Plugin.exe
() C:\Documents and Settings\All Users\Data aplikací\87737dd0-ad90-4193-bd48-336966b8d777\plugins\5\Plugin.exe
() C:\Documents and Settings\All Users\Data aplikací\87737dd0-ad90-4193-bd48-336966b8d777\plugins\8\Plugin.exe
() C:\Documents and Settings\All Users\Data aplikací\87737dd0-ad90-4193-bd48-336966b8d777\plugins\7\Plugin.exe
() C:\Documents and Settings\All Users\Data aplikací\87737dd0-ad90-4193-bd48-336966b8d777\plugins\10\Plugin.exe
() C:\Documents and Settings\All Users\Data aplikací\87737dd0-ad90-4193-bd48-336966b8d777\plugins\3\Plugin.exe
() C:\Documents and Settings\All Users\Data aplikací\87737dd0-ad90-4193-bd48-336966b8d777\plugins\7\Plugin.exe
() C:\Documents and Settings\All Users\Data aplikací\87737dd0-ad90-4193-bd48-336966b8d777\plugins\3\Plugin.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\WINDOWS\system32\wscntfy.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5515496 2015-05-26] (Avast Software s.r.o.)
HKLM\...\Run: [KernelFaultCheck] => %systemroot%\system32\dumprep 0 -k
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [335232 2015-04-10] (Oracle Corporation)
HKU\S-1-5-21-746137067-484763869-839522115-1003\...\Run: [UpdateAdmin] => C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\UpdateAdmin\UpdateAdmin.exe [225552 2014-10-16] (DownloadAdmin)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2015-05-26] (Avast Software s.r.o.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-746137067-484763869-839522115-1003\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?trackid=sp-006
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/search?trackid=s ... earchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dl ... ar=msnhome
HKU\S-1-5-21-746137067-484763869-839522115-1003\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?trackid=sp-006
HKU\S-1-5-21-746137067-484763869-839522115-1003\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/search?trackid=s ... earchTerms}
HKU\S-1-5-21-746137067-484763869-839522115-1003\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.google.com/?trackid=sp-006
HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs: "about:newtab" <======= ATTENTION
SearchScopes: HKLM -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=s ... earchTerms}
SearchScopes: HKLM -> {15C4DF55-4B67-495A-A3D3-A497C4A49EE0} URL = http://search.seznam.cz/?sourceid=quick ... earchTerms}
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.omniboxes.com/web/?type=ds&t ... earchTerms}
SearchScopes: HKLM -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=s ... earchTerms}
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-746137067-484763869-839522115-1003 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=s ... earchTerms}
SearchScopes: HKU\S-1-5-21-746137067-484763869-839522115-1003 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.omniboxes.com/web/?utm_sourc ... earchTerms}
SearchScopes: HKU\S-1-5-21-746137067-484763869-839522115-1003 -> {15C4DF55-4B67-495A-A3D3-A497C4A49EE0} URL = http://www.omniboxes.com/web/?utm_sourc ... earchTerms}
SearchScopes: HKU\S-1-5-21-746137067-484763869-839522115-1003 -> {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = http://www.omniboxes.com/web/?utm_sourc ... earchTerms}
SearchScopes: HKU\S-1-5-21-746137067-484763869-839522115-1003 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.omniboxes.com/web/?utm_sourc ... earchTerms}
SearchScopes: HKU\S-1-5-21-746137067-484763869-839522115-1003 -> {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = http://www.omniboxes.com/web/?utm_sourc ... earchTerms}
SearchScopes: HKU\S-1-5-21-746137067-484763869-839522115-1003 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=s ... earchTerms}
BHO: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23] (Adobe Systems Incorporated)
BHO: Record Page -> {2335267c-dbba-4dd5-a9d0-c4db8e6a75a4} -> C:\Program Files\Record Page\Extensions\2335267c-dbba-4dd5-a9d0-c4db8e6a75a4.dll [2015-07-14] ()
BHO: No Name -> {51D26BB4-4D2C-4AE4-9873-5FF41B6DED1F} -> No File
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2006-10-27] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_45\bin\ssv.dll [2015-07-18] (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-03-26] (Avast Software s.r.o.)
BHO: Adobe PDF Conversion Toolbar Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2012-01-03] (Adobe Systems Incorporated)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-07-18] (Oracle Corporation)
BHO: SmartSelect Class -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2012-01-03] (Adobe Systems Incorporated)
Toolbar: HKLM - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2012-01-03] (Adobe Systems Incorporated)
Toolbar: HKU\S-1-5-21-746137067-484763869-839522115-1003 -> &Adresa - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\WINDOWS\system32\browseui.dll [2014-02-25] (Společnost Microsoft)
DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} http://windowsupdate.microsoft.com/wind ... 6675732765
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll [2006-10-27] (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 213.46.172.36 213.46.172.37
Tcpip\..\Interfaces\{69CC7630-A94B-4A7E-9C7F-48497FC4055A}: [DhcpNameServer] 213.46.172.36 213.46.172.37
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://www.omniboxes.com/?type=sc&ts=14 ... A8F2534976
FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_18_0_0_209.dll [2015-07-14] ()
FF Plugin: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-07-18] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-07-18] (Oracle Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-05] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-05] (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat 10.0\Acrobat\Air\nppdf32.dll [2012-01-03] (Adobe Systems Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-08-05] (Adobe Systems Inc.)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2012-09-20] (Adobe Systems)
FF Plugin: adobe.com/AdobeExManDetect -> C:\Program Files\Adobe\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll [2013-12-02] (Adobe Systems)
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-08-09]
FF HKLM\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn
FF Extension: Adobe Acrobat - Create PDF - C:\Program Files\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn [2014-11-07]
Chrome:
=======
CHR Profile: C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-07-30]
CHR Extension: (Google Drive) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-07-30]
CHR Extension: (YouTube) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-07-30]
CHR Extension: (Google Search) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-07-30]
CHR Extension: (AdBlock) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-12-15]
CHR Extension: (Avast Online Security) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-08-10]
CHR Extension: (Google Wallet) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-07-30]
CHR Extension: (Gmail) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-07-30]
CHR Profile: C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 1
CHR Extension: (No Name) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 1\Extensions\Temp(2) [2015-03-26]
CHR Profile: C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 2
CHR Extension: (No Name) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 2\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-03-26]
CHR Extension: (No Name) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 2\Extensions\aohghmighlieiainnegkcijnfilokake [2015-03-26]
CHR Extension: (Google Drive) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 2\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-07-18]
CHR Extension: (Google Search) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 2\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-03-28]
CHR Extension: (No Name) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 2\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-03-26]
CHR Extension: (AdBlock) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 2\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-04-06]
CHR Extension: (Google Wallet) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-05-15]
CHR Extension: (Gmail) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 2\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-28]
CHR HKLM\...\Chrome\Extension: [bpegkgagfojjbcpkihigfmkojdmmimdf] - No Path Or update_url value
CHR HKLM\...\Chrome\Extension: [ehgldbbpchgpcfagfpfjgoomddhccfgh] - No Path Or update_url value
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-03-26]
StartMenuInternet: chrome.exe - C:\Program Files\Google\Chrome\Application\chrome.exe http://www.omniboxes.com/?type=sc&ts=14 ... A8F2534976
========================== Services (Whitelisted) =================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-05-26] (Avast Software s.r.o.)
R2 Service Mgr RecordPage; C:\Documents and Settings\All Users\Data aplikací\87737dd0-ad90-4193-bd48-336966b8d777\plugincontainer.exe [650504 2015-07-18] ()
S3 SwitchBoard; C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
R2 Update Mgr RecordPage; C:\Program Files\Common Files\87737dd0-ad90-4193-bd48-336966b8d777\updater.exe [572680 2015-07-18] ()
R2 WindowsMangerProtect; C:\Documents and Settings\All Users\Data aplikací\WindowsMangerProtect\ProtectWindowsManager.exe [707240 2015-07-14] (DTools LIMITED) <==== ATTENTION
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R3 aeaudio; C:\WINDOWS\System32\drivers\aeaudio.sys [100224 2003-03-13] (Andrea Electronics Corporation) [File not signed]
R2 aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [24144 2015-05-26] ()
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [74976 2015-05-26] (Avast Software s.r.o.)
R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [55200 2015-05-26] (Avast Software s.r.o.)
R0 aswRvrt; C:\WINDOWS\system32\Drivers\aswRvrt.sys [49904 2015-05-26] ()
R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [787760 2015-05-26] (Avast Software s.r.o.)
R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [428120 2015-06-26] (Avast Software s.r.o.)
R1 aswTdi; C:\WINDOWS\system32\drivers\aswTdi.sys [57888 2015-05-26] (Avast Software s.r.o.)
R0 aswVmm; C:\WINDOWS\system32\Drivers\aswVmm.sys [209048 2015-05-26] ()
R3 b57w2k; C:\WINDOWS\System32\DRIVERS\b57xp32.sys [156160 2006-05-10] (Broadcom Corporation) [File not signed]
S3 massfilter; C:\WINDOWS\System32\drivers\massfilter.sys [9216 2010-02-22] (MBB Incorporated)
R2 npf; C:\WINDOWS\System32\drivers\npf.sys [50704 2010-01-27] (CACE Technologies, Inc.)
R3 smwdm; C:\WINDOWS\System32\drivers\smwdm.sys [578304 2003-05-27] (Analog Devices, Inc.) [File not signed]
U5 ScsiPort; C:\WINDOWS\system32\drivers\scsiport.sys [96384 2008-04-14] (Microsoft Corporation)
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-07-18 13:56 - 2015-07-18 13:57 - 00019083 _____ C:\Documents and Settings\Lubosh\Plocha\FRST.txt
2015-07-18 13:56 - 2015-07-18 13:56 - 00000000 ____D C:\FRST
2015-07-18 13:55 - 2015-07-18 13:55 - 01637376 _____ (Farbar) C:\Documents and Settings\Lubosh\Plocha\FRST.exe
2015-07-18 13:53 - 2015-07-18 13:53 - 00112640 _____ (forum.viry.cz) C:\Documents and Settings\Lubosh\Plocha\Nepotvrzeno 498664.crdownload
2015-07-18 13:50 - 2015-07-18 13:50 - 00015107 _____ C:\WINDOWS\setupapi.log
2015-07-18 13:50 - 2015-07-18 13:50 - 00000000 _____ C:\WINDOWS\setuperr.log
2015-07-18 13:50 - 2015-07-18 13:50 - 00000000 _____ C:\WINDOWS\setupact.log
2015-07-18 12:40 - 2015-07-18 12:40 - 00000000 ____D C:\Program Files\Common Files\Java
2015-07-18 12:28 - 2015-07-18 12:38 - 00096680 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge.dll
2015-07-15 22:58 - 2015-07-18 13:35 - 00001612 _____ C:\WINDOWS\wmsetup.log
2015-07-14 23:11 - 2015-07-18 13:11 - 00000346 _____ C:\WINDOWS\Tasks\UpdateAdmin.job
2015-07-14 23:11 - 2015-07-18 12:59 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\87737dd0-ad90-4193-bd48-336966b8d777
2015-07-14 23:11 - 2015-07-18 12:53 - 00000000 ____D C:\Program Files\Common Files\87737dd0-ad90-4193-bd48-336966b8d777
2015-07-14 23:11 - 2015-07-14 23:11 - 00000000 ____D C:\Program Files\Record Page
2015-07-14 23:11 - 2015-07-14 23:11 - 00000000 ____D C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\UpdateAdmin
2015-07-14 23:11 - 2015-07-14 23:11 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\UpdateAdmin
2015-07-14 23:11 - 2015-07-14 23:11 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\WindowsMangerProtect
2015-07-14 23:11 - 2015-07-14 23:11 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\IHProtectUpDate
2015-07-14 23:11 - 2015-07-14 23:11 - 00000000 _____ C:\WINDOWS\prleth.sys
2015-07-14 23:11 - 2015-07-14 23:11 - 00000000 _____ C:\WINDOWS\hgfs.sys
2015-07-01 09:41 - 2015-07-01 09:41 - 00000308 _____ C:\Documents and Settings\Lubosh\Plocha\stažený soubor
2015-06-25 02:13 - 2015-07-14 20:13 - 18524336 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerInstaller.exe
2015-06-24 00:07 - 2015-06-24 00:07 - 00033794 _____ C:\Documents and Settings\Lubosh\Plocha\video-1435096526.mp4.mp4
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-07-18 13:57 - 2015-04-21 20:33 - 00000000 ____D C:\Documents and Settings\Lubosh\Local Settings\temp
2015-07-18 13:56 - 2014-07-29 23:22 - 00000000 ____D C:\Documents and Settings\Lubosh\Plocha
2015-07-18 13:35 - 2014-07-29 23:16 - 01841254 _____ C:\WINDOWS\WindowsUpdate.log
2015-07-18 13:14 - 2014-07-29 23:22 - 00000000 __RHD C:\Documents and Settings\Lubosh\Data aplikací
2015-07-18 13:13 - 2014-08-28 21:04 - 00000914 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-07-18 12:38 - 2014-08-10 22:16 - 00146432 _____ (Oracle Corporation) C:\WINDOWS\system32\javacpl.cpl
2015-07-18 12:34 - 2014-08-10 22:13 - 00000000 ____D C:\Program Files\Java
2015-07-18 11:51 - 2014-08-09 16:39 - 00000364 ____H C:\WINDOWS\Tasks\avast! Emergency Update.job
2015-07-18 11:45 - 2014-08-09 16:29 - 00000315 _____ C:\WINDOWS\wiadebug.log
2015-07-18 11:45 - 2014-08-09 16:29 - 00000049 _____ C:\WINDOWS\wiaservc.log
2015-07-18 11:45 - 2014-07-29 23:20 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-07-18 02:22 - 2014-07-29 23:22 - 00000178 ___SH C:\Documents and Settings\Lubosh\ntuser.ini
2015-07-18 02:22 - 2014-07-29 23:20 - 00032486 _____ C:\WINDOWS\SchedLgU.Txt
2015-07-18 02:21 - 2014-07-30 05:50 - 00000000 ____D C:\Documents and Settings\Lubosh\Data aplikací\vlc
2015-07-18 02:00 - 2014-08-09 16:30 - 00000344 _____ C:\WINDOWS\Tasks\AdobeAAMUpdater-1.0-POPO-498C751C3E-Lubosh.job
2015-07-18 02:00 - 2014-08-09 16:19 - 00000000 ____D C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Adobe
2015-07-18 00:25 - 2007-08-02 14:00 - 00012984 _____ C:\WINDOWS\system32\wpa.dbl
2015-07-16 14:39 - 2014-07-31 05:09 - 00001549 _____ C:\Documents and Settings\Lubosh\Plocha\KMP Games.lnk
2015-07-16 14:22 - 2014-07-31 05:33 - 00000000 ____D C:\WINDOWS\system32\MRT
2015-07-16 01:23 - 2014-08-16 17:12 - 00000000 ___RD C:\Documents and Settings\Lubosh\Dokumenty\Filmy
2015-07-15 18:29 - 2014-07-30 01:06 - 00000000 ___RD C:\Documents and Settings\All Users\Nabídka Start
2015-07-14 23:14 - 2015-01-04 00:01 - 00000522 _____ C:\Documents and Settings\Lubosh\Plocha\KMPlayer.lnk
2015-07-14 23:14 - 2015-01-04 00:00 - 00000000 ____D C:\KMPlayer
2015-07-14 23:11 - 2014-07-30 01:06 - 00000000 __RHD C:\Documents and Settings\All Users\Data aplikací
2015-07-14 23:11 - 2014-07-30 01:06 - 00000000 ___RD C:\Documents and Settings\All Users\Nabídka Start\Programy
2015-07-14 23:11 - 2014-07-29 23:22 - 00000000 ___HD C:\Documents and Settings\Lubosh\Local Settings\Data aplikací
2015-07-14 23:10 - 2014-07-30 00:30 - 00002095 _____ C:\Documents and Settings\All Users\Plocha\Google Chrome.lnk
2015-07-14 23:10 - 2014-07-29 23:22 - 00001085 _____ C:\Documents and Settings\Lubosh\Nabídka Start\Programy\Internet Explorer.lnk
2015-07-14 22:39 - 2014-07-30 21:33 - 00000000 ____D C:\Documents and Settings\Lubosh\Data aplikací\uTorrent
2015-07-14 20:13 - 2014-08-01 10:11 - 00778416 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2015-07-14 20:13 - 2014-08-01 10:11 - 00142512 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
2015-07-12 21:52 - 2014-07-30 05:45 - 00100352 _____ C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-07-12 21:37 - 2014-08-12 09:48 - 00000000 ____D C:\WINDOWS\Minidump
2015-07-12 21:36 - 2014-07-29 23:22 - 00000000 ____D C:\Documents and Settings\Lubosh
2015-07-03 08:49 - 2014-07-31 05:32 - 127070192 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-06-27 22:38 - 2014-07-29 23:22 - 00000000 ___RD C:\Documents and Settings\Lubosh\Dokumenty\Hudba
2015-06-26 18:24 - 2014-08-09 16:39 - 00428120 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\Drivers\aswsp.sys
==================== Files in the root of some directories =======
2014-07-30 05:45 - 2015-07-12 21:52 - 0100352 _____ () C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-08-05 12:46 - 2014-08-05 12:46 - 0000878 ____C () C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\recently-used.xbel
Some files in TEMP:
====================
C:\Documents and Settings\Lubosh\Local Settings\temp\KMPAddedCode_KMP_adpageopen_Step1.exe
C:\Documents and Settings\Lubosh\Local Settings\temp\KMP_3.9.1.138.exe
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed
==================== End of log ============================
prosím o pomoc: po aktualizaci KMPlayeru se mi v Chrome místo Googlu objevilo jakési Omniboxes, nepomohla ani Revo odinstalace. Teď mi v prohlížeči pořád vyskakují nějaká okna, reklamy, vyhledávací lišty a jiné blbosti... Můžu poprosit o radu, jak se toho zbavit? Předem díky moc a přikládám logy:
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 18-07-2015
Ran by Lubosh (administrator) on POPO-498C751C3E on 18-07-2015 13:56:34
Running from C:\Documents and Settings\Lubosh\Plocha
Loaded Profiles: Lubosh (Available Profiles: Lubosh)
Platform: Systém Microsoft Windows XP Professional Service Pack 3 (X86) OS Language: Čeština
Internet Explorer Version 8 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(DTools LIMITED) C:\Documents and Settings\All Users\Data aplikací\WindowsMangerProtect\ProtectWindowsManager.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Microsoft Corporation) C:\WINDOWS\system32\wbem\unsecapp.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
() C:\Program Files\Common Files\87737dd0-ad90-4193-bd48-336966b8d777\updater.exe
() C:\Documents and Settings\All Users\Data aplikací\87737dd0-ad90-4193-bd48-336966b8d777\plugincontainer.exe
() C:\Documents and Settings\All Users\Data aplikací\87737dd0-ad90-4193-bd48-336966b8d777\plugins\2\Plugin.exe
() C:\Documents and Settings\All Users\Data aplikací\87737dd0-ad90-4193-bd48-336966b8d777\plugins\5\Plugin.exe
() C:\Documents and Settings\All Users\Data aplikací\87737dd0-ad90-4193-bd48-336966b8d777\plugins\8\Plugin.exe
() C:\Documents and Settings\All Users\Data aplikací\87737dd0-ad90-4193-bd48-336966b8d777\plugins\7\Plugin.exe
() C:\Documents and Settings\All Users\Data aplikací\87737dd0-ad90-4193-bd48-336966b8d777\plugins\10\Plugin.exe
() C:\Documents and Settings\All Users\Data aplikací\87737dd0-ad90-4193-bd48-336966b8d777\plugins\3\Plugin.exe
() C:\Documents and Settings\All Users\Data aplikací\87737dd0-ad90-4193-bd48-336966b8d777\plugins\7\Plugin.exe
() C:\Documents and Settings\All Users\Data aplikací\87737dd0-ad90-4193-bd48-336966b8d777\plugins\3\Plugin.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\WINDOWS\system32\wscntfy.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5515496 2015-05-26] (Avast Software s.r.o.)
HKLM\...\Run: [KernelFaultCheck] => %systemroot%\system32\dumprep 0 -k
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [335232 2015-04-10] (Oracle Corporation)
HKU\S-1-5-21-746137067-484763869-839522115-1003\...\Run: [UpdateAdmin] => C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\UpdateAdmin\UpdateAdmin.exe [225552 2014-10-16] (DownloadAdmin)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2015-05-26] (Avast Software s.r.o.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-746137067-484763869-839522115-1003\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?trackid=sp-006
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/search?trackid=s ... earchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dl ... ar=msnhome
HKU\S-1-5-21-746137067-484763869-839522115-1003\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?trackid=sp-006
HKU\S-1-5-21-746137067-484763869-839522115-1003\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/search?trackid=s ... earchTerms}
HKU\S-1-5-21-746137067-484763869-839522115-1003\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.google.com/?trackid=sp-006
HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs: "about:newtab" <======= ATTENTION
SearchScopes: HKLM -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=s ... earchTerms}
SearchScopes: HKLM -> {15C4DF55-4B67-495A-A3D3-A497C4A49EE0} URL = http://search.seznam.cz/?sourceid=quick ... earchTerms}
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.omniboxes.com/web/?type=ds&t ... earchTerms}
SearchScopes: HKLM -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=s ... earchTerms}
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-746137067-484763869-839522115-1003 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=s ... earchTerms}
SearchScopes: HKU\S-1-5-21-746137067-484763869-839522115-1003 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.omniboxes.com/web/?utm_sourc ... earchTerms}
SearchScopes: HKU\S-1-5-21-746137067-484763869-839522115-1003 -> {15C4DF55-4B67-495A-A3D3-A497C4A49EE0} URL = http://www.omniboxes.com/web/?utm_sourc ... earchTerms}
SearchScopes: HKU\S-1-5-21-746137067-484763869-839522115-1003 -> {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = http://www.omniboxes.com/web/?utm_sourc ... earchTerms}
SearchScopes: HKU\S-1-5-21-746137067-484763869-839522115-1003 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.omniboxes.com/web/?utm_sourc ... earchTerms}
SearchScopes: HKU\S-1-5-21-746137067-484763869-839522115-1003 -> {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = http://www.omniboxes.com/web/?utm_sourc ... earchTerms}
SearchScopes: HKU\S-1-5-21-746137067-484763869-839522115-1003 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=s ... earchTerms}
BHO: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23] (Adobe Systems Incorporated)
BHO: Record Page -> {2335267c-dbba-4dd5-a9d0-c4db8e6a75a4} -> C:\Program Files\Record Page\Extensions\2335267c-dbba-4dd5-a9d0-c4db8e6a75a4.dll [2015-07-14] ()
BHO: No Name -> {51D26BB4-4D2C-4AE4-9873-5FF41B6DED1F} -> No File
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2006-10-27] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_45\bin\ssv.dll [2015-07-18] (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-03-26] (Avast Software s.r.o.)
BHO: Adobe PDF Conversion Toolbar Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2012-01-03] (Adobe Systems Incorporated)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-07-18] (Oracle Corporation)
BHO: SmartSelect Class -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2012-01-03] (Adobe Systems Incorporated)
Toolbar: HKLM - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2012-01-03] (Adobe Systems Incorporated)
Toolbar: HKU\S-1-5-21-746137067-484763869-839522115-1003 -> &Adresa - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\WINDOWS\system32\browseui.dll [2014-02-25] (Společnost Microsoft)
DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} http://windowsupdate.microsoft.com/wind ... 6675732765
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll [2006-10-27] (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 213.46.172.36 213.46.172.37
Tcpip\..\Interfaces\{69CC7630-A94B-4A7E-9C7F-48497FC4055A}: [DhcpNameServer] 213.46.172.36 213.46.172.37
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://www.omniboxes.com/?type=sc&ts=14 ... A8F2534976
FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_18_0_0_209.dll [2015-07-14] ()
FF Plugin: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-07-18] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-07-18] (Oracle Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-05] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-05] (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat 10.0\Acrobat\Air\nppdf32.dll [2012-01-03] (Adobe Systems Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-08-05] (Adobe Systems Inc.)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2012-09-20] (Adobe Systems)
FF Plugin: adobe.com/AdobeExManDetect -> C:\Program Files\Adobe\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll [2013-12-02] (Adobe Systems)
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-08-09]
FF HKLM\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn
FF Extension: Adobe Acrobat - Create PDF - C:\Program Files\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn [2014-11-07]
Chrome:
=======
CHR Profile: C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-07-30]
CHR Extension: (Google Drive) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-07-30]
CHR Extension: (YouTube) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-07-30]
CHR Extension: (Google Search) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-07-30]
CHR Extension: (AdBlock) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-12-15]
CHR Extension: (Avast Online Security) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-08-10]
CHR Extension: (Google Wallet) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-07-30]
CHR Extension: (Gmail) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-07-30]
CHR Profile: C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 1
CHR Extension: (No Name) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 1\Extensions\Temp(2) [2015-03-26]
CHR Profile: C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 2
CHR Extension: (No Name) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 2\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-03-26]
CHR Extension: (No Name) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 2\Extensions\aohghmighlieiainnegkcijnfilokake [2015-03-26]
CHR Extension: (Google Drive) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 2\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-07-18]
CHR Extension: (Google Search) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 2\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-03-28]
CHR Extension: (No Name) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 2\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-03-26]
CHR Extension: (AdBlock) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 2\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-04-06]
CHR Extension: (Google Wallet) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-05-15]
CHR Extension: (Gmail) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 2\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-28]
CHR HKLM\...\Chrome\Extension: [bpegkgagfojjbcpkihigfmkojdmmimdf] - No Path Or update_url value
CHR HKLM\...\Chrome\Extension: [ehgldbbpchgpcfagfpfjgoomddhccfgh] - No Path Or update_url value
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-03-26]
StartMenuInternet: chrome.exe - C:\Program Files\Google\Chrome\Application\chrome.exe http://www.omniboxes.com/?type=sc&ts=14 ... A8F2534976
========================== Services (Whitelisted) =================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-05-26] (Avast Software s.r.o.)
R2 Service Mgr RecordPage; C:\Documents and Settings\All Users\Data aplikací\87737dd0-ad90-4193-bd48-336966b8d777\plugincontainer.exe [650504 2015-07-18] ()
S3 SwitchBoard; C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
R2 Update Mgr RecordPage; C:\Program Files\Common Files\87737dd0-ad90-4193-bd48-336966b8d777\updater.exe [572680 2015-07-18] ()
R2 WindowsMangerProtect; C:\Documents and Settings\All Users\Data aplikací\WindowsMangerProtect\ProtectWindowsManager.exe [707240 2015-07-14] (DTools LIMITED) <==== ATTENTION
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R3 aeaudio; C:\WINDOWS\System32\drivers\aeaudio.sys [100224 2003-03-13] (Andrea Electronics Corporation) [File not signed]
R2 aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [24144 2015-05-26] ()
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [74976 2015-05-26] (Avast Software s.r.o.)
R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [55200 2015-05-26] (Avast Software s.r.o.)
R0 aswRvrt; C:\WINDOWS\system32\Drivers\aswRvrt.sys [49904 2015-05-26] ()
R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [787760 2015-05-26] (Avast Software s.r.o.)
R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [428120 2015-06-26] (Avast Software s.r.o.)
R1 aswTdi; C:\WINDOWS\system32\drivers\aswTdi.sys [57888 2015-05-26] (Avast Software s.r.o.)
R0 aswVmm; C:\WINDOWS\system32\Drivers\aswVmm.sys [209048 2015-05-26] ()
R3 b57w2k; C:\WINDOWS\System32\DRIVERS\b57xp32.sys [156160 2006-05-10] (Broadcom Corporation) [File not signed]
S3 massfilter; C:\WINDOWS\System32\drivers\massfilter.sys [9216 2010-02-22] (MBB Incorporated)
R2 npf; C:\WINDOWS\System32\drivers\npf.sys [50704 2010-01-27] (CACE Technologies, Inc.)
R3 smwdm; C:\WINDOWS\System32\drivers\smwdm.sys [578304 2003-05-27] (Analog Devices, Inc.) [File not signed]
U5 ScsiPort; C:\WINDOWS\system32\drivers\scsiport.sys [96384 2008-04-14] (Microsoft Corporation)
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-07-18 13:56 - 2015-07-18 13:57 - 00019083 _____ C:\Documents and Settings\Lubosh\Plocha\FRST.txt
2015-07-18 13:56 - 2015-07-18 13:56 - 00000000 ____D C:\FRST
2015-07-18 13:55 - 2015-07-18 13:55 - 01637376 _____ (Farbar) C:\Documents and Settings\Lubosh\Plocha\FRST.exe
2015-07-18 13:53 - 2015-07-18 13:53 - 00112640 _____ (forum.viry.cz) C:\Documents and Settings\Lubosh\Plocha\Nepotvrzeno 498664.crdownload
2015-07-18 13:50 - 2015-07-18 13:50 - 00015107 _____ C:\WINDOWS\setupapi.log
2015-07-18 13:50 - 2015-07-18 13:50 - 00000000 _____ C:\WINDOWS\setuperr.log
2015-07-18 13:50 - 2015-07-18 13:50 - 00000000 _____ C:\WINDOWS\setupact.log
2015-07-18 12:40 - 2015-07-18 12:40 - 00000000 ____D C:\Program Files\Common Files\Java
2015-07-18 12:28 - 2015-07-18 12:38 - 00096680 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge.dll
2015-07-15 22:58 - 2015-07-18 13:35 - 00001612 _____ C:\WINDOWS\wmsetup.log
2015-07-14 23:11 - 2015-07-18 13:11 - 00000346 _____ C:\WINDOWS\Tasks\UpdateAdmin.job
2015-07-14 23:11 - 2015-07-18 12:59 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\87737dd0-ad90-4193-bd48-336966b8d777
2015-07-14 23:11 - 2015-07-18 12:53 - 00000000 ____D C:\Program Files\Common Files\87737dd0-ad90-4193-bd48-336966b8d777
2015-07-14 23:11 - 2015-07-14 23:11 - 00000000 ____D C:\Program Files\Record Page
2015-07-14 23:11 - 2015-07-14 23:11 - 00000000 ____D C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\UpdateAdmin
2015-07-14 23:11 - 2015-07-14 23:11 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\UpdateAdmin
2015-07-14 23:11 - 2015-07-14 23:11 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\WindowsMangerProtect
2015-07-14 23:11 - 2015-07-14 23:11 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\IHProtectUpDate
2015-07-14 23:11 - 2015-07-14 23:11 - 00000000 _____ C:\WINDOWS\prleth.sys
2015-07-14 23:11 - 2015-07-14 23:11 - 00000000 _____ C:\WINDOWS\hgfs.sys
2015-07-01 09:41 - 2015-07-01 09:41 - 00000308 _____ C:\Documents and Settings\Lubosh\Plocha\stažený soubor
2015-06-25 02:13 - 2015-07-14 20:13 - 18524336 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerInstaller.exe
2015-06-24 00:07 - 2015-06-24 00:07 - 00033794 _____ C:\Documents and Settings\Lubosh\Plocha\video-1435096526.mp4.mp4
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-07-18 13:57 - 2015-04-21 20:33 - 00000000 ____D C:\Documents and Settings\Lubosh\Local Settings\temp
2015-07-18 13:56 - 2014-07-29 23:22 - 00000000 ____D C:\Documents and Settings\Lubosh\Plocha
2015-07-18 13:35 - 2014-07-29 23:16 - 01841254 _____ C:\WINDOWS\WindowsUpdate.log
2015-07-18 13:14 - 2014-07-29 23:22 - 00000000 __RHD C:\Documents and Settings\Lubosh\Data aplikací
2015-07-18 13:13 - 2014-08-28 21:04 - 00000914 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-07-18 12:38 - 2014-08-10 22:16 - 00146432 _____ (Oracle Corporation) C:\WINDOWS\system32\javacpl.cpl
2015-07-18 12:34 - 2014-08-10 22:13 - 00000000 ____D C:\Program Files\Java
2015-07-18 11:51 - 2014-08-09 16:39 - 00000364 ____H C:\WINDOWS\Tasks\avast! Emergency Update.job
2015-07-18 11:45 - 2014-08-09 16:29 - 00000315 _____ C:\WINDOWS\wiadebug.log
2015-07-18 11:45 - 2014-08-09 16:29 - 00000049 _____ C:\WINDOWS\wiaservc.log
2015-07-18 11:45 - 2014-07-29 23:20 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-07-18 02:22 - 2014-07-29 23:22 - 00000178 ___SH C:\Documents and Settings\Lubosh\ntuser.ini
2015-07-18 02:22 - 2014-07-29 23:20 - 00032486 _____ C:\WINDOWS\SchedLgU.Txt
2015-07-18 02:21 - 2014-07-30 05:50 - 00000000 ____D C:\Documents and Settings\Lubosh\Data aplikací\vlc
2015-07-18 02:00 - 2014-08-09 16:30 - 00000344 _____ C:\WINDOWS\Tasks\AdobeAAMUpdater-1.0-POPO-498C751C3E-Lubosh.job
2015-07-18 02:00 - 2014-08-09 16:19 - 00000000 ____D C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Adobe
2015-07-18 00:25 - 2007-08-02 14:00 - 00012984 _____ C:\WINDOWS\system32\wpa.dbl
2015-07-16 14:39 - 2014-07-31 05:09 - 00001549 _____ C:\Documents and Settings\Lubosh\Plocha\KMP Games.lnk
2015-07-16 14:22 - 2014-07-31 05:33 - 00000000 ____D C:\WINDOWS\system32\MRT
2015-07-16 01:23 - 2014-08-16 17:12 - 00000000 ___RD C:\Documents and Settings\Lubosh\Dokumenty\Filmy
2015-07-15 18:29 - 2014-07-30 01:06 - 00000000 ___RD C:\Documents and Settings\All Users\Nabídka Start
2015-07-14 23:14 - 2015-01-04 00:01 - 00000522 _____ C:\Documents and Settings\Lubosh\Plocha\KMPlayer.lnk
2015-07-14 23:14 - 2015-01-04 00:00 - 00000000 ____D C:\KMPlayer
2015-07-14 23:11 - 2014-07-30 01:06 - 00000000 __RHD C:\Documents and Settings\All Users\Data aplikací
2015-07-14 23:11 - 2014-07-30 01:06 - 00000000 ___RD C:\Documents and Settings\All Users\Nabídka Start\Programy
2015-07-14 23:11 - 2014-07-29 23:22 - 00000000 ___HD C:\Documents and Settings\Lubosh\Local Settings\Data aplikací
2015-07-14 23:10 - 2014-07-30 00:30 - 00002095 _____ C:\Documents and Settings\All Users\Plocha\Google Chrome.lnk
2015-07-14 23:10 - 2014-07-29 23:22 - 00001085 _____ C:\Documents and Settings\Lubosh\Nabídka Start\Programy\Internet Explorer.lnk
2015-07-14 22:39 - 2014-07-30 21:33 - 00000000 ____D C:\Documents and Settings\Lubosh\Data aplikací\uTorrent
2015-07-14 20:13 - 2014-08-01 10:11 - 00778416 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2015-07-14 20:13 - 2014-08-01 10:11 - 00142512 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
2015-07-12 21:52 - 2014-07-30 05:45 - 00100352 _____ C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-07-12 21:37 - 2014-08-12 09:48 - 00000000 ____D C:\WINDOWS\Minidump
2015-07-12 21:36 - 2014-07-29 23:22 - 00000000 ____D C:\Documents and Settings\Lubosh
2015-07-03 08:49 - 2014-07-31 05:32 - 127070192 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-06-27 22:38 - 2014-07-29 23:22 - 00000000 ___RD C:\Documents and Settings\Lubosh\Dokumenty\Hudba
2015-06-26 18:24 - 2014-08-09 16:39 - 00428120 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\Drivers\aswsp.sys
==================== Files in the root of some directories =======
2014-07-30 05:45 - 2015-07-12 21:52 - 0100352 _____ () C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-08-05 12:46 - 2014-08-05 12:46 - 0000878 ____C () C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\recently-used.xbel
Some files in TEMP:
====================
C:\Documents and Settings\Lubosh\Local Settings\temp\KMPAddedCode_KMP_adpageopen_Step1.exe
C:\Documents and Settings\Lubosh\Local Settings\temp\KMP_3.9.1.138.exe
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed
==================== End of log ============================
- Přílohy
-
- Addition.zip
- (7.28 KiB) Staženo 44 x
Naposledy upravil(a) Trasheek dne 18 črc 2015 13:10, celkem upraveno 2 x.
Re: Jak odstranit Omniboxes - prosím o radu
Zdravim
Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
- Ulozte nejlepe na plochu
- Ukoncete vsechny programy
- Po spusteni probehne stazeni databaze
- Kliknete na Scan a nasledne Clean
- Probehne oprava, restart PC a pak se objevi log, pripadne bude ulozen ve slozce c:\AdwCleaner\AdwCleaner[S?].txt, ten sem vlozte
Re: Jak odstranit Omniboxes - prosím o radu
Okna Record Page Ads stále vyskakují, přikládám log:
# AdwCleaner v4.200 - Log vytvooen 18/07/2015 v 17:51:54
# Aktualizováno 29/03/2015 by Xplode
# Databáze : 2015-07-15.1 [Server]
# Operaení system : Microsoft Windows XP Service Pack 3 (x86)
# Uživatelské jméno : Lubosh - POPO-498C751C3E
# Spuštino z : C:\Documents and Settings\Lubosh\Plocha\adwcleaner_4.200.exe
# Nastavení : Eištiní
***** [ Služby ] *****
[#] Služba Smazáno : WindowsMangerProtect
[#] Služba Smazáno : Service Mgr RecordPage
[#] Služba Smazáno : Update Mgr RecordPage
***** [ Soubory / Složky ] *****
Složka Smazáno : C:\Documents and Settings\All Users\Data aplikací\WindowsMangerProtect
Složka Smazáno : C:\Documents and Settings\All Users\Data aplikací\IHProtectUpDate
Složka Smazáno : C:\Documents and Settings\All Users\Data aplikací\87737dd0-ad90-4193-bd48-336966b8d777
Složka Smazáno : C:\Documents and Settings\All Users\Nabídka Start\Programy\UpdateAdmin
Složka Smazáno : C:\Program Files\Record Page
Složka Smazáno : C:\Program Files\Common Files\87737dd0-ad90-4193-bd48-336966b8d777
Složka Smazáno : C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\UpdateAdmin
***** [ Naplánované úlohy ] *****
Úloha Smazáno : UpdateAdmin
***** [ Zástupci ] *****
Zástupce Vyléeeno : C:\Documents and Settings\All Users\Plocha\Google Chrome.lnk
Zástupce Vyléeeno : C:\Documents and Settings\All Users\Nabídka Start\Programy\Google Chrome\Google Chrome.lnk
Zástupce Vyléeeno : C:\Documents and Settings\Lubosh\Nabídka Start\Programy\Internet Explorer.lnk
Zástupce Vyléeeno : C:\Documents and Settings\Lubosh\Nabídka Start\Programy\Příslušenství\Systémové nástroje\Internet Explorer (bez doplňků).lnk
Zástupce Vyléeeno : C:\Documents and Settings\Lubosh\Data aplikací\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
Zástupce Vyléeeno : C:\Documents and Settings\Lubosh\Data aplikací\Microsoft\Internet Explorer\Quick Launch\Spustit prohlížeč Internet Explorer.lnk
***** [ Registry ] *****
Klíe Smazáno : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WindowsMangerProtect
Hodnota Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [UpdateAdmin]
Klíe Smazáno : HKLM\SOFTWARE\Classes\CLSID\{B853E835-9F24-4F4B-B55C-E554D15CCCD2}
Klíe Smazáno : HKLM\SOFTWARE\Classes\CLSID\{F83D1872-D9FF-47F8-B5A0-49CC51E24EE8}
Klíe Smazáno : HKLM\SOFTWARE\Classes\CLSID\{2335267C-DBBA-4DD5-A9D0-C4DB8E6A75A4}
Klíe Smazáno : HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}
Klíe Smazáno : HKLM\SOFTWARE\Classes\Interface\{D1611ACC-4B10-4B34-8CDE-0AE7B2A270A6}
Klíe Smazáno : HKLM\SOFTWARE\Classes\TypeLib\{1FCDF527-B10C-481D-B214-B09EEA106124}
Klíe Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{51D26BB4-4D2C-4AE4-9873-5FF41B6DED1F}
Klíe Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2335267C-DBBA-4DD5-A9D0-C4DB8E6A75A4}
Klíe Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{51D26BB4-4D2C-4AE4-9873-5FF41B6DED1F}
Data Obnoveno : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command
Data Obnoveno : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Google Chrome\shell\open\command
Data Obnoveno : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\chrome.exe\shell\open\command
Klíe Smazáno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
Klíe Smazáno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{15C4DF55-4B67-495A-A3D3-A497C4A49EE0}
Klíe Smazáno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}
Klíe Smazáno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Klíe Smazáno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{E733165D-CBCF-4FDA-883E-ADEF965B476C}
Klíe Smazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Klíe Smazáno : HKCU\Software\APN PIP
Klíe Smazáno : HKCU\Software\AskPartnerNetwork
Klíe Smazáno : HKCU\Software\HomeTab
Klíe Smazáno : HKCU\Software\simplytech
Klíe Smazáno : HKCU\Software\WajIEnhance
Klíe Smazáno : HKCU\Software\TNT2
Klíe Smazáno : HKCU\Software\WajIntEnhance
Klíe Smazáno : HKCU\Software\SearchProtectWS
Klíe Smazáno : HKCU\Software\Linkey
Klíe Smazáno : HKCU\Software\DownloadAdmin
Klíe Smazáno : HKCU\Software\Kromtech
Klíe Smazáno : HKLM\SOFTWARE\AskPartnerNetwork
Klíe Smazáno : HKLM\SOFTWARE\Conduit
Klíe Smazáno : HKLM\SOFTWARE\Iminent
Klíe Smazáno : HKLM\SOFTWARE\SearchProtect
Klíe Smazáno : HKLM\SOFTWARE\SupDp
Klíe Smazáno : HKLM\SOFTWARE\SupTab
Klíe Smazáno : HKLM\SOFTWARE\supWindowsMangerProtect
Klíe Smazáno : HKLM\SOFTWARE\IHProtect
Klíe Smazáno : HKLM\SOFTWARE\WajIntEnhance
Klíe Smazáno : HKLM\SOFTWARE\omniboxesSoftware
Klíe Smazáno : HKLM\SOFTWARE\SpeedBit
Klíe Smazáno : HKLM\SOFTWARE\AIM Toolbar
Klíe Smazáno : HKLM\SOFTWARE\searchult
Klíe Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\IMBoosterARP
Klíe Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\IminentToolbar
Klíe Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect
Klíe Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\WajIntEnhance
Klíe Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Vosteran.com
Klíe Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Linkey
Klíe Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IMBoosterARP
Klíe Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IminentToolbar
Klíe Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect
Klíe Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WajIntEnhance
Klíe Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Vosteran.com
Klíe Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Linkey
Klíe Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Record Page
Klíe Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{07B4B423-E4DA-47D1-8327-B589EB4BEB58}
***** [ Prohlížeee ] *****
-\\ Internet Explorer v8.0.6001.18702
Nastavení Obnoveno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Search [SearchAssistant]
Nastavení Obnoveno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Search [CustomizeSearch]
-\\ Google Chrome v43.0.2357.134
*************************
AdwCleaner[R1].txt - [7760 bytu] - [18/07/2015 17:50:24]
AdwCleaner[S1].txt - [6616 bytu] - [18/07/2015 17:51:54]
########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [6674 bytu] ##########
# AdwCleaner v4.200 - Log vytvooen 18/07/2015 v 17:51:54
# Aktualizováno 29/03/2015 by Xplode
# Databáze : 2015-07-15.1 [Server]
# Operaení system : Microsoft Windows XP Service Pack 3 (x86)
# Uživatelské jméno : Lubosh - POPO-498C751C3E
# Spuštino z : C:\Documents and Settings\Lubosh\Plocha\adwcleaner_4.200.exe
# Nastavení : Eištiní
***** [ Služby ] *****
[#] Služba Smazáno : WindowsMangerProtect
[#] Služba Smazáno : Service Mgr RecordPage
[#] Služba Smazáno : Update Mgr RecordPage
***** [ Soubory / Složky ] *****
Složka Smazáno : C:\Documents and Settings\All Users\Data aplikací\WindowsMangerProtect
Složka Smazáno : C:\Documents and Settings\All Users\Data aplikací\IHProtectUpDate
Složka Smazáno : C:\Documents and Settings\All Users\Data aplikací\87737dd0-ad90-4193-bd48-336966b8d777
Složka Smazáno : C:\Documents and Settings\All Users\Nabídka Start\Programy\UpdateAdmin
Složka Smazáno : C:\Program Files\Record Page
Složka Smazáno : C:\Program Files\Common Files\87737dd0-ad90-4193-bd48-336966b8d777
Složka Smazáno : C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\UpdateAdmin
***** [ Naplánované úlohy ] *****
Úloha Smazáno : UpdateAdmin
***** [ Zástupci ] *****
Zástupce Vyléeeno : C:\Documents and Settings\All Users\Plocha\Google Chrome.lnk
Zástupce Vyléeeno : C:\Documents and Settings\All Users\Nabídka Start\Programy\Google Chrome\Google Chrome.lnk
Zástupce Vyléeeno : C:\Documents and Settings\Lubosh\Nabídka Start\Programy\Internet Explorer.lnk
Zástupce Vyléeeno : C:\Documents and Settings\Lubosh\Nabídka Start\Programy\Příslušenství\Systémové nástroje\Internet Explorer (bez doplňků).lnk
Zástupce Vyléeeno : C:\Documents and Settings\Lubosh\Data aplikací\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
Zástupce Vyléeeno : C:\Documents and Settings\Lubosh\Data aplikací\Microsoft\Internet Explorer\Quick Launch\Spustit prohlížeč Internet Explorer.lnk
***** [ Registry ] *****
Klíe Smazáno : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WindowsMangerProtect
Hodnota Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [UpdateAdmin]
Klíe Smazáno : HKLM\SOFTWARE\Classes\CLSID\{B853E835-9F24-4F4B-B55C-E554D15CCCD2}
Klíe Smazáno : HKLM\SOFTWARE\Classes\CLSID\{F83D1872-D9FF-47F8-B5A0-49CC51E24EE8}
Klíe Smazáno : HKLM\SOFTWARE\Classes\CLSID\{2335267C-DBBA-4DD5-A9D0-C4DB8E6A75A4}
Klíe Smazáno : HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}
Klíe Smazáno : HKLM\SOFTWARE\Classes\Interface\{D1611ACC-4B10-4B34-8CDE-0AE7B2A270A6}
Klíe Smazáno : HKLM\SOFTWARE\Classes\TypeLib\{1FCDF527-B10C-481D-B214-B09EEA106124}
Klíe Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{51D26BB4-4D2C-4AE4-9873-5FF41B6DED1F}
Klíe Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2335267C-DBBA-4DD5-A9D0-C4DB8E6A75A4}
Klíe Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{51D26BB4-4D2C-4AE4-9873-5FF41B6DED1F}
Data Obnoveno : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command
Data Obnoveno : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Google Chrome\shell\open\command
Data Obnoveno : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\chrome.exe\shell\open\command
Klíe Smazáno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
Klíe Smazáno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{15C4DF55-4B67-495A-A3D3-A497C4A49EE0}
Klíe Smazáno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}
Klíe Smazáno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Klíe Smazáno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{E733165D-CBCF-4FDA-883E-ADEF965B476C}
Klíe Smazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Klíe Smazáno : HKCU\Software\APN PIP
Klíe Smazáno : HKCU\Software\AskPartnerNetwork
Klíe Smazáno : HKCU\Software\HomeTab
Klíe Smazáno : HKCU\Software\simplytech
Klíe Smazáno : HKCU\Software\WajIEnhance
Klíe Smazáno : HKCU\Software\TNT2
Klíe Smazáno : HKCU\Software\WajIntEnhance
Klíe Smazáno : HKCU\Software\SearchProtectWS
Klíe Smazáno : HKCU\Software\Linkey
Klíe Smazáno : HKCU\Software\DownloadAdmin
Klíe Smazáno : HKCU\Software\Kromtech
Klíe Smazáno : HKLM\SOFTWARE\AskPartnerNetwork
Klíe Smazáno : HKLM\SOFTWARE\Conduit
Klíe Smazáno : HKLM\SOFTWARE\Iminent
Klíe Smazáno : HKLM\SOFTWARE\SearchProtect
Klíe Smazáno : HKLM\SOFTWARE\SupDp
Klíe Smazáno : HKLM\SOFTWARE\SupTab
Klíe Smazáno : HKLM\SOFTWARE\supWindowsMangerProtect
Klíe Smazáno : HKLM\SOFTWARE\IHProtect
Klíe Smazáno : HKLM\SOFTWARE\WajIntEnhance
Klíe Smazáno : HKLM\SOFTWARE\omniboxesSoftware
Klíe Smazáno : HKLM\SOFTWARE\SpeedBit
Klíe Smazáno : HKLM\SOFTWARE\AIM Toolbar
Klíe Smazáno : HKLM\SOFTWARE\searchult
Klíe Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\IMBoosterARP
Klíe Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\IminentToolbar
Klíe Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect
Klíe Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\WajIntEnhance
Klíe Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Vosteran.com
Klíe Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Linkey
Klíe Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IMBoosterARP
Klíe Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IminentToolbar
Klíe Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect
Klíe Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WajIntEnhance
Klíe Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Vosteran.com
Klíe Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Linkey
Klíe Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Record Page
Klíe Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{07B4B423-E4DA-47D1-8327-B589EB4BEB58}
***** [ Prohlížeee ] *****
-\\ Internet Explorer v8.0.6001.18702
Nastavení Obnoveno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Search [SearchAssistant]
Nastavení Obnoveno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Search [CustomizeSearch]
-\\ Google Chrome v43.0.2357.134
*************************
AdwCleaner[R1].txt - [7760 bytu] - [18/07/2015 17:50:24]
AdwCleaner[S1].txt - [6616 bytu] - [18/07/2015 17:51:54]
########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [6674 bytu] ##########
Re: Jak odstranit Omniboxes - prosím o radu
- Pokud pouzivate Win Vista ci W7, kliknete na Zoek pravym a dejte Run As Administrator ci Spustit jako spravce
- Do okna vlozte skript nize
Kód: Vybrat vše
autoclean; resethosts; emptyclsid; IEdefaults; FFdefaults; CHRdefaults; emptyIEcache; emptyFFcache; emptyCHRcache; emptyalltemp; emptyflash; emptyjava; emptyrecycle.bin;- Nasledne kliknete na Run Script
- PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem
Re: Jak odstranit Omniboxes - prosím o radu
Reklama bohužel stále prudí, přikládám screen a log:
Zoek.exe v5.0.0.0 Updated 04-May-2015
Tool run by Lubosh on so 18.07.2015 at 19:00:52,53.
Systém Microsoft Windows XP Professional 5.1.2600 Service Pack 3 x86
Running in: Normal Mode Internet Access Detected
Launched: C:\Documents and Settings\Lubosh\Plocha\zoek.exe [Scan all users] [Script inserted]
==== System Restore Info ======================
18.7.2015 19:02:07 Zoek.exe System Restore Point Created Successfully.
==== Reset Hosts File ======================
# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host
127.0.0.1 localhost
==== Empty Folders Check ======================
C:\Program Files\DsNET Corp deleted successfully
C:\Program Files\GUM8F.tmp deleted successfully
C:\Program Files\Online Services deleted successfully
C:\Documents and Settings\All Users\Nabídka Start\Programy\T-Mobile deleted successfully
C:\DOCUME~1\ALLUSE~1\DATAAP~1\Desktop deleted successfully
C:\DOCUME~1\ALLUSE~1\DATAAP~1\Freemake deleted successfully
C:\DOCUME~1\ALLUSE~1\DATAAP~1\regid.1986-12.com.adobe deleted successfully
C:\Documents and Settings\Lubosh\Data aplikací\Dropbox deleted successfully
C:\Documents and Settings\Lubosh\Data aplikací\Media Player Classic deleted successfully
C:\Documents and Settings\Lubosh\Data aplikací\MMFApplications deleted successfully
C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\WMTools Downloaded Files deleted successfully
==== Deleting CLSID Registry Keys ======================
HKEY_USERS\S-1-5-21-746137067-484763869-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{e9e8eb35-ff77-455d-b677-91e5e4fc06c2} deleted successfully
HKEY_USERS\S-1-5-21-746137067-484763869-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{e9e8eb35-ff77-455d-b677-91e5e4fc06c2} deleted successfully
==== Deleting CLSID Registry Values ======================
==== Deleting Services ======================
==== Deleting Files \ Folders ======================
C:\Program Files\DsNET Corp not found
C:\Program Files\GUM8F.tmp not found
C:\Program Files\Online Services not found
C:\Program Files\ComPlus Applications deleted
C:\Program Files\WindowsUpdate deleted
C:\Program Files\Crack Adobe Photoshop Cs5 32 a 64 bit verze 100% funkcni+navod deleted
C:\Program Files\Universal Document Converter deleted
C:\Documents and Settings\Lubosh\Plocha\VDownloader.exe deleted
==== Firefox Extensions Registry ======================
[HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions]
"web2pdfextension@web2pdf.adobedotcom"="C:\Program Files\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn" [07.11.2014 20:53]
==== Chromium Look ======================
Google Chrome Version: 43.0.2357.134
HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
bpegkgagfojjbcpkihigfmkojdmmimdf - No path found[]
ehgldbbpchgpcfagfpfjgoomddhccfgh - No path found[]
gomekmidlodglbbmalcneegieacbdmki - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx[26.03.2015 21:27]
AdBlock - Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom
Avast Online Security - Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki
AdBlock - Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 2\Extensions\gighmmpiobklfepjocnamgkkbiglidom
==== Chromium Startpages ======================
C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 2\Preferences
10A4E7C322DB11D783032AB497323ACA4A6DB0569B990BED351BC13C"},"sync":{"remaining_rollback_tries":"50C1AAE800374194969F35A000F8C1B05D2AC0AC470D194EC778CC9B8E318AF2"}},"super_mac":"55CDB3B165EB4EE75F607E5CCD3F7D58D234BFAC36A0231737B89A9F4E35FBC8"},"session":{"restore_on_startup":5,"startup_urls":["http://www.omniboxes.com/?type=hp&ts=14 ... A8F2534976"]},"sync":{"remaining_rollback_tries":0}}
==== Chromium Fix ======================
C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 2\Local Storage\http_www.omniboxes.com_0.localstorage deleted successfully
C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 2\Local Storage\http_www.omniboxes.com_0.localstorage-journal deleted successfully
C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 2\Local Storage\http_pstatic.kingtopdeals.com_0.localstorage deleted successfully
C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 2\Local Storage\http_pstatic.kingtopdeals.com_0.localstorage-journal deleted successfully
==== Set IE to Default ======================
Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="https://www.google.com/?trackid=sp-006"
"Search Page"="https://www.google.com/search?trackid=s ... earchTerms}"
"Search Bar"="https://www.google.com/?trackid=sp-006"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Search Page"="https://www.google.com/search?trackid=s ... earchTerms}"
"Start Page"="https://www.google.com/?trackid=sp-006"
"Search Bar"="https://www.google.com/?trackid=sp-006"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search]
"SearchAssistant"="http://www.google.com"
"CustomizeSearch"="http://www.google.com"
New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Bar"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Start Page"="https://www.google.com/?trackid=sp-006"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Bar"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
==== All HKCU SearchScopes ======================
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
{012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTer ... ORM=IE8SRC"
{E9410C70-B6AE-41FF-AB71-32F4B279EA5F} Google Url="https://www.google.com/search?trackid=s ... earchTerms}"
==== Reset Google Chrome ======================
C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 1\Preferences was reset successfully
C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 1\Secure Preferences was reset successfully
C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 2\Preferences was reset successfully
C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 2\Secure Preferences was reset successfully
C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Web Data was reset successfully
C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 1\Web Data was reset successfully
C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 2\Web Data was reset successfully
C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 2\Web Data-journal was reset successfully
==== Empty IE Cache ======================
C:\Documents and Settings\LocalService\Local Settings\temp\Temporary Internet Files\Content.IE5 emptied successfully
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5 emptied successfully
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot
C:\Documents and Settings\Lubosh\Local Settings\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot
==== Empty FireFox Cache ======================
No FireFox Profiles found
==== Empty Chrome Cache ======================
C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Cache emptied successfully
C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 1\Cache emptied successfully
C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 2\Cache emptied successfully
==== Empty All Flash Cache ======================
Flash Cache Emptied Successfully
==== Empty All Java Cache ======================
Java Cache cleared successfully
==== C:\zoek_backup content ======================
==== Empty Temp Folders ======================
C:\Documents and Settings\Default User\Local Settings\temp emptied successfully
C:\Documents and Settings\LocalService\Local Settings\temp emptied successfully
C:\Documents and Settings\Lubosh\Local Settings\temp will be emptied at reboot
C:\Documents and Settings\NetworkService\Local Settings\temp emptied successfully
C:\WINDOWS\Temp will be emptied at reboot
==== After Reboot ======================
==== Empty Temp Folders ======================
C:\WINDOWS\Temp successfully emptied
C:\DOCUME~1\Lubosh\LOCALS~1\Temp successfully emptied
==== Empty Recycle Bin ======================
C:\RECYCLER successfully emptied
==== Deleting Files / Folders ======================
"C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat" not found
"C:\Documents and Settings\Lubosh\Local Settings\Temporary Internet Files\Content.IE5\index.dat" not found
==== EOF on so 18.07.2015 at 19:51:55,85 ======================
Zoek.exe v5.0.0.0 Updated 04-May-2015
Tool run by Lubosh on so 18.07.2015 at 19:00:52,53.
Systém Microsoft Windows XP Professional 5.1.2600 Service Pack 3 x86
Running in: Normal Mode Internet Access Detected
Launched: C:\Documents and Settings\Lubosh\Plocha\zoek.exe [Scan all users] [Script inserted]
==== System Restore Info ======================
18.7.2015 19:02:07 Zoek.exe System Restore Point Created Successfully.
==== Reset Hosts File ======================
# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host
127.0.0.1 localhost
==== Empty Folders Check ======================
C:\Program Files\DsNET Corp deleted successfully
C:\Program Files\GUM8F.tmp deleted successfully
C:\Program Files\Online Services deleted successfully
C:\Documents and Settings\All Users\Nabídka Start\Programy\T-Mobile deleted successfully
C:\DOCUME~1\ALLUSE~1\DATAAP~1\Desktop deleted successfully
C:\DOCUME~1\ALLUSE~1\DATAAP~1\Freemake deleted successfully
C:\DOCUME~1\ALLUSE~1\DATAAP~1\regid.1986-12.com.adobe deleted successfully
C:\Documents and Settings\Lubosh\Data aplikací\Dropbox deleted successfully
C:\Documents and Settings\Lubosh\Data aplikací\Media Player Classic deleted successfully
C:\Documents and Settings\Lubosh\Data aplikací\MMFApplications deleted successfully
C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\WMTools Downloaded Files deleted successfully
==== Deleting CLSID Registry Keys ======================
HKEY_USERS\S-1-5-21-746137067-484763869-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{e9e8eb35-ff77-455d-b677-91e5e4fc06c2} deleted successfully
HKEY_USERS\S-1-5-21-746137067-484763869-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{e9e8eb35-ff77-455d-b677-91e5e4fc06c2} deleted successfully
==== Deleting CLSID Registry Values ======================
==== Deleting Services ======================
==== Deleting Files \ Folders ======================
C:\Program Files\DsNET Corp not found
C:\Program Files\GUM8F.tmp not found
C:\Program Files\Online Services not found
C:\Program Files\ComPlus Applications deleted
C:\Program Files\WindowsUpdate deleted
C:\Program Files\Crack Adobe Photoshop Cs5 32 a 64 bit verze 100% funkcni+navod deleted
C:\Program Files\Universal Document Converter deleted
C:\Documents and Settings\Lubosh\Plocha\VDownloader.exe deleted
==== Firefox Extensions Registry ======================
[HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions]
"web2pdfextension@web2pdf.adobedotcom"="C:\Program Files\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn" [07.11.2014 20:53]
==== Chromium Look ======================
Google Chrome Version: 43.0.2357.134
HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
bpegkgagfojjbcpkihigfmkojdmmimdf - No path found[]
ehgldbbpchgpcfagfpfjgoomddhccfgh - No path found[]
gomekmidlodglbbmalcneegieacbdmki - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx[26.03.2015 21:27]
AdBlock - Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom
Avast Online Security - Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki
AdBlock - Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 2\Extensions\gighmmpiobklfepjocnamgkkbiglidom
==== Chromium Startpages ======================
C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 2\Preferences
10A4E7C322DB11D783032AB497323ACA4A6DB0569B990BED351BC13C"},"sync":{"remaining_rollback_tries":"50C1AAE800374194969F35A000F8C1B05D2AC0AC470D194EC778CC9B8E318AF2"}},"super_mac":"55CDB3B165EB4EE75F607E5CCD3F7D58D234BFAC36A0231737B89A9F4E35FBC8"},"session":{"restore_on_startup":5,"startup_urls":["http://www.omniboxes.com/?type=hp&ts=14 ... A8F2534976"]},"sync":{"remaining_rollback_tries":0}}
==== Chromium Fix ======================
C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 2\Local Storage\http_www.omniboxes.com_0.localstorage deleted successfully
C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 2\Local Storage\http_www.omniboxes.com_0.localstorage-journal deleted successfully
C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 2\Local Storage\http_pstatic.kingtopdeals.com_0.localstorage deleted successfully
C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 2\Local Storage\http_pstatic.kingtopdeals.com_0.localstorage-journal deleted successfully
==== Set IE to Default ======================
Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="https://www.google.com/?trackid=sp-006"
"Search Page"="https://www.google.com/search?trackid=s ... earchTerms}"
"Search Bar"="https://www.google.com/?trackid=sp-006"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Search Page"="https://www.google.com/search?trackid=s ... earchTerms}"
"Start Page"="https://www.google.com/?trackid=sp-006"
"Search Bar"="https://www.google.com/?trackid=sp-006"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search]
"SearchAssistant"="http://www.google.com"
"CustomizeSearch"="http://www.google.com"
New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Bar"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Start Page"="https://www.google.com/?trackid=sp-006"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Bar"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
==== All HKCU SearchScopes ======================
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
{012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTer ... ORM=IE8SRC"
{E9410C70-B6AE-41FF-AB71-32F4B279EA5F} Google Url="https://www.google.com/search?trackid=s ... earchTerms}"
==== Reset Google Chrome ======================
C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 1\Preferences was reset successfully
C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 1\Secure Preferences was reset successfully
C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 2\Preferences was reset successfully
C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 2\Secure Preferences was reset successfully
C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Web Data was reset successfully
C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 1\Web Data was reset successfully
C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 2\Web Data was reset successfully
C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 2\Web Data-journal was reset successfully
==== Empty IE Cache ======================
C:\Documents and Settings\LocalService\Local Settings\temp\Temporary Internet Files\Content.IE5 emptied successfully
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5 emptied successfully
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot
C:\Documents and Settings\Lubosh\Local Settings\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot
==== Empty FireFox Cache ======================
No FireFox Profiles found
==== Empty Chrome Cache ======================
C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Cache emptied successfully
C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 1\Cache emptied successfully
C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 2\Cache emptied successfully
==== Empty All Flash Cache ======================
Flash Cache Emptied Successfully
==== Empty All Java Cache ======================
Java Cache cleared successfully
==== C:\zoek_backup content ======================
==== Empty Temp Folders ======================
C:\Documents and Settings\Default User\Local Settings\temp emptied successfully
C:\Documents and Settings\LocalService\Local Settings\temp emptied successfully
C:\Documents and Settings\Lubosh\Local Settings\temp will be emptied at reboot
C:\Documents and Settings\NetworkService\Local Settings\temp emptied successfully
C:\WINDOWS\Temp will be emptied at reboot
==== After Reboot ======================
==== Empty Temp Folders ======================
C:\WINDOWS\Temp successfully emptied
C:\DOCUME~1\Lubosh\LOCALS~1\Temp successfully emptied
==== Empty Recycle Bin ======================
C:\RECYCLER successfully emptied
==== Deleting Files / Folders ======================
"C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat" not found
"C:\Documents and Settings\Lubosh\Local Settings\Temporary Internet Files\Content.IE5\index.dat" not found
==== EOF on so 18.07.2015 at 19:51:55,85 ======================
- Přílohy
-
- screen.jpg (423.72 KiB) Zobrazeno 1703 x
Re: Jak odstranit Omniboxes - prosím o radu
Poprosim o novy log z FRST
Re: Jak odstranit Omniboxes - prosím o radu
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 18-07-2015
Ran by Lubosh (administrator) on POPO-498C751C3E on 20-07-2015 17:09:32
Running from C:\Documents and Settings\Lubosh\Plocha
Loaded Profiles: Lubosh (Available Profiles: Lubosh)
Platform: Systém Microsoft Windows XP Professional Service Pack 3 (X86) OS Language: Čeština
Internet Explorer Version 8 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\WINDOWS\system32\wbem\unsecapp.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\WINDOWS\system32\wscntfy.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5515496 2015-05-26] (Avast Software s.r.o.)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [335232 2015-04-10] (Oracle Corporation)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2015-05-26] (Avast Software s.r.o.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-746137067-484763869-839522115-1003\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dl ... ar=msnhome
HKU\S-1-5-21-746137067-484763869-839522115-1003\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?trackid=sp-006
HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs: "about:newtab" <======= ATTENTION
SearchScopes: HKLM -> {15C4DF55-4B67-495A-A3D3-A497C4A49EE0} URL = http://search.seznam.cz/?sourceid=quick ... earchTerms}
SearchScopes: HKLM -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=s ... earchTerms}
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-746137067-484763869-839522115-1003 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-746137067-484763869-839522115-1003 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=s ... earchTerms}
BHO: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23] (Adobe Systems Incorporated)
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2006-10-27] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_45\bin\ssv.dll [2015-07-18] (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-03-26] (Avast Software s.r.o.)
BHO: Adobe PDF Conversion Toolbar Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2012-01-03] (Adobe Systems Incorporated)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-07-18] (Oracle Corporation)
BHO: SmartSelect Class -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2012-01-03] (Adobe Systems Incorporated)
Toolbar: HKLM - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2012-01-03] (Adobe Systems Incorporated)
Toolbar: HKU\S-1-5-21-746137067-484763869-839522115-1003 -> &Adresa - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\WINDOWS\system32\browseui.dll [2014-02-25] (Společnost Microsoft)
DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} http://windowsupdate.microsoft.com/wind ... 6675732765
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll [2006-10-27] (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 213.46.172.36 213.46.172.37
Tcpip\..\Interfaces\{69CC7630-A94B-4A7E-9C7F-48497FC4055A}: [DhcpNameServer] 213.46.172.36 213.46.172.37
FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_18_0_0_209.dll [2015-07-14] ()
FF Plugin: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-07-18] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-07-18] (Oracle Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-05] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-05] (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat 10.0\Acrobat\Air\nppdf32.dll [2012-01-03] (Adobe Systems Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-08-05] (Adobe Systems Inc.)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2012-09-20] (Adobe Systems)
FF Plugin: adobe.com/AdobeExManDetect -> C:\Program Files\Adobe\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll [2013-12-02] (Adobe Systems)
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-08-09]
FF HKLM\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn
FF Extension: Adobe Acrobat - Create PDF - C:\Program Files\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn [2014-11-07]
Chrome:
=======
CHR Profile: C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-07-30]
CHR Extension: (Google Drive) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-07-30]
CHR Extension: (YouTube) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-07-30]
CHR Extension: (Google Search) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-07-30]
CHR Extension: (AdBlock) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-12-15]
CHR Extension: (Avast Online Security) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-08-10]
CHR Extension: (Google Wallet) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-07-30]
CHR Extension: (Gmail) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-07-30]
CHR Profile: C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 1
CHR Extension: (No Name) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 1\Extensions\Temp(2) [2015-03-26]
CHR Profile: C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 2
CHR Extension: (Google Slides) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 2\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-03-26]
CHR Extension: (Google Docs) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 2\Extensions\aohghmighlieiainnegkcijnfilokake [2015-03-26]
CHR Extension: (Google Drive) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 2\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-07-18]
CHR Extension: (YouTube) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 2\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-07-18]
CHR Extension: (Google Search) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 2\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-03-28]
CHR Extension: (Google Sheets) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 2\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-03-26]
CHR Extension: (AdBlock) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 2\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-07-19]
CHR Extension: (Avast Online Security) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 2\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-07-18]
CHR Extension: (Google Wallet) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-05-15]
CHR Extension: (Gmail) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 2\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-28]
CHR HKLM\...\Chrome\Extension: [bpegkgagfojjbcpkihigfmkojdmmimdf] - No Path Or update_url value
CHR HKLM\...\Chrome\Extension: [ehgldbbpchgpcfagfpfjgoomddhccfgh] - No Path Or update_url value
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-03-26]
========================== Services (Whitelisted) =================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-05-26] (Avast Software s.r.o.)
S3 SwitchBoard; C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R3 aeaudio; C:\WINDOWS\System32\drivers\aeaudio.sys [100224 2003-03-13] (Andrea Electronics Corporation) [File not signed]
R2 aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [24144 2015-05-26] ()
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [74976 2015-05-26] (Avast Software s.r.o.)
R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [55200 2015-05-26] (Avast Software s.r.o.)
R0 aswRvrt; C:\WINDOWS\system32\Drivers\aswRvrt.sys [49904 2015-05-26] ()
R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [787760 2015-05-26] (Avast Software s.r.o.)
R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [428120 2015-06-26] (Avast Software s.r.o.)
R1 aswTdi; C:\WINDOWS\system32\drivers\aswTdi.sys [57888 2015-05-26] (Avast Software s.r.o.)
R0 aswVmm; C:\WINDOWS\system32\Drivers\aswVmm.sys [209048 2015-05-26] ()
R3 b57w2k; C:\WINDOWS\System32\DRIVERS\b57xp32.sys [156160 2006-05-10] (Broadcom Corporation) [File not signed]
S3 massfilter; C:\WINDOWS\System32\drivers\massfilter.sys [9216 2010-02-22] (MBB Incorporated)
R2 npf; C:\WINDOWS\System32\drivers\npf.sys [50704 2010-01-27] (CACE Technologies, Inc.)
R3 smwdm; C:\WINDOWS\System32\drivers\smwdm.sys [578304 2003-05-27] (Analog Devices, Inc.) [File not signed]
U5 ScsiPort; C:\WINDOWS\system32\drivers\scsiport.sys [96384 2008-04-14] (Microsoft Corporation)
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-07-18 19:50 - 2015-07-20 17:10 - 00000000 ____D C:\Documents and Settings\Lubosh\Local Settings\Temp
2015-07-18 19:50 - 2015-07-18 19:50 - 00000000 ____D C:\Documents and Settings\NetworkService\Local Settings\temp
2015-07-18 19:50 - 2015-07-18 19:50 - 00000000 ____D C:\Documents and Settings\LocalService\Local Settings\temp
2015-07-18 19:50 - 2015-07-18 19:50 - 00000000 ____D C:\Documents and Settings\Default User\Local Settings\temp
2015-07-18 19:50 - 2015-07-18 19:00 - 00024064 _____ C:\WINDOWS\zoek-delete.exe
2015-07-18 19:02 - 2015-07-18 19:51 - 00010651 _____ C:\zoek-results.log
2015-07-18 19:00 - 2015-07-18 19:25 - 00000000 ____D C:\zoek_backup
2015-07-18 18:37 - 2015-07-18 18:37 - 01308672 _____ C:\Documents and Settings\Lubosh\Plocha\zoek.exe
2015-07-18 17:50 - 2015-07-18 17:52 - 00000000 ____D C:\AdwCleaner
2015-07-18 14:06 - 2015-07-18 14:06 - 00007459 _____ C:\Documents and Settings\Lubosh\Plocha\Addition.zip
2015-07-18 13:57 - 2015-07-18 13:58 - 00036678 _____ C:\Documents and Settings\Lubosh\Plocha\Addition.txt
2015-07-18 13:56 - 2015-07-20 17:10 - 00014448 _____ C:\Documents and Settings\Lubosh\Plocha\FRST.txt
2015-07-18 13:56 - 2015-07-20 17:09 - 00000000 ____D C:\FRST
2015-07-18 13:55 - 2015-07-18 13:55 - 01637376 _____ (Farbar) C:\Documents and Settings\Lubosh\Plocha\FRST.exe
2015-07-18 13:50 - 2015-07-18 13:50 - 00015107 _____ C:\WINDOWS\setupapi.log
2015-07-18 13:50 - 2015-07-18 13:50 - 00000000 _____ C:\WINDOWS\setuperr.log
2015-07-18 13:50 - 2015-07-18 13:50 - 00000000 _____ C:\WINDOWS\setupact.log
2015-07-18 12:40 - 2015-07-18 12:40 - 00000000 ____D C:\Program Files\Common Files\Java
2015-07-18 12:28 - 2015-07-18 12:38 - 00096680 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge.dll
2015-07-15 22:58 - 2015-07-18 13:35 - 00001612 _____ C:\WINDOWS\wmsetup.log
2015-07-14 23:11 - 2015-07-14 23:11 - 00000000 _____ C:\WINDOWS\prleth.sys
2015-07-14 23:11 - 2015-07-14 23:11 - 00000000 _____ C:\WINDOWS\hgfs.sys
2015-06-25 02:13 - 2015-07-14 20:13 - 18524336 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerInstaller.exe
2015-06-24 00:07 - 2015-06-24 00:07 - 00033794 _____ C:\Documents and Settings\Lubosh\Plocha\video-1435096526.mp4.mp4
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-07-20 17:07 - 2014-07-30 21:33 - 00000000 ____D C:\Documents and Settings\Lubosh\Data aplikací\uTorrent
2015-07-20 16:13 - 2014-08-28 21:04 - 00000914 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-07-20 16:05 - 2014-07-30 05:50 - 00000000 ____D C:\Documents and Settings\Lubosh\Data aplikací\vlc
2015-07-20 16:02 - 2014-07-30 05:45 - 00100352 _____ C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-07-20 11:55 - 2014-07-29 23:16 - 01878720 _____ C:\WINDOWS\WindowsUpdate.log
2015-07-20 11:54 - 2014-08-09 16:39 - 00000364 ____H C:\WINDOWS\Tasks\avast! Emergency Update.job
2015-07-20 11:54 - 2014-08-09 16:29 - 00000314 _____ C:\WINDOWS\wiadebug.log
2015-07-20 11:54 - 2014-08-09 16:29 - 00000049 _____ C:\WINDOWS\wiaservc.log
2015-07-20 11:53 - 2014-07-29 23:20 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-07-20 02:33 - 2014-07-29 23:22 - 00000178 ___SH C:\Documents and Settings\Lubosh\ntuser.ini
2015-07-20 02:33 - 2014-07-29 23:20 - 00032584 _____ C:\WINDOWS\SchedLgU.Txt
2015-07-20 02:00 - 2014-08-09 16:30 - 00000344 _____ C:\WINDOWS\Tasks\AdobeAAMUpdater-1.0-POPO-498C751C3E-Lubosh.job
2015-07-20 02:00 - 2014-08-09 16:19 - 00000000 ____D C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Adobe
2015-07-20 01:12 - 2015-01-04 00:00 - 00000000 ____D C:\KMPlayer
2015-07-20 01:05 - 2014-08-16 17:12 - 00000000 ___RD C:\Documents and Settings\Lubosh\Dokumenty\Filmy
2015-07-19 12:58 - 2014-07-29 23:22 - 00000000 ____D C:\Documents and Settings\Lubosh\Plocha
2015-07-18 19:05 - 2014-07-30 01:06 - 00000000 __RHD C:\Documents and Settings\All Users\Data aplikací
2015-07-18 19:05 - 2014-07-30 01:06 - 00000000 ___RD C:\Documents and Settings\All Users\Nabídka Start\Programy
2015-07-18 19:05 - 2014-07-29 23:22 - 00000000 __RHD C:\Documents and Settings\Lubosh\Data aplikací
2015-07-18 19:05 - 2014-07-29 23:22 - 00000000 ___HD C:\Documents and Settings\Lubosh\Local Settings\Data aplikací
2015-07-18 19:00 - 2014-07-29 23:14 - 00000000 ____D C:\WINDOWS\system32\Restore
2015-07-18 17:52 - 2014-07-30 01:06 - 00000000 ____D C:\Documents and Settings\All Users\Plocha
2015-07-18 17:52 - 2014-07-30 00:30 - 00000917 _____ C:\Documents and Settings\All Users\Plocha\Google Chrome.lnk
2015-07-18 17:52 - 2014-07-30 00:30 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\Google Chrome
2015-07-18 17:52 - 2014-07-29 23:22 - 00000747 _____ C:\Documents and Settings\Lubosh\Nabídka Start\Programy\Internet Explorer.lnk
2015-07-18 17:52 - 2014-07-29 23:22 - 00000000 ___RD C:\Documents and Settings\Lubosh\Nabídka Start\Programy
2015-07-18 12:38 - 2014-08-10 22:16 - 00146432 _____ (Oracle Corporation) C:\WINDOWS\system32\javacpl.cpl
2015-07-18 12:34 - 2014-08-10 22:13 - 00000000 ____D C:\Program Files\Java
2015-07-18 00:25 - 2007-08-02 14:00 - 00012984 _____ C:\WINDOWS\system32\wpa.dbl
2015-07-16 14:39 - 2014-07-31 05:09 - 00001549 _____ C:\Documents and Settings\Lubosh\Plocha\KMP Games.lnk
2015-07-16 14:22 - 2014-07-31 05:33 - 00000000 ____D C:\WINDOWS\system32\MRT
2015-07-15 18:29 - 2014-07-30 01:06 - 00000000 ___RD C:\Documents and Settings\All Users\Nabídka Start
2015-07-14 23:14 - 2015-01-04 00:01 - 00000522 _____ C:\Documents and Settings\Lubosh\Plocha\KMPlayer.lnk
2015-07-14 20:13 - 2014-08-01 10:11 - 00778416 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2015-07-14 20:13 - 2014-08-01 10:11 - 00142512 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
2015-07-12 21:37 - 2014-08-12 09:48 - 00000000 ____D C:\WINDOWS\Minidump
2015-07-12 21:36 - 2014-07-29 23:22 - 00000000 ____D C:\Documents and Settings\Lubosh
2015-07-03 08:49 - 2014-07-31 05:32 - 127070192 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-06-27 22:38 - 2014-07-29 23:22 - 00000000 ___RD C:\Documents and Settings\Lubosh\Dokumenty\Hudba
2015-06-26 18:24 - 2014-08-09 16:39 - 00428120 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\Drivers\aswsp.sys
==================== Files in the root of some directories =======
2014-07-30 05:45 - 2015-07-20 16:02 - 0100352 _____ () C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-08-05 12:46 - 2014-08-05 12:46 - 0000878 ____C () C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\recently-used.xbel
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed
==================== End of log ============================
Ran by Lubosh (administrator) on POPO-498C751C3E on 20-07-2015 17:09:32
Running from C:\Documents and Settings\Lubosh\Plocha
Loaded Profiles: Lubosh (Available Profiles: Lubosh)
Platform: Systém Microsoft Windows XP Professional Service Pack 3 (X86) OS Language: Čeština
Internet Explorer Version 8 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\WINDOWS\system32\wbem\unsecapp.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\WINDOWS\system32\wscntfy.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5515496 2015-05-26] (Avast Software s.r.o.)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [335232 2015-04-10] (Oracle Corporation)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2015-05-26] (Avast Software s.r.o.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-746137067-484763869-839522115-1003\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dl ... ar=msnhome
HKU\S-1-5-21-746137067-484763869-839522115-1003\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?trackid=sp-006
HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs: "about:newtab" <======= ATTENTION
SearchScopes: HKLM -> {15C4DF55-4B67-495A-A3D3-A497C4A49EE0} URL = http://search.seznam.cz/?sourceid=quick ... earchTerms}
SearchScopes: HKLM -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=s ... earchTerms}
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-746137067-484763869-839522115-1003 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-746137067-484763869-839522115-1003 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=s ... earchTerms}
BHO: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23] (Adobe Systems Incorporated)
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2006-10-27] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_45\bin\ssv.dll [2015-07-18] (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-03-26] (Avast Software s.r.o.)
BHO: Adobe PDF Conversion Toolbar Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2012-01-03] (Adobe Systems Incorporated)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-07-18] (Oracle Corporation)
BHO: SmartSelect Class -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2012-01-03] (Adobe Systems Incorporated)
Toolbar: HKLM - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2012-01-03] (Adobe Systems Incorporated)
Toolbar: HKU\S-1-5-21-746137067-484763869-839522115-1003 -> &Adresa - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\WINDOWS\system32\browseui.dll [2014-02-25] (Společnost Microsoft)
DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} http://windowsupdate.microsoft.com/wind ... 6675732765
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll [2006-10-27] (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 213.46.172.36 213.46.172.37
Tcpip\..\Interfaces\{69CC7630-A94B-4A7E-9C7F-48497FC4055A}: [DhcpNameServer] 213.46.172.36 213.46.172.37
FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_18_0_0_209.dll [2015-07-14] ()
FF Plugin: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-07-18] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-07-18] (Oracle Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-05] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-05] (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat 10.0\Acrobat\Air\nppdf32.dll [2012-01-03] (Adobe Systems Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-08-05] (Adobe Systems Inc.)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2012-09-20] (Adobe Systems)
FF Plugin: adobe.com/AdobeExManDetect -> C:\Program Files\Adobe\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll [2013-12-02] (Adobe Systems)
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-08-09]
FF HKLM\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn
FF Extension: Adobe Acrobat - Create PDF - C:\Program Files\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn [2014-11-07]
Chrome:
=======
CHR Profile: C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-07-30]
CHR Extension: (Google Drive) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-07-30]
CHR Extension: (YouTube) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-07-30]
CHR Extension: (Google Search) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-07-30]
CHR Extension: (AdBlock) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-12-15]
CHR Extension: (Avast Online Security) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-08-10]
CHR Extension: (Google Wallet) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-07-30]
CHR Extension: (Gmail) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-07-30]
CHR Profile: C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 1
CHR Extension: (No Name) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 1\Extensions\Temp(2) [2015-03-26]
CHR Profile: C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 2
CHR Extension: (Google Slides) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 2\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-03-26]
CHR Extension: (Google Docs) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 2\Extensions\aohghmighlieiainnegkcijnfilokake [2015-03-26]
CHR Extension: (Google Drive) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 2\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-07-18]
CHR Extension: (YouTube) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 2\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-07-18]
CHR Extension: (Google Search) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 2\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-03-28]
CHR Extension: (Google Sheets) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 2\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-03-26]
CHR Extension: (AdBlock) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 2\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-07-19]
CHR Extension: (Avast Online Security) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 2\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-07-18]
CHR Extension: (Google Wallet) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-05-15]
CHR Extension: (Gmail) - C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Google\Chrome\User Data\Profile 2\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-28]
CHR HKLM\...\Chrome\Extension: [bpegkgagfojjbcpkihigfmkojdmmimdf] - No Path Or update_url value
CHR HKLM\...\Chrome\Extension: [ehgldbbpchgpcfagfpfjgoomddhccfgh] - No Path Or update_url value
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-03-26]
========================== Services (Whitelisted) =================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-05-26] (Avast Software s.r.o.)
S3 SwitchBoard; C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R3 aeaudio; C:\WINDOWS\System32\drivers\aeaudio.sys [100224 2003-03-13] (Andrea Electronics Corporation) [File not signed]
R2 aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [24144 2015-05-26] ()
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [74976 2015-05-26] (Avast Software s.r.o.)
R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [55200 2015-05-26] (Avast Software s.r.o.)
R0 aswRvrt; C:\WINDOWS\system32\Drivers\aswRvrt.sys [49904 2015-05-26] ()
R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [787760 2015-05-26] (Avast Software s.r.o.)
R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [428120 2015-06-26] (Avast Software s.r.o.)
R1 aswTdi; C:\WINDOWS\system32\drivers\aswTdi.sys [57888 2015-05-26] (Avast Software s.r.o.)
R0 aswVmm; C:\WINDOWS\system32\Drivers\aswVmm.sys [209048 2015-05-26] ()
R3 b57w2k; C:\WINDOWS\System32\DRIVERS\b57xp32.sys [156160 2006-05-10] (Broadcom Corporation) [File not signed]
S3 massfilter; C:\WINDOWS\System32\drivers\massfilter.sys [9216 2010-02-22] (MBB Incorporated)
R2 npf; C:\WINDOWS\System32\drivers\npf.sys [50704 2010-01-27] (CACE Technologies, Inc.)
R3 smwdm; C:\WINDOWS\System32\drivers\smwdm.sys [578304 2003-05-27] (Analog Devices, Inc.) [File not signed]
U5 ScsiPort; C:\WINDOWS\system32\drivers\scsiport.sys [96384 2008-04-14] (Microsoft Corporation)
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-07-18 19:50 - 2015-07-20 17:10 - 00000000 ____D C:\Documents and Settings\Lubosh\Local Settings\Temp
2015-07-18 19:50 - 2015-07-18 19:50 - 00000000 ____D C:\Documents and Settings\NetworkService\Local Settings\temp
2015-07-18 19:50 - 2015-07-18 19:50 - 00000000 ____D C:\Documents and Settings\LocalService\Local Settings\temp
2015-07-18 19:50 - 2015-07-18 19:50 - 00000000 ____D C:\Documents and Settings\Default User\Local Settings\temp
2015-07-18 19:50 - 2015-07-18 19:00 - 00024064 _____ C:\WINDOWS\zoek-delete.exe
2015-07-18 19:02 - 2015-07-18 19:51 - 00010651 _____ C:\zoek-results.log
2015-07-18 19:00 - 2015-07-18 19:25 - 00000000 ____D C:\zoek_backup
2015-07-18 18:37 - 2015-07-18 18:37 - 01308672 _____ C:\Documents and Settings\Lubosh\Plocha\zoek.exe
2015-07-18 17:50 - 2015-07-18 17:52 - 00000000 ____D C:\AdwCleaner
2015-07-18 14:06 - 2015-07-18 14:06 - 00007459 _____ C:\Documents and Settings\Lubosh\Plocha\Addition.zip
2015-07-18 13:57 - 2015-07-18 13:58 - 00036678 _____ C:\Documents and Settings\Lubosh\Plocha\Addition.txt
2015-07-18 13:56 - 2015-07-20 17:10 - 00014448 _____ C:\Documents and Settings\Lubosh\Plocha\FRST.txt
2015-07-18 13:56 - 2015-07-20 17:09 - 00000000 ____D C:\FRST
2015-07-18 13:55 - 2015-07-18 13:55 - 01637376 _____ (Farbar) C:\Documents and Settings\Lubosh\Plocha\FRST.exe
2015-07-18 13:50 - 2015-07-18 13:50 - 00015107 _____ C:\WINDOWS\setupapi.log
2015-07-18 13:50 - 2015-07-18 13:50 - 00000000 _____ C:\WINDOWS\setuperr.log
2015-07-18 13:50 - 2015-07-18 13:50 - 00000000 _____ C:\WINDOWS\setupact.log
2015-07-18 12:40 - 2015-07-18 12:40 - 00000000 ____D C:\Program Files\Common Files\Java
2015-07-18 12:28 - 2015-07-18 12:38 - 00096680 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge.dll
2015-07-15 22:58 - 2015-07-18 13:35 - 00001612 _____ C:\WINDOWS\wmsetup.log
2015-07-14 23:11 - 2015-07-14 23:11 - 00000000 _____ C:\WINDOWS\prleth.sys
2015-07-14 23:11 - 2015-07-14 23:11 - 00000000 _____ C:\WINDOWS\hgfs.sys
2015-06-25 02:13 - 2015-07-14 20:13 - 18524336 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerInstaller.exe
2015-06-24 00:07 - 2015-06-24 00:07 - 00033794 _____ C:\Documents and Settings\Lubosh\Plocha\video-1435096526.mp4.mp4
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-07-20 17:07 - 2014-07-30 21:33 - 00000000 ____D C:\Documents and Settings\Lubosh\Data aplikací\uTorrent
2015-07-20 16:13 - 2014-08-28 21:04 - 00000914 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-07-20 16:05 - 2014-07-30 05:50 - 00000000 ____D C:\Documents and Settings\Lubosh\Data aplikací\vlc
2015-07-20 16:02 - 2014-07-30 05:45 - 00100352 _____ C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-07-20 11:55 - 2014-07-29 23:16 - 01878720 _____ C:\WINDOWS\WindowsUpdate.log
2015-07-20 11:54 - 2014-08-09 16:39 - 00000364 ____H C:\WINDOWS\Tasks\avast! Emergency Update.job
2015-07-20 11:54 - 2014-08-09 16:29 - 00000314 _____ C:\WINDOWS\wiadebug.log
2015-07-20 11:54 - 2014-08-09 16:29 - 00000049 _____ C:\WINDOWS\wiaservc.log
2015-07-20 11:53 - 2014-07-29 23:20 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-07-20 02:33 - 2014-07-29 23:22 - 00000178 ___SH C:\Documents and Settings\Lubosh\ntuser.ini
2015-07-20 02:33 - 2014-07-29 23:20 - 00032584 _____ C:\WINDOWS\SchedLgU.Txt
2015-07-20 02:00 - 2014-08-09 16:30 - 00000344 _____ C:\WINDOWS\Tasks\AdobeAAMUpdater-1.0-POPO-498C751C3E-Lubosh.job
2015-07-20 02:00 - 2014-08-09 16:19 - 00000000 ____D C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\Adobe
2015-07-20 01:12 - 2015-01-04 00:00 - 00000000 ____D C:\KMPlayer
2015-07-20 01:05 - 2014-08-16 17:12 - 00000000 ___RD C:\Documents and Settings\Lubosh\Dokumenty\Filmy
2015-07-19 12:58 - 2014-07-29 23:22 - 00000000 ____D C:\Documents and Settings\Lubosh\Plocha
2015-07-18 19:05 - 2014-07-30 01:06 - 00000000 __RHD C:\Documents and Settings\All Users\Data aplikací
2015-07-18 19:05 - 2014-07-30 01:06 - 00000000 ___RD C:\Documents and Settings\All Users\Nabídka Start\Programy
2015-07-18 19:05 - 2014-07-29 23:22 - 00000000 __RHD C:\Documents and Settings\Lubosh\Data aplikací
2015-07-18 19:05 - 2014-07-29 23:22 - 00000000 ___HD C:\Documents and Settings\Lubosh\Local Settings\Data aplikací
2015-07-18 19:00 - 2014-07-29 23:14 - 00000000 ____D C:\WINDOWS\system32\Restore
2015-07-18 17:52 - 2014-07-30 01:06 - 00000000 ____D C:\Documents and Settings\All Users\Plocha
2015-07-18 17:52 - 2014-07-30 00:30 - 00000917 _____ C:\Documents and Settings\All Users\Plocha\Google Chrome.lnk
2015-07-18 17:52 - 2014-07-30 00:30 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\Google Chrome
2015-07-18 17:52 - 2014-07-29 23:22 - 00000747 _____ C:\Documents and Settings\Lubosh\Nabídka Start\Programy\Internet Explorer.lnk
2015-07-18 17:52 - 2014-07-29 23:22 - 00000000 ___RD C:\Documents and Settings\Lubosh\Nabídka Start\Programy
2015-07-18 12:38 - 2014-08-10 22:16 - 00146432 _____ (Oracle Corporation) C:\WINDOWS\system32\javacpl.cpl
2015-07-18 12:34 - 2014-08-10 22:13 - 00000000 ____D C:\Program Files\Java
2015-07-18 00:25 - 2007-08-02 14:00 - 00012984 _____ C:\WINDOWS\system32\wpa.dbl
2015-07-16 14:39 - 2014-07-31 05:09 - 00001549 _____ C:\Documents and Settings\Lubosh\Plocha\KMP Games.lnk
2015-07-16 14:22 - 2014-07-31 05:33 - 00000000 ____D C:\WINDOWS\system32\MRT
2015-07-15 18:29 - 2014-07-30 01:06 - 00000000 ___RD C:\Documents and Settings\All Users\Nabídka Start
2015-07-14 23:14 - 2015-01-04 00:01 - 00000522 _____ C:\Documents and Settings\Lubosh\Plocha\KMPlayer.lnk
2015-07-14 20:13 - 2014-08-01 10:11 - 00778416 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2015-07-14 20:13 - 2014-08-01 10:11 - 00142512 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
2015-07-12 21:37 - 2014-08-12 09:48 - 00000000 ____D C:\WINDOWS\Minidump
2015-07-12 21:36 - 2014-07-29 23:22 - 00000000 ____D C:\Documents and Settings\Lubosh
2015-07-03 08:49 - 2014-07-31 05:32 - 127070192 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-06-27 22:38 - 2014-07-29 23:22 - 00000000 ___RD C:\Documents and Settings\Lubosh\Dokumenty\Hudba
2015-06-26 18:24 - 2014-08-09 16:39 - 00428120 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\Drivers\aswsp.sys
==================== Files in the root of some directories =======
2014-07-30 05:45 - 2015-07-20 16:02 - 0100352 _____ () C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-08-05 12:46 - 2014-08-05 12:46 - 0000878 ____C () C:\Documents and Settings\Lubosh\Local Settings\Data aplikací\recently-used.xbel
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed
==================== End of log ============================
- Přílohy
-
- Addition.zip
- (7.24 KiB) Staženo 67 x
Re: Jak odstranit Omniboxes - prosím o radu
- Spustte poznamkovy blok (Start-spustit-notepad)
- Zkopirujte skript nize
Kód: Vybrat vše
Start CloseProcesses: CreateRestorePoint: HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [335232 2015-04-10] (Oracle Corporation) HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION HKU\S-1-5-21-746137067-484763869-839522115-1003\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dl ... ar=msnhome HKU\S-1-5-21-746137067-484763869-839522115-1003\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?trackid=sp-006 HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs: "about:newtab" <======= ATTENTION SearchScopes: HKLM -> {15C4DF55-4B67-495A-A3D3-A497C4A49EE0} URL = http://search.seznam.cz/?sourceid=quicksearch_22668&q={searchTerms} SearchScopes: HKLM -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=sp-006&q={searchTerms} SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = CHR HKLM\...\Chrome\Extension: [bpegkgagfojjbcpkihigfmkojdmmimdf] - No Path Or update_url value CHR HKLM\...\Chrome\Extension: [ehgldbbpchgpcfagfpfjgoomddhccfgh] - No Path Or update_url value 2015-07-18 19:50 - 2015-07-18 19:00 - 00024064 _____ C:\WINDOWS\zoek-delete.exe 2015-07-18 19:02 - 2015-07-18 19:51 - 00010651 _____ C:\zoek-results.log 2015-07-18 19:00 - 2015-07-18 19:25 - 00000000 ____D C:\zoek_backup 2015-07-18 18:37 - 2015-07-18 18:37 - 01308672 _____ C:\Documents and Settings\Lubosh\Plocha\zoek.exe 2015-07-18 17:50 - 2015-07-18 17:52 - 00000000 ____D C:\AdwCleaner 2015-07-18 14:06 - 2015-07-18 14:06 - 00007459 _____ C:\Documents and Settings\Lubosh\Plocha\Addition.zip 2015-07-18 13:57 - 2015-07-18 13:58 - 00036678 _____ C:\Documents and Settings\Lubosh\Plocha\Addition.txt 2015-07-18 13:56 - 2015-07-20 17:10 - 00014448 _____ C:\Documents and Settings\Lubosh\Plocha\FRST.txt 2015-07-18 13:50 - 2015-07-18 13:50 - 00015107 _____ C:\WINDOWS\setupapi.log 2015-07-18 13:50 - 2015-07-18 13:50 - 00000000 _____ C:\WINDOWS\setuperr.log 2015-07-18 13:50 - 2015-07-18 13:50 - 00000000 _____ C:\WINDOWS\setupact.log Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\WINDOWS\Tasks\AdobeAAMUpdater-1.0-POPO-498C751C3E-Lubosh.job => C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe Task: C:\WINDOWS\Tasks\avast! Emergency Update.job => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe Hosts: EmptyTemp: Reboot: End- Ulozte vytvoreny TXT jako fixlist.txt
- Presunte vytvoreny fixlist vedle FRST
- Kliknete na Fix
- Probehne oprava a vytvori log Fixlog.txt
Re: Jak odstranit Omniboxes - prosím o radu
Fix result of Farbar Recovery Scan Tool (x86) Version: 20-07-2015
Ran by Lubosh at 2015-07-20 20:02:50 Run:2
Running from C:\Documents and Settings\Lubosh\Plocha
Loaded Profiles: Lubosh (Available Profiles: Lubosh)
Boot Mode: Normal
==============================================
fixlist content:
*****************
Start
CloseProcesses:
CreateRestorePoint:
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [335232 2015-04-10] (Oracle Corporation)
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-746137067-484763869-839522115-1003\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dl ... ar=msnhome
HKU\S-1-5-21-746137067-484763869-839522115-1003\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?trackid=sp-006
HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs: "about:newtab" <======= ATTENTION
SearchScopes: HKLM -> {15C4DF55-4B67-495A-A3D3-A497C4A49EE0} URL = http://search.seznam.cz/?sourceid=quick ... earchTerms}
SearchScopes: HKLM -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=s ... earchTerms}
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
CHR HKLM\...\Chrome\Extension: [bpegkgagfojjbcpkihigfmkojdmmimdf] - No Path Or update_url value
CHR HKLM\...\Chrome\Extension: [ehgldbbpchgpcfagfpfjgoomddhccfgh] - No Path Or update_url value
2015-07-18 19:50 - 2015-07-18 19:00 - 00024064 _____ C:\WINDOWS\zoek-delete.exe
2015-07-18 19:02 - 2015-07-18 19:51 - 00010651 _____ C:\zoek-results.log
2015-07-18 19:00 - 2015-07-18 19:25 - 00000000 ____D C:\zoek_backup
2015-07-18 18:37 - 2015-07-18 18:37 - 01308672 _____ C:\Documents and Settings\Lubosh\Plocha\zoek.exe
2015-07-18 17:50 - 2015-07-18 17:52 - 00000000 ____D C:\AdwCleaner
2015-07-18 14:06 - 2015-07-18 14:06 - 00007459 _____ C:\Documents and Settings\Lubosh\Plocha\Addition.zip
2015-07-18 13:57 - 2015-07-18 13:58 - 00036678 _____ C:\Documents and Settings\Lubosh\Plocha\Addition.txt
2015-07-18 13:56 - 2015-07-20 17:10 - 00014448 _____ C:\Documents and Settings\Lubosh\Plocha\FRST.txt
2015-07-18 13:50 - 2015-07-18 13:50 - 00015107 _____ C:\WINDOWS\setupapi.log
2015-07-18 13:50 - 2015-07-18 13:50 - 00000000 _____ C:\WINDOWS\setuperr.log
2015-07-18 13:50 - 2015-07-18 13:50 - 00000000 _____ C:\WINDOWS\setupact.log
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\AdobeAAMUpdater-1.0-POPO-498C751C3E-Lubosh.job => C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe
Task: C:\WINDOWS\Tasks\avast! Emergency Update.job => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe
Hosts:
EmptyTemp:
Reboot:
End
*****************
Processes closed successfully.
Restore point was successfully created.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched => value not found.
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer => key not found.
HKU\S-1-5-21-746137067-484763869-839522115-1003\SOFTWARE\Policies\Microsoft\Internet Explorer => key not found.
HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Page_URL => value restored successfully
HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Search_URL => value restored successfully
HKLM\Software\\Microsoft\Internet Explorer\Main\\Local Page => value restored successfully
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main\\Search Page => value not found.
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main\\Start Page => value not found.
HKU\S-1-5-21-746137067-484763869-839522115-1003\Software\Microsoft\Internet Explorer\Main\\Start Page => value restored successfully
HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs\\Tabs => value restored successfully
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{15C4DF55-4B67-495A-A3D3-A497C4A49EE0} => key not found.
HKCR\CLSID\{15C4DF55-4B67-495A-A3D3-A497C4A49EE0} => key not found.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{E9410C70-B6AE-41FF-AB71-32F4B279EA5F} => key not found.
HKCR\CLSID\{E9410C70-B6AE-41FF-AB71-32F4B279EA5F} => key not found.
HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value not found.
HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value not found.
HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value not found.
HKLM\SOFTWARE\Google\Chrome\Extensions\bpegkgagfojjbcpkihigfmkojdmmimdf => key not found.
HKLM\SOFTWARE\Google\Chrome\Extensions\ehgldbbpchgpcfagfpfjgoomddhccfgh => key not found.
"C:\WINDOWS\zoek-delete.exe" => File/Folder not found.
"C:\zoek-results.log" => File/Folder not found.
"C:\zoek_backup" => File/Folder not found.
"C:\Documents and Settings\Lubosh\Plocha\zoek.exe" => File/Folder not found.
"C:\AdwCleaner" => File/Folder not found.
"C:\Documents and Settings\Lubosh\Plocha\Addition.zip" => File/Folder not found.
"C:\Documents and Settings\Lubosh\Plocha\Addition.txt" => File/Folder not found.
"C:\Documents and Settings\Lubosh\Plocha\FRST.txt" => File/Folder not found.
"C:\WINDOWS\setupapi.log" => File/Folder not found.
"C:\WINDOWS\setuperr.log" => File/Folder not found.
"C:\WINDOWS\setupact.log" => File/Folder not found.
C:\WINDOWS\Tasks\Adobe Flash Player Updater.job not found.
C:\WINDOWS\Tasks\AdobeAAMUpdater-1.0-POPO-498C751C3E-Lubosh.job not found.
C:\WINDOWS\Tasks\avast! Emergency Update.job not found.
C:\Windows\System32\Drivers\etc\hosts => moved successfully.
Hosts restored successfully.
EmptyTemp: => 192.9 MB temporary data Removed.
The system needed a reboot.
==== End of Fixlog 20:03:18 ====
Ran by Lubosh at 2015-07-20 20:02:50 Run:2
Running from C:\Documents and Settings\Lubosh\Plocha
Loaded Profiles: Lubosh (Available Profiles: Lubosh)
Boot Mode: Normal
==============================================
fixlist content:
*****************
Start
CloseProcesses:
CreateRestorePoint:
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [335232 2015-04-10] (Oracle Corporation)
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-746137067-484763869-839522115-1003\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dl ... ar=msnhome
HKU\S-1-5-21-746137067-484763869-839522115-1003\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?trackid=sp-006
HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs: "about:newtab" <======= ATTENTION
SearchScopes: HKLM -> {15C4DF55-4B67-495A-A3D3-A497C4A49EE0} URL = http://search.seznam.cz/?sourceid=quick ... earchTerms}
SearchScopes: HKLM -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=s ... earchTerms}
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
CHR HKLM\...\Chrome\Extension: [bpegkgagfojjbcpkihigfmkojdmmimdf] - No Path Or update_url value
CHR HKLM\...\Chrome\Extension: [ehgldbbpchgpcfagfpfjgoomddhccfgh] - No Path Or update_url value
2015-07-18 19:50 - 2015-07-18 19:00 - 00024064 _____ C:\WINDOWS\zoek-delete.exe
2015-07-18 19:02 - 2015-07-18 19:51 - 00010651 _____ C:\zoek-results.log
2015-07-18 19:00 - 2015-07-18 19:25 - 00000000 ____D C:\zoek_backup
2015-07-18 18:37 - 2015-07-18 18:37 - 01308672 _____ C:\Documents and Settings\Lubosh\Plocha\zoek.exe
2015-07-18 17:50 - 2015-07-18 17:52 - 00000000 ____D C:\AdwCleaner
2015-07-18 14:06 - 2015-07-18 14:06 - 00007459 _____ C:\Documents and Settings\Lubosh\Plocha\Addition.zip
2015-07-18 13:57 - 2015-07-18 13:58 - 00036678 _____ C:\Documents and Settings\Lubosh\Plocha\Addition.txt
2015-07-18 13:56 - 2015-07-20 17:10 - 00014448 _____ C:\Documents and Settings\Lubosh\Plocha\FRST.txt
2015-07-18 13:50 - 2015-07-18 13:50 - 00015107 _____ C:\WINDOWS\setupapi.log
2015-07-18 13:50 - 2015-07-18 13:50 - 00000000 _____ C:\WINDOWS\setuperr.log
2015-07-18 13:50 - 2015-07-18 13:50 - 00000000 _____ C:\WINDOWS\setupact.log
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\AdobeAAMUpdater-1.0-POPO-498C751C3E-Lubosh.job => C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe
Task: C:\WINDOWS\Tasks\avast! Emergency Update.job => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe
Hosts:
EmptyTemp:
Reboot:
End
*****************
Processes closed successfully.
Restore point was successfully created.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched => value not found.
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer => key not found.
HKU\S-1-5-21-746137067-484763869-839522115-1003\SOFTWARE\Policies\Microsoft\Internet Explorer => key not found.
HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Page_URL => value restored successfully
HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Search_URL => value restored successfully
HKLM\Software\\Microsoft\Internet Explorer\Main\\Local Page => value restored successfully
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main\\Search Page => value not found.
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main\\Start Page => value not found.
HKU\S-1-5-21-746137067-484763869-839522115-1003\Software\Microsoft\Internet Explorer\Main\\Start Page => value restored successfully
HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs\\Tabs => value restored successfully
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{15C4DF55-4B67-495A-A3D3-A497C4A49EE0} => key not found.
HKCR\CLSID\{15C4DF55-4B67-495A-A3D3-A497C4A49EE0} => key not found.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{E9410C70-B6AE-41FF-AB71-32F4B279EA5F} => key not found.
HKCR\CLSID\{E9410C70-B6AE-41FF-AB71-32F4B279EA5F} => key not found.
HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value not found.
HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value not found.
HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value not found.
HKLM\SOFTWARE\Google\Chrome\Extensions\bpegkgagfojjbcpkihigfmkojdmmimdf => key not found.
HKLM\SOFTWARE\Google\Chrome\Extensions\ehgldbbpchgpcfagfpfjgoomddhccfgh => key not found.
"C:\WINDOWS\zoek-delete.exe" => File/Folder not found.
"C:\zoek-results.log" => File/Folder not found.
"C:\zoek_backup" => File/Folder not found.
"C:\Documents and Settings\Lubosh\Plocha\zoek.exe" => File/Folder not found.
"C:\AdwCleaner" => File/Folder not found.
"C:\Documents and Settings\Lubosh\Plocha\Addition.zip" => File/Folder not found.
"C:\Documents and Settings\Lubosh\Plocha\Addition.txt" => File/Folder not found.
"C:\Documents and Settings\Lubosh\Plocha\FRST.txt" => File/Folder not found.
"C:\WINDOWS\setupapi.log" => File/Folder not found.
"C:\WINDOWS\setuperr.log" => File/Folder not found.
"C:\WINDOWS\setupact.log" => File/Folder not found.
C:\WINDOWS\Tasks\Adobe Flash Player Updater.job not found.
C:\WINDOWS\Tasks\AdobeAAMUpdater-1.0-POPO-498C751C3E-Lubosh.job not found.
C:\WINDOWS\Tasks\avast! Emergency Update.job not found.
C:\Windows\System32\Drivers\etc\hosts => moved successfully.
Hosts restored successfully.
EmptyTemp: => 192.9 MB temporary data Removed.
The system needed a reboot.
==== End of Fixlog 20:03:18 ====
Re: Jak odstranit Omniboxes - prosím o radu
Omniboxes stale otravuje??
Problem je ve vsech prohlizecich??
Problem je ve vsech prohlizecich??
Re: Jak odstranit Omniboxes - prosím o radu
Bohužel, stále to otravuje, reklamy vyskakují jak o život. Firefox ale funguje normálně, zdá se, tak zatím přecházím na něj...



Přispějete na provoz fóra?