Dobrý den,
má problém s pc. po spuštění mi vyskočí chyba autorun_agent.exe, dale pak nemohu spoustet zadny instalator, natimalware sw nemohu spoustet, napriklad kaspersky scanner nejde spustit apod.
Jiz jsem tady v minulosti logy resil a byl dotaz na licenci meho sw. Notebook jsem koupil z druhe ruky s predinstalovanym os. dekuji za pomoc!
Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
Prosím o kontrolu logu
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Prosím o kontrolu logu
- Přílohy
-
- FRST.zip
- (12 KiB) Staženo 60 x
-
Rudy
- Site Admin
- Příspěvky: 119418
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Prosím o kontrolu logu
Zdravím!
Spusťte tuto utilitu:
Spusťte tuto utilitu:
Ulozte na plochu AdwCleaner https://malwarebytes.com/adwcleaner/ nebo http://www.bleepingcomputer.com/download/adwcleaner/
ukoncete vsechny programy
odsouhlaste licencni podmiky (EULA) klikem na Souhlasim
kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
kliknete na Skenovat nyni (Scan now), pote na Cisteni a opravy (Clean and Repair)
po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\Logs\AdwCleaner[Cxx].txt), jehoz obsah zkopirujte do pristi odpovedi
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Prosím o kontrolu logu
Děkuji, trapi me predevsim chyba 0xc0000005. prajticky nerozjedu zadny exe soubor
# -------------------------------
# Malwarebytes AdwCleaner 8.0.8.0
# -------------------------------
# Build: 10-08-2020
# Database: 2020-12-21.1 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Scan
# -------------------------------
# Start: 12-25-2020
# Duration: 00:00:37
# OS: Windows 7 Ultimate
# Scanned: 31930
# Detected: 2
***** [ Services ] *****
No malicious services found.
***** [ Folders ] *****
PUP.Optional.OutbytePCRepair C:\Program Files (x86)\Outbyte
***** [ Files ] *****
No malicious files found.
***** [ DLL ] *****
No malicious DLLs found.
***** [ WMI ] *****
No malicious WMI found.
***** [ Shortcuts ] *****
No malicious shortcuts found.
***** [ Tasks ] *****
No malicious tasks found.
***** [ Registry ] *****
PUP.Optional.OutbytePCRepair HKLM\Software\Classes\Interface\{3A3310BE-83DD-4E80-AC51-242D3A7D7F73}
***** [ Chromium (and derivatives) ] *****
No malicious Chromium entries found.
***** [ Chromium URLs ] *****
No malicious Chromium URLs found.
***** [ Firefox (and derivatives) ] *****
No malicious Firefox entries found.
***** [ Firefox URLs ] *****
No malicious Firefox URLs found.
***** [ Hosts File Entries ] *****
No malicious hosts file entries found.
***** [ Preinstalled Software ] *****
No Preinstalled Software found.
AdwCleaner[S00].txt - [5962 octets] - [26/03/2020 18:12:27]
AdwCleaner[C00].txt - [4763 octets] - [26/03/2020 18:12:58]
AdwCleaner[S01].txt - [2358 octets] - [24/12/2020 00:48:20]
AdwCleaner[S02].txt - [2419 octets] - [24/12/2020 00:50:04]
AdwCleaner[C02].txt - [2698 octets] - [24/12/2020 00:50:43]
AdwCleaner[S03].txt - [2439 octets] - [24/12/2020 01:30:15]
AdwCleaner[S04].txt - [1775 octets] - [24/12/2020 01:34:14]
AdwCleaner[C04].txt - [1965 octets] - [24/12/2020 01:34:24]
########## EOF - C:\AdwCleaner\Logs\AdwCleaner[S05].txt ##########
# -------------------------------
# Malwarebytes AdwCleaner 8.0.8.0
# -------------------------------
# Build: 10-08-2020
# Database: 2020-12-21.1 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Scan
# -------------------------------
# Start: 12-25-2020
# Duration: 00:00:37
# OS: Windows 7 Ultimate
# Scanned: 31930
# Detected: 2
***** [ Services ] *****
No malicious services found.
***** [ Folders ] *****
PUP.Optional.OutbytePCRepair C:\Program Files (x86)\Outbyte
***** [ Files ] *****
No malicious files found.
***** [ DLL ] *****
No malicious DLLs found.
***** [ WMI ] *****
No malicious WMI found.
***** [ Shortcuts ] *****
No malicious shortcuts found.
***** [ Tasks ] *****
No malicious tasks found.
***** [ Registry ] *****
PUP.Optional.OutbytePCRepair HKLM\Software\Classes\Interface\{3A3310BE-83DD-4E80-AC51-242D3A7D7F73}
***** [ Chromium (and derivatives) ] *****
No malicious Chromium entries found.
***** [ Chromium URLs ] *****
No malicious Chromium URLs found.
***** [ Firefox (and derivatives) ] *****
No malicious Firefox entries found.
***** [ Firefox URLs ] *****
No malicious Firefox URLs found.
***** [ Hosts File Entries ] *****
No malicious hosts file entries found.
***** [ Preinstalled Software ] *****
No Preinstalled Software found.
AdwCleaner[S00].txt - [5962 octets] - [26/03/2020 18:12:27]
AdwCleaner[C00].txt - [4763 octets] - [26/03/2020 18:12:58]
AdwCleaner[S01].txt - [2358 octets] - [24/12/2020 00:48:20]
AdwCleaner[S02].txt - [2419 octets] - [24/12/2020 00:50:04]
AdwCleaner[C02].txt - [2698 octets] - [24/12/2020 00:50:43]
AdwCleaner[S03].txt - [2439 octets] - [24/12/2020 01:30:15]
AdwCleaner[S04].txt - [1775 octets] - [24/12/2020 01:34:14]
AdwCleaner[C04].txt - [1965 octets] - [24/12/2020 01:34:24]
########## EOF - C:\AdwCleaner\Logs\AdwCleaner[S05].txt ##########
-
Rudy
- Site Admin
- Příspěvky: 119418
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Prosím o kontrolu logu
Nalezenou položku smažte a pak dejte nové logy FRST+Addition.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Prosím o kontrolu logu
dekuji, logy prilozeny
-
Rudy
- Site Admin
- Příspěvky: 119418
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Prosím o kontrolu logu
Otevřte poznámkový blok a zkopírujte do něj:
Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.Start
CloseProcesses:
HKLM-x32\...\Run: [Eps_Reg.exe] => C:\Users\MaClaud\AppData\Local\Temp\Eps_Reg.exe /L /NSmartCard2000 <==== ATTENTION
HKU\S-1-5-21-1414726678-80063402-3466205120-1000\...\MountPoints2: G - G:\HiSuiteDownLoader.exe
HKU\S-1-5-21-1414726678-80063402-3466205120-1000\...\MountPoints2: {2307927b-40ab-11eb-8a5b-005056c00008} - G:\HiSuiteDownLoader.exe
HKU\S-1-5-21-1414726678-80063402-3466205120-1000\...\MountPoints2: {93935260-8468-11ea-9051-005056c00008} - G:\HiSuiteDownLoader.exe
HKU\S-1-5-21-1414726678-80063402-3466205120-1000\...\MountPoints2: {d17a249f-8ca6-11ea-a771-74f06dbe6f9f} - G:\HiSuiteDownLoader.exe
GroupPolicy: Restriction ? <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
Task: {0BC85B8E-993D-4DCB-9012-2B1F015E0789} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1414726678-80063402-3466205120-1000Core => C:\Users\MaClaud\AppData\Local\Google\Update\GoogleUpdate.exe [144200 2015-08-30] (Google Inc -> Google Inc.)
Task: {D50F5092-5C39-467D-BAFE-B980F8910DA4} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1414726678-80063402-3466205120-1000UA => C:\Users\MaClaud\AppData\Local\Google\Update\GoogleUpdate.exe [144200 2015-08-30] (Google Inc -> Google Inc.)
Winsock: Catalog5 08 C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL => No File
Winsock: Catalog5 09 C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL => No File
Winsock: Catalog5-x64 08 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL => No File
Winsock: Catalog5-x64 09 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL => No File
S1 xcbdplvu; \??\C:\windows\system32\drivers\xcbdplvu.sys [X]
C:\Program Files (x86)\Bonjour
C:\Users\MaClaud\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
testsigning: ==> 'testsigning' is set. Check for possible unsigned driver <==== ATTENTION
ContextMenuHandlers4: [MSSE] -> {0365FE2C-F183-4091-AC82-BFC39FB75C49} => -> No File
ContextMenuHandlers4-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRar\rarext.dll -> No File
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRar\rarext.dll -> No File
AlternateDataStreams: C:\ProgramData\TEMP:2738F84D [140]
FirewallRules: [{97C9FC1A-F734-4B80-BB58-E2D5C43E88CC}] => (Allow) E:\utorrent-portable\utorrent.exe => No File
FirewallRules: [{0DCF4EE6-DE50-4383-95D2-864294B01511}] => (Allow) E:\utorrent-portable\utorrent.exe => No File
FirewallRules: [{0D13A14B-FA7A-4845-A4A0-56E8A0BDE944}] => (Allow) E:\utorrent-portable\utorrent.exe => No File
FirewallRules: [{68F2C9EC-FACB-405F-A13E-C187142AC30E}] => (Allow) E:\utorrent-portable\utorrent.exe => No File
FirewallRules: [{5A1FEEA0-5721-4A12-AA5B-677B60F1789B}] => (Allow) E:\COD\Mr DJ\Call of Duty 2\CoD2SP_s.exe => No File
FirewallRules: [{D9FFC7F7-0EA2-4F93-8B2F-573E5B8353EB}] => (Allow) E:\COD\Mr DJ\Call of Duty 2\CoD2SP_s.exe => No File
FirewallRules: [{89A8AA27-E87C-45B8-BFD0-5008FE083733}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe => No File
FirewallRules: [{DC13EEEA-F085-4E1D-9416-1D89510DA06F}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe => No File
FirewallRules: [TCP Query User{5145A98D-C17E-4E20-809A-CFE39A497D6F}C:\bst\launcher.exe] => (Block) C:\bst\launcher.exe => No File
FirewallRules: [UDP Query User{2BA01A76-8894-4A72-87A9-BDC9EA4A4D0F}C:\bst\launcher.exe] => (Block) C:\bst\launcher.exe => No File
FirewallRules: [TCP Query User{EB679B65-2C5B-4110-A264-04E4A12098AD}C:\infinitybox\cm2mtk\cm2mtk.exe] => (Block) C:\infinitybox\cm2mtk\cm2mtk.exe => No File
FirewallRules: [UDP Query User{46F04CFB-130F-4C50-A7F4-E81CFDDFA3F2}C:\infinitybox\cm2mtk\cm2mtk.exe] => (Block) C:\infinitybox\cm2mtk\cm2mtk.exe => No File
FirewallRules: [TCP Query User{FA24E43D-FAF4-469D-8BA7-2BC92A4A2120}C:\program files (x86)\asus\atk package\atk hotkey\hcontroluser.exe] => (Block) C:\program files (x86)\asus\atk package\atk hotkey\hcontroluser.exe => No File
FirewallRules: [UDP Query User{A70BE068-9C37-4501-84C5-F95E88C5A9C0}C:\program files (x86)\asus\atk package\atk hotkey\hcontroluser.exe] => (Block) C:\program files (x86)\asus\atk package\atk hotkey\hcontroluser.exe => No File
FirewallRules: [TCP Query User{1219A791-79F2-44F4-AB32-6D3E043EECAA}C:\infinitybox\cm2spd\cm2spd.exe] => (Block) C:\infinitybox\cm2spd\cm2spd.exe => No File
FirewallRules: [UDP Query User{D60920CF-07F3-40BF-A95E-CB7BA91B4B46}C:\infinitybox\cm2spd\cm2spd.exe] => (Block) C:\infinitybox\cm2spd\cm2spd.exe => No File
FirewallRules: [{57D9FD9A-2940-479A-887C-7D5FF419F2F4}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe => No File
FirewallRules: [{821A1B40-7407-4FE1-A52D-D46D4DA3676C}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe => No File
FirewallRules: [{0E3B6B89-AA1A-4170-9F4E-3EFEC097E232}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe => No File
FirewallRules: [{0E5BEC32-5DF7-4831-A36E-27C3201FC587}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe => No File
FirewallRules: [{05A55D7E-E198-4A7F-A5CC-39963C050F20}] => (Allow) C:\Program Files (x86)\DroidCam\DroidCamApp.exe => No File
FirewallRules: [{93DB5A39-68F4-4DD5-8636-1FC5B45F0A08}] => (Allow) C:\Program Files (x86)\DroidCam\DroidCamApp.exe => No File
FirewallRules: [TCP Query User{324D481F-3A6C-4EB7-B2B8-60A4B6575782}C:\infinitybox\best2\best2.exe] => (Block) C:\infinitybox\best2\best2.exe => No File
FirewallRules: [UDP Query User{85865210-AAF8-471B-AAA1-EF279F532188}C:\infinitybox\best2\best2.exe] => (Block) C:\infinitybox\best2\best2.exe => No File
FirewallRules: [TCP Query User{7DB7980D-6E22-42B9-855F-EF13A2CE3DAE}C:\program files (x86)\irfanview\i_view32.exe] => (Block) C:\program files (x86)\irfanview\i_view32.exe => No File
FirewallRules: [UDP Query User{2EB7854E-FD99-448F-A023-05C6D781F140}C:\program files (x86)\irfanview\i_view32.exe] => (Block) C:\program files (x86)\irfanview\i_view32.exe => No File
FirewallRules: [TCP Query User{222EF0AB-2DF5-4335-B925-7B1A54155CAE}C:\program files (x86)\binarysense\ssdlife\ssdlife.exe] => (Allow) C:\program files (x86)\binarysense\ssdlife\ssdlife.exe => No File
FirewallRules: [UDP Query User{6EF7902E-24BE-404D-805F-49F7DE7DDDA2}C:\program files (x86)\binarysense\ssdlife\ssdlife.exe] => (Allow) C:\program files (x86)\binarysense\ssdlife\ssdlife.exe => No File
FirewallRules: [TCP Query User{FD852A94-C6F2-415F-892E-3EE02E91F457}C:\infinitybox\cm2scr\cm2scr.exe] => (Block) C:\infinitybox\cm2scr\cm2scr.exe => No File
FirewallRules: [UDP Query User{269507FB-7A4A-4B59-92D5-CD8E79E19BF2}C:\infinitybox\cm2scr\cm2scr.exe] => (Block) C:\infinitybox\cm2scr\cm2scr.exe => No File
FirewallRules: [{55F213C0-997F-4331-87D7-A84E6E1684B8}] => (Allow) C:\Users\MaClaud\AppData\Roaming\Zoom\bin\airhost.exe => No File
FirewallRules: [TCP Query User{0C708C10-F1EA-4C70-B626-21FB748C3985}C:\program files (x86)\asus\atk package\atk media\dmedia.exe] => (Block) C:\program files (x86)\asus\atk package\atk media\dmedia.exe => No File
FirewallRules: [UDP Query User{881E14F5-E38C-4774-AD80-9E80C0BD2A16}C:\program files (x86)\asus\atk package\atk media\dmedia.exe] => (Block) C:\program files (x86)\asus\atk package\atk media\dmedia.exe => No File
FirewallRules: [TCP Query User{098FA39A-160D-4D1C-8157-0D9B92147018}C:\users\maclaud\appdata\local\temp\setb653.tmp] => (Block) C:\users\maclaud\appdata\local\temp\setb653.tmp => No File
FirewallRules: [UDP Query User{4859FADE-A098-47BA-A899-7756AAEADC26}C:\users\maclaud\appdata\local\temp\setb653.tmp] => (Block) C:\users\maclaud\appdata\local\temp\setb653.tmp => No File
FirewallRules: [TCP Query User{8B77522C-706C-4C82-8322-49BEC8012417}C:\users\maclaud\appdata\local\temp\set3699.tmp] => (Block) C:\users\maclaud\appdata\local\temp\set3699.tmp => No File
FirewallRules: [UDP Query User{6FE82C74-2707-4000-8517-5255CD72DDC6}C:\users\maclaud\appdata\local\temp\set3699.tmp] => (Block) C:\users\maclaud\appdata\local\temp\set3699.tmp => No File
FirewallRules: [TCP Query User{C0ECF045-532D-41F0-ADF2-3D1791A8B962}C:\users\maclaud\appdata\local\temp\set341a.tmp] => (Block) C:\users\maclaud\appdata\local\temp\set341a.tmp => No File
FirewallRules: [UDP Query User{D57A71D2-B910-42BE-AC4E-CFBCAC60F238}C:\users\maclaud\appdata\local\temp\set341a.tmp] => (Block) C:\users\maclaud\appdata\local\temp\set341a.tmp => No File
FirewallRules: [TCP Query User{1EF42E40-3F3F-470D-94C5-79CFEA6EC608}C:\ssd-life pro 2.5.82 + portable\ssdlife pro 2.5.82 + portable\portable\ssdlife.exe] => (Block) C:\ssd-life pro 2.5.82 + portable\ssdlife pro 2.5.82 + portable\portable\ssdlife.exe => No File
FirewallRules: [UDP Query User{9E97D5C3-87DA-48CB-A077-8F8B2D6AF84E}C:\ssd-life pro 2.5.82 + portable\ssdlife pro 2.5.82 + portable\portable\ssdlife.exe] => (Block) C:\ssd-life pro 2.5.82 + portable\ssdlife pro 2.5.82 + portable\portable\ssdlife.exe => No File
FirewallRules: [TCP Query User{B194C4F2-AF89-497A-909D-847FD721A7CD}C:\program files (x86)\adobe\reader 10.0\reader\acrord32.exe] => (Block) C:\program files (x86)\adobe\reader 10.0\reader\acrord32.exe => No File
FirewallRules: [UDP Query User{630C7DD3-1445-41C9-A90C-2DD01FA1E1E2}C:\program files (x86)\adobe\reader 10.0\reader\acrord32.exe] => (Block) C:\program files (x86)\adobe\reader 10.0\reader\acrord32.exe => No File
FirewallRules: [{87A9E70E-0914-4385-938A-10B92ADEE3B7}] => (Allow) C:\Program Files\Electronic Team\FlexiHub\flexihub64.exe => No File
FirewallRules: [{01DE23C4-0721-47A6-A564-128B8EAE1CEB}] => (Allow) C:\Program Files\Electronic Team\FlexiHub\flexihub-gui.exe => No File
EmptyTemp:
End
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Prosím o kontrolu logu
Fix result of Farbar Recovery Scan Tool (x64) Version: 14-12-2020
Ran by MaClaud (28-12-2020 11:06:33) Run:2
Running from C:\Users\MaClaud\Desktop
Loaded Profiles: MaClaud
Boot Mode: Normal
==============================================
fixlist content:
*****************
Start
CloseProcesses:
HKLM-x32\...\Run: [Eps_Reg.exe] => C:\Users\MaClaud\AppData\Local\Temp\Eps_Reg.exe /L /NSmartCard2000 <==== ATTENTION
HKU\S-1-5-21-1414726678-80063402-3466205120-1000\...\MountPoints2: G - G:\HiSuiteDownLoader.exe
HKU\S-1-5-21-1414726678-80063402-3466205120-1000\...\MountPoints2: {2307927b-40ab-11eb-8a5b-005056c00008} - G:\HiSuiteDownLoader.exe
HKU\S-1-5-21-1414726678-80063402-3466205120-1000\...\MountPoints2: {93935260-8468-11ea-9051-005056c00008} - G:\HiSuiteDownLoader.exe
HKU\S-1-5-21-1414726678-80063402-3466205120-1000\...\MountPoints2: {d17a249f-8ca6-11ea-a771-74f06dbe6f9f} - G:\HiSuiteDownLoader.exe
GroupPolicy: Restriction ? <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
Task: {0BC85B8E-993D-4DCB-9012-2B1F015E0789} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1414726678-80063402-3466205120-1000Core => C:\Users\MaClaud\AppData\Local\Google\Update\GoogleUpdate.exe [144200 2015-08-30] (Google Inc -> Google Inc.)
Task: {D50F5092-5C39-467D-BAFE-B980F8910DA4} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1414726678-80063402-3466205120-1000UA => C:\Users\MaClaud\AppData\Local\Google\Update\GoogleUpdate.exe [144200 2015-08-30] (Google Inc -> Google Inc.)
Winsock: Catalog5 08 C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL => No File
Winsock: Catalog5 09 C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL => No File
Winsock: Catalog5-x64 08 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL => No File
Winsock: Catalog5-x64 09 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL => No File
S1 xcbdplvu; \??\C:\windows\system32\drivers\xcbdplvu.sys [X]
C:\Program Files (x86)\Bonjour
C:\Users\MaClaud\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
testsigning: ==> 'testsigning' is set. Check for possible unsigned driver <==== ATTENTION
ContextMenuHandlers4: [MSSE] -> {0365FE2C-F183-4091-AC82-BFC39FB75C49} => -> No File
ContextMenuHandlers4-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRar\rarext.dll -> No File
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRar\rarext.dll -> No File
AlternateDataStreams: C:\ProgramData\TEMP:2738F84D [140]
FirewallRules: [{97C9FC1A-F734-4B80-BB58-E2D5C43E88CC}] => (Allow) E:\utorrent-portable\utorrent.exe => No File
FirewallRules: [{0DCF4EE6-DE50-4383-95D2-864294B01511}] => (Allow) E:\utorrent-portable\utorrent.exe => No File
FirewallRules: [{0D13A14B-FA7A-4845-A4A0-56E8A0BDE944}] => (Allow) E:\utorrent-portable\utorrent.exe => No File
FirewallRules: [{68F2C9EC-FACB-405F-A13E-C187142AC30E}] => (Allow) E:\utorrent-portable\utorrent.exe => No File
FirewallRules: [{5A1FEEA0-5721-4A12-AA5B-677B60F1789B}] => (Allow) E:\COD\Mr DJ\Call of Duty 2\CoD2SP_s.exe => No File
FirewallRules: [{D9FFC7F7-0EA2-4F93-8B2F-573E5B8353EB}] => (Allow) E:\COD\Mr DJ\Call of Duty 2\CoD2SP_s.exe => No File
FirewallRules: [{89A8AA27-E87C-45B8-BFD0-5008FE083733}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe => No File
FirewallRules: [{DC13EEEA-F085-4E1D-9416-1D89510DA06F}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe => No File
FirewallRules: [TCP Query User{5145A98D-C17E-4E20-809A-CFE39A497D6F}C:\bst\launcher.exe] => (Block) C:\bst\launcher.exe => No File
FirewallRules: [UDP Query User{2BA01A76-8894-4A72-87A9-BDC9EA4A4D0F}C:\bst\launcher.exe] => (Block) C:\bst\launcher.exe => No File
FirewallRules: [TCP Query User{EB679B65-2C5B-4110-A264-04E4A12098AD}C:\infinitybox\cm2mtk\cm2mtk.exe] => (Block) C:\infinitybox\cm2mtk\cm2mtk.exe => No File
FirewallRules: [UDP Query User{46F04CFB-130F-4C50-A7F4-E81CFDDFA3F2}C:\infinitybox\cm2mtk\cm2mtk.exe] => (Block) C:\infinitybox\cm2mtk\cm2mtk.exe => No File
FirewallRules: [TCP Query User{FA24E43D-FAF4-469D-8BA7-2BC92A4A2120}C:\program files (x86)\asus\atk package\atk hotkey\hcontroluser.exe] => (Block) C:\program files (x86)\asus\atk package\atk hotkey\hcontroluser.exe => No File
FirewallRules: [UDP Query User{A70BE068-9C37-4501-84C5-F95E88C5A9C0}C:\program files (x86)\asus\atk package\atk hotkey\hcontroluser.exe] => (Block) C:\program files (x86)\asus\atk package\atk hotkey\hcontroluser.exe => No File
FirewallRules: [TCP Query User{1219A791-79F2-44F4-AB32-6D3E043EECAA}C:\infinitybox\cm2spd\cm2spd.exe] => (Block) C:\infinitybox\cm2spd\cm2spd.exe => No File
FirewallRules: [UDP Query User{D60920CF-07F3-40BF-A95E-CB7BA91B4B46}C:\infinitybox\cm2spd\cm2spd.exe] => (Block) C:\infinitybox\cm2spd\cm2spd.exe => No File
FirewallRules: [{57D9FD9A-2940-479A-887C-7D5FF419F2F4}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe => No File
FirewallRules: [{821A1B40-7407-4FE1-A52D-D46D4DA3676C}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe => No File
FirewallRules: [{0E3B6B89-AA1A-4170-9F4E-3EFEC097E232}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe => No File
FirewallRules: [{0E5BEC32-5DF7-4831-A36E-27C3201FC587}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe => No File
FirewallRules: [{05A55D7E-E198-4A7F-A5CC-39963C050F20}] => (Allow) C:\Program Files (x86)\DroidCam\DroidCamApp.exe => No File
FirewallRules: [{93DB5A39-68F4-4DD5-8636-1FC5B45F0A08}] => (Allow) C:\Program Files (x86)\DroidCam\DroidCamApp.exe => No File
FirewallRules: [TCP Query User{324D481F-3A6C-4EB7-B2B8-60A4B6575782}C:\infinitybox\best2\best2.exe] => (Block) C:\infinitybox\best2\best2.exe => No File
FirewallRules: [UDP Query User{85865210-AAF8-471B-AAA1-EF279F532188}C:\infinitybox\best2\best2.exe] => (Block) C:\infinitybox\best2\best2.exe => No File
FirewallRules: [TCP Query User{7DB7980D-6E22-42B9-855F-EF13A2CE3DAE}C:\program files (x86)\irfanview\i_view32.exe] => (Block) C:\program files (x86)\irfanview\i_view32.exe => No File
FirewallRules: [UDP Query User{2EB7854E-FD99-448F-A023-05C6D781F140}C:\program files (x86)\irfanview\i_view32.exe] => (Block) C:\program files (x86)\irfanview\i_view32.exe => No File
FirewallRules: [TCP Query User{222EF0AB-2DF5-4335-B925-7B1A54155CAE}C:\program files (x86)\binarysense\ssdlife\ssdlife.exe] => (Allow) C:\program files (x86)\binarysense\ssdlife\ssdlife.exe => No File
FirewallRules: [UDP Query User{6EF7902E-24BE-404D-805F-49F7DE7DDDA2}C:\program files (x86)\binarysense\ssdlife\ssdlife.exe] => (Allow) C:\program files (x86)\binarysense\ssdlife\ssdlife.exe => No File
FirewallRules: [TCP Query User{FD852A94-C6F2-415F-892E-3EE02E91F457}C:\infinitybox\cm2scr\cm2scr.exe] => (Block) C:\infinitybox\cm2scr\cm2scr.exe => No File
FirewallRules: [UDP Query User{269507FB-7A4A-4B59-92D5-CD8E79E19BF2}C:\infinitybox\cm2scr\cm2scr.exe] => (Block) C:\infinitybox\cm2scr\cm2scr.exe => No File
FirewallRules: [{55F213C0-997F-4331-87D7-A84E6E1684B8}] => (Allow) C:\Users\MaClaud\AppData\Roaming\Zoom\bin\airhost.exe => No File
FirewallRules: [TCP Query User{0C708C10-F1EA-4C70-B626-21FB748C3985}C:\program files (x86)\asus\atk package\atk media\dmedia.exe] => (Block) C:\program files (x86)\asus\atk package\atk media\dmedia.exe => No File
FirewallRules: [UDP Query User{881E14F5-E38C-4774-AD80-9E80C0BD2A16}C:\program files (x86)\asus\atk package\atk media\dmedia.exe] => (Block) C:\program files (x86)\asus\atk package\atk media\dmedia.exe => No File
FirewallRules: [TCP Query User{098FA39A-160D-4D1C-8157-0D9B92147018}C:\users\maclaud\appdata\local\temp\setb653.tmp] => (Block) C:\users\maclaud\appdata\local\temp\setb653.tmp => No File
FirewallRules: [UDP Query User{4859FADE-A098-47BA-A899-7756AAEADC26}C:\users\maclaud\appdata\local\temp\setb653.tmp] => (Block) C:\users\maclaud\appdata\local\temp\setb653.tmp => No File
FirewallRules: [TCP Query User{8B77522C-706C-4C82-8322-49BEC8012417}C:\users\maclaud\appdata\local\temp\set3699.tmp] => (Block) C:\users\maclaud\appdata\local\temp\set3699.tmp => No File
FirewallRules: [UDP Query User{6FE82C74-2707-4000-8517-5255CD72DDC6}C:\users\maclaud\appdata\local\temp\set3699.tmp] => (Block) C:\users\maclaud\appdata\local\temp\set3699.tmp => No File
FirewallRules: [TCP Query User{C0ECF045-532D-41F0-ADF2-3D1791A8B962}C:\users\maclaud\appdata\local\temp\set341a.tmp] => (Block) C:\users\maclaud\appdata\local\temp\set341a.tmp => No File
FirewallRules: [UDP Query User{D57A71D2-B910-42BE-AC4E-CFBCAC60F238}C:\users\maclaud\appdata\local\temp\set341a.tmp] => (Block) C:\users\maclaud\appdata\local\temp\set341a.tmp => No File
FirewallRules: [TCP Query User{1EF42E40-3F3F-470D-94C5-79CFEA6EC608}C:\ssd-life pro 2.5.82 + portable\ssdlife pro 2.5.82 + portable\portable\ssdlife.exe] => (Block) C:\ssd-life pro 2.5.82 + portable\ssdlife pro 2.5.82 + portable\portable\ssdlife.exe => No File
FirewallRules: [UDP Query User{9E97D5C3-87DA-48CB-A077-8F8B2D6AF84E}C:\ssd-life pro 2.5.82 + portable\ssdlife pro 2.5.82 + portable\portable\ssdlife.exe] => (Block) C:\ssd-life pro 2.5.82 + portable\ssdlife pro 2.5.82 + portable\portable\ssdlife.exe => No File
FirewallRules: [TCP Query User{B194C4F2-AF89-497A-909D-847FD721A7CD}C:\program files (x86)\adobe\reader 10.0\reader\acrord32.exe] => (Block) C:\program files (x86)\adobe\reader 10.0\reader\acrord32.exe => No File
FirewallRules: [UDP Query User{630C7DD3-1445-41C9-A90C-2DD01FA1E1E2}C:\program files (x86)\adobe\reader 10.0\reader\acrord32.exe] => (Block) C:\program files (x86)\adobe\reader 10.0\reader\acrord32.exe => No File
FirewallRules: [{87A9E70E-0914-4385-938A-10B92ADEE3B7}] => (Allow) C:\Program Files\Electronic Team\FlexiHub\flexihub64.exe => No File
FirewallRules: [{01DE23C4-0721-47A6-A564-128B8EAE1CEB}] => (Allow) C:\Program Files\Electronic Team\FlexiHub\flexihub-gui.exe => No File
EmptyTemp:
End
*****************
Processes closed successfully.
"HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\Eps_Reg.exe" => removed successfully
HKU\S-1-5-21-1414726678-80063402-3466205120-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\G => removed successfully
HKU\S-1-5-21-1414726678-80063402-3466205120-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{2307927b-40ab-11eb-8a5b-005056c00008} => removed successfully
HKU\S-1-5-21-1414726678-80063402-3466205120-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{93935260-8468-11ea-9051-005056c00008} => removed successfully
HKU\S-1-5-21-1414726678-80063402-3466205120-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{d17a249f-8ca6-11ea-a771-74f06dbe6f9f} => removed successfully
C:\windows\system32\GroupPolicy\Machine => moved successfully
C:\windows\system32\GroupPolicy\GPT.ini => moved successfully
C:\windows\SysWOW64\GroupPolicy\GPT.ini => moved successfully
C:\ProgramData\NTUSER.pol => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{0BC85B8E-993D-4DCB-9012-2B1F015E0789}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0BC85B8E-993D-4DCB-9012-2B1F015E0789}" => removed successfully
C:\windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1414726678-80063402-3466205120-1000Core => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskUserS-1-5-21-1414726678-80063402-3466205120-1000Core" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{D50F5092-5C39-467D-BAFE-B980F8910DA4}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D50F5092-5C39-467D-BAFE-B980F8910DA4}" => removed successfully
C:\windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1414726678-80063402-3466205120-1000UA => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskUserS-1-5-21-1414726678-80063402-3466205120-1000UA" => removed successfully
HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000008 => removed successfully
HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000009 => removed successfully
HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000008 => removed successfully
HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000009 => removed successfully
HKLM\System\CurrentControlSet\Services\xcbdplvu => removed successfully
xcbdplvu => service removed successfully
C:\Program Files (x86)\Bonjour => moved successfully
C:\Users\MaClaud\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini => moved successfully
========================= bcdedit ========================
Operace byla dokon�ena �sp��n�.
========= End of bcdedit =========
HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\MSSE => removed successfully
HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\WinRAR32 => removed successfully
HKLM\Software\Wow6432Node\Classes\CLSID\{B41DB860-8EE4-11D2-9906-E49FADC173CA} => removed successfully
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\WinRAR32 => removed successfully
C:\ProgramData\TEMP => ":2738F84D" ADS removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{97C9FC1A-F734-4B80-BB58-E2D5C43E88CC}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{0DCF4EE6-DE50-4383-95D2-864294B01511}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{0D13A14B-FA7A-4845-A4A0-56E8A0BDE944}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{68F2C9EC-FACB-405F-A13E-C187142AC30E}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{5A1FEEA0-5721-4A12-AA5B-677B60F1789B}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{D9FFC7F7-0EA2-4F93-8B2F-573E5B8353EB}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{89A8AA27-E87C-45B8-BFD0-5008FE083733}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{DC13EEEA-F085-4E1D-9416-1D89510DA06F}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{5145A98D-C17E-4E20-809A-CFE39A497D6F}C:\bst\launcher.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{2BA01A76-8894-4A72-87A9-BDC9EA4A4D0F}C:\bst\launcher.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{EB679B65-2C5B-4110-A264-04E4A12098AD}C:\infinitybox\cm2mtk\cm2mtk.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{46F04CFB-130F-4C50-A7F4-E81CFDDFA3F2}C:\infinitybox\cm2mtk\cm2mtk.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{FA24E43D-FAF4-469D-8BA7-2BC92A4A2120}C:\program files (x86)\asus\atk package\atk hotkey\hcontroluser.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{A70BE068-9C37-4501-84C5-F95E88C5A9C0}C:\program files (x86)\asus\atk package\atk hotkey\hcontroluser.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{1219A791-79F2-44F4-AB32-6D3E043EECAA}C:\infinitybox\cm2spd\cm2spd.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{D60920CF-07F3-40BF-A95E-CB7BA91B4B46}C:\infinitybox\cm2spd\cm2spd.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{57D9FD9A-2940-479A-887C-7D5FF419F2F4}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{821A1B40-7407-4FE1-A52D-D46D4DA3676C}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{0E3B6B89-AA1A-4170-9F4E-3EFEC097E232}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{0E5BEC32-5DF7-4831-A36E-27C3201FC587}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{05A55D7E-E198-4A7F-A5CC-39963C050F20}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{93DB5A39-68F4-4DD5-8636-1FC5B45F0A08}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{324D481F-3A6C-4EB7-B2B8-60A4B6575782}C:\infinitybox\best2\best2.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{85865210-AAF8-471B-AAA1-EF279F532188}C:\infinitybox\best2\best2.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{7DB7980D-6E22-42B9-855F-EF13A2CE3DAE}C:\program files (x86)\irfanview\i_view32.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{2EB7854E-FD99-448F-A023-05C6D781F140}C:\program files (x86)\irfanview\i_view32.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{222EF0AB-2DF5-4335-B925-7B1A54155CAE}C:\program files (x86)\binarysense\ssdlife\ssdlife.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{6EF7902E-24BE-404D-805F-49F7DE7DDDA2}C:\program files (x86)\binarysense\ssdlife\ssdlife.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{FD852A94-C6F2-415F-892E-3EE02E91F457}C:\infinitybox\cm2scr\cm2scr.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{269507FB-7A4A-4B59-92D5-CD8E79E19BF2}C:\infinitybox\cm2scr\cm2scr.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{55F213C0-997F-4331-87D7-A84E6E1684B8}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{0C708C10-F1EA-4C70-B626-21FB748C3985}C:\program files (x86)\asus\atk package\atk media\dmedia.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{881E14F5-E38C-4774-AD80-9E80C0BD2A16}C:\program files (x86)\asus\atk package\atk media\dmedia.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{098FA39A-160D-4D1C-8157-0D9B92147018}C:\users\maclaud\appdata\local\temp\setb653.tmp" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{4859FADE-A098-47BA-A899-7756AAEADC26}C:\users\maclaud\appdata\local\temp\setb653.tmp" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{8B77522C-706C-4C82-8322-49BEC8012417}C:\users\maclaud\appdata\local\temp\set3699.tmp" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{6FE82C74-2707-4000-8517-5255CD72DDC6}C:\users\maclaud\appdata\local\temp\set3699.tmp" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{C0ECF045-532D-41F0-ADF2-3D1791A8B962}C:\users\maclaud\appdata\local\temp\set341a.tmp" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{D57A71D2-B910-42BE-AC4E-CFBCAC60F238}C:\users\maclaud\appdata\local\temp\set341a.tmp" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{1EF42E40-3F3F-470D-94C5-79CFEA6EC608}C:\ssd-life pro 2.5.82 + portable\ssdlife pro 2.5.82 + portable\portable\ssdlife.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{9E97D5C3-87DA-48CB-A077-8F8B2D6AF84E}C:\ssd-life pro 2.5.82 + portable\ssdlife pro 2.5.82 + portable\portable\ssdlife.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{B194C4F2-AF89-497A-909D-847FD721A7CD}C:\program files (x86)\adobe\reader 10.0\reader\acrord32.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{630C7DD3-1445-41C9-A90C-2DD01FA1E1E2}C:\program files (x86)\adobe\reader 10.0\reader\acrord32.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{87A9E70E-0914-4385-938A-10B92ADEE3B7}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{01DE23C4-0721-47A6-A564-128B8EAE1CEB}" => removed successfully
=========== EmptyTemp: ==========
BITS transfer queue => 8388608 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 16225357 B
Java, Flash, Steam htmlcache => 510 B
Windows/system/drivers => 4854 B
Edge => 0 B
Chrome => 347116648 B
Firefox => 563999588 B
Opera => 0 B
Temp, IE cache, history, cookies, recent:
Users => 0 B
Default => 0 B
Public => 0 B
ProgramData => 0 B
systemprofile => 128 B
systemprofile32 => 256 B
LocalService => 256 B
NetworkService => 3606 B
MaClaud => 84548783 B
UpdatusUser => 84548783 B
Guest => 84548783 B
MSSQL$SQLEXPRESS => 84548783 B
RecycleBin => 76579090 B
EmptyTemp: => 1.3 GB temporary data Removed.
================================
The system needed a reboot.
==== End of Fixlog 11:06:47 ====
Ran by MaClaud (28-12-2020 11:06:33) Run:2
Running from C:\Users\MaClaud\Desktop
Loaded Profiles: MaClaud
Boot Mode: Normal
==============================================
fixlist content:
*****************
Start
CloseProcesses:
HKLM-x32\...\Run: [Eps_Reg.exe] => C:\Users\MaClaud\AppData\Local\Temp\Eps_Reg.exe /L /NSmartCard2000 <==== ATTENTION
HKU\S-1-5-21-1414726678-80063402-3466205120-1000\...\MountPoints2: G - G:\HiSuiteDownLoader.exe
HKU\S-1-5-21-1414726678-80063402-3466205120-1000\...\MountPoints2: {2307927b-40ab-11eb-8a5b-005056c00008} - G:\HiSuiteDownLoader.exe
HKU\S-1-5-21-1414726678-80063402-3466205120-1000\...\MountPoints2: {93935260-8468-11ea-9051-005056c00008} - G:\HiSuiteDownLoader.exe
HKU\S-1-5-21-1414726678-80063402-3466205120-1000\...\MountPoints2: {d17a249f-8ca6-11ea-a771-74f06dbe6f9f} - G:\HiSuiteDownLoader.exe
GroupPolicy: Restriction ? <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
Task: {0BC85B8E-993D-4DCB-9012-2B1F015E0789} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1414726678-80063402-3466205120-1000Core => C:\Users\MaClaud\AppData\Local\Google\Update\GoogleUpdate.exe [144200 2015-08-30] (Google Inc -> Google Inc.)
Task: {D50F5092-5C39-467D-BAFE-B980F8910DA4} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1414726678-80063402-3466205120-1000UA => C:\Users\MaClaud\AppData\Local\Google\Update\GoogleUpdate.exe [144200 2015-08-30] (Google Inc -> Google Inc.)
Winsock: Catalog5 08 C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL => No File
Winsock: Catalog5 09 C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL => No File
Winsock: Catalog5-x64 08 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL => No File
Winsock: Catalog5-x64 09 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL => No File
S1 xcbdplvu; \??\C:\windows\system32\drivers\xcbdplvu.sys [X]
C:\Program Files (x86)\Bonjour
C:\Users\MaClaud\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
testsigning: ==> 'testsigning' is set. Check for possible unsigned driver <==== ATTENTION
ContextMenuHandlers4: [MSSE] -> {0365FE2C-F183-4091-AC82-BFC39FB75C49} => -> No File
ContextMenuHandlers4-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRar\rarext.dll -> No File
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRar\rarext.dll -> No File
AlternateDataStreams: C:\ProgramData\TEMP:2738F84D [140]
FirewallRules: [{97C9FC1A-F734-4B80-BB58-E2D5C43E88CC}] => (Allow) E:\utorrent-portable\utorrent.exe => No File
FirewallRules: [{0DCF4EE6-DE50-4383-95D2-864294B01511}] => (Allow) E:\utorrent-portable\utorrent.exe => No File
FirewallRules: [{0D13A14B-FA7A-4845-A4A0-56E8A0BDE944}] => (Allow) E:\utorrent-portable\utorrent.exe => No File
FirewallRules: [{68F2C9EC-FACB-405F-A13E-C187142AC30E}] => (Allow) E:\utorrent-portable\utorrent.exe => No File
FirewallRules: [{5A1FEEA0-5721-4A12-AA5B-677B60F1789B}] => (Allow) E:\COD\Mr DJ\Call of Duty 2\CoD2SP_s.exe => No File
FirewallRules: [{D9FFC7F7-0EA2-4F93-8B2F-573E5B8353EB}] => (Allow) E:\COD\Mr DJ\Call of Duty 2\CoD2SP_s.exe => No File
FirewallRules: [{89A8AA27-E87C-45B8-BFD0-5008FE083733}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe => No File
FirewallRules: [{DC13EEEA-F085-4E1D-9416-1D89510DA06F}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe => No File
FirewallRules: [TCP Query User{5145A98D-C17E-4E20-809A-CFE39A497D6F}C:\bst\launcher.exe] => (Block) C:\bst\launcher.exe => No File
FirewallRules: [UDP Query User{2BA01A76-8894-4A72-87A9-BDC9EA4A4D0F}C:\bst\launcher.exe] => (Block) C:\bst\launcher.exe => No File
FirewallRules: [TCP Query User{EB679B65-2C5B-4110-A264-04E4A12098AD}C:\infinitybox\cm2mtk\cm2mtk.exe] => (Block) C:\infinitybox\cm2mtk\cm2mtk.exe => No File
FirewallRules: [UDP Query User{46F04CFB-130F-4C50-A7F4-E81CFDDFA3F2}C:\infinitybox\cm2mtk\cm2mtk.exe] => (Block) C:\infinitybox\cm2mtk\cm2mtk.exe => No File
FirewallRules: [TCP Query User{FA24E43D-FAF4-469D-8BA7-2BC92A4A2120}C:\program files (x86)\asus\atk package\atk hotkey\hcontroluser.exe] => (Block) C:\program files (x86)\asus\atk package\atk hotkey\hcontroluser.exe => No File
FirewallRules: [UDP Query User{A70BE068-9C37-4501-84C5-F95E88C5A9C0}C:\program files (x86)\asus\atk package\atk hotkey\hcontroluser.exe] => (Block) C:\program files (x86)\asus\atk package\atk hotkey\hcontroluser.exe => No File
FirewallRules: [TCP Query User{1219A791-79F2-44F4-AB32-6D3E043EECAA}C:\infinitybox\cm2spd\cm2spd.exe] => (Block) C:\infinitybox\cm2spd\cm2spd.exe => No File
FirewallRules: [UDP Query User{D60920CF-07F3-40BF-A95E-CB7BA91B4B46}C:\infinitybox\cm2spd\cm2spd.exe] => (Block) C:\infinitybox\cm2spd\cm2spd.exe => No File
FirewallRules: [{57D9FD9A-2940-479A-887C-7D5FF419F2F4}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe => No File
FirewallRules: [{821A1B40-7407-4FE1-A52D-D46D4DA3676C}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe => No File
FirewallRules: [{0E3B6B89-AA1A-4170-9F4E-3EFEC097E232}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe => No File
FirewallRules: [{0E5BEC32-5DF7-4831-A36E-27C3201FC587}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe => No File
FirewallRules: [{05A55D7E-E198-4A7F-A5CC-39963C050F20}] => (Allow) C:\Program Files (x86)\DroidCam\DroidCamApp.exe => No File
FirewallRules: [{93DB5A39-68F4-4DD5-8636-1FC5B45F0A08}] => (Allow) C:\Program Files (x86)\DroidCam\DroidCamApp.exe => No File
FirewallRules: [TCP Query User{324D481F-3A6C-4EB7-B2B8-60A4B6575782}C:\infinitybox\best2\best2.exe] => (Block) C:\infinitybox\best2\best2.exe => No File
FirewallRules: [UDP Query User{85865210-AAF8-471B-AAA1-EF279F532188}C:\infinitybox\best2\best2.exe] => (Block) C:\infinitybox\best2\best2.exe => No File
FirewallRules: [TCP Query User{7DB7980D-6E22-42B9-855F-EF13A2CE3DAE}C:\program files (x86)\irfanview\i_view32.exe] => (Block) C:\program files (x86)\irfanview\i_view32.exe => No File
FirewallRules: [UDP Query User{2EB7854E-FD99-448F-A023-05C6D781F140}C:\program files (x86)\irfanview\i_view32.exe] => (Block) C:\program files (x86)\irfanview\i_view32.exe => No File
FirewallRules: [TCP Query User{222EF0AB-2DF5-4335-B925-7B1A54155CAE}C:\program files (x86)\binarysense\ssdlife\ssdlife.exe] => (Allow) C:\program files (x86)\binarysense\ssdlife\ssdlife.exe => No File
FirewallRules: [UDP Query User{6EF7902E-24BE-404D-805F-49F7DE7DDDA2}C:\program files (x86)\binarysense\ssdlife\ssdlife.exe] => (Allow) C:\program files (x86)\binarysense\ssdlife\ssdlife.exe => No File
FirewallRules: [TCP Query User{FD852A94-C6F2-415F-892E-3EE02E91F457}C:\infinitybox\cm2scr\cm2scr.exe] => (Block) C:\infinitybox\cm2scr\cm2scr.exe => No File
FirewallRules: [UDP Query User{269507FB-7A4A-4B59-92D5-CD8E79E19BF2}C:\infinitybox\cm2scr\cm2scr.exe] => (Block) C:\infinitybox\cm2scr\cm2scr.exe => No File
FirewallRules: [{55F213C0-997F-4331-87D7-A84E6E1684B8}] => (Allow) C:\Users\MaClaud\AppData\Roaming\Zoom\bin\airhost.exe => No File
FirewallRules: [TCP Query User{0C708C10-F1EA-4C70-B626-21FB748C3985}C:\program files (x86)\asus\atk package\atk media\dmedia.exe] => (Block) C:\program files (x86)\asus\atk package\atk media\dmedia.exe => No File
FirewallRules: [UDP Query User{881E14F5-E38C-4774-AD80-9E80C0BD2A16}C:\program files (x86)\asus\atk package\atk media\dmedia.exe] => (Block) C:\program files (x86)\asus\atk package\atk media\dmedia.exe => No File
FirewallRules: [TCP Query User{098FA39A-160D-4D1C-8157-0D9B92147018}C:\users\maclaud\appdata\local\temp\setb653.tmp] => (Block) C:\users\maclaud\appdata\local\temp\setb653.tmp => No File
FirewallRules: [UDP Query User{4859FADE-A098-47BA-A899-7756AAEADC26}C:\users\maclaud\appdata\local\temp\setb653.tmp] => (Block) C:\users\maclaud\appdata\local\temp\setb653.tmp => No File
FirewallRules: [TCP Query User{8B77522C-706C-4C82-8322-49BEC8012417}C:\users\maclaud\appdata\local\temp\set3699.tmp] => (Block) C:\users\maclaud\appdata\local\temp\set3699.tmp => No File
FirewallRules: [UDP Query User{6FE82C74-2707-4000-8517-5255CD72DDC6}C:\users\maclaud\appdata\local\temp\set3699.tmp] => (Block) C:\users\maclaud\appdata\local\temp\set3699.tmp => No File
FirewallRules: [TCP Query User{C0ECF045-532D-41F0-ADF2-3D1791A8B962}C:\users\maclaud\appdata\local\temp\set341a.tmp] => (Block) C:\users\maclaud\appdata\local\temp\set341a.tmp => No File
FirewallRules: [UDP Query User{D57A71D2-B910-42BE-AC4E-CFBCAC60F238}C:\users\maclaud\appdata\local\temp\set341a.tmp] => (Block) C:\users\maclaud\appdata\local\temp\set341a.tmp => No File
FirewallRules: [TCP Query User{1EF42E40-3F3F-470D-94C5-79CFEA6EC608}C:\ssd-life pro 2.5.82 + portable\ssdlife pro 2.5.82 + portable\portable\ssdlife.exe] => (Block) C:\ssd-life pro 2.5.82 + portable\ssdlife pro 2.5.82 + portable\portable\ssdlife.exe => No File
FirewallRules: [UDP Query User{9E97D5C3-87DA-48CB-A077-8F8B2D6AF84E}C:\ssd-life pro 2.5.82 + portable\ssdlife pro 2.5.82 + portable\portable\ssdlife.exe] => (Block) C:\ssd-life pro 2.5.82 + portable\ssdlife pro 2.5.82 + portable\portable\ssdlife.exe => No File
FirewallRules: [TCP Query User{B194C4F2-AF89-497A-909D-847FD721A7CD}C:\program files (x86)\adobe\reader 10.0\reader\acrord32.exe] => (Block) C:\program files (x86)\adobe\reader 10.0\reader\acrord32.exe => No File
FirewallRules: [UDP Query User{630C7DD3-1445-41C9-A90C-2DD01FA1E1E2}C:\program files (x86)\adobe\reader 10.0\reader\acrord32.exe] => (Block) C:\program files (x86)\adobe\reader 10.0\reader\acrord32.exe => No File
FirewallRules: [{87A9E70E-0914-4385-938A-10B92ADEE3B7}] => (Allow) C:\Program Files\Electronic Team\FlexiHub\flexihub64.exe => No File
FirewallRules: [{01DE23C4-0721-47A6-A564-128B8EAE1CEB}] => (Allow) C:\Program Files\Electronic Team\FlexiHub\flexihub-gui.exe => No File
EmptyTemp:
End
*****************
Processes closed successfully.
"HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\Eps_Reg.exe" => removed successfully
HKU\S-1-5-21-1414726678-80063402-3466205120-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\G => removed successfully
HKU\S-1-5-21-1414726678-80063402-3466205120-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{2307927b-40ab-11eb-8a5b-005056c00008} => removed successfully
HKU\S-1-5-21-1414726678-80063402-3466205120-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{93935260-8468-11ea-9051-005056c00008} => removed successfully
HKU\S-1-5-21-1414726678-80063402-3466205120-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{d17a249f-8ca6-11ea-a771-74f06dbe6f9f} => removed successfully
C:\windows\system32\GroupPolicy\Machine => moved successfully
C:\windows\system32\GroupPolicy\GPT.ini => moved successfully
C:\windows\SysWOW64\GroupPolicy\GPT.ini => moved successfully
C:\ProgramData\NTUSER.pol => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{0BC85B8E-993D-4DCB-9012-2B1F015E0789}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0BC85B8E-993D-4DCB-9012-2B1F015E0789}" => removed successfully
C:\windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1414726678-80063402-3466205120-1000Core => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskUserS-1-5-21-1414726678-80063402-3466205120-1000Core" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{D50F5092-5C39-467D-BAFE-B980F8910DA4}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D50F5092-5C39-467D-BAFE-B980F8910DA4}" => removed successfully
C:\windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1414726678-80063402-3466205120-1000UA => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskUserS-1-5-21-1414726678-80063402-3466205120-1000UA" => removed successfully
HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000008 => removed successfully
HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000009 => removed successfully
HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000008 => removed successfully
HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000009 => removed successfully
HKLM\System\CurrentControlSet\Services\xcbdplvu => removed successfully
xcbdplvu => service removed successfully
C:\Program Files (x86)\Bonjour => moved successfully
C:\Users\MaClaud\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini => moved successfully
========================= bcdedit ========================
Operace byla dokon�ena �sp��n�.
========= End of bcdedit =========
HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\MSSE => removed successfully
HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\WinRAR32 => removed successfully
HKLM\Software\Wow6432Node\Classes\CLSID\{B41DB860-8EE4-11D2-9906-E49FADC173CA} => removed successfully
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\WinRAR32 => removed successfully
C:\ProgramData\TEMP => ":2738F84D" ADS removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{97C9FC1A-F734-4B80-BB58-E2D5C43E88CC}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{0DCF4EE6-DE50-4383-95D2-864294B01511}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{0D13A14B-FA7A-4845-A4A0-56E8A0BDE944}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{68F2C9EC-FACB-405F-A13E-C187142AC30E}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{5A1FEEA0-5721-4A12-AA5B-677B60F1789B}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{D9FFC7F7-0EA2-4F93-8B2F-573E5B8353EB}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{89A8AA27-E87C-45B8-BFD0-5008FE083733}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{DC13EEEA-F085-4E1D-9416-1D89510DA06F}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{5145A98D-C17E-4E20-809A-CFE39A497D6F}C:\bst\launcher.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{2BA01A76-8894-4A72-87A9-BDC9EA4A4D0F}C:\bst\launcher.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{EB679B65-2C5B-4110-A264-04E4A12098AD}C:\infinitybox\cm2mtk\cm2mtk.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{46F04CFB-130F-4C50-A7F4-E81CFDDFA3F2}C:\infinitybox\cm2mtk\cm2mtk.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{FA24E43D-FAF4-469D-8BA7-2BC92A4A2120}C:\program files (x86)\asus\atk package\atk hotkey\hcontroluser.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{A70BE068-9C37-4501-84C5-F95E88C5A9C0}C:\program files (x86)\asus\atk package\atk hotkey\hcontroluser.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{1219A791-79F2-44F4-AB32-6D3E043EECAA}C:\infinitybox\cm2spd\cm2spd.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{D60920CF-07F3-40BF-A95E-CB7BA91B4B46}C:\infinitybox\cm2spd\cm2spd.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{57D9FD9A-2940-479A-887C-7D5FF419F2F4}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{821A1B40-7407-4FE1-A52D-D46D4DA3676C}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{0E3B6B89-AA1A-4170-9F4E-3EFEC097E232}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{0E5BEC32-5DF7-4831-A36E-27C3201FC587}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{05A55D7E-E198-4A7F-A5CC-39963C050F20}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{93DB5A39-68F4-4DD5-8636-1FC5B45F0A08}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{324D481F-3A6C-4EB7-B2B8-60A4B6575782}C:\infinitybox\best2\best2.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{85865210-AAF8-471B-AAA1-EF279F532188}C:\infinitybox\best2\best2.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{7DB7980D-6E22-42B9-855F-EF13A2CE3DAE}C:\program files (x86)\irfanview\i_view32.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{2EB7854E-FD99-448F-A023-05C6D781F140}C:\program files (x86)\irfanview\i_view32.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{222EF0AB-2DF5-4335-B925-7B1A54155CAE}C:\program files (x86)\binarysense\ssdlife\ssdlife.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{6EF7902E-24BE-404D-805F-49F7DE7DDDA2}C:\program files (x86)\binarysense\ssdlife\ssdlife.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{FD852A94-C6F2-415F-892E-3EE02E91F457}C:\infinitybox\cm2scr\cm2scr.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{269507FB-7A4A-4B59-92D5-CD8E79E19BF2}C:\infinitybox\cm2scr\cm2scr.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{55F213C0-997F-4331-87D7-A84E6E1684B8}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{0C708C10-F1EA-4C70-B626-21FB748C3985}C:\program files (x86)\asus\atk package\atk media\dmedia.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{881E14F5-E38C-4774-AD80-9E80C0BD2A16}C:\program files (x86)\asus\atk package\atk media\dmedia.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{098FA39A-160D-4D1C-8157-0D9B92147018}C:\users\maclaud\appdata\local\temp\setb653.tmp" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{4859FADE-A098-47BA-A899-7756AAEADC26}C:\users\maclaud\appdata\local\temp\setb653.tmp" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{8B77522C-706C-4C82-8322-49BEC8012417}C:\users\maclaud\appdata\local\temp\set3699.tmp" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{6FE82C74-2707-4000-8517-5255CD72DDC6}C:\users\maclaud\appdata\local\temp\set3699.tmp" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{C0ECF045-532D-41F0-ADF2-3D1791A8B962}C:\users\maclaud\appdata\local\temp\set341a.tmp" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{D57A71D2-B910-42BE-AC4E-CFBCAC60F238}C:\users\maclaud\appdata\local\temp\set341a.tmp" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{1EF42E40-3F3F-470D-94C5-79CFEA6EC608}C:\ssd-life pro 2.5.82 + portable\ssdlife pro 2.5.82 + portable\portable\ssdlife.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{9E97D5C3-87DA-48CB-A077-8F8B2D6AF84E}C:\ssd-life pro 2.5.82 + portable\ssdlife pro 2.5.82 + portable\portable\ssdlife.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{B194C4F2-AF89-497A-909D-847FD721A7CD}C:\program files (x86)\adobe\reader 10.0\reader\acrord32.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{630C7DD3-1445-41C9-A90C-2DD01FA1E1E2}C:\program files (x86)\adobe\reader 10.0\reader\acrord32.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{87A9E70E-0914-4385-938A-10B92ADEE3B7}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{01DE23C4-0721-47A6-A564-128B8EAE1CEB}" => removed successfully
=========== EmptyTemp: ==========
BITS transfer queue => 8388608 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 16225357 B
Java, Flash, Steam htmlcache => 510 B
Windows/system/drivers => 4854 B
Edge => 0 B
Chrome => 347116648 B
Firefox => 563999588 B
Opera => 0 B
Temp, IE cache, history, cookies, recent:
Users => 0 B
Default => 0 B
Public => 0 B
ProgramData => 0 B
systemprofile => 128 B
systemprofile32 => 256 B
LocalService => 256 B
NetworkService => 3606 B
MaClaud => 84548783 B
UpdatusUser => 84548783 B
Guest => 84548783 B
MSSQL$SQLEXPRESS => 84548783 B
RecycleBin => 76579090 B
EmptyTemp: => 1.3 GB temporary data Removed.
================================
The system needed a reboot.
==== End of Fixlog 11:06:47 ====
Re: Prosím o kontrolu logu
Děkuji
-
Rudy
- Site Admin
- Příspěvky: 119418
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Prosím o kontrolu logu
Smazáno. Nastala nějaká změna?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Prosím o kontrolu logu
Bohuzel tu chybu to hazi porad. pocitac se chova ted jinak, zda se ze to tam provedlo nejakou neplechu... co jsem googlil tak to vypada ze pouze reinstal nebo obnova ze zalohy bude resenim... kazdopadne dekuji velice za pomoc!
-
Rudy
- Site Admin
- Příspěvky: 119418
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Prosím o kontrolu logu
Zkuste ještě spustit AVPTool: http://www.viry.cz/forum/viewtopic.php?f=29&t=58179 ( odkazu je popis na jinou verzi). Stáhněte, spusťte, nechte pracovat a po skončení akce smažte vše, co najde. Pokud by spustit nešel, spusťte v nouz. režimu.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Přispějete na provoz fóra?