Re: Rootkit
Napsal: 03 úno 2013 14:42
A po čištění:
# AdwCleaner v2.109 - Logfile created 02/03/2013 at 14:37:45
# Updated 26/01/2013 by Xplode
# Operating system : Microsoft Windows XP Service Pack 3 (32 bits)
# User : Vláďa - KOCIANOVI
# Boot Mode : Normal
# Running from : C:\Documents and Settings\Vláďa\Plocha\adwcleaner.exe
# Option [Delete]
***** [Services] *****
***** [Files / Folders] *****
File Deleted : C:\Documents and Settings\Vláďa\Data aplikací\Mozilla\Firefox\Profiles\wlbxj8q0.default\searchplugins\icqplugin.xml
Folder Deleted : C:\Documents and Settings\All Users\Data aplikací\ICQ\ICQToolbar
Folder Deleted : C:\Documents and Settings\All Users\Data aplikací\Trymedia
Folder Deleted : C:\Program Files\ICQ6Toolbar
***** [Registry] *****
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{855F3B16-6D32-4FE6-8A56-BBB695989046}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{855F3B16-6D32-4FE6-8A56-BBB695989046}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{CD95D125-2992-4858-B3EF-5F6FB52FBAD6}
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0FF2AEFF45EEA0A48A4B33C1973B6094
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\305B09CE8C53A214DB58887F62F25536
Key Deleted : HKLM\Software\TENCENT
***** [Internet Browsers] *****
-\\ Internet Explorer v8.0.6001.18702
Replaced : [HKCU\Software\Microsoft\Internet Explorer\Main - ICQ Search] = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd --> hxxp://www.google.com
-\\ Mozilla Firefox v17.0.1 (cs)
File : C:\Documents and Settings\Vláďa\Data aplikací\Mozilla\Firefox\Profiles\wlbxj8q0.default\prefs.js
Deleted : user_pref("keyword.URL", "hxxp://search.icq.com/search/afe_results.php?ch_id=afex&tb_ver=1.1.6&q=");
File : C:\Documents and Settings\Táta\Data aplikací\Mozilla\Firefox\Profiles\pe2zffyf.default\prefs.js
[OK] File is clean.
-\\ Google Chrome v24.0.1312.57
File : C:\Documents and Settings\Vláďa\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Preferences
[OK] File is clean.
File : C:\Documents and Settings\Táta\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Preferences
[OK] File is clean.
File : C:\Documents and Settings\Máma\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Preferences
[OK] File is clean.
*************************
AdwCleaner[R1].txt - [2915 octets] - [03/02/2013 14:35:07]
AdwCleaner[S1].txt - [2756 octets] - [03/02/2013 14:37:45]
########## EOF - C:\AdwCleaner[S1].txt - [2816 octets] ##########
Ale zaráží mě, že Chrome na mě vyplivl chybovou hlášku, že nemůže obnovit moje na stavení, ale zato Skype Click to Call, který jsem měl doteď zablokované si jede vesele dál
# AdwCleaner v2.109 - Logfile created 02/03/2013 at 14:37:45
# Updated 26/01/2013 by Xplode
# Operating system : Microsoft Windows XP Service Pack 3 (32 bits)
# User : Vláďa - KOCIANOVI
# Boot Mode : Normal
# Running from : C:\Documents and Settings\Vláďa\Plocha\adwcleaner.exe
# Option [Delete]
***** [Services] *****
***** [Files / Folders] *****
File Deleted : C:\Documents and Settings\Vláďa\Data aplikací\Mozilla\Firefox\Profiles\wlbxj8q0.default\searchplugins\icqplugin.xml
Folder Deleted : C:\Documents and Settings\All Users\Data aplikací\ICQ\ICQToolbar
Folder Deleted : C:\Documents and Settings\All Users\Data aplikací\Trymedia
Folder Deleted : C:\Program Files\ICQ6Toolbar
***** [Registry] *****
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{855F3B16-6D32-4FE6-8A56-BBB695989046}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{855F3B16-6D32-4FE6-8A56-BBB695989046}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{CD95D125-2992-4858-B3EF-5F6FB52FBAD6}
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0FF2AEFF45EEA0A48A4B33C1973B6094
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\305B09CE8C53A214DB58887F62F25536
Key Deleted : HKLM\Software\TENCENT
***** [Internet Browsers] *****
-\\ Internet Explorer v8.0.6001.18702
Replaced : [HKCU\Software\Microsoft\Internet Explorer\Main - ICQ Search] = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd --> hxxp://www.google.com
-\\ Mozilla Firefox v17.0.1 (cs)
File : C:\Documents and Settings\Vláďa\Data aplikací\Mozilla\Firefox\Profiles\wlbxj8q0.default\prefs.js
Deleted : user_pref("keyword.URL", "hxxp://search.icq.com/search/afe_results.php?ch_id=afex&tb_ver=1.1.6&q=");
File : C:\Documents and Settings\Táta\Data aplikací\Mozilla\Firefox\Profiles\pe2zffyf.default\prefs.js
[OK] File is clean.
-\\ Google Chrome v24.0.1312.57
File : C:\Documents and Settings\Vláďa\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Preferences
[OK] File is clean.
File : C:\Documents and Settings\Táta\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Preferences
[OK] File is clean.
File : C:\Documents and Settings\Máma\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Preferences
[OK] File is clean.
*************************
AdwCleaner[R1].txt - [2915 octets] - [03/02/2013 14:35:07]
AdwCleaner[S1].txt - [2756 octets] - [03/02/2013 14:37:45]
########## EOF - C:\AdwCleaner[S1].txt - [2816 octets] ##########
Ale zaráží mě, že Chrome na mě vyplivl chybovou hlášku, že nemůže obnovit moje na stavení, ale zato Skype Click to Call, který jsem měl doteď zablokované si jede vesele dál
