provjera sistema

2

provjera sistema

offline
  • 100%Milanista
  • Information Technology
  • Pridružio: 23 Avg 2008
  • Poruke: 2634
  • Gde živiš: Milan, Italy

Zoek.exe v5.0.0.0 Updated 19-07-2014
Tool run by Springfieldz0r on pon 21.07.2014 at 20:18:07,45.
Microsoft Windows 7 Ultimate 6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Springfieldz0r\Desktop\zoek.exe [Scan all users] [Script inserted]

==== Older Logs ======================

C:\zoek-results2014-07-21-140244.log 25988 bytes

==== Deleting CLSID Registry Keys ======================


==== Deleting CLSID Registry Values ======================


==== Deleting Services ======================


==== FireFox Fix ======================

ProfilePath: C:\Users\SPRING~1\AppData\Roaming\KompoZer\Profiles\1o1xsch7.default

user.js not found
---- FireFox user.js and prefs.js backups ----

prefs_21.07.2014_2029_.backup

ProfilePath: C:\Users\SPRING~1\AppData\Roaming\Mozilla\Firefox\Profiles\gppbplio.default-1405954190172

---- Lines BabylonToolbar removed from prefs.js ----
user_pref("extensions.BabylonToolbar.admin", false);
user_pref("extensions.BabylonToolbar.aflt", "babsst");
user_pref("extensions.BabylonToolbar.appId", "{BDB69379-802F-4eaf-B541-F8DE92DD98DB}");
user_pref("extensions.BabylonToolbar.bbDpng", 5);
user_pref("extensions.BabylonToolbar.cntry", "ME");
user_pref("extensions.BabylonToolbar.dfltLng", "en");
user_pref("extensions.BabylonToolbar.excTlbr", false);
user_pref("extensions.BabylonToolbar.firstRun", false);
user_pref("extensions.BabylonToolbar.hdrMd5", "7455EE61D70D3CAD281AC600EF03ED43");
user_pref("extensions.BabylonToolbar.id", "d2805edd000000000000000000000000");
user_pref("extensions.BabylonToolbar.instlDay", "15635");
user_pref("extensions.BabylonToolbar.instlRef", "sst");
user_pref("extensions.BabylonToolbar.lastActv", "5");
user_pref("extensions.BabylonToolbar.lastDP", 5);
user_pref("extensions.BabylonToolbar.prdct", "BabylonToolbar");
user_pref("extensions.BabylonToolbar.prtnrId", "babylon");
user_pref("extensions.BabylonToolbar.tlbrId", "base");
user_pref("extensions.BabylonToolbar.tlbrSrchUrl", "http://search.babylon.com/?babsrc=TB_def&mntrId=d2805edd000000000000000000000000&q=");
user_pref("extensions.BabylonToolbar.vrsn", "1.8.3.8");
user_pref("extensions.BabylonToolbar.vrsni", "1.8.3.8");
user_pref("extensions.BabylonToolbar_i.newTab", true);
user_pref("extensions.BabylonToolbar_i.newTabUrl", "http://search.babylon.com/?affID=109217&tt=4312_5&babsrc=NT_ss&mntrId=d2805edd00000000000000000000
user_pref("extensions.BabylonToolbar_i.smplGrp", "none");
user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.8.3.810:53:09");
---- Lines BabylonToolbar removed from user.js ----

user_pref("yahoo.ytff.general.dontshowhpoffer", true);user_pref("extensions.BabylonToolbar.tlbrSrchUrl", "http://search.babylon.com/?babsrc=TB_def&mntrId=d2805edd000000000000000000000000&q=");
user_pref("extensions.BabylonToolbar.id", "d2805edd000000000000000000000000");
user_pref("extensions.BabylonToolbar.appId", "{BDB69379-802F-4eaf-B541-F8DE92DD98DB}");
user_pref("extensions.BabylonToolbar.instlDay", "15635");
user_pref("extensions.BabylonToolbar.vrsn", "1.8.3.8");
user_pref("extensions.BabylonToolbar.vrsni", "1.8.3.8");
user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.8.3.810:53:09");
user_pref("extensions.BabylonToolbar.prtnrId", "babylon");
user_pref("extensions.BabylonToolbar.prdct", "BabylonToolbar");
user_pref("extensions.BabylonToolbar.aflt", "babsst");
user_pref("extensions.BabylonToolbar_i.smplGrp", "none");
user_pref("extensions.BabylonToolbar.tlbrId", "base");
user_pref("extensions.BabylonToolbar.instlRef", "sst");
user_pref("extensions.BabylonToolbar.dfltLng", "en");
user_pref("extensions.BabylonToolbar.excTlbr", false);
user_pref("extensions.BabylonToolbar.admin", false);

---- Lines onlytoolbar removed from prefs.js ----
user_pref("extensions.onlytoolbar.admin", false);
user_pref("extensions.onlytoolbar.aflt", "babsst");
user_pref("extensions.onlytoolbar.appId", "{EB97FF56-D384-40C6-ABCC-1B5A62988ADB}");
user_pref("extensions.onlytoolbar.autoRvrt", "false");
user_pref("extensions.onlytoolbar.bbDpng", "18");
user_pref("extensions.onlytoolbar.cntry", "ME");
user_pref("extensions.onlytoolbar.dfltLng", "en");
user_pref("extensions.onlytoolbar.excTlbr", false);
user_pref("extensions.onlytoolbar.ffxUnstlRst", true);
user_pref("extensions.onlytoolbar.hdrMd5", "B1C0A4A83E5CFD69F81A8B172BF45878");
user_pref("extensions.onlytoolbar.hpFFXOld", "http://www.search.ask.com/?o=APN10640A&gct=hp&d=473-103&v=n9602-138&t=4");
user_pref("extensions.onlytoolbar.id", "d2805edd000000000000f4ec38b97e86");
user_pref("extensions.onlytoolbar.instlDay", "15995");
user_pref("extensions.onlytoolbar.instlRef", "sst");
user_pref("extensions.onlytoolbar.kwURLOld", "");
user_pref("extensions.onlytoolbar.lastB", "http://www.search.ask.com/?o=APN10640A&gct=hp&d=473-103&v=n9602-138&t=4");
user_pref("extensions.onlytoolbar.lastVrsnTs", "1.8.26.90:55:22");
user_pref("extensions.onlytoolbar.newTab", false);
user_pref("extensions.onlytoolbar.prdct", "onlytoolbar");
user_pref("extensions.onlytoolbar.prtnrId", "onlytoolbar");
user_pref("extensions.onlytoolbar.rvrt", "false");
user_pref("extensions.onlytoolbar.sg", "tzb");
user_pref("extensions.onlytoolbar.smplGrp", "none");
user_pref("extensions.onlytoolbar.tb_url", "http://www.only-search.com/?q={searchTerms}&babsrc=TB_ss&mntrId=D280F4EC38B97E86&affID=125155&tsp=5038");
user_pref("extensions.onlytoolbar.tlbrId", "base");
user_pref("extensions.onlytoolbar.tlbrSrchUrl", "http://www.only-search.com/?q={searchTerms}&babsrc=TB_ss&mntrId=D280F4EC38B97E86&affID=125155&tsp=503
user_pref("extensions.onlytoolbar.vrsn", "1.8.26.9");
user_pref("extensions.onlytoolbar.vrsni", "1.8.26.9");
user_pref("extensions.onlytoolbar.vrsnTs", "1.8.26.90:55:22");
---- Lines onlytoolbar removed from user.js ----

user_pref("extensions.onlytoolbar.tlbrSrchUrl", "http://www.only-search.com/?q={searchTerms}&babsrc=TB_ss&mntrId=D280F4EC38B97E86&affID=125155&tsp=5038");
user_pref("extensions.onlytoolbar.tb_url", "http://www.only-search.com/?q={searchTerms}&babsrc=TB_ss&mntrId=D280F4EC38B97E86&affID=125155&tsp=5038");
user_pref("extensions.onlytoolbar.id", "d2805edd000000000000f4ec38b97e86");
user_pref("extensions.onlytoolbar.appId", "{EB97FF56-D384-40C6-ABCC-1B5A62988ADB}");
user_pref("extensions.onlytoolbar.instlDay", "15995");
user_pref("extensions.onlytoolbar.vrsn", "1.8.26.9");
user_pref("extensions.onlytoolbar.vrsni", "1.8.26.9");
user_pref("extensions.onlytoolbar.vrsnTs", "1.8.26.90:55:22");
user_pref("extensions.onlytoolbar.prtnrId", "onlytoolbar");
user_pref("extensions.onlytoolbar.prdct", "onlytoolbar");
user_pref("extensions.onlytoolbar.aflt", "babsst");
user_pref("extensions.onlytoolbar.smplGrp", "none");
user_pref("extensions.onlytoolbar.tlbrId", "base");
user_pref("extensions.onlytoolbar.instlRef", "sst");
user_pref("extensions.onlytoolbar.dfltLng", "en");
user_pref("extensions.onlytoolbar.excTlbr", false);
user_pref("extensions.onlytoolbar.ffxUnstlRst", true);
user_pref("extensions.onlytoolbar.admin", false);
user_pref("extensions.onlytoolbar.autoRvrt", "false");
user_pref("extensions.onlytoolbar.rvrt", "false");
user_pref("extensions.onlytoolbar.newTab", false);

---- Lines WebSearch removed from prefs.js ----
user_pref("extensions.mywebsearch.prevDefaultEngine", "Google");
user_pref("extensions.mywebsearch.prevKwdEnabled", true);
user_pref("extensions.mywebsearch.prevKwdURL", "http://www.google.com/cse?cx=partner-pub-5528014799800033:cevktqnfrvl&ie=ISO-8859-1&q=");
user_pref("extensions.mywebsearch.prevSelectedEngine", "Wikipedia (en)");
user_pref("extensions.toolbar.mindspark._4zMembers_.homepage", "http://home.mywebsearch.com/index.jhtml?ptb=EF5A6ADE-1CB6-4D8A-9DD0-DB5B8CE463E5&n=77f
---- Lines mindspark removed from prefs.js ----
user_pref("extensions.toolbar.mindspark._4zMembers_.hp.enabled", true);
user_pref("extensions.toolbar.mindspark._4zMembers_.initialized", true);
user_pref("extensions.toolbar.mindspark._4zMembers_.installation.contextKey", "");
user_pref("extensions.toolbar.mindspark._4zMembers_.installation.installDate", "2013021220");
user_pref("extensions.toolbar.mindspark._4zMembers_.installation.partnerId", "^HJ^xdm073^YY^me");
user_pref("extensions.toolbar.mindspark._4zMembers_.installation.partnerSubId", "pconverter");
user_pref("extensions.toolbar.mindspark._4zMembers_.installation.success", true);
user_pref("extensions.toolbar.mindspark._4zMembers_.installation.toolbarId", "EF5A6ADE-1CB6-4D8A-9DD0-DB5B8CE463E5");
user_pref("extensions.toolbar.mindspark._4zMembers_.lastActivePing", "1360699192184");
user_pref("extensions.toolbar.mindspark._4zMembers_.options.defaultSearch", true);
user_pref("extensions.toolbar.mindspark._4zMembers_.options.homePageEnabled", true);
user_pref("extensions.toolbar.mindspark._4zMembers_.options.keywordEnabled", true);
user_pref("extensions.toolbar.mindspark._4zMembers_.options.tabEnabled", true);
user_pref("extensions.toolbar.mindspark._4zMembers_.weather.location", "10001");
user_pref("extensions.toolbar.mindspark.hp.enabled", true);
user_pref("extensions.toolbar.mindspark.hp.enabled.guid", "videodownloadconverter@mindspark.com");
user_pref("extensions.toolbar.mindspark.lastInstalled", "videodownloadconverter@mindspark.com");
---- Lines ask.com removed from prefs.js ----
user_pref("extensions.wrc.SearchRules.ask.com.style", ".WRCN {display:none} #psa-teoma-result .ptbs .WRCN, #teoma-results .ptbs .WRCN {display:inlin
user_pref("extensions.wrc.SearchRules.ask.com.url", "^http(s)?\\\\\\\\:\\\\\\\\/\\\\\\\\/(.+\\\\\\\\.)?ask\\\\\\\\.com\\\\\\\\/.*");
---- Lines kango removed from prefs.js ----
user_pref("extensions.kango.storage.m2_k1", "0");
user_pref("extensions.kango.storage.m2_k2", "0");
user_pref("extensions.kango.storage.m2_k3", "0");
user_pref("extensions.kango.storage.m2_k4", "1382197374102");
user_pref("extensions.kango.storage.m2_k5", "1382053386951");
user_pref("extensions.kango.storage.minibar.config", "{\"name\":\"Apps Hat\",\"description\":\"Apps Hat\",\"button\":{\"tooltip\":\"Visit AppsHat.com\
user_pref("extensions.kango.storage.nero_options", "\"{\\\"m1\\\":{\\\"ads\\\":{\\\"n1\\\":{\\\"url\\\":\\\"//ulayout.com/nero/hatter/google_post_resu
user_pref("extensions.kango.storage.ui.button.iconCache", "\"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABMAAAATCAYAAAByUDbMAAADlElEQVQ4jb3S3U9adxw
---- Lines Web Search removed from prefs.js ----
user_pref("browser.search.defaultengine", "Web Search");
---- FireFox user.js and prefs.js backups ----

user_21.07.2014_2029_.backup
prefs_21.07.2014_2029_.backup

ProfilePath: C:\Users\SPRING~1\AppData\Roaming\Thunderbird\Profiles\tc0883kq.default

user.js not found
---- FireFox user.js and prefs.js backups ----

prefs_21.07.2014_2029_.backup

==== Deleting Files \ Folders ======================

C:\Users\Springfieldz0r\.android deleted
C:\PROGRA~2\Mozilla Firefox\defaults\preferences\autoconfig.js deleted
C:\PROGRA~2\Yahoo! deleted
C:\found.000 deleted
C:\Users\Springfieldz0r\AppData\Roaming\PLGComp.ini deleted
C:\Users\Springfieldz0r\AppData\Roaming\Yahoo! deleted
C:\PROGRA~3\Yahoo! deleted
C:\PROGRA~3\InstallMate deleted
C:\PROGRA~3\YTD Video Downloader deleted
C:\Users\Springfieldz0r\AppData\Local\BITB5DA.tmp deleted
C:\Users\Springfieldz0r\AppData\Local\avgchrome deleted
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YTD Video Downloader deleted
C:\Users\Springfieldz0r\Searches deleted
C:\Windows\SysNative\config\systemprofile\Searches deleted
C:\Windows\Syswow64\lMMLDeleteUserData42107612FX.tmp deleted
C:\Users\SPRING~1\AppData\Roaming\Mozilla\Firefox\Profiles\gppbplio.default-1405954190172\searchplugins\browsemngr.xml deleted
C:\Users\SPRING~1\AppData\Roaming\Mozilla\Firefox\Profiles\gppbplio.default-1405954190172\searchplugins\Ask.xml deleted
C:\Users\SPRING~1\AppData\Roaming\Mozilla\Firefox\Profiles\gppbplio.default-1405954190172\searchplugins\my-web-search.xml deleted
C:\Users\SPRING~1\AppData\Roaming\Mozilla\Firefox\Profiles\gppbplio.default-1405954190172\searchplugins\SearchResults.xml deleted
C:\Users\SPRING~1\AppData\Roaming\Mozilla\Firefox\Profiles\gppbplio.default-1405954190172\searchplugins\web-search.xml deleted
C:\Users\SPRING~1\AppData\Roaming\Mozilla\Firefox\Profiles\gppbplio.default-1405954190172\Invalidprefs.js deleted
C:\Users\SPRING~1\AppData\Roaming\Mozilla\Firefox\Profiles\gppbplio.default-1405954190172\searchqutoolbar deleted
C:\Users\SPRING~1\AppData\Roaming\Mozilla\Firefox\Profiles\gppbplio.default-1405954190172\jetpack deleted
C:\Users\Springfieldz0r\AppData\Roaming\DivXInstaller.exe deleted
"C:\Windows\Installer\35959ae.msi" deleted
"C:\Users\Springfieldz0r\AppData\Local\{CB331E04-DBC6-4C81-A5CD-4293A93892CB}" deleted
"C:\Users\SPRING~1\AppData\Roaming\Mozilla\Firefox\Profiles\gppbplio.default-1405954190172\searchplugins\onlytoolbar.xml" deleted
"C:\PROGRA~3\Package Cache" deleted

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]
"wrc@avast.com"="C:\Program Files\AVAST Software\Avast\WebRep\FF" [10.07.2014 16:25]

==== Firefox Extensions ======================

ProfilePath: C:\Users\SPRING~1\AppData\Roaming\KompoZer\Profiles\1o1xsch7.default
- Undetermined - %ProfilePath%\extensions\installed-extensions.txt
- KompoZer classic - %ProfilePath%\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

ProfilePath: C:\Users\SPRING~1\AppData\Roaming\Mozilla\Firefox\Profiles\gppbplio.default-1405954190172
- avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF
- Qualys BrowserCheck - C:\Users\Springfieldz0r\AppData\Roaming\Mozilla\Firefox\Profiles\gppbplio.default-1405954190172\extensions\{7D2FB79E-E58C-4DB5-A36F-AC1C73967F4D}
- Qualys BrowserCheck - %ProfilePath%\extensions\{7D2FB79E-E58C-4DB5-A36F-AC1C73967F4D}
- anonymoX - %ProfilePath%\extensions\client@anonymox.net.xpi
- SocialReviver - %ProfilePath%\extensions\fbsidebardisabler@vittgam.net.xpi
- Firebug - %ProfilePath%\extensions\firebug@software.joehewitt.com.xpi
- Gmail Manager NG - %ProfilePath%\extensions\gmail-manager-ng@nedwidek.github.com.xpi
- Awesome screenshot: Capture and Annotate - %ProfilePath%\extensions\jid0-GXjLLfbCoAx0LcltEdFrEkQdQPI@jetpack.xpi
- Thumbnail Zoom Plus - %ProfilePath%\extensions\thumbnailZoom@dadler.github.com.xpi
- Web Developer - %ProfilePath%\extensions\{c45c406e-ab73-11d8-be73-000a95be3b12}.xpi
- Adblock Edge - %ProfilePath%\extensions\{fe272bd1-5f76-4ea4-8501-a05d35d823fc}.xpi

AppDir: C:\Program Files (x86)\Mozilla Firefox
- Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

==== Firefox Plugins ======================

Profilepath: C:\Users\Springfieldz0r\AppData\Roaming\Mozilla\Firefox\Profiles\gppbplio.default-1405954190172
4390CCD3790F8D9C427C0C29590C62D7 - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll - Shockwave Flash
FF0D6F82A0EC13952E83B9439100E45D - C:\Users\Springfieldz0r\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll - Facebook Video Calling Plugin


==== Chrome Look ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
gomekmidlodglbbmalcneegieacbdmki - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx[10.07.2014 16:25]

Google Docs - Springfieldz0r\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake
Google Drive - Springfieldz0r\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf
YouTube - Springfieldz0r\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo
Google Search - Springfieldz0r\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf
avast Online Security - Springfieldz0r\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki
Google Wallet - Springfieldz0r\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda
Gmail - Springfieldz0r\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia
RSS Feed Reader - Springfieldz0r\AppData\Local\Google\Chrome\User Data\Default\Extensions\pnjaodmkngahhkoihejjehlcdlnohgmp
DefaultTab - C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc

==== Chrome Fix ======================

C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc deleted successfully

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.msn.com/?pc=AV01"
"Search Page"="http://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Search Page"="http://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]
"Search Page"="http://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AboutURLs]
"Tabs"="about:newtab"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs]
"Tabs"="about:newtab"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
No DefaultScope Set For HKCU

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Start Page"="http://www.msn.com/?pc=AV01"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AboutURLs]
"Tabs"="res://ieframe.dll/tabswelcome.htm"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs]
"Tabs"="res://ieframe.dll/tabswelcome.htm"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{012E1000-F331-11DB-8314-0800200C9A66}"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
{012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE11SR"
{632F07F3-19A1-4d16-A23F-E6CE9486BAB5} Microsoft (Bing) Url="http://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01"

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\F60730A4A66673047777F5728467D401 deleted successfully
HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{4A03706F-666A-4037-7777-5F2748764D10} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\F60730A4A66673047777F5728467D401 deleted successfully
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite deleted successfully
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent deleted successfully

==== Empty IE Cache ======================

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Springfieldz0r\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Springfieldz0r\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

==== Empty FireFox Cache ======================

C:\Users\Springfieldz0r\AppData\Local\Mozilla\Firefox\Profiles\gppbplio.default-1405954190172\Cache emptied successfully

==== Empty Chrome Cache ======================

C:\Users\Springfieldz0r\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== C:\zoek_backup content ======================

C:\zoek_backup (files=129 folders=49 23745578 bytes)

==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\Springfieldz0r\AppData\Local\Temp will be emptied at reboot
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied
C:\Users\SPRING~1\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== EOF on pon 21.07.2014 at 20:36:09,47 ======================

rip
  • argus  Male
  • Anti Malware Fighter
    Rank 2
  • Pridružio: 27 Apr 2008
  • Poruke: 9160
  • Gde živiš: Prokuplje

Silu boziju smo obrisali, vodi racuna kod instalacije programa sta sve dolazi sa instalerom pa rascekiraj nepotrebne adware-a.

Pretpostavljam da je komp zivnuo?

offline
  • 100%Milanista
  • Information Technology
  • Pridružio: 23 Avg 2008
  • Poruke: 2634
  • Gde živiš: Milan, Italy

argus ::Silu boziju smo obrisali, vodi racuna kod instalacije programa sta sve dolazi sa instalerom pa rascekiraj nepotrebne adware-a.

Pretpostavljam da je komp zivnuo?


Jok, komp radi brzo isto kao i prije. Mr. Green Nijesam ja imao nikakvih problema osim ove poruke.

A to za programe to je brat ugrabio kad nijesam bio kuci pa instalirao nesto (nemam pojma sta) i uz to je instalirano milion toolbara sjecam se da sam 20min izgubio da sve unistaliram u control panel. Ali to ocigledno nije bilo dovoljno. Mada to mi nije napravilo probleme niti usporilo sistem da jeste javio bih se ja davno ovdje. Very Happy

Ziveli

rip
  • argus  Male
  • Anti Malware Fighter
    Rank 2
  • Pridružio: 27 Apr 2008
  • Poruke: 9160
  • Gde živiš: Prokuplje

Sledeća procedura će implementirati završno čišćenje.

Arrow Preuzmi "Xplode"-ov DelFix alat i snimi ga na Desktop.
Dvoklikom pokreni alat i štikliraj kućice ispred sledećih opcija;

Remove disinfection tools
Create registry backup
Purge System Restore


Klikni na dugme Run i pričekaj trenutak dok alat ne završi svoj rad.
Od ovog trenutka, svi korišćeni alati u ovoj temi bi trebali biti obrisani.
Alat će takođe formirati izveštaj za tebe. (C:\DelFix.txt)

Alat će snimiti i zdravo stanje registy-ja i napraviti backup koristeci integrisan program "ERUNT" u %windir%\ERUNT\DelFix
Alat briše stare system restore tačke i pravi novu, svežu tačku nakon čišćenja.




To bi bilo sve pozdrav.

Ko je trenutno na forumu
 

Ukupno su 589 korisnika na forumu :: 13 registrovanih, 1 sakriven i 575 gosta   ::   [ Administrator ] [ Supermoderator ] [ Moderator ] :: Detaljnije

Najviše korisnika na forumu ikad bilo je 3466 - dana 01 Jun 2021 17:07

Korisnici koji su trenutno na forumu:
Korisnici trenutno na forumu: bigfoot, darkojbn, draggan, dragoljub11987, kybonacci, MilosKop, Mixelotti, Nikolaa11, nuke92, pein, saputnik plavetnila, Shilok, vlad4