Zdravím všimol som si že mi v klude ide GPU na 100% ale akonáhle otvorím správcu zariadený tak sa skludní čiže to tipujem na minera
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:47:25, on 13. 6. 2023
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.19041.1566)
Boot mode: Normal
Running processes:
C:\Users\andre\Downloads\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe
O2 - BHO: IEToEdge BHO - {1FD49718-1D00-4B19-AF5F-070AF6D5D54C} - C:\Program Files (x86)\Microsoft\Edge\Application\114.0.1823.43\BHO\ie_to_edge_bho.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [MicrosoftEdgeAutoLaunch_19A0A5D68E648AB4E819CDBCFEA90B00] "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5
O4 - HKCU\..\Run: [DAEMON Tools Lite Automount] "C:\Program Files\DAEMON Tools Lite\DTAgent.exe" -autorun
O4 - HKCU\..\Run: [Steam] "C:\Program Files (x86)\Steam\steam.exe" -silent
O4 - HKCU\..\Run: [Gaijin.Net Updater] "C:\Users\andre\AppData\Local\Gaijin\Program Files (x86)\NetAgent\gjagent.exe"
O4 - HKCU\..\Run: [CCXProcess] "C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe"
O4 - HKCU\..\Run: [EADM] "C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EALauncher.exe" -silent
O4 - HKCU\..\Run: [Overwolf] C:\Program Files (x86)\Overwolf\OverwolfLauncher.exe -overwolfsilent
O4 - HKCU\..\Run: [Wargaming.net Game Center] "C:\ProgramData\Wargaming.net\GameCenter\wgc.exe" --background
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\CredentialEnrollmentManager.exe,-100 (CredentialEnrollmentManagerUserSvc) - Unknown owner - C:\Windows\system32\CredentialEnrollmentManager.exe (file missing)
O23 - Service: CredentialEnrollmentManagerUserSvc_67201 - Unknown owner - C:\Windows\system32\CredentialEnrollmentManager.exe (file missing)
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: Disc Soft Lite Bus Service - Disc Soft Ltd - C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe
O23 - Service: EABackgroundService - Electronic Arts - C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EABackgroundService.exe
O23 - Service: EasyAntiCheat - Epic Games, Inc - C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: NVIDIA FrameView SDK service (FvSvc) - NVIDIA - C:\Program Files\NVIDIA Corporation\FrameViewSDK\nvfvsdksvc_x64.exe
O23 - Service: Google Chrome Elevation Service (GoogleChromeElevationService) (GoogleChromeElevationService) - Google LLC - C:\Program Files\Google\Chrome\Application\114.0.5735.110\elevation_service.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google LLC - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google LLC - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Malwarebytes Service (MBAMService) - Malwarebytes - C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
O23 - Service: MRAC Service (mracsvc) - Unknown owner - C:\Windows\System32\mracsvc.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Container LS (NVDisplay.ContainerLocalSystem) - NVIDIA Corporation - C:\Windows\System32\DriverStore\FileRepository\nv_dispig.inf_amd64_3c2bd4a1ec6d228e\Display.NvContainer\NVDisplay.Container.exe
O23 - Service: Overwolf Updater Windows SCM (OverwolfUpdater) - Overwolf LTD - C:\Program Files (x86)\Common Files\Overwolf\OverwolfUpdater.exe
O23 - Service: @%systemroot%\system32\PerceptionSimulation\PerceptionSimulationService.exe,-101 (perceptionsimulation) - Unknown owner - C:\Windows\system32\PerceptionSimulation\PerceptionSimulationService.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\SecurityHealthAgent.dll,-1002 (SecurityHealthService) - Unknown owner - C:\Windows\system32\SecurityHealthService.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender Advanced Threat Protection\MsSense.exe,-1001 (Sense) - Unknown owner - C:\Program Files (x86)\Windows Defender Advanced Threat Protection\MsSense.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\Windows\System32\SensorDataService.exe (file missing)
O23 - Service: @%SystemRoot%\System32\SgrmBroker.exe,-100 (SgrmBroker) - Unknown owner - C:\Windows\system32\SgrmBroker.exe (file missing)
O23 - Service: @firewallapi.dll,-50323 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spectrum.exe,-101 (spectrum) - Unknown owner - C:\Windows\system32\spectrum.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\steamservice.exe
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\Windows\system32\TieringEngineService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 8921 bytes
prosím o kontrolu
-
krakenus600
- Level 2
- Příspěvky: 183
- Registrován: únor 19
- Pohlaví:
- Stav:
Offline
-
jaro3
- člen Security týmu
-
Guru Level 15
- Příspěvky: 43061
- Registrován: červen 07
- Bydliště: Jižní Čechy
- Pohlaví:
- Stav:
Offline
Re: prosím o kontrolu
Proč zakládáš 3 stejná témata? Ty dva smaž!
Stáhni si ATF Cleaner
https://www.majorgeeks.com/mg/getmirror ... ner,2.html
Poklepej na ATF Cleaner.exe, klikni na select all, poté:
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected. Poté klikni na Main (hlavní stránku ) a klikni na Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranění historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit dočasné soubory Windows, vysypat koš atd.
- Pokud používáš jen Google Chrome ,Edge , tak ATF nemusíš použít.
Stáhni si TFC
http://www.geekstogo.com/forum/files/fi ... -oldtimer/
https://www.bleepingcomputer.com/download/tfc/
https://www.majorgeeks.com/files/detail ... eaner.html
https://www.majorgeeks.com/mg/get/temp_ ... ner,1.html
Otevři soubor a zavři všechny ostatní okna, Klikni na Start k zahájení procesu. Program by neměl trvat dlouho.
Poté by se měl PC restartovat, pokud ne , proveď sám.
Stáhni AdwCleaner (by Xplode)
http://www.bleepingcomputer.com/download/adwcleaner/
http://www.adlice.com/downloadprogress/
pro majitele win7 stáhni zde:
https://filehippo.com/download_adwcleaner/ ( nedávej aktualizaci!)
Ulož si ho na svojí plochu . Klikni na „Souhlasím“ k povrzení podmínek.
Ukonči všechny programy , okna a prohlížeče
Spusť program poklepáním a klikni na „Skenování“
Po skenu se objeví log , který se otevře. ( jinak je uložen systémovem disku jako) C:\AdwCleaner\Logs, jeho obsah sem celý vlož.
---------------
Stáhni si Malwarebytes' Anti-Malware
https://www.malwarebytes.com/mwb-download/thankyou/
na plochu , nainstaluj a spusť ho
-Pokud není program aktuální , klikni na možnost „Aktualizovat nyní“ či „Opravit nyní“.
- bude nalezena aktualizace a nainstaluje se.
- poté klikni na Spustit skenování
- po proběhnutí skenu se ti objeví hláška vpravo dole, tak klikni na Zobrazit zprávu a vyber Export a vyber Kopírovat do schránky a vlož sem celý log. Nebo klikni na „Textový soubor ( .txt)“ a log si ulož. A vlož sem.
-jinak se log nachází v programu po kliknutí na „Zprávy“ , nebo je uložen zde: C:\ProgramData\Malwarebytes\Malwarebytes Anti-Malware\Logs
- po té klikni na tlačítko Dokončit, a program zavři křížkem vpravo nahoře.
(zatím nic nemaž!).
Pokud budou problémy , spusť v nouz. režimu.
Stáhni si ATF Cleaner
https://www.majorgeeks.com/mg/getmirror ... ner,2.html
Poklepej na ATF Cleaner.exe, klikni na select all, poté:
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected. Poté klikni na Main (hlavní stránku ) a klikni na Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranění historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit dočasné soubory Windows, vysypat koš atd.
- Pokud používáš jen Google Chrome ,Edge , tak ATF nemusíš použít.
Stáhni si TFC
http://www.geekstogo.com/forum/files/fi ... -oldtimer/
https://www.bleepingcomputer.com/download/tfc/
https://www.majorgeeks.com/files/detail ... eaner.html
https://www.majorgeeks.com/mg/get/temp_ ... ner,1.html
Otevři soubor a zavři všechny ostatní okna, Klikni na Start k zahájení procesu. Program by neměl trvat dlouho.
Poté by se měl PC restartovat, pokud ne , proveď sám.
Stáhni AdwCleaner (by Xplode)
http://www.bleepingcomputer.com/download/adwcleaner/
http://www.adlice.com/downloadprogress/
pro majitele win7 stáhni zde:
https://filehippo.com/download_adwcleaner/ ( nedávej aktualizaci!)
Ulož si ho na svojí plochu . Klikni na „Souhlasím“ k povrzení podmínek.
Ukonči všechny programy , okna a prohlížeče
Spusť program poklepáním a klikni na „Skenování“
Po skenu se objeví log , který se otevře. ( jinak je uložen systémovem disku jako) C:\AdwCleaner\Logs, jeho obsah sem celý vlož.
---------------
Stáhni si Malwarebytes' Anti-Malware
https://www.malwarebytes.com/mwb-download/thankyou/
na plochu , nainstaluj a spusť ho
-Pokud není program aktuální , klikni na možnost „Aktualizovat nyní“ či „Opravit nyní“.
- bude nalezena aktualizace a nainstaluje se.
- poté klikni na Spustit skenování
- po proběhnutí skenu se ti objeví hláška vpravo dole, tak klikni na Zobrazit zprávu a vyber Export a vyber Kopírovat do schránky a vlož sem celý log. Nebo klikni na „Textový soubor ( .txt)“ a log si ulož. A vlož sem.
-jinak se log nachází v programu po kliknutí na „Zprávy“ , nebo je uložen zde: C:\ProgramData\Malwarebytes\Malwarebytes Anti-Malware\Logs
- po té klikni na tlačítko Dokončit, a program zavři křížkem vpravo nahoře.
(zatím nic nemaž!).
Pokud budou problémy , spusť v nouz. režimu.
Při práci s programy HJT, ComboFix,MbAM, SDFix aj. zavřete všechny ostatní aplikace a prohlížeče!
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
-
krakenus600
- Level 2
- Příspěvky: 183
- Registrován: únor 19
- Pohlaví:
- Stav:
Offline
Re: prosím o kontrolu
Neviem prečo to vytvorilo 3x ...
-
krakenus600
- Level 2
- Příspěvky: 183
- Registrován: únor 19
- Pohlaví:
- Stav:
Offline
Re: prosím o kontrolu
# -------------------------------
# Malwarebytes AdwCleaner 8.4.0.0
# -------------------------------
# Build: 08-30-2022
# Database: 2022-10-10.1 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Scan
# -------------------------------
# Start: 06-13-2023
# Duration: 00:00:06
# OS: Windows 10 (Build 19045.2965)
# Scanned: 32096
# Detected: 0
***** [ Services ] *****
No malicious services found.
***** [ Folders ] *****
No malicious folders found.
***** [ Files ] *****
No malicious files found.
***** [ DLL ] *****
No malicious DLLs found.
***** [ WMI ] *****
No malicious WMI found.
***** [ Shortcuts ] *****
No malicious shortcuts found.
***** [ Tasks ] *****
No malicious tasks found.
***** [ Registry ] *****
No malicious registry entries found.
***** [ Chromium (and derivatives) ] *****
No malicious Chromium entries found.
***** [ Chromium URLs ] *****
No malicious Chromium URLs found.
***** [ Firefox (and derivatives) ] *****
No malicious Firefox entries found.
***** [ Firefox URLs ] *****
No malicious Firefox URLs found.
***** [ Hosts File Entries ] *****
No malicious hosts file entries found.
***** [ Preinstalled Software ] *****
No Preinstalled Software found.
AdwCleaner[S00].txt - [1853 octets] - [13/06/2023 16:52:34]
AdwCleaner[C00].txt - [1947 octets] - [13/06/2023 16:52:53]
AdwCleaner[S01].txt - [1542 octets] - [13/06/2023 16:54:04]
AdwCleaner[S02].txt - [1603 octets] - [13/06/2023 17:07:05]
AdwCleaner[C02].txt - [1793 octets] - [13/06/2023 17:07:14]
########## EOF - C:\AdwCleaner\Logs\AdwCleaner[S03].txt ##########
# Malwarebytes AdwCleaner 8.4.0.0
# -------------------------------
# Build: 08-30-2022
# Database: 2022-10-10.1 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Scan
# -------------------------------
# Start: 06-13-2023
# Duration: 00:00:06
# OS: Windows 10 (Build 19045.2965)
# Scanned: 32096
# Detected: 0
***** [ Services ] *****
No malicious services found.
***** [ Folders ] *****
No malicious folders found.
***** [ Files ] *****
No malicious files found.
***** [ DLL ] *****
No malicious DLLs found.
***** [ WMI ] *****
No malicious WMI found.
***** [ Shortcuts ] *****
No malicious shortcuts found.
***** [ Tasks ] *****
No malicious tasks found.
***** [ Registry ] *****
No malicious registry entries found.
***** [ Chromium (and derivatives) ] *****
No malicious Chromium entries found.
***** [ Chromium URLs ] *****
No malicious Chromium URLs found.
***** [ Firefox (and derivatives) ] *****
No malicious Firefox entries found.
***** [ Firefox URLs ] *****
No malicious Firefox URLs found.
***** [ Hosts File Entries ] *****
No malicious hosts file entries found.
***** [ Preinstalled Software ] *****
No Preinstalled Software found.
AdwCleaner[S00].txt - [1853 octets] - [13/06/2023 16:52:34]
AdwCleaner[C00].txt - [1947 octets] - [13/06/2023 16:52:53]
AdwCleaner[S01].txt - [1542 octets] - [13/06/2023 16:54:04]
AdwCleaner[S02].txt - [1603 octets] - [13/06/2023 17:07:05]
AdwCleaner[C02].txt - [1793 octets] - [13/06/2023 17:07:14]
########## EOF - C:\AdwCleaner\Logs\AdwCleaner[S03].txt ##########
-
krakenus600
- Level 2
- Příspěvky: 183
- Registrován: únor 19
- Pohlaví:
- Stav:
Offline
Re: prosím o kontrolu
Malwarebytes
www.malwarebytes.com
-Podrobnosti denníka-
Dátum skenovania: 13. 6. 2023
Čas skenovania: 20:19
Súbor denníka: c6af94e4-0a16-11ee-b992-002522ea0eeb.json
-Údaje o softvéri-
Verzia: 4.5.30.269
Verzia súčastí: 1.0.2037
Aktualizovať verziu balíka: 1.0.70825
Licencia: Skúšobná verzia
-Systémové informácie-
OS: Windows 10 (Build 19045.2965)
Procesor: x64
Systém súborov: NTFS
Používateľ: DESKTOP-21MNRNC\andre
-Zhrnutie skenovania-
Typ skenovania: Vyhľadávanie hrozieb
Skenovanie bolo spustené: Manuálne
Výsledok: Dokončené
Preskenované objekty: 249290
Zistené hrozby: 0
Hrozby umiestnené do karantény: 0
Uplynulý čas: 4 min, 34 s
-Možnosti skenovania-
Pamäť: Povolené
Spúšťanie: Povolené
Systém súborov: Povolené
Archívy: Povolené
Rootkity: Zakázané
Heuristika: Povolené
PUP: Zistiť
PUM: Zistiť
-Podrobnosti skenovania-
Proces: 0
(Nezistili sa nijaké škodlivé položky)
Modul: 0
(Nezistili sa nijaké škodlivé položky)
Kľúč databázy Registry: 0
(Nezistili sa nijaké škodlivé položky)
Hodnota databázy Registry: 0
(Nezistili sa nijaké škodlivé položky)
Údaje databázy Registry: 0
(Nezistili sa nijaké škodlivé položky)
Prúd údajov: 0
(Nezistili sa nijaké škodlivé položky)
Priečinok: 0
(Nezistili sa nijaké škodlivé položky)
Súbor: 0
(Nezistili sa nijaké škodlivé položky)
Fyzický sektor: 0
(Nezistili sa nijaké škodlivé položky)
WMI: 0
(Nezistili sa nijaké škodlivé položky)
(end)
www.malwarebytes.com
-Podrobnosti denníka-
Dátum skenovania: 13. 6. 2023
Čas skenovania: 20:19
Súbor denníka: c6af94e4-0a16-11ee-b992-002522ea0eeb.json
-Údaje o softvéri-
Verzia: 4.5.30.269
Verzia súčastí: 1.0.2037
Aktualizovať verziu balíka: 1.0.70825
Licencia: Skúšobná verzia
-Systémové informácie-
OS: Windows 10 (Build 19045.2965)
Procesor: x64
Systém súborov: NTFS
Používateľ: DESKTOP-21MNRNC\andre
-Zhrnutie skenovania-
Typ skenovania: Vyhľadávanie hrozieb
Skenovanie bolo spustené: Manuálne
Výsledok: Dokončené
Preskenované objekty: 249290
Zistené hrozby: 0
Hrozby umiestnené do karantény: 0
Uplynulý čas: 4 min, 34 s
-Možnosti skenovania-
Pamäť: Povolené
Spúšťanie: Povolené
Systém súborov: Povolené
Archívy: Povolené
Rootkity: Zakázané
Heuristika: Povolené
PUP: Zistiť
PUM: Zistiť
-Podrobnosti skenovania-
Proces: 0
(Nezistili sa nijaké škodlivé položky)
Modul: 0
(Nezistili sa nijaké škodlivé položky)
Kľúč databázy Registry: 0
(Nezistili sa nijaké škodlivé položky)
Hodnota databázy Registry: 0
(Nezistili sa nijaké škodlivé položky)
Údaje databázy Registry: 0
(Nezistili sa nijaké škodlivé položky)
Prúd údajov: 0
(Nezistili sa nijaké škodlivé položky)
Priečinok: 0
(Nezistili sa nijaké škodlivé položky)
Súbor: 0
(Nezistili sa nijaké škodlivé položky)
Fyzický sektor: 0
(Nezistili sa nijaké škodlivé položky)
WMI: 0
(Nezistili sa nijaké škodlivé položky)
(end)
-
jaro3
- člen Security týmu
-
Guru Level 15
- Příspěvky: 43061
- Registrován: červen 07
- Bydliště: Jižní Čechy
- Pohlaví:
- Stav:
Offline
Re: prosím o kontrolu
Stáhni si Junkware Removal Tool by Thisisu
http://www.bleepingcomputer.com/downloa ... oval-tool/
https://downloads.malwarebytes.com/file/JRT-EOL
na svojí plochu.
Deaktivuj si svůj antivirový program. Pravým tl. myši klikni na JRT.exe a vyber „spustit jako správce“. Pro pokračování budeš vyzván ke stisknutí jakékoliv klávesy. Na nějakou klikni.
Začne skenování programu. Skenování může trvat dlouho , podle množství nákaz. Po ukončení skenu se objeví log (JRT.txt) , který se uloží na ploše.
Zkopíruj sem prosím celý jeho obsah.
Sophos Virus Removal Tool je praktický softwarový nástroj, který by mohl odstranit infekce, které antivirový program nedetekuje .
Stáhněte si ho zde z některého odkazu:
https://www.majorgeeks.com/mg/getmirror ... ool,1.html
https://www.majorgeeks.com/mg/get/sopho ... ool,1.html
http://www.majorgeeks.com/mg/getmirror/ ... ool,1.html
http://www.majorgeeks.com/mg/getmirror/ ... ool,2.html
Viry mohou zpomalit počítač, nebo se snaží ukrást vaše data, a ani nevíte , že je máte. Co potřebujete, je rychlý a snadný způsob, jak je najít a zbavit se jich, pokud již máte antivirový program v počítači nainstalován , můžete nainstalovat i nástroj Sophos Virus Removal , který identifikuje a vyčistí zbylé infekce, které mohl Váš antivirový program přehlédnout.
K použití Sophos Virus Removal Tool na něj poklepejte a stiskněte tlačítko „Start scanning“ . Pak bude Sophos Virus Removal Tool vyhledávat a odstraňovat viry, které najde. Může být vyžadován restart.
Pokud byly nalezeny viry , tak po skenu klikni na „Details…“ a potom na „View log file“. Zkopíruj celý log a vlož ho sem. Potom zavři „threat detail“ a klikni na „Start cleanup“.
Jinak se log nachází zde:
C:\ProgramData\Sophos\Sophos Virus Removal Tool\Logs
Stáhni si RogueKiller by Adlice Software
http://www.adlice.com/download/roguekiller/
http://www.bleepingcomputer.com/download/roguekiller/
na svojí plochu.
- Zavři všechny ostatní programy a prohlížeče.
- - klikni na „Scan“. V novém okně nic neměň a klikni dole na „Start“ ve sloupci „Quick Scan“
- Program skenuje procesy PC. Po proskenování klikni na „Results “ , v dalším okně pak levým t. na „Export“ a vyber : „Text File“ , log nazvi třeb RK a ulož do dokumentů nebo na plochu. Otevři soubor a celý obsah logu sem zkopíruj.
Pokud je program blokován , zkus ho spustit několikrát. Pokud dále program nepůjde spustit a pracovat, přejmenuj ho na winlogon.exe.
-pokud bude mít log více než 60.000 znaků , rozděl ho a vlož do více příspěvků
Stáhni si CrystalDiskInfo
https://www.stahuj.cz/utility_a_ostatni ... ldiskinfo/
Spusť program a klikni na Úpravy-Kopírovat. Poté sem vlož pomocí Ctrl+V obsah logu.
http://www.bleepingcomputer.com/downloa ... oval-tool/
https://downloads.malwarebytes.com/file/JRT-EOL
na svojí plochu.
Deaktivuj si svůj antivirový program. Pravým tl. myši klikni na JRT.exe a vyber „spustit jako správce“. Pro pokračování budeš vyzván ke stisknutí jakékoliv klávesy. Na nějakou klikni.
Začne skenování programu. Skenování může trvat dlouho , podle množství nákaz. Po ukončení skenu se objeví log (JRT.txt) , který se uloží na ploše.
Zkopíruj sem prosím celý jeho obsah.
Sophos Virus Removal Tool je praktický softwarový nástroj, který by mohl odstranit infekce, které antivirový program nedetekuje .
Stáhněte si ho zde z některého odkazu:
https://www.majorgeeks.com/mg/getmirror ... ool,1.html
https://www.majorgeeks.com/mg/get/sopho ... ool,1.html
http://www.majorgeeks.com/mg/getmirror/ ... ool,1.html
http://www.majorgeeks.com/mg/getmirror/ ... ool,2.html
Viry mohou zpomalit počítač, nebo se snaží ukrást vaše data, a ani nevíte , že je máte. Co potřebujete, je rychlý a snadný způsob, jak je najít a zbavit se jich, pokud již máte antivirový program v počítači nainstalován , můžete nainstalovat i nástroj Sophos Virus Removal , který identifikuje a vyčistí zbylé infekce, které mohl Váš antivirový program přehlédnout.
K použití Sophos Virus Removal Tool na něj poklepejte a stiskněte tlačítko „Start scanning“ . Pak bude Sophos Virus Removal Tool vyhledávat a odstraňovat viry, které najde. Může být vyžadován restart.
Pokud byly nalezeny viry , tak po skenu klikni na „Details…“ a potom na „View log file“. Zkopíruj celý log a vlož ho sem. Potom zavři „threat detail“ a klikni na „Start cleanup“.
Jinak se log nachází zde:
C:\ProgramData\Sophos\Sophos Virus Removal Tool\Logs
Stáhni si RogueKiller by Adlice Software
http://www.adlice.com/download/roguekiller/
http://www.bleepingcomputer.com/download/roguekiller/
na svojí plochu.
- Zavři všechny ostatní programy a prohlížeče.
- - klikni na „Scan“. V novém okně nic neměň a klikni dole na „Start“ ve sloupci „Quick Scan“
- Program skenuje procesy PC. Po proskenování klikni na „Results “ , v dalším okně pak levým t. na „Export“ a vyber : „Text File“ , log nazvi třeb RK a ulož do dokumentů nebo na plochu. Otevři soubor a celý obsah logu sem zkopíruj.
Pokud je program blokován , zkus ho spustit několikrát. Pokud dále program nepůjde spustit a pracovat, přejmenuj ho na winlogon.exe.
-pokud bude mít log více než 60.000 znaků , rozděl ho a vlož do více příspěvků
Stáhni si CrystalDiskInfo
https://www.stahuj.cz/utility_a_ostatni ... ldiskinfo/
Spusť program a klikni na Úpravy-Kopírovat. Poté sem vlož pomocí Ctrl+V obsah logu.
Při práci s programy HJT, ComboFix,MbAM, SDFix aj. zavřete všechny ostatní aplikace a prohlížeče!
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
-
krakenus600
- Level 2
- Příspěvky: 183
- Registrován: únor 19
- Pohlaví:
- Stav:
Offline
Re: prosím o kontrolu
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.1.4 (07.09.2017)
Operating System: Windows 10 Enterprise x64
Ran by andre (Administrator) on st 14. 06. 2023 at 10:38:29,78
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
File System: 4
Successfully deleted: C:\ProgramData\productdata (Folder)
Successfully deleted: C:\Users\andre\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\driver booster.lnk (Shortcut)
Successfully deleted: C:\Windows\system32\Tasks\Driver Booster SkipUAC (andre) (Task)
Successfully deleted: C:\Windows\system32\Tasks\Driver Booster Update (Task)
Registry: 2
Successfully deleted: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C} (Registry Key)
Successfully deleted: HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C} (Registry Key)
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on st 14. 06. 2023 at 10:40:56,24
End of JRT log
Version: 8.1.4 (07.09.2017)
Operating System: Windows 10 Enterprise x64
Ran by andre (Administrator) on st 14. 06. 2023 at 10:38:29,78
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
File System: 4
Successfully deleted: C:\ProgramData\productdata (Folder)
Successfully deleted: C:\Users\andre\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\driver booster.lnk (Shortcut)
Successfully deleted: C:\Windows\system32\Tasks\Driver Booster SkipUAC (andre) (Task)
Successfully deleted: C:\Windows\system32\Tasks\Driver Booster Update (Task)
Registry: 2
Successfully deleted: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C} (Registry Key)
Successfully deleted: HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C} (Registry Key)
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on st 14. 06. 2023 at 10:40:56,24
End of JRT log
-
krakenus600
- Level 2
- Příspěvky: 183
- Registrován: únor 19
- Pohlaví:
- Stav:
Offline
Re: prosím o kontrolu
Sophos mi nešiel spustiť vždy zamrzne a spadne ....
-
krakenus600
- Level 2
- Příspěvky: 183
- Registrován: únor 19
- Pohlaví:
- Stav:
Offline
Re: prosím o kontrolu
Program : RogueKiller Anti-Malware
Version : 15.10.0.0
x64 : Yes
Program Date : May 24 2023
Location : C:\Program Files\RogueKiller\RogueKiller64.exe
Premium : No
Company : Adlice Software
Website : https://www.adlice.com/
Contact : https://adlice.com/contact/
Website : https://adlice.com/download/roguekiller/
Operating System : Windows 10 (10.0.19045) 64-bit
64-bit OS : Yes
Startup : 0
WindowsPE : No
User : andre
User is Admin : Yes
Date : 2023/06/14 10:23:24
Type : Scan
Aborted : No
Scan Mode : Standard
Duration : 2475
Found items : 3
Total scanned : 174301
Signatures Version : 20230605_114837
Truesight Driver : Yes
Updates Count : 2
Arguments : -minimize
************************* Warnings *************************
(20:34163) C:\Windows\CbsTemp\31039139_646175070\Windows10.0-KB5027215-x64.cab, LONG_FOLDER_SCAN
[+] path : C:\Windows\CbsTemp\31039139_646175070\Windows10.0-KB5027215-x64.cab
[+] message : LONG_FOLDER_SCAN
[+] int1 : 20
[+] int2 : 34163
(21:2095) C:\Windows\CbsTemp\31039139_646175070, LONG_FOLDER_SCAN
[+] path : C:\Windows\CbsTemp\31039139_646175070
[+] message : LONG_FOLDER_SCAN
[+] int1 : 21
[+] int2 : 2095
(21:0) C:\Windows\CbsTemp, LONG_FOLDER_SCAN
[+] path : C:\Windows\CbsTemp
[+] message : LONG_FOLDER_SCAN
[+] int1 : 21
[+] int2 : 0
************************* Updates *************************
WinRAR 6.21 (64-bit) (64-bit), version 6.21.0
[+] Available Version : 6.22
[+] Wow6432 : No
[+] Portable : No
[+] update_location : C:\Program Files\WinRAR\
Google Chrome (32-bit), version 114.0.5735.133
[+] Available Version : 114.0.5735.134
[+] Wow6432 : Yes
[+] Portable : No
[+] update_location : C:\Program Files\Google\Chrome\Application
************************* Processes *************************
************************* Modules *************************
************************* Services *************************
************************* Scheduled Tasks *************************
************************* Registry *************************
>>>>>> XX - Software
└── [PUP.MailRU (Potentially Malicious)] (X64) HKEY_USERS\S-1-5-21-4131679319-2872091610-797357999-1001\Software\GameCenter -- N/A -> Found
>>>>>> O87 - Firewall
├── [Suspicious.Path (Potentially Malicious)] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{244DD8E0-427F-41D6-86EC-A3AEDFDB7D6F} -- v2.30|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Public|App=C:\Users\andre\AppData\Local\Temp\utorrent\utorrent.exe|Name=utorrent| (missing) -> Found
└── [Suspicious.Path (Potentially Malicious)] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{5737123D-9D2B-4675-B1B9-5FF1D5CEA843} -- v2.30|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Public|App=C:\Users\andre\AppData\Local\Temp\utorrent\utorrent.exe|Name=utorrent| (missing) -> Found
************************* WMI *************************
************************* Hosts File *************************
is_too_big : No
hosts_file_path : C:\Windows\System32\drivers\etc\hosts
************************* Filesystem *************************
************************* Web Browsers *************************
************************* Antirootkit *************************
Version : 15.10.0.0
x64 : Yes
Program Date : May 24 2023
Location : C:\Program Files\RogueKiller\RogueKiller64.exe
Premium : No
Company : Adlice Software
Website : https://www.adlice.com/
Contact : https://adlice.com/contact/
Website : https://adlice.com/download/roguekiller/
Operating System : Windows 10 (10.0.19045) 64-bit
64-bit OS : Yes
Startup : 0
WindowsPE : No
User : andre
User is Admin : Yes
Date : 2023/06/14 10:23:24
Type : Scan
Aborted : No
Scan Mode : Standard
Duration : 2475
Found items : 3
Total scanned : 174301
Signatures Version : 20230605_114837
Truesight Driver : Yes
Updates Count : 2
Arguments : -minimize
************************* Warnings *************************
(20:34163) C:\Windows\CbsTemp\31039139_646175070\Windows10.0-KB5027215-x64.cab, LONG_FOLDER_SCAN
[+] path : C:\Windows\CbsTemp\31039139_646175070\Windows10.0-KB5027215-x64.cab
[+] message : LONG_FOLDER_SCAN
[+] int1 : 20
[+] int2 : 34163
(21:2095) C:\Windows\CbsTemp\31039139_646175070, LONG_FOLDER_SCAN
[+] path : C:\Windows\CbsTemp\31039139_646175070
[+] message : LONG_FOLDER_SCAN
[+] int1 : 21
[+] int2 : 2095
(21:0) C:\Windows\CbsTemp, LONG_FOLDER_SCAN
[+] path : C:\Windows\CbsTemp
[+] message : LONG_FOLDER_SCAN
[+] int1 : 21
[+] int2 : 0
************************* Updates *************************
WinRAR 6.21 (64-bit) (64-bit), version 6.21.0
[+] Available Version : 6.22
[+] Wow6432 : No
[+] Portable : No
[+] update_location : C:\Program Files\WinRAR\
Google Chrome (32-bit), version 114.0.5735.133
[+] Available Version : 114.0.5735.134
[+] Wow6432 : Yes
[+] Portable : No
[+] update_location : C:\Program Files\Google\Chrome\Application
************************* Processes *************************
************************* Modules *************************
************************* Services *************************
************************* Scheduled Tasks *************************
************************* Registry *************************
>>>>>> XX - Software
└── [PUP.MailRU (Potentially Malicious)] (X64) HKEY_USERS\S-1-5-21-4131679319-2872091610-797357999-1001\Software\GameCenter -- N/A -> Found
>>>>>> O87 - Firewall
├── [Suspicious.Path (Potentially Malicious)] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{244DD8E0-427F-41D6-86EC-A3AEDFDB7D6F} -- v2.30|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Public|App=C:\Users\andre\AppData\Local\Temp\utorrent\utorrent.exe|Name=utorrent| (missing) -> Found
└── [Suspicious.Path (Potentially Malicious)] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{5737123D-9D2B-4675-B1B9-5FF1D5CEA843} -- v2.30|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Public|App=C:\Users\andre\AppData\Local\Temp\utorrent\utorrent.exe|Name=utorrent| (missing) -> Found
************************* WMI *************************
************************* Hosts File *************************
is_too_big : No
hosts_file_path : C:\Windows\System32\drivers\etc\hosts
************************* Filesystem *************************
************************* Web Browsers *************************
************************* Antirootkit *************************
-
krakenus600
- Level 2
- Příspěvky: 183
- Registrován: únor 19
- Pohlaví:
- Stav:
Offline
Re: prosím o kontrolu
----------------------------------------------------------------------------
CrystalDiskInfo 9.0.1 (C) 2008-2023 hiyohiyo
Crystal Dew World: https://crystalmark.info/
----------------------------------------------------------------------------
OS : Windows 10 Professional [10.0 Build 19045] (x64)
Date : 2023/06/14 12:34:58
-- Controller Map ----------------------------------------------------------
+ ATA Channel 0 (0) [ATA]
- TOSHIBA DT01ACA050 ATA Device
- ATA Channel 1 (1) [ATA]
+ Intel(R) 6 Series/C200 Series Chipset Family 4 port Serial ATA Storage Controller - 1C00 [ATA]
- ATA Channel 0 (0)
- ATA Channel 1 (1)
+ Intel(R) 6 Series/C200 Series Chipset Family 2 port Serial ATA Storage Controller - 1C08 [ATA]
+ ATA Channel 0 (0)
- TOSHIBA DT01ACA100 ATA Device
- ATA Channel 1 (1)
- Microsoft Storage Spaces Controller [SCSI]
- Xvdd SCSI Miniport [SCSI]
- DAEMON Tools Lite Virtual SCSI Bus [SCSI]
-- Disk List ---------------------------------------------------------------
(01) TOSHIBA DT01ACA050 : 500,1 GB [1/2/0, pd1]
(02) TOSHIBA DT01ACA100 : 1000,2 GB [0/0/1, pd1]
----------------------------------------------------------------------------
(01) TOSHIBA DT01ACA050
----------------------------------------------------------------------------
Model : TOSHIBA DT01ACA050
Firmware : MS1OA7C0
Serial Number : X4GXP8LAS
Disk Size : 500,1 GB (8,4/137,4/500,1/500,1)
Buffer Size : 23652 KB
Queue Depth : 32
# of Sectors : 976773168
Rotation Rate : 7200 RPM
Interface : Serial ATA
Major Version : ACS-2
Minor Version : ATA8-ACS version 4
Transfer Mode : SATA/300 | SATA/600
Power On Hours : 4840 hours
Power On Count : 2938 count
Temperature : 37 C (98 F)
Health Status : Good
Features : S.M.A.R.T., APM, NCQ, GPL
APM Level : 0000h [OFF]
AAM Level : ----
Drive Letter : C: E: F:
-- S.M.A.R.T. --------------------------------------------------------------
ID Cur Wor Thr RawValues(6) Attribute Name
01 100 _98 _16 000000000000 Read Error Rate
02 142 100 _54 000000000044 Throughput Performance
03 125 100 _24 000300B800B7 Spin-Up Time
04 _99 _99 __0 00000000178D Start/Stop Count
05 100 100 __5 000000000000 Reallocated Sectors Count
07 100 100 _67 000000000000 Seek Error Rate
08 115 100 _20 000000000022 Seek Time Performance
09 100 100 __0 0000000012E8 Power-On Hours
0A 100 100 _60 000000000000 Spin Retry Count
0C 100 100 __0 000000000B7A Power Cycle Count
B7 100 100 __0 000000000000 Vendor Specific
B8 100 100 _97 000000000000 End-to-End Error
B9 100 100 __0 00000000FFFF Vendor Specific
BB 100 100 __0 000000000000 Reported Uncorrectable Errors
BC 100 _99 __0 000004330004 Command Timeout
BD 100 100 __0 000000000000 High Fly Writes
BE _63 _57 __0 000016260025 Airflow Temperature
C0 _95 _95 __0 000000001793 Power-off Retract Count
C1 _95 _95 __0 000000001793 Load/Unload Cycle Count
C2 162 139 __0 002B000D0025 Temperature
C4 100 100 __0 000000000000 Reallocation Event Count
C5 100 100 __0 000000000000 Current Pending Sector Count
C6 100 100 __0 000000000000 Uncorrectable Sector Count
C7 200 200 __0 000000000000 UltraDMA CRC Error Count
-- IDENTIFY_DEVICE ---------------------------------------------------------
0 1 2 3 4 5 6 7 8 9
000: 045A 3FFF C837 0010 0000 0000 003F 0000 0000 0000
010: 2020 2020 2020 2020 2020 2058 3447 5850 384C 4153
020: 0003 B8C8 0004 4D53 314F 4137 4330 544F 5348 4942
030: 4120 4454 3031 4143 4130 3530 2020 2020 2020 2020
040: 2020 2020 2020 2020 2020 2020 2020 8010 4000 2F00
050: 4000 0200 0200 0007 3FFF 0010 003F FC10 00FB 0110
060: FFFF 0FFF 0000 0007 0003 0078 0078 0078 0078 0008
070: 0000 0000 0000 0000 0000 001F 850E 0004 004C 0040
080: 03FC 0029 706B 7C09 4123 7069 BC01 4123 207F 0025
090: 0026 0000 FFFE 0000 0000 0000 0000 0000 0000 0000
100: 6030 3A38 0000 0000 0000 0000 6003 5A87 5000 039F
110: FDDB 21C4 0000 0000 0000 0000 0000 0000 0000 401C
120: 401C 0000 0000 0000 0000 0000 0000 0000 0029 000B
130: 0000 0000 2182 0CF1 3A20 0001 4000 0C04 0121 0000
140: 0000 0807 0000 0000 0000 0000 0000 0000 0000 0000
150: 0000 0005 5348 4237 0000 6841 0000 5DBD 7BC8 8000
160: 0000 0000 0000 0000 0000 0000 0000 0000 0002 0000
170: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
180: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
190: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
200: 0000 0000 0000 0000 0000 0000 003D 0000 0000 4000
210: 0000 0000 0000 0000 0000 0000 0000 1C20 0000 0000
220: 0000 0000 103F 0000 0000 0000 0000 0000 0000 0000
230: 6030 3A38 0000 0000 0001 0080 0000 0000 0000 0000
240: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
250: 0000 0000 0000 0000 0000 2AA5
-- SMART_READ_DATA ---------------------------------------------------------
+0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 10 00 01 2F 00 64 62 00 00 00 00 00 00 00 02 27
010: 00 8E 64 44 00 00 00 00 00 00 03 23 00 7D 64 B7
020: 00 B8 00 03 00 00 04 32 00 63 63 8D 17 00 00 00
030: 00 00 05 33 00 64 64 00 00 00 00 00 00 00 07 2F
040: 00 64 64 00 00 00 00 00 00 00 08 25 00 73 64 22
050: 00 00 00 00 00 00 09 32 00 64 64 E8 12 00 00 00
060: 00 00 0A 33 00 64 64 00 00 00 00 00 00 00 0C 32
070: 00 64 64 7A 0B 00 00 00 00 00 B7 32 00 64 64 00
080: 00 00 00 00 00 00 B8 33 00 64 64 00 00 00 00 00
090: 00 00 B9 32 00 64 64 FF FF 00 00 00 00 00 BB 32
0A0: 00 64 64 00 00 00 00 00 00 00 BC 32 00 64 63 04
0B0: 00 33 04 00 00 00 BD 3A 00 64 64 00 00 00 00 00
0C0: 00 00 BE 22 00 3F 39 25 00 26 16 00 00 00 C0 32
0D0: 00 5F 5F 93 17 00 00 00 00 00 C1 32 00 5F 5F 93
0E0: 17 00 00 00 00 00 C2 22 00 A2 8B 25 00 0D 00 2B
0F0: 00 00 C4 32 00 64 64 00 00 00 00 00 00 00 C5 32
100: 00 64 64 00 00 00 00 00 00 00 C6 30 00 64 64 00
110: 00 00 00 00 00 00 C7 32 00 C8 C8 00 00 00 00 00
120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 84 00 62 0D 01 5B
170: 03 00 01 00 02 39 00 00 00 00 00 00 00 00 00 00
180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2A
-- SMART_READ_THRESHOLD ----------------------------------------------------
+0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 10 00 01 10 00 00 00 00 00 00 00 00 00 00 02 36
010: 00 00 00 00 00 00 00 00 00 00 03 18 00 00 00 00
020: 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00
030: 00 00 05 05 00 00 00 00 00 00 00 00 00 00 07 43
040: 00 00 00 00 00 00 00 00 00 00 08 14 00 00 00 00
050: 00 00 00 00 00 00 09 00 00 00 00 00 00 00 00 00
060: 00 00 0A 3C 00 00 00 00 00 00 00 00 00 00 0C 00
070: 00 00 00 00 00 00 00 00 00 00 B7 00 00 00 00 00
080: 00 00 00 00 00 00 B8 61 00 00 00 00 00 00 00 00
090: 00 00 B9 00 00 00 00 00 00 00 00 00 00 00 BB 00
0A0: 00 00 00 00 00 00 00 00 00 00 BC 00 00 00 00 00
0B0: 00 00 00 00 00 00 BD 00 00 00 00 00 00 00 00 00
0C0: 00 00 BE 00 00 00 00 00 00 00 00 00 00 00 C0 00
0D0: 00 00 00 00 00 00 00 00 00 00 C1 00 00 00 00 00
0E0: 00 00 00 00 00 00 C2 00 00 00 00 00 00 00 00 00
0F0: 00 00 C4 00 00 00 00 00 00 00 00 00 00 00 C5 00
100: 00 00 00 00 00 00 00 00 00 00 C6 00 00 00 00 00
110: 00 00 00 00 00 00 C7 00 00 00 00 00 00 00 00 00
120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
170: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 E9
----------------------------------------------------------------------------
(02) TOSHIBA DT01ACA100
----------------------------------------------------------------------------
Model : TOSHIBA DT01ACA100
Firmware : MS2OA800
Serial Number : Y87W5ZZMS
Disk Size : 1000,2 GB (8,4/137,4/1000,2/1000,2)
Buffer Size : 23652 KB
Queue Depth : 32
# of Sectors : 1953525168
Rotation Rate : 7200 RPM
Interface : Serial ATA
Major Version : ACS-2
Minor Version : ATA8-ACS version 4
Transfer Mode : SATA/300 | SATA/600
Power On Hours : 16814 hours
Power On Count : 2383 count
Temperature : 35 C (95 F)
Health Status : Caution
Features : S.M.A.R.T., APM, NCQ, GPL
APM Level : 0000h [OFF]
AAM Level : ----
Drive Letter : D:
-- S.M.A.R.T. --------------------------------------------------------------
ID Cur Wor Thr RawValues(6) Attribute Name
01 100 _91 _16 000000000000 Read Error Rate
02 142 100 _54 000000000044 Throughput Performance
03 127 100 _24 000300B400B4 Spin-Up Time
04 100 100 __0 000000000EAB Start/Stop Count
05 100 100 __5 0000003601F8 Reallocated Sectors Count
07 100 100 _67 000000000000 Seek Error Rate
08 108 100 _20 000000000025 Seek Time Performance
09 _98 _98 __0 0000000041AE Power-On Hours
0A 100 100 _60 000000000000 Spin Retry Count
0C 100 100 __0 00000000094F Power Cycle Count
B7 100 100 __0 000000000000 Vendor Specific
B8 100 100 _97 000000000000 End-to-End Error
B9 _86 _86 __0 0000000EFFFF Vendor Specific
BB 100 100 __0 000000860000 Reported Uncorrectable Errors
BC 100 _99 __0 000000530003 Command Timeout
BD 100 100 __0 000000000000 High Fly Writes
BE _65 _58 __0 000016240023 Airflow Temperature
C0 _97 _97 __0 000000000F55 Power-off Retract Count
C1 _97 _97 __0 000000000F55 Load/Unload Cycle Count
C2 171 150 __0 002A000D0023 Temperature
C4 100 100 __0 000000000037 Reallocation Event Count
C5 100 100 __0 000000000000 Current Pending Sector Count
C6 100 100 __0 000000000000 Uncorrectable Sector Count
C7 200 200 __0 000000000000 UltraDMA CRC Error Count
-- IDENTIFY_DEVICE ---------------------------------------------------------
0 1 2 3 4 5 6 7 8 9
000: 045A 3FFF C837 0010 0000 0000 003F 0000 0000 0000
010: 2020 2020 2020 2020 2020 2059 3837 5735 5A5A 4D53
020: 0003 B8C8 0004 4D53 324F 4138 3030 544F 5348 4942
030: 4120 4454 3031 4143 4131 3030 2020 2020 2020 2020
040: 2020 2020 2020 2020 2020 2020 2020 8010 4000 2F00
050: 4000 0200 0200 0007 3FFF 0010 003F FC10 00FB 0110
060: FFFF 0FFF 0000 0007 0003 0078 0078 0078 0078 0008
070: 0000 0000 0000 0000 0000 001F 850E 0004 004C 0040
080: 03FC 0029 706B 7C09 4123 7069 BC01 4123 207F 004C
090: 004D 0000 FFFE 0000 0000 0000 0000 0000 0000 0000
100: 6DB0 7470 0000 0000 0000 0000 6003 5A87 5000 039F
110: D9CC 5C8A 0000 0000 0000 0000 0000 0000 0000 401C
120: 401C 0000 0000 0000 0000 0000 0000 0000 0029 000B
130: 01F8 0000 2182 0CF1 3A20 0001 4000 0C04 0121 0000
140: 0000 0808 0807 0000 0000 0000 0000 0000 0000 0000
150: 0000 0005 3248 4238 0000 6802 0000 5DBD 7BC8 8000
160: 0000 0000 0000 0000 0000 0000 0000 0000 0002 0000
170: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
180: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
190: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
200: 0000 0000 0000 0000 0000 0000 003D 0000 0000 4000
210: 0000 0000 0000 0000 0000 0000 0000 1C20 0000 0000
220: 0000 0000 103F 0000 0000 0000 0000 0000 0000 0000
230: 6DB0 7470 0000 0000 0001 0080 0000 0000 0000 0000
240: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
250: 0000 0000 0000 0000 0000 66A5
-- SMART_READ_DATA ---------------------------------------------------------
+0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 10 00 01 2F 00 64 5B 00 00 00 00 00 00 00 02 27
010: 00 8E 64 44 00 00 00 00 00 00 03 23 00 7F 64 B4
020: 00 B4 00 03 00 00 04 32 00 64 64 AB 0E 00 00 00
030: 00 00 05 33 00 64 64 F8 01 36 00 00 00 00 07 2F
040: 00 64 64 00 00 00 00 00 00 00 08 25 00 6C 64 25
050: 00 00 00 00 00 00 09 32 00 62 62 AE 41 00 00 00
060: 00 00 0A 33 00 64 64 00 00 00 00 00 00 00 0C 32
070: 00 64 64 4F 09 00 00 00 00 00 B7 32 00 64 64 00
080: 00 00 00 00 00 00 B8 33 00 64 64 00 00 00 00 00
090: 00 00 B9 32 00 56 56 FF FF 0E 00 00 00 00 BB 32
0A0: 00 64 64 00 00 86 00 00 00 00 BC 32 00 64 63 03
0B0: 00 53 00 00 00 00 BD 3A 00 64 64 00 00 00 00 00
0C0: 00 00 BE 22 00 41 3A 23 00 24 16 00 00 00 C0 32
0D0: 00 61 61 55 0F 00 00 00 00 00 C1 32 00 61 61 55
0E0: 0F 00 00 00 00 00 C2 22 00 AB 96 23 00 0D 00 2A
0F0: 00 00 C4 32 00 64 64 37 00 00 00 00 00 00 C5 32
100: 00 64 64 00 00 00 00 00 00 00 C6 30 00 64 64 00
110: 00 00 00 00 00 00 C7 32 00 C8 C8 00 00 00 00 00
120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 84 00 0D 1B 01 5B
170: 03 00 01 00 02 74 00 00 00 00 00 00 00 00 00 00
180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 E6
-- SMART_READ_THRESHOLD ----------------------------------------------------
+0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 10 00 01 10 00 00 00 00 00 00 00 00 00 00 02 36
010: 00 00 00 00 00 00 00 00 00 00 03 18 00 00 00 00
020: 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00
030: 00 00 05 05 00 00 00 00 00 00 00 00 00 00 07 43
040: 00 00 00 00 00 00 00 00 00 00 08 14 00 00 00 00
050: 00 00 00 00 00 00 09 00 00 00 00 00 00 00 00 00
060: 00 00 0A 3C 00 00 00 00 00 00 00 00 00 00 0C 00
070: 00 00 00 00 00 00 00 00 00 00 B7 00 00 00 00 00
080: 00 00 00 00 00 00 B8 61 00 00 00 00 00 00 00 00
090: 00 00 B9 00 00 00 00 00 00 00 00 00 00 00 BB 00
0A0: 00 00 00 00 00 00 00 00 00 00 BC 00 00 00 00 00
0B0: 00 00 00 00 00 00 BD 00 00 00 00 00 00 00 00 00
0C0: 00 00 BE 00 00 00 00 00 00 00 00 00 00 00 C0 00
0D0: 00 00 00 00 00 00 00 00 00 00 C1 00 00 00 00 00
0E0: 00 00 00 00 00 00 C2 00 00 00 00 00 00 00 00 00
0F0: 00 00 C4 00 00 00 00 00 00 00 00 00 00 00 C5 00
100: 00 00 00 00 00 00 00 00 00 00 C6 00 00 00 00 00
110: 00 00 00 00 00 00 C7 00 00 00 00 00 00 00 00 00
120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
170: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 E9
CrystalDiskInfo 9.0.1 (C) 2008-2023 hiyohiyo
Crystal Dew World: https://crystalmark.info/
----------------------------------------------------------------------------
OS : Windows 10 Professional [10.0 Build 19045] (x64)
Date : 2023/06/14 12:34:58
-- Controller Map ----------------------------------------------------------
+ ATA Channel 0 (0) [ATA]
- TOSHIBA DT01ACA050 ATA Device
- ATA Channel 1 (1) [ATA]
+ Intel(R) 6 Series/C200 Series Chipset Family 4 port Serial ATA Storage Controller - 1C00 [ATA]
- ATA Channel 0 (0)
- ATA Channel 1 (1)
+ Intel(R) 6 Series/C200 Series Chipset Family 2 port Serial ATA Storage Controller - 1C08 [ATA]
+ ATA Channel 0 (0)
- TOSHIBA DT01ACA100 ATA Device
- ATA Channel 1 (1)
- Microsoft Storage Spaces Controller [SCSI]
- Xvdd SCSI Miniport [SCSI]
- DAEMON Tools Lite Virtual SCSI Bus [SCSI]
-- Disk List ---------------------------------------------------------------
(01) TOSHIBA DT01ACA050 : 500,1 GB [1/2/0, pd1]
(02) TOSHIBA DT01ACA100 : 1000,2 GB [0/0/1, pd1]
----------------------------------------------------------------------------
(01) TOSHIBA DT01ACA050
----------------------------------------------------------------------------
Model : TOSHIBA DT01ACA050
Firmware : MS1OA7C0
Serial Number : X4GXP8LAS
Disk Size : 500,1 GB (8,4/137,4/500,1/500,1)
Buffer Size : 23652 KB
Queue Depth : 32
# of Sectors : 976773168
Rotation Rate : 7200 RPM
Interface : Serial ATA
Major Version : ACS-2
Minor Version : ATA8-ACS version 4
Transfer Mode : SATA/300 | SATA/600
Power On Hours : 4840 hours
Power On Count : 2938 count
Temperature : 37 C (98 F)
Health Status : Good
Features : S.M.A.R.T., APM, NCQ, GPL
APM Level : 0000h [OFF]
AAM Level : ----
Drive Letter : C: E: F:
-- S.M.A.R.T. --------------------------------------------------------------
ID Cur Wor Thr RawValues(6) Attribute Name
01 100 _98 _16 000000000000 Read Error Rate
02 142 100 _54 000000000044 Throughput Performance
03 125 100 _24 000300B800B7 Spin-Up Time
04 _99 _99 __0 00000000178D Start/Stop Count
05 100 100 __5 000000000000 Reallocated Sectors Count
07 100 100 _67 000000000000 Seek Error Rate
08 115 100 _20 000000000022 Seek Time Performance
09 100 100 __0 0000000012E8 Power-On Hours
0A 100 100 _60 000000000000 Spin Retry Count
0C 100 100 __0 000000000B7A Power Cycle Count
B7 100 100 __0 000000000000 Vendor Specific
B8 100 100 _97 000000000000 End-to-End Error
B9 100 100 __0 00000000FFFF Vendor Specific
BB 100 100 __0 000000000000 Reported Uncorrectable Errors
BC 100 _99 __0 000004330004 Command Timeout
BD 100 100 __0 000000000000 High Fly Writes
BE _63 _57 __0 000016260025 Airflow Temperature
C0 _95 _95 __0 000000001793 Power-off Retract Count
C1 _95 _95 __0 000000001793 Load/Unload Cycle Count
C2 162 139 __0 002B000D0025 Temperature
C4 100 100 __0 000000000000 Reallocation Event Count
C5 100 100 __0 000000000000 Current Pending Sector Count
C6 100 100 __0 000000000000 Uncorrectable Sector Count
C7 200 200 __0 000000000000 UltraDMA CRC Error Count
-- IDENTIFY_DEVICE ---------------------------------------------------------
0 1 2 3 4 5 6 7 8 9
000: 045A 3FFF C837 0010 0000 0000 003F 0000 0000 0000
010: 2020 2020 2020 2020 2020 2058 3447 5850 384C 4153
020: 0003 B8C8 0004 4D53 314F 4137 4330 544F 5348 4942
030: 4120 4454 3031 4143 4130 3530 2020 2020 2020 2020
040: 2020 2020 2020 2020 2020 2020 2020 8010 4000 2F00
050: 4000 0200 0200 0007 3FFF 0010 003F FC10 00FB 0110
060: FFFF 0FFF 0000 0007 0003 0078 0078 0078 0078 0008
070: 0000 0000 0000 0000 0000 001F 850E 0004 004C 0040
080: 03FC 0029 706B 7C09 4123 7069 BC01 4123 207F 0025
090: 0026 0000 FFFE 0000 0000 0000 0000 0000 0000 0000
100: 6030 3A38 0000 0000 0000 0000 6003 5A87 5000 039F
110: FDDB 21C4 0000 0000 0000 0000 0000 0000 0000 401C
120: 401C 0000 0000 0000 0000 0000 0000 0000 0029 000B
130: 0000 0000 2182 0CF1 3A20 0001 4000 0C04 0121 0000
140: 0000 0807 0000 0000 0000 0000 0000 0000 0000 0000
150: 0000 0005 5348 4237 0000 6841 0000 5DBD 7BC8 8000
160: 0000 0000 0000 0000 0000 0000 0000 0000 0002 0000
170: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
180: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
190: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
200: 0000 0000 0000 0000 0000 0000 003D 0000 0000 4000
210: 0000 0000 0000 0000 0000 0000 0000 1C20 0000 0000
220: 0000 0000 103F 0000 0000 0000 0000 0000 0000 0000
230: 6030 3A38 0000 0000 0001 0080 0000 0000 0000 0000
240: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
250: 0000 0000 0000 0000 0000 2AA5
-- SMART_READ_DATA ---------------------------------------------------------
+0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 10 00 01 2F 00 64 62 00 00 00 00 00 00 00 02 27
010: 00 8E 64 44 00 00 00 00 00 00 03 23 00 7D 64 B7
020: 00 B8 00 03 00 00 04 32 00 63 63 8D 17 00 00 00
030: 00 00 05 33 00 64 64 00 00 00 00 00 00 00 07 2F
040: 00 64 64 00 00 00 00 00 00 00 08 25 00 73 64 22
050: 00 00 00 00 00 00 09 32 00 64 64 E8 12 00 00 00
060: 00 00 0A 33 00 64 64 00 00 00 00 00 00 00 0C 32
070: 00 64 64 7A 0B 00 00 00 00 00 B7 32 00 64 64 00
080: 00 00 00 00 00 00 B8 33 00 64 64 00 00 00 00 00
090: 00 00 B9 32 00 64 64 FF FF 00 00 00 00 00 BB 32
0A0: 00 64 64 00 00 00 00 00 00 00 BC 32 00 64 63 04
0B0: 00 33 04 00 00 00 BD 3A 00 64 64 00 00 00 00 00
0C0: 00 00 BE 22 00 3F 39 25 00 26 16 00 00 00 C0 32
0D0: 00 5F 5F 93 17 00 00 00 00 00 C1 32 00 5F 5F 93
0E0: 17 00 00 00 00 00 C2 22 00 A2 8B 25 00 0D 00 2B
0F0: 00 00 C4 32 00 64 64 00 00 00 00 00 00 00 C5 32
100: 00 64 64 00 00 00 00 00 00 00 C6 30 00 64 64 00
110: 00 00 00 00 00 00 C7 32 00 C8 C8 00 00 00 00 00
120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 84 00 62 0D 01 5B
170: 03 00 01 00 02 39 00 00 00 00 00 00 00 00 00 00
180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2A
-- SMART_READ_THRESHOLD ----------------------------------------------------
+0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 10 00 01 10 00 00 00 00 00 00 00 00 00 00 02 36
010: 00 00 00 00 00 00 00 00 00 00 03 18 00 00 00 00
020: 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00
030: 00 00 05 05 00 00 00 00 00 00 00 00 00 00 07 43
040: 00 00 00 00 00 00 00 00 00 00 08 14 00 00 00 00
050: 00 00 00 00 00 00 09 00 00 00 00 00 00 00 00 00
060: 00 00 0A 3C 00 00 00 00 00 00 00 00 00 00 0C 00
070: 00 00 00 00 00 00 00 00 00 00 B7 00 00 00 00 00
080: 00 00 00 00 00 00 B8 61 00 00 00 00 00 00 00 00
090: 00 00 B9 00 00 00 00 00 00 00 00 00 00 00 BB 00
0A0: 00 00 00 00 00 00 00 00 00 00 BC 00 00 00 00 00
0B0: 00 00 00 00 00 00 BD 00 00 00 00 00 00 00 00 00
0C0: 00 00 BE 00 00 00 00 00 00 00 00 00 00 00 C0 00
0D0: 00 00 00 00 00 00 00 00 00 00 C1 00 00 00 00 00
0E0: 00 00 00 00 00 00 C2 00 00 00 00 00 00 00 00 00
0F0: 00 00 C4 00 00 00 00 00 00 00 00 00 00 00 C5 00
100: 00 00 00 00 00 00 00 00 00 00 C6 00 00 00 00 00
110: 00 00 00 00 00 00 C7 00 00 00 00 00 00 00 00 00
120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
170: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 E9
----------------------------------------------------------------------------
(02) TOSHIBA DT01ACA100
----------------------------------------------------------------------------
Model : TOSHIBA DT01ACA100
Firmware : MS2OA800
Serial Number : Y87W5ZZMS
Disk Size : 1000,2 GB (8,4/137,4/1000,2/1000,2)
Buffer Size : 23652 KB
Queue Depth : 32
# of Sectors : 1953525168
Rotation Rate : 7200 RPM
Interface : Serial ATA
Major Version : ACS-2
Minor Version : ATA8-ACS version 4
Transfer Mode : SATA/300 | SATA/600
Power On Hours : 16814 hours
Power On Count : 2383 count
Temperature : 35 C (95 F)
Health Status : Caution
Features : S.M.A.R.T., APM, NCQ, GPL
APM Level : 0000h [OFF]
AAM Level : ----
Drive Letter : D:
-- S.M.A.R.T. --------------------------------------------------------------
ID Cur Wor Thr RawValues(6) Attribute Name
01 100 _91 _16 000000000000 Read Error Rate
02 142 100 _54 000000000044 Throughput Performance
03 127 100 _24 000300B400B4 Spin-Up Time
04 100 100 __0 000000000EAB Start/Stop Count
05 100 100 __5 0000003601F8 Reallocated Sectors Count
07 100 100 _67 000000000000 Seek Error Rate
08 108 100 _20 000000000025 Seek Time Performance
09 _98 _98 __0 0000000041AE Power-On Hours
0A 100 100 _60 000000000000 Spin Retry Count
0C 100 100 __0 00000000094F Power Cycle Count
B7 100 100 __0 000000000000 Vendor Specific
B8 100 100 _97 000000000000 End-to-End Error
B9 _86 _86 __0 0000000EFFFF Vendor Specific
BB 100 100 __0 000000860000 Reported Uncorrectable Errors
BC 100 _99 __0 000000530003 Command Timeout
BD 100 100 __0 000000000000 High Fly Writes
BE _65 _58 __0 000016240023 Airflow Temperature
C0 _97 _97 __0 000000000F55 Power-off Retract Count
C1 _97 _97 __0 000000000F55 Load/Unload Cycle Count
C2 171 150 __0 002A000D0023 Temperature
C4 100 100 __0 000000000037 Reallocation Event Count
C5 100 100 __0 000000000000 Current Pending Sector Count
C6 100 100 __0 000000000000 Uncorrectable Sector Count
C7 200 200 __0 000000000000 UltraDMA CRC Error Count
-- IDENTIFY_DEVICE ---------------------------------------------------------
0 1 2 3 4 5 6 7 8 9
000: 045A 3FFF C837 0010 0000 0000 003F 0000 0000 0000
010: 2020 2020 2020 2020 2020 2059 3837 5735 5A5A 4D53
020: 0003 B8C8 0004 4D53 324F 4138 3030 544F 5348 4942
030: 4120 4454 3031 4143 4131 3030 2020 2020 2020 2020
040: 2020 2020 2020 2020 2020 2020 2020 8010 4000 2F00
050: 4000 0200 0200 0007 3FFF 0010 003F FC10 00FB 0110
060: FFFF 0FFF 0000 0007 0003 0078 0078 0078 0078 0008
070: 0000 0000 0000 0000 0000 001F 850E 0004 004C 0040
080: 03FC 0029 706B 7C09 4123 7069 BC01 4123 207F 004C
090: 004D 0000 FFFE 0000 0000 0000 0000 0000 0000 0000
100: 6DB0 7470 0000 0000 0000 0000 6003 5A87 5000 039F
110: D9CC 5C8A 0000 0000 0000 0000 0000 0000 0000 401C
120: 401C 0000 0000 0000 0000 0000 0000 0000 0029 000B
130: 01F8 0000 2182 0CF1 3A20 0001 4000 0C04 0121 0000
140: 0000 0808 0807 0000 0000 0000 0000 0000 0000 0000
150: 0000 0005 3248 4238 0000 6802 0000 5DBD 7BC8 8000
160: 0000 0000 0000 0000 0000 0000 0000 0000 0002 0000
170: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
180: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
190: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
200: 0000 0000 0000 0000 0000 0000 003D 0000 0000 4000
210: 0000 0000 0000 0000 0000 0000 0000 1C20 0000 0000
220: 0000 0000 103F 0000 0000 0000 0000 0000 0000 0000
230: 6DB0 7470 0000 0000 0001 0080 0000 0000 0000 0000
240: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
250: 0000 0000 0000 0000 0000 66A5
-- SMART_READ_DATA ---------------------------------------------------------
+0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 10 00 01 2F 00 64 5B 00 00 00 00 00 00 00 02 27
010: 00 8E 64 44 00 00 00 00 00 00 03 23 00 7F 64 B4
020: 00 B4 00 03 00 00 04 32 00 64 64 AB 0E 00 00 00
030: 00 00 05 33 00 64 64 F8 01 36 00 00 00 00 07 2F
040: 00 64 64 00 00 00 00 00 00 00 08 25 00 6C 64 25
050: 00 00 00 00 00 00 09 32 00 62 62 AE 41 00 00 00
060: 00 00 0A 33 00 64 64 00 00 00 00 00 00 00 0C 32
070: 00 64 64 4F 09 00 00 00 00 00 B7 32 00 64 64 00
080: 00 00 00 00 00 00 B8 33 00 64 64 00 00 00 00 00
090: 00 00 B9 32 00 56 56 FF FF 0E 00 00 00 00 BB 32
0A0: 00 64 64 00 00 86 00 00 00 00 BC 32 00 64 63 03
0B0: 00 53 00 00 00 00 BD 3A 00 64 64 00 00 00 00 00
0C0: 00 00 BE 22 00 41 3A 23 00 24 16 00 00 00 C0 32
0D0: 00 61 61 55 0F 00 00 00 00 00 C1 32 00 61 61 55
0E0: 0F 00 00 00 00 00 C2 22 00 AB 96 23 00 0D 00 2A
0F0: 00 00 C4 32 00 64 64 37 00 00 00 00 00 00 C5 32
100: 00 64 64 00 00 00 00 00 00 00 C6 30 00 64 64 00
110: 00 00 00 00 00 00 C7 32 00 C8 C8 00 00 00 00 00
120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 84 00 0D 1B 01 5B
170: 03 00 01 00 02 74 00 00 00 00 00 00 00 00 00 00
180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 E6
-- SMART_READ_THRESHOLD ----------------------------------------------------
+0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 10 00 01 10 00 00 00 00 00 00 00 00 00 00 02 36
010: 00 00 00 00 00 00 00 00 00 00 03 18 00 00 00 00
020: 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00
030: 00 00 05 05 00 00 00 00 00 00 00 00 00 00 07 43
040: 00 00 00 00 00 00 00 00 00 00 08 14 00 00 00 00
050: 00 00 00 00 00 00 09 00 00 00 00 00 00 00 00 00
060: 00 00 0A 3C 00 00 00 00 00 00 00 00 00 00 0C 00
070: 00 00 00 00 00 00 00 00 00 00 B7 00 00 00 00 00
080: 00 00 00 00 00 00 B8 61 00 00 00 00 00 00 00 00
090: 00 00 B9 00 00 00 00 00 00 00 00 00 00 00 BB 00
0A0: 00 00 00 00 00 00 00 00 00 00 BC 00 00 00 00 00
0B0: 00 00 00 00 00 00 BD 00 00 00 00 00 00 00 00 00
0C0: 00 00 BE 00 00 00 00 00 00 00 00 00 00 00 C0 00
0D0: 00 00 00 00 00 00 00 00 00 00 C1 00 00 00 00 00
0E0: 00 00 00 00 00 00 C2 00 00 00 00 00 00 00 00 00
0F0: 00 00 C4 00 00 00 00 00 00 00 00 00 00 00 C5 00
100: 00 00 00 00 00 00 00 00 00 00 C6 00 00 00 00 00
110: 00 00 00 00 00 00 C7 00 00 00 00 00 00 00 00 00
120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
170: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 E9
-
jaro3
- člen Security týmu
-
Guru Level 15
- Příspěvky: 43061
- Registrován: červen 07
- Bydliště: Jižní Čechy
- Pohlaví:
- Stav:
Offline
Re: prosím o kontrolu
(02) TOSHIBA DT01ACA100 -- úplně vadný disk , doporučuji hned vyndat.
Zavři všechny programy a prohlížeče. Deaktivuj antivir a firewall.
Prosím, odpoj všechny USB (kromě myši s klávesnice) nebo externí disky z počítače před spuštěním tohoto programu.
Spusť znovu RogueKiller ( Pro Windows Vista nebo Windows 7, klepni pravým a vyber "Spustit jako správce", ve Windows XP poklepej ke spuštění).
- klikni na „Start Scan“. V novém okně nic neměň a klikni dole na „Start Scan“,
po jeho skončení - vše zatrhni (dej zatržítka vlevo od nálezů , do bílých políček)
- pak klikni na "Remove Selected"
- Počkej, dokud Status box nezobrazí " Removal finished, please review result "
- Klikni na "Open report " a pak na " Open TXT“ a zkopíruj ten log a vlož obsah té zprávy prosím sem. Log je možno nalézt v C:\ProgramData\RogueKiller\Logs - Zavři RogueKiller.
Vypni antivir i firewall, RogueKiller, Malwarebytes Antimalware, windowsDefender
Stáhni zoek:
https://uloz.to/file/nFH1LwSrGioP/zoek1-rar
Zavři všechny ostatní programy , okna i prohlížeče.
Spusť Zoek.exe ( u win vista , win7, 8 klikni na něj pravým a vyber : „Spustit jako správce“
-pozor , náběh programu může trvat déle.
Do okna programu vlož skript níže:
klikni na Run Script
Program provede sken , opravu, sken i oprava může trvat i více minut ,je třeba posečkat do konce. Do okna neklikej!
Program nabídne restart , potvrď .
Po restartu se může nějaký čas ukázat pouze černá plocha , to je normální. Je třeba počkat až se vytvoří log. Ten si můžeš uložit třeba do dokumentů , jinak se sám ukládá do:
C:\zoek-results.log Zkopíruj sem celý obsah toho logu.
Pokud budou problémy , spusť zoek v nouz. režimu.
Stáhni si Zemana AntiMalware Free z tohoto odkazu:
https://www.zemana.com/Download/AntiMal ... .Setup.exe
(posuvník dolu na download)
a ulož si ho na plochu.
Poklepej na tento soubor na ploše a postupuj podle pokynů k instalaci programu.
Přijmi licenci k používání programu EULA , pokud se nabídne.
Pokud je k dispozici aktualizace programu , klepni na tlačítko „Update now“ ( aktualizovat nyní).
Zavři všechny otevřené soubory, složky a prohlížeče
Neměň žádné nastavení. Klikni na „Skenovat nyní“.
Po skenu lze vidět , zda jsou nějaké nákazy. Klikni na „Vykonat“ ( vymazat). Nákazy budou přemístěny do karantény.
Když je skenování dokončeno, klikni vlevo na „zprávy“ a pak na „otevři zprávu“ a zkopíruj sem celý obsah té zprávy.
Vlož nový log z HJT + informuj o problémech.
Zavři všechny programy a prohlížeče. Deaktivuj antivir a firewall.
Prosím, odpoj všechny USB (kromě myši s klávesnice) nebo externí disky z počítače před spuštěním tohoto programu.
Spusť znovu RogueKiller ( Pro Windows Vista nebo Windows 7, klepni pravým a vyber "Spustit jako správce", ve Windows XP poklepej ke spuštění).
- klikni na „Start Scan“. V novém okně nic neměň a klikni dole na „Start Scan“,
po jeho skončení - vše zatrhni (dej zatržítka vlevo od nálezů , do bílých políček)
- pak klikni na "Remove Selected"
- Počkej, dokud Status box nezobrazí " Removal finished, please review result "
- Klikni na "Open report " a pak na " Open TXT“ a zkopíruj ten log a vlož obsah té zprávy prosím sem. Log je možno nalézt v C:\ProgramData\RogueKiller\Logs - Zavři RogueKiller.
Vypni antivir i firewall, RogueKiller, Malwarebytes Antimalware, windowsDefender
Stáhni zoek:
https://uloz.to/file/nFH1LwSrGioP/zoek1-rar
Zavři všechny ostatní programy , okna i prohlížeče.
Spusť Zoek.exe ( u win vista , win7, 8 klikni na něj pravým a vyber : „Spustit jako správce“
-pozor , náběh programu může trvat déle.
Do okna programu vlož skript níže:
Kód: Vybrat vše
autoclean;
resethosts;
emptyclsid;
IEdefaults;
FFdefaults;
CHRdefaults;
emptyIEcache;
emptyFFcache;
emptyCHRcache;
emptyalltemp;
emptyflash;
emptyjava;
emptyrecycle.bin; klikni na Run Script
Program provede sken , opravu, sken i oprava může trvat i více minut ,je třeba posečkat do konce. Do okna neklikej!
Program nabídne restart , potvrď .
Po restartu se může nějaký čas ukázat pouze černá plocha , to je normální. Je třeba počkat až se vytvoří log. Ten si můžeš uložit třeba do dokumentů , jinak se sám ukládá do:
C:\zoek-results.log Zkopíruj sem celý obsah toho logu.
Pokud budou problémy , spusť zoek v nouz. režimu.
Stáhni si Zemana AntiMalware Free z tohoto odkazu:
https://www.zemana.com/Download/AntiMal ... .Setup.exe
(posuvník dolu na download)
a ulož si ho na plochu.
Poklepej na tento soubor na ploše a postupuj podle pokynů k instalaci programu.
Přijmi licenci k používání programu EULA , pokud se nabídne.
Pokud je k dispozici aktualizace programu , klepni na tlačítko „Update now“ ( aktualizovat nyní).
Zavři všechny otevřené soubory, složky a prohlížeče
Neměň žádné nastavení. Klikni na „Skenovat nyní“.
Po skenu lze vidět , zda jsou nějaké nákazy. Klikni na „Vykonat“ ( vymazat). Nákazy budou přemístěny do karantény.
Když je skenování dokončeno, klikni vlevo na „zprávy“ a pak na „otevři zprávu“ a zkopíruj sem celý obsah té zprávy.
Vlož nový log z HJT + informuj o problémech.
Při práci s programy HJT, ComboFix,MbAM, SDFix aj. zavřete všechny ostatní aplikace a prohlížeče!
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
-
krakenus600
- Level 2
- Příspěvky: 183
- Registrován: únor 19
- Pohlaví:
- Stav:
Offline
Re: prosím o kontrolu
Rogue ani Zemana už nenašli nič ....
Zoek.exe v5.0.0.2 Updated 03-May-2018(Online Version)
Tool run by andre on st 14. 06. 2023 at 17:33:06,79.
Microsoft Windows 10 Pro 10.0.19045 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\andre\Desktop\zoek1\zoek (1).exe [Scan all users] [Script inserted]
==== System Restore Info ======================
14. 6. 2023 17:37:44 Zoek.exe System Restore Point Created Successfully.
==== Reset Hosts File ======================
# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host
# localhost name resolution is handled within DNS itself.
127.0.0.1 localhost
::1 localhost
==== Empty Folders Check ======================
C:\PROGRA~3\enlisted deleted successfully
C:\PROGRA~3\Intel Package Cache {1CEAC85D-2590-4760-800F-8DE5E91F3700} deleted successfully
C:\PROGRA~3\SoftwareDistribution deleted successfully
C:\PROGRA~3\ssh deleted successfully
C:\PROGRA~3\WarThunder deleted successfully
C:\Users\andre\AppData\Roaming\instinfo deleted successfully
C:\Users\andre\AppData\Roaming\paradox-launcher-v2 deleted successfully
C:\Users\andre\AppData\Local\DBG deleted successfully
C:\Users\andre\AppData\Local\PeerDistRepub deleted successfully
==== Deleting CLSID Registry Keys ======================
HKEY_USERS\S-1-5-21-4131679319-2872091610-797357999-1001\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{825825BC-6093-E862-C502-2723B1B6881C} deleted successfully
==== Deleting CLSID Registry Values ======================
==== Deleting Services ======================
==== Deleting Files \ Folders ======================
C:\PROGRA~3\Intel Package Cache {1CEAC85D-2590-4760-800F-8DE5E91F3700} not found
C:\PROGRA~2\AOE URL Helper deleted
C:\Users\andre\AppData\Roaming\7DaysToDie deleted
C:\Users\andre\AppData\Roaming\utorrent deleted
C:\PROGRA~3\{E0224FF9-7AE3-4F9E-991A-2F004F7E3952} deleted
C:\PROGRA~3\Package Cache deleted
C:\Users\andre\AppData\Local\cache deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\CM2997E.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\CM2EEB2.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-11b0-23d4-389d76.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-11b0-23d4-389da6.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-11b0-23d4-389db8.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-11b0-23d4-389e56.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-11b0-23d4-389e78.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-11b0-23d4-389ea8.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-11b0-23d4-389eba.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-11b0-23d4-389efb.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-11b0-23d4-389f1c.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-11b0-23d4-389f8b.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-11b0-23d4-389fdb.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-11b0-23d4-38a099.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-11b0-23d4-38a0ca.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-11b0-23d4-38a168.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-11b0-23d4-38a1f7.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-11b0-23d4-38a218.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-11b0-23d4-38a229.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-11b0-23d4-38a2c8.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-11b0-23d4-38a2e9.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-12e4-1474-a7c61.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-12e4-1474-a7c91.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-12e4-1474-a7ce2.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-12e4-1474-a7d61.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-12e4-1474-a7dc0.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-12e4-1474-a7de2.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-12e4-1474-a7e51.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-12e4-1474-a7e72.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-12e4-1474-a7e84.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-12e4-1474-a7e95.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-12e4-1474-a7f91.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-12e4-1474-a8001.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-12e4-1474-a8022.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-12e4-1474-a8043.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-12e4-1474-a80d2.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-12e4-1474-a81fd.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-12e4-1474-a82ba.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-12e4-1474-a83a7.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-12e4-1474-a83b8.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-1588-f84-42776b2.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-1588-f84-42776d3.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-1588-f84-42776f4.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-1588-f84-4277725.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-1588-f84-4277746.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-1588-f84-4277748.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-1588-f84-427775a.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-1588-f84-427777b.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-1588-f84-427778d.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-1588-f84-427778f.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-1588-f84-4277791.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-1588-f84-42777b2.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-1588-f84-42777b4.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-1588-f84-42777d5.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-1588-f84-42777d7.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-1588-f84-4277847.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-1588-f84-4277878.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-1588-f84-42778b8.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-1588-f84-42778f9.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-15d4-1d2c-47a0d8.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-15d4-1d2c-47a0e9.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-15d4-1d2c-47a0fb.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-15d4-1d2c-47a0fd.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-15d4-1d2c-47a10f.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-15d4-1d2c-47a111.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-15d4-1d2c-47a113.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-15d4-1d2c-47a124.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-15d4-1d2c-47a126.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-15d4-1d2c-47a138.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-15d4-1d2c-47a14a.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-15d4-1d2c-47a14c.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-15d4-1d2c-47a15d.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-15d4-1d2c-47a15f.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-15d4-1d2c-47a171.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-15d4-1d2c-47a173.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-15d4-1d2c-47a184.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-15d4-1d2c-47a186.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-15d4-1d2c-47a198.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-1860-1ef4-a71d1.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-1860-1ef4-a71f3.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-1860-1ef4-a7204.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-1860-1ef4-a7206.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-1860-1ef4-a7218.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-1860-1ef4-a721a.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-1860-1ef4-a722c.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-1860-1ef4-a722e.tmp deleted
Zoek.exe v5.0.0.2 Updated 03-May-2018(Online Version)
Tool run by andre on st 14. 06. 2023 at 17:33:06,79.
Microsoft Windows 10 Pro 10.0.19045 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\andre\Desktop\zoek1\zoek (1).exe [Scan all users] [Script inserted]
==== System Restore Info ======================
14. 6. 2023 17:37:44 Zoek.exe System Restore Point Created Successfully.
==== Reset Hosts File ======================
# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host
# localhost name resolution is handled within DNS itself.
127.0.0.1 localhost
::1 localhost
==== Empty Folders Check ======================
C:\PROGRA~3\enlisted deleted successfully
C:\PROGRA~3\Intel Package Cache {1CEAC85D-2590-4760-800F-8DE5E91F3700} deleted successfully
C:\PROGRA~3\SoftwareDistribution deleted successfully
C:\PROGRA~3\ssh deleted successfully
C:\PROGRA~3\WarThunder deleted successfully
C:\Users\andre\AppData\Roaming\instinfo deleted successfully
C:\Users\andre\AppData\Roaming\paradox-launcher-v2 deleted successfully
C:\Users\andre\AppData\Local\DBG deleted successfully
C:\Users\andre\AppData\Local\PeerDistRepub deleted successfully
==== Deleting CLSID Registry Keys ======================
HKEY_USERS\S-1-5-21-4131679319-2872091610-797357999-1001\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{825825BC-6093-E862-C502-2723B1B6881C} deleted successfully
==== Deleting CLSID Registry Values ======================
==== Deleting Services ======================
==== Deleting Files \ Folders ======================
C:\PROGRA~3\Intel Package Cache {1CEAC85D-2590-4760-800F-8DE5E91F3700} not found
C:\PROGRA~2\AOE URL Helper deleted
C:\Users\andre\AppData\Roaming\7DaysToDie deleted
C:\Users\andre\AppData\Roaming\utorrent deleted
C:\PROGRA~3\{E0224FF9-7AE3-4F9E-991A-2F004F7E3952} deleted
C:\PROGRA~3\Package Cache deleted
C:\Users\andre\AppData\Local\cache deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\CM2997E.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\CM2EEB2.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-11b0-23d4-389d76.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-11b0-23d4-389da6.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-11b0-23d4-389db8.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-11b0-23d4-389e56.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-11b0-23d4-389e78.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-11b0-23d4-389ea8.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-11b0-23d4-389eba.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-11b0-23d4-389efb.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-11b0-23d4-389f1c.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-11b0-23d4-389f8b.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-11b0-23d4-389fdb.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-11b0-23d4-38a099.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-11b0-23d4-38a0ca.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-11b0-23d4-38a168.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-11b0-23d4-38a1f7.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-11b0-23d4-38a218.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-11b0-23d4-38a229.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-11b0-23d4-38a2c8.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-11b0-23d4-38a2e9.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-12e4-1474-a7c61.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-12e4-1474-a7c91.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-12e4-1474-a7ce2.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-12e4-1474-a7d61.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-12e4-1474-a7dc0.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-12e4-1474-a7de2.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-12e4-1474-a7e51.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-12e4-1474-a7e72.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-12e4-1474-a7e84.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-12e4-1474-a7e95.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-12e4-1474-a7f91.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-12e4-1474-a8001.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-12e4-1474-a8022.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-12e4-1474-a8043.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-12e4-1474-a80d2.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-12e4-1474-a81fd.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-12e4-1474-a82ba.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-12e4-1474-a83a7.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-12e4-1474-a83b8.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-1588-f84-42776b2.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-1588-f84-42776d3.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-1588-f84-42776f4.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-1588-f84-4277725.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-1588-f84-4277746.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-1588-f84-4277748.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-1588-f84-427775a.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-1588-f84-427777b.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-1588-f84-427778d.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-1588-f84-427778f.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-1588-f84-4277791.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-1588-f84-42777b2.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-1588-f84-42777b4.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-1588-f84-42777d5.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-1588-f84-42777d7.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-1588-f84-4277847.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-1588-f84-4277878.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-1588-f84-42778b8.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-1588-f84-42778f9.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-15d4-1d2c-47a0d8.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-15d4-1d2c-47a0e9.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-15d4-1d2c-47a0fb.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-15d4-1d2c-47a0fd.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-15d4-1d2c-47a10f.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-15d4-1d2c-47a111.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-15d4-1d2c-47a113.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-15d4-1d2c-47a124.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-15d4-1d2c-47a126.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-15d4-1d2c-47a138.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-15d4-1d2c-47a14a.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-15d4-1d2c-47a14c.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-15d4-1d2c-47a15d.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-15d4-1d2c-47a15f.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-15d4-1d2c-47a171.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-15d4-1d2c-47a173.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-15d4-1d2c-47a184.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-15d4-1d2c-47a186.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-15d4-1d2c-47a198.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-1860-1ef4-a71d1.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-1860-1ef4-a71f3.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-1860-1ef4-a7204.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-1860-1ef4-a7206.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-1860-1ef4-a7218.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-1860-1ef4-a721a.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-1860-1ef4-a722c.tmp deleted
C:\Windows\SysNative\config\systemprofile\AppData\Local\tw-1860-1ef4-a722e.tmp deleted
Kdo je online
Uživatelé prohlížející si toto fórum: Žádní registrovaní uživatelé a 36 hostů