Adware

[joejoe]

Dobry den mam problem s nasledujucim adware, pouzivam chrome, ublock,ghostery...tie mi niektore popupy zablokuju ale aj tak sa otvoria a hned zatvoria.

Kód: Vybrat vše

http://w.hot-voucher-for-you.online/S
http://links-yahoo.com/
http://www.reimageplus.com/  == Windows PC Repair
bet365.com

Log z FRST v prilohe. je prilis velky

[joejoe]

Kód: Vybrat vše

# AdwCleaner v6.020 - Logfile created 27/09/2016 at 10:26:00
# Updated on 14/09/2016 by ToolsLib
# Database : 2016-09-27.1 [Server]
# Operating System : Windows 10 Pro  (X64)
# Username : Jozef - THINKPAD_E540
# Running from : C:\Users\Jozef\Desktop\adwcleaner_6.020.exe
# Mode: Clean
# Support : https://toolslib.net/forum



***** [ Services ] *****



***** [ Folders ] *****



***** [ Files ] *****



***** [ DLL ] *****



***** [ WMI ] *****



***** [ Shortcuts ] *****



***** [ Scheduled Tasks ] *****



***** [ Registry ] *****



***** [ Web browsers ] *****

[-] [C:\Users\Jozef\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] Deleted: ask.com
[-] [C:\Users\Jozef\AppData\Local\Google\Chrome\User Data\Default] [extension] Deleted: paddiapjbnmknhhobfcjnnmhgihnpgne


*************************

:: "Tracing" keys deleted
:: Winsock settings cleared

*************************

C:\AdwCleaner\AdwCleaner[C1].txt - [2218 Bytes] - [21/02/2016 13:08:11]
C:\AdwCleaner\AdwCleaner[C2].txt - [862 Bytes] - [25/02/2016 20:16:11]
C:\AdwCleaner\AdwCleaner[C3].txt - [1451 Bytes] - [29/08/2016 18:37:01]
C:\AdwCleaner\AdwCleaner[C4].txt - [1597 Bytes] - [26/09/2016 14:38:40]
C:\AdwCleaner\AdwCleaner[C5].txt - [1265 Bytes] - [27/09/2016 10:26:00]
C:\AdwCleaner\AdwCleaner[S1].txt - [2018 Bytes] - [21/02/2016 13:05:23]
C:\AdwCleaner\AdwCleaner[S2].txt - [764 Bytes] - [25/02/2016 20:02:18]
C:\AdwCleaner\AdwCleaner[S3].txt - [764 Bytes] - [25/02/2016 20:13:53]
C:\AdwCleaner\AdwCleaner[S4].txt - [1585 Bytes] - [29/08/2016 18:36:16]
C:\AdwCleaner\AdwCleaner[S5].txt - [1731 Bytes] - [26/09/2016 14:27:03]
C:\AdwCleaner\AdwCleaner[S6].txt - [1978 Bytes] - [27/09/2016 10:25:38]

########## EOF - C:\AdwCleaner\AdwCleaner[C5].txt - [1774 Bytes] ##########

[joejoe]

Vaše zpráva obsahuje 136406 znaků. Maximální povolený počet znaků je 100000.


priloha.

edit. adware neni odstraneny, pridalo s knemu este

Kód: Vybrat vše

https://lp.xtrade.com/new-cms/sk/xt_r_gold_2016_sk/?pid=xxx&c=Cyprus_Uper_XT_SK&af_sub1=190904&af_sub2=%dapp%25&af_sub3=SK&cid=-1&tid=190904&lid=sk&pubid=-1&reqt=1474967842174&grp=13%7E190904%23&euid=w2R9IAO8BN7P0100HCUKVQFQ

http://www.tvtipsport.sk/?utm_campaign=41&utm_medium=3301&utm_source=3670&utm_content=4916

[altrok]

Krasny den Vam preju



V ramci cisteni Vam budou vyprazdneny docasne adresare (vcetne Kose).



V PC jsou zbytky po AVG - docistete je pomoci oficialniho odinstalatoru http://support.eset.com/kb146/#a



Abych byl uprimny, momentalne pricinu vyskakovani oken v logu nevidim (mam podezreni na rozsireni v Chromu). Okna vyskakuji jen kdyz je spusteny Chrome? MBAM nebo Hitman neco nasli?



Odinstalujte starou a zranitelnou verzi Javy. Pokud Javu potrebujete, pak nainstalujte novou z java.com/verify - pozor na adware pri instalaci. Pote se presvedcte, ze starsi verze jsou odinstalovane. Z hlediska bezpecnosti (zranitelnosti a exploity) je lepsi ji nemit. Aktualni je 8U101. Verze Javy, ktere v PC mate nainstalovane:

• Java 8 Update 91 (64-bit)
• Java 8 Update 91

• Do Poznamkoveho bloku (Start -> spustit -> notepad) zkopirujte obsah bileho pole
• ulozte na plochu jako fixlist (Typ souboru: Textovy dokument)
• znovu spustte FRST a kliknete na Fix
• po restartu bude na plose ulozen fixlog, jehoz obsah vlozte do pristi odpovedi

  Kód: Vybrat vše

  Start
  CreateRestorePoint:
  CloseProcesses:
  File: C:\Windows\Prey\wpxsvc.exe
  R2 ibtsiva; %SystemRoot%\system32\ibtsiva [X]
  S3 dbx; system32\DRIVERS\dbx.sys [X]
  Folder: C:\WINDOWS\Minidump
  File: C:\Users\Public\VOIP.dat
  Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
  Task: C:\WINDOWS\Tasks\update-S-1-5-21-2188940044-2382974296-1840201773-1001.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe
  Task: C:\WINDOWS\Tasks\update-sys.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe
  File: C:\Windows\Prey\versions\1.6.2\bin\node.exe
  EmptyTemp:
  End

[joejoe]

ok, idem zaspominat na hesla
odstranene
adw,bam,hitman narazali na haved v chrome viac krat..inak nic extra, hitman mi chcel pomazat assembler programy ...
v chrome mame tieto rozsierenia : Backspace to go Back,FB-Purity.net - Clean Up FB (Latest Beta),Ghostery,Google Dictionary (by Google),HTTPS Everywhere ,Image Search Options,Reddit Enhancement Suite,uBlock Origin,Unseen
ok hotovo

Kód: Vybrat vše

Fix result of Farbar Recovery Scan Tool (x64) Version: 25-09-2016
Ran by Jozef (27-09-2016 14:49:58) Run:2
Running from C:\Users\Jozef\Desktop
Loaded Profiles: Jozef (Available Profiles: Jozef & postgres)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
CreateRestorePoint:
CloseProcesses:
File: C:\Windows\Prey\wpxsvc.exe
R2 ibtsiva; %SystemRoot%\system32\ibtsiva [X]
S3 dbx; system32\DRIVERS\dbx.sys [X]
Folder: C:\WINDOWS\Minidump
File: C:\Users\Public\VOIP.dat
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\update-S-1-5-21-2188940044-2382974296-1840201773-1001.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe
Task: C:\WINDOWS\Tasks\update-sys.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe
File: C:\Windows\Prey\versions\1.6.2\bin\node.exe
EmptyTemp:
End
*****************

Restore point was successfully created.
Processes closed successfully.

========================= File: C:\Windows\Prey\wpxsvc.exe ========================

File not signed
MD5: E0F25019195B8417F0F2BDA2D337EEE4
Creation and modification date: 2016-07-17 14:04 - 2016-07-17 14:04
Size: 0611854
Attributes: ----A
Company Name: Fork, Ltd.
Internal Name: ExSVC
Original Name: exsvc.exe
Product: Execution Service
Description: Execution Service
File Version: 1.0.0.0
Product Version: 1.0.0.0
Copyright: (c) 2014 Fork, Ltd.

====== End of File: ======

ibtsiva => service removed successfully
dbx => service removed successfully

========================= Folder: C:\WINDOWS\Minidump ========================


====== End of Folder: ======


========================= File: C:\Users\Public\VOIP.dat ========================

File not signed
MD5: 6C5E3A4DE9AF8F5EDD19069CC4259B97
Creation and modification date: 2016-09-11 20:10 - 2016-09-23 17:53
Size: 1388432
Attributes: ----A
Company Name: 
Internal Name: 
Original Name: 
Product: 
Description: 
File Version: 
Product Version: 
Copyright: 

====== End of File: ======

C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => moved successfully
C:\WINDOWS\Tasks\update-S-1-5-21-2188940044-2382974296-1840201773-1001.job => moved successfully
C:\WINDOWS\Tasks\update-sys.job => moved successfully

========================= File: C:\Windows\Prey\versions\1.6.2\bin\node.exe ========================

File is digitally signed
MD5: 8337C8F8D136C2D35C44C78391F4F30F
Creation and modification date: 2016-09-01 20:42 - 2016-09-01 20:42
Size: 11811480
Attributes: ----A
Company Name: Node.js
Internal Name: node
Original Name: node.exe
Product: Node.js
Description: Node.js: Server-side JavaScript
File Version: 4.4.5
Product Version: 4.4.5
Copyright: Copyright Node.js contributors. MIT license.

====== End of File: ======


=========== EmptyTemp: ==========

BITS transfer queue => 0 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 19408036 B
Java, Flash, Steam htmlcache => 710 B
Windows/system/drivers => 56092213 B
Edge => 7136756 B
Chrome => 751468044 B
Firefox => 5905283 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 8162 B
NetworkService => 0 B
Jozef => 52663937 B
postgres => 0 B

RecycleBin => 161512975 B
EmptyTemp: => 1005.4 MB temporary data Removed.

================================


The system needed a reboot.

==== End of Fixlog 14:56:01 ====

chvilku poklikam, uvidim ci adware bude este vyskakovat

edit: zatial to vyzera vsetko OK dakujem.

[altrok]

OK, neni zac, kdyztak se jeste ozvete. Par dni necham tema otevrene. Pokud vsechno bude v poradku, doporucuji DelFix na odstraneni antimalwarovych nastroju.

• Stahnete a spustte DelFix - https://toolslib.net/downloads/viewdownload/2-delfix/
• Oznacte jen moznost "Remove disinfection tools"
• kliknete na Run

[joejoe]

ok dakujem, vyzera ze vsetko funguje ako ma

Dakujem