Nestandardní chování Win10

[kewin]

Prosím o pomoc. win10 se začaly chovat nestatndardně. Antivir nic neodhalil. Děkuji

[Rudy]

Zdravím!
V čem spočívá to nestandardní chování? Spusťte tuto utilitu:

Stáhněte AdwCleaner https://toolslib.net/downloads/viewdown ... dwcleaner/
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan<(hledání) a pak na >Clean< (mazání).
Proběhne skenováni a pak se objeví log, který sem vložte.

[kewin]

Nestandardní bylo, že zmizely všechny ikony z hlavního panelu, na kliknutí nereagovala ani ikona Start. Lišta záložek reagovala pouze na pravé tlačítko myši. Tepreve po restartu se stisknutým Shift se vrátilo vše zpět. Nevím čím to mohlo vzniknout. Posílám log z Adwcleaneru, Volba Clean se neobjevila, asi to žádný problém nenašlo. Teď vypadá že je PC ok.

# AdwCleaner 7.0.5.0 - Logfile created on Fri Dec 15 17:27:29 2017
# Updated on 2017/29/11 by Malwarebytes
# Database: 12-13-2017.2
# Running on Windows 10 Home (X64)
# Mode: scan
# Support: https://www.malwarebytes.com/support

***** [ Services ] *****

No malicious services found.

***** [ Folders ] *****

PUP.Optional.IoloSC, C:\Program Files (x86)\iolo\System Checkup
PUP.Optional.IoloSC, C:\ProgramData\IOLO\SCU
PUP.Optional.IoloSC, C:\Users\All Users\IOLO\SCU


***** [ Files ] *****

No malicious files found.

***** [ DLL ] *****

No malicious DLLs found.

***** [ WMI ] *****

No malicious WMI found.

***** [ Shortcuts ] *****

No malicious shortcuts found.

***** [ Tasks ] *****

PUP.Optional.IoloSC, iolo SCU task one


***** [ Registry ] *****

PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\CLSID\{A75BE48D-BF58-4A8B-B96C-F9A09DFB9844}
PUP.Optional.IoloSC, [Key] - HKLM\SOFTWARE\IOLO\System Checkup


***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries.

*************************

C:/AdwCleaner/AdwCleaner[C0].txt - [4933 B] - [2017/1/31 5:8:11]
C:/AdwCleaner/AdwCleaner[C2].txt - [1989 B] - [2017/6/14 12:13:2]
C:/AdwCleaner/AdwCleaner[S0].txt - [4801 B] - [2017/1/31 5:7:6]
C:/AdwCleaner/AdwCleaner[S1].txt - [2048 B] - [2017/6/14 12:9:38]
C:/AdwCleaner/AdwCleaner[S2].txt - [1484 B] - [2017/12/15 17:24:51]


########## EOF - C:\AdwCleaner\AdwCleaner[S3].txt ##########

[Rudy]

Tak právěže to něco našlo. Klikněte ještě na mazání a dejte log FRST: https://forum.viry.cz/viewtopic.php?f=13&t=152707 .

[kewin]

Posilam log - v priloze

[Rudy]

Otevřte poznámkový blok a zkopírujte do něj:

Start
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-09-05] (Oracle Corporation)
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [No File]
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [No File]
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [No File]
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [No File]
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [No File]
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2089270285-844728859-2846910010-1000Core
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2089270285-844728859-2846910010-1000UA
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore

EmptyTemp:
End

Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

[kewin]

Fix result of Farbar Recovery Scan Tool (x64) Version: 17-12-2017
Ran by VE (22-12-2017 22:17:51) Run:3
Running from C:\Users\VE\Desktop
Loaded Profiles: VE (Available Profiles: VE & DefaultAppPool)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-09-05] (Oracle Corporation)
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [No File]
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [No File]
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [No File]
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [No File]
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [No File]
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2089270285-844728859-2846910010-1000Core
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2089270285-844728859-2846910010-1000UA
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore

EmptyTemp:
End
*****************

HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched => value removed successfully
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION => restored successfully
"HKLM\Software\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.0.8" => removed successfully
"HKLM\Software\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.1.2" => removed successfully
"HKLM\Software\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.1.3" => removed successfully
"HKLM\Software\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.1.5" => removed successfully
"HKLM\Software\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.1" => removed successfully
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2089270285-844728859-2846910010-1000Core => moved successfully
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2089270285-844728859-2846910010-1000UA => moved successfully
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA => moved successfully
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore => moved successfully

=========== EmptyTemp: ==========

BITS transfer queue => 6578176 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 21477576 B
Java, Flash, Steam htmlcache => 26 B
Windows/system/drivers => 27132244 B
Edge => 15872 B
Chrome => 196202 B
Firefox => 389709798 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 1634 B
NetworkService => 0 B
VE => 39836218 B
DefaultAppPool => 0 B

RecycleBin => 0 B
EmptyTemp: => 462.5 MB temporary data Removed.

================================


The system needed a reboot.

==== End of Fixlog 22:20:35 ====

[Rudy]

Smazáno. Nastala nějaká změna?

[kewin]

Vše se jeví ok.

[Rudy]

Tak to jsem rád!

[kewin]

Děkuji moc, na forum přispěju, přeji pěkné svátky.
Téma uzavírám

[Rudy]

Také hezké svátky a do nového roku jen to nejlepší. Nemáte zač!