Reklamy na chromu

[Zemos]

Ahoj. Jeden problém odešel a druhý přišel. Na Chromu, Steamu se mi objevují reklamy. Jdou zavřít ale jen pomocí "close" pod nimi a na rajčeti se mi kvůli tomu neukazují ani fotky.
Zde log z RSIT:
https://onedrive.live.com/redir?resid=C ... file%2ctxt

[vyosek]

Zdravim

Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner

• Ulozte nejlepe na plochu
• Ukoncete vsechny programy
• Po spusteni probehne stazeni databaze
• Kliknete na Scan a nasledne Clean
• Probehne oprava, restart PC a pak se objevi log, pripadne bude ulozen ve slozce c:\AdwCleaner\AdwCleaner[S?].txt, ten sem vlozte

Stahnete Zoek.exe http://hijackthis.nl/smeenk/ a ulozte jej na plochu

• Pokud pouzivate Win Vista ci W7, kliknete na Zoek pravym a dejte Run As Administrator ci Spustit jako spravce
• Do okna vlozte skript nize

• Kód: Vybrat vše

  autoclean;
  resethosts;
  emptyclsid;
  IEdefaults;
  FFdefaults;
  CHRdefaults;
  emptyIEcache;
  emptyFFcache;
  emptyCHRcache;
  emptyalltemp;
  emptyflash;
  emptyjava;
  emptyrecycle.bin;
  

• Nasledne kliknete na Run Script
• PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem

[Zemos]

Log AdwCleaner:
https://onedrive.live.com/redir?resid=C ... file%2ctxt
Zoek log:
https://onedrive.live.com/redir?resid=C ... =folder%2c

[vyosek]

Poprosim o FRST http://forum.viry.cz/viewtopic.php?f=24&t=132509

[Zemos]

Zde je log:
https://onedrive.live.com/redir?resid=C ... file%2ctxt

[vyosek]

Tvorba fixlistu pro FRST

• Spustte poznamkovy blok (Start-spustit-notepad)
• Zkopirujte skript nize

• Kód: Vybrat vše

  Start
  CloseProcesses:
  CreateRestorePoint:
  
  HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [91520 2010-03-13] (Microsoft Corporation)
  HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3978600 2015-03-30] (LogMeIn Inc.)
  HKLM\...\Policies\Explorer: [NoFolderOptions] 0
  HKLM\...\Policies\Explorer: [NoControlPanel] 0
  HKU\S-1-5-21-621929646-1206955908-3885600500-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [31087200 2015-01-23] (Skype Technologies S.A.)
  HKU\S-1-5-21-621929646-1206955908-3885600500-1001\...\Run: [cz.seznam.software.autoupdate] => C:\Users\Péťa\AppData\Roaming\Seznam.cz\szninstall.exe [1062472 2013-05-16] ()
  HKU\S-1-5-21-621929646-1206955908-3885600500-1001\...\Run: [cz.seznam.software.szndesktop] => C:\Users\Péťa\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [92664 2013-04-12] ()
  HKU\S-1-5-21-621929646-1206955908-3885600500-1001\...\Run: [EADM] => D:\Programy\origin\Origin.exe [3632472 2015-04-11] (Electronic Arts)
  HKU\S-1-5-21-621929646-1206955908-3885600500-1001\...\Run: [Spotify Web Helper] => C:\Program Files (x86)\Spotify\Data\SpotifyWebHelper.exe [1168896 2014-09-12] (Spotify Ltd)
  HKU\S-1-5-21-621929646-1206955908-3885600500-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7416088 2015-02-19] (Piriform Ltd)
  HKU\S-1-5-21-621929646-1206955908-3885600500-1001\...\Run: [GSplay.exe] => C:\Users\P%c3%a9%c5%a5a\Downloads\GSplay.exe
  HKU\S-1-5-21-621929646-1206955908-3885600500-1001\...\Run: [Steam] => D:\Programy\Steam\steam.exe [2889408 2015-04-14] (Valve Corporation)
  HKU\S-1-5-21-621929646-1206955908-3885600500-1001\...\Run: [Clownfish] => [X]
  
  HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 
  HKU\S-1-5-21-621929646-1206955908-3885600500-1001\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?trackid=sp-006
  SearchScopes: HKLM-x32 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=sp-006&q={searchTerms}
  SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
  SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
  SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
  
  S3 X6va022; \??\C:\Windows\SysWOW64\Drivers\X6va022 [X]
  S3 X6va029; \??\C:\Windows\SysWOW64\Drivers\X6va029 [X]
  
  2015-04-16 14:36 - 2015-04-16 14:36 - 00021594 _____ () C:\Users\Péťa\Desktop\FRST.txt
  2015-04-16 12:46 - 2015-04-16 12:46 - 00000197 _____ () C:\Windows\system32\2015-04-16-10-46-47.090-AvastVBoxSVC.exe-2976.log
  2015-04-16 08:56 - 2015-04-16 08:13 - 00024064 _____ () C:\Windows\zoek-delete.exe
  2015-04-16 08:27 - 2015-04-16 08:27 - 00000247 _____ () C:\Windows\system32\2015-04-16-06-27-49.057-aswFe.exe-6956.log
  2015-04-16 08:24 - 2015-04-16 08:27 - 00000247 _____ () C:\Windows\system32\2015-04-16-06-24-29.040-aswFe.exe-3216.log
  2015-04-16 08:24 - 2015-04-16 08:24 - 00000197 _____ () C:\Windows\system32\2015-04-16-06-24-27.045-AvastVBoxSVC.exe-6952.log
  2015-04-16 08:17 - 2015-04-16 12:46 - 00010927 _____ () C:\zoek-results.log
  2015-04-16 08:13 - 2015-04-16 08:52 - 00000000 ____D () C:\zoek_backup
  2015-04-16 08:05 - 2015-04-16 08:05 - 02217984 _____ () C:\Users\Péťa\Downloads\adwcleaner_4.201.exe
  2015-04-16 08:05 - 2015-04-16 08:05 - 02217984 _____ () C:\Users\Péťa\Desktop\adwcleaner_4.201.exe
  2015-04-16 08:05 - 2015-04-16 08:05 - 01305600 _____ () C:\Users\Péťa\Downloads\zoek.exe
  2015-04-16 08:05 - 2015-04-16 08:05 - 01305600 _____ () C:\Users\Péťa\Desktop\zoek.exe
  2015-04-16 07:05 - 2015-04-16 07:05 - 40675368 _____ () C:\Users\Péťa\Downloads\Firefox Setup 37.0.1.exe
  2015-04-16 06:52 - 2015-04-16 06:55 - 00000197 _____ () C:\Windows\system32\2015-04-16-04-52-37.044-AvastVBoxSVC.exe-3952.log
  
  Hosts:
  EmptyTemp:
  Reboot:
  End
  

• Ulozte vytvoreny TXT jako fixlist.txt
• Presunte vytvoreny fixlist vedle FRST

Spustte znovu FRST.exe

• Kliknete na Fix
• Probehne oprava a vytvori log Fixlog.txt

Restart PC a dejte mi sem fixlog.txt

[Zemos]

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 15-04-2015 04
Ran by Péťa at 2015-04-16 19:11:39 Run:1
Running from C:\Users\Péťa\Desktop
Loaded Profiles: Péťa (Available profiles: Péťa)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Start
CloseProcesses:
CreateRestorePoint:

HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [91520 2010-03-13] (Microsoft Corporation)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3978600 2015-03-30] (LogMeIn Inc.)
HKLM\...\Policies\Explorer: [NoFolderOptions] 0
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-21-621929646-1206955908-3885600500-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [31087200 2015-01-23] (Skype Technologies S.A.)
HKU\S-1-5-21-621929646-1206955908-3885600500-1001\...\Run: [cz.seznam.software.autoupdate] => C:\Users\Péťa\AppData\Roaming\Seznam.cz\szninstall.exe [1062472 2013-05-16] ()
HKU\S-1-5-21-621929646-1206955908-3885600500-1001\...\Run: [cz.seznam.software.szndesktop] => C:\Users\Péťa\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [92664 2013-04-12] ()
HKU\S-1-5-21-621929646-1206955908-3885600500-1001\...\Run: [EADM] => D:\Programy\origin\Origin.exe [3632472 2015-04-11] (Electronic Arts)
HKU\S-1-5-21-621929646-1206955908-3885600500-1001\...\Run: [Spotify Web Helper] => C:\Program Files (x86)\Spotify\Data\SpotifyWebHelper.exe [1168896 2014-09-12] (Spotify Ltd)
HKU\S-1-5-21-621929646-1206955908-3885600500-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7416088 2015-02-19] (Piriform Ltd)
HKU\S-1-5-21-621929646-1206955908-3885600500-1001\...\Run: [GSplay.exe] => C:\Users\P%c3%a9%c5%a5a\Downloads\GSplay.exe
HKU\S-1-5-21-621929646-1206955908-3885600500-1001\...\Run: [Steam] => D:\Programy\Steam\steam.exe [2889408 2015-04-14] (Valve Corporation)
HKU\S-1-5-21-621929646-1206955908-3885600500-1001\...\Run: [Clownfish] => [X]

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-621929646-1206955908-3885600500-1001\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?trackid=sp-006
SearchScopes: HKLM-x32 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=s ... earchTerms}
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

S3 X6va022; \??\C:\Windows\SysWOW64\Drivers\X6va022 [X]
S3 X6va029; \??\C:\Windows\SysWOW64\Drivers\X6va029 [X]

2015-04-16 14:36 - 2015-04-16 14:36 - 00021594 _____ () C:\Users\Péťa\Desktop\FRST.txt
2015-04-16 12:46 - 2015-04-16 12:46 - 00000197 _____ () C:\Windows\system32\2015-04-16-10-46-47.090-AvastVBoxSVC.exe-2976.log
2015-04-16 08:56 - 2015-04-16 08:13 - 00024064 _____ () C:\Windows\zoek-delete.exe
2015-04-16 08:27 - 2015-04-16 08:27 - 00000247 _____ () C:\Windows\system32\2015-04-16-06-27-49.057-aswFe.exe-6956.log
2015-04-16 08:24 - 2015-04-16 08:27 - 00000247 _____ () C:\Windows\system32\2015-04-16-06-24-29.040-aswFe.exe-3216.log
2015-04-16 08:24 - 2015-04-16 08:24 - 00000197 _____ () C:\Windows\system32\2015-04-16-06-24-27.045-AvastVBoxSVC.exe-6952.log
2015-04-16 08:17 - 2015-04-16 12:46 - 00010927 _____ () C:\zoek-results.log
2015-04-16 08:13 - 2015-04-16 08:52 - 00000000 ____D () C:\zoek_backup
2015-04-16 08:05 - 2015-04-16 08:05 - 02217984 _____ () C:\Users\Péťa\Downloads\adwcleaner_4.201.exe
2015-04-16 08:05 - 2015-04-16 08:05 - 02217984 _____ () C:\Users\Péťa\Desktop\adwcleaner_4.201.exe
2015-04-16 08:05 - 2015-04-16 08:05 - 01305600 _____ () C:\Users\Péťa\Downloads\zoek.exe
2015-04-16 08:05 - 2015-04-16 08:05 - 01305600 _____ () C:\Users\Péťa\Desktop\zoek.exe
2015-04-16 07:05 - 2015-04-16 07:05 - 40675368 _____ () C:\Users\Péťa\Downloads\Firefox Setup 37.0.1.exe
2015-04-16 06:52 - 2015-04-16 06:55 - 00000197 _____ () C:\Windows\system32\2015-04-16-04-52-37.044-AvastVBoxSVC.exe-3952.log

Hosts:
EmptyTemp:
Reboot:
End
*****************

Processes closed successfully.
Restore point was successfully created.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\BCSSync => value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\LogMeIn Hamachi Ui => value deleted successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\NoFolderOptions => value deleted successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\NoControlPanel => value deleted successfully.
HKU\S-1-5-21-621929646-1206955908-3885600500-1001\Software\Microsoft\Windows\CurrentVersion\Run\\Skype => value deleted successfully.
HKU\S-1-5-21-621929646-1206955908-3885600500-1001\Software\Microsoft\Windows\CurrentVersion\Run\\cz.seznam.software.autoupdate => value deleted successfully.
HKU\S-1-5-21-621929646-1206955908-3885600500-1001\Software\Microsoft\Windows\CurrentVersion\Run\\cz.seznam.software.szndesktop => value deleted successfully.
HKU\S-1-5-21-621929646-1206955908-3885600500-1001\Software\Microsoft\Windows\CurrentVersion\Run\\EADM => value deleted successfully.
HKU\S-1-5-21-621929646-1206955908-3885600500-1001\Software\Microsoft\Windows\CurrentVersion\Run\\Spotify Web Helper => value deleted successfully.
HKU\S-1-5-21-621929646-1206955908-3885600500-1001\Software\Microsoft\Windows\CurrentVersion\Run\\CCleaner Monitoring => value deleted successfully.
HKU\S-1-5-21-621929646-1206955908-3885600500-1001\Software\Microsoft\Windows\CurrentVersion\Run\\GSplay.exe => value deleted successfully.
HKU\S-1-5-21-621929646-1206955908-3885600500-1001\Software\Microsoft\Windows\CurrentVersion\Run\\Steam => value deleted successfully.
HKU\S-1-5-21-621929646-1206955908-3885600500-1001\Software\Microsoft\Windows\CurrentVersion\Run\\Clownfish => value deleted successfully.
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Search_URL => Value was restored successfully.
HKU\S-1-5-21-621929646-1206955908-3885600500-1001\Software\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully.
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{E9410C70-B6AE-41FF-AB71-32F4B279EA5F}" => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{E9410C70-B6AE-41FF-AB71-32F4B279EA5F} => Key not found.
HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
X6va022 => Service deleted successfully.
X6va029 => Service deleted successfully.
"C:\Users\Péťa\Desktop\FRST.txt" => File/Directory not found.
Could not move "C:\Windows\system32\2015-04-16-10-46-47.090-AvastVBoxSVC.exe-2976.log" => Scheduled to move on reboot.
C:\Windows\zoek-delete.exe => Moved successfully.
C:\Windows\system32\2015-04-16-06-27-49.057-aswFe.exe-6956.log => Moved successfully.
C:\Windows\system32\2015-04-16-06-24-29.040-aswFe.exe-3216.log => Moved successfully.
C:\Windows\system32\2015-04-16-06-24-27.045-AvastVBoxSVC.exe-6952.log => Moved successfully.
C:\zoek-results.log => Moved successfully.
C:\zoek_backup => Moved successfully.
C:\Users\Péťa\Downloads\adwcleaner_4.201.exe => Moved successfully.
C:\Users\Péťa\Desktop\adwcleaner_4.201.exe => Moved successfully.
C:\Users\Péťa\Downloads\zoek.exe => Moved successfully.
C:\Users\Péťa\Desktop\zoek.exe => Moved successfully.
C:\Users\Péťa\Downloads\Firefox Setup 37.0.1.exe => Moved successfully.
C:\Windows\system32\2015-04-16-04-52-37.044-AvastVBoxSVC.exe-3952.log => Moved successfully.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.
EmptyTemp: => Removed 286.9 MB temporary data.

=> Result of Scheduled Files to move (Boot Mode: Normal) (Date&Time: 2015-04-16 19:13:47)<=

C:\Windows\system32\2015-04-16-10-46-47.090-AvastVBoxSVC.exe-2976.log => Is moved successfully.

==== End of Fixlog 19:13:47 ====

[vyosek]

Tak jeste uklidime

DelFix https://toolslib.net/downloads/finish/2/

• Stahnete a spustte
• Ponechte zatrzitkou pouze u volby Remote disinfection tools
• Kliknete na Run

Stahnete Ccleaner https://www.piriform.com/ccleaner/download/standard
Panel čistič

• Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner

Panel registry

• dejte Hledej problémy
• nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
• postup opakujte dokud nebude bez problemu - vetsinou cca 3x

Panel nástroje

• Zde muzete odinstalovat nepotrebne programy

CCleaner doporucuji pouzivat cca jednou za tyden

A pokud nejsou problemy ci dotazy, je to z me strany vse