Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
Avast najde malware - druhe PC
Moderátor: Moderátoři
Pravidla fóra
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
Re: Avast najde malware - druhe PC
ja ten Spyware terminator nemuzu najit, ani Ccleanerem ho nevidim, kde je nainstalovany, cesta?
mam dalsi ukoly udelat i bez odinstalace Spy Terminatoru?
mam dalsi ukoly udelat i bez odinstalace Spy Terminatoru?
Re: Avast najde malware - druhe PC
Ano, aplikujte ten fixlist...
Re: Avast najde malware - druhe PC
Fix result of Farbar Recovery Scan Tool (x64) Version:04-07-2015
Ran by Samsung-520 at 2015-07-05 11:26:10 Run:1
Running from C:\Users\Samsung-520\Desktop
Loaded Profiles: Samsung-520 (Available Profiles: Samsung-520)
Boot Mode: Normal
==============================================
fixlist content:
*****************
Start
CloseProcesses:
CreateRestorePoint:
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [271744 2015-04-10] (Oracle Corporation)
HKU\S-1-5-21-187212541-3816826136-2623567405-1000\...\Run: [Google Update] => C:\Users\Samsung-520\AppData\Local\Google\Update\GoogleUpdate.exe [107912 2014-10-24] (Google Inc.)
HKU\S-1-5-21-187212541-3816826136-2623567405-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3514176 2011-11-10] (DT Soft Ltd)
HKU\S-1-5-21-187212541-3816826136-2623567405-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7404312 2015-01-20] (Piriform Ltd)
HKU\S-1-5-21-187212541-3816826136-2623567405-1000\...\MountPoints2: {0998e707-3894-11e1-bdff-90a4de6cb2af} - F:\SETUP.EXE
HKU\S-1-5-21-187212541-3816826136-2623567405-1000\...\MountPoints2: {9861f91a-b09c-11e1-b68b-90a4de6cb2af} - G:\AutoRun.exe
ShellIconOverlayIdentifiers: [GDriveSharedOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => No File
ShellIconOverlayIdentifiers-x32: [Groove Explorer Icon Overlay 1 (GFS Unread Stub)] -> {99FD978C-D287-4F50-827F-B2C658EDA8E7} => No File
ShellIconOverlayIdentifiers-x32: [Groove Explorer Icon Overlay 2 (GFS Stub)] -> {AB5C5600-7E6E-4B06-9197-9ECEF74D31CC} => No File
ShellIconOverlayIdentifiers-x32: [Groove Explorer Icon Overlay 2.5 (GFS Unread Folder)] -> {920E6DB1-9907-4370-B3A0-BAFC03D81399} => No File
ShellIconOverlayIdentifiers-x32: [Groove Explorer Icon Overlay 3 (GFS Folder)] -> {16F3DD56-1AF5-4347-846D-7C10C4192619} => No File
ShellIconOverlayIdentifiers-x32: [Groove Explorer Icon Overlay 4 (GFS Unread Mark)] -> {2916C86E-86A6-43FE-8112-43ABE6BF8DCC} => No File
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
R2 lowojhxwosewzj; c:\windows\SysWOW64\oiyfman.exe [102400 2014-10-13] ( Company (R)) [File not signed]
c:\windows\SysWOW64\oiyfman.exe
S3 Huawei; system32\DRIVERS\ewdcsc.sys [X]
S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [X]
S3 hwusbdev; system32\DRIVERS\ewusbdev.sys [X]
S2 LMIInfo; \??\C:\Program Files (x86)\LogMeIn\x64\RaInfo.sys [X]
2015-07-04 13:43 - 2015-07-04 13:04 - 00024064 _____ C:\windows\zoek-delete.exe
2015-07-04 13:06 - 2015-07-04 13:45 - 00029938 _____ C:\zoek-results.log
2015-07-04 10:14 - 2015-07-04 13:35 - 00000000 ____D C:\zoek_backup
2015-07-04 09:39 - 2015-07-04 09:44 - 00000000 ____D C:\AdwCleaner
2015-07-04 09:24 - 2015-07-04 09:25 - 00000000 ____D C:\rsit
2015-07-04 09:24 - 2015-07-04 09:25 - 00000000 ____D C:\Program Files\trend micro
2015-07-04 13:05 - 2012-01-06 19:44 - 00000934 _____ C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-187212541-3816826136-2623567405-1000Core.job
Hosts:
EmptyTemp:
Reboot:
End
*****************
Processes closed successfully.
Restore point was successfully created.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched => value removed successfully
HKU\S-1-5-21-187212541-3816826136-2623567405-1000\Software\Microsoft\Windows\CurrentVersion\Run\\Google Update => value removed successfully
HKU\S-1-5-21-187212541-3816826136-2623567405-1000\Software\Microsoft\Windows\CurrentVersion\Run\\DAEMON Tools Lite => value removed successfully
HKU\S-1-5-21-187212541-3816826136-2623567405-1000\Software\Microsoft\Windows\CurrentVersion\Run\\CCleaner Monitoring => value removed successfully
"HKU\S-1-5-21-187212541-3816826136-2623567405-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{0998e707-3894-11e1-bdff-90a4de6cb2af}" => key removed successfully
HKCR\CLSID\{0998e707-3894-11e1-bdff-90a4de6cb2af} => key not found.
"HKU\S-1-5-21-187212541-3816826136-2623567405-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{9861f91a-b09c-11e1-b68b-90a4de6cb2af}" => key removed successfully
HKCR\CLSID\{9861f91a-b09c-11e1-b68b-90a4de6cb2af} => key not found.
"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\GDriveSharedOverlay" => key removed successfully
HKCR\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => key not found.
"HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\Groove Explorer Icon Overlay 1 (GFS Unread Stub)" => key removed successfully
HKCR\Wow6432Node\CLSID\{99FD978C-D287-4F50-827F-B2C658EDA8E7} => key not found.
"HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\Groove Explorer Icon Overlay 2 (GFS Stub)" => key removed successfully
HKCR\Wow6432Node\CLSID\{AB5C5600-7E6E-4B06-9197-9ECEF74D31CC} => key not found.
"HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\Groove Explorer Icon Overlay 2.5 (GFS Unread Folder)" => key removed successfully
HKCR\Wow6432Node\CLSID\{920E6DB1-9907-4370-B3A0-BAFC03D81399} => key not found.
"HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\Groove Explorer Icon Overlay 3 (GFS Folder)" => key removed successfully
HKCR\Wow6432Node\CLSID\{16F3DD56-1AF5-4347-846D-7C10C4192619} => key not found.
"HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\Groove Explorer Icon Overlay 4 (GFS Unread Mark)" => key removed successfully
HKCR\Wow6432Node\CLSID\{2916C86E-86A6-43FE-8112-43ABE6BF8DCC} => key not found.
HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully
HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully
HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} => value removed successfully
HKCR\CLSID\{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} => key not found.
lowojhxwosewzj => Service not found.
"c:\windows\SysWOW64\oiyfman.exe" => File/Folder not found.
Huawei => Service removed successfully
hwdatacard => Service removed successfully
hwusbdev => Service removed successfully
LMIInfo => Service removed successfully
C:\windows\zoek-delete.exe => moved successfully.
C:\zoek-results.log => moved successfully.
C:\zoek_backup => moved successfully.
C:\AdwCleaner => moved successfully.
C:\rsit => moved successfully.
C:\Program Files\trend micro => moved successfully.
C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-187212541-3816826136-2623567405-1000Core.job => moved successfully.
C:\Windows\System32\Drivers\etc\hosts => moved successfully.
Hosts restored successfully.
EmptyTemp: => 447.5 MB temporary data Removed.
The system needed a reboot..
==== End of Fixlog 11:26:43 ====
Ran by Samsung-520 at 2015-07-05 11:26:10 Run:1
Running from C:\Users\Samsung-520\Desktop
Loaded Profiles: Samsung-520 (Available Profiles: Samsung-520)
Boot Mode: Normal
==============================================
fixlist content:
*****************
Start
CloseProcesses:
CreateRestorePoint:
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [271744 2015-04-10] (Oracle Corporation)
HKU\S-1-5-21-187212541-3816826136-2623567405-1000\...\Run: [Google Update] => C:\Users\Samsung-520\AppData\Local\Google\Update\GoogleUpdate.exe [107912 2014-10-24] (Google Inc.)
HKU\S-1-5-21-187212541-3816826136-2623567405-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3514176 2011-11-10] (DT Soft Ltd)
HKU\S-1-5-21-187212541-3816826136-2623567405-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7404312 2015-01-20] (Piriform Ltd)
HKU\S-1-5-21-187212541-3816826136-2623567405-1000\...\MountPoints2: {0998e707-3894-11e1-bdff-90a4de6cb2af} - F:\SETUP.EXE
HKU\S-1-5-21-187212541-3816826136-2623567405-1000\...\MountPoints2: {9861f91a-b09c-11e1-b68b-90a4de6cb2af} - G:\AutoRun.exe
ShellIconOverlayIdentifiers: [GDriveSharedOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => No File
ShellIconOverlayIdentifiers-x32: [Groove Explorer Icon Overlay 1 (GFS Unread Stub)] -> {99FD978C-D287-4F50-827F-B2C658EDA8E7} => No File
ShellIconOverlayIdentifiers-x32: [Groove Explorer Icon Overlay 2 (GFS Stub)] -> {AB5C5600-7E6E-4B06-9197-9ECEF74D31CC} => No File
ShellIconOverlayIdentifiers-x32: [Groove Explorer Icon Overlay 2.5 (GFS Unread Folder)] -> {920E6DB1-9907-4370-B3A0-BAFC03D81399} => No File
ShellIconOverlayIdentifiers-x32: [Groove Explorer Icon Overlay 3 (GFS Folder)] -> {16F3DD56-1AF5-4347-846D-7C10C4192619} => No File
ShellIconOverlayIdentifiers-x32: [Groove Explorer Icon Overlay 4 (GFS Unread Mark)] -> {2916C86E-86A6-43FE-8112-43ABE6BF8DCC} => No File
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
R2 lowojhxwosewzj; c:\windows\SysWOW64\oiyfman.exe [102400 2014-10-13] ( Company (R)) [File not signed]
c:\windows\SysWOW64\oiyfman.exe
S3 Huawei; system32\DRIVERS\ewdcsc.sys [X]
S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [X]
S3 hwusbdev; system32\DRIVERS\ewusbdev.sys [X]
S2 LMIInfo; \??\C:\Program Files (x86)\LogMeIn\x64\RaInfo.sys [X]
2015-07-04 13:43 - 2015-07-04 13:04 - 00024064 _____ C:\windows\zoek-delete.exe
2015-07-04 13:06 - 2015-07-04 13:45 - 00029938 _____ C:\zoek-results.log
2015-07-04 10:14 - 2015-07-04 13:35 - 00000000 ____D C:\zoek_backup
2015-07-04 09:39 - 2015-07-04 09:44 - 00000000 ____D C:\AdwCleaner
2015-07-04 09:24 - 2015-07-04 09:25 - 00000000 ____D C:\rsit
2015-07-04 09:24 - 2015-07-04 09:25 - 00000000 ____D C:\Program Files\trend micro
2015-07-04 13:05 - 2012-01-06 19:44 - 00000934 _____ C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-187212541-3816826136-2623567405-1000Core.job
Hosts:
EmptyTemp:
Reboot:
End
*****************
Processes closed successfully.
Restore point was successfully created.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched => value removed successfully
HKU\S-1-5-21-187212541-3816826136-2623567405-1000\Software\Microsoft\Windows\CurrentVersion\Run\\Google Update => value removed successfully
HKU\S-1-5-21-187212541-3816826136-2623567405-1000\Software\Microsoft\Windows\CurrentVersion\Run\\DAEMON Tools Lite => value removed successfully
HKU\S-1-5-21-187212541-3816826136-2623567405-1000\Software\Microsoft\Windows\CurrentVersion\Run\\CCleaner Monitoring => value removed successfully
"HKU\S-1-5-21-187212541-3816826136-2623567405-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{0998e707-3894-11e1-bdff-90a4de6cb2af}" => key removed successfully
HKCR\CLSID\{0998e707-3894-11e1-bdff-90a4de6cb2af} => key not found.
"HKU\S-1-5-21-187212541-3816826136-2623567405-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{9861f91a-b09c-11e1-b68b-90a4de6cb2af}" => key removed successfully
HKCR\CLSID\{9861f91a-b09c-11e1-b68b-90a4de6cb2af} => key not found.
"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\GDriveSharedOverlay" => key removed successfully
HKCR\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => key not found.
"HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\Groove Explorer Icon Overlay 1 (GFS Unread Stub)" => key removed successfully
HKCR\Wow6432Node\CLSID\{99FD978C-D287-4F50-827F-B2C658EDA8E7} => key not found.
"HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\Groove Explorer Icon Overlay 2 (GFS Stub)" => key removed successfully
HKCR\Wow6432Node\CLSID\{AB5C5600-7E6E-4B06-9197-9ECEF74D31CC} => key not found.
"HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\Groove Explorer Icon Overlay 2.5 (GFS Unread Folder)" => key removed successfully
HKCR\Wow6432Node\CLSID\{920E6DB1-9907-4370-B3A0-BAFC03D81399} => key not found.
"HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\Groove Explorer Icon Overlay 3 (GFS Folder)" => key removed successfully
HKCR\Wow6432Node\CLSID\{16F3DD56-1AF5-4347-846D-7C10C4192619} => key not found.
"HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\Groove Explorer Icon Overlay 4 (GFS Unread Mark)" => key removed successfully
HKCR\Wow6432Node\CLSID\{2916C86E-86A6-43FE-8112-43ABE6BF8DCC} => key not found.
HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully
HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully
HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} => value removed successfully
HKCR\CLSID\{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} => key not found.
lowojhxwosewzj => Service not found.
"c:\windows\SysWOW64\oiyfman.exe" => File/Folder not found.
Huawei => Service removed successfully
hwdatacard => Service removed successfully
hwusbdev => Service removed successfully
LMIInfo => Service removed successfully
C:\windows\zoek-delete.exe => moved successfully.
C:\zoek-results.log => moved successfully.
C:\zoek_backup => moved successfully.
C:\AdwCleaner => moved successfully.
C:\rsit => moved successfully.
C:\Program Files\trend micro => moved successfully.
C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-187212541-3816826136-2623567405-1000Core.job => moved successfully.
C:\Windows\System32\Drivers\etc\hosts => moved successfully.
Hosts restored successfully.
EmptyTemp: => 447.5 MB temporary data Removed.
The system needed a reboot..
==== End of Fixlog 11:26:43 ====
Re: Avast najde malware - druhe PC
Tak co, Avast stale neco nachazi nebo krici??
Re: Avast najde malware - druhe PC
tak vypada to, ze uz je klid, Avast mlci
Re: Avast najde malware - druhe PC
Tak jeste uklidime
Odinstalujte Combofix
Panel čistič
A pokud nejsou problemy ci dotazy, je to z me strany vse
Odinstalujte Combofix
- Prejmenujte ComboFix na Uninstall
- Spustte jej
- Tohle smaze Combofix a jeho slozky
- Stahnete a spustte
- Ponechte zatrzitkou pouze u volby Remote disinfection tools
- Kliknete na Run
Panel čistič
- Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner
- dejte Hledej problémy
- nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
- postup opakujte dokud nebude bez problemu - vetsinou cca 3x
- Zde muzete odinstalovat nepotrebne programy
A pokud nejsou problemy ci dotazy, je to z me strany vse
Re: Avast najde malware - druhe PC
ok
diky moc
diky moc