Prosím o kontrolu

[oggy]

.

[Conder]

Ahoj

Stiahni AdwCleaner: https://toolslib.net/downloads/finish/1/

• Uloz na plochu a ukonci vsetky programy
• Spusti AdwCleaner ako spravca
• Odsuhlas licencne podmienky
• Klikni na Skenovat nyni (Scan now) a pockaj na dokoncenie
• Nechaj zaskrtnute vsetky nalezy
• Klikni na Cisteni a opravy (Clean and Repair) a potvrd restart PC teraz
• Po restartovani PC sa otvori AdwCleaner, klikni na Zobrazit soubor protokolu
• Otvori sa log, jeho obsah sem skopiruj

[oggy]

# -------------------------------
# Malwarebytes AdwCleaner 7.2.3.0
# -------------------------------
# Build: 09-03-2018
# Database: 2018-09-01.1 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Scan
# -------------------------------
# Start: 09-03-2018
# Duration: 00:00:11
# OS: Windows 10 Pro
# Scanned: 41852
# Detected: 0


***** [ Services ] *****

No malicious services found.

***** [ Folders ] *****

No malicious folders found.

***** [ Files ] *****

No malicious files found.

***** [ DLL ] *****

No malicious DLLs found.

***** [ WMI ] *****

No malicious WMI found.

***** [ Shortcuts ] *****

No malicious shortcuts found.

***** [ Tasks ] *****

No malicious tasks found.

***** [ Registry ] *****

No malicious registry entries found.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries found.

***** [ Chromium URLs ] *****

No malicious Chromium URLs found.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries found.

***** [ Firefox URLs ] *****

No malicious Firefox URLs found.



########## EOF - C:\AdwCleaner\Logs\AdwCleaner[S00].txt ##########

[altrok]

Dejte logy FRST.txt a Addition.txt - http://forum.viry.cz/viewtopic.php?f=30&t=133101

[oggy]

.

[Conder]

Otvor poznamkovy blok (Win+R -> notepad -> enter)

• Skopiruj nasledujuci text a vloz ho do poznamkoveho bloku:

  Kód: Vybrat vše

  Start
  CloseProcesses:
  CreateRestorePoint:
  
  PowerShell: Get-ChildItem -Path "$ENV:USERPROFILE\Desktop" -Recurse -Force | Measure-Object -Property Length -Sum
  File: C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe
  File: C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe 
  File: C:\Moldex3D\LMSR\MDX3DLMService.exe
  File: C:\Program Files (x86)\Windows Kits\10\Testing\Runtimes\TAEF\Wex.Services.exe
  CMD: type "C:\VEL\MapDisks.bat"
  
  HKU\S-1-5-21-1872984054-2955133499-3290141406-1001\...\MountPoints2: {f148ccd6-324c-11e7-b5df-34f39ac7bf59} - "D:\HiSuiteDownLoader.exe" 
  Startup: C:\Users\Petr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Sigil.lnk [2018-04-03]
  ShortcutTarget: Sigil.lnk -> C:\Users\Petr\Desktop\newWalletTest\sigil-qt.exe (No File)
  HKU\S-1-5-21-1872984054-2955133499-3290141406-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://dell17win10.msn.com/?pc=DCTE
  HKU\S-1-5-21-1872984054-2955133499-3290141406-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://dell17win10.msn.com/?pc=DCTE
  SearchScopes: HKU\S-1-5-21-1872984054-2955133499-3290141406-1001 -> DefaultScope {9A97F3D4-2D10-4258-84E9-AE160BAA2F4B} URL = 
  SearchScopes: HKU\S-1-5-21-1872984054-2955133499-3290141406-1001 -> {9A97F3D4-2D10-4258-84E9-AE160BAA2F4B} URL = 
  2018-09-03 15:45 - 2018-09-03 15:45 - 000000000 ____D C:\rsit
  2018-09-03 15:45 - 2018-09-03 15:45 - 000000000 ____D C:\Program Files\trend micro
  2018-09-03 15:44 - 2018-09-03 15:44 - 001222144 _____ C:\Users\Petr\Downloads\RSITx64.exe
  2018-01-11 22:26 - 2018-01-11 22:26 - 000000000 _____ () C:\Users\Petr\xmr-stak-nvidia-notls.exe
  2018-02-23 16:57 - 2018-02-23 16:57 - 000000000 _____ () C:\Users\Petr\AppData\Local\debuggee.mdmp
  ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} =>  -> No File
  Task: {A66BAFC8-927D-4B4A-B08D-DEB30B843717} - \Microsoft\Windows\UNP\RunCampaignManager -> No File <==== ATTENTION
  AlternateDataStreams: C:\ProgramData\TEMP:5F64C164 [137]
  AlternateDataStreams: C:\Users\Petr\Downloads\The-Big-Bang-Theory-S1E01---Pilot.mkv:xdg.origin.url [264]
  
  Hosts:
  EmptyTemp:
  End

• Uloz na plochu s nazvom fixlist.txt
• Spusti znovu FRST a klikni na Fix
• Po dokonceni si FRST vyziada restart PC, potvrd kliknutim na OK
• Po restartovani PC bude na ploche subor Fixlog.txt, jeho obsah sem skopiruj

[oggy]

.

[Conder]

Vyzera to OK.

Co sa tyka Malwarebytes, po vyprsani tej skusobnej lehoty sa realtime ochrana vypne a Malwarebytes sa da pouzit iba ako (manualne spusteny) skener.

[oggy]

Děkuji za kontrolu. Malwarebytes mám placenou verzi, takže tím to nebude. Jelikož problém není způsoben nákazou, budu jej řešit na jejich fóru.
Ještě jednou děkuji a přeji hezký den.

[Conder]

Tak este upraceme po pouzitych nastrojoch:

• Stiahni DelFix: https://toolslib.net/downloads/finish/2-delfix/
• Uloz na plochu a spusti
• Nechaj oznacenu moznost "Remove disinfection tools"
• Klikni na "Run"