Nejdou aktualizace OS W7 + Win32:Bredolab

[vyosek]

Prave proto ze jsme online jsou ty edity daleko vice nezadouci...

Ja tu budu prubezne cely den nakukovat...

[vyosek]

Pokud nemate, tak presunte Combofix na plochu

• Spustte poznamkovy blok (Start-spustit-notepad)
• Zkopirujte skript nize

• Kód: Vybrat vše

  KillAll::
  
  Folder::
  c:\programdata\F4D56229000177A5000D3D25A6014588
  c:\program files\Ask.com
  
  File::
  c:\program files\DVDVideoSoftTB\tbDVDV.dll
  c:\program files\ConduitEngine\ConduitEngine.dll
  c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
  c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
  
  Registry::
  [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
  "{00000000-6E41-4FD3-8538-502F5495E5FC}"=-
  "{872b5b88-9db5-4310-bdd0-ac189557e5f5}"=-
  [-HKEY_CLASSES_ROOT\clsid\{00000000-6e41-4fd3-8538-502f5495e5fc}]
  [-HKEY_CLASSES_ROOT\clsid\{872b5b88-9db5-4310-bdd0-ac189557e5f5}]
  [-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
  [-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{872b5b88-9db5-4310-bdd0-ac189557e5f5}]
  [-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
  "{30F9B915-B755-4826-820B-08FBA6BD249D}"=-
  "{D4027C7F-154A-4066-A1AD-4243D8127440}"=-
  "{872b5b88-9db5-4310-bdd0-ac189557e5f5}"=-
  [-HKEY_CLASSES_ROOT\clsid\{30f9b915-b755-4826-820b-08fba6bd249d}]
  [-HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
  [-HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
  [-HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
  [-HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]
  [-HKEY_CLASSES_ROOT\clsid\{872b5b88-9db5-4310-bdd0-ac189557e5f5}]
  [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
  "{30F9B915-B755-4826-820B-08FBA6BD249D}"=-
  "{D4027C7F-154A-4066-A1AD-4243D8127440}"=-
  "{872b5b88-9db5-4310-bdd0-ac189557e5f5}"=-
  [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
  "Skype"=-
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
  "Adobe ARM"=-
  "HP Software Update"=-]
  "NBAgent"=-
  "SunJavaUpdateSched"=-
  "Malwarebytes' Anti-Malware"=-
  [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
  "FlashPlayerUpdate"=-
  [HKEY_LOCAL_MACHINE\software\microsoft\security center]
  "AntiVirusOverride"=dword:00000000
  "FirewallOverride"=dword:00000000
  
  Driver::
  gupdate
  gupdatem
  
  DDS::
  uStart Page = hxxp://search.conduit.com?SearchSource= ... =CT2269050
  uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
  
  Firefox::
  FF - ProfilePath - c:\users\UZIVATEL\AppData\Roaming\Mozilla\Firefox\Profiles\0uvd5gbh.default\
  FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.as ... ource=3&q={searchTerms}
  FF - prefs.js: browser.search.selectedEngine - MyAshampoo Customized Web Search
  FF - prefs.js: browser.startup.homepage - hxxp://eu.ask.com/?l=dis&o=101916
  FF - user.js: extensions.funmoods_i.hmpg - true
  FF - user.js: extensions.funmoods_i.hmpgUrl - hxxp://start.funmoods.com/?f=1&a=vsl
  FF - user.js: extensions.funmoods_i.dfltSrch - true
  FF - user.js: extensions.funmoods_i.srchPrvdr - Search
  FF - user.js: extensions.funmoods_i.dnsErr - true
  FF - user.js: extensions.funmoods_i.newTab - true
  FF - user.js: extensions.funmoods_i.newTabUrl - hxxp://start.funmoods.com/?f=2&a=vsl
  FF - user.js: extensions.funmoods_i.tlbrSrchUrl - hxxp://start.funmoods.com/results.php?f=3&a=vsl&q=
  FF - user.js: extensions.funmoods_i.id - 6c3e9b2c00000000000006234dd3461d
  FF - user.js: extensions.funmoods_i.instlDay - 15411
  FF - user.js: extensions.funmoods_i.vrsn - 1.5.11.16
  FF - user.js: extensions.funmoods_i.vrsni - 1.5.11.16
  FF - user.js: extensions.funmoods_i.vrsnTs - 1.5.11.1610:17
  FF - user.js: extensions.funmoods_i.prtnrId - funmoods
  FF - user.js: extensions.funmoods_i.prdct - funmoods
  FF - user.js: extensions.funmoods_i.aflt - vsl
  FF - user.js: extensions.funmoods_i.smplGrp - none
  FF - user.js: extensions.funmoods_i.tlbrId - base
  FF - user.js: extensions.funmoods_i.instlRef -
  FF - user.js: extensions.funmoods_i.dfltLng -
  FF - user.js: extensions.funmoods_i.excTlbr - false
  
  RegLock::
  [HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\Approved Extensions]
  [HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\ApprovedExtensionsMigration]
  [HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\User Preferences]
  [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
  [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
  [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
  [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
  
  ClearJavaCache::
  
  AtJob::
  
  Reboot::

• Ulozte vytvoreny TXT jako CFScript.txt
• Pretahnete vytvoreny CFScript.txt nad Combofix a pustte (viz obrazek nize)
  
• Po aplikaci skriptu (a pripadnem restartu) na Vas vypadne log, jeho obsah sem vlozte

Muze se stat, ze po aplikaci skriptu nenabehnou windows, v tomto pripade restartuje PC a mackejte F8 a zvolte Posledni znamou konfiguraci

[vyosek]

Omlouvam se za zpozdeni, o vikendu jsem byl necekane mimo...

SPustte prosim ComboFix jeste jednou se stejnym skriptem a nezasahujte do jeho cinnosti...

[vyosek]

Vynechte tu cast SnapShot

[vyosek]

Jak se chova PC

[vyosek]

Tak jeste uklidime

Odinstalujte Combofix

• Prejmenujte ComboFix na Uninstall
• Spustte jej
• Tohle smaze Combofix a jeho slozky

T-Cleaner http://vyosek.ic.cz/pro_usery/T-Cleaner.exe

• Stahnete a spustte
• Pro potvrzeni volby mackejte A, Enter
• Po pouziti utilitu smazte
• Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)

OTC http://oldtimer.geekstogo.com/OTC.exe

• Stahnete a spustte
• Kliknete na CleanUp a potvrdte YES
• Program uklidi a restartuje PC

TFC http://oldtimer.geekstogo.com/TFC.exe

• Stahnete a spustte
• Kliknete na Start a potvrdte OK
• Program uklidi a restartuje pc
• Po pouziti utilitu smazte

Stahnete Ccleaner http://forum.viry.cz/viewtopic.php?t=7478
Panel čistič

• Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner

Panel registry

• dejte Hledej problémy
• nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
• postup opakujte dokud nebude bez problemu - vetsinou cca 3x

Panel nástroje

• Zde muzete odinstalovat nepotrebne programy

CCleaner doporucuji pouzivat cca jednou za tyden

Pak tedy napiste co PC

[vyosek]

Pak bych kontaktoval technickou podporu microsoftu, je jejich povinnosti starat se o produkt za ktery jste zaplatil...

[vyosek]

Bohuzel, ale aktualizace jsou vetsinou problemem microsoftu a oni by meli nejlepe vedet na to jelikoz maji pristupy ke zdroj. kodum atd...

[vyosek]

Neni zac, kdyby neco tak napiste