Jak odstranit ask.com

[naletěla]

Chtěla jsem stáhnout mp3 a vlezlo mi tam že si napřed musím nainstalovat jakýsi ilivid. Tak jsem to (bohužel) udělala a do vyhledávačů se mi nasomroval jakýsi ask.com. Program ilivid mi syn už odinstaloval, ale teď mi nefunguje vyhledávání a ten ask.com se načte při každém pokusu otevřít nový panel.
Našla jsem něco o něm tady, ale moc se v tom neorientuju co a jak mám udělat a varujou tam před tím aby to dělal laik. Prosím o pomoc.

[vyosek]

Zdravim a pekne odpoledne preji

Stahnete Junkware Removal Tool http://thisisudax.org/downloads/JRT.exe

• Ulozte nejlepe na plochu
• Po spusteni se zobrazi licencni podminky, stisknete libovolnou klavesu
• Probehne vytvoreni zalohy a nasledne prohledavani
• Probehne skenovani a pak se objevi log, pripadne bude ulozen v c:\JRT jako JRT.txt, ten sem vlozte

Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner

• Ulozte nejlepe na plochu
• Ukoncete vsechny programy
• Kliknete na Scan a nasledne Clean
• Probehne oprava, restart PC a pak se objevi log, pripadne bude ulozen ve slozce c:\AdwCleaner\AdwCleaner[S?].txt, ten sem vlozte

[naletěla]

Díky, jdu na to.

[vyosek]

Nedavejte sem prosim dalsi odkazy, navic ten co jste dala je pomalu az skodlivy, jelikoz doporucuje aplikovat SpyHunter. SpyHunter nema moc dobre reference, vzhledem ke sve agresivni reklami politice a dalsim problemum, ktere spolu s jeho pouzitim souvisi.

Ask.com je zanmy typ haveti a vyskoleni radci moc dobre vi, jak s nim lehce zatocit...

[naletěla]

Program píše:
A bad module had been detected.
A reboot is require to remove modules.
Press y to reboot now
Press n to reboot later
JRT.txt nemůžu najít ani na ploše ani na C.
Omlouvám se za ten odkaz, to jsem netušila.

[vyosek]

JRT jeste nedokoncil svou praci a pise co mate udelat Press y to reboot now

Takze stisknete y, PC se restartuje a JRT dokonci svou praci...

[naletěla]

Teď mám stáhnout ten ADCleaner nebo ještě počkat na výsledek? A měla bych si raději udělat zálohu dat nebo to není nutné?

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.4 (10.06.2013:1)
OS: Windows 7 Home Premium x64
Ran by ivana on źt 10.10.2013 at 14:23:10,68
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values




~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{A40DC6C5-79D0-4CA8-A185-8FF989AF1115}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{CC1AC828-BB47-4361-AFB5-96EEE259DD87}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{A40DC6C5-79D0-4CA8-A185-8FF989AF1115}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{CC1AC828-BB47-4361-AFB5-96EEE259DD87}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\apn dtx
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\ilivid
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\searchquiehelper.dnsguard
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\searchquiehelper.dnsguard.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\datamngr
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\datamngr"
Successfully deleted: [Folder] "C:\ProgramData\partner"
Successfully deleted: [Folder] "C:\ProgramData\wincert"
Successfully deleted: [Folder] "C:\Users\ivana\AppData\Roaming\opencandy"
Failed to delete: [Folder] "C:\Program Files (x86)\movies toolbar"
Successfully deleted: [Empty Folder] C:\Users\ivana\appdata\local\{1E787502-80C5-4469-A2EA-5AC567A4A4C2}
Successfully deleted: [Empty Folder] C:\Users\ivana\appdata\local\{24843B41-E39F-4DA8-9592-84DEDCBD24CA}
Successfully deleted: [Empty Folder] C:\Users\ivana\appdata\local\{A956DEA9-8601-4389-8DB4-18060627E04D}
Successfully deleted: [Empty Folder] C:\Users\ivana\appdata\local\{AEC694AB-4FDD-4BA6-B228-C381069F0D44}
Successfully deleted: [Empty Folder] C:\Users\ivana\appdata\local\{D00720F0-7AA7-43DB-AC13-7BB5156DA6FB}
Successfully deleted: [Empty Folder] C:\Users\ivana\appdata\local\{E3D84D5A-6D99-4815-BB40-D02F3859DB41}
Successfully deleted: [Empty Folder] C:\Users\ivana\appdata\local\{F9DEBA53-5429-400B-B42E-3CEF0EEF0613}



~~~ FireFox

Successfully deleted the following from C:\Users\ivana\AppData\Roaming\mozilla\firefox\profiles\xvwmbo2a.default\prefs.js

user_pref("keyword.URL", "hxxp://dts.search.ask.com/sr?src=ffb&gct=ds&appid=400&systemid=406&v=n9602-131&apn_dtid=BND406&apn_ptnrs=AG6&apn_uid=3745340096104553&o=APN10645&q=")
Emptied folder: C:\Users\ivana\AppData\Roaming\mozilla\firefox\profiles\xvwmbo2a.default\minidumps [78 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on źt 10.10.2013 at 14:27:57,07
Computer was rebooted
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

[vyosek]

Zatim zadne riskantni kroky nedelame, ale zaloha dulezitych dokumentu by mela byt prubezna

Pokracujte AdwCleanerem

[naletěla]

# AdwCleaner v3.007 - Report created 10/10/2013 at 14:42:06
# Updated 09/10/2013 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : ivana - IVANA-NTB
# Running from : C:\Users\ivana\Desktop\adwcleaner.exe
# Option : Clean

***** [ Services ] *****

[#] Service Deleted : DatamngrCoordinator

***** [ Files / Folders ] *****

[#] Folder Deleted : C:\ProgramData\BitGuard
[#] Folder Deleted : C:\ProgramData\Browser Manager
[#] Folder Deleted : C:\ProgramData\BrowserProtect
Folder Deleted : C:\Program Files (x86)\Movies Toolbar

***** [ Shortcuts ] *****


***** [ Registry ] *****

Value Deleted : HKLM\SYSTEM\ControlSet001\Control\Session Manager\AppCertDlls [x64]
Value Deleted : HKLM\SYSTEM\ControlSet001\Control\Session Manager\AppCertDlls [x86]
Value Deleted : HKLM\SYSTEM\ControlSet002\Control\Session Manager\AppCertDlls [x64]
Value Deleted : HKLM\SYSTEM\ControlSet002\Control\Session Manager\AppCertDlls [x86]
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{2CE4D4CF-B278-4126-AD1E-B622DA2E8339}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{1B730ACF-26A3-447B-9994-14AEE0EB72CC}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{2CE4D4CF-B278-4126-AD1E-B622DA2E8339}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{6A4BCABA-C437-4C76-A54E-AF31B8A76CB9}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A40DC6C5-79D0-4CA8-A185-8FF989AF1115}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{1B730ACF-26A3-447B-9994-14AEE0EB72CC}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}
Key Deleted : HKLM\Software\DataMngr
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}

***** [ Browsers ] *****

-\\ Internet Explorer v10.0.9200.16720


-\\ Mozilla Firefox v24.0 (cs)

[ File : C:\Users\ivana\AppData\Roaming\Mozilla\Firefox\Profiles\xvwmbo2a.default\prefs.js ]

Line Deleted : user_pref("browser.search.order.1", "Ask.com");

*************************

AdwCleaner[R0].txt - [2672 octets] - [10/10/2013 14:40:50]
AdwCleaner[S0].txt - [2364 octets] - [10/10/2013 14:42:06]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [2424 octets] ##########

[vyosek]

Poprosim o log z FRSTL http://forum.viry.cz/viewtopic.php?f=13&t=133100

[naletěla]

Jdu na to.
Ještě mám dotaz: v adresáři mám pořád ten soubor co jsem z něj to svinstvo instalovala, jmenuje se to iLividSetup. Nedělat nic nebo smazat?

[vyosek]

Je to asi jen istalacni soubor, ale pro jistotu, smazte jej...

[naletěla]

Tak mám stažený ten Launcher, ale na FRST mě to nechce připojit. Ten ask mi tam pořád trčí. Mám to stáhnout u syna a přenést přes flešku? Ten livid jsem smazala a vysypala koš.

[vyosek]

Stranky s umistenim FRST maji problem takze pouzijem neco jineho

Stahnete OTL http://oldtimer.geekstogo.com/OTL.exe a ulozte jej na plochu

• Pokud pouzivate Win Vista ci W7, kliknete na OTL pravym a dejte Run As Administrator ci Spustit jako spravce
• Pokud pouzivate 64bitovy OS, zkontrolujte, zda-li je zaskrtnuty ctverecek u Pro 64 bitové OS, pokud ne, zaskrtnete jej
• Zaskrtnete okenko Pro vsechny uzivatele
• Zaskrtnete okenko Kontrola na havet "LOP"
• Zaskrtnete okenko Kontrola na havet "Purity"
• Stari souboru zmente z 30 dnu na 7 dnu
• Do spodniho okenka Vlastni skenovani/opravy vlozte skript nize

• Kód: Vybrat vše

  CREATERESTOREPOINT
  
  netsvcs
  drivers32
  savembr:0
  
  /md5start
  atapi.sys
  autochk.exe
  cdrom.sys
  explorer.exe
  hal.dll
  scecli.dll
  services.exe
  svchost.exe
  tcpip.sys
  userinit.exe
  winlogon.exe
  /md5stop
  
  %systemroot%*.* /U /s
  %SYSTEMDRIVE%\*.exe
  %ALLUSERSPROFILE%\Application Data\*.
  %ALLUSERSPROFILE%\Application Data\*.exe /s
  %APPDATA%\*.
  %APPDATA%\*.exe /s
  %systemroot%\*. /mp /s
  %systemroot%\system32\*.dll /lockedfiles
  %systemroot%\Tasks\*.job
  %systemroot%\system32\drivers\*.sys /lockedfiles
  %systemroot%\System32\config\*.sav
  %systemroot%\system32\*.dll /lockedfiles
  %systemroot%\system32\drivers\*.sys /3
  %systemroot%\system32\*.* /3
  %SYSTEMDRIVE%\*.exe
  
  HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s
  
  %PROGRAMFILES%\Mozilla Firefox\firefox.exe /md5
  %PROGRAMFILES%\Internet Explorer\iexplore.exe /md5
  %PROGRAMFILES%\Opera\opera.exe /md5
  %PROGRAMFILES%\Google\Chrome\Application\chrome.exe /md5
  
  %SystemDrive%\PhysicalMBR.bin /md5 
  
  *crack* /s
  *keygen* /s
  *loader* /s

• Kliknete na tlacitko Prohledat
• Po dokonceni skenu (cca 10 az 15 min) se objevi logy OTL.txt a Extras.txt, oba sem vlozte
• Pokud budou logy dlouhe (forum bude kricet o prekroceni maximalniho poctu znaku), tak je rozdelte do vice prispevku

[naletěla]

Teď jsem si všimla, že mi tam zůstalo zaškrtnuté Skrýt důvěryhodné. Je to chyba?