Adware Generic5.BGPZ a další problémy

[Thomas96]

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 12-09-2014
Ran by Tomáš at 2014-09-14 20:54:42 Run:1
Running from C:\Users\Tomáš\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Start
CloseProcesses:

HKLM-x32\...\Run: [PWRISOVM.EXE] => C:\Program Files\PowerISO\PWRISOVM.EXE [377368 2013-10-23] (Power Software Ltd)
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-27] (Microsoft Corporation)
BHO-x32: Advanced SystemCare Browser Protection -> {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} -> C:\Program Files (x86)\IObit\Surfing Protection\BrowerProtect\ASCPlugin_Protection.dll (IObit)

CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}sugkey={google:suggestAPIKeyParameter}

S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2282272 2014-08-19] (IObit)
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]

C:\Program Files (x86)\IObit
2014-09-14 20:46 - 2014-09-14 20:47 - 00007806 _____ () C:\Users\Tomáš\Desktop\FRST.txt
2014-09-14 20:44 - 2014-09-14 20:44 - 00112640 _____ (forum.viry.cz) C:\Users\Tomáš\Desktop\FRSTLauncher.exe
014-09-14 20:26 - 2014-09-14 20:26 - 00165888 _____ () C:\Users\Tomáš\Downloads\T-Cleaner.exe
2014-09-14 20:23 - 2014-09-14 20:23 - 00000000 ____D () C:\ProgramData\ProductData
2014-09-14 20:04 - 2014-09-14 20:17 - 00000112 _____ () C:\Windows\setupact.log
2014-09-14 20:04 - 2014-09-14 20:04 - 00000000 _____ () C:\Windows\setuperr.log
2014-09-14 20:03 - 2014-09-14 20:03 - 00000582 _____ () C:\Windows\PFRO.log
2014-09-14 10:35 - 2014-09-14 10:25 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-09-14 10:25 - 2014-09-14 10:36 - 00004643 _____ () C:\zoek-results.log
2014-09-14 10:25 - 2014-09-14 10:33 - 00000000 ____D () C:\zoek_backup
2014-09-14 10:24 - 2014-09-14 10:24 - 01290240 _____ () C:\Users\Tomáš\Desktop\zoek.exe
2014-09-13 20:00 - 2014-09-13 20:00 - 01373475 _____ () C:\Users\Tomáš\Downloads\adwcleaner_3.310.exe
2014-09-12 16:31 - 2014-09-12 16:31 - 00000000 ____D () C:\Windows\ERUNT
2014-09-12 16:19 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-09-12 16:18 - 2014-09-12 16:18 - 01370467 _____ () C:\Users\Tomáš\Downloads\adwcleaner_3.309.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Hosts:
EmptyTemp:
Reboot:
End
*****************

Processes closed successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\PWRISOVM.EXE => value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\GrooveMonitor => value deleted successfully.
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BA0C978D-D909-49B6-AFE2-8BDE245DC7E6}" => Key deleted successfully.
"HKCR\Wow6432Node\CLSID\{BA0C978D-D909-49B6-AFE2-8BDE245DC7E6}" => Key deleted successfully.
Chrome DefaultSuggestURL deleted successfully.
LiveUpdateSvc => Service deleted successfully.
EagleX64 => Service deleted successfully.
C:\Program Files (x86)\IObit => Moved successfully.
"C:\Users\Tomáš\Desktop\FRST.txt" => File/Directory not found.
C:\Users\Tomáš\Desktop\FRSTLauncher.exe => Moved successfully.
014-09-14 20:26 - 2014-09-14 20:26 - 00165888 _____ () C:\Users\Tomáš\Downloads\T-Cleaner.exe => Error: No automatic fix found for this entry.
C:\ProgramData\ProductData => Moved successfully.
C:\Windows\setupact.log => Moved successfully.
C:\Windows\setuperr.log => Moved successfully.
C:\Windows\PFRO.log => Moved successfully.
C:\Windows\zoek-delete.exe => Moved successfully.
C:\zoek-results.log => Moved successfully.
C:\zoek_backup => Moved successfully.
C:\Users\Tomáš\Desktop\zoek.exe => Moved successfully.
C:\Users\Tomáš\Downloads\adwcleaner_3.310.exe => Moved successfully.
C:\Windows\ERUNT => Moved successfully.
C:\Windows\SysWOW64\sqlite3.dll => Moved successfully.
C:\Users\Tomáš\Downloads\adwcleaner_3.309.exe => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => Moved successfully.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.
EmptyTemp: => Removed 380.3 MB temporary data.


The system needed a reboot.

==== End of Fixlog ====

[vyosek]

Tak jeste uklidime

T-Cleaner http://vyosek.tym.cz/pro_usery/T-Cleaner.exe

• Stahnete a spustte
• Pro potvrzeni volby mackejte A, Enter
• Po pouziti utilitu smazte
• Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)

OTC http://oldtimer.geekstogo.com/OTC.exe

• Stahnete a spustte
• Kliknete na CleanUp a potvrdte YES
• Program uklidi a restartuje PC

TFC http://oldtimer.geekstogo.com/TFC.exe

• Stahnete a spustte
• Kliknete na Start a potvrdte OK
• Program uklidi a restartuje pc
• Po pouziti utilitu smazte

Stahnete Ccleaner http://forum.viry.cz/viewtopic.php?t=7478
Panel čistič

• Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner

Panel registry

• dejte Hledej problémy
• nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
• postup opakujte dokud nebude bez problemu - vetsinou cca 3x

Panel nástroje

• Zde muzete odinstalovat nepotrebne programy

CCleaner doporucuji pouzivat cca jednou za tyden

A pokud nejsou problemy ci dotazy, je to z me strany vse

[Thomas96]

Na ploše mi zůstal soubor s názvem LM rozklikl jsem ho a on zmizel. Zřejmě to byl soubor od nějaké utility? Jinak to zatím vypadá že je vše v pořádku.

[vyosek]

Soubor je pozustatek jedne z utilit...

Pak je to tedy z me strany vse

[Thomas96]

Tak tímto vám můžu už jen poděkovat. Děkuji mockrát.

[vyosek]

Nemate zac, rad jsem pomohl Zase nekdy

A na zaklade Pravidla o zamykani temat