kontrola pro jistotu

[Márty84]

Cili vypada to, ze problem je primo v IE. Bud je v nem neco zavrtane, nebo si jen s tou strankou nerozumi. Mate k dispozici jiny pc? Jestli to s IE blbne i na nem, nebo jen na tomto stroji

[anilvaP]

Na jinem pc to s IE nedela....

[Márty84]

Zrejme je tedy neco zalezleho v IE. Zkusime ho dat do vychoziho stavu.


Postupujte podle navodu kolegy

Stahnete Junkware Removal Tool http://thisisudax.org/downloads/JRT.exe

• Ulozte nejlepe na plochu
• Po spusteni se zobrazi licencni podminky, stisknete libovolnou klavesu
• Probehne vytvoreni zalohy a nasledne prohledavani
• Probehne skenovani a pak se objevi log, pripadne bude ulozen v c:\JRT jako JRT.txt, ten sem vlozte

Postupujte podle navodu kolegy

Stahnete Zoek.exe http://hijackthis.nl/smeenk/ a ulozte jej na plochu

• Pokud pouzivate Win Vista ci W7, kliknete na Zoek pravym a dejte Run As Administrator ci Spustit jako spravce
• Do okna vlozte skript nize

• Kód: Vybrat vše

  autoclean;
  autoclean;
  resethosts;
  emptyclsid;
  IEdefaults;
  FFdefaults;
  CHRdefaults;
  emptyIEcache;
  emptyFFcache;
  emptyCHRcache;
  emptyalltemp;
  emptyflash;
  emptyjava;
  emptyrecycle.bin;

• Nasledne kliknete na Run Script
• PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem

[anilvaP]

log z JRT

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.4.3 (03.01.2015:1)
OS: Windows 8.1 x64
Ran by Paja on so 07. 03. 2015 at 22:32:38,73
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files

Successfully deleted: [File] "C:\Windows\wininit.ini"



~~~ Folders



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on so 07. 03. 2015 at 22:37:07,78
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~



log z zoek

Zoek.exe v5.0.0.0 Updated 07-March-2015
Tool run by Paja on so 07. 03. 2015 at 22:39:13,79.
Microsoft Windows 8.1 6.3.9600 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Paja\Desktop\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

7. 3. 2015 22:40:57 Zoek.exe System Restore Point Created Succesfully.

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

127.0.0.1 localhost

==== Empty Folders Check ======================

C:\PROGRA~3\Shared Space deleted successfully
C:\Users\Paja\AppData\Local\VirtualStore deleted successfully

==== Deleting CLSID Registry Keys ======================


==== Deleting CLSID Registry Values ======================


==== Deleting Services ======================


==== FireFox Fix ======================

Deleted from C:\Users\Paja\AppData\Roaming\Mozilla\Firefox\Profiles\bwx14pyh.default\prefs.js:

Added to C:\Users\Paja\AppData\Roaming\Mozilla\Firefox\Profiles\bwx14pyh.default\prefs.js:
user_pref("browser.startup.homepage", "about:home");
user_pref("browser.newtab.url", "about:newtab");

==== Deleting Files \ Folders ======================

C:\Users\Public\Pokki deleted
C:\Users\Default\AppData\Local\Pokki deleted
C:\Users\Paja\AppData\Local\Pokki deleted
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Search.lnk deleted
C:\Users\Paja\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk deleted
C:\windows\SysNative\Tasks\avast! Emergency Update deleted
C:\windows\SysNative\{86F549EB-A66B-4D6C-958D-CDDD66410751}.bat deleted
C:\windows\SysNative\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat deleted
"C:\Windows\Installer\18674.msi" deleted
"C:\Windows\Installer\2d746.msi" deleted
"C:\PROGRA~2\Windows Multimedia Platform" deleted

==== Firefox Start and Search pages ======================

ProfilePath: C:\Users\Paja\AppData\Roaming\Mozilla\Firefox\Profiles\bwx14pyh.default
user_pref("browser.startup.homepage", "about:home");
user_pref("browser.newtab.url", "about:newtab");

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]
"wrc@avast.com"="C:\Program Files\AVAST Software\Avast\WebRep\FF" [12. 02. 2015 09:28]

==== Firefox Extensions ======================

AppDir: C:\Program Files (x86)\Mozilla Firefox
- Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

==== Firefox Plugins ======================


==== Chromium Look ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
eofcbnmajmjmplflapaojjnihcjkigck - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx[20. 01. 2015 23:58]
gomekmidlodglbbmalcneegieacbdmki - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx[20. 01. 2015 23:58]

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.seznam.cz/"

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.seznam.cz/"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
{012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTer ... ORM=IE8SRC"
{0DBCC2E4-1565-4CB8-A67B-3537087BC4BD} Unknown Url="Not_Found"

==== Reset Google Chrome ======================

Nothing found to reset

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-1737455265-3628415038-3014182368-1001\Software\Microsoft\Internet Explorer\SearchScopes\{0DBCC2E4-1565-4CB8-A67B-3537087BC4BD} deleted successfully

==== Deleting CLSID Registry Values ======================


==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\203E62EEA6789D84098513925E9B9999 deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\02F6486B12843E11F869800002C0A966 deleted successfully
HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{EE26E302-876A-48D9-9058-3129E5B99999} deleted successfully
HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{B6846F20-4821-11E3-8F96-0800200C9A66} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\203E62EEA6789D84098513925E9B9999 deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\02F6486B12843E11F869800002C0A966 deleted successfully

==== Empty IE Cache ======================

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Paja\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Users\Paja\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5 emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Users\Paja\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully
C:\Users\Paja\AppData\Local\Microsoft\Windows\INetCache\Low\IE emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully

==== Empty FireFox Cache ======================

C:\Users\Paja\AppData\Local\Mozilla\Firefox\Profiles\bwx14pyh.default\cache2 emptied successfully

==== Empty Chrome Cache ======================

No Chrome User Data found

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== C:\zoek_backup content ======================

C:\zoek_backup (files=9217 folders=196 527422806 bytes)

==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\Paja\AppData\Local\Temp will be emptied at reboot
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied
C:\Users\Paja\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== EOF on so 07. 03. 2015 at 23:10:30,81 ======================

[anilvaP]

Ještě bych pak měla dotaz, když avast po skenování hlásí "vaše bezdrátová síť má slabé šifrování." - heslo k wifi je nastavené, jak bylo od poskytovatele nebo koho...a nevím, proč by mělo být slabé... A dále hlásí "Váš router je přístupný z internetu. Hackeři mohou získat přístup k vašemu routeru, změnit nastavení sítě, včetně možnosti vypnout připojení k internetu a krádeže vašich osobních dat." a jako řešení je tam: zakázat přístup k vašemu routeru z internetu. a přejít na nastavení routeru. Jelikož jsem laik, tak se raději ptám...zatím díky!

[Márty84]

Nastala s IE nejaka zmena?


Mi to hlasi Avast taky Ale menit nic nebudu. Samozrejme pokud chcete, muzete si s nastavenim pohrat. Vetsinou byva dano defaultni heslo k nastaveni routeru treba Admin a uzivatelske jmeno taky Admin, nebo proste neco jednoducheho. Kazdy si po prvnim spusteni pak muze nastavit co chce.
No a co se tyka hesla k wifi, opet si muzete dat jake chcete. Nevim, jake mate a taky nevim, co by Avast pokladal za dostatecne. Takze v tomhle je tezke poradit

[anilvaP]

Co se tyka te stranky csfd.cz otevirane s IE, tak se nic nezmenilo, zkousela jsem to nekolikrat a vetsinou to same...
Pokud to není nejaky problem, tak mi nevadi, spoustet to pres jiny prohlizec...

S nastavenim toho routeru atp.si radeji hrat nebudu...abych se pak vubec pripojila u toho ani nevim, jake je heslo...k wifi je to nejaka smes cislic, pismen a znaku...Tak pokud to hlasi i Vam, tak to jste me uklidnil

[Márty84]

Zkuste v IE zakazat vsechny doplnky a rozsireni. Zadnou skodnou tam nevidim, ale muze to delat i neco legitimniho

To jsem rad, ze jsem vas uklidnil Jak jsem psal, nevim, co by se mu libilo a resit to nebudu. Avast se s tim proste bude muset smirit

Pouzijte znovu DelFix, uklidi po pouzitych programech.

No a pokud tedy vse bezi jak ma, myslim, ze nejsou potreba dalsi skeny a muzem tema uzavrit. Souhlasite?

[anilvaP]

Ok a děkuji moc za kontrolu!!!

[Márty84]

Nemate vubec zac!

Kdyby neco, staci se ozvat

Mejte se krasne a treba zase nekdy