Stahnete AdwCleaner https://toolslib.net/downloads/finish/1/ a ulozte ho na plochu.Ukoncete vsechny programy, jinak to AdwCleaner udela za vas.
Kliknete na nej pravym mysidlem a levym na Spustit jako spravce.
Kliknete na Scan a pockejte, az kontrola dobehne.
Pak kliknete na Cleaning
Program zacne pracovat (muze dojit k restartu pc) a vyplivne log (pripadne bude zde C:\AdwCleaner\AdwCleaner[C?].txt ). Ten mi sem zkopirujte.
Otevrete si poznamkovy blok a zkopirujte do nej tento skript
Kód: Vybrat vše
Start
CloseProcesses:
CreateRestorePoint:
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [49208 2011-10-28] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [334896 2015-06-08] (Oracle Corporation)
HKU\S-1-5-21-1793778196-2422288631-436692435-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8358680 2015-06-01] (Piriform Ltd)
HKU\S-1-5-21-1793778196-2422288631-436692435-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [53735968 2015-08-07] (Skype Technologies S.A.)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSE1
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSE1
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKU\S-1-5-21-1793778196-2422288631-436692435-1001 -> {E65BE81D-7014-49A3-8CA3-F1A019F31B10} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
Toolbar: HKU\S-1-5-21-1793778196-2422288631-436692435-1001 -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
R2 wntrauwxatiowneoadup; C:\Users\Jobran\AppData\Local\Konkstrip.exe [53760 2015-08-18] () [File not signed]
S1 koxprmbx; \??\C:\WINDOWS\system32\drivers\koxprmbx.sys [X]
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-07-07 82128]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-24 144200]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-07-09 327296]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-24 144200]
C:\Users\Jobran\AppData\Local\Konkstrip.exe
C:\WINDOWS\system32\drivers\koxprmbx.sys
C:\Users\Jobran\AppData\Local\Temp\beeadajhed.exe
C:\Users\Jobran\AppData\Local\Temp\BFC7D711863219B6B8302E8FC90132FC.exe
C:\Users\Jobran\AppData\Local\Temp\ED7D47D63FAF5544C30F39802A90BCEB.exe
C:\Users\Jobran\AppData\Local\Temp\Quarantine.exe
c:\programdata\{792e2b74-ca2a-2e07-792e-e2b74ca2add3}\1668959511713299299b.exe
2015-08-24 12:36 - 2015-08-24 12:36 - 04436968 _____ (TeamViewer) C:\Users\Jobran\Desktop\a.exe
2015-08-24 12:13 - 2015-08-24 12:13 - 03720539 _____ (Bycatch) C:\Program Files\Common Files\w3io3424.exe
2015-08-24 10:17 - 2015-08-24 12:30 - 00000000 ____D C:\Program Files\Common Files\bgeb2xav
2015-08-24 10:17 - 2015-08-24 10:17 - 00003156 _____ C:\WINDOWS\System32\Tasks\1yhymgkb
2015-08-22 20:40 - 2015-08-22 20:40 - 03702878 _____ (E-Tech) C:\Program Files\Common Files\vbm2dojj.exe
2015-08-22 20:22 - 2015-08-24 10:05 - 00000000 ____D C:\Program Files\Common Files\0dmrfbna
2015-08-22 20:22 - 2015-08-22 20:22 - 00003156 _____ C:\WINDOWS\System32\Tasks\glxzbqcy
2015-08-18 22:15 - 2015-08-24 10:05 - 00000000 ____D C:\Program Files (x86)\globalUpdate
2015-08-18 22:15 - 2015-08-18 22:15 - 00000000 ____D C:\Users\Jobran\AppData\Local\globalUpdate
Task: C:\WINDOWS\Tasks\DragonWire.job => c:\programdata\{792e2b74-ca2a-2e07-792e-e2b74ca2add3}\1668959511713299299b.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: {5C90088D-0AAA-4AC1-B6E7-4CAE8E63CCD2} - \snp -> No File <==== ATTENTION
Task: {F179049B-30CD-4212-AF46-C933200143EF} - System32\Tasks\DragonWire => c:\programdata\{792e2b74-ca2a-2e07-792e-e2b74ca2add3}\1668959511713299299b.exe <==== ATTENTION
Hosts:
EmptyTemp:
Reboot:
EndKliknete na napis Ulozit jako...
Napiste spravne ten cerveny nazev fixlist a ulozte na plochu.
Vypnete antivir i dalsi pripadne zabezpeceni.
Spustte FRST jako spravce, kliknete na napis Fix a program vykona prikazy.
Po restartu pc by se mel objevit novy log - s nazvem fixlog, ten mi sem zase zkopirujte.
***** Velikost "Plochy" *****
Velikost slozky "C:\Users\Jobran\Desktop" je 6614 MB.
Velikost plochy by nemela presahovat 200 - 300 MB! Brzdi to chod pc. Cili ji trosku uklidte a na plochu dejte jen zastupce. Jen pozor na obcasnou chybu, ze uzivatele maji na plose slozku, v ni dalsi a v ni dalsi a do te to schovaji. To je sice hezke, ale plochu to nezmensi, jen je to v jinem supliku 
Vsechny tyto programy - vcetne pripadne instalace - spoustejte jako spravce (kliknete na ne pravym mysidlem a zvolte - Spustit jako spravce) 
Přispějete na provoz fóra?