Prosim o preventivku

[Conder]

Ahoj

V PC su nejake zbytky po IObit programoch (napr. Driver Booster, Advanced SystemCare, Uninstaller, atd) - neodporucame ich vobec pouzivat, su to cinske smejdy, ktore mozu poskodit system.

Stiahni AdwCleaner: https://toolslib.net/downloads/finish/1/

• Uloz na plochu a ukonci vsetky programy
• Spusti AdwCleaner ako spravca
• Odsuhlas licencne podmienky
• Klikni na Skenovat nyni (Scan now) a pockaj na dokoncenie
• Nechaj zaskrtnute vsetky nalezy
• Klikni na Cisteni a opravy (Clean and Repair) a potvrd restart PC teraz
• Po restartovani PC sa otvori AdwCleaner, klikni na Zobrazit soubor protokolu
• Otvori sa log, jeho obsah sem skopiruj

[Conder]

Otvor poznamkovy blok (Win+R -> notepad -> enter)

• Skopiruj nasledujuci text a vloz ho do poznamkoveho bloku:

  Kód: Vybrat vše

  Start
  CloseProcesses:
  CreateRestorePoint:
  
  PowerShell: Get-ChildItem -Path "$ENV:USERPROFILE\Desktop" -Recurse -Force | Measure-Object -Property Length -Sum
  File: C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
  File: C:\Program Files\AMD\{920DEC42-4CA5-4d1d-9487-67BE645CDDFC}\amdacpusrsvc.exe
  File: C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe
  File: C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL
  File: C:\Windows\System32\HPZinw12.dll
  File: C:\Windows\System32\HPZipm12.dll
  
  HKLM-x32\...\Run: [] => [X]
  HKU\S-1-5-21-2184128150-3763628530-3428707980-1002\...\Policies\Explorer: [] 
  CMD: type "C:\Users\Honza\Desktop\wifi.bat"
  HKU\S-1-5-21-2184128150-3763628530-3428707980-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo13.msn.com/?pc=LCJB
  HKU\S-1-5-21-2184128150-3763628530-3428707980-1002\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.lenovo.com
  SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
  SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
  SearchScopes: HKU\S-1-5-21-2184128150-3763628530-3428707980-1002 -> DefaultScope {0F2B12EB-5226-4078-874C-AD603E3D4B25} URL = 
  SearchScopes: HKU\S-1-5-21-2184128150-3763628530-3428707980-1002 -> {0F2B12EB-5226-4078-874C-AD603E3D4B25} URL = 
  FF NewTab: Mozilla\Firefox\Profiles\9a5gdns3.default -> hxxp://securedsearch.lavasoft.com/?pr=vmn&id=webcompa&ent=hp_WCYID10444__181017
  FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [No File]
  FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [No File]
  CHR StartupUrls: Default -> "hxxp://fb.com/"
  CHR DefaultSearchURL: Default -> hxxps://defaultsearch.co/?q={searchTerms}
  CHR DefaultSearchKeyword: Default -> Adaware Secure
  CHR HKLM-x32\...\Chrome\Extension: [nladljmabboanhihfkjacnnkgjhnokhj] - hxxps://clients2.google.com/service/update2/crx
  S2 KMSServerService; C:\windows\KMSServerService\KMS Server Service.exe [236032 2017-11-14] (My Digital Life Forums) [File not signed]
  R2 Service KMSELDI; C:\Program Files\KMSpico\Service_KMS.exe [743616 2015-12-02] (@ByELDI) [File not signed]
  C:\windows\KMSServerService
  C:\Program Files\KMSpico
  S2 APXACC; \SystemRoot\system32\DRIVERS\appexDrv.sys [X]
  2018-11-10 15:52 - 2018-02-14 14:37 - 000000000 ____D C:\ProgramData\IObit
  2018-11-10 15:52 - 2018-02-14 14:36 - 000000000 ____D C:\Users\Honza\AppData\Roaming\IObit
  2018-11-10 15:52 - 2018-02-14 14:36 - 000000000 ____D C:\Users\Honza\AppData\LocalLow\IObit
  2018-11-10 15:52 - 2018-02-14 14:36 - 000000000 ____D C:\Program Files (x86)\IObit
  Task: {12E9410C-9AD6-44E6-BFA3-4312969AFCAC} - System32\Tasks\Driver Booster SkipUAC (Honza) => C:\Program Files (x86)\IObit\Driver Booster\5.2.0\DriverBooster.exe
  Task: {DE010163-A0B0-4EC3-92CA-23353A0523AB} - System32\Tasks\AutoPico Daily Restart => C:\Program Files\KMSpico\AutoPico.exe [2015-12-02] (@ByELDI)
  AlternateDataStreams: C:\Users\Honza:Heroes & Generals [38]
  AlternateDataStreams: C:\Users\Public\AppData:CSM [468]
  DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{8B29D47F-92E2-4C20-9EE0-F710991F5D7C}_is1
  
  C:\Program Files\IObit
  C:\Program Files (x86)\IObit
  C:\Program Files\Common Files\IObit
  C:\ProgramData\IObit
  C:\ProgramData\ProductData
  C:\Users\Honza\AppData\Roaming\IObit
  C:\Users\Honza\AppData\LocalLow\IObit
  C:\Users\Honza\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\*Driver Booster*
  C:\Users\Honza\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\*Advanced SystemCare*
  C:\Users\Default\AppData\Roaming\IObit
  C:\Users\Default\AppData\LocalLow\IObit
  C:\Users\Public\Desktop\*Driver Booster*
  C:\Users\Public\Desktop\*Advanced SystemCare*
  C:\Windows\IObit
  C:\Windows\Tasks\ImCleanDisabled
  C:\ProgramData\{13CFD044-61E4-4EAC-AD61-02536D961216}
  C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Booster 5
  C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare
  
  Hosts:
  EmptyTemp:
  End

• Uloz na plochu s nazvom fixlist.txt
• Spusti znovu FRST a klikni na Fix
• Po dokonceni si FRST vyziada restart PC, potvrd kliknutim na OK
• Po restartovani PC bude na ploche subor Fixlog.txt, jeho obsah sem skopiruj

[Conder]

To zmazanie Chrome addonov je zvlastne. Zmazalo to uplne vsetky addony?

Ako to vyzera s PC? Nastala nejaka zmena alebo su este nejake problemy?

[Conder]

Spusti kontrolu integrity systemovych suborov:

• Otvor Start, napis "cmd" (bez uvodzoviek), klikni pravym tlacitkom mysi na Prikazovy riadok a klikni na Spustit ako spravca
• Skopiruj a spusti prikaz:

  Kód: Vybrat vše

  DISM.exe /Online /Cleanup-image /Restorehealth

• Po dokonceni skopiruj a spusti druhy prikaz:

  Kód: Vybrat vše

  sfc /scannow

• Po dokonceni obidvoch prikazov skopiruj a spusti tento prikaz:

  Kód: Vybrat vše

  findstr /c:"[SR]" %windir%\logs\cbs\cbs.log >> "%userprofile%\desktop\sfcdetails.txt" && copy %windir%\logs\dism\dism.log %userprofile%\desktop\dism.txt

• Na ploche sa vytvoria subory sfcdetails.txt a dism.txt, tieto subory zabal ho do archivu RAR alebo ZIP a posli ako prilohu k dalsiemu prispevku
• Restartuj PC a napis ako sa chova PC