VIRY.CZ

Pomáháme v boji s počítačovou havěti!
https://forum.viry.cz:443/

Prosím o kontrolu

https://forum.viry.cz:443/viewtopic.php?t=138643

Stránka 2 z 2

Re: Prosím o kontrolu

Napsal: 20 čer 2014 04:10
od Márty84
:!: Jestli bude Avast rvat, ze to chce otevrit v sandboxu, nedovolte to! Vyberte moznost Otevrit normalne
:arrow: Znovu spustte OTL jako spravce
Do spodniho okna vlozte nasledujici text (vcetne te dvojtecky pred slovem commands)

Kód: Vybrat vše

:commands
[EMPTYTEMP]
[EMPTYFLASH]
[Purity]
[CreateRestorePoint]

:services
gupdate
gupdatem

:files
%windir%\system32\*.tmp.dll /s
%windir%\system32\SET*.tmp /s
%windir%\*.tmp
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

:otl
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ASJB
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
O3:64bit: - HKLM\..\Toolbar: (no name) - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No CLSID value found.
O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
[2014/06/02 11:15:52 | 000,000,000 | ---D | C] -- C:\Users\Jan\AppData\Roaming\AVG
[2014/06/02 11:15:52 | 000,000,000 | ---D | C] -- C:\Users\Jan\AppData\Local\AVG
[2014/06/02 11:13:49 | 000,000,000 | ---D | C] -- C:\ProgramData\AVG
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\04cf6436176a87115c51a3e49c8dd3b9\*.tmp files -> C:\Windows\SoftwareDistribution\Download\04cf6436176a87115c51a3e49c8dd3b9\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\0ecb249079adb6887bef2097cd7810e5\*.tmp files -> C:\Windows\SoftwareDistribution\Download\0ecb249079adb6887bef2097cd7810e5\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\14c5b2a79000d190f0a815a82981a23a\*.tmp files -> C:\Windows\SoftwareDistribution\Download\14c5b2a79000d190f0a815a82981a23a\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\1884f6052f748e9d38f3630739fd2a9d\*.tmp files -> C:\Windows\SoftwareDistribution\Download\1884f6052f748e9d38f3630739fd2a9d\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\27c13435d2e362909c02aaad5c05abcc\*.tmp files -> C:\Windows\SoftwareDistribution\Download\27c13435d2e362909c02aaad5c05abcc\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\31805f762df23badeb51a97a4e9ee68d\*.tmp files -> C:\Windows\SoftwareDistribution\Download\31805f762df23badeb51a97a4e9ee68d\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\44890843db0482382ad0b250e3b308c9\*.tmp files -> C:\Windows\SoftwareDistribution\Download\44890843db0482382ad0b250e3b308c9\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\5873481ff10e11c3d32e4c26d7b29433\*.tmp files -> C:\Windows\SoftwareDistribution\Download\5873481ff10e11c3d32e4c26d7b29433\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\617e03a739168632959cd88966f4093f\*.tmp files -> C:\Windows\SoftwareDistribution\Download\617e03a739168632959cd88966f4093f\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\953026c9afb3db1a93a637e2b17410b6\*.tmp files -> C:\Windows\SoftwareDistribution\Download\953026c9afb3db1a93a637e2b17410b6\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\96df025921538ca8fdc2e65a02f3f732\*.tmp files -> C:\Windows\SoftwareDistribution\Download\96df025921538ca8fdc2e65a02f3f732\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\aabf4faa69f07ebde9e8599a28c5fc35\*.tmp files -> C:\Windows\SoftwareDistribution\Download\aabf4faa69f07ebde9e8599a28c5fc35\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\bc7aff39310d27519a743ea9f72777b9\*.tmp files -> C:\Windows\SoftwareDistribution\Download\bc7aff39310d27519a743ea9f72777b9\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\d849c0e600daeb2387538decd664b8e5\*.tmp files -> C:\Windows\SoftwareDistribution\Download\d849c0e600daeb2387538decd664b8e5\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\de2e9c766ed084aebfad449671173b10\*.tmp files -> C:\Windows\SoftwareDistribution\Download\de2e9c766ed084aebfad449671173b10\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\df08273dc6804b1a82b4a2a44b923067\*.tmp files -> C:\Windows\SoftwareDistribution\Download\df08273dc6804b1a82b4a2a44b923067\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\e1e7fbced93d30a3a8d6ee0e7c8bef8b\*.tmp files -> C:\Windows\SoftwareDistribution\Download\e1e7fbced93d30a3a8d6ee0e7c8bef8b\*.tmp -> ]

:reg
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F}"=-
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"GoogleDriveSync"=-
"BitTorrent"=-
"KiesPreload"=-
"DAEMON Tools Lite"=-
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"RemoteControl10"=-
"Adobe ARM"=-
"KiesTrayAgent"=-
Kliknete na Opravit a nechte program pracovat. Pri otazce na restart souhlaste.
Po restartu se objevi novy log, ten sem dejte.

Re: Prosím o kontrolu

Napsal: 20 čer 2014 18:40
od polmnji
All processes killed
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Jan
->Temp folder emptied: 20189394 bytes
->Temporary Internet Files folder emptied: 3715177 bytes
->Google Chrome cache emptied: 408965598 bytes
->Flash cache emptied: 422 bytes

User: Lucinka
->Temp folder emptied: 870222 bytes
->Temporary Internet Files folder emptied: 128 bytes
->Google Chrome cache emptied: 15108732 bytes

User: Public

User: UpdatusUser
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 364032 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 32381 bytes
RecycleBin emptied: 3722071 bytes

Total Files Cleaned = 432,00 mb


[EMPTYFLASH]

User: All Users

User: Default

User: Default User

User: Jan
->Flash cache emptied: 0 bytes

User: Lucinka

User: Public

User: UpdatusUser

Total Flash Files Cleaned = 0,00 mb

Restore point Set: OTL Restore Point
========== SERVICES/DRIVERS ==========
Service gupdate stopped successfully!
Service gupdate deleted successfully!
Service gupdatem stopped successfully!
Service gupdatem deleted successfully!
========== FILES ==========
File/Folder C:\Windows\system32\*.tmp.dll not found.
File/Folder C:\Windows\system32\SET*.tmp not found.
File/Folder C:\Windows\*.tmp not found.
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job moved successfully.
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job moved successfully.
========== OTL ==========
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
64bit-Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F}\ not found.
64bit-Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\Locked deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\Locked deleted successfully.
64bit-Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\WebCheck deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\ not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\WebCheck deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\ not found.
C:\Users\Jan\AppData\Roaming\AVG\AWL2014\Dashboard folder moved successfully.
C:\Users\Jan\AppData\Roaming\AVG\AWL2014\Backups folder moved successfully.
C:\Users\Jan\AppData\Roaming\AVG\AWL2014 folder moved successfully.
C:\Users\Jan\AppData\Roaming\AVG folder moved successfully.
C:\Users\Jan\AppData\Local\AVG\AWL2014\Log folder moved successfully.
C:\Users\Jan\AppData\Local\AVG\AWL2014\CrashDumps folder moved successfully.
C:\Users\Jan\AppData\Local\AVG\AWL2014 folder moved successfully.
C:\Users\Jan\AppData\Local\AVG folder moved successfully.
C:\ProgramData\AVG\AWL2014 folder moved successfully.
C:\ProgramData\AVG\AWL\Program Statistics folder moved successfully.
C:\ProgramData\AVG\AWL folder moved successfully.
C:\ProgramData\AVG folder moved successfully.
C:\Windows\SoftwareDistribution\Download\04cf6436176a87115c51a3e49c8dd3b9\BIT6051.tmp deleted successfully.
C:\Windows\SoftwareDistribution\Download\0ecb249079adb6887bef2097cd7810e5\BIT5ACF.tmp deleted successfully.
C:\Windows\SoftwareDistribution\Download\14c5b2a79000d190f0a815a82981a23a\BIT6246.tmp deleted successfully.
C:\Windows\SoftwareDistribution\Download\1884f6052f748e9d38f3630739fd2a9d\BIT6517.tmp deleted successfully.
C:\Windows\SoftwareDistribution\Download\27c13435d2e362909c02aaad5c05abcc\BIT63FC.tmp deleted successfully.
C:\Windows\SoftwareDistribution\Download\31805f762df23badeb51a97a4e9ee68d\BIT69AD.tmp deleted successfully.
C:\Windows\SoftwareDistribution\Download\44890843db0482382ad0b250e3b308c9\BIT5F17.tmp deleted successfully.
C:\Windows\SoftwareDistribution\Download\5873481ff10e11c3d32e4c26d7b29433\BIT56D4.tmp deleted successfully.
C:\Windows\SoftwareDistribution\Download\617e03a739168632959cd88966f4093f\BIT5986.tmp deleted successfully.
C:\Windows\SoftwareDistribution\Download\953026c9afb3db1a93a637e2b17410b6\BIT57FE.tmp deleted successfully.
C:\Windows\SoftwareDistribution\Download\96df025921538ca8fdc2e65a02f3f732\BIT55F8.tmp deleted successfully.
C:\Windows\SoftwareDistribution\Download\aabf4faa69f07ebde9e8599a28c5fc35\BIT53EA.tmp deleted successfully.
C:\Windows\SoftwareDistribution\Download\bc7aff39310d27519a743ea9f72777b9\BIT6650.tmp deleted successfully.
C:\Windows\SoftwareDistribution\Download\d849c0e600daeb2387538decd664b8e5\BIT5C66.tmp deleted successfully.
C:\Windows\SoftwareDistribution\Download\de2e9c766ed084aebfad449671173b10\BIT5CB5.tmp deleted successfully.
C:\Windows\SoftwareDistribution\Download\e1e7fbced93d30a3a8d6ee0e7c8bef8b\BIT5A0B.tmp deleted successfully.
========== REGISTRY ==========
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F}\ not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\GoogleDriveSync deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\BitTorrent deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\KiesPreload deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\DAEMON Tools Lite deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run\\RemoteControl10 deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run\\KiesTrayAgent deleted successfully.

OTL by OldTimer - Version 3.2.69.0 log created on 06202014_193513

Files\Folders moved on Reboot...
C:\Users\Jan\AppData\Local\Microsoft\Windows\INetCache\counters.dat moved successfully.
File move failed. C:\Windows\temp\_avast_\AvastLock.txt scheduled to be moved on reboot.

PendingFileRenameOperations files...

Registry entries deleted on Reboot...

Re: Prosím o kontrolu

Napsal: 20 čer 2014 18:42
od Márty84
:!: Vsechny tyto programy - vcetne pripadne instalace - spoustejte jako spravce (kliknete na ne pravym mysidlem a zvolte - Spustit jako spravce)

:arrow:
vyosek píše: :arrow: T-Cleaner http://tharifas.sweb.cz/T-Cleaner.exe
  • Stahnete a spustte
  • Pro potvrzeni volby mackejte A, Enter
  • Po pouziti utilitu smazte
  • Antiviry mohou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)
:arrow: Stahnete OTC http://oldtimer.geekstogo.com/OTC.exe , ulozte a spustte.
Kliknete na napis CleanUp a pote OK - Po uklidu dojde k restartu pc.

:arrow: Stahnete TFC http://oldtimer.geekstogo.com/TFC.exe , ulozte a spustte
Kliknete na START a pote OK - Po uklidu dojde k restartu pc.
Po pouziti muzete programek smazat

:arrow: Stahnete Ccleaner http://www.piriform.com/ccleaner/download/slim a spustte.
Pri instalaci pozor na toolbar (ci jine doplnky), jestli vam nabidne jeho instalaci, tak zruste zatrzitko.
Po spusteni se ocitnete ve funkci Cistic. Vlevo je spousta zatrzitek. Pozor dejte hlavne na kos, pokud nechate zatrzene, vzdy ho vysype.
Dale, podle toho jak je nastaven, smaze vsechna hesla ulozena na netu!!! Takze jestli mate nastavene, at si pocitac hesla pamatuje (coz neni pro bezpecnost dobre), budete je muset pak napsat znova rucne (napr mail, facebook, ruzna fora atd.)
Kliknete na Analyzovat a az dokonci analyzu, kliknete na Spustit Cleaner.
Potom kliknete vlevo na funkci Registry
Kliknete na Hledej problemy, kdyz najde, kliknete na Opravit problemy. Nabidne Vam zalohu, tu udelejte a ulozte ji tak, at ji v pripade potreby najdete.
Funkce Nastroje umoznuje odinstalovani programu. Je dukladnejsi nez samotny windows!
(Pokud je v pc vice uzivatelskych uctu, pouzijte program i v nich)

:arrow: Defragmentujte disk(y)
Stahnete program Defraggler http://www.stahuj.centrum.cz/utility_a_ ... efraggler/
Pri instalaci opet pozor na toolbar
Po nainstalovani program spustte a kliknete na Analyzovat, po analyze kliknete na Defragmentovat a programek odvede svou praci.




:arrow: Pak napiste, jak je na tom pc.

Re: Prosím o kontrolu

Napsal: 20 čer 2014 21:24
od polmnji
Děkuji za pomoc .Vypadá to o mnoho lépe

Re: Prosím o kontrolu

Napsal: 21 čer 2014 08:14
od Márty84
A je to uz v norme a muzem tema uzavrit? Nebo je to sice lepsi, ale k normalu to ma jeste daleko?

A neni zac! :)

Re: Prosím o kontrolu

Napsal: 21 čer 2014 17:51
od polmnji
Jen to v normě .Děkuji .Můžeme :closed:

Re: Prosím o kontrolu

Napsal: 21 čer 2014 18:22
od Márty84
Tak jo ;-)

Jeste jednou neni zac :)

Mejte se a treba zase nekdy :bye:

:closed:
Všechny časy jsou v UTC+01:00
Stránka 2 z 2

Založeno na phpBB® Forum Software © phpBB Limited

Český překlad – phpBB.cz