VIRY.CZ

===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================



==================== MBR and Partition Table ==================


==================== Scheduled Tasks (whitelisted) ==================

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Alternate Data Streams (whitelisted) ==================


==================== Security Center ==================

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Users\Pavel\Desktop" je 38 MB.


***** Startup Programs *****


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR"=dword:00000000


==================== End Of Log ==============================

Otevřte poznámkový blok a zkopírujte do něj:

Start
HKLM-x32\...\Run: [] => [X]
HKU\S-1-5-21-1558606403-461566547-1020627287-1001\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-1558606403-461566547-1020627287-1001\...\MountPoints2: {711b7089-7870-11e4-be97-88532e4ae78b} - "H:\SISetup.exe"
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
HKU\S-1-5-21-1558606403-461566547-1020627287-1001\Software\Microsoft\Internet Explorer\Main,Start Page = https://mysearch.avg.com?cid={FA9B6D71- ... 2014-08-29 23:19:35&v=18.1.9.799&pid=safeguard&sg=&sap=hp
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
C:\Program Files (x86)\Skype\Toolbars
CHR dev: Chrome dev build detected! <======= ATTENTION
CHR Extension: (BuyNsuave) - C:\ProgramData\fcjfmnkgjbkbmfmjacfkhbbelcmaajil\ [2014-02-23]
CHR Extension: (BuyNNsave) - C:\ProgramData\jkbfddbojihoknlloleiebilkghohoen\ [2014-02-23]
CHR Extension: (BuyNsAve) - C:\ProgramData\lggmhkkapicelfmafnnjkophcbpopbcb\ [2014-02-23]
C:\ProgramData\jkbfddbojihoknlloleiebilkghohoen
C:\ProgramData\fcjfmnkgjbkbmfmjacfkhbbelcmaajil
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
C:\Users\Pavel\AppData\Local\Temp
End

Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

Takže vyskakovací reklamy zmizely, zůstaly jen dvě karty v Google Chromu AVG vyhledávání...

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 21-12-2014
Ran by Pavel at 2014-12-21 22:16:52 Run:1
Running from C:\Users\Pavel\Desktop
Loaded Profile: Pavel (Available profiles: Pavel)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Start
HKLM-x32\...\Run: [] => [X]
HKU\S-1-5-21-1558606403-461566547-1020627287-1001\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-1558606403-461566547-1020627287-1001\...\MountPoints2: {711b7089-7870-11e4-be97-88532e4ae78b} - "H:\SISetup.exe"
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
HKU\S-1-5-21-1558606403-461566547-1020627287-1001\Software\Microsoft\Internet Explorer\Main,Start Page = https://mysearch.avg.com?cid={FA9B6D71- ... 2014-08-29 23:19:35&v=18.1.9.799&pid=safeguard&sg=&sap=hp
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
C:\Program Files (x86)\Skype\Toolbars
CHR dev: Chrome dev build detected! <======= ATTENTION
CHR Extension: (BuyNsuave) - C:\ProgramData\fcjfmnkgjbkbmfmjacfkhbbelcmaajil\ [2014-02-23]
CHR Extension: (BuyNNsave) - C:\ProgramData\jkbfddbojihoknlloleiebilkghohoen\ [2014-02-23]
CHR Extension: (BuyNsAve) - C:\ProgramData\lggmhkkapicelfmafnnjkophcbpopbcb\ [2014-02-23]
C:\ProgramData\jkbfddbojihoknlloleiebilkghohoen
C:\ProgramData\fcjfmnkgjbkbmfmjacfkhbbelcmaajil
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
C:\Users\Pavel\AppData\Local\Temp
End
*****************

HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\ => value deleted successfully.
HKU\S-1-5-21-1558606403-461566547-1020627287-1001\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeBridge => value deleted successfully.
"HKU\S-1-5-21-1558606403-461566547-1020627287-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{711b7089-7870-11e4-be97-88532e4ae78b}" => Key deleted successfully.
HKCR\CLSID\{711b7089-7870-11e4-be97-88532e4ae78b} => Key not found.
"HKLM\SOFTWARE\Policies\Google" => Key deleted successfully.
HKU\S-1-5-21-1558606403-461566547-1020627287-1001\Software\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully.
HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
"HKCR\PROTOCOLS\Handler\skypec2c" => Key deleted successfully.
"HKCR\CLSID\{91774881-D725-4E58-B298-07617B9B86A8}" => Key deleted successfully.
HKCR\Wow6432Node\PROTOCOLS\Handler\skypec2c => Key could not be deleted. Error: -1073741772
"HKCR\Wow6432Node\CLSID\{91774881-D725-4E58-B298-07617B9B86A8}" => Key deleted successfully.
C:\Program Files (x86)\Skype\Toolbars => Moved successfully.
CHR dev: Chrome dev build detected! <======= ATTENTION => Error: No automatic fix found for this entry.
C:\ProgramData\fcjfmnkgjbkbmfmjacfkhbbelcmaajil\ => Moved successfully.
C:\ProgramData\jkbfddbojihoknlloleiebilkghohoen\ => Moved successfully.
C:\ProgramData\lggmhkkapicelfmafnnjkophcbpopbcb\ => Moved successfully.
"C:\ProgramData\jkbfddbojihoknlloleiebilkghohoen" => File/Directory not found.
"C:\ProgramData\fcjfmnkgjbkbmfmjacfkhbbelcmaajil" => File/Directory not found.
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => Moved successfully.
C:\Users\Pavel\AppData\Local\Temp => Moved successfully.

==== End of Fixlog ====

Smazáno. Vše OK?

Vyskakovací reklamy zmizely, zůstaly jen dvě karty v Google Chromu AVG vyhledávání...

GoogleChrome zazálohujte pomocí Chrome Backup: http://www.stahuj.centrum.cz/internet_a ... me-backup/ . Pak jej odinstalujte vč. jeho profilu. Znovu nainstalujte a zpět ze zálohy nakopírujte pouz záložky, příp. hesla.

Takže po smazání a opětovném nainstalování tam ty karty byly zase, tak jsem dal reset nastavení a povedlo se
Díky moc za pomoc a trpělivost...

Rádo se stalo!