Stránka 2 z 2

Re: Vyskakujuce okna a nežiaduca reklama

Napsal: 06 zář 2015 14:11
od Márty84
:arrow: Odinstalujte Spybota, program je zastaraly.



:arrow: Napiste mi velikost adresare plochy (C:\Users\Ladislav\Plocha)



:arrow: Otevrete si poznamkovy blok a zkopirujte do nej tento skript

Kód: Vybrat vše

Start
CloseProcesses:
CreateRestorePoint:

HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKU\S-1-5-21-1677144030-1501987465-2753303347-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [28785280 2015-06-02] (Skype Technologies S.A.)
HKU\S-1-5-21-1677144030-1501987465-2753303347-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8358680 2015-06-01] (Piriform Ltd)
HKU\S-1-5-21-1677144030-1501987465-2753303347-1001\...\Run: [Google Update] => C:\Users\Ladislav\AppData\Local\Google\Update\GoogleUpdate.exe [144200 2015-09-01] (Google Inc.)
HKU\S-1-5-21-1677144030-1501987465-2753303347-1001\...\Run: [SpybotPostWindows10UpgradeReInstall] => C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe [1011200 2015-07-28] (Safer-Networking Ltd.)
BootExecute: autocheck autochk * sdnclean64.exe

BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)

CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2015-05-01]

R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1394816 2015-05-01] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1772672 2015-05-01] (Microsoft Corporation)
R2 Service Mgr RazorWeb;Service Mgr RazorWeb; C:\ProgramData\4776dc07-f30f-4d0b-87a6-e2d583c890d4\plugincontainer.exe [2015-08-21 1202952]
R2 Update Mgr RazorWeb;Update Mgr RazorWeb; C:\Program Files (x86)\Common Files\4776dc07-f30f-4d0b-87a6-e2d583c890d4\updater.exe [2015-09-05 715528]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-30 144200]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-02-18 315488]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-30 144200]
S3 gusvc;Google Updater Service; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2014-06-06 136120]

2015-09-05 22:50 - 2015-09-05 22:10 - 00024064 _____ C:\windows\zoek-delete.exe
2015-09-05 22:13 - 2015-09-05 22:52 - 00011962 _____ C:\zoek-results.log
2015-09-05 22:10 - 2015-09-05 22:51 - 00000000 ____D C:\zoek_backup
2015-09-05 11:51 - 2015-09-05 11:51 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-09-05 11:48 - 2015-09-05 11:49 - 24345872 _____ (Malwarebytes Corporation ) C:\Users\Ladislav\Downloads\mbam-setup-2.1.8.1057.exe
2015-09-05 09:34 - 2015-09-06 07:51 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2015-09-05 09:34 - 2015-09-06 07:50 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2015-09-05 09:28 - 2015-09-05 09:29 - 46525608 _____ (Safer-Networking Ltd. ) C:\Users\Ladislav\Downloads\SpyBot.Search.And.Destroy.v2.4.40.exe

Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1677144030-1501987465-2753303347-1001Core.job => C:\Users\Ladislav\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1677144030-1501987465-2753303347-1001Core1d06e1a6d8b209e.job => C:\Users\Ladislav\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1677144030-1501987465-2753303347-1001Core1d090eb86de0eaa.job => C:\Users\Ladislav\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1677144030-1501987465-2753303347-1001Core1d0c43181a69b88.job => C:\Users\Ladislav\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1677144030-1501987465-2753303347-1001Core1d0e4806b4e67da.job => C:\Users\Ladislav\AppData\Local\Google\Update\GoogleUpdate.exe

Hosts:
EmptyTemp:
Reboot:
End
Vlevo nahore kliknete na napis Soubor
Kliknete na napis Ulozit jako...
Napiste spravne ten cerveny nazev fixlist a ulozte na plochu.
Vypnete antivir i dalsi pripadne zabezpeceni.
Spustte FRST jako spravce, kliknete na napis Fix a program vykona prikazy.
Po restartu pc by se mel objevit novy log - s nazvem fixlog, ten mi sem zase zkopirujte.

Re: Vyskakujuce okna a nežiaduca reklama

Napsal: 07 zář 2015 16:30
od kocure
velkost suborzu je 3,92 mb

Fix result of Farbar Recovery Scan Tool (x64) Version:06-09-2015 01
Ran by Ladislav (2015-09-07 17:23:10) Run:1
Running from C:\Users\Ladislav\Desktop
Loaded Profiles: Ladislav (Available Profiles: Ladislav)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
CloseProcesses:
CreateRestorePoint:

HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKU\S-1-5-21-1677144030-1501987465-2753303347-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [28785280 2015-06-02] (Skype Technologies S.A.)
HKU\S-1-5-21-1677144030-1501987465-2753303347-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8358680 2015-06-01] (Piriform Ltd)
HKU\S-1-5-21-1677144030-1501987465-2753303347-1001\...\Run: [Google Update] => C:\Users\Ladislav\AppData\Local\Google\Update\GoogleUpdate.exe [144200 2015-09-01] (Google Inc.)
HKU\S-1-5-21-1677144030-1501987465-2753303347-1001\...\Run: [SpybotPostWindows10UpgradeReInstall] => C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe [1011200 2015-07-28] (Safer-Networking Ltd.)
BootExecute: autocheck autochk * sdnclean64.exe

BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)

CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2015-05-01]

R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1394816 2015-05-01] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1772672 2015-05-01] (Microsoft Corporation)
R2 Service Mgr RazorWeb;Service Mgr RazorWeb; C:\ProgramData\4776dc07-f30f-4d0b-87a6-e2d583c890d4\plugincontainer.exe [2015-08-21 1202952]
R2 Update Mgr RazorWeb;Update Mgr RazorWeb; C:\Program Files (x86)\Common Files\4776dc07-f30f-4d0b-87a6-e2d583c890d4\updater.exe [2015-09-05 715528]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-30 144200]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2015-02-18 315488]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-30 144200]
S3 gusvc;Google Updater Service; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2014-06-06 136120]

2015-09-05 22:50 - 2015-09-05 22:10 - 00024064 _____ C:\windows\zoek-delete.exe
2015-09-05 22:13 - 2015-09-05 22:52 - 00011962 _____ C:\zoek-results.log
2015-09-05 22:10 - 2015-09-05 22:51 - 00000000 ____D C:\zoek_backup
2015-09-05 11:51 - 2015-09-05 11:51 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-09-05 11:48 - 2015-09-05 11:49 - 24345872 _____ (Malwarebytes Corporation ) C:\Users\Ladislav\Downloads\mbam-setup-2.1.8.1057.exe
2015-09-05 09:34 - 2015-09-06 07:51 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2015-09-05 09:34 - 2015-09-06 07:50 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2015-09-05 09:28 - 2015-09-05 09:29 - 46525608 _____ (Safer-Networking Ltd. ) C:\Users\Ladislav\Downloads\SpyBot.Search.And.Destroy.v2.4.40.exe

Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1677144030-1501987465-2753303347-1001Core.job => C:\Users\Ladislav\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1677144030-1501987465-2753303347-1001Core1d06e1a6d8b209e.job => C:\Users\Ladislav\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1677144030-1501987465-2753303347-1001Core1d090eb86de0eaa.job => C:\Users\Ladislav\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1677144030-1501987465-2753303347-1001Core1d0c43181a69b88.job => C:\Users\Ladislav\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1677144030-1501987465-2753303347-1001Core1d0e4806b4e67da.job => C:\Users\Ladislav\AppData\Local\Google\Update\GoogleUpdate.exe

Hosts:
EmptyTemp:
Reboot:
End
*****************

Processes closed successfully.
Restore point was successfully created.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\BCSSync => value removed successfully
HKU\S-1-5-21-1677144030-1501987465-2753303347-1001\Software\Microsoft\Windows\CurrentVersion\Run\\Skype => value removed successfully
HKU\S-1-5-21-1677144030-1501987465-2753303347-1001\Software\Microsoft\Windows\CurrentVersion\Run\\CCleaner Monitoring => value removed successfully
HKU\S-1-5-21-1677144030-1501987465-2753303347-1001\Software\Microsoft\Windows\CurrentVersion\Run\\Google Update => value removed successfully
HKU\S-1-5-21-1677144030-1501987465-2753303347-1001\Software\Microsoft\Windows\CurrentVersion\Run\\SpybotPostWindows10UpgradeReInstall => value removed successfully
hklm\System\CurrentControlSet\Control\Session Manager\\BootExecute => value restored successfully
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}" => key removed successfully
"HKCR\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}" => key removed successfully
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}" => key removed successfully
"HKCR\Wow6432Node\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}" => key removed successfully
"HKCR\PROTOCOLS\Handler\skypec2c" => key removed successfully
"HKCR\CLSID\{91774881-D725-4E58-B298-07617B9B86A8}" => key removed successfully
HKCR\Wow6432Node\PROTOCOLS\Handler\skypec2c => key not found.
"HKCR\Wow6432Node\CLSID\{91774881-D725-4E58-B298-07617B9B86A8}" => key removed successfully
"HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl" => key removed successfully
C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx => moved successfully
c2cautoupdatesvc => service removed successfully
c2cpnrsvc => service removed successfully
Service Mgr RazorWeb => service not found.
Update Mgr RazorWeb => service not found.
gupdate => service removed successfully
SkypeUpdate => service removed successfully
gupdatem => service removed successfully
gusvc => service removed successfully
C:\windows\zoek-delete.exe => moved successfully
C:\zoek-results.log => moved successfully
C:\zoek_backup => moved successfully
C:\ProgramData\Malwarebytes => moved successfully
C:\Users\Ladislav\Downloads\mbam-setup-2.1.8.1057.exe => moved successfully
C:\Program Files (x86)\Spybot - Search & Destroy 2 => moved successfully
C:\ProgramData\Spybot - Search & Destroy => moved successfully
C:\Users\Ladislav\Downloads\SpyBot.Search.And.Destroy.v2.4.40.exe => moved successfully
C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => moved successfully
C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => moved successfully
C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1677144030-1501987465-2753303347-1001Core.job => moved successfully
C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1677144030-1501987465-2753303347-1001Core1d06e1a6d8b209e.job => moved successfully
C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1677144030-1501987465-2753303347-1001Core1d090eb86de0eaa.job => moved successfully
C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1677144030-1501987465-2753303347-1001Core1d0c43181a69b88.job => moved successfully
C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1677144030-1501987465-2753303347-1001Core1d0e4806b4e67da.job => moved successfully
C:\Windows\System32\Drivers\etc\hosts => moved successfully
Hosts restored successfully.
EmptyTemp: => 181.7 MB temporary data Removed.


The system needed a reboot..

==== End of Fixlog 17:24:09 ====

Re: Vyskakujuce okna a nežiaduca reklama

Napsal: 07 zář 2015 18:06
od Márty84
:!: Vsechny tyto programy - vcetne pripadne instalace - spoustejte jako spravce (kliknete na ne pravym mysidlem a zvolte - Spustit jako spravce)

:arrow:
vyosek píše: :arrow: DelFix https://toolslib.net/downloads/finish/2/
  • Stahnete a spustte
  • Ponechte zatrzitkou pouze u volby Remove disinfection tools
  • Kliknete na Run
:arrow: Stahnete Ccleaner http://www.filehippo.com/download_ccleaner a spustte.
Pri instalaci pozor na toolbar (ci jine doplnky), jestli vam nabidne jeho instalaci, tak zruste zatrzitko.
Po spusteni se ocitnete ve funkci Cistic. Vlevo je spousta zatrzitek. Pozor dejte hlavne na kos, pokud nechate zatrzene, vzdy ho vysype.
Dale, podle toho jak je nastaven, smaze vsechna hesla ulozena na netu!!! Takze jestli mate nastavene, at si pocitac hesla pamatuje (coz neni pro bezpecnost dobre), budete je muset pak napsat znova rucne (napr mail, facebook, ruzna fora atd.)
Kliknete na Analyzovat a az dokonci analyzu, kliknete na Spustit Cleaner.
Potom kliknete vlevo na funkci Registry
Kliknete na Hledej problemy, kdyz najde, kliknete na Opravit problemy. Nabidne Vam zalohu, tu udelejte a ulozte ji tak, at ji v pripade potreby najdete.
Funkce Nastroje umoznuje odinstalovani programu. Je dukladnejsi nez samotny windows!
(Pokud je v pc vice uzivatelskych uctu, pouzijte program i v nich)

:arrow: Defragmentujte disk(y) (SSD Disky ne!)
Stahnete program Defraggler https://www.piriform.com/defraggler/download/standard
Pri instalaci opet pozor na toolbar a dalsi nesmysly.
Po nainstalovani program spustte a kliknete na Analyzovat, po analyze kliknete na Defragmentovat a programek odvede svou praci.




:arrow: Pak napiste, jak to s pc vypada.





7.11. pro neaktivitu :lock: http://forum.viry.cz/viewtopic.php?f=12&t=123975