VIRY.CZ

Dal jsem notebook do servisu, kde mi přeinstalovali os. Nyní mi avast hlásí vir - přikládám screen

To je hláška Avastu, že něco škodlivého zablokoval. Jak často se to děje?

Kdyz otevru novy panel v mozille

Aha. Dejte log FRST: http://forum.viry.cz/viewtopic.php?f=24&t=132509 .

Log prikladam do prilohy

Otevřte poznámkový blok a zkopírujte do něj:

Start
ShellIconOverlayIdentifiers: [SugarSyncBackedUp] -> {0C4A258A-3F3B-4FFF-80A7-9B3BEC139472} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll No File
ShellIconOverlayIdentifiers: [SugarSyncPending] -> {62CCD8E3-9C21-41E1-B55E-1E26DFC68511} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll No File
ShellIconOverlayIdentifiers: [SugarSyncRoot] -> {A759AFF6-5851-457D-A540-F4ECED148351} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll No File
ShellIconOverlayIdentifiers: [SugarSyncShared] -> {1574C9EF-7D58-488F-B358-8B78C1538F51} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll No File
URLSearchHook: [S-1-5-21-3095543077-3893173563-4132863104-1001] ATTENTION => Default URLSearchHook is missing
SearchScopes: HKU\S-1-5-21-3095543077-3893173563-4132863104-1002 -> DefaultScope {73A15D6F-D498-4333-9973-0D3348482E54} URL =
SearchScopes: HKU\S-1-5-21-3095543077-3893173563-4132863104-1002 -> {73A15D6F-D498-4333-9973-0D3348482E54} URL =
C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA
C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore
C:\ProgramData\DP45977C.lfl
C:\ProgramData\Lenovo-30316.vbs
C:\Users\Lenovo\AppData\Local\Temp
End

Uložte do C:\Users\Lenovo\Downloads jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

Fix result of Farbar Recovery Scan Tool (x64) Version:15-09-2015
Ran by Lenovo (2015-09-19 09:59:01) Run:1
Running from C:\Users\Lenovo\Downloads
Loaded Profiles: UpdatusUser & Lenovo (Available Profiles: UpdatusUser & Lenovo)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
ShellIconOverlayIdentifiers: [SugarSyncBackedUp] -> {0C4A258A-3F3B-4FFF-80A7-9B3BEC139472} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll No File
ShellIconOverlayIdentifiers: [SugarSyncPending] -> {62CCD8E3-9C21-41E1-B55E-1E26DFC68511} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll No File
ShellIconOverlayIdentifiers: [SugarSyncRoot] -> {A759AFF6-5851-457D-A540-F4ECED148351} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll No File
ShellIconOverlayIdentifiers: [SugarSyncShared] -> {1574C9EF-7D58-488F-B358-8B78C1538F51} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll No File
URLSearchHook: [S-1-5-21-3095543077-3893173563-4132863104-1001] ATTENTION => Default URLSearchHook is missing
SearchScopes: HKU\S-1-5-21-3095543077-3893173563-4132863104-1002 -> DefaultScope {73A15D6F-D498-4333-9973-0D3348482E54} URL =
SearchScopes: HKU\S-1-5-21-3095543077-3893173563-4132863104-1002 -> {73A15D6F-D498-4333-9973-0D3348482E54} URL =
C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA
C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore
C:\ProgramData\DP45977C.lfl
C:\ProgramData\Lenovo-30316.vbs
C:\Users\Lenovo\AppData\Local\Temp
End
*****************

"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\SugarSyncBackedUp" => key removed successfully
"HKCR\CLSID\{0C4A258A-3F3B-4FFF-80A7-9B3BEC139472}" => key removed successfully
"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\SugarSyncPending" => key removed successfully
"HKCR\CLSID\{62CCD8E3-9C21-41E1-B55E-1E26DFC68511}" => key removed successfully
"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\SugarSyncRoot" => key removed successfully
"HKCR\CLSID\{A759AFF6-5851-457D-A540-F4ECED148351}" => key removed successfully
"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\SugarSyncShared" => key removed successfully
"HKCR\CLSID\{1574C9EF-7D58-488F-B358-8B78C1538F51}" => key removed successfully
Could not restore Default URLSearchHook.
HKU\S-1-5-21-3095543077-3893173563-4132863104-1002\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully
"HKU\S-1-5-21-3095543077-3893173563-4132863104-1002\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{73A15D6F-D498-4333-9973-0D3348482E54}" => key removed successfully
HKCR\CLSID\{73A15D6F-D498-4333-9973-0D3348482E54} => key not found.
C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => moved successfully
C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => moved successfully
C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA => moved successfully
C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore => moved successfully
Could not move "C:\ProgramData\DP45977C.lfl" => Scheduled to move on reboot.
C:\ProgramData\Lenovo-30316.vbs => moved successfully
C:\Users\Lenovo\AppData\Local\Temp => moved successfully

Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 2015-09-19 10:12:31)<=

C:\ProgramData\DP45977C.lfl => Is moved successfully

==== End of Fixlog 10:12:31 ====




Problém stále přetrvává

Udělejte kompletní sken MBAM: http://www.malwarebytes.org/mbam.php a dejte log. Předem nic nemažte.

Přeinstaloval jsem Mozillu, problém je pryč.

Také řešení.