VIRY.CZ

Chtěla jsem stáhnout mp3 a vlezlo mi tam že si napřed musím nainstalovat jakýsi ilivid. Tak jsem to (bohužel) udělala a do vyhledávačů se mi nasomroval jakýsi ask.com. Program ilivid mi syn už odinstaloval, ale teď mi nefunguje vyhledávání a ten ask.com se načte při každém pokusu otevřít nový panel.
Našla jsem něco o něm tady, ale moc se v tom neorientuju co a jak mám udělat a varujou tam před tím aby to dělal laik. Prosím o pomoc.

Zdravim a pekne odpoledne preji

Stahnete Junkware Removal Tool http://thisisudax.org/downloads/JRT.exe

• Ulozte nejlepe na plochu
• Po spusteni se zobrazi licencni podminky, stisknete libovolnou klavesu
• Probehne vytvoreni zalohy a nasledne prohledavani
• Probehne skenovani a pak se objevi log, pripadne bude ulozen v c:\JRT jako JRT.txt, ten sem vlozte

Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner

• Ulozte nejlepe na plochu
• Ukoncete vsechny programy
• Kliknete na Scan a nasledne Clean
• Probehne oprava, restart PC a pak se objevi log, pripadne bude ulozen ve slozce c:\AdwCleaner\AdwCleaner[S?].txt, ten sem vlozte

Díky, jdu na to.

Nedavejte sem prosim dalsi odkazy, navic ten co jste dala je pomalu az skodlivy, jelikoz doporucuje aplikovat SpyHunter. SpyHunter nema moc dobre reference, vzhledem ke sve agresivni reklami politice a dalsim problemum, ktere spolu s jeho pouzitim souvisi.

Ask.com je zanmy typ haveti a vyskoleni radci moc dobre vi, jak s nim lehce zatocit...

Program píše:
A bad module had been detected.
A reboot is require to remove modules.
Press y to reboot now
Press n to reboot later
JRT.txt nemůžu najít ani na ploše ani na C.
Omlouvám se za ten odkaz, to jsem netušila.

JRT jeste nedokoncil svou praci a pise co mate udelat Press y to reboot now

Takze stisknete y, PC se restartuje a JRT dokonci svou praci...

Teď mám stáhnout ten ADCleaner nebo ještě počkat na výsledek? A měla bych si raději udělat zálohu dat nebo to není nutné?

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.4 (10.06.2013:1)
OS: Windows 7 Home Premium x64
Ran by ivana on źt 10.10.2013 at 14:23:10,68
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values




~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{A40DC6C5-79D0-4CA8-A185-8FF989AF1115}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{CC1AC828-BB47-4361-AFB5-96EEE259DD87}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{A40DC6C5-79D0-4CA8-A185-8FF989AF1115}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{CC1AC828-BB47-4361-AFB5-96EEE259DD87}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\apn dtx
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\ilivid
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\searchquiehelper.dnsguard
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\searchquiehelper.dnsguard.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\datamngr
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\datamngr"
Successfully deleted: [Folder] "C:\ProgramData\partner"
Successfully deleted: [Folder] "C:\ProgramData\wincert"
Successfully deleted: [Folder] "C:\Users\ivana\AppData\Roaming\opencandy"
Failed to delete: [Folder] "C:\Program Files (x86)\movies toolbar"
Successfully deleted: [Empty Folder] C:\Users\ivana\appdata\local\{1E787502-80C5-4469-A2EA-5AC567A4A4C2}
Successfully deleted: [Empty Folder] C:\Users\ivana\appdata\local\{24843B41-E39F-4DA8-9592-84DEDCBD24CA}
Successfully deleted: [Empty Folder] C:\Users\ivana\appdata\local\{A956DEA9-8601-4389-8DB4-18060627E04D}
Successfully deleted: [Empty Folder] C:\Users\ivana\appdata\local\{AEC694AB-4FDD-4BA6-B228-C381069F0D44}
Successfully deleted: [Empty Folder] C:\Users\ivana\appdata\local\{D00720F0-7AA7-43DB-AC13-7BB5156DA6FB}
Successfully deleted: [Empty Folder] C:\Users\ivana\appdata\local\{E3D84D5A-6D99-4815-BB40-D02F3859DB41}
Successfully deleted: [Empty Folder] C:\Users\ivana\appdata\local\{F9DEBA53-5429-400B-B42E-3CEF0EEF0613}



~~~ FireFox

Successfully deleted the following from C:\Users\ivana\AppData\Roaming\mozilla\firefox\profiles\xvwmbo2a.default\prefs.js

user_pref("keyword.URL", "hxxp://dts.search.ask.com/sr?src=ffb&gct=ds&appid=400&systemid=406&v=n9602-131&apn_dtid=BND406&apn_ptnrs=AG6&apn_uid=3745340096104553&o=APN10645&q=")
Emptied folder: C:\Users\ivana\AppData\Roaming\mozilla\firefox\profiles\xvwmbo2a.default\minidumps [78 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on źt 10.10.2013 at 14:27:57,07
Computer was rebooted
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Zatim zadne riskantni kroky nedelame, ale zaloha dulezitych dokumentu by mela byt prubezna

Pokracujte AdwCleanerem

# AdwCleaner v3.007 - Report created 10/10/2013 at 14:42:06
# Updated 09/10/2013 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : ivana - IVANA-NTB
# Running from : C:\Users\ivana\Desktop\adwcleaner.exe
# Option : Clean

***** [ Services ] *****

[#] Service Deleted : DatamngrCoordinator

***** [ Files / Folders ] *****

[#] Folder Deleted : C:\ProgramData\BitGuard
[#] Folder Deleted : C:\ProgramData\Browser Manager
[#] Folder Deleted : C:\ProgramData\BrowserProtect
Folder Deleted : C:\Program Files (x86)\Movies Toolbar

***** [ Shortcuts ] *****


***** [ Registry ] *****

Value Deleted : HKLM\SYSTEM\ControlSet001\Control\Session Manager\AppCertDlls [x64]
Value Deleted : HKLM\SYSTEM\ControlSet001\Control\Session Manager\AppCertDlls [x86]
Value Deleted : HKLM\SYSTEM\ControlSet002\Control\Session Manager\AppCertDlls [x64]
Value Deleted : HKLM\SYSTEM\ControlSet002\Control\Session Manager\AppCertDlls [x86]
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{2CE4D4CF-B278-4126-AD1E-B622DA2E8339}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{1B730ACF-26A3-447B-9994-14AEE0EB72CC}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{2CE4D4CF-B278-4126-AD1E-B622DA2E8339}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{6A4BCABA-C437-4C76-A54E-AF31B8A76CB9}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A40DC6C5-79D0-4CA8-A185-8FF989AF1115}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{1B730ACF-26A3-447B-9994-14AEE0EB72CC}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}
Key Deleted : HKLM\Software\DataMngr
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}

***** [ Browsers ] *****

-\\ Internet Explorer v10.0.9200.16720


-\\ Mozilla Firefox v24.0 (cs)

[ File : C:\Users\ivana\AppData\Roaming\Mozilla\Firefox\Profiles\xvwmbo2a.default\prefs.js ]

Line Deleted : user_pref("browser.search.order.1", "Ask.com");

*************************

AdwCleaner[R0].txt - [2672 octets] - [10/10/2013 14:40:50]
AdwCleaner[S0].txt - [2364 octets] - [10/10/2013 14:42:06]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [2424 octets] ##########

Poprosim o log z FRSTL http://forum.viry.cz/viewtopic.php?f=13&t=133100

Jdu na to.
Ještě mám dotaz: v adresáři mám pořád ten soubor co jsem z něj to svinstvo instalovala, jmenuje se to iLividSetup. Nedělat nic nebo smazat?

Je to asi jen istalacni soubor, ale pro jistotu, smazte jej...

Tak mám stažený ten Launcher, ale na FRST mě to nechce připojit. Ten ask mi tam pořád trčí. Mám to stáhnout u syna a přenést přes flešku? Ten livid jsem smazala a vysypala koš.

Stranky s umistenim FRST maji problem takze pouzijem neco jineho

Stahnete OTL http://oldtimer.geekstogo.com/OTL.exe a ulozte jej na plochu

• Pokud pouzivate Win Vista ci W7, kliknete na OTL pravym a dejte Run As Administrator ci Spustit jako spravce
• Pokud pouzivate 64bitovy OS, zkontrolujte, zda-li je zaskrtnuty ctverecek u Pro 64 bitové OS, pokud ne, zaskrtnete jej
• Zaskrtnete okenko Pro vsechny uzivatele
• Zaskrtnete okenko Kontrola na havet "LOP"
• Zaskrtnete okenko Kontrola na havet "Purity"
• Stari souboru zmente z 30 dnu na 7 dnu
• Do spodniho okenka Vlastni skenovani/opravy vlozte skript nize

• Kód: Vybrat vše

  CREATERESTOREPOINT
  
  netsvcs
  drivers32
  savembr:0
  
  /md5start
  atapi.sys
  autochk.exe
  cdrom.sys
  explorer.exe
  hal.dll
  scecli.dll
  services.exe
  svchost.exe
  tcpip.sys
  userinit.exe
  winlogon.exe
  /md5stop
  
  %systemroot%*.* /U /s
  %SYSTEMDRIVE%\*.exe
  %ALLUSERSPROFILE%\Application Data\*.
  %ALLUSERSPROFILE%\Application Data\*.exe /s
  %APPDATA%\*.
  %APPDATA%\*.exe /s
  %systemroot%\*. /mp /s
  %systemroot%\system32\*.dll /lockedfiles
  %systemroot%\Tasks\*.job
  %systemroot%\system32\drivers\*.sys /lockedfiles
  %systemroot%\System32\config\*.sav
  %systemroot%\system32\*.dll /lockedfiles
  %systemroot%\system32\drivers\*.sys /3
  %systemroot%\system32\*.* /3
  %SYSTEMDRIVE%\*.exe
  
  HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s
  
  %PROGRAMFILES%\Mozilla Firefox\firefox.exe /md5
  %PROGRAMFILES%\Internet Explorer\iexplore.exe /md5
  %PROGRAMFILES%\Opera\opera.exe /md5
  %PROGRAMFILES%\Google\Chrome\Application\chrome.exe /md5
  
  %SystemDrive%\PhysicalMBR.bin /md5 
  
  *crack* /s
  *keygen* /s
  *loader* /s

• Kliknete na tlacitko Prohledat
• Po dokonceni skenu (cca 10 az 15 min) se objevi logy OTL.txt a Extras.txt, oba sem vlozte
• Pokud budou logy dlouhe (forum bude kricet o prekroceni maximalniho poctu znaku), tak je rozdelte do vice prispevku

Teď jsem si všimla, že mi tam zůstalo zaškrtnuté Skrýt důvěryhodné. Je to chyba?