VIRY.CZ

Ahoj

V PC su nejake zbytky po IObit programoch (napr. Driver Booster, Advanced SystemCare, Uninstaller, atd) - neodporucame ich vobec pouzivat, su to cinske smejdy, ktore mozu poskodit system.

Stiahni AdwCleaner: https://toolslib.net/downloads/finish/1/

Uloz na plochu a ukonci vsetky programy
Spusti AdwCleaner ako spravca
Odsuhlas licencne podmienky
Klikni na Skenovat nyni (Scan now) a pockaj na dokoncenie
Nechaj zaskrtnute vsetky nalezy
Klikni na Cisteni a opravy (Clean and Repair) a potvrd restart PC teraz
Po restartovani PC sa otvori AdwCleaner, klikni na Zobrazit soubor protokolu
Otvori sa log, jeho obsah sem skopiruj

Otvor poznamkovy blok (Win+R -> notepad -> enter)

Skopiruj nasledujuci text a vloz ho do poznamkoveho bloku:

Kód: Vybrat vše

Start
CloseProcesses:
CreateRestorePoint:

PowerShell: Get-ChildItem -Path "$ENV:USERPROFILE\Desktop" -Recurse -Force | Measure-Object -Property Length -Sum
File: C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
File: C:\Program Files\AMD\{920DEC42-4CA5-4d1d-9487-67BE645CDDFC}\amdacpusrsvc.exe
File: C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe
File: C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL
File: C:\Windows\System32\HPZinw12.dll
File: C:\Windows\System32\HPZipm12.dll

HKLM-x32\...\Run: [] => [X]
HKU\S-1-5-21-2184128150-3763628530-3428707980-1002\...\Policies\Explorer: [] 
CMD: type "C:\Users\Honza\Desktop\wifi.bat"
HKU\S-1-5-21-2184128150-3763628530-3428707980-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo13.msn.com/?pc=LCJB
HKU\S-1-5-21-2184128150-3763628530-3428707980-1002\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.lenovo.com
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-2184128150-3763628530-3428707980-1002 -> DefaultScope {0F2B12EB-5226-4078-874C-AD603E3D4B25} URL = 
SearchScopes: HKU\S-1-5-21-2184128150-3763628530-3428707980-1002 -> {0F2B12EB-5226-4078-874C-AD603E3D4B25} URL = 
FF NewTab: Mozilla\Firefox\Profiles\9a5gdns3.default -> hxxp://securedsearch.lavasoft.com/?pr=vmn&id=webcompa&ent=hp_WCYID10444__181017
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [No File]
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [No File]
CHR StartupUrls: Default -> "hxxp://fb.com/"
CHR DefaultSearchURL: Default -> hxxps://defaultsearch.co/?q={searchTerms}
CHR DefaultSearchKeyword: Default -> Adaware Secure
CHR HKLM-x32\...\Chrome\Extension: [nladljmabboanhihfkjacnnkgjhnokhj] - hxxps://clients2.google.com/service/update2/crx
S2 KMSServerService; C:\windows\KMSServerService\KMS Server Service.exe [236032 2017-11-14] (My Digital Life Forums) [File not signed]
R2 Service KMSELDI; C:\Program Files\KMSpico\Service_KMS.exe [743616 2015-12-02] (@ByELDI) [File not signed]
C:\windows\KMSServerService
C:\Program Files\KMSpico
S2 APXACC; \SystemRoot\system32\DRIVERS\appexDrv.sys [X]
2018-11-10 15:52 - 2018-02-14 14:37 - 000000000 ____D C:\ProgramData\IObit
2018-11-10 15:52 - 2018-02-14 14:36 - 000000000 ____D C:\Users\Honza\AppData\Roaming\IObit
2018-11-10 15:52 - 2018-02-14 14:36 - 000000000 ____D C:\Users\Honza\AppData\LocalLow\IObit
2018-11-10 15:52 - 2018-02-14 14:36 - 000000000 ____D C:\Program Files (x86)\IObit
Task: {12E9410C-9AD6-44E6-BFA3-4312969AFCAC} - System32\Tasks\Driver Booster SkipUAC (Honza) => C:\Program Files (x86)\IObit\Driver Booster\5.2.0\DriverBooster.exe
Task: {DE010163-A0B0-4EC3-92CA-23353A0523AB} - System32\Tasks\AutoPico Daily Restart => C:\Program Files\KMSpico\AutoPico.exe [2015-12-02] (@ByELDI)
AlternateDataStreams: C:\Users\Honza:Heroes & Generals [38]
AlternateDataStreams: C:\Users\Public\AppData:CSM [468]
DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{8B29D47F-92E2-4C20-9EE0-F710991F5D7C}_is1

C:\Program Files\IObit
C:\Program Files (x86)\IObit
C:\Program Files\Common Files\IObit
C:\ProgramData\IObit
C:\ProgramData\ProductData
C:\Users\Honza\AppData\Roaming\IObit
C:\Users\Honza\AppData\LocalLow\IObit
C:\Users\Honza\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\*Driver Booster*
C:\Users\Honza\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\*Advanced SystemCare*
C:\Users\Default\AppData\Roaming\IObit
C:\Users\Default\AppData\LocalLow\IObit
C:\Users\Public\Desktop\*Driver Booster*
C:\Users\Public\Desktop\*Advanced SystemCare*
C:\Windows\IObit
C:\Windows\Tasks\ImCleanDisabled
C:\ProgramData\{13CFD044-61E4-4EAC-AD61-02536D961216}
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Booster 5
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare

Hosts:
EmptyTemp:
End

Uloz na plochu s nazvom fixlist.txt
Spusti znovu FRST a klikni na Fix
Po dokonceni si FRST vyziada restart PC, potvrd kliknutim na OK
Po restartovani PC bude na ploche subor Fixlog.txt, jeho obsah sem skopiruj

To zmazanie Chrome addonov je zvlastne. Zmazalo to uplne vsetky addony?

Ako to vyzera s PC? Nastala nejaka zmena alebo su este nejake problemy?

Spusti kontrolu integrity systemovych suborov:

Otvor Start, napis "cmd" (bez uvodzoviek), klikni pravym tlacitkom mysi na Prikazovy riadok a klikni na Spustit ako spravca

Skopiruj a spusti prikaz:

Kód: Vybrat vše

DISM.exe /Online /Cleanup-image /Restorehealth

Po dokonceni skopiruj a spusti druhy prikaz:
Kód: Vybrat vše
```
sfc /scannow
```

Po dokonceni obidvoch prikazov skopiruj a spusti tento prikaz:

Kód: Vybrat vše

findstr /c:"[SR]" %windir%\logs\cbs\cbs.log >> "%userprofile%\desktop\sfcdetails.txt" && copy %windir%\logs\dism\dism.log %userprofile%\desktop\dism.txt

Na ploche sa vytvoria subory sfcdetails.txt a dism.txt, tieto subory zabal ho do archivu RAR alebo ZIP a posli ako prilohu k dalsiemu prispevku
Restartuj PC a napis ako sa chova PC

VIRY.CZ

Prosim o preventivku

Re: Prosim o preventivku

Re: Prosim o preventivku

Re: Prosim o preventivku

Re: Prosim o preventivku