VIRY.CZ

Dobrý den, prosím o kontrolu logů. Děkuji
Logy jsou moc dlouhé, posílám je jako přílohu.

Zdravím!
Spusťte tuto utilitu:

Ulozte na plochu AdwCleaner https://malwarebytes.com/adwcleaner/ nebo http://www.bleepingcomputer.com/download/adwcleaner/

ukoncete vsechny programy
odsouhlaste licencni podmiky (EULA) klikem na Souhlasim
kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
kliknete na Skenovat nyni (Scan now), pote na Cisteni a opravy (Clean and Repair)
po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\Logs\AdwCleaner[Cxx].txt), jehoz obsah zkopirujte do pristi odpovedi

# -------------------------------
# Malwarebytes AdwCleaner 7.4.2.0
# -------------------------------
# Build: 10-21-2019
# Database: 2019-10-21.1 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 10-27-2019
# Duration: 00:00:09
# OS: Windows 10 Home
# Cleaned: 12
# Failed: 0


***** [ Services ] *****

No malicious services cleaned.

***** [ Folders ] *****

Deleted C:\Program Files (x86)\Mozilla Firefox\distribution\extensions\abb-acer@amazon.com
Deleted C:\ProgramData\54F3DE4E-B7BA-4EBD-8B3B-385D272CC583
Deleted C:\Users\Default\AppData\Local\Host App Service
Deleted C:\Users\Petr\AppData\Roaming\Seznam.cz
Deleted C:\Users\Public\App Explorer
Deleted C:\Windows\ServiceProfiles\LocalService\AppData\Local\Host App Service
Deleted C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Host App Service

***** [ Files ] *****

Deleted C:\ProgramData\Microsoft\Windows\Start Menu\Programs\App Explorer.lnk
Deleted C:\Users\Petr\AppData\Roaming\Mozilla\Firefox\Profiles\kx9iy1xz.default\invalidprefs.js

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks cleaned.

***** [ Registry ] *****

Deleted HKCU\Software\App Host Service
Deleted HKCU\Software\Seznam.cz

***** [ Chromium (and derivatives) ] *****

Deleted Amazon Assistant for Chrome

***** [ Chromium URLs ] *****

No malicious Chromium URLs cleaned.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.

***** [ Preinstalled Software ] *****

No Preinstalled Software cleaned.


*************************

[+] Delete Tracing Keys
[+] Reset Winsock

*************************

AdwCleaner[S00].txt - [4057 octets] - [16/09/2018 16:26:16]
AdwCleaner[C00].txt - [3711 octets] - [16/09/2018 16:26:39]
AdwCleaner_Debug.log - [81734 octets] - [27/10/2019 05:34:44]
AdwCleaner[S01].txt - [7450 octets] - [27/10/2019 05:35:16]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C01].txt ##########

OK. Dejte nové logy FRST+Addition.

Posílám oba logy.

Otevřte poznámkový blok a zkopírujte do něj:

Start

CloseProcesses:
HKU\S-1-5-21-3318471048-3354199284-439723813-1001\...\MountPoints2: {7bd8b704-6040-11e9-9dfd-94e979c63fc2} - "G:\HiSuiteDownLoader.exe"
Task: {0C3F7B71-2F90-4950-B208-3F8055F82C04} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [107848 2017-08-31] (Google Inc -> Google Inc.)
Task: {F11DF299-3348-4123-A68C-77369FB84535} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [107848 2017-08-31] (Google Inc -> Google Inc.)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll No File
FF Extension: (No Name) - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi [not found]
FF Extension: (No Name) - C:\Program Files\McAfee\WebAdvisor\saffplg.xpi [not found]
C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
FirewallRules: [{E685995E-22AA-4F17-960B-93DE8EE220C6}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe No File
FirewallRules: [{FEC69507-DE20-40EB-85F1-E92A778C02F7}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12Agent.exe No File
FirewallRules: [{78D52B62-2892-49DB-8A2A-2B812A48EB3B}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe No File
FirewallRules: [{A3EDA4DE-B7C9-4494-9FFF-07752369BCBC}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe No File
FirewallRules: [{FEC69507-DE20-40EB-85F1-E92A778C02F7}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12Agent.exe No File
FirewallRules: [{A7C83879-7CBB-4CFA-A763-9ACE9184B38B}] => (Allow) C:\Games\World_of_Tanks\WoTLauncher.exe No File
FirewallRules: [{BE7C2D8E-360B-4582-86B1-22DE6D8E9478}] => (Allow) C:\Games\World_of_Tanks\WoTLauncher.exe No File
FirewallRules: [{253B2140-73C9-43E4-AE16-5772E1393EF5}] => (Allow) C:\Games\World_of_Tanks\worldoftanks.exe No File
FirewallRules: [{97E47AE4-D534-4A71-AC1E-90ED8DDBF387}] => (Allow) C:\Games\World_of_Tanks\worldoftanks.exe No File

EmptyTemp:
End

Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

Fix result of Farbar Recovery Scan Tool (x64) Version: 27-10-2019
Ran by Petr (27-10-2019 22:51:44) Run:2
Running from C:\Users\Petr\Desktop
Loaded Profiles: Petr (Available Profiles: Petr)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start

CloseProcesses:
HKU\S-1-5-21-3318471048-3354199284-439723813-1001\...\MountPoints2: {7bd8b704-6040-11e9-9dfd-94e979c63fc2} - "G:\HiSuiteDownLoader.exe"
Task: {0C3F7B71-2F90-4950-B208-3F8055F82C04} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [107848 2017-08-31] (Google Inc -> Google Inc.)
Task: {F11DF299-3348-4123-A68C-77369FB84535} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [107848 2017-08-31] (Google Inc -> Google Inc.)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll No File
FF Extension: (No Name) - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi [not found]
FF Extension: (No Name) - C:\Program Files\McAfee\WebAdvisor\saffplg.xpi [not found]
C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
FirewallRules: [{E685995E-22AA-4F17-960B-93DE8EE220C6}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe No File
FirewallRules: [{FEC69507-DE20-40EB-85F1-E92A778C02F7}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12Agent.exe No File
FirewallRules: [{78D52B62-2892-49DB-8A2A-2B812A48EB3B}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe No File
FirewallRules: [{A3EDA4DE-B7C9-4494-9FFF-07752369BCBC}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe No File
FirewallRules: [{FEC69507-DE20-40EB-85F1-E92A778C02F7}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12Agent.exe No File
FirewallRules: [{A7C83879-7CBB-4CFA-A763-9ACE9184B38B}] => (Allow) C:\Games\World_of_Tanks\WoTLauncher.exe No File
FirewallRules: [{BE7C2D8E-360B-4582-86B1-22DE6D8E9478}] => (Allow) C:\Games\World_of_Tanks\WoTLauncher.exe No File
FirewallRules: [{253B2140-73C9-43E4-AE16-5772E1393EF5}] => (Allow) C:\Games\World_of_Tanks\worldoftanks.exe No File
FirewallRules: [{97E47AE4-D534-4A71-AC1E-90ED8DDBF387}] => (Allow) C:\Games\World_of_Tanks\worldoftanks.exe No File

EmptyTemp:
End
*****************

Processes closed successfully.
HKU\S-1-5-21-3318471048-3354199284-439723813-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{7bd8b704-6040-11e9-9dfd-94e979c63fc2} => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{0C3F7B71-2F90-4950-B208-3F8055F82C04}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0C3F7B71-2F90-4950-B208-3F8055F82C04}" => removed successfully
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineUA" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{F11DF299-3348-4123-A68C-77369FB84535}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F11DF299-3348-4123-A68C-77369FB84535}" => removed successfully
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineCore" => removed successfully
HKLM\Software\Classes\PROTOCOLS\Handler\sacore => removed successfully
HKLM\Software\Classes\CLSID\{5513F07E-936B-4E52-9B00-067394E91CC5} => removed successfully
C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi => path removed successfully
C:\Program Files\McAfee\WebAdvisor\saffplg.xpi => path removed successfully
"C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA" => not found
"C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore" => not found
HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\igfxcui => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{E685995E-22AA-4F17-960B-93DE8EE220C6}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{FEC69507-DE20-40EB-85F1-E92A778C02F7}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{78D52B62-2892-49DB-8A2A-2B812A48EB3B}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{A3EDA4DE-B7C9-4494-9FFF-07752369BCBC}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{FEC69507-DE20-40EB-85F1-E92A778C02F7}" => not found
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{A7C83879-7CBB-4CFA-A763-9ACE9184B38B}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{BE7C2D8E-360B-4582-86B1-22DE6D8E9478}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{253B2140-73C9-43E4-AE16-5772E1393EF5}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{97E47AE4-D534-4A71-AC1E-90ED8DDBF387}" => removed successfully

=========== EmptyTemp: ==========

BITS transfer queue => 10772480 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 244801457 B
Java, Flash, Steam htmlcache => 2107 B
Windows/system/drivers => 2674171 B
Edge => 1333385 B
Chrome => 521904971 B
Firefox => 1093806762 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 0 B
NetworkService => 37026 B
Petr => 261594474 B

RecycleBin => 1711330 B
EmptyTemp: => 2 GB temporary data Removed.

================================


The system needed a reboot.

==== End of Fixlog 22:54:34 ====

Smazáno. Nastala nějaká změna?

FPS se rapidně zvýšilo, nyní lze hrát i na vyšší detaily. A PC také zrychleno. Děkuji

Rádo se stalo!