virus
Napsal: 17 lis 2019 18:39
dobrý den, prosím o pomoc, na ntb mi vyskakují nechtěné reklamy a nesmysly. děkuji
Zdravím!
Dejte logy FRST+Addition: https://forum.viry.cz/viewtopic.php?f=13&t=154679 .
Uložte do C:\Users\HP\Desktop\počítač jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.Start
CloseProcesses:
HKU\S-1-5-21-1126848200-3294470291-449396944-1002\...\MountPoints2: G - "G:\Lenovo_Suite.exe"
HKU\S-1-5-21-1126848200-3294470291-449396944-1002\...\MountPoints2: {68b46399-f969-11e9-81a6-806e6f6e6963} - "G:\Lenovo_Suite.exe"
Task: {184CC142-CF49-4AE6-9EA6-E7CDCDDEB84B} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-11-01] (Google Inc -> Google Inc.)
Task: {463374BC-511B-42C3-87D2-DA8530B5F703} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-11-01] (Google Inc -> Google Inc.)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll No File
C:\Program Files (x86)\GUTE987.tmp
C:\Users\HP\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
C:\Users\HP\AppData\Local\{29709453-A756-444E-8ED9-C2C34FFDF76C}
C:\Users\HP\AppData\Local\{2CE45DA6-47D4-4DF2-9545-E685330DCEFF}
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
AlternateDataStreams: C:\3590F75ABA9E485486C100C1A9D4FF06Z.ZZ.ZZ.Z.Z.ZZZZ:1 [882]
FirewallRules: [{5591A3EE-62B7-4648-A612-922AAABA306B}] => (Allow) C:\Users\HP\AppData\Local\Programs\Opera\56.0.3051.116\opera.exe No File
FirewallRules: [{6C812073-D503-4480-80F5-D7D5A81B31AE}] => (Allow) %systemroot%\system32\alg.exe No File
FirewallRules: [{F6B28427-AE68-4F2A-AB7F-0D42DD32AB5E}] => (Allow) C:\Program Files (x86)\AVG\Antivirus\AvEmUpdate.exe No File
FirewallRules: [{A627C4E9-5081-43B5-AD11-D159B4C00E2C}] => (Allow) C:\Program Files (x86)\AVG\Antivirus\AvEmUpdate.exe No File
FirewallRules: [{0CE57A10-3C7B-49A0-ABE4-985EA87EF846}] => (Allow) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe No File
FirewallRules: [{5BCB1EAA-F799-4287-831E-95979161EAB8}] => (Allow) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe No File
EmptyTemp:
End
autoclean;
resethosts;
emptyclsid;
IEdefaults;
FFdefaults;
CHRdefaults;
emptyIEcache;
emptyFFcache;
emptyCHRcache;
emptyalltemp;
emptyflash;
emptyjava;
emptyrecycle.bin;