Prosím o preventivní kontrolu notebooku

[Rudy]

Zdravím!
Spusťte tuto utilitu:

Ulozte na plochu AdwCleaner https://malwarebytes.com/adwcleaner/ nebo http://www.bleepingcomputer.com/download/adwcleaner/

ukoncete vsechny programy
odsouhlaste licencni podmiky (EULA) klikem na Souhlasim
kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
kliknete na Skenovat nyni (Scan now), pote na Cisteni a opravy (Clean and Repair)
po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\Logs\AdwCleaner[Cxx].txt), jehoz obsah zkopirujte do pristi odpovedi

[Rudy]

Dejte nové logy FRST+Addition.

[Rudy]

Otevřte poznámkový blok a zkopírujte do něj:

Start

CloseProcesses:
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
FirewallRules: [UDP Query User{0115EB1B-FF63-48CF-A91A-786244A882E0}C:\windows\files\bin\kmss.exe] => (Block) C:\windows\files\bin\kmss.exe No File
FirewallRules: [TCP Query User{3C7BDA6D-7DD8-4D51-893C-D43F63AA4643}C:\windows\files\bin\kmss.exe] => (Block) C:\windows\files\bin\kmss.exe No File
FirewallRules: [UDP Query User{05031A3F-E32C-4D01-9813-0F51955E2F18}C:\windows\files\bin\kmss.exe] => (Block) C:\windows\files\bin\kmss.exe No File
FirewallRules: [TCP Query User{1C675421-C006-46BC-9264-8B07C481383C}C:\windows\files\bin\kmss.exe] => (Block) C:\windows\files\bin\kmss.exe No File
FirewallRules: [UDP Query User{11B49025-754D-4AAE-8AC0-4CCA673F82A0}C:\windows\temp\files\bin\kmss.exe] => (Allow) C:\windows\temp\files\bin\kmss.exe No File
FirewallRules: [TCP Query User{2133BBCC-E549-4007-884B-B7F801855A8E}C:\windows\temp\files\bin\kmss.exe] => (Allow) C:\windows\temp\files\bin\kmss.exe No File
FirewallRules: [UDP Query User{E98B57DC-CECC-422F-8336-53E23D9AD584}C:\users\acies\appdata\roaming\bittorrent\bittorrent.exe] => (Block) C:\users\acies\appdata\roaming\bittorrent\bittorrent.exe No File
FirewallRules: [TCP Query User{95E840F3-6A0C-4408-B4E3-424AAB280598}C:\users\acies\appdata\roaming\bittorrent\bittorrent.exe] => (Block) C:\users\acies\appdata\roaming\bittorrent\bittorrent.exe No File
FirewallRules: [{E9951CCE-C48A-4EA4-A1F7-DF0ED79E1E5C}] => (Allow) C:\Users\acies\AppData\Roaming\uTorrent\uTorrent.exe No File
FirewallRules: [{AFFB5898-6743-46E8-B58D-99DCEAC66197}] => (Allow) C:\Users\acies\AppData\Roaming\uTorrent\uTorrent.exe No File
FirewallRules: [{6E0F08EC-EC12-47B4-BC06-84A684F43CF1}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe No File
FirewallRules: [{BC7D6235-0255-4A82-B238-1C5B874F3461}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe No File
FirewallRules: [{59190C45-5C85-461D-843F-B26F4FB3A23A}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe No File
FirewallRules: [{B87603D8-7266-42A1-9C9D-F4EC187625CE}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe No File
FirewallRules: [{EFABC865-0226-4926-AEFB-62878BAA1E55}] => (Allow) C:\Program Files (x86)\Common Files\Mcafee\MMSSHost\MMSSHost.exe No File
FirewallRules: [{FA06C81A-78A2-43F3-A25C-D9F73A25AD58}] => (Allow) C:\Program Files\Common Files\McAfee\MMSSHost\MMSSHost.exe No File
FirewallRules: [{308EE23A-E0CC-46F8-927A-727A161B515B}] => (Allow) C:\Users\acies\AppData\Local\Temp\EpInsNav\DL\3013\Network\EpsonNetSetup\Data\ENEasyApp.exe No File
FirewallRules: [{CDE116F3-0E28-4B91-B24F-1CEE2C0ABCC9}] => (Allow) C:\Users\acies\AppData\Local\Temp\EpInsNav\DL\3013\Network\EpsonNetSetup\Data\ENEasyApp.exe No File
C:\Windows\OInstall.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B3AD6C97-24EC-488F-A4A6-E0B948FD2E42}
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\OInstall
C:\WINDOWS\System32\Tasks\OInstall
C:\Users\acies\Desktop\Portable\AutoPico.exe
C:\Users\acies\Desktop\Portable\KMSELDI.exe
HKU\S-1-5-21-4030874342-1325992360-59384603-1001\...\MountPoints2: {58733cf1-0f5f-11ea-b190-b4d5bdb94177} - "F:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-4030874342-1325992360-59384603-1001\...\MountPoints2: {58733d55-0f5f-11ea-b190-b4d5bdb94177} - "F:\HiSuiteDownLoader.exe"
Task: {B3AD6C97-24EC-488F-A4A6-E0B948FD2E42} - System32\Tasks\OInstall => C:\WINDOWS\OInstall.exe [11995824 2016-12-06] () [File not signed]

EmtyTemp:
End

Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

[Rudy]

Omlovám se za překlep, budete muset spstit RSIT znovu. Skript:

Start

CloseProcesses:

EmptyTemp:
End

Po restartu PC sdělte, zda se problém zlepšil, či odstranil.

[Rudy]

OK, teď je to v pořádku. PC by již měl být čistý.

[Rudy]

Hezký den i vám a nemáte zač!