VIRY.CZ

viz. příloha....

Zdravím!
Spusťte tuto utilitu:

Ulozte na plochu AdwCleaner https://malwarebytes.com/adwcleaner/ nebo http://www.bleepingcomputer.com/download/adwcleaner/

ukoncete vsechny programy
odsouhlaste licencni podmiky (EULA) klikem na Souhlasim
kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
kliknete na Skenovat nyni (Scan now), pote na Cisteni a opravy (Clean and Repair)
po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\Logs\AdwCleaner[Cxx].txt), jehoz obsah zkopirujte do pristi odpovedi

# -------------------------------
# Malwarebytes AdwCleaner 8.0.6.0
# -------------------------------
# Build: 06-24-2020
# Database: 2020-06-15.1 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Scan
# -------------------------------
# Start: 07-09-2020
# Duration: 00:00:20
# OS: Windows 7 Professional
# Scanned: 31836
# Detected: 0


***** [ Services ] *****

No malicious services found.

***** [ Folders ] *****

No malicious folders found.

***** [ Files ] *****

No malicious files found.

***** [ DLL ] *****

No malicious DLLs found.

***** [ WMI ] *****

No malicious WMI found.

***** [ Shortcuts ] *****

No malicious shortcuts found.

***** [ Tasks ] *****

No malicious tasks found.

***** [ Registry ] *****

No malicious registry entries found.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries found.

***** [ Chromium URLs ] *****

No malicious Chromium URLs found.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries found.

***** [ Firefox URLs ] *****

No malicious Firefox URLs found.

***** [ Hosts File Entries ] *****

No malicious hosts file entries found.

***** [ Preinstalled Software ] *****

No Preinstalled Software found.


AdwCleaner[S00].txt - [1491 octets] - [09/07/2020 23:19:07]
AdwCleaner[C00].txt - [1641 octets] - [09/07/2020 23:19:27]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[S01].txt ##########

Toto je OK. Otevřte poznámkový blok a zkopírujte do něj:

Start

CloseProcesses:
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
C:\Users\h&v\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
CustomCLSID: HKU\S-1-5-21-3781252325-4081640839-3782237872-1000_Classes\CLSID\{1BF42E4C-4AF4-4CFD-A1A0-CF2960B8F63E}\InprocServer32 -> C:\Users\h&v\AppData\Local\Microsoft\OneDrive\19.152.0927.0012\amd64\FileSyncShell64.dll => No File
FirewallRules: [{2DCECFF2-E73E-47F1-9DD0-1C00AB24CA78}] => (Allow) E:\Games\World_of_Tanks\WoTLauncher.exe => No File
FirewallRules: [{960B1693-AF28-4B1A-9117-43AA751AB752}] => (Allow) E:\Games\World_of_Tanks\WoTLauncher.exe => No File
FirewallRules: [{EA81944A-5603-4F4F-934E-6C0714725372}] => (Allow) E:\Games\World_of_Tanks\worldoftanks.exe => No File
FirewallRules: [{E35F91E3-B727-4B62-A5D6-C6DAE84FC0E2}] => (Allow) E:\Games\World_of_Tanks\worldoftanks.exe => No File
FirewallRules: [{E30C283E-1A74-4D5A-AC81-72B3FE31E091}] => (Allow) E:\lego\MindstormsEV3.exe => No File
FirewallRules: [{FBA1322D-7723-478A-A163-BE443A921C1A}] => (Allow) E:\lego\MindstormsEV3.exe => No File
FirewallRules: [TCP Query User{98274CEC-9017-4E93-985A-DA199994A9BD}E:\lego\mindstormsev3.exe] => (Allow) E:\lego\mindstormsev3.exe => No File
FirewallRules: [UDP Query User{D5EF9953-29E7-4BBB-9E1E-016BFE10F6A2}E:\lego\mindstormsev3.exe] => (Allow) E:\lego\mindstormsev3.exe => No File
FirewallRules: [TCP Query User{F9C1397B-D25B-4A31-B468-978FFDF8BABE}C:\games\world_of_tanks\wotlauncher.exe] => (Allow) C:\games\world_of_tanks\wotlauncher.exe => No File
FirewallRules: [UDP Query User{91474C20-9C68-4ABC-98B7-ACE0FE36947A}C:\games\world_of_tanks\wotlauncher.exe] => (Allow) C:\games\world_of_tanks\wotlauncher.exe => No File
FirewallRules: [TCP Query User{9A412749-8EE1-4182-9EBD-4AD9F8C21B65}C:\games\world_of_tanks\worldoftanks.exe] => (Allow) C:\games\world_of_tanks\worldoftanks.exe => No File
FirewallRules: [UDP Query User{B98CDC29-4056-46F5-AD0C-4B037D9E22BC}C:\games\world_of_tanks\worldoftanks.exe] => (Allow) C:\games\world_of_tanks\worldoftanks.exe => No File
FirewallRules: [{F353C3A1-9DAD-47A3-A18F-CD84102CD61B}] => (Allow) C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv.exe => No File
FirewallRules: [{F61C31AA-122B-45FE-99F7-EEEAF5FCAF21}] => (Allow) C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv.exe => No File
FirewallRules: [{90C17A91-0E35-46DB-B663-B4A801065953}] => (Allow) C:\Users\h&v\AppData\Local\Temp\7zS7F18\HP.EasyStart.exe => No File
FirewallRules: [{AF71C827-F873-44A4-A514-1D9499F9BA6A}] => (Allow) C:\Users\h&v\AppData\Roaming\Zoom\bin\Zoom.exe => No File
FirewallRules: [{B3B89E7B-14A8-456B-8821-4061CFC84AE8}] => (Allow) C:\Users\h&v\AppData\Roaming\Zoom\bin\airhost.exe => No File
C:\Users\h&v\AppData\Local\Temp

EmptyTemp:
End

Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

Omlouvám se za pozdější reakci, ale včera vůbec nenaběhly vaše stránky....
Fix result of Farbar Recovery Scan Tool (x64) Version: 08-07-2020 01
Ran by h&v (11-07-2020 08:56:13) Run:1
Running from C:\Users\h&v\Desktop
Loaded Profiles: h&v
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start

CloseProcesses:
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
C:\Users\h&v\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
CustomCLSID: HKU\S-1-5-21-3781252325-4081640839-3782237872-1000_Classes\CLSID\{1BF42E4C-4AF4-4CFD-A1A0-CF2960B8F63E}\InprocServer32 -> C:\Users\h&v\AppData\Local\Microsoft\OneDrive\19.152.0927.0012\amd64\FileSyncShell64.dll => No File
FirewallRules: [{2DCECFF2-E73E-47F1-9DD0-1C00AB24CA78}] => (Allow) E:\Games\World_of_Tanks\WoTLauncher.exe => No File
FirewallRules: [{960B1693-AF28-4B1A-9117-43AA751AB752}] => (Allow) E:\Games\World_of_Tanks\WoTLauncher.exe => No File
FirewallRules: [{EA81944A-5603-4F4F-934E-6C0714725372}] => (Allow) E:\Games\World_of_Tanks\worldoftanks.exe => No File
FirewallRules: [{E35F91E3-B727-4B62-A5D6-C6DAE84FC0E2}] => (Allow) E:\Games\World_of_Tanks\worldoftanks.exe => No File
FirewallRules: [{E30C283E-1A74-4D5A-AC81-72B3FE31E091}] => (Allow) E:\lego\MindstormsEV3.exe => No File
FirewallRules: [{FBA1322D-7723-478A-A163-BE443A921C1A}] => (Allow) E:\lego\MindstormsEV3.exe => No File
FirewallRules: [TCP Query User{98274CEC-9017-4E93-985A-DA199994A9BD}E:\lego\mindstormsev3.exe] => (Allow) E:\lego\mindstormsev3.exe => No File
FirewallRules: [UDP Query User{D5EF9953-29E7-4BBB-9E1E-016BFE10F6A2}E:\lego\mindstormsev3.exe] => (Allow) E:\lego\mindstormsev3.exe => No File
FirewallRules: [TCP Query User{F9C1397B-D25B-4A31-B468-978FFDF8BABE}C:\games\world_of_tanks\wotlauncher.exe] => (Allow) C:\games\world_of_tanks\wotlauncher.exe => No File
FirewallRules: [UDP Query User{91474C20-9C68-4ABC-98B7-ACE0FE36947A}C:\games\world_of_tanks\wotlauncher.exe] => (Allow) C:\games\world_of_tanks\wotlauncher.exe => No File
FirewallRules: [TCP Query User{9A412749-8EE1-4182-9EBD-4AD9F8C21B65}C:\games\world_of_tanks\worldoftanks.exe] => (Allow) C:\games\world_of_tanks\worldoftanks.exe => No File
FirewallRules: [UDP Query User{B98CDC29-4056-46F5-AD0C-4B037D9E22BC}C:\games\world_of_tanks\worldoftanks.exe] => (Allow) C:\games\world_of_tanks\worldoftanks.exe => No File
FirewallRules: [{F353C3A1-9DAD-47A3-A18F-CD84102CD61B}] => (Allow) C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv.exe => No File
FirewallRules: [{F61C31AA-122B-45FE-99F7-EEEAF5FCAF21}] => (Allow) C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv.exe => No File
FirewallRules: [{90C17A91-0E35-46DB-B663-B4A801065953}] => (Allow) C:\Users\h&v\AppData\Local\Temp\7zS7F18\HP.EasyStart.exe => No File
FirewallRules: [{AF71C827-F873-44A4-A514-1D9499F9BA6A}] => (Allow) C:\Users\h&v\AppData\Roaming\Zoom\bin\Zoom.exe => No File
FirewallRules: [{B3B89E7B-14A8-456B-8821-4061CFC84AE8}] => (Allow) C:\Users\h&v\AppData\Roaming\Zoom\bin\airhost.exe => No File
C:\Users\h&v\AppData\Local\Temp

EmptyTemp:
End
*****************

Processes closed successfully.
HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE => removed successfully
HKLM\Software\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE => removed successfully
C:\Users\h&v\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini => moved successfully
HKU\S-1-5-21-3781252325-4081640839-3782237872-1000_Classes\CLSID\{1BF42E4C-4AF4-4CFD-A1A0-CF2960B8F63E} => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{2DCECFF2-E73E-47F1-9DD0-1C00AB24CA78}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{960B1693-AF28-4B1A-9117-43AA751AB752}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{EA81944A-5603-4F4F-934E-6C0714725372}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{E35F91E3-B727-4B62-A5D6-C6DAE84FC0E2}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{E30C283E-1A74-4D5A-AC81-72B3FE31E091}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{FBA1322D-7723-478A-A163-BE443A921C1A}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{98274CEC-9017-4E93-985A-DA199994A9BD}E:\lego\mindstormsev3.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{D5EF9953-29E7-4BBB-9E1E-016BFE10F6A2}E:\lego\mindstormsev3.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{F9C1397B-D25B-4A31-B468-978FFDF8BABE}C:\games\world_of_tanks\wotlauncher.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{91474C20-9C68-4ABC-98B7-ACE0FE36947A}C:\games\world_of_tanks\wotlauncher.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{9A412749-8EE1-4182-9EBD-4AD9F8C21B65}C:\games\world_of_tanks\worldoftanks.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{B98CDC29-4056-46F5-AD0C-4B037D9E22BC}C:\games\world_of_tanks\worldoftanks.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{F353C3A1-9DAD-47A3-A18F-CD84102CD61B}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{F61C31AA-122B-45FE-99F7-EEEAF5FCAF21}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{90C17A91-0E35-46DB-B663-B4A801065953}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{AF71C827-F873-44A4-A514-1D9499F9BA6A}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{B3B89E7B-14A8-456B-8821-4061CFC84AE8}" => removed successfully

"C:\Users\h&v\AppData\Local\Temp" folder move:

Could not move "C:\Users\h&v\AppData\Local\Temp" => Scheduled to move on reboot.


=========== EmptyTemp: ==========

BITS transfer queue => 8388608 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 41163242 B
Java, Flash, Steam htmlcache => 87593299 B
Windows/system/drivers => 24054586 B
Edge => 0 B
Chrome => 697130019 B
Firefox => 325155094 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Users => 0 B
Default => 0 B
Public => 0 B
ProgramData => 0 B
systemprofile => 83565 B
systemprofile32 => 150353 B
LocalService => 216581 B
NetworkService => 540283 B
h&v => 4331189532 B

RecycleBin => 232263 B
EmptyTemp: => 5.1 GB temporary data Removed.

================================

Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 11-07-2020 09:21:52)

C:\Users\h&v\AppData\Local\Temp => moved successfully

==== End of Fixlog 09:21:52 ====

Smazáno. Nastala nějaká změna?

Uvidíme, začnu večer testovat a zítra dám vědět. Děkuji každopádně za rady.

Zatím nemáte zač!

Tak frčíme. Ještě jednou moc děkuji.

Rádo se stalo!