VIRY.CZ

Zdravím
chtěl bych požádat o kontrolu logu kvůli chybnému načítání některých stránek ve všech prohlížečích. Např pokud na stránce viry.cz kliknu nahoře na forum, stránka hodí chybu v nadpisu a v adresním řádku je pokud si ale nechám vyhledat viry forum a ve výsledcích hledání kliknu na odkaz fora, stránka se načte v porádku.

přikládám log z FRST Děkuji

Zdravím!
Spusťte tuto utilitu:

Ulozte na plochu AdwCleaner https://malwarebytes.com/adwcleaner/ nebo http://www.bleepingcomputer.com/download/adwcleaner/

ukoncete vsechny programy
odsouhlaste licencni podmiky (EULA) klikem na Souhlasim
kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
kliknete na Skenovat nyni (Scan now), pote na Cisteni a opravy (Clean and Repair)
po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\Logs\AdwCleaner[Cxx].txt), jehoz obsah zkopirujte do pristi odpovedi

adwcleaner nic nenašel

# -------------------------------
# Malwarebytes AdwCleaner 8.0.9.1
# -------------------------------
# Build: 01-20-2021
# Database: 2021-01-26.1 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Scan
# -------------------------------
# Start: 02-11-2021
# Duration: 00:00:22
# OS: Windows 7 Professional
# Scanned: 31956
# Detected: 0


***** [ Services ] *****

No malicious services found.

***** [ Folders ] *****

No malicious folders found.

***** [ Files ] *****

No malicious files found.

***** [ DLL ] *****

No malicious DLLs found.

***** [ WMI ] *****

No malicious WMI found.

***** [ Shortcuts ] *****

No malicious shortcuts found.

***** [ Tasks ] *****

No malicious tasks found.

***** [ Registry ] *****

No malicious registry entries found.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries found.

***** [ Chromium URLs ] *****

No malicious Chromium URLs found.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries found.

***** [ Firefox URLs ] *****

No malicious Firefox URLs found.

***** [ Hosts File Entries ] *****

No malicious hosts file entries found.

***** [ Preinstalled Software ] *****

No Preinstalled Software found.



########## EOF - C:\AdwCleaner\Logs\AdwCleaner[S00].txt ##########

Toto je OK. Otevřte poznámkový blok a zkopírujte do něj:

Start

CloseProcesses:
HKU\S-1-5-21-2743658272-2498043693-175609155-1000\...\MountPoints2: {8c45eb9a-90e9-11ea-901b-005056c00008} - F:\HiSuiteDownLoader.exe
HKU\S-1-5-21-2743658272-2498043693-175609155-1000\...\MountPoints2: {8c45eb9e-90e9-11ea-901b-005056c00008} - F:\HiSuiteDownLoader.exe
Task: {5ACA3544-EAB4-4A93-B286-0128BC1741AE} - System32\Tasks\KMSAutoNet => C:\ProgramData\KMSAutoS\KMSAuto Net.exe [6977272 2015-08-10] (Ratiborus MSFree Inc. -> MSFree Inc.) [File not signed]
C:\ProgramData\KMSAutoS
Task: {93776702-EA37-495D-83C0-B40A6B88D142} - System32\Tasks\{74642BCD-E40B-4950-BD2C-422AA19592C2} => C:\Windows\system32\pcalua.exe -a "C:\Program Files (x86)\MecSoft Corporation\VisualMill 5.0\RainbowInstaller.exe" -d "C:\Program Files (x86)\MecSoft Corporation\VisualMill 5.0"
Task: {F3D984B0-1E86-4621-818D-C9F7896C91A5} - System32\Tasks\{7D9D1358-2701-4BB1-91ED-F1C64CAA0B8E} => C:\Windows\system32\pcalua.exe -a C:\Kovoprog_install\SETUP.EXE -d C:\Kovoprog_install
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
R3 TermService; C:\Program Files\RDP Wrapper\rdpwrap.dll [116736 2019-06-03] (Stas'M Corp.) [File not signed] <==== ATTENTION (no ServiceDLL)
C:\Users\CAM\AppData\Roaming\1eb766f2-fed1-4d33-9c39-2c8a972fd11f
C:\Users\CAM\AppData\Roaming\4e93aa11-2d46-4980-a421-0a4ac759e5bf
C:\Users\CAM\AppData\Roaming\822f02e4-9e9a-4077-a765-71edfca16ad0
C:\Users\CAM\AppData\Roaming\88e9dc3a-641c-4dc2-9204-9ba65cc42265
C:\Users\CAM\AppData\Roaming\fc19ece2-6b3f-4f22-8758-9651ab9ca388
ContextMenuHandlers2: [VMDiskMenuHandler] -> [CC]{271DC252-6FE1-4D59-9053-E4CF50AB99DE} => -> No File
ContextMenuHandlers2: [VMDiskMenuHandler64] -> [CC]{E4D28EDC-8C0B-43EE-9E7D-C8A8682334DC} => -> No File
AlternateDataStreams: C:\Users\CAM:zylomtest [0]
AlternateDataStreams: C:\Users\CAM:zylomtr{00013KEU-UKQE-K6V0-70L9-2A8RJ1B4CV8M} [38]

EmptyTemp:
Hosts:
End

Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

problém se zlepšil trochu už včera po přeinstalaci prohlížečů
teď po použití FRST to zatím vypadá OK
log
Fix result of Farbar Recovery Scan Tool (x64) Version: 08-02-2021 01
Ran by CAM (12-02-2021 06:09:38) Run:1
Running from C:\Users\CAM\Desktop
Loaded Profiles: CAM & ReportServer$MOJEDB
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start

CloseProcesses:
HKU\S-1-5-21-2743658272-2498043693-175609155-1000\...\MountPoints2: {8c45eb9a-90e9-11ea-901b-005056c00008} - F:\HiSuiteDownLoader.exe
HKU\S-1-5-21-2743658272-2498043693-175609155-1000\...\MountPoints2: {8c45eb9e-90e9-11ea-901b-005056c00008} - F:\HiSuiteDownLoader.exe
Task: {5ACA3544-EAB4-4A93-B286-0128BC1741AE} - System32\Tasks\KMSAutoNet => C:\ProgramData\KMSAutoS\KMSAuto Net.exe [6977272 2015-08-10] (Ratiborus MSFree Inc. -> MSFree Inc.) [File not signed]
C:\ProgramData\KMSAutoS
Task: {93776702-EA37-495D-83C0-B40A6B88D142} - System32\Tasks\{74642BCD-E40B-4950-BD2C-422AA19592C2} => C:\Windows\system32\pcalua.exe -a "C:\Program Files (x86)\MecSoft Corporation\VisualMill 5.0\RainbowInstaller.exe" -d "C:\Program Files (x86)\MecSoft Corporation\VisualMill 5.0"
Task: {F3D984B0-1E86-4621-818D-C9F7896C91A5} - System32\Tasks\{7D9D1358-2701-4BB1-91ED-F1C64CAA0B8E} => C:\Windows\system32\pcalua.exe -a C:\Kovoprog_install\SETUP.EXE -d C:\Kovoprog_install
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
R3 TermService; C:\Program Files\RDP Wrapper\rdpwrap.dll [116736 2019-06-03] (Stas'M Corp.) [File not signed] <==== ATTENTION (no ServiceDLL)
C:\Users\CAM\AppData\Roaming\1eb766f2-fed1-4d33-9c39-2c8a972fd11f
C:\Users\CAM\AppData\Roaming\4e93aa11-2d46-4980-a421-0a4ac759e5bf
C:\Users\CAM\AppData\Roaming\822f02e4-9e9a-4077-a765-71edfca16ad0
C:\Users\CAM\AppData\Roaming\88e9dc3a-641c-4dc2-9204-9ba65cc42265
C:\Users\CAM\AppData\Roaming\fc19ece2-6b3f-4f22-8758-9651ab9ca388
ContextMenuHandlers2: [VMDiskMenuHandler] -> [CC]{271DC252-6FE1-4D59-9053-E4CF50AB99DE} => -> No File
ContextMenuHandlers2: [VMDiskMenuHandler64] -> [CC]{E4D28EDC-8C0B-43EE-9E7D-C8A8682334DC} => -> No File
AlternateDataStreams: C:\Users\CAM:zylomtest [0]
AlternateDataStreams: C:\Users\CAM:zylomtr{00013KEU-UKQE-K6V0-70L9-2A8RJ1B4CV8M} [38]

EmptyTemp:
Hosts:
End
*****************

Processes closed successfully.
HKU\S-1-5-21-2743658272-2498043693-175609155-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{8c45eb9a-90e9-11ea-901b-005056c00008} => removed successfully
HKU\S-1-5-21-2743658272-2498043693-175609155-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{8c45eb9e-90e9-11ea-901b-005056c00008} => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{5ACA3544-EAB4-4A93-B286-0128BC1741AE}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5ACA3544-EAB4-4A93-B286-0128BC1741AE}" => removed successfully
C:\Windows\System32\Tasks\KMSAutoNet => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\KMSAutoNet" => removed successfully
C:\ProgramData\KMSAutoS => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{93776702-EA37-495D-83C0-B40A6B88D142}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{93776702-EA37-495D-83C0-B40A6B88D142}" => removed successfully
C:\Windows\System32\Tasks\{74642BCD-E40B-4950-BD2C-422AA19592C2} => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{74642BCD-E40B-4950-BD2C-422AA19592C2}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F3D984B0-1E86-4621-818D-C9F7896C91A5}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F3D984B0-1E86-4621-818D-C9F7896C91A5}" => removed successfully
C:\Windows\System32\Tasks\{7D9D1358-2701-4BB1-91ED-F1C64CAA0B8E} => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{7D9D1358-2701-4BB1-91ED-F1C64CAA0B8E}" => removed successfully
HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE => removed successfully
HKLM\Software\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE => removed successfully
TermService => Unable to stop service.
HKLM\System\CurrentControlSet\Services\TermService => removed successfully
TermService => service removed successfully
C:\Users\CAM\AppData\Roaming\1eb766f2-fed1-4d33-9c39-2c8a972fd11f => moved successfully
C:\Users\CAM\AppData\Roaming\4e93aa11-2d46-4980-a421-0a4ac759e5bf => moved successfully
C:\Users\CAM\AppData\Roaming\822f02e4-9e9a-4077-a765-71edfca16ad0 => moved successfully
C:\Users\CAM\AppData\Roaming\88e9dc3a-641c-4dc2-9204-9ba65cc42265 => moved successfully
C:\Users\CAM\AppData\Roaming\fc19ece2-6b3f-4f22-8758-9651ab9ca388 => moved successfully
HKLM\Software\Classes\Drive\ShellEx\ContextMenuHandlers\VMDiskMenuHandler => removed successfully
HKLM\Software\Classes\Drive\ShellEx\ContextMenuHandlers\VMDiskMenuHandler64 => removed successfully
C:\Users\CAM => ":zylomtest" ADS removed successfully
C:\Users\CAM => ":zylomtr{00013KEU-UKQE-K6V0-70L9-2A8RJ1B4CV8M}" ADS removed successfully
C:\Windows\System32\Drivers\etc\hosts => moved successfully
Hosts restored successfully.

=========== EmptyTemp: ==========

BITS transfer queue => 8388608 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 11077015 B
Java, Flash, Steam htmlcache => 1173 B
Windows/system/drivers => 0 B
Edge => 0 B
Chrome => 89134678 B
Firefox => 0 B
Opera => 383677287 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
Public => 0 B
ProgramData => 0 B
systemprofile => 66228 B
systemprofile32 => 132584 B
LocalService => 3857121 B
NetworkService => 3925023 B
CAM => 262727101 B
MSSQL$MOJEDB => 262727101 B
MSSQLFDLauncher$MOJEDB => 262727101 B
ReportServer$MOJEDB => 262727101 B

RecycleBin => 0 B
EmptyTemp: => 1.4 GB temporary data Removed.

================================


The system needed a reboot.

==== End of Fixlog 06:10:03 ====

Bylo smazáno, jsem rád, že to pomohlo.

Děkuji mnohokrát za pomoc.

Rádo se stalo!