Pomáháme v boji s počítačovou havěti!
https://forum.viry.cz:443/
Ulozte na plochu AdwCleaner https://malwarebytes.com/adwcleaner/ nebo http://www.bleepingcomputer.com/download/adwcleaner/
ukoncete vsechny programy
odsouhlaste licencni podmiky (EULA) klikem na Souhlasim
kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
kliknete na Skenovat nyni (Scan now), pote na Cisteni a opravy (Clean and Repair)
po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\Logs\AdwCleaner[Cxx].txt), jehoz obsah zkopirujte do pristi odpovedi
Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.Start
CloseProcesses:
HKLM-x32\...\Run: [] => [X]
HKLM\Software\...\Authentication\Credential Providers: [{503739d0-4c5e-4cfd-b3ba-d881334f0df2}] ->
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
Task: {0C2CFFB2-DE37-4344-9097-2235ACE110D1} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-732140370-2414468103-320680840-1003UA => C:\Users\Y\AppData\Local\Google\Update\GoogleUpdate.exe [153168 2017-09-11] (Google Inc -> Google Inc.)
Task: {18F32394-5420-4B37-8EA2-887E4B0D4C07} - System32\Tasks\GoogleUpdateTaskMachineUA1d04227ec0368d4 => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-08-29] (Google Inc -> Google Inc.)
Task: {18F32394-5420-4B37-8EA2-887E4B0D4C07} - System32\Tasks\GoogleUpdateTaskMachineUA1d04227ec0368d4 => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-08-29] (Google Inc -> Google Inc.)
Task: {25D8F8C0-4AD8-4BDA-9BAE-2B5E6AC84235} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\WINDOWS\ehome\ehPrivJob.exe /DoRegisterSearch $(Arg0) (No File)
Task: {2DDC41D1-DEEA-4F51-A90F-C623B51A55BB} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-732140370-2414468103-320680840-1003UA1d57da09f9599ed => C:\Users\Y\AppData\Local\Google\Update\GoogleUpdate.exe [153168 2017-09-11] (Google Inc -> Google Inc.)
Task: {2F7FD1C9-2948-4FAF-993C-835849365F0E} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-732140370-2414468103-320680840-1003Core => C:\Users\Y\AppData\Local\Google\Update\GoogleUpdate.exe [153168 2017-09-11] (Google Inc -> Google Inc.)
Task: {38D057FE-6742-4011-8BA5-F21EC502222B} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe /OCURActivate (No File)
Task: {3F49AD80-139C-4FAC-A92F-4353C62885BB} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe $(Arg0) (No File)
Task: {4D4DF2F4-9B23-47A1-BAE0-DE7195DBD911} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe -MediaCenterRecoveryTask (No File)
Task: {4D8F09D7-36AF-466A-AEAF-88AE1DDEB6B8} - System32\Tasks\Lenovo\Lenovo Solution Center Launcher => C:\Program Files\Lenovo\Lenovo Solution Center\App\LSC.Services.UpdateStatusService.exe UpdateStatus (No File)
Task: {55EE5B33-E3E5-4435-86C6-6C60C4A4F8ED} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe /wait:90 /PBDADiscovery (No File)
Task: {5A8E1AE5-60D6-4344-A41E-2F54A4FFA0E6} - System32\Tasks\3DconnexionCreateProcess_3DxService.exe => C:\Program Files\3Dconnexion\3DxWare\3DxWinCore64\3DxService.exe (No File)
Task: {5AB894CE-6F27-41B6-B3D0-24DF8B2BBC3F} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe /DRMInit (No File)
Task: {5ADA4FF6-7705-46C3-900C-21842574B726} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe -ObjectStoreRecoveryTask (No File)
Task: {6544A722-F58C-462C-BE30-F2EBFE5D8D63} - System32\Tasks\DolbySelectorTask => C:\Program Files\Dolby Digital Plus\ddp.exe -autostart (No File)
Task: {6C53C967-3EAF-4BE3-B9F4-28E522F186DB} - System32\Tasks\Lenovo\LSC\LSCHardwareScanPostpone => C:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe -diag HWScan (No File)
Task: {6D6C9106-33BE-4EC5-9D17-B2DD69D68571} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\WINDOWS\ehome\ehPrivJob.exe /InstallPlayReady $(Arg0) (No File)
Task: {6E8947E3-A60D-4312-A666-869124B0A337} - System32\Tasks\Lenovo\Vantage\Schedule\VantageTelemetryAddinTask => C:\Program Files (x86)\Lenovo\VantageService\3.6.15.0\ScheduleEventAction.exe VantageTelemetryAddinTask (No File)
Task: {71EADA8C-1B43-470B-AF5D-3610C9D18635} - System32\Tasks\Lenovo\REACHit Agent Update => C:\Program Files (x86)\Lenovo\REACHit\REACHitAgent.exe -update (No File)
Task: {7cfb681b-ee17-4970-8069-73f3d6b25f6f} - no filepath
Task: {94BEF7C4-C10C-49D8-98DF-5385708CC01E} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe /DoRecoveryTasks $(Arg0) (No File)
Task: {95BB57AF-DFA2-44D0-9A0C-9359A01DE071} - System32\Tasks\Microsoft\Windows\rempl\shell-usoscan => C:\Program Files\rempl\remsh.exe /RunUsoScanOnly (No File)
Task: {9BCF8AF3-0B09-4871-8267-128A616466B0} - System32\Tasks\Lenovo\LSC\Lenovo Solution Center Notifications => C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe /show (No File)
Task: {A224093B-7012-4D2D-86A5-5257D8AC6633} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe /PBDADiscovery (No File)
Task: {A282D053-01B0-456C-BE41-A8FC6DB7A9F6} - System32\Tasks\Opera scheduled Autoupdate 1451260308 => C:\Program Files (x86)\TC UP\Plugins\Media\Opera\launcher.exe --scheduledautoupdate $(Arg0) (No File)
Task: {AB993A25-7952-4610-B226-D3CBE8B3D467} - System32\Tasks\GoogleUpdateTaskMachineUA1cfee32ff15bdf1 => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-08-29] (Google Inc -> Google Inc.)
Task: {B00EF09A-8851-415C-BE02-904A560F6187} - System32\Tasks\GoogleUpdateTaskMachineCore1d57dca4073ab27 => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-08-29] (Google Inc -> Google Inc.)
Task: {B3159A99-78FC-4ABE-89A5-0B85EDD7D2A1} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\WINDOWS\ehome\ehrec.exe /StartRecording (No File)
Task: {BEED5B3E-D5F0-4C60-9D9D-BACABBC21182} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe /DoConfigureInternetTimeService (No File)
Task: {C31B7E5A-1779-46B1-8D93-D1D47A5B8DC3} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\WINDOWS\ehome\mcupdate.exe -crl -hms -pscn 15 (No File)
Task: {C3720799-C372-4629-888F-E91C6A204E02} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\WINDOWS\ehome\ehrec.exe /RestartRecording (No File)
Task: {C6131993-13A7-4250-BFCD-F346EA780CAB} - System32\Tasks\Lenovo\LSC\LSCHardwareScan => C:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe -diag HWScan (No File)
Task: {C866053D-D902-4EAB-BD8E-371372BC4DA6} - System32\Tasks\PMTask => C:\Program Files (x86)\ThinkPad\Utilities\PwmIdTsv.exe (No File)
Task: {C9875F3A-ED26-47C6-998D-98639A845410} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe /DoReindexSearchRoot (No File)
Task: {CB14EFA1-7CB6-4E31-8FCF-A3658882BFE8} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe /DoActivateWindowsSearch (No File)
Task: {D22036A4-61B2-4AAB-8E1D-8DBBE7EC042C} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe /wait:7 /PBDADiscovery (No File)
Task: {D3F5124E-400D-4AAD-AB89-BA57A494D602} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\WINDOWS\ehome\ehPrivJob.exe /DoUpdateRecordPath $(Arg0) (No File)
Task: {D63924A2-7B33-4E9C-8DFE-A2F80538BF4A} - System32\Tasks\Microsoft\Windows\Onedrive\Onedrive Synchronization => C:\ProgramData\Microsoft Onedrive\OneDriveSync.exe (No File)
Task: {DAB11F84-1C42-4FD0-87D2-5FDDA3910F8C} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe -SqlLiteRecoveryTask (No File)
Task: {E1706985-ACBE-4CB6-B5E8-4CD024AB58DD} - System32\Tasks\BlueStacksHelper => C:\ProgramData\BlueStacks\Client\Helper\BlueStacksHelper.exe -sr (Access Denied) <==== ATTENTION
Task: {E9124753-0D65-491F-80C7-8E0C5A3EFD9E} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\WINDOWS\ehome\mcupdate.exe -PvrSchedule (No File)
Task: {E99D8EEF-BBE7-4FA3-9DA9-81B0B6F72906} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe -PvrRecoveryTask (No File)
Task: {ED4574CC-30A1-4417-A14A-40175B4C95F2} - System32\Tasks\Lenovo\REACHit Agent Startup => C:\Program Files (x86)\Lenovo\REACHit\REACHitAgent.exe /nobrowser (No File)
Task: {F85BAF33-17D8-4AE8-B1AA-899163933AC0} - \Microsoft\Windows\UNP\RunCampaignManager -> No File <==== ATTENTION
Task: {FA4E57F1-7583-403E-9356-FB8D4BB4049E} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\WINDOWS\ehome\MCUpdate.exe -pscn 0 (No File)
Task: {FC1AEECD-C825-4756-A8FD-87D211CB611A} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe /launch (No File)
Edge Extension: (No Name) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [not found]
Edge Extension: (No Name) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [not found]
Edge Extension: (No Name) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [not found]
Edge Extension: (No Name) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [not found]
CHR Profile: C:\Users\Y\AppData\Local\Google\Chrome\User Data\ChromeDefaultData [2022-05-06] <==== ATTENTION
C:\WINDOWS\system32\Tasks\GoogleUpdateTaskUserS-1-5-21-732140370-2414468103-320680840-1003UA1d57da09f9599ed
C:\WINDOWS\system32\Tasks\GoogleUpdateTaskUserS-1-5-21-732140370-2414468103-320680840-1003Core1d57da09f926586
C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA1d57dca40770605
C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore1d57dca4073ab27
C:\Users\Y\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
CustomCLSID: HKU\S-1-5-21-732140370-2414468103-320680840-1003_Classes\CLSID\{041F9391-C79D-44EE-AA4E-AF4E029C4B47}\InprocServer32 -> C:\Users\Y\AppData\Local\Google\Update\1.3.36.112\psuser_64.dll => No File
CustomCLSID: HKU\S-1-5-21-732140370-2414468103-320680840-1003_Classes\CLSID\{75399D28-E622-4973-8752-BC0F7DC47AF3}\InprocServer32 -> C:\Users\Y\AppData\Local\Google\Update\1.3.36.122\psuser_64.dll => No File
ShellIconOverlayIdentifiers: [SugarSyncBackedUp] -> {0C4A258A-3F3B-4FFF-80A7-9B3BEC139472} => -> No File
ShellIconOverlayIdentifiers: [SugarSyncPending] -> {62CCD8E3-9C21-41E1-B55E-1E26DFC68511} => -> No File
ShellIconOverlayIdentifiers: [SugarSyncRoot] -> {A759AFF6-5851-457D-A540-F4ECED148351} => -> No File
ShellIconOverlayIdentifiers: [SugarSyncShared] -> {1574C9EF-7D58-488F-B358-8B78C1538F51} => -> No File
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers1: [AIMP] -> {1F77B17B-F531-44DB-ACA4-76ABB5010A28} => -> No File
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => -> No File
ContextMenuHandlers1: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> No File
ContextMenuHandlers1: [SugarSync] -> {305BC11B-5175-492B-B569-866547FCDA40} => -> No File
ContextMenuHandlers3: [{4A7C4306-57E0-4C0C-83A9-78C1528F618C}] -> {4A7C4306-57E0-4C0C-83A9-78C1528F618C} => -> No File
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers4: [AIMP] -> {1F77B17B-F531-44DB-ACA4-76ABB5010A28} => -> No File
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
ContextMenuHandlers6: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> No File
ContextMenuHandlers6: [SugarSync] -> {305BC11B-5175-492B-B569-866547FCDA40} => -> No File
AlternateDataStreams: C:\ProgramData\Reprise:wupeogjxlctlfudivq`qsp`20hfm [0]
AlternateDataStreams: C:\ProgramData\TEMP:19EBF0D8 [179]
AlternateDataStreams: C:\ProgramData\TEMP:296515B3 [352]
AlternateDataStreams: C:\ProgramData\TEMP:7FBCBB5C [358]
AlternateDataStreams: C:\ProgramData\TEMP:DC9AE426 [175]
HKU\S-1-5-21-732140370-2414468103-320680840-1003\Software\Classes\.reg: => <==== ATTENTION
HKU\S-1-5-21-732140370-2414468103-320680840-1003\Software\Classes\.bat: => <==== ATTENTION
HKU\S-1-5-21-732140370-2414468103-320680840-1003\Software\Classes\.cmd: => <==== ATTENTION
HKU\S-1-5-21-732140370-2414468103-320680840-1003\Software\Classes\.scr: AutoCADScriptFile =>
earchScopes: HKU\S-1-5-21-732140370-2414468103-320680840-1003 -> {F053DF97-ADA5-4795-964C-3C08B2F0479B} URL =
HKU\S-1-5-21-732140370-2414468103-320680840-1003\Control Panel\Desktop\\Wallpaper ->
KLM\software\microsoft\Windows\CurrentVersion\Telephony\Providers => ProviderFileName2 -> ndptsp.tsp (No File)
FirewallRules: [{0C213EEB-CCD2-4E19-96DE-422061474D73}] => (Allow) C:\Program Files (x86)\InstallShield Installation Information\{FA285575-B543-4E6E-A573-A5F534AC9955}\mdtc.exe => No File
FirewallRules: [{E43C654C-0AAA-4A67-81A1-C380D42E3EBB}] => (Allow) C:\Program Files (x86)\InstallShield Installation Information\{FA285575-B543-4E6E-A573-A4F534AC9966}\Node.exe => No File
FirewallRules: [{AB204D5D-7F5E-44E0-BF5D-7C910CD21240}] => (Allow) G:\! game\Discovery Tour by Assassin's Creed Ancient Egypt\DiscoveryTourAncientEgypt_plus.exe => No File
FirewallRules: [{CA32949D-81A8-4362-AC18-AEB8D4796A85}] => (Allow) G:\! game\Discovery Tour by Assassin's Creed Ancient Egypt\DiscoveryTourAncientEgypt_plus.exe => No File
FirewallRules: [{EDE57092-43ED-4FED-B1E8-0EDD400E74F9}] => (Allow) G:\! game\Discovery Tour Ancient Greece by Ubisoft\ACOdyssey_plus.exe => No File
FirewallRules: [{64BF7590-376F-44FD-8B58-87228C7921EF}] => (Allow) G:\! game\Discovery Tour Ancient Greece by Ubisoft\ACOdyssey_plus.exe => No File
EmptyTemp:
Hosts:
End
