Pomáháme v boji s počítačovou havěti!
https://forum.viry.cz:443/
Ulozte na plochu AdwCleaner https://malwarebytes.com/adwcleaner/ nebo http://www.bleepingcomputer.com/download/adwcleaner/
ukoncete vsechny programy
odsouhlaste licencni podmiky (EULA) klikem na Souhlasim
kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
kliknete na Skenovat nyni (Scan now), pote na Cisteni a opravy (Clean and Repair)
po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\Logs\AdwCleaner[Cxx].txt), jehoz obsah zkopirujte do pristi odpovedi
Uložte do C:\Users\Kubac\Downloads jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.Start
CloseProcesses:
HKLM\...\Run: [] => [X]
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [750680 2023-12-19] (Oracle America, Inc. -> Oracle Corporation)
HKU\S-1-5-21-2419319184-1576810062-3753799166-1002\...\Run: [microsoft] => C:\Users\Kubac\AppData\Roaming\microsoft\microsoft.exe [356352 2023-07-21] () [File not signed] <==== ATTENTION
HKU\S-1-5-21-2419319184-1576810062-3753799166-1002\...\MountPoints2: {70bedae5-5ac4-11ee-af73-44e51709dd13} - "E:\autorun.exe"
GroupPolicy: Restriction ? <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
Task: {7C472F86-2793-4B6B-95F1-FFAF7C765E8F} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem128.0.6537.0{9196F5A0-63E4-4A3F-BE7D-DDB3351355DA} => C:\Program Files (x86)\Google\GoogleUpdater\128.0.6537.0\updater.exe [4623976 2024-06-13] (Google LLC -> Google LLC)
Task: {7FC270C1-4B55-458C-AED6-5DE67608D4B6} - System32\Tasks\Microsoft\Windows\Bluetooth\temp => C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe [450560 2024-02-13] (Microsoft Windows -> Microsoft Corporation) -> -WindowStyle Hidden -File C:\Users\Public\temp.ps1 <==== ATTENTION
Task: {E0F10DCF-44AD-40E8-9370-FB5DA59F93FB} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
Task: {20891FF5-F0AA-44D0-AD13-CD31EE0BD7A8} - System32\Tasks\Microsoft\Windows\User Profile Service\HiveUploadTaskfMwqDK00s => C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe [450560 2024-02-13] (Microsoft Windows -> Microsoft Corporation) -> -WindowStyle Hidden -ExecutionPolicy Bypass -File "C:\WINDOWS\System32\6ADC.tmp\6ADD.tmp.ps1" <==== ATTENTION
Task: {4CFAF00E-87DE-4CF3-9251-4BD8270C72CA} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-2419319184-1576810062-3753799166-1001 => %localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe /reporting (No File)
Task: {EDDF7CD8-E3F6-4FFF-A725-84A043485B06} - System32\Tasks\WinRAR32 => "C:\Users\Kubac\AppData\Local\Microsoft\MSBuild\WinZip.exe" (No File)
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\desktop.ini:B1DA6C571C [3442]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access.lnk:A1B76439FE [3442]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop 2023.lnk:4A503CCB3B [3442]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\desktop.ini:41964AA945 [3442]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epic Games Launcher.lnk:BE32D07BC5 [3442]
FirewallRules: [TCP Query User{51899263-14E5-45CE-8E31-AB07AF0464B6}C:\program files (x86)\steam\steamapps\common\anvil playtest\anvil\binaries\win64\anvil-win64-shipping.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\anvil playtest\anvil\binaries\win64\anvil-win64-shipping.exe => No File
FirewallRules: [UDP Query User{D8C45526-C546-49CF-A115-71BEFDC40C73}C:\program files (x86)\steam\steamapps\common\anvil playtest\anvil\binaries\win64\anvil-win64-shipping.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\anvil playtest\anvil\binaries\win64\anvil-win64-shipping.exe => No File
FirewallRules: [{EEF78539-CA6D-46D7-9BE7-9402FAA84F61}] => (Allow) C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_4fc38a913e0f2ea5\ASUSLinkRemote\AsusLinkRemoteAgent.exe => No File
FirewallRules: [{30B0EDFC-B9B4-4280-8BF7-C253E805B4BF}] => (Allow) C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_4fc38a913e0f2ea5\ASUSLinkRemote\AsusLinkRemoteAgent.exe => No File
FirewallRules: [TCP Query User{41A1AB6F-54B1-4F1D-BBD1-FC1EA2CF75D8}D:\games\palworld early access\pal\binaries\win64\palworld-win64-shipping.exe] => (Allow) D:\games\palworld early access\pal\binaries\win64\palworld-win64-shipping.exe => No File
FirewallRules: [UDP Query User{692F90C0-645A-472B-9B19-5960C40B0A3A}D:\games\palworld early access\pal\binaries\win64\palworld-win64-shipping.exe] => (Allow) D:\games\palworld early access\pal\binaries\win64\palworld-win64-shipping.exe => No File
FirewallRules: [TCP Query User{CE4B1A9F-5DE6-4A9D-BA0D-B0E1EAD26683}C:\program files (x86)\steam\steamapps\common\palia\palia\binaries\win64\paliaclientsteam-win64-shipping.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\palia\palia\binaries\win64\paliaclientsteam-win64-shipping.exe => No File
FirewallRules: [UDP Query User{F39D9B79-04B4-4FC7-9E9C-1C8FF9FF977D}C:\program files (x86)\steam\steamapps\common\palia\palia\binaries\win64\paliaclientsteam-win64-shipping.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\palia\palia\binaries\win64\paliaclientsteam-win64-shipping.exe => No File
EmptyTemp:
Hosts:
End