Jak se zbavit reklam? + screeny

srozumitelný a zaměřený na adware doplňky v prohlížeči je adwcleaner.
antivir bývá u adware spíš k ničemu.

děkuji brtník mi poradil adwcleaner a pomohlo to
můžu s klidem uzavřít.

Adblock + odvirovat pc

Ziaden adblock. Len odvirovat.

od včera se mi to taky objevilo, akorát mám Operu a nemůžu najít kde to mám odinstalovat - rozšíření nic a v pragramech odebrat není taky co.
Adwcleaner mi sice něco smazal ale reklamy tu mám stále, a už nevím co s tím mám dělat.. pomůže přeinstalovat prohlížeč?

Ne.
Pomuze citat si log z hijackthis (ptz evidentne bezis cez nejake proxy)

Running processes:
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Windows\SysWOW64\rundll32.exe
D:\Programy\Opera\22.0.1471.70\opera.exe
D:\Programy\Opera\22.0.1471.70\opera_crashreporter .exe
D:\Programy\Opera\22.0.1471.70\opera.exe
D:\Programy\Opera\22.0.1471.70\opera.exe
D:\Programy\Opera\22.0.1471.70\opera.exe
D:\Programy\Opera\22.0.1471.70\opera.exe
D:\Programy\Opera\22.0.1471.70\opera.exe
D:\Programy\Opera\22.0.1471.70\opera.exe
D:\Programy\Opera\22.0.1471.70\opera.exe
D:\Programy\Opera\22.0.1471.70\opera.exe
C:\Users\Jiří\Desktop\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = fwlink
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = p
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = p
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = fwlink
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = fwlink
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = p
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [Zoner Photo Studio Service 16] "D:\Programy\Photo Studio 16\Program32\ZPSTRAY.EXED:\Programy\Photo Studio 16\Program32\ZPSService.exe"
O4 - HKCU\..\Run: [Zoner Photo Studio Autoupdate] "D:\PROGRAMY\PHOTO STUDIO 16\Program32\ZPSTRAY.EXE"
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://D:\Programy\Office\Office14\EXCEL.EXE/3000
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O20 - AppInit_DLLs: c:\windows\syswow64\nvinit.dll

O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpda teService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Bluetooth Device Monitor - Motorola Solutions, Inc. - C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
O23 - Service: Bluetooth OBEX Service - Motorola Solutions, Inc. - C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) Wireless Bluetooth(R) 4.0 Radio Management - Intel Corporation - C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Network HTTP Support Service (NetHttpService) - Unknown owner - C:\Windows\SysWOW64\nethtsrv.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Service KMSELDI - Unknown owner - C:\Program Files\KMSpico\Service_KMS.exe
O23 - Service: Network Support Service Updater (ServiceUpdater) - Unknown owner - C:\Windows\SysWOW64\netupdsrv.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)

O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Stardock Start8 (Start8) - Stardock Software, Inc - C:\Program Files (x86)\Stardock\Start8\Start8Srv.exe
O23 - Service: TeamViewer 9 (TeamViewer9) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

nevidim tam nic, je dobre to ale spustat ako administrator v nudzaku, ptz vir sa moze aktivne skryvat. Druha moznost je ze mas v tej opere nastaveny nejaky proxy v nastaveniach, alebo nejak napadnutu (pozmenenu) samotnu operu.

Restartoval si windows po tom adwcleaneri?

ano, program si o to sám řekl

Nastavenia tej opery si uz kontroloval? Zameraj sa na polozku proxy. Nastav ziaden.

Resp. az na ten KMSpico, take veci mozu obsahovat backdoor a podobne, neni bezpecne pouzivat ilegalne veci.

prescanuj to este pomocou MBAM

tak mbam našel:
Processes: 2
PUP.Optional.NetworkUpdate.A, C:\Windows\SysWOW64\nethtsrv.exe, 1800, Delete-on-Reboot, [8b302159e2992c0a8a81b2f3c63c768a]
PUP.Optional.NetworkUpdate.A, C:\Windows\SysWOW64\netupdsrv.exe, 2552, Delete-on-Reboot, [d2e91e5c215aab8b10fc2382a2600000]

Modules: 0
(No malicious items detected)

Registry Keys: 3
PUP.Optional.NetworkUpdate.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\nethfdrv, Quarantined, [7447d9a14a313ef802082f7638caa060],
PUP.Optional.NetworkUpdate.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\NetHttpServ ice, Quarantined, [8b302159e2992c0a8a81b2f3c63c768a],
PUP.Optional.NetworkUpdate.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\ServiceUpda ter, Quarantined, [d2e91e5c215aab8b10fc2382a2600000],

Registry Values: 2
PUP.Optional.NetworkUpdate.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\NETHTTPSERV ICE|ImagePath, C:\Windows\SysWOW64\nethtsrv.exe, Quarantined, [f2c95a2095e61125dd087d80e91ad12f]
PUP.Optional.NetworkUpdate.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SERVICEUPDA TER|ImagePath, C:\Windows\SysWOW64\netupdsrv.exe, Quarantined, [c2f9daa0e5961a1cd1157a83ed16b24e]

Registry Data: 0
(No malicious items detected)

Folders: 0
(No malicious items detected)

Files: 4
PUP.Optional.Amonetize.A, C:\Users\JiA?A­\AppData\Local\15387\a30278.exe, Quarantined, [f7c4fc7e52292610254775cef30d1fe1],
PUP.Optional.NetworkUpdate.A, C:\Windows\System32\drivers\nethfdrv.sys, Quarantined, [7447d9a14a313ef802082f7638caa060],
PUP.Optional.NetworkUpdate.A, C:\Windows\SysWOW64\nethtsrv.exe, Delete-on-Reboot, [8b302159e2992c0a8a81b2f3c63c768a],
PUP.Optional.NetworkUpdate.A, C:\Windows\SysWOW64\netupdsrv.exe, Delete-on-Reboot, [d2e91e5c215aab8b10fc2382a2600000],

Physical Sectors: 0
(No malicious items detected)

C:\Windows\SysWOW64\rundll32.exe

spouštíš možná něco, co nemáš.
podezřelejší to bývá při automatickém spouštění. ale hijackthis nic neukazuje - něco si to může spustit až podle potřeby, to je obvykle ok.

aha to som si nevsimol, ono to moze byt fake to exe. Ale nikde naspodku nevidim odkial by sa to malo spustat, tam su vsetky veci uvedene detailne (t.j. predpokladam ze tpo spusta nejake to nvinit.dll apod, ale ano moze to byt aj fake exe)

tak jo MBAM pomohl, díky za pomoc!

To si mal ale zavirene normalne procesy, takze ti zrejme nieco asi nebude fungovat (tiupjem nieco co nepouzivas)

Aha ne, to neboli normalne procesy. To je tak ked sa mi nechcelo kazdu polozku z hijackthis davat do google, a svine to nazvali podobne jak original :D

je to obyčejnej vir. stačí odvirovat, měl jsem ho taky