ads by JELLYSHARK (virus?)

https://toolslib.net/downloads/viewdownload/1-adwc leaner/

zkusím, hodím ještě echo jak to dopadlo.. díky

nepomohlo ...

Tak ještě MBAM: mwb-download
Mimochodem, ten adwcleaner generuje po skončení protokol - vložte nám ho sem.

Norman Malware Cleaner v2.08.08
Copyright © 1990 - 2013, Norman Shark AS.

Norman Scanner Engine Version: 7.04.04
nvcbin.def: Version: 7.04.8829, Date: 2014/08/24 07:16:17, Variants: 29491849

Operating System: Windows 7 Service Pack 1 x64

Switches: /iagree

Scan started: 2015/11/27 12:35:39

Running pre-scan cleanup routine...

Number of malicious objects found: 0
Number of malicious objects cleaned: 0
Scanning time: 0s

Scanning running processes and process memory...

Number of files found: 469
Number of objects found: 2568
Number of objects scanned: 2568
Number of objects not scanned: 0
Number of malicious memory objects found: 0
Number of malicious objects cleaned: 0
Number of malicious files found: 0
Number of malicious files cleaned: 0
Scanning time: 1m 10s

Scanning system for FakeAV...

Number of malicious objects found: 0
Number of malicious objects cleaned: 0
Number of malicious files found: 0
Number of malicious files cleaned: 0
Scanning time: 1s

Running quick scan...
C:\Windows\BlackBox.exe: Error opening file for read: 0x00000005
C:\Windows\svch.exe: Error opening file for read: 0x00000005
C:\Windows\svchus.exe: Error opening file for read: 0x00000005
C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E 1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0: Error opening file for read: 0x00000020
C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E 1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0: Error opening file for read: 0x00000020
C:\Windows\SysWOW64\rlls.dll: Potentially unwanted program (winpe/RelevantKnowledge.DYM)
Delete file: C:\Windows\SysWOW64\rlls.dll
Cleaning successful

Number of files found: 6863
Number of archives unpacked: 8
Number of objects found: 6949
Number of objects scanned: 6944
Number of objects not scanned: 5
Number of malicious objects found: 1
Number of malicious objects cleaned: 1
Number of malicious files found: 1
Number of malicious files cleaned: 1
Scanning time: 7m 48s

Running post-scan cleanup routine...

Number of malicious objects found: 0
Number of malicious objects cleaned: 0
Scanning time: 0s

Results:
Total number of files found: 7332
Total number of archives unpacked: 8
Total number of objects found: 9517
Total number of objects scanned: 9512
Total number of objects not scanned: 5
Total number of malicious objects found: 1
Total number of malicious objects cleaned: 1
Total number of malicious files found: 1
Total number of malicious files cleaned: 1
Total number of objects quarantined: 1
Total scanning time: 8m 59s

Takže ten AdwCleaner ani nezkusils?

log to žádný nevypsalo? nic nenalezeno?
vysypal jsi historii prohlížeče?
podobně funguje i kaspersky removal tool - kvrt.

ajo sory, to je něco jiného .... kde bych ten log měl najít z adw?

Obvykle je to texťák v C:\AdwCleaner

387233426 log
893392606 karantena?

Jak vidět, zase tak málo toho nebylo. Tak spusťte ten MBAM a nálezy nechte odstranit.

7kbyte log - to je slušně zasraný systém. potom je asi lepší, když ten internet fungovat nebude.
adwcleaner má i tlačítko clean. ale protože nekontroluje naplánované úlohy, může se tam skrývat obnovovač spyware.
edit:

***** [ Scheduled tasks ] *****
[-] Task Deleted : RDReminder

ale jo, čte to.

Na jeho obranu je třeba uvést, že nemalou část zabírají "produkty" AVG. Mě jako dlouholetého uživatele i prodejce AVG těší, že ty sračky začaly antispywarové programy konečně odstraňovat.

budiž, ale za tento trus avg nemůže, to je práce majitele:

[-] Folder Deleted : C:\Users\Patrik\AppData\Roaming\Mozilla\Firefox\Pr ofiles\fksxbjoq.default\Extensions\veggy@veggyAddo n.com

***** [ Files ] *****
[-] File Deleted : C:\END
[-] File Deleted : C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\wtu-secure-search.xm l
[-] File Deleted : C:\Users\Patrik\AppData\Roaming\Mozilla\Firefox\Pr ofiles\fksxbjoq.default\invalidprefs.js
[-] File Deleted : C:\Users\Patrik\AppData\Roaming\Mozilla\Firefox\Pr ofiles\fksxbjoq.default\searchplugins\eshield-safe -web.xml
[-] File Deleted : C:\Users\Patrik\AppData\Roaming\Mozilla\Firefox\Pr ofiles\fksxbjoq.default\searchplugins\yahoo.xml
[-] File Deleted : C:\Windows\SysNative\roboot64.exe

***** [ Web browsers ] *****
[-] [C:\Users\Patrik\AppData\Roaming\Mozilla\Firefox\P rofiles\fksxbjoq.default\prefs.js] [Preference] Deleted : user_pref("browser.search.selectedEngine", "eShield Safe Web");
[-] [C:\Users\Patrik\AppData\Roaming\Mozilla\Firefox\P rofiles\fksxbjoq.default\prefs.js] [Preference] Deleted : user_pref("extensions.toolbar11467@eshield.com.ins tall-event-fired", true);
[-] [C:\Users\Patrik\AppData\Roaming\Mozilla\Firefox\P rofiles\fksxbjoq.default\prefs.js] [Preference] Deleted : user_pref("keyword.URL", "hxxp://search.eshield.com/serp?guid={5DE46E50-CEB 0-47E7-9794-8D02520970E2}&action=default_search&k= ");
[-] [C:\Users\Patrik\AppData\Roaming\Mozilla\Firefox\P rofiles\fksxbjoq.default\prefs.js] [Preference] Deleted : user_pref("plugin.state.npconduitfirefoxplugin", 0);

ve středověku se za takovou správu pc upalovalo na hranici a lámaly se koule ve španělských kleštích.

To ano, souhlasím s váma ... Můj pc už má dost za sebou, proto se nebojím už doněj nacpat jakýkoliv software z netu :D moje chyba ... :) ....... vypadá to že už to mám jinak OK. díky lidičky