Pomáháme v boji s počítačovou havěti!
https://forum.viry.cz:443/
môj frst subor posielam sem
Stiahnite si na plochu nastroj AdwCleaner, link. na stiahnutie tu: https://toolslib.net/downloads/finish/1/ Kód: Vybrat vše
CloseProcesses:
CreateRestorePoint:
C:\ProgramData\KMSAutoS\KMSAuto Net.exe
C:\Program Files\McAfee.com\Agent\mcagent.exe
C:\Program Files\McAfee.com
C:\ProgramData\KMSAutoS
HKLM-x32\...\Run: [mcui_exe] => "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey
HKU\S-1-5-21-3866944073-2003073622-1910257541-1001\...\Run: [Akamai NetSession Interface] => C:\Users\jozef\AppData\Local\Akamai\netsession_win.exe [4586456 2018-04-17] (Akamai Technologies, Inc. -> Akamai Technologies, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [601424 2018-12-16] (Oracle America, Inc. -> Oracle Corporation)
HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe [91432 2012-03-29] (CyberLink -> CyberLink Corp.)
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-3866944073-2003073622-1910257541-1001\...\Policies\Explorer: []
HKU\S-1-5-21-3866944073-2003073622-1910257541-1001\...\MountPoints2: {35c4364b-c48c-11e6-be7c-f82fa8ff902c} - "F:\Lenovo_Suite.exe"
HKU\S-1-5-21-3866944073-2003073622-1910257541-1001\...\MountPoints2: {c73ae8e4-c3c6-11e6-be7c-f82fa8ff902c} - "H:\Lenovo_Suite.exe"
HKLM\Software\Microsoft\Active Setup\Installed Components: [{89820200-ECBD-11cf-8B85-00AA005B4340}] -> regsvr32.exe /s /n /i:U %SystemRoot%\System32\shell32.dll
Task: {043C0DC1-8AAF-416F-A3B5-81BCF74C19C7} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [107848 2016-12-18] (Google Inc -> Google Inc.)
Task: {BD676ABE-2DD4-4251-BFB2-6A4FBF89B2A7} - System32\Tasks\Microsoft\Windows\WDI\SrvHost => rundll32.exe winscomrssrv.dll,SrvMainHost
Task: {0E0E97B7-E2D8-454E-BE12-671E4C717E72} - System32\Tasks\Update\TslGame => cmd /c type "C:\Users\jozef\AppData\Local\Temp\TslGame.txt" | cmd <==== ATTENTION
Task: {E1F5ED36-4D49-42B5-B77D-621F8009D06C} - System32\Tasks\{B5089EC1-F0FE-4E43-8BF0-BC310C98A037} => C:\WINDOWS\system32\pcalua.exe -a C:\Users\jozef\Desktop\Return-to-Castle-Wolfenstein_www.FreeGamesDL.net\Game\Setup.exe -d C:\Users\jozef\Desktop\Return-to-Castle-Wolfenstein_www.FreeGamesDL.net\Game
Task: {D1EFA1D3-0049-4EB9-9D9F-21CD11768C2B} - System32\Tasks\KMSAutoNet => C:\ProgramData\KMSAutoS\KMSAuto Net.exe [6977272 2015-08-09] (Ratiborus MSFree Inc. -> MSFree Inc.) [File not signed]
SearchScopes: HKU\S-1-5-21-3866944073-2003073622-1910257541-1001 -> DefaultScope {E0E0AE5A-7BCB-497D-B907-ADDA630F575F} URL =
S1 ZAM; \??\C:\WINDOWS\System32\drivers\zam64.sys [X]
S1 ZAM_Guard; \??\C:\WINDOWS\System32\drivers\zamguard64.sys [X]
2019-04-24 23:01 - 2016-12-18 23:30 - 000003368 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2019-04-24 23:01 - 2016-12-18 23:30 - 000003240 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2019-04-22 13:16 - 2018-12-23 19:55 - 000000000 ____D C:\ProgramData\KMSAutoS
2019-04-24 23:01 - 2018-12-23 19:55 - 000003730 _____ C:\WINDOWS\System32\Tasks\KMSAutoNet
ShellIconOverlayIdentifiers: [SugarSyncBackedUp] -> {0C4A258A-3F3B-4FFF-80A7-9B3BEC139472} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll -> No File
ShellIconOverlayIdentifiers: [SugarSyncPending] -> {62CCD8E3-9C21-41E1-B55E-1E26DFC68511} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll -> No File
ShellIconOverlayIdentifiers: [SugarSyncRoot] -> {A759AFF6-5851-457D-A540-F4ECED148351} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll -> No File
ShellIconOverlayIdentifiers: [SugarSyncShared] -> {1574C9EF-7D58-488F-B358-8B78C1538F51} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll -> No File
ContextMenuHandlers1: [SugarSync] -> {305BC11B-5175-492B-B569-866547FCDA40} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll -> No File
ContextMenuHandlers1: [SugarSync] -> {305BC11B-5175-492B-B569-866547FCDA40} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll -> No File
ContextMenuHandlers6: [SugarSync] -> {305BC11B-5175-492B-B569-866547FCDA40} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll -> No File
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"
HKU\S-1-5-21-3866944073-2003073622-1910257541-1001\Software\Classes\.scr: AutoCADScriptFile => C:\WINDOWS\system32\notepad.exe "%1"
FirewallRules: [{EFFB3471-BEB6-42C4-A53A-44FEB708E115}] => (Allow) C:\Users\jozef\AppData\Local\Programs\Opera\58.0.3135.90\opera.exe No File
FirewallRules: [{A9660959-88A4-4B4B-AD1C-625CE6A7788B}] => (Allow) C:\Program Files (x86)\Garena\Garena\2.0.1804.2913\gxxsvc.exe No File
FirewallRules: [{86392971-DF70-4A71-A3E6-8E2292354F91}] => (Allow) C:\Program Files (x86)\Garena\Garena\2.0.1805.1715\gxxsvc.exe No File
FirewallRules: [TCP Query User{BF609087-BD4A-4085-AF0E-E549CBF3D728}C:\program files (x86)\java\jre1.8.0_111\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_111\bin\javaw.exe No File
FirewallRules: [UDP Query User{C8B237F3-01FB-4771-A25E-70EB32B98E4A}C:\program files (x86)\java\jre1.8.0_111\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_111\bin\javaw.exe No File
FirewallRules: [TCP Query User{FFAE0BC3-6AB3-4B42-8E00-4B6C84266537}C:\program files (x86)\java\jre1.8.0_111\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_111\bin\javaw.exe No File
FirewallRules: [UDP Query User{11B28F3D-98C5-4CD4-BBFA-C6D61BE63271}C:\program files (x86)\java\jre1.8.0_111\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_111\bin\javaw.exe No File
FirewallRules: [TCP Query User{CD6E504C-A576-4717-8B6F-2C1258DC8BA4}C:\program files (x86)\eid klient\eid_klient.exe] => (Allow) C:\program files (x86)\eid klient\eid_klient.exe No File
FirewallRules: [UDP Query User{9D03D97E-EFA0-4216-B8C2-F384161B8186}C:\program files (x86)\eid klient\eid_klient.exe] => (Allow) C:\program files (x86)\eid klient\eid_klient.exe No File
FirewallRules: [TCP Query User{94A0E7ED-449F-48B3-B05A-D6A1ED963E94}C:\program files (x86)\return to castle wolfenstein\wolfmp.exe] => (Allow) C:\program files (x86)\return to castle wolfenstein\wolfmp.exe No File
FirewallRules: [UDP Query User{B6EBDA1B-A136-4A5E-8CD3-1BC9689829A4}C:\program files (x86)\return to castle wolfenstein\wolfmp.exe] => (Allow) C:\program files (x86)\return to castle wolfenstein\wolfmp.exe No File
FirewallRules: [TCP Query User{B4D9882F-6590-4DF4-B795-C5FBD1B99C2F}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe No File
FirewallRules: [UDP Query User{3B09D634-1469-457B-BE19-E4AA039860BC}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe No File
FirewallRules: [TCP Query User{DC76E784-5191-495B-958D-B9929B5FCB59}C:\users\jozef\appdata\roaming\utorrent\updates\3.5.0_43804.exe] => (Allow) C:\users\jozef\appdata\roaming\utorrent\updates\3.5.0_43804.exe No File
FirewallRules: [UDP Query User{87CDD94D-BF74-4408-80CB-C2EFD8C27091}C:\users\jozef\appdata\roaming\utorrent\updates\3.5.0_43804.exe] => (Allow) C:\users\jozef\appdata\roaming\utorrent\updates\3.5.0_43804.exe No File
FirewallRules: [TCP Query User{991893FF-F851-4C89-BA58-C33C421C0DEF}C:\users\jozef\appdata\roaming\utorrent\updates\3.5.0_43804.exe] => (Allow) C:\users\jozef\appdata\roaming\utorrent\updates\3.5.0_43804.exe No File
FirewallRules: [UDP Query User{FB77FD1B-63E1-4404-B56F-BEF28FFE7603}C:\users\jozef\appdata\roaming\utorrent\updates\3.5.0_43804.exe] => (Allow) C:\users\jozef\appdata\roaming\utorrent\updates\3.5.0_43804.exe No File
FirewallRules: [TCP Query User{5ABA205A-C674-428E-8163-BE147F9B7AB3}C:\program files (x86)\java\jre1.8.0_131\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_131\bin\javaw.exe No File
FirewallRules: [UDP Query User{6D73CE5E-1D4D-4836-83AF-BE1F4EFA41D4}C:\program files (x86)\java\jre1.8.0_131\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_131\bin\javaw.exe No File
FirewallRules: [TCP Query User{77B4A297-37D1-4650-BB72-AAA6F0F1E560}C:\users\jozef\downloads\bulanci.exe] => (Allow) C:\users\jozef\downloads\bulanci.exe No File
FirewallRules: [UDP Query User{0DD77223-746B-4DC4-A2CC-26342A5C221D}C:\users\jozef\downloads\bulanci.exe] => (Allow) C:\users\jozef\downloads\bulanci.exe No File
FirewallRules: [TCP Query User{C77A79FE-C2B1-4800-90E1-DEC5CEBBBCC7}C:\users\jozef\desktop\nový priečinok\samp-server.exe] => (Allow) C:\users\jozef\desktop\nový priečinok\samp-server.exe No File
FirewallRules: [UDP Query User{91EF84EE-EC8F-4846-8182-340B55517D60}C:\users\jozef\desktop\nový priečinok\samp-server.exe] => (Allow) C:\users\jozef\desktop\nový priečinok\samp-server.exe No File
EmptyTemp:
Hosts:
