Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Preventivní kontrola.Někdy se PC samo resetuje

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Odpovědět
Zpráva
Autor
aturk
Návštěvník
Návštěvník
Příspěvky: 59
Registrován: 13 srp 2008 17:40

Preventivní kontrola.Někdy se PC samo resetuje

#1 Příspěvek od aturk »

Prosim o preventivní kontrolu.Obcasné samorestartování.Děkuji
Logfile of random's system information tool 1.10 (written by random/random)
Run by Aturk at 2015-11-22 18:54:42
Microsoft Windows 8.1
System drive C: has 69 GB (57%) free of 122 GB
Total RAM: 8140 MB (81% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:54:50, on 22. 11. 2015
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.17840)
Boot mode: Normal

Running processes:
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files\trend micro\Aturk.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll
O4 - HKLM\..\Run: [Sound Blaster Cinema 2] "C:\Program Files (x86)\Creative\Sound Blaster Cinema 2\Sound Blaster Cinema 2\SBCinema2.exe" /r
O4 - HKLM\..\Run: [UpdReg] C:\Windows\UpdReg.EXE
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [Codec Settings UAC Manager] "C:\Windows\system32\Codecs\CodecUACManager.exe"
O4 - HKLM\..\RunOnce: [20150107] C:\Program Files\AVAST Software\Avast\setup\emupdate\118d4182-4d91-4fff-8ca9-067312087993.exe /check
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Steam] "C:\Program Files (x86)\Steam\steam.exe" -silent
O4 - HKUS\S-1-5-21-4180781486-2795493224-1182082833-1004\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR (User 'Aturk_2')
O4 - HKUS\S-1-5-21-4180781486-2795493224-1182082833-1004\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun (User 'Aturk_2')
O4 - HKUS\S-1-5-21-4180781486-2795493224-1182082833-1004\..\Run: [SpybotPostWindows10UpgradeReInstall] "C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe" (User 'Aturk_2')
O4 - Global Startup: Killer Network Manager.lnk = C:\Program Files\Killer Networking\Network Manager\NetworkManager.exe
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://ccfiles.creative.com/Web/softwar ... /CTPID.cab
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Avast Antivirus (avast! Antivirus) - Avast Software s.r.o. - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: AvastVBox COM Service (AvastVBoxSvc) - Avast Software - C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: SluĹľba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: SluĹľba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Killer Service V2 - Rivet Networks - C:\Program Files\Killer Networking\Network Manager\KillerService.exe
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Origin Client Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginClientService.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 7989 bytes

======Listing Processes======





wininit.exe

winlogon.exe

C:\Windows\system32\lsass.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
"dwm.exe"
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
atieclxx
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\Explorer.EXE
taskhostex.exe
C:\Windows\System32\svchost.exe -k utcsvc
dashost.exe {dba1bd6a-7949-437e-a6e632a77abfc025}
"C:\Program Files\Killer Networking\Network Manager\KillerService.exe"
"C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
ngservice.exe pipeserver
"C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s
"C:\Program Files\Killer Networking\Network Manager\NetworkManager.exe" -minimize
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Windows\system32\taskmgr.exe" /7

C:\Windows\System32\svchost.exe -k WerSvcGroup
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe3_ Global\UsGthrCtrlFltPipeMssGthrPipe3 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 564 568 576 65536 572
"D:\Stažené soubory\RSITx64.exe"
C:\Windows\system32\DllHost.exe /Processid:{3EB3C877-1F16-487C-9050-104DBCD66683}

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe#
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe# /c#
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe# /ua /installsource scheduler#

=========Mozilla firefox=========

ProfilePath - C:\Users\Aturk\AppData\Roaming\Mozilla\Firefox\Profiles\h7xdc9vb.default

prefs.js - "browser.startup.homepage" - "www.seznam.cz"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 19.0.0.245 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_245.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=11.45.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.45.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.1.5]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.0]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.1]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 19.0.0.245 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_19_0_0_245.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll


C:\Users\Aturk\AppData\Roaming\Mozilla\Firefox\Profiles\h7xdc9vb.default\extensions\
{2d3fbcf7-be69-4433-8858-c621a8d0e58d}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-03-24 662672]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll [2015-04-23 460712]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-03-24 565304]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-04-23 172968]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2015-03-04 8461528]
"MBCfg64"=C:\Windows\system32\MBCfg64.dll [2014-02-21 41088]
"VIAxHCUtl"=C:\Program Files\VIA XHCI UASP Utility\usb3Monitor []
"Logitech Download Assistant"=C:\Windows\System32\LogiLDA.dll [2012-09-20 3933496]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"*WerKernelReporting"=C:\Windows\SYSTEM32\WerFault.exe [2014-10-29 465320]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2014-12-12 7394584]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2014-03-04 3696912]
"Steam"=C:\Program Files (x86)\Steam\steam.exe [2015-11-10 3011152]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Sound Blaster Cinema 2"=C:\Program Files (x86)\Creative\Sound Blaster Cinema 2\Sound Blaster Cinema 2\SBCinema2.exe [2014-02-24 1440768]
"UpdReg"=C:\Windows\UpdReg.EXE [2000-05-11 90112]
"StartCCC"=C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [2014-11-20 767176]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2015-05-12 5515496]
"Codec Settings UAC Manager"=C:\Windows\system32\Codecs\CodecUACManager.exe []

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\RunOnce]
"20150107"=C:\Program Files\AVAST Software\Avast\setup\emupdate\118d4182-4d91-4fff-8ca9-067312087993.exe [2015-10-22 183232]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Killer Network Manager.lnk - C:\Program Files\Killer Networking\Network Manager\NetworkManager.exe

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"SoftwareSASGeneration"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.YUY2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"VIDC.YVYU"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"vidc.ffds"=ff_vfw.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-11-22 18:54:42 ----D---- C:\rsit
2015-11-22 18:54:42 ----D---- C:\Program Files\trend micro
2015-11-22 16:40:37 ----A---- C:\Windows\system32\drivers\HWiNFO64A.SYS
2015-11-22 16:38:40 ----D---- C:\Program Files\HWiNFO64
2015-11-22 07:34:56 ----A---- C:\Windows\wininit.ini
2015-11-21 18:10:44 ----D---- C:\Program Files\Common Files\AV
2015-11-21 18:08:08 ----D---- C:\ProgramData\Spybot - Search & Destroy
2015-11-11 16:47:39 ----A---- C:\Windows\system32\drivers\tdx.sys
2015-11-11 16:47:39 ----A---- C:\Windows\system32\drivers\afd.sys
2015-11-11 16:47:38 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2015-11-11 16:47:38 ----A---- C:\Windows\system32\kerberos.dll
2015-11-11 16:47:36 ----A---- C:\Windows\system32\schannel.dll
2015-11-11 16:47:36 ----A---- C:\Windows\system32\lsasrv.dll
2015-11-11 16:47:35 ----A---- C:\Windows\SYSWOW64\schannel.dll
2015-11-11 16:47:35 ----A---- C:\Windows\SYSWOW64\ncryptsslp.dll
2015-11-11 16:47:35 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2015-11-11 16:47:35 ----A---- C:\Windows\SYSWOW64\certcli.dll
2015-11-11 16:47:35 ----A---- C:\Windows\SYSWOW64\bcryptprimitives.dll
2015-11-11 16:47:35 ----A---- C:\Windows\system32\ncryptsslp.dll
2015-11-11 16:47:35 ----A---- C:\Windows\system32\ncrypt.dll
2015-11-11 16:47:35 ----A---- C:\Windows\system32\drivers\tunnel.sys
2015-11-11 16:47:35 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2015-11-11 16:47:35 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2015-11-11 16:47:35 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2015-11-11 16:47:35 ----A---- C:\Windows\system32\drivers\cng.sys
2015-11-11 16:47:35 ----A---- C:\Windows\system32\certcli.dll
2015-11-11 16:47:35 ----A---- C:\Windows\system32\bcryptprimitives.dll
2015-11-11 16:47:35 ----A---- C:\Windows\system32\AuthHost.exe
2015-11-11 16:47:34 ----AC---- C:\Windows\system32\drivers\tpm.sys
2015-11-11 16:47:34 ----A---- C:\Windows\SYSWOW64\puiobj.dll
2015-11-11 16:47:34 ----A---- C:\Windows\SYSWOW64\gdi32.dll
2015-11-11 16:47:34 ----A---- C:\Windows\system32\winresume.exe
2015-11-11 16:47:34 ----A---- C:\Windows\system32\winload.exe
2015-11-11 16:47:34 ----A---- C:\Windows\system32\puiobj.dll
2015-11-11 16:47:34 ----A---- C:\Windows\system32\ntoskrnl.exe
2015-11-11 16:47:34 ----A---- C:\Windows\system32\localspl.dll
2015-11-11 16:47:34 ----A---- C:\Windows\system32\gdi32.dll
2015-11-11 16:47:32 ----A---- C:\Windows\SYSWOW64\wuwebv.dll
2015-11-11 16:47:32 ----A---- C:\Windows\SYSWOW64\wudriver.dll
2015-11-11 16:47:32 ----A---- C:\Windows\SYSWOW64\wuapp.exe
2015-11-11 16:47:32 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2015-11-11 16:47:32 ----A---- C:\Windows\system32\wuwebv.dll
2015-11-11 16:47:32 ----A---- C:\Windows\system32\WUSettingsProvider.dll
2015-11-11 16:47:32 ----A---- C:\Windows\system32\wudriver.dll
2015-11-11 16:47:32 ----A---- C:\Windows\system32\wucltux.dll
2015-11-11 16:47:32 ----A---- C:\Windows\system32\wuaueng.dll
2015-11-11 16:47:32 ----A---- C:\Windows\system32\wuauclt.exe
2015-11-11 16:47:32 ----A---- C:\Windows\system32\wuapp.exe
2015-11-11 16:47:32 ----A---- C:\Windows\system32\wuapi.dll
2015-11-11 16:47:29 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2015-11-11 16:47:29 ----A---- C:\Windows\system32\mshtml.dll
2015-11-11 16:47:27 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2015-11-11 16:47:27 ----A---- C:\Windows\system32\jscript9.dll
2015-11-11 16:47:27 ----A---- C:\Windows\system32\iertutil.dll
2015-11-11 16:47:27 ----A---- C:\Windows\system32\ieframe.dll
2015-11-11 16:47:26 ----A---- C:\Windows\SYSWOW64\wininet.dll
2015-11-11 16:47:26 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2015-11-11 16:47:26 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2015-11-11 16:47:26 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2015-11-11 16:47:26 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2015-11-11 16:47:26 ----A---- C:\Windows\SYSWOW64\jscript.dll
2015-11-11 16:47:26 ----A---- C:\Windows\SYSWOW64\inetcomm.dll
2015-11-11 16:47:26 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2015-11-11 16:47:26 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2015-11-11 16:47:26 ----A---- C:\Windows\system32\wininet.dll
2015-11-11 16:47:26 ----A---- C:\Windows\system32\vbscript.dll
2015-11-11 16:47:26 ----A---- C:\Windows\system32\urlmon.dll
2015-11-11 16:47:26 ----A---- C:\Windows\system32\msfeeds.dll
2015-11-11 16:47:26 ----A---- C:\Windows\system32\jscript.dll
2015-11-11 16:47:26 ----A---- C:\Windows\system32\inetcomm.dll
2015-11-11 16:47:26 ----A---- C:\Windows\system32\ieapfltr.dll
2015-11-11 16:47:26 ----A---- C:\Windows\system32\ie4uinit.exe
2015-11-11 16:47:17 ----A---- C:\Windows\system32\IKEEXT.DLL
2015-11-11 16:46:54 ----A---- C:\Windows\system32\win32k.sys
2015-11-04 19:06:03 ----D---- C:\Program Files (x86)\Mozilla Firefox
2015-10-26 20:21:33 ----D---- C:\.oracle_jre_usage
2015-10-26 20:21:04 ----D---- C:\Windows\SYSWOW64\Oracle
2015-10-26 20:21:04 ----D---- C:\Oracle
2015-10-23 18:00:35 ----D---- C:\Users\Aturk\AppData\Roaming\Guild Wars 2

======List of files/folders modified in the last 1 month======

2015-11-22 18:54:45 ----D---- C:\Windows\Prefetch
2015-11-22 18:54:42 ----RD---- C:\Program Files
2015-11-22 17:17:27 ----D---- C:\Windows\Temp
2015-11-22 17:11:22 ----D---- C:\Windows\System32
2015-11-22 17:11:22 ----D---- C:\Windows\Inf
2015-11-22 17:11:22 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-11-22 17:07:00 ----D---- C:\Windows\Minidump
2015-11-22 17:06:57 ----D---- C:\Windows
2015-11-22 16:40:37 ----D---- C:\Windows\system32\drivers
2015-11-22 11:21:14 ----D---- C:\Windows\Microsoft.NET
2015-11-22 11:17:47 ----D---- C:\Windows\system32\config
2015-11-22 11:15:34 ----D---- C:\Windows\debug
2015-11-22 07:52:07 ----SHD---- C:\Windows\Installer
2015-11-22 07:52:05 ----D---- C:\Windows\SysWOW64
2015-11-22 07:51:35 ----D---- C:\Program Files (x86)\Java
2015-11-22 07:48:38 ----RD---- C:\Program Files (x86)
2015-11-22 07:43:12 ----SHD---- C:\System Volume Information
2015-11-22 07:34:56 ----SD---- C:\ProgramData\Microsoft
2015-11-22 07:31:32 ----D---- C:\Windows\SoftwareDistribution
2015-11-22 07:27:20 ----D---- C:\Program Files (x86)\Steam
2015-11-21 18:10:44 ----D---- C:\Program Files\Common Files
2015-11-21 18:08:15 ----D---- C:\Windows\system32\Tasks
2015-11-21 18:08:08 ----HD---- C:\ProgramData
2015-11-21 16:51:56 ----D---- C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-11-14 02:50:58 ----D---- C:\Windows\system32\DriverStore
2015-11-14 02:50:53 ----D---- C:\Windows\WinSxS
2015-11-11 18:41:47 ----D---- C:\Windows\rescache
2015-11-11 18:36:48 ----RSD---- C:\Windows\assembly
2015-11-11 18:20:01 ----RD---- C:\Windows\ToastData
2015-11-11 18:20:00 ----D---- C:\Windows\apppatch
2015-11-11 16:56:32 ----D---- C:\Windows\CbsTemp
2015-11-11 16:55:39 ----D---- C:\Windows\system32\MRT
2015-11-11 16:52:53 ----A---- C:\Windows\system32\MRT.exe
2015-11-11 16:45:42 ----D---- C:\Windows\system32\catroot2
2015-11-07 13:09:43 ----D---- C:\Windows\Logs
2015-11-07 12:33:23 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2015-11-03 01:23:06 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2015-10-26 20:19:46 ----D---- C:\Windows\Tasks

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2015-05-01 65736]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2015-05-01 272248]
R0 Wof;Windows Overlay File System Filter Driver; C:\Windows\system32\drivers\Wof.sys [2014-09-24 157016]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2015-05-01 93528]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2015-05-01 1047320]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2015-06-26 442264]
R1 BfLwf;@oem20.inf,%BfLwf_Desc%;KIller Bandwidth Control; C:\Windows\system32\DRIVERS\bwcW8x64.sys [2015-01-29 100912]
R1 dtsoftbus01;@oem10.inf,%DTSoftBus.SVCDESC%;DAEMON Tools Virtual Bus Driver; C:\Windows\System32\drivers\dtsoftbus01.sys [2015-01-18 283064]
R1 HWiNFO32;HWiNFO32/64 Kernel Driver; \??\C:\Windows\system32\drivers\HWiNFO64A.SYS [2015-11-22 27552]
R1 mbamchameleon;mbamchameleon; \??\C:\Windows\system32\drivers\mbamchameleon.sys [2015-06-18 109272]
R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2015-05-01 29168]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2015-05-01 89944]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2015-05-01 137288]
R2 VBoxAswDrv;VBoxAsw Support Driver; \??\C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [2015-05-01 273824]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2014-11-21 18959360]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2014-11-21 589312]
R3 AtiHDAudioService;@oem8.inf,%ATIHdAudioDriver.SvcDesc%;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdWB6.sys [2014-06-21 223232]
R3 AVerAF15DMBTH64;@oem9.inf,%AVerAF15DMBTH.ServiceName%;AVerMedia A850 USB; C:\Windows\System32\Drivers\AVerAF15DMBTH64.sys [2009-07-27 592256]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2015-03-10 4430808]
R3 Ke2200;@oem1.inf,%BFTN.Service.DispName%;NDIS Miniport Driver for Killer e2201/e2202 PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\e22w8x64.sys [2014-03-27 130224]
R3 MBAMProtector;MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [2015-06-18 25816]
R3 MBfilt;MBfilt; C:\Windows\system32\drivers\MBfilt64.sys [2009-11-18 32344]
R3 VUSB3HUB;@oem12.inf,%VUSB3HUB.SVCDESC%;VIA USB 3 Root Hub Service; C:\Windows\System32\drivers\ViaHub3.sys [2014-10-31 227840]
S0 amdkmafd;@oem6.inf,%AMDKMAFD_svcdesc%;AMD Audio Bus Lower Filter; C:\Windows\System32\drivers\amdkmafd.sys [2012-09-23 21160]
S2 AODDriver4.2.0;AODDriver4.2.0; \??\C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys []
S3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [2015-08-08 136408]
S3 MBAMWebAccessControl;MBAMWebAccessControl; \??\C:\Windows\system32\drivers\mwac.sys [2015-06-18 64216]
S3 MSICDSetup;MSICDSetup; \??\E:\Nová složka\CDriver64.sys []
S3 NTIOLib_1_0_C;NTIOLib_1_0_C; \??\E:\Nová složka\NTIOLib_X64.sys []
S3 usbscan;@sti.inf,%usbscan.SvcDesc%;OvladaÄŤ skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2014-10-29 44544]
S3 WINUSB;@winusb.inf,%WINUSB_SvcDesc%;WinUsb Driver; C:\Windows\System32\drivers\WinUSB.SYS [2013-08-22 78848]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2014-11-21 244736]
R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2015-05-01 343336]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2014-10-29 38792]
R2 Killer Service V2;Killer Service V2; C:\Program Files\Killer Networking\Network Manager\KillerService.exe [2015-02-05 386560]
R2 MBAMScheduler;MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [2015-06-18 1871160]
R3 AvastVBoxSvc;AvastVBox COM Service; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [2015-05-01 4034896]
S2 gupdate;SluĹľba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-20 144200]
S2 MBAMService;MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [2015-06-18 1133880]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-11-22 269000]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\Windows\System32\svchost.exe [2014-10-29 38792]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2013-08-03 43696]
S3 gupdatem;SluĹľba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-20 144200]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2015-11-04 147624]
S3 Origin Client Service;Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2015-10-18 2078216]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2015-11-10 836176]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119673
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Preventivní kontrola.Někdy se PC samo resetuje

#2 Příspěvek od Rudy »

Zdravím!
Spusťte tuto utilitu:
Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
aturk
Návštěvník
Návštěvník
Příspěvky: 59
Registrován: 13 srp 2008 17:40

Re: Preventivní kontrola.Někdy se PC samo resetuje

#3 Příspěvek od aturk »

# AdwCleaner v5.021 - Logfile created 22/11/2015 at 19:32:08
# Updated 14/11/2015 by Xplode
# Database : 2015-11-22.1 [Server]
# Operating system : Windows 8.1 (x64)
# Username : Aturk - RADEK
# Running from : C:\Users\Aturk_2\Desktop\adwcleaner_5.021.exe
# Option : Cleaning
# Support : http://toolslib.net/forum

***** [ Services ] *****


***** [ Folders ] *****


***** [ Files ] *****


***** [ DLLs ] *****


***** [ Shortcuts ] *****


***** [ Scheduled tasks ] *****


***** [ Registry ] *****

[-] Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [Codec Settings UAC Manager]

***** [ Web browsers ] *****
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119673
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Preventivní kontrola.Někdy se PC samo resetuje

#4 Příspěvek od Rudy »

Dejte nový log RSIT.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
aturk
Návštěvník
Návštěvník
Příspěvky: 59
Registrován: 13 srp 2008 17:40

Re: Preventivní kontrola.Někdy se PC samo resetuje

#5 Příspěvek od aturk »

tady je.Akorat nevim co je za proces --C:\Program Files\trend micro\Aturk.exe



Logfile of random's system information tool 1.10 (written by random/random)
Run by Aturk at 2015-11-22 21:23:49
Microsoft Windows 8.1
System drive C: has 69 GB (57%) free of 122 GB
Total RAM: 8140 MB (87% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:23:50, on 22. 11. 2015
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.17840)
Boot mode: Normal

Running processes:
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files\trend micro\Aturk.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll
O4 - HKLM\..\Run: [Sound Blaster Cinema 2] "C:\Program Files (x86)\Creative\Sound Blaster Cinema 2\Sound Blaster Cinema 2\SBCinema2.exe" /r
O4 - HKLM\..\Run: [UpdReg] C:\Windows\UpdReg.EXE
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\RunOnce: [20150107] C:\Program Files\AVAST Software\Avast\setup\emupdate\118d4182-4d91-4fff-8ca9-067312087993.exe /check
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Steam] "C:\Program Files (x86)\Steam\steam.exe" -silent
O4 - HKCU\..\RunOnce: [Report] \AdwCleaner\AdwCleaner[C1].txt
O4 - HKUS\S-1-5-21-4180781486-2795493224-1182082833-1004\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR (User 'Aturk_2')
O4 - HKUS\S-1-5-21-4180781486-2795493224-1182082833-1004\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun (User 'Aturk_2')
O4 - HKUS\S-1-5-21-4180781486-2795493224-1182082833-1004\..\Run: [SpybotPostWindows10UpgradeReInstall] "C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe" (User 'Aturk_2')
O4 - Global Startup: Killer Network Manager.lnk = C:\Program Files\Killer Networking\Network Manager\NetworkManager.exe
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://ccfiles.creative.com/Web/softwar ... /CTPID.cab
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Avast Antivirus (avast! Antivirus) - Avast Software s.r.o. - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: AvastVBox COM Service (AvastVBoxSvc) - Avast Software - C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: SluĹľba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: SluĹľba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Killer Service V2 - Rivet Networks - C:\Program Files\Killer Networking\Network Manager\KillerService.exe
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Origin Client Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginClientService.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 7903 bytes

======Listing Processes======





wininit.exe

winlogon.exe

C:\Windows\system32\lsass.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
"dwm.exe"
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
atieclxx
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\Windows\Explorer.EXE
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {995C996E-D918-4a8c-A302-45719A6F4EA7} -Embedding
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
taskhostex.exe
C:\Windows\System32\svchost.exe -k utcsvc
dashost.exe {94458eb4-9fd2-4497-97d4a36033b29256}
"C:\Program Files\Killer Networking\Network Manager\KillerService.exe"
"C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe"
ngservice.exe pipeserver
"C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s
"C:\Program Files\Killer Networking\Network Manager\NetworkManager.exe" -minimize
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Windows\system32\GWX\GWX.exe"
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c

"D:\Stažené soubory\RSITx64.exe"
C:\Windows\system32\DllHost.exe /Processid:{3EB3C877-1F16-487C-9050-104DBCD66683}

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe#
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe# /c#
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe# /ua /installsource scheduler#

=========Mozilla firefox=========

ProfilePath - C:\Users\Aturk\AppData\Roaming\Mozilla\Firefox\Profiles\h7xdc9vb.default

prefs.js - "browser.startup.homepage" - "www.seznam.cz"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 19.0.0.245 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_245.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=11.45.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.45.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.1.5]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.0]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.1]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 19.0.0.245 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_19_0_0_245.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll


C:\Users\Aturk\AppData\Roaming\Mozilla\Firefox\Profiles\h7xdc9vb.default\extensions\
{2d3fbcf7-be69-4433-8858-c621a8d0e58d}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-03-24 662672]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll [2015-04-23 460712]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-03-24 565304]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-04-23 172968]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2015-03-04 8461528]
"MBCfg64"=C:\Windows\system32\MBCfg64.dll [2014-02-21 41088]
"VIAxHCUtl"=C:\Program Files\VIA XHCI UASP Utility\usb3Monitor []
"Logitech Download Assistant"=C:\Windows\System32\LogiLDA.dll [2012-09-20 3933496]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"*WerKernelReporting"=C:\Windows\SYSTEM32\WerFault.exe [2014-10-29 465320]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2014-12-12 7394584]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2014-03-04 3696912]
"Steam"=C:\Program Files (x86)\Steam\steam.exe [2015-11-10 3011152]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Report"=\AdwCleaner\AdwCleaner[C1].txt [2015-11-22 831]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Sound Blaster Cinema 2"=C:\Program Files (x86)\Creative\Sound Blaster Cinema 2\Sound Blaster Cinema 2\SBCinema2.exe [2014-02-24 1440768]
"UpdReg"=C:\Windows\UpdReg.EXE [2000-05-11 90112]
"StartCCC"=C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [2014-11-20 767176]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2015-05-12 5515496]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\RunOnce]
"20150107"=C:\Program Files\AVAST Software\Avast\setup\emupdate\118d4182-4d91-4fff-8ca9-067312087993.exe [2015-10-22 183232]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Killer Network Manager.lnk - C:\Program Files\Killer Networking\Network Manager\NetworkManager.exe

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"SoftwareSASGeneration"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.YUY2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"VIDC.YVYU"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"vidc.ffds"=ff_vfw.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-11-22 19:27:39 ----D---- C:\AdwCleaner
2015-11-22 18:54:42 ----D---- C:\rsit
2015-11-22 18:54:42 ----D---- C:\Program Files\trend micro
2015-11-22 16:40:37 ----A---- C:\Windows\system32\drivers\HWiNFO64A.SYS
2015-11-22 16:38:40 ----D---- C:\Program Files\HWiNFO64
2015-11-22 07:34:56 ----A---- C:\Windows\wininit.ini
2015-11-21 18:10:44 ----D---- C:\Program Files\Common Files\AV
2015-11-21 18:08:08 ----D---- C:\ProgramData\Spybot - Search & Destroy
2015-11-11 16:47:39 ----A---- C:\Windows\system32\drivers\tdx.sys
2015-11-11 16:47:39 ----A---- C:\Windows\system32\drivers\afd.sys
2015-11-11 16:47:38 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2015-11-11 16:47:38 ----A---- C:\Windows\system32\kerberos.dll
2015-11-11 16:47:36 ----A---- C:\Windows\system32\schannel.dll
2015-11-11 16:47:36 ----A---- C:\Windows\system32\lsasrv.dll
2015-11-11 16:47:35 ----A---- C:\Windows\SYSWOW64\schannel.dll
2015-11-11 16:47:35 ----A---- C:\Windows\SYSWOW64\ncryptsslp.dll
2015-11-11 16:47:35 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2015-11-11 16:47:35 ----A---- C:\Windows\SYSWOW64\certcli.dll
2015-11-11 16:47:35 ----A---- C:\Windows\SYSWOW64\bcryptprimitives.dll
2015-11-11 16:47:35 ----A---- C:\Windows\system32\ncryptsslp.dll
2015-11-11 16:47:35 ----A---- C:\Windows\system32\ncrypt.dll
2015-11-11 16:47:35 ----A---- C:\Windows\system32\drivers\tunnel.sys
2015-11-11 16:47:35 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2015-11-11 16:47:35 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2015-11-11 16:47:35 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2015-11-11 16:47:35 ----A---- C:\Windows\system32\drivers\cng.sys
2015-11-11 16:47:35 ----A---- C:\Windows\system32\certcli.dll
2015-11-11 16:47:35 ----A---- C:\Windows\system32\bcryptprimitives.dll
2015-11-11 16:47:35 ----A---- C:\Windows\system32\AuthHost.exe
2015-11-11 16:47:34 ----AC---- C:\Windows\system32\drivers\tpm.sys
2015-11-11 16:47:34 ----A---- C:\Windows\SYSWOW64\puiobj.dll
2015-11-11 16:47:34 ----A---- C:\Windows\SYSWOW64\gdi32.dll
2015-11-11 16:47:34 ----A---- C:\Windows\system32\winresume.exe
2015-11-11 16:47:34 ----A---- C:\Windows\system32\winload.exe
2015-11-11 16:47:34 ----A---- C:\Windows\system32\puiobj.dll
2015-11-11 16:47:34 ----A---- C:\Windows\system32\ntoskrnl.exe
2015-11-11 16:47:34 ----A---- C:\Windows\system32\localspl.dll
2015-11-11 16:47:34 ----A---- C:\Windows\system32\gdi32.dll
2015-11-11 16:47:32 ----A---- C:\Windows\SYSWOW64\wuwebv.dll
2015-11-11 16:47:32 ----A---- C:\Windows\SYSWOW64\wudriver.dll
2015-11-11 16:47:32 ----A---- C:\Windows\SYSWOW64\wuapp.exe
2015-11-11 16:47:32 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2015-11-11 16:47:32 ----A---- C:\Windows\system32\wuwebv.dll
2015-11-11 16:47:32 ----A---- C:\Windows\system32\WUSettingsProvider.dll
2015-11-11 16:47:32 ----A---- C:\Windows\system32\wudriver.dll
2015-11-11 16:47:32 ----A---- C:\Windows\system32\wucltux.dll
2015-11-11 16:47:32 ----A---- C:\Windows\system32\wuaueng.dll
2015-11-11 16:47:32 ----A---- C:\Windows\system32\wuauclt.exe
2015-11-11 16:47:32 ----A---- C:\Windows\system32\wuapp.exe
2015-11-11 16:47:32 ----A---- C:\Windows\system32\wuapi.dll
2015-11-11 16:47:29 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2015-11-11 16:47:29 ----A---- C:\Windows\system32\mshtml.dll
2015-11-11 16:47:27 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2015-11-11 16:47:27 ----A---- C:\Windows\system32\jscript9.dll
2015-11-11 16:47:27 ----A---- C:\Windows\system32\iertutil.dll
2015-11-11 16:47:27 ----A---- C:\Windows\system32\ieframe.dll
2015-11-11 16:47:26 ----A---- C:\Windows\SYSWOW64\wininet.dll
2015-11-11 16:47:26 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2015-11-11 16:47:26 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2015-11-11 16:47:26 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2015-11-11 16:47:26 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2015-11-11 16:47:26 ----A---- C:\Windows\SYSWOW64\jscript.dll
2015-11-11 16:47:26 ----A---- C:\Windows\SYSWOW64\inetcomm.dll
2015-11-11 16:47:26 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2015-11-11 16:47:26 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2015-11-11 16:47:26 ----A---- C:\Windows\system32\wininet.dll
2015-11-11 16:47:26 ----A---- C:\Windows\system32\vbscript.dll
2015-11-11 16:47:26 ----A---- C:\Windows\system32\urlmon.dll
2015-11-11 16:47:26 ----A---- C:\Windows\system32\msfeeds.dll
2015-11-11 16:47:26 ----A---- C:\Windows\system32\jscript.dll
2015-11-11 16:47:26 ----A---- C:\Windows\system32\inetcomm.dll
2015-11-11 16:47:26 ----A---- C:\Windows\system32\ieapfltr.dll
2015-11-11 16:47:26 ----A---- C:\Windows\system32\ie4uinit.exe
2015-11-11 16:47:17 ----A---- C:\Windows\system32\IKEEXT.DLL
2015-11-11 16:46:54 ----A---- C:\Windows\system32\win32k.sys
2015-11-04 19:06:03 ----D---- C:\Program Files (x86)\Mozilla Firefox
2015-10-26 20:21:33 ----D---- C:\.oracle_jre_usage
2015-10-26 20:21:04 ----D---- C:\Windows\SYSWOW64\Oracle
2015-10-26 20:21:04 ----D---- C:\Oracle
2015-10-23 18:00:35 ----D---- C:\Users\Aturk\AppData\Roaming\Guild Wars 2

======List of files/folders modified in the last 1 month======

2015-11-22 20:14:50 ----D---- C:\Windows\Temp
2015-11-22 19:47:58 ----D---- C:\Windows\Prefetch
2015-11-22 19:37:22 ----D---- C:\Windows\System32
2015-11-22 19:37:22 ----D---- C:\Windows\Inf
2015-11-22 19:37:22 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-11-22 19:02:00 ----D---- C:\Windows\system32\sru
2015-11-22 18:54:42 ----RD---- C:\Program Files
2015-11-22 17:07:00 ----D---- C:\Windows\Minidump
2015-11-22 17:06:57 ----D---- C:\Windows
2015-11-22 16:40:37 ----D---- C:\Windows\system32\drivers
2015-11-22 11:21:14 ----D---- C:\Windows\Microsoft.NET
2015-11-22 11:17:47 ----D---- C:\Windows\system32\config
2015-11-22 11:15:34 ----D---- C:\Windows\debug
2015-11-22 07:52:07 ----SHD---- C:\Windows\Installer
2015-11-22 07:52:05 ----D---- C:\Windows\SysWOW64
2015-11-22 07:51:35 ----D---- C:\Program Files (x86)\Java
2015-11-22 07:48:38 ----RD---- C:\Program Files (x86)
2015-11-22 07:43:12 ----SHD---- C:\System Volume Information
2015-11-22 07:34:56 ----SD---- C:\ProgramData\Microsoft
2015-11-22 07:31:32 ----D---- C:\Windows\SoftwareDistribution
2015-11-22 07:27:20 ----D---- C:\Program Files (x86)\Steam
2015-11-21 18:10:44 ----D---- C:\Program Files\Common Files
2015-11-21 18:08:15 ----D---- C:\Windows\system32\Tasks
2015-11-21 18:08:08 ----HD---- C:\ProgramData
2015-11-21 16:51:56 ----D---- C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-11-14 02:50:58 ----D---- C:\Windows\system32\DriverStore
2015-11-14 02:50:53 ----D---- C:\Windows\WinSxS
2015-11-11 18:41:47 ----D---- C:\Windows\rescache
2015-11-11 18:36:48 ----RSD---- C:\Windows\assembly
2015-11-11 18:20:01 ----RD---- C:\Windows\ToastData
2015-11-11 18:20:00 ----D---- C:\Windows\apppatch
2015-11-11 16:56:32 ----D---- C:\Windows\CbsTemp
2015-11-11 16:55:39 ----D---- C:\Windows\system32\MRT
2015-11-11 16:52:53 ----A---- C:\Windows\system32\MRT.exe
2015-11-11 16:45:42 ----D---- C:\Windows\system32\catroot2
2015-11-07 13:09:43 ----D---- C:\Windows\Logs
2015-11-07 12:33:23 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2015-11-03 01:23:06 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2015-10-26 20:19:46 ----D---- C:\Windows\Tasks

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2015-05-01 65736]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2015-05-01 272248]
R0 Wof;Windows Overlay File System Filter Driver; C:\Windows\system32\drivers\Wof.sys [2014-09-24 157016]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2015-05-01 93528]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2015-05-01 1047320]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2015-06-26 442264]
R1 BfLwf;@oem20.inf,%BfLwf_Desc%;KIller Bandwidth Control; C:\Windows\system32\DRIVERS\bwcW8x64.sys [2015-01-29 100912]
R1 dtsoftbus01;@oem10.inf,%DTSoftBus.SVCDESC%;DAEMON Tools Virtual Bus Driver; C:\Windows\System32\drivers\dtsoftbus01.sys [2015-01-18 283064]
R1 HWiNFO32;HWiNFO32/64 Kernel Driver; \??\C:\Windows\system32\drivers\HWiNFO64A.SYS [2015-11-22 27552]
R1 mbamchameleon;mbamchameleon; \??\C:\Windows\system32\drivers\mbamchameleon.sys [2015-06-18 109272]
R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2015-05-01 29168]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2015-05-01 89944]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2015-05-01 137288]
R2 VBoxAswDrv;VBoxAsw Support Driver; \??\C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [2015-05-01 273824]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2014-11-21 18959360]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2014-11-21 589312]
R3 AtiHDAudioService;@oem8.inf,%ATIHdAudioDriver.SvcDesc%;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdWB6.sys [2014-06-21 223232]
R3 AVerAF15DMBTH64;@oem9.inf,%AVerAF15DMBTH.ServiceName%;AVerMedia A850 USB; C:\Windows\System32\Drivers\AVerAF15DMBTH64.sys [2009-07-27 592256]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2015-03-10 4430808]
R3 Ke2200;@oem1.inf,%BFTN.Service.DispName%;NDIS Miniport Driver for Killer e2201/e2202 PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\e22w8x64.sys [2014-03-27 130224]
R3 MBAMProtector;MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [2015-06-18 25816]
R3 MBfilt;MBfilt; C:\Windows\system32\drivers\MBfilt64.sys [2009-11-18 32344]
R3 VUSB3HUB;@oem12.inf,%VUSB3HUB.SVCDESC%;VIA USB 3 Root Hub Service; C:\Windows\System32\drivers\ViaHub3.sys [2014-10-31 227840]
S0 amdkmafd;@oem6.inf,%AMDKMAFD_svcdesc%;AMD Audio Bus Lower Filter; C:\Windows\System32\drivers\amdkmafd.sys [2012-09-23 21160]
S2 AODDriver4.2.0;AODDriver4.2.0; \??\C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys []
S3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [2015-08-08 136408]
S3 MBAMWebAccessControl;MBAMWebAccessControl; \??\C:\Windows\system32\drivers\mwac.sys [2015-06-18 64216]
S3 MSICDSetup;MSICDSetup; \??\E:\Nová složka\CDriver64.sys []
S3 NTIOLib_1_0_C;NTIOLib_1_0_C; \??\E:\Nová složka\NTIOLib_X64.sys []
S3 usbscan;@sti.inf,%usbscan.SvcDesc%;OvladaÄŤ skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2014-10-29 44544]
S3 WINUSB;@winusb.inf,%WINUSB_SvcDesc%;WinUsb Driver; C:\Windows\System32\drivers\WinUSB.SYS [2013-08-22 78848]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2014-11-21 244736]
R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2015-05-01 343336]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2014-10-29 38792]
R2 Killer Service V2;Killer Service V2; C:\Program Files\Killer Networking\Network Manager\KillerService.exe [2015-02-05 386560]
R2 MBAMScheduler;MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [2015-06-18 1871160]
R3 AvastVBoxSvc;AvastVBox COM Service; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [2015-05-01 4034896]
S2 gupdate;SluĹľba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-20 144200]
S2 MBAMService;MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [2015-06-18 1133880]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-11-22 269000]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\Windows\System32\svchost.exe [2014-10-29 38792]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2013-08-03 43696]
S3 gupdatem;SluĹľba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-20 144200]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2015-11-04 147624]
S3 Origin Client Service;Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2015-10-18 2078216]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2015-11-10 836176]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119673
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Preventivní kontrola.Někdy se PC samo resetuje

#6 Příspěvek od Rudy »

Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:
:files
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

:commands
[Purity]
[Emptytemp]
[Emptyflash]
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
aturk
Návštěvník
Návštěvník
Příspěvky: 59
Registrován: 13 srp 2008 17:40

Re: Preventivní kontrola.Někdy se PC samo resetuje

#7 Příspěvek od aturk »

Dobry den.Tak muzem pokracovat -Chtel bych se zeptat na tento proces
Running processes:

C:\Program Files\trend micro\Aturk.exe

nechapu co to muze být?




Logfile of random's system information tool 1.10 (written by random/random)
Run by Aturk at 2015-11-23 16:43:26
Microsoft Windows 8.1
System drive C: has 70 GB (57%) free of 122 GB
Total RAM: 8140 MB (89% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 16:43:27, on 23. 11. 2015
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.17840)
Boot mode: Normal

Running processes:
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files\trend micro\Aturk.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll
O4 - HKLM\..\Run: [Sound Blaster Cinema 2] "C:\Program Files (x86)\Creative\Sound Blaster Cinema 2\Sound Blaster Cinema 2\SBCinema2.exe" /r
O4 - HKLM\..\Run: [UpdReg] C:\Windows\UpdReg.EXE
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\RunOnce: [20150107] C:\Program Files\AVAST Software\Avast\setup\emupdate\dc1347fe-c928-4755-b00e-d267349d89ed.exe /check
O4 - HKLM\..\RunOnce: [OTM] "D:\Stažené soubory\OTM.exe"
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Steam] "C:\Program Files (x86)\Steam\steam.exe" -silent
O4 - HKCU\..\RunOnce: [Report] \AdwCleaner\AdwCleaner[C1].txt
O4 - HKUS\S-1-5-21-4180781486-2795493224-1182082833-1004\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR (User 'Aturk_2')
O4 - HKUS\S-1-5-21-4180781486-2795493224-1182082833-1004\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun (User 'Aturk_2')
O4 - HKUS\S-1-5-21-4180781486-2795493224-1182082833-1004\..\Run: [SpybotPostWindows10UpgradeReInstall] "C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe" (User 'Aturk_2')
O4 - Global Startup: Killer Network Manager.lnk = C:\Program Files\Killer Networking\Network Manager\NetworkManager.exe
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://ccfiles.creative.com/Web/softwar ... /CTPID.cab
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Avast Antivirus (avast! Antivirus) - Avast Software s.r.o. - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: AvastVBox COM Service (AvastVBoxSvc) - Avast Software - C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: SluĹľba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: SluĹľba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Killer Service V2 - Rivet Networks - C:\Program Files\Killer Networking\Network Manager\KillerService.exe
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Origin Client Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginClientService.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 7961 bytes

======Listing Processes======





wininit.exe

winlogon.exe

C:\Windows\system32\lsass.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
"dwm.exe"
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
atieclxx
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\Windows\Explorer.EXE
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {995C996E-D918-4a8c-A302-45719A6F4EA7} -Embedding
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
taskhostex.exe
C:\Windows\System32\svchost.exe -k utcsvc
dashost.exe {8eab1c97-363f-4c8b-959d1031e096687d}
"C:\Program Files\Killer Networking\Network Manager\KillerService.exe"
"C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
ngservice.exe pipeserver
"C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s
"C:\Program Files\Killer Networking\Network Manager\NetworkManager.exe" -minimize
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
C:\Windows\system32\wbem\unsecapp.exe -Embedding
"C:\Windows\system32\GWX\GWX.exe"

"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 564 568 576 65536 572
"D:\Stažené soubory\RSITx64.exe"
C:\Windows\system32\DllHost.exe /Processid:{3EB3C877-1F16-487C-9050-104DBCD66683}

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe#

=========Mozilla firefox=========

ProfilePath - C:\Users\Aturk\AppData\Roaming\Mozilla\Firefox\Profiles\h7xdc9vb.default

prefs.js - "browser.startup.homepage" - "www.seznam.cz"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 19.0.0.245 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_245.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=11.45.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=11.45.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.1.5]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.0]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.1]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 19.0.0.245 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_19_0_0_245.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll


C:\Users\Aturk\AppData\Roaming\Mozilla\Firefox\Profiles\h7xdc9vb.default\extensions\
{2d3fbcf7-be69-4433-8858-c621a8d0e58d}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-03-24 662672]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll [2015-04-23 460712]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-03-24 565304]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-04-23 172968]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2015-03-04 8461528]
"MBCfg64"=C:\Windows\system32\MBCfg64.dll [2014-02-21 41088]
"VIAxHCUtl"=C:\Program Files\VIA XHCI UASP Utility\usb3Monitor []
"Logitech Download Assistant"=C:\Windows\System32\LogiLDA.dll [2012-09-20 3933496]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"*WerKernelReporting"=C:\Windows\SYSTEM32\WerFault.exe [2014-10-29 465320]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2014-12-12 7394584]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2014-03-04 3696912]
"Steam"=C:\Program Files (x86)\Steam\steam.exe [2015-11-10 3011152]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Report"=\AdwCleaner\AdwCleaner[C1].txt [2015-11-22 831]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Sound Blaster Cinema 2"=C:\Program Files (x86)\Creative\Sound Blaster Cinema 2\Sound Blaster Cinema 2\SBCinema2.exe [2014-02-24 1440768]
"UpdReg"=C:\Windows\UpdReg.EXE [2000-05-11 90112]
"StartCCC"=C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [2014-11-20 767176]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2015-05-12 5515496]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\RunOnce]
"20150107"=C:\Program Files\AVAST Software\Avast\setup\emupdate\dc1347fe-c928-4755-b00e-d267349d89ed.exe [2015-11-23 183232]
"OTM"=D:\Stažené soubory\OTM.exe [2015-11-23 522240]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Killer Network Manager.lnk - C:\Program Files\Killer Networking\Network Manager\NetworkManager.exe

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"SoftwareSASGeneration"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.YUY2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"VIDC.YVYU"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"vidc.ffds"=ff_vfw.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-11-22 19:27:39 ----D---- C:\AdwCleaner
2015-11-22 18:54:42 ----D---- C:\rsit
2015-11-22 18:54:42 ----D---- C:\Program Files\trend micro
2015-11-22 16:40:37 ----A---- C:\Windows\system32\drivers\HWiNFO64A.SYS
2015-11-22 16:38:40 ----D---- C:\Program Files\HWiNFO64
2015-11-22 07:34:56 ----A---- C:\Windows\wininit.ini
2015-11-21 18:10:44 ----D---- C:\Program Files\Common Files\AV
2015-11-21 18:08:08 ----D---- C:\ProgramData\Spybot - Search & Destroy
2015-11-11 16:47:39 ----A---- C:\Windows\system32\drivers\tdx.sys
2015-11-11 16:47:39 ----A---- C:\Windows\system32\drivers\afd.sys
2015-11-11 16:47:38 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2015-11-11 16:47:38 ----A---- C:\Windows\system32\kerberos.dll
2015-11-11 16:47:36 ----A---- C:\Windows\system32\schannel.dll
2015-11-11 16:47:36 ----A---- C:\Windows\system32\lsasrv.dll
2015-11-11 16:47:35 ----A---- C:\Windows\SYSWOW64\schannel.dll
2015-11-11 16:47:35 ----A---- C:\Windows\SYSWOW64\ncryptsslp.dll
2015-11-11 16:47:35 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2015-11-11 16:47:35 ----A---- C:\Windows\SYSWOW64\certcli.dll
2015-11-11 16:47:35 ----A---- C:\Windows\SYSWOW64\bcryptprimitives.dll
2015-11-11 16:47:35 ----A---- C:\Windows\system32\ncryptsslp.dll
2015-11-11 16:47:35 ----A---- C:\Windows\system32\ncrypt.dll
2015-11-11 16:47:35 ----A---- C:\Windows\system32\drivers\tunnel.sys
2015-11-11 16:47:35 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2015-11-11 16:47:35 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2015-11-11 16:47:35 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2015-11-11 16:47:35 ----A---- C:\Windows\system32\drivers\cng.sys
2015-11-11 16:47:35 ----A---- C:\Windows\system32\certcli.dll
2015-11-11 16:47:35 ----A---- C:\Windows\system32\bcryptprimitives.dll
2015-11-11 16:47:35 ----A---- C:\Windows\system32\AuthHost.exe
2015-11-11 16:47:34 ----AC---- C:\Windows\system32\drivers\tpm.sys
2015-11-11 16:47:34 ----A---- C:\Windows\SYSWOW64\puiobj.dll
2015-11-11 16:47:34 ----A---- C:\Windows\SYSWOW64\gdi32.dll
2015-11-11 16:47:34 ----A---- C:\Windows\system32\winresume.exe
2015-11-11 16:47:34 ----A---- C:\Windows\system32\winload.exe
2015-11-11 16:47:34 ----A---- C:\Windows\system32\puiobj.dll
2015-11-11 16:47:34 ----A---- C:\Windows\system32\ntoskrnl.exe
2015-11-11 16:47:34 ----A---- C:\Windows\system32\localspl.dll
2015-11-11 16:47:34 ----A---- C:\Windows\system32\gdi32.dll
2015-11-11 16:47:32 ----A---- C:\Windows\SYSWOW64\wuwebv.dll
2015-11-11 16:47:32 ----A---- C:\Windows\SYSWOW64\wudriver.dll
2015-11-11 16:47:32 ----A---- C:\Windows\SYSWOW64\wuapp.exe
2015-11-11 16:47:32 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2015-11-11 16:47:32 ----A---- C:\Windows\system32\wuwebv.dll
2015-11-11 16:47:32 ----A---- C:\Windows\system32\WUSettingsProvider.dll
2015-11-11 16:47:32 ----A---- C:\Windows\system32\wudriver.dll
2015-11-11 16:47:32 ----A---- C:\Windows\system32\wucltux.dll
2015-11-11 16:47:32 ----A---- C:\Windows\system32\wuaueng.dll
2015-11-11 16:47:32 ----A---- C:\Windows\system32\wuauclt.exe
2015-11-11 16:47:32 ----A---- C:\Windows\system32\wuapp.exe
2015-11-11 16:47:32 ----A---- C:\Windows\system32\wuapi.dll
2015-11-11 16:47:29 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2015-11-11 16:47:29 ----A---- C:\Windows\system32\mshtml.dll
2015-11-11 16:47:27 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2015-11-11 16:47:27 ----A---- C:\Windows\system32\jscript9.dll
2015-11-11 16:47:27 ----A---- C:\Windows\system32\iertutil.dll
2015-11-11 16:47:27 ----A---- C:\Windows\system32\ieframe.dll
2015-11-11 16:47:26 ----A---- C:\Windows\SYSWOW64\wininet.dll
2015-11-11 16:47:26 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2015-11-11 16:47:26 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2015-11-11 16:47:26 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2015-11-11 16:47:26 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2015-11-11 16:47:26 ----A---- C:\Windows\SYSWOW64\jscript.dll
2015-11-11 16:47:26 ----A---- C:\Windows\SYSWOW64\inetcomm.dll
2015-11-11 16:47:26 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2015-11-11 16:47:26 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2015-11-11 16:47:26 ----A---- C:\Windows\system32\wininet.dll
2015-11-11 16:47:26 ----A---- C:\Windows\system32\vbscript.dll
2015-11-11 16:47:26 ----A---- C:\Windows\system32\urlmon.dll
2015-11-11 16:47:26 ----A---- C:\Windows\system32\msfeeds.dll
2015-11-11 16:47:26 ----A---- C:\Windows\system32\jscript.dll
2015-11-11 16:47:26 ----A---- C:\Windows\system32\inetcomm.dll
2015-11-11 16:47:26 ----A---- C:\Windows\system32\ieapfltr.dll
2015-11-11 16:47:26 ----A---- C:\Windows\system32\ie4uinit.exe
2015-11-11 16:47:17 ----A---- C:\Windows\system32\IKEEXT.DLL
2015-11-11 16:46:54 ----A---- C:\Windows\system32\win32k.sys
2015-11-04 19:06:03 ----D---- C:\Program Files (x86)\Mozilla Firefox
2015-10-26 20:21:33 ----D---- C:\.oracle_jre_usage
2015-10-26 20:21:04 ----D---- C:\Windows\SYSWOW64\Oracle
2015-10-26 20:21:04 ----D---- C:\Oracle

======List of files/folders modified in the last 1 month======

2015-11-23 16:41:50 ----D---- C:\Windows\Temp
2015-11-23 16:37:17 ----D---- C:\Windows\Tasks
2015-11-23 16:37:17 ----D---- C:\Windows\system32\Tasks
2015-11-23 16:12:39 ----D---- C:\Windows\Prefetch
2015-11-22 19:37:22 ----D---- C:\Windows\System32
2015-11-22 19:37:22 ----D---- C:\Windows\Inf
2015-11-22 19:37:22 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-11-22 19:02:00 ----D---- C:\Windows\system32\sru
2015-11-22 18:54:42 ----RD---- C:\Program Files
2015-11-22 17:07:00 ----D---- C:\Windows\Minidump
2015-11-22 17:06:57 ----D---- C:\Windows
2015-11-22 16:40:37 ----D---- C:\Windows\system32\drivers
2015-11-22 11:21:14 ----D---- C:\Windows\Microsoft.NET
2015-11-22 11:17:47 ----D---- C:\Windows\system32\config
2015-11-22 11:15:34 ----D---- C:\Windows\debug
2015-11-22 07:52:07 ----SHD---- C:\Windows\Installer
2015-11-22 07:52:05 ----D---- C:\Windows\SysWOW64
2015-11-22 07:51:35 ----D---- C:\Program Files (x86)\Java
2015-11-22 07:48:38 ----RD---- C:\Program Files (x86)
2015-11-22 07:43:12 ----SHD---- C:\System Volume Information
2015-11-22 07:34:56 ----SD---- C:\ProgramData\Microsoft
2015-11-22 07:31:32 ----D---- C:\Windows\SoftwareDistribution
2015-11-22 07:27:20 ----D---- C:\Program Files (x86)\Steam
2015-11-21 18:10:44 ----D---- C:\Program Files\Common Files
2015-11-21 18:08:08 ----HD---- C:\ProgramData
2015-11-21 16:51:56 ----D---- C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-11-14 02:50:58 ----D---- C:\Windows\system32\DriverStore
2015-11-14 02:50:53 ----D---- C:\Windows\WinSxS
2015-11-11 18:41:47 ----D---- C:\Windows\rescache
2015-11-11 18:36:48 ----RSD---- C:\Windows\assembly
2015-11-11 18:20:01 ----RD---- C:\Windows\ToastData
2015-11-11 18:20:00 ----D---- C:\Windows\apppatch
2015-11-11 16:56:32 ----D---- C:\Windows\CbsTemp
2015-11-11 16:55:39 ----D---- C:\Windows\system32\MRT
2015-11-11 16:52:53 ----A---- C:\Windows\system32\MRT.exe
2015-11-11 16:45:42 ----D---- C:\Windows\system32\catroot2
2015-11-07 13:09:43 ----D---- C:\Windows\Logs
2015-11-07 12:33:23 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2015-11-03 01:23:06 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2015-05-01 65736]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2015-05-01 272248]
R0 Wof;Windows Overlay File System Filter Driver; C:\Windows\system32\drivers\Wof.sys [2014-09-24 157016]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2015-05-01 93528]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2015-05-01 1047320]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2015-06-26 442264]
R1 BfLwf;@oem20.inf,%BfLwf_Desc%;KIller Bandwidth Control; C:\Windows\system32\DRIVERS\bwcW8x64.sys [2015-01-29 100912]
R1 dtsoftbus01;@oem10.inf,%DTSoftBus.SVCDESC%;DAEMON Tools Virtual Bus Driver; C:\Windows\System32\drivers\dtsoftbus01.sys [2015-01-18 283064]
R1 HWiNFO32;HWiNFO32/64 Kernel Driver; \??\C:\Windows\system32\drivers\HWiNFO64A.SYS [2015-11-22 27552]
R1 mbamchameleon;mbamchameleon; \??\C:\Windows\system32\drivers\mbamchameleon.sys [2015-06-18 109272]
R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2015-05-01 29168]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2015-05-01 89944]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2015-05-01 137288]
R2 VBoxAswDrv;VBoxAsw Support Driver; \??\C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [2015-05-01 273824]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2014-11-21 18959360]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2014-11-21 589312]
R3 AtiHDAudioService;@oem8.inf,%ATIHdAudioDriver.SvcDesc%;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdWB6.sys [2014-06-21 223232]
R3 AVerAF15DMBTH64;@oem9.inf,%AVerAF15DMBTH.ServiceName%;AVerMedia A850 USB; C:\Windows\System32\Drivers\AVerAF15DMBTH64.sys [2009-07-27 592256]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2015-03-10 4430808]
R3 Ke2200;@oem1.inf,%BFTN.Service.DispName%;NDIS Miniport Driver for Killer e2201/e2202 PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\e22w8x64.sys [2014-03-27 130224]
R3 MBAMProtector;MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [2015-06-18 25816]
R3 MBfilt;MBfilt; C:\Windows\system32\drivers\MBfilt64.sys [2009-11-18 32344]
R3 VUSB3HUB;@oem12.inf,%VUSB3HUB.SVCDESC%;VIA USB 3 Root Hub Service; C:\Windows\System32\drivers\ViaHub3.sys [2014-10-31 227840]
S0 amdkmafd;@oem6.inf,%AMDKMAFD_svcdesc%;AMD Audio Bus Lower Filter; C:\Windows\System32\drivers\amdkmafd.sys [2012-09-23 21160]
S2 AODDriver4.2.0;AODDriver4.2.0; \??\C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys []
S3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [2015-08-08 136408]
S3 MBAMWebAccessControl;MBAMWebAccessControl; \??\C:\Windows\system32\drivers\mwac.sys [2015-06-18 64216]
S3 MSICDSetup;MSICDSetup; \??\E:\Nová složka\CDriver64.sys []
S3 NTIOLib_1_0_C;NTIOLib_1_0_C; \??\E:\Nová složka\NTIOLib_X64.sys []
S3 usbscan;@sti.inf,%usbscan.SvcDesc%;OvladaÄŤ skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2014-10-29 44544]
S3 WINUSB;@winusb.inf,%WINUSB_SvcDesc%;WinUsb Driver; C:\Windows\System32\drivers\WinUSB.SYS [2013-08-22 78848]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2014-11-21 244736]
R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2015-05-01 343336]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2014-10-29 38792]
R2 Killer Service V2;Killer Service V2; C:\Program Files\Killer Networking\Network Manager\KillerService.exe [2015-02-05 386560]
R2 MBAMScheduler;MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [2015-06-18 1871160]
R3 AvastVBoxSvc;AvastVBox COM Service; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [2015-05-01 4034896]
S2 gupdate;SluĹľba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-20 144200]
S2 MBAMService;MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [2015-06-18 1133880]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-11-22 269000]
S3 BthHFSrv;@%SystemRoot%\System32\BthHFSrv.dll,-103; C:\Windows\System32\svchost.exe [2014-10-29 38792]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2013-08-03 43696]
S3 gupdatem;SluĹľba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-20 144200]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2015-11-04 147624]
S3 Origin Client Service;Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2015-10-18 2078216]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2015-11-10 836176]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119673
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Preventivní kontrola.Někdy se PC samo resetuje

#8 Příspěvek od Rudy »

Smazáno. Znovu spusťte OTM a klikněte na >CleanUp!<. OTM po sobě uklidí. Nakonec restartujte PC. Nastala nějaká změna?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
aturk
Návštěvník
Návštěvník
Příspěvky: 59
Registrován: 13 srp 2008 17:40

Re: Preventivní kontrola.Někdy se PC samo resetuje

#9 Příspěvek od aturk »

Pc zatim ok.Restarty byli nahodilé,takze uvidime. Jestli je to vse tak moc diky. jeste se v pruběhu dni ozvu s synovo notebookem.
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119673
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Preventivní kontrola.Někdy se PC samo resetuje

#10 Příspěvek od Rudy »

Ano, vše. Nemáte zač! :)
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Odpovědět

Zpět na „Řešení problémů, logy“