Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

vypinani azasekavani pc

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Odpovědět
Zpráva
Autor
P.Stiller
Návštěvník
Návštěvník
Příspěvky: 18
Registrován: 20 srp 2009 15:46

vypinani azasekavani pc

#1 Příspěvek od P.Stiller »

8 08:22:48 ----A---- C:\Windows\system32\wlansvc.dll
2017-10-18 08:22:48 ----A---- C:\Windows\system32\wlanmsm.dll
2017-10-18 08:22:48 ----A---- C:\Windows\system32\SearchFilterHost.exe
2017-10-18 08:22:48 ----A---- C:\Windows\system32\oleres.dll
2017-10-18 08:22:48 ----A---- C:\Windows\system32\netbtugc.exe
2017-10-18 08:22:47 ----A---- C:\Windows\system32\wvc.dll
2017-10-18 08:22:47 ----A---- C:\Windows\system32\wpnpinst.exe
2017-10-18 08:22:47 ----A---- C:\Windows\system32\wlanhlp.dll
2017-10-18 08:22:47 ----A---- C:\Windows\system32\wlanapi.dll
2017-10-18 08:22:47 ----A---- C:\Windows\system32\sspicli.dll
2017-10-18 08:22:47 ----A---- C:\Windows\system32\srclient.dll
2017-10-18 08:22:47 ----A---- C:\Windows\system32\smss.exe
2017-10-18 08:22:47 ----A---- C:\Windows\system32\setbcdlocale.dll
2017-10-18 08:22:47 ----A---- C:\Windows\system32\secur32.dll
2017-10-18 08:22:47 ----A---- C:\Windows\system32\rstrui.exe
2017-10-18 08:22:47 ----A---- C:\Windows\system32\perfmon.exe
2017-10-18 08:22:47 ----A---- C:\Windows\system32\mssvp.dll
2017-10-18 08:22:47 ----A---- C:\Windows\system32\mssphtb.dll
2017-10-18 08:22:47 ----A---- C:\Windows\system32\mssitlb.dll
2017-10-18 08:22:47 ----A---- C:\Windows\system32\msscntrs.dll
2017-10-18 08:22:47 ----A---- C:\Windows\system32\msaudite.dll
2017-10-18 08:22:47 ----A---- C:\Windows\system32\lsass.exe
2017-10-18 08:22:47 ----A---- C:\Windows\system32\cryptbase.dll
2017-10-18 08:22:47 ----A---- C:\Windows\system32\credssp.dll
2017-10-18 08:22:47 ----A---- C:\Windows\system32\auditpol.exe
2017-10-18 08:22:47 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2017-10-18 08:22:46 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2017-10-18 08:22:46 ----A---- C:\Windows\system32\winnsi.dll
2017-10-18 08:22:46 ----A---- C:\Windows\system32\resmon.exe
2017-10-18 08:22:46 ----A---- C:\Windows\system32\ntprint.exe
2017-10-18 08:22:46 ----A---- C:\Windows\system32\mssprxy.dll
2017-10-18 08:22:46 ----A---- C:\Windows\system32\inetppui.dll
2017-10-18 08:22:46 ----A---- C:\Windows\system32\icaapi.dll
2017-10-18 08:22:45 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2017-10-18 08:22:45 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2017-10-18 08:22:45 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2017-10-18 08:22:45 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2017-10-18 08:22:45 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2017-10-18 08:22:45 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2017-10-18 08:22:45 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2017-10-18 08:22:45 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2017-10-18 08:22:45 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2017-10-18 08:22:45 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2017-10-18 08:22:45 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2017-10-18 08:22:45 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2017-10-18 08:22:45 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2017-10-18 08:22:45 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2017-10-18 08:22:45 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2017-10-18 08:22:45 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2017-10-18 08:22:45 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2017-10-18 08:22:45 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2017-10-18 08:22:45 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2017-10-18 08:22:45 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2017-10-18 08:22:45 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2017-10-18 08:22:45 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2017-10-18 08:22:45 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2017-10-18 08:22:45 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2017-10-18 08:22:45 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2017-10-18 08:22:45 ----A---- C:\Windows\system32\sspisrv.dll
2017-10-18 08:22:45 ----A---- C:\Windows\system32\nsi.dll
2017-10-18 08:22:45 ----A---- C:\Windows\system32\msshooks.dll
2017-10-18 08:22:45 ----A---- C:\Windows\system32\mfps.dll
2017-10-18 08:22:45 ----A---- C:\Windows\system32\comcat.dll
2017-10-18 08:22:45 ----A---- C:\Windows\system32\apisetschema.dll
2017-10-18 08:22:44 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2017-10-18 08:22:44 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2017-10-18 08:22:44 ----A---- C:\Windows\system32\tzres.dll
2017-10-18 08:22:44 ----A---- C:\Windows\system32\rrinstaller.exe
2017-10-18 08:22:44 ----A---- C:\Windows\system32\mstext40.dll
2017-10-18 08:22:44 ----A---- C:\Windows\system32\msobjs.dll
2017-10-18 08:22:44 ----A---- C:\Windows\system32\msexch40.dll
2017-10-18 08:22:44 ----A---- C:\Windows\system32\mfpmp.exe
2017-10-18 08:22:44 ----A---- C:\Windows\system32\mferror.dll
2017-10-18 08:19:26 ----A---- C:\Windows\system32\appraiser.dll
2017-10-18 08:19:26 ----A---- C:\Windows\system32\aitstatic.exe
2017-10-18 08:19:26 ----A---- C:\Windows\system32\aepic.dll
2017-10-18 08:19:26 ----A---- C:\Windows\system32\aeinv.dll
2017-10-18 08:19:25 ----A---- C:\Windows\system32\invagent.dll
2017-10-18 08:19:25 ----A---- C:\Windows\system32\generaltel.dll
2017-10-18 08:19:25 ----A---- C:\Windows\system32\devinv.dll
2017-10-18 08:19:25 ----A---- C:\Windows\system32\CompatTelRunner.exe
2017-10-18 08:19:25 ----A---- C:\Windows\system32\centel.dll
2017-10-18 08:19:25 ----A---- C:\Windows\system32\acmigration.dll

======List of files/folders modified in the last 1 month======

2017-11-01 21:04:39 ----D---- C:\Windows\Prefetch
2017-11-01 21:04:38 ----D---- C:\Windows\Temp
2017-11-01 20:46:12 ----RD---- C:\Program Files
2017-11-01 20:39:27 ----D---- C:\Windows\System32
2017-11-01 20:39:27 ----A---- C:\Windows\system32\PerfStringBackup.INI
2017-11-01 20:15:03 ----D---- C:\Users\doma\AppData\Roaming\TS3Client
2017-11-01 14:59:49 ----D---- C:\Windows\system32\config
2017-10-31 05:20:58 ----SHD---- C:\System Volume Information
2017-10-30 19:07:02 ----HD---- C:\Config.Msi
2017-10-30 12:34:55 ----D---- C:\Windows\system32\drivers
2017-10-30 11:15:12 ----D---- C:\Windows\inf
2017-10-30 11:14:56 ----D---- C:\Windows\system32\DriverStore
2017-10-30 11:01:58 ----SHD---- C:\Windows\Installer
2017-10-30 11:01:58 ----D---- C:\Windows\system32\Tasks
2017-10-30 10:53:39 ----HD---- C:\ProgramData
2017-10-30 08:37:59 ----D---- C:\Program Files\Common Files
2017-10-30 08:37:15 ----D---- C:\ProgramData\Skype
2017-10-18 13:49:58 ----D---- C:\Windows\rescache
2017-10-18 09:00:27 ----D---- C:\Windows\Microsoft.NET
2017-10-18 08:56:54 ----RSD---- C:\Windows\assembly
2017-10-18 08:42:15 ----D---- C:\Windows\system32\migration
2017-10-18 08:42:15 ----D---- C:\Windows\system32\en-US
2017-10-18 08:42:15 ----D---- C:\Windows\system32\cs-CZ
2017-10-18 08:42:15 ----D---- C:\Program Files\Internet Explorer
2017-10-18 08:42:13 ----D---- C:\Windows\AppPatch
2017-10-18 08:42:12 ----D---- C:\Windows\system32\appraiser
2017-10-18 08:28:13 ----D---- C:\Windows\system32\MRT
2017-10-18 08:24:39 ----AC---- C:\Windows\system32\MRT.exe
2017-10-05 06:33:15 ----D---- C:\Windows\system32\manifeststore

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 edevmon;edevmon; C:\Windows\system32\DRIVERS\edevmon.sys [2016-11-13 156296]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2016-11-13 206472]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2016-11-13 156288]
R2 epfwwfpr;epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys [2016-11-13 141448]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\Windows\system32\drivers\RTKVAC.SYS [2009-06-18 4172832]
R3 dtlitescsibus;DAEMON Tools Lite Virtual SCSI Bus; C:\Windows\system32\DRIVERS\dtlitescsibus.sys [2016-09-30 26168]
R3 dtliteusbbus;DAEMON Tools Lite Virtual USB Bus; C:\Windows\system32\DRIVERS\dtliteusbbus.sys [2016-09-30 40504]
R3 RTL8167;Ovladač Realtek 8167 NT; C:\Windows\system32\DRIVERS\Rt86win7.sys [2009-07-13 139776]
S2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;Ovladač filtru AMD portu AGP; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-13 229888]
S3 PAC207;SoC PC-Camera; C:\Windows\system32\DRIVERS\PFC027.SYS [2006-12-05 507136]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
S3 silabenm;Silicon Labs CP210x USB to UART Bridge Serial Port Enumerator Driver; C:\Windows\system32\DRIVERS\silabenm.sys [2014-04-11 16128]
S3 silabser;Silicon Labs CP210x USB to UART Bridge Driver; C:\Windows\system32\DRIVERS\silabser.sys [2014-04-11 67968]
S3 sisagp;Filtr SIS sběrnice AGP; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-20 52224]
S3 usb_rndisx;Adaptér USB RNDIS; C:\Windows\system32\DRIVERS\usb8023x.sys [2013-02-12 15872]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 36352]
S3 viaagp;Filtr VIA sběrnice AGP; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 WinUsb;YunOS USB Driver; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 35968]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2017-04-21 47224]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2016-11-13 2167696]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2017-04-21 107656]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2016-10-10 153752]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2017-07-18 317408]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2017-10-30 272384]
S3 Disc Soft Lite Bus Service;Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [2016-08-29 1138368]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2016-10-10 153752]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2017-09-07 104960]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2017-04-21 136312]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2017-04-21 136312]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2017-04-21 136312]

-----------------EOF-----------------

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119665
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: vypinani azasekavani pc

#2 Příspěvek od Rudy »

Zdravím!
Abych vám mohl pomoci, dejte kompletní log, nejlépe FRST: https://forum.viry.cz/viewtopic.php?f=13&t=152707 . Log, který jste dal, není kompletní.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

P.Stiller
Návštěvník
Návštěvník
Příspěvky: 18
Registrován: 20 srp 2009 15:46

Re: vypinani azasekavani pc

#3 Příspěvek od P.Stiller »

Logfile of random's system information tool 1.10 (written by random/random)
Run by doma at 2017-11-01 21:04:38
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 69 GB (29%) free of 238 GB
Total RAM: 2047 MB (57% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:04:39, on 1.11.2017
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18817)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Games\World_of_Tanks\WargamingGameUpdater.exe
C:\Windows\system32\DllHost.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Windows\system32\taskhost.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\TweakBit\PCRepairKit\PCRepairKit.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\doma\Downloads\RSIT (1).exe
C:\Program Files\trend micro\doma.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O4 - HKCU\..\Run: [World of Tanks] "C:\Games\World_of_Tanks\WargamingGameUpdater.exe"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'Default user')
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: http://help.eset.com (HKLM)
O15 - ESC Trusted Zone: http://help.eset.com (HKLM)
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Disc Soft Lite Bus Service - Disc Soft Ltd - C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe

--
End of file - 3836 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"World of Tanks"=C:\Games\World_of_Tanks\WargamingGameUpdater.exe [2017-02-28 3135752]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-02-27 35696]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CommonToolkitTray_Solvusoft]
C:\Program Files\Solvusoft\Tray\SolvusoftTray.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cz.seznam.software.autoupdate]
C:\Users\doma\AppData\Roaming\Seznam.cz\szninstall.exe [2013-05-16 1062472]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cz.seznam.software.szndesktop]
C:\Users\doma\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [2015-05-26 103080]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite Automount]
C:\Program Files\DAEMON Tools Lite\DTAgent.exe [2016-08-29 3376832]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Discord]
C:\Users\doma\AppData\Local\Discord\app-0.0.297\Discord.exe [2017-01-04 64290304]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
C:\Users\doma\AppData\Local\Google\Update\GoogleUpdate.exe /c []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Monitor]
C:\Windows\PixArt\PAC207\Monitor.exe [2006-11-03 319488]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Overwolf]
C:\Program Files\Overwolf\OverwolfLauncher.exe -overwolfsilent []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\seznam-listicka-distribuce]
C:\Program Files\Seznam.cz\distribution\szninstall.exe [2013-05-16 1062472]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
C:\Program Files\Skype\Phone\Skype.exe [2017-08-25 27832272]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMan]
C:\Windows\SOUNDMAN.EXE [2009-04-14 604704]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\uTorrent]
C:\Users\doma\AppData\Roaming\uTorrent\uTorrent.exe [2017-09-07 2146496]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\World of Tanks]
C:\Games\World_of_Tanks\WargamingGameUpdater.exe [2017-02-28 3135752]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2017-11-01 20:46:12 ----D---- C:\rsit
2017-11-01 20:46:12 ----D---- C:\Program Files\trend micro
2017-10-30 10:53:44 ----D---- C:\Program Files\McAfee
2017-10-30 10:53:39 ----D---- C:\ProgramData\McAfee
2017-10-30 10:52:55 ----D---- C:\ProgramData\TweakBit
2017-10-30 10:52:45 ----D---- C:\Program Files\TweakBit
2017-10-30 08:37:59 ----D---- C:\Program Files\Common Files\Skype
2017-10-30 08:37:40 ----RD---- C:\Program Files\Skype
2017-10-30 08:15:09 ----D---- C:\Users\doma\AppData\Roaming\Macromedia
2017-10-30 08:15:06 ----A---- C:\Windows\system32\FlashPlayerApp.exe
2017-10-30 08:15:03 ----D---- C:\Windows\system32\Macromed
2017-10-30 07:57:55 ----D---- C:\Users\doma\AppData\Roaming\AVG
2017-10-29 19:50:37 ----SHD---- C:\found.000
2017-10-24 17:39:32 ----D---- C:\ProgramData\Package Cache
2017-10-24 17:22:25 ----D---- C:\Program Files\AVG
2017-10-24 17:21:07 ----D---- C:\ProgramData\Avg
2017-10-24 17:21:06 ----HD---- C:\ProgramData\Common Files
2017-10-18 08:25:03 ----AC---- C:\Windows\system32\MRT-KB890830.exe
2017-10-18 08:23:15 ----A---- C:\Windows\system32\vbscript.dll
2017-10-18 08:23:15 ----A---- C:\Windows\system32\jsproxy.dll
2017-10-18 08:23:15 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2017-10-18 08:23:14 ----A---- C:\Windows\system32\wininet.dll
2017-10-18 08:23:14 ----A---- C:\Windows\system32\jscript9diag.dll
2017-10-18 08:23:14 ----A---- C:\Windows\system32\jscript.dll
2017-10-18 08:23:14 ----A---- C:\Windows\system32\ieUnatt.exe
2017-10-18 08:23:14 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2017-10-18 08:23:14 ----A---- C:\Windows\system32\dxtmsft.dll
2017-10-18 08:23:13 ----A---- C:\Windows\system32\dxtrans.dll
2017-10-18 08:23:12 ----A---- C:\Windows\system32\ieui.dll
2017-10-18 08:23:11 ----A---- C:\Windows\system32\mshtmled.dll
2017-10-18 08:23:10 ----A---- C:\Windows\system32\mshtmlmedia.dll
2017-10-18 08:23:10 ----A---- C:\Windows\system32\MshtmlDac.dll
2017-10-18 08:23:09 ----A---- C:\Windows\system32\iertutil.dll
2017-10-18 08:23:08 ----A---- C:\Windows\system32\jscript9.dll
2017-10-18 08:23:07 ----A---- C:\Windows\system32\mshtml.dll
2017-10-18 08:23:06 ----A---- C:\Windows\system32\msfeeds.dll
2017-10-18 08:23:06 ----A---- C:\Windows\system32\ieapfltr.dll
2017-10-18 08:23:05 ----A---- C:\Windows\system32\webcheck.dll
2017-10-18 08:23:05 ----A---- C:\Windows\system32\msrating.dll
2017-10-18 08:23:04 ----A---- C:\Windows\system32\iesetup.dll
2017-10-18 08:23:04 ----A---- C:\Windows\system32\ieframe.dll
2017-10-18 08:23:03 ----A---- C:\Windows\system32\inseng.dll
2017-10-18 08:23:03 ----A---- C:\Windows\system32\iernonce.dll
2017-10-18 08:23:02 ----A---- C:\Windows\system32\urlmon.dll
2017-10-18 08:23:02 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2017-10-18 08:23:02 ----A---- C:\Windows\system32\msrd3x40.dll
2017-10-18 08:23:02 ----A---- C:\Windows\system32\msrd2x40.dll
2017-10-18 08:23:02 ----A---- C:\Windows\system32\msjtes40.dll
2017-10-18 08:23:02 ----A---- C:\Windows\system32\msjetoledb40.dll
2017-10-18 08:23:02 ----A---- C:\Windows\system32\ieetwproxystub.dll
2017-10-18 08:23:02 ----A---- C:\Windows\system32\ieetwcollector.exe
2017-10-18 08:23:02 ----A---- C:\Windows\system32\iedkcs32.dll
2017-10-18 08:23:02 ----A---- C:\Windows\system32\ie4uinit.exe
2017-10-18 08:23:01 ----A---- C:\Windows\system32\occache.dll
2017-10-18 08:23:01 ----A---- C:\Windows\system32\msrepl40.dll
2017-10-18 08:23:01 ----A---- C:\Windows\system32\msjet40.dll
2017-10-18 08:23:00 ----A---- C:\Windows\system32\win32k.sys
2017-10-18 08:23:00 ----A---- C:\Windows\system32\shell32.dll
2017-10-18 08:22:59 ----A---- C:\Windows\system32\ole32.dll
2017-10-18 08:22:59 ----A---- C:\Windows\system32\msxbde40.dll
2017-10-18 08:22:59 ----A---- C:\Windows\system32\mspbde40.dll
2017-10-18 08:22:59 ----A---- C:\Windows\system32\msltus40.dll
2017-10-18 08:22:59 ----A---- C:\Windows\system32\msexcl40.dll
2017-10-18 08:22:59 ----A---- C:\Windows\system32\mmcndmgr.dll
2017-10-18 08:22:59 ----A---- C:\Windows\system32\mmc.exe
2017-10-18 08:22:59 ----A---- C:\Windows\system32\ExplorerFrame.dll
2017-10-18 08:22:59 ----A---- C:\Windows\system32\DXPTaskRingtone.dll
2017-10-18 08:22:59 ----A---- C:\Windows\system32\drivers\tcpip.sys
2017-10-18 08:22:58 ----A---- C:\Windows\system32\ntoskrnl.exe
2017-10-18 08:22:58 ----A---- C:\Windows\system32\ntkrnlpa.exe
2017-10-18 08:22:57 ----A---- C:\Windows\system32\kernel32.dll
2017-10-18 08:22:56 ----A---- C:\Windows\system32\win32spl.dll
2017-10-18 08:22:56 ----A---- C:\Windows\system32\rdpcore.dll
2017-10-18 08:22:56 ----A---- C:\Windows\system32\localspl.dll
2017-10-18 08:22:56 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2017-10-18 08:22:55 ----A---- C:\Windows\system32\tquery.dll
2017-10-18 08:22:55 ----A---- C:\Windows\system32\kerberos.dll
2017-10-18 08:22:54 ----A---- C:\Windows\system32\Wldap32.dll
2017-10-18 08:22:54 ----A---- C:\Windows\system32\wer.dll
2017-10-18 08:22:54 ----A---- C:\Windows\system32\wdc.dll
2017-10-18 08:22:54 ----A---- C:\Windows\system32\schannel.dll
2017-10-18 08:22:54 ----A---- C:\Windows\system32\rpcss.dll
2017-10-18 08:22:54 ----A---- C:\Windows\system32\Query.dll
2017-10-18 08:22:54 ----A---- C:\Windows\system32\lsasrv.dll
2017-10-18 08:22:54 ----A---- C:\Windows\system32\drivers\ntfs.sys
2017-10-18 08:22:53 ----A---- C:\Windows\system32\usp10.dll
2017-10-18 08:22:53 ----A---- C:\Windows\system32\rpcrt4.dll
2017-10-18 08:22:53 ----A---- C:\Windows\system32\ntdll.dll
2017-10-18 08:22:53 ----A---- C:\Windows\system32\mswstr10.dll
2017-10-18 08:22:53 ----A---- C:\Windows\system32\mswdat10.dll
2017-10-18 08:22:53 ----A---- C:\Windows\system32\msv1_0.dll
2017-10-18 08:22:53 ----A---- C:\Windows\system32\mssrch.dll
2017-10-18 08:22:53 ----A---- C:\Windows\system32\msjter40.dll
2017-10-18 08:22:53 ----A---- C:\Windows\system32\msjint40.dll
2017-10-18 08:22:53 ----A---- C:\Windows\system32\KernelBase.dll
2017-10-18 08:22:53 ----A---- C:\Windows\system32\clfs.sys
2017-10-18 08:22:52 ----A---- C:\Windows\system32\msinfo32.exe
2017-10-18 08:22:52 ----A---- C:\Windows\system32\mf.dll
2017-10-18 08:22:52 ----A---- C:\Windows\system32\drivers\srv2.sys
2017-10-18 08:22:52 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2017-10-18 08:22:52 ----A---- C:\Windows\system32\drivers\http.sys
2017-10-18 08:22:52 ----A---- C:\Windows\system32\drivers\dxgmms1.sys
2017-10-18 08:22:52 ----A---- C:\Windows\system32\conhost.exe
2017-10-18 08:22:51 ----A---- C:\Windows\system32\winsrv.dll
2017-10-18 08:22:51 ----A---- C:\Windows\system32\rpchttp.dll
2017-10-18 08:22:51 ----A---- C:\Windows\system32\ntprint.dll
2017-10-18 08:22:51 ----A---- C:\Windows\system32\ncrypt.dll
2017-10-18 08:22:51 ----A---- C:\Windows\system32\msctf.dll
2017-10-18 08:22:51 ----A---- C:\Windows\system32\inetpp.dll
2017-10-18 08:22:51 ----A---- C:\Windows\system32\drivers\volmgrx.sys
2017-10-18 08:22:51 ----A---- C:\Windows\system32\drivers\tdx.sys
2017-10-18 08:22:51 ----A---- C:\Windows\system32\drivers\srv.sys
2017-10-18 08:22:51 ----A---- C:\Windows\system32\drivers\nwifi.sys
2017-10-18 08:22:51 ----A---- C:\Windows\system32\drivers\netio.sys
2017-10-18 08:22:51 ----A---- C:\Windows\system32\drivers\netbt.sys
2017-10-18 08:22:51 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2017-10-18 08:22:51 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2017-10-18 08:22:51 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2017-10-18 08:22:51 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS
2017-10-18 08:22:51 ----A---- C:\Windows\system32\advapi32.dll
2017-10-18 08:22:51 ----A---- C:\Windows\system32\adtschema.dll
2017-10-18 08:22:50 ----A---- C:\Windows\system32\wdigest.dll
2017-10-18 08:22:50 ----A---- C:\Windows\system32\t2embed.dll
2017-10-18 08:22:50 ----A---- C:\Windows\system32\srcore.dll
2017-10-18 08:22:50 ----A---- C:\Windows\system32\shdocvw.dll
2017-10-18 08:22:50 ----A---- C:\Windows\system32\SearchProtocolHost.exe
2017-10-18 08:22:50 ----A---- C:\Windows\system32\SearchIndexer.exe
2017-10-18 08:22:50 ----A---- C:\Windows\system32\nsisvc.dll
2017-10-18 08:22:50 ----A---- C:\Windows\system32\mssph.dll
2017-10-18 08:22:50 ----A---- C:\Windows\system32\mmcbase.dll
2017-10-18 08:22:50 ----A---- C:\Windows\system32\drivers\srvnet.sys
2017-10-18 08:22:50 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2017-10-18 08:22:50 ----A---- C:\Windows\system32\cic.dll
2017-10-18 08:22:50 ----A---- C:\Windows\system32\appidsvc.dll
2017-10-18 08:22:50 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2017-10-18 08:22:49 ----A---- C:\Windows\system32\wlansec.dll
2017-10-18 08:22:49 ----A---- C:\Windows\system32\wermgr.exe
2017-10-18 08:22:49 ----A---- C:\Windows\system32\werdiagcontroller.dll
2017-10-18 08:22:49 ----A---- C:\Windows\system32\TSpkg.dll
2017-10-18 08:22:49 ----A---- C:\Windows\system32\themeui.dll
2017-10-18 08:22:49 ----A---- C:\Windows\system32\pdhui.dll
2017-10-18 08:22:49 ----A---- C:\Windows\system32\mmcshext.dll
2017-10-18 08:22:49 ----A---- C:\Windows\system32\gdi32.dll
2017-10-18 08:22:49 ----A---- C:\Windows\system32\drivers\tssecsrv.sys
2017-10-18 08:22:49 ----A---- C:\Windows\system32\drivers\nsiproxy.sys
2017-10-18 08:22:49 ----A---- C:\Windows\system32\drivers\appid.sys
2017-10-18 08:22:49 ----A---- C:\Windows\system32\csrsrv.dll
2017-10-18 08:22:49 ----A---- C:\Windows\system32\cdd.dll
2017-10-18 08:22:49 ----A---- C:\Windows\system32\bcrypt.dll
2017-10-18 08:22:49 ----A---- C:\Windows\system32\appidapi.dll
2017-10-18 08:22:48 ----A---- C:\Windows\system32\wlansvc.dll
2017-10-18 08:22:48 ----A---- C:\Windows\system32\wlanmsm.dll
2017-10-18 08:22:48 ----A---- C:\Windows\system32\SearchFilterHost.exe
2017-10-18 08:22:48 ----A---- C:\Windows\system32\oleres.dll
2017-10-18 08:22:48 ----A---- C:\Windows\system32\netbtugc.exe
2017-10-18 08:22:47 ----A---- C:\Windows\system32\wvc.dll
2017-10-18 08:22:47 ----A---- C:\Windows\system32\wpnpinst.exe
2017-10-18 08:22:47 ----A---- C:\Windows\system32\wlanhlp.dll
2017-10-18 08:22:47 ----A---- C:\Windows\system32\wlanapi.dll
2017-10-18 08:22:47 ----A---- C:\Windows\system32\sspicli.dll
2017-10-18 08:22:47 ----A---- C:\Windows\system32\srclient.dll
2017-10-18 08:22:47 ----A---- C:\Windows\system32\smss.exe
2017-10-18 08:22:47 ----A---- C:\Windows\system32\setbcdlocale.dll
2017-10-18 08:22:47 ----A---- C:\Windows\system32\secur32.dll
2017-10-18 08:22:47 ----A---- C:\Windows\system32\rstrui.exe
2017-10-18 08:22:47 ----A---- C:\Windows\system32\perfmon.exe
2017-10-18 08:22:47 ----A---- C:\Windows\system32\mssvp.dll
2017-10-18 08:22:47 ----A---- C:\Windows\system32\mssphtb.dll
2017-10-18 08:22:47 ----A---- C:\Windows\system32\mssitlb.dll
2017-10-18 08:22:47 ----A---- C:\Windows\system32\msscntrs.dll
2017-10-18 08:22:47 ----A---- C:\Windows\system32\msaudite.dll
2017-10-18 08:22:47 ----A---- C:\Windows\system32\lsass.exe
2017-10-18 08:22:47 ----A---- C:\Windows\system32\cryptbase.dll
2017-10-18 08:22:47 ----A---- C:\Windows\system32\credssp.dll
2017-10-18 08:22:47 ----A---- C:\Windows\system32\auditpol.exe
2017-10-18 08:22:47 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2017-10-18 08:22:46 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2017-10-18 08:22:46 ----A---- C:\Windows\system32\winnsi.dll
2017-10-18 08:22:46 ----A---- C:\Windows\system32\resmon.exe
2017-10-18 08:22:46 ----A---- C:\Windows\system32\ntprint.exe
2017-10-18 08:22:46 ----A---- C:\Windows\system32\mssprxy.dll
2017-10-18 08:22:46 ----A---- C:\Windows\system32\inetppui.dll
2017-10-18 08:22:46 ----A---- C:\Windows\system32\icaapi.dll
2017-10-18 08:22:45 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2017-10-18 08:22:45 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2017-10-18 08:22:45 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2017-10-18 08:22:45 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2017-10-18 08:22:45 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2017-10-18 08:22:45 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2017-10-18 08:22:45 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2017-10-18 08:22:45 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2017-10-18 08:22:45 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2017-10-18 08:22:45 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2017-10-18 08:22:45 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2017-10-18 08:22:45 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2017-10-18 08:22:45 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2017-10-18 08:22:45 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2017-10-18 08:22:45 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2017-10-18 08:22:45 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2017-10-18 08:22:45 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2017-10-18 08:22:45 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2017-10-18 08:22:45 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2017-10-18 08:22:45 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2017-10-18 08:22:45 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2017-10-18 08:22:45 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2017-10-18 08:22:45 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2017-10-18 08:22:45 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2017-10-18 08:22:45 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2017-10-18 08:22:45 ----A---- C:\Windows\system32\sspisrv.dll
2017-10-18 08:22:45 ----A---- C:\Windows\system32\nsi.dll
2017-10-18 08:22:45 ----A---- C:\Windows\system32\msshooks.dll
2017-10-18 08:22:45 ----A---- C:\Windows\system32\mfps.dll
2017-10-18 08:22:45 ----A---- C:\Windows\system32\comcat.dll
2017-10-18 08:22:45 ----A---- C:\Windows\system32\apisetschema.dll
2017-10-18 08:22:44 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2017-10-18 08:22:44 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2017-10-18 08:22:44 ----A---- C:\Windows\system32\tzres.dll
2017-10-18 08:22:44 ----A---- C:\Windows\system32\rrinstaller.exe
2017-10-18 08:22:44 ----A---- C:\Windows\system32\mstext40.dll
2017-10-18 08:22:44 ----A---- C:\Windows\system32\msobjs.dll
2017-10-18 08:22:44 ----A---- C:\Windows\system32\msexch40.dll
2017-10-18 08:22:44 ----A---- C:\Windows\system32\mfpmp.exe
2017-10-18 08:22:44 ----A---- C:\Windows\system32\mferror.dll
2017-10-18 08:19:26 ----A---- C:\Windows\system32\appraiser.dll
2017-10-18 08:19:26 ----A---- C:\Windows\system32\aitstatic.exe
2017-10-18 08:19:26 ----A---- C:\Windows\system32\aepic.dll
2017-10-18 08:19:26 ----A---- C:\Windows\system32\aeinv.dll
2017-10-18 08:19:25 ----A---- C:\Windows\system32\invagent.dll
2017-10-18 08:19:25 ----A---- C:\Windows\system32\generaltel.dll
2017-10-18 08:19:25 ----A---- C:\Windows\system32\devinv.dll
2017-10-18 08:19:25 ----A---- C:\Windows\system32\CompatTelRunner.exe
2017-10-18 08:19:25 ----A---- C:\Windows\system32\centel.dll
2017-10-18 08:19:25 ----A---- C:\Windows\system32\acmigration.dll

======List of files/folders modified in the last 1 month======

2017-11-01 21:04:39 ----D---- C:\Windows\Prefetch
2017-11-01 21:04:38 ----D---- C:\Windows\Temp
2017-11-01 20:46:12 ----RD---- C:\Program Files
2017-11-01 20:39:27 ----D---- C:\Windows\System32
2017-11-01 20:39:27 ----A---- C:\Windows\system32\PerfStringBackup.INI
2017-11-01 20:15:03 ----D---- C:\Users\doma\AppData\Roaming\TS3Client
2017-11-01 14:59:49 ----D---- C:\Windows\system32\config
2017-10-31 05:20:58 ----SHD---- C:\System Volume Information
2017-10-30 19:07:02 ----HD---- C:\Config.Msi
2017-10-30 12:34:55 ----D---- C:\Windows\system32\drivers
2017-10-30 11:15:12 ----D---- C:\Windows\inf
2017-10-30 11:14:56 ----D---- C:\Windows\system32\DriverStore
2017-10-30 11:01:58 ----SHD---- C:\Windows\Installer
2017-10-30 11:01:58 ----D---- C:\Windows\system32\Tasks
2017-10-30 10:53:39 ----HD---- C:\ProgramData
2017-10-30 08:37:59 ----D---- C:\Program Files\Common Files
2017-10-30 08:37:15 ----D---- C:\ProgramData\Skype
2017-10-18 13:49:58 ----D---- C:\Windows\rescache
2017-10-18 09:00:27 ----D---- C:\Windows\Microsoft.NET
2017-10-18 08:56:54 ----RSD---- C:\Windows\assembly
2017-10-18 08:42:15 ----D---- C:\Windows\system32\migration
2017-10-18 08:42:15 ----D---- C:\Windows\system32\en-US
2017-10-18 08:42:15 ----D---- C:\Windows\system32\cs-CZ
2017-10-18 08:42:15 ----D---- C:\Program Files\Internet Explorer
2017-10-18 08:42:13 ----D---- C:\Windows\AppPatch
2017-10-18 08:42:12 ----D---- C:\Windows\system32\appraiser
2017-10-18 08:28:13 ----D---- C:\Windows\system32\MRT
2017-10-18 08:24:39 ----AC---- C:\Windows\system32\MRT.exe
2017-10-05 06:33:15 ----D---- C:\Windows\system32\manifeststore

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 edevmon;edevmon; C:\Windows\system32\DRIVERS\edevmon.sys [2016-11-13 156296]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2016-11-13 206472]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2016-11-13 156288]
R2 epfwwfpr;epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys [2016-11-13 141448]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\Windows\system32\drivers\RTKVAC.SYS [2009-06-18 4172832]
R3 dtlitescsibus;DAEMON Tools Lite Virtual SCSI Bus; C:\Windows\system32\DRIVERS\dtlitescsibus.sys [2016-09-30 26168]
R3 dtliteusbbus;DAEMON Tools Lite Virtual USB Bus; C:\Windows\system32\DRIVERS\dtliteusbbus.sys [2016-09-30 40504]
R3 RTL8167;Ovladač Realtek 8167 NT; C:\Windows\system32\DRIVERS\Rt86win7.sys [2009-07-13 139776]
S2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;Ovladač filtru AMD portu AGP; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-13 229888]
S3 PAC207;SoC PC-Camera; C:\Windows\system32\DRIVERS\PFC027.SYS [2006-12-05 507136]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
S3 silabenm;Silicon Labs CP210x USB to UART Bridge Serial Port Enumerator Driver; C:\Windows\system32\DRIVERS\silabenm.sys [2014-04-11 16128]
S3 silabser;Silicon Labs CP210x USB to UART Bridge Driver; C:\Windows\system32\DRIVERS\silabser.sys [2014-04-11 67968]
S3 sisagp;Filtr SIS sběrnice AGP; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-20 52224]
S3 usb_rndisx;Adaptér USB RNDIS; C:\Windows\system32\DRIVERS\usb8023x.sys [2013-02-12 15872]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 36352]
S3 viaagp;Filtr VIA sběrnice AGP; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 WinUsb;YunOS USB Driver; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 35968]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2017-04-21 47224]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2016-11-13 2167696]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2017-04-21 107656]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2016-10-10 153752]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2017-07-18 317408]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2017-10-30 272384]
S3 Disc Soft Lite Bus Service;Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [2016-08-29 1138368]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2016-10-10 153752]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2017-09-07 104960]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2017-04-21 136312]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2017-04-21 136312]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2017-04-21 136312]

-----------------EOF-----------------

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119665
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: vypinani azasekavani pc

#4 Příspěvek od Rudy »

Teď je to v pořádku (i když to není FRST). Nyní spusťte tuto utilitu:
Stáhněte AdwCleaner https://toolslib.net/downloads/viewdown ... dwcleaner/
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan<(hledání) a pak na >Clean< (mazání).
Proběhne skenováni a pak se objeví log, který sem vložte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

P.Stiller
Návštěvník
Návštěvník
Příspěvky: 18
Registrován: 20 srp 2009 15:46

Re: vypinani azasekavani pc

#5 Příspěvek od P.Stiller »

Bohuzel tento program prestane po chvilce pracovat

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119665
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: vypinani azasekavani pc

#6 Příspěvek od Rudy »

Zkuste ho spustit v nouz. režimu.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

Odpovědět