VIRY.CZ

Pomáháme v boji s počítačovou havěti!
https://forum.viry.cz:443/

Virus OMIGA PLUS

https://forum.viry.cz:443/viewtopic.php?t=138711

Stránka 1 z 1

Virus OMIGA PLUS

Napsal: 21 čer 2014 21:39
od melo15
Zdravím,

svými silami jsem se snažil odvirovat PC (adw cleaner + mbam), je to o dost lepší, ale předpokládám, že tam ještě něco zůstalo...
Přikládám log z RSIT a děkuji za pomoc.

Logfile of random's system information tool 1.10 (written by random/random)
Run by Robo at 2014-06-21 22:19:10
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 70 GB (67%) free of 105 GB
Total RAM: 1023 MB (15% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:20:05, on 21.6.2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17126)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskhost.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe
C:\Program Files\Malwarebytes Anti-Malware\mbam.exe
C:\Windows\system32\NOTEPAD.EXE
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Robo\Desktop\RSIT.exe
C:\Program Files\trend micro\Robo.exe
C:\Users\Robo\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Windows\explorer.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.sk
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKCU\..\Run: [AlcoholAutomount] "C:\Program Files\Alcohol Soft\Alcohol 120\axcmd.exe" /automount
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: McAfee Security Scan Plus.lnk = C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: avast! Firewall - AVAST Software - C:\Program Files\AVAST Software\Avast\afwServ.exe
O23 - Service: Defragmentation-Service (DfSdkS) - mst software GmbH, Germany - C:\Program Files\Ashampoo\Ashampoo WinOptimizer Free\Dfsdks.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe

--
End of file - 5116 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0E8A89AD-95D7-40EB-8D9D-083EF7066A01}]
MSS+ Identifier - C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll [2014-04-09 96128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2014-06-15 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-06-21 436600]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2014-06-15 171944]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2014-05-07 256896]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-06-21 3873704]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"AlcoholAutomount"=C:\Program Files\Alcohol Soft\Alcohol 120\axcmd.exe [2009-04-24 203928]
"SUPERAntiSpyware"=C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [2009-09-15 1998576]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
McAfee Security Scan Plus.lnk - C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\!SASWinLogon]
C:\Program Files\SUPERAntiSpyware\SASWINLO.dll [2009-09-03 548352]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"=C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [2008-05-13 77824]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoResolveTrack"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"VIDC.XVID"=xvidvfw.dll
"VIDC.YV12"=xvidvfw.dll
"msacm.ac3acm"=ac3acm.acm
"msacm.lameacm"=lameACM.acm
"VIDC.FFDS"=ff_vfw.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2014-06-21 22:19:28 ----D---- C:\Users\Robo\AppData\Roaming\DropboxMaster
2014-06-21 22:19:16 ----D---- C:\Program Files\trend micro
2014-06-21 22:19:10 ----D---- C:\rsit
2014-06-21 22:15:59 ----D---- C:\Users\Robo\AppData\Roaming\Dropbox
2014-06-21 22:11:30 ----D---- C:\Users\Robo\AppData\Roaming\AVAST Software
2014-06-21 22:06:45 ----A---- C:\Windows\system32\drivers\aswStm.sys
2014-06-21 22:06:41 ----A---- C:\Windows\system32\drivers\aswHwid.sys
2014-06-21 22:05:26 ----A---- C:\Windows\avastSS.scr
2014-06-21 22:03:27 ----A---- C:\Windows\system32\drivers\aswNdisFlt.sys
2014-06-21 21:50:54 ----A---- C:\Windows\system32\drivers\aswNdis2.sys
2014-06-21 21:50:53 ----A---- C:\Windows\system32\drivers\aswFW.sys
2014-06-21 21:50:51 ----A---- C:\Windows\system32\drivers\aswKbd.sys
2014-06-21 21:29:55 ----A---- C:\Windows\system32\drivers\MBAMSwissArmy.sys
2014-06-21 21:29:20 ----D---- C:\ProgramData\Malwarebytes
2014-06-21 21:29:20 ----D---- C:\Program Files\Malwarebytes Anti-Malware
2014-06-21 21:29:20 ----A---- C:\Windows\system32\drivers\mwac.sys
2014-06-21 21:29:20 ----A---- C:\Windows\system32\drivers\mbamchameleon.sys
2014-06-21 21:29:20 ----A---- C:\Windows\system32\drivers\mbam.sys
2014-06-21 21:21:13 ----D---- C:\Program Files\CCleaner
2014-06-21 20:25:10 ----A---- C:\Windows\system32\sqlite3.dll
2014-06-21 20:24:38 ----D---- C:\AdwCleaner
2014-06-17 15:05:55 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-06-17 15:05:54 ----A---- C:\Windows\system32\ieetwproxystub.dll
2014-06-17 15:05:54 ----A---- C:\Windows\system32\ieetwcollector.exe
2014-06-17 15:05:53 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2014-06-17 15:05:51 ----A---- C:\Windows\system32\urlmon.dll
2014-06-17 15:05:49 ----A---- C:\Windows\system32\jsproxy.dll
2014-06-17 15:05:48 ----A---- C:\Windows\system32\msfeeds.dll
2014-06-17 15:05:48 ----A---- C:\Windows\system32\ieUnatt.exe
2014-06-17 15:05:48 ----A---- C:\Windows\system32\iernonce.dll
2014-06-17 15:05:48 ----A---- C:\Windows\system32\dxtmsft.dll
2014-06-17 15:05:45 ----A---- C:\Windows\system32\msrating.dll
2014-06-17 15:05:45 ----A---- C:\Windows\system32\iesetup.dll
2014-06-17 15:05:45 ----A---- C:\Windows\system32\ie4uinit.exe
2014-06-17 15:05:43 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2014-06-17 15:05:43 ----A---- C:\Windows\system32\ieapfltr.dll
2014-06-17 15:05:42 ----A---- C:\Windows\system32\wininet.dll
2014-06-17 15:05:40 ----A---- C:\Windows\system32\dxtrans.dll
2014-06-17 15:05:39 ----A---- C:\Windows\system32\ieui.dll
2014-06-17 15:05:38 ----A---- C:\Windows\system32\ieframe.dll
2014-06-17 15:05:37 ----A---- C:\Windows\system32\mshtmled.dll
2014-06-17 15:05:36 ----A---- C:\Windows\system32\mshtmlmedia.dll
2014-06-17 15:05:36 ----A---- C:\Windows\system32\iertutil.dll
2014-06-17 15:05:34 ----A---- C:\Windows\system32\jscript9diag.dll
2014-06-17 15:05:33 ----A---- C:\Windows\system32\mshtml.dll
2014-06-17 15:05:31 ----A---- C:\Windows\system32\vbscript.dll
2014-06-17 15:05:21 ----A---- C:\Windows\system32\jscript9.dll
2014-06-17 15:01:11 ----A---- C:\Windows\system32\ntkrnlpa.exe
2014-06-17 15:01:10 ----A---- C:\Windows\system32\kerberos.dll
2014-06-17 15:01:09 ----A---- C:\Windows\system32\ntoskrnl.exe
2014-06-17 15:01:07 ----A---- C:\Windows\system32\winlogon.exe
2014-06-17 15:01:07 ----A---- C:\Windows\system32\msv1_0.dll
2014-06-17 15:01:07 ----A---- C:\Windows\system32\lsasrv.dll
2014-06-17 15:01:06 ----A---- C:\Windows\system32\objsel.dll
2014-06-17 15:01:05 ----A---- C:\Windows\system32\wdigest.dll
2014-06-17 15:01:05 ----A---- C:\Windows\system32\TSpkg.dll
2014-06-17 15:01:05 ----A---- C:\Windows\system32\KernelBase.dll
2014-06-17 15:01:04 ----A---- C:\Windows\system32\schannel.dll
2014-06-17 15:01:04 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2014-06-17 15:01:04 ----A---- C:\Windows\system32\dimsroam.dll
2014-06-17 15:01:04 ----A---- C:\Windows\system32\cngprovider.dll
2014-06-17 15:01:04 ----A---- C:\Windows\system32\adprovider.dll
2014-06-17 15:01:03 ----A---- C:\Windows\system32\sspicli.dll
2014-06-17 15:01:03 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2014-06-17 15:01:03 ----A---- C:\Windows\system32\dpapiprovider.dll
2014-06-17 15:01:03 ----A---- C:\Windows\system32\capiprovider.dll
2014-06-17 15:01:02 ----A---- C:\Windows\system32\wincredprovider.dll
2014-06-17 15:01:02 ----A---- C:\Windows\system32\lsass.exe
2014-06-17 15:01:02 ----A---- C:\Windows\system32\credssp.dll
2014-06-17 15:01:01 ----A---- C:\Windows\system32\sspisrv.dll
2014-06-17 15:01:01 ----A---- C:\Windows\system32\secur32.dll
2014-06-17 15:00:48 ----A---- C:\Windows\system32\msxml6.dll
2014-06-17 15:00:48 ----A---- C:\Windows\system32\msxml3.dll
2014-06-17 15:00:47 ----A---- C:\Windows\system32\msxml6r.dll
2014-06-17 15:00:47 ----A---- C:\Windows\system32\msxml3r.dll
2014-06-17 15:00:43 ----A---- C:\Windows\system32\drivers\tcpip.sys
2014-06-17 15:00:43 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS
2014-06-17 15:00:31 ----D---- C:\ProgramData\SUPERAntiSpyware.com
2014-06-17 15:00:09 ----D---- C:\Users\Robo\AppData\Roaming\SUPERAntiSpyware.com
2014-06-17 15:00:09 ----D---- C:\Program Files\SUPERAntiSpyware
2014-06-17 14:57:39 ----A---- C:\Windows\system32\aepdu.dll
2014-06-17 14:57:37 ----A---- C:\Windows\system32\aeinv.dll
2014-06-17 14:57:12 ----A---- C:\Windows\system32\shell32.dll
2014-06-17 14:57:04 ----A---- C:\Windows\system32\usp10.dll
2014-06-16 07:03:13 ----A---- C:\Windows\system32\rdpcorets.dll
2014-06-16 07:03:12 ----A---- C:\Windows\system32\RdpGroupPolicyExtension.dll
2014-06-15 22:30:04 ----D---- C:\Program Files\Common Files\Java
2014-06-15 22:29:57 ----A---- C:\Windows\system32\javaws.exe
2014-06-15 22:29:27 ----A---- C:\Windows\system32\WindowsAccessBridge.dll
2014-06-15 22:29:18 ----A---- C:\Windows\system32\javaw.exe
2014-06-15 22:29:00 ----A---- C:\Windows\system32\java.exe
2014-06-15 22:28:17 ----D---- C:\Program Files\Java
2014-06-14 23:10:41 ----D---- C:\Windows\455F074C814E4520B69B5584BD90400C.TMP
2014-06-14 22:30:37 ----D---- C:\Program Files\Enigma Software Group
2014-06-14 22:29:33 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2014-06-12 07:26:34 ----D---- C:\Users\Robo\AppData\Roaming\uTorrent
2014-06-07 17:21:39 ----D---- C:\Program Files\McAfee Security Scan
2014-05-31 21:45:58 ----D---- C:\Users\Robo\AppData\Roaming\XnView
2014-05-31 21:42:52 ----D---- C:\Program Files\Zrychleni Pocitace
2014-05-31 21:41:34 ----D---- C:\Program Files\Microsoft Silverlight
2014-05-31 21:39:10 ----D---- C:\Users\Robo\AppData\Roaming\rmi

======List of files/folders modified in the last 1 month======

2014-06-21 22:19:16 ----RD---- C:\Program Files
2014-06-21 22:19:14 ----D---- C:\Windows\Temp
2014-06-21 22:15:09 ----D---- C:\Windows\system32\config
2014-06-21 22:07:47 ----D---- C:\Windows\system32\drivers
2014-06-21 22:07:30 ----D---- C:\Windows\inf
2014-06-21 22:07:21 ----D---- C:\Windows\system32\catroot
2014-06-21 22:07:18 ----D---- C:\Windows\system32\DriverStore
2014-06-21 22:07:03 ----D---- C:\Windows\system32\Tasks
2014-06-21 22:05:53 ----D---- C:\Windows\winsxs
2014-06-21 22:05:49 ----D---- C:\Windows
2014-06-21 22:05:25 ----A---- C:\Windows\system32\aswBoot.exe
2014-06-21 21:53:04 ----SHD---- C:\System Volume Information
2014-06-21 21:52:32 ----D---- C:\ProgramData\AVAST Software
2014-06-21 21:41:06 ----D---- C:\Windows\Vss
2014-06-21 21:29:20 ----HD---- C:\ProgramData
2014-06-21 21:26:03 ----D---- C:\Users\Robo\AppData\Roaming\Media Player Classic
2014-06-21 21:25:42 ----D---- C:\Windows\Panther
2014-06-21 21:25:42 ----D---- C:\Windows\Minidump
2014-06-21 21:25:42 ----D---- C:\Windows\Logs
2014-06-21 21:25:42 ----D---- C:\Windows\debug
2014-06-21 20:26:39 ----D---- C:\Windows\Prefetch
2014-06-21 20:25:10 ----D---- C:\Windows\System32
2014-06-20 08:37:29 ----D---- C:\Windows\rescache
2014-06-18 22:36:07 ----SHD---- C:\Windows\Installer
2014-06-18 09:38:37 ----D---- C:\Windows\Microsoft.NET
2014-06-18 09:37:44 ----RSD---- C:\Windows\assembly
2014-06-17 17:30:52 ----D---- C:\Windows\system32\en-US
2014-06-17 17:30:51 ----D---- C:\Windows\system32\cs-CZ
2014-06-17 17:30:51 ----D---- C:\Program Files\Internet Explorer
2014-06-17 17:30:50 ----D---- C:\Windows\PolicyDefinitions
2014-06-17 17:30:48 ----SD---- C:\Windows\system32\CompatTel
2014-06-17 16:27:45 ----D---- C:\Windows\system32\catroot2
2014-06-16 07:09:17 ----D---- C:\Windows\system32\MRT
2014-06-15 22:30:17 ----D---- C:\ProgramData\Oracle
2014-06-15 22:30:04 ----D---- C:\Program Files\Common Files
2014-06-07 17:21:58 ----D---- C:\ProgramData\McAfee Security Scan
2014-06-06 21:35:23 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-06-01 17:18:38 ----A---- C:\Windows\system32\MRT.exe
2014-05-31 22:04:26 ----D---- C:\Windows\Tasks
2014-05-31 21:42:35 ----SD---- C:\ProgramData\Microsoft

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswNdisFlt;Avast! Firewall Driver; C:\Windows\system32\DRIVERS\aswNdisFlt.sys [2014-06-21 269728]
R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2014-06-21 49944]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2014-06-21 180632]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2013-10-11 721904]
R1 aswKbd;aswKbd; C:\Windows\system32\drivers\aswKbd.sys [2014-06-21 26136]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2014-06-21 81768]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2014-06-21 776976]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2014-06-21 411552]
R1 SASDIFSV;SASDIFSV; \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS [2009-09-15 9968]
R1 SASKUTIL;SASKUTIL; \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL.sys [2009-09-15 74480]
R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2014-06-21 24184]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2014-06-21 67824]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2014-06-21 67776]
R2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
R3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2009-08-18 4994560]
R3 MBAMProtector;MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [2014-05-12 23256]
R3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [2014-06-21 110296]
R3 MBAMWebAccessControl;MBAMWebAccessControl; \??\C:\Windows\system32\drivers\mwac.sys [2014-05-12 51928]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\Windows\system32\DRIVERS\ASACPI.sys [2004-08-13 5810]
R3 NVNET;NVIDIA nForce 10/100 Mbps Ethernet ; C:\Windows\system32\DRIVERS\nvmf6232.sys [2010-08-12 298216]
S3 aayi2kad;aayi2kad; C:\Windows\system32\drivers\aayi2kad.sys []
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;Ovladač filtru AMD portu AGP; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 androidusb;SAMSUNG Android Composite ADB Interface Driver; C:\Windows\System32\Drivers\ssadadb.sys [2011-05-13 30312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
S3 esgiguard;esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys []
S3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\Windows\system32\DRIVERS\nvm62x32.sys [2009-07-14 347264]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 14848]
S3 SASENUM;SASENUM; \??\C:\Program Files\SUPERAntiSpyware\SASENUM.SYS [2009-09-15 7408]
S3 sisagp;Filtr SIS sběrnice AGP; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 ss_bbus;SAMSUNG USB Mobile Device (WDM); C:\Windows\system32\DRIVERS\ss_bbus.sys [2009-09-19 98432]
S3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter); C:\Windows\system32\DRIVERS\ss_bmdfl.sys [2009-09-19 14848]
S3 ss_bmdm;SAMSUNG USB Mobile Modem; C:\Windows\system32\DRIVERS\ss_bmdm.sys [2009-09-19 123648]
S3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM); C:\Windows\system32\DRIVERS\ssadbus.sys [2011-05-13 121064]
S3 ssadmdfl;SAMSUNG Android USB Modem (Filter); C:\Windows\system32\DRIVERS\ssadmdfl.sys [2011-05-13 12776]
S3 ssadmdm;SAMSUNG Android USB Modem Drivers; C:\Windows\system32\DRIVERS\ssadmdm.sys [2011-05-13 136808]
S3 ssadserd;SAMSUNG Android USB Diagnostic Serial Port (WDM); C:\Windows\system32\DRIVERS\ssadserd.sys [2011-05-13 114280]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2012-08-23 49664]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\drivers\usbscan.sys [2013-07-03 36352]
S3 viaagp;Filtr VIA sběrnice AGP; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 35968]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-12-21 65432]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2009-08-18 176128]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-06-21 50344]
R2 avast! Firewall;avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [2014-06-21 109048]
R2 MBAMService;MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [2014-05-12 860472]
R2 MBAMScheduler;MBAMScheduler; C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe [2014-05-12 1809720]
R2 StarWindServiceAE;StarWind AE Service; C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [2007-05-28 275968]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2013-10-11 116648]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-05-14 257712]
S3 DfSdkS;Defragmentation-Service; C:\Program Files\Ashampoo\Ashampoo WinOptimizer Free\Dfsdks.exe [2009-08-24 406016]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2013-10-11 116648]
S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2011-05-10 136120]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-05-30 108032]
S3 McComponentHostService;McAfee Security Scan Component Host Service; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [2014-04-09 235696]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-12-16 1343400]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2013-09-11 46688]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

-----------------EOF-----------------

Re: Virus OMIGA PLUS

Napsal: 21 čer 2014 21:41
od Rudy
Zdravím!
Spusťte tuto utilitu:
Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.

Re: Virus OMIGA PLUS

Napsal: 21 čer 2014 21:47
od melo15
# AdwCleaner v3.212 - Report created 21/06/2014 at 20:26:03
# Updated 05/06/2014 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (32 bits)
# Username : Robo - ROBO-DOMINIKA
# Running from : C:\Users\Robo\Desktop\AdwCleaner.exe
# Option : Clean

***** [ Services ] *****

Service Deleted : IePluginServices

***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\IePluginServices
Folder Deleted : C:\ProgramData\WindowsProtectManger
Folder Deleted : C:\Program Files\SupTab
Folder Deleted : C:\Users\Robo\AppData\Local\Temp\AirInstaller
Folder Deleted : C:\Users\Robo\AppData\Roaming\OpenCandy
Folder Deleted : C:\Users\Robo\AppData\Roaming\SupTab
Folder Deleted : C:\Users\Robo\AppData\Local\Google\Chrome\User Data\Default\Extensions\bopakagnckmlgajfccecajhnimjiiedh
File Deleted : C:\END File Deleted : C:\Users\Robo\AppData\Roaming\Mozilla\Firefox\Profiles\m8xnjupn.default\user.js

***** [ Shortcuts ] *****

Shortcut Disinfected : C:\Users\Robo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
Shortcut Disinfected : C:\Users\Robo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk
Shortcut Disinfected : C:\Users\Robo\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk

***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\bopakagnckmlgajfccecajhnimjiiedh [#]
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1EC9510D-A439-4950-9399-B6399EDF9EA7}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\secman.DLL
Key Deleted : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager
Key Deleted : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager.1
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\Torntv Downloader_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\Torntv Downloader_RASMANCS
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{C007DADD-132A-624C-088E-59EE6CF0711F}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Data Restored : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command
Key Deleted : HKCU\Software\1ClickDownload Key Deleted : HKCU\Software\Myfree Codec
Key Deleted : HKLM\Software\Myfree Codec Key Deleted : HKLM\Software\SupDp
Key Deleted : HKLM\Software\SupTab Key Deleted : HKLM\Software\Wpm
Data Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~1\SupTab\SearchProtect32.dll

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17126

Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Search Page]
Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Search_URL]
Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]

-\\ Mozilla Firefox v29.0.1 (sk)

[ File : C:\Users\Robo\AppData\Roaming\Mozilla\Firefox\Profiles\m8xnjupn.default\prefs.js ]

Line Deleted : user_pref("browser.startup.homepage", "hxxp://isearch.omiga-plus.com/?type=hppp&ts=1402922998&from=ild&uid=395049983_266035_ACC0316B");

-\\ Google Chrome v35.0.1916.153

[ File : C:\Users\Robo\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Deleted [Search Provider] : hxxp://en.softonic.com/s/{searchTerms}
Deleted [Search Provider] : hxxp://isearch.omiga-plus.com/web/?type=dspp&ts=1402922998&from=ild&uid=395049983_266035_ACC0316B&q={searchTerms}
Deleted [Startup_urls] : hxxp://isearch.omiga-plus.com/?type=hppp&ts=1402922998&from=ild&uid=395049983_266035_ACC0316B Deleted [Homepage] : hxxp://isearch.omiga-plus.com/?type=hppp&ts=1402922998&from=ild&uid=395049983_266035_ACC0316B Deleted [Extension] : bopakagnckmlgajfccecajhnimjiiedh

*************************

AdwCleaner[R0].txt - [6735 octets] - [21/06/2014 20:24:41] AdwCleaner[S0].txt - [5616 octets] - [21/06/2014 20:26:03]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [5676 octets] ##########

Re: Virus OMIGA PLUS

Napsal: 22 čer 2014 10:01
od Rudy
Dejte nový log RSIT.

Re: Virus OMIGA PLUS

Napsal: 22 čer 2014 11:05
od melo15
Logfile of random's system information tool 1.10 (written by random/random)
Run by Robo at 2014-06-22 11:29:10
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 70 GB (67%) free of 105 GB
Total RAM: 1023 MB (15% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:20:05, on 21.6.2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17126)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskhost.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe
C:\Program Files\Malwarebytes Anti-Malware\mbam.exe
C:\Windows\system32\NOTEPAD.EXE
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Robo\Desktop\RSIT.exe
C:\Program Files\trend micro\Robo.exe
C:\Users\Robo\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Windows\explorer.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.sk
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKCU\..\Run: [AlcoholAutomount] "C:\Program Files\Alcohol Soft\Alcohol 120\axcmd.exe" /automount
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: McAfee Security Scan Plus.lnk = C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: avast! Firewall - AVAST Software - C:\Program Files\AVAST Software\Avast\afwServ.exe
O23 - Service: Defragmentation-Service (DfSdkS) - mst software GmbH, Germany - C:\Program Files\Ashampoo\Ashampoo WinOptimizer Free\Dfsdks.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe

--
End of file - 5116 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0E8A89AD-95D7-40EB-8D9D-083EF7066A01}]
MSS+ Identifier - C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll [2014-04-09 96128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2014-06-15 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-06-21 436600]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2014-06-15 171944]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2014-05-07 256896]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-06-21 3873704]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"AlcoholAutomount"=C:\Program Files\Alcohol Soft\Alcohol 120\axcmd.exe [2009-04-24 203928]
"SUPERAntiSpyware"=C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [2009-09-15 1998576]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
McAfee Security Scan Plus.lnk - C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\!SASWinLogon]
C:\Program Files\SUPERAntiSpyware\SASWINLO.dll [2009-09-03 548352]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"=C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [2008-05-13 77824]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoResolveTrack"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"VIDC.XVID"=xvidvfw.dll
"VIDC.YV12"=xvidvfw.dll
"msacm.ac3acm"=ac3acm.acm
"msacm.lameacm"=lameACM.acm
"VIDC.FFDS"=ff_vfw.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2014-06-21 22:19:28 ----D---- C:\Users\Robo\AppData\Roaming\DropboxMaster
2014-06-21 22:19:16 ----D---- C:\Program Files\trend micro
2014-06-21 22:19:10 ----D---- C:\rsit
2014-06-21 22:15:59 ----D---- C:\Users\Robo\AppData\Roaming\Dropbox
2014-06-21 22:11:30 ----D---- C:\Users\Robo\AppData\Roaming\AVAST Software
2014-06-21 22:06:45 ----A---- C:\Windows\system32\drivers\aswStm.sys
2014-06-21 22:06:41 ----A---- C:\Windows\system32\drivers\aswHwid.sys
2014-06-21 22:05:26 ----A---- C:\Windows\avastSS.scr
2014-06-21 22:03:27 ----A---- C:\Windows\system32\drivers\aswNdisFlt.sys
2014-06-21 21:50:54 ----A---- C:\Windows\system32\drivers\aswNdis2.sys
2014-06-21 21:50:53 ----A---- C:\Windows\system32\drivers\aswFW.sys
2014-06-21 21:50:51 ----A---- C:\Windows\system32\drivers\aswKbd.sys
2014-06-21 21:29:55 ----A---- C:\Windows\system32\drivers\MBAMSwissArmy.sys
2014-06-21 21:29:20 ----D---- C:\ProgramData\Malwarebytes
2014-06-21 21:29:20 ----D---- C:\Program Files\Malwarebytes Anti-Malware
2014-06-21 21:29:20 ----A---- C:\Windows\system32\drivers\mwac.sys
2014-06-21 21:29:20 ----A---- C:\Windows\system32\drivers\mbamchameleon.sys
2014-06-21 21:29:20 ----A---- C:\Windows\system32\drivers\mbam.sys
2014-06-21 21:21:13 ----D---- C:\Program Files\CCleaner
2014-06-21 20:25:10 ----A---- C:\Windows\system32\sqlite3.dll
2014-06-21 20:24:38 ----D---- C:\AdwCleaner
2014-06-17 15:05:55 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-06-17 15:05:54 ----A---- C:\Windows\system32\ieetwproxystub.dll
2014-06-17 15:05:54 ----A---- C:\Windows\system32\ieetwcollector.exe
2014-06-17 15:05:53 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2014-06-17 15:05:51 ----A---- C:\Windows\system32\urlmon.dll
2014-06-17 15:05:49 ----A---- C:\Windows\system32\jsproxy.dll
2014-06-17 15:05:48 ----A---- C:\Windows\system32\msfeeds.dll
2014-06-17 15:05:48 ----A---- C:\Windows\system32\ieUnatt.exe
2014-06-17 15:05:48 ----A---- C:\Windows\system32\iernonce.dll
2014-06-17 15:05:48 ----A---- C:\Windows\system32\dxtmsft.dll
2014-06-17 15:05:45 ----A---- C:\Windows\system32\msrating.dll
2014-06-17 15:05:45 ----A---- C:\Windows\system32\iesetup.dll
2014-06-17 15:05:45 ----A---- C:\Windows\system32\ie4uinit.exe
2014-06-17 15:05:43 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2014-06-17 15:05:43 ----A---- C:\Windows\system32\ieapfltr.dll
2014-06-17 15:05:42 ----A---- C:\Windows\system32\wininet.dll
2014-06-17 15:05:40 ----A---- C:\Windows\system32\dxtrans.dll
2014-06-17 15:05:39 ----A---- C:\Windows\system32\ieui.dll
2014-06-17 15:05:38 ----A---- C:\Windows\system32\ieframe.dll
2014-06-17 15:05:37 ----A---- C:\Windows\system32\mshtmled.dll
2014-06-17 15:05:36 ----A---- C:\Windows\system32\mshtmlmedia.dll
2014-06-17 15:05:36 ----A---- C:\Windows\system32\iertutil.dll
2014-06-17 15:05:34 ----A---- C:\Windows\system32\jscript9diag.dll
2014-06-17 15:05:33 ----A---- C:\Windows\system32\mshtml.dll
2014-06-17 15:05:31 ----A---- C:\Windows\system32\vbscript.dll
2014-06-17 15:05:21 ----A---- C:\Windows\system32\jscript9.dll
2014-06-17 15:01:11 ----A---- C:\Windows\system32\ntkrnlpa.exe
2014-06-17 15:01:10 ----A---- C:\Windows\system32\kerberos.dll
2014-06-17 15:01:09 ----A---- C:\Windows\system32\ntoskrnl.exe
2014-06-17 15:01:07 ----A---- C:\Windows\system32\winlogon.exe
2014-06-17 15:01:07 ----A---- C:\Windows\system32\msv1_0.dll
2014-06-17 15:01:07 ----A---- C:\Windows\system32\lsasrv.dll
2014-06-17 15:01:06 ----A---- C:\Windows\system32\objsel.dll
2014-06-17 15:01:05 ----A---- C:\Windows\system32\wdigest.dll
2014-06-17 15:01:05 ----A---- C:\Windows\system32\TSpkg.dll
2014-06-17 15:01:05 ----A---- C:\Windows\system32\KernelBase.dll
2014-06-17 15:01:04 ----A---- C:\Windows\system32\schannel.dll
2014-06-17 15:01:04 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2014-06-17 15:01:04 ----A---- C:\Windows\system32\dimsroam.dll
2014-06-17 15:01:04 ----A---- C:\Windows\system32\cngprovider.dll
2014-06-17 15:01:04 ----A---- C:\Windows\system32\adprovider.dll
2014-06-17 15:01:03 ----A---- C:\Windows\system32\sspicli.dll
2014-06-17 15:01:03 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2014-06-17 15:01:03 ----A---- C:\Windows\system32\dpapiprovider.dll
2014-06-17 15:01:03 ----A---- C:\Windows\system32\capiprovider.dll
2014-06-17 15:01:02 ----A---- C:\Windows\system32\wincredprovider.dll
2014-06-17 15:01:02 ----A---- C:\Windows\system32\lsass.exe
2014-06-17 15:01:02 ----A---- C:\Windows\system32\credssp.dll
2014-06-17 15:01:01 ----A---- C:\Windows\system32\sspisrv.dll
2014-06-17 15:01:01 ----A---- C:\Windows\system32\secur32.dll
2014-06-17 15:00:48 ----A---- C:\Windows\system32\msxml6.dll
2014-06-17 15:00:48 ----A---- C:\Windows\system32\msxml3.dll
2014-06-17 15:00:47 ----A---- C:\Windows\system32\msxml6r.dll
2014-06-17 15:00:47 ----A---- C:\Windows\system32\msxml3r.dll
2014-06-17 15:00:43 ----A---- C:\Windows\system32\drivers\tcpip.sys
2014-06-17 15:00:43 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS
2014-06-17 15:00:31 ----D---- C:\ProgramData\SUPERAntiSpyware.com
2014-06-17 15:00:09 ----D---- C:\Users\Robo\AppData\Roaming\SUPERAntiSpyware.com
2014-06-17 15:00:09 ----D---- C:\Program Files\SUPERAntiSpyware
2014-06-17 14:57:39 ----A---- C:\Windows\system32\aepdu.dll
2014-06-17 14:57:37 ----A---- C:\Windows\system32\aeinv.dll
2014-06-17 14:57:12 ----A---- C:\Windows\system32\shell32.dll
2014-06-17 14:57:04 ----A---- C:\Windows\system32\usp10.dll
2014-06-16 07:03:13 ----A---- C:\Windows\system32\rdpcorets.dll
2014-06-16 07:03:12 ----A---- C:\Windows\system32\RdpGroupPolicyExtension.dll
2014-06-15 22:30:04 ----D---- C:\Program Files\Common Files\Java
2014-06-15 22:29:57 ----A---- C:\Windows\system32\javaws.exe
2014-06-15 22:29:27 ----A---- C:\Windows\system32\WindowsAccessBridge.dll
2014-06-15 22:29:18 ----A---- C:\Windows\system32\javaw.exe
2014-06-15 22:29:00 ----A---- C:\Windows\system32\java.exe
2014-06-15 22:28:17 ----D---- C:\Program Files\Java
2014-06-14 23:10:41 ----D---- C:\Windows\455F074C814E4520B69B5584BD90400C.TMP
2014-06-14 22:30:37 ----D---- C:\Program Files\Enigma Software Group
2014-06-14 22:29:33 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2014-06-12 07:26:34 ----D---- C:\Users\Robo\AppData\Roaming\uTorrent
2014-06-07 17:21:39 ----D---- C:\Program Files\McAfee Security Scan
2014-05-31 21:45:58 ----D---- C:\Users\Robo\AppData\Roaming\XnView
2014-05-31 21:42:52 ----D---- C:\Program Files\Zrychleni Pocitace
2014-05-31 21:41:34 ----D---- C:\Program Files\Microsoft Silverlight
2014-05-31 21:39:10 ----D---- C:\Users\Robo\AppData\Roaming\rmi

======List of files/folders modified in the last 1 month======

2014-06-21 22:19:16 ----RD---- C:\Program Files
2014-06-21 22:19:14 ----D---- C:\Windows\Temp
2014-06-21 22:15:09 ----D---- C:\Windows\system32\config
2014-06-21 22:07:47 ----D---- C:\Windows\system32\drivers
2014-06-21 22:07:30 ----D---- C:\Windows\inf
2014-06-21 22:07:21 ----D---- C:\Windows\system32\catroot
2014-06-21 22:07:18 ----D---- C:\Windows\system32\DriverStore
2014-06-21 22:07:03 ----D---- C:\Windows\system32\Tasks
2014-06-21 22:05:53 ----D---- C:\Windows\winsxs
2014-06-21 22:05:49 ----D---- C:\Windows
2014-06-21 22:05:25 ----A---- C:\Windows\system32\aswBoot.exe
2014-06-21 21:53:04 ----SHD---- C:\System Volume Information
2014-06-21 21:52:32 ----D---- C:\ProgramData\AVAST Software
2014-06-21 21:41:06 ----D---- C:\Windows\Vss
2014-06-21 21:29:20 ----HD---- C:\ProgramData
2014-06-21 21:26:03 ----D---- C:\Users\Robo\AppData\Roaming\Media Player Classic
2014-06-21 21:25:42 ----D---- C:\Windows\Panther
2014-06-21 21:25:42 ----D---- C:\Windows\Minidump
2014-06-21 21:25:42 ----D---- C:\Windows\Logs
2014-06-21 21:25:42 ----D---- C:\Windows\debug
2014-06-21 20:26:39 ----D---- C:\Windows\Prefetch
2014-06-21 20:25:10 ----D---- C:\Windows\System32
2014-06-20 08:37:29 ----D---- C:\Windows\rescache
2014-06-18 22:36:07 ----SHD---- C:\Windows\Installer
2014-06-18 09:38:37 ----D---- C:\Windows\Microsoft.NET
2014-06-18 09:37:44 ----RSD---- C:\Windows\assembly
2014-06-17 17:30:52 ----D---- C:\Windows\system32\en-US
2014-06-17 17:30:51 ----D---- C:\Windows\system32\cs-CZ
2014-06-17 17:30:51 ----D---- C:\Program Files\Internet Explorer
2014-06-17 17:30:50 ----D---- C:\Windows\PolicyDefinitions
2014-06-17 17:30:48 ----SD---- C:\Windows\system32\CompatTel
2014-06-17 16:27:45 ----D---- C:\Windows\system32\catroot2
2014-06-16 07:09:17 ----D---- C:\Windows\system32\MRT
2014-06-15 22:30:17 ----D---- C:\ProgramData\Oracle
2014-06-15 22:30:04 ----D---- C:\Program Files\Common Files
2014-06-07 17:21:58 ----D---- C:\ProgramData\McAfee Security Scan
2014-06-06 21:35:23 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-06-01 17:18:38 ----A---- C:\Windows\system32\MRT.exe
2014-05-31 22:04:26 ----D---- C:\Windows\Tasks
2014-05-31 21:42:35 ----SD---- C:\ProgramData\Microsoft

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswNdisFlt;Avast! Firewall Driver; C:\Windows\system32\DRIVERS\aswNdisFlt.sys [2014-06-21 269728]
R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2014-06-21 49944]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2014-06-21 180632]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2013-10-11 721904]
R1 aswKbd;aswKbd; C:\Windows\system32\drivers\aswKbd.sys [2014-06-21 26136]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2014-06-21 81768]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2014-06-21 776976]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2014-06-21 411552]
R1 SASDIFSV;SASDIFSV; \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS [2009-09-15 9968]
R1 SASKUTIL;SASKUTIL; \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL.sys [2009-09-15 74480]
R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2014-06-21 24184]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2014-06-21 67824]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2014-06-21 67776]
R2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
R3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2009-08-18 4994560]
R3 MBAMProtector;MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [2014-05-12 23256]
R3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [2014-06-21 110296]
R3 MBAMWebAccessControl;MBAMWebAccessControl; \??\C:\Windows\system32\drivers\mwac.sys [2014-05-12 51928]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\Windows\system32\DRIVERS\ASACPI.sys [2004-08-13 5810]
R3 NVNET;NVIDIA nForce 10/100 Mbps Ethernet ; C:\Windows\system32\DRIVERS\nvmf6232.sys [2010-08-12 298216]
S3 aayi2kad;aayi2kad; C:\Windows\system32\drivers\aayi2kad.sys []
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;Ovladač filtru AMD portu AGP; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 androidusb;SAMSUNG Android Composite ADB Interface Driver; C:\Windows\System32\Drivers\ssadadb.sys [2011-05-13 30312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
S3 esgiguard;esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys []
S3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\Windows\system32\DRIVERS\nvm62x32.sys [2009-07-14 347264]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 14848]
S3 SASENUM;SASENUM; \??\C:\Program Files\SUPERAntiSpyware\SASENUM.SYS [2009-09-15 7408]
S3 sisagp;Filtr SIS sběrnice AGP; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 ss_bbus;SAMSUNG USB Mobile Device (WDM); C:\Windows\system32\DRIVERS\ss_bbus.sys [2009-09-19 98432]
S3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter); C:\Windows\system32\DRIVERS\ss_bmdfl.sys [2009-09-19 14848]
S3 ss_bmdm;SAMSUNG USB Mobile Modem; C:\Windows\system32\DRIVERS\ss_bmdm.sys [2009-09-19 123648]
S3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM); C:\Windows\system32\DRIVERS\ssadbus.sys [2011-05-13 121064]
S3 ssadmdfl;SAMSUNG Android USB Modem (Filter); C:\Windows\system32\DRIVERS\ssadmdfl.sys [2011-05-13 12776]
S3 ssadmdm;SAMSUNG Android USB Modem Drivers; C:\Windows\system32\DRIVERS\ssadmdm.sys [2011-05-13 136808]
S3 ssadserd;SAMSUNG Android USB Diagnostic Serial Port (WDM); C:\Windows\system32\DRIVERS\ssadserd.sys [2011-05-13 114280]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2012-08-23 49664]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\drivers\usbscan.sys [2013-07-03 36352]
S3 viaagp;Filtr VIA sběrnice AGP; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 35968]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-12-21 65432]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2009-08-18 176128]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-06-21 50344]
R2 avast! Firewall;avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [2014-06-21 109048]
R2 MBAMService;MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [2014-05-12 860472]
R2 MBAMScheduler;MBAMScheduler; C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe [2014-05-12 1809720]
R2 StarWindServiceAE;StarWind AE Service; C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [2007-05-28 275968]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2013-10-11 116648]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-05-14 257712]
S3 DfSdkS;Defragmentation-Service; C:\Program Files\Ashampoo\Ashampoo WinOptimizer Free\Dfsdks.exe [2009-08-24 406016]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2013-10-11 116648]
S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2011-05-10 136120]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-05-30 108032]
S3 McComponentHostService;McAfee Security Scan Component Host Service; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [2014-04-09 235696]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-12-16 1343400]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2013-09-11 46688]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

-----------------EOF-----------------

Re: Virus OMIGA PLUS

Napsal: 22 čer 2014 11:51
od Rudy
Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:
:files
C:\Program Files\McAfee Security Scan
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\455F074C814E4520B69B5584BD90400C.TMP

:services
McComponentHostService

:reg
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0E8A89AD-95D7-40EB-8D9D-083EF7066A01}]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"=-

:commands
[Purity]
[Emptytemp]
[Emptyflash]
a klikněte na >MoveIt!<. Před skenem vypněte antivir a po něm restartujte PC. Dejte nový log RSIT.

Re: Virus OMIGA PLUS

Napsal: 22 čer 2014 22:28
od natalir
Logfile of random's system information tool 1.10 (written by random/random) Run by Robo at 2014-06-22 21:29:36 Microsoft Windows 7 Home Premium Service Pack 1 System drive C: has 70 GB (67%) free of 105 GB Total RAM: 1023 MB (60% free) Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 21:29:59, on 22.6.2014 Platform: Windows 7 SP1 (WinNT 6.00.3505) MSIE: Internet Explorer v11.0 (11.00.9600.17126) Boot mode: Normal Running processes: C:\Windows\system32\Dwm.exe C:\Windows\system32\taskhost.exe C:\Windows\Explorer.EXE C:\Program Files\Malwarebytes Anti-Malware\mbam.exe C:\Program Files\AVAST Software\Avast\avastui.exe C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe C:\Windows\system32\wbem\unsecapp.exe C:\Windows\system32\taskhost.exe C:\Users\Robo\Desktop\RSIT.exe C:\Program Files\trend micro\Robo.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.sk R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui O4 - HKCU\..\Run: [AlcoholAutomount] "C:\Program Files\Alcohol Soft\Alcohol 120\axcmd.exe" /automount O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE') O4 - Global Startup: McAfee Security Scan Plus.lnk = C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200 O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe O23 - Service: avast! Firewall - AVAST Software - C:\Program Files\AVAST Software\Avast\afwServ.exe O23 - Service: Defragmentation-Service (DfSdkS) - mst software GmbH, Germany - C:\Program Files\Ashampoo\Ashampoo WinOptimizer Free\Dfsdks.exe O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe -- End of file - 4267 bytes ======Scheduled tasks folder====== C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}] Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2014-06-15 462760] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}] avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-06-21 436600] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}] Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2014-06-15 171944] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904] "AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-06-21 3890208] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "AlcoholAutomount"=C:\Program Files\Alcohol Soft\Alcohol 120\axcmd.exe [2009-04-24 203928] "SUPERAntiSpyware"=C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [2009-09-15 1998576] C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup McAfee Security Scan Plus.lnk - C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\!SASWinLogon] C:\Program Files\SUPERAntiSpyware\SASWINLO.dll [2009-09-03 548352] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] "{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"=C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [2008-05-13 77824] [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders] "SecurityProviders"=credssp.dll [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "ConsentPromptBehaviorAdmin"=5 "ConsentPromptBehaviorUser"=3 "EnableUIADesktopToggle"=0 "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoResolveTrack"=1 [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32] "vidc.mrle"=msrle32.dll "vidc.msvc"=msvidc32.dll "msacm.imaadpcm"=imaadp32.acm "msacm.msg711"=msg711.acm "msacm.msgsm610"=msgsm32.acm "msacm.msadpcm"=msadp32.acm "midimapper"=midimap.dll "wavemapper"=msacm32.drv "VIDC.UYVY"=msyuv.dll "VIDC.YUY2"=msyuv.dll "VIDC.YVYU"=msyuv.dll "VIDC.IYUV"=iyuv_32.dll "vidc.i420"=iyuv_32.dll "VIDC.YVU9"=tsbyuv.dll "msacm.l3acm"=C:\Windows\System32\l3codeca.acm "vidc.cvid"=iccvid.dll "wave"=wdmaud.drv "midi"=wdmaud.drv "mixer"=wdmaud.drv "aux"=wdmaud.drv "wave1"=wdmaud.drv "midi1"=wdmaud.drv "mixer1"=wdmaud.drv "aux1"=wdmaud.drv "MSVideo8"=VfWWDM32.dll "VIDC.XVID"=xvidvfw.dll "VIDC.YV12"=xvidvfw.dll "msacm.ac3acm"=ac3acm.acm "msacm.lameacm"=lameACM.acm "VIDC.FFDS"=ff_vfw.dll ======File associations====== .js - edit - C:\Windows\System32\Notepad.exe %1 .js - open - C:\Windows\System32\WScript.exe "%1" %* ======List of files/folders created in the last 1 month====== 2014-06-22 17:56:29 ----D---- C:\_OTM 2014-06-21 22:19:28 ----D---- C:\Users\Robo\AppData\Roaming\DropboxMaster 2014-06-21 22:19:16 ----D---- C:\Program Files\trend micro 2014-06-21 22:19:10 ----D---- C:\rsit 2014-06-21 22:15:59 ----D---- C:\Users\Robo\AppData\Roaming\Dropbox 2014-06-21 22:11:30 ----D---- C:\Users\Robo\AppData\Roaming\AVAST Software 2014-06-21 22:06:45 ----A---- C:\Windows\system32\drivers\aswstm.sys 2014-06-21 22:06:41 ----A---- C:\Windows\system32\drivers\aswHwid.sys 2014-06-21 22:05:26 ----A---- C:\Windows\avastSS.scr 2014-06-21 22:03:27 ----A---- C:\Windows\system32\drivers\aswndisflt.sys 2014-06-21 21:50:54 ----A---- C:\Windows\system32\drivers\aswNdis2.sys 2014-06-21 21:50:53 ----A---- C:\Windows\system32\drivers\aswFW.sys 2014-06-21 21:50:51 ----A---- C:\Windows\system32\drivers\aswKbd.sys 2014-06-21 21:29:55 ----A---- C:\Windows\system32\drivers\MBAMSwissArmy.sys 2014-06-21 21:29:20 ----D---- C:\ProgramData\Malwarebytes 2014-06-21 21:29:20 ----D---- C:\Program Files\Malwarebytes Anti-Malware 2014-06-21 21:29:20 ----A---- C:\Windows\system32\drivers\mwac.sys 2014-06-21 21:29:20 ----A---- C:\Windows\system32\drivers\mbamchameleon.sys 2014-06-21 21:29:20 ----A---- C:\Windows\system32\drivers\mbam.sys 2014-06-21 21:21:13 ----D---- C:\Program Files\CCleaner 2014-06-21 20:25:10 ----A---- C:\Windows\system32\sqlite3.dll 2014-06-21 20:24:38 ----D---- C:\AdwCleaner 2014-06-17 15:05:55 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-06-17 15:05:54 ----A---- C:\Windows\system32\ieetwproxystub.dll 2014-06-17 15:05:54 ----A---- C:\Windows\system32\ieetwcollector.exe 2014-06-17 15:05:53 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe 2014-06-17 15:05:51 ----A---- C:\Windows\system32\urlmon.dll 2014-06-17 15:05:49 ----A---- C:\Windows\system32\jsproxy.dll 2014-06-17 15:05:48 ----A---- C:\Windows\system32\msfeeds.dll 2014-06-17 15:05:48 ----A---- C:\Windows\system32\ieUnatt.exe 2014-06-17 15:05:48 ----A---- C:\Windows\system32\iernonce.dll 2014-06-17 15:05:48 ----A---- C:\Windows\system32\dxtmsft.dll 2014-06-17 15:05:45 ----A---- C:\Windows\system32\msrating.dll 2014-06-17 15:05:45 ----A---- C:\Windows\system32\iesetup.dll 2014-06-17 15:05:45 ----A---- C:\Windows\system32\ie4uinit.exe 2014-06-17 15:05:43 ----A---- C:\Windows\system32\ieetwcollectorres.dll 2014-06-17 15:05:43 ----A---- C:\Windows\system32\ieapfltr.dll 2014-06-17 15:05:42 ----A---- C:\Windows\system32\wininet.dll 2014-06-17 15:05:40 ----A---- C:\Windows\system32\dxtrans.dll 2014-06-17 15:05:39 ----A---- C:\Windows\system32\ieui.dll 2014-06-17 15:05:38 ----A---- C:\Windows\system32\ieframe.dll 2014-06-17 15:05:37 ----A---- C:\Windows\system32\mshtmled.dll 2014-06-17 15:05:36 ----A---- C:\Windows\system32\mshtmlmedia.dll 2014-06-17 15:05:36 ----A---- C:\Windows\system32\iertutil.dll 2014-06-17 15:05:34 ----A---- C:\Windows\system32\jscript9diag.dll 2014-06-17 15:05:33 ----A---- C:\Windows\system32\mshtml.dll 2014-06-17 15:05:31 ----A---- C:\Windows\system32\vbscript.dll 2014-06-17 15:05:21 ----A---- C:\Windows\system32\jscript9.dll 2014-06-17 15:01:11 ----A---- C:\Windows\system32\ntkrnlpa.exe 2014-06-17 15:01:10 ----A---- C:\Windows\system32\kerberos.dll 2014-06-17 15:01:09 ----A---- C:\Windows\system32\ntoskrnl.exe 2014-06-17 15:01:07 ----A---- C:\Windows\system32\winlogon.exe 2014-06-17 15:01:07 ----A---- C:\Windows\system32\msv1_0.dll 2014-06-17 15:01:07 ----A---- C:\Windows\system32\lsasrv.dll 2014-06-17 15:01:06 ----A---- C:\Windows\system32\objsel.dll 2014-06-17 15:01:05 ----A---- C:\Windows\system32\wdigest.dll 2014-06-17 15:01:05 ----A---- C:\Windows\system32\TSpkg.dll 2014-06-17 15:01:05 ----A---- C:\Windows\system32\KernelBase.dll 2014-06-17 15:01:04 ----A---- C:\Windows\system32\schannel.dll 2014-06-17 15:01:04 ----A---- C:\Windows\system32\drivers\ksecpkg.sys 2014-06-17 15:01:04 ----A---- C:\Windows\system32\dimsroam.dll 2014-06-17 15:01:04 ----A---- C:\Windows\system32\cngprovider.dll 2014-06-17 15:01:04 ----A---- C:\Windows\system32\adprovider.dll 2014-06-17 15:01:03 ----A---- C:\Windows\system32\sspicli.dll 2014-06-17 15:01:03 ----A---- C:\Windows\system32\drivers\ksecdd.sys 2014-06-17 15:01:03 ----A---- C:\Windows\system32\dpapiprovider.dll 2014-06-17 15:01:03 ----A---- C:\Windows\system32\capiprovider.dll 2014-06-17 15:01:02 ----A---- C:\Windows\system32\wincredprovider.dll 2014-06-17 15:01:02 ----A---- C:\Windows\system32\lsass.exe 2014-06-17 15:01:02 ----A---- C:\Windows\system32\credssp.dll 2014-06-17 15:01:01 ----A---- C:\Windows\system32\sspisrv.dll 2014-06-17 15:01:01 ----A---- C:\Windows\system32\secur32.dll 2014-06-17 15:00:48 ----A---- C:\Windows\system32\msxml6.dll 2014-06-17 15:00:48 ----A---- C:\Windows\system32\msxml3.dll 2014-06-17 15:00:47 ----A---- C:\Windows\system32\msxml6r.dll 2014-06-17 15:00:47 ----A---- C:\Windows\system32\msxml3r.dll 2014-06-17 15:00:43 ----A---- C:\Windows\system32\drivers\tcpip.sys 2014-06-17 15:00:43 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS 2014-06-17 15:00:31 ----D---- C:\ProgramData\SUPERAntiSpyware.com 2014-06-17 15:00:09 ----D---- C:\Users\Robo\AppData\Roaming\SUPERAntiSpyware.com 2014-06-17 15:00:09 ----D---- C:\Program Files\SUPERAntiSpyware 2014-06-17 14:57:39 ----A---- C:\Windows\system32\aepdu.dll 2014-06-17 14:57:37 ----A---- C:\Windows\system32\aeinv.dll 2014-06-17 14:57:12 ----A---- C:\Windows\system32\shell32.dll 2014-06-17 14:57:04 ----A---- C:\Windows\system32\usp10.dll 2014-06-16 07:03:13 ----A---- C:\Windows\system32\rdpcorets.dll 2014-06-16 07:03:12 ----A---- C:\Windows\system32\RdpGroupPolicyExtension.dll 2014-06-15 22:30:04 ----D---- C:\Program Files\Common Files\Java 2014-06-15 22:29:57 ----A---- C:\Windows\system32\javaws.exe 2014-06-15 22:29:27 ----A---- C:\Windows\system32\WindowsAccessBridge.dll 2014-06-15 22:29:18 ----A---- C:\Windows\system32\javaw.exe 2014-06-15 22:29:00 ----A---- C:\Windows\system32\java.exe 2014-06-15 22:28:17 ----D---- C:\Program Files\Java 2014-06-14 22:30:37 ----D---- C:\Program Files\Enigma Software Group 2014-06-14 22:29:33 ----D---- C:\Program Files\Common Files\Wise Installation Wizard 2014-06-12 07:26:34 ----D---- C:\Users\Robo\AppData\Roaming\uTorrent 2014-05-31 21:45:58 ----D---- C:\Users\Robo\AppData\Roaming\XnView 2014-05-31 21:42:52 ----D---- C:\Program Files\Zrychleni Pocitace 2014-05-31 21:41:34 ----D---- C:\Program Files\Microsoft Silverlight 2014-05-31 21:39:10 ----D---- C:\Users\Robo\AppData\Roaming\rmi ======List of files/folders modified in the last 1 month====== 2014-06-22 21:29:58 ----D---- C:\Windows\Prefetch 2014-06-22 21:29:30 ----D---- C:\Windows\Temp 2014-06-22 18:23:31 ----D---- C:\Windows\system32\config 2014-06-22 17:56:32 ----RD---- C:\Program Files 2014-06-22 17:56:32 ----D---- C:\Windows\Tasks 2014-06-22 17:56:32 ----D---- C:\Windows 2014-06-22 09:08:35 ----D---- C:\Windows\system32\drivers 2014-06-21 22:07:30 ----D---- C:\Windows\inf 2014-06-21 22:07:21 ----D---- C:\Windows\system32\catroot 2014-06-21 22:07:18 ----D---- C:\Windows\system32\DriverStore 2014-06-21 22:07:03 ----D---- C:\Windows\system32\Tasks 2014-06-21 22:05:53 ----D---- C:\Windows\winsxs 2014-06-21 22:05:25 ----A---- C:\Windows\system32\aswBoot.exe 2014-06-21 21:53:04 ----SHD---- C:\System Volume Information 2014-06-21 21:52:32 ----D---- C:\ProgramData\AVAST Software 2014-06-21 21:42:30 ----D---- C:\Windows\Vss 2014-06-21 21:29:20 ----HD---- C:\ProgramData 2014-06-21 21:26:03 ----D---- C:\Users\Robo\AppData\Roaming\Media Player Classic 2014-06-21 21:25:42 ----D---- C:\Windows\Panther 2014-06-21 21:25:42 ----D---- C:\Windows\Minidump 2014-06-21 21:25:42 ----D---- C:\Windows\Logs 2014-06-21 21:25:42 ----D---- C:\Windows\debug 2014-06-21 20:25:10 ----D---- C:\Windows\System32 2014-06-20 08:37:29 ----D---- C:\Windows\rescache 2014-06-18 22:36:07 ----SHD---- C:\Windows\Installer 2014-06-18 09:38:37 ----D---- C:\Windows\Microsoft.NET 2014-06-18 09:37:44 ----RSD---- C:\Windows\assembly 2014-06-17 17:30:52 ----D---- C:\Windows\system32\en-US 2014-06-17 17:30:51 ----D---- C:\Windows\system32\cs-CZ 2014-06-17 17:30:51 ----D---- C:\Program Files\Internet Explorer 2014-06-17 17:30:50 ----D---- C:\Windows\PolicyDefinitions 2014-06-17 17:30:48 ----SD---- C:\Windows\system32\CompatTel 2014-06-17 16:27:45 ----D---- C:\Windows\system32\catroot2 2014-06-16 07:09:17 ----D---- C:\Windows\system32\MRT 2014-06-15 22:30:17 ----D---- C:\ProgramData\Oracle 2014-06-15 22:30:04 ----D---- C:\Program Files\Common Files 2014-06-07 17:21:58 ----D---- C:\ProgramData\McAfee Security Scan 2014-06-06 21:35:23 ----A---- C:\Windows\system32\PerfStringBackup.INI 2014-06-01 17:18:38 ----A---- C:\Windows\system32\MRT.exe 2014-05-31 21:42:35 ----SD---- C:\ProgramData\Microsoft ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R0 aswNdisFlt;Avast! Firewall Driver; C:\Windows\system32\DRIVERS\aswNdisFlt.sys [2014-06-21 270240] R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2014-06-21 49944] R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2014-06-21 180632] R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368] R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440] R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2013-10-11 721904] R1 aswKbd;aswKbd; C:\Windows\system32\drivers\aswKbd.sys [2014-06-21 26136] R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2014-06-21 81768] R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2014-06-21 777488] R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2014-06-21 411680] R1 SASDIFSV;SASDIFSV; \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS [2009-09-15 9968] R1 SASKUTIL;SASKUTIL; \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL.sys [2009-09-15 74480] R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2014-06-21 24184] R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2014-06-21 67824] R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2014-06-21 68312] R2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704] R3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2009-08-18 4994560] R3 MBAMProtector;MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [2014-05-12 23256] R3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [2014-06-22 110296] R3 MBAMWebAccessControl;MBAMWebAccessControl; \??\C:\Windows\system32\drivers\mwac.sys [2014-05-12 51928] R3 MTsensor;ATK0110 ACPI UTILITY; C:\Windows\system32\DRIVERS\ASACPI.sys [2004-08-13 5810] R3 NVNET;NVIDIA nForce 10/100 Mbps Ethernet ; C:\Windows\system32\DRIVERS\nvmf6232.sys [2010-08-12 298216] S3 a61823wz;a61823wz; C:\Windows\system32\drivers\a61823wz.sys [] S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720] S3 amdagp;Ovladač filtru AMD portu AGP; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312] S3 androidusb;SAMSUNG Android Composite ADB Interface Driver; C:\Windows\System32\Drivers\ssadadb.sys [2011-05-13 30312] S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888] S3 esgiguard;esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [] S3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\Windows\system32\DRIVERS\nvm62x32.sys [2009-07-14 347264] S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 14848] S3 SASENUM;SASENUM; \??\C:\Program Files\SUPERAntiSpyware\SASENUM.SYS [2009-09-15 7408] S3 sisagp;Filtr SIS sběrnice AGP; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304] S3 ss_bbus;SAMSUNG USB Mobile Device (WDM); C:\Windows\system32\DRIVERS\ss_bbus.sys [2009-09-19 98432] S3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter); C:\Windows\system32\DRIVERS\ss_bmdfl.sys [2009-09-19 14848] S3 ss_bmdm;SAMSUNG USB Mobile Modem; C:\Windows\system32\DRIVERS\ss_bmdm.sys [2009-09-19 123648] S3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM); C:\Windows\system32\DRIVERS\ssadbus.sys [2011-05-13 121064] S3 ssadmdfl;SAMSUNG Android USB Modem (Filter); C:\Windows\system32\DRIVERS\ssadmdfl.sys [2011-05-13 12776] S3 ssadmdm;SAMSUNG Android USB Modem Drivers; C:\Windows\system32\DRIVERS\ssadmdm.sys [2011-05-13 136808] S3 ssadserd;SAMSUNG Android USB Diagnostic Serial Port (WDM); C:\Windows\system32\DRIVERS\ssadserd.sys [2011-05-13 114280] S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2012-08-23 49664] S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\drivers\usbscan.sys [2013-07-03 36352] S3 viaagp;Filtr VIA sběrnice AGP; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328] S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736] S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 35968] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-12-21 65432] R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2009-08-18 176128] R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-06-21 50344] R2 avast! Firewall;avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [2014-06-21 109048] R2 MBAMService;MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [2014-05-12 860472] R2 MBAMScheduler;MBAMScheduler; C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe [2014-05-12 1809720] R2 StarWindServiceAE;StarWind AE Service; C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [2007-05-28 275968] S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144] S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2013-10-11 116648] S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-05-14 257712] S3 DfSdkS;Defragmentation-Service; C:\Program Files\Ashampoo\Ashampoo WinOptimizer Free\Dfsdks.exe [2009-08-24 406016] S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2013-10-11 116648] S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2011-05-10 136120] S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-05-30 108032] S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136] S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184] S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-12-16 1343400] S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2013-09-11 46688] S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856] S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856] S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856] -----------------EOF-----------------

Re: Virus OMIGA PLUS

Napsal: 22 čer 2014 22:30
od natalir
Kdyžtak tady txt, nějak se to špatně vložilo ...

http://leteckaposta.cz/862786286

Re: Virus OMIGA PLUS

Napsal: 23 čer 2014 16:08
od Rudy
Smazáno. Znovu spusťte OTM a klikněte na >CleanUp!<. OTM po sobě uklidí. Nakonec restartujte PC. Nastala nějaká změna?

Re: Virus OMIGA PLUS

Napsal: 24 čer 2014 19:45
od melo15
Zda se to být v pořádku. PC je svižný a vše funguje jak má.
Děkuji za pomoc! :)

Re: Virus OMIGA PLUS

Napsal: 24 čer 2014 19:56
od Rudy
Rádo se stalo! :)
Všechny časy jsou v UTC+01:00
Stránka 1 z 1

Založeno na phpBB® Forum Software © phpBB Limited

Český překlad – phpBB.cz