VIRY.CZ

Dobrý den. Měl bych prosbu včera jsem zapnul pc a nešla mi klávesnice skusil jsem i jinou a taky nic.Používám tu na obrazovce a to je utrpení.Myš funguje. Antivirák mám MSE a byl vypnutý, když jsem ho chtěl zapnout vyskočila mi hláška časový limit vypršel a něco k tomu. Skusil jsem avast a ten taky nejde ten zas píše firewall je vypnutý ale mám ho zaplej. MBAM taky nic asi je zavirovanej pc asi nejspíš brácha. Chtěl bych se zeptat zda by jste byly tak hodní a pomohly mi. Potřeboval bych to mít pokudmožno ještě dnes pač zítra musím odevzdat referáty a tou klávesnicí na obrazovce se to nedá psát.
Děkuji
Zde je log z RSIT

Logfile of random's system information tool 1.10 (written by random/random)
Run by tech at 2014-12-08 10:39:28
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 50 GB (65%) free of 76 GB
Total RAM: 997 MB (28% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:39:50, on 8.12.2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17420)
Boot mode: Normal

Running processes:
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files\trend micro\tech.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\aelupsvc.dll,-1 (AeLookupSvc) - Unknown owner - C:\Windows\system32\svchost.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: @%systemroot%\system32\appidsvc.dll,-100 (AppIDSvc) - Unknown owner - C:\Windows\system32\svchost.exe (file missing)
O23 - Service: @%systemroot%\system32\appinfo.dll,-100 (Appinfo) - Unknown owner - C:\Windows\system32\svchost.exe (file missing)
O23 - Service: Intel(R) Active Management Technology System Status Service (atchksrv) - Intel Corporation - C:\Program Files (x86)\Intel\AMT\atchksrv.exe
O23 - Service: @%SystemRoot%\system32\audiosrv.dll,-204 (AudioEndpointBuilder) - Unknown owner - C:\Windows\System32\svchost.exe (file missing)
O23 - Service: @%SystemRoot%\system32\audiosrv.dll,-200 (AudioSrv) - Unknown owner - C:\Windows\System32\svchost.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: avast! Firewall - AVAST Software - C:\Program Files\AVAST Software\Avast\afwServ.exe
O23 - Service: @%SystemRoot%\system32\AxInstSV.dll,-103 (AxInstSV) - Unknown owner - C:\Windows\system32\svchost.exe (file missing)
O23 - Service: @%SystemRoot%\system32\bdesvc.dll,-100 (BDESVC) - Unknown owner - C:\Windows\System32\svchost.exe (file missing)
O23 - Service: @%SystemRoot%\system32\bfe.dll,-1001 (BFE) - Unknown owner - C:\Windows\system32\svchost.exe (file missing)
O23 - Service: @%SystemRoot%\system32\qmgr.dll,-1000 (BITS) - Unknown owner - C:\Windows\System32\svchost.exe (file missing)
O23 - Service: @%systemroot%\system32\browser.dll,-100 (Browser) - Unknown owner - C:\Windows\System32\svchost.exe (file missing)
O23 - Service: @%SystemRoot%\System32\bthserv.dll,-101 (bthserv) - Unknown owner - C:\Windows\system32\svchost.exe (file missing)
O23 - Service: @%SystemRoot%\System32\certprop.dll,-11 (CertPropSvc) - Unknown owner - C:\Windows\system32\svchost.exe (file missing)
O23 - Service: @%SystemRoot%\system32\cryptsvc.dll,-1001 (CryptSvc) - Unknown owner - C:\Windows\system32\svchost.exe (file missing)
O23 - Service: @oleres.dll,-5012 (DcomLaunch) - Unknown owner - C:\Windows\system32\svchost.exe (file missing)
O23 - Service: @%SystemRoot%\system32\defragsvc.dll,-101 (defragsvc) - Unknown owner - C:\Windows\system32\svchost.exe (file missing)
O23 - Service: @%SystemRoot%\system32\dhcpcore.dll,-100 (Dhcp) - Unknown owner - C:\Windows\system32\svchost.exe (file missing)
O23 - Service: @%SystemRoot%\System32\dnsapi.dll,-101 (Dnscache) - Unknown owner - C:\Windows\system32\svchost.exe (file missing)
O23 - Service: @%systemroot%\system32\dot3svc.dll,-1102 (dot3svc) - Unknown owner - C:\Windows\system32\svchost.exe (file missing)
O23 - Service: @%systemroot%\system32\dps.dll,-500 (DPS) - Unknown owner - C:\Windows\System32\svchost.exe (file missing)
O23 - Service: @%systemroot%\system32\eapsvc.dll,-1 (EapHost) - Unknown owner - C:\Windows\System32\svchost.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\wevtsvc.dll,-200 (eventlog) - Unknown owner - C:\Windows\System32\svchost.exe (file missing)
O23 - Service: @comres.dll,-2450 (EventSystem) - Unknown owner - C:\Windows\system32\svchost.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\fdPHost.dll,-100 (fdPHost) - Unknown owner - C:\Windows\system32\svchost.exe (file missing)
O23 - Service: @%systemroot%\system32\fdrespub.dll,-100 (FDResPub) - Unknown owner - C:\Windows\system32\svchost.exe (file missing)
O23 - Service: @%systemroot%\system32\FntCache.dll,-100 (FontCache) - Unknown owner - C:\Windows\system32\svchost.exe (file missing)
O23 - Service: @gpapi.dll,-112 (gpsvc) - Unknown owner - C:\Windows\system32\svchost.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: @%SystemRoot%\System32\hidserv.dll,-101 (hidserv) - Unknown owner - C:\Windows\system32\svchost.exe (file missing)
O23 - Service: @%SystemRoot%\system32\kmsvc.dll,-6 (hkmsvc) - Unknown owner - C:\Windows\System32\svchost.exe (file missing)
O23 - Service: @%SystemRoot%\System32\ListSvc.dll,-100 (HomeGroupListener) - Unknown owner - C:\Windows\System32\svchost.exe (file missing)
O23 - Service: @%SystemRoot%\System32\provsvc.dll,-100 (HomeGroupProvider) - Unknown owner - C:\Windows\System32\svchost.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ikeext.dll,-501 (IKEEXT) - Unknown owner - C:\Windows\system32\svchost.exe (file missing)
O23 - Service: @%systemroot%\system32\IPBusEnum.dll,-102 (IPBusEnum) - Unknown owner - C:\Windows\system32\svchost.exe (file missing)
O23 - Service: @%SystemRoot%\system32\iphlpsvc.dll,-500 (iphlpsvc) - Unknown owner - C:\Windows\System32\svchost.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2946 (KtmRm) - Unknown owner - C:\Windows\System32\svchost.exe (file missing)
O23 - Service: @%systemroot%\system32\srvsvc.dll,-100 (LanmanServer) - Unknown owner - C:\Windows\system32\svchost.exe (file missing)
O23 - Service: @%systemroot%\system32\wkssvc.dll,-100 (LanmanWorkstation) - Unknown owner - C:\Windows\System32\svchost.exe (file missing)
O23 - Service: @%SystemRoot%\system32\lltdres.dll,-1 (lltdsvc) - Unknown owner - C:\Windows\System32\svchost.exe (file missing)
O23 - Service: @%SystemRoot%\system32\lmhsvc.dll,-101 (lmhosts) - Unknown owner - C:\Windows\system32\svchost.exe (file missing)
O23 - Service: Intel(R) Active Management Technology Local Management Service (LMS) - Intel - C:\Program Files (x86)\Intel\AMT\LMS.exe
O23 - Service: @%systemroot%\system32\mmcss.dll,-100 (MMCSS) - Unknown owner - C:\Windows\system32\svchost.exe (file missing)
O23 - Service: @%SystemRoot%\system32\FirewallAPI.dll,-23090 (MpsSvc) - Unknown owner - C:\Windows\system32\svchost.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\iscsidsc.dll,-5000 (MSiSCSI) - Unknown owner - C:\Windows\system32\svchost.exe (file missing)
O23 - Service: @%SystemRoot%\system32\qagentrt.dll,-6 (napagent) - Unknown owner - C:\Windows\System32\svchost.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\netman.dll,-109 (Netman) - Unknown owner - C:\Windows\System32\svchost.exe (file missing)
O23 - Service: @%SystemRoot%\system32\netprofm.dll,-202 (netprofm) - Unknown owner - C:\Windows\System32\svchost.exe (file missing)
O23 - Service: @%SystemRoot%\System32\nlasvc.dll,-1 (NlaSvc) - Unknown owner - C:\Windows\System32\svchost.exe (file missing)
O23 - Service: @%SystemRoot%\system32\nsisvc.dll,-200 (nsi) - Unknown owner - C:\Windows\system32\svchost.exe (file missing)
O23 - Service: @%SystemRoot%\system32\pnrpsvc.dll,-8004 (p2pimsvc) - Unknown owner - C:\Windows\System32\svchost.exe (file missing)
O23 - Service: @%SystemRoot%\system32\p2psvc.dll,-8006 (p2psvc) - Unknown owner - C:\Windows\System32\svchost.exe (file missing)
O23 - Service: @%SystemRoot%\system32\pcasvc.dll,-1 (PcaSvc) - Unknown owner - C:\Windows\system32\svchost.exe (file missing)
O23 - Service: @%systemroot%\system32\pla.dll,-500 (pla) - Unknown owner - C:\Windows\System32\svchost.exe (file missing)
O23 - Service: @%SystemRoot%\system32\umpnpmgr.dll,-100 (PlugPlay) - Unknown owner - C:\Windows\system32\svchost.exe (file missing)
O23 - Service: @%SystemRoot%\system32\pnrpauto.dll,-8002 (PNRPAutoReg) - Unknown owner - C:\Windows\System32\svchost.exe (file missing)
O23 - Service: @%SystemRoot%\system32\pnrpsvc.dll,-8000 (PNRPsvc) - Unknown owner - C:\Windows\System32\svchost.exe (file missing)
O23 - Service: @%SystemRoot%\System32\polstore.dll,-5010 (PolicyAgent) - Unknown owner - C:\Windows\system32\svchost.exe (file missing)
O23 - Service: @%SystemRoot%\system32\umpo.dll,-100 (Power) - Unknown owner - C:\Windows\system32\svchost.exe (file missing)
O23 - Service: @%systemroot%\system32\profsvc.dll,-300 (ProfSvc) - Unknown owner - C:\Windows\system32\svchost.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\qwave.dll,-1 (QWAVE) - Unknown owner - C:\Windows\system32\svchost.exe (file missing)
O23 - Service: @%Systemroot%\system32\rasauto.dll,-200 (RasAuto) - Unknown owner - C:\Windows\System32\svchost.exe (file missing)
O23 - Service: @%Systemroot%\system32\rasmans.dll,-200 (RasMan) - Unknown owner - C:\Windows\System32\svchost.exe (file missing)
O23 - Service: @regsvc.dll,-1 (RemoteRegistry) - Unknown owner - C:\Windows\system32\svchost.exe (file missing)
O23 - Service: @%windir%\system32\RpcEpMap.dll,-1001 (RpcEptMapper) - Unknown owner - C:\Windows\system32\svchost.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @oleres.dll,-5010 (RpcSs) - Unknown owner - C:\Windows\system32\svchost.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\System32\SCardSvr.dll,-1 (SCardSvr) - Unknown owner - C:\Windows\system32\svchost.exe (file missing)
O23 - Service: @%SystemRoot%\system32\schedsvc.dll,-100 (Schedule) - Unknown owner - C:\Windows\system32\svchost.exe (file missing)
O23 - Service: @%SystemRoot%\System32\certprop.dll,-13 (SCPolicySvc) - Unknown owner - C:\Windows\system32\svchost.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sdrsvc.dll,-107 (SDRSVC) - Unknown owner - C:\Windows\system32\svchost.exe (file missing)
O23 - Service: @%SystemRoot%\system32\seclogon.dll,-7001 (seclogon) - Unknown owner - C:\Windows\system32\svchost.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Sens.dll,-200 (SENS) - Unknown owner - C:\Windows\system32\svchost.exe (file missing)
O23 - Service: @%SystemRoot%\System32\sensrsvc.dll,-1000 (SensrSvc) - Unknown owner - C:\Windows\system32\svchost.exe (file missing)
O23 - Service: @%SystemRoot%\System32\SessEnv.dll,-1026 (SessionEnv) - Unknown owner - C:\Windows\System32\svchost.exe (file missing)
O23 - Service: @%SystemRoot%\System32\shsvcs.dll,-12288 (ShellHWDetection) - Unknown owner - C:\Windows\System32\svchost.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppuinotify.dll,-103 (sppuinotify) - Unknown owner - C:\Windows\system32\svchost.exe (file missing)
O23 - Service: @%systemroot%\system32\ssdpsrv.dll,-100 (SSDPSRV) - Unknown owner - C:\Windows\system32\svchost.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sstpsvc.dll,-200 (SstpSvc) - Unknown owner - C:\Windows\system32\svchost.exe (file missing)
O23 - Service: @%SystemRoot%\system32\wiaservc.dll,-9 (stisvc) - Unknown owner - C:\Windows\system32\svchost.exe (file missing)
O23 - Service: @%SystemRoot%\System32\swprv.dll,-103 (swprv) - Unknown owner - C:\Windows\System32\svchost.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sysmain.dll,-1000 (SysMain) - Unknown owner - C:\Windows\system32\svchost.exe (file missing)
O23 - Service: @%SystemRoot%\system32\TabSvc.dll,-100 (TabletInputService) - Unknown owner - C:\Windows\System32\svchost.exe (file missing)
O23 - Service: @%SystemRoot%\system32\tapisrv.dll,-10100 (TapiSrv) - Unknown owner - C:\Windows\System32\svchost.exe (file missing)
O23 - Service: @%SystemRoot%\system32\tbssvc.dll,-100 (TBS) - Unknown owner - C:\Windows\System32\svchost.exe (file missing)
O23 - Service: @%SystemRoot%\System32\termsrv.dll,-268 (TermService) - Unknown owner - C:\Windows\System32\svchost.exe (file missing)
O23 - Service: @%SystemRoot%\System32\themeservice.dll,-8192 (Themes) - Unknown owner - C:\Windows\System32\svchost.exe (file missing)
O23 - Service: @%systemroot%\system32\mmcss.dll,-102 (THREADORDER) - Unknown owner - C:\Windows\system32\svchost.exe (file missing)
O23 - Service: @%SystemRoot%\system32\trkwks.dll,-1 (TrkWks) - Unknown owner - C:\Windows\System32\svchost.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Active Management Technology User Notification Service (UNS) - Intel - C:\Program Files (x86)\Intel\AMT\UNS.exe
O23 - Service: @%systemroot%\system32\upnphost.dll,-213 (upnphost) - Unknown owner - C:\Windows\system32\svchost.exe (file missing)
O23 - Service: @%SystemRoot%\system32\dwm.exe,-2000 (UxSms) - Unknown owner - C:\Windows\System32\svchost.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\w32time.dll,-200 (W32Time) - Unknown owner - C:\Windows\system32\svchost.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%systemroot%\system32\wbiosrvc.dll,-100 (WbioSrvc) - Unknown owner - C:\Windows\system32\svchost.exe (file missing)
O23 - Service: @%SystemRoot%\system32\wcncsvc.dll,-3 (wcncsvc) - Unknown owner - C:\Windows\System32\svchost.exe (file missing)
O23 - Service: @%SystemRoot%\system32\WcsPlugInService.dll,-200 (WcsPlugInService) - Unknown owner - C:\Windows\system32\svchost.exe (file missing)
O23 - Service: @%systemroot%\system32\wdi.dll,-502 (WdiServiceHost) - Unknown owner - C:\Windows\System32\svchost.exe (file missing)
O23 - Service: @%systemroot%\system32\wdi.dll,-500 (WdiSystemHost) - Unknown owner - C:\Windows\System32\svchost.exe (file missing)
O23 - Service: @%systemroot%\system32\webclnt.dll,-100 (WebClient) - Unknown owner - C:\Windows\system32\svchost.exe (file missing)
O23 - Service: @%SystemRoot%\system32\wecsvc.dll,-200 (Wecsvc) - Unknown owner - C:\Windows\system32\svchost.exe (file missing)
O23 - Service: @%SystemRoot%\System32\wercplsupport.dll,-101 (wercplsupport) - Unknown owner - C:\Windows\System32\svchost.exe (file missing)
O23 - Service: @%SystemRoot%\System32\wersvc.dll,-100 (WerSvc) - Unknown owner - C:\Windows\System32\svchost.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MsMpRes.dll,-103 (WinDefend) - Unknown owner - C:\Windows\System32\svchost.exe (file missing)
O23 - Service: @%SystemRoot%\system32\winhttp.dll,-100 (WinHttpAutoProxySvc) - Unknown owner - C:\Windows\system32\svchost.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmisvc.dll,-205 (Winmgmt) - Unknown owner - C:\Windows\system32\svchost.exe (file missing)
O23 - Service: @%Systemroot%\system32\wsmsvc.dll,-101 (WinRM) - Unknown owner - C:\Windows\System32\svchost.exe (file missing)
O23 - Service: @%SystemRoot%\System32\wlansvc.dll,-257 (Wlansvc) - Unknown owner - C:\Windows\system32\svchost.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: @%SystemRoot%\system32\wpcsvc.dll,-100 (WPCSvc) - Unknown owner - C:\Windows\system32\svchost.exe (file missing)
O23 - Service: @%SystemRoot%\system32\wpdbusenum.dll,-100 (WPDBusEnum) - Unknown owner - C:\Windows\system32\svchost.exe (file missing)
O23 - Service: @%SystemRoot%\System32\wscsvc.dll,-200 (wscsvc) - Unknown owner - C:\Windows\System32\svchost.exe (file missing)
O23 - Service: @%systemroot%\system32\wuaueng.dll,-105 (wuauserv) - Unknown owner - C:\Windows\system32\svchost.exe (file missing)
O23 - Service: @%SystemRoot%\system32\wudfsvc.dll,-1000 (wudfsvc) - Unknown owner - C:\Windows\system32\svchost.exe (file missing)
O23 - Service: @%SystemRoot%\System32\wwansvc.dll,-257 (WwanSvc) - Unknown owner - C:\Windows\system32\svchost.exe (file missing)

--
End of file - 20665 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
winlogon.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
"c:\Program Files\Microsoft Security Client\MsMpEng.exe"
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs

C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
taskeng.exe {8602AB22-D87A-41EC-ADBC-4F0D17A63864}
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
C:\Windows\system32\igfxsrvc.exe -Embedding
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Intel\AMT\atchksrv.exe"
"C:\Program Files (x86)\Intel\AMT\LMS.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\Intel\AMT\UNS.exe"
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files\Internet Explorer\iexplore.exe"
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1948 CREDAT:275457 /prefetch:2
"C:\Windows\System32\osk.exe"
C:\Windows\system32\sppsvc.exe
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-78b08c98-e49f-491a-9a49-5ad2a914a1b3 -SystemEventPortName:HostProcess-ef7fe2be-90fd-46bf-a823-cd08570f27b0 -IoCancelEventPortName:HostProcess-51b452ea-fee0-43eb-8c04-5e57e69d4735 -NonStateChangingEventPortName:HostProcess-a31ab487-873f-4410-9f47-b12382723cd3 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:59b337d2-76c6-4c26-8c56-70f9955dda75 -DeviceGroupId:WpdFsGroup
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Windows\System32\MsSpellCheckingFacility.exe" -Embedding
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe2_ Global\UsGthrCtrlFltPipeMssGthrPipe2 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 516 520 528 65536 524
"C:\Users\tech\Desktop\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

=========Mozilla firefox=========

ProfilePath - C:\Users\tech\AppData\Roaming\Mozilla\Firefox\Profiles\cvkesffl.default

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.0.7]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled


======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2014-12-02 256456]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2014-12-02 194504]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2014-12-02 256456]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2014-12-02 194504]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2009-09-23 165912]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2009-09-23 385560]
"Persistence"=C:\Windows\system32\igfxpers.exe [2009-09-23 363544]
"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2014-08-22 1331288]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-08-21 959176]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\atchk]
C:\Program Files (x86)\Intel\AMT\atchk.exe [2009-12-01 401408]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cz.seznam.software.autoupdate]
C:\Users\tech\AppData\Roaming\Seznam.cz\szninstall.exe -c []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cz.seznam.software.szndesktop]
C:\Users\tech\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe -q []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\seznam-listicka-distribuce]
C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
C:\Program Files (x86)\Skype\Phone\Skype.exe [2014-05-08 21444224]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-08-21 959176]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-12-02 5225064]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2009-09-23 261120]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SoftwareSASGeneration"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2014-12-08 10:39:29 ----D---- C:\Program Files\trend micro
2014-12-08 10:39:28 ----D---- C:\rsit
2014-12-05 18:45:57 ----A---- C:\Windows\system32\drivers\MBAMSwissArmy.sys
2014-12-05 18:45:38 ----D---- C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-12-05 18:45:38 ----A---- C:\Windows\system32\drivers\mwac.sys
2014-12-05 18:45:38 ----A---- C:\Windows\system32\drivers\mbamchameleon.sys
2014-12-05 18:45:38 ----A---- C:\Windows\system32\drivers\mbam.sys
2014-12-05 16:19:23 ----D---- C:\02ecd4abccaf0ed6b29c87
2014-12-04 15:52:24 ----D---- C:\sfzone_profile
2014-12-02 19:21:20 ----D---- C:\Users\tech\AppData\Roaming\AVAST Software
2014-12-02 19:19:07 ----D---- C:\Program Files\Google
2014-12-02 19:18:56 ----D---- C:\ProgramData\Google
2014-12-02 19:18:01 ----A---- C:\Windows\system32\drivers\aswVmm.sys
2014-12-02 19:18:01 ----A---- C:\Windows\system32\drivers\aswStm.sys
2014-12-02 19:18:01 ----A---- C:\Windows\system32\drivers\aswSP.sys
2014-12-02 19:18:01 ----A---- C:\Windows\system32\drivers\aswRvrt.sys
2014-12-02 19:18:01 ----A---- C:\Windows\system32\drivers\aswRdr2.sys
2014-12-02 19:18:01 ----A---- C:\Windows\system32\drivers\aswMonFlt.sys
2014-12-02 19:18:01 ----A---- C:\Windows\system32\drivers\aswHwid.sys
2014-12-02 19:17:59 ----A---- C:\Windows\system32\drivers\aswsnx.sys
2014-12-02 19:17:59 ----A---- C:\Windows\system32\drivers\aswKbd.sys
2014-12-02 19:17:53 ----A---- C:\Windows\system32\aswBoot.exe
2014-12-02 19:17:47 ----A---- C:\Windows\avastSS.scr
2014-12-02 19:15:45 ----D---- C:\Program Files\AVAST Software
2014-12-02 19:14:47 ----D---- C:\ProgramData\AVAST Software
2014-11-28 12:49:15 ----A---- C:\Windows\system32\drivers\d290479b2cf11e25.sys
2014-11-19 12:28:10 ----A---- C:\Windows\SYSWOW64\pku2u.dll
2014-11-19 12:28:10 ----A---- C:\Windows\system32\pku2u.dll
2014-11-19 12:28:10 ----A---- C:\Windows\system32\kerberos.dll
2014-11-19 12:28:08 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2014-11-13 14:29:00 ----A---- C:\Windows\system32\generaltel.dll
2014-11-13 14:29:00 ----A---- C:\Windows\system32\aepdu.dll
2014-11-13 14:28:59 ----A---- C:\Windows\system32\aeinv.dll
2014-11-13 14:28:52 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2014-11-13 14:28:52 ----A---- C:\Windows\system32\termsrv.dll
2014-11-13 14:28:52 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2014-11-13 14:28:52 ----A---- C:\Windows\system32\adtschema.dll
2014-11-13 14:28:51 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2014-11-13 14:28:51 ----A---- C:\Windows\SYSWOW64\secur32.dll
2014-11-13 14:28:51 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2014-11-13 14:28:51 ----A---- C:\Windows\system32\msaudite.dll
2014-11-13 14:28:51 ----A---- C:\Windows\system32\lsasrv.dll
2014-11-13 14:28:28 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2014-11-13 14:28:28 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2014-11-13 14:28:28 ----A---- C:\Windows\system32\ieetwcollector.exe
2014-11-13 14:28:27 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2014-11-13 14:28:27 ----A---- C:\Windows\system32\ieetwproxystub.dll
2014-11-13 14:28:27 ----A---- C:\Windows\system32\ie4uinit.exe
2014-11-13 14:28:26 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2014-11-13 14:28:26 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2014-11-13 14:28:26 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2014-11-13 14:28:26 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2014-11-13 14:28:26 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2014-11-13 14:28:26 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-11-13 14:28:26 ----A---- C:\Windows\system32\iernonce.dll
2014-11-13 14:28:25 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2014-11-13 14:28:24 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2014-11-13 14:28:24 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2014-11-13 14:28:24 ----A---- C:\Windows\system32\iedkcs32.dll
2014-11-13 14:28:23 ----A---- C:\Windows\system32\urlmon.dll
2014-11-13 14:28:22 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2014-11-13 14:28:22 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2014-11-13 14:28:22 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2014-11-13 14:28:22 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2014-11-13 14:28:21 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2014-11-13 14:28:21 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2014-11-13 14:28:21 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2014-11-13 14:28:21 ----A---- C:\Windows\system32\dxtrans.dll
2014-11-13 14:28:20 ----A---- C:\Windows\SYSWOW64\ieui.dll
2014-11-13 14:28:20 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2014-11-13 14:28:20 ----A---- C:\Windows\system32\msfeeds.dll
2014-11-13 14:28:19 ----A---- C:\Windows\system32\iesetup.dll
2014-11-13 14:28:19 ----A---- C:\Windows\system32\ieapfltr.dll
2014-11-13 14:28:18 ----A---- C:\Windows\system32\iertutil.dll
2014-11-13 14:28:17 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2014-11-13 14:28:17 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2014-11-13 14:28:16 ----A---- C:\Windows\SYSWOW64\wininet.dll
2014-11-13 14:28:16 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2014-11-13 14:28:16 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2014-11-13 14:28:16 ----A---- C:\Windows\system32\jsproxy.dll
2014-11-13 14:28:16 ----A---- C:\Windows\system32\ieUnatt.exe
2014-11-13 14:28:15 ----A---- C:\Windows\SYSWOW64\msrating.dll
2014-11-13 14:28:15 ----A---- C:\Windows\system32\dxtmsft.dll
2014-11-13 14:28:14 ----A---- C:\Windows\system32\ieui.dll
2014-11-13 14:28:14 ----A---- C:\Windows\system32\ieframe.dll
2014-11-13 14:28:13 ----A---- C:\Windows\system32\mshtmlmedia.dll
2014-11-13 14:28:13 ----A---- C:\Windows\system32\mshtmled.dll
2014-11-13 14:28:12 ----A---- C:\Windows\system32\vbscript.dll
2014-11-13 14:28:12 ----A---- C:\Windows\system32\jscript9diag.dll
2014-11-13 14:28:12 ----A---- C:\Windows\system32\jscript9.dll
2014-11-13 14:28:11 ----A---- C:\Windows\system32\wininet.dll
2014-11-13 14:28:10 ----A---- C:\Windows\system32\msrating.dll
2014-11-13 14:28:10 ----A---- C:\Windows\system32\MshtmlDac.dll
2014-11-13 14:28:06 ----A---- C:\Windows\system32\mshtml.dll
2014-11-13 14:27:59 ----A---- C:\Windows\system32\msxml3.dll
2014-11-13 14:27:58 ----A---- C:\Windows\SYSWOW64\msxml3r.dll
2014-11-13 14:27:58 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2014-11-13 14:27:58 ----A---- C:\Windows\system32\msxml3r.dll
2014-11-13 14:27:57 ----A---- C:\Windows\SYSWOW64\IMJP10K.DLL
2014-11-13 14:27:57 ----A---- C:\Windows\system32\IMJP10K.DLL
2014-11-13 14:27:54 ----A---- C:\Windows\SYSWOW64\AudioSes.dll
2014-11-13 14:27:54 ----A---- C:\Windows\SYSWOW64\AUDIOKSE.dll
2014-11-13 14:27:54 ----A---- C:\Windows\SYSWOW64\AudioEng.dll
2014-11-13 14:27:54 ----A---- C:\Windows\system32\EncDump.dll
2014-11-13 14:27:54 ----A---- C:\Windows\system32\audiosrv.dll
2014-11-13 14:27:54 ----A---- C:\Windows\system32\AudioSes.dll
2014-11-13 14:27:54 ----A---- C:\Windows\system32\AUDIOKSE.dll
2014-11-13 14:27:54 ----A---- C:\Windows\system32\AudioEng.dll
2014-11-13 14:27:49 ----A---- C:\Windows\system32\schannel.dll
2014-11-13 14:27:48 ----A---- C:\Windows\SYSWOW64\schannel.dll
2014-11-13 14:27:48 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2014-11-13 14:27:48 ----A---- C:\Windows\system32\ncrypt.dll
2014-11-13 14:27:46 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2014-11-13 14:27:45 ----A---- C:\Windows\system32\wdigest.dll
2014-11-13 14:27:45 ----A---- C:\Windows\system32\msv1_0.dll
2014-11-13 14:27:44 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2014-11-13 14:27:44 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2014-11-13 14:27:44 ----A---- C:\Windows\system32\TSpkg.dll
2014-11-13 14:27:42 ----A---- C:\Windows\SYSWOW64\credssp.dll
2014-11-13 14:27:42 ----A---- C:\Windows\system32\credssp.dll
2014-11-13 14:27:31 ----A---- C:\Windows\SYSWOW64\packager.dll
2014-11-13 14:27:31 ----A---- C:\Windows\system32\packager.dll
2014-11-13 14:27:30 ----A---- C:\Windows\system32\win32k.sys
2014-11-13 14:25:30 ----A---- C:\Windows\system32\msi.dll
2014-11-13 14:25:29 ----A---- C:\Windows\SYSWOW64\msi.dll
2014-11-13 14:24:38 ----A---- C:\Windows\system32\oleaut32.dll
2014-11-13 14:24:36 ----A---- C:\Windows\SYSWOW64\oleaut32.dll

======List of files/folders modified in the last 1 month======

2014-12-08 10:39:29 ----RD---- C:\Program Files
2014-12-08 10:39:23 ----D---- C:\Windows\Temp
2014-12-08 10:37:37 ----D---- C:\Windows\System32
2014-12-08 10:37:37 ----D---- C:\Windows\inf
2014-12-08 10:37:37 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-12-08 10:33:45 ----A---- C:\Windows\SYSWOW64\log.txt
2014-12-05 19:35:56 ----D---- C:\Windows\system32\drivers
2014-12-05 19:35:56 ----D---- C:\Windows\security
2014-12-05 18:49:40 ----RSD---- C:\Windows\Media
2014-12-05 18:45:38 ----RD---- C:\Program Files (x86)
2014-12-05 18:38:25 ----D---- C:\Windows\Prefetch
2014-12-05 18:33:00 ----D---- C:\Windows\system32\wbem
2014-12-05 18:33:00 ----D---- C:\Windows
2014-12-05 18:32:28 ----D---- C:\Windows\winsxs
2014-12-05 18:32:28 ----D---- C:\Windows\Tasks
2014-12-05 18:32:28 ----D---- C:\Windows\system32\wfp
2014-12-05 18:32:28 ----D---- C:\Windows\system32\Tasks
2014-12-05 18:32:28 ----D---- C:\Windows\system32\NDF
2014-12-05 18:32:28 ----D---- C:\Windows\system32\DriverStore
2014-12-05 18:32:27 ----D---- C:\Windows\registration
2014-12-05 18:29:06 ----D---- C:\Program Files (x86)\Google
2014-12-05 18:29:05 ----SHD---- C:\Windows\Installer
2014-12-05 18:29:05 ----D---- C:\Windows\system32\catroot2
2014-12-05 17:32:14 ----SHD---- C:\System Volume Information
2014-12-05 17:27:29 ----D---- C:\Windows\system32\config
2014-12-05 16:18:46 ----D---- C:\Windows\SysWOW64
2014-12-05 16:17:58 ----D---- C:\Windows\system32\catroot
2014-12-02 19:18:56 ----HD---- C:\ProgramData
2014-11-15 06:05:58 ----D---- C:\Windows\rescache
2014-11-14 18:06:46 ----D---- C:\Windows\Microsoft.NET
2014-11-14 18:05:32 ----RSD---- C:\Windows\assembly
2014-11-14 17:00:00 ----SD---- C:\Windows\system32\CompatTel
2014-11-14 16:59:58 ----D---- C:\Windows\SYSWOW64\cs-CZ
2014-11-14 16:59:58 ----D---- C:\Windows\system32\cs-CZ
2014-11-14 16:59:58 ----D---- C:\Program Files\Internet Explorer
2014-11-14 16:59:57 ----D---- C:\Windows\SYSWOW64\en-US
2014-11-14 16:59:56 ----D---- C:\Windows\system32\en-US
2014-11-14 16:59:54 ----D---- C:\Program Files (x86)\Internet Explorer
2014-11-14 16:21:12 ----D---- C:\Windows\system32\MRT
2014-11-14 16:17:08 ----A---- C:\Windows\system32\MRT.exe
2014-11-11 19:02:52 ----D---- C:\Users\tech\AppData\Roaming\vlc
2014-11-11 17:07:18 ----D---- C:\Users\tech\AppData\Roaming\Adobe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R3 e1express;Intel(R) PRO/1000 – ovladač PCI Express síťového připojení; C:\Windows\system32\DRIVERS\e1e6032e.sys [2009-06-10 278016]
R3 HECIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2009-09-18 70168]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2009-09-23 6180832]
S0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2014-12-02 65776]
S0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2014-12-02 267632]
S0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2014-07-17 269008]
S1 aswKbd;aswKbd; C:\Windows\system32\drivers\aswKbd.sys [2014-12-02 28184]
S1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2014-12-02 93568]
S1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2014-12-02 1050432]
S1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2014-12-02 436624]
S2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2014-12-02 29208]
S2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2014-12-02 83280]
S2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2014-12-02 116728]
S2 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2014-07-17 125584]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 42496]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-09-12 64704]
R2 atchksrv;Intel(R) Active Management Technology System Status Service; C:\Program Files (x86)\Intel\AMT\atchksrv.exe [2009-12-01 176128]
R2 LMS;Intel(R) Active Management Technology Local Management Service; C:\Program Files (x86)\Intel\AMT\LMS.exe [2009-12-01 102400]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2014-08-22 23784]
R2 UNS;Intel(R) Active Management Technology User Notification Service; C:\Program Files (x86)\Intel\AMT\UNS.exe [2009-12-01 2519040]
S2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-12-02 50344]
S2 avast! Firewall;avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [2014-12-02 104416]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-11-03 107912]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-06-07 257712]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-11-03 107912]
S3 gusvc;Google Software Updater; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2014-12-02 194032]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-11-06 114688]
S3 NisSrv;@c:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\NisSrv.exe [2014-08-22 368624]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-08-20 1255736]
S4 NetMsmqActivator;@c:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@c:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@c:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

-----------------EOF-----------------

Zdravim

Odinstalujte MSE.

Zkuste, zda klavesnice funguje v nouzovem rezimu.
Pokud ne, podivejte se do spravce zarizeni, jestli tam neni nejaky vykricnik, ci otaznik.

MBAM nejde nainstalovat? Nebo se nainstaluje, ale nejde spustit?

Stahnete AdwCleaner https://toolslib.net/downloads/finish/1/ a ulozte ho na plochu.
Ukoncete vsechny programy, jinak to AdwCleaner udela za vas.
Kliknete na nej pravym mysidlem a levym na Spustit jako spravce.
Kliknete na Scan a pockejte, az kontrola dobehne.
Pak kliknete na Clean
Program zacne pracovat (muze dojit k restartu pc) a vyplivne log (pripadne bude zde C:\AdwCleaner\AdwCleaner [S?].txt ). Ten mi sem zkopirujte.

mbam jde i spustit ale udelam test dam do karanteny ale klavesnice nejde

Pokud je jeste mate, poslete mi vysledky toho testu, abych vedel co a kde nasel.

klavesnice nejde ani v nouzaku viz obrazek ty výsledky nemam jdu na to adw

Zkuste ovladac klavesnice preinstalovat.

zde je výsledek adw
# AdwCleaner v4.104 - Report created 08/12/2014 at 11:12:36
# Updated 05/12/2014 by Xplode
# Database : 2014-12-08.1 [Live]
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : tech - TECH-PC
# Running from : C:\Users\tech\Downloads\adwcleaner_4.104.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****


***** [ Scheduled Tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Classes\protector_dll.protectorbho
Key Deleted : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17420


-\\ Mozilla Firefox v33.0 (x86 cs)


-\\ Google Chrome v39.0.2171.71


*************************

AdwCleaner[R0].txt - [915 octets] - [08/12/2014 11:10:39]
AdwCleaner[S0].txt - [841 octets] - [08/12/2014 11:12:36]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [900 octets] ##########

mam dat aktualizovat nebo odinstalovat a pak instalovat

Odpojit klavesnici, odinstalovat ovladac, zapojit klavesnici (ovladac by se mel sam vyhledat a nainstalovat, pokud ne, budete ho muset najit bud na netu, nebo tam, odkud jste ho instaloval prvne).

odinstaluju ale nejde mam klavesnici kme kde najdu ovladac

a mam ještě tuhle http://klavesnice.heureka.cz/trust-convex-keyboard/

Ovladace byvaji na strankach vyrobce.


Pokud nemate, zazalohujte si radeji dulezita data (fotky, dokumenty, atd.)

Nepouzivejte ComboFix bez predchozi domluvy! Je to poruseni pravidel fora a ztratite tim narok na pomoc!

Stahnete ComboFix http://download.bleepingcomputer.com/sUBs/ComboFix.exe a ulozte ho na plochu.
Vypnete antivir i dalsi pripadne zabezpeceni.
Kliknete na ComboFix pravym mysidlem a levym na Spustit jako spravce
Odsouhlaste licencni podminky a nechte program pracovat. Jestli vam nabidne instalaci Konzoly pro zotaveni, souhlaste.
Po dobu skenu nic nespoustejte, nikam neklikejte.
Po dokonceni skenovani (muze dojit i k restartu pc) by se mel vytvorit log, ktery bude umisteny zde C:\ComboFix.txt
Jeho obsah sem zkopirujte

Kdyby po restartu nenabehl windows, restartujte znovu, mackejte klavesu F8 a zvolte - Posledni znama funkcni konfigurace
Kdyz windows nabehne, ale pri spousteni ruznych programu bude hlasena chyba, staci restartovat pc a bude to v poradku

muzu pouzit combofix ted nebo musim nejdriv nainstalovat klavesnici

Zkuste nejdrive ComboFix, jestli tam neni nejaka skodna.

zde je log klavesnice nejde

ComboFix 14-12-07.01 - tech 08.12.2014 11:42:53.1.2 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.997.371 [GMT 1:00]
Spuštěný z: c:\users\tech\Downloads\ComboFix.exe
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Vytvořen nový Bod Obnovení
.
/wow section - STAGE 50
Proces nemá přístup k souboru, neboť jej právě využívá jiný proces.
Proces nemá přístup k souboru, neboť jej právě využívá jiný proces.
Proces nemá přístup k souboru, neboť jej právě využívá jiný proces.
Proces nemá přístup k souboru, neboť jej právě využívá jiný proces.
Proces nemá přístup k souboru, neboť jej právě využívá jiný proces.
Systém nemůže najít soubor LockedB.
Systém nemůže najít soubor lockedB.
Systém nemůže najít soubor LockedB.
grep: temp2401: No such file or directory
Systém nemůže najít soubor LockedB.
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\SysWow64\DEBUG.log
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2014-11-08 do 2014-12-08 )))))))))))))))))))))))))))))))
.
.
2014-12-08 10:48 . 2014-12-08 10:48 -------- d-----w- c:\users\Default\AppData\Local\temp
2014-12-08 10:10 . 2014-12-08 10:12 -------- d-----w- C:\AdwCleaner
2014-12-08 09:39 . 2014-12-08 09:39 -------- d-----w- c:\program files\trend micro
2014-12-08 09:39 . 2014-12-08 09:39 -------- d-----w- C:\rsit
2014-12-05 17:45 . 2014-12-06 17:40 129752 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys
2014-12-05 17:45 . 2014-12-05 17:46 -------- d-----w- c:\program files (x86)\Malwarebytes Anti-Malware
2014-12-05 17:45 . 2014-11-21 05:14 63704 ----a-w- c:\windows\system32\drivers\mwac.sys
2014-12-05 17:45 . 2014-11-21 05:14 93400 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys
2014-12-05 17:45 . 2014-11-21 05:14 25816 ----a-w- c:\windows\system32\drivers\mbam.sys
2014-12-05 15:19 . 2014-12-05 17:29 -------- d-----w- C:\02ecd4abccaf0ed6b29c87
2014-12-04 14:52 . 2014-12-04 14:52 -------- d-----w- C:\sfzone_profile
2014-12-02 18:21 . 2014-12-02 18:21 -------- d-----w- c:\users\tech\AppData\Roaming\AVAST Software
2014-12-02 18:19 . 2014-12-05 17:29 -------- d-----w- c:\program files\Google
2014-12-02 18:18 . 2014-12-02 18:17 83280 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2014-12-02 18:18 . 2014-12-02 18:17 65776 ----a-w- c:\windows\system32\drivers\aswRvrt.sys
2014-12-02 18:18 . 2014-12-02 18:17 436624 ----a-w- c:\windows\system32\drivers\aswSP.sys
2014-12-02 18:18 . 2014-12-02 18:17 29208 ----a-w- c:\windows\system32\drivers\aswHwid.sys
2014-12-02 18:18 . 2014-12-02 18:17 267632 ----a-w- c:\windows\system32\drivers\aswVmm.sys
2014-12-02 18:18 . 2014-12-02 18:17 116728 ----a-w- c:\windows\system32\drivers\aswStm.sys
2014-12-02 18:18 . 2014-12-02 18:17 93568 ----a-w- c:\windows\system32\drivers\aswRdr2.sys
2014-12-02 18:17 . 2014-12-02 18:19 1050432 ----a-w- c:\windows\system32\drivers\aswsnx.sys
2014-12-02 18:17 . 2014-12-02 18:17 28184 ----a-w- c:\windows\system32\drivers\aswKbd.sys
2014-12-02 18:17 . 2014-12-02 18:17 364512 ----a-w- c:\windows\system32\aswBoot.exe
2014-12-02 18:17 . 2014-12-02 18:17 43152 ----a-w- c:\windows\avastSS.scr
2014-12-02 18:15 . 2014-12-02 18:15 -------- d-----w- c:\program files\AVAST Software
2014-12-02 18:14 . 2014-12-02 18:15 -------- d-----w- c:\programdata\AVAST Software
2014-11-19 11:28 . 2014-11-11 03:08 241152 ----a-w- c:\windows\system32\pku2u.dll
2014-11-19 11:28 . 2014-11-11 03:08 728064 ----a-w- c:\windows\system32\kerberos.dll
2014-11-19 11:28 . 2014-11-11 02:44 186880 ----a-w- c:\windows\SysWow64\pku2u.dll
2014-11-19 11:28 . 2014-11-11 02:44 550912 ----a-w- c:\windows\SysWow64\kerberos.dll
2014-11-14 16:04 . 2014-11-14 16:04 -------- d-sh--w- c:\users\tech\AppData\Local\EmieBrowserModeList
2014-11-13 13:29 . 2014-11-05 17:56 304640 ----a-w- c:\windows\system32\generaltel.dll
2014-11-13 13:29 . 2014-11-05 17:56 228864 ----a-w- c:\windows\system32\aepdu.dll
2014-11-13 13:27 . 2014-08-21 06:43 1882624 ----a-w- c:\windows\system32\msxml3.dll
2014-11-13 13:25 . 2014-10-14 02:13 3241984 ----a-w- c:\windows\system32\msi.dll
2014-11-13 13:25 . 2014-10-14 01:50 2363904 ----a-w- c:\windows\SysWow64\msi.dll
2014-11-13 13:24 . 2014-10-18 02:05 861696 ----a-w- c:\windows\system32\oleaut32.dll
2014-11-13 13:24 . 2014-10-18 01:33 571904 ----a-w- c:\windows\SysWow64\oleaut32.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-11-14 15:17 . 2013-09-22 13:11 103374192 ----a-w- c:\windows\system32\MRT.exe
2014-11-03 14:15 . 2014-11-03 14:15 6000640 ----a-w- c:\program files (x86)\GUTFC3A.tmp
2014-10-30 19:42 . 2013-09-20 09:07 48648 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup-2\Markup.dll
2014-10-30 11:25 . 2010-11-21 03:27 275080 ------w- c:\windows\system32\MpSigStub.exe
2014-09-25 15:21 . 2013-09-20 09:06 483952 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight-2\SpotlightResources.dll
2014-09-25 02:08 . 2014-10-01 16:15 371712 ----a-w- c:\windows\system32\qdvd.dll
2014-09-25 01:40 . 2014-10-01 16:15 519680 ----a-w- c:\windows\SysWow64\qdvd.dll
2014-09-23 16:15 . 2013-08-22 08:21 48648 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup\Markup.dll
2014-09-21 11:20 . 2013-08-22 08:21 483952 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll
2014-09-19 09:23 . 2014-11-13 13:27 248832 ----a-w- c:\windows\SysWow64\schannel.dll
2014-09-09 22:11 . 2014-09-24 13:28 2048 ----a-w- c:\windows\system32\tzres.dll
2014-09-09 21:47 . 2014-09-24 13:28 2048 ----a-w- c:\windows\SysWow64\tzres.dll
.
.
------- Sigcheck -------
Note: Unsigned files aren't necessarily malware.
.
[7] 2009-07-14 . C78655BC80301D76ED4FEF1C1EA40A7D . 27136 . . [6.1.7600.16385] .. c:\windows\erdnt\cache64\svchost.exe
[7] 2009-07-14 . C78655BC80301D76ED4FEF1C1EA40A7D . 27136 . . [6.1.7600.16385] .. c:\windows\winsxs\amd64_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_11b04b481efec48c\svchost.exe
[7] 2009-07-14 . C78655BC80301D76ED4FEF1C1EA40A7D . 27136 . . [6.1.7600.16385] .. c:\windows\system32\svchost.exe
.
c:\windows\SysWow64\svchost.exe ... chybí !!
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2014-08-21 959176]
"AvastUI.exe"="c:\program files\AVAST Software\Avast\AvastUI.exe" [2014-12-02 5225064]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
"SoftwareSASGeneration"= 1 (0x1)
.
R0 aswRvrt;avast! Revert; [x]
R0 aswVmm;avast! VM Monitor; [x]
R1 aswKbd;aswKbd;c:\windows\system32\drivers\aswKbd.sys;c:\windows\SYSNATIVE\drivers\aswKbd.sys [x]
R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys;c:\windows\SYSNATIVE\drivers\aswSnx.sys [x]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys;c:\windows\SYSNATIVE\drivers\aswSP.sys [x]
R2 aswHwid;avast! HardwareID;c:\windows\system32\drivers\aswHwid.sys;c:\windows\SYSNATIVE\drivers\aswHwid.sys [x]
R2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys;c:\windows\SYSNATIVE\drivers\aswMonFlt.sys [x]
R2 aswStm;aswStm;c:\windows\system32\drivers\aswStm.sys;c:\windows\SYSNATIVE\drivers\aswStm.sys [x]
R2 avast! Firewall;avast! Firewall;c:\program files\AVAST Software\Avast\afwServ.exe;c:\program files\AVAST Software\Avast\afwServ.exe [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
S2 atchksrv;Intel(R) Active Management Technology System Status Service;c:\program files (x86)\Intel\AMT\atchksrv.exe;c:\program files (x86)\Intel\AMT\atchksrv.exe [x]
S2 UNS;Intel(R) Active Management Technology User Notification Service;c:\program files (x86)\Intel\AMT\UNS.exe;c:\program files (x86)\Intel\AMT\UNS.exe [x]
S3 HECIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys;c:\windows\SYSNATIVE\DRIVERS\HECIx64.sys [x]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*Deregistered* - d290479b2cf11e25
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-11-26 17:30 1087304 ----a-w- c:\program files (x86)\Google\Chrome\Application\39.0.2171.71\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2014-07-07 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-08-20 15:28]
.
2014-12-08 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-11-03 14:15]
.
2014-12-08 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-11-03 14:15]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2014-12-02 18:17 860984 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2009-09-23 165912]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2009-09-23 385560]
"Persistence"="c:\windows\system32\igfxpers.exe" [2009-09-23 363544]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.seznam.cz/
mLocal Page = c:\windows\SysWOW64\blank.htm
TCP: DhcpNameServer = 10.0.0.1 10.1.1.2
FF - ProfilePath - c:\users\tech\AppData\Roaming\Mozilla\Firefox\Profiles\cvkesffl.default\
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\d290479b2cf11e25]
"ImagePath"="\SystemRoot\System32\Drivers\d290479b2cf11e25.sys"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2014-12-08 11:50:45
ComboFix-quarantined-files.txt 2014-12-08 10:50
.
Před spuštěním: Volných bajtů: 52 374 241 280
Po spuštění: Volných bajtů: 52 078 706 688
.
- - End Of File - - 19EBAAA93F76D5EB8AE45DD0E3E4FE54
A36C5E4F47E84449FF07ED3517B43A31