VIRY.CZ

Pomáháme v boji s počítačovou havěti!
https://forum.viry.cz:443/

Preventivní kontrola - nezvyklá aktivita

https://forum.viry.cz:443/viewtopic.php?t=143373

Stránka 1 z 1

Preventivní kontrola - nezvyklá aktivita

Napsal: 05 bře 2015 17:22
od _Antti_
Dobrý den, chtěl bych požádat o kontrolu, jelikož mě google znovu upozornil na "neobvyklou aktivitu" z mé sítě.

Děkuji.

Logfile of random's system information tool 1.10 (written by random/random)
Run by Jan at 2015-03-05 17:11:21
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 113 GB (49%) free of 229 GB
Total RAM: 8130 MB (63% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:11:23, on 5.3.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17207)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\TabTip32.exe
C:\Users\Jan\AppData\Local\Akamai\netsession_win.exe
C:\Users\Jan\AppData\Local\Akamai\netsession_win.exe
C:\Program Files (x86)\KeyDominator1\KeyDominator1\KeyDominator1.exe
C:\Program Files (x86)\Genius\Gila\mousehid.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files (x86)\Genius\Gila\trayicon.exe
C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
D:\Programy\Steam\steam.exe
D:\Programy\Steam\bin\steamwebhelper.exe
D:\Programy\Steam\bin\steamwebhelper.exe
C:\ProgramData\Battle.net\Agent\Agent.3733\Agent.exe
C:\Program Files (x86)\Battle.net\Battle.net.5522\Battle.net.exe
C:\ProgramData\Battle.net\Agent\Agent.exe
D:\Programy\HLSW\hlsw.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Jan.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: Microsoft Web Test Recorder 12.0 Helper - {432dd630-7e03-4c97-9d62-b99f52df4fc2} - D:\Programy\VS\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Pomocná služba pro přihlášení k účtu Microsoft - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [Gila] C:\Program Files (x86)\Genius\Gila\mousehid.exe
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [Akamai NetSession Interface] "C:\Users\Jan\AppData\Local\Akamai\netsession_win.exe"
O4 - HKCU\..\Run: [BloodyKeyboard] "C:\Program Files (x86)\KeyDominator1\KeyDominator1\KeyDominator1.exe" Minimum
O4 - HKCU\..\RunOnce: [FlashPlayerUpdate] C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_15_0_0_189_Plugin.exe -update plugin
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MICROS~4\Office14\ONBttnIE.dll/105
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - https://fpdownload.macromedia.com/get/s ... wflash.cab
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: ASUS Com Service (asComSvc) - Unknown owner - C:\Program Files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: @%ProgramFiles%\Windows Identity Foundation\v3.5\c2wtsres.dll,-1000 (c2wts) - Unknown owner - C:\Program Files (x86)\Windows Identity Foundation\v3.5\c2wtshost.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) Capability Licensing Service TCP IP Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: SAMSUNG Mobile Connectivity Service (ss_conn_service) - DEVGURU Co., LTD. - D:\Programy\TabletDriver\25_escape\conn\ss_conn_service.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: Wacom Professional Service (WTabletServicePro) - Wacom Technology, Corp. - C:\Program Files\Tablet\Wacom\WTabletServicePro.exe

--
End of file - 9613 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
winlogon.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
"C:\Program Files\Tablet\Wacom\WTabletServicePro.exe"
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
atieclxx
/QuitInfo:0000000000000290;0000000000000288; /AddRef;
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe"
"C:\Program Files\Bonjour\mDNSResponder.exe"
"C:\Program Files\Intel\iCLS Client\HeciServer.exe"
"C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe"
"C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe" -sSQLEXPRESS
C:\Windows\SysWOW64\PnkBstrA.exe
"C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe"
"D:\Programy\TabletDriver\25_escape\conn\ss_conn_service.exe"
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
WLIDSvcM.exe 2488
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-394f8ba4-94ea-4f8d-9582-044f6d80f9ea -SystemEventPortName:HostProcess-88e33b87-c1d1-4004-928c-3c06e773d3cf -IoCancelEventPortName:HostProcess-cd4fec9a-5c06-470e-86b9-8ff81acaa246 -NonStateChangingEventPortName:HostProcess-8c2efbfe-caf4-41fa-a0cb-f43d739ea2cf -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:a4e3a3d2-cc87-4ac6-9f86-3cb5737f08a3 -DeviceGroupId:
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
"taskhost.exe"
/QuitInfo:000000000000044C;000000000000051C; /AddRef;
/QuitInfo:000000000000047C;0000000000000460;
"C:\Windows\system32\Dwm.exe"
/loadhooks /Parent:00000000000005A8
C:\Windows\Explorer.EXE
"C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
"C:\Users\Jan\AppData\Local\Akamai\netsession_win.exe"
"C:/Users/Jan/AppData/Local/Akamai/netsession_win.exe" --client
"C:\Program Files (x86)\KeyDominator1\KeyDominator1\KeyDominator1.exe" Minimum
"C:\Program Files (x86)\Genius\Gila\mousehid.exe"
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
"C:\Program Files (x86)\Genius\Gila\trayicon.exe"
"C:\Program Files\Tablet\Wacom\Wacom_TabletUser.exe"
"C:\Program Files\Tablet\Wacom\WacomHost.exe" "C:\Program Files\Tablet\Wacom\Wacom_Tablet.exe" au
"C:\Program Files\Tablet\Wacom\Wacom_Tablet.exe" au
"C:\Program Files\Tablet\Wacom\Wacom_TouchUser.exe"
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
"C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM" PriorityLow
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
"D:\Programy\Steam\steam.exe" "steam://rungameid/304930"
"D:\Programy\Steam\bin\steamwebhelper.exe" -cefhost -cachedir "C:\Users\Jan\AppData\Local\Steam\htmlcache" -steampid 8392 -buildid 1424305157 -steamid "0" --blacklist-accelerated-compositing --process-per-tab --disable-accelerated-video-decode --enable-direct-write
"C:\Program Files (x86)\Common Files\Steam\SteamService.exe" /RunAsService
"D:\Programy\Steam\bin\steamwebhelper.exe" --type=renderer --disable-accelerated-video-decode --disable-delegated-renderer --disable-gpu-compositing --disable-threaded-compositing --enable-pinch --enable-software-compositing --no-sandbox --enable-direct-write --lang=en-US --lang=en-US --product-version="Valve Steam Client" --disable-accelerated-compositing --disable-gpu-compositing --channel="3032.1.1860532023\142831465" /prefetch:673131151
"taskhost.exe"
"C:\ProgramData\Battle.net\Agent\Agent.3733\Agent.exe" --locale=enUS --session=2995870210466354917
\??\C:\Windows\system32\conhost.exe "-701335741-161517548119445168891803360175-363055188-102316261016783024361613490765
"C:\Program Files (x86)\Battle.net\Battle.net.5522\Battle.net.exe" "--gamepath=C:\Program Files (x86)\Hearthstone" --game=hs_beta
"C:\ProgramData\Battle.net\Agent\Agent.exe" --switcheradmin --adminport=1120 --session=2995870210466354917
consent.exe 664 522 00000000028FF250
"D:\Programy\HLSW\hlsw.exe"

"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="8624.0.1221630753\1787118924" --supports-dual-gpus=false --gpu-driver-bug-workarounds=1,18,39 --gpu-vendor-id=0x1002 --gpu-device-id=0x6798 --gpu-driver-vendor="Advanced Micro Devices, Inc." --gpu-driver-version=14.100.0.0 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="BrowserBlacklist/Enabled/ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group7 pct:10g stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/GoogleNow/Enable/MaterialDesignNTP/Enabled/NewProfileManagement/NewAvatarMenu/OmniboxBundledExperimentV1/PP_Ethersuggest_A4_Stable_R8/PasswordGeneration/Disabled/QUIC/EnabledForLargePopulation/RememberCertificateErrorDecisions/Default/SPDY/Spdy4Enabled-default/SRTPromptFieldTrial/Default/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-Population-Restrict/normal/UMA-Uniformity-Trial-1-Percent/group_32/UMA-Uniformity-Trial-10-Percent/default/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_18/UMA-Uniformity-Trial-50-Percent/default/UwSInterstitialStatus/On/VoiceTrigger/Install/WebRTC-IPv6Default/Default/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --enable-delegated-renderer --enable-impl-side-painting --num-raster-threads=1 --channel="8624.2.813851903\2058488395" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="BrowserBlacklist/Enabled/ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group7 pct:10g stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/GoogleNow/Enable/MaterialDesignNTP/Enabled/NewProfileManagement/NewAvatarMenu/OmniboxBundledExperimentV1/PP_Ethersuggest_A4_Stable_R8/PasswordGeneration/Disabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/QUIC/EnabledForLargePopulation/RememberCertificateErrorDecisions/Default/SPDY/Spdy4Enabled-default/SRTPromptFieldTrial/Default/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-Population-Restrict/normal/UMA-Uniformity-Trial-1-Percent/group_32/UMA-Uniformity-Trial-10-Percent/default/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_18/UMA-Uniformity-Trial-50-Percent/default/UwSInterstitialStatus/On/VoiceTrigger/Install/WebRTC-IPv6Default/Default/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --enable-delegated-renderer --enable-impl-side-painting --num-raster-threads=1 --channel="8624.22.1850808337\267209110" /prefetch:673131151
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
"D:\Stažené soubory\RSITx64 (2).exe"

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

=========Mozilla firefox=========

ProfilePath - C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\2ep2kefl.default

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 15.0.0.189 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_189.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5]
"Description"=Intel IPT WebApi plugin
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater]
"Description"=This plugin updates Intel WebAPI component
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3528.0331]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@ngm.nexoneu.com/NxGame]
"Description"=Nexon Game Controller
"Path"=C:\ProgramData\NexonEU\NGM\npNxGameEU.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@pandonetworks.com/PandoWebPlugin]
"Description"=This plugin detects and launches Pando Media Booster
"Path"=C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.1.3]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.1.5]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@wacom.com/wtPlugin,version=2.1.0.7]
"Description"=WebTablet Plugin API
"Path"=C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\wacom.com/WacomTabletPlugin]
"Description"=
"Path"=C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 15.0.0.189 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_189.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.71.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.71.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@wacom.com/wtPlugin,version=2.1.0.7]
"Description"=WebTablet Plugin API
"Path"=C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\wacom.com/WacomTabletPlugin]
"Description"=
"Path"=C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll


======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3706EE7C-3CAD-445D-8A43-03EBC3B75908}]
Expat Shield Class - D:\Expat Shield\HssIE\ExpatIE_64.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2015-01-10 553896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-01-25 705448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 529664]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2015-01-10 211880]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{432dd630-7e03-4c97-9d62-b99f52df4fc2}]
Microsoft Web Test Recorder 12.0 Helper - D:\Programy\VS\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll [2013-10-05 71520]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-01-25 586968]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocná služba pro přihlášení k účtu Microsoft - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 441592]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"=C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe [2013-08-07 36352]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2013-10-22 7203032]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-21 1475584]
"Akamai NetSession Interface"=C:\Users\Jan\AppData\Local\Akamai\netsession_win.exe [2014-10-29 4673432]
"BloodyKeyboard"=C:\Program Files (x86)\KeyDominator1\KeyDominator1\KeyDominator1.exe [2014-12-01 12816384]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"FlashPlayerUpdate"=C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_15_0_0_189_Plugin.exe [2014-11-08 854704]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CCleaner Monitoring]
C:\Program Files\CCleaner\CCleaner64.exe [2014-11-21 7063832]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]
C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [2013-05-30 96056]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Launch LCore]
C:\Program Files\Logitech Gaming Software\LCore.exe [2014-09-16 11877656]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
C:\Program Files (x86)\Skype\Phone\Skype.exe [2014-12-11 30878816]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [2014-04-17 767200]
""= []
"Gila"=C:\Program Files (x86)\Genius\Gila\mousehid.exe [2013-10-10 2055680]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2015-01-25 5227112]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SoftwareSASGeneration"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
"NoDriveTypeAutoRun"=28

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.RTV1"=rtvcvfw64.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"VIDC.FPS1"=frapsv64.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-03-05 17:11:21 ----D---- C:\rsit
2015-02-28 18:12:10 ----A---- C:\Windows\system32\aswBoot.exe
2015-02-25 20:30:21 ----SHD---- C:\Config.Msi
2015-02-23 18:52:37 ----D---- C:\ProgramData\Microsoft Visual Studio
2015-02-23 18:33:51 ----D---- C:\Program Files (x86)\ReleaseManagement
2015-02-23 18:31:29 ----D---- C:\Program Files (x86)\Workflow Manager Tools
2015-02-23 18:31:28 ----D---- C:\Program Files (x86)\Open XML SDK
2015-02-23 18:31:27 ----D---- C:\Program Files\Microsoft Identity Extensions
2015-02-23 18:31:15 ----D---- C:\Program Files\Windows Identity Foundation
2015-02-23 18:31:15 ----D---- C:\Program Files (x86)\Windows Identity Foundation
2015-02-23 18:30:59 ----D---- C:\Program Files\SharePoint Client Components
2015-02-23 15:47:59 ----D---- C:\Program Files (x86)\Microsoft Visual Studio 11.0
2015-02-23 15:44:32 ----D---- C:\Program Files (x86)\Windows Phone Silverlight Kits
2015-02-23 15:43:48 ----D---- C:\Program Files (x86)\Microsoft XDE
2015-02-23 15:40:10 ----D---- C:\Program Files (x86)\AppInsights
2015-02-23 15:37:02 ----D---- C:\Program Files\Application Verifier
2015-02-23 15:37:02 ----D---- C:\Program Files (x86)\Application Verifier
2015-02-23 15:36:52 ----D---- C:\ProgramData\Windows App Certification Kit
2015-02-23 15:31:44 ----D---- C:\ProgramData\PreEmptive Solutions
2015-02-23 15:27:50 ----D---- C:\Program Files (x86)\Microsoft WCF Data Services
2015-02-23 15:24:26 ----D---- C:\Program Files (x86)\Windows Phone Kits
2015-02-23 15:24:19 ----D---- C:\Program Files (x86)\HTML Help Workshop
2015-02-23 15:10:16 ----D---- C:\ProgramData\regid.1991-06.com.microsoft
2015-02-22 11:57:26 ----D---- C:\Users\Jan\AppData\Roaming\Microsoft FxCop
2015-02-21 19:55:40 ----D---- C:\Program Files\TabletPlugins
2015-02-21 19:55:40 ----D---- C:\Program Files (x86)\TabletPlugins
2015-02-21 19:55:32 ----A---- C:\Windows\system32\drivers\wacomrouterfilter.sys
2015-02-21 19:55:10 ----A---- C:\Windows\system32\drivers\wachidrouter.sys
2015-02-21 19:55:05 ----A---- C:\Windows\SYSWOW64\Wintab32.dll
2015-02-21 19:55:05 ----A---- C:\Windows\SYSWOW64\WacomMT.dll
2015-02-21 19:55:05 ----A---- C:\Windows\SYSWOW64\Wacom_Touch_Tablet.dll
2015-02-21 19:55:05 ----A---- C:\Windows\SYSWOW64\Wacom_Tablet.dll
2015-02-21 19:55:05 ----A---- C:\Windows\system32\Wintab32.dll
2015-02-21 19:55:05 ----A---- C:\Windows\system32\WacomMT.dll
2015-02-21 19:55:05 ----A---- C:\Windows\system32\Wacom_Touch_Tablet.dll
2015-02-21 19:55:05 ----A---- C:\Windows\system32\Wacom_Tablet.dll
2015-02-21 19:55:03 ----D---- C:\Users\Jan\AppData\Roaming\WTablet
2015-02-21 13:55:46 ----A---- C:\Windows\system32\drivers\hidkmdf.sys
2015-02-21 13:55:39 ----D---- C:\Program Files\Tablet
2015-02-08 17:34:12 ----D---- C:\Program Files (x86)\Hearthstone
2015-02-08 17:05:45 ----D---- C:\Users\Jan\AppData\Roaming\Battle.net
2015-02-08 17:05:40 ----D---- C:\ProgramData\Blizzard Entertainment
2015-02-08 17:05:40 ----D---- C:\Program Files (x86)\Battle.net
2015-02-08 17:03:28 ----D---- C:\ProgramData\Battle.net

======List of files/folders modified in the last 1 month======

2015-03-05 17:11:23 ----D---- C:\Program Files\trend micro
2015-03-05 17:04:50 ----D---- C:\Windows\Minidump
2015-03-05 17:04:45 ----D---- C:\Windows\Temp
2015-03-05 17:04:45 ----D---- C:\Windows\Prefetch
2015-03-05 16:35:11 ----D---- C:\Users\Jan\AppData\Roaming\Skype
2015-03-05 16:07:44 ----D---- C:\Windows\SysWOW64
2015-03-05 16:07:43 ----A---- C:\Windows\SYSWOW64\PnkBstrB.exe
2015-03-05 15:28:37 ----D---- C:\Users\Jan\AppData\Roaming\HLSW
2015-03-05 13:10:26 ----D---- C:\Users\Jan\AppData\Roaming\vlc
2015-03-05 07:22:41 ----D---- C:\Windows\System32
2015-03-05 07:22:41 ----D---- C:\Windows\inf
2015-03-05 07:22:41 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-03-04 22:17:58 ----D---- C:\Users\Jan\AppData\Roaming\uTorrent
2015-02-28 18:12:18 ----D---- C:\Windows\system32\DriverStore
2015-02-28 18:12:18 ----D---- C:\Windows\system32\catroot
2015-02-28 18:12:17 ----D---- C:\Windows\system32\drivers
2015-02-28 18:12:11 ----D---- C:\Windows\system32\Tasks
2015-02-28 18:12:10 ----D---- C:\Windows
2015-02-28 18:12:05 ----SHD---- C:\System Volume Information
2015-02-26 21:36:36 ----D---- C:\Windows\Microsoft.NET
2015-02-25 21:49:42 ----SHD---- C:\Windows\Installer
2015-02-25 21:49:34 ----RSD---- C:\Windows\assembly
2015-02-25 20:58:49 ----D---- C:\Users\Jan\AppData\Roaming\TS3Client
2015-02-25 20:56:12 ----D---- C:\ProgramData\Package Cache
2015-02-25 20:30:51 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2015-02-23 18:52:37 ----HD---- C:\ProgramData
2015-02-23 18:33:51 ----RD---- C:\Program Files (x86)
2015-02-23 18:31:41 ----D---- C:\Program Files\MSBuild
2015-02-23 18:31:33 ----D---- C:\Program Files\Common Files\Microsoft Shared
2015-02-23 18:31:27 ----RD---- C:\Program Files
2015-02-23 18:31:27 ----D---- C:\Windows\winsxs
2015-02-23 18:31:15 ----D---- C:\Windows\system32\catroot2
2015-02-23 18:31:07 ----D---- C:\Windows\system32\config
2015-02-23 18:30:54 ----D---- C:\Program Files (x86)\Microsoft
2015-02-23 18:30:22 ----D---- C:\Program Files (x86)\Microsoft SDKs
2015-02-23 15:45:50 ----RSD---- C:\Windows\Fonts
2015-02-23 15:43:33 ----SD---- C:\ProgramData\Microsoft
2015-02-23 15:34:50 ----D---- C:\Program Files (x86)\Common Files
2015-02-23 15:30:09 ----D---- C:\Program Files (x86)\Microsoft ASP.NET
2015-02-23 15:26:02 ----D---- C:\Windows\SYSWOW64\1033
2015-02-23 15:21:20 ----D---- C:\Windows\system32\1033
2015-02-23 15:20:43 ----D---- C:\Program Files (x86)\Microsoft.NET
2015-02-23 15:11:26 ----D---- C:\Program Files (x86)\MSBuild
2015-02-23 07:17:54 ----D---- C:\Windows\SYSWOW64\cs-CZ
2015-02-23 07:17:54 ----D---- C:\Windows\system32\cs-CZ
2015-02-22 21:22:34 ----D---- C:\Program Files\IIS Express
2015-02-22 21:22:34 ----D---- C:\Program Files (x86)\IIS Express
2015-02-22 21:14:27 ----D---- C:\Windows\SYSWOW64\en-US
2015-02-22 21:14:27 ----D---- C:\Windows\system32\en-US
2015-02-22 21:13:03 ----D---- C:\Program Files (x86)\Microsoft Visual Studio 10.0
2015-02-18 16:56:20 ----D---- C:\Users\Jan\AppData\Roaming\FileZilla
2015-02-15 20:17:12 ----D---- C:\Program Files (x86)\MSI Afterburner

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2015-01-25 65776]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2015-01-25 267632]
R0 iaStorA;iaStorA; C:\Windows\system32\DRIVERS\iaStorA.sys [2013-08-07 644968]
R0 iaStorF;iaStorF; C:\Windows\system32\DRIVERS\iaStorF.sys [2013-08-07 28008]
R0 iusb3hcs;Ovladač přepínání hostitelského řadiče Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3hcs.sys [2013-04-26 20464]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R0 speedfan;speedfan; C:\Windows\SysWOW64\speedfan.sys [2012-12-29 28664]
R1 AsIO;AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [2012-08-22 15232]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2015-01-25 93568]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2015-01-25 1050432]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2015-01-25 436624]
R1 VBoxDrv;VirtualBox Service; C:\Windows\system32\DRIVERS\VBoxDrv.sys [2014-11-24 916024]
R1 VBoxUSBMon;VirtualBox USB Monitor Driver; C:\Windows\system32\DRIVERS\VBoxUSBMon.sys [2014-11-24 128080]
R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2015-01-25 29208]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2015-01-25 87912]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2015-01-25 116728]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2014-04-18 15376384]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2014-04-18 638976]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys [2013-12-19 94720]
R3 hidkmdf;KMDF Driver; C:\Windows\system32\DRIVERS\hidkmdf.sys [2014-10-25 14136]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2013-10-22 3692632]
R3 iusb3hub;Ovladač rozbočovače Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3hub.sys [2013-04-26 368112]
R3 iusb3xhc;Ovladač rozšiřitelného hostitelského řadiče Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3xhc.sys [2013-04-26 786416]
R3 LGBusEnum;Logitech GamePanel Virtual Bus Enumerator Driver; C:\Windows\system32\drivers\LGBusEnum.sys [2009-11-24 22408]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [2013-09-16 99288]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2013-08-27 883928]
R3 VBoxNetFlt;VirtualBox Bridged Networking Service; C:\Windows\system32\DRIVERS\VBoxNetFlt.sys [2014-11-24 156360]
R3 WacHidRouter;Wacom Hid Router; C:\Windows\system32\DRIVERS\wachidrouter.sys [2014-10-25 100664]
R3 wacomrouterfilter;Wacom Router Filter Driver; C:\Windows\system32\DRIVERS\wacomrouterfilter.sys [2014-10-25 15160]
R4 IOMap;IOMap; \??\C:\Windows\system32\drivers\IOMap64.sys [2013-01-25 23680]
S3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudbus.sys [2014-06-16 110336]
S3 DIRECTIO;DIRECTIO; \??\D:\Programy\PerformanceTest\DirectIo64.sys []
S3 EagleX64;EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys []
S3 GPU-Z;GPU-Z; \??\C:\Users\Jan\AppData\Local\Temp\GPU-Z.sys []
S3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2009-03-18 33856]
S3 LGVirHid;Logitech Gamepanel Virtual HID Device Driver; C:\Windows\system32\drivers\LGVirHid.sys [2009-11-24 16008]
S3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [2015-02-07 129752]
S3 MSICDSetup;MSICDSetup; \??\D:\CDriver64.sys []
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RTCore64;RTCore64; \??\C:\Program Files (x86)\MSI Afterburner\RTCore64.sys [2013-03-11 13368]
S3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudmdm.sys [2014-06-16 206080]
S3 taphss;Anchorfree HSS Adapter; C:\Windows\system32\DRIVERS\taphss.sys [2012-01-05 37888]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 41984]
S3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter; C:\Windows\system32\DRIVERS\VBoxNetAdp.sys [2014-11-24 141440]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]
S4 RsFx0103;RsFx0103 Driver; C:\Windows\system32\DRIVERS\RsFx0103.sys [2009-03-30 311656]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2014-04-18 239616]
R2 asComSvc;ASUS Com Service; C:\Program Files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe [2013-05-07 936728]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2015-01-25 50344]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 462184]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2013-08-07 15720]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2013-08-27 747520]
R2 IpOverUsbSvc;Windows Phone IP over USB Transport (IpOverUsbSvc); C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe [2014-10-15 22744]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2013-09-16 169432]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2013-09-16 390616]
R2 MSSQL$SQLEXPRESS;SQL Server (SQLEXPRESS); C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [2009-03-30 57617752]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2014-08-14 75136]
R2 SQLWriter;SQL Server VSS Writer; C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe [2014-02-21 134336]
R2 ss_conn_service;SAMSUNG Mobile Connectivity Service; D:\Programy\TabletDriver\25_escape\conn\ss_conn_service.exe [2014-06-16 741640]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2012-07-17 2292480]
R2 WTabletServicePro;Wacom Professional Service; C:\Program Files\Tablet\Wacom\WTabletServicePro.exe [2014-10-27 649496]
R3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2015-02-19 835776]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2014-11-07 105120]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2014-11-07 124568]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-07-11 116648]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2014-12-11 315496]
S3 c2wts;@%ProgramFiles%\Windows Identity Foundation\v3.5\c2wtsres.dll,-1000; C:\Program Files\Windows Identity Foundation\v3.5\c2wtshost.exe [2010-02-03 15768]
S3 fussvc;Windows App Certification Kit Fast User Switching Utility Service; C:\Program Files (x86)\Windows Kits\8.1\App Certification Kit\fussvc.exe [2014-02-20 142336]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-07-11 116648]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-08-29 111616]
S3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [2013-08-27 828376]
S3 Te.Service;Te.Service; C:\Program Files (x86)\Windows Kits\8.1\Testing\Runtimes\TAEF\Wex.Services.exe [2013-08-22 119808]
S3 VsEtwService120;Visual Studio ETW Event Collection Service; C:\Program Files\Microsoft Visual Studio 12.0\Common7\Packages\Debugger\Services\VsEtwService.exe [2014-07-22 89232]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2014-11-07 50328]
S4 MSSQLServerADHelper100;SQL Active Directory Helper Service; C:\Program Files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE [2009-07-22 61976]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-11-07 140424]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-11-07 140424]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-11-07 140424]
S4 SQLAgent$SQLEXPRESS;SQL Server Agent (SQLEXPRESS); C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [2009-03-30 427880]
S4 SQLBrowser;SQL Server Browser; C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe [2009-03-30 254808]

-----------------EOF-----------------

Re: Preventivní kontrola - nezvyklá aktivita

Napsal: 05 bře 2015 22:48
od Roli
Zdravím, použij Mbam z mého podpisu a dej mi sem z něj log, předem nic nemazat !


Stáhni a ulož na plochu ComboFix,

spusť aplikaci jako Administrátor a povol instalaci Konzole pro zotavení - Recovery Console.

Poté se zobrazí okno s licenčními podmínkami které potvrdíš kliknutím na ANO,

pak ještě jednou klik na ANO a už to jede.

Celá akce trvá okolo 10 minut ale může i déle, během skenu se nepokoušej spouštět nic jiného.

Při skenovaní může být PC i restartováno nelekat se.

Upozornění: po dobu skenu vypni rezidentní štít Antiviru a AntiSpy programu,

protože Combofix se pokouší napadené soubory smazat a tyto programy mu můžou bránit.

Po dokončení skenu nebo následném restartu aplikace vytvoří log, uložený na C:/Combofix.txt

(při opakovaném použití jsou logy číslovány Combofix2.txt atd.), jeho obsah zkopíruj sem.


V případě nejasností je ZDE obrázkový návod.

Re: Preventivní kontrola - nezvyklá aktivita

Napsal: 06 bře 2015 13:08
od _Antti_
Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 6.3.2015
Scan Time: 11:18:12
Logfile: mbam.txt
Administrator: Yes

Version: 2.00.4.1028
Malware Database: v2015.03.06.02
Rootkit Database: v2015.02.25.01
License: Free
Malware Protection: Disabled
Malicious Website Protection: Disabled
Self-protection: Disabled

OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: Jan

Scan Type: Custom Scan
Result: Completed
Objects Scanned: 786005
Time Elapsed: 1 hr, 0 min, 1 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Enabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 0
(No malicious items detected)

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 0
(No malicious items detected)

Files: 0
(No malicious items detected)

Physical Sectors: 0
(No malicious items detected)


(end)
-------------------

ComboFix 15-03-01.01 - Jan 06.03.2015 12:49:55.1.4 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.8130.5608 [GMT 1:00]
Spuštěný z: c:\users\Jan\Desktop\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}
SP: avast! Antivirus *Disabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Vytvořen nový Bod Obnovení
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
C:\END
c:\programdata\1415974822.bdinstall.bin
c:\programdata\1415974958.5596.bin
c:\programdata\1415974958.5716.bin
c:\programdata\1415974958.5736.bin
c:\programdata\1415974958.5952.bin
c:\programdata\1415974958.6036.bin
c:\programdata\1415974958.6040.bin
c:\programdata\1415974958.6044.bin
c:\programdata\1415974997.2388.bin
c:\programdata\1415974997.4580.bin
c:\programdata\1415974997.4584.bin
c:\programdata\1415974997.5064.bin
c:\programdata\1415974997.5720.bin
c:\programdata\1415974997.5728.bin
c:\programdata\1415974997.5840.bin
c:\programdata\1415975042.bdinstall.bin
c:\programdata\1415975062.bdinstall.bin
c:\users\Jan\AppData\Local\assembly\tmp
c:\users\Jan\AppData\Local\Microsoft\Windows\Temporary Internet Files\{1C2A1FEB-5B55-49E2-A395-177D3E0A80CF}.xps
c:\windows\PFRO.log
D:\install.exe
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2015-02-06 do 2015-03-06 )))))))))))))))))))))))))))))))
.
.
2015-03-06 11:53 . 2015-03-06 11:53 -------- d-----w- c:\users\Default\AppData\Local\temp
2015-03-05 16:11 . 2015-03-05 16:11 -------- d-----w- C:\rsit
2015-02-28 17:12 . 2015-01-25 13:48 364512 ----a-w- c:\windows\system32\aswBoot.exe
2015-02-28 09:19 . 2015-02-28 09:19 -------- d-----w- c:\users\Jan\AppData\Local\Steam
2015-02-23 17:52 . 2015-02-23 17:52 -------- d-----w- c:\programdata\Microsoft Visual Studio
2015-02-23 17:33 . 2015-02-23 17:33 -------- d-----w- c:\program files (x86)\ReleaseManagement
2015-02-23 17:31 . 2015-02-23 17:31 -------- d-----w- c:\program files (x86)\Workflow Manager Tools
2015-02-23 17:31 . 2015-02-23 17:31 -------- d-----w- c:\program files (x86)\Open XML SDK
2015-02-23 17:31 . 2015-02-23 17:31 -------- d-----w- c:\program files\Microsoft Identity Extensions
2015-02-23 17:31 . 2015-02-23 17:31 -------- d-----w- c:\program files\Windows Identity Foundation
2015-02-23 17:31 . 2015-02-23 17:31 -------- d-----w- c:\program files (x86)\Windows Identity Foundation
2015-02-23 17:30 . 2015-02-23 17:31 -------- d-----w- c:\program files\SharePoint Client Components
2015-02-23 14:47 . 2015-02-23 14:48 -------- d-----w- c:\program files (x86)\Microsoft Visual Studio 11.0
2015-02-23 14:44 . 2015-02-23 14:44 -------- d-----w- c:\program files (x86)\Windows Phone Silverlight Kits
2015-02-23 14:43 . 2015-02-23 14:43 -------- d-----w- c:\program files (x86)\Microsoft XDE
2015-02-23 14:40 . 2015-02-23 14:40 -------- d-----w- c:\program files (x86)\AppInsights
2015-02-23 14:37 . 2015-02-23 14:37 -------- d-----w- c:\program files\Application Verifier
2015-02-23 14:37 . 2015-02-23 14:37 -------- d-----w- c:\program files (x86)\Application Verifier
2015-02-23 14:36 . 2015-02-23 14:41 -------- d-----w- c:\programdata\Windows App Certification Kit
2015-02-23 14:34 . 2015-02-23 14:34 -------- d-----w- c:\program files (x86)\Common Files\Microsoft
2015-02-23 14:31 . 2015-02-23 14:31 -------- d-----w- c:\programdata\PreEmptive Solutions
2015-02-23 14:27 . 2015-02-23 14:27 -------- d-----w- c:\program files (x86)\Microsoft WCF Data Services
2015-02-23 14:24 . 2015-02-23 14:24 -------- d-----w- c:\program files (x86)\Windows Phone Kits
2015-02-23 14:24 . 2015-02-23 14:24 -------- d-----w- c:\program files (x86)\HTML Help Workshop
2015-02-23 14:15 . 2015-02-23 14:50 -------- d-----w- c:\program files (x86)\Common Files\Merge Modules
2015-02-23 14:10 . 2015-02-25 19:19 -------- d-----w- c:\programdata\regid.1991-06.com.microsoft
2015-02-22 10:57 . 2015-02-22 10:57 -------- d-----w- c:\users\Jan\AppData\Roaming\Microsoft FxCop
2015-02-21 21:06 . 2015-02-21 21:06 -------- d-----w- c:\users\Jan\AppData\Local\Wacom Help
2015-02-21 18:55 . 2015-02-21 21:06 -------- d-----w- c:\program files (x86)\TabletPlugins
2015-02-21 18:55 . 2014-10-25 20:52 15160 ----a-w- c:\windows\system32\drivers\wacomrouterfilter.sys
2015-02-21 18:55 . 2014-10-25 20:52 100664 ----a-w- c:\windows\system32\drivers\wachidrouter.sys
2015-02-21 18:55 . 2014-12-22 20:42 2029336 ----a-w- c:\windows\system32\WacomMT.dll
2015-02-21 18:55 . 2014-12-22 20:42 1863960 ----a-w- c:\windows\system32\Wintab32.dll
2015-02-21 18:55 . 2014-12-22 20:42 1626392 ----a-w- c:\windows\SysWow64\WacomMT.dll
2015-02-21 18:55 . 2014-12-22 20:42 1497368 ----a-w- c:\windows\SysWow64\Wintab32.dll
2015-02-21 18:55 . 2014-10-27 21:38 1989912 ----a-w- c:\windows\system32\Wacom_Tablet.dll
2015-02-21 18:55 . 2014-10-27 21:38 1983256 ----a-w- c:\windows\system32\Wacom_Touch_Tablet.dll
2015-02-21 18:55 . 2014-10-27 21:38 1613080 ----a-w- c:\windows\SysWow64\Wacom_Tablet.dll
2015-02-21 18:55 . 2014-10-27 21:38 1605912 ----a-w- c:\windows\SysWow64\Wacom_Touch_Tablet.dll
2015-02-21 18:55 . 2015-02-21 20:59 -------- d-----w- c:\users\Jan\AppData\Roaming\WTablet
2015-02-21 12:55 . 2014-10-25 20:52 14136 ----a-w- c:\windows\system32\drivers\hidkmdf.sys
2015-02-21 12:55 . 2015-02-21 21:05 -------- d-----w- c:\program files\Tablet
2015-02-08 17:32 . 2015-02-08 17:32 -------- d-----w- c:\users\Jan\AppData\Local\Blizzard
2015-02-08 16:34 . 2015-03-05 18:14 -------- d-----w- c:\program files (x86)\Hearthstone
2015-02-08 16:34 . 2015-02-08 16:34 -------- d-----w- c:\program files (x86)\Common Files\Blizzard Entertainment
2015-02-08 16:05 . 2015-02-08 16:05 -------- d-----w- c:\users\Jan\AppData\Local\Blizzard Entertainment
2015-02-08 16:05 . 2015-03-05 21:14 -------- d-----w- c:\users\Jan\AppData\Local\Battle.net
2015-02-08 16:05 . 2015-02-08 16:15 -------- d-----w- c:\users\Jan\AppData\Roaming\Battle.net
2015-02-08 16:05 . 2015-03-05 18:13 -------- d-----w- c:\program files (x86)\Battle.net
2015-02-08 16:05 . 2015-02-08 16:05 -------- d-----w- c:\programdata\Blizzard Entertainment
2015-02-08 16:03 . 2015-02-08 16:03 -------- d-----w- c:\programdata\Battle.net
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2015-03-06 10:16 . 2014-08-15 20:03 129752 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys
2015-03-06 10:03 . 2014-08-15 09:52 701616 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2015-03-06 10:03 . 2014-07-12 08:16 71344 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2015-03-05 17:22 . 2014-07-11 18:54 268952 ----a-w- c:\windows\SysWow64\PnkBstrB.xtr
2015-03-05 17:22 . 2014-07-11 16:57 268952 ----a-w- c:\windows\SysWow64\PnkBstrB.exe
2015-03-05 15:07 . 2014-07-11 16:57 268952 ----a-w- c:\windows\SysWow64\PnkBstrB.ex0
2015-02-25 20:49 . 2014-08-09 15:52 181824 ----a-w- c:\programdata\Microsoft\VCSExpress\10.0\1033\ResourceCache.dll
2015-02-23 17:34 . 2014-11-16 09:22 3016736 ----a-w- c:\programdata\Microsoft\VisualStudio\12.0\1033\ResourceCache.dll
2015-02-23 06:18 . 2014-08-01 14:08 1107680 ----a-w- c:\programdata\Microsoft\WDExpress\12.0\1033\ResourceCache.dll
2015-02-23 06:18 . 2014-08-02 09:55 1136736 ----a-w- c:\programdata\Microsoft\WDExpress\12.0\1029\ResourceCache.dll
2015-01-25 13:48 . 2015-01-25 13:48 87912 ----a-w- c:\windows\system32\drivers\aswmonflt.sys
2015-01-25 13:48 . 2015-01-25 13:48 1050432 ----a-w- c:\windows\system32\drivers\aswsnx.sys
2015-01-25 13:48 . 2015-01-25 13:48 93568 ----a-w- c:\windows\system32\drivers\aswRdr2.sys
2015-01-25 13:48 . 2015-01-25 13:48 65776 ----a-w- c:\windows\system32\drivers\aswRvrt.sys
2015-01-25 13:48 . 2015-01-25 13:48 436624 ----a-w- c:\windows\system32\drivers\aswSP.sys
2015-01-25 13:48 . 2015-01-25 13:48 29208 ----a-w- c:\windows\system32\drivers\aswHwid.sys
2015-01-25 13:48 . 2015-01-25 13:48 267632 ----a-w- c:\windows\system32\drivers\aswVmm.sys
2015-01-25 13:48 . 2015-01-25 13:48 116728 ----a-w- c:\windows\system32\drivers\aswStm.sys
2015-01-25 13:48 . 2015-01-25 13:48 43152 ----a-w- c:\windows\avastSS.scr
2015-01-14 10:32 . 2014-08-03 17:37 33856 ---ha-w- c:\windows\system32\hamachi.sys
2015-01-10 20:40 . 2015-01-10 20:40 319912 ----a-w- c:\windows\system32\javaws.exe
2015-01-10 20:40 . 2015-01-10 20:40 189352 ----a-w- c:\windows\system32\javaw.exe
2015-01-10 20:40 . 2015-01-10 20:40 189352 ----a-w- c:\windows\system32\java.exe
2015-01-10 20:40 . 2015-01-10 20:40 111016 ----a-w- c:\windows\system32\WindowsAccessBridge-64.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-21 1475584]
"Akamai NetSession Interface"="c:\users\Jan\AppData\Local\Akamai\netsession_win.exe" [2014-10-29 4673432]
"BloodyKeyboard"="c:\program files (x86)\KeyDominator1\KeyDominator1\KeyDominator1.exe" [2014-12-01 12816384]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe" [2014-04-17 767200]
"Gila"="c:\program files (x86)\Genius\Gila\mousehid.exe" [2013-10-10 2055680]
"AvastUI.exe"="c:\program files\AVAST Software\Avast\AvastUI.exe" [2015-01-25 5227112]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"SoftwareSASGeneration"= 1 (0x1)
.
R2 aswStm;aswStm;c:\windows\system32\drivers\aswStm.sys;c:\windows\SYSNATIVE\drivers\aswStm.sys [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 c2wts;Claims to Windows Token Service;c:\program files\Windows Identity Foundation\v3.5\c2wtshost.exe;c:\program files\Windows Identity Foundation\v3.5\c2wtshost.exe [x]
R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudbus.sys;c:\windows\SYSNATIVE\DRIVERS\ssudbus.sys [x]
R3 DIRECTIO;DIRECTIO;d:\programy\PerformanceTest\DirectIo64.sys;d:\programy\PerformanceTest\DirectIo64.sys [x]
R3 EagleX64;EagleX64;c:\windows\system32\drivers\EagleX64.sys;c:\windows\SYSNATIVE\drivers\EagleX64.sys [x]
R3 GPU-Z;GPU-Z;c:\users\Jan\AppData\Local\Temp\GPU-Z.sys;c:\users\Jan\AppData\Local\Temp\GPU-Z.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface;c:\program files\Intel\iCLS Client\SocketHeciServer.exe;c:\program files\Intel\iCLS Client\SocketHeciServer.exe [x]
R3 LGVirHid;Logitech Gamepanel Virtual HID Device Driver;c:\windows\system32\drivers\LGVirHid.sys;c:\windows\SYSNATIVE\drivers\LGVirHid.sys [x]
R3 MSICDSetup;MSICDSetup;d:\cdriver64.sys;d:\CDriver64.sys [x]
R3 RTCore64;RTCore64;c:\program files (x86)\MSI Afterburner\RTCore64.sys;c:\program files (x86)\MSI Afterburner\RTCore64.sys [x]
R3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudmdm.sys;c:\windows\SYSNATIVE\DRIVERS\ssudmdm.sys [x]
R3 Te.Service;Te.Service;c:\program files (x86)\Windows Kits\8.1\Testing\Runtimes\TAEF\Wex.Services.exe;c:\program files (x86)\Windows Kits\8.1\Testing\Runtimes\TAEF\Wex.Services.exe [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter;c:\windows\system32\DRIVERS\VBoxNetAdp.sys;c:\windows\SYSNATIVE\DRIVERS\VBoxNetAdp.sys [x]
R3 VsEtwService120;Visual Studio ETW Event Collection Service;c:\program files\Microsoft Visual Studio 12.0\Common7\Packages\Debugger\Services\VsEtwService.exe;c:\program files\Microsoft Visual Studio 12.0\Common7\Packages\Debugger\Services\VsEtwService.exe [x]
R4 MSSQLServerADHelper100;SQL Active Directory Helper Service;c:\program files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE;c:\program files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE [x]
R4 RsFx0103;RsFx0103 Driver;c:\windows\system32\DRIVERS\RsFx0103.sys;c:\windows\SYSNATIVE\DRIVERS\RsFx0103.sys [x]
R4 SQLAgent$SQLEXPRESS;SQL Server Agent (SQLEXPRESS);c:\program files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE;c:\program files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [x]
S0 aswRvrt;avast! Revert; [x]
S0 aswVmm;avast! VM Monitor; [x]
S0 iaStorA;iaStorA;c:\windows\system32\DRIVERS\iaStorA.sys;c:\windows\SYSNATIVE\DRIVERS\iaStorA.sys [x]
S0 iaStorF;iaStorF;c:\windows\system32\DRIVERS\iaStorF.sys;c:\windows\SYSNATIVE\DRIVERS\iaStorF.sys [x]
S0 iusb3hcs;Ovladač přepínání hostitelského řadiče Intel(R) USB 3.0;c:\windows\system32\DRIVERS\iusb3hcs.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hcs.sys [x]
S1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys;c:\windows\SYSNATIVE\drivers\aswSnx.sys [x]
S1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys;c:\windows\SYSNATIVE\drivers\aswSP.sys [x]
S1 VBoxDrv;VirtualBox Service;c:\windows\system32\DRIVERS\VBoxDrv.sys;c:\windows\SYSNATIVE\DRIVERS\VBoxDrv.sys [x]
S1 VBoxUSBMon;VirtualBox USB Monitor Driver;c:\windows\system32\DRIVERS\VBoxUSBMon.sys;c:\windows\SYSNATIVE\DRIVERS\VBoxUSBMon.sys [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 asComSvc;ASUS Com Service;c:\program files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe;c:\program files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe [x]
S2 aswHwid;avast! HardwareID;c:\windows\system32\drivers\aswHwid.sys;c:\windows\SYSNATIVE\drivers\aswHwid.sys [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys;c:\windows\SYSNATIVE\drivers\aswMonFlt.sys [x]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x]
S2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface;c:\program files\Intel\iCLS Client\HeciServer.exe;c:\program files\Intel\iCLS Client\HeciServer.exe [x]
S2 IpOverUsbSvc;Windows Phone IP over USB Transport (IpOverUsbSvc);c:\program files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe;c:\program files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe [x]
S2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [x]
S2 ss_conn_service;SAMSUNG Mobile Connectivity Service;d:\programy\TabletDriver\25_escape\conn\ss_conn_service.exe;d:\programy\TabletDriver\25_escape\conn\ss_conn_service.exe [x]
S2 WTabletServicePro;Wacom Professional Service;c:\program files\Tablet\Wacom\WTabletServicePro.exe;c:\program files\Tablet\Wacom\WTabletServicePro.exe [x]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x]
S3 hidkmdf;KMDF Driver;c:\windows\system32\DRIVERS\hidkmdf.sys;c:\windows\SYSNATIVE\DRIVERS\hidkmdf.sys [x]
S3 iusb3hub;Ovladač rozbočovače Intel(R) USB 3.0;c:\windows\system32\DRIVERS\iusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hub.sys [x]
S3 iusb3xhc;Ovladač rozšiřitelného hostitelského řadiče Intel(R) USB 3.0;c:\windows\system32\DRIVERS\iusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3xhc.sys [x]
S3 LGBusEnum;Logitech GamePanel Virtual Bus Enumerator Driver;c:\windows\system32\drivers\LGBusEnum.sys;c:\windows\SYSNATIVE\drivers\LGBusEnum.sys [x]
S3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\MBAMSwissArmy.sys;c:\windows\SYSNATIVE\drivers\MBAMSwissArmy.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
S3 VBoxNetFlt;VirtualBox Bridged Networking Service;c:\windows\system32\DRIVERS\VBoxNetFlt.sys;c:\windows\SYSNATIVE\DRIVERS\VBoxNetFlt.sys [x]
S3 wacomrouterfilter;Wacom Router Filter Driver;c:\windows\system32\DRIVERS\wacomrouterfilter.sys;c:\windows\SYSNATIVE\DRIVERS\wacomrouterfilter.sys [x]
S4 IOMap;IOMap;c:\windows\system32\drivers\IOMap64.sys;c:\windows\SYSNATIVE\drivers\IOMap64.sys [x]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - MBAMSWISSARMY
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2015-02-20 20:56 1084744 ----a-w- c:\program files (x86)\Google\Chrome\Application\40.0.2214.115\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2015-03-06 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-08-15 10:03]
.
2015-03-06 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-07-11 13:22]
.
2015-03-06 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-07-11 13:22]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2015-01-25 13:48 860984 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"="c:\program files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe" [2013-08-07 36352]
"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RtkNGUI64.exe" [2013-10-22 7203032]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = about:blank
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = <local>;*.local
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~4\Office14\EXCEL.EXE/3000
IE: Od&eslat do aplikace OneNote - c:\progra~1\MICROS~4\Office14\ONBttnIE.dll/105
TCP: DhcpNameServer = 192.168.1.1
FF - ProfilePath - c:\users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\2ep2kefl.default\
FF - user.js: plugin.state.npcontentblocker - 2
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Wow6432Node-HKLM-Run-<NO NAME> - (no file)
BHO-{3706EE7C-3CAD-445D-8A43-03EBC3B75908} - d:\expat shield\HssIE\ExpatIE_64.dll
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-2553262011-735739435-6247728-1000\Control Panel\Desktop*]
@Allowed: (Read) (RestrictedCode)
"WheelScrollLines"="3"
DUMPHIVE0.003 (REGF)
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2015-03-06 12:54:56
ComboFix-quarantined-files.txt 2015-03-06 11:54
.
Před spuštěním: Volných bajtů: 120 033 574 912
Po spuštění: Volných bajtů: 120 813 068 288
.
- - End Of File - - 86149041273BD56D9EC140E208CA6A01
A36C5E4F47E84449FF07ED3517B43A31

Re: Preventivní kontrola - nezvyklá aktivita

Napsal: 06 bře 2015 13:57
od Roli
Mbam zase odinstaluj.


Pokud jsi tak ještě neučinil, přesuň Combofix na plochu

otevři si Poznámkový blok

do něj zkopíruj skript z následujícího okna:

Kód: Vybrat vše

RegLock::  
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
ulož Tebou vytvořený TXT soubor jako CFScript.txt na plochu,

po uložení uchop vytvořený skript levým myšítkem a přesuň ho nad ikonu Combofixu, kde ho upustíš:

Obrázek

Po aplikaci na Tebe vypadne další log, zkopíruj ho sem

Upozornění : může se stát, že po aplikaci skriptu a restartu Windows nenaběhnou,

v tom případě znovu restartuj a přitom mačkej F8 poté zvol Poslední známou funkční konfiguraci


P.S. čistě ze zvědavosti, co máš za kreslící tablet od Wacomu a jsi s ním spokojen ?
Scháním nový pro dceru a nevím do čeho jít.

Re: Preventivní kontrola - nezvyklá aktivita

Napsal: 06 bře 2015 17:51
od _Antti_
Mám tablet Wacom Intuos Pen (menší verzi) a jsem s ním spokojen, jelikož na moje občasné kreslení mi stačí. To zase nemůžu říct o driverech pro tento tablet, protože ve většině verzích ovladačů je problém buď s velkou odezvou, nebo "klouzavým" pohybem (někomu to vadí a někomu zase ne), ale mě už se mi podařilo najít jednu bezchybnou verzi.

ComboFix 15-03-01.01 - Jan 06.03.2015 17:35:08.2.4 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.8130.5358 [GMT 1:00]
Spuštěný z: c:\users\Jan\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\Jan\Desktop\CFScript.txt
AV: avast! Antivirus *Disabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}
SP: avast! Antivirus *Disabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2015-02-06 do 2015-03-06 )))))))))))))))))))))))))))))))
.
.
2015-03-06 16:38 . 2015-03-06 16:38 -------- d-----w- c:\users\Default\AppData\Local\temp
2015-03-05 16:11 . 2015-03-05 16:11 -------- d-----w- C:\rsit
2015-02-28 17:12 . 2015-01-25 13:48 364512 ----a-w- c:\windows\system32\aswBoot.exe
2015-02-28 09:19 . 2015-02-28 09:19 -------- d-----w- c:\users\Jan\AppData\Local\Steam
2015-02-23 17:52 . 2015-02-23 17:52 -------- d-----w- c:\programdata\Microsoft Visual Studio
2015-02-23 17:33 . 2015-02-23 17:33 -------- d-----w- c:\program files (x86)\ReleaseManagement
2015-02-23 17:31 . 2015-02-23 17:31 -------- d-----w- c:\program files (x86)\Workflow Manager Tools
2015-02-23 17:31 . 2015-02-23 17:31 -------- d-----w- c:\program files (x86)\Open XML SDK
2015-02-23 17:31 . 2015-02-23 17:31 -------- d-----w- c:\program files\Microsoft Identity Extensions
2015-02-23 17:31 . 2015-02-23 17:31 -------- d-----w- c:\program files\Windows Identity Foundation
2015-02-23 17:31 . 2015-02-23 17:31 -------- d-----w- c:\program files (x86)\Windows Identity Foundation
2015-02-23 17:30 . 2015-02-23 17:31 -------- d-----w- c:\program files\SharePoint Client Components
2015-02-23 14:47 . 2015-02-23 14:48 -------- d-----w- c:\program files (x86)\Microsoft Visual Studio 11.0
2015-02-23 14:44 . 2015-02-23 14:44 -------- d-----w- c:\program files (x86)\Windows Phone Silverlight Kits
2015-02-23 14:43 . 2015-02-23 14:43 -------- d-----w- c:\program files (x86)\Microsoft XDE
2015-02-23 14:40 . 2015-02-23 14:40 -------- d-----w- c:\program files (x86)\AppInsights
2015-02-23 14:37 . 2015-02-23 14:37 -------- d-----w- c:\program files\Application Verifier
2015-02-23 14:37 . 2015-02-23 14:37 -------- d-----w- c:\program files (x86)\Application Verifier
2015-02-23 14:36 . 2015-02-23 14:41 -------- d-----w- c:\programdata\Windows App Certification Kit
2015-02-23 14:34 . 2015-02-23 14:34 -------- d-----w- c:\program files (x86)\Common Files\Microsoft
2015-02-23 14:31 . 2015-02-23 14:31 -------- d-----w- c:\programdata\PreEmptive Solutions
2015-02-23 14:27 . 2015-02-23 14:27 -------- d-----w- c:\program files (x86)\Microsoft WCF Data Services
2015-02-23 14:24 . 2015-02-23 14:24 -------- d-----w- c:\program files (x86)\Windows Phone Kits
2015-02-23 14:24 . 2015-02-23 14:24 -------- d-----w- c:\program files (x86)\HTML Help Workshop
2015-02-23 14:15 . 2015-02-23 14:50 -------- d-----w- c:\program files (x86)\Common Files\Merge Modules
2015-02-23 14:10 . 2015-02-25 19:19 -------- d-----w- c:\programdata\regid.1991-06.com.microsoft
2015-02-22 10:57 . 2015-02-22 10:57 -------- d-----w- c:\users\Jan\AppData\Roaming\Microsoft FxCop
2015-02-21 21:06 . 2015-02-21 21:06 -------- d-----w- c:\users\Jan\AppData\Local\Wacom Help
2015-02-21 18:55 . 2015-02-21 21:06 -------- d-----w- c:\program files (x86)\TabletPlugins
2015-02-21 18:55 . 2014-10-25 20:52 15160 ----a-w- c:\windows\system32\drivers\wacomrouterfilter.sys
2015-02-21 18:55 . 2014-10-25 20:52 100664 ----a-w- c:\windows\system32\drivers\wachidrouter.sys
2015-02-21 18:55 . 2014-12-22 20:42 2029336 ----a-w- c:\windows\system32\WacomMT.dll
2015-02-21 18:55 . 2014-12-22 20:42 1863960 ----a-w- c:\windows\system32\Wintab32.dll
2015-02-21 18:55 . 2014-12-22 20:42 1626392 ----a-w- c:\windows\SysWow64\WacomMT.dll
2015-02-21 18:55 . 2014-12-22 20:42 1497368 ----a-w- c:\windows\SysWow64\Wintab32.dll
2015-02-21 18:55 . 2014-10-27 21:38 1989912 ----a-w- c:\windows\system32\Wacom_Tablet.dll
2015-02-21 18:55 . 2014-10-27 21:38 1983256 ----a-w- c:\windows\system32\Wacom_Touch_Tablet.dll
2015-02-21 18:55 . 2014-10-27 21:38 1613080 ----a-w- c:\windows\SysWow64\Wacom_Tablet.dll
2015-02-21 18:55 . 2014-10-27 21:38 1605912 ----a-w- c:\windows\SysWow64\Wacom_Touch_Tablet.dll
2015-02-21 18:55 . 2015-02-21 20:59 -------- d-----w- c:\users\Jan\AppData\Roaming\WTablet
2015-02-21 12:55 . 2014-10-25 20:52 14136 ----a-w- c:\windows\system32\drivers\hidkmdf.sys
2015-02-21 12:55 . 2015-02-21 21:05 -------- d-----w- c:\program files\Tablet
2015-02-08 17:32 . 2015-02-08 17:32 -------- d-----w- c:\users\Jan\AppData\Local\Blizzard
2015-02-08 16:34 . 2015-03-05 18:14 -------- d-----w- c:\program files (x86)\Hearthstone
2015-02-08 16:34 . 2015-02-08 16:34 -------- d-----w- c:\program files (x86)\Common Files\Blizzard Entertainment
2015-02-08 16:05 . 2015-02-08 16:05 -------- d-----w- c:\users\Jan\AppData\Local\Blizzard Entertainment
2015-02-08 16:05 . 2015-03-05 21:14 -------- d-----w- c:\users\Jan\AppData\Local\Battle.net
2015-02-08 16:05 . 2015-02-08 16:15 -------- d-----w- c:\users\Jan\AppData\Roaming\Battle.net
2015-02-08 16:05 . 2015-03-05 18:13 -------- d-----w- c:\program files (x86)\Battle.net
2015-02-08 16:05 . 2015-02-08 16:05 -------- d-----w- c:\programdata\Blizzard Entertainment
2015-02-08 16:03 . 2015-02-08 16:03 -------- d-----w- c:\programdata\Battle.net
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2015-03-06 10:16 . 2014-08-15 20:03 129752 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys
2015-03-06 10:03 . 2014-08-15 09:52 701616 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2015-03-06 10:03 . 2014-07-12 08:16 71344 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2015-03-05 17:22 . 2014-07-11 18:54 268952 ----a-w- c:\windows\SysWow64\PnkBstrB.xtr
2015-03-05 17:22 . 2014-07-11 16:57 268952 ----a-w- c:\windows\SysWow64\PnkBstrB.exe
2015-03-05 15:07 . 2014-07-11 16:57 268952 ----a-w- c:\windows\SysWow64\PnkBstrB.ex0
2015-02-25 20:49 . 2014-08-09 15:52 181824 ----a-w- c:\programdata\Microsoft\VCSExpress\10.0\1033\ResourceCache.dll
2015-02-23 17:34 . 2014-11-16 09:22 3016736 ----a-w- c:\programdata\Microsoft\VisualStudio\12.0\1033\ResourceCache.dll
2015-02-23 06:18 . 2014-08-01 14:08 1107680 ----a-w- c:\programdata\Microsoft\WDExpress\12.0\1033\ResourceCache.dll
2015-02-23 06:18 . 2014-08-02 09:55 1136736 ----a-w- c:\programdata\Microsoft\WDExpress\12.0\1029\ResourceCache.dll
2015-01-25 13:48 . 2015-01-25 13:48 87912 ----a-w- c:\windows\system32\drivers\aswmonflt.sys
2015-01-25 13:48 . 2015-01-25 13:48 1050432 ----a-w- c:\windows\system32\drivers\aswsnx.sys
2015-01-25 13:48 . 2015-01-25 13:48 93568 ----a-w- c:\windows\system32\drivers\aswRdr2.sys
2015-01-25 13:48 . 2015-01-25 13:48 65776 ----a-w- c:\windows\system32\drivers\aswRvrt.sys
2015-01-25 13:48 . 2015-01-25 13:48 436624 ----a-w- c:\windows\system32\drivers\aswSP.sys
2015-01-25 13:48 . 2015-01-25 13:48 29208 ----a-w- c:\windows\system32\drivers\aswHwid.sys
2015-01-25 13:48 . 2015-01-25 13:48 267632 ----a-w- c:\windows\system32\drivers\aswVmm.sys
2015-01-25 13:48 . 2015-01-25 13:48 116728 ----a-w- c:\windows\system32\drivers\aswStm.sys
2015-01-25 13:48 . 2015-01-25 13:48 43152 ----a-w- c:\windows\avastSS.scr
2015-01-14 10:32 . 2014-08-03 17:37 33856 ---ha-w- c:\windows\system32\hamachi.sys
2015-01-10 20:40 . 2015-01-10 20:40 319912 ----a-w- c:\windows\system32\javaws.exe
2015-01-10 20:40 . 2015-01-10 20:40 189352 ----a-w- c:\windows\system32\javaw.exe
2015-01-10 20:40 . 2015-01-10 20:40 189352 ----a-w- c:\windows\system32\java.exe
2015-01-10 20:40 . 2015-01-10 20:40 111016 ----a-w- c:\windows\system32\WindowsAccessBridge-64.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-21 1475584]
"Akamai NetSession Interface"="c:\users\Jan\AppData\Local\Akamai\netsession_win.exe" [2014-10-29 4673432]
"BloodyKeyboard"="c:\program files (x86)\KeyDominator1\KeyDominator1\KeyDominator1.exe" [2014-12-01 12816384]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe" [2014-04-17 767200]
"Gila"="c:\program files (x86)\Genius\Gila\mousehid.exe" [2013-10-10 2055680]
"AvastUI.exe"="c:\program files\AVAST Software\Avast\AvastUI.exe" [2015-01-25 5227112]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"SoftwareSASGeneration"= 1 (0x1)
.
R2 aswStm;aswStm;c:\windows\system32\drivers\aswStm.sys;c:\windows\SYSNATIVE\drivers\aswStm.sys [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 c2wts;Claims to Windows Token Service;c:\program files\Windows Identity Foundation\v3.5\c2wtshost.exe;c:\program files\Windows Identity Foundation\v3.5\c2wtshost.exe [x]
R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudbus.sys;c:\windows\SYSNATIVE\DRIVERS\ssudbus.sys [x]
R3 DIRECTIO;DIRECTIO;d:\programy\PerformanceTest\DirectIo64.sys;d:\programy\PerformanceTest\DirectIo64.sys [x]
R3 EagleX64;EagleX64;c:\windows\system32\drivers\EagleX64.sys;c:\windows\SYSNATIVE\drivers\EagleX64.sys [x]
R3 GPU-Z;GPU-Z;c:\users\Jan\AppData\Local\Temp\GPU-Z.sys;c:\users\Jan\AppData\Local\Temp\GPU-Z.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface;c:\program files\Intel\iCLS Client\SocketHeciServer.exe;c:\program files\Intel\iCLS Client\SocketHeciServer.exe [x]
R3 LGVirHid;Logitech Gamepanel Virtual HID Device Driver;c:\windows\system32\drivers\LGVirHid.sys;c:\windows\SYSNATIVE\drivers\LGVirHid.sys [x]
R3 MSICDSetup;MSICDSetup;d:\cdriver64.sys;d:\CDriver64.sys [x]
R3 RTCore64;RTCore64;c:\program files (x86)\MSI Afterburner\RTCore64.sys;c:\program files (x86)\MSI Afterburner\RTCore64.sys [x]
R3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudmdm.sys;c:\windows\SYSNATIVE\DRIVERS\ssudmdm.sys [x]
R3 Te.Service;Te.Service;c:\program files (x86)\Windows Kits\8.1\Testing\Runtimes\TAEF\Wex.Services.exe;c:\program files (x86)\Windows Kits\8.1\Testing\Runtimes\TAEF\Wex.Services.exe [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter;c:\windows\system32\DRIVERS\VBoxNetAdp.sys;c:\windows\SYSNATIVE\DRIVERS\VBoxNetAdp.sys [x]
R3 VsEtwService120;Visual Studio ETW Event Collection Service;c:\program files\Microsoft Visual Studio 12.0\Common7\Packages\Debugger\Services\VsEtwService.exe;c:\program files\Microsoft Visual Studio 12.0\Common7\Packages\Debugger\Services\VsEtwService.exe [x]
R4 MSSQLServerADHelper100;SQL Active Directory Helper Service;c:\program files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE;c:\program files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE [x]
R4 RsFx0103;RsFx0103 Driver;c:\windows\system32\DRIVERS\RsFx0103.sys;c:\windows\SYSNATIVE\DRIVERS\RsFx0103.sys [x]
R4 SQLAgent$SQLEXPRESS;SQL Server Agent (SQLEXPRESS);c:\program files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE;c:\program files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [x]
S0 aswRvrt;avast! Revert; [x]
S0 aswVmm;avast! VM Monitor; [x]
S0 iaStorA;iaStorA;c:\windows\system32\DRIVERS\iaStorA.sys;c:\windows\SYSNATIVE\DRIVERS\iaStorA.sys [x]
S0 iaStorF;iaStorF;c:\windows\system32\DRIVERS\iaStorF.sys;c:\windows\SYSNATIVE\DRIVERS\iaStorF.sys [x]
S0 iusb3hcs;Ovladač přepínání hostitelského řadiče Intel(R) USB 3.0;c:\windows\system32\DRIVERS\iusb3hcs.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hcs.sys [x]
S1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys;c:\windows\SYSNATIVE\drivers\aswSnx.sys [x]
S1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys;c:\windows\SYSNATIVE\drivers\aswSP.sys [x]
S1 VBoxDrv;VirtualBox Service;c:\windows\system32\DRIVERS\VBoxDrv.sys;c:\windows\SYSNATIVE\DRIVERS\VBoxDrv.sys [x]
S1 VBoxUSBMon;VirtualBox USB Monitor Driver;c:\windows\system32\DRIVERS\VBoxUSBMon.sys;c:\windows\SYSNATIVE\DRIVERS\VBoxUSBMon.sys [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 asComSvc;ASUS Com Service;c:\program files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe;c:\program files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe [x]
S2 aswHwid;avast! HardwareID;c:\windows\system32\drivers\aswHwid.sys;c:\windows\SYSNATIVE\drivers\aswHwid.sys [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys;c:\windows\SYSNATIVE\drivers\aswMonFlt.sys [x]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x]
S2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface;c:\program files\Intel\iCLS Client\HeciServer.exe;c:\program files\Intel\iCLS Client\HeciServer.exe [x]
S2 IpOverUsbSvc;Windows Phone IP over USB Transport (IpOverUsbSvc);c:\program files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe;c:\program files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe [x]
S2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [x]
S2 ss_conn_service;SAMSUNG Mobile Connectivity Service;d:\programy\TabletDriver\25_escape\conn\ss_conn_service.exe;d:\programy\TabletDriver\25_escape\conn\ss_conn_service.exe [x]
S2 WTabletServicePro;Wacom Professional Service;c:\program files\Tablet\Wacom\WTabletServicePro.exe;c:\program files\Tablet\Wacom\WTabletServicePro.exe [x]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x]
S3 hidkmdf;KMDF Driver;c:\windows\system32\DRIVERS\hidkmdf.sys;c:\windows\SYSNATIVE\DRIVERS\hidkmdf.sys [x]
S3 iusb3hub;Ovladač rozbočovače Intel(R) USB 3.0;c:\windows\system32\DRIVERS\iusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hub.sys [x]
S3 iusb3xhc;Ovladač rozšiřitelného hostitelského řadiče Intel(R) USB 3.0;c:\windows\system32\DRIVERS\iusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3xhc.sys [x]
S3 LGBusEnum;Logitech GamePanel Virtual Bus Enumerator Driver;c:\windows\system32\drivers\LGBusEnum.sys;c:\windows\SYSNATIVE\drivers\LGBusEnum.sys [x]
S3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\MBAMSwissArmy.sys;c:\windows\SYSNATIVE\drivers\MBAMSwissArmy.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
S3 VBoxNetFlt;VirtualBox Bridged Networking Service;c:\windows\system32\DRIVERS\VBoxNetFlt.sys;c:\windows\SYSNATIVE\DRIVERS\VBoxNetFlt.sys [x]
S3 wacomrouterfilter;Wacom Router Filter Driver;c:\windows\system32\DRIVERS\wacomrouterfilter.sys;c:\windows\SYSNATIVE\DRIVERS\wacomrouterfilter.sys [x]
S4 IOMap;IOMap;c:\windows\system32\drivers\IOMap64.sys;c:\windows\SYSNATIVE\drivers\IOMap64.sys [x]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - MBAMSWISSARMY
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2015-02-20 20:56 1084744 ----a-w- c:\program files (x86)\Google\Chrome\Application\40.0.2214.115\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2015-03-06 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-08-15 10:03]
.
2015-03-06 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-07-11 13:22]
.
2015-03-06 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-07-11 13:22]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{3706EE7C-3CAD-445D-8A43-03EBC3B75908}]
d:\expat shield\HssIE\ExpatIE_64.dll [BU]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2015-01-25 13:48 860984 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"="c:\program files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe" [2013-08-07 36352]
"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RtkNGUI64.exe" [2013-10-22 7203032]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = about:blank
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = <local>;*.local
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~4\Office14\EXCEL.EXE/3000
IE: Od&eslat do aplikace OneNote - c:\progra~1\MICROS~4\Office14\ONBttnIE.dll/105
TCP: DhcpNameServer = 192.168.1.1
FF - ProfilePath - c:\users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\2ep2kefl.default\
FF - user.js: plugin.state.npcontentblocker - 2
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Wow6432Node-HKLM-Run-<NO NAME> - (no file)
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-2553262011-735739435-6247728-1000\Control Panel\Desktop*]
@Allowed: (Read) (RestrictedCode)
"WheelScrollLines"="3"
DUMPHIVE0.003 (REGF)
.
Celkový čas: 2015-03-06 17:39:52
ComboFix-quarantined-files.txt 2015-03-06 16:39
ComboFix2.txt 2015-03-06 11:54
.
Před spuštěním: Volných bajtů: 120 454 807 552
Po spuštění: Volných bajtů: 120 386 547 712
.
- - End Of File - - 5B7D36B0434CE538421234B4BFB6564C
A36C5E4F47E84449FF07ED3517B43A31

Re: Preventivní kontrola - nezvyklá aktivita

Napsal: 09 bře 2015 17:09
od Roli
_Antti_ píše:Mám tablet Wacom Intuos Pen (menší verzi) a jsem s ním spokojen, jelikož na moje občasné kreslení mi stačí. To zase nemůžu říct o driverech pro tento tablet, protože ve většině verzích ovladačů je problém buď s velkou odezvou, nebo "klouzavým" pohybem (někomu to vadí a někomu zase ne), ale mě už se mi podařilo najít jednu bezchybnou verzi.
Díky za info, dceři jsem objednal Wacom One, protože ten jediný ovladače i na Win XP tak snad bude spokojená.


Přes Start >> Spustit zkopíruj do okna:

ComboFix /Uninstall

a stiskni Enter

To odinstaluje ComboFix a smaže s ním související soubory a složky.


Použij T-Cleaner, který smaže případné zbytky po aplikacích které jsme použili.

Jen před jeho stažením a při použití stopni antivir, protože ho muže detekovat jako vir ale není tomu tak.


Pak dej vědět jak se PC chová.

Re: Preventivní kontrola - nezvyklá aktivita

Napsal: 28 bře 2015 18:19
od _Antti_
Omlouvám se za pozdní odpověď, měl jsem více, než dost práce.

Jinak PC je v pořádku. Za tu dobu mě google neupozorňoval a vše se zdá být v pořádku.
Jinak pokud to je vše, tak bych ti chtěl poděkovat za pomoc.

Re: Preventivní kontrola - nezvyklá aktivita

Napsal: 30 bře 2015 16:30
od Roli
Není vůbec zač a :closed:
Všechny časy jsou v UTC+01:00
Stránka 1 z 1

Založeno na phpBB® Forum Software © phpBB Limited

Český překlad – phpBB.cz