VIRY.CZ

Pomáháme v boji s počítačovou havěti!
https://forum.viry.cz:443/

Preventivní kontrola

https://forum.viry.cz:443/viewtopic.php?t=147066

Stránka 1 z 1

Preventivní kontrola

Napsal: 03 pro 2015 19:25
od Spectro90
Zdravím chtěl prosím o kontrolu , poslední dobou mi začínají padat aplikace , tím že přestanou pracovat ... Nevím čím je to způsobeno , tak budu rád když to trochu pročistíme a smažeme zbytky po odinstalacích.






Logfile of random's system information tool 1.10 (written by random/random)
Run by Triplex at 2015-12-03 19:25:01
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 9 GB (19%) free of 50 GB
Total RAM: 3959 MB (41% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:25:02, on 3.12.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18098)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files\trend micro\Triplex.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.seznam.cz/?clid=22668
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.seznam.cz/?clid=22668
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\Run: [Sony PC Companion] "C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe" /Background
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'Default user')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://D:\OFFICE\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://D:\OFFICE\Office14\ONBttnIE.dll/105
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: AvastVBox COM Service (AvastVBoxSvc) - Unknown owner - C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: Sony PC Companion - Avanquest Software - C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 7577 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs

C:\Windows\system32\svchost.exe -k NetworkService
atieclxx
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\Windows\System32\spoolsv.exe
taskeng.exe {0B43D48B-1D12-4E2E-88DF-8237E79AD1CA}
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
C:\Windows\System32\svchost.exe -k utcsvc
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\wbem\wmiprvse.exe
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\System32\rundll32.exe shell32.dll,SHCreateLocalServerRunDll {995C996E-D918-4a8c-A302-45719A6F4EA7} -Embedding
C:\Windows\Explorer.EXE
"C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe" /Background
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
"C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe"
"C:\Windows\system32\GWX\GWX.exe"
C:\Windows\system32\sppsvc.exe
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\servicing\TrustedInstaller.exe
taskmgr.exe /3
C:\Windows\System32\svchost.exe -k WerSvcGroup
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe3_ Global\UsGthrCtrlFltPipeMssGthrPipe3 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 516 520 528 65536 524
"C:\Users\Triplex\Desktop\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

=========Mozilla firefox=========

ProfilePath - C:\Users\Triplex\AppData\Roaming\Mozilla\Firefox\Profiles\6irik9jv.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "google.cz"
prefs.js - "keyword.URL" - "http://search.seznam.cz/?sourceid=quick ... earchTerms}&"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 19.0.0.226 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_226.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=C:\Windows\system32\Wat\npWatWeb.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.1.5]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 19.0.0.226 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_19_0_0_226.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=C:\Windows\system32\Wat\npWatWeb.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=D:\OFFICE\Office14\NPAUTHZ.DLL


C:\Users\Triplex\AppData\Roaming\Mozilla\Firefox\Profiles\6irik9jv.default\searchplugins\
google-avast.xml
seznam-avast.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - D:\OFFICE\Office14\GROOVEEX.DLL [2010-03-25 6722448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-08-12 655480]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - D:\OFFICE\Office14\URLREDIR.DLL [2010-02-28 688528]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2010-03-25 4222864]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-08-12 559624]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2010-02-28 561552]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"BCSSync"=D:\OFFICE\Office14\BCSSync.exe [2010-03-13 112512]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner64.exe [2014-11-21 7063832]
"Sony PC Companion"=C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe [2015-09-23 457088]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2015-11-07 6133520]
"StartCCC"=C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [2015-08-04 767176]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=D:\OFFICE\Office14\GROOVEEX.DLL [2010-03-25 6722448]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2010-03-25 4222864]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SoftwareSASGeneration"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-12-03 19:21:03 ----D---- C:\rsit
2015-12-03 18:03:43 ----D---- C:\ProgramData\WarThunder
2015-12-03 17:56:21 ----D---- C:\Program Files\AMD
2015-12-03 17:08:46 ----D---- C:\Program Files\Common Files\AV
2015-12-03 16:27:52 ----D---- C:\ProgramData\ATI
2015-12-03 16:26:38 ----D---- C:\Users\Triplex\AppData\Roaming\library_dir
2015-12-03 16:24:48 ----D---- C:\Users\Triplex\AppData\Roaming\Raptr
2015-12-03 16:24:48 ----D---- C:\Program Files (x86)\Raptr
2015-12-03 16:23:00 ----D---- C:\Program Files (x86)\AMD
2015-12-03 16:17:54 ----D---- C:\ProgramData\Package Cache
2015-12-03 06:47:44 ----D---- C:\Windows\SYSWOW64\.launcher_log
2015-12-02 17:59:37 ----A---- C:\Windows\system32\win32k.sys
2015-11-27 16:25:38 ----SD---- C:\Windows\SYSWOW64\Microsoft
2015-11-11 05:56:39 ----A---- C:\Windows\SYSWOW64\wuwebv.dll
2015-11-11 05:56:39 ----A---- C:\Windows\SYSWOW64\wups.dll
2015-11-11 05:56:39 ----A---- C:\Windows\SYSWOW64\wudriver.dll
2015-11-11 05:56:39 ----A---- C:\Windows\SYSWOW64\wuapp.exe
2015-11-11 05:56:39 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2015-11-11 05:56:39 ----A---- C:\Windows\system32\wuwebv.dll
2015-11-11 05:56:39 ----A---- C:\Windows\system32\wups2.dll
2015-11-11 05:56:39 ----A---- C:\Windows\system32\wups.dll
2015-11-11 05:56:39 ----A---- C:\Windows\system32\wudriver.dll
2015-11-11 05:56:39 ----A---- C:\Windows\system32\wucltux.dll
2015-11-11 05:56:39 ----A---- C:\Windows\system32\wuaueng.dll
2015-11-11 05:56:39 ----A---- C:\Windows\system32\wuauclt.exe
2015-11-11 05:56:39 ----A---- C:\Windows\system32\wuapp.exe
2015-11-11 05:56:39 ----A---- C:\Windows\system32\wuapi.dll
2015-11-11 05:56:39 ----A---- C:\Windows\system32\wu.upgrade.ps.dll
2015-11-11 05:56:39 ----A---- C:\Windows\system32\WinSetupUI.dll
2015-11-11 05:56:24 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2015-11-11 05:56:24 ----A---- C:\Windows\SYSWOW64\occache.dll
2015-11-11 05:56:24 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2015-11-11 05:56:24 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2015-11-11 05:56:24 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2015-11-11 05:56:24 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2015-11-11 05:56:24 ----A---- C:\Windows\system32\iernonce.dll
2015-11-11 05:56:24 ----A---- C:\Windows\system32\ieetwproxystub.dll
2015-11-11 05:56:24 ----A---- C:\Windows\system32\ieetwcollector.exe
2015-11-11 05:56:24 ----A---- C:\Windows\system32\ie4uinit.exe
2015-11-11 05:56:23 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2015-11-11 05:56:23 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2015-11-11 05:56:23 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2015-11-11 05:56:23 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2015-11-11 05:56:23 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2015-11-11 05:56:23 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-11-11 05:56:22 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2015-11-11 05:56:22 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2015-11-11 05:56:22 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2015-11-11 05:56:22 ----A---- C:\Windows\system32\urlmon.dll
2015-11-11 05:56:22 ----A---- C:\Windows\system32\occache.dll
2015-11-11 05:56:22 ----A---- C:\Windows\system32\iedkcs32.dll
2015-11-11 05:56:21 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2015-11-11 05:56:21 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2015-11-11 05:56:21 ----A---- C:\Windows\SYSWOW64\jscript.dll
2015-11-11 05:56:21 ----A---- C:\Windows\SYSWOW64\ieui.dll
2015-11-11 05:56:21 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2015-11-11 05:56:21 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2015-11-11 05:56:21 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2015-11-11 05:56:21 ----A---- C:\Windows\system32\msfeeds.dll
2015-11-11 05:56:21 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2015-11-11 05:56:21 ----A---- C:\Windows\system32\dxtrans.dll
2015-11-11 05:56:20 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2015-11-11 05:56:20 ----A---- C:\Windows\system32\iesetup.dll
2015-11-11 05:56:20 ----A---- C:\Windows\system32\ieapfltr.dll
2015-11-11 05:56:19 ----A---- C:\Windows\system32\iertutil.dll
2015-11-11 05:56:18 ----A---- C:\Windows\SYSWOW64\wininet.dll
2015-11-11 05:56:18 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2015-11-11 05:56:18 ----A---- C:\Windows\SYSWOW64\msrating.dll
2015-11-11 05:56:18 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2015-11-11 05:56:18 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2015-11-11 05:56:18 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2015-11-11 05:56:18 ----A---- C:\Windows\system32\vbscript.dll
2015-11-11 05:56:18 ----A---- C:\Windows\system32\jsproxy.dll
2015-11-11 05:56:17 ----A---- C:\Windows\system32\ieui.dll
2015-11-11 05:56:17 ----A---- C:\Windows\system32\ieframe.dll
2015-11-11 05:56:17 ----A---- C:\Windows\system32\dxtmsft.dll
2015-11-11 05:56:16 ----A---- C:\Windows\system32\webcheck.dll
2015-11-11 05:56:16 ----A---- C:\Windows\system32\mshtmlmedia.dll
2015-11-11 05:56:16 ----A---- C:\Windows\system32\mshtmled.dll
2015-11-11 05:56:16 ----A---- C:\Windows\system32\jscript.dll
2015-11-11 05:56:16 ----A---- C:\Windows\system32\ieUnatt.exe
2015-11-11 05:56:15 ----A---- C:\Windows\system32\wininet.dll
2015-11-11 05:56:15 ----A---- C:\Windows\system32\jscript9diag.dll
2015-11-11 05:56:15 ----A---- C:\Windows\system32\jscript9.dll
2015-11-11 05:56:14 ----A---- C:\Windows\system32\msrating.dll
2015-11-11 05:56:14 ----A---- C:\Windows\system32\MshtmlDac.dll
2015-11-11 05:56:13 ----A---- C:\Windows\system32\mshtml.dll
2015-11-11 05:55:52 ----A---- C:\Windows\system32\ntoskrnl.exe
2015-11-11 05:55:51 ----A---- C:\Windows\SYSWOW64\schannel.dll
2015-11-11 05:55:51 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2015-11-11 05:55:51 ----A---- C:\Windows\system32\schannel.dll
2015-11-11 05:55:51 ----A---- C:\Windows\system32\ncrypt.dll
2015-11-11 05:55:51 ----A---- C:\Windows\system32\kerberos.dll
2015-11-11 05:55:50 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2015-11-11 05:55:50 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2015-11-11 05:55:50 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2015-11-11 05:55:50 ----A---- C:\Windows\SYSWOW64\bcryptprimitives.dll
2015-11-11 05:55:50 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2015-11-11 05:55:50 ----A---- C:\Windows\system32\drivers\cng.sys
2015-11-11 05:55:50 ----A---- C:\Windows\system32\bcryptprimitives.dll
2015-11-11 05:55:49 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2015-11-11 05:55:49 ----A---- C:\Windows\system32\ntdll.dll
2015-11-11 05:55:49 ----A---- C:\Windows\system32\lsasrv.dll
2015-11-11 05:55:49 ----A---- C:\Windows\system32\kernel32.dll
2015-11-11 05:55:49 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2015-11-11 05:55:48 ----A---- C:\Windows\system32\wow64.dll
2015-11-11 05:55:48 ----A---- C:\Windows\system32\KernelBase.dll
2015-11-11 05:55:47 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2015-11-11 05:55:47 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2015-11-11 05:55:47 ----A---- C:\Windows\system32\winsrv.dll
2015-11-11 05:55:47 ----A---- C:\Windows\system32\wdigest.dll
2015-11-11 05:55:47 ----A---- C:\Windows\system32\TSpkg.dll
2015-11-11 05:55:47 ----A---- C:\Windows\system32\sspicli.dll
2015-11-11 05:55:47 ----A---- C:\Windows\system32\srcore.dll
2015-11-11 05:55:47 ----A---- C:\Windows\system32\smss.exe
2015-11-11 05:55:47 ----A---- C:\Windows\system32\rstrui.exe
2015-11-11 05:55:47 ----A---- C:\Windows\system32\rpcrt4.dll
2015-11-11 05:55:47 ----A---- C:\Windows\system32\msv1_0.dll
2015-11-11 05:55:47 ----A---- C:\Windows\system32\conhost.exe
2015-11-11 05:55:46 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2015-11-11 05:55:46 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2015-11-11 05:55:46 ----A---- C:\Windows\SYSWOW64\srclient.dll
2015-11-11 05:55:46 ----A---- C:\Windows\SYSWOW64\setup16.exe
2015-11-11 05:55:46 ----A---- C:\Windows\SYSWOW64\secur32.dll
2015-11-11 05:55:46 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2015-11-11 05:55:46 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2015-11-11 05:55:46 ----A---- C:\Windows\SYSWOW64\cryptbase.dll
2015-11-11 05:55:46 ----A---- C:\Windows\SYSWOW64\credssp.dll
2015-11-11 05:55:46 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2015-11-11 05:55:46 ----A---- C:\Windows\system32\wow64win.dll
2015-11-11 05:55:46 ----A---- C:\Windows\system32\wow64cpu.dll
2015-11-11 05:55:46 ----A---- C:\Windows\system32\sspisrv.dll
2015-11-11 05:55:46 ----A---- C:\Windows\system32\srclient.dll
2015-11-11 05:55:46 ----A---- C:\Windows\system32\secur32.dll
2015-11-11 05:55:46 ----A---- C:\Windows\system32\ntvdm64.dll
2015-11-11 05:55:46 ----A---- C:\Windows\system32\lsass.exe
2015-11-11 05:55:46 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2015-11-11 05:55:46 ----A---- C:\Windows\system32\csrsrv.dll
2015-11-11 05:55:46 ----A---- C:\Windows\system32\cryptbase.dll
2015-11-11 05:55:46 ----A---- C:\Windows\system32\credssp.dll
2015-11-11 05:55:46 ----A---- C:\Windows\system32\auditpol.exe
2015-11-11 05:55:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-11-11 05:55:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-11-11 05:55:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2015-11-11 05:55:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-11-11 05:55:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-11-11 05:55:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-11-11 05:55:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-11-11 05:55:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-11-11 05:55:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-11-11 05:55:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-11-11 05:55:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-11-11 05:55:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-11-11 05:55:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2015-11-11 05:55:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-11-11 05:55:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-11-11 05:55:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2015-11-11 05:55:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-11-11 05:55:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-11-11 05:55:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-11-11 05:55:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-11-11 05:55:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-11-11 05:55:45 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-11-11 05:55:45 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-11-11 05:55:45 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-11-11 05:55:45 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-11-11 05:55:45 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-11-11 05:55:45 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-11-11 05:55:45 ----A---- C:\Windows\SYSWOW64\wow32.dll
2015-11-11 05:55:45 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2015-11-11 05:55:45 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2015-11-11 05:55:45 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2015-11-11 05:55:45 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2015-11-11 05:55:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2015-11-11 05:55:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-11-11 05:55:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2015-11-11 05:55:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-11-11 05:55:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-11-11 05:55:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-11-11 05:55:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2015-11-11 05:55:44 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-11-11 05:55:44 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-11-11 05:55:44 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-11-11 05:55:44 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-11-11 05:55:44 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-11-11 05:55:44 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-11-11 05:55:44 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-11-11 05:55:44 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-11-11 05:55:44 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-11-11 05:55:44 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-11-11 05:55:44 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-11-11 05:55:44 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-11-11 05:55:44 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-11-11 05:55:44 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-11-11 05:55:44 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-11-11 05:55:44 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-11-11 05:55:44 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-11-11 05:55:44 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-11-11 05:55:44 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-11-11 05:55:44 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-11-11 05:55:44 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-11-11 05:55:44 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-11-11 05:55:44 ----A---- C:\Windows\SYSWOW64\user.exe
2015-11-11 05:55:44 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2015-11-11 05:55:44 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2015-11-11 05:55:44 ----A---- C:\Windows\SYSWOW64\instnm.exe
2015-11-11 05:55:44 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2015-11-11 05:55:44 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2015-11-11 05:55:44 ----A---- C:\Windows\system32\msobjs.dll
2015-11-11 05:55:44 ----A---- C:\Windows\system32\msaudite.dll
2015-11-11 05:55:44 ----A---- C:\Windows\system32\apisetschema.dll
2015-11-11 05:55:44 ----A---- C:\Windows\system32\adtschema.dll
2015-11-11 05:55:29 ----A---- C:\Windows\system32\drivers\tdx.sys
2015-11-11 05:55:29 ----A---- C:\Windows\system32\drivers\afd.sys
2015-11-11 05:55:27 ----A---- C:\Windows\SYSWOW64\shimeng.dll
2015-11-11 05:55:27 ----A---- C:\Windows\SYSWOW64\sdbinst.exe
2015-11-11 05:55:27 ----A---- C:\Windows\SYSWOW64\apphelp.dll
2015-11-11 05:55:27 ----A---- C:\Windows\system32\shimeng.dll
2015-11-11 05:55:27 ----A---- C:\Windows\system32\sdbinst.exe
2015-11-11 05:55:27 ----A---- C:\Windows\system32\apphelp.dll
2015-11-11 05:55:27 ----A---- C:\Windows\system32\aelupsvc.dll
2015-11-11 05:55:23 ----A---- C:\Windows\system32\drivers\ndis.sys
2015-11-11 05:55:21 ----A---- C:\Windows\SYSWOW64\InkEd.dll
2015-11-11 05:55:21 ----A---- C:\Windows\system32\InkEd.dll
2015-11-11 05:55:20 ----A---- C:\Windows\system32\jnwmon.dll
2015-11-10 13:58:14 ----D---- C:\Users\Triplex\AppData\Roaming\Polda 6
2015-11-04 15:02:36 ----D---- C:\Program Files (x86)\Mozilla Firefox

======List of files/folders modified in the last 1 month======

2015-12-03 19:25:01 ----D---- C:\Windows\Temp
2015-12-03 19:25:01 ----D---- C:\Program Files\trend micro
2015-12-03 19:24:28 ----D---- C:\Windows\Prefetch
2015-12-03 19:23:49 ----D---- C:\Windows\System32
2015-12-03 19:23:49 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-12-03 19:20:55 ----D---- C:\Windows\system32\config
2015-12-03 18:58:23 ----SHD---- C:\Windows\Installer
2015-12-03 18:39:20 ----D---- C:\Windows
2015-12-03 18:39:19 ----D---- C:\Windows\inf
2015-12-03 18:38:05 ----D---- C:\Windows\Minidump
2015-12-03 18:22:38 ----D---- C:\Windows\system32\catroot
2015-12-03 18:09:56 ----D---- C:\Program Files\Common Files
2015-12-03 18:08:48 ----D---- C:\Windows\SysWOW64
2015-12-03 18:08:41 ----D---- C:\Windows\system32\drivers
2015-12-03 18:03:43 ----HD---- C:\ProgramData
2015-12-03 17:56:21 ----RD---- C:\Program Files
2015-12-03 17:08:47 ----D---- C:\Windows\system32\Tasks
2015-12-03 17:08:46 ----D---- C:\Program Files (x86)\Common Files
2015-12-03 16:30:46 ----D---- C:\Windows\Microsoft.NET
2015-12-03 16:27:22 ----D---- C:\Windows\winsxs
2015-12-03 16:24:48 ----RD---- C:\Program Files (x86)
2015-12-03 16:22:56 ----D---- C:\Program Files\ATI Technologies
2015-12-03 16:22:07 ----RSD---- C:\Windows\assembly
2015-12-03 16:21:25 ----D---- C:\Windows\system32\DriverStore
2015-12-03 08:00:00 ----D---- C:\Users\Triplex\AppData\Roaming\vlc
2015-12-02 18:52:33 ----D---- C:\ProgramData\Microsoft Help
2015-12-02 18:52:31 ----D---- C:\Program Files\Common Files\Microsoft Shared
2015-12-02 18:51:54 ----D---- C:\Program Files (x86)\Microsoft Visual Studio 8
2015-12-02 17:58:05 ----D---- C:\Windows\system32\catroot2
2015-12-02 17:45:10 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2015-11-11 23:06:32 ----D---- C:\Windows\rescache
2015-11-11 18:57:01 ----D---- C:\Windows\debug
2015-11-11 18:49:52 ----D---- C:\Windows\SYSWOW64\cs-CZ
2015-11-11 18:49:52 ----D---- C:\Windows\system32\cs-CZ
2015-11-11 17:51:45 ----D---- C:\Windows\system32\MRT
2015-11-11 17:48:37 ----A---- C:\Windows\system32\MRT.exe
2015-11-11 15:53:46 ----D---- C:\Program Files\Internet Explorer
2015-11-11 15:53:45 ----D---- C:\Windows\SYSWOW64\en-US
2015-11-11 15:53:45 ----D---- C:\Windows\system32\en-US
2015-11-11 15:53:43 ----D---- C:\Program Files (x86)\Internet Explorer
2015-11-11 15:53:39 ----D---- C:\Windows\AppPatch
2015-11-11 15:53:36 ----D---- C:\Windows\system32\migration
2015-11-11 14:25:30 ----D---- C:\Program Files\Windows Journal
2015-11-10 13:53:03 ----D---- C:\Users\Triplex\AppData\Roaming\uTorrent
2015-11-05 17:35:28 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2015-10-06 65224]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2015-10-06 274808]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 TVALZ;TOSHIBA ACPI-Based Value Added Logical and General Purpose Device Driver; C:\Windows\system32\DRIVERS\TVALZ_O.SYS [2007-11-09 26968]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 199552]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2015-10-06 93528]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2015-11-07 1059656]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2015-11-07 449992]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 514560]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2015-10-06 28656]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2015-10-06 90968]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2015-10-06 153744]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2010-04-27 6659072]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2010-04-26 195584]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys [2015-07-15 96256]
R3 HECIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2009-09-17 56344]
R3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\L1C62x64.sys [2010-02-22 75304]
R3 rtl8192se;Realtek Wireless LAN 802.11n PCI-E NIC NT Driver; C:\Windows\system32\DRIVERS\rtl8192se.sys [2011-06-20 1225832]
S2 VBoxAswDrv;VBoxAsw Support Driver; \??\C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys []
S3 ggflt;SOMC USB Flash Driver Filter; C:\Windows\system32\DRIVERS\ggflt.sys [2015-09-23 16088]
S3 ggsomc;SOMC USB Flash Driver; C:\Windows\system32\DRIVERS\ggsomc.sys [2015-09-23 30424]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 165888]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 6656]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 34688]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 21760]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2015-07-07 82128]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2010-04-26 202752]
R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2015-10-06 146600]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2014-04-03 315008]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-10-22 269000]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 AvastVBoxSvc;AvastVBox COM Service; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe []
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2015-10-31 114688]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; D:\OFFICE\Office14\GROOVE.EXE [2010-03-25 51456888]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2015-11-04 147624]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 174440]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 Sony PC Companion;Sony PC Companion; C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe [2015-06-10 155520]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2014-12-22 1255736]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

-----------------EOF-----------------

Re: Preventivní kontrola

Napsal: 04 pro 2015 13:49
od Roli
Zdravím, stáhni a ulož na plochu AdwCleaner,

ukonči všechny programy včetně prohlížeče a dvojklikem jej spusť,

objeví se okno kde vlevo nahoře klikni na Scan.

Po dokončení skenu klikni na Clean,

proběhne restart PC kdy dojde ke smazání nepořádku.

Po té mi sem zkopíruj Report.


Stáhni a ulož na plochu ComboFix,

spusť aplikaci jako Administrátor a povol instalaci Konzole pro zotavení - Recovery Console.

Poté se zobrazí okno s licenčními podmínkami které potvrdíš kliknutím na ANO,

pak ještě jednou klik na ANO a už to jede.

Celá akce trvá okolo 10 minut ale může i déle, během skenu se nepokoušej spouštět nic jiného.

Při skenovaní může být PC i restartováno nelekat se.

Upozornění: po dobu skenu vypni rezidentní štít Antiviru a AntiSpy programu,

protože Combofix se pokouší napadené soubory smazat a tyto programy mu můžou bránit.

Po dokončení skenu nebo následném restartu aplikace vytvoří log, uložený na C:/Combofix.txt

(při opakovaném použití jsou logy číslovány Combofix2.txt atd.), jeho obsah zkopíruj sem.


V případě nejasností je ZDE obrázkový návod.

Re: Preventivní kontrola

Napsal: 04 pro 2015 16:09
od Spectro90
# AdwCleaner v5.023 - Logfile created 04/12/2015 at 15:49:35
# Updated 30/11/2015 by Xplode
# Database : 2015-12-03.1 [Server]
# Operating system : Windows 7 Professional Service Pack 1 (x64)
# Username : Triplex - TRIPLEX-PC
# Running from : C:\Users\Triplex\Desktop\adwcleaner_5.023.exe
# Option : Cleaning
# Support : http://toolslib.net/forum

***** [ Services ] *****


***** [ Folders ] *****


***** [ Files ] *****


***** [ DLLs ] *****


***** [ Shortcuts ] *****


***** [ Scheduled tasks ] *****


***** [ Registry ] *****

[-] Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}]
[-] Key Deleted : HKCU\Software\Conduit
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\{D01A33E2-0A34-4659-82AA-8A90C51C0D21}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{D01A33E2-0A34-4659-82AA-8A90C51C0D21}

***** [ Web browsers ] *****


*************************

:: "Tracing" keys removed
:: Winsock settings cleared

########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [1085 bytes] ##########










ComboFix 15-12-03.01 - Triplex 04.12.2015 15:56:51.1.4 - x64
Microsoft Windows 7 Professional 6.1.7601.1.1250.420.1029.18.3959.2425 [GMT 1:00]
Spuštěný z: c:\users\Triplex\Desktop\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}
SP: avast! Antivirus *Disabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Vytvořen nový Bod Obnovení
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Triplex\AppData\Local\pcc.exe
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2015-11-04 do 2015-12-04 )))))))))))))))))))))))))))))))
.
.
2015-12-04 15:03 . 2015-12-04 15:03 -------- d-----w- c:\users\Default\AppData\Local\temp
2015-12-04 15:02 . 2015-12-04 15:02 75888 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{DC28CADE-2F3D-466F-A312-3CE90A2D5F53}\offreg.5108.dll
2015-12-04 14:46 . 2015-12-04 14:49 -------- d-----w- C:\AdwCleaner
2015-12-03 18:21 . 2015-12-03 18:21 -------- d-----w- C:\rsit
2015-12-03 17:03 . 2015-12-03 17:03 -------- d-----w- c:\programdata\WarThunder
2015-12-03 16:56 . 2015-12-03 17:09 -------- d-----w- c:\program files\AMD
2015-12-03 16:08 . 2015-12-03 16:08 -------- d-----w- c:\program files (x86)\Common Files\AV
2015-12-03 16:08 . 2015-12-03 16:08 -------- d-----w- c:\program files\Common Files\AV
2015-12-03 15:27 . 2015-12-03 15:27 -------- d-----w- c:\programdata\ATI
2015-12-03 15:26 . 2015-12-03 15:26 -------- d-----w- c:\users\Triplex\AppData\Roaming\library_dir
2015-12-03 15:24 . 2015-12-03 16:07 -------- d-----w- c:\users\Triplex\AppData\Roaming\Raptr
2015-12-03 15:24 . 2015-12-03 16:07 -------- d-----w- c:\program files (x86)\Raptr
2015-12-03 15:23 . 2015-12-03 15:23 -------- d-----w- c:\program files (x86)\AMD
2015-12-03 15:17 . 2015-12-03 15:18 -------- d-----w- c:\programdata\Package Cache
2015-12-03 05:47 . 2015-12-03 17:08 -------- d-----w- c:\windows\SysWow64\.launcher_log
2015-12-02 16:59 . 2015-10-29 09:28 11138400 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{DC28CADE-2F3D-466F-A312-3CE90A2D5F53}\mpengine.dll
2015-12-02 16:59 . 2015-11-03 17:55 3211264 ----a-w- c:\windows\system32\win32k.sys
2015-11-27 15:25 . 2015-11-27 15:25 -------- d-s---w- c:\windows\SysWow64\Microsoft
2015-11-11 04:55 . 2015-10-20 01:12 5570496 ----a-w- c:\windows\system32\ntoskrnl.exe
2015-11-10 12:58 . 2015-11-12 08:32 -------- d-----w- c:\users\Triplex\AppData\Roaming\Polda 6
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2015-11-11 16:48 . 2014-11-29 06:00 145617392 ----a-w- c:\windows\system32\MRT.exe
2015-11-07 10:30 . 2014-11-28 20:52 449992 ----a-w- c:\windows\system32\drivers\aswsp.sys
2015-11-07 10:30 . 2014-11-28 20:52 1059656 ----a-w- c:\windows\system32\drivers\aswsnx.sys
2015-10-29 17:50 . 2015-11-11 04:55 350208 ----a-w- c:\windows\apppatch\AppPatch64\AcLayers.dll
2015-10-29 17:50 . 2015-11-11 04:55 309248 ----a-w- c:\windows\apppatch\AppPatch64\AcGenral.dll
2015-10-29 17:50 . 2015-11-11 04:55 135168 ----a-w- c:\windows\apppatch\AppPatch64\AcXtrnal.dll
2015-10-29 17:50 . 2015-11-11 04:55 103424 ----a-w- c:\windows\apppatch\AppPatch64\acspecfc.dll
2015-10-29 17:49 . 2015-11-11 04:55 562176 ----a-w- c:\windows\apppatch\AcLayers.dll
2015-10-29 17:49 . 2015-11-11 04:55 470528 ----a-w- c:\windows\apppatch\AcSpecfc.dll
2015-10-29 17:49 . 2015-11-11 04:55 2178560 ----a-w- c:\windows\apppatch\AcGenral.dll
2015-10-29 17:49 . 2015-11-11 04:55 211968 ----a-w- c:\windows\apppatch\AcXtrnal.dll
2015-10-29 17:39 . 2015-11-11 04:55 2560 ----a-w- c:\windows\apppatch\AcRes.dll
2015-10-22 17:04 . 2014-11-28 21:04 780488 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2015-10-22 17:04 . 2014-11-28 21:04 142536 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2015-10-20 01:05 . 2015-11-11 04:55 344064 ----a-w- c:\windows\system32\schannel.dll
2015-10-20 00:45 . 2015-11-11 04:55 251392 ----a-w- c:\windows\SysWow64\schannel.dll
2015-10-20 00:45 . 2015-11-11 04:55 44032 ----a-w- c:\windows\apppatch\acwow64.dll
2015-10-13 00:29 . 2015-10-13 00:29 875720 ----a-w- c:\windows\SysWow64\msvcr120_clr0400.dll
2015-10-13 00:22 . 2015-10-13 00:22 869568 ----a-w- c:\windows\system32\msvcr120_clr0400.dll
2015-10-06 18:54 . 2015-10-06 18:54 378880 ----a-w- c:\windows\system32\aswBoot.exe
2015-10-06 18:54 . 2014-11-28 20:52 153744 ----a-w- c:\windows\system32\drivers\aswStm.sys
2015-10-06 18:54 . 2014-11-28 20:52 274808 ----a-w- c:\windows\system32\drivers\aswVmm.sys
2015-10-06 18:54 . 2014-11-28 20:52 65224 ----a-w- c:\windows\system32\drivers\aswRvrt.sys
2015-10-06 18:54 . 2014-11-28 20:52 90968 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2015-10-06 18:54 . 2014-11-28 20:52 28656 ----a-w- c:\windows\system32\drivers\aswHwid.sys
2015-10-06 18:54 . 2014-11-28 20:52 93528 ----a-w- c:\windows\system32\drivers\aswRdr2.sys
2015-10-06 18:54 . 2015-10-06 18:54 43112 ----a-w- c:\windows\avastSS.scr
2015-10-01 18:06 . 2015-10-14 19:54 692672 ----a-w- c:\windows\system32\winload.efi
2015-10-01 18:04 . 2015-10-14 19:54 616360 ----a-w- c:\windows\system32\winresume.efi
2015-10-01 18:00 . 2015-10-14 19:54 63488 ----a-w- c:\windows\system32\setbcdlocale.dll
2015-10-01 18:00 . 2015-10-14 19:54 59392 ----a-w- c:\windows\system32\appidapi.dll
2015-10-01 18:00 . 2015-10-14 19:54 32768 ----a-w- c:\windows\system32\appidsvc.dll
2015-10-01 18:00 . 2015-10-14 19:54 17920 ----a-w- c:\windows\system32\appidcertstorecheck.exe
2015-10-01 18:00 . 2015-10-14 19:54 147456 ----a-w- c:\windows\system32\appidpolicyconverter.exe
2015-10-01 17:50 . 2015-10-14 19:54 50688 ----a-w- c:\windows\SysWow64\appidapi.dll
2015-10-01 17:00 . 2015-10-14 19:54 61440 ----a-w- c:\windows\system32\drivers\appid.sys
2015-09-23 05:51 . 2015-09-23 05:51 30424 ----a-w- c:\windows\system32\drivers\ggsomc.sys
2015-09-23 05:51 . 2015-09-23 05:51 1721576 ----a-w- c:\windows\system32\WdfCoInstaller01009.dll
2015-09-23 05:51 . 2015-09-23 05:51 16088 ----a-w- c:\windows\system32\drivers\ggflt.sys
2015-09-18 19:22 . 2015-10-14 19:54 25432 ----a-w- c:\windows\system32\CompatTelRunner.exe
2015-09-18 19:19 . 2015-10-14 19:54 700416 ----a-w- c:\windows\system32\invagent.dll
2015-09-18 19:19 . 2015-10-14 19:54 766464 ----a-w- c:\windows\system32\generaltel.dll
2015-09-18 19:19 . 2015-10-14 19:54 503808 ----a-w- c:\windows\system32\devinv.dll
2015-09-18 19:19 . 2015-10-14 19:54 73216 ----a-w- c:\windows\system32\acmigration.dll
2015-09-18 19:19 . 2015-10-14 19:54 1291264 ----a-w- c:\windows\system32\appraiser.dll
2015-09-18 19:09 . 2015-10-14 19:54 1163776 ----a-w- c:\windows\system32\aeinv.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CCleaner Monitoring"="c:\program files\CCleaner\CCleaner64.exe" [2014-11-21 7063832]
"Sony PC Companion"="c:\program files (x86)\Sony\Sony PC Companion\PCCompanion.exe" [2015-09-23 457088]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"AvastUI.exe"="c:\program files\AVAST Software\Avast\AvastUI.exe" [2015-11-07 6133520]
"StartCCC"="c:\program files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe" [2015-08-04 767176]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
"SoftwareSASGeneration"= 1 (0x1)
.
R2 aswStm;aswStm;c:\windows\system32\drivers\aswStm.sys;c:\windows\SYSNATIVE\drivers\aswStm.sys [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R2 VBoxAswDrv;VBoxAsw Support Driver;c:\program files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys;c:\program files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [x]
R3 AvastVBoxSvc;AvastVBox COM Service;c:\program files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe;c:\program files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [x]
R3 ggflt;SOMC USB Flash Driver Filter;c:\windows\system32\DRIVERS\ggflt.sys;c:\windows\SYSNATIVE\DRIVERS\ggflt.sys [x]
R3 ggsomc;SOMC USB Flash Driver;c:\windows\system32\DRIVERS\ggsomc.sys;c:\windows\SYSNATIVE\DRIVERS\ggsomc.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 ose64;Office 64 Source Engine;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [x]
R3 Sony PC Companion;Sony PC Companion;c:\program files (x86)\Sony\Sony PC Companion\PCCService.exe;c:\program files (x86)\Sony\Sony PC Companion\PCCService.exe [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
S0 aswRvrt;avast! Revert; [x]
S0 aswVmm;avast! VM Monitor; [x]
S1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys;c:\windows\SYSNATIVE\drivers\aswSnx.sys [x]
S1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys;c:\windows\SYSNATIVE\drivers\aswSP.sys [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 aswHwid;avast! HardwareID;c:\windows\system32\drivers\aswHwid.sys;c:\windows\SYSNATIVE\drivers\aswHwid.sys [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys;c:\windows\SYSNATIVE\drivers\aswMonFlt.sys [x]
S2 DiagTrack;Diagnostics Tracking Service;c:\windows\System32\svchost.exe;c:\windows\SYSNATIVE\svchost.exe [x]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x]
S3 HECIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys;c:\windows\SYSNATIVE\DRIVERS\HECIx64.sys [x]
S3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x64.sys;c:\windows\SYSNATIVE\DRIVERS\L1C62x64.sys [x]
S3 rtl8192se;Realtek Wireless LAN 802.11n PCI-E NIC NT Driver;c:\windows\system32\DRIVERS\rtl8192se.sys;c:\windows\SYSNATIVE\DRIVERS\rtl8192se.sys [x]
.
.
Obsah adresáře 'Naplánované úlohy'
.
2015-09-01 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-11-28 17:04]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2015-10-06 18:54 780616 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BCSSync"="d:\office\Office14\BCSSync.exe" [2010-03-13 112512]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.google.com
uDefault_Search_URL = hxxp://www.google.com
mStart Page = hxxp://www.google.com
mLocal Page = c:\windows\SysWOW64\blank.htm
mSearch Page = hxxp://www.google.com
mSearch Bar = https://www.seznam.cz/?clid=22668
mDefault_Page_URL = hxxp://www.google.com
mDefault_Search_URL = hxxp://www.google.com
IE: E&xportovat do aplikace Microsoft Excel - d:\office\Office14\EXCEL.EXE/3000
IE: Od&eslat do aplikace OneNote - d:\office\Office14\ONBttnIE.dll/105
TCP: DhcpNameServer = 217.170.96.24 217.170.96.2
FF - ProfilePath - c:\users\Triplex\AppData\Roaming\Mozilla\Firefox\Profiles\6irik9jv.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.seznam.cz/?sourceid=quicksearch_22668&q={searchTerms}&
FF - prefs.js: browser.startup.homepage - google.cz
FF - prefs.js: keyword.URL - hxxp://search.seznam.cz/?sourceid=quicksearch_22668&q={searchTerms}&
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Wow6432Node-HKU-Default-RunOnce-SPReview - c:\windows\System32\SPReview\SPReview.exe
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2015-12-04 16:06:03
ComboFix-quarantined-files.txt 2015-12-04 15:06
.
Před spuštěním: 9 282 355 200
Po spuštění: 9 453 084 672
.
- - End Of File - - 38B6AFBB98BAEF7E932FC5BDF4F8A163
A36C5E4F47E84449FF07ED3517B43A31

Re: Preventivní kontrola

Napsal: 05 pro 2015 18:05
od Roli
Přes Start >> Spustit zkopíruj do okna:

ComboFix /Uninstall

a stiskni Enter

To odinstaluje ComboFix a smaže s ním související soubory a složky.


Použij T-Cleaner, který smaže případné zbytky po aplikacích které jsme použili.

Jen před jeho stažením a při použití stopni antivir, protože ho muže detekovat jako vir ale není tomu tak.


Pak dej vědět jak se PC chová.
Všechny časy jsou v UTC+01:00
Stránka 1 z 1

Založeno na phpBB® Forum Software © phpBB Limited

Český překlad – phpBB.cz