VIRY.CZ

Kód: Vybrat vše

Start

(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\ASCSvc.exe
(IOBit) C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\ASCAvSvc.exe
(Tencent) C:\Program Files (x86)\Tencent\QQPCMgr\10.10.16444.223\QQPCRTP.exe
(腾讯公司) C:\Users\Roman\AppData\Roaming\Tencent\AndroidServer\1.0.0.485\tadb.exe
HKLM-x32\...\Run: [setup] => C:\Users\Roman\AppData\Local\Temp\setup.exe /start <===== ATTENTION
HKU\S-1-5-21-2322173282-1921665351-3622067993-1002\...\Run: [lsas] => C:\Program Files (x86)\t_201601191922\201601191922\lsas.exe [557184 2016-01-19] ()
HKU\S-1-5-21-2322173282-1921665351-3622067993-1002\...\Run: [Advanced SystemCare Ultimate] => "C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\ASCTray.exe" /AutoStart
ShellIconOverlayIdentifiers: [.QMDeskTopGCIcon] -> {B7667919-3765-4815-A66D-98A09BE662D6} => C:\Program Files (x86)\Tencent\QQPCMgr\10.10.16444.223\QMGCShellExt64.dll [2016-01-19] (Tencent)
BHO: 电脑管家网页防火墙 -> {7C260B4B-F7A0-40B5-B403-BEFCDC6A4C3B} -> C:\Program Files (x86)\Tencent\QQPCMgr\10.10.16444.223\TSWebMon64.dat [2016-01-19] (Tencent)
R2 QQPCRTP; C:\Program Files (x86)\Tencent\QQPCMgr\10.10.16444.223\QQPCRTP.exe [301728 2015-09-15] (Tencent)
S3 TAOFrame; C:\Program Files (x86)\Tencent\QQPCMgr\10.10.16444.223\TAOFrame.exe [293856 2016-01-19] (Tencent)
R3 TAOAccelerator; C:\WINDOWS\system32\Drivers\TAOAccelerator64.sys [99640 2016-01-19] (Tencent)
R1 TAOKernelDriver; C:\Windows\System32\Drivers\TAOKernel64.sys [174392 2016-01-19] (Tencent Technology(Shenzhen) Company Limited)
R3 TFsFlt; C:\Windows\System32\Drivers\TFsFltX64.sys [87864 2016-01-19] (电脑管家)
R3 TS888x64; C:\Program Files (x86)\Tencent\QQPCMgr\10.10.16444.223\TS888x64.sys [28984 2016-01-19] (Tencent)
R1 TSCPM; C:\Program Files (x86)\Tencent\QQPCMgr\10.10.16444.223\tscpm64.sys [42296 2016-01-19] (电脑管家)
S1 TSDefenseBt; C:\Program Files (x86)\Tencent\QQPCMgr\10.10.16444.223\TSDefenseBT64.sys [28472 2016-01-19] (Tencent)
R1 TSSysKit; C:\Program Files (x86)\Tencent\QQPCMgr\10.10.16444.223\TSSysKit64.sys [87352 2016-01-19] (电脑管家)
2016-01-19 19:38 - 2016-01-19 19:38 - 00000000 ____D C:\ProgramData\TXQMPC
2016-01-19 19:24 - 2016-01-14 10:47 - 00128280 _____ (电脑管家) C:\WINDOWS\SysWOW64\Drivers\TsFltMgr.sys
2016-01-19 19:23 - 2016-01-19 20:24 - 00000000 ____D C:\ProgramData\Tencent
2016-01-19 19:23 - 2016-01-19 19:27 - 00000000 ____D C:\Users\Roman\AppData\Roaming\Tencent
2016-01-19 19:23 - 2016-01-19 19:23 - 00174392 _____ (Tencent Technology(Shenzhen) Company Limited) C:\WINDOWS\system32\Drivers\TAOKernel64.sys
2016-01-19 19:23 - 2016-01-19 19:23 - 00099640 _____ (Tencent) C:\WINDOWS\system32\Drivers\TAOAccelerator64.sys
2016-01-19 19:23 - 2016-01-19 19:23 - 00087864 _____ (电脑管家) C:\WINDOWS\system32\Drivers\TFsFltX64.sys
2016-01-19 19:23 - 2016-01-19 19:23 - 00000000 ____D C:\Users\Roman\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\腾讯软件
2016-01-19 19:23 - 2016-01-19 19:23 - 00000000 ____D C:\Program Files\Common Files\Tencent
2016-01-19 19:23 - 2016-01-19 19:23 - 00000000 ____D C:\Program Files (x86)\Tencent
2016-01-19 19:22 - 2016-01-19 19:22 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ĂŔÍĽäŻŔŔ
2013-05-01 12:15 - 2012-09-07 12:40 - 0000256 _____ () C:\ProgramData\SetStretch.cmd
2013-05-01 12:15 - 2009-07-22 11:04 - 0024576 _____ () C:\ProgramData\SetStretch.exe
2013-05-01 12:15 - 2012-09-07 12:37 - 0000103 _____ () C:\ProgramData\SetStretch.VBS




EmptyTemp:
Reboot:
End

Kód: Vybrat vše

Start

(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\ASCSvc.exe
(IOBit) C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\ASCAvSvc.exe
R2 AdvancedSystemCareService6; C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\ascsvc.exe [1051088 2012-12-13] (IObit)
S1 TSDefenseBt; \??\C:\Program Files (x86)\Tencent\QQPCMgr\10.10.16444.223\TSDefenseBT64.sys [X]
2016-01-20 15:33 - 2016-01-20 18:10 - 00000000 ____D C:\Users\Roman\AppData\Roaming\Tencent
2016-01-19 19:23 - 2016-01-19 19:23 - 00000000 ____D C:\Program Files (x86)\Tencent
2016-01-07 14:39 - 2016-01-16 12:09 - 02342912 _____ C:\WINDOWS\SysWOW64\㩣灜潲牧浡慤慴歜獡数獲祫氠扡慜灶㐱〮〮摜瑡屡潭畤敬彳湩敶瑮牯⹹慤



End