ComboFix 18-08-08.01 - Elyene 08.08.2018 18:50:41.1.4 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.16384.12914 [GMT 2:00]
Spuštěný z: c:\users\Elyene\Desktop\ComboFix.exe
AV: Avast Antivirus *Disabled/Updated* {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}
AV: Malwarebytes *Enabled/Updated* {23007AD3-69FE-687C-2629-D584AFFAF72B}
SP: Avast Antivirus *Disabled/Updated* {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}
SP: Malwarebytes *Enabled/Updated* {98619B37-4FC4-67F2-1C99-EEF6D47DBD96}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Elyene\AppData\Roaming\Pretentious-Game---Steam
c:\users\Elyene\AppData\Roaming\Pretentious-Game---Steam\#airversion\24.0.0.180
c:\users\Elyene\AppData\Roaming\Pretentious-Game---Steam\Local Store\#SharedObjects\Pretentious_Game%20-%20Steam.swf\pretentiousgame007.sol
c:\windows\security\Database\tmp.edb
c:\windows\security\logs\scecomp.log
c:\windows\SysWow64\DEBUG.log
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2018-07-08 do 2018-08-08 )))))))))))))))))))))))))))))))
.
.
2018-08-08 17:05 . 2018-08-08 17:05 191208 ----a-w- c:\windows\system32\drivers\MbamChameleon.sys
2018-08-08 17:05 . 2018-08-08 17:05 253664 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2018-08-08 17:00 . 2018-08-08 17:00 -------- d-----w- c:\users\Default\AppData\Local\temp
2018-08-08 16:06 . 2018-08-08 16:06 203680 ----a-w- c:\windows\system32\drivers\zam64.sys
2018-08-08 16:06 . 2018-08-08 16:06 203680 ----a-w- c:\windows\system32\drivers\zamguard64.sys
2018-08-08 16:06 . 2018-08-08 16:06 -------- d-----w- c:\program files (x86)\Zemana AntiMalware
2018-08-08 16:04 . 2018-08-08 16:04 -------- d-----w- c:\users\Elyene\AppData\Local\Zemana
2018-08-08 16:03 . 2018-08-08 16:12 -------- d-----w- c:\users\Elyene\AppData\Local\AVAST Software
2018-08-08 15:55 . 2018-08-08 17:06 -------- d-----w- c:\users\Elyene\AppData\Local\Temp
2018-08-08 15:55 . 2014-02-13 21:59 24064 ----a-w- c:\windows\zoek-delete.exe
2018-08-08 15:23 . 2018-08-08 15:50 -------- d-----w- C:\zoek_backup
2018-08-07 18:22 . 2018-08-08 14:30 28272 ----a-w- c:\windows\system32\drivers\TrueSight.sys
2018-08-07 18:22 . 2018-08-07 19:17 -------- d-----w- c:\programdata\RogueKiller
2018-08-06 19:00 . 2018-08-06 19:00 -------- d-----w- c:\programdata\Sophos
2018-08-06 18:59 . 2018-08-06 18:59 -------- d-----w- c:\program files\RogueKiller
2018-08-06 16:38 . 2018-08-06 18:32 -------- d-----w- C:\AdwCleaner
2018-08-04 13:07 . 2018-08-04 13:07 -------- d-----w- c:\users\Elyene\AppData\Local\Hisuite
2018-08-04 11:25 . 2018-08-04 11:25 -------- d-----w- c:\users\Elyene\AppData\Local\IdleMaster
2018-08-03 11:36 . 2018-08-08 11:01 152688 ----a-w- c:\windows\system32\drivers\mbae64.sys
2018-08-03 11:36 . 2018-08-03 11:36 -------- d-----w- c:\program files\Malwarebytes
2018-08-02 15:46 . 2018-08-02 15:46 -------- d-----w- c:\program files (x86)\TomTom HOME 2
2018-08-02 15:45 . 2018-08-02 15:45 -------- d-----w- c:\users\Elyene\AppData\Local\Downloaded Installations
2018-07-28 12:32 . 2018-07-28 12:32 -------- d-----w- c:\programdata\rionix
2018-07-28 10:42 . 2018-07-28 10:43 -------- d-----w- c:\users\Elyene\AppData\Local\Learn_to_Drive_on_Moto_Wars
2018-07-25 14:49 . 2018-03-23 23:05 138120 ----a-w- c:\windows\SysWow64\nvStreaming.exe
2018-07-25 14:49 . 2018-03-23 23:50 1951 ----a-w- c:\windows\NvContainerRecovery.bat
2018-07-25 14:14 . 2018-06-21 03:33 2048 ----a-w- c:\windows\system32\tzres.dll
2018-07-25 14:14 . 2018-07-13 19:19 287936 ----a-w- c:\windows\system32\drivers\FWPKCLNT.SYS
2018-07-25 14:14 . 2018-06-21 03:09 2048 ----a-w- c:\windows\SysWow64\tzres.dll
2018-07-25 14:14 . 2018-07-13 19:19 377024 ----a-w- c:\windows\system32\drivers\netio.sys
2018-07-25 14:14 . 2018-07-13 19:19 1894080 ----a-w- c:\windows\system32\drivers\tcpip.sys
2018-07-25 14:07 . 2018-06-13 16:23 140992 ----a-w- c:\windows\system32\CompatTelRunner.exe
2018-07-25 14:07 . 2018-06-13 16:18 680960 ----a-w- c:\windows\system32\aeinv.dll
2018-07-25 14:07 . 2018-06-08 13:05 783872 ----a-w- c:\windows\system32\generaltel.dll
2018-07-25 14:07 . 2018-06-08 13:05 612352 ----a-w- c:\windows\system32\devinv.dll
2018-07-25 14:07 . 2018-06-08 13:05 470016 ----a-w- c:\windows\system32\centel.dll
2018-07-25 14:07 . 2018-06-08 13:05 443392 ----a-w- c:\windows\system32\invagent.dll
2018-07-25 14:07 . 2018-06-08 13:05 2860032 ----a-w- c:\windows\system32\aitstatic.exe
2018-07-25 14:07 . 2018-06-08 13:05 246272 ----a-w- c:\windows\system32\aepic.dll
2018-07-25 14:07 . 2018-06-08 13:05 1602048 ----a-w- c:\windows\system32\appraiser.dll
2018-07-25 14:07 . 2018-06-08 13:05 301056 ----a-w- c:\windows\system32\acmigration.dll
2018-07-23 19:54 . 2018-07-23 19:54 -------- d-----w- c:\users\Elyene\AppData\Local\tyranoscript
2018-07-22 20:08 . 2018-07-22 20:08 -------- d-----w- c:\users\Elyene\AppData\Local\The_Binding_Of_You_v56
2018-07-20 11:48 . 2018-07-20 11:48 -------- d-----w- c:\users\Elyene\AppData\Local\Malavision_Nepyru
2018-07-17 08:38 . 2018-07-17 08:38 -------- d-----w- c:\users\Elyene\AppData\Local\GameAnalytics
2018-07-15 16:37 . 2018-07-15 16:37 -------- d-----w- c:\users\Elyene\AppData\Roaming\TA2
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2018-07-25 14:26 . 2012-06-10 15:34 134675576 -c--a-w- c:\windows\system32\MRT.exe
2018-07-23 15:15 . 2012-06-07 17:16 467064 ----a-w- c:\windows\system32\drivers\aswSP.sys
2018-07-10 19:48 . 2012-06-07 16:13 842240 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2018-07-10 19:48 . 2012-06-07 16:13 175104 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2018-06-28 19:25 . 2018-07-25 14:12 2560 ----a-w- c:\windows\apppatch\AcRes.dll
2018-06-21 07:14 . 2014-05-25 18:57 211160 ----a-w- c:\windows\system32\drivers\aswStm.sys
2018-06-21 07:14 . 2013-04-13 06:43 381584 ----a-w- c:\windows\system32\drivers\aswVmm.sys
2018-06-21 07:14 . 2018-06-21 07:14 378072 ----a-w- c:\windows\system32\aswBoot.exe
2018-06-21 07:14 . 2017-11-11 08:21 197160 ----a-w- c:\windows\system32\drivers\aswArPot.sys
2018-06-21 07:14 . 2014-05-25 18:57 46976 ----a-w- c:\windows\system32\drivers\aswHwid.sys
2018-06-21 07:14 . 2013-04-13 06:43 85968 ----a-w- c:\windows\system32\drivers\aswRvrt.sys
2018-06-21 07:14 . 2012-06-07 17:16 111872 ----a-w- c:\windows\system32\drivers\aswRdr2.sys
2018-06-21 07:14 . 2012-06-07 17:16 159640 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2018-06-21 07:14 . 2012-06-07 17:16 1027728 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2018-06-21 07:14 . 2017-12-21 20:01 239680 ----a-w- c:\windows\system32\drivers\aswHdsKe.sys
2018-06-21 07:14 . 2017-03-18 12:58 59592 ----a-w- c:\windows\system32\drivers\aswbuniva.sys
2018-06-21 07:14 . 2017-03-18 12:58 346664 ----a-w- c:\windows\system32\drivers\aswbloga.sys
2018-06-21 07:14 . 2017-03-18 12:58 229392 ----a-w- c:\windows\system32\drivers\aswbidsdrivera.sys
2018-06-21 07:14 . 2017-03-18 12:58 201328 ----a-w- c:\windows\system32\drivers\aswbidsha.sys
2018-06-08 16:20 . 2018-07-25 14:12 190464 ----a-w- c:\windows\system32\rpchttp.dll
2018-06-08 15:55 . 2018-07-25 14:12 141312 ----a-w- c:\windows\SysWow64\rpchttp.dll
2018-06-08 15:53 . 2018-07-25 14:12 44032 ----a-w- c:\windows\apppatch\acwow64.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"amd_dc_opt"="c:\program files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe" [2008-07-22 77824]
"Razer Synapse"="c:\program files (x86)\Razer\Synapse\RzSynapse.exe" [2018-06-06 598200]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2018-03-28 588704]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"EnableLinkedConnections"= 1 (0x1)
"SoftwareSASGeneration"= 1 (0x1)
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoResolveTrack"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp wsauth
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService]
@="Service"
.
R2 avast;Služba %1!s! Update (avast);c:\program files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe;c:\program files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R3 asmthub3;ASMedia USB3 Hub Service;c:\windows\system32\drivers\asmthub3.sys;c:\windows\SYSNATIVE\drivers\asmthub3.sys [x]
R3 asmtxhci;ASMEDIA XHCI Service;c:\windows\system32\drivers\asmtxhci.sys;c:\windows\SYSNATIVE\drivers\asmtxhci.sys [x]
R3 aswbIDSAgent;aswbIDSAgent;c:\program files\AVAST Software\Avast\x64\aswidsagenta.exe;c:\program files\AVAST Software\Avast\x64\aswidsagenta.exe [x]
R3 aswHwid;aswHwid;c:\windows\system32\drivers\aswHwid.sys;c:\windows\SYSNATIVE\drivers\aswHwid.sys [x]
R3 aswTap;avast! SecureLine TAP Adapter v3;c:\windows\system32\DRIVERS\aswTap.sys;c:\windows\SYSNATIVE\DRIVERS\aswTap.sys [x]
R3 avastm;Služba %1!s! Update (avastm);c:\program files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe;c:\program files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [x]
R3 Desura Install Service;Desura Install Service;c:\program files (x86)\Common Files\Desura\desura_service.exe;c:\program files (x86)\Common Files\Desura\desura_service.exe [x]
R3 EtronHub3;Etron USB 3.0 Extensible Hub Driver;c:\windows\System32\Drivers\EtronHub3.sys;c:\windows\SYSNATIVE\Drivers\EtronHub3.sys [x]
R3 EtronXHCI;Etron USB 3.0 Extensible Host Controller Driver;c:\windows\System32\Drivers\EtronXHCI.sys;c:\windows\SYSNATIVE\Drivers\EtronXHCI.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 IFCoEMP;IFCoEMP;c:\windows\system32\drivers\ifM60x64.sys;c:\windows\SYSNATIVE\drivers\ifM60x64.sys [x]
R3 IFCoEVB;IFCoEVB;c:\windows\system32\drivers\ifP60X64.sys;c:\windows\SYSNATIVE\drivers\ifP60X64.sys [x]
R3 Impcd;Impcd;c:\windows\system32\drivers\Impcd.sys;c:\windows\SYSNATIVE\drivers\Impcd.sys [x]
R3 ioatdma1;ioatdma1;c:\windows\System32\Drivers\qd162x64.sys;c:\windows\SYSNATIVE\Drivers\qd162x64.sys [x]
R3 ioatdma2;Intel(R) QuickData Technology device ver.2;c:\windows\System32\Drivers\qd262x64.sys;c:\windows\SYSNATIVE\Drivers\qd262x64.sys [x]
R3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\drivers\nusb3hub.sys;c:\windows\SYSNATIVE\drivers\nusb3hub.sys [x]
R3 NvStUSB;NVIDIA Stereoscopic 3D USB driver;c:\windows\system32\DRIVERS\nvstusb.sys;c:\windows\SYSNATIVE\DRIVERS\nvstusb.sys [x]
R3 Origin Client Service;Origin Client Service;c:\program files (x86)\Origin\OriginClientService.exe;c:\program files (x86)\Origin\OriginClientService.exe [x]
R3 ose64;Office 64 Source Engine;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 RZMAELSTROMVADService;Razer Surround Audio Enhancer Service;c:\windows\system32\drivers\RzMaelstromVAD.sys;c:\windows\SYSNATIVE\drivers\RzMaelstromVAD.sys [x]
R3 RZSURROUNDVADService;Razer Surround Audio Service;c:\windows\system32\drivers\RzSurroundVAD.sys;c:\windows\SYSNATIVE\drivers\RzSurroundVAD.sys [x]
R3 Samsung UPD Service;Samsung UPD Service;c:\windows\System32\SUPDSvc.exe;c:\windows\SYSNATIVE\SUPDSvc.exe [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R3 X6va065;X6va065;c:\windows\SysWOW64\Drivers\X6va065;c:\windows\SysWOW64\Drivers\X6va065 [x]
R4 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad64v.sys;c:\windows\SYSNATIVE\drivers\nvvad64v.sys [x]
R4 nvvhci;NVVHCI Enumerator Service;c:\windows\system32\DRIVERS\nvvhci.sys;c:\windows\SYSNATIVE\DRIVERS\nvvhci.sys [x]
S0 aswbidsh;aswbidsh;c:\windows\system32\drivers\aswbidsha.sys;c:\windows\SYSNATIVE\drivers\aswbidsha.sys [x]
S0 aswblog;aswblog;c:\windows\system32\drivers\aswbloga.sys;c:\windows\SYSNATIVE\drivers\aswbloga.sys [x]
S0 aswbuniv;aswbuniv;c:\windows\system32\drivers\aswbuniva.sys;c:\windows\SYSNATIVE\drivers\aswbuniva.sys [x]
S0 aswRvrt;aswRvrt;c:\windows\system32\drivers\aswRvrt.sys;c:\windows\SYSNATIVE\drivers\aswRvrt.sys [x]
S0 aswVmm;aswVmm;c:\windows\system32\drivers\aswVmm.sys;c:\windows\SYSNATIVE\drivers\aswVmm.sys [x]
S0 ioatdma;Intel(R) QuickData Technology device;c:\windows\System32\Drivers\ioatdma.sys;c:\windows\SYSNATIVE\Drivers\ioatdma.sys [x]
S0 iusb3hcs;Ovladač přepínání hostitelského řadiče Intel(R) USB 3.0;c:\windows\system32\drivers\iusb3hcs.sys;c:\windows\SYSNATIVE\drivers\iusb3hcs.sys [x]
S1 aswArPot;aswArPot;c:\windows\system32\drivers\aswArPot.sys;c:\windows\SYSNATIVE\drivers\aswArPot.sys [x]
S1 aswbidsdriver;aswbidsdriver;c:\windows\system32\drivers\aswbidsdrivera.sys;c:\windows\SYSNATIVE\drivers\aswbidsdrivera.sys [x]
S1 aswHdsKe;aswHdsKe;c:\windows\system32\drivers\aswHdsKe.sys;c:\windows\SYSNATIVE\drivers\aswHdsKe.sys [x]
S1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys;c:\windows\SYSNATIVE\drivers\aswSnx.sys [x]
S1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys;c:\windows\SYSNATIVE\drivers\aswSP.sys [x]
S1 ZAM;ZAM Helper Driver;c:\windows\System32\drivers\zam64.sys;c:\windows\SYSNATIVE\drivers\zam64.sys [x]
S1 ZAM_Guard;ZAM Guard Driver;c:\windows\System32\drivers\zamguard64.sys;c:\windows\SYSNATIVE\drivers\zamguard64.sys [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys;c:\windows\SYSNATIVE\drivers\aswMonFlt.sys [x]
S2 aswStm;aswStm;c:\windows\system32\drivers\aswStm.sys;c:\windows\SYSNATIVE\drivers\aswStm.sys [x]
S2 client_service;VMware Horizon Client;c:\program files (x86)\VMware\VMware Horizon View Client\ClientService\horizon_client_service.exe;c:\program files (x86)\VMware\VMware Horizon View Client\ClientService\horizon_client_service.exe [x]
S2 DiagTrack;Diagnostics Tracking Service;c:\windows\System32\svchost.exe;c:\windows\SYSNATIVE\svchost.exe [x]
S2 ftnlsv3hv;VMware Netlink Supervisor Service;c:\program files\Common Files\VMware\DeviceRedirectionCommon\ftnlsv.exe;c:\program files\Common Files\VMware\DeviceRedirectionCommon\ftnlsv.exe [x]
S2 ftscanmgrhv;VMware Scanner Redirection Client;c:\program files (x86)\VMware\ScannerRedirection\ftscanmgrhv.exe;c:\program files (x86)\VMware\ScannerRedirection\ftscanmgrhv.exe [x]
S2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface;c:\program files\Intel\iCLS Client\HeciServer.exe;c:\program files\Intel\iCLS Client\HeciServer.exe [x]
S2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [x]
S2 MBAMChameleon;MBAMChameleon;c:\windows\System32\Drivers\MbamChameleon.sys;c:\windows\SYSNATIVE\Drivers\MbamChameleon.sys [x]
S2 MBAMService;Malwarebytes Service;c:\program files\Malwarebytes\Anti-Malware\mbamservice.exe;c:\program files\Malwarebytes\Anti-Malware\mbamservice.exe [x]
S2 NAUpdate;Nero Update;c:\program files (x86)\Nero\Update\NASvc.exe;c:\program files (x86)\Nero\Update\NASvc.exe [x]
S2 NVDisplay.ContainerLocalSystem;NVIDIA Display Container LS;c:\program files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe;c:\program files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [x]
S2 NvTelemetryContainer;NVIDIA Telemetry Container;c:\program files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe;c:\program files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [x]
S2 Razer Game Scanner Service;Razer Game Scanner;c:\program files (x86)\Razer\Razer Services\GSS\GameScannerService.exe;c:\program files (x86)\Razer\Razer Services\GSS\GameScannerService.exe [x]
S2 rzpmgrk;rzpmgrk;c:\windows\system32\drivers\rzpmgrk.sys;c:\windows\SYSNATIVE\drivers\rzpmgrk.sys [x]
S2 rzpnk;rzpnk;c:\windows\system32\drivers\rzpnk.sys;c:\windows\SYSNATIVE\drivers\rzpnk.sys [x]
S2 SSPORT;SSPORT;c:\windows\system32\Drivers\SSPORT.sys;c:\windows\SYSNATIVE\Drivers\SSPORT.sys [x]
S2 TomTomHOMEService;TomTomHOMEService;c:\program files (x86)\TomTom HOME 2\TomTomHOMEService.exe;c:\program files (x86)\TomTom HOME 2\TomTomHOMEService.exe [x]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S2 VMUSBArbService;VMware USB Arbitration Service;c:\program files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe;c:\program files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe [x]
S2 vmwsprrdpwks;VMware Serial Com Redirection Client service;c:\program files (x86)\Common Files\VMware\SerialPortRedirection\Client\vmwsprrdpwks.exe;c:\program files (x86)\Common Files\VMware\SerialPortRedirection\Client\vmwsprrdpwks.exe [x]
S2 ZAMSvc;ZAM Controller Service;c:\program files (x86)\Zemana AntiMalware\ZAM.exe;c:\program files (x86)\Zemana AntiMalware\ZAM.exe [x]
S3 iusb3hub;Ovladač rozbočovače Intel(R) USB 3.0;c:\windows\system32\DRIVERS\iusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hub.sys [x]
S3 iusb3xhc;Ovladač rozšiřitelného hostitelského řadiče Intel(R) USB 3.0;c:\windows\system32\DRIVERS\iusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3xhc.sys [x]
S3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\System32\Drivers\mbamswissarmy.sys;c:\windows\SYSNATIVE\Drivers\mbamswissarmy.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
S3 rzendpt;rzendpt;c:\windows\system32\DRIVERS\rzendpt.sys;c:\windows\SYSNATIVE\DRIVERS\rzendpt.sys [x]
S3 rzudd;Razer Keyboard Driver;c:\windows\system32\DRIVERS\rzudd.sys;c:\windows\SYSNATIVE\DRIVERS\rzudd.sys [x]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - MBAMCHAMELEON
*NewlyCreated* - MBAMSWISSARMY
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
LocalServiceAndNoImpersonation REG_MULTI_SZ SSDPSRV upnphost SCardSvr QWAVE wcncsvc
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{30C521FB-255B-46C8-9F0D-EE5AE371C9AA}]
2018-07-24 17:05 1888824 ----a-w- c:\program files (x86)\AVAST Software\Browser\Application\67.1.664.100\Installer\chrmstp.exe
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00asw]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2018-06-21 07:14 1822424 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00asw]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2018-06-21 07:14 1822424 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RtkNGUI64.exe" [2011-10-18 7509096]
"BCSSync"="c:\program files\Microsoft Office\Office14\BCSSync.exe" [2012-11-05 108144]
"AvastUI.exe"="c:\program files\AVAST Software\Avast\AvLaunch.exe" [2018-06-21 242904]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
uDefault_Search_URL =
www.google.commDefault_Search_URL =
www.google.commDefault_Page_URL =
www.google.commLocal Page = c:\windows\SysWOW64\blank.htm
mSearch Page =
www.google.comTCP: DhcpNameServer = 10.0.0.138
FF - ProfilePath - c:\users\Elyene\AppData\Roaming\Mozilla\Firefox\Profiles\q3et2510.default-1425753162168-1514626331016\
FF - prefs.js: browser.startup.homepage - about:home
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Wow6432Node-HKLM-Run-<NO NAME> - (no file)
HKLM_Wow6432Node-ActiveSetup-{8A69D345-D564-463c-AFF1-A69D9E530F96} - c:\program files (x86)\Google\Chrome\Application\57.0.2987.133\Installer\chrmstp.exe
AddRemove-Free Auto Clicker_is1 - c:\program files (x86)\Free Auto Clicker\unins000.exe
AddRemove-{050d4fc8-5d48-4b8f-8972-47c82c46020f} - c:\programdata\Package Cache\{050d4fc8-5d48-4b8f-8972-47c82c46020f}\vcredist_x64.exe
AddRemove-{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f} - c:\programdata\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
AddRemove-{c239cea1-d49e-4e16-8e87-8c055765f7ec} - c:\programdata\Package Cache\{c239cea1-d49e-4e16-8e87-8c055765f7ec}\VC_redist.x86.exe
AddRemove-{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6} - c:\programdata\Package Cache\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\vcredist_x64.exe
AddRemove-{efa9232c-9a90-4dec-b9b6-4c3eafcce845} - c:\programdata\Package Cache\{efa9232c-9a90-4dec-b9b6-4c3eafcce845}\VMware-Horizon-Client-4.6.1-6748947.exe
AddRemove-{f1e7e313-06df-4c56-96a9-99fdfd149c51} - c:\programdata\Package Cache\{f1e7e313-06df-4c56-96a9-99fdfd149c51}\VC_redist.x64.exe
AddRemove-{f65db027-aff3-4070-886a-0d87064aabb1} - c:\programdata\Package Cache\{f65db027-aff3-4070-886a-0d87064aabb1}\vcredist_x86.exe
.
.
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\services\X6va065]
"ImagePath"="\??\c:\windows\SysWOW64\Drivers\X6va065"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-1530839326-149608907-2420063536-1001\Software\SecuROM\License information*]
"datasecu"=hex:81,ea,c2,13,be,21,a3,6e,76,3a,d0,6d,a8,1a,31,51,8c,3c,d0,bb,84,
43,2e,3a,11,47,a4,0b,31,25,46,b9,fc,4f,fb,9f,38,c9,bb,99,a5,5c,09,96,6d,98,\
"rkeysecu"=hex:ff,17,44,8f,ab,0d,b1,9b,cc,1b,77,b9,61,d1,36,1b
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_30_0_0_134_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_30_0_0_134_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_30_0_0_134_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_30_0_0_134_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_30_0_0_134.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.30"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_30_0_0_134.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_30_0_0_134.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_30_0_0_134.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\MSLicensing]
"SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,4f,00,46,00,\
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\AVAST Software\Avast\AvastSvc.exe
c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\windows\SysWOW64\PnkBstrA.exe
c:\windows\SysWOW64\PnkBstrB.exe
c:\program files (x86)\AVAST Software\Browser\Update\1.4.136.333\AvastBrowserCrashHandler.exe
c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
.
**************************************************************************
.
Celkový čas: 2018-08-08 19:12:44 - počítač byl restartován
ComboFix-quarantined-files.txt 2018-08-08 17:12
.
Před spuštěním: Volných bajtů: 54 807 728 128
Po spuštění: Volných bajtů: 53 619 265 536
.
- - End Of File - - AF563798834CD6A626A63440C458AC14
A36C5E4F47E84449FF07ED3517B43A31