Dobrý deň, môžete mi poradiť ktorý file označit a zmazať v hijackthis? Klávesnica píše 2-3 písmená, prepína capslock, spúšta sa kamera na pc. Spravil som uplny erase hdd, nova inst.win, scan cez malwarebytes, SDfix, kaspersky platena licencia a nič nenašlo, externú klávesnicu ešte nemam. Robí to aj v biose aj comandery
Ďakujem
LogfileofTrendMicroHijackThisv2.0.5
Scansavedat16:49:39,on9.4.2018
Platform:UnknownWindows(WinNT6.02.1008)
MSIE:InternetExplorerv11.0(11.00.16299.0015)
Bootmode:Normal
Runningprocesses:
C:\Users\\AppData\Local\Microsoft\OneDrive\OneDrive.exe
C:\Users\\Downloads\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page =
http://go.microsoft.com/fwlink/?LinkId=54896R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
https://www.google.com/?trackid=sp-006R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://go.microsoft.com/fwlink/p/?LinkId=255141R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
http://go.microsoft.com/fwlink/?LinkId=54896R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
http://go.microsoft.com/fwlink/?LinkId=54896R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
http://go.microsoft.com/fwlink/p/?LinkId=255141R0-HKLM\Software\Microsoft\InternetExplorer\Search,SearchAssistant=
R0-HKLM\Software\Microsoft\InternetExplorer\Search,CustomizeSearch=
R0-HKCU\Software\Microsoft\InternetExplorer\Main,LocalPage=%11%\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
C:\Windows\SysWOW64\blank.htm
R0-HKCU\Software\Microsoft\InternetExplorer\Toolbar,LinksFolderName=
F2-REG:system.ini:UserInit=
O4-HKCU\..\Run:[OneDrive]"C:\Users\stika\AppData\Local\Microsoft\OneDrive\OneDrive.exe"
/background
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe
/thfirstsetup(User'LOCALSERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe
/thfirstsetup(User'NETWORKSERVICE')
O11-Optionsgroup:[ACCELERATED_GRAPHICS]Acceleratedgraphics
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} -
C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} -
C:\Windows\SysWOW64\tbauth.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner -
C:\Windows\System32\alg.exe(filemissing)
O23-Service:KasperskyAnti-VirusService18.0.0(AVP18.0.0)-AOKasperskyLab-C:\Program
Files(x86)\KasperskyLab\KasperskyInternetSecurity18.0.0\avp.exe
O23 -Service:Intel(R) Content Protection HECIService (cphs) -IntelCorporation -
C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service:
@%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000
(diagnosticshub.standardcollector.service) - Unknown owner -
C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe(filemissing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner -
C:\Windows\System32\lsass.exe(filemissing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner -
C:\Windows\system32\fxssvc.exe(filemissing
O23-Service:Intel(R)HDGraphicsControlPanelService(igfxCUIService1.0.0.0)-Unknown
owner-C:\Windows\system32\igfxCUIService.exe(filemissing)
O23-Service:@keyiso.dll,-100(KeyIso)-Unknownowner-C:\Windows\system32\lsass.exe(file
missing)
O23-Service:klvssbridge64_18.0.0-AO KasperskyLab-C:\Program Files(x86)\Kaspersky
Lab\KasperskyInternetSecurity18.0.0\x64\vssbridge64.exe
O23-Service:KasperskySecureConnectionService2.0.0(KSDE2.0.0)-AOKasperskyLab�C:\ProgramFiles(x86)\KasperskyLab\KasperskySecureConnection2.0\ksde.exe
O23 - Service: Malwarebytes Service (MBAMService) - Malwarebytes - C:\Program
Files\Malwarebytes\Anti-Malware\mbamservice.exe
O23-Service:@comres.dll,-2797(MSDTC)-Unknownowner-C:\Windows\System32\msdtc.exe
(filemissing)
O23 -Service:@%SystemRoot%\System32\netlogon.dll,-102 (Netlogon)-Unknown owner�C:\Windows\system32\lsass.exe(filemissing)
O23 -Service:@%systemroot%\system32\Locator.exe,-2 (RpcLocator)-Unknown owner�C:\Windows\system32\locator.exe(filemissing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner -
C:\Windows\system32\lsass.exe(filemissing)
O23-Service:@%systemroot%\system32\SecurityHealthAgent.dll,-1002(SecurityHealthService)-
Unknownowner-C:\Windows\system32\SecurityHealthService.exe(filemissing)
O23-Service:@%SystemRoot%\system32\SensorDataService.exe,-101(SensorDataService)-
Unknownowner-C:\Windows\System32\SensorDataService.exe(filemissing)
O23-Service:@%SystemRoot%\system32\snmptrap.exe,-3(SNMPTRAP)-Unknownowner�C:\Windows\System32\snmptrap.exe(filemissing)
O23-Service:@%systemroot%\system32\spectrum.exe,-101(spectrum)-Unknownowner�C:\Windows\system32\spectrum.exe(filemissing)
O23 - Service:@%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner -
C:\Windows\System32\spoolsv.exe(filemissing)
O23 -Service:@%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc)-Unknown owner�C:\Windows\system32\sppsvc.exe(filemissing)
O23-Service:@%SystemRoot%\system32\TieringEngineService.exe,-702(TieringEngineService)
-Unknownowner-C:\Windows\system32\TieringEngineService.exe(filemissing)
O23-Service:@%SystemRoot%\system32\ui0detect.exe,-101(UI0Detect)-Unknownowner�C:\Windows\system32\UI0Detect.exe(filemissing)
O23 -Service:@%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc)-Unknown owner�C:\Windows\system32\lsass.exe(filemissing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner -
C:\Windows\System32\vds.exe(filemissing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner -
C:\Windows\system32\vssvc.exe(filemissing)
O23-Service:@%systemroot%\system32\wbengine.exe,-104(wbengine)-Unknownowner�C:\Windows\system32\wbengine.exe(filemissing)
O23-Service:@%ProgramFiles%\WindowsDefender\MpAsDesc.dll,-320(WdNisSvc)-Unknown
owner-C:\ProgramFiles(x86)\WindowsDefender\NisSrv.exe(filemissing)
O23-Service:@%ProgramFiles%\WindowsDefender\MpAsDesc.dll,-310(WinDefend)-Unknown
owner-C:\ProgramFiles(x86)\WindowsDefender\MsMpEng.exe(filemissing)
O23 -Service:@%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv)-Unknown
owner-C:\Windows\system32\wbem\WmiApSrv.exe(filemissing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101
(WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media
Player\wmpnetwk.exe(filemissing)
O23 -Service:@%systemroot%\system32\xbgmsvc.exe,-100 (xbgm)-Unknown owner�C:\Windows\system32\xbgmsvc.exe(filemissing)
--
Endoffile-6641bytes