Could you check those logs?

[zenekklocek]

CollectionLog-2018.12.26-14.26.zip

Please could anyone analyze those logs, I'm afraid that my computer could be infected.

I noticed sometimes coursor is moving by itself and I have other weird stuff going on.
I started to have a problem with overheating some time ago, fans was cleaned and thermal paste was changed.

I would be thankful if someone could verify my paranoic mode xD

[dragokas]

Hi,
thank you for the log.
We'll return to you as soon as possible.

---

Please, note that only members of VIRUSNET-Association are allowed to respond in PC cure topics.
Ignore any recommendations given by other users, including PM !!!

Assistance is provided free of charge at our free time. If you found our help useful, you can thank us with any amount using this form or you can leave a feedback in Guestbook.

[Sandor-Helper]

Hello,

Close all running programs, temporarily unload antivirus and other protecting software.

Run a script in AVZ (File - Run script):

begin
 ExecuteFile('net.exe', 'stop tcpip /y', 0, 15000, true);
 ClearQuarantineEx(true);
 StopService('HWiNFO32');
 QuarantineFile('C:\Users\dariu\AppData\Local\Temp\HWiNFO64A.SYS', '');
 DeleteFile('C:\Users\dariu\AppData\Local\Temp\HWiNFO64A.SYS', '64');
 DeleteService('HWiNFO32');
 RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '1001', 1);
 RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '1004', 3);
 RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '1201', 3);
 RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '1804', 1);
 RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '2201', 3);
 CreateQurantineArchive(GetAVZDirectory + 'quarantine.zip');
ExecuteSysClean;
 ExecuteWizard('SCU', 2, 3, true);
RebootWindows(true);
end.

Computer will reboot.

File quarantine.zip from extracted AVZ folder please send using this form or (if archive size exceeds the 8 MB) to this mailbox: quarantine at safezone.cc (change at to @) and specify your forum link in e-mail subject and password: virus in message body.

For secondary diagnostics please run AutoLogger again.
Attach new CollectionLog to your post.

[zenekklocek]

I disabled antivirus, run script in AVZ, PC rebooted, but file quarantine.zip is empty.
quarantine.zip

[Sandor-Helper]

OK, then please do a secondary diagnostics.

run AutoLogger again.
Attach new CollectionLog to your post.

[dragokas]

Closed.
Reason: no answer for 10 days.
If you still need our help, please, execute tha last steps, requested by helper.