VIRY.CZ

Dobrý den,

prosím o kontrolu notebooku, pravděpodobně tam bude nějaká havěť. Poslední dobou registruji vyšší využití paměti a notebook je při práci hlavně v AutoCADu zřetelně pomalejší. Dříve jsem používal Defendera - zde se mi zdálo, že na pozadí běží procesy, které PC zpomalují,.. nyní v rámci zkušební verze používám McAfee. Logy jsou v příloze.

Děkuji za pomoc!

Zdravím!
Spusťte tuto utilitu:

Ulozte na plochu AdwCleaner https://malwarebytes.com/adwcleaner/ nebo http://www.bleepingcomputer.com/download/adwcleaner/

ukoncete vsechny programy
odsouhlaste licencni podmiky (EULA) klikem na Souhlasim
kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
kliknete na Skenovat nyni (Scan now), pote na Cisteni a opravy (Clean and Repair)
po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\Logs\AdwCleaner[Cxx].txt), jehoz obsah zkopirujte do pristi odpovedi

Dobrý večer,

provedli jsme základní opravu, ale nenašel žádné hrozby.

# -------------------------------
# Malwarebytes AdwCleaner 7.3.0.0
# -------------------------------
# Build: 04-04-2019
# Database: 2019-07-15.1 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 07-17-2019
# Duration: 00:00:02
# OS: Windows 10 Home
# Cleaned: 0
# Failed: 0


***** [ Services ] *****

No malicious services cleaned.

***** [ Folders ] *****

No malicious folders cleaned.

***** [ Files ] *****

No malicious files cleaned.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks cleaned.

***** [ Registry ] *****

No malicious registry entries cleaned.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries cleaned.

***** [ Chromium URLs ] *****

No malicious Chromium URLs cleaned.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.


*************************

[+] Delete Tracing Keys
[+] Reset Winsock

*************************

AdwCleaner[S00].txt - [1250 octets] - [17/07/2019 22:40:04]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########

OK. Otevřte poznámkový blok a zkopírujte do něj:

Start

CloseProcesses:
HKU\S-1-5-21-4158616447-1872726189-2180378014-1001\...\Policies\Explorer: []
Task: {16F1335F-B226-4B3D-9AAD-29A992DFB4D1} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2018-07-26] (Google Inc -> Google Inc.)
Task: {2344AFB0-9C25-4081-91A7-5730B512E72B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2018-07-26] (Google Inc -> Google Inc.)
C:\Windows\System32\Tasks\McAfee\McAfee Idle Detection Task" was unlocked. <==== ATTENTION
SearchScopes: HKU\S-1-5-21-4158616447-1872726189-2180378014-1001 -> DefaultScope {1F6BEFE7-051B-4C04-A900-855467654906} URL =
SearchScopes: HKU\S-1-5-21-4158616447-1872726189-2180378014-1001 -> {1F6BEFE7-051B-4C04-A900-855467654906} URL =
FF HKLM\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSKHKLM => not found
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
FirewallRules: [{60FBCDC3-DB1D-45F7-866F-B76C33B857A4}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe No File
FirewallRules: [{D67F867C-1F77-48FF-9509-E379C66253AD}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe No File

EmptyTemp:
End

Uložte do C:\Users\lvejm\Downloads jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

Dobrý den,

provedeno, log viz níže. Ještě jsme kompletně zkontrolovali notebook pomocí Support assist od Dellu a úplné scanování McAfee.

Fix result of Farbar Recovery Scan Tool (x64) Version: 15-07-2019 01
Ran by lvejm (19-07-2019 16:33:33) Run:1
Running from C:\Users\lvejm\Downloads
Loaded Profiles: lvejm (Available Profiles: lvejm & palis)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start

CloseProcesses:
HKU\S-1-5-21-4158616447-1872726189-2180378014-1001\...\Policies\Explorer: []
Task: {16F1335F-B226-4B3D-9AAD-29A992DFB4D1} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2018-07-26] (Google Inc -> Google Inc.)
Task: {2344AFB0-9C25-4081-91A7-5730B512E72B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2018-07-26] (Google Inc -> Google Inc.)
C:\Windows\System32\Tasks\McAfee\McAfee Idle Detection Task" was unlocked. <==== ATTENTION
SearchScopes: HKU\S-1-5-21-4158616447-1872726189-2180378014-1001 -> DefaultScope {1F6BEFE7-051B-4C04-A900-855467654906} URL =
SearchScopes: HKU\S-1-5-21-4158616447-1872726189-2180378014-1001 -> {1F6BEFE7-051B-4C04-A900-855467654906} URL =
FF HKLM\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSKHKLM => not found
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
FirewallRules: [{60FBCDC3-DB1D-45F7-866F-B76C33B857A4}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe No File
FirewallRules: [{D67F867C-1F77-48FF-9509-E379C66253AD}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe No File

EmptyTemp:
End
*****************

Processes closed successfully.
"HKU\S-1-5-21-4158616447-1872726189-2180378014-1001\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{16F1335F-B226-4B3D-9AAD-29A992DFB4D1}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{16F1335F-B226-4B3D-9AAD-29A992DFB4D1}" => removed successfully
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineUA" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{2344AFB0-9C25-4081-91A7-5730B512E72B}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2344AFB0-9C25-4081-91A7-5730B512E72B}" => removed successfully
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineCore" => removed successfully
"C:\Windows\System32\Tasks\McAfee\McAfee Idle Detection Task" was unlocked. <==== ATTENTION" => not found
"HKU\S-1-5-21-4158616447-1872726189-2180378014-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope" => removed successfully
HKU\S-1-5-21-4158616447-1872726189-2180378014-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{1F6BEFE7-051B-4C04-A900-855467654906} => removed successfully
HKLM\Software\Classes\CLSID\{1F6BEFE7-051B-4C04-A900-855467654906} => not found
"HKLM\Software\Mozilla\Thunderbird\Extensions\\msktbird@mcafee.com" => removed successfully
HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\igfxcui => removed successfully
HKLM\Software\Classes\CLSID\{3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => not found
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{60FBCDC3-DB1D-45F7-866F-B76C33B857A4}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{D67F867C-1F77-48FF-9509-E379C66253AD}" => removed successfully

=========== EmptyTemp: ==========

BITS transfer queue => 11296768 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 146844827 B
Java, Flash, Steam htmlcache => 30005158 B
Windows/system/drivers => 7931659 B
Edge => 2085284 B
Chrome => 466797855 B
Firefox => 0 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 6656 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 3538246 B
systemprofile32 => 0 B
LocalService => 3586 B
LocalService => 0 B
NetworkService => 127886 B
NetworkService => 0 B
lvejm => 143124716 B
palis => 14674 B

RecycleBin => 0 B
EmptyTemp: => 774.2 MB temporary data Removed.

================================


The system needed a reboot.

==== End of Fixlog 16:36:21 ====

OK. Nastala nějaká změna?