VIRY.CZ

Pomáháme v boji s počítačovou havěti!
https://forum.viry.cz:443/

Prosim o preventivku, laptop niekedy spomaleny

https://forum.viry.cz:443/viewtopic.php?t=153617

Stránka 1 z 1

Prosim o preventivku, laptop niekedy spomaleny

Napsal: 20 led 2018 09:52
od klingoln
Ahoj,
prosim o kontrolu:

Logfile of random's system information tool 1.10 (written by random/random)
Run by DUSAN at 2018-01-20 09:46:00
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 30 GB (40%) free of 76 GB
Total RAM: 2038 MB (23% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9:46:29, on 20. 1. 2018
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18894)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskhost.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\system32\igfxsrvc.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files\CCleaner\CCleaner.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\DUSAN\Downloads\RSIT.exe
C:\Program Files\trend micro\DUSAN.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Windows\system32\NeroCheck.exe
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvLaunch.exe" /gui
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner.exe" /MONITOR
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Zdroje informácií - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: aswbIDSAgent - AVAST Software - C:\Program Files\AVAST Software\Avast\aswidsagent.exe
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe

--
End of file - 3824 bytes

=========Mozilla firefox=========

ProfilePath - C:\Users\DUSAN\AppData\Roaming\Mozilla\Firefox\Profiles\7o1ipfrn.default

prefs.js - "browser.startup.homepage" - "https://www.google.sk/?gws_rd=ssl"

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 28.0.0.137 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF32_28_0_0_137.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.2.0]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.2.1]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.2.4]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll


C:\Users\DUSAN\AppData\Roaming\Mozilla\Firefox\Profiles\7o1ipfrn.default\extensions\
adbhelper@mozilla.org
fxdevtools-adapters@mozilla.org
toolbar@centrumholdings.com

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2018-01-12 820672]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2009-09-23 141848]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2009-09-23 173592]
"Persistence"=C:\Windows\system32\igfxpers.exe [2009-09-23 150552]
"NeroFilterCheck"=C:\Windows\system32\NeroCheck.exe [2001-07-09 155648]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvLaunch.exe [2018-01-12 246120]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner.exe [2018-01-09 7980776]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2009-09-23 218112]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SoftwareSASGeneration"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2018-01-20 09:46:03 ----D---- C:\Program Files\trend micro
2018-01-20 09:46:00 ----D---- C:\rsit
2018-01-20 09:24:22 ----D---- C:\Program Files\CCleaner
2018-01-12 19:01:18 ----A---- C:\Windows\system32\mshtml.dll
2018-01-12 19:01:14 ----A---- C:\Windows\system32\ieframe.dll
2018-01-12 19:01:11 ----A---- C:\Windows\system32\jscript9.dll
2018-01-12 19:01:03 ----A---- C:\Windows\system32\wininet.dll
2018-01-12 19:01:01 ----A---- C:\Windows\system32\ntkrnlpa.exe
2018-01-12 19:01:01 ----A---- C:\Windows\system32\iertutil.dll
2018-01-12 19:00:59 ----A---- C:\Windows\system32\ntoskrnl.exe
2018-01-12 19:00:58 ----A---- C:\Windows\system32\urlmon.dll
2018-01-12 19:00:56 ----A---- C:\Windows\system32\kerberos.dll
2018-01-12 19:00:56 ----A---- C:\Windows\system32\jscript.dll
2018-01-12 19:00:55 ----A---- C:\Windows\system32\vbscript.dll
2018-01-12 19:00:55 ----A---- C:\Windows\system32\shell32.dll
2018-01-12 19:00:53 ----A---- C:\Windows\system32\drivers\ntfs.sys
2018-01-12 19:00:52 ----A---- C:\Windows\system32\ntdll.dll
2018-01-12 19:00:52 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2018-01-12 19:00:52 ----A---- C:\Windows\system32\lsasrv.dll
2018-01-12 19:00:51 ----A---- C:\Windows\system32\winload.exe
2018-01-12 19:00:51 ----A---- C:\Windows\system32\ieui.dll
2018-01-12 19:00:51 ----A---- C:\Windows\system32\atmfd.dll
2018-01-12 19:00:50 ----A---- C:\Windows\system32\mshtmlmedia.dll
2018-01-12 19:00:50 ----A---- C:\Windows\system32\kernel32.dll
2018-01-12 19:00:49 ----A---- C:\Windows\system32\rpcrt4.dll
2018-01-12 19:00:49 ----A---- C:\Windows\system32\ole32.dll
2018-01-12 19:00:49 ----A---- C:\Windows\system32\drivers\srv.sys
2018-01-12 19:00:48 ----A---- C:\Windows\system32\drivers\srv2.sys
2018-01-12 19:00:48 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2018-01-12 19:00:48 ----A---- C:\Windows\system32\advapi32.dll
2018-01-12 19:00:47 ----A---- C:\Windows\system32\sysmain.dll
2018-01-12 19:00:47 ----A---- C:\Windows\system32\msxml6.dll
2018-01-12 19:00:46 ----A---- C:\Windows\system32\KernelBase.dll
2018-01-12 19:00:46 ----A---- C:\Windows\system32\ExplorerFrame.dll
2018-01-12 19:00:46 ----A---- C:\Windows\system32\drivers\fltMgr.sys
2018-01-12 19:00:45 ----A---- C:\Windows\system32\win32k.sys
2018-01-12 19:00:44 ----A---- C:\Windows\system32\msfeeds.dll
2018-01-12 19:00:44 ----A---- C:\Windows\system32\iedkcs32.dll
2018-01-12 19:00:44 ----A---- C:\Windows\system32\FirewallAPI.dll
2018-01-12 19:00:43 ----A---- C:\Windows\system32\MPSSVC.dll
2018-01-12 19:00:43 ----A---- C:\Windows\system32\drivers\ndis.sys
2018-01-12 19:00:42 ----A---- C:\Windows\system32\rpcss.dll
2018-01-12 19:00:42 ----A---- C:\Windows\system32\msv1_0.dll
2018-01-12 19:00:42 ----A---- C:\Windows\system32\inetcomm.dll
2018-01-12 19:00:42 ----A---- C:\Windows\system32\drivers\http.sys
2018-01-12 19:00:41 ----A---- C:\Windows\system32\spoolsv.exe
2018-01-12 19:00:41 ----A---- C:\Windows\system32\halmacpi.dll
2018-01-12 19:00:41 ----A---- C:\Windows\system32\hal.dll
2018-01-12 19:00:41 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2018-01-12 19:00:41 ----A---- C:\Windows\system32\conhost.exe
2018-01-12 19:00:40 ----A---- C:\Windows\system32\webcheck.dll
2018-01-12 19:00:40 ----A---- C:\Windows\system32\srcore.dll
2018-01-12 19:00:40 ----A---- C:\Windows\system32\ieapfltr.dll
2018-01-12 19:00:40 ----A---- C:\Windows\system32\halacpi.dll
2018-01-12 19:00:40 ----A---- C:\Windows\system32\drivers\rdyboost.sys
2018-01-12 19:00:40 ----A---- C:\Windows\system32\authui.dll
2018-01-12 19:00:39 ----A---- C:\Windows\system32\winsrv.dll
2018-01-12 19:00:39 ----A---- C:\Windows\system32\dxtmsft.dll
2018-01-12 19:00:39 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2018-01-12 19:00:39 ----A---- C:\Windows\system32\consent.exe
2018-01-12 19:00:38 ----A---- C:\Windows\system32\pnrpsvc.dll
2018-01-12 19:00:38 ----A---- C:\Windows\system32\msrating.dll
2018-01-12 19:00:38 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2018-01-12 19:00:38 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2018-01-12 19:00:38 ----A---- C:\Windows\system32\drivers\dfsc.sys
2018-01-12 19:00:37 ----A---- C:\Windows\system32\smss.exe
2018-01-12 19:00:37 ----A---- C:\Windows\system32\rpchttp.dll
2018-01-12 19:00:37 ----A---- C:\Windows\system32\p2psvc.dll
2018-01-12 19:00:37 ----A---- C:\Windows\system32\P2P.dll
2018-01-12 19:00:36 ----A---- C:\Windows\system32\icm32.dll
2018-01-12 19:00:36 ----A---- C:\Windows\system32\icfupgd.dll
2018-01-12 19:00:36 ----A---- C:\Windows\system32\drivers\srvnet.sys
2018-01-12 19:00:36 ----A---- C:\Windows\system32\csrsrv.dll
2018-01-12 19:00:35 ----A---- C:\Windows\system32\ie4uinit.exe
2018-01-12 19:00:35 ----A---- C:\Windows\system32\fontsub.dll
2018-01-12 19:00:34 ----A---- C:\Windows\system32\mscms.dll
2018-01-12 19:00:34 ----A---- C:\Windows\system32\drivers\pacer.sys
2018-01-12 19:00:34 ----A---- C:\Windows\system32\appinfo.dll
2018-01-12 19:00:33 ----A---- C:\Windows\system32\sspicli.dll
2018-01-12 19:00:33 ----A---- C:\Windows\system32\drivers\netbios.sys
2018-01-12 19:00:32 ----A---- C:\Windows\system32\wfapigp.dll
2018-01-12 19:00:32 ----A---- C:\Windows\system32\traffic.dll
2018-01-12 19:00:32 ----A---- C:\Windows\system32\dxtrans.dll
2018-01-12 19:00:32 ----A---- C:\Windows\system32\drivers\mpsdrv.sys
2018-01-12 19:00:32 ----A---- C:\Windows\system32\atmlib.dll
2018-01-12 19:00:31 ----A---- C:\Windows\system32\wshqos.dll
2018-01-12 19:00:31 ----A---- C:\Windows\system32\wshnetbs.dll
2018-01-12 19:00:31 ----A---- C:\Windows\system32\jscript9diag.dll
2018-01-12 19:00:31 ----A---- C:\Windows\system32\INETRES.dll
2018-01-12 19:00:30 ----A---- C:\Windows\system32\WcsPlugInService.dll
2018-01-12 19:00:30 ----A---- C:\Windows\system32\schannel.dll
2018-01-12 19:00:29 ----A---- C:\Windows\system32\mshtmled.dll
2018-01-12 19:00:28 ----A---- C:\Windows\system32\wdigest.dll
2018-01-12 19:00:28 ----A---- C:\Windows\system32\occache.dll
2018-01-12 19:00:28 ----A---- C:\Windows\system32\MshtmlDac.dll
2018-01-12 19:00:28 ----A---- C:\Windows\system32\jsproxy.dll
2018-01-12 19:00:28 ----A---- C:\Windows\system32\inseng.dll
2018-01-12 19:00:28 ----A---- C:\Windows\system32\ieUnatt.exe
2018-01-12 19:00:28 ----A---- C:\Windows\system32\ieetwproxystub.dll
2018-01-12 19:00:27 ----A---- C:\Windows\system32\TSpkg.dll
2018-01-12 19:00:27 ----A---- C:\Windows\system32\srclient.dll
2018-01-12 19:00:27 ----A---- C:\Windows\system32\setbcdlocale.dll
2018-01-12 19:00:27 ----A---- C:\Windows\system32\ncrypt.dll
2018-01-12 19:00:27 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2018-01-12 19:00:27 ----A---- C:\Windows\system32\iesetup.dll
2018-01-12 19:00:27 ----A---- C:\Windows\system32\iernonce.dll
2018-01-12 19:00:27 ----A---- C:\Windows\system32\ieetwcollector.exe
2018-01-12 19:00:27 ----A---- C:\Windows\system32\bcrypt.dll
2018-01-12 19:00:27 ----A---- C:\Windows\system32\appidapi.dll
2018-01-12 19:00:27 ----A---- C:\Windows\system32\apisetschema.dll
2018-01-12 19:00:26 ----A---- C:\Windows\system32\secur32.dll
2018-01-12 19:00:26 ----A---- C:\Windows\system32\rstrui.exe
2018-01-12 19:00:26 ----A---- C:\Windows\system32\lsass.exe
2018-01-12 19:00:26 ----A---- C:\Windows\system32\drivers\appid.sys
2018-01-12 19:00:26 ----A---- C:\Windows\system32\cryptbase.dll
2018-01-12 19:00:26 ----A---- C:\Windows\system32\credssp.dll
2018-01-12 19:00:26 ----A---- C:\Windows\system32\appidsvc.dll
2018-01-12 19:00:25 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2018-01-12 19:00:25 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2018-01-12 19:00:25 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2018-01-12 19:00:25 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2018-01-12 19:00:25 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2018-01-12 19:00:25 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2018-01-12 19:00:25 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2018-01-12 19:00:25 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2018-01-12 19:00:25 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2018-01-12 19:00:25 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2018-01-12 19:00:25 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2018-01-12 19:00:25 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2018-01-12 19:00:25 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2018-01-12 19:00:25 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2018-01-12 19:00:25 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2018-01-12 19:00:25 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2018-01-12 19:00:25 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2018-01-12 19:00:25 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2018-01-12 19:00:25 ----A---- C:\Windows\system32\sspisrv.dll
2018-01-12 19:00:25 ----A---- C:\Windows\system32\lpk.dll
2018-01-12 19:00:25 ----A---- C:\Windows\system32\dciman32.dll
2018-01-12 19:00:25 ----A---- C:\Windows\system32\comcat.dll
2018-01-12 19:00:25 ----A---- C:\Windows\system32\auditpol.exe
2018-01-12 19:00:25 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2018-01-12 19:00:25 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2018-01-12 19:00:24 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2018-01-12 19:00:24 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2018-01-12 19:00:24 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2018-01-12 19:00:24 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2018-01-12 19:00:24 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2018-01-12 19:00:24 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2018-01-12 19:00:24 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2018-01-12 19:00:24 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2018-01-12 19:00:24 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2018-01-12 19:00:24 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2018-01-12 19:00:24 ----A---- C:\Windows\system32\adtschema.dll
2018-01-12 19:00:23 ----A---- C:\Windows\system32\msaudite.dll
2018-01-12 19:00:22 ----A---- C:\Windows\system32\oleres.dll
2018-01-12 19:00:22 ----A---- C:\Windows\system32\msobjs.dll
2018-01-12 19:00:22 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2018-01-12 19:00:21 ----A---- C:\Windows\system32\msxml6r.dll
2018-01-12 18:40:06 ----A---- C:\Windows\system32\drivers\aswArPot.sys
2018-01-12 18:40:00 ----A---- C:\Windows\system32\drivers\aswHdsKe.sys
2018-01-12 18:38:35 ----A---- C:\Windows\system32\aswBoot.exe

======List of files/folders modified in the last 1 month======

2018-01-20 09:46:03 ----RD---- C:\Program Files
2018-01-20 09:43:36 ----SHD---- C:\Windows\Installer
2018-01-20 09:43:36 ----D---- C:\Program Files\OpenOffice.org 3
2018-01-20 09:43:09 ----RSD---- C:\Windows\assembly
2018-01-20 09:39:45 ----D---- C:\Windows\system32\catroot2
2018-01-20 09:38:55 ----D---- C:\Windows\Temp
2018-01-20 09:38:41 ----SHD---- C:\System Volume Information
2018-01-20 09:38:12 ----D---- C:\Windows\system32\Tasks
2018-01-20 09:37:18 ----D---- C:\Windows\winsxs
2018-01-20 09:29:41 ----D---- C:\Users\DUSAN\AppData\Roaming\uTorrent
2018-01-20 09:28:23 ----D---- C:\Windows\Panther
2018-01-20 09:28:23 ----D---- C:\Windows\Logs
2018-01-20 09:28:23 ----D---- C:\Windows\inf
2018-01-20 09:28:23 ----D---- C:\Windows\debug
2018-01-20 09:28:23 ----D---- C:\Windows
2018-01-20 09:23:52 ----D---- C:\Windows\Prefetch
2018-01-20 09:19:16 ----D---- C:\Windows\system32\config
2018-01-20 09:14:48 ----D---- C:\Program Files\Ahead
2018-01-17 18:44:43 ----D---- C:\Windows\System32
2018-01-17 18:44:43 ----A---- C:\Windows\system32\PerfStringBackup.INI
2018-01-17 17:36:54 ----D---- C:\Windows\Microsoft.NET
2018-01-17 16:52:47 ----D---- C:\Windows\system32\drivers
2018-01-17 16:52:47 ----D---- C:\Windows\ehome
2018-01-17 16:52:47 ----D---- C:\Program Files\Internet Explorer
2018-01-17 16:52:46 ----D---- C:\Windows\system32\sk-SK
2018-01-17 16:52:46 ----D---- C:\Windows\system32\en-US
2018-01-17 16:52:41 ----D---- C:\Windows\AppPatch
2018-01-17 16:52:40 ----D---- C:\Windows\system32\migration
2018-01-17 16:52:40 ----D---- C:\Windows\system32\Boot
2018-01-17 16:36:54 ----D---- C:\Windows\system32\MRT
2018-01-17 16:23:27 ----AC---- C:\Windows\system32\MRT-KB890830.exe
2018-01-17 16:22:38 ----AC---- C:\Windows\system32\MRT.exe
2018-01-12 18:38:24 ----D---- C:\ProgramData\AVAST Software
2018-01-12 18:15:12 ----A---- C:\Windows\system32\FlashPlayerApp.exe
2018-01-12 18:15:00 ----D---- C:\Windows\system32\Macromed
2018-01-09 20:23:09 ----D---- C:\Program Files\Mozilla Maintenance Service
2018-01-09 20:23:08 ----D---- C:\Program Files\Mozilla Firefox
2018-01-09 12:56:45 ----D---- C:\Users\DUSAN\AppData\Roaming\vlc

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswbidsh;aswbidsh; C:\Windows\system32\drivers\aswbidshx.sys [2018-01-12 157376]
R0 aswblog;aswblog; C:\Windows\system32\drivers\aswblogx.sys [2018-01-12 276696]
R0 aswbuniv;aswbuniv; C:\Windows\system32\drivers\aswbunivx.sys [2018-01-12 50344]
R0 aswRvrt;aswRvrt; C:\Windows\system32\drivers\aswRvrt.sys [2018-01-12 70832]
R0 aswVmm;aswVmm; C:\Windows\system32\drivers\aswVmm.sys [2018-01-12 294680]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2018-01-01 173288]
R1 aswArPot;aswArPot; C:\Windows\system32\drivers\aswArPot.sys [2018-01-12 158224]
R1 aswbidsdriver;aswbidsdriver; C:\Windows\system32\drivers\aswbidsdriverx.sys [2018-01-12 255584]
R1 aswHdsKe;aswHdsKe; C:\Windows\system32\drivers\aswHdsKe.sys [2018-01-12 118144]
R1 aswKbd;aswKbd; C:\Windows\system32\drivers\aswKbd.sys [2017-07-26 39752]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2018-01-12 99528]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2018-01-12 783104]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2018-01-12 390256]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 48128]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2018-01-12 123880]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2018-01-12 151328]
R3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-13 229888]
R3 BCM43XX;Broadcom 802.11 Network Adapter Driver; C:\Windows\system32\DRIVERS\bcmwl6.sys [2009-07-08 2506232]
R3 BthEnum;Bluetooth Request Block Driver; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 34816]
R3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\drivers\bthpan.sys [2017-07-06 94208]
R3 BTHUSB;Bluetooth Radio USB Driver; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 60416]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2009-09-23 4808192]
R3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 129536]
R3 SrvHsfHDA;SrvHsfHDA; C:\Windows\system32\DRIVERS\VSTAZL3.SYS [2009-07-13 207360]
R3 SrvHsfV92;SrvHsfV92; C:\Windows\system32\DRIVERS\VSTDPV3.SYS [2009-07-13 980992]
R3 SrvHsfWinac;SrvHsfWinac; C:\Windows\system32\DRIVERS\VSTCNXT3.SYS [2009-07-13 661504]
R3 WinUsb;WinUSB Driver; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 35968]
S2 Parvdm;Parvdm; C:\Windows\system32\drivers\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\Windows\system32\drivers\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 aswHwid;aswHwid; C:\Windows\system32\drivers\aswHwid.sys [2018-01-12 42824]
S3 BTHPORT;Bluetooth Port Driver; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 393728]
S3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudbus.sys [2016-09-05 109184]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 14848]
S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudmdm.sys [2016-09-05 147072]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2013-10-02 49152]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-20 27264]
S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\drivers\viac7.sys [2009-07-14 52736]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2017-09-27 83984]
R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2018-01-12 301168]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R3 aswbIDSAgent;aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [2018-01-12 5906816]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2017-04-21 107656]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2018-01-12 272384]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2017-12-29 104960]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2018-01-07 175568]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S4 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2017-04-21 47224]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2017-04-21 136312]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2017-04-21 136312]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2017-04-21 136312]

-----------------EOF-----------------

Re: Prosim o preventivku, laptop niekedy spomaleny

Napsal: 21 led 2018 11:47
od Rudy
Zdravím!
Spusťte tuto utilitu:
Stáhněte AdwCleaner https://toolslib.net/downloads/viewdown ... dwcleaner/
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan<(hledání) a pak na >Clean< (mazání).
Proběhne skenováni a pak se objeví log, který sem vložte.

Re: Prosim o preventivku, laptop niekedy spomaleny

Napsal: 21 led 2018 12:05
od klingoln
Zdravim, tu je log:

# AdwCleaner 7.0.7.0 - Logfile created on Sun Jan 21 11:03:26 2018
# Updated on 2018/18/01 by Malwarebytes
# Database: 01-16-2018.1
# Running on Windows 7 Home Premium (X86)
# Mode: scan
# Support: https://www.malwarebytes.com/support

***** [ Services ] *****

No malicious services found.

***** [ Folders ] *****

No malicious folders found.

***** [ Files ] *****

No malicious files found.

***** [ DLL ] *****

No malicious DLLs found.

***** [ WMI ] *****

No malicious WMI found.

***** [ Shortcuts ] *****

No malicious shortcuts found.

***** [ Tasks ] *****

No malicious tasks found.

***** [ Registry ] *****

No malicious registry entries found.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries.

*************************



########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt ########

Re: Prosim o preventivku, laptop niekedy spomaleny

Napsal: 21 led 2018 15:06
od Rudy
Toto je OK. Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:
:reg
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NeroFilterCheck"=-

:commands
[Purity]
[Emptytemp]
[Emptyflash]
a klikněte na >MoveIt!<. Před skenem vypněte antivir a po něm restartujte PC. Dejte nový log RSIT.

Re: Prosim o preventivku, laptop niekedy spomaleny

Napsal: 21 led 2018 15:52
od klingoln
Vycistenie cez OTM vykonane, prikladam novy log:

Logfile of random's system information tool 1.10 (written by random/random)
Run by DUSAN at 2018-01-21 15:46:33
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 30 GB (39%) free of 76 GB
Total RAM: 2038 MB (45% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 15:50:17, on 21. 1. 2018
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18894)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskhost.exe
C:\Windows\System32\rundll32.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Windows\system32\igfxsrvc.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files\CCleaner\CCleaner.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Users\DUSAN\Downloads\RSIT.exe
C:\Program Files\trend micro\DUSAN.exe
C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe
C:\Windows\system32\SearchFilterHost.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvLaunch.exe" /gui
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner.exe" /MONITOR
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Zdroje informácií - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: aswbIDSAgent - AVAST Software - C:\Program Files\AVAST Software\Avast\aswidsagent.exe
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe

--
End of file - 3842 bytes

=========Mozilla firefox=========

ProfilePath - C:\Users\DUSAN\AppData\Roaming\Mozilla\Firefox\Profiles\yrguymac.default-1516443437094

prefs.js - "browser.startup.homepage" - "www.google.sk"

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 28.0.0.137 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF32_28_0_0_137.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.2.0]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.2.1]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.2.4]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll


======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2018-01-12 820672]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2009-09-23 141848]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2009-09-23 173592]
"Persistence"=C:\Windows\system32\igfxpers.exe [2009-09-23 150552]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvLaunch.exe [2018-01-12 246120]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner.exe [2018-01-09 7980776]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2009-09-23 218112]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SoftwareSASGeneration"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2018-01-21 15:41:21 ----D---- C:\ProgramData\SWCUTemp
2018-01-21 15:38:59 ----D---- C:\_OTM
2018-01-21 11:59:48 ----D---- C:\AdwCleaner
2018-01-20 09:47:19 ----A---- C:\Windows\system32\ntkrnlpa.exe
2018-01-20 09:47:19 ----A---- C:\Windows\system32\crypt32.dll
2018-01-20 09:47:18 ----A---- C:\Windows\system32\WinSCard.dll
2018-01-20 09:47:18 ----A---- C:\Windows\system32\ntoskrnl.exe
2018-01-20 09:47:16 ----A---- C:\Windows\system32\wisptis.exe
2018-01-20 09:47:16 ----A---- C:\Windows\system32\ntdll.dll
2018-01-20 09:47:15 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2018-01-20 09:47:14 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2018-01-20 09:47:13 ----A---- C:\Windows\system32\TabSvc.dll
2018-01-20 09:47:13 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2018-01-20 09:47:12 ----A---- C:\Windows\system32\smss.exe
2018-01-20 09:47:12 ----A---- C:\Windows\system32\rpcrt4.dll
2018-01-20 09:47:12 ----A---- C:\Windows\system32\kerberos.dll
2018-01-20 09:47:12 ----A---- C:\Windows\system32\advapi32.dll
2018-01-20 09:47:11 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2018-01-20 09:47:10 ----A---- C:\Windows\system32\srcore.dll
2018-01-20 09:47:10 ----A---- C:\Windows\system32\schannel.dll
2018-01-20 09:47:10 ----A---- C:\Windows\system32\msv1_0.dll
2018-01-20 09:47:10 ----A---- C:\Windows\system32\lsasrv.dll
2018-01-20 09:47:09 ----A---- C:\Windows\system32\wintrust.dll
2018-01-20 09:47:09 ----A---- C:\Windows\system32\wdigest.dll
2018-01-20 09:47:09 ----A---- C:\Windows\system32\sspicli.dll
2018-01-20 09:47:09 ----A---- C:\Windows\system32\rpchttp.dll
2018-01-20 09:47:09 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2018-01-20 09:47:09 ----A---- C:\Windows\system32\cryptsvc.dll
2018-01-20 09:47:09 ----A---- C:\Windows\system32\cryptnet.dll
2018-01-20 09:47:08 ----A---- C:\Windows\system32\TSpkg.dll
2018-01-20 09:47:08 ----A---- C:\Windows\system32\ncrypt.dll
2018-01-20 09:47:08 ----A---- C:\Windows\system32\bcrypt.dll
2018-01-20 09:47:08 ----A---- C:\Windows\system32\apisetschema.dll
2018-01-20 09:47:07 ----A---- C:\Windows\system32\srclient.dll
2018-01-20 09:47:07 ----A---- C:\Windows\system32\drivers\appid.sys
2018-01-20 09:47:01 ----A---- C:\Windows\system32\csrsrv.dll
2018-01-20 09:47:01 ----A---- C:\Windows\system32\cryptbase.dll
2018-01-20 09:47:01 ----A---- C:\Windows\system32\appidapi.dll
2018-01-20 09:47:00 ----A---- C:\Windows\system32\sspisrv.dll
2018-01-20 09:47:00 ----A---- C:\Windows\system32\setbcdlocale.dll
2018-01-20 09:47:00 ----A---- C:\Windows\system32\secur32.dll
2018-01-20 09:47:00 ----A---- C:\Windows\system32\rstrui.exe
2018-01-20 09:47:00 ----A---- C:\Windows\system32\msaudite.dll
2018-01-20 09:47:00 ----A---- C:\Windows\system32\lsass.exe
2018-01-20 09:47:00 ----A---- C:\Windows\system32\credssp.dll
2018-01-20 09:47:00 ----A---- C:\Windows\system32\auditpol.exe
2018-01-20 09:47:00 ----A---- C:\Windows\system32\appidsvc.dll
2018-01-20 09:47:00 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2018-01-20 09:47:00 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2018-01-20 09:47:00 ----A---- C:\Windows\system32\adtschema.dll
2018-01-20 09:46:59 ----A---- C:\Windows\system32\msobjs.dll
2018-01-20 09:46:03 ----D---- C:\Program Files\trend micro
2018-01-20 09:46:00 ----D---- C:\rsit
2018-01-20 09:24:22 ----D---- C:\Program Files\CCleaner
2018-01-12 19:01:18 ----A---- C:\Windows\system32\mshtml.dll
2018-01-12 19:01:14 ----A---- C:\Windows\system32\ieframe.dll
2018-01-12 19:01:11 ----A---- C:\Windows\system32\jscript9.dll
2018-01-12 19:01:03 ----A---- C:\Windows\system32\wininet.dll
2018-01-12 19:01:01 ----A---- C:\Windows\system32\iertutil.dll
2018-01-12 19:00:58 ----A---- C:\Windows\system32\urlmon.dll
2018-01-12 19:00:56 ----A---- C:\Windows\system32\jscript.dll
2018-01-12 19:00:55 ----A---- C:\Windows\system32\vbscript.dll
2018-01-12 19:00:55 ----A---- C:\Windows\system32\shell32.dll
2018-01-12 19:00:53 ----A---- C:\Windows\system32\drivers\ntfs.sys
2018-01-12 19:00:52 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2018-01-12 19:00:51 ----A---- C:\Windows\system32\winload.exe
2018-01-12 19:00:51 ----A---- C:\Windows\system32\ieui.dll
2018-01-12 19:00:51 ----A---- C:\Windows\system32\atmfd.dll
2018-01-12 19:00:50 ----A---- C:\Windows\system32\mshtmlmedia.dll
2018-01-12 19:00:50 ----A---- C:\Windows\system32\kernel32.dll
2018-01-12 19:00:49 ----A---- C:\Windows\system32\ole32.dll
2018-01-12 19:00:49 ----A---- C:\Windows\system32\drivers\srv.sys
2018-01-12 19:00:48 ----A---- C:\Windows\system32\drivers\srv2.sys
2018-01-12 19:00:47 ----A---- C:\Windows\system32\sysmain.dll
2018-01-12 19:00:47 ----A---- C:\Windows\system32\msxml6.dll
2018-01-12 19:00:46 ----A---- C:\Windows\system32\KernelBase.dll
2018-01-12 19:00:46 ----A---- C:\Windows\system32\ExplorerFrame.dll
2018-01-12 19:00:46 ----A---- C:\Windows\system32\drivers\fltMgr.sys
2018-01-12 19:00:45 ----A---- C:\Windows\system32\win32k.sys
2018-01-12 19:00:44 ----A---- C:\Windows\system32\msfeeds.dll
2018-01-12 19:00:44 ----A---- C:\Windows\system32\iedkcs32.dll
2018-01-12 19:00:44 ----A---- C:\Windows\system32\FirewallAPI.dll
2018-01-12 19:00:43 ----A---- C:\Windows\system32\MPSSVC.dll
2018-01-12 19:00:43 ----A---- C:\Windows\system32\drivers\ndis.sys
2018-01-12 19:00:42 ----A---- C:\Windows\system32\rpcss.dll
2018-01-12 19:00:42 ----A---- C:\Windows\system32\inetcomm.dll
2018-01-12 19:00:42 ----A---- C:\Windows\system32\drivers\http.sys
2018-01-12 19:00:41 ----A---- C:\Windows\system32\spoolsv.exe
2018-01-12 19:00:41 ----A---- C:\Windows\system32\halmacpi.dll
2018-01-12 19:00:41 ----A---- C:\Windows\system32\hal.dll
2018-01-12 19:00:41 ----A---- C:\Windows\system32\conhost.exe
2018-01-12 19:00:40 ----A---- C:\Windows\system32\webcheck.dll
2018-01-12 19:00:40 ----A---- C:\Windows\system32\ieapfltr.dll
2018-01-12 19:00:40 ----A---- C:\Windows\system32\halacpi.dll
2018-01-12 19:00:40 ----A---- C:\Windows\system32\drivers\rdyboost.sys
2018-01-12 19:00:40 ----A---- C:\Windows\system32\authui.dll
2018-01-12 19:00:39 ----A---- C:\Windows\system32\winsrv.dll
2018-01-12 19:00:39 ----A---- C:\Windows\system32\dxtmsft.dll
2018-01-12 19:00:39 ----A---- C:\Windows\system32\consent.exe
2018-01-12 19:00:38 ----A---- C:\Windows\system32\pnrpsvc.dll
2018-01-12 19:00:38 ----A---- C:\Windows\system32\msrating.dll
2018-01-12 19:00:38 ----A---- C:\Windows\system32\drivers\dfsc.sys
2018-01-12 19:00:37 ----A---- C:\Windows\system32\p2psvc.dll
2018-01-12 19:00:37 ----A---- C:\Windows\system32\P2P.dll
2018-01-12 19:00:36 ----A---- C:\Windows\system32\icm32.dll
2018-01-12 19:00:36 ----A---- C:\Windows\system32\icfupgd.dll
2018-01-12 19:00:36 ----A---- C:\Windows\system32\drivers\srvnet.sys
2018-01-12 19:00:35 ----A---- C:\Windows\system32\ie4uinit.exe
2018-01-12 19:00:35 ----A---- C:\Windows\system32\fontsub.dll
2018-01-12 19:00:34 ----A---- C:\Windows\system32\mscms.dll
2018-01-12 19:00:34 ----A---- C:\Windows\system32\drivers\pacer.sys
2018-01-12 19:00:34 ----A---- C:\Windows\system32\appinfo.dll
2018-01-12 19:00:33 ----A---- C:\Windows\system32\drivers\netbios.sys
2018-01-12 19:00:32 ----A---- C:\Windows\system32\wfapigp.dll
2018-01-12 19:00:32 ----A---- C:\Windows\system32\traffic.dll
2018-01-12 19:00:32 ----A---- C:\Windows\system32\dxtrans.dll
2018-01-12 19:00:32 ----A---- C:\Windows\system32\drivers\mpsdrv.sys
2018-01-12 19:00:32 ----A---- C:\Windows\system32\atmlib.dll
2018-01-12 19:00:31 ----A---- C:\Windows\system32\wshqos.dll
2018-01-12 19:00:31 ----A---- C:\Windows\system32\wshnetbs.dll
2018-01-12 19:00:31 ----A---- C:\Windows\system32\jscript9diag.dll
2018-01-12 19:00:31 ----A---- C:\Windows\system32\INETRES.dll
2018-01-12 19:00:30 ----A---- C:\Windows\system32\WcsPlugInService.dll
2018-01-12 19:00:29 ----A---- C:\Windows\system32\mshtmled.dll
2018-01-12 19:00:28 ----A---- C:\Windows\system32\occache.dll
2018-01-12 19:00:28 ----A---- C:\Windows\system32\MshtmlDac.dll
2018-01-12 19:00:28 ----A---- C:\Windows\system32\jsproxy.dll
2018-01-12 19:00:28 ----A---- C:\Windows\system32\inseng.dll
2018-01-12 19:00:28 ----A---- C:\Windows\system32\ieUnatt.exe
2018-01-12 19:00:28 ----A---- C:\Windows\system32\ieetwproxystub.dll
2018-01-12 19:00:27 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2018-01-12 19:00:27 ----A---- C:\Windows\system32\iesetup.dll
2018-01-12 19:00:27 ----A---- C:\Windows\system32\iernonce.dll
2018-01-12 19:00:27 ----A---- C:\Windows\system32\ieetwcollector.exe
2018-01-12 19:00:25 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2018-01-12 19:00:25 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2018-01-12 19:00:25 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2018-01-12 19:00:25 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2018-01-12 19:00:25 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2018-01-12 19:00:25 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2018-01-12 19:00:25 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2018-01-12 19:00:25 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2018-01-12 19:00:25 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2018-01-12 19:00:25 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2018-01-12 19:00:25 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2018-01-12 19:00:25 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2018-01-12 19:00:25 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2018-01-12 19:00:25 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2018-01-12 19:00:25 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2018-01-12 19:00:25 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2018-01-12 19:00:25 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2018-01-12 19:00:25 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2018-01-12 19:00:25 ----A---- C:\Windows\system32\lpk.dll
2018-01-12 19:00:25 ----A---- C:\Windows\system32\dciman32.dll
2018-01-12 19:00:25 ----A---- C:\Windows\system32\comcat.dll
2018-01-12 19:00:24 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2018-01-12 19:00:24 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2018-01-12 19:00:24 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2018-01-12 19:00:24 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2018-01-12 19:00:24 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2018-01-12 19:00:24 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2018-01-12 19:00:24 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2018-01-12 19:00:24 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2018-01-12 19:00:24 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2018-01-12 19:00:24 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2018-01-12 19:00:22 ----A---- C:\Windows\system32\oleres.dll
2018-01-12 19:00:22 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2018-01-12 19:00:21 ----A---- C:\Windows\system32\msxml6r.dll
2018-01-12 18:40:06 ----A---- C:\Windows\system32\drivers\aswArPot.sys
2018-01-12 18:40:00 ----A---- C:\Windows\system32\drivers\aswHdsKe.sys
2018-01-12 18:38:35 ----A---- C:\Windows\system32\aswBoot.exe

======List of files/folders modified in the last 1 month======

2018-01-21 15:47:49 ----D---- C:\Windows\System32
2018-01-21 15:47:49 ----D---- C:\Windows\inf
2018-01-21 15:47:49 ----A---- C:\Windows\system32\PerfStringBackup.INI
2018-01-21 15:47:42 ----D---- C:\Windows\Temp
2018-01-21 15:47:05 ----D---- C:\Windows\system32\config
2018-01-21 15:41:21 ----HD---- C:\ProgramData
2018-01-20 10:02:55 ----D---- C:\Windows\winsxs
2018-01-20 10:02:05 ----D---- C:\Windows
2018-01-20 10:01:45 ----D---- C:\Program Files\Google
2018-01-20 09:58:56 ----D---- C:\Windows\system32\sk-SK
2018-01-20 09:58:56 ----D---- C:\Windows\system32\en-US
2018-01-20 09:58:56 ----D---- C:\Windows\system32\drivers
2018-01-20 09:57:56 ----SHD---- C:\Windows\Installer
2018-01-20 09:57:55 ----D---- C:\Windows\Microsoft.NET
2018-01-20 09:48:06 ----SHD---- C:\System Volume Information
2018-01-20 09:46:03 ----RD---- C:\Program Files
2018-01-20 09:43:36 ----D---- C:\Program Files\OpenOffice.org 3
2018-01-20 09:43:09 ----RSD---- C:\Windows\assembly
2018-01-20 09:39:45 ----D---- C:\Windows\system32\catroot2
2018-01-20 09:38:12 ----D---- C:\Windows\system32\Tasks
2018-01-20 09:29:41 ----D---- C:\Users\DUSAN\AppData\Roaming\uTorrent
2018-01-20 09:28:23 ----D---- C:\Windows\Panther
2018-01-20 09:28:23 ----D---- C:\Windows\Logs
2018-01-20 09:28:23 ----D---- C:\Windows\debug
2018-01-20 09:23:52 ----D---- C:\Windows\Prefetch
2018-01-20 09:14:48 ----D---- C:\Program Files\Ahead
2018-01-17 16:52:47 ----D---- C:\Windows\ehome
2018-01-17 16:52:47 ----D---- C:\Program Files\Internet Explorer
2018-01-17 16:52:41 ----D---- C:\Windows\AppPatch
2018-01-17 16:52:40 ----D---- C:\Windows\system32\migration
2018-01-17 16:52:40 ----D---- C:\Windows\system32\Boot
2018-01-17 16:36:54 ----D---- C:\Windows\system32\MRT
2018-01-17 16:23:27 ----AC---- C:\Windows\system32\MRT-KB890830.exe
2018-01-17 16:22:38 ----AC---- C:\Windows\system32\MRT.exe
2018-01-12 18:38:24 ----D---- C:\ProgramData\AVAST Software
2018-01-12 18:15:12 ----A---- C:\Windows\system32\FlashPlayerApp.exe
2018-01-12 18:15:00 ----D---- C:\Windows\system32\Macromed
2018-01-09 20:23:09 ----D---- C:\Program Files\Mozilla Maintenance Service
2018-01-09 20:23:08 ----D---- C:\Program Files\Mozilla Firefox
2018-01-09 12:56:45 ----D---- C:\Users\DUSAN\AppData\Roaming\vlc

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswbidsh;aswbidsh; C:\Windows\system32\drivers\aswbidshx.sys [2018-01-12 157376]
R0 aswblog;aswblog; C:\Windows\system32\drivers\aswblogx.sys [2018-01-12 276696]
R0 aswbuniv;aswbuniv; C:\Windows\system32\drivers\aswbunivx.sys [2018-01-12 50344]
R0 aswRvrt;aswRvrt; C:\Windows\system32\drivers\aswRvrt.sys [2018-01-12 70832]
R0 aswVmm;aswVmm; C:\Windows\system32\drivers\aswVmm.sys [2018-01-12 294680]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2018-01-01 173288]
R1 aswArPot;aswArPot; C:\Windows\system32\drivers\aswArPot.sys [2018-01-12 158224]
R1 aswbidsdriver;aswbidsdriver; C:\Windows\system32\drivers\aswbidsdriverx.sys [2018-01-12 255584]
R1 aswHdsKe;aswHdsKe; C:\Windows\system32\drivers\aswHdsKe.sys [2018-01-12 118144]
R1 aswKbd;aswKbd; C:\Windows\system32\drivers\aswKbd.sys [2017-07-26 39752]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2018-01-12 99528]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2018-01-12 783104]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2018-01-12 390256]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 48128]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2018-01-12 123880]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2018-01-12 151328]
R3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-13 229888]
R3 BCM43XX;Broadcom 802.11 Network Adapter Driver; C:\Windows\system32\DRIVERS\bcmwl6.sys [2009-07-08 2506232]
R3 BthEnum;Bluetooth Request Block Driver; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 34816]
R3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\drivers\bthpan.sys [2017-07-06 94208]
R3 BTHUSB;Bluetooth Radio USB Driver; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 60416]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2009-09-23 4808192]
R3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 129536]
R3 SrvHsfHDA;SrvHsfHDA; C:\Windows\system32\DRIVERS\VSTAZL3.SYS [2009-07-13 207360]
R3 SrvHsfV92;SrvHsfV92; C:\Windows\system32\DRIVERS\VSTDPV3.SYS [2009-07-13 980992]
R3 SrvHsfWinac;SrvHsfWinac; C:\Windows\system32\DRIVERS\VSTCNXT3.SYS [2009-07-13 661504]
R3 WinUsb;WinUSB Driver; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 35968]
S2 Parvdm;Parvdm; C:\Windows\system32\drivers\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\Windows\system32\drivers\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 aswHwid;aswHwid; C:\Windows\system32\drivers\aswHwid.sys [2018-01-12 42824]
S3 BTHPORT;Bluetooth Port Driver; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 393728]
S3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudbus.sys [2016-09-05 109184]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 14848]
S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudmdm.sys [2016-09-05 147072]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2013-10-02 49152]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-20 27264]
S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\drivers\viac7.sys [2009-07-14 52736]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2017-09-27 83984]
R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2018-01-12 301168]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2017-04-21 107656]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R3 aswbIDSAgent;aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [2018-01-12 5906816]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2018-01-12 272384]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2017-12-29 104960]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2018-01-07 175568]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S4 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2017-04-21 47224]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2017-04-21 136312]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2017-04-21 136312]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2017-04-21 136312]

-----------------EOF-----------------

Re: Prosim o preventivku, laptop niekedy spomaleny

Napsal: 21 led 2018 16:00
od Rudy
PL. Nastala nějaká změna?

Re: Prosim o preventivku, laptop niekedy spomaleny

Napsal: 21 led 2018 16:06
od klingoln
No, trochu je pomale spustenie prehliadaca (firefox), ale inak je to uz celkom zive. Je jasne, ze to idealne nebude, je to predsa uz len starsi model...

Re: Prosim o preventivku, laptop niekedy spomaleny

Napsal: 21 led 2018 17:23
od Rudy
Zkusíme ještě vyčistit prohlížeče. Spusťte postupně tyto utility:

1. Stahnete Zoek.exe http://download.bleepingcomputer.com/smeenk/zoek.exe a ulozte jej na plochu

Pokud pouzivate Win Vista ci W7, kliknete na Zoek pravym a dejte Run As Administrator ci Spustit jako spravce
Do okna vlozte skript nize




autoclean;
resethosts;
emptyclsid;
IEdefaults;
FFdefaults;
CHRdefaults;
emptyIEcache;
emptyFFcache;
emptyCHRcache;
emptyalltemp;
emptyflash;
emptyjava;
emptyrecycle.bin;





Nasledne kliknete na Run Script
PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem.

s

2. Junkware removal tool: http://www.stahuj.centrum.cz/utility_a_ ... oval-tool/
•Ulozte nejlepe na plochu
•Po spusteni se zobrazi licencni podminky, stisknete libovolnou klavesu
•Probehne vytvoreni zalohy a nasledne prohledavani
•Probehne skenovani a pak se objevi log, pripadne bude ulozen v c:\JRT jako JRT.txt, ten sem vlozte.

Re: Prosim o preventivku, laptop niekedy spomaleny

Napsal: 21 led 2018 19:29
od klingoln
Zdravim,
ten Zoek scan bezi uz skoro 2 hodiny, ma to trvat tak dlho?

Re: Prosim o preventivku, laptop niekedy spomaleny

Napsal: 21 led 2018 19:41
od klingoln
Zdravim,
tak uz to dobehlo, posielam logy:

ZOEK:

Zoek.exe v5.0.0.1 Updated 24-October-2017
Tool run by DUSAN on ne 21. 01. 2018 at 17:38:42,22.
Microsoft Windows 7 Home Premium 6.1.7601 Service Pack 1 x86
Running in: Normal Mode No Internet Access Detected
Launched: C:\Users\DUSAN\Desktop\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

21. 1. 2018 17:40:22 Zoek.exe System Restore Point Created Successfully.

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

# localhost name resolution is handled within DNS itself.
127.0.0.1 localhost
::1 localhost

==== FireFox Fix ======================

Deleted from C:\Users\DUSAN\AppData\Roaming\Mozilla\Firefox\Profiles\yrguymac.default-1516443437094\prefs.js:
user_pref("browser.startup.homepage", "www.google.sk");

Added to C:\Users\DUSAN\AppData\Roaming\Mozilla\Firefox\Profiles\yrguymac.default-1516443437094\prefs.js:
user_pref("browser.startup.homepage", "about:home");
user_pref("browser.newtab.url", "about:newtab");

==== Firefox Start and Search pages ======================

ProfilePath: C:\Users\DUSAN\AppData\Roaming\Mozilla\Firefox\Profiles\yrguymac.default-1516443437094
user_pref("browser.startup.homepage", "about:home");
user_pref("browser.newtab.url", "about:newtab");

==== Firefox Extensions ======================

AppDir: C:\Program Files\Mozilla Firefox
- Undetermined - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}.xpi

==== Firefox Plugins ======================

Profilepath: C:\Users\DUSAN\AppData\Roaming\Mozilla\Firefox\Profiles\yrguymac.default-1516443437094
6BB5C5D1119D901E6CF1C28C82A040E7 - C:\Windows\system32\Macromed\Flash\NPSWF32_28_0_0_137.dll - Shockwave Flash
10F6F32EABD6E39FBD56B803DB28FE8C - C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll - Adobe Acrobat
08C3C6B144EB5EBDE93263237C53DB14 - C:\Program Files\VideoLAN\VLC\npvlc.dll - VLC Web Plugin


==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"

==== All HKLM and HKCU SearchScopes ======================

HKLM\SearchScopes "DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
HKLM\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
HKCU\SearchScopes "DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
HKCU\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - http://www.bing.com/search?q={searchTer ... ORM=IESR02

==== Reset Google Chrome ======================

Nothing found to reset

==== Empty IE Cache ======================

C:\Users\DUSAN\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

==== Empty FireFox Cache ======================

C:\Users\DUSAN\AppData\Local\Mozilla\Firefox\Profiles\yrguymac.default-1516443437094\cache2 emptied successfully

==== Empty Chrome Cache ======================

No Chrome User Data found

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

No Java Cache Found

==== C:\zoek_backup content ======================

C:\zoek_backup (files=0 folders=0 0 bytes)

==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\DUSAN\AppData\Local\Temp will be emptied at reboot
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied
C:\Users\DUSAN\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== EOF on ne 21. 01. 2018 at 19:35:29,19 ======================



JRT

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.1.4 (07.09.2017)
Operating System: Windows 7 Home Premium x86
Ran by DUSAN (Administrator) on ne 21. 01. 2018 at 19:30:26,51
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




File System: 9

Successfully deleted: C:\Program Files\GUT106A.tmp (File)
Successfully deleted: C:\Users\DUSAN\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\MYLAACGF (Temporary Internet Files Folder)
Successfully deleted: C:\Users\DUSAN\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WI4DF16A (Temporary Internet Files Folder)
Successfully deleted: C:\Users\DUSAN\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XVOGOE65 (Temporary Internet Files Folder)
Successfully deleted: C:\Users\DUSAN\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZNELKYFH (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\MYLAACGF (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WI4DF16A (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XVOGOE65 (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZNELKYFH (Temporary Internet Files Folder)



Registry: 0





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on ne 21. 01. 2018 at 19:32:57,24
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Re: Prosim o preventivku, laptop niekedy spomaleny

Napsal: 21 led 2018 20:02
od Rudy
Změnilo se teď něco k lepšímu?

Re: Prosim o preventivku, laptop niekedy spomaleny

Napsal: 21 led 2018 20:08
od klingoln
No, je to lepsie, ale nie idealne. OS nabehne relativne rychlo, ale ked spustim browser, trva tak 30-60 sekund, kym sa spusti..

Re: Prosim o preventivku, laptop niekedy spomaleny

Napsal: 21 led 2018 20:59
od Rudy
Zkuste defragmentovat disk.

Re: Prosim o preventivku, laptop niekedy spomaleny

Napsal: 21 led 2018 22:07
od klingoln
Zdravim,
no vyzera to tak, ze defragmentacia pomohla, je to o dost lepsie...

Vdaka za pomoc

Re: Prosim o preventivku, laptop niekedy spomaleny

Napsal: 21 led 2018 22:16
od Rudy
Nemáte zač! :)
Všechny časy jsou v UTC+01:00
Stránka 1 z 1

Založeno na phpBB® Forum Software © phpBB Limited

Český překlad – phpBB.cz