Pomalý notebook - Podezření na vir

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz

Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Odpovědět
Zpráva
Autor
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Pomalý notebook - Podezření na vir

#16 Příspěvek od vyosek »

Dejte log dle tohoto http://forum.viry.cz/viewtopic.php?f=13&t=133100
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
Majkl55
Návštěvník
Návštěvník
Příspěvky: 70
Registrován: 15 Kvě 2008 12:20

Re: Pomalý notebook - Podezření na vir

#17 Příspěvek od Majkl55 »

Pořád se to dost seká. Co byste poradil jako další krok? Díky
Majkl55
Nahoru
Majkl55
Návštěvník
Návštěvník
Příspěvky: 70
Registrován: 15 Kvě 2008 12:20

Re: Pomalý notebook - Podezření na vir

#18 Příspěvek od Majkl55 »

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 16-02-2014
Ran by Ondra (administrator) on ONDRA-PC on 17-02-2014 22:12:50
Running from C:\Users\Ondra\Desktop
Microsoft® Windows Vista™ Home Premium Service Pack 2 (X86) OS Language: Czech
Internet Explorer Version 9
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\system32\SLsvc.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\SYSTEM32\WISPTIS.EXE
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe
(ASUS) C:\Program Files\ASUS\SmartLogon\smartlogon.exe
(ASUSTek Computer Inc.) C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe
() C:\Program Files\ASUS\ATK Hotkey\ASLDRSrv.exe
() C:\Program Files\ATKGFNEX\GFNEXSrv.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(Microsoft Corporation) C:\Windows\SYSTEM32\WISPTIS.EXE
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe
(ASUS) C:\Program Files\ASUS\SmartLogon\sensorsrv.exe
(ATK) C:\Program files\P4G\BatteryLife.exe
(ASUS) C:\Program Files\ASUS\ASUS CopyProtect\aspg.exe
() C:\Program Files\ASUS\ASUS Live Update\ALU.exe
(ASUS) C:\Program Files\ASUS\ATK Hotkey\MsgTranAgt.exe
(ASUS) C:\Program Files\ASUS\ATK Hotkey\HControl.exe
() C:\Program Files\Wireless Console 2\wcourier.exe
(ATK) C:\Program Files\ASUS\Splendid\ACMON.exe
(ASUS) C:\Program Files\ASUS\ATK Hotkey\ATKOSD.exe
(ASUS) C:\Program Files\ASUS\ATK Hotkey\KBFiltr.exe
(ASUS) C:\Program Files\ASUS\ATK Hotkey\WDC.exe
(ASUSTeK) C:\Windows\System32\ACEngSvr.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\ekrn.exe
(Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LSSrvc.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
(Vodafone) C:\Program Files\Vodafone\Vodafone Mobile Connect\Bin\VMCService.exe
(Microsoft Corporation) C:\Windows\system32\conime.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCui.exe
(CyberLink) C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe
(ASUS) C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe
(ASUS) C:\Program Files\ASUS\ATKOSD2\ATKOSD2.exe
(ASUS) C:\Program Files\ASUS\ATK Media\DMedia.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(ASUSTek Computer Inc.) C:\Program Files\ASUS\ASUS Data Security Manager\ADSMTray.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(ASUS) C:\Windows\AsScrPro.exe
(Vodafone) C:\Program Files\Vodafone\Vodafone Mobile Connect\Bin\MobileConnect.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe
(SMART Technologies ULC) C:\Program Files\SMART Technologies\SMART Board Drivers\SMARTSNMPAgent.exe
(SMART Technologies) C:\Program Files\SMART Technologies\SMART Board Drivers\SMARTBoardService.exe
(Apple Inc.) C:\Program Files\QuickTime\qttask.exe
(Microsoft Corporation) C:\Windows\ehome\ehtray.exe
(SRS Labs, Inc.) C:\Program Files\SRS Labs\SRS Premium Sound\SRSPremiumSoundBig_Small.exe
(Google Inc.) C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(SMART Technologies ULC) C:\Program Files\SMART Technologies\SMART Board Drivers\SMARTBoardTools.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
(Microsoft Corporation) C:\Windows\ehome\ehmsas.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe
(SMART Technologies ULC) C:\Program Files\SMART Technologies\SMART Board Drivers\Aware.exe
(SMART Technologies ULC) C:\Program Files\SMART Technologies\SMART Board Drivers\Marker.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Windows\system32\wuauclt.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Google Inc.) C:\Program Files\Google\Google Toolbar\GoogleToolbarUser_32.exe
(Adobe Systems Incorporated) C:\Windows\system32\Macromed\Flash\FlashUtil32_12_0_0_44_ActiveX.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Windows Defender] - C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-21] (Microsoft Corporation)
HKLM\...\Run: [CLMLServer] - C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe [104936 2008-07-19] (CyberLink)
HKLM\...\Run: [P2Go_Menu] - C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe [210216 2008-06-14] (CyberLink Corp.)
HKLM\...\Run: [HControlUser] - C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe [98304 2008-08-18] (ASUS)
HKLM\...\Run: [ATKOSD2] - C:\Program Files\ASUS\ATKOSD2\ATKOSD2.exe [8105984 2008-09-03] (ASUS)
HKLM\...\Run: [ATKMEDIA] - C:\Program Files\ASUS\ATK Media\DMedia.exe [159744 2008-12-29] (ASUS)
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [6711840 2009-02-11] (Realtek Semiconductor)
HKLM\...\Run: [ADSMTray] - C:\Program Files\ASUS\ASUS Data Security Manager\ADSMTray.exe [266240 2008-04-01] (ASUSTek Computer Inc.)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1029416 2007-12-06] (Synaptics, Inc.)
HKLM\...\Run: [ACMON] - C:\Program Files\ASUS\Splendid\ACMON.exe [851968 2008-10-01] (ATK)
HKLM\...\Run: [ASUS Screen Saver Protector] - C:\Windows\AsScrPro.exe [3054136 2009-06-10] (ASUS)
HKLM\...\Run: [ASUS Camera ScreenSaver] - C:\Windows\AsScrProlog.exe [47672 2009-06-10] ()
HKLM\...\Run: [MobileConnect] - C:\Program Files\Vodafone\Vodafone Mobile Connect\Bin\MobileConnect.exe [2086912 2008-10-09] (Vodafone)
HKLM\...\Run: [GrooveMonitor] - C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM\...\Run: [NvCplDaemon] - C:\Windows\system32\NvCpl.dll [13789728 2009-07-02] (NVIDIA Corporation)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [] - [X]
HKLM\...\Run: [egui] - C:\Program Files\ESET\ESET Smart Security\egui.exe [3076144 2011-08-09] (ESET)
HKLM\...\Run: [SMART SNMP Agent] - C:\Program Files\SMART Technologies\SMART Board Drivers\SMARTSNMPAgent.exe [1037608 2008-07-31] (SMART Technologies ULC)
HKLM\...\Run: [SMART Board Service] - C:\Program Files\SMART Technologies\SMART Board Drivers\SMARTBoardService.exe [2123048 2008-08-08] (SMART Technologies)
HKLM\...\Run: [QuickTime Task] - C:\Program Files\QuickTime\qttask.exe [421888 2011-06-15] (Apple Inc.)
HKU\S-1-5-19\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\S-1-5-20\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\S-1-5-21-3134179490-1787442154-2696964708-1000\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\S-1-5-21-3134179490-1787442154-2696964708-1000\...\Run: [ehTray.exe] - C:\Windows\ehome\ehTray.exe [125952 2008-01-21] (Microsoft Corporation)
HKU\S-1-5-21-3134179490-1787442154-2696964708-1000\...\Run: [DAEMON Tools Lite] - C:\Program Files\DAEMON Tools Lite\DTLite.exe [3671904 2012-08-28] (DT Soft Ltd)
HKU\S-1-5-21-3134179490-1787442154-2696964708-1000\...\Run: [SRS Premium Sound] - C:\Program Files\SRS Labs\SRS Premium Sound\SRSPremiumSoundBig_Small.exe [3257592 2009-03-05] (SRS Labs, Inc.)
HKU\S-1-5-21-3134179490-1787442154-2696964708-1000\...\Run: [swg] - C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2009-06-10] (Google Inc.)
HKU\S-1-5-21-3134179490-1787442154-2696964708-1000\...\Run: [SearchProtection] - "C:\Users\Ondra\AppData\Roaming\Search Protection\SearchProtection.EXE" /autostart
HKU\S-1-5-21-3134179490-1787442154-2696964708-1000\...\MountPoints2: J - J:\setup_vmc_lite.exe /checkApplicationPresence
HKU\S-1-5-21-3134179490-1787442154-2696964708-1000\...\MountPoints2: {03e3fcdf-b50e-11de-bcf2-806e6f6e6963} - I:\setup_vmc_lite.exe /checkApplicationPresence
HKU\S-1-5-21-3134179490-1787442154-2696964708-1000\...\MountPoints2: {2fb50ba3-8de1-11df-9dc1-002618369cd6} - K:\InstallTomTomHOME.exe
HKU\S-1-5-21-3134179490-1787442154-2696964708-1000\...\MountPoints2: {548139f8-994d-11de-a75b-806e6f6e6963} - J:\setup_vmc_lite.exe /checkApplicationPresence
HKU\S-1-5-21-3134179490-1787442154-2696964708-1000\...\MountPoints2: {66748417-6c0d-11de-9f97-002618369cd6} - H:\SETUP.EXE
HKU\S-1-5-21-3134179490-1787442154-2696964708-1000\...\MountPoints2: {74c29eba-a09b-11de-bdb7-002618369cd6} - I:\LiteAuto.exe
HKU\S-1-5-21-3134179490-1787442154-2696964708-1000\...\MountPoints2: {a8ee3017-2733-11e0-93f0-002618369cd6} - I:\setup_vmc_lite.exe /checkApplicationPresence
HKU\S-1-5-21-3134179490-1787442154-2696964708-1000\...\MountPoints2: {a8ee3019-2733-11e0-93f0-002618369cd6} - I:\setup_vmc_lite.exe /checkApplicationPresence
HKU\S-1-5-21-3134179490-1787442154-2696964708-1000\...\MountPoints2: {d4d216d1-7bc1-11de-9bef-002618369cd6} - I:\setup_vmc_lite.exe /checkApplicationPresence
HKU\S-1-5-21-3134179490-1787442154-2696964708-1000\...\MountPoints2: {d4d216ef-7bc1-11de-9bef-002618369cd6} - I:\setup_vmc_lite.exe /checkApplicationPresence
HKU\S-1-5-21-3134179490-1787442154-2696964708-1000\...\MountPoints2: {d4d21722-7bc1-11de-9bef-002618369cd6} - I:\setup_vmc_lite.exe /checkApplicationPresence
HKU\S-1-5-21-3134179490-1787442154-2696964708-1000\...\MountPoints2: {d4d2172a-7bc1-11de-9bef-002618369cd6} - J:\setup_vmc_lite.exe /checkApplicationPresence
AppInit_DLLs: c:\progra~1\gse7cc~1.ena => File Not Found
Lsa: [Notification Packages] scecli C:\Program Files\ASUS\ASUS Data Security Manager\ASPWDFLT
Startup: C:\Users\Ondra\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk
ShortcutTarget: Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk -> C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = http://startsear.ch/?aff=1&q={searchTerms}
SearchScopes: HKLM - {A8BD5B79-93F2-41E5-8180-A5EB5B5F5A08} URL = http://www.google.com/search?sourceid=i ... lz=1I7ASUS
SearchScopes: HKCU - DefaultScope {A8BD5B79-93F2-41E5-8180-A5EB5B5F5A08} URL = http://www.google.com/search?sourceid=i ... US_csCZ333
SearchScopes: HKCU - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = http://www.google.co.uk/search?sourceid ... US_csCZ333
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={searchT ... {startPage}
SearchScopes: HKCU - {A8BD5B79-93F2-41E5-8180-A5EB5B5F5A08} URL = http://www.google.com/search?sourceid=i ... US_csCZ333
BHO: CIEDownload Object - {67BCF957-85FC-4036-8DC4-D4D80E00A77B} - C:\Program Files\SMART Technologies\Notebook Software\NotebookPlugin.dll (SMART Technologies ULC.)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
DPF: {44990B00-3C9D-426D-81DF-AAB636FA4345} https://www-secure.symantec.com/techsup ... gctlcm.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/s ... wflash.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Winsock: Catalog5 02 %SystemRoot%\system32\napinsp.dll [50176] (Společnost Microsoft)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{400211BB-8E7D-476A-B18B-BADBBB9EDD13}: [NameServer]10.255.255.10,10.255.255.20

FireFox:
========
FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @google.com/npPicasa3,version=3.0.0 - C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.3 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin: @microsoft.com/OfficeLive,version=1.4 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin: @microsoft.com/WLPG,version=14.0.8051.1204 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @pack.google.com/Google Updater;version=14 - C:\Program Files\Google\Google Updater\2.4.2432.1652\npCIDetect14.dll (Google)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ []
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird
FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2013-01-01]

========================== Services (Whitelisted) =================

R2 ADSMService; C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe [225280 2008-03-31] (ASUSTek Computer Inc.)
R2 ASLDRService; C:\Program Files\ASUS\ATK Hotkey\ASLDRSrv.exe [100920 2008-08-14] ()
R2 ATKGFNEXSrv; C:\Program Files\ATKGFNEX\GFNEXSrv.exe [94208 2007-08-08] ()
R2 ekrn; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [974944 2011-08-09] (ESET)
S2 gupdate1ca06351bc16190; C:\Program Files\Google\Update\GoogleUpdate.exe [133104 2009-07-16] (Google Inc.)
R2 MBAMScheduler; C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 VMCService; C:\Program Files\Vodafone\Vodafone Mobile Connect\Bin\VMCService.exe [14336 2008-10-09] (Vodafone)
S2 916e5338; "C:\Windows\system32\rundll32.exe" "c:\progra~1\GSSvc.dll",service

==================== Drivers (Whitelisted) ====================

R0 AsDsm; C:\Windows\system32\Drivers\AsDsm.sys [30264 2009-06-10] (ASUSTek Computer Inc)
R2 ASMMAP; C:\Program Files\ATKGFNEX\ASMMAP.sys [13880 2007-07-24] ()
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [242240 2012-10-07] (DT Soft Ltd)
R2 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [163424 2011-08-09] (ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [118104 2011-08-04] (ESET)
R2 epfw; C:\Windows\System32\DRIVERS\epfw.sys [147480 2011-08-04] (ESET)
R1 EpfwLWF; C:\Windows\System32\DRIVERS\EpfwLWF.sys [33656 2011-08-04] (ESET)
R0 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [50624 2011-08-04] (ESET)
R0 FltMgr; C:\Windows\System32\drivers\fltmgr.sys [190424 2009-04-11] (Společnost Microsoft)
R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15928 2008-06-03] ( )
R0 lullaby; C:\Windows\System32\DRIVERS\lullaby.sys [15416 2008-05-29] (Windows (R) Codename Longhorn DDK provider)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [22856 2013-04-04] (Malwarebytes Corporation)
R3 MTsensor; C:\Windows\System32\DRIVERS\ATKACPI.sys [7680 2006-12-14] (ATK0100)
R3 Ntfs; C:\Windows\system32\Drivers\Ntfs.sys [1083880 2009-04-11] (Společnost Microsoft)
R3 SMARTMouseFilterx86; C:\Windows\System32\DRIVERS\SMARTMouseFilterx86.sys [11048 2008-07-30] (SMART Technologies ULC)
R3 SMARTVHidMini2000x86; C:\Windows\System32\DRIVERS\SMARTVHidMini2000x86.sys [14120 2008-07-30] (SMART Technologies ULC)
R3 SMARTVTabletPCx86; C:\Windows\System32\DRIVERS\SMARTVTabletPCx86.sys [16808 2008-07-30] (SMART Technologies ULC)
R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1753984 2009-03-16] ()
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [717296 2009-07-08] ()
R3 SRS_PremiumSound_Service; C:\Windows\System32\drivers\srs_PremiumSound_i386.sys [230952 2009-01-14] ()
U3 a3qff9o1; C:\Windows\system32\Drivers\a3qff9o1.sys [0 ] (Microsoft Corporation)
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-02-17 22:12 - 2014-02-17 22:13 - 00019477 _____ () C:\Users\Ondra\Desktop\FRST.txt
2014-02-17 22:11 - 2014-02-17 22:11 - 00015327 _____ () C:\Users\Ondra\AppData\Local\LM.bat
2014-02-17 22:09 - 2014-02-17 22:11 - 00029696 _____ () C:\Users\Ondra\AppData\Local\MSGBOX.EXE
2014-02-17 22:09 - 2014-02-17 22:09 - 00112640 _____ (forum.viry.cz) C:\Users\Ondra\Desktop\FRSTLauncher.exe
2014-02-17 22:09 - 2014-02-17 22:09 - 00015327 _____ () C:\Users\Ondra\Desktop\LM.bat
2014-02-17 22:08 - 2014-02-17 22:12 - 00000000 ____D () C:\FRST
2014-02-17 22:08 - 2014-02-17 22:08 - 01141248 _____ (Farbar) C:\Users\Ondra\Desktop\FRST.exe
2014-02-17 21:56 - 2014-02-17 21:16 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-02-17 21:33 - 2014-02-16 12:24 - 00008093 _____ () C:\zoek-results2014-02-16-122447.log
2014-02-16 12:07 - 2014-02-16 03:18 - 00020694 _____ () C:\zoek-results2014-02-16-031835.log
2014-02-15 18:07 - 2014-02-17 22:00 - 00008594 _____ () C:\zoek-results.log
2014-02-15 18:00 - 2014-02-15 18:01 - 01283584 _____ () C:\Users\Ondra\Desktop\zoek.exe
2014-02-11 21:02 - 2014-02-11 21:02 - 00000000 ____D () C:\ProgramData\WindowsSearch
2014-02-09 22:52 - 2014-02-09 22:13 - 00000419 _____ () C:\zoek-results2014-02-09-221302.log
2014-02-09 22:09 - 2014-02-16 00:01 - 00000000 ____D () C:\zoek_backup
2014-02-09 13:10 - 2014-02-17 21:59 - 00006218 _____ () C:\Windows\PFRO.log
2014-02-08 19:49 - 2014-02-09 13:39 - 00000000 ____D () C:\Program Files\Malwarebytes' Anti-Malware
2014-02-08 19:49 - 2014-02-09 13:37 - 00000913 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-02-08 19:49 - 2014-02-08 19:49 - 00000000 ____D () C:\Users\Ondra\AppData\Roaming\Malwarebytes
2014-02-08 19:49 - 2014-02-08 19:49 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-02-08 19:49 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-02-08 19:48 - 2014-02-08 19:48 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Ondra\Desktop\mbam-setup-1.75.0.1300.exe
2014-02-08 17:36 - 2014-02-08 17:36 - 00000000 ____D () C:\rsit
2014-02-08 17:21 - 2014-02-16 17:37 - 00000000 ____D () C:\AdwCleaner
2014-02-08 17:09 - 2014-02-08 17:20 - 01166132 _____ () C:\Users\Ondra\Desktop\adwcleaner.exe
2014-02-06 20:58 - 2014-02-06 20:58 - 00000000 ____D () C:\ProgramData\UTubeNooAds
2014-02-02 16:24 - 2014-02-02 16:27 - 00000000 ____D () C:\Windows\system32\MRT
2014-01-31 20:40 - 2014-01-31 20:40 - 00000000 ____D () C:\ProgramData\UTiubeAdBlock
2014-01-31 20:40 - 2014-01-31 20:40 - 00000000 ____D () C:\ProgramData\ggcmfjgbkdpknngfcdeedaoomenlenkl
2014-01-19 18:32 - 2014-02-09 15:23 - 00000000 ____D () C:\ProgramData\YoutubeAdblocker
2014-01-19 18:32 - 2014-02-09 15:23 - 00000000 ____D () C:\ProgramData\greAttsaver
2014-01-19 18:32 - 2014-02-06 20:58 - 00000000 ____D () C:\ProgramData\dfbcdfee34f10b72
2014-01-19 18:32 - 2014-01-19 18:32 - 00000000 ____D () C:\Users\Ondra\AppData\Local\Comodo
2014-01-19 18:32 - 2014-01-19 18:32 - 00000000 ____D () C:\Users\Guest\AppData\Local\Torch
2014-01-19 18:32 - 2014-01-19 18:32 - 00000000 ____D () C:\Users\Guest\AppData\Local\Google
2014-01-19 18:32 - 2014-01-19 18:32 - 00000000 ____D () C:\Users\Guest\AppData\Local\Comodo
2014-01-19 18:32 - 2014-01-19 18:32 - 00000000 ____D () C:\Users\Guest
2014-01-19 18:32 - 2014-01-19 18:32 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Torch
2014-01-19 18:32 - 2014-01-19 18:32 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Google
2014-01-19 18:32 - 2014-01-19 18:32 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Comodo
2014-01-19 18:32 - 2014-01-19 18:32 - 00000000 ____D () C:\Users\Administrator
2014-01-19 18:32 - 2014-01-19 18:32 - 00000000 ____D () C:\ProgramData\House Of Soft
2014-01-19 18:30 - 2014-01-19 18:36 - 00000000 ____D () C:\ProgramData\InstallMate

==================== One Month Modified Files and Folders =======

2014-02-17 22:13 - 2014-02-17 22:12 - 00019477 _____ () C:\Users\Ondra\Desktop\FRST.txt
2014-02-17 22:12 - 2014-02-17 22:08 - 00000000 ____D () C:\FRST
2014-02-17 22:11 - 2014-02-17 22:11 - 00015327 _____ () C:\Users\Ondra\AppData\Local\LM.bat
2014-02-17 22:11 - 2014-02-17 22:09 - 00029696 _____ () C:\Users\Ondra\AppData\Local\MSGBOX.EXE
2014-02-17 22:09 - 2014-02-17 22:09 - 00112640 _____ (forum.viry.cz) C:\Users\Ondra\Desktop\FRSTLauncher.exe
2014-02-17 22:09 - 2014-02-17 22:09 - 00015327 _____ () C:\Users\Ondra\Desktop\LM.bat
2014-02-17 22:08 - 2014-02-17 22:08 - 01141248 _____ (Farbar) C:\Users\Ondra\Desktop\FRST.exe
2014-02-17 22:06 - 2006-11-02 10:33 - 01393902 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-17 22:01 - 2009-06-25 20:54 - 00031871 _____ () C:\ProgramData\nvModes.001
2014-02-17 22:01 - 2009-06-10 04:39 - 00000000 ___HD () C:\ASUS.DAT
2014-02-17 22:00 - 2014-02-15 18:07 - 00008594 _____ () C:\zoek-results.log
2014-02-17 21:59 - 2014-02-09 13:10 - 00006218 _____ () C:\Windows\PFRO.log
2014-02-17 21:59 - 2013-02-19 10:13 - 00000936 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-02-17 21:59 - 2013-01-04 01:11 - 00045056 _____ () C:\Windows\system32\acovcnt.exe
2014-02-17 21:59 - 2009-06-25 20:53 - 00031871 _____ () C:\ProgramData\nvModes.dat
2014-02-17 21:59 - 2006-11-02 13:01 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-17 21:59 - 2006-11-02 12:47 - 00003616 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-17 21:59 - 2006-11-02 12:47 - 00003616 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-17 21:58 - 2006-11-02 13:01 - 00032566 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-02-17 21:57 - 2009-06-10 04:09 - 00000012 _____ () C:\Windows\bthservsdp.dat
2014-02-17 21:57 - 2009-06-10 03:37 - 01980783 _____ () C:\Windows\WindowsUpdate.log
2014-02-17 21:52 - 2009-07-31 14:13 - 00000000 ____D () C:\Users\Ondra\AppData\Roaming\Skype
2014-02-17 21:45 - 2013-02-19 10:13 - 00000940 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-02-17 21:17 - 2013-03-31 19:13 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-02-17 21:16 - 2014-02-17 21:56 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-02-16 17:37 - 2014-02-08 17:21 - 00000000 ____D () C:\AdwCleaner
2014-02-16 14:44 - 2013-01-03 21:21 - 00000924 _____ () C:\Windows\Tasks\Google Software Updater.job
2014-02-16 12:24 - 2014-02-17 21:33 - 00008093 _____ () C:\zoek-results2014-02-16-122447.log
2014-02-16 03:18 - 2014-02-16 12:07 - 00020694 _____ () C:\zoek-results2014-02-16-031835.log
2014-02-16 00:01 - 2014-02-09 22:09 - 00000000 ____D () C:\zoek_backup
2014-02-15 18:01 - 2014-02-15 18:00 - 01283584 _____ () C:\Users\Ondra\Desktop\zoek.exe
2014-02-11 21:02 - 2014-02-11 21:02 - 00000000 ____D () C:\ProgramData\WindowsSearch
2014-02-09 22:13 - 2014-02-09 22:52 - 00000419 _____ () C:\zoek-results2014-02-09-221302.log
2014-02-09 15:23 - 2014-01-19 18:32 - 00000000 ____D () C:\ProgramData\YoutubeAdblocker
2014-02-09 15:23 - 2014-01-19 18:32 - 00000000 ____D () C:\ProgramData\greAttsaver
2014-02-09 15:23 - 2012-09-30 14:01 - 00000000 ____D () C:\ProgramData\YTD YouTube Downloader & Converter
2014-02-09 13:39 - 2014-02-08 19:49 - 00000000 ____D () C:\Program Files\Malwarebytes' Anti-Malware
2014-02-09 13:37 - 2014-02-08 19:49 - 00000913 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-02-08 19:49 - 2014-02-08 19:49 - 00000000 ____D () C:\Users\Ondra\AppData\Roaming\Malwarebytes
2014-02-08 19:49 - 2014-02-08 19:49 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-02-08 19:48 - 2014-02-08 19:48 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Ondra\Desktop\mbam-setup-1.75.0.1300.exe
2014-02-08 18:40 - 2009-08-15 18:43 - 00000000 ____D () C:\Windows\Minidump
2014-02-08 18:40 - 2009-07-04 20:55 - 00000000 ____D () C:\Users\Ondra\AppData\Roaming\uTorrent
2014-02-08 17:36 - 2014-02-08 17:36 - 00000000 ____D () C:\rsit
2014-02-08 17:36 - 2012-12-09 12:48 - 00000000 ____D () C:\Program Files\trend micro
2014-02-08 17:20 - 2014-02-08 17:09 - 01166132 _____ () C:\Users\Ondra\Desktop\adwcleaner.exe
2014-02-06 21:17 - 2012-04-03 18:06 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-02-06 21:17 - 2011-09-14 19:34 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-02-06 21:06 - 2009-07-16 16:49 - 00001978 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-02-06 20:58 - 2014-02-06 20:58 - 00000000 ____D () C:\ProgramData\UTubeNooAds
2014-02-06 20:58 - 2014-01-19 18:32 - 00000000 ____D () C:\ProgramData\dfbcdfee34f10b72
2014-02-06 20:58 - 2009-09-15 19:17 - 00000270 __RSH () C:\ProgramData\ntuser.pol
2014-02-06 20:30 - 2006-11-02 11:18 - 00000000 ____D () C:\Windows\system32\Msdtc
2014-02-06 20:29 - 2009-06-25 17:16 - 00000000 ____D () C:\Users\Ondra
2014-02-06 20:29 - 2006-11-02 10:22 - 51642368 _____ () C:\Windows\system32\config\software_previous
2014-02-06 20:29 - 2006-11-02 10:22 - 45875200 _____ () C:\Windows\system32\config\system_previous
2014-02-06 20:29 - 2006-11-02 10:22 - 44302336 _____ () C:\Windows\system32\config\components_previous
2014-02-06 20:29 - 2006-11-02 10:22 - 00262144 _____ () C:\Windows\system32\config\security_previous
2014-02-06 20:29 - 2006-11-02 10:22 - 00262144 _____ () C:\Windows\system32\config\sam_previous
2014-02-06 20:29 - 2006-11-02 10:22 - 00262144 _____ () C:\Windows\system32\config\default_previous
2014-02-06 20:28 - 2009-06-10 04:41 - 00000000 ____D () C:\ProgramData\P4G
2014-02-06 20:28 - 2009-06-10 04:18 - 00000000 ____D () C:\Windows\system32\RTCOM
2014-02-06 20:28 - 2009-06-10 03:44 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-02-06 20:28 - 2006-11-02 12:37 - 00000000 ____D () C:\Windows\ShellNew
2014-02-06 20:28 - 2006-11-02 11:18 - 00000000 __RSD () C:\Windows\Media
2014-02-06 20:28 - 2006-11-02 11:18 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2014-02-06 20:28 - 2006-11-02 11:18 - 00000000 ____D () C:\Windows\system32\spool
2014-02-06 20:28 - 2006-11-02 11:18 - 00000000 ____D () C:\Windows\rescache
2014-02-06 20:27 - 2006-11-02 11:18 - 00000000 ____D () C:\Windows\registration
2014-02-03 20:50 - 2006-11-02 11:18 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-02-02 16:39 - 2009-06-10 03:49 - 00000000 ____D () C:\Program Files\Microsoft.NET
2014-02-02 16:27 - 2014-02-02 16:24 - 00000000 ____D () C:\Windows\system32\MRT
2014-01-31 20:40 - 2014-01-31 20:40 - 00000000 ____D () C:\ProgramData\UTiubeAdBlock
2014-01-31 20:40 - 2014-01-31 20:40 - 00000000 ____D () C:\ProgramData\ggcmfjgbkdpknngfcdeedaoomenlenkl
2014-01-19 21:08 - 2009-06-25 17:55 - 00009728 _____ () C:\Users\Ondra\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-01-19 18:36 - 2014-01-19 18:30 - 00000000 ____D () C:\ProgramData\InstallMate
2014-01-19 18:32 - 2014-01-19 18:32 - 00000000 ____D () C:\Users\Ondra\AppData\Local\Comodo
2014-01-19 18:32 - 2014-01-19 18:32 - 00000000 ____D () C:\Users\Guest\AppData\Local\Torch
2014-01-19 18:32 - 2014-01-19 18:32 - 00000000 ____D () C:\Users\Guest\AppData\Local\Google
2014-01-19 18:32 - 2014-01-19 18:32 - 00000000 ____D () C:\Users\Guest\AppData\Local\Comodo
2014-01-19 18:32 - 2014-01-19 18:32 - 00000000 ____D () C:\Users\Guest
2014-01-19 18:32 - 2014-01-19 18:32 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Torch
2014-01-19 18:32 - 2014-01-19 18:32 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Google
2014-01-19 18:32 - 2014-01-19 18:32 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Comodo
2014-01-19 18:32 - 2014-01-19 18:32 - 00000000 ____D () C:\Users\Administrator
2014-01-19 18:32 - 2014-01-19 18:32 - 00000000 ____D () C:\ProgramData\House Of Soft
2014-01-19 18:32 - 2009-06-25 17:34 - 00000000 ____D () C:\Users\Ondra\AppData\Local\Google

Files to move or delete:
====================
C:\Users\Ondra\AppData\Roaming\desktop.ini


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\system32\winlogon.exe => MD5 is legit
C:\Windows\system32\wininit.exe => MD5 is legit
C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\services.exe => MD5 is legit
C:\Windows\system32\User32.dll => MD5 is legit
C:\Windows\system32\userinit.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit
C:\Windows\system32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-02-17 22:05

==================== End Of Log ============================
Majkl55
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Pomalý notebook - Podezření na vir

#19 Příspěvek od vyosek »

:arrow: Tvorba fixlistu pro FRST
  • Spustte poznamkovy blok (Start-spustit-notepad)
  • Zkopirujte skript nize

  • Kód: Vybrat vše

    Start
HKLM\...\Run: [GrooveMonitor] - C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [] - [X]
HKLM\...\Run: [QuickTime Task] - C:\Program Files\QuickTime\qttask.exe [421888 2011-06-15] (Apple Inc.)
HKU\S-1-5-19\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\S-1-5-20\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\S-1-5-21-3134179490-1787442154-2696964708-1000\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\S-1-5-21-3134179490-1787442154-2696964708-1000\...\Run: [ehTray.exe] - C:\Windows\ehome\ehTray.exe [125952 2008-01-21] (Microsoft Corporation)
HKU\S-1-5-21-3134179490-1787442154-2696964708-1000\...\Run: [DAEMON Tools Lite] - C:\Program Files\DAEMON Tools Lite\DTLite.exe [3671904 2012-08-28] (DT Soft Ltd)
HKU\S-1-5-21-3134179490-1787442154-2696964708-1000\...\Run: [SRS Premium Sound] - C:\Program Files\SRS Labs\SRS Premium Sound\SRSPremiumSoundBig_Small.exe [3257592 2009-03-05] (SRS Labs, Inc.)
HKU\S-1-5-21-3134179490-1787442154-2696964708-1000\...\Run: [swg] - C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2009-06-10] (Google Inc.)
HKU\S-1-5-21-3134179490-1787442154-2696964708-1000\...\Run: [SearchProtection] - "C:\Users\Ondra\AppData\Roaming\Search Protection\SearchProtection.EXE" /autostart
HKU\S-1-5-21-3134179490-1787442154-2696964708-1000\...\MountPoints2: J - J:\setup_vmc_lite.exe /checkApplicationPresence
HKU\S-1-5-21-3134179490-1787442154-2696964708-1000\...\MountPoints2: {03e3fcdf-b50e-11de-bcf2-806e6f6e6963} - I:\setup_vmc_lite.exe /checkApplicationPresence
HKU\S-1-5-21-3134179490-1787442154-2696964708-1000\...\MountPoints2: {2fb50ba3-8de1-11df-9dc1-002618369cd6} - K:\InstallTomTomHOME.exe
HKU\S-1-5-21-3134179490-1787442154-2696964708-1000\...\MountPoints2: {548139f8-994d-11de-a75b-806e6f6e6963} - J:\setup_vmc_lite.exe /checkApplicationPresence
HKU\S-1-5-21-3134179490-1787442154-2696964708-1000\...\MountPoints2: {66748417-6c0d-11de-9f97-002618369cd6} - H:\SETUP.EXE
HKU\S-1-5-21-3134179490-1787442154-2696964708-1000\...\MountPoints2: {74c29eba-a09b-11de-bdb7-002618369cd6} - I:\LiteAuto.exe
HKU\S-1-5-21-3134179490-1787442154-2696964708-1000\...\MountPoints2: {a8ee3017-2733-11e0-93f0-002618369cd6} - I:\setup_vmc_lite.exe /checkApplicationPresence
HKU\S-1-5-21-3134179490-1787442154-2696964708-1000\...\MountPoints2: {a8ee3019-2733-11e0-93f0-002618369cd6} - I:\setup_vmc_lite.exe /checkApplicationPresence
HKU\S-1-5-21-3134179490-1787442154-2696964708-1000\...\MountPoints2: {d4d216d1-7bc1-11de-9bef-002618369cd6} - I:\setup_vmc_lite.exe /checkApplicationPresence
HKU\S-1-5-21-3134179490-1787442154-2696964708-1000\...\MountPoints2: {d4d216ef-7bc1-11de-9bef-002618369cd6} - I:\setup_vmc_lite.exe /checkApplicationPresence
HKU\S-1-5-21-3134179490-1787442154-2696964708-1000\...\MountPoints2: {d4d21722-7bc1-11de-9bef-002618369cd6} - I:\setup_vmc_lite.exe /checkApplicationPresence
HKU\S-1-5-21-3134179490-1787442154-2696964708-1000\...\MountPoints2: {d4d2172a-7bc1-11de-9bef-002618369cd6} - J:\setup_vmc_lite.exe /checkApplicationPresence
AppInit_DLLs: c:\progra~1\gse7cc~1.ena => File Not Found
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = http://startsear.ch/?aff=1&q={searchTerms}
SearchScopes: HKLM - {A8BD5B79-93F2-41E5-8180-A5EB5B5F5A08} URL = http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ASUS
SearchScopes: HKCU - DefaultScope {A8BD5B79-93F2-41E5-8180-A5EB5B5F5A08} URL = http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ASUS_csCZ333
SearchScopes: HKCU - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = http://www.google.co.uk/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ASUS_csCZ333
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}
SearchScopes: HKCU - {A8BD5B79-93F2-41E5-8180-A5EB5B5F5A08} URL = http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ASUS_csCZ333

S2 916e5338; "C:\Windows\system32\rundll32.exe" "c:\progra~1\GSSvc.dll",service
U3 a3qff9o1; C:\Windows\system32\Drivers\a3qff9o1.sys [0 ] (Microsoft Corporation)
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]

2014-02-17 22:11 - 2014-02-17 22:11 - 00015327 _____ () C:\Users\Ondra\AppData\Local\LM.bat
2014-02-17 22:09 - 2014-02-17 22:11 - 00029696 _____ () C:\Users\Ondra\AppData\Local\MSGBOX.EXE
2014-02-17 22:09 - 2014-02-17 22:09 - 00112640 _____ (forum.viry.cz) C:\Users\Ondra\Desktop\FRSTLauncher.exe
2014-02-17 22:09 - 2014-02-17 22:09 - 00015327 _____ () C:\Users\Ondra\Desktop\LM.bat
2014-02-17 21:56 - 2014-02-17 21:16 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-02-17 21:33 - 2014-02-16 12:24 - 00008093 _____ () C:\zoek-results2014-02-16-122447.log
2014-02-16 12:07 - 2014-02-16 03:18 - 00020694 _____ () C:\zoek-results2014-02-16-031835.log
2014-02-15 18:07 - 2014-02-17 22:00 - 00008594 _____ () C:\zoek-results.log
2014-02-15 18:00 - 2014-02-15 18:01 - 01283584 _____ () C:\Users\Ondra\Desktop\zoek.exe
2014-02-09 22:52 - 2014-02-09 22:13 - 00000419 _____ () C:\zoek-results2014-02-09-221302.log
2014-02-09 22:09 - 2014-02-16 00:01 - 00000000 ____D () C:\zoek_backup
2014-02-08 19:48 - 2014-02-08 19:48 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Ondra\Desktop\mbam-setup-1.75.0.1300.exe
2014-02-08 17:09 - 2014-02-08 17:20 - 01166132 _____ () C:\Users\Ondra\Desktop\adwcleaner.exe
2014-01-31 20:40 - 2014-01-31 20:40 - 00000000 ____D () C:\ProgramData\ggcmfjgbkdpknngfcdeedaoomenlenkl
C:\Users\Ondra\AppData\Roaming\desktop.ini
c:\progra~1\GSSvc.dll
C:\Users\Ondra\AppData\Roaming\Search Protection

Hosts:
CMD: shutdown /r /f /t 2

End
  • Ulozte vytvoreny TXT jako fixlist.txt
  • Presunte vytvoreny fixlist vedle FRST
:arrow: Spustte znovu FRST.exe
  • Kliknete na Fix
  • Probehne oprava a vytvori log Fixlog.txt
:arrow: Restart PC a dejte mi sem fixlog.txt
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
Majkl55
Návštěvník
Návštěvník
Příspěvky: 70
Registrován: 15 Kvě 2008 12:20

Re: Pomalý notebook - Podezření na vir

#20 Příspěvek od Majkl55 »

tady to je...

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 22-02-2014 01
Ran by Ondra at 2014-02-23 14:52:02 Run:1
Running from C:\Users\Ondra\Desktop
Boot Mode: Normal

==============================================

Content of fixlist:
*****************
Start
HKLM\...\Run: [GrooveMonitor] - C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [] - [X]
HKLM\...\Run: [QuickTime Task] - C:\Program Files\QuickTime\qttask.exe [421888 2011-06-15] (Apple Inc.)
HKU\S-1-5-19\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\S-1-5-20\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\S-1-5-21-3134179490-1787442154-2696964708-1000\...\Run: [WindowsWelcomeCenter] - rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\S-1-5-21-3134179490-1787442154-2696964708-1000\...\Run: [ehTray.exe] - C:\Windows\ehome\ehTray.exe [125952 2008-01-21] (Microsoft Corporation)
HKU\S-1-5-21-3134179490-1787442154-2696964708-1000\...\Run: [DAEMON Tools Lite] - C:\Program Files\DAEMON Tools Lite\DTLite.exe [3671904 2012-08-28] (DT Soft Ltd)
HKU\S-1-5-21-3134179490-1787442154-2696964708-1000\...\Run: [SRS Premium Sound] - C:\Program Files\SRS Labs\SRS Premium Sound\SRSPremiumSoundBig_Small.exe [3257592 2009-03-05] (SRS Labs, Inc.)
HKU\S-1-5-21-3134179490-1787442154-2696964708-1000\...\Run: [swg] - C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2009-06-10] (Google Inc.)
HKU\S-1-5-21-3134179490-1787442154-2696964708-1000\...\Run: [SearchProtection] - "C:\Users\Ondra\AppData\Roaming\Search Protection\SearchProtection.EXE" /autostart
HKU\S-1-5-21-3134179490-1787442154-2696964708-1000\...\MountPoints2: J - J:\setup_vmc_lite.exe /checkApplicationPresence
HKU\S-1-5-21-3134179490-1787442154-2696964708-1000\...\MountPoints2: {03e3fcdf-b50e-11de-bcf2-806e6f6e6963} - I:\setup_vmc_lite.exe /checkApplicationPresence
HKU\S-1-5-21-3134179490-1787442154-2696964708-1000\...\MountPoints2: {2fb50ba3-8de1-11df-9dc1-002618369cd6} - K:\InstallTomTomHOME.exe
HKU\S-1-5-21-3134179490-1787442154-2696964708-1000\...\MountPoints2: {548139f8-994d-11de-a75b-806e6f6e6963} - J:\setup_vmc_lite.exe /checkApplicationPresence
HKU\S-1-5-21-3134179490-1787442154-2696964708-1000\...\MountPoints2: {66748417-6c0d-11de-9f97-002618369cd6} - H:\SETUP.EXE
HKU\S-1-5-21-3134179490-1787442154-2696964708-1000\...\MountPoints2: {74c29eba-a09b-11de-bdb7-002618369cd6} - I:\LiteAuto.exe
HKU\S-1-5-21-3134179490-1787442154-2696964708-1000\...\MountPoints2: {a8ee3017-2733-11e0-93f0-002618369cd6} - I:\setup_vmc_lite.exe /checkApplicationPresence
HKU\S-1-5-21-3134179490-1787442154-2696964708-1000\...\MountPoints2: {a8ee3019-2733-11e0-93f0-002618369cd6} - I:\setup_vmc_lite.exe /checkApplicationPresence
HKU\S-1-5-21-3134179490-1787442154-2696964708-1000\...\MountPoints2: {d4d216d1-7bc1-11de-9bef-002618369cd6} - I:\setup_vmc_lite.exe /checkApplicationPresence
HKU\S-1-5-21-3134179490-1787442154-2696964708-1000\...\MountPoints2: {d4d216ef-7bc1-11de-9bef-002618369cd6} - I:\setup_vmc_lite.exe /checkApplicationPresence
HKU\S-1-5-21-3134179490-1787442154-2696964708-1000\...\MountPoints2: {d4d21722-7bc1-11de-9bef-002618369cd6} - I:\setup_vmc_lite.exe /checkApplicationPresence
HKU\S-1-5-21-3134179490-1787442154-2696964708-1000\...\MountPoints2: {d4d2172a-7bc1-11de-9bef-002618369cd6} - J:\setup_vmc_lite.exe /checkApplicationPresence
AppInit_DLLs: c:\progra~1\gse7cc~1.ena => File Not Found
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = http://startsear.ch/?aff=1&q={searchTerms}
SearchScopes: HKLM - {A8BD5B79-93F2-41E5-8180-A5EB5B5F5A08} URL = http://www.google.com/search?sourceid=i ... lz=1I7ASUS
SearchScopes: HKCU - DefaultScope {A8BD5B79-93F2-41E5-8180-A5EB5B5F5A08} URL = http://www.google.com/search?sourceid=i ... US_csCZ333
SearchScopes: HKCU - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = http://www.google.co.uk/search?sourceid ... US_csCZ333
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={searchT ... {startPage}
SearchScopes: HKCU - {A8BD5B79-93F2-41E5-8180-A5EB5B5F5A08} URL = http://www.google.com/search?sourceid=i ... US_csCZ333

S2 916e5338; "C:\Windows\system32\rundll32.exe" "c:\progra~1\GSSvc.dll",service
U3 a3qff9o1; C:\Windows\system32\Drivers\a3qff9o1.sys [0 ] (Microsoft Corporation)
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]

2014-02-17 22:11 - 2014-02-17 22:11 - 00015327 _____ () C:\Users\Ondra\AppData\Local\LM.bat
2014-02-17 22:09 - 2014-02-17 22:11 - 00029696 _____ () C:\Users\Ondra\AppData\Local\MSGBOX.EXE
2014-02-17 22:09 - 2014-02-17 22:09 - 00112640 _____ (forum.viry.cz) C:\Users\Ondra\Desktop\FRSTLauncher.exe
2014-02-17 22:09 - 2014-02-17 22:09 - 00015327 _____ () C:\Users\Ondra\Desktop\LM.bat
2014-02-17 21:56 - 2014-02-17 21:16 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-02-17 21:33 - 2014-02-16 12:24 - 00008093 _____ () C:\zoek-results2014-02-16-122447.log
2014-02-16 12:07 - 2014-02-16 03:18 - 00020694 _____ () C:\zoek-results2014-02-16-031835.log
2014-02-15 18:07 - 2014-02-17 22:00 - 00008594 _____ () C:\zoek-results.log
2014-02-15 18:00 - 2014-02-15 18:01 - 01283584 _____ () C:\Users\Ondra\Desktop\zoek.exe
2014-02-09 22:52 - 2014-02-09 22:13 - 00000419 _____ () C:\zoek-results2014-02-09-221302.log
2014-02-09 22:09 - 2014-02-16 00:01 - 00000000 ____D () C:\zoek_backup
2014-02-08 19:48 - 2014-02-08 19:48 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Ondra\Desktop\mbam-setup-1.75.0.1300.exe
2014-02-08 17:09 - 2014-02-08 17:20 - 01166132 _____ () C:\Users\Ondra\Desktop\adwcleaner.exe
2014-01-31 20:40 - 2014-01-31 20:40 - 00000000 ____D () C:\ProgramData\ggcmfjgbkdpknngfcdeedaoomenlenkl
C:\Users\Ondra\AppData\Roaming\desktop.ini
c:\progra~1\GSSvc.dll
C:\Users\Ondra\AppData\Roaming\Search Protection

Hosts:
CMD: shutdown /r /f /t 2

End
*****************

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\GrooveMonitor => Value deleted successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM => Value deleted successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\ => Value deleted successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\QuickTime Task => Value deleted successfully.
HKU\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Run\\WindowsWelcomeCenter => Value deleted successfully.
HKU\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Run\\WindowsWelcomeCenter => Value deleted successfully.
HKU\S-1-5-21-3134179490-1787442154-2696964708-1000\Software\Microsoft\Windows\CurrentVersion\Run\\WindowsWelcomeCenter => Value deleted successfully.
HKU\S-1-5-21-3134179490-1787442154-2696964708-1000\Software\Microsoft\Windows\CurrentVersion\Run\\ehTray.exe => Value deleted successfully.
HKU\S-1-5-21-3134179490-1787442154-2696964708-1000\Software\Microsoft\Windows\CurrentVersion\Run\\DAEMON Tools Lite => Value deleted successfully.
HKU\S-1-5-21-3134179490-1787442154-2696964708-1000\Software\Microsoft\Windows\CurrentVersion\Run\\SRS Premium Sound => Value deleted successfully.
HKU\S-1-5-21-3134179490-1787442154-2696964708-1000\Software\Microsoft\Windows\CurrentVersion\Run\\swg => Value deleted successfully.
HKU\S-1-5-21-3134179490-1787442154-2696964708-1000\Software\Microsoft\Windows\CurrentVersion\Run\\SearchProtection => Value deleted successfully.
HKU\1\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\S-1-5-21-3134179490-1787442154-2696964708-1000 => Key not found.
HKU\1\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{03e3fcdf-b50e-11de-bcf2-806e6f6e6963} => Key not found.
HKCR\CLSID\{03e3fcdf-b50e-11de-bcf2-806e6f6e6963} => Key not found.
HKU\1\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{2fb50ba3-8de1-11df-9dc1-002618369cd6} => Key not found.
HKCR\CLSID\{2fb50ba3-8de1-11df-9dc1-002618369cd6} => Key not found.
HKU\1\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{548139f8-994d-11de-a75b-806e6f6e6963} => Key not found.
HKCR\CLSID\{548139f8-994d-11de-a75b-806e6f6e6963} => Key not found.
HKU\1\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{66748417-6c0d-11de-9f97-002618369cd6} => Key not found.
HKCR\CLSID\{66748417-6c0d-11de-9f97-002618369cd6} => Key not found.
HKU\1\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{74c29eba-a09b-11de-bdb7-002618369cd6} => Key not found.
HKCR\CLSID\{74c29eba-a09b-11de-bdb7-002618369cd6} => Key not found.
HKU\1\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{a8ee3017-2733-11e0-93f0-002618369cd6} => Key not found.
HKCR\CLSID\{a8ee3017-2733-11e0-93f0-002618369cd6} => Key not found.
HKU\1\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{a8ee3019-2733-11e0-93f0-002618369cd6} => Key not found.
HKCR\CLSID\{a8ee3019-2733-11e0-93f0-002618369cd6} => Key not found.
HKU\1\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{d4d216d1-7bc1-11de-9bef-002618369cd6} => Key not found.
HKCR\CLSID\{d4d216d1-7bc1-11de-9bef-002618369cd6} => Key not found.
HKU\1\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{d4d216ef-7bc1-11de-9bef-002618369cd6} => Key not found.
HKCR\CLSID\{d4d216ef-7bc1-11de-9bef-002618369cd6} => Key not found.
HKU\1\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{d4d21722-7bc1-11de-9bef-002618369cd6} => Key not found.
HKCR\CLSID\{d4d21722-7bc1-11de-9bef-002618369cd6} => Key not found.
HKU\1\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{d4d2172a-7bc1-11de-9bef-002618369cd6} => Key not found.
HKCR\CLSID\{d4d2172a-7bc1-11de-9bef-002618369cd6} => Key not found.
"c:\\progra~1\\gse7cc~1.ena" => Value Data removed successfully.
C:\Windows\system32\GroupPolicy\Machine => Moved successfully.
C:\Windows\system32\GroupPolicy\GPT.ini => Moved successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64} => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{67A2568C-7A0A-4EED-AECC-B5405DE63B64} => Key not found.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{A8BD5B79-93F2-41E5-8180-A5EB5B5F5A08} => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{A8BD5B79-93F2-41E5-8180-A5EB5B5F5A08} => Key not found.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value deleted successfully.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64} => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{67A2568C-7A0A-4EED-AECC-B5405DE63B64} => Key not found.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} => Key not found.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{A8BD5B79-93F2-41E5-8180-A5EB5B5F5A08} => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{A8BD5B79-93F2-41E5-8180-A5EB5B5F5A08} => Key not found.
916e5338 => Service deleted successfully.
a3qff9o1 => Service not found.
IpInIp => Service deleted successfully.
NwlnkFlt => Service deleted successfully.
NwlnkFwd => Service deleted successfully.
"C:\Users\Ondra\AppData\Local\LM.bat" => File/Directory not found.
"C:\Users\Ondra\AppData\Local\MSGBOX.EXE" => File/Directory not found.
"C:\Users\Ondra\Desktop\FRSTLauncher.exe" => File/Directory not found.
C:\Users\Ondra\Desktop\LM.bat => Moved successfully.
C:\Windows\zoek-delete.exe => Moved successfully.
C:\zoek-results2014-02-16-122447.log => Moved successfully.
C:\zoek-results2014-02-16-031835.log => Moved successfully.
C:\zoek-results.log => Moved successfully.
C:\Users\Ondra\Desktop\zoek.exe => Moved successfully.
C:\zoek-results2014-02-09-221302.log => Moved successfully.
C:\zoek_backup => Moved successfully.
C:\Users\Ondra\Desktop\mbam-setup-1.75.0.1300.exe => Moved successfully.
C:\Users\Ondra\Desktop\adwcleaner.exe => Moved successfully.
C:\ProgramData\ggcmfjgbkdpknngfcdeedaoomenlenkl => Moved successfully.
C:\Users\Ondra\AppData\Roaming\desktop.ini => Moved successfully.
"c:\progra~1\GSSvc.dll" => File/Directory not found.
"C:\Users\Ondra\AppData\Roaming\Search Protection" => File/Directory not found.
Hosts was reset successfully.

========= shutdown /r /f /t 2 =========


========= End of CMD: =========



The system needs a manual reboot.

==== End of Fixlog ====
Majkl55
Nahoru
Majkl55
Návštěvník
Návštěvník
Příspěvky: 70
Registrován: 15 Kvě 2008 12:20

Re: Pomalý notebook - Podezření na vir

#21 Příspěvek od Majkl55 »

Notebook se nerestartoval. Fixlist.txt jsem vytvoril. Co mate na mysli: "presunte vytvoreny fixlist vedle FRST"? Oba mam na plose vedle sebe. Mam fixlist presunout do adresare FRST?
Majkl55
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Pomalý notebook - Podezření na vir

#22 Příspěvek od vyosek »

Provedl jste to dobre :thumbsup:

Jak se chova PC??
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
Majkl55
Návštěvník
Návštěvník
Příspěvky: 70
Registrován: 15 Kvě 2008 12:20

Re: Pomalý notebook - Podezření na vir

#23 Příspěvek od Majkl55 »

PC je lepší než minulý týden, ale stále pomalé. Hlavně Explorer jde dost pomalu.
Majkl55
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Pomalý notebook - Podezření na vir

#24 Příspěvek od vyosek »

:arrow: T-Cleaner http://vyosek.tym.cz/pro_usery/T-Cleaner.exe
  • Stahnete a spustte
  • Pro potvrzeni volby mackejte A, Enter
  • Po pouziti utilitu smazte
  • Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)
:arrow: OTC http://oldtimer.geekstogo.com/OTC.exe
  • Stahnete a spustte
  • Kliknete na CleanUp a potvrdte YES
  • Program uklidi a restartuje PC

:arrow: TFC http://oldtimer.geekstogo.com/TFC.exe
  • Stahnete a spustte
  • Kliknete na Start a potvrdte OK
  • Program uklidi a restartuje pc
  • Po pouziti utilitu smazte
:arrow: Stahnete Ccleaner http://forum.viry.cz/viewtopic.php?t=7478
Panel čistič
  • Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner
Panel registry
  • dejte Hledej problémy
  • nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
  • postup opakujte dokud nebude bez problemu - vetsinou cca 3x
Panel nástroje
  • Zde muzete odinstalovat nepotrebne programy
CCleaner doporucuji pouzivat cca jednou za tyden

:arrow: Doporucuji provest defragmentaci disku
  • Nejjednodussi (ale nejmene ucinny) zpusob je pomoci utility ve windowsech
    • Kliknete na Tento pocitac, dale na disk kliknete pravym tlacitkem, vyberte Vlastnosti
    • prepnete se do zalozky Nastroje
    • Nyni vidite pomucky Defragmentace - spustte ji kliknutim na Defragmentovat
    • Toto provedte se vsemi disky
  • Dalsi moznosti (a mnou doporucenou) je pres programek Defraggler http://www.stahuj.centrum.cz/utility_a_ ... efraggler/
    • Program stahnete, nainstalujte (dejte fajfku pryc u yahoo toolbaru) a spustte
    • Kliknete na Analyzovat
    • Pokud je ve sloupci Fragmentováno vice jak 5%, doporucuji provest defragmentaci (klik na Defragmentovat)
    • Postup provedte se vsemi disky
  • Posledni moznost je pres jednoduchy programek JKDefrag http://www.stahuj.centrum.cz/utility_a_ ... /jkdefrag/
    • Vyhodou programku je, ze se neinstaluje
    • Staci tedy jen stahnout dle verze vaseho OS a rozbalit
    • Nasledne spustit pomoci souboru JKDefrag pripadne JKDefrag64
    • Probehne analyza disku a nasledne i defragmentace
:arrow: Dejte novy log z RSIT a napiste co PC
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
Odpovědět

Vrátit se na „Řešení problémů, logy“