Extrémní zpomalení - klávesnice, TouchPad, načítání OS

Zpráva

77smoula77 · #1 Příspěvek od **77smoula77** » 17 říj 2014 06:50

Dobrý den,

prosím Vás o pomoc s extrémním zpomalením (na notebooku) reakcí na zmáčknutí kláves na klávesnici (musím dlouze držet, než se zobrazí písmeno), touchpad (kurzor) reaguje také se zpožděním a v neposlední řadě - náběh systému Win XP je také zpomalený (hodně). Externě připojená myš přes USB "běhá" bez problémů.

Děkuji za pomoc.

Logfile of random's system information tool 1.06 (written by random/random)
Run by JV at 2014-10-17 07:39:59
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 6 GB (22%) free of 30 GB
Total RAM: 1790 MB (72% free)

HijackThis download failed

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job
C:\WINDOWS\tasks\avast! Emergency Update.job
C:\WINDOWS\tasks\Browser Updater.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\tasks\Měsíční oznamování konce poskytování služeb pro Microsoft Windows XP.job
C:\WINDOWS\tasks\Protected Search.job
C:\WINDOWS\tasks\Přihlášení k oznamování konce poskytování služeb pro Microsoft Windows XP.job
C:\WINDOWS\tasks\SystemSockets.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-07-15 457712]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{a1e75a0e-4397-4ba8-bb50-e19fb66890f4}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2014-04-10 194504]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.7.9012.1008\swg.dll [2014-04-10 1001936]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EA837F48-5AD1-443E-AE34-FFE03CBF3099}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{a1e75a0e-4397-4ba8-bb50-e19fb66890f4}
{1EA00BE1-6E54-4E2A-8099-680300BF23E1}
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2014-04-10 194504]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"ATICCC"=C:\Program Files\ATI Technologies\ATI.ACE\cli.exe [2006-01-02 45056]
"Broadcom Wireless Manager UI"=C:\WINDOWS\system32\WLTRAY []
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2012-10-28 692315]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-08-01 4085896]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2006-03-21 61440]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UploadMgr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"C:\Program Files\PANDORA.TV\PanService\PandoraService.exe"="C:\Program Files\PANDORA.TV\PanService\PandoraService.exe:*:Enabled:PandoraService"
"C:\Program Files\HomeTab\ProtectedSearch.exe"="C:\Program Files\HomeTab\ProtectedSearch.exe:*:Enabled:Protected Search"
"C:\Program Files\HomeTab\TBUpdater.dll"="C:\Program Files\HomeTab\TBUpdater.dll:*:Enabled:Browser Updater"
"C:\Program Files\HomeTab\SystemSockets.exe"="C:\Program Files\HomeTab\SystemSockets.exe:*:Enabled:System Sockets"
"C:\Program Files\Google\Chrome\Application\chrome.exe"="C:\Program Files\Google\Chrome\Application\chrome.exe:*:Enabled:Google Chrome"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"D:\Programs\RM.exe"="D:\Programs\RM.exe:*:Enabled:Render Manager"
"D:\Programs\umi.exe"="D:\Programs\umi.exe:*:Enabled:umi"
"D:\Programs\VideoSpin.exe"="D:\Programs\VideoSpin.exe:*:Enabled:Pinnacle VideoSpin"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\F]
shell\AutoRun\command - F:\SecureDataUSBDrive.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{a585f100-a997-11e1-98ed-0016366bf64c}]
shell\AutoRun\command - F:\SecureDataUSBDrive.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{b7b02590-d57e-11e2-9b33-0016ce8a83a7}]
shell\AutoRun\command - F:\NokiaPCIA_Autorun.exe

======List of files/folders created in the last 1 months======

2014-10-17 07:39:59 ----D---- C:\Program Files\trend micro
2014-10-17 07:39:58 ----D---- C:\rsit
2014-10-16 10:15:38 ----D---- C:\Documents and Settings\JV\Data aplikací\dll-files.com
2014-10-16 10:15:29 ----D---- C:\Documents and Settings\All Users\Data aplikací\Logs
2014-10-16 10:15:10 ----D---- C:\Documents and Settings\All Users\Data aplikací\TEMP
2014-10-16 10:14:56 ----A---- C:\WINDOWS\system32\roboot.exe
2014-10-16 10:14:36 ----D---- C:\Program Files\Dll-Files.com Fixer
2014-10-16 10:04:43 ----A---- C:\WINDOWS\system32\DfSdkBt.exe
2014-10-13 18:32:56 ----SHD---- C:\Config.Msi
2014-10-13 17:41:03 ----D---- C:\Documents and Settings\All Users\Data aplikací\Pinnacle
2014-10-13 16:33:35 ----D---- C:\Documents and Settings\JV\Data aplikací\NCH Software
2014-10-13 16:33:30 ----D---- C:\Program Files\NCH Software
2014-10-13 16:33:30 ----D---- C:\Documents and Settings\All Users\Data aplikací\NCH Software
2014-10-12 18:08:50 ----D---- C:\Documents and Settings\JV\Data aplikací\DivX
2014-10-12 18:07:44 ----D---- C:\Program Files\Common Files\DivX Shared
2014-10-12 18:06:21 ----D---- C:\Program Files\DivX
2014-10-12 18:05:31 ----D---- C:\Documents and Settings\All Users\Data aplikací\DivX
2014-09-24 17:44:09 ----A---- C:\WINDOWS\system32\FlashPlayerInstaller.exe

======List of files/folders modified in the last 1 months======

2014-10-17 07:39:59 ----D---- C:\Program Files
2014-10-17 07:39:29 ----D---- C:\WINDOWS\Prefetch
2014-10-17 07:39:23 ----D---- C:\WINDOWS\system32\CatRoot2
2014-10-17 07:39:20 ----D---- C:\WINDOWS
2014-10-17 07:38:05 ----D---- C:\WINDOWS\Temp
2014-10-16 14:12:00 ----A---- C:\WINDOWS\SchedLgU.Txt
2014-10-16 13:56:21 ----D---- C:\WINDOWS\system32\Lang
2014-10-16 13:54:58 ----D---- C:\WINDOWS\Debug
2014-10-16 13:53:30 ----D---- C:\WINDOWS\system32\config
2014-10-16 13:50:13 ----D---- C:\WINDOWS\system32
2014-10-16 11:18:47 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2014-10-16 10:05:05 ----D---- C:\Documents and Settings\All Users\Data aplikací\ashampoo
2014-10-16 10:03:38 ----D---- C:\Program Files\Ashampoo
2014-10-15 17:59:53 ----D---- C:\Documents and Settings\JV\Data aplikací\Skype
2014-10-15 17:06:32 ----D---- C:\Documents and Settings\JV\Data aplikací\Google
2014-10-15 11:39:54 ----D---- C:\Program Files\The KMPlayer
2014-10-13 18:34:48 ----SHD---- C:\WINDOWS\Installer
2014-10-13 18:34:47 ----D---- C:\WINDOWS\WinSxS
2014-10-13 18:33:37 ----D---- C:\Program Files\Common Files
2014-10-13 18:33:34 ----RSD---- C:\WINDOWS\Fonts
2014-10-13 16:45:02 ----SD---- C:\WINDOWS\Tasks
2014-10-06 11:28:08 ----D---- C:\Program Files\HomeTab
2014-10-06 11:24:13 ----D---- C:\Program Files\MyAshampoo
2014-09-24 17:44:24 ----A---- C:\WINDOWS\system32\FlashPlayerApp.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 AswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2014-07-15 55112]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2014-07-15 779536]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2014-07-15 414520]
R1 aswTdi;aswTdi; C:\WINDOWS\system32\drivers\aswTdi.sys [2014-07-15 57800]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\System32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\WINDOWS\System32\DRIVERS\wmiacpi.sys [2008-04-14 8832]
R2 AegisP;AEGIS Protocol (IEEE 802.1x) v3.2.0.3; C:\WINDOWS\system32\DRIVERS\AegisP.sys [2012-04-17 17801]
R2 aswHwid;avast! HardwareID; C:\WINDOWS\system32\drivers\aswHwid.sys [2014-07-15 24184]
R2 aswMonFlt;aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [2014-07-15 67824]
R3 AgereSoftModem;Agere Systems Soft Modem; C:\WINDOWS\system32\DRIVERS\AGRSM.sys [2005-12-13 1124097]
R3 AR5211;Atheros Wireless Network Adapter Service; C:\WINDOWS\system32\DRIVERS\ar5211.sys [2006-01-25 488448]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2006-03-21 1522688]
R3 Cam5603D;Acer OrbiCam; C:\WINDOWS\System32\Drivers\BisonCam.sys [2006-03-30 576000]
R3 CmBatt;Microsoft ACPI Control Method Battery Driver; C:\WINDOWS\System32\DRIVERS\CmBatt.sys [2008-04-14 13952]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\System32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2006-02-16 4156416]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\System32\DRIVERS\mouhid.sys [2001-10-25 12160]
R3 sdbus;sdbus; C:\WINDOWS\System32\DRIVERS\sdbus.sys [2008-04-14 79232]
R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2012-10-28 191456]
R3 tifm21;tifm21; C:\WINDOWS\system32\drivers\tifm21.sys [2005-09-20 162432]
R3 usbehci;Ovladač miniportu rozšířeného radiče hostitele Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2009-03-18 30336]
R3 usbhub;Rozbočovač umožnující USB2; C:\WINDOWS\System32\DRIVERS\usbhub.sys [2008-04-14 59520]
R3 usbohci;Ovladač Miniport otevřeného hostitelského řadiče Microsoft USB; C:\WINDOWS\System32\DRIVERS\usbohci.sys [2008-04-14 17152]
S1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\System32\DRIVERS\kbdhid.sys [2008-04-14 14592]
S2 eLock2BurnerLockDriver;eLock2BurnerLockDriver; \??\C:\WINDOWS\system32\eLock2BurnerLockDriver.sys []
S2 eLock2FSCTLDriver;eLock2FSCTLDriver; \??\C:\WINDOWS\system32\eLock2FSCTLDriver.sys []
S3 btaudio;Bluetooth Audio Device; C:\WINDOWS\system32\drivers\btaudio.sys []
S3 BTDriver;Bluetooth Virtual Communications Driver; C:\WINDOWS\system32\DRIVERS\btport.sys []
S3 BTKRNL;Bluetooth Bus Enumerator; C:\WINDOWS\system32\DRIVERS\btkrnl.sys []
S3 BTWDNDIS;Bluetooth LAN Access Server; C:\WINDOWS\system32\DRIVERS\btwdndis.sys []
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-14 17024]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-14 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-14 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-14 10880]
S3 nmwcd;Nokia USB Phone Parent Driver; C:\WINDOWS\system32\drivers\ccdcmb.sys [2013-01-23 18560]
S3 nmwcdc;Nokia USB Communication Driver; C:\WINDOWS\system32\drivers\ccdcmbo.sys [2013-01-23 23168]
S3 nmwcdnsu;Nokia USB Flashing Phone Parent; C:\WINDOWS\system32\drivers\nmwcdnsu.sys [2013-01-23 137600]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys [2012-10-17 19072]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-14 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-14 15232]
S3 upperdev;upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys [2013-01-23 8192]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\System32\DRIVERS\usbccgp.sys [2013-08-09 32384]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-14 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2013-07-03 14976]
S3 usbser;USB Modem Driver; C:\WINDOWS\system32\drivers\usbser.sys [2013-08-29 26240]
S3 UsbserFilt;UsbserFilt; C:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys [2013-01-23 8192]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\System32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 Wdf01000;Kernel Mode Driver Frameworks service; C:\WINDOWS\System32\Drivers\wdf01000.sys [2009-07-14 444136]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-14 19200]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S3 yukonwxp;NDIS5.1 Miniport Driver for Marvell Yukon Ethernet Controller; C:\WINDOWS\system32\DRIVERS\yk51x86.sys [2005-11-10 243328]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2006-03-21 405504]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-07-15 50344]
R2 wltrysvc;Broadcom Wireless LAN Tray Service; C:\WINDOWS\System32\wltrysvc.exe [2004-12-22 65536]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2014-04-10 116648]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-09-24 267440]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 DfSdkS;Defragmentation-Service; C:\Program Files\Ashampoo\Ashampoo WinOptimizer 11\DfsdkS.exe [2009-08-24 406016]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2014-04-10 116648]
S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2014-04-10 194032]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2013-04-18 737616]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

#2 Příspěvek od **vyosek** » 17 říj 2014 08:02

Zdravim

Stahnete Junkware Removal Tool http://thisisudax.org/downloads/JRT.exe

Ulozte nejlepe na plochu
Po spusteni se zobrazi licencni podminky, stisknete libovolnou klavesu
Probehne vytvoreni zalohy a nasledne prohledavani
Probehne skenovani a pak se objevi log, pripadne bude ulozen v c:\JRT jako JRT.txt, ten sem vlozte

Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner

Ulozte nejlepe na plochu
Ukoncete vsechny programy
Kliknete na Scan a nasledne Clean
Probehne oprava, restart PC a pak se objevi log, pripadne bude ulozen ve slozce c:\AdwCleaner\AdwCleaner[S?].txt, ten sem vlozte

77smoula77 · #3 Příspěvek od **77smoula77** » 17 říj 2014 09:00

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.3.3 (10.14.2014:1)
OS: Microsoft Windows XP x86
Ran by JV on p 17.10.2014 at 9:29:43,53
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

~~~ Services

~~~ Registry Values

Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\\DisplayName
Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\\URL
Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\\Search Page
Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search\\Default_Search_URL

~~~ Registry Keys

Successfully deleted: [Registry Key] "hkey_current_user\software\apn pip"
Successfully deleted: [Registry Key] "hkey_current_user\software\pip"
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{15C4DF55-4B67-495A-A3D3-A497C4A49EE0}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{6ff62359-410d-4a06-9531-252a97adc38e}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{15C4DF55-4B67-495A-A3D3-A497C4A49EE0}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A1E75A0E-4397-4BA8-BB50-E19FB66890F4}
Successfully deleted: [Registry Key - Orphan] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{a1e75a0e-4397-4ba8-bb50-e19fb66890f4}
Successfully deleted: [Registry Key - Orphan] HKEY_CLASSES_ROOT\CLSID\{a1e75a0e-4397-4ba8-bb50-e19fb66890f4}
Successfully deleted: [Registry Key - Orphan] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EA837F48-5AD1-443E-AE34-FFE03CBF3099}
Successfully deleted: [Registry Key - Orphan] HKEY_CLASSES_ROOT\CLSID\{EA837F48-5AD1-443E-AE34-FFE03CBF3099}

~~~ Files

~~~ Folders

Successfully deleted: [Folder] "C:\Documents and Settings\JV\Data aplikacˇ\dll-files.com"
Successfully deleted: [Folder] "C:\Documents and Settings\JV\Data aplikacˇ\pricegong"
Successfully deleted: [Folder] "C:\Program Files\conduit"
Successfully deleted: [Folder] "C:\Program Files\dll-files.com fixer"
Successfully deleted: [Folder] "C:\Program Files\myashampoo"

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on p 17.10.2014 at 9:41:00,64
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

77smoula77 · #4 Příspěvek od **77smoula77** » 17 říj 2014 09:00

# AdwCleaner v4.000 - Report created 17/10/2014 at 09:50:00
# DB v
# Updated 12/10/2014 by Xplode
# Operating System : Microsoft Windows XP Service Pack 3 (32 bits)
# Username : JV - JV
# Running from : C:\Documents and Settings\JV\Plocha\adwcleaner_4.000.exe
# Option : Clean

***** [ Services ] *****

***** [ Files / Folders ] *****

Folder Deleted : C:\Documents and Settings\All Users\Data aplikací\Ask
Folder Deleted : C:\Documents and Settings\JV\Local Settings\Data aplikací\Conduit
Folder Deleted : C:\Program Files\HomeTab
Folder Deleted : C:\Documents and Settings\All Users\Data aplikací\NCH Software
Folder Deleted : C:\Program Files\NCH Software
Folder Deleted : C:\Documents and Settings\JV\Data aplikací\NCH Software
Folder Deleted : C:\Documents and Settings\JV\Local Settings\Data aplikací\MyAshampoo
File Deleted : C:\WINDOWS\system32\roboot.exe

***** [ Scheduled Tasks ] *****

***** [ Shortcuts ] *****

***** [ Registry ] *****

Key Deleted : HKCU\Toolbar
Key Deleted : HKLM\SOFTWARE\Classes\protector_dll.protectorbho
Key Deleted : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{60D8D811-38F3-4048-B0D9-4EC56B2500F4}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A1E75A0E-4397-4BA8-BB50-E19FB66890F4}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{60D8D811-38F3-4048-B0D9-4EC56B2500F4}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{60D8D811-38F3-4048-B0D9-4EC56B2500F4}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{95AC7804-B0D6-4C77-A4E0-B25341815DB5}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F7ED7AE7-09AB-4FD4-AC22-00C31A99C1B9}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{96D7DBE6-0E6C-42BD-8311-7C5D0E023EC8}
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{A1E75A0E-4397-4BA8-BB50-E19FB66890F4}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{A1E75A0E-4397-4BA8-BB50-E19FB66890F4}]
Value Deleted : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List [C:\Program Files\PANDORA.TV\PanService\PandoraService.exe]
Value Deleted : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List [C:\Program Files\HomeTab\ProtectedSearch.exe]
Value Deleted : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List [C:\Program Files\HomeTab\TBUpdater.dll]
Value Deleted : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List [C:\Program Files\HomeTab\SystemSockets.exe]
Key Deleted : HKCU\Software\Conduit
Key Deleted : HKCU\Software\MyAshampoo\toolbar
Key Deleted : HKCU\Software\PriceGong
Key Deleted : HKCU\Software\simplytech
Key Deleted : HKCU\Software\SmartBar
Key Deleted : HKCU\Software\Softonic
Key Deleted : HKCU\Software\systweak
Key Deleted : HKCU\Software\YahooPartnerToolbar
Key Deleted : HKCU\Software\MyAshampoo
Key Deleted : HKCU\Software\AppDataLow\Software\simplytech
Key Deleted : HKLM\SOFTWARE\Conduit
Key Deleted : HKLM\SOFTWARE\MyAshampoo\toolbar
Key Deleted : HKLM\SOFTWARE\PIP
Key Deleted : HKLM\SOFTWARE\MyAshampoo

***** [ Browsers ] *****

-\\ Internet Explorer v8.0.6001.18702

Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Start Default_Page_URL]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Default_Page_URL]
Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Search [Start Page]
Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Search [Start Default_Page_URL]
Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Search [Search Bar]
Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Search [Search Page]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Search [Start Page]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Search [Start Default_Page_URL]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Search [Default_Search_URL]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Search [Search Bar]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Search [Search Page]
Setting Restored : HKCU\Software\Microsoft\Internet Explorer\SearchUrl []
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchUrl []

-\\ Google Chrome v37.0.2062.124

*************************

AdwCleaner[R0].txt - [7178 octets] - [17/10/2014 09:42:02]
AdwCleaner[S0].txt - [4873 octets] - [17/10/2014 09:50:00]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [4933 octets] ##########

#5 Příspěvek od **vyosek** » 17 říj 2014 13:34

Stahnete Zoek.exe http://hijackthis.nl/smeenk/ a ulozte jej na plochu

Pokud pouzivate Win Vista ci W7, kliknete na Zoek pravym a dejte Run As Administrator ci Spustit jako spravce
Do okna vlozte skript nize

Kód: Vybrat vše

autoclean;
emptyclsid;
iedefaults;
FFdefaults;
CHRdefaults;
emptyalltemp;
resethosts;

Nasledne kliknete na Run Script
PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem

77smoula77 · #6 Příspěvek od **77smoula77** » 17 říj 2014 14:31

Vkládám LOG - v jednu chvíli jsem myslel, že přestal počítač reagovat ("dlooouho" byl v klidu) . Obrnil jsem se trpělivostí a no se vzpamatoval

Nakonec provedl "restart" a níže vložený LOG.

Zoek.exe Version 4.0.0.4 Updated 19-08-2013
Tool run by JV on p 17.10.2014 at 15:11:56,18.
Microsoft Windows XP Home Edition 5.1.2600 Service Pack 3 x86
Running in: Normal Mode No Internet Access Detected
Launched: C:\Documents and Settings\JV\Plocha\zoek.exe [Script inserted]

==== System Restore Info ======================

17.10.2014 15:13:08 Zoek.exe System Restore Point Created Succesfully.

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

127.0.0.1 localhost

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\Explorer Bars\{32683183-48a0-441b-a342-7c2a440a9478} deleted successfully
HKEY_USERS\S-1-5-19\Software\Microsoft\Internet Explorer\Explorer Bars\{32683183-48a0-441b-a342-7c2a440a9478} deleted successfully
HKEY_USERS\S-1-5-20\Software\Microsoft\Internet Explorer\Explorer Bars\{32683183-48a0-441b-a342-7c2a440a9478} deleted successfully
HKEY_USERS\S-1-5-21-606747145-220523388-725345543-1004\Software\Microsoft\Internet Explorer\Explorer Bars\{32683183-48a0-441b-a342-7c2a440a9478} deleted successfully

==== Deleting CLSID Registry Values ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{1EA00BE1-6E54-4E2A-8099-680300BF23E1} deleted successfully
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{32683183-48a0-441b-a342-7c2a440a9478} deleted successfully

==== Deleting Services ======================

==== Deleting Files \ Folders ======================

"C:\Documents and Settings\JV\Data aplikací\DivX" not found
"C:\WINDOWS\002110_.tmp" deleted
"C:\WINDOWS\004840_.tmp" deleted
"C:\WINDOWS\SET3.tmp" deleted
"C:\WINDOWS\SET7.tmp" deleted
"C:\WINDOWS\tasks\Protected Search.job" deleted

==== Chrome Look ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
gomekmidlodglbbmalcneegieacbdmki - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx[15.07.2014 20:55]

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="https://www.seznam.cz/?clid=22668"
"Search Page"="http://www.google.com"
"Start Default_Page_URL"="http://www.google.com"
"Search Bar"="https://www.seznam.cz/?clid=22668"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://search.certified-toolbar.com?si= ... 6430-b5678"
"Start Default_Page_URL"="http://search.certified-toolbar.com?si= ... 6430-b5678"
"Default_Search_URL"="http://search.certified-toolbar.com?si= ... =chrome&q="
"Search Bar"="http://search.certified-toolbar.com?si= ... =chrome&q="
"Search Page"="http://search.certified-toolbar.com?si= ... =chrome&q="
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Search Page"="http://search.seznam.cz/?sourceid=quick ... earchTerms}"
"Start Default_Page_URL"="http://www.google.com"
"Start Page"="https://www.seznam.cz/?clid=22668"
"Search Bar"="https://www.seznam.cz/?clid=22668"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchURI]
"(Default)"="http://search.certified-toolbar.com?si= ... b5678&q=%s"
@="http://isearch.zoo.com/ofaz2/search/web ... 7&ql=&q=%s"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Software\Microsoft\Internet Explorer\SearchUrl]
"(Default)"="http://search.certified-toolbar.com?si= ... b5678&q=%s"
@="http://isearch.zoo.com/ofaz2/search/web ... 7&ql=&q=%s"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Software\Microsoft\Internet Explorer\SearchURI]
"(Default)"="http://search.certified-toolbar.com?si= ... b5678&q=%s"
@="http://isearch.zoo.com/ofaz2/search/web ... 7&ql=&q=%s"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchUrl]
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchURI]
"(Default)"="http://search.certified-toolbar.com?si= ... b5678&q=%s"
@="http://isearch.zoo.com/ofaz2/search/web ... 7&ql=&q=%s"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AboutURLs]
"Tabs"="about:newtab"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Software\Microsoft\Internet Explorer\Search]
"Start Page"="http://search.certified-toolbar.com?si= ... 6430-b5678"
"Start Default_Page_URL"="http://search.certified-toolbar.com?si= ... 6430-b5678"
"Default_Search_URL"="http://search.certified-toolbar.com?si= ... =chrome&q="
"Search Bar"="http://search.certified-toolbar.com?si= ... =chrome&q="
"Search Page"="http://search.certified-toolbar.com?si= ... =chrome&q="
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search]
"Start Page"="http://www.google.com"
"Start Default_Page_URL"="http://www.google.com"
"Default_Search_URL"="http://www.google.com"
"Search Bar"="http://www.google.com"
"Search Page"="http://www.google.com"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search]
"Start Page"="http://www.google.com"
"Start Default_Page_URL"="http://www.google.com"
"Default_Search_URL"="http://www.google.com"
"Search Bar"="http://www.google.com"
"Search Page"="http://www.google.com"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
No DefaultScope Set For HKCU

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Bar"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Start Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Start Page"="https://www.seznam.cz/?clid=22668"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Software\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Bar"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Start Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Bar"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Start Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchURI]
"(Default)"="http://search.msn.com/results.asp?q=%s"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Software\Microsoft\Internet Explorer\SearchUrl]
"(Default)"="http://search.msn.com/results.asp?q=%s"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Software\Microsoft\Internet Explorer\SearchURI]
"(Default)"="http://search.msn.com/results.asp?q=%s"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchUrl]
"(Default)"="http://search.msn.com/results.asp?q=%s"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchURI]
"(Default)"="http://search.msn.com/results.asp?q=%s"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl]
"(Default)"="http://search.msn.com/results.asp?q=%s"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AboutURLs]
"Tabs"="res://ieframe.dll/tabswelcome.htm"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Software\Microsoft\Internet Explorer\Search]
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Bar"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Start Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search]
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Bar"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Start Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search]
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Bar"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Start Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTer ... ORM=IE8SRC"
{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchT ... {startPage}"
{6cce48bb-5cbe-4461-aab2-820b96093f12} Mapy.cz Url="http://www.mapy.cz/?query={searchTerms} ... ckSearch_5"
{abe1c19f-2144-40c6-9d87-608474a6a1b8} Firmy.cz Url="http://www.firmy.cz/?q={searchTerms}&so ... ckSearch_5"
{bb2bee47-0f3f-48dc-a1f9-b7ede3c3356b} Zboží.cz Url="http://www.zbozi.cz/?q={searchTerms}&r= ... ckSearch_5"
{D7FD6A32-863D-4C85-9DBC-9FF68D4E5382} Google Url="http://www.google.com/search?q={searchT ... urceid=ie7"

==== Reset Google Chrome ======================

Nothing found to reset

==== Empty IE Cache ======================

C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5 emptied successfully
C:\Documents and Settings\JV\Local Settings\Temp\Temporary Internet Files\Content.IE5 emptied successfully
C:\Documents and Settings\LocalService\Local Settings\Temp\Temporary Internet Files\Content.IE5 emptied successfully
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5 emptied successfully
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5 emptied successfully
C:\Documents and Settings\JV\Local Settings\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot

==== Empty FireFox Cache ======================

No FireFox Profiles found

==== Empty Chrome Cache ======================

No Chrome User Data found

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

No Java Cache Found

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\WINDOWS\Temp successfully emptied
C:\DOCUME~1\JV\LOCALS~1\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\RECYCLER successfully emptied

==== Deleting Files / Folders ======================

"C:\Documents and Settings\JV\Local Settings\Temporary Internet Files\Content.IE5\index.dat" not found
"C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat" not deleted

==== EOF on p 17.10.2014 at 15:25:39,39 ======================

#7 Příspěvek od **vyosek** » 17 říj 2014 14:50

Poprosim o FRST http://forum.viry.cz/viewtopic.php?f=13&t=133100

77smoula77 · #8 Příspěvek od **77smoula77** » 17 říj 2014 17:09

LOG ve FRST.TXT je prázdný. Ale vytvořil se mi ještě log FRST3.TXT.

Addition.txt.zip: (6.72 KiB) Staženo 29 x

==================== End Of Log ============================

LOG FRST3.TXT

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 16-10-2014
Ran by JV (administrator) on JV on 17-10-2014 17:35:27
Running from C:\Documents and Settings\JV\Plocha
Loaded Profile: JV (Available profiles: JV)
Platform: Microsoft Windows XP Home Edition Service Pack 3 (X86) OS Language: Čeština
Internet Explorer Version 8
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(ATI Technologies Inc.) C:\WINDOWS\system32\ati2evxx.exe
() C:\WINDOWS\system32\WLTRYSVC.EXE
(Broadcom Corporation) C:\WINDOWS\system32\BCMWLTRY.EXE
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
(ATI Technologies Inc.) C:\WINDOWS\system32\ati2evxx.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
(Broadcom Corporation) C:\WINDOWS\system32\WLTRAY.EXE
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Microsoft Corporation) C:\WINDOWS\system32\wbem\unsecapp.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
(forum.viry.cz) C:\Documents and Settings\JV\Plocha\FRSTLauncher.exe

==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [ATICCC] => C:\Program Files\ATI Technologies\ATI.ACE\cli.exe [45056 2006-01-02] (ATI Technologies Inc.)
HKLM\...\Run: [Broadcom Wireless Manager UI] => C:\WINDOWS\system32\WLTRAY
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [692315 2012-10-28] (Synaptics, Inc.)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [4085896 2014-08-01] (AVAST Software)
Winlogon\Notify\AtiExtEvent: C:\WINDOWS\system32\Ati2evxx.dll (ATI Technologies Inc.)
HKU\S-1-5-21-606747145-220523388-725345543-1004\...\MountPoints2: F - F:\SecureDataUSBDrive.exe
HKU\S-1-5-21-606747145-220523388-725345543-1004\...\MountPoints2: {a585f100-a997-11e1-98ed-0016366bf64c} - F:\SecureDataUSBDrive.exe
HKU\S-1-5-21-606747145-220523388-725345543-1004\...\MountPoints2: {b7b02590-d57e-11e2-9b33-0016ce8a83a7} - F:\NokiaPCIA_Autorun.exe
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll (AVAST Software)
BootExecute: autocheck autochk * aswBoot.exe /M:64429c66 /dir:"C:\Program Files\AVAST Software\Avast"

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.seznam.cz/?clid=22668
SearchScopes: HKCU - DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={searchT ... {startPage}
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={searchT ... {startPage}
SearchScopes: HKCU - {6cce48bb-5cbe-4461-aab2-820b96093f12} URL = http://www.mapy.cz/?query={searchTerms} ... ckSearch_5
SearchScopes: HKCU - {abe1c19f-2144-40c6-9d87-608474a6a1b8} URL = http://www.firmy.cz/?q={searchTerms}&so ... ckSearch_5
SearchScopes: HKCU - {bb2bee47-0f3f-48dc-a1f9-b7ede3c3356b} URL = http://www.zbozi.cz/?q={searchTerms}&r= ... ckSearch_5
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO: Google Toolbar Notifier BHO -> {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} -> C:\Program Files\Google\GoogleToolbarNotifier\5.7.9012.1008\swg.dll (Google Inc.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - &Adresa - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\WINDOWS\System32\browseui.dll (Společnost Microsoft)
Toolbar: HKCU - &Odkazy - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\WINDOWS\system32\SHELL32.dll (Microsoft Corporation)
Toolbar: HKCU - Nástroje Lištičky - {34AB3C4C-DA1A-4067-96F4-31452C7CFE65} - C:\Program Files\Seznam.cz\bin\listicka.dll ()
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Handler: lid - {5C135180-9973-46D9-ABF4-148267CBB8BF} - C:\WINDOWS\System32\msvidctl.dll (Microsoft Corporation)

FireFox:
========
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2013-04-04]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2012-04-17]

Chrome:
=======
CHR HomePage: Default -> https://www.seznam.cz/
CHR Profile: C:\Documents and Settings\JV\Local Settings\Data aplikací\Google\Chrome\User Data\Default
CHR Extension: (Prezentace Google) - C:\Documents and Settings\JV\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-09-08]
CHR Extension: (Dokumenty Google) - C:\Documents and Settings\JV\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-04-10]
CHR Extension: (Disk Google) - C:\Documents and Settings\JV\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-04-10]
CHR Extension: (YouTube) - C:\Documents and Settings\JV\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-04-10]
CHR Extension: (Vyhledávání Google) - C:\Documents and Settings\JV\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-04-10]
CHR Extension: (Tabulky Google) - C:\Documents and Settings\JV\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-09-08]
CHR Extension: (avast! Online Security) - C:\Documents and Settings\JV\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-09-08]
CHR Extension: (Peněženka Google) - C:\Documents and Settings\JV\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-04-10]
CHR Extension: (Gmail) - C:\Documents and Settings\JV\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-04-10]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-07-15]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-07-15] (AVAST Software)
S3 DfSdkS; C:\Program Files\Ashampoo\Ashampoo WinOptimizer 11\DfsdkS.exe [406016 2009-08-24] (mst software GmbH, Germany) [File not signed]
R2 wltrysvc; C:\WINDOWS\System32\bcmwltry.exe [827499 2004-12-22] (Broadcom Corporation) [File not signed]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AegisP; C:\WINDOWS\System32\DRIVERS\AegisP.sys [17801 2012-04-17] (Meetinghouse Data Communications) [File not signed]
R3 AR5211; C:\WINDOWS\System32\DRIVERS\ar5211.sys [488448 2006-01-25] (Atheros Communications, Inc.)
R2 aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [24184 2014-07-15] ()
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [67824 2014-07-15] (AVAST Software)
R1 AswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [55112 2014-07-15] (AVAST Software)
R0 aswRvrt; C:\WINDOWS\system32\Drivers\aswRvrt.sys [49944 2014-07-15] ()
R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [779536 2014-07-15] (AVAST Software)
R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [414520 2014-07-15] (AVAST Software)
R1 aswTdi; C:\WINDOWS\system32\drivers\aswTdi.sys [57800 2014-07-15] (AVAST Software)
R0 aswVmm; C:\WINDOWS\system32\Drivers\aswVmm.sys [192352 2014-07-15] ()
R3 Cam5603D; C:\WINDOWS\System32\Drivers\BisonCam.sys [576000 2006-03-30] (Bison Electronics. Inc. )
S3 CCDECODE; C:\WINDOWS\System32\DRIVERS\CCDECODE.sys [17024 2008-04-14] (Microsoft Corporation)
S3 NdisIP; C:\WINDOWS\System32\DRIVERS\NdisIP.sys [10880 2008-04-14] (Microsoft Corporation)
S3 yukonwxp; C:\WINDOWS\System32\DRIVERS\yk51x86.sys [243328 2005-11-10] (Marvell)
S3 btaudio; system32\drivers\btaudio.sys [X]
S3 BTDriver; system32\DRIVERS\btport.sys [X]
S3 BTKRNL; system32\DRIVERS\btkrnl.sys [X]
S3 BTWDNDIS; system32\DRIVERS\btwdndis.sys [X]
S2 eLock2BurnerLockDriver; \??\C:\WINDOWS\system32\eLock2BurnerLockDriver.sys [X]
S2 eLock2FSCTLDriver; \??\C:\WINDOWS\system32\eLock2FSCTLDriver.sys [X]
S4 hpt3xx; No ImagePath
S4 IntelIde; No ImagePath
U5 ScsiPort; C:\WINDOWS\system32\drivers\scsiport.sys [96384 2008-04-14] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)

==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-10-17 17:35 - 2014-10-17 17:36 - 00011665 _____ () C:\Documents and Settings\JV\Plocha\FRST.txt
2014-10-17 17:35 - 2014-10-17 17:35 - 00000000 ____D () C:\FRST
2014-10-17 17:34 - 2014-10-17 17:18 - 00112640 _____ (forum.viry.cz) C:\Documents and Settings\JV\Plocha\FRSTLauncher.exe
2014-10-17 17:33 - 2014-10-17 17:18 - 01102848 _____ (Farbar) C:\Documents and Settings\JV\Plocha\FRST.exe
2014-10-17 15:21 - 2014-10-17 17:36 - 00000000 ____D () C:\Documents and Settings\JV\Local Settings\Temp
2014-10-17 15:21 - 2014-10-17 15:21 - 00000000 ____D () C:\Documents and Settings\NetworkService\Data aplikacÝ
2014-10-17 15:21 - 2014-10-17 15:11 - 00024064 _____ () C:\WINDOWS\zoek-delete.exe
2014-10-17 15:12 - 2014-10-17 15:25 - 00013825 _____ () C:\zoek-results.log
2014-10-17 15:11 - 2013-08-19 17:46 - 01277150 _____ () C:\Documents and Settings\JV\Plocha\zoek.exe
2014-10-17 10:28 - 2014-10-17 10:28 - 00000777 _____ () C:\Documents and Settings\All Users\Plocha\Malwarebytes Anti-Malware.lnk
2014-10-17 10:28 - 2014-10-17 10:28 - 00000000 ____D () C:\Program Files\Malwarebytes Anti-Malware
2014-10-17 10:28 - 2014-10-17 10:28 - 00000000 ____D () C:\Documents and Settings\All Users\Nabídka Start\Programy\Malwarebytes Anti-Malware
2014-10-17 10:28 - 2014-10-17 10:28 - 00000000 ____D () C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
2014-10-17 10:28 - 2014-10-17 10:21 - 19828376 _____ (Malwarebytes Corporation ) C:\Documents and Settings\JV\Plocha\mbam-setup-2.0.3.1025.exe
2014-10-17 10:28 - 2014-10-01 11:11 - 00054360 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2014-10-17 10:28 - 2014-10-01 11:11 - 00023256 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2014-10-17 09:41 - 2014-10-17 09:50 - 00000000 ____D () C:\AdwCleaner
2014-10-17 09:29 - 2014-10-17 09:29 - 00000000 ____D () C:\WINDOWS\ERUNT
2014-10-17 09:28 - 2014-10-17 09:23 - 01705698 _____ (Thisisu) C:\Documents and Settings\JV\Plocha\JRT.exe
2014-10-17 09:28 - 2014-10-17 09:07 - 01976320 _____ () C:\Documents and Settings\JV\Plocha\adwcleaner_4.000.exe
2014-10-17 07:39 - 2014-10-17 07:40 - 00000000 ____D () C:\rsit
2014-10-17 07:39 - 2014-10-17 07:39 - 00005048 _____ () C:\WINDOWS\setupapi.log
2014-10-17 07:39 - 2014-10-17 07:39 - 00000000 ____D () C:\Program Files\trend micro
2014-10-17 07:39 - 2014-10-17 07:29 - 00781909 _____ () C:\Documents and Settings\JV\Plocha\RSIT.exe
2014-10-16 13:55 - 2014-10-17 17:30 - 00000159 _____ () C:\WINDOWS\wiadebug.log
2014-10-16 13:55 - 2014-10-17 17:30 - 00000050 _____ () C:\WINDOWS\wiaservc.log
2014-10-16 13:55 - 2014-10-16 13:55 - 00000000 _____ () C:\WINDOWS\Sti_Trace.log
2014-10-16 13:53 - 2014-10-16 13:53 - 00000000 ____H () C:\WINDOWS\system32\config\system.sav.LOG
2014-10-16 13:53 - 2014-10-16 13:53 - 00000000 ____H () C:\WINDOWS\system32\config\software.sav.LOG
2014-10-16 13:52 - 2014-10-16 13:52 - 00000000 ____H () C:\WINDOWS\system32\config\SECURITY.sav.LOG
2014-10-16 13:52 - 2014-10-16 13:52 - 00000000 ____H () C:\WINDOWS\system32\config\SAM.sav.LOG
2014-10-16 13:51 - 2014-10-17 17:32 - 00054584 _____ () C:\WINDOWS\WindowsUpdate.log
2014-10-16 13:50 - 2014-10-16 13:53 - 00001848 _____ () C:\WINDOWS\system32\ASOROSet.bin
2014-10-16 13:49 - 2014-10-16 13:49 - 00000000 ____D () C:\WINDOWS\system32\config\RCCBakup
2014-10-16 10:15 - 2014-10-16 10:15 - 00000000 ____D () C:\Documents and Settings\All Users\Data aplikací\TEMP
2014-10-16 10:14 - 2014-10-16 10:14 - 00000763 _____ () C:\Documents and Settings\All Users\Plocha\Dll-Files Fixer.lnk
2014-10-16 10:14 - 2014-10-16 10:14 - 00000000 ____D () C:\Documents and Settings\All Users\Nabídka Start\Programy\Dll-Files Fixer
2014-10-16 10:05 - 2014-10-16 10:05 - 00001885 _____ () C:\Documents and Settings\All Users\Plocha\One-Click-Optimizer (WO11).lnk
2014-10-16 10:05 - 2014-10-16 10:05 - 00000879 _____ () C:\Documents and Settings\All Users\Plocha\Ashampoo WinOptimizer 11.lnk
2014-10-16 10:04 - 2009-08-24 22:08 - 00028160 _____ (mst software GmbH, Germany) C:\WINDOWS\system32\DfSdkBt.exe
2014-10-15 10:55 - 2014-10-15 11:32 - 00000000 ____D () C:\Documents and Settings\JV\Plocha\blbiny
2014-10-13 20:57 - 2014-10-15 16:47 - 00833024 _____ () C:\Documents and Settings\JV\Plocha\projekt vysočina.MSWMM
2014-10-13 18:07 - 2014-10-13 18:07 - 00000000 ____D () C:\Documents and Settings\All Users\Data aplikac
2014-10-13 18:03 - 2014-10-13 18:31 - 00000120 _____ () C:\Documents and Settings\All Users\jmexport.log
2014-10-13 18:03 - 2014-10-13 18:03 - 00000000 ___RD () C:\Documents and Settings\JV\Nabídka Start\Programy\Nástroje pro správu
2014-10-13 18:03 - 2014-10-13 18:03 - 00000000 ___RD () C:\Documents and Settings\JV\Dokumenty\Filmy
2014-10-13 17:41 - 2014-10-13 17:41 - 00000000 ____D () C:\Documents and Settings\All Users\Data aplikací\Pinnacle
2014-10-12 18:08 - 2014-10-12 18:15 - 00000000 ____D () C:\Documents and Settings\JV\Data aplikací\DivX
2014-10-12 18:07 - 2014-10-12 18:26 - 00000000 ____D () C:\Program Files\Common Files\DivX Shared
2014-10-12 18:06 - 2014-10-12 18:26 - 00000000 ____D () C:\Program Files\DivX
2014-10-12 18:05 - 2014-10-12 18:26 - 00000000 ____D () C:\Documents and Settings\All Users\Data aplikací\DivX
2014-10-11 21:59 - 2014-10-15 11:38 - 00000000 ____D () C:\Documents and Settings\JV\Plocha\test
2014-09-24 17:44 - 2014-09-24 17:44 - 03675824 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerInstaller.exe

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-10-17 17:37 - 2013-12-25 10:34 - 00000408 _____ () C:\WINDOWS\Tasks\SystemSockets.job
2014-10-17 17:37 - 2012-07-14 08:19 - 00000364 ____H () C:\WINDOWS\Tasks\avast! Emergency Update.job
2014-10-17 17:35 - 2012-04-12 12:23 - 00000000 ___HD () C:\Documents and Settings\JV\Local Settings\Data aplikací
2014-10-17 17:35 - 2012-04-12 12:23 - 00000000 ____D () C:\Documents and Settings\JV\Plocha
2014-10-17 17:31 - 2014-04-10 12:39 - 00000928 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-10-17 17:31 - 2014-03-15 13:01 - 00000216 _____ () C:\WINDOWS\Tasks\Přihlášení k oznamování konce poskytování služeb pro Microsoft Windows XP.job
2014-10-17 17:30 - 2012-04-12 12:18 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-10-17 17:30 - 2001-10-25 14:00 - 00002422 _____ () C:\WINDOWS\system32\wpa.dbl
2014-10-17 15:40 - 2013-05-11 14:49 - 00000410 _____ () C:\WINDOWS\Tasks\Browser Updater.job
2014-10-17 15:24 - 2012-04-12 12:22 - 00032442 _____ () C:\WINDOWS\SchedLgU.Txt
2014-10-17 15:23 - 2012-04-17 11:13 - 00524288 _____ () C:\WINDOWS\system32\config\ACEEvent.evt
2014-10-17 15:23 - 2012-04-12 12:23 - 00000178 ___SH () C:\Documents and Settings\JV\ntuser.ini
2014-10-17 15:23 - 2012-04-12 12:23 - 00000000 ____D () C:\Documents and Settings\JV
2014-10-17 15:21 - 2012-04-12 12:22 - 00000000 __SHD () C:\Documents and Settings\NetworkService
2014-10-17 11:00 - 2014-04-10 12:39 - 00000932 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-10-17 10:44 - 2012-12-02 10:24 - 00000914 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2014-10-17 10:41 - 2012-04-28 13:16 - 00000000 ____D () C:\Program Files\The KMPlayer
2014-10-17 10:28 - 2012-04-12 13:56 - 00000000 ___RD () C:\Documents and Settings\All Users\Nabídka Start\Programy
2014-10-17 10:28 - 2012-04-12 13:56 - 00000000 ____D () C:\Documents and Settings\All Users\Plocha
2014-10-17 10:28 - 2012-04-12 13:55 - 00000000 __RHD () C:\Documents and Settings\All Users\Data aplikací
2014-10-17 09:33 - 2012-04-12 12:23 - 00000000 __RHD () C:\Documents and Settings\JV\Data aplikací
2014-10-17 09:17 - 2013-11-23 12:57 - 00000000 ____D () C:\Documents and Settings\JV\Plocha\Ivinka
2014-10-17 09:17 - 2013-10-12 22:29 - 00000000 ___RD () C:\Documents and Settings\JV\Dokumenty\Obrázky
2014-10-17 09:17 - 2012-04-12 12:23 - 00000000 ___RD () C:\Documents and Settings\JV\Dokumenty
2014-10-16 15:25 - 2012-04-17 13:03 - 00002563 _____ () C:\Documents and Settings\JV\Plocha\Microsoft Office Word 2007.lnk
2014-10-16 13:56 - 2012-04-17 13:06 - 00000000 ____D () C:\WINDOWS\system32\Lang
2014-10-16 13:53 - 2012-04-12 13:55 - 00262144 _____ () C:\WINDOWS\system32\config\SECURITY.bak
2014-10-16 13:53 - 2012-04-12 13:54 - 32243712 _____ () C:\WINDOWS\system32\config\software.bak
2014-10-16 13:53 - 2012-04-12 13:54 - 07864320 _____ () C:\WINDOWS\system32\config\system.bak
2014-10-16 13:51 - 2012-04-12 13:55 - 00262144 _____ () C:\WINDOWS\system32\config\SAM.bak
2014-10-16 11:18 - 2012-04-12 13:56 - 01057130 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-10-16 10:14 - 2012-04-14 18:55 - 00123904 _____ () C:\Documents and Settings\JV\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-10-16 10:05 - 2012-04-18 10:37 - 00000000 ____D () C:\Documents and Settings\All Users\Nabídka Start\Programy\Ashampoo
2014-10-16 10:05 - 2012-04-18 10:37 - 00000000 ____D () C:\Documents and Settings\All Users\Data aplikací\ashampoo
2014-10-16 10:03 - 2012-04-18 10:37 - 00000000 ____D () C:\Program Files\Ashampoo
2014-10-15 17:59 - 2012-07-01 13:54 - 00000000 ____D () C:\Documents and Settings\JV\Data aplikací\Skype
2014-10-15 17:06 - 2014-04-10 12:44 - 00000000 ____D () C:\Documents and Settings\JV\Data aplikací\Google
2014-10-15 13:50 - 2013-05-24 19:14 - 00000000 ____D () C:\Documents and Settings\JV\Local Settings\Data aplikací\WMTools Downloaded Files
2014-10-15 10:52 - 2012-04-12 13:55 - 00270984 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-10-13 20:18 - 2012-04-16 13:04 - 00069232 _____ () C:\Documents and Settings\JV\Local Settings\Data aplikací\GDIPFONTCACHEV1.DAT
2014-10-13 18:33 - 2012-04-12 13:56 - 00000000 ___RD () C:\Documents and Settings\All Users\Dokumenty
2014-10-13 18:03 - 2012-04-12 12:23 - 00000000 ___RD () C:\Documents and Settings\JV\Nabídka Start\Programy
2014-10-13 17:58 - 2014-05-15 21:02 - 00000000 ____D () C:\Documents and Settings\JV\Plocha\MGR. SZZ
2014-10-13 17:40 - 2013-04-04 19:27 - 00000000 ____D () C:\Documents and Settings\JV\Local Settings\Data aplikací\Downloaded Installations
2014-10-13 17:06 - 2012-04-12 12:23 - 00000000 ___RD () C:\Documents and Settings\JV\Oblíbené položky
2014-10-12 17:38 - 2014-04-10 12:39 - 00000000 ____D () C:\Documents and Settings\JV\Local Settings\Data aplikací\Google
2014-10-08 15:00 - 2014-03-15 13:01 - 00000210 _____ () C:\WINDOWS\Tasks\Měsíční oznamování konce poskytování služeb pro Microsoft Windows XP.job
2014-09-24 17:44 - 2012-04-16 13:23 - 00701104 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2014-09-24 17:44 - 2012-04-16 13:23 - 00071344 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================

==================== MBR and Partition Table ==================

==================== Scheduled Tasks (whitelisted) ==================

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\avast! Emergency Update.job => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe
Task: C:\WINDOWS\Tasks\Browser Updater.job => C:\Program Files\HomeTab\WRemoteUpdater.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\Měsíční oznamování konce poskytování služeb pro Microsoft Windows XP.job => C:\WINDOWS\system32\xp_eos.exe
Task: C:\WINDOWS\Tasks\Přihlášení k oznamování konce poskytování služeb pro Microsoft Windows XP.job => C:\WINDOWS\system32\xp_eos.exe
Task: C:\WINDOWS\Tasks\SystemSockets.job => C:\Program Files\HomeTab\WBrowserSockets.exe <==== ATTENTION

==================== Alternate Data Streams (whitelisted) ==================

==================== Security Center ==================

AV: avast! Antivirus (Disabled - Up to date) {7591DB91-41F0-48A3-B128-1A293FD8233D}

===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)

***** Velikost "Plochy" *****

Velikost slozky "C:\Documents and Settings\JV\Plocha" je 1686 MB.

***** Startup Programs *****

***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"="C:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"="C:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"="C:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"C:\\Program Files\\Google\\Chrome\\Application\\chrome.exe"="C:\\Program Files\\Google\\Chrome\\Application\\chrome.exe:*:Enabled:Google Chrome"
"C:\\Program Files\\Skype\\Phone\\Skype.exe"="C:\\Program Files\\Skype\\Phone\\Skype.exe:*:Enabled:Skype"
"D:\\Programs\\RM.exe"="D:\\Programs\\RM.exe:*:Enabled:Render Manager"
"D:\\Programs\\umi.exe"="D:\\Programs\\umi.exe:*:Enabled:umi"
"D:\\Programs\\VideoSpin.exe"="D:\\Programs\\VideoSpin.exe:*:Enabled:Pinnacle VideoSpin"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR"=dword:00000000

==================== End Of Log ==============================

#9 Příspěvek od **vyosek** » 17 říj 2014 21:36

Tvorba fixlistu pro FRST

Spustte poznamkovy blok (Start-spustit-notepad)
Zkopirujte skript nize

Kód: Vybrat vše

Start
CloseProcesses:
HKU\S-1-5-21-606747145-220523388-725345543-1004\...\MountPoints2: F - F:\SecureDataUSBDrive.exe
HKU\S-1-5-21-606747145-220523388-725345543-1004\...\MountPoints2: {a585f100-a997-11e1-98ed-0016366bf64c} - F:\SecureDataUSBDrive.exe
HKU\S-1-5-21-606747145-220523388-725345543-1004\...\MountPoints2: {b7b02590-d57e-11e2-9b33-0016ce8a83a7} - F:\NokiaPCIA_Autorun.exe

S3 btaudio; system32\drivers\btaudio.sys [X]
S3 BTDriver; system32\DRIVERS\btport.sys [X]
S3 BTKRNL; system32\DRIVERS\btkrnl.sys [X]
S3 BTWDNDIS; system32\DRIVERS\btwdndis.sys [X]
S2 eLock2BurnerLockDriver; \??\C:\WINDOWS\system32\eLock2BurnerLockDriver.sys [X]
S2 eLock2FSCTLDriver; \??\C:\WINDOWS\system32\eLock2FSCTLDriver.sys [X]
S4 hpt3xx; No ImagePath
S4 IntelIde; No ImagePath

C:\Program Files\HomeTab
2014-10-17 17:35 - 2014-10-17 17:36 - 00011665 _____ () C:\Documents and Settings\JV\Plocha\FRST.txt
2014-10-17 15:21 - 2014-10-17 15:11 - 00024064 _____ () C:\WINDOWS\zoek-delete.exe
2014-10-17 15:12 - 2014-10-17 15:25 - 00013825 _____ () C:\zoek-results.log
2014-10-17 15:11 - 2013-08-19 17:46 - 01277150 _____ () C:\Documents and Settings\JV\Plocha\zoek.exe
2014-10-17 10:28 - 2014-10-17 10:21 - 19828376 _____ (Malwarebytes Corporation ) C:\Documents and Settings\JV\Plocha\mbam-setup-2.0.3.1025.exe
2014-10-17 09:41 - 2014-10-17 09:50 - 00000000 ____D () C:\AdwCleaner
2014-10-17 09:29 - 2014-10-17 09:29 - 00000000 ____D () C:\WINDOWS\ERUNT
2014-10-17 09:28 - 2014-10-17 09:23 - 01705698 _____ (Thisisu) C:\Documents and Settings\JV\Plocha\JRT.exe
2014-10-17 09:28 - 2014-10-17 09:07 - 01976320 _____ () C:\Documents and Settings\JV\Plocha\adwcleaner_4.000.exe
2014-10-17 07:39 - 2014-10-17 07:40 - 00000000 ____D () C:\rsit
2014-10-17 07:39 - 2014-10-17 07:39 - 00000000 ____D () C:\Program Files\trend micro
2014-10-17 07:39 - 2014-10-17 07:29 - 00781909 _____ () C:\Documents and Settings\JV\Plocha\RSIT.exe

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\avast! Emergency Update.job => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe
Task: C:\WINDOWS\Tasks\Browser Updater.job => C:\Program Files\HomeTab\WRemoteUpdater.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\Měsíční oznamování konce poskytování služeb pro Microsoft Windows XP.job => C:\WINDOWS\system32\xp_eos.exe
Task: C:\WINDOWS\Tasks\Přihlášení k oznamování konce poskytování služeb pro Microsoft Windows XP.job => C:\WINDOWS\system32\xp_eos.exe
Task: C:\WINDOWS\Tasks\SystemSockets.job => C:\Program Files\HomeTab\WBrowserSockets.exe <==== ATTENTION

Hosts:
EmptyTemp:
Reboot:
End

Ulozte vytvoreny TXT jako fixlist.txt
Presunte vytvoreny fixlist vedle FRST

Spustte znovu FRST.exe

Kliknete na Fix
Probehne oprava a vytvori log Fixlog.txt

Restart PC a dejte mi sem fixlog.txt

77smoula77 · #10 Příspěvek od **77smoula77** » 17 říj 2014 22:05

Vkládám LOG.

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 16-10-2014
Ran by JV at 2014-10-17 22:56:39 Run:1
Running from C:\Documents and Settings\JV\Plocha
Loaded Profile: JV (Available profiles: JV)
Boot Mode: Normal

==============================================

Content of fixlist:
*****************
Start
CloseProcesses:
HKU\S-1-5-21-606747145-220523388-725345543-1004\...\MountPoints2: F - F:\SecureDataUSBDrive.exe
HKU\S-1-5-21-606747145-220523388-725345543-1004\...\MountPoints2: {a585f100-a997-11e1-98ed-0016366bf64c} - F:\SecureDataUSBDrive.exe
HKU\S-1-5-21-606747145-220523388-725345543-1004\...\MountPoints2: {b7b02590-d57e-11e2-9b33-0016ce8a83a7} - F:\NokiaPCIA_Autorun.exe

S3 btaudio; system32\drivers\btaudio.sys [X]
S3 BTDriver; system32\DRIVERS\btport.sys [X]
S3 BTKRNL; system32\DRIVERS\btkrnl.sys [X]
S3 BTWDNDIS; system32\DRIVERS\btwdndis.sys [X]
S2 eLock2BurnerLockDriver; \??\C:\WINDOWS\system32\eLock2BurnerLockDriver.sys [X]
S2 eLock2FSCTLDriver; \??\C:\WINDOWS\system32\eLock2FSCTLDriver.sys [X]
S4 hpt3xx; No ImagePath
S4 IntelIde; No ImagePath

C:\Program Files\HomeTab
2014-10-17 17:35 - 2014-10-17 17:36 - 00011665 _____ () C:\Documents and Settings\JV\Plocha\FRST.txt
2014-10-17 15:21 - 2014-10-17 15:11 - 00024064 _____ () C:\WINDOWS\zoek-delete.exe
2014-10-17 15:12 - 2014-10-17 15:25 - 00013825 _____ () C:\zoek-results.log
2014-10-17 15:11 - 2013-08-19 17:46 - 01277150 _____ () C:\Documents and Settings\JV\Plocha\zoek.exe
2014-10-17 10:28 - 2014-10-17 10:21 - 19828376 _____ (Malwarebytes Corporation ) C:\Documents and Settings\JV\Plocha\mbam-setup-2.0.3.1025.exe
2014-10-17 09:41 - 2014-10-17 09:50 - 00000000 ____D () C:\AdwCleaner
2014-10-17 09:29 - 2014-10-17 09:29 - 00000000 ____D () C:\WINDOWS\ERUNT
2014-10-17 09:28 - 2014-10-17 09:23 - 01705698 _____ (Thisisu) C:\Documents and Settings\JV\Plocha\JRT.exe
2014-10-17 09:28 - 2014-10-17 09:07 - 01976320 _____ () C:\Documents and Settings\JV\Plocha\adwcleaner_4.000.exe
2014-10-17 07:39 - 2014-10-17 07:40 - 00000000 ____D () C:\rsit
2014-10-17 07:39 - 2014-10-17 07:39 - 00000000 ____D () C:\Program Files\trend micro
2014-10-17 07:39 - 2014-10-17 07:29 - 00781909 _____ () C:\Documents and Settings\JV\Plocha\RSIT.exe

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\avast! Emergency Update.job => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe
Task: C:\WINDOWS\Tasks\Browser Updater.job => C:\Program Files\HomeTab\WRemoteUpdater.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\Měsíční oznamování konce poskytování služeb pro Microsoft Windows XP.job => C:\WINDOWS\system32\xp_eos.exe
Task: C:\WINDOWS\Tasks\Přihlášení k oznamování konce poskytování služeb pro Microsoft Windows XP.job => C:\WINDOWS\system32\xp_eos.exe
Task: C:\WINDOWS\Tasks\SystemSockets.job => C:\Program Files\HomeTab\WBrowserSockets.exe <==== ATTENTION

Hosts:
EmptyTemp:
Reboot:
End
*****************

Processes closed successfully.
"HKU\S-1-5-21-606747145-220523388-725345543-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\S-1-5-21-606747145-220523388-725345543-1004" => Key not found.
"HKU\S-1-5-21-606747145-220523388-725345543-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{a585f100-a997-11e1-98ed-0016366bf64c}" => Key deleted successfully.
"HKCR\CLSID\{a585f100-a997-11e1-98ed-0016366bf64c}" => Key not found.
"HKU\S-1-5-21-606747145-220523388-725345543-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b7b02590-d57e-11e2-9b33-0016ce8a83a7}" => Key deleted successfully.
"HKCR\CLSID\{b7b02590-d57e-11e2-9b33-0016ce8a83a7}" => Key not found.
btaudio => Service deleted successfully.
BTDriver => Service deleted successfully.
BTKRNL => Service deleted successfully.
BTWDNDIS => Service deleted successfully.
eLock2BurnerLockDriver => Service deleted successfully.
eLock2FSCTLDriver => Service deleted successfully.
hpt3xx => Service deleted successfully.
IntelIde => Service deleted successfully.
"C:\Program Files\HomeTab" => File/Directory not found.
C:\Documents and Settings\JV\Plocha\FRST.txt => Moved successfully.
C:\WINDOWS\zoek-delete.exe => Moved successfully.
C:\zoek-results.log => Moved successfully.
C:\Documents and Settings\JV\Plocha\zoek.exe => Moved successfully.
C:\Documents and Settings\JV\Plocha\mbam-setup-2.0.3.1025.exe => Moved successfully.
C:\AdwCleaner => Moved successfully.
C:\WINDOWS\ERUNT => Moved successfully.
C:\Documents and Settings\JV\Plocha\JRT.exe => Moved successfully.
C:\Documents and Settings\JV\Plocha\adwcleaner_4.000.exe => Moved successfully.
C:\rsit => Moved successfully.
C:\Program Files\trend micro => Moved successfully.
C:\Documents and Settings\JV\Plocha\RSIT.exe => Moved successfully.
C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => Moved successfully.
C:\WINDOWS\Tasks\avast! Emergency Update.job => Moved successfully.
C:\WINDOWS\Tasks\Browser Updater.job => Moved successfully.
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => Moved successfully.
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => Moved successfully.
C:\WINDOWS\Tasks\Měsíční oznamování konce poskytování služeb pro Microsoft Windows XP.job => Moved successfully.
C:\WINDOWS\Tasks\Přihlášení k oznamování konce poskytování služeb pro Microsoft Windows XP.job => Moved successfully.
C:\WINDOWS\Tasks\SystemSockets.job => Moved successfully.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.
EmptyTemp: => Removed 203.8 MB temporary data.

The system needed a reboot.

==== End of Fixlog ====

#11 Příspěvek od **vyosek** » 17 říj 2014 22:13

Nastala nejaka zmena v chovani??

77smoula77 · #12 Příspěvek od **77smoula77** » 17 říj 2014 22:15

V běžně spuštěném systému - beze změny.

V nouzovém režimu - jsou reakce na klávesy a touchpad správné.

#13 Příspěvek od **vyosek** » 18 říj 2014 05:16

T-Cleaner http://vyosek.tym.cz/pro_usery/T-Cleaner.exe

Stahnete a spustte
Pro potvrzeni volby mackejte A, Enter
Po pouziti utilitu smazte
Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)

OTC http://oldtimer.geekstogo.com/OTC.exe

Stahnete a spustte
Kliknete na CleanUp a potvrdte YES
Program uklidi a restartuje PC

TFC http://oldtimer.geekstogo.com/TFC.exe

Stahnete a spustte
Kliknete na Start a potvrdte OK
Program uklidi a restartuje pc
Po pouziti utilitu smazte

Stahnete Ccleaner http://forum.viry.cz/viewtopic.php?t=7478
Panel čistič

Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner

Panel registry

dejte Hledej problémy
nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
postup opakujte dokud nebude bez problemu - vetsinou cca 3x

Panel nástroje

Zde muzete odinstalovat nepotrebne programy

CCleaner doporucuji pouzivat cca jednou za tyden

Udelejte CDI dle kolegy

MiliNess píše:Stáhni CrystalDiskInfo, v nabídce Úpravy zvol Kopírovat a obsah schránky sem vlož pomocí Ctrl+V.

77smoula77 · #14 Příspěvek od **77smoula77** » 18 říj 2014 13:09

Vše provedeno dle pokynů (nejtěžší bylo stisknout A a Enter). Zatím beze změn. Při pokusu o restart přes "START" - "VYPNOUT" - notebook přestane reagovat (ani neukáže tabulku voleb; vypnout restarovat, ...) - pouze lze pohybovat s kurzorem (myš v USB).

V nouzovém režimu jede vše tak jak má (touchpad běhá, klávesnice píše).

----------------------------------------------------------------------------
CrystalDiskInfo 5.0.0 (C) 2008-2012 hiyohiyo
Crystal Dew World : http://crystalmark.info/
----------------------------------------------------------------------------

OS : Windows XP Home Edition SP3 [5.1 Build 2600] (x86)
Date : 2014/10/18 13:50:09

-- Controller Map ----------------------------------------------------------
+ PCI Standardní dvoukanálový řadič IDE [ATA]
+ Primární kanál IDE (0)
- Slimtype DVDRW SSM-8515S
- HTS541080G9AT00
- Sekundární kanál IDE (1)

-- Disk List ---------------------------------------------------------------
(1) HTS541080G9AT00 : 80,0 GB [0/0/0, pd1]

----------------------------------------------------------------------------
(1) HTS541080G9AT00
----------------------------------------------------------------------------
Model : HTS541080G9AT00
Firmware : MB4OA60A
Serial Number : MPB4LAXKJMJE1M
Disk Size : 80,0 GB (8,4/80,0/80,0)
Buffer Size : 7539 KB
Queue Depth : 1
# of Sectors : 156301488
Rotation Rate : Neznámy údaj
Interface : Parallel ATA
Major Version : ATA/ATAPI-6
Minor Version : ATA/ATAPI-6 T13 1410D version 3a
Transfer Mode : Ultra DMA/100
Power On Hours : 5974 hod.
Power On Count : 2978 krát
Temparature : 38 C (100 F)
Health Status : Dobrý
Features : S.M.A.R.T., APM, AAM, 48bit LBA
APM Level : 4080h [ON]
AAM Level : 80FEh [OFF]

-- S.M.A.R.T. --------------------------------------------------------------
ID Cur Wor Thr RawValues(6) Attribute Name
01 100 100 _62 000000000000 Počet chyb čtení
02 100 100 _40 000000000000 Průchodnost disku
03 194 194 _33 000B00000001 Čas na roztočení ploten
04 _99 _99 __0 000000000BE4 Počet spuštění/zastavení
05 100 100 __5 000000000000 Počet přemapovaných sektorů
07 100 100 _67 000000000000 Počet chybných hledání
08 100 100 _40 000000000000 Čas potřebný na vyhledání
09 _87 _87 __0 000000001756 Hodin v činnosti
0A 100 100 _60 000000000000 Počet opakovaných pokusů o roztočení ploten
0C _99 _99 __0 000000000BA2 Počet cyklů zapnutí zařízení
BF 100 100 __0 000000000000 Počet udalostí zaznamenaných otřesovým senzorem
C0 100 100 __0 000000000059 Počet vypnutí disku
C1 _85 _85 __0 000000025C2C Počet cyklů načítání/vymazání
C2 144 144 __0 0031000E0026 Teplota
C4 100 100 __0 000000000007 Počet udalostí s číslem realokování sektorů
C5 100 100 __0 000000000000 Počet podezřelých sektorů
C6 100 100 __0 000000000000 Počet neopravitelných sektorů
C7 200 200 __0 000000000000 Počet chyb v kontrolním součtu UltraDMA

-- IDENTIFY_DEVICE ---------------------------------------------------------
0 1 2 3 4 5 6 7 8 9
000: 045A 3FFF C837 0010 0000 003F 003F 0000 0000 0000
010: 2020 2020 2020 4D50 4234 584B 584B 4A4D 4A45 314D
020: 0003 3AE6 0004 4D42 344F 3041 3041 4854 5335 3431
030: 3038 3047 3941 5430 3020 2020 2020 2020 2020 2020
040: 2020 2020 2020 2020 2020 2020 2020 8010 0000 0F00
050: 4000 0200 0200 0007 3FFF 003F 003F FC10 00FB 0110
060: F8B0 0950 0000 0007 0003 0078 0078 00F0 0078 0000
070: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
080: 007C 0019 746B 7FE9 4023 3D49 3D49 4023 203F 001A
090: 0000 4080 FFFE 603B 80FE 0000 0000 0000 0000 0000
100: F8B0 0950 0000 0000 0000 0000 0000 880D 0000 0000
110: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
120: 0000 0000 0000 0000 0000 0000 0000 0000 0009 000B
130: 0042 0000 0000 0000 0000 41FC 41FC 0000 0000 0000
140: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
150: 8000 0000 344F 0000 0000 1313 1313 0000 0000 0000
160: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
170: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
180: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
190: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
200: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
210: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
220: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
230: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
240: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
250: 0000 0000 0000 0000 0000 B5A5

77smoula77 · #15 Příspěvek od **77smoula77** » 19 říj 2014 03:32

Děkuji tímto za Vaši pomoc a za Váš čas strávený při hledání "viníka" vzniklých problémů.

"Viníka" jsem již našel: "Microsoft ACPI-Compliant Control Method Battery" - jakmile jsem jej zakázal ve "správci zařízení", všechny problémy byly pryč.

Děkuji za kvalitní vyčistění notebooku a za Vaši snahu mi pomoci v nesnázi.

Tímto můžete toto téma uzavřít.

VIRY.CZ

Extrémní zpomalení - klávesnice, TouchPad, načítání OS

Extrémní zpomalení - klávesnice, TouchPad, načítání OS

Re: Extrémní zpomalení - klávesnice, TouchPad, načítání OS

Re: Extrémní zpomalení - klávesnice, TouchPad, načítání OS

Re: Extrémní zpomalení - klávesnice, TouchPad, načítání OS

Re: Extrémní zpomalení - klávesnice, TouchPad, načítání OS

Re: Extrémní zpomalení - klávesnice, TouchPad, načítání OS

Re: Extrémní zpomalení - klávesnice, TouchPad, načítání OS

Re: Extrémní zpomalení - klávesnice, TouchPad, načítání OS

Re: Extrémní zpomalení - klávesnice, TouchPad, načítání OS

Re: Extrémní zpomalení - klávesnice, TouchPad, načítání OS

Re: Extrémní zpomalení - klávesnice, TouchPad, načítání OS

Re: Extrémní zpomalení - klávesnice, TouchPad, načítání OS

Re: Extrémní zpomalení - klávesnice, TouchPad, načítání OS

Re: Extrémní zpomalení - klávesnice, TouchPad, načítání OS

Re: Extrémní zpomalení - klávesnice, TouchPad, načítání OS