Problem NB Lenovo AVG - zvuk - ostatni

Zpráva

TomDIVER · #16 Příspěvek od **TomDIVER** » 10 úno 2015 02:25

omlouvam se nedocetl jsem to, takze znovu a lepe.

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 08-02-2015
Ran by Pavel (administrator) on ZYP-NB on 10-02-2015 02:23:05
Running from C:\Users\Pavel\Desktop
Loaded Profiles: UpdatusUser & Pavel (Available profiles: UpdatusUser & Pavel)
Platform: Windows 8.1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe
(Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(McAfee, Inc.) C:\Windows\System32\mfevtps.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mcshield.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mfefire.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe
(Lenovo (Beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\utility.exe
(Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\BTStackServer.exe
(Vimicro) C:\Program Files (x86)\USB Camera2\VM332STI.EXE
(CyberLink) C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe
(CyberLink Corp.) C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe
(Dropbox, Inc.) C:\Users\Pavel\AppData\Roaming\Dropbox\bin\Dropbox.exe
(CyberLink Corp.) C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.Reader_6.3.9654.17499_x64__8wekyb3d8bbwe\glcnd.exe

==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SACpl.exe [1647616 2012-06-13] (Conexant Systems, Inc.)
HKLM\...\Run: [cAudioFilterAgent] => C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [887968 2012-06-15] (Conexant Systems, Inc.)
HKLM\...\Run: [Energy Management] => C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [17079376 2014-03-14] (Lenovo (Beijing) Limited)
HKLM\...\Run: [EnergyUtility] => C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [191568 2014-03-14] (Lenovo(beijing) Limited)
HKLM-x32\...\Run: [332BigDog] => C:\Program Files (x86)\USB Camera2\VM332STI.EXE [548864 2012-03-20] (Vimicro)
HKLM-x32\...\Run: [Dolby Advanced Audio v2] => C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe [508656 2012-07-26] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [YouCam Mirage] => C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe [136488 2012-07-27] (CyberLink)
HKLM-x32\...\Run: [YouCam Tray] => C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe [167024 2012-07-27] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdateP2GShortCut] => C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [217088 2012-04-19] (CyberLink Corp.)
HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe [91432 2012-03-29] (CyberLink Corp.)
HKLM-x32\...\Run: [Intel AppUp(SM) center] => C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [155488 2012-07-12] (Intel Corporation)
HKU\S-1-5-21-2388325176-3897423459-1596443417-1001\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [516608 2013-08-22] (Microsoft Corporation)
HKU\S-1-5-21-2388325176-3897423459-1596443417-1002\...\MountPoints2: {b51317da-366e-11e4-be7d-485ab6dfc220} - "F:\WD SmartWare.exe" autoplay=true
AppInit_DLLs: C:\windows\system32\nvinitx.dll => C:\windows\system32\nvinitx.dll [184048 2013-12-26] (NVIDIA Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
Startup: C:\Users\Pavel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\73EEB0B08.lnk
ShortcutTarget: 73EEB0B08.lnk -> C:\PROGRA~3\80B0BEE37.cpp (No File)
Startup: C:\Users\Pavel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Pavel\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [SugarSyncBackedUp] -> {0C4A258A-3F3B-4FFF-80A7-9B3BEC139472} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll (SugarSync, Inc.)
ShellIconOverlayIdentifiers: [SugarSyncPending] -> {62CCD8E3-9C21-41E1-B55E-1E26DFC68511} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll (SugarSync, Inc.)
ShellIconOverlayIdentifiers: [SugarSyncRoot] -> {A759AFF6-5851-457D-A540-F4ECED148351} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll (SugarSync, Inc.)
ShellIconOverlayIdentifiers: [SugarSyncShared] -> {1574C9EF-7D58-488F-B358-8B78C1538F51} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll (SugarSync, Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-2388325176-3897423459-1596443417-1002\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.seznam.cz/domovska-stranka
HKU\S-1-5-21-2388325176-3897423459-1596443417-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://lenovo13.msn.com/?pc=LCJB
HKU\S-1-5-21-2388325176-3897423459-1596443417-1002\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://www.lenovo.com
URLSearchHook: [S-1-5-21-2388325176-3897423459-1596443417-1001] ATTENTION ==> Default URLSearchHook is missing.
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2388325176-3897423459-1596443417-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2388325176-3897423459-1596443417-1002 -> {AF317CD5-FB16-451B-A41B-2F93E2640AB4} URL =
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)

Chrome:
=======
CHR DefaultSuggestURL: Default -> http://toolbar.avg.com/acp?q={searchTerms}&o=1
CHR Profile: C:\Users\Pavel\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Peněženka Google) - C:\Users\Pavel\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-11-22]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S2 BcmBtRSupport; C:\Windows\system32\BtwRSupportService.exe [2252504 2013-09-04] (Broadcom Corporation.)
R2 btwdins; C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe [959256 2012-11-15] (Broadcom Corporation.)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [319376 2014-10-01] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
R2 McShield; C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe [237920 2012-06-22] (McAfee, Inc.)
S2 mfecore; C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe [1041192 2014-07-24] (McAfee, Inc.)
R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [219752 2014-06-20] (McAfee, Inc.)
R2 mfevtp; C:\windows\system32\mfevtps.exe [189912 2014-06-20] (McAfee, Inc.)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5426448 2014-12-15] (TeamViewer GmbH)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-11-11] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1674640 2014-11-11] (Microsoft Corporation)
S2 Winmgmt; C:\ProgramData\73EEB0B08.zot [363520 2015-02-09] () [File not signed]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R1 avgtp; C:\WINDOWS\system32\drivers\avgtpx64.sys [52000 2014-12-10] (AVG Technologies)
R3 bcbtums; C:\Windows\system32\drivers\bcbtums.sys [170712 2013-09-04] (Broadcom Corporation.)
R3 BCM43XX; C:\Windows\system32\DRIVERS\bcmwl63a.sys [8536752 2013-07-01] (Broadcom Corporation)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-09-24] (Microsoft Corporation)
S3 cfwids; C:\Windows\System32\drivers\cfwids.sys [72128 2014-06-20] (McAfee, Inc.)
R3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [181704 2014-06-20] (McAfee, Inc.)
R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [313544 2014-06-20] (McAfee, Inc.)
S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [70600 2014-06-20] (McAfee, Inc.)
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [523792 2014-06-20] (McAfee, Inc.)
R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [786296 2014-06-20] (McAfee, Inc.)
R3 mfencbdc; C:\Windows\system32\DRIVERS\mfencbdc.sys [444720 2014-07-24] (McAfee, Inc.)
S3 mfencrk; C:\Windows\system32\DRIVERS\mfencrk.sys [96592 2014-07-24] (McAfee, Inc.)
S3 mferkdet; C:\Windows\System32\drivers\mferkdet.sys [106112 2012-06-22] (McAfee, Inc.)
R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [348552 2014-06-20] (McAfee, Inc.)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [43832 2012-08-27] (Synaptics Incorporated)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-11-11] (Microsoft Corporation)
S3 wsvd; C:\Windows\system32\DRIVERS\wsvd.sys [102376 2012-06-14] ("CyberLink)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)

==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-10 02:13 - 2015-02-10 02:13 - 02112512 _____ () C:\Users\Pavel\Downloads\adwcleaner_4.110 (2).exe
2015-02-10 02:10 - 2015-02-10 02:10 - 00006368 _____ () C:\WINDOWS\PFRO.log
2015-02-10 02:00 - 2015-02-10 02:11 - 00624875 _____ () C:\Users\Pavel\Desktop\avgremover.log
2015-02-10 01:59 - 2015-02-10 01:59 - 03681088 _____ (AVG Technologies CZ, s.r.o.) C:\Users\Pavel\Desktop\avg_remover_stf_x64_2015_5501.exe
2015-02-10 01:53 - 2015-02-10 01:54 - 02112512 _____ () C:\Users\Pavel\Downloads\adwcleaner_4.110 (1).exe
2015-02-10 01:46 - 2015-02-10 01:48 - 00000000 ____D () C:\AdwCleaner
2015-02-10 01:43 - 2015-02-10 01:43 - 01711992 _____ () C:\Users\Pavel\Desktop\AVGInstLog.zip
2015-02-10 01:37 - 2015-02-10 01:37 - 02112512 _____ () C:\Users\Pavel\Desktop\adwcleaner_4.110.exe
2015-02-10 01:36 - 2015-02-10 01:37 - 02112512 _____ () C:\Users\Pavel\Downloads\adwcleaner_4.110.exe
2015-02-10 00:55 - 2015-02-10 00:55 - 00000351 _____ () C:\Users\Pavel\Desktop\Addition.zip
2015-02-10 00:54 - 2015-02-10 01:25 - 00008732 _____ () C:\Users\Pavel\Desktop\Addition.txt
2015-02-10 00:53 - 2015-02-10 02:23 - 00013001 _____ () C:\Users\Pavel\Desktop\FRST.txt
2015-02-10 00:52 - 2015-02-10 02:23 - 00000000 ____D () C:\FRST
2015-02-10 00:31 - 2014-04-16 00:35 - 00028352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aspnet_counters.dll
2015-02-10 00:31 - 2014-04-16 00:34 - 00029888 _____ (Microsoft Corporation) C:\WINDOWS\system32\aspnet_counters.dll
2015-02-10 00:23 - 2015-02-10 00:23 - 01107968 _____ () C:\Users\Pavel\Desktop\RSIT32.exe
2015-02-09 23:54 - 2015-02-09 23:54 - 00000000 _____ () C:\Users\Pavel\Desktop\FRSTLauncher.exe
2015-02-09 23:50 - 2015-02-09 23:50 - 02132992 _____ (Farbar) C:\Users\Pavel\Desktop\FRST64.exe
2015-02-09 23:44 - 2015-02-09 23:44 - 00000000 ____D () C:\rsit
2015-02-09 23:42 - 2015-02-09 23:42 - 01720538 _____ () C:\Users\Pavel\Desktop\AVGInstLog.cab
2015-02-09 23:23 - 2015-02-09 23:23 - 01222144 _____ () C:\Users\Pavel\Desktop\RSITx64.exe
2015-02-09 20:39 - 2015-02-09 20:39 - 00363520 ____T () C:\ProgramData\73EEB0B08.zot
2015-02-09 19:03 - 2015-02-10 02:11 - 00004038 _____ () C:\WINDOWS\setupact.log
2015-02-09 19:03 - 2015-02-09 19:03 - 00000000 _____ () C:\WINDOWS\setuperr.log
2015-01-28 22:04 - 2015-02-10 02:11 - 00706880 _____ () C:\WINDOWS\WindowsUpdate.log
2015-01-19 21:26 - 2015-01-20 00:07 - 00000000 ____D () C:\Program Files (x86)\TeamViewer
2015-01-19 21:26 - 2015-01-19 21:26 - 00001070 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 10.lnk
2015-01-19 21:26 - 2015-01-19 21:26 - 00001058 _____ () C:\Users\Public\Desktop\TeamViewer 10.lnk
2015-01-17 21:22 - 2014-12-19 07:26 - 00140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
2015-01-17 21:22 - 2014-12-12 03:04 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWbPrxy.exe
2015-01-17 21:22 - 2014-12-12 01:51 - 00075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ahcache.sys
2015-01-17 21:22 - 2014-12-09 02:50 - 00225280 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2015-01-17 21:22 - 2014-12-08 20:42 - 00535640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2015-01-17 21:22 - 2014-12-08 20:42 - 00531616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2015-01-17 21:22 - 2014-12-08 20:42 - 00448792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2015-01-17 21:22 - 2014-12-08 20:42 - 00413248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
2015-01-17 21:22 - 2014-12-08 20:42 - 00372408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll
2015-01-17 21:22 - 2014-12-08 20:42 - 00108944 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDump.dll
2015-01-17 21:22 - 2014-12-08 20:42 - 00038264 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFaultSecure.exe
2015-01-17 21:22 - 2014-12-08 20:42 - 00033584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFaultSecure.exe
2015-01-17 21:22 - 2014-12-06 04:17 - 00360448 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncsi.dll
2015-01-17 21:22 - 2014-12-06 02:41 - 00391680 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlasvc.dll
2015-01-17 21:22 - 2014-12-06 02:35 - 00229888 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2015-01-17 21:22 - 2014-10-29 05:00 - 00465320 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2015-01-17 21:22 - 2014-10-29 05:00 - 00139984 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe
2015-01-17 21:22 - 2014-10-29 04:52 - 00500016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2015-01-17 21:22 - 2014-10-29 04:52 - 00482872 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2015-01-17 21:22 - 2014-10-29 04:52 - 00394120 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2015-01-17 21:22 - 2014-10-29 04:52 - 00272248 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2015-01-17 21:22 - 2014-10-29 04:12 - 00413136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe
2015-01-17 21:22 - 2014-10-29 04:12 - 00136296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe
2015-01-17 21:22 - 2014-10-29 04:07 - 00424544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2015-01-17 21:22 - 2014-10-29 04:07 - 00370424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2015-01-17 21:22 - 2014-10-29 04:07 - 00344536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2015-01-17 21:22 - 2014-10-29 03:44 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\system32\werdiagcontroller.dll
2015-01-17 21:22 - 2014-10-29 02:59 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werdiagcontroller.dll
2015-01-17 21:22 - 2014-10-29 02:24 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlaapi.dll
2015-01-17 21:22 - 2014-10-29 02:02 - 00911360 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2015-01-17 21:22 - 2014-10-29 02:01 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nlaapi.dll

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-10 02:17 - 2014-09-06 19:00 - 00003598 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2388325176-3897423459-1596443417-1002
2015-02-10 02:17 - 2014-08-30 18:54 - 00000000 ___RD () C:\Users\Pavel\Dropbox
2015-02-10 02:17 - 2014-08-30 18:52 - 00000000 ____D () C:\Users\Pavel\AppData\Roaming\Dropbox
2015-02-10 02:13 - 2014-11-11 21:28 - 00000000 ____D () C:\Users\Pavel\OneDrive
2015-02-10 02:11 - 2014-11-22 19:37 - 00000970 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-02-10 02:11 - 2013-08-22 15:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2015-02-10 02:10 - 2013-08-22 14:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI
2015-02-10 02:04 - 2012-07-26 09:12 - 00000000 ___HD () C:\WINDOWS\ELAMBKUP
2015-02-10 02:00 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2015-02-10 00:52 - 2014-11-22 19:37 - 00000974 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-02-10 00:33 - 2012-07-26 08:59 - 00000000 ____D () C:\WINDOWS\CbsTemp
2015-02-10 00:17 - 2014-11-22 19:47 - 00000000 ____D () C:\KMPlayer
2015-02-09 22:47 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2015-02-09 22:02 - 2014-11-22 19:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-02-09 22:02 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\WinStore
2015-02-09 22:02 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\Macromed
2015-02-09 22:02 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\Macromed
2015-02-09 22:02 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\system32\Sysprep
2015-02-09 22:02 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\servicing
2015-02-09 21:58 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\registration
2015-02-09 18:53 - 2014-11-22 19:37 - 00002214 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2015-02-09 18:47 - 2014-11-22 19:37 - 00003946 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2015-02-09 18:47 - 2014-11-22 19:37 - 00003710 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2015-02-09 18:26 - 2013-08-22 14:25 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM
2015-02-09 18:23 - 2014-09-24 17:23 - 01745984 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2015-02-09 18:23 - 2014-09-24 16:39 - 00739924 _____ () C:\WINDOWS\system32\perfh005.dat
2015-02-09 18:23 - 2014-09-24 16:39 - 00151610 _____ () C:\WINDOWS\system32\perfc005.dat
2015-01-27 20:29 - 2014-11-11 21:38 - 00003962 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{4CB00716-2D40-47DD-8C53-ACC2AC62373C}
2015-01-24 21:20 - 2014-09-24 20:08 - 00714720 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2015-01-24 21:20 - 2014-09-24 20:08 - 00106976 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2015-01-22 21:34 - 2013-08-22 15:44 - 00337800 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2015-01-18 18:00 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\rescache
2015-01-18 16:37 - 2014-09-03 20:01 - 00000000 ____D () C:\WINDOWS\system32\MRT
2015-01-18 16:35 - 2014-09-08 19:28 - 113365784 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe

==================== Files in the root of some directories =======

2015-02-09 20:39 - 2015-02-09 20:39 - 0363520 ____T () C:\ProgramData\73EEB0B08.zot
2014-09-03 19:39 - 2014-09-03 19:39 - 0166704 _____ () C:\ProgramData\B198771.cpp
2014-03-14 08:48 - 2014-03-14 08:48 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Some content of TEMP:
====================
C:\Users\Pavel\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmprzigyc.dll
C:\Users\Pavel\AppData\Local\Temp\Quarantine.exe
C:\Users\Pavel\AppData\Local\Temp\sqlite3.dll

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed

#17 Příspěvek od **altrok** » 10 úno 2015 02:30

Ted se zbavime aspon nejvetsi haveti. Soucasti procesu je vyprazdneni tempu (docasnych adresaru) a koše. Po provedeni kroku s fixlistem dejte vedet, jak je na tom stav PC.

Do Poznamkoveho bloku (Start -> spustit -> notepad) zkopirujte obsah bileho pole
ulozte na plochu jako fixlist (Typ souboru: Textovy dokument)
znovu spustte FRST a kliknete na Fix

po restartu na Vas vyskoci fixlog (pripadne bude ulozen na Plose), jehoz obsah mi vlozte do pristi odpovedi

Kód: Vybrat vše

Start
CloseProcesses:
HKLM-x32\...\Run: [UpdateP2GShortCut] => C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [217088 2012-04-19] (CyberLink Corp.)
HKU\S-1-5-21-2388325176-3897423459-1596443417-1002\...\MountPoints2: {b51317da-366e-11e4-be7d-485ab6dfc220} - "F:\WD SmartWare.exe" autoplay=true
Startup: C:\Users\Pavel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\73EEB0B08.lnk
ShortcutTarget: 73EEB0B08.lnk -> C:\PROGRA~3\80B0BEE37.cpp (No File)
C:\PROGRA~3\80B0BEE37.cpp

URLSearchHook: [S-1-5-21-2388325176-3897423459-1596443417-1001] ATTENTION ==> Default URLSearchHook is missing.
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2388325176-3897423459-1596443417-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2388325176-3897423459-1596443417-1002 -> {AF317CD5-FB16-451B-A41B-2F93E2640AB4} URL = 
CHR DefaultSuggestURL: Default -> http://toolbar.avg.com/acp?q={searchTerms}&o=1

S2 Winmgmt; C:\ProgramData\73EEB0B08.zot [363520 2015-02-09] () [File not signed]
C:\ProgramData\73EEB0B08.zot

2015-02-10 02:13 - 2015-02-10 02:13 - 02112512 _____ () C:\Users\Pavel\Downloads\adwcleaner_4.110 (2).exe
2015-02-10 02:10 - 2015-02-10 02:10 - 00006368 _____ () C:\WINDOWS\PFRO.log
2015-02-10 02:00 - 2015-02-10 02:11 - 00624875 _____ () C:\Users\Pavel\Desktop\avgremover.log
2015-02-10 01:59 - 2015-02-10 01:59 - 03681088 _____ (AVG Technologies CZ, s.r.o.) C:\Users\Pavel\Desktop\avg_remover_stf_x64_2015_5501.exe
2015-02-10 01:53 - 2015-02-10 01:54 - 02112512 _____ () C:\Users\Pavel\Downloads\adwcleaner_4.110 (1).exe
2015-02-10 01:46 - 2015-02-10 01:48 - 00000000 ____D () C:\AdwCleaner
2015-02-10 01:43 - 2015-02-10 01:43 - 01711992 _____ () C:\Users\Pavel\Desktop\AVGInstLog.zip
2015-02-10 01:37 - 2015-02-10 01:37 - 02112512 _____ () C:\Users\Pavel\Desktop\adwcleaner_4.110.exe
2015-02-10 01:36 - 2015-02-10 01:37 - 02112512 _____ () C:\Users\Pavel\Downloads\adwcleaner_4.110.exe
2015-02-10 00:55 - 2015-02-10 00:55 - 00000351 _____ () C:\Users\Pavel\Desktop\Addition.zip
2015-02-10 00:23 - 2015-02-10 00:23 - 01107968 _____ () C:\Users\Pavel\Desktop\RSIT32.exe
2015-02-09 23:54 - 2015-02-09 23:54 - 00000000 _____ () C:\Users\Pavel\Desktop\FRSTLauncher.exe
2015-02-09 23:44 - 2015-02-09 23:44 - 00000000 ____D () C:\rsit
2015-02-09 23:23 - 2015-02-09 23:23 - 01222144 _____ () C:\Users\Pavel\Desktop\RSITx64.exe
2015-02-09 20:39 - 2015-02-09 20:39 - 00363520 ____T () C:\ProgramData\73EEB0B08.zot
2014-09-03 19:39 - 2014-09-03 19:39 - 0166704 _____ () C:\ProgramData\B198771.cpp

Folder: C:\Windows\Tasks
Hosts:
EmptyTemp:
End

TomDIVER · #18 Příspěvek od **TomDIVER** » 10 úno 2015 02:40

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 08-02-2015
Ran by Pavel at 2015-02-10 02:34:11 Run:1
Running from C:\Users\Pavel\Desktop
Loaded Profiles: UpdatusUser & Pavel (Available profiles: UpdatusUser & Pavel)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Start
CloseProcesses:
HKLM-x32\...\Run: [UpdateP2GShortCut] => C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [217088 2012-04-19] (CyberLink Corp.)
HKU\S-1-5-21-2388325176-3897423459-1596443417-1002\...\MountPoints2: {b51317da-366e-11e4-be7d-485ab6dfc220} - "F:\WD SmartWare.exe" autoplay=true
Startup: C:\Users\Pavel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\73EEB0B08.lnk
ShortcutTarget: 73EEB0B08.lnk -> C:\PROGRA~3\80B0BEE37.cpp (No File)
C:\PROGRA~3\80B0BEE37.cpp

URLSearchHook: [S-1-5-21-2388325176-3897423459-1596443417-1001] ATTENTION ==> Default URLSearchHook is missing.
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2388325176-3897423459-1596443417-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2388325176-3897423459-1596443417-1002 -> {AF317CD5-FB16-451B-A41B-2F93E2640AB4} URL =
CHR DefaultSuggestURL: Default -> http://toolbar.avg.com/acp?q={searchTerms}&o=1

S2 Winmgmt; C:\ProgramData\73EEB0B08.zot [363520 2015-02-09] () [File not signed]
C:\ProgramData\73EEB0B08.zot

2015-02-10 02:13 - 2015-02-10 02:13 - 02112512 _____ () C:\Users\Pavel\Downloads\adwcleaner_4.110 (2).exe
2015-02-10 02:10 - 2015-02-10 02:10 - 00006368 _____ () C:\WINDOWS\PFRO.log
2015-02-10 02:00 - 2015-02-10 02:11 - 00624875 _____ () C:\Users\Pavel\Desktop\avgremover.log
2015-02-10 01:59 - 2015-02-10 01:59 - 03681088 _____ (AVG Technologies CZ, s.r.o.) C:\Users\Pavel\Desktop\avg_remover_stf_x64_2015_5501.exe
2015-02-10 01:53 - 2015-02-10 01:54 - 02112512 _____ () C:\Users\Pavel\Downloads\adwcleaner_4.110 (1).exe
2015-02-10 01:46 - 2015-02-10 01:48 - 00000000 ____D () C:\AdwCleaner
2015-02-10 01:43 - 2015-02-10 01:43 - 01711992 _____ () C:\Users\Pavel\Desktop\AVGInstLog.zip
2015-02-10 01:37 - 2015-02-10 01:37 - 02112512 _____ () C:\Users\Pavel\Desktop\adwcleaner_4.110.exe
2015-02-10 01:36 - 2015-02-10 01:37 - 02112512 _____ () C:\Users\Pavel\Downloads\adwcleaner_4.110.exe
2015-02-10 00:55 - 2015-02-10 00:55 - 00000351 _____ () C:\Users\Pavel\Desktop\Addition.zip
2015-02-10 00:23 - 2015-02-10 00:23 - 01107968 _____ () C:\Users\Pavel\Desktop\RSIT32.exe
2015-02-09 23:54 - 2015-02-09 23:54 - 00000000 _____ () C:\Users\Pavel\Desktop\FRSTLauncher.exe
2015-02-09 23:44 - 2015-02-09 23:44 - 00000000 ____D () C:\rsit
2015-02-09 23:23 - 2015-02-09 23:23 - 01222144 _____ () C:\Users\Pavel\Desktop\RSITx64.exe
2015-02-09 20:39 - 2015-02-09 20:39 - 00363520 ____T () C:\ProgramData\73EEB0B08.zot
2014-09-03 19:39 - 2014-09-03 19:39 - 0166704 _____ () C:\ProgramData\B198771.cpp

Folder: C:\Windows\Tasks
Hosts:
EmptyTemp:
End
*****************

Processes closed successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\UpdateP2GShortCut => value deleted successfully.
"HKU\S-1-5-21-2388325176-3897423459-1596443417-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b51317da-366e-11e4-be7d-485ab6dfc220}" => Key deleted successfully.
HKCR\CLSID\{b51317da-366e-11e4-be7d-485ab6dfc220} => Key not found.
C:\Users\Pavel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\73EEB0B08.lnk => Moved successfully.
C:\PROGRA~3\80B0BEE37.cpp not found.
"C:\PROGRA~3\80B0BEE37.cpp" => File/Directory not found.
Error setting Default URLSearchHook.
HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-21-2388325176-3897423459-1596443417-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
"HKU\S-1-5-21-2388325176-3897423459-1596443417-1002\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AF317CD5-FB16-451B-A41B-2F93E2640AB4}" => Key deleted successfully.
HKCR\CLSID\{AF317CD5-FB16-451B-A41B-2F93E2640AB4} => Key not found.
Chrome DefaultSuggestURL not detected.
Winmgmt => Service restored successfully.
C:\ProgramData\73EEB0B08.zot => Moved successfully.
C:\Users\Pavel\Downloads\adwcleaner_4.110 (2).exe => Moved successfully.
C:\WINDOWS\PFRO.log => Moved successfully.
C:\Users\Pavel\Desktop\avgremover.log => Moved successfully.
C:\Users\Pavel\Desktop\avg_remover_stf_x64_2015_5501.exe => Moved successfully.
C:\Users\Pavel\Downloads\adwcleaner_4.110 (1).exe => Moved successfully.
C:\AdwCleaner => Moved successfully.
C:\Users\Pavel\Desktop\AVGInstLog.zip => Moved successfully.
C:\Users\Pavel\Desktop\adwcleaner_4.110.exe => Moved successfully.
C:\Users\Pavel\Downloads\adwcleaner_4.110.exe => Moved successfully.
C:\Users\Pavel\Desktop\Addition.zip => Moved successfully.
C:\Users\Pavel\Desktop\RSIT32.exe => Moved successfully.
C:\Users\Pavel\Desktop\FRSTLauncher.exe => Moved successfully.
C:\rsit => Moved successfully.
C:\Users\Pavel\Desktop\RSITx64.exe => Moved successfully.
"C:\ProgramData\73EEB0B08.zot" => File/Directory not found.
C:\ProgramData\B198771.cpp => Moved successfully.

========================= Folder: C:\Windows\Tasks ========================

2014-09-08 19:17 - 2014-09-08 19:17 - 0000342 _____ () C:\Windows\Tasks\0814avUpdateInfo.job
2014-11-22 19:37 - 2015-02-10 02:11 - 0000970 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-11-22 19:37 - 2015-02-10 00:52 - 0000974 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-08-22 15:45 - 2015-02-10 02:11 - 0000006 ____H () C:\Windows\Tasks\SA.DAT

====== End of Folder: ======

C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.
EmptyTemp: => Removed 96 MB temporary data.

The system needed a reboot.

==== End of Fixlog 02:34:15 ====

TomDIVER · #19 Příspěvek od **TomDIVER** » 10 úno 2015 02:45

start ok, zadne hlasky, nasel jsme jen dve oznameni v liste - centrum akci, po kliknuti na vyresit jiz oboji OK

#20 Příspěvek od **altrok** » 10 úno 2015 02:48

A co zvuk?

Smazte soubory

C:\Windows\Tasks\0814avUpdateInfo.job
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

Pozorujte, jak se chova PC. Jeste tam radsi pustte VLASTNI SKEN VSECH DISKU pomoci MBAM - http://forum.viry.cz/viewtopic.php?f=29&t=137928
Upozorneni: tento sken zabere od 30 minut po nekolik hodin.

Uz na to nevidim, dneska to balim. Pokracovani zitra

TomDIVER · #21 Příspěvek od **TomDIVER** » 10 úno 2015 02:51

strasne MOC dekuji NB zatim SUPER, najednou vse od Lenovo funkcni. Ano promazu co pisete a jeste jenou moc dekuji z apomoc v tuto sprostou hodinu.

#22 Příspěvek od **altrok** » 10 úno 2015 02:54

Za malo

Jeste to poradne otestujte a pro kontrolu bych rad videl log z MBAMu

Dobrou noc

TomDIVER · #23 Příspěvek od **TomDIVER** » 10 úno 2015 02:59

Ano urcite. Dotahnu to zitra, no vlastne dnes v praci to pustim at to bezi a po dokonceni vlozim log. Ted jiz opravdu moc diky a dobrou

TomDIVER · #24 Příspěvek od **TomDIVER** » 10 úno 2015 09:05

Krasne rano

Docela me desi promena NB. Zprvu jsem netusil ze to bylo v tak spatnem stavu a pricital jsem to narocnosti - strasne dlouho trvalo spousteni - napr OneKeyRecovery. Mel jsem zato ze to tim jak to hleda zalohu. Po procisteni to okamzite naskocilo. Jsou tam i dalsi aplikace od Lenovo. Tim ze se nepouzivali (odhad podle toho ze ihned nabehnuti pozaduji aktualizace) jsem nemel ani tucha ze to nesmi takhle dlouho trvat.
Takze sken dokoncen, tady je log:
Malwarebytes Anti-Malware
www.malwarebytes.org

Datum skenování: 10. 2. 2015
Čas skenování: 7:50:54
Protokol: log.txt
Správce: Ano

Verze: 2.00.4.1028
Databáze malwaru: v2015.02.10.05
Databáze rootkitů: v2015.02.03.01
Licence: Zkušební verze
Ochrana proti malwaru: Zapnuto
Ochrana proti škodlivým webovým stránkám: Zapnuto
Sebeobrany: Vypnuto

OS: Windows 8.1
CPU: x64
Souborový systém: NTFS
Uživatel: Pavel

Typ skenu: Vlastní sken
Výsledek: Dokončeno
Prohledaných objektů: 531794
Uplynulý čas: 1 hod, 2 min, 3 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Vypnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto

Procesy: 0
(Žádné zákerné zjištěny položek)

Moduly: 0
(Žádné zákerné zjištěny položek)

Klíče registru: 0
(Žádné zákerné zjištěny položek)

Hodnoty registru: 0
(Žádné zákerné zjištěny položek)

Data registru: 0
(Žádné zákerné zjištěny položek)

Složky: 0
(Žádné zákerné zjištěny položek)

Soubory: 1
Trojan.Ransom.VEGen, C:\FRST\Quarantine\C\ProgramData\B198771.cpp.xBAD, , [6e5f67b5ddad84b28f73c2fa639e41bf],

Fyzické sektory: 0
(Žádné zákerné zjištěny položek)

(end)

#25 Příspěvek od **altrok** » 10 úno 2015 11:08

Krasne rano i Vam

Nalez MBAMu uz ma v karantene FRST - neskodny a netreba jej mazat.

Kouknem jeste na stav HDD.

Stahnete Crystal Disk Info (CDI) http://sourceforge.jp/frs/redir.php?m=j ... o6_2_2.zip
archiv extrahujte a spustte vyextrahovany soubor DiskInfo.exe
ve spustenem programu kliknete nahore na Upravy -> Kopirovat (log mate nyni zkopirovany ve schrance)
log vlozte do dalsi odpovedi (Ctrl + V)

Pak uz jen uklidime pouzite nastroje.

Stahnete a spustte DelFix - https://toolslib.net/downloads/viewdownload/2-delfix/
Oznacte jen moznost "Remove disinfection tools"
kliknete na Run

A pokud nejsou dotazy ci jine problemy, je to ode mne vse.

TomDIVER · #26 Příspěvek od **TomDIVER** » 10 úno 2015 11:45

----------------------------------------------------------------------------
CrystalDiskInfo 6.2.2 (C) 2008-2014 hiyohiyo
Crystal Dew World : http://crystalmark.info/
----------------------------------------------------------------------------

OS : Windows 8.1 [6.3 Build 9600] (x64)
Date : 2015/02/10 11:43:23

-- Controller Map ----------------------------------------------------------
+ Intel(R) 7 Series Chipset Family SATA AHCI Controller [ATA]
- ST1000LM024 HN-M101MBB
- PLDS DVD-RW DS8A9SH
- Řadič prostorů úložišť [SCSI]

-- Disk List ---------------------------------------------------------------
(1) ST1000LM024 HN-M101MBB : 1000,2 GB [0/0/0, pd1] - st

----------------------------------------------------------------------------
(1) ST1000LM024 HN-M101MBB
----------------------------------------------------------------------------
Model : ST1000LM024 HN-M101MBB
Firmware : 2AR20002
Serial Number : S2SMJ9DF110712
Disk Size : 1000,2 GB (7,9/137,4/1000,2/1000,2)
Buffer Size : 16384 KB
Queue Depth : 32
# of Sectors : 1953525168
Rotation Rate : 5400 RPM
Interface : Serial ATA
Major Version : ATA8-ACS
Minor Version : ATA8-ACS version 6
Transfer Mode : SATA/300 | SATA/300
Power On Hours : 305 hod.
Power On Count : 296 krát
Temperature : 28 C (82 F)
Health Status : Dobrý
Features : S.M.A.R.T., APM, 48bit LBA, NCQ
APM Level : 0080h [ON]
AAM Level : ----

-- S.M.A.R.T. --------------------------------------------------------------
ID Cur Wor Thr RawValues(6) Attribute Name
01 100 100 _51 000000000000 Počet chyb čtení
02 252 252 __0 000000000000 Průchodnost disku
03 _90 _89 _25 000000000BF1 Čas na roztočení ploten
04 100 100 __0 000000000126 Počet spuštění/zastavení
05 252 252 _10 000000000000 Počet přemapovaných sektorů
07 252 252 _51 000000000000 Počet chybných hledání
08 252 252 _15 000000000000 Čas potřebný na vyhledání
09 100 100 __0 000000000131 Hodin v činnosti
0A 252 252 _51 000000000000 Počet opakovaných pokusů o roztočení ploten
0B 100 100 __0 00000000000E Počet pokusů o překalibrování
0C 100 100 __0 000000000128 Počet cyklů zapnutí zařízení
BF 100 100 __0 000000000006 Počet udalostí zaznamenaných otřesovým senzorem
C0 252 252 __0 000000000000 Počet vypnutí disku
C2 _64 _51 __0 00310011001C Teplota
C3 100 100 __0 000000000000 Počet oprav chybného čtení
C4 252 252 __0 000000000000 Počet udalostí s číslem realokování sektorů
C5 252 252 __0 000000000000 Počet podezřelých sektorů
C6 252 252 __0 000000000000 Počet neopravitelných sektorů
C7 200 200 __0 000000000000 Počet chyb v kontrolním součtu UltraDMA
C8 100 100 __0 0000000000A2 Počet chyb při zápisu sektorů
DF 100 100 __0 00000000000E Zatížení budiče magnetických hlav způsobené opakovanými úkony
E1 100 100 __0 00000000172A Počet cyklů načítání/vymazání

-- IDENTIFY_DEVICE ---------------------------------------------------------
0 1 2 3 4 5 6 7 8 9
000: 0040 3FFF C837 000F 0000 0000 003F 0000 0000 0000
010: 5332 534D 4A39 4446 3131 3037 3132 2020 2020 2020
020: 0000 8000 0004 3241 5232 3030 3032 5354 3130 3030
030: 4C4D 3032 3420 484E 2D4D 3130 314D 4242 2020 2020
040: 2020 2020 2020 2020 2020 2020 2020 8010 4000 2F00
050: 4000 0200 0200 0006 3FFF 0010 003F FC10 00FB 0000
060: FFFF 0FFF 0000 0407 0003 0078 0078 0078 0078 0000
070: 0000 0000 0000 0000 0000 001F 0F06 0004 0048 0048
080: 01FF 0028 746B 7D09 6123 7469 BC09 6123 003F 0064
090: 0064 0080 FFFE 0000 0000 0000 0000 0000 0000 0000
100: 6DB0 7470 0000 0000 0000 0000 6003 0000 5000 4CF2
110: 0C3B EFD9 0000 0000 0000 0000 0000 0000 0000 401C
120: 401C 0000 0000 0000 0000 0000 0000 0000 0021 0000
130: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
140: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
150: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
160: 0000 0000 0000 0000 0000 0000 0000 0000 0003 0000
170: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
180: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
190: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
200: 0000 0000 0000 0000 0000 0000 003F 0000 0000 4000
210: 0000 0000 0000 0000 0000 0000 0000 1518 0000 0000
220: 0000 0000 103F 0000 0000 0000 0000 0000 0000 0000
230: 0000 0000 0000 0000 0001 0400 0000 0000 0000 0000
240: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
250: 0000 0000 0000 0000 0000 94A5

-- SMART_READ_DATA ---------------------------------------------------------
+0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 10 00 01 2F 00 64 64 00 00 00 00 00 00 00 02 26
010: 00 FC FC 00 00 00 00 00 00 00 03 23 00 5A 59 F1
020: 0B 00 00 00 00 00 04 32 00 64 64 26 01 00 00 00
030: 00 00 05 33 00 FC FC 00 00 00 00 00 00 00 07 2E
040: 00 FC FC 00 00 00 00 00 00 00 08 24 00 FC FC 00
050: 00 00 00 00 00 00 09 32 00 64 64 31 01 00 00 00
060: 00 00 0A 32 00 FC FC 00 00 00 00 00 00 00 0B 32
070: 00 64 64 0E 00 00 00 00 00 00 0C 32 00 64 64 28
080: 01 00 00 00 00 00 BF 22 00 64 64 06 00 00 00 00
090: 00 00 C0 22 00 FC FC 00 00 00 00 00 00 00 C2 02
0A0: 00 40 33 1C 00 11 00 31 00 00 C3 3A 00 64 64 00
0B0: 00 00 00 00 00 00 C4 32 00 FC FC 00 00 00 00 00
0C0: 00 00 C5 32 00 FC FC 00 00 00 00 00 00 00 C6 30
0D0: 00 FC FC 00 00 00 00 00 00 00 C7 36 00 C8 C8 00
0E0: 00 00 00 00 00 00 C8 2A 00 64 64 A2 00 00 00 00
0F0: 00 00 DF 32 00 64 64 0E 00 00 00 00 00 00 E1 32
100: 00 64 64 2A 17 00 00 00 00 00 00 00 00 00 00 00
110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 00 00 C0 30 00 5B
170: 03 00 01 00 02 D0 00 00 00 00 00 00 00 00 00 00
180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 F7

-- SMART_READ_THRESHOLD ----------------------------------------------------
+0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 10 00 01 33 00 00 00 00 00 00 00 00 00 00 02 00
010: 00 00 00 00 00 00 00 00 00 00 03 19 00 00 00 00
020: 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00
030: 00 00 05 0A 00 00 00 00 00 00 00 00 00 00 07 33
040: 00 00 00 00 00 00 00 00 00 00 08 0F 00 00 00 00
050: 00 00 00 00 00 00 09 00 00 00 00 00 00 00 00 00
060: 00 00 0A 33 00 00 00 00 00 00 00 00 00 00 0B 00
070: 00 00 00 00 00 00 00 00 00 00 0C 00 00 00 00 00
080: 00 00 00 00 00 00 BF 00 00 00 00 00 00 00 00 00
090: 00 00 C0 00 00 00 00 00 00 00 00 00 00 00 C2 00
0A0: 00 00 00 00 00 00 00 00 00 00 C3 00 00 00 00 00
0B0: 00 00 00 00 00 00 C4 00 00 00 00 00 00 00 00 00
0C0: 00 00 C5 00 00 00 00 00 00 00 00 00 00 00 C6 00
0D0: 00 00 00 00 00 00 00 00 00 00 C7 00 00 00 00 00
0E0: 00 00 00 00 00 00 C8 00 00 00 00 00 00 00 00 00
0F0: 00 00 DF 00 00 00 00 00 00 00 00 00 00 00 E1 00
100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
170: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3B

TomDIVER · #27 Příspěvek od **TomDIVER** » 10 úno 2015 11:50

Po pouziti uklidu posledni log co vyskocil.

# DelFix v10.8 - Logfile created 10/02/2015 at 11:48:41
# Updated 29/07/2014 by Xplode
# Username : Pavel - ZYP-NB
# Operating System : Windows 8.1 (64 bits)

~ Removing disinfection tools ...

Deleted : C:\FRST
Deleted : C:\Users\Pavel\Desktop\Addition.txt
Deleted : C:\Users\Pavel\Desktop\Fixlog.txt
Deleted : C:\Users\Pavel\Desktop\FRST.txt
Deleted : C:\Users\Pavel\Desktop\FRST64.exe
Deleted : C:\Users\Pavel\Desktop\log.txt
Deleted : HKLM\SOFTWARE\AdwCleaner

########## - EOF - ##########

#28 Příspěvek od **altrok** » 10 úno 2015 11:52

Disk je OK, samotny C:\delfix.txt smazte a mame hotovo

TomDIVER · #29 Příspěvek od **TomDIVER** » 10 úno 2015 12:00

Ano jiz jsme i restartoval a vyznacene bylo odstranano. Na plose mi zvostal uz jen ten puvodni log z padu AVG a pro jistotu ulozeny log z Cristalu. Smaznul jsem rucne.
Chtel bych jeste jednou moc a moc podekovat z Krkonos na Moravu. Byla to opravdu moc velka pomoc.
Klobouk dolu pred takovymi to znalostmi. Obsluhovat to je pro me schudne, ale vyznat se v tech kilometrech znaku, to chce opravdu zapal a znalosti. Moc diky za ochotu a pomoc.

Tom

TomDIVER · #30 Příspěvek od **TomDIVER** » 10 úno 2015 12:03

Jeste me napadlo, prosim jakou formu antiviru by bylo vhodne pouzit pro takovahoto uzivatele - je to uz hadam 3 stroj co vzdy dovede k takovemuto stavu a to klidne i za 14dni

Jak jsme pochopil, ted tam beha to co Win8.1 maji preinstalovane, osobne jsem to po uzival i v XP pred ukoncenim podpory. Bude to dostatecne? Nebo to bude spis o pravidelnem uklidu k preventivce?

VIRY.CZ

Problem NB Lenovo AVG - zvuk - ostatni

Re: Problem NB Lenovo AVG - zvuk - ostatni

Re: Problem NB Lenovo AVG - zvuk - ostatni

Re: Problem NB Lenovo AVG - zvuk - ostatni

Re: Problem NB Lenovo AVG - zvuk - ostatni

Re: Problem NB Lenovo AVG - zvuk - ostatni

Re: Problem NB Lenovo AVG - zvuk - ostatni

Re: Problem NB Lenovo AVG - zvuk - ostatni

Re: Problem NB Lenovo AVG - zvuk - ostatni

Re: Problem NB Lenovo AVG - zvuk - ostatni

Re: Problem NB Lenovo AVG - zvuk - ostatni

Re: Problem NB Lenovo AVG - zvuk - ostatni

Re: Problem NB Lenovo AVG - zvuk - ostatni

Re: Problem NB Lenovo AVG - zvuk - ostatni

Re: Problem NB Lenovo AVG - zvuk - ostatni

Re: Problem NB Lenovo AVG - zvuk - ostatni