Zatížení ntb, prosím o kontrolu logu

[Rudy]

Který proces PC nejvíce zatěžuje?

[KatieLe]

Nejvíc je zatížený disk, který se vždy pohybuje kolem 90% a paměť kolem 80%, procesor je spíš kolem 40%

[Rudy]

To vím. Musí to způsobovat nějaký proces. Podívejte se do Správce úloh.

[KatieLe]

Je to vždycky hlavně systém nebo Hostitel místní služby

[Rudy]

Na zkoušku vypnět aut. aktualizace, příp. přeinstalujte antivir.

[KatieLe]

Automatické aktualizace mám vyplé a antivirus (Avast) by měl být aktualizovaný, protože jsem ho stahovala a instalovala nedávno.

[Rudy]

Problém jste měla již před instalací Avastu?

[KatieLe]

Ano

[Rudy]

Ještě bychom mohli zkusit ComboFix:

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se

jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine

aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode,

pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k

nezadoucim kolizim s rezidentem antispyware.

[KatieLe]

Log z combofixu:

ComboFix 15-04-01.01 - Kateřina . 04. 2015 19:26:40.2.2 - x64
Microsoft Windows 8 6.2.9200.0.1250.420.1029.18.1893.504 [GMT 2:00]
Spuštěný z: c:\users\Kateřina\Desktop\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AV: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: avast! Antivirus *Disabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2015-03-07 do 2015-04-07 )))))))))))))))))))))))))))))))
.
.
2015-04-07 17:40 . 2015-04-07 17:40 -------- d-----w- c:\users\Default\AppData\Local\temp
2015-04-04 08:48 . 2012-11-26 02:15 16114176 ----a-w- c:\program files\Common Files\Microsoft Shared\Microsoft Camera Codec Pack\MicrosoftRawCodec.dll
2015-04-04 08:48 . 2012-11-26 02:14 15541248 ----a-w- c:\program files (x86)\Common Files\Microsoft Shared\Microsoft Camera Codec Pack\MicrosoftRawCodec.dll
2015-04-04 08:22 . 2012-09-20 06:31 17408 ----a-w- c:\windows\system32\eventcls.dll
2015-04-04 08:22 . 2012-09-20 05:53 15360 ----a-w- c:\windows\SysWow64\eventcls.dll
2015-04-04 08:22 . 2014-10-09 04:00 1484288 ----a-w- c:\windows\system32\VSSVC.exe
2015-04-04 08:22 . 2014-10-09 04:00 69632 ----a-w- c:\windows\system32\vsstrace.dll
2015-04-04 08:22 . 2014-10-09 04:00 1519104 ----a-w- c:\windows\system32\vssapi.dll
2015-04-04 08:22 . 2014-10-09 03:59 52224 ----a-w- c:\windows\SysWow64\vsstrace.dll
2015-04-04 08:22 . 2014-10-09 03:59 1195520 ----a-w- c:\windows\SysWow64\vssapi.dll
2015-04-04 08:03 . 2015-01-09 06:43 951808 ----a-w- c:\windows\system32\Windows.Globalization.dll
2015-04-04 08:03 . 2015-01-09 05:03 601088 ----a-w- c:\windows\SysWow64\Windows.Globalization.dll
2015-04-04 08:00 . 2014-07-15 22:51 71168 ----a-w- c:\windows\system32\drivers\hdaudbus.sys
2015-04-03 18:36 . 2014-07-12 06:46 3262976 ----a-w- c:\program files\Common Files\Microsoft Shared\ink\tipskins.dll
2015-04-02 15:17 . 2015-04-02 15:15 136752 ----a-w- c:\windows\system32\drivers\aswStm.sys
2015-04-02 15:17 . 2015-04-02 15:15 271200 ----a-w- c:\windows\system32\drivers\aswVmm.sys
2015-04-02 15:17 . 2015-04-02 15:15 442264 ----a-w- c:\windows\system32\drivers\aswSP.sys
2015-04-02 15:17 . 2015-04-02 15:14 65736 ----a-w- c:\windows\system32\drivers\aswRvrt.sys
2015-04-02 15:17 . 2015-04-02 15:14 88408 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2015-04-02 15:17 . 2015-04-02 15:14 29168 ----a-w- c:\windows\system32\drivers\aswHwid.sys
2015-04-02 15:17 . 2015-04-02 15:14 93528 ----a-w- c:\windows\system32\drivers\aswRdr2.sys
2015-04-02 15:17 . 2015-04-02 15:13 1047320 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2015-04-02 15:15 . 2015-04-02 15:14 364472 ----a-w- c:\windows\system32\aswBoot.exe
2015-04-02 15:14 . 2015-04-02 15:14 43112 ----a-w- c:\windows\avastSS.scr
2015-04-02 15:11 . 2015-04-02 15:11 -------- d-----w- c:\program files\AVAST Software
2015-04-02 15:09 . 2015-04-02 15:10 -------- d-----w- c:\programdata\AVAST Software
2015-04-02 10:12 . 2014-01-27 03:39 1939288 ----a-w- c:\windows\system32\drivers\ntfs.sys
2015-04-02 10:12 . 2014-02-03 23:56 332632 ----a-w- c:\windows\system32\drivers\storport.sys
2015-04-02 10:12 . 2014-02-03 23:56 278872 ----a-w- c:\windows\system32\drivers\msiscsi.sys
2015-04-02 10:12 . 2014-01-02 23:35 365568 ----a-w- c:\windows\SysWow64\XpsGdiConverter.dll
2015-04-02 10:12 . 2014-01-02 23:32 523264 ----a-w- c:\windows\system32\XpsGdiConverter.dll
2015-04-02 10:12 . 2014-01-31 00:48 485888 ----a-w- c:\windows\SysWow64\WSDApi.dll
2015-04-02 10:12 . 2014-01-31 00:06 599040 ----a-w- c:\windows\system32\WSDApi.dll
2015-04-02 10:12 . 2014-01-15 23:42 118784 ----a-w- c:\windows\system32\drivers\dfsc.sys
2015-04-02 09:56 . 2014-03-24 23:42 305152 ----a-w- c:\windows\SysWow64\wusa.exe
2015-04-02 09:56 . 2014-03-24 22:56 309760 ----a-w- c:\windows\system32\wusa.exe
2015-04-02 09:55 . 2012-09-27 07:17 76288 ----a-w- c:\windows\system32\newdev.exe
2015-04-02 09:55 . 2012-09-27 07:15 301568 ----a-w- c:\windows\system32\newdev.dll
2015-04-02 09:55 . 2012-09-27 06:34 275968 ----a-w- c:\windows\SysWow64\newdev.dll
2015-04-02 09:55 . 2012-09-27 07:17 75264 ----a-w- c:\windows\system32\ndadmin.exe
2015-04-02 09:55 . 2012-09-27 06:35 74240 ----a-w- c:\windows\SysWow64\newdev.exe
2015-04-02 09:55 . 2012-09-27 06:35 73728 ----a-w- c:\windows\SysWow64\ndadmin.exe
2015-04-02 09:48 . 2012-09-20 07:55 3265256 ----a-w- c:\windows\system32\drivers\evbda.sys
2015-04-02 09:48 . 2012-09-20 06:33 2397184 ----a-w- c:\windows\system32\WpcMon.exe
2015-04-02 09:48 . 2012-09-20 06:33 3964416 ----a-w- c:\windows\system32\WinSAT.exe
2015-04-02 09:48 . 2012-09-20 07:55 533224 ----a-w- c:\windows\system32\drivers\bxvbda.sys
2015-04-02 09:46 . 2012-09-20 06:32 112128 ----a-w- c:\windows\system32\PackageStateRoaming.dll
2015-04-01 22:59 . 2013-08-30 05:18 374784 ----a-w- c:\windows\system32\clusapi.dll
2015-04-01 22:59 . 2013-08-30 05:19 626688 ----a-w- c:\windows\system32\resutils.dll
2015-04-01 22:59 . 2013-10-05 06:10 285016 ----a-w- c:\windows\system32\drivers\spaceport.sys
2015-04-01 22:59 . 2013-08-29 23:48 488960 ----a-w- c:\windows\SysWow64\resutils.dll
2015-04-01 22:59 . 2013-08-29 23:47 302080 ----a-w- c:\windows\SysWow64\clusapi.dll
2015-04-01 22:55 . 2013-07-24 23:07 13661696 ----a-w- c:\windows\system32\Windows.UI.Xaml.dll
2015-04-01 22:55 . 2013-07-24 23:10 10799104 ----a-w- c:\windows\SysWow64\Windows.UI.Xaml.dll
2015-04-01 22:55 . 2013-08-30 05:20 1173504 ----a-w- c:\windows\system32\UIAutomationCore.dll
2015-04-01 22:55 . 2013-08-29 23:48 914432 ----a-w- c:\windows\SysWow64\UIAutomationCore.dll
2015-04-01 22:55 . 2013-08-21 06:39 465240 ----a-w- c:\windows\system32\drivers\fvevol.sys
2015-04-01 22:55 . 2013-08-10 06:30 151896 ----a-w- c:\windows\system32\drivers\tpm.sys
2015-04-01 22:55 . 2013-08-30 05:43 61784 ----a-w- c:\windows\system32\drivers\crashdmp.sys
2015-04-01 22:55 . 2012-09-20 06:48 62488 ----a-w- c:\windows\system32\drivers\dumpfve.sys
2015-04-01 22:37 . 2013-07-03 00:22 2839552 ----a-w- c:\windows\system32\msftedit.dll
2015-04-01 22:20 . 2012-10-12 06:13 109568 ----a-w- c:\windows\system32\dskquota.dll
2015-04-01 22:20 . 2012-10-12 05:39 82944 ----a-w- c:\windows\SysWow64\dskquota.dll
2015-04-01 22:20 . 2012-10-24 04:54 396008 ----a-w- c:\windows\system32\hal.dll
2015-04-01 22:20 . 2012-10-17 04:32 1172992 ----a-w- c:\windows\system32\mfnetsrc.dll
2015-04-01 22:20 . 2012-10-17 04:32 677888 ----a-w- c:\windows\system32\mfnetcore.dll
2015-04-01 22:20 . 2012-10-17 03:57 929792 ----a-w- c:\windows\SysWow64\mfnetsrc.dll
2015-04-01 22:20 . 2012-10-17 03:57 568832 ----a-w- c:\windows\SysWow64\mfnetcore.dll
2015-04-01 22:03 . 2015-04-07 17:17 136408 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys
2015-04-01 22:03 . 2015-03-17 04:15 64216 ----a-w- c:\windows\system32\drivers\mwac.sys
2015-04-01 22:03 . 2015-03-17 04:15 107736 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys
2015-04-01 22:03 . 2015-04-01 22:03 -------- d-----w- c:\program files (x86)\Malwarebytes Anti-Malware
2015-04-01 22:03 . 2015-04-01 22:03 -------- d-----w- c:\programdata\Malwarebytes
2015-04-01 22:03 . 2015-03-17 04:15 25816 ----a-w- c:\windows\system32\drivers\mbam.sys
2015-04-01 22:02 . 2014-04-23 23:38 693760 ----a-w- c:\windows\system32\WSShared.dll
2015-04-01 22:02 . 2014-04-29 22:32 126464 ----a-w- c:\windows\system32\Robocopy.exe
2015-04-01 22:02 . 2014-04-29 22:32 106496 ----a-w- c:\windows\SysWow64\Robocopy.exe
2015-04-01 22:02 . 2014-04-23 23:51 566784 ----a-w- c:\windows\SysWow64\WSShared.dll
2015-04-01 22:02 . 2014-04-23 23:51 124928 ----a-w- c:\windows\SysWow64\Windows.ApplicationModel.Store.TestingFramework.dll
2015-04-01 22:02 . 2014-04-23 23:38 163840 ----a-w- c:\windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2015-04-01 22:02 . 2014-01-31 00:48 143872 ----a-w- c:\windows\SysWow64\Windows.ApplicationModel.Store.dll
2015-04-01 22:02 . 2013-08-16 05:21 198656 ----a-w- c:\windows\system32\Windows.ApplicationModel.Store.dll
2015-04-01 22:01 . 2013-10-31 05:56 915968 ----a-w- c:\windows\system32\MPSSVC.dll
2015-04-01 22:01 . 2013-10-31 05:56 758784 ----a-w- c:\windows\system32\FirewallAPI.dll
2015-04-01 22:01 . 2013-10-31 04:01 550400 ----a-w- c:\windows\SysWow64\FirewallAPI.dll
2015-04-01 22:01 . 2013-10-31 03:42 74752 ----a-w- c:\windows\system32\drivers\mpsdrv.sys
2015-04-01 22:01 . 2013-10-13 20:49 100696 ----a-w- c:\windows\system32\drivers\disk.sys
2015-04-01 22:01 . 2013-08-27 05:21 227840 ----a-w- c:\windows\system32\WebClnt.dll
2015-04-01 22:01 . 2013-08-27 05:19 104448 ----a-w- c:\windows\system32\davclnt.dll
2015-04-01 22:01 . 2013-08-26 22:29 199168 ----a-w- c:\windows\SysWow64\WebClnt.dll
2015-04-01 22:01 . 2013-08-26 22:28 86016 ----a-w- c:\windows\SysWow64\davclnt.dll
2015-04-01 22:01 . 2012-10-11 05:44 105984 ----a-w- c:\windows\system32\icfupgd.dll
2015-04-01 22:01 . 2012-10-11 05:46 24576 ----a-w- c:\windows\system32\wfapigp.dll
2015-04-01 22:01 . 2012-10-11 05:07 19968 ----a-w- c:\windows\SysWow64\wfapigp.dll
2015-03-31 21:29 . 2012-11-20 05:24 1164800 ----a-w- c:\windows\SysWow64\Display.dll
2015-03-31 21:29 . 2012-11-20 05:17 1184256 ----a-w- c:\windows\system32\Display.dll
2015-03-31 21:29 . 2012-11-20 05:02 6656 ----a-w- c:\windows\SysWow64\KBDKURD.DLL
2015-03-31 21:29 . 2012-11-20 04:59 7168 ----a-w- c:\windows\system32\KBDKURD.DLL
2015-03-31 21:27 . 2012-11-06 04:18 11459584 ----a-w- c:\windows\system32\glcndFilter.dll
2015-03-31 21:26 . 2014-07-17 01:45 61440 ----a-w- c:\windows\system32\drivers\en-US\srv2.sys.mui
2015-03-31 21:25 . 2014-03-01 09:47 1258496 ----a-w- c:\windows\system32\kernel32.dll
2015-03-31 21:25 . 2014-03-01 09:47 1120768 ----a-w- c:\windows\system32\gpedit.dll
2015-03-31 21:25 . 2014-03-01 08:07 1075200 ----a-w- c:\windows\SysWow64\gpedit.dll
2015-03-31 21:25 . 2014-02-15 04:15 78336 ----a-w- c:\windows\system32\drivers\IPMIDrv.sys
2015-03-31 21:25 . 2013-11-25 23:17 83968 ----a-w- c:\windows\system32\drivers\hidclass.sys
2015-03-31 21:25 . 2014-05-29 04:04 94552 ----a-w- c:\windows\system32\drivers\mountmgr.sys
2015-03-31 20:30 . 2015-03-04 21:24 791496 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2015-03-31 20:30 . 2015-03-04 21:24 177608 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2015-03-31 20:18 . 2015-03-31 20:22 -------- d-----w- c:\windows\system32\MRT
2015-03-31 19:55 . 2014-06-10 22:44 35480 ----a-w- c:\windows\system32\TsWpfWrp.exe
2015-03-31 19:55 . 2014-06-10 22:43 35480 ----a-w- c:\windows\SysWow64\TsWpfWrp.exe
2015-03-31 19:12 . 2015-03-31 19:12 -------- d-----w- C:\_OTM
2015-03-31 17:32 . 2015-03-31 17:32 -------- d-----w- c:\program files (x86)\VideoLAN
2015-03-30 20:41 . 2012-08-31 00:52 17888 ----a-w- c:\windows\system32\msvcr100_clr0400.dll
2015-03-30 20:41 . 2012-08-31 00:53 17888 ----a-w- c:\windows\SysWow64\msvcr100_clr0400.dll
2015-03-30 20:04 . 2013-03-02 02:43 1933312 ----a-w- c:\windows\system32\wbem\cimwin32.dll
2015-03-30 20:02 . 2013-05-04 06:57 1131520 ----a-w- c:\windows\system32\AppXDeploymentServer.dll
2015-03-30 20:01 . 2013-05-15 02:25 888320 ----a-w- c:\windows\system32\autochk.exe
2015-03-30 20:01 . 2013-05-15 02:25 542208 ----a-w- c:\windows\system32\untfs.dll
2015-03-30 20:01 . 2013-05-15 02:24 793088 ----a-w- c:\windows\SysWow64\autochk.exe
2015-03-30 20:01 . 2013-05-15 02:24 482816 ----a-w- c:\windows\SysWow64\untfs.dll
2015-03-30 20:00 . 2013-04-09 04:51 3552768 ----a-w- c:\windows\system32\tquery.dll
2015-03-30 20:00 . 2013-04-09 04:51 14267904 ----a-w- c:\windows\system32\wmp.dll
2015-03-30 20:00 . 2013-04-09 04:50 2107904 ----a-w- c:\windows\system32\mssrch.dll
2015-03-30 20:00 . 2013-04-08 21:51 2767360 ----a-w- c:\windows\SysWow64\tquery.dll
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2015-03-26 21:34 . 2012-07-26 08:13 23256 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"UpdateP2GShortCut"="c:\program files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe" [2012-04-19 217088]
"AvastUI.exe"="c:\program files\AVAST Software\Avast\AvastUI.exe" [2015-04-02 5512912]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"EnableUIADesktopToggle"= 0 (0x0)
"EnableCursorSuppression"= 1 (0x1)
"ConsentPromptBehaviorUser"= 3 (0x3)
"SoftwareSASGeneration"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc]
@=""
.
R2 0207641427835676mcinstcleanup;McAfee Application Installer Cleanup (0207641427835676);c:\users\KATEIN~1\AppData\Local\Temp\020764~1.EXE;c:\users\KATEIN~1\AppData\Local\Temp\020764~1.EXE [x]
R2 aswStm;aswStm;c:\windows\system32\drivers\aswStm.sys;c:\windows\SYSNATIVE\drivers\aswStm.sys [x]
R3 SPUVCbv;SPUVCb Driver Service;c:\windows\System32\Drivers\SPUVCbv_x64.sys;c:\windows\SYSNATIVE\Drivers\SPUVCbv_x64.sys [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\System32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]
R3 vmicheartbeat;Služba prezenčního signálu technologie Hyper-V;c:\windows\system32\svchost.exe;c:\windows\SYSNATIVE\svchost.exe [x]
R3 WSDScan;Podpora skenování WSD;c:\windows\System32\drivers\WSDScan.sys;c:\windows\SYSNATIVE\drivers\WSDScan.sys [x]
R3 wsvd;wsvd;c:\windows\system32\DRIVERS\wsvd.sys;c:\windows\SYSNATIVE\DRIVERS\wsvd.sys [x]
S0 aswRvrt;avast! Revert; [x]
S0 aswVmm;avast! VM Monitor; [x]
S0 iaStorA;iaStorA;c:\windows\System32\drivers\iaStorA.sys;c:\windows\SYSNATIVE\drivers\iaStorA.sys [x]
S0 LHDmgr;LHDmgr;c:\windows\System32\DRIVERS\LhdX64.sys;c:\windows\SYSNATIVE\DRIVERS\LhdX64.sys [x]
S1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys;c:\windows\SYSNATIVE\drivers\aswSnx.sys [x]
S1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys;c:\windows\SYSNATIVE\drivers\aswSP.sys [x]
S2 Apple Mobile Device Service;Apple Mobile Device Service;c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe;c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [x]
S2 aswHwid;avast! HardwareID;c:\windows\system32\drivers\aswHwid.sys;c:\windows\SYSNATIVE\drivers\aswHwid.sys [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys;c:\windows\SYSNATIVE\drivers\aswMonFlt.sys [x]
S2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface;c:\program files\Intel\iCLS Client\HeciServer.exe;c:\program files\Intel\iCLS Client\HeciServer.exe [x]
S2 Intel(R) ME Service;Intel(R) ME Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [x]
S2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [x]
S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes Anti-Malware\mbamservice.exe;c:\program files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [x]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S3 ACPIVPC;Lenovo Virtual Power Controller Driver;c:\windows\System32\drivers\AcpiVpc.sys;c:\windows\SYSNATIVE\drivers\AcpiVpc.sys [x]
S3 AmUStor;AM USB Stroage Driver;c:\windows\system32\drivers\AmUStor.SYS;c:\windows\SYSNATIVE\drivers\AmUStor.SYS [x]
S3 ETD;ELAN PS/2 Port Input Device;c:\windows\system32\DRIVERS\ETD.sys;c:\windows\SYSNATIVE\DRIVERS\ETD.sys [x]
S3 L1C;NDIS Miniport Driver for Qualcomm Atheros AR81xx PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C63x64.sys;c:\windows\SYSNATIVE\DRIVERS\L1C63x64.sys [x]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys;c:\windows\SYSNATIVE\drivers\mbam.sys [x]
S3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\MBAMSwissArmy.sys;c:\windows\SYSNATIVE\drivers\MBAMSwissArmy.sys [x]
S3 MBAMWebAccessControl;MBAMWebAccessControl;c:\windows\system32\drivers\mwac.sys;c:\windows\SYSNATIVE\drivers\mwac.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2015-04-03 18:21 1061704 ----a-w- c:\program files (x86)\Google\Chrome\Application\41.0.2272.118\Installer\chrmstp.exe
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2015-04-02 15:14 722400 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\SugarSyncBackedUp]
@="{0C4A258A-3F3B-4FFF-80A7-9B3BEC139472}"
[HKEY_CLASSES_ROOT\CLSID\{0C4A258A-3F3B-4FFF-80A7-9B3BEC139472}]
2012-05-14 17:39 463952 ----a-w- c:\program files (x86)\SugarSync\SugarSyncShellExt_x64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\SugarSyncPending]
@="{62CCD8E3-9C21-41E1-B55E-1E26DFC68511}"
[HKEY_CLASSES_ROOT\CLSID\{62CCD8E3-9C21-41E1-B55E-1E26DFC68511}]
2012-05-14 17:39 463952 ----a-w- c:\program files (x86)\SugarSync\SugarSyncShellExt_x64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\SugarSyncRoot]
@="{A759AFF6-5851-457D-A540-F4ECED148351}"
[HKEY_CLASSES_ROOT\CLSID\{A759AFF6-5851-457D-A540-F4ECED148351}]
2012-05-14 17:39 463952 ----a-w- c:\program files (x86)\SugarSync\SugarSyncShellExt_x64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\SugarSyncShared]
@="{1574C9EF-7D58-488F-B358-8B78C1538F51}"
[HKEY_CLASSES_ROOT\CLSID\{1574C9EF-7D58-488F-B358-8B78C1538F51}]
2012-05-14 17:39 463952 ----a-w- c:\program files (x86)\SugarSync\SugarSyncShellExt_x64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2012-08-24 170304]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2012-08-24 398656]
"Persistence"="c:\windows\system32\igfxpers.exe" [2012-08-24 441152]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2012-07-02 12921488]
"RtHDVBg_Dolby"="c:\program files\Realtek\Audio\HDA\RAVBg64.exe" [2012-06-13 1212560]
"AmIcoSinglun64"="c:\program files (x86)\AmIcoSingLun\AmIcoSinglun64.exe" [2012-06-26 366720]
"Energy Management"="c:\program files (x86)\Lenovo\Energy Management\Energy Management.exe" [2012-10-17 17079376]
"EnergyUtility"="c:\program files (x86)\Lenovo\Energy Management\Utility.exe" [2012-10-17 191568]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2015-02-13 169768]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.google.com
mLocal Page = c:\windows\SysWOW64\blank.htm
TCP: DhcpNameServer = 10.0.0.138
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Toolbar-Locked - (no file)
HKLM-Run-ETDCtrl - c:\program files (x86)\Elantech\ETDCtrl.exe
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee]
"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
@SACL=(02 0000)
.
Celkový čas: 2015-04-07 19:46:08
ComboFix-quarantined-files.txt 2015-04-07 17:46
ComboFix2.txt 2015-04-02 20:59
.
Před spuštěním: 228 429 017 088 bytes free
Po spuštění: 228 359 843 840 bytes free
.
- - End Of File - - D27B75BB6B6C7C425CF0E753C60304A9

[Rudy]

Log je v pořádku, nejedná se o problém malware. Zatěžovat to může teoreticky každá aplikace, mající přístup na net.

[KatieLe]

Má tedy smysl ntb dávat do nějakého specializovaného servisu? Protože tohle mi nikdy nedělal...

[Rudy]

Zkuste vypínat jednotlivé úlohy, až přijdete na tu, která to způsobuje.

[KatieLe]

hlavně je to vždy systém, tak nechci ukončit úlohu aby se něco nestalo

[Rudy]

PC maximálně spadne a po novém startu se vše obnoví. Zkuste nainstalovat processexplorer: http://www.stahuj.centrum.cz/utility_a_ ... [oz]=16.05 . Možná se dovíte nějakou podrobnost. PE je sofistikovanější obdoba správce úloh.