Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Zpomalený počítač, prosím o kontrolu logu

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Zpráva
Autor
draace
Návštěvník
Návštěvník
Příspěvky: 88
Registrován: 25 dub 2005 20:06

Zpomalený počítač, prosím o kontrolu logu

#1 Příspěvek od draace »

Zdravím,

dostali jsme od tchána notebook... A asi je pekelně zavšivený a plný nesmyslů, tak prosím o zhodnocení stavu (i šnek je rychlejší).

Moc děkuji! :-)

Logfile of random's system information tool 1.10 (written by random/random)
Run by Petr at 2015-05-18 08:35:44
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 378 GB (87%) free of 432 GB
Total RAM: 2812 MB (43% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 8:35:57, on 18.5.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17631)
Boot mode: Normal

Running processes:
C:\windows\system32\Dwm.exe
C:\windows\system32\taskhost.exe
C:\windows\Explorer.EXE
C:\Program Files\CONEXANT\cAudioFilterAgent\cAudioFilterAgent.exe
C:\Program Files\Lenovo\VeriFace\PManage.exe
C:\Program Files\Lenovo\YouCam\YouCamTray.exe
C:\Program Files\Lenovo\Energy Management\utility.exe
C:\Program Files\Lenovo\Energy Management\Energy Management.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Program Files\HP\HP Software Update\hpwuschd2.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe
C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMStatus.exe
C:\Users\Petr\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
C:\Program Files\Lenovo\Bluetooth Software\BtStackServer.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\windows\system32\SearchFilterHost.exe
C:\Users\Petr\Desktop\RSIT.exe
C:\Program Files\trend micro\Petr.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://toolbar.inbox.com/search/dispatc ... &%language
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.seznam.cz/domovska-stranka
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://toolbar.inbox.com/search/ie.aspx ... 096&lng=cs
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://toolbar.inbox.com/help/sa_custom ... tbid=80096
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://toolbar.inbox.com/search/ie.aspx ... 096&lng=cs
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://toolbar.inbox.com/help/sa_custom ... tbid=80096
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {D3D233D5-9F6D-436C-B6C7-E63F77503B30} - (no file)
O2 - BHO: (no name) - {11BF46C6-B3DE-48BD-BF70-3AD85CAB80B5} - C:\PROGRA~1\SITERA~1\SiteRank.dll
O2 - BHO: Ask Toolbar BHO - {4F524A2D-5637-4300-76A7-7A786E7484D7} - "C:\Program Files\AskPartnerNetwork\Toolbar\ORJ-V7C\Passport.dll" (file missing)
O2 - BHO: AppGraffiti - {6F6A5334-78E9-4D9B-8182-8B41EA8C39EF} - C:\PROGRA~1\APPGRA~1\APPGRA~1.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: Pomocník pro přihlášení ke službě Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL
O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - "C:\Program Files\Microsoft\BingBar\BingExt.dll" (file missing)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files\Microsoft\BingBar\BingExt.dll" (file missing)
O3 - Toolbar: Ask Toolbar - {4F524A2D-5637-4300-76A7-7A786E7484D7} - "C:\Program Files\AskPartnerNetwork\Toolbar\ORJ-V7C\Passport.dll" (file missing)
O4 - HKLM\..\Run: [cAudioFilterAgent] C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent.exe
O4 - HKLM\..\Run: [SmartAudio] C:\Program Files\CONEXANT\SAII\SAIICpl.exe /t
O4 - HKLM\..\Run: [snp2uvc] C:\windows\vsnp2uvc.exe
O4 - HKLM\..\Run: [VeriFaceManager] C:\Program Files\Lenovo\VeriFace\PManage.exe
O4 - HKLM\..\Run: [UCam_Menu] "C:\Program Files\Lenovo\YouCam\MUITransfer\MUIStartMenu.exe" "C:\Program Files\Lenovo\YouCam" UpdateWithCreateOnce "Software\CyberLink\YouCam\3.0"
O4 - HKLM\..\Run: [YouCam Mirror Tray icon] "C:\Program Files\Lenovo\YouCam\YouCamTray.exe" /s
O4 - HKLM\..\Run: [UpdateP2GShortCut] "C:\Program Files\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files\Lenovo\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\5.0"
O4 - HKLM\..\Run: [EnergyUtility] C:\Program Files\Lenovo\Energy Management\utility.exe
O4 - HKLM\..\Run: [Energy Management] C:\Program Files\Lenovo\Energy Management\Energy Management.exe
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [ApnTBMon] "C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [Avira Systray] C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe
O4 - HKCU\..\Run: [cz.seznam.software.autoupdate] "C:\Users\Petr\AppData\Roaming\Seznam.cz\szninstall.exe" -c
O4 - HKCU\..\Run: [cz.seznam.software.szndesktop] "C:\Users\Petr\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: Bluetooth.lnk = ?
O4 - Global Startup: WDDMStatus.lnk = C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMStatus.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105
O8 - Extra context menu item: Odeslat obrázek do zařízení &Bluetooth... - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Odeslat stránku do zařízení &Bluetooth... - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: @C:\Program Files\Lenovo\Bluetooth Software\btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @C:\Program Files\Lenovo\Bluetooth Software\btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {1ABA5FAC-1417-422B-BA82-45C35E2C908B} (20-20 3D Viewer for IKEA) - http://kitchenplanner.ikea.com/CZ/Core/ ... _Win32.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: 24x7HelpService (24x7HelpSvc) - Unknown owner - C:\Program Files\24x7Help\App24x7Svc.exe (file missing)
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: AMD External Events Utility - AMD - C:\windows\system32\atiesrxx.exe
O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: Avira Scheduler (AntiVirSchedulerService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira Real-Time Protection (AntiVirService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Ask Update Service (APNMCP) - APN LLC. - C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe
O23 - Service: Avira Service Host (Avira.OE.ServiceHost) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: IGRS - Lenovo Group Limited - C:\Program Files\Lenovo\ReadyComm\common\IGRS.exe
O23 - Service: Lenovo ReadyComm AppSvc - Lenovo Group Limited - C:\Program Files\Lenovo\ReadyComm\AppSvc.exe
O23 - Service: Lenovo ReadyComm ConnSvc - Lenovo Group Limited - C:\Program Files\Lenovo\ReadyComm\ConnSvc.exe
O23 - Service: WDDMService - WDC - C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe
O23 - Service: WD File Management Engine (WDFME) - Unknown owner - C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDFME\WDFME.exe
O23 - Service: WD File Management Shadow Engine (WDSC) - Unknown owner - C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDSC.exe

--
End of file - 11363 bytes

======Scheduled tasks folder======

C:\windows\tasks\Adobe Flash Player Updater.job - C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
C:\windows\tasks\AutoUpdate Allplan 2012.job - C:\Program Files\Nemetschek\Allplan\prg\NemDownloadHandler.exe /f "C:\Data\Nemetschek\Allplan\Std\AllplanUpdate.inf"
C:\windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files\Google\Update\GoogleUpdate.exe /c
C:\windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\windows\tasks\WebContent AutoUpdate 2011.job - C:\Program Files\Nemetschek\Allplan\prg\NemDownloadHandler.exe /f "C:\Data\Nemetschek\Allplan\Std\AllplanUpdate.inf" /one http://autoupdate.allplan.com/Updates/A ... ontent.upd

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11BF46C6-B3DE-48BD-BF70-3AD85CAB80B5}]
C:\PROGRA~1\SITERA~1\SiteRank.dll [2013-10-10 1574584]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4F524A2D-5637-4300-76A7-7A786E7484D7}]
Ask Toolbar - C:\Program Files\AskPartnerNetwork\Toolbar\ORJ-V7C\Passport.dll [2015-04-28 11144]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6F6A5334-78E9-4D9B-8182-8B41EA8C39EF}]
AppGraffiti - C:\PROGRA~1\APPGRA~1\APPGRA~1.DLL [2012-05-04 271048]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2014-05-07 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocník pro přihlášení ke službě Windows Live - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2013-03-06 562904]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d2ce3e00-f94a-4740-988e-03dc2f38c34f}]
Bing Bar Helper - C:\Program Files\Microsoft\BingBar\BingExt.dll [2011-07-07 1152776]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2014-05-07 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{8dcb7100-df86-4384-8842-8fa844297b3f} - Bing Bar - C:\Program Files\Microsoft\BingBar\BingExt.dll [2011-07-07 1152776]
{4F524A2D-5637-4300-76A7-7A786E7484D7} - Ask Toolbar - C:\Program Files\AskPartnerNetwork\Toolbar\ORJ-V7C\Passport.dll [2015-04-28 11144]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"cAudioFilterAgent"=C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent.exe [2010-03-10 496184]
"SmartAudio"=C:\Program Files\CONEXANT\SAII\SAIICpl.exe [2009-11-19 307768]
"snp2uvc"=C:\windows\vsnp2uvc.exe []
"VeriFaceManager"=C:\Program Files\Lenovo\VeriFace\PManage.exe [2010-06-01 3122528]
"UCam_Menu"=C:\Program Files\Lenovo\YouCam\MUITransfer\MUIStartMenu.exe [2009-05-20 222504]
"YouCam Mirror Tray icon"=C:\Program Files\Lenovo\YouCam\YouCamTray.exe [2009-12-22 167008]
"UpdateP2GShortCut"=C:\Program Files\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [2008-12-04 218408]
"EnergyUtility"=C:\Program Files\Lenovo\Energy Management\utility.exe [2009-12-17 4114368]
"Energy Management"=C:\Program Files\Lenovo\Energy Management\Energy Management.exe [2009-12-17 6223808]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2010-11-18 2219184]
"HP Software Update"=C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [2010-06-09 49208]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2011-11-09 343168]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-08-21 959176]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2014-05-07 256896]
"ApnTBMon"=C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [2015-04-28 2004360]
"avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2015-04-07 704512]
"Avira Systray"=C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe [2014-12-31 126712]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"cz.seznam.software.autoupdate"=C:\Users\Petr\AppData\Roaming\Seznam.cz\szninstall.exe [2013-05-16 1062472]
"cz.seznam.software.szndesktop"=C:\Users\Petr\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [2013-04-12 92664]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth.lnk - C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe
WDDMStatus.lnk - C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMStatus.exe

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mcmscsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MpfService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"msacm.clmp3enc"=C:\PROGRA~1\Lenovo\Power2Go\CLMP3Enc.ACM
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"wave7"=wdmaud.drv
"midi7"=wdmaud.drv
"mixer7"=wdmaud.drv
"wave8"=wdmaud.drv
"midi8"=wdmaud.drv
"mixer8"=wdmaud.drv
"wave9"=wdmaud.drv
"midi9"=wdmaud.drv
"mixer9"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-05-18 08:35:44 ----D---- C:\rsit
2015-05-18 08:35:44 ----D---- C:\Program Files\trend micro
2015-05-10 19:11:40 ----SD---- C:\windows\system32\GWX
2015-04-21 20:42:36 ----A---- C:\windows\system32\blackbox.dll
2015-04-21 20:42:35 ----A---- C:\windows\system32\drmv2clt.dll
2015-04-21 20:42:33 ----A---- C:\windows\system32\wmdrmsdk.dll
2015-04-21 20:42:32 ----A---- C:\windows\system32\mf.dll
2015-04-21 20:42:31 ----A---- C:\windows\system32\wmp.dll
2015-04-21 20:42:27 ----A---- C:\windows\system32\ntkrnlpa.exe
2015-04-21 20:42:27 ----A---- C:\windows\system32\drmmgrtn.dll
2015-04-21 20:42:26 ----A---- C:\windows\system32\ntoskrnl.exe
2015-04-21 20:42:25 ----A---- C:\windows\system32\crypt32.dll
2015-04-21 20:42:25 ----A---- C:\windows\system32\ci.dll
2015-04-21 20:42:24 ----A---- C:\windows\system32\winload.exe
2015-04-21 20:42:24 ----A---- C:\windows\system32\drivers\PEAuth.sys
2015-04-21 20:42:23 ----A---- C:\windows\system32\winresume.exe
2015-04-21 20:42:23 ----A---- C:\windows\system32\cryptsvc.dll
2015-04-21 20:42:22 ----A---- C:\windows\system32\wintrust.dll
2015-04-21 20:42:22 ----A---- C:\windows\system32\evr.dll
2015-04-21 20:42:22 ----A---- C:\windows\system32\adtschema.dll
2015-04-21 20:42:21 ----A---- C:\windows\system32\quartz.dll
2015-04-21 20:42:21 ----A---- C:\windows\system32\drivers\cng.sys
2015-04-21 20:42:20 ----A---- C:\windows\system32\pcasvc.dll
2015-04-21 20:42:20 ----A---- C:\windows\system32\mfplat.dll
2015-04-21 20:42:20 ----A---- C:\windows\system32\cryptui.dll
2015-04-21 20:42:19 ----A---- C:\windows\system32\srcore.dll
2015-04-21 20:42:19 ----A---- C:\windows\system32\lsasrv.dll
2015-04-21 20:42:18 ----A---- C:\windows\system32\drivers\mountmgr.sys
2015-04-21 20:42:18 ----A---- C:\windows\system32\cryptsp.dll
2015-04-21 20:42:17 ----A---- C:\windows\system32\drivers\ksecpkg.sys
2015-04-21 20:42:17 ----A---- C:\windows\system32\drivers\ksecdd.sys
2015-04-21 20:42:16 ----A---- C:\windows\system32\schannel.dll
2015-04-21 20:42:15 ----A---- C:\windows\system32\rstrui.exe
2015-04-21 20:42:15 ----A---- C:\windows\system32\qdvd.dll
2015-04-21 20:42:15 ----A---- C:\windows\system32\msscp.dll
2015-04-21 20:42:15 ----A---- C:\windows\system32\cryptnet.dll
2015-04-21 20:42:13 ----A---- C:\windows\system32\kerberos.dll
2015-04-21 20:42:12 ----A---- C:\windows\system32\audiodg.exe
2015-04-21 20:42:12 ----A---- C:\windows\system32\appidapi.dll
2015-04-21 20:42:11 ----A---- C:\windows\system32\msv1_0.dll
2015-04-21 20:42:11 ----A---- C:\windows\system32\msnetobj.dll
2015-04-21 20:42:10 ----A---- C:\windows\system32\audiosrv.dll
2015-04-21 20:42:09 ----A---- C:\windows\system32\ncrypt.dll
2015-04-21 20:42:09 ----A---- C:\windows\system32\appidsvc.dll
2015-04-21 20:42:09 ----A---- C:\windows\system32\appidpolicyconverter.exe
2015-04-21 20:42:08 ----A---- C:\windows\system32\AudioEng.dll
2015-04-21 20:42:07 ----A---- C:\windows\system32\rrinstaller.exe
2015-04-21 20:42:07 ----A---- C:\windows\system32\pcadm.dll
2015-04-21 20:42:07 ----A---- C:\windows\system32\drivers\appid.sys
2015-04-21 20:42:06 ----A---- C:\windows\system32\TSpkg.dll
2015-04-21 20:42:06 ----A---- C:\windows\system32\smss.exe
2015-04-21 20:42:06 ----A---- C:\windows\system32\AUDIOKSE.dll
2015-04-21 20:42:05 ----A---- C:\windows\system32\wdigest.dll
2015-04-21 20:42:05 ----A---- C:\windows\system32\sspicli.dll
2015-04-21 20:42:05 ----A---- C:\windows\system32\setbcdlocale.dll
2015-04-21 20:42:05 ----A---- C:\windows\system32\mfps.dll
2015-04-21 20:42:05 ----A---- C:\windows\system32\lsass.exe
2015-04-21 20:42:05 ----A---- C:\windows\system32\auditpol.exe
2015-04-21 20:42:04 ----A---- C:\windows\system32\srclient.dll
2015-04-21 20:42:04 ----A---- C:\windows\system32\pcawrk.exe
2015-04-21 20:42:04 ----A---- C:\windows\system32\mfpmp.exe
2015-04-21 20:42:04 ----A---- C:\windows\system32\AudioSes.dll
2015-04-21 20:42:03 ----A---- C:\windows\system32\pcalua.exe
2015-04-21 20:42:03 ----A---- C:\windows\system32\EncDump.dll
2015-04-21 20:42:03 ----A---- C:\windows\system32\csrsrv.dll
2015-04-21 20:42:02 ----A---- C:\windows\system32\msmmsp.dll
2015-04-21 20:42:02 ----A---- C:\windows\system32\appidcertstorecheck.exe
2015-04-21 20:42:01 ----A---- C:\windows\system32\sspisrv.dll
2015-04-21 20:41:59 ----A---- C:\windows\system32\secur32.dll
2015-04-21 20:41:59 ----A---- C:\windows\system32\credssp.dll
2015-04-21 20:41:56 ----A---- C:\windows\system32\spwmp.dll
2015-04-21 20:41:56 ----A---- C:\windows\system32\pcaevts.dll
2015-04-21 20:41:56 ----A---- C:\windows\system32\dxmasf.dll
2015-04-21 20:41:56 ----A---- C:\windows\system32\apisetschema.dll
2015-04-21 20:41:55 ----A---- C:\windows\system32\wmploc.DLL
2015-04-21 20:41:54 ----A---- C:\windows\system32\msobjs.dll
2015-04-21 20:41:54 ----A---- C:\windows\system32\msaudite.dll
2015-04-21 20:41:54 ----A---- C:\windows\system32\mferror.dll
2015-04-21 20:41:25 ----A---- C:\windows\system32\WindowsCodecs.dll
2015-04-21 20:21:24 ----A---- C:\windows\system32\mstscax.dll
2015-04-21 20:21:23 ----A---- C:\windows\system32\aaclient.dll
2015-04-21 20:21:16 ----A---- C:\windows\system32\msctf.dll
2015-04-21 20:21:13 ----A---- C:\windows\system32\profsvc.dll
2015-04-21 20:21:09 ----A---- C:\windows\system32\shell32.dll
2015-04-21 20:21:03 ----A---- C:\windows\system32\TSWbPrxy.exe
2015-04-21 20:21:01 ----A---- C:\windows\system32\win32k.sys
2015-04-21 20:20:58 ----A---- C:\windows\system32\oleaut32.dll
2015-04-21 20:20:55 ----A---- C:\windows\system32\ubpm.dll
2015-04-21 20:20:53 ----A---- C:\windows\system32\lpk.dll
2015-04-21 20:20:53 ----A---- C:\windows\system32\dciman32.dll
2015-04-21 20:20:53 ----A---- C:\windows\system32\atmlib.dll
2015-04-21 20:20:53 ----A---- C:\windows\system32\atmfd.dll
2015-04-21 20:20:52 ----A---- C:\windows\system32\fontsub.dll
2015-04-21 20:20:50 ----A---- C:\windows\system32\scesrv.dll
2015-04-21 20:20:15 ----A---- C:\windows\system32\JavaScriptCollectionAgent.dll
2015-04-21 20:20:15 ----A---- C:\windows\system32\ieetwproxystub.dll
2015-04-21 20:20:15 ----A---- C:\windows\system32\ieetwcollector.exe
2015-04-21 20:20:14 ----A---- C:\windows\system32\iernonce.dll
2015-04-21 20:20:14 ----A---- C:\windows\system32\ie4uinit.exe
2015-04-21 20:20:13 ----A---- C:\windows\system32\MsSpellCheckingFacility.exe
2015-04-21 20:20:12 ----A---- C:\windows\system32\urlmon.dll
2015-04-21 20:20:12 ----A---- C:\windows\system32\jsproxy.dll
2015-04-21 20:20:12 ----A---- C:\windows\system32\iedkcs32.dll
2015-04-21 20:20:11 ----A---- C:\windows\system32\jscript9diag.dll
2015-04-21 20:20:11 ----A---- C:\windows\system32\ieUnatt.exe
2015-04-21 20:20:11 ----A---- C:\windows\system32\ieapfltr.dll
2015-04-21 20:20:11 ----A---- C:\windows\system32\dxtmsft.dll
2015-04-21 20:20:10 ----A---- C:\windows\system32\msfeeds.dll
2015-04-21 20:20:08 ----A---- C:\windows\system32\msrating.dll
2015-04-21 20:20:08 ----A---- C:\windows\system32\iesetup.dll
2015-04-21 20:20:07 ----A---- C:\windows\system32\ieetwcollectorres.dll
2015-04-21 20:20:06 ----A---- C:\windows\system32\wininet.dll
2015-04-21 20:20:05 ----A---- C:\windows\system32\dxtrans.dll
2015-04-21 20:20:04 ----A---- C:\windows\system32\ieui.dll
2015-04-21 20:20:02 ----A---- C:\windows\system32\ieframe.dll
2015-04-21 20:20:01 ----A---- C:\windows\system32\mshtmled.dll
2015-04-21 20:20:00 ----A---- C:\windows\system32\mshtmlmedia.dll
2015-04-21 20:19:59 ----A---- C:\windows\system32\MshtmlDac.dll
2015-04-21 20:19:58 ----A---- C:\windows\system32\iertutil.dll
2015-04-21 20:19:53 ----A---- C:\windows\system32\mshtml.dll
2015-04-21 20:19:50 ----A---- C:\windows\system32\vbscript.dll
2015-04-21 20:19:48 ----A---- C:\windows\system32\jscript9.dll
2015-04-21 20:18:43 ----A---- C:\windows\system32\nlasvc.dll
2015-04-21 20:18:39 ----A---- C:\windows\system32\WMPhoto.dll

======List of files/folders modified in the last 1 month======

2015-05-18 08:35:57 ----D---- C:\windows\Temp
2015-05-18 08:35:44 ----RD---- C:\Program Files
2015-05-18 08:27:05 ----D---- C:\windows\system32\config
2015-05-18 08:23:29 ----D---- C:\windows\Microsoft.NET
2015-05-18 08:23:27 ----RSD---- C:\windows\assembly
2015-05-18 08:08:55 ----D---- C:\windows\System32
2015-05-18 08:08:54 ----D---- C:\windows\inf
2015-05-18 08:08:54 ----A---- C:\windows\system32\PerfStringBackup.INI
2015-05-18 08:06:26 ----D---- C:\Users\Petr\AppData\Roaming\Seznam.cz
2015-05-18 08:01:08 ----D---- C:\ProgramData\VeriFace
2015-05-18 08:00:41 ----SHD---- C:\Config.Msi
2015-05-14 19:39:38 ----SHD---- C:\windows\Installer
2015-05-14 19:38:31 ----D---- C:\windows\Logs
2015-05-14 19:30:49 ----D---- C:\windows\system32\catroot2
2015-05-14 19:24:55 ----D---- C:\windows\winsxs
2015-05-14 19:22:12 ----D---- C:\Program Files\Google
2015-05-10 20:22:45 ----D---- C:\windows\system32\catroot
2015-05-10 20:22:00 ----D---- C:\Program Files\Windows Media Player
2015-05-10 20:21:59 ----D---- C:\windows\system32\drivers
2015-05-10 20:21:59 ----D---- C:\windows\system32\Dism
2015-05-10 20:21:58 ----D---- C:\windows\system32\en-US
2015-05-10 20:21:58 ----D---- C:\windows\system32\cs-CZ
2015-05-10 20:21:55 ----D---- C:\windows\system32\CodeIntegrity
2015-05-10 20:21:55 ----D---- C:\windows\system32\Boot
2015-05-10 20:20:51 ----SHD---- C:\System Volume Information
2015-05-10 20:18:45 ----D---- C:\Firefox
2015-05-10 20:18:43 ----D---- C:\windows\system32\Tasks
2015-05-10 20:16:56 ----HD---- C:\ProgramData
2015-05-10 20:16:56 ----D---- C:\Program Files\McAfee Security Scan
2015-05-10 20:14:26 ----D---- C:\Program Files\HP
2015-05-10 20:13:16 ----D---- C:\windows\system32\DriverStore
2015-05-10 20:13:03 ----D---- C:\windows\twain_32
2015-05-10 19:11:35 ----D---- C:\Program Files\Internet Explorer
2015-04-21 21:14:24 ----D---- C:\ProgramData\Microsoft Help
2015-04-21 21:12:49 ----D---- C:\windows\system32\MRT
2015-04-21 20:56:41 ----A---- C:\windows\win.ini
2015-04-21 20:08:40 ----A---- C:\windows\system32\FlashPlayerApp.exe
2015-04-21 19:44:44 ----D---- C:\windows\system32\NDF

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AtiPcie;AMD PCI Express (3GIO) Filter; C:\windows\system32\DRIVERS\AtiPcie.sys [2009-08-24 14392]
R0 rdyboost;ReadyBoost; C:\windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R1 avipbb;avipbb; C:\windows\system32\DRIVERS\avipbb.sys [2015-03-28 136216]
R1 avkmgr;avkmgr; C:\windows\system32\DRIVERS\avkmgr.sys [2014-10-22 37352]
R1 ehdrv;ehdrv; C:\windows\system32\DRIVERS\ehdrv.sys [2010-07-29 115008]
R1 ssmdrv;ssmdrv; C:\windows\system32\DRIVERS\ssmdrv.sys [2014-10-22 28520]
R1 vwififlt;Virtual WiFi Filter Driver; C:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 48128]
R2 AODDriver4.01;AODDriver4.01; \??\C:\Program Files\ATI Technologies\ATI.ACE\Fuel\i386\AODDriver2.sys [2011-06-24 39424]
R2 avgntflt;avgntflt; C:\windows\system32\DRIVERS\avgntflt.sys [2015-03-28 105864]
R2 eamonm;eamonm; C:\windows\system32\DRIVERS\eamonm.sys [2010-09-03 137144]
R2 epfwwfpr;epfwwfpr; C:\windows\system32\DRIVERS\epfwwfpr.sys [2010-07-29 96920]
R3 ACPIVPC;Lenovo Virtual Power Controller Driver; C:\windows\system32\DRIVERS\AcpiVpc.sys [2009-09-03 21256]
R3 amdiox86;AMD IO Driver; C:\windows\system32\DRIVERS\amdiox86.sys [2010-02-18 37944]
R3 amdkmdag;amdkmdag; C:\windows\system32\DRIVERS\atikmdag.sys [2011-11-10 8913920]
R3 amdkmdap;amdkmdap; C:\windows\system32\DRIVERS\atikmpag.sys [2011-11-10 263680]
R3 ApfiltrService;Alps Pointing-device Filter Driver; C:\windows\system32\DRIVERS\Apfiltr.sys [2010-04-22 218744]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\windows\system32\DRIVERS\athr.sys [2009-12-14 1245696]
R3 BthEnum;Ovladač pro Bluetooth Request Block; C:\windows\system32\drivers\BthEnum.sys [2009-07-14 34816]
R3 BthPan;Bluetooth Device (Personal Area Network); C:\windows\system32\DRIVERS\bthpan.sys [2009-07-14 93696]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\windows\System32\Drivers\BTHUSB.sys [2011-04-28 60416]
R3 btwaudio;Bluetooth Audio Device Service; C:\windows\system32\drivers\btwaudio.sys [2009-08-29 86056]
R3 btwavdt;Bluetooth AVDT; C:\windows\system32\DRIVERS\btwavdt.sys [2009-08-29 108072]
R3 btwl2cap;Bluetooth L2CAP Service; C:\windows\system32\DRIVERS\btwl2cap.sys [2009-04-08 29472]
R3 btwrchid;btwrchid; C:\windows\system32\DRIVERS\btwrchid.sys [2009-08-29 18472]
R3 CnxtHdAudService;Conexant UAA Function Driver for High Definition Audio Service; C:\windows\system32\drivers\CHDRT32.sys [2010-01-18 514104]
R3 JmUsbCcgp;JMicron USB Composite Device Lower Filter Driver; C:\windows\system32\DRIVERS\jmccgp.sys [2009-12-03 15216]
R3 JmUsbVideo;JMicron 31x Upper Filter Driver; C:\windows\System32\Drivers\jmcam.sys [2009-12-03 46320]
R3 JmUsbVideo2;JMicron 31x Lower Filter Driver; C:\windows\System32\Drivers\jmcam_lo.sys [2009-12-03 24048]
R3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller; C:\windows\system32\DRIVERS\L1C62x86.sys [2009-11-13 58368]
R3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\windows\system32\DRIVERS\rfcomm.sys [2009-07-14 129536]
R3 usbfilter;AMD USB Filter Driver; C:\windows\system32\DRIVERS\usbfilter.sys [2009-12-22 30392]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\windows\system32\DRIVERS\vwifimp.sys [2009-07-14 14336]
R3 wdmirror;wdmirror; C:\windows\system32\DRIVERS\WDMirror.sys [2009-07-16 11792]
S2 Parvdm;Parvdm; C:\windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;Ovladač filtru AMD portu AGP; C:\windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
S3 Bridge0;Bridge0; C:\windows\system32\drivers\WDBridge.sys [2009-07-28 63240]
S3 BTHPORT;Ovladač portu Bluetooth; C:\windows\System32\Drivers\BTHport.sys [2012-07-06 393728]
S3 igfx;igfx; C:\windows\system32\DRIVERS\igdkmd32.sys [2009-06-10 4756480]
S3 k57nd60x;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0; C:\windows\system32\DRIVERS\k57nd60x.sys [2009-07-14 229888]
S3 netw5v32;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 32 Bit; C:\windows\system32\DRIVERS\netw5v32.sys [2009-07-14 4231168]
S3 pciide;pciide; C:\windows\system32\drivers\pciide.sys [2009-07-14 12368]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\windows\System32\Drivers\RtsUStor.sys [2010-03-24 191008]
S3 sisagp;Filtr SIS sběrnice AGP; C:\windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\windows\System32\drivers\tsusbflt.sys [2010-11-20 52224]
S3 usbscan;Ovladač skeneru USB; C:\windows\system32\drivers\usbscan.sys [2013-07-03 36352]
S3 usbser;SIGMA SPORT USB Device; C:\windows\system32\DRIVERS\usbser.sys [2013-08-29 28160]
S3 viaagp;Filtr VIA sběrnice AGP; C:\windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 WDC_SAM;WD SCSI Pass Thru driver; C:\windows\system32\DRIVERS\wdcsam.sys [2009-02-13 11520]
S3 WimFltr;WimFltr; C:\windows\system32\DRIVERS\wimfltr.sys [2008-08-06 128104]
S3 wsvd;wsvd; C:\windows\system32\DRIVERS\wsvd.sys [2009-07-21 81704]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-09-12 64704]
R2 AMD External Events Utility;AMD External Events Utility; C:\windows\system32\atiesrxx.exe [2011-11-10 176128]
R2 AMD FUEL Service;AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2011-11-09 291840]
R2 AntiVirService;Avira Real-Time Protection; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2015-04-07 432888]
R2 AntiVirSchedulerService;Avira Scheduler; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2015-04-07 432888]
R2 APNMCP;Ask Update Service; C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe [2015-04-28 178568]
R2 BBUpdate;BBUpdate; C:\Program Files\Microsoft\BingBar\SeaPort.EXE [2011-06-15 249648]
R2 BcmSqlStartupSvc;Business Contact Manager SQL Server Startup Service; C:\Program Files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe [2008-01-11 30312]
R2 btwdins;Bluetooth Service; C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe [2009-09-04 595232]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2010-11-18 810144]
R2 ReadyComm.DirectRouter;ReadyComm.DirectRouter; C:\windows\System32\IgrsSvcs.exe [2009-07-14 20992]
R2 SQLBrowser;SQL Server Browser; c:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe [2010-12-10 238944]
R2 SQLWriter;SQL Server VSS Writer; c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe [2010-12-10 86880]
R2 WDDMService;WDDMService; C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe [2010-09-08 237056]
R2 WDFME;WD File Management Engine; C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDFME\WDFME.exe [2010-09-08 1034752]
R2 WDSC;WD File Management Shadow Engine; C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDSC.exe [2010-09-08 484352]
S2 24x7HelpSvc;24x7HelpService; C:\Program Files\24x7Help\App24x7Svc.exe []
S2 Avira.OE.ServiceHost;Avira Service Host; C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe [2014-12-31 178424]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2014-10-31 107912]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-04-21 268464]
S3 BBSvc;Bing Bar Update Service; C:\Program Files\Microsoft\BingBar\BBSvc.EXE [2011-07-07 195336]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [2010-11-18 33584]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2014-10-31 107912]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\windows\system32\IEEtwCollector.exe [2015-01-12 102912]
S3 IGRS;IGRS; C:\Program Files\Lenovo\ReadyComm\common\IGRS.exe [2009-07-15 38152]
S3 Lenovo ReadyComm AppSvc;Lenovo ReadyComm AppSvc; C:\Program Files\Lenovo\ReadyComm\AppSvc.exe [2009-08-14 509192]
S3 Lenovo ReadyComm ConnSvc;Lenovo ReadyComm ConnSvc; C:\Program Files\Lenovo\ReadyComm\ConnSvc.exe [2009-11-17 575304]
S3 MSSQL$MSSMLBIZ;SQL Server (MSSMLBIZ); c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [2010-12-10 29293408]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4640000]
S3 PS_MDP;ReadyComm Presentation Space Helper Service; C:\windows\System32\IgrsSvcs.exe [2009-07-14 20992]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\windows\system32\Wat\WatAdminSvc.exe [2010-11-03 1343400]
S4 aspnet_state;Stavová služba ASP.NET; C:\windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2013-09-11 46688]
S4 MSSQLServerADHelper;SQL Server Active Directory Helper; c:\Program Files\Microsoft SQL Server\90\Shared\sqladhlp90.exe [2010-12-10 44384]
S4 NetMsmqActivator;@C:\windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

-----------------EOF-----------------

Márty84
VIP
VIP
Příspěvky: 21679
Registrován: 05 pro 2009 20:08
Bydliště: Ostrava

Re: Zpomalený počítač, prosím o kontrolu logu

#2 Příspěvek od Márty84 »

Zdravim :)

Haveti je tam hodne :boxed:

:!: Nejprve ale odinstalujte jeden z antiviru. Bezi tam Avira a Nod. Jeden musi pryc.

:arrow: Stahnete crystal disk info http://sourceforge.jp/projects/crystald ... 5_0_0.zip/
Spustte jako spravce. Za chvili se zobrazi vysledek.
Kliknete nahore na napis Úpravy a pak na napis Kopírovat. To co se zkopiruje (ulozi se to do pameti) mi sem vlozte (ctrl + V)

:arrow: Stahnete AdwCleaner https://toolslib.net/downloads/finish/1/ a ulozte ho na plochu.
Ukoncete vsechny programy, jinak to AdwCleaner udela za vas.
Kliknete na nej pravym mysidlem a levym na Spustit jako spravce.
Kliknete na Scan a pockejte, az kontrola dobehne.
Pak kliknete na Cleaning
Program zacne pracovat (muze dojit k restartu pc) a vyplivne log (pripadne bude zde C:\AdwCleaner\AdwCleaner [S?].txt ). Ten mi sem zkopirujte.
Pokud máte dotaz, který není určen pro veřejnost, můžete mi napsat na mail marty84zavináčforum.viry.cz

Možnost podpořit naše fórum https://platba.viry.cz/payment/

Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).

draace
Návštěvník
Návštěvník
Příspěvky: 88
Registrován: 25 dub 2005 20:06

Re: Zpomalený počítač, prosím o kontrolu logu

#3 Příspěvek od draace »

Posílám zatím první část úkolu, druhou dodám obratem :-)

----------------------------------------------------------------------------
CrystalDiskInfo 5.0.0 (C) 2008-2012 hiyohiyo
Crystal Dew World : http://crystalmark.info/
----------------------------------------------------------------------------

OS : Windows 7 Home Premium Edition SP1 [6.1 Build 7601] (x86)
Date : 2015/05/18 12:09:28

-- Controller Map ----------------------------------------------------------
+ ATA Channel 0 (0) [ATA]
- FUJITSU MJA2500BH G2 ATA Device
+ ATA Channel 1 (1) [ATA]
- Slimtype DVD A DS8A4S ATA Device
+ Standardní řadič AHCI 1.0 s rozhraním Serial ATA [ATA]
- ATA Channel 0 (0)
- ATA Channel 1 (1)

-- Disk List ---------------------------------------------------------------
(1) FUJITSU MJA2500BH G2 : 500,1 GB [0/0/0, pd1]

----------------------------------------------------------------------------
(1) FUJITSU MJA2500BH G2
----------------------------------------------------------------------------
Model : FUJITSU MJA2500BH G2
Firmware : 0084001C
Serial Number : K96TTA3267FS
Disk Size : 500,1 GB (8,4/137,4/500,1)
Buffer Size : 8192 KB
Queue Depth : 32
# of Sectors : 976773168
Rotation Rate : 5400 RPM
Interface : Serial ATA
Major Version : ATA8-ACS
Minor Version : ATA8-ACS version 3f
Transfer Mode : SATA/150
Power On Hours : 4126 hod.
Power On Count : 2436 krát
Temparature : 47 C (116 F)
Health Status : Dobrý
Features : S.M.A.R.T., APM, AAM, 48bit LBA, NCQ
APM Level : 4080h [ON]
AAM Level : FEFEh [ON]

-- S.M.A.R.T. --------------------------------------------------------------
ID Cur Wor Thr RawValues(6) Attribute Name
01 100 100 _46 0000000180A7 Počet chyb čtení
02 100 100 _30 0000041F0000 Průchodnost disku
03 100 100 _25 000000000001 Čas na roztočení ploten
04 _99 _99 __0 000000000984 Počet spuštění/zastavení
05 100 100 _24 083400000000 Počet přemapovaných sektorů
07 100 100 _47 0000000005BD Počet chybných hledání
08 100 100 _19 000000000000 Čas potřebný na vyhledání
09 _92 _92 __0 00000000101E Hodin v činnosti
0A 100 100 _20 000000000000 Počet opakovaných pokusů o roztočení ploten
0C 100 100 __0 000000000984 Počet cyklů zapnutí zařízení
C0 100 100 __0 00000000000B Počet vypnutí disku
C1 100 100 __0 00000000107C Počet cyklů načítání/vymazání
C2 100 _90 __0 003E000A002F Teplota
C3 100 100 __0 000000003DA1 Počet oprav chybného čtení
C4 100 100 __0 00002F5F0000 Počet udalostí s číslem realokování sektorů
C5 100 100 __0 000000000000 Počet podezřelých sektorů
C6 100 100 __0 000000000000 Počet neopravitelných sektorů
C7 200 253 __0 000000000000 Počet chyb v kontrolním součtu UltraDMA
C8 100 100 _60 0000000011C0 Počet chyb při zápisu sektorů
CB 100 100 __0 0364FDC1FE74 Počet chyb v kódech na opravu chyb
F0 200 200 __0 000000000000 Čas nastavování hlaviček - v hodinách

-- IDENTIFY_DEVICE ---------------------------------------------------------
0 1 2 3 4 5 6 7 8 9
000: 045A 3FFF C837 0010 0000 003F 003F 0000 0000 0000
010: 2020 2020 2020 2020 4B39 5441 5441 3332 3637 4653
020: 0003 4000 0000 3030 3834 3143 3143 4655 4A49 5453
030: 5520 4D4A 4132 3530 3042 4732 4732 2020 2020 2020
040: 2020 2020 2020 2020 2020 2020 2020 8010 0000 2F00
050: 4000 0200 0200 0007 3FFF 003F 003F FC10 00FB 0110
060: FFFF 0FFF 0000 0007 0003 0078 0078 0078 0078 0000
070: 0000 0000 0000 0000 0000 1702 1702 0002 004C 0040
080: 01F8 0042 346B 7F09 6163 BE09 BE09 6163 203F 00FA
090: 0000 4080 FFFE 0000 FEFE 0000 0000 0000 0000 0000
100: 6030 3A38 0000 0000 0000 4000 4000 0000 5000 00E0
110: 4474 5378 0000 0000 0000 0000 0000 0000 0000 401D
120: 401C 0000 0000 0000 0000 0000 0000 0000 0009 0000
130: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
140: 0000 0000 0000 0000 0E8A 0000 0000 0000 4004 4000
150: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
160: 0000 0000 0000 0000 0000 0000 0000 0000 0003 0000
170: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
180: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
190: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
200: 0000 0000 0000 0000 0000 003D 003D 0000 0000 0000
210: 0000 0000 0000 0000 0000 0000 0000 1518 0000 0000
220: 0000 0000 101F 0000 0000 0000 0000 0000 0000 0000
230: 0000 0000 0000 0000 0001 0000 0000 0000 0000 0000
240: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
250: 0000 0000 0000 0000 0000 ADA5

draace
Návštěvník
Návštěvník
Příspěvky: 88
Registrován: 25 dub 2005 20:06

Re: Zpomalený počítač, prosím o kontrolu logu

#4 Příspěvek od draace »

Pokračování:

# AdwCleaner v4.204 - Log vytvořen 18/05/2015 v 12:27:39
# Aktualizováno 12/05/2015 by Xplode
# Databáze : 2015-05-12.2 [Server]
# Operační system : Windows 7 Home Premium Service Pack 1 (x86)
# Uživatelské jméno : Petr - PETR-PC
# Spuštěno z : C:\Users\Petr\Desktop\adwcleaner_4.204.exe
# Nastavení : Čištění

***** [ Služby ] *****

Služba Smazáno : APNMCP

***** [ Soubory / Složky ] *****

Složka Smazáno : C:\ProgramData\apn
Složka Smazáno : C:\ProgramData\Ask
Složka Smazáno : C:\ProgramData\AskPartnerNetwork
Složka Smazáno : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\24x7 help
Složka Smazáno : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AppGraffiti
Složka Smazáno : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SiteRanker
Složka Smazáno : C:\Program Files\24x7Help
Složka Smazáno : C:\Program Files\AppGraffiti
Složka Smazáno : C:\Program Files\AskPartnerNetwork
Složka Smazáno : C:\Program Files\SiteRanker
Složka Smazáno : C:\Users\Petr\AppData\Local\Temp\apn
Složka Smazáno : C:\Users\Petr\AppData\Local\AskPartnerNetwork
Složka Smazáno : C:\Users\Petr\AppData\LocalLow\AppGraffiti
Složka Smazáno : C:\Users\Petr\AppData\LocalLow\SiteRanker
Složka Smazáno : C:\Users\Petr\AppData\Roaming\24x7 help
Složka Smazáno : C:\Users\Petr\AppData\Roaming\Mozilla\Firefox\Profiles\nFdrS0vp.default\Extensions\{ea614400-e918-4741-9a97-7a972ff7c30b}
Soubor Smazáno : C:\Users\Public\Desktop\24x7 help.lnk

***** [ Naplánované úlohy ] *****


***** [ Zástupci ] *****


***** [ Registry ] *****

Hodnota Smazáno : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [siteranker@siteranker.com]
Klíč Smazáno : HKLM\SOFTWARE\Classes\AppGraffiti.AppGraffitiJS
Hodnota Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [ApnTbMon]
Klíč Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\Search\ask.com
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{11BF46C6-B3DE-48BD-BF70-3AD85CAB80B5}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{44CBC005-6243-4502-8A02-3A096A282664}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{4F524A2D-5637-4300-76A7-7A786E7484D7}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{6F6A5334-78E9-4D9B-8182-8B41EA8C39EF}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{80703783-E415-4EE3-AB60-D36981C5A6F1}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{CC99A798-FD3D-4AB4-969E-6071612524F9}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{D8278076-BC68-4484-9233-6E7F1628B56C}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{F297534D-7B06-459D-BC19-2DD8EF69297B}
Klíč Smazáno : HKLM\SOFTWARE\Classes\Interface\{022C9F90-2E96-47D6-A971-107650154563}
Klíč Smazáno : HKLM\SOFTWARE\Classes\Interface\{80703783-E415-4EE3-AB60-D36981C5A6F1}
Klíč Smazáno : HKLM\SOFTWARE\Classes\TypeLib\{9945959C-AAD8-4312-8B57-2DE11927E770}
Klíč Smazáno : HKLM\SOFTWARE\Classes\TypeLib\{DB02BC6B-B0F0-4074-99E6-884B70FCB6AE}
Klíč Smazáno : HKLM\SOFTWARE\Classes\TypeLib\{EEA63863-87BC-4DCA-A5B5-EB97E3B04806}
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11BF46C6-B3DE-48BD-BF70-3AD85CAB80B5}
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4F524A2D-5637-4300-76A7-7A786E7484D7}
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6F6A5334-78E9-4D9B-8182-8B41EA8C39EF}
Klíč Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11BF46C6-B3DE-48BD-BF70-3AD85CAB80B5}
Klíč Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4F524A2D-5637-4300-76A7-7A786E7484D7}
Klíč Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{6F6A5334-78E9-4D9B-8182-8B41EA8C39EF}
Klíč Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8736C681-37A0-40C6-A0F0-4C083409151C}
Klíč Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{CC99A798-FD3D-4AB4-969E-6071612524F9}
Klíč Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{11BF46C6-B3DE-48BD-BF70-3AD85CAB80B5}
Klíč Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{4F524A2D-5637-4300-76A7-7A786E7484D7}
Klíč Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{6F6A5334-78E9-4D9B-8182-8B41EA8C39EF}
Klíč Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{6F6A5334-78E9-4D9B-8182-8B41EA8C39EF}
Klíč Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{CCB69577-088B-4004-9ED8-FF5BCC83A039}
Klíč Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D3D233D5-9F6D-436C-B6C7-E63F77503B30}
Klíč Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D7E97865-918F-41E4-9CD0-25AB1C574CE8}
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{6F6A5334-78E9-4D9B-8182-8B41EA8C39EF}
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{CCB69577-088B-4004-9ED8-FF5BCC83A039}
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D3D233D5-9F6D-436C-B6C7-E63F77503B30}
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D7E97865-918F-41E4-9CD0-25AB1C574CE8}
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{11BF46C6-B3DE-48BD-BF70-3AD85CAB80B6}
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6978F29A-3493-40B2-8CDC-9C13A02F85A4}
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D7949A66-D936-4028-9552-14F7DC50F38D}
Hodnota Smazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{4F524A2D-5637-4300-76A7-7A786E7484D7}]
Hodnota Smazáno : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{4F524A2D-5637-4300-76A7-7A786E7484D7}]
Hodnota Smazáno : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Hodnota Smazáno : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D7E97865-918F-41E4-9CD0-25AB1C574CE8}]
Hodnota Smazáno : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{D3D233D5-9F6D-436C-B6C7-E63F77503B30}]
Klíč Smazáno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{046D45C2-8061-4519-A56A-1D61B1AA5EF2}
Klíč Smazáno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{C04B7D22-5AEC-4561-8F49-27F6269208F6}
Klíč Smazáno : HKCU\Software\24x7help
Klíč Smazáno : HKCU\Software\AppGraffiti
Klíč Smazáno : HKCU\Software\AskPartnerNetwork
Klíč Smazáno : HKCU\Software\SiteRanker
Klíč Smazáno : HKLM\SOFTWARE\24x7help
Klíč Smazáno : HKLM\SOFTWARE\AppGraffiti
Klíč Smazáno : HKLM\SOFTWARE\AskPartnerNetwork
Klíč Smazáno : HKU\.DEFAULT\Software\AskPartnerNetwork
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{11BF46C6-B3DE-48BD-BF70-3AD85CAB80B5}_is1
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{6F6A5334-78E9-4D9B-8182-8B41EA8C39EF}_is1
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A957F04C-49F4-4375-8C8A-D04B769EFE47}_is1
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0E12F736682067FDE4D1158D5940A82E
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1A24B5BB8521B03E0C8D908F5ABC0AE6
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2B0D56C4F4C46D844A57FFED6F0D2852
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\49D4375FE41653242AEA4C969E4E65E0
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6AA0923513360135B272E8289C5F13FA
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6F7467AF8F29C134CBBAB394ECCFDE96
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\922525DCC5199162F8935747CA3D8E59
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BCDA179D619B91648538E3394CAC94CC
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D677B1A9671D4D4004F6F2A4469E86EA
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DD1402A9DD4215A43ABDE169A41AFA0E
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E36E114A0EAD2AD46B381D23AD69CDDF
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EF8E618DB3AEDFBB384561B5C548F65E
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\7AB5857A57A0687786597A857BFFFFFF

***** [ Prohlížeče ] *****

-\\ Internet Explorer v11.0.9600.17631

Nastavení Obnoveno : HKCU\Software\Microsoft\Internet Explorer\Main [Search Bar]
Nastavení Obnoveno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [SearchAssistant]
Nastavení Obnoveno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [CustomizeSearch]
Nastavení Obnoveno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Search [SearchAssistant]
Nastavení Obnoveno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Search [CustomizeSearch]

-\\ Mozilla Firefox v


-\\ Google Chrome v42.0.2311.152

[C:\Users\Petr\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Smazáno [Search Provider] : hxxp://websearch.ask.com/redirect?client=cr&src=kw&tb=ORJ&o=100000027&locale=en_EU&apn_uid=&apn_ptnrs=U3&apn_sauid=&apn_dtid=OSJ000YYCZ&psv=&q={searchTerms}

*************************

AdwCleaner[R0].txt - [10286 bytů] - [18/05/2015 12:14:51]
AdwCleaner[S0].txt - [9793 bytů] - [18/05/2015 12:27:39]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [9851 bytů] ##########

Márty84
VIP
VIP
Příspěvky: 21679
Registrován: 05 pro 2009 20:08
Bydliště: Ostrava

Re: Zpomalený počítač, prosím o kontrolu logu

#5 Příspěvek od Márty84 »

Disk hlasi spoustu chyb, i to muze byt pricina potizi. Uvidime, az pc docistime.


:arrow: Udelejte kontrolu s MBAM. Test nastavte podle tohoto navodu (cili Vlastni sken vsech disku) http://forum.viry.cz/viewtopic.php?f=29&t=137928 a dejte sem vysledky. Predem nic nemazte, miva obcas falesne detekce
Pokud máte dotaz, který není určen pro veřejnost, můžete mi napsat na mail marty84zavináčforum.viry.cz

Možnost podpořit naše fórum https://platba.viry.cz/payment/

Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).

draace
Návštěvník
Návštěvník
Příspěvky: 88
Registrován: 25 dub 2005 20:06

Re: Zpomalený počítač, prosím o kontrolu logu

#6 Příspěvek od draace »

Přeji krásný den,

snad jsem to udělala dobře - vylezlo tohle:

Malwarebytes Anti-Malware
www.malwarebytes.org

Datum skenování: 19.5.2015
Čas skenování: 2:47:52
Protokol: log2.txt
Správce: Ano

Verze: 2.01.6.1022
Databáze malwaru: v2015.05.18.06
Databáze rootkitů: v2015.05.16.01
Licence: Zkušební verze
Ochrana proti malwaru: Zapnuto
Ochrana proti škodlivým webovým stránkám: Zapnuto
Ochrana programu: Vypnuto

OS: Windows 7 Service Pack 1
CPU: x86
Souborový systém: NTFS
Uživatel: Petr

Typ skenu: Sken hrozeb
Výsledek: Dokončeno
Prohledaných objektů: 311226
Uplynulý čas: 21 min, 25 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Vypnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto

Procesy: 0
(Nenalezeny žádné škodlivé položky)

Moduly: 0
(Nenalezeny žádné škodlivé položky)

Klíče registru: 0
(Nenalezeny žádné škodlivé položky)

Hodnoty registru: 0
(Nenalezeny žádné škodlivé položky)

Data registru: 0
(Nenalezeny žádné škodlivé položky)

Složky: 0
(Nenalezeny žádné škodlivé položky)

Soubory: 0
(Nenalezeny žádné škodlivé položky)

Fyzické sektory: 0
(Nenalezeny žádné škodlivé položky)


(end)

Márty84
VIP
VIP
Příspěvky: 21679
Registrován: 05 pro 2009 20:08
Bydliště: Ostrava

Re: Zpomalený počítač, prosím o kontrolu logu

#7 Příspěvek od Márty84 »

Tohle byl jen Sken hrozeb. Ten nekontroluje cely pocitac. Musite dat Vlastni sken vsech disku. Zkuste to tedy jeste jednou :-)
Pokud máte dotaz, který není určen pro veřejnost, můžete mi napsat na mail marty84zavináčforum.viry.cz

Možnost podpořit naše fórum https://platba.viry.cz/payment/

Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).

draace
Návštěvník
Návštěvník
Příspěvky: 88
Registrován: 25 dub 2005 20:06

Re: Zpomalený počítač, prosím o kontrolu logu

#8 Příspěvek od draace »

Zdravím, pokus dvě (níže).

Zjistila jsem, že antivirák Nod byl bez licence už od loňska, tak jsem ho odinstalovala a místo něho je tam teď Avast.

Malwarebytes Anti-Malware
www.malwarebytes.org

Datum skenování: 20.5.2015
Čas skenování: 12:36:48
Protokol: log3.txt
Správce: Ano

Verze: 2.01.6.1022
Databáze malwaru: v2015.05.20.02
Databáze rootkitů: v2015.05.16.01
Licence: Zkušební verze
Ochrana proti malwaru: Zapnuto
Ochrana proti škodlivým webovým stránkám: Zapnuto
Ochrana programu: Vypnuto

OS: Windows 7 Service Pack 1
CPU: x86
Souborový systém: NTFS
Uživatel: Petr

Typ skenu: Vlastní sken
Výsledek: Dokončeno
Prohledaných objektů: 465026
Uplynulý čas: 2 hod, 32 min, 17 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Vypnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto

Procesy: 0
(Nenalezeny žádné škodlivé položky)

Moduly: 0
(Nenalezeny žádné škodlivé položky)

Klíče registru: 0
(Nenalezeny žádné škodlivé položky)

Hodnoty registru: 0
(Nenalezeny žádné škodlivé položky)

Data registru: 0
(Nenalezeny žádné škodlivé položky)

Složky: 0
(Nenalezeny žádné škodlivé položky)

Soubory: 0
(Nenalezeny žádné škodlivé položky)

Fyzické sektory: 0
(Nenalezeny žádné škodlivé položky)


(end)

Márty84
VIP
VIP
Příspěvky: 21679
Registrován: 05 pro 2009 20:08
Bydliště: Ostrava

Re: Zpomalený počítač, prosím o kontrolu logu

#9 Příspěvek od Márty84 »

:arrow: Vyborne, MBAM odinstalujte :)

:arrow: Dejte logy podle tohoto navodu http://forum.viry.cz/viewtopic.php?f=13&t=133100 - vypnete na chvili antivir, je mozne, ze to bude blokovat jako skodnou, ale pouzivame to porad, jedna se o falesny poplach :)
Pokud máte dotaz, který není určen pro veřejnost, můžete mi napsat na mail marty84zavináčforum.viry.cz

Možnost podpořit naše fórum https://platba.viry.cz/payment/

Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).

draace
Návštěvník
Návštěvník
Příspěvky: 88
Registrován: 25 dub 2005 20:06

Re: Zpomalený počítač, prosím o kontrolu logu

#10 Příspěvek od draace »

Zdravím,

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 19-05-2015
Ran by Petr (administrator) on PETR-PC on 20-05-2015 20:29:42
Running from C:\Users\Petr\Desktop
Loaded Profiles: Petr (Available profiles: Petr)
Platform: Microsoft Windows 7 Home Premium Service Pack 1 (X86) OS Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Microsoft Corporation) C:\Program Files\Microsoft\BingBar\SeaPort.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe
(Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe
(Microsoft Corporation) C:\Windows\System32\IgrsSvcs.exe
(Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\cAudioFilterAgent.exe
(Lenovo) C:\Program Files\Lenovo\VeriFace\PManage.exe
(CyberLink Corp.) C:\Program Files\Lenovo\YouCam\YouCamTray.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(WDC) C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe
() C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDFME\WDFME.exe
(Lenovo(beijing) Limited) C:\Program Files\Lenovo\Energy Management\utility.exe
(Lenovo (Beijing) Limited) C:\Program Files\Lenovo\Energy Management\Energy Management.exe
(Hewlett-Packard) C:\Program Files\HP\HP Software Update\hpwuschd2.exe
(Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
() C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDSC.exe
(Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe
(Western Digital Technologies, Inc.) C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMStatus.exe
() C:\Users\Petr\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\BTStackServer.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Windows\System32\wuauclt.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jucheck.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [cAudioFilterAgent] => C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent.exe [496184 2010-03-10] (Conexant Systems, Inc.)
HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SAIICpl.exe [307768 2009-11-19] ()
HKLM\...\Run: [VeriFaceManager] => C:\Program Files\Lenovo\VeriFace\PManage.exe [3122528 2010-06-01] (Lenovo)
HKLM\...\Run: [UCam_Menu] => C:\Program Files\Lenovo\YouCam\MUITransfer\MUIStartMenu.exe [222504 2009-05-20] (CyberLink Corp.)
HKLM\...\Run: [YouCam Mirror Tray icon] => C:\Program Files\Lenovo\YouCam\YouCamTray.exe [167008 2009-12-22] (CyberLink Corp.)
HKLM\...\Run: [UpdateP2GShortCut] => C:\Program Files\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [218408 2008-12-04] (CyberLink Corp.)
HKLM\...\Run: [EnergyUtility] => C:\Program Files\Lenovo\Energy Management\utility.exe [4114368 2009-12-17] (Lenovo(beijing) Limited)
HKLM\...\Run: [Energy Management] => C:\Program Files\Lenovo\Energy Management\Energy Management.exe [6223808 2009-12-17] (Lenovo (Beijing) Limited)
HKLM\...\Run: [HP Software Update] => C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [49208 2010-06-09] (Hewlett-Packard)
HKLM\...\Run: [StartCCC] => C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [343168 2011-11-09] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [256896 2014-05-07] (Oracle Corporation)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5515496 2015-05-20] (Avast Software s.r.o.)
HKU\S-1-5-21-38716868-1533474370-1911670390-1003\...\Run: [cz.seznam.software.autoupdate] => C:\Users\Petr\AppData\Roaming\Seznam.cz\szninstall.exe [1062472 2013-05-16] ()
HKU\S-1-5-21-38716868-1533474370-1911670390-1003\...\Run: [cz.seznam.software.szndesktop] => C:\Users\Petr\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [92664 2013-04-12] ()
HKU\S-1-5-21-38716868-1533474370-1911670390-1003\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [6278424 2015-04-23] (Piriform Ltd)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk [2010-06-01]
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WDDMStatus.lnk [2011-05-29]
ShortcutTarget: WDDMStatus.lnk -> C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMStatus.exe (Western Digital Technologies, Inc.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2015-05-20] (Avast Software s.r.o.)
ShellIconOverlayIdentifiers: [VeriFace Enc] -> {771C7324-DA80-49D3-8017-753B0AF60951} => C:\windows\system32\IcnOvrly.dll [2010-06-01] ()

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-38716868-1533474370-1911670390-1003\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.seznam.cz/domovska-stranka
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-38716868-1533474370-1911670390-1003 -> {06C7B4CE-58F9-46B3-B21F-945696D91AC2} URL = http://encyklopedie.seznam.cz/search?q= ... arch_13014
SearchScopes: HKU\S-1-5-21-38716868-1533474370-1911670390-1003 -> {1FAC42DE-2CED-4E5F-96C9-3ADD00BABE85} URL = http://tv.seznam.cz/hledej?w={searchTer ... arch_13014
SearchScopes: HKU\S-1-5-21-38716868-1533474370-1911670390-1003 -> {49023017-C2CC-47BD-90B4-4360A0C5BD13} URL = http://www.firmy.cz/?q={searchTerms}&so ... arch_13014
SearchScopes: HKU\S-1-5-21-38716868-1533474370-1911670390-1003 -> {4A9E22D7-E4CB-4ECB-9164-975296CE1EBA} URL = http://www.novinky.cz/hledej?w={searchT ... arch_13014
SearchScopes: HKU\S-1-5-21-38716868-1533474370-1911670390-1003 -> {5A296D88-08A8-43E2-B954-BA5CA4EAAE1C} URL = http://www.zbozi.cz/?q={searchTerms}&r= ... arch_13014
SearchScopes: HKU\S-1-5-21-38716868-1533474370-1911670390-1003 -> {61BD519E-C857-4609-B41F-2F8491EDF945} URL = http://www.google.cz/search?q={searchTe ... {startPage}
SearchScopes: HKU\S-1-5-21-38716868-1533474370-1911670390-1003 -> {70F0AB3B-56F7-4394-8EB7-FD8BAA16D2F8} URL = http://slovnik.seznam.cz/?q={searchTerm ... arch_13014
SearchScopes: HKU\S-1-5-21-38716868-1533474370-1911670390-1003 -> {98445987-CD0B-4486-A813-D453EA0B57EF} URL = http://www.bing.com/search?FORM=LENBDF& ... -SearchBox
SearchScopes: HKU\S-1-5-21-38716868-1533474370-1911670390-1003 -> {D6059541-D568-45D2-BF44-6AC2FD990827} URL = http://search.seznam.cz/?q={searchTerms ... arch_13014
SearchScopes: HKU\S-1-5-21-38716868-1533474370-1911670390-1003 -> {E59A2F18-0906-4734-8664-C3B38CB54451} URL = http://slovnik.seznam.cz/?q={searchTerm ... arch_13014
SearchScopes: HKU\S-1-5-21-38716868-1533474370-1911670390-1003 -> {FB00AE21-749F-4EEB-8F65-BA2744E748D3} URL = http://www.mapy.cz/?query={searchTerms} ... arch_13014
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll [2014-05-07] (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-05-20] (Avast Software s.r.o.)
BHO: Pomocník pro přihlášení ke službě Windows Live -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22] (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files\Microsoft\BingBar\BingExt.dll [2011-07-07] (Microsoft Corporation.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2014-05-07] (Oracle Corporation)
Toolbar: HKLM - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files\Microsoft\BingBar\BingExt.dll [2011-07-07] (Microsoft Corporation.)
Toolbar: HKU\S-1-5-21-38716868-1533474370-1911670390-1003 -> No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File
DPF: {1ABA5FAC-1417-422B-BA82-45C35E2C908B} http://kitchenplanner.ikea.com/CZ/Core/ ... _Win32.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/s ... wflash.cab
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138

FireFox:
========
FF ProfilePath: C:\Users\Petr\AppData\Roaming\Mozilla\Firefox\Profiles\nFdrS0vp.default
FF Plugin: @java.com/DTPlugin,version=10.60.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll [2014-05-07] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.60.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2014-05-07] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=14.0.8081.0709 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2009-07-10] (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-18] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-18] (Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-09-12] (Adobe Systems Inc.)
FF Extension: Avira Browser Safety - C:\Users\Petr\AppData\Roaming\Mozilla\Firefox\Profiles\nFdrS0vp.default\Extensions\abs@avira.com [2014-11-28]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-05-20]

Chrome:
=======
CHR StartupUrls: Default -> "hxxp://www.google.com/"
CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\42.0.2311.152\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\42.0.2311.152\ppGoogleNaClPluginChrome.dll No File
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\42.0.2311.152\pdf.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll No File
CHR Plugin: (Java(TM) Platform SE 7 U25) - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (Windows Live® Photo Gallery) - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Java Deployment Toolkit 7.0.250.17) - C:\windows\system32\npDeployJava1.dll No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll No File
CHR Profile: C:\Users\Petr\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Seznam Lištička - Email) - C:\Users\Petr\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgjpfhpjcgdppjbgnpnjllokbmcdllig [2014-09-24]
CHR Extension: (Seznam Lištička - Slovník) - C:\Users\Petr\AppData\Local\Google\Chrome\User Data\Default\Extensions\blmojkbhnkkphngknkmgccmlenfaelkd [2014-09-24]
CHR Extension: (Bookmark Manager) - C:\Users\Petr\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-05-18]
CHR Extension: (Avast Online Security) - C:\Users\Petr\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-05-20]
CHR Extension: (Google Wallet) - C:\Users\Petr\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-09-24]
CHR Extension: (Seznam Lištička - Rychlá volba) - C:\Users\Petr\AppData\Local\Google\Chrome\User Data\Default\Extensions\olfeabkoenfaoljndfecamgilllcpiak [2014-09-24]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-05-20]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [291840 2011-11-09] (Advanced Micro Devices, Inc.) [File not signed]
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-05-20] (Avast Software s.r.o.)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [3207800 2015-05-20] (Avast Software)
R2 btwdins; C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe [595232 2009-09-04] (Broadcom Corporation.)
S3 IGRS; C:\Program Files\Lenovo\ReadyComm\common\IGRS.exe [38152 2009-07-15] (Lenovo Group Limited)
S3 Lenovo ReadyComm AppSvc; C:\Program Files\Lenovo\ReadyComm\AppSvc.exe [509192 2009-08-14] (Lenovo Group Limited)
S3 Lenovo ReadyComm ConnSvc; C:\Program Files\Lenovo\ReadyComm\ConnSvc.exe [575304 2009-11-17] (Lenovo Group Limited)
S4 MSSQLServerADHelper; c:\Program Files\Microsoft SQL Server\90\Shared\sqladhlp90.exe [44384 2010-12-10] (Microsoft Corporation)
S3 PS_MDP; C:\Program Files\Lenovo\ReadyComm\PS_MDP.dll [276296 2009-07-16] (Lenovo Group Limited)
R2 ReadyComm.DirectRouter; C:\Program Files\Lenovo\ReadyComm\common\router.dll [103688 2009-07-15] (Lenovo Group Limited)
R2 WDDMService; C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe [237056 2010-09-08] (WDC) [File not signed]
R2 WDFME; C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDFME\WDFME.exe [1034752 2010-09-08] () [File not signed]
R2 WDSC; C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDSC.exe [484352 2010-09-08] () [File not signed]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R3 ACPIVPC; C:\windows\System32\DRIVERS\AcpiVpc.sys [21256 2009-09-03] (Lenovo Corporation)
R2 AODDriver4.01; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\i386\AODDriver2.sys [39424 2011-06-24] (Advanced Micro Devices) [File not signed]
R2 aswHwid; C:\windows\system32\drivers\aswHwid.sys [24144 2015-05-20] ()
R2 aswMonFlt; C:\windows\system32\drivers\aswMonFlt.sys [74976 2015-05-20] (Avast Software s.r.o.)
R1 aswRdr; C:\windows\system32\drivers\aswRdr2.sys [81728 2015-05-20] (Avast Software s.r.o.)
S0 aswRvrt; C:\windows\system32\Drivers\aswRvrt.sys [49904 2015-05-20] ()
R1 aswSnx; C:\windows\system32\drivers\aswSnx.sys [787760 2015-05-20] (Avast Software s.r.o.)
R1 aswSP; C:\windows\system32\drivers\aswSP.sys [427992 2015-05-20] (Avast Software s.r.o.)
S2 aswStm; C:\windows\system32\drivers\aswStm.sys [106912 2015-05-20] (Avast Software s.r.o.)
R0 aswVmm; C:\windows\system32\Drivers\aswVmm.sys [209048 2015-05-20] ()
S3 Bridge0; C:\windows\System32\drivers\WDBridge.sys [63240 2009-07-28] (Lenovo)
R3 JmUsbCcgp; C:\windows\System32\DRIVERS\jmccgp.sys [15216 2009-12-03] (JMicron Technology Corp.)
R3 JmUsbVideo; C:\windows\System32\Drivers\jmcam.sys [46320 2009-12-03] (JMicron Technology Corp.)
R3 JmUsbVideo2; C:\windows\System32\Drivers\jmcam_lo.sys [24048 2009-12-03] (JMicron Technology Corp.)
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [220752 2015-05-20] (Avast Software)
R3 wdmirror; C:\windows\System32\DRIVERS\WDMirror.sys [11792 2009-07-16] (Windows (R) Codename Longhorn DDK provider)
S3 wsvd; C:\windows\System32\DRIVERS\wsvd.sys [81704 2009-07-21] (CyberLink)
R3 MBAMSwissArmy; \??\C:\windows\system32\drivers\MBAMSwissArmy.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-05-20 20:29 - 2015-05-20 20:30 - 00019896 _____ () C:\Users\Petr\Desktop\FRST.txt
2015-05-20 20:27 - 2015-05-20 20:28 - 00033607 _____ () C:\Users\Petr\Downloads\Addition.txt
2015-05-20 20:27 - 2015-05-20 20:24 - 01146880 _____ (Farbar) C:\Users\Petr\Desktop\FRST.exe
2015-05-20 20:26 - 2015-05-20 20:29 - 00000000 ____D () C:\FRST
2015-05-20 20:26 - 2015-05-20 20:28 - 00042276 _____ () C:\Users\Petr\Downloads\FRST.txt
2015-05-20 20:24 - 2015-05-20 20:24 - 01146880 _____ (Farbar) C:\Users\Petr\Downloads\FRST.exe
2015-05-20 07:47 - 2015-05-20 07:47 - 00000000 ____D () C:\Users\Petr\AppData\Roaming\AVAST Software
2015-05-20 07:46 - 2015-05-20 07:48 - 00000000 ____D () C:\windows\system32\vbox
2015-05-20 07:45 - 2015-05-20 07:45 - 00002075 _____ () C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2015-05-20 07:45 - 2015-05-20 07:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2015-05-20 07:44 - 2015-05-20 07:44 - 00787760 _____ (Avast Software s.r.o.) C:\windows\system32\Drivers\aswSnx.sys
2015-05-20 07:44 - 2015-05-20 07:44 - 00427992 _____ (Avast Software s.r.o.) C:\windows\system32\Drivers\aswSP.sys
2015-05-20 07:44 - 2015-05-20 07:44 - 00291312 _____ (Avast Software s.r.o.) C:\windows\system32\aswBoot.exe
2015-05-20 07:44 - 2015-05-20 07:44 - 00209048 _____ () C:\windows\system32\Drivers\aswVmm.sys
2015-05-20 07:44 - 2015-05-20 07:44 - 00106912 _____ (Avast Software s.r.o.) C:\windows\system32\Drivers\aswStm.sys
2015-05-20 07:44 - 2015-05-20 07:44 - 00081728 _____ (Avast Software s.r.o.) C:\windows\system32\Drivers\aswRdr2.sys
2015-05-20 07:44 - 2015-05-20 07:44 - 00074976 _____ (Avast Software s.r.o.) C:\windows\system32\Drivers\aswMonFlt.sys
2015-05-20 07:44 - 2015-05-20 07:44 - 00049904 _____ () C:\windows\system32\Drivers\aswRvrt.sys
2015-05-20 07:44 - 2015-05-20 07:44 - 00043112 _____ (Avast Software s.r.o.) C:\windows\avastSS.scr
2015-05-20 07:44 - 2015-05-20 07:44 - 00024144 _____ () C:\windows\system32\Drivers\aswHwid.sys
2015-05-20 07:42 - 2015-05-20 07:42 - 00000000 ____D () C:\Program Files\AVAST Software
2015-05-20 07:40 - 2015-05-20 07:40 - 05499960 _____ (Avast Software s.r.o.) C:\Users\Petr\Downloads\avast_free_antivirus_setup_online.exe
2015-05-20 07:40 - 2015-05-20 07:40 - 00000000 ____D () C:\ProgramData\AVAST Software
2015-05-18 18:21 - 2015-05-18 18:21 - 00000000 ____D () C:\ProgramData\Malwarebytes
2015-05-18 18:19 - 2015-05-18 18:19 - 21547816 _____ (Malwarebytes Corporation ) C:\Users\Petr\Downloads\mbam-setup.exe
2015-05-18 12:14 - 2015-05-18 12:29 - 00000000 ____D () C:\AdwCleaner
2015-05-18 12:10 - 2015-05-18 12:10 - 02209792 _____ () C:\Users\Petr\Desktop\adwcleaner_4.204.exe
2015-05-18 12:08 - 2015-05-18 12:09 - 00000000 ____D () C:\Users\Petr\Downloads\CrystalDiskInfo5_0_0
2015-05-18 12:07 - 2015-05-18 12:08 - 01496172 _____ () C:\Users\Petr\Downloads\CrystalDiskInfo5_0_0 (1).zip
2015-05-18 12:05 - 2015-05-18 12:05 - 01496172 _____ () C:\Users\Petr\Downloads\CrystalDiskInfo5_0_0.zip
2015-05-18 11:33 - 2015-05-20 07:35 - 00000486 _____ () C:\windows\setupact.log
2015-05-18 11:33 - 2015-05-18 11:33 - 00000000 _____ () C:\windows\setuperr.log
2015-05-18 11:32 - 2015-05-20 07:11 - 00002684 _____ () C:\windows\PFRO.log
2015-05-18 11:31 - 2015-05-18 11:34 - 00000000 ____D () C:\OETemp
2015-05-18 10:54 - 2015-05-18 10:54 - 00000965 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2015-05-18 10:54 - 2015-05-18 10:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2015-05-18 10:54 - 2015-05-18 10:54 - 00000000 ____D () C:\Program Files\CCleaner
2015-05-18 10:53 - 2015-05-18 10:49 - 06484352 _____ (Piriform Ltd) C:\Users\Petr\Desktop\ccsetup505.exe
2015-05-18 08:35 - 2015-05-18 08:36 - 00000000 ____D () C:\rsit
2015-05-18 08:35 - 2015-05-18 08:35 - 00000000 ____D () C:\Program Files\trend micro
2015-05-18 08:34 - 2015-05-18 08:31 - 01107968 _____ () C:\Users\Petr\Desktop\RSIT.exe
2015-05-10 19:11 - 2015-05-14 19:38 - 00000000 ___SD () C:\windows\system32\GWX
2015-04-21 21:00 - 2015-01-09 01:44 - 00419936 _____ () C:\windows\system32\locale.nls
2015-04-21 20:42 - 2015-02-03 05:16 - 03973048 _____ (Microsoft Corporation) C:\windows\system32\ntkrnlpa.exe
2015-04-21 20:42 - 2015-02-03 05:16 - 03917760 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe
2015-04-21 20:42 - 2015-02-03 05:16 - 00136640 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecpkg.sys
2015-04-21 20:42 - 2015-02-03 05:16 - 00078784 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mountmgr.sys
2015-04-21 20:42 - 2015-02-03 05:16 - 00067512 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecdd.sys
2015-04-21 20:42 - 2015-02-03 05:12 - 11411968 _____ (Microsoft Corporation) C:\windows\system32\wmp.dll
2015-04-21 20:42 - 2015-02-03 05:12 - 03209728 _____ (Microsoft Corporation) C:\windows\system32\mf.dll
2015-04-21 20:42 - 2015-02-03 05:12 - 01329664 _____ (Microsoft Corporation) C:\windows\system32\quartz.dll
2015-04-21 20:42 - 2015-02-03 05:12 - 01174528 _____ (Microsoft Corporation) C:\windows\system32\crypt32.dll
2015-04-21 20:42 - 2015-02-03 05:12 - 01061376 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll
2015-04-21 20:42 - 2015-02-03 05:12 - 01005056 _____ (Microsoft Corporation) C:\windows\system32\cryptui.dll
2015-04-21 20:42 - 2015-02-03 05:12 - 00988160 _____ (Microsoft Corporation) C:\windows\system32\drmv2clt.dll
2015-04-21 20:42 - 2015-02-03 05:12 - 00744960 _____ (Microsoft Corporation) C:\windows\system32\blackbox.dll
2015-04-21 20:42 - 2015-02-03 05:12 - 00617984 _____ (Microsoft Corporation) C:\windows\system32\wmdrmsdk.dll
2015-04-21 20:42 - 2015-02-03 05:12 - 00550912 _____ (Microsoft Corporation) C:\windows\system32\kerberos.dll
2015-04-21 20:42 - 2015-02-03 05:12 - 00519680 _____ (Microsoft Corporation) C:\windows\system32\qdvd.dll
2015-04-21 20:42 - 2015-02-03 05:12 - 00504320 _____ (Microsoft Corporation) C:\windows\system32\msscp.dll
2015-04-21 20:42 - 2015-02-03 05:12 - 00489984 _____ (Microsoft Corporation) C:\windows\system32\evr.dll
2015-04-21 20:42 - 2015-02-03 05:12 - 00475136 _____ (Microsoft Corporation) C:\windows\system32\audiosrv.dll
2015-04-21 20:42 - 2015-02-03 05:12 - 00442880 _____ (Microsoft Corporation) C:\windows\system32\AUDIOKSE.dll
2015-04-21 20:42 - 2015-02-03 05:12 - 00406016 _____ (Microsoft Corporation) C:\windows\system32\drmmgrtn.dll
2015-04-21 20:42 - 2015-02-03 05:12 - 00400896 _____ (Microsoft Corporation) C:\windows\system32\srcore.dll
2015-04-21 20:42 - 2015-02-03 05:12 - 00374784 _____ (Microsoft Corporation) C:\windows\system32\AudioEng.dll
2015-04-21 20:42 - 2015-02-03 05:12 - 00354816 _____ (Microsoft Corporation) C:\windows\system32\mfplat.dll
2015-04-21 20:42 - 2015-02-03 05:12 - 00275968 _____ (Microsoft Corporation) C:\windows\system32\EncDump.dll
2015-04-21 20:42 - 2015-02-03 05:12 - 00265216 _____ (Microsoft Corporation) C:\windows\system32\msnetobj.dll
2015-04-21 20:42 - 2015-02-03 05:12 - 00259584 _____ (Microsoft Corporation) C:\windows\system32\msv1_0.dll
2015-04-21 20:42 - 2015-02-03 05:12 - 00248832 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll
2015-04-21 20:42 - 2015-02-03 05:12 - 00221184 _____ (Microsoft Corporation) C:\windows\system32\ncrypt.dll
2015-04-21 20:42 - 2015-02-03 05:12 - 00195584 _____ (Microsoft Corporation) C:\windows\system32\AudioSes.dll
2015-04-21 20:42 - 2015-02-03 05:12 - 00179200 _____ (Microsoft Corporation) C:\windows\system32\wintrust.dll
2015-04-21 20:42 - 2015-02-03 05:12 - 00172032 _____ (Microsoft Corporation) C:\windows\system32\wdigest.dll
2015-04-21 20:42 - 2015-02-03 05:12 - 00157184 _____ (Microsoft Corporation) C:\windows\system32\pcasvc.dll
2015-04-21 20:42 - 2015-02-03 05:12 - 00143872 _____ (Microsoft Corporation) C:\windows\system32\cryptsvc.dll
2015-04-21 20:42 - 2015-02-03 05:12 - 00103936 _____ (Microsoft Corporation) C:\windows\system32\cryptnet.dll
2015-04-21 20:42 - 2015-02-03 05:12 - 00103424 _____ (Microsoft Corporation) C:\windows\system32\mfps.dll
2015-04-21 20:42 - 2015-02-03 05:12 - 00100352 _____ (Microsoft Corporation) C:\windows\system32\sspicli.dll
2015-04-21 20:42 - 2015-02-03 05:12 - 00081408 _____ (Microsoft Corporation) C:\windows\system32\cryptsp.dll
2015-04-21 20:42 - 2015-02-03 05:12 - 00069632 _____ (Microsoft Corporation) C:\windows\system32\smss.exe
2015-04-21 20:42 - 2015-02-03 05:12 - 00065536 _____ (Microsoft Corporation) C:\windows\system32\TSpkg.dll
2015-04-21 20:42 - 2015-02-03 05:12 - 00050688 _____ (Microsoft Corporation) C:\windows\system32\appidapi.dll
2015-04-21 20:42 - 2015-02-03 05:12 - 00050176 _____ (Microsoft Corporation) C:\windows\system32\setbcdlocale.dll
2015-04-21 20:42 - 2015-02-03 05:12 - 00043008 _____ (Microsoft Corporation) C:\windows\system32\srclient.dll
2015-04-21 20:42 - 2015-02-03 05:12 - 00038912 _____ (Microsoft Corporation) C:\windows\system32\csrsrv.dll
2015-04-21 20:42 - 2015-02-03 05:12 - 00028160 _____ (Microsoft Corporation) C:\windows\system32\pcadm.dll
2015-04-21 20:42 - 2015-02-03 05:12 - 00027648 _____ (Microsoft Corporation) C:\windows\system32\appidsvc.dll
2015-04-21 20:42 - 2015-02-03 05:12 - 00015872 _____ (Microsoft Corporation) C:\windows\system32\sspisrv.dll
2015-04-21 20:42 - 2015-02-03 05:12 - 00010752 _____ (Microsoft Corporation) C:\windows\system32\msmmsp.dll
2015-04-21 20:42 - 2015-02-03 05:11 - 00262656 _____ (Microsoft Corporation) C:\windows\system32\rstrui.exe
2015-04-21 20:42 - 2015-02-03 05:11 - 00100864 _____ (Microsoft Corporation) C:\windows\system32\audiodg.exe
2015-04-21 20:42 - 2015-02-03 05:11 - 00096768 _____ (Microsoft Corporation) C:\windows\system32\appidpolicyconverter.exe
2015-04-21 20:42 - 2015-02-03 05:11 - 00050176 _____ (Microsoft Corporation) C:\windows\system32\rrinstaller.exe
2015-04-21 20:42 - 2015-02-03 05:11 - 00050176 _____ (Microsoft Corporation) C:\windows\system32\auditpol.exe
2015-04-21 20:42 - 2015-02-03 05:11 - 00023040 _____ (Microsoft Corporation) C:\windows\system32\mfpmp.exe
2015-04-21 20:42 - 2015-02-03 05:11 - 00022528 _____ (Microsoft Corporation) C:\windows\system32\lsass.exe
2015-04-21 20:42 - 2015-02-03 05:11 - 00016896 _____ (Microsoft Corporation) C:\windows\system32\appidcertstorecheck.exe
2015-04-21 20:42 - 2015-02-03 05:11 - 00009728 _____ (Microsoft Corporation) C:\windows\system32\pcawrk.exe
2015-04-21 20:42 - 2015-02-03 05:11 - 00008192 _____ (Microsoft Corporation) C:\windows\system32\pcalua.exe
2015-04-21 20:42 - 2015-02-03 05:08 - 00686080 _____ (Microsoft Corporation) C:\windows\system32\adtschema.dll
2015-04-21 20:42 - 2015-02-03 05:00 - 00593920 _____ (Microsoft Corporation) C:\windows\system32\Drivers\PEAuth.sys
2015-04-21 20:42 - 2015-02-03 04:26 - 00050176 _____ (Microsoft Corporation) C:\windows\system32\Drivers\appid.sys
2015-04-21 20:42 - 2015-01-31 01:56 - 00370488 _____ (Microsoft Corporation) C:\windows\system32\Drivers\cng.sys
2015-04-21 20:42 - 2014-11-01 00:22 - 00521384 _____ (Microsoft Corporation) C:\windows\system32\winload.exe
2015-04-21 20:42 - 2014-06-28 02:21 - 00455752 _____ (Microsoft Corporation) C:\windows\system32\winresume.exe
2015-04-21 20:42 - 2014-06-28 02:21 - 00409272 _____ (Microsoft Corporation) C:\windows\system32\ci.dll
2015-04-21 20:41 - 2015-02-03 05:12 - 01230848 _____ (Microsoft Corporation) C:\windows\system32\WindowsCodecs.dll
2015-04-21 20:41 - 2015-02-03 05:12 - 00022016 _____ (Microsoft Corporation) C:\windows\system32\secur32.dll
2015-04-21 20:41 - 2015-02-03 05:12 - 00017408 _____ (Microsoft Corporation) C:\windows\system32\credssp.dll
2015-04-21 20:41 - 2015-02-03 05:12 - 00008192 _____ (Microsoft Corporation) C:\windows\system32\spwmp.dll
2015-04-21 20:41 - 2015-02-03 05:12 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\msdxm.ocx
2015-04-21 20:41 - 2015-02-03 05:12 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\dxmasf.dll
2015-04-21 20:41 - 2015-02-03 05:11 - 12625408 _____ (Microsoft Corporation) C:\windows\system32\wmploc.DLL
2015-04-21 20:41 - 2015-02-03 05:10 - 00008704 _____ (Microsoft Corporation) C:\windows\system32\pcaevts.dll
2015-04-21 20:41 - 2015-02-03 05:09 - 00146432 _____ (Microsoft Corporation) C:\windows\system32\msaudite.dll
2015-04-21 20:41 - 2015-02-03 05:09 - 00060416 _____ (Microsoft Corporation) C:\windows\system32\msobjs.dll
2015-04-21 20:41 - 2015-02-03 05:09 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\mferror.dll
2015-04-21 20:41 - 2015-02-03 05:08 - 00006656 _____ (Microsoft Corporation) C:\windows\system32\apisetschema.dll
2015-04-21 20:21 - 2015-02-26 05:11 - 02381312 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2015-04-21 20:21 - 2015-02-13 07:26 - 12875264 _____ (Microsoft Corporation) C:\windows\system32\shell32.dll
2015-04-21 20:21 - 2015-01-17 04:30 - 00828928 _____ (Microsoft Corporation) C:\windows\system32\msctf.dll
2015-04-21 20:21 - 2014-12-19 04:43 - 00164864 _____ (Microsoft Corporation) C:\windows\system32\profsvc.dll
2015-04-21 20:21 - 2014-12-11 19:47 - 00046592 _____ (Microsoft Corporation) C:\windows\system32\TSWbPrxy.exe
2015-04-21 20:21 - 2014-10-04 03:42 - 03221504 _____ (Microsoft Corporation) C:\windows\system32\mstscax.dll
2015-04-21 20:21 - 2014-10-04 03:42 - 00131584 _____ (Microsoft Corporation) C:\windows\system32\aaclient.dll
2015-04-21 20:20 - 2015-02-20 06:13 - 00070656 _____ (Microsoft Corporation) C:\windows\system32\fontsub.dll
2015-04-21 20:20 - 2015-02-20 06:13 - 00034304 _____ (Adobe Systems) C:\windows\system32\atmlib.dll
2015-04-21 20:20 - 2015-02-20 06:13 - 00026624 _____ (Microsoft Corporation) C:\windows\system32\lpk.dll
2015-04-21 20:20 - 2015-02-20 06:13 - 00010240 _____ (Microsoft Corporation) C:\windows\system32\dciman32.dll
2015-04-21 20:20 - 2015-02-20 05:09 - 00299008 _____ (Adobe Systems Incorporated) C:\windows\system32\atmfd.dll
2015-04-21 20:20 - 2015-02-03 05:12 - 00171520 _____ (Microsoft Corporation) C:\windows\system32\ubpm.dll
2015-04-21 20:20 - 2015-01-14 07:09 - 00342712 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll
2015-04-21 20:20 - 2015-01-12 04:21 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2015-04-21 20:20 - 2015-01-12 04:21 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll
2015-04-21 20:20 - 2015-01-12 04:07 - 00062464 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2015-04-21 20:20 - 2015-01-12 04:07 - 00047616 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll
2015-04-21 20:20 - 2015-01-12 04:00 - 00047104 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2015-04-21 20:20 - 2015-01-12 03:59 - 00030720 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2015-04-21 20:20 - 2015-01-12 03:57 - 00478208 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2015-04-21 20:20 - 2015-01-12 03:55 - 00620032 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2015-04-21 20:20 - 2015-01-12 03:55 - 00115712 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2015-04-21 20:20 - 2015-01-12 03:55 - 00102912 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe
2015-04-21 20:20 - 2015-01-12 03:48 - 00667648 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe
2015-04-21 20:20 - 2015-01-12 03:45 - 00418304 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll
2015-04-21 20:20 - 2015-01-12 03:40 - 00060416 _____ (Microsoft Corporation) C:\windows\system32\JavaScriptCollectionAgent.dll
2015-04-21 20:20 - 2015-01-12 03:36 - 00168960 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2015-04-21 20:20 - 2015-01-12 03:35 - 00076288 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2015-04-21 20:20 - 2015-01-12 03:33 - 00285696 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll
2015-04-21 20:20 - 2015-01-12 03:23 - 02052608 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2015-04-21 20:20 - 2015-01-12 03:23 - 00688640 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2015-04-21 20:20 - 2015-01-12 03:23 - 00684544 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2015-04-21 20:20 - 2015-01-12 03:22 - 01155072 _____ (Microsoft Corporation) C:\windows\system32\mshtmlmedia.dll
2015-04-21 20:20 - 2015-01-12 03:14 - 12829184 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2015-04-21 20:20 - 2015-01-12 03:00 - 01888256 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2015-04-21 20:20 - 2015-01-12 02:56 - 01307136 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2015-04-21 20:20 - 2015-01-12 02:55 - 00710144 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2015-04-21 20:20 - 2014-12-08 04:46 - 00308224 _____ (Microsoft Corporation) C:\windows\system32\scesrv.dll
2015-04-21 20:20 - 2014-11-26 05:32 - 00571904 _____ (Microsoft Corporation) C:\windows\system32\oleaut32.dll
2015-04-21 20:19 - 2015-01-12 04:25 - 19740160 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2015-04-21 20:19 - 2015-01-12 04:08 - 00503296 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll
2015-04-21 20:19 - 2015-01-12 04:05 - 00064000 _____ (Microsoft Corporation) C:\windows\system32\MshtmlDac.dll
2015-04-21 20:19 - 2015-01-12 04:02 - 02277888 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2015-04-21 20:19 - 2015-01-12 03:29 - 04300800 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2015-04-21 20:18 - 2015-02-04 04:54 - 00417792 _____ (Microsoft Corporation) C:\windows\system32\WMPhoto.dll
2015-04-21 20:18 - 2014-12-06 05:50 - 00242688 _____ (Microsoft Corporation) C:\windows\system32\nlasvc.dll

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-05-20 20:10 - 2013-07-23 08:56 - 00000940 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-05-20 20:07 - 2012-04-05 14:49 - 00000914 _____ () C:\windows\Tasks\Adobe Flash Player Updater.job
2015-05-20 18:59 - 2012-01-24 20:37 - 00000622 _____ () C:\windows\Tasks\WebContent AutoUpdate 2011.job
2015-05-20 17:35 - 2010-06-01 20:29 - 01715800 _____ () C:\windows\system32\PerfStringBackup.INI
2015-05-20 12:32 - 2010-06-01 20:21 - 01077863 _____ () C:\windows\WindowsUpdate.log
2015-05-20 09:10 - 2013-07-23 08:56 - 00000936 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-05-20 08:00 - 2012-01-24 20:37 - 00000476 _____ () C:\windows\Tasks\AutoUpdate Allplan 2012.job
2015-05-20 07:43 - 2009-07-14 06:34 - 00018736 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-05-20 07:43 - 2009-07-14 06:34 - 00018736 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-05-20 07:40 - 2014-09-24 10:46 - 00000000 ____D () C:\Users\Petr\AppData\Roaming\Seznam.cz
2015-05-20 07:35 - 2010-06-01 21:02 - 11102416 _____ () C:\FaceProv.log
2015-05-20 07:35 - 2010-06-01 20:56 - 00000000 ____D () C:\ProgramData\VeriFace
2015-05-20 07:35 - 2009-07-14 06:53 - 00000006 ____H () C:\windows\Tasks\SA.DAT
2015-05-18 11:32 - 2014-11-28 21:07 - 00000000 ____D () C:\Program Files\Avira
2015-05-18 11:32 - 2014-11-28 21:06 - 00000000 ____D () C:\ProgramData\Avira
2015-05-18 10:57 - 2009-07-29 12:27 - 00000000 ____D () C:\windows\Panther
2015-05-18 10:24 - 2009-07-14 04:37 - 00000000 ____D () C:\windows\rescache
2015-05-18 09:11 - 2013-07-23 08:57 - 00002129 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2015-05-18 08:50 - 2009-07-14 04:37 - 00000000 ____D () C:\windows\Microsoft.NET
2015-05-14 19:22 - 2013-07-23 08:56 - 00000000 ____D () C:\Program Files\Google
2015-05-10 20:18 - 2013-05-15 09:13 - 00000000 ____D () C:\Firefox
2015-05-10 20:16 - 2014-05-31 15:41 - 00000000 ____D () C:\Program Files\McAfee Security Scan
2015-05-10 20:14 - 2013-07-23 08:56 - 00000000 ____D () C:\Users\Petr\AppData\Local\Google
2015-05-10 20:14 - 2011-12-06 18:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
2015-05-10 20:14 - 2011-12-06 18:23 - 00000000 ____D () C:\Program Files\HP
2015-05-10 20:13 - 2009-07-14 06:52 - 00000000 ____D () C:\windows\twain_32
2015-05-10 19:13 - 2009-07-14 06:33 - 00272856 _____ () C:\windows\system32\FNTCACHE.DAT
2015-04-21 21:14 - 2010-06-01 20:42 - 00000000 ____D () C:\ProgramData\Microsoft Help
2015-04-21 21:12 - 2013-08-14 06:48 - 00000000 ____D () C:\windows\system32\MRT
2015-04-21 20:56 - 2009-07-14 04:04 - 00000510 _____ () C:\windows\win.ini
2015-04-21 20:08 - 2012-04-05 14:49 - 00778416 _____ (Adobe Systems Incorporated) C:\windows\system32\FlashPlayerApp.exe
2015-04-21 20:08 - 2011-12-16 12:48 - 00142512 _____ (Adobe Systems Incorporated) C:\windows\system32\FlashPlayerCPLApp.cpl
2015-04-21 19:44 - 2009-07-14 04:37 - 00000000 ____D () C:\windows\system32\NDF

==================== Files in the root of some directories =======

2014-08-11 23:56 - 2014-08-11 23:56 - 0000000 _____ () C:\Users\Petr\AppData\Local\{0A68CD73-A672-4BE2-BD65-4DDE1E4190C0}

Files to move or delete:
====================
C:\Users\Petr\advpack.dll


Some content of TEMP:
====================
C:\Users\Petr\AppData\Local\Temp\avgnt.exe
C:\Users\Petr\AppData\Local\Temp\Quarantine.exe
C:\Users\Petr\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\windows\explorer.exe => File is digitally signed
C:\windows\system32\winlogon.exe => File is digitally signed
C:\windows\system32\wininit.exe => File is digitally signed
C:\windows\system32\svchost.exe => File is digitally signed
C:\windows\system32\services.exe => File is digitally signed
C:\windows\system32\User32.dll => File is digitally signed
C:\windows\system32\userinit.exe => File is digitally signed
C:\windows\system32\rpcss.dll => File is digitally signed
C:\windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-05-18 10:15

==================== End Of Log ============================

Márty84
VIP
VIP
Příspěvky: 21679
Registrován: 05 pro 2009 20:08
Bydliště: Ostrava

Re: Zpomalený počítač, prosím o kontrolu logu

#11 Příspěvek od Márty84 »

:arrow: Napiste mi velikost adresare plochy (C:\Users\Petr\Plocha)




:arrow: Otevrete si poznamkovy blok a zkopirujte do nej tento skript

Kód: Vybrat vše

Start
CloseProcesses:
CreateRestorePoint:

HKLM\...\Run: [HP Software Update] => C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [49208 2010-06-09] (Hewlett-Packard)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [256896 2014-05-07] (Oracle Corporation)
HKU\S-1-5-21-38716868-1533474370-1911670390-1003\...\Run: [cz.seznam.software.autoupdate] => C:\Users\Petr\AppData\Roaming\Seznam.cz\szninstall.exe [1062472 2013-05-16] ()
HKU\S-1-5-21-38716868-1533474370-1911670390-1003\...\Run: [cz.seznam.software.szndesktop] => C:\Users\Petr\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [92664 2013-04-12] ()
HKU\S-1-5-21-38716868-1533474370-1911670390-1003\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [6278424 2015-04-23] (Piriform Ltd)

SearchScopes: HKU\S-1-5-21-38716868-1533474370-1911670390-1003 -> {98445987-CD0B-4486-A813-D453EA0B57EF} URL = http://www.bing.com/search?FORM=LENBDF&PC=MALN&q={searchTerms}&src=IE-SearchBox
BHO: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files\Microsoft\BingBar\BingExt.dll [2011-07-07] (Microsoft Corporation.)
Toolbar: HKLM - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files\Microsoft\BingBar\BingExt.dll [2011-07-07] (Microsoft Corporation.)
Toolbar: HKU\S-1-5-21-38716868-1533474370-1911670390-1003 -> No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File

FF Extension: Avira Browser Safety - C:\Users\Petr\AppData\Roaming\Mozilla\Firefox\Profiles\nFdrS0vp.default\Extensions\abs@avira.com [2014-11-28]

R3 MBAMSwissArmy; \??\C:\windows\system32\drivers\MBAMSwissArmy.sys [X]
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-09-12 64704]
R2 AntiVirService;Avira Real-Time Protection; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2015-04-07 432888]
R2 AntiVirSchedulerService;Avira Scheduler; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2015-04-07 432888]
R2 APNMCP;Ask Update Service; C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe [2015-04-28 178568]
R2 BBUpdate;BBUpdate; C:\Program Files\Microsoft\BingBar\SeaPort.EXE [2011-06-15 249648]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2010-11-18 810144]
S2 24x7HelpSvc;24x7HelpService; C:\Program Files\24x7Help\App24x7Svc.exe []
S2 Avira.OE.ServiceHost;Avira Service Host; C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe [2014-12-31 178424]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2014-10-31 107912]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-04-21 268464]
S3 BBSvc;Bing Bar Update Service; C:\Program Files\Microsoft\BingBar\BBSvc.EXE [2011-07-07 195336]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [2010-11-18 33584]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2014-10-31 107912]

2015-05-18 18:21 - 2015-05-18 18:21 - 00000000 ____D () C:\ProgramData\Malwarebytes
2015-05-18 18:19 - 2015-05-18 18:19 - 21547816 _____ (Malwarebytes Corporation ) C:\Users\Petr\Downloads\mbam-setup.exe
2015-05-18 10:53 - 2015-05-18 10:49 - 06484352 _____ (Piriform Ltd) C:\Users\Petr\Desktop\ccsetup505.exe
2015-05-18 11:32 - 2014-11-28 21:07 - 00000000 ____D () C:\Program Files\Avira
2015-05-18 11:32 - 2014-11-28 21:06 - 00000000 ____D () C:\ProgramData\Avira
2015-05-10 20:16 - 2014-05-31 15:41 - 00000000 ____D () C:\Program Files\McAfee Security Scan

C:\windows\tasks\Adobe Flash Player Updater.job
C:\windows\tasks\AutoUpdate Allplan 2012.job
C:\windows\tasks\GoogleUpdateTaskMachineCore.job
C:\windows\tasks\GoogleUpdateTaskMachineUA.job
C:\windows\tasks\WebContent AutoUpdate 2011.job

Hosts:
EmptyTemp:
Reboot:
End
Vlevo nahore kliknete na napis Soubor
Kliknete na napis Ulozit jako...
Napiste spravne ten cerveny nazev fixlist a ulozte na plochu.
Vypnete antivir i dalsi pripadne zabezpeceni.
Spustte FRST jako spravce, kliknete na napis Fix a program vykona prikazy.
Po restartu pc by se mel objevit novy log - s nazvem fixlog, ten mi sem zase zkopirujte.
Pokud máte dotaz, který není určen pro veřejnost, můžete mi napsat na mail marty84zavináčforum.viry.cz

Možnost podpořit naše fórum https://platba.viry.cz/payment/

Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).

draace
Návštěvník
Návštěvník
Příspěvky: 88
Registrován: 25 dub 2005 20:06

Re: Zpomalený počítač, prosím o kontrolu logu

#12 Příspěvek od draace »

Zdravím :-)

Velikost adresáře plochy: 4,39 MB (4 603 904 bajtů)

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 19-05-2015
Ran by Petr at 2015-05-25 18:11:13 Run:1
Running from C:\Users\Petr\Desktop
Loaded Profiles: Petr (Available profiles: Petr)
Boot Mode: Normal

==============================================

Content of fixlist:
*****************
Start
CloseProcesses:
CreateRestorePoint:

HKLM\...\Run: [HP Software Update] => C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [49208 2010-06-09] (Hewlett-Packard)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [256896 2014-05-07] (Oracle Corporation)
HKU\S-1-5-21-38716868-1533474370-1911670390-1003\...\Run: [cz.seznam.software.autoupdate] => C:\Users\Petr\AppData\Roaming\Seznam.cz\szninstall.exe [1062472 2013-05-16] ()
HKU\S-1-5-21-38716868-1533474370-1911670390-1003\...\Run: [cz.seznam.software.szndesktop] => C:\Users\Petr\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [92664 2013-04-12] ()
HKU\S-1-5-21-38716868-1533474370-1911670390-1003\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [6278424 2015-04-23] (Piriform Ltd)

SearchScopes: HKU\S-1-5-21-38716868-1533474370-1911670390-1003 -> {98445987-CD0B-4486-A813-D453EA0B57EF} URL = http://www.bing.com/search?FORM=LENBDF& ... -SearchBox
BHO: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files\Microsoft\BingBar\BingExt.dll [2011-07-07] (Microsoft Corporation.)
Toolbar: HKLM - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files\Microsoft\BingBar\BingExt.dll [2011-07-07] (Microsoft Corporation.)
Toolbar: HKU\S-1-5-21-38716868-1533474370-1911670390-1003 -> No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File

FF Extension: Avira Browser Safety - C:\Users\Petr\AppData\Roaming\Mozilla\Firefox\Profiles\nFdrS0vp.default\Extensions\abs@avira.com [2014-11-28]

R3 MBAMSwissArmy; \??\C:\windows\system32\drivers\MBAMSwissArmy.sys [X]
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-09-12 64704]
R2 AntiVirService;Avira Real-Time Protection; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2015-04-07 432888]
R2 AntiVirSchedulerService;Avira Scheduler; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2015-04-07 432888]
R2 APNMCP;Ask Update Service; C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe [2015-04-28 178568]
R2 BBUpdate;BBUpdate; C:\Program Files\Microsoft\BingBar\SeaPort.EXE [2011-06-15 249648]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2010-11-18 810144]
S2 24x7HelpSvc;24x7HelpService; C:\Program Files\24x7Help\App24x7Svc.exe []
S2 Avira.OE.ServiceHost;Avira Service Host; C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe [2014-12-31 178424]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2014-10-31 107912]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-04-21 268464]
S3 BBSvc;Bing Bar Update Service; C:\Program Files\Microsoft\BingBar\BBSvc.EXE [2011-07-07 195336]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [2010-11-18 33584]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2014-10-31 107912]

2015-05-18 18:21 - 2015-05-18 18:21 - 00000000 ____D () C:\ProgramData\Malwarebytes
2015-05-18 18:19 - 2015-05-18 18:19 - 21547816 _____ (Malwarebytes Corporation ) C:\Users\Petr\Downloads\mbam-setup.exe
2015-05-18 10:53 - 2015-05-18 10:49 - 06484352 _____ (Piriform Ltd) C:\Users\Petr\Desktop\ccsetup505.exe
2015-05-18 11:32 - 2014-11-28 21:07 - 00000000 ____D () C:\Program Files\Avira
2015-05-18 11:32 - 2014-11-28 21:06 - 00000000 ____D () C:\ProgramData\Avira
2015-05-10 20:16 - 2014-05-31 15:41 - 00000000 ____D () C:\Program Files\McAfee Security Scan

C:\windows\tasks\Adobe Flash Player Updater.job
C:\windows\tasks\AutoUpdate Allplan 2012.job
C:\windows\tasks\GoogleUpdateTaskMachineCore.job
C:\windows\tasks\GoogleUpdateTaskMachineUA.job
C:\windows\tasks\WebContent AutoUpdate 2011.job

Hosts:
EmptyTemp:
Reboot:
End
*****************

Processes closed successfully.
Restore point was successfully created.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\HP Software Update => value deleted successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM => value deleted successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched => value deleted successfully.
HKU\S-1-5-21-38716868-1533474370-1911670390-1003\Software\Microsoft\Windows\CurrentVersion\Run\\cz.seznam.software.autoupdate => value deleted successfully.
HKU\S-1-5-21-38716868-1533474370-1911670390-1003\Software\Microsoft\Windows\CurrentVersion\Run\\cz.seznam.software.szndesktop => value deleted successfully.
HKU\S-1-5-21-38716868-1533474370-1911670390-1003\Software\Microsoft\Windows\CurrentVersion\Run\\CCleaner Monitoring => value deleted successfully.
"HKU\S-1-5-21-38716868-1533474370-1911670390-1003\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{98445987-CD0B-4486-A813-D453EA0B57EF}" => Key deleted successfully.
HKCR\CLSID\{98445987-CD0B-4486-A813-D453EA0B57EF} => Key not found.
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d2ce3e00-f94a-4740-988e-03dc2f38c34f}" => Key deleted successfully.
"HKCR\CLSID\{d2ce3e00-f94a-4740-988e-03dc2f38c34f}" => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{8dcb7100-df86-4384-8842-8fa844297b3f} => value deleted successfully.
"HKCR\CLSID\{8dcb7100-df86-4384-8842-8fa844297b3f}" => Key deleted successfully.
HKU\S-1-5-21-38716868-1533474370-1911670390-1003\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{21FA44EF-376D-4D53-9B0F-8A89D3229068} => value deleted successfully.
HKCR\CLSID\{21FA44EF-376D-4D53-9B0F-8A89D3229068} => Key not found.
C:\Users\Petr\AppData\Roaming\Mozilla\Firefox\Profiles\nFdrS0vp.default\Extensions\abs@avira.com => Moved successfully.
MBAMSwissArmy => Service deleted successfully.
AdobeARMservice => Service deleted successfully.
AntiVirService => Service not found.
AntiVirSchedulerService => Service not found.
APNMCP => Service not found.
BBUpdate => Service deleted successfully.
ekrn => Service not found.
24x7HelpSvc => Service not found.
Avira.OE.ServiceHost => Service not found.
gupdate => Service deleted successfully.
AdobeFlashPlayerUpdateSvc => Service deleted successfully.
BBSvc => Service deleted successfully.
EhttpSrv => Service not found.
gupdatem => Service deleted successfully.
C:\ProgramData\Malwarebytes => Moved successfully.
C:\Users\Petr\Downloads\mbam-setup.exe => Moved successfully.
C:\Users\Petr\Desktop\ccsetup505.exe => Moved successfully.
C:\Program Files\Avira => Moved successfully.
C:\ProgramData\Avira => Moved successfully.
C:\Program Files\McAfee Security Scan => Moved successfully.
C:\windows\tasks\Adobe Flash Player Updater.job => Moved successfully.
C:\windows\tasks\AutoUpdate Allplan 2012.job => Moved successfully.
C:\windows\tasks\GoogleUpdateTaskMachineCore.job => Moved successfully.
C:\windows\tasks\GoogleUpdateTaskMachineUA.job => Moved successfully.
C:\windows\tasks\WebContent AutoUpdate 2011.job => Moved successfully.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.
EmptyTemp: => Removed 89.6 MB temporary data.


The system needed a reboot.

==== End of Fixlog 18:12:31 ====

Márty84
VIP
VIP
Příspěvky: 21679
Registrován: 05 pro 2009 20:08
Bydliště: Ostrava

Re: Zpomalený počítač, prosím o kontrolu logu

#13 Příspěvek od Márty84 »

:!: Vsechny tyto programy - vcetne pripadne instalace - spoustejte jako spravce (kliknete na ne pravym mysidlem a zvolte - Spustit jako spravce)

:arrow:
vyosek píše: :arrow: DelFix https://toolslib.net/downloads/finish/2/
  • Stahnete a spustte
  • Ponechte zatrzitkou pouze u volby Remove disinfection tools
  • Kliknete na Run
:arrow: Stahnete Ccleaner http://www.filehippo.com/download_ccleaner a spustte.
Pri instalaci pozor na toolbar (ci jine doplnky), jestli vam nabidne jeho instalaci, tak zruste zatrzitko.
Po spusteni se ocitnete ve funkci Cistic. Vlevo je spousta zatrzitek. Pozor dejte hlavne na kos, pokud nechate zatrzene, vzdy ho vysype.
Dale, podle toho jak je nastaven, smaze vsechna hesla ulozena na netu!!! Takze jestli mate nastavene, at si pocitac hesla pamatuje (coz neni pro bezpecnost dobre), budete je muset pak napsat znova rucne (napr mail, facebook, ruzna fora atd.)
Kliknete na Analyzovat a az dokonci analyzu, kliknete na Spustit Cleaner.
Potom kliknete vlevo na funkci Registry
Kliknete na Hledej problemy, kdyz najde, kliknete na Opravit problemy. Nabidne Vam zalohu, tu udelejte a ulozte ji tak, at ji v pripade potreby najdete.
Funkce Nastroje umoznuje odinstalovani programu. Je dukladnejsi nez samotny windows!
(Pokud je v pc vice uzivatelskych uctu, pouzijte program i v nich)

:arrow: Defragmentujte disk(y) (SSD Disky ne!)
Stahnete program Defraggler https://www.piriform.com/defraggler/download/standard
Pri instalaci opet pozor na toolbar a dalsi nesmysly.
Po nainstalovani program spustte a kliknete na Analyzovat, po analyze kliknete na Defragmentovat a programek odvede svou praci.




:arrow: Pak napiste, jak je na tom pc.
Pokud máte dotaz, který není určen pro veřejnost, můžete mi napsat na mail marty84zavináčforum.viry.cz

Možnost podpořit naše fórum https://platba.viry.cz/payment/

Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).

draace
Návštěvník
Návštěvník
Příspěvky: 88
Registrován: 25 dub 2005 20:06

Re: Zpomalený počítač, prosím o kontrolu logu

#14 Příspěvek od draace »

Přeji krásné ráno,

počítač šlape výborně, akorát mě trošku znepokojuje velká odezva mezi psaním a zobrazováním textu na internetu (chat, diskuze apod.) Na ostatních PC v domácnosti (tedy stejné wi-fi připojení) tenhle problém není. Může být na vině havěť, nebo mám příčiny hledat jinde (třeba vada kláves)? :-)

A moc děkuji, za pomoc.

Márty84
VIP
VIP
Příspěvky: 21679
Registrován: 05 pro 2009 20:08
Bydliště: Ostrava

Re: Zpomalený počítač, prosím o kontrolu logu

#15 Příspěvek od Márty84 »

Hezke dopoledne :)
draace píše:akorát mě trošku znepokojuje velká odezva mezi psaním a zobrazováním textu na internetu
Vada klaves to urcite nebude, to by blblo i pri psani mimo internet, napriklad ve wordu. A i tak by to tezko byla tezko chyba klavesnice :)

:???: Dela to ve vsech prohlizecich?

:arrow: Vyzkousejte, jestli je stejny problem i v nouzovem rezimu s praci v siti.



:arrow: Stahnete znovu AdwCleaner https://toolslib.net/downloads/finish/1/ a ulozte ho na plochu.
Ukoncete vsechny programy, jinak to AdwCleaner udela za vas.
Kliknete na nej pravym mysidlem a levym na Spustit jako spravce.
Kliknete na Scan a pockejte, az kontrola dobehne.
Pak kliknete na Cleaning
Program zacne pracovat (muze dojit k restartu pc) a vyplivne log (pripadne bude zde C:\AdwCleaner\AdwCleaner [S?].txt ). Ten mi sem zkopirujte.
Pokud máte dotaz, který není určen pro veřejnost, můžete mi napsat na mail marty84zavináčforum.viry.cz

Možnost podpořit naše fórum https://platba.viry.cz/payment/

Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).

Zamčeno