pomalý ntb

[elina]

Zdravím a prosím opomoc s pomalým ntb.
přikládám log z rsit
Logfile of random's system information tool 1.10 (written by random/random)
Run by Asus at 2016-11-04 16:42:10
Microsoft Windows XP Home Edition Service Pack 2
System drive C: has 92 GB (80%) free of 114 GB
Total RAM: 383 MB (48% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 16:43:58, on 4.11.2016
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\ASWLSVC.exe
C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\WINDOWS\system32\ASWL2K.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\system32\Rundll32.exe
C:\Program Files\ScanSoft\OmniPageSE4\OpwareSE4.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\wbem\unsecapp.exe
C:\Program Files\Outlook Express\msimn.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\msiexec.exe
C:\Documents and Settings\Asus\Plocha\RSIT.exe
C:\Program Files\trend micro\Asus.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [SiSPower] Rundll32.exe SiSPower.dll,ModeAgent
O4 - HKLM\..\Run: [CanonSolutionMenu] C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe /logon
O4 - HKLM\..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
O4 - HKLM\..\Run: [OpwareSE4] "C:\Program Files\ScanSoft\OmniPageSE4\OpwareSE4.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [cz.seznam.software.autoupdate] "C:\Documents and Settings\Asus\Data aplikací\Seznam.cz\szninstall.exe" -c
O4 - HKCU\..\Run: [cz.seznam.software.szndesktop] "C:\Documents and Settings\Asus\Data aplikací\Seznam.cz\bin\wszndesktop.exe" -q
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: ASUS ChkMail.lnk = C:\Program Files\Asus\Asus ChkMail\ChkMail.exe
O4 - Global Startup: Utility Tray.lnk = C:\WINDOWS\system32\sistray.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.asus.com
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: ASWLSVC - Unknown owner - C:\WINDOWS\system32\ASWLSVC.exe
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: PIXMA Extended Survey Program (IJPLMSVC) - Unknown owner - C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE
O23 - Service: spmgr - Unknown owner - C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe

--
End of file - 5374 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
C:\WINDOWS\tasks\Opera scheduled Autoupdate 1465487854.job - C:\Program Files\Opera\launcher.exe --scheduledautoupdate
C:\WINDOWS\tasks\avast! Emergency Update.job - C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe
C:\WINDOWS\tasks\SafeZone scheduled Autoupdate 1130191294.job - C:\Program Files\AVAST Software\SZBrowser\launcher.exe --scheduledautoupdate $(Arg0)

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23 60568]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-06-09 679680]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SoundMan"=C:\WINDOWS\SOUNDMAN.EXE [2005-04-14 77824]
"SynTPLpr"=C:\Program Files\Synaptics\SynTP\SynTPLpr.exe [2004-12-21 98394]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2004-12-21 688218]
"SiSPower"=SiSPower.dll,ModeAgent []
"CanonSolutionMenu"=C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe [2007-04-03 644696]
"CanonMyPrinter"=C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2007-04-03 1603152]
"SSBkgdUpdate"=C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe [2006-10-25 210472]
"OpwareSE4"=C:\Program Files\ScanSoft\OmniPageSE4\OpwareSE4.exe [2007-02-04 79400]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904]
"seznam-listicka-distribuce"=C:\Program Files\Seznam.cz\distribution\szninstall.exe [2013-05-16 1062472]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2005-10-25 7408312]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2004-08-18 15360]
"cz.seznam.software.autoupdate"=C:\Documents and Settings\Asus\Data aplikací\Seznam.cz\szninstall.exe [2013-05-16 1062472]
"cz.seznam.software.szndesktop"=C:\Documents and Settings\Asus\Data aplikací\Seznam.cz\bin\wszndesktop.exe [2015-05-26 103080]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
ASUS ChkMail.lnk - C:\Program Files\Asus\Asus ChkMail\ChkMail.exe
Utility Tray.lnk - C:\WINDOWS\system32\sistray.exe
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
UPnPMonitor - {e57ce738-33e8-4c51-8354-bb4de9d215d1} - C:\WINDOWS\system32\upnpui.dll [2004-08-18 239616]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SoftwareSASGeneration"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Messenger\msmsgs.exe"="C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\Program Files\Opera\launcher.exe"="C:\Program Files\Opera\launcher.exe:*:Disabled:Opera"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv

======List of files/folders created in the last 3 months======

2016-11-04 16:42:11 ----D---- C:\Program Files\trend micro
2016-11-04 16:42:10 ----D---- C:\rsit
2016-08-07 17:02:58 ----A---- C:\WINDOWS\system32\aswBoot.exe

======List of files/folders modified in the last 3 months======

2016-11-04 16:03:32 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\WINDOWS\system32\drivers\aswRvrt.sys [2016-06-09 58776]
R0 aswVmm;avast! VM Monitor; C:\WINDOWS\system32\drivers\aswVmm.sys [2005-10-25 224616]
R0 gagp30kx;Filtr Microsoft Generic AGPv3.0 pro procesorovou platformu K8; C:\WINDOWS\system32\DRIVERS\gagp30kx.sys [2004-08-03 46464]
R0 ohci1394;Hostitelský řadič IEEE 1394 dle standardu OHCI; C:\WINDOWS\system32\DRIVERS\ohci1394.sys [2004-08-18 61056]
R0 rmedia;Ricoh MediaCard Driver; C:\WINDOWS\system32\DRIVERS\rmedia.sys [2004-10-27 67456]
R0 SISAGP;SiS AGP Filter; C:\WINDOWS\system32\DRIVERS\SISAGPX.sys [2003-07-17 36992]
R1 AmdK8;Ovladač procesoru AMD Athlon64; C:\WINDOWS\system32\DRIVERS\AmdK8.sys [2004-11-23 38400]
R1 aswKbd;aswKbd; C:\WINDOWS\system32\drivers\aswKbd.sys [2016-06-09 35096]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2016-06-09 64272]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2016-06-09 815792]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2016-06-09 449640]
R1 SiSkp;SiSkp; C:\WINDOWS\system32\DRIVERS\srvkp.sys [2005-02-17 13312]
R2 aswHwid;avast! HardwareID; C:\WINDOWS\system32\drivers\aswHwid.sys [2016-06-09 32792]
R2 aswMonFlt;aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [2016-06-09 91168]
R2 ghaio;ghaio; \??\C:\Program Files\ASUS\NB Probe\SPM\ghaio.sys []
R2 irda;Protokol IrDA; C:\WINDOWS\system32\DRIVERS\irda.sys [2004-08-03 87424]
R2 MDC8021X;AEGIS Protocol (IEEE 802.1x) v2.3.1.9; C:\WINDOWS\system32\DRIVERS\mdc8021x.sys [2013-04-27 15781]
R2 mdmxsdk;mdmxsdk; C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys [2004-03-16 13059]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2005-04-18 2317504]
R3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2004-08-18 60800]
R3 ASNDIS5;ASNDIS5 Protocol Driver; \??\C:\WINDOWS\system32\ASNDIS5.SYS []
R3 aswStmXP;Avast StreamFilter Driver; C:\WINDOWS\system32\drivers\aswStmXP.sys [2016-06-09 187208]
R3 BCM43XX;ASUS 802.11 ovladač síťového adaptéru; C:\WINDOWS\system32\DRIVERS\bcmwl5.sys [2005-02-11 371712]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2004-08-18 9600]
R3 HSF_DP;HSF_DP; C:\WINDOWS\system32\DRIVERS\HSF_DP.sys [2004-05-12 1037056]
R3 HSFHWSIS;HSFHWSIS; C:\WINDOWS\system32\DRIVERS\HSFHWSIS.sys [2004-06-16 193280]
R3 irsir;Microsoft Serial Infrared Driver; C:\WINDOWS\system32\DRIVERS\irsir.sys [2001-08-17 18688]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2004-08-18 12160]
R3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2004-08-18 61824]
R3 Rasirda;WAN Miniport (IrDA); C:\WINDOWS\system32\DRIVERS\rasirda.sys [2001-08-17 19584]
R3 RTL8023xp;Realtek RTL8139/810x/8169/8110 all in one NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtlnicxp.sys [2004-08-08 70144]
R3 SiS315;SiS315; C:\WINDOWS\system32\DRIVERS\sisgrp.sys [2005-02-16 240640]
R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2004-12-21 186240]
R3 Wdf01000;Kernel Mode Driver Frameworks service; C:\WINDOWS\System32\Drivers\wdf01000.sys [2009-07-14 444136]
R3 winachsf;winachsf; C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys [2004-05-12 685312]
S1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2004-08-17 14848]
S3 aswTdi;aswTdi; C:\WINDOWS\system32\drivers\aswTdi.sys [2016-06-09 67216]
S3 massfilter;Mass Storage Filter Driver; C:\WINDOWS\system32\drivers\massfilter.sys [2010-02-22 9216]
S3 MTsensor;ATK0100 ACPI UTILITY; C:\WINDOWS\system32\DRIVERS\ATKACPI.sys []
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2004-08-03 31616]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2004-08-03 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 15104]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]
S3 WDC_SAM;WD SCSI Pass Thru driver; C:\WINDOWS\system32\DRIVERS\wdcsam.sys [2009-02-13 11520]
S3 ZTEusbmdm6k;ZTE Proprietary USB Driver; C:\WINDOWS\system32\DRIVERS\ZTEusbmdm6k.sys [2010-03-02 105856]
S3 ZTEusbnmea;ZTE NMEA Port; C:\WINDOWS\system32\DRIVERS\ZTEusbnmea.sys [2010-03-02 105856]
S3 ZTEusbser6k;ZTE Diagnostic Port; C:\WINDOWS\system32\DRIVERS\ZTEusbser6k.sys [2010-03-02 105856]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ASWLSVC;ASWLSVC; C:\WINDOWS\system32\ASWLSVC.exe [2004-05-06 496640]
R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2016-06-09 243296]
R2 Irmon;Sledování infračerveného přenosu; C:\WINDOWS\system32\svchost.exe [2004-08-18 14336]
R2 spmgr;spmgr; C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe [2005-04-20 118784]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-09-24 267440]
S3 IJPLMSVC;PIXMA Extended Survey Program; C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE [2007-04-13 97432]

-----------------EOF-----------------

[Roli]

Zdravím, v první řadě by to chtělo doinstalovat SP 3, ke stažení ZDE


V HJT fixni :

O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKCU\..\Run: [cz.seznam.software.autoupdate] "C:\Documents and Settings\Asus\Data aplikací\Seznam.cz\szninstall.exe" -c
O4 - HKCU\..\Run: [cz.seznam.software.szndesktop] "C:\Documents and Settings\Asus\Data aplikací\Seznam.cz\bin\wszndesktop.exe" -q
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: ASUS ChkMail.lnk = C:\Program Files\Asus\Asus ChkMail\ChkMail.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE

HJT najdeš zde :

C:\Program Files\trend micro\Asus.exe

Fix znamená že spustíš HJT jako admin

v okně které se ti otevře klikneš na Do a system scan only

v dalším okně najdeš řádky které jsem ti vypsal,

vedle nich je čtvereček do kterého uděláš zatržítko,

pak klikneš na Fix checked které je vlevo dole,

program se ti zeptá zda opravdu ANO s tím samozřejmě souhlasíš a je hotovo.


Smaž nepotřebné soubory

pomocí CCleaneru

návod :

Čistič - tady vyčistíš PC od nepotřebných souborů a vysypeš Koš

Registry - tady vyčistíš registry (před použitím doporučuji udělat jejich zálohu kterou CCleaner nabízí)

čištění registru je třeba několikrát zopakovat !

Nástroje - tady lze odinstalovat programy, upravit co se spustí po Startu systému a obnovit systém


Stáhni a spusť AdwCleaner,

ukonči všechny programy včetně prohlížeče a dvojklikem jej spusť,

objeví se okno kde vlevo nahoře klikni na Scan.

Po dokončení skenu klikni na Clean,

proběhne restart PC kdy dojde ke smazání nepořádku.

Po té mi sem zkopíruj Report.

[elina]

zde je log z adwcleer
# AdwCleaner v6.030 - Log soubor vytvořen 04/11/2016 na 17:22:56
# Aktualizováno dne 19/10/2016 z Malwarebytes
# Databáze : 2016-10-18.1 [Místní]
# Operační systém : Microsoft Windows XP Service Pack 2 (X86)
# Uživatelské jméno : Asus - NOTEBOOK
# Beží od : C:\Documents and Settings\Asus\Plocha\adwcleaner_6.030.exe
# Mod: Skenování
# Podpora : https://www.malwarebytes.com/support



***** [ Služby ] *****

Nebyly nalezeny žádné škodlivé služby.


***** [ Adresáře ] *****

Nebyly nalezeny žádné škodlivé složky.


***** [ Soubory ] *****

Nebyly nalezeny žádné škodlivé soubory.


***** [ DLL ] *****

Nebyly nalezeny žádné škodlivé DLL soubory.


***** [ WMI ] *****

Nebyly nalezeny žádné škodlivé klíče.


***** [ Zástupce ] *****

Žádné infikovaný zástupce nenalezen.


***** [ Plánovač úloh ] *****

Žádný nebezpečná úloha nenalezena.


***** [ Registry ] *****

Klíč nalezen: HKLM\SOFTWARE\Classes\protector_dll.ProtectorBho
Klíč nalezen: HKLM\SOFTWARE\Classes\protector_dll.ProtectorBho.1


***** [ Internetové prohlížeče ] *****

Nebyly nalezeny žádné škodlivé položky prohlížeče Firefox báze.
Nebyly nalezeny žádné škodlivé položky prohlížeče Chromium báze.

*************************

C:\AdwCleaner\AdwCleaner[S0].txt - [1349 Bajtů] - [04/11/2016 17:22:56]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1423 Bajtů] ##########



cclaener jem již instaloval jako první, ale po spuštění vždy spadne pc a provede se restart.
ještě nejde prohlížet v ie, má problém s dns, to alespoň píše
sp3 stahuji, ale instalace na tomto ntb bude tak do zítřka.

[Roli]

.... sp3 stahuji, ale instalace na tomto ntb bude tak do zítřka.

Až bude tak dej vědět, budeme pak pokračovat.

[elina]

Již nainstalováno, ccleaner stále způsobuje pád Windows, po spuštění je ihned vypnutý a následuje restart

[Roli]

CCleaner zatím vynech a dej mi sem nový log z Rsit.

[elina]

zde je nový log
Logfile of random's system information tool 1.10 (written by random/random)
Run by Asus at 2016-11-08 18:11:30
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 89 GB (78%) free of 114 GB
Total RAM: 479 MB (13% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:13:20, on 8.11.2016
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\ASWLSVC.exe
C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\ASWL2K.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\AVAST Software\Avast\RegSvr.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\system32\Rundll32.exe
C:\Program Files\ScanSoft\OmniPageSE4\OpwareSE4.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\sistray.exe
C:\WINDOWS\system32\wbem\unsecapp.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\SoftwareDistribution\Download\6968beb43d20650ddfe8468097d4385e\update\update.exe
C:\Documents and Settings\Asus\Plocha\RSIT.exe
C:\Program Files\AVAST Software\Avast\setup\instup.exe
C:\Program Files\trend micro\Asus.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [SiSPower] Rundll32.exe SiSPower.dll,ModeAgent
O4 - HKLM\..\Run: [CanonSolutionMenu] C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe /logon
O4 - HKLM\..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
O4 - HKLM\..\Run: [OpwareSE4] "C:\Program Files\ScanSoft\OmniPageSE4\OpwareSE4.exe"
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: Utility Tray.lnk = C:\WINDOWS\system32\sistray.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.asus.com
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: ASWLSVC - Unknown owner - C:\WINDOWS\system32\ASWLSVC.exe
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: PIXMA Extended Survey Program (IJPLMSVC) - Unknown owner - C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE
O23 - Service: spmgr - Unknown owner - C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe

--
End of file - 4615 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
C:\WINDOWS\tasks\Opera scheduled Autoupdate 1465487854.job - C:\Program Files\Opera\launcher.exe --scheduledautoupdate $(Arg0)
C:\WINDOWS\tasks\avast! Emergency Update.job - C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe
C:\WINDOWS\tasks\SafeZone scheduled Autoupdate 1130191294.job - C:\Program Files\AVAST Software\SZBrowser\launcher.exe --scheduledautoupdate $(Arg0)

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23 60568]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-11-04 664848]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SoundMan"=C:\WINDOWS\SOUNDMAN.EXE [2005-04-14 77824]
"SynTPLpr"=C:\Program Files\Synaptics\SynTP\SynTPLpr.exe [2004-12-21 98394]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2004-12-21 688218]
"SiSPower"=SiSPower.dll,ModeAgent []
"CanonSolutionMenu"=C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe [2007-04-03 644696]
"CanonMyPrinter"=C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2007-04-03 1603152]
"SSBkgdUpdate"=C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe [2006-10-25 210472]
"OpwareSE4"=C:\Program Files\ScanSoft\OmniPageSE4\OpwareSE4.exe [2007-02-04 79400]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2016-11-04 9099440]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
Utility Tray.lnk - C:\WINDOWS\system32\sistray.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
UPnPMonitor - {e57ce738-33e8-4c51-8354-bb4de9d215d1} - C:\WINDOWS\system32\upnpui.dll [2008-04-14 239616]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SoftwareSASGeneration"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Messenger\msmsgs.exe"="C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\Program Files\Opera\launcher.exe"="C:\Program Files\Opera\launcher.exe:*:Disabled:Opera"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv

======List of files/folders created in the last 1 month======

2016-11-08 18:11:35 ----HD---- C:\WINDOWS\$NtUninstallKB2834886$
2016-11-08 18:11:27 ----D---- C:\WINDOWS\LastGood
2016-11-04 20:32:06 ----D---- C:\WINDOWS\system32\PreInstall
2016-11-04 20:32:03 ----HD---- C:\WINDOWS\$NtUninstallKB898461$
2016-11-04 20:32:03 ----HD---- C:\WINDOWS\$hf_mig$
2016-11-04 20:03:12 ----A---- C:\WINDOWS\ucrtbase.dll
2016-11-04 20:03:11 ----A---- C:\WINDOWS\system32\aswBoot.exe
2016-11-04 20:01:15 ----A---- C:\WINDOWS\avastSS.scr
2016-11-04 19:28:16 ----D---- C:\WINDOWS\system32\SoftwareDistribution
2016-11-04 19:27:28 ----A---- C:\WINDOWS\OEWABLog.txt
2016-11-04 19:26:25 ----D---- C:\WINDOWS\Prefetch
2016-11-04 19:16:46 ----A---- C:\WINDOWS\setuplog.txt
2016-11-04 19:15:54 ----N---- C:\WINDOWS\system32\msxml6r.dll
2016-11-04 19:15:54 ----N---- C:\WINDOWS\system32\msxml6.dll
2016-11-04 19:15:23 ----N---- C:\WINDOWS\system32\ati3d1ag.dll
2016-11-04 19:15:23 ----N---- C:\WINDOWS\system32\ati2dvag.dll
2016-11-04 19:15:23 ----N---- C:\WINDOWS\system32\ati2dvaa.dll
2016-11-04 19:15:23 ----N---- C:\WINDOWS\system32\ati2cqag.dll
2016-11-04 19:15:23 ----N---- C:\WINDOWS\system32\aaclient.dll
2016-11-04 19:15:22 ----N---- C:\WINDOWS\system32\azroles.dll
2016-11-04 19:15:22 ----N---- C:\WINDOWS\system32\ativvaxx.dll
2016-11-04 19:15:22 ----N---- C:\WINDOWS\system32\ativtmxx.dll
2016-11-04 19:15:22 ----N---- C:\WINDOWS\system32\ati3duag.dll
2016-11-04 19:15:21 ----N---- C:\WINDOWS\system32\bitsprx4.dll
2016-11-04 19:15:20 ----N---- C:\WINDOWS\system32\dot3gpclnt.dll
2016-11-04 19:15:20 ----N---- C:\WINDOWS\system32\dot3dlg.dll
2016-11-04 19:15:20 ----N---- C:\WINDOWS\system32\dot3cfg.dll
2016-11-04 19:15:20 ----N---- C:\WINDOWS\system32\dot3api.dll
2016-11-04 19:15:20 ----N---- C:\WINDOWS\system32\dimsroam.dll
2016-11-04 19:15:20 ----N---- C:\WINDOWS\system32\dimsntfy.dll
2016-11-04 19:15:20 ----N---- C:\WINDOWS\system32\dhcpqec.dll
2016-11-04 19:15:20 ----N---- C:\WINDOWS\system32\credssp.dll
2016-11-04 19:15:19 ----N---- C:\WINDOWS\system32\eappcfg.dll
2016-11-04 19:15:19 ----N---- C:\WINDOWS\system32\eapp3hst.dll
2016-11-04 19:15:19 ----N---- C:\WINDOWS\system32\eapolqec.dll
2016-11-04 19:15:19 ----N---- C:\WINDOWS\system32\dot3ui.dll
2016-11-04 19:15:19 ----N---- C:\WINDOWS\system32\dot3svc.dll
2016-11-04 19:15:19 ----N---- C:\WINDOWS\system32\dot3msm.dll
2016-11-04 19:15:18 ----N---- C:\WINDOWS\system32\eapsvc.dll
2016-11-04 19:15:18 ----N---- C:\WINDOWS\system32\eapqec.dll
2016-11-04 19:15:18 ----N---- C:\WINDOWS\system32\eappprxy.dll
2016-11-04 19:15:18 ----N---- C:\WINDOWS\system32\eapphost.dll
2016-11-04 19:15:18 ----N---- C:\WINDOWS\system32\eappgnui.dll
2016-11-04 19:15:17 ----N---- C:\WINDOWS\system32\hsfcisp2.dll
2016-11-04 19:15:16 ----N---- C:\WINDOWS\system32\ieencode.dll
2016-11-04 19:15:15 ----N---- C:\WINDOWS\system32\kbdbhc.dll
2016-11-04 19:15:14 ----N---- C:\WINDOWS\system32\kbdnepr.dll
2016-11-04 19:15:14 ----N---- C:\WINDOWS\system32\kbdiultn.dll
2016-11-04 19:15:13 ----N---- C:\WINDOWS\system32\l2gpstore.dll
2016-11-04 19:15:13 ----N---- C:\WINDOWS\system32\kmsvc.dll
2016-11-04 19:15:13 ----N---- C:\WINDOWS\system32\kbdpash.dll
2016-11-04 19:15:12 ----N---- C:\WINDOWS\system32\mmcperf.exe
2016-11-04 19:15:12 ----N---- C:\WINDOWS\system32\mmcfxcommon.dll
2016-11-04 19:15:12 ----N---- C:\WINDOWS\system32\mmcex.dll
2016-11-04 19:15:12 ----N---- C:\WINDOWS\system32\microsoft.managementconsole.dll
2016-11-04 19:15:11 ----N---- C:\WINDOWS\system32\msshavmsg.dll
2016-11-04 19:15:11 ----N---- C:\WINDOWS\system32\mssha.dll
2016-11-04 19:15:10 ----N---- C:\WINDOWS\system32\napstat.exe
2016-11-04 19:15:10 ----N---- C:\WINDOWS\system32\napmontr.dll
2016-11-04 19:15:10 ----N---- C:\WINDOWS\system32\napipsec.dll
2016-11-04 19:15:10 ----N---- C:\WINDOWS\system32\mtxparhd.dll
2016-11-04 19:15:09 ----N---- C:\WINDOWS\system32\onex.dll
2016-11-04 19:15:09 ----N---- C:\WINDOWS\system32\nv4_disp.dll
2016-11-04 19:15:08 ----N---- C:\WINDOWS\system32\qutil.dll
2016-11-04 19:15:08 ----N---- C:\WINDOWS\system32\qcliprov.dll
2016-11-04 19:15:08 ----N---- C:\WINDOWS\system32\qagentrt.dll
2016-11-04 19:15:08 ----N---- C:\WINDOWS\system32\qagent.dll
2016-11-04 19:15:08 ----N---- C:\WINDOWS\system32\photometadatahandler.dll
2016-11-04 19:15:07 ----N---- C:\WINDOWS\system32\slextspk.dll
2016-11-04 19:15:07 ----N---- C:\WINDOWS\system32\slcoinst.dll
2016-11-04 19:15:07 ----N---- C:\WINDOWS\system32\setupn.exe
2016-11-04 19:15:07 ----N---- C:\WINDOWS\system32\s3gnb.dll
2016-11-04 19:15:07 ----N---- C:\WINDOWS\system32\rhttpaa.dll
2016-11-04 19:15:07 ----N---- C:\WINDOWS\system32\rasqec.dll
2016-11-04 19:15:06 ----N---- C:\WINDOWS\system32\slserv.exe
2016-11-04 19:15:06 ----N---- C:\WINDOWS\system32\slrundll.exe
2016-11-04 19:15:06 ----N---- C:\WINDOWS\system32\slgen.dll
2016-11-04 19:15:05 ----N---- C:\WINDOWS\system32\tsgqec.dll
2016-11-04 19:15:04 ----N---- C:\WINDOWS\system32\windowscodecs.dll
2016-11-04 19:15:04 ----N---- C:\WINDOWS\system32\verclsid.exe
2016-11-04 19:15:04 ----N---- C:\WINDOWS\system32\tzchange.exe
2016-11-04 19:15:04 ----N---- C:\WINDOWS\system32\tspkg.dll
2016-11-04 19:15:03 ----N---- C:\WINDOWS\system32\wmphoto.dll
2016-11-04 19:15:03 ----N---- C:\WINDOWS\system32\wlanapi.dll
2016-11-04 19:15:03 ----N---- C:\WINDOWS\system32\windowscodecsext.dll
2016-11-04 19:15:00 ----N---- C:\WINDOWS\slrundll.exe
2016-11-04 19:14:57 ----D---- C:\WINDOWS\l2schemas
2016-11-04 19:14:56 ----D---- C:\WINDOWS\system32\cs
2016-11-04 19:14:55 ----D---- C:\WINDOWS\system32\bits
2016-11-04 19:09:35 ----D---- C:\WINDOWS\ServicePackFiles
2016-11-04 19:05:18 ----N---- C:\WINDOWS\system32\drivers\adv11nt5.dll
2016-11-04 19:05:18 ----N---- C:\WINDOWS\system32\drivers\adv09nt5.dll
2016-11-04 19:05:18 ----N---- C:\WINDOWS\system32\drivers\adv08nt5.dll
2016-11-04 19:05:18 ----N---- C:\WINDOWS\system32\drivers\adv07nt5.dll
2016-11-04 19:05:18 ----N---- C:\WINDOWS\system32\drivers\adv05nt5.dll
2016-11-04 19:05:18 ----N---- C:\WINDOWS\system32\drivers\adv02nt5.dll
2016-11-04 19:05:18 ----N---- C:\WINDOWS\system32\drivers\adv01nt5.dll
2016-11-04 19:05:18 ----D---- C:\WINDOWS\network diagnostic
2016-11-04 19:05:17 ----N---- C:\WINDOWS\system32\drivers\ati1rvxx.sys
2016-11-04 19:05:17 ----N---- C:\WINDOWS\system32\drivers\ati1raxx.sys
2016-11-04 19:05:17 ----N---- C:\WINDOWS\system32\drivers\ati1pdxx.sys
2016-11-04 19:05:17 ----N---- C:\WINDOWS\system32\drivers\ati1mdxx.sys
2016-11-04 19:05:17 ----N---- C:\WINDOWS\system32\drivers\ati1btxx.sys
2016-11-04 19:05:17 ----N---- C:\WINDOWS\system32\drivers\amdagp.sys
2016-11-04 19:05:17 ----N---- C:\WINDOWS\system32\drivers\alim1541.sys
2016-11-04 19:05:17 ----N---- C:\WINDOWS\system32\drivers\agpcpq.sys
2016-11-04 19:05:17 ----N---- C:\WINDOWS\system32\drivers\agp440.sys
2016-11-04 19:05:16 ----N---- C:\WINDOWS\system32\drivers\ati2mtag.sys
2016-11-04 19:05:16 ----N---- C:\WINDOWS\system32\drivers\ati2mtaa.sys
2016-11-04 19:05:16 ----N---- C:\WINDOWS\system32\drivers\ati1xsxx.sys
2016-11-04 19:05:16 ----N---- C:\WINDOWS\system32\drivers\ati1xbxx.sys
2016-11-04 19:05:16 ----N---- C:\WINDOWS\system32\drivers\ati1tuxx.sys
2016-11-04 19:05:16 ----N---- C:\WINDOWS\system32\drivers\ati1ttxx.sys
2016-11-04 19:05:16 ----N---- C:\WINDOWS\system32\drivers\ati1snxx.sys
2016-11-04 19:05:15 ----N---- C:\WINDOWS\system32\drivers\atv01nt5.dll
2016-11-04 19:05:15 ----N---- C:\WINDOWS\system32\drivers\atinxsxx.sys
2016-11-04 19:05:15 ----N---- C:\WINDOWS\system32\drivers\atinxbxx.sys
2016-11-04 19:05:15 ----N---- C:\WINDOWS\system32\drivers\atintuxx.sys
2016-11-04 19:05:15 ----N---- C:\WINDOWS\system32\drivers\atinttxx.sys
2016-11-04 19:05:15 ----N---- C:\WINDOWS\system32\drivers\atinsnxx.sys
2016-11-04 19:05:15 ----N---- C:\WINDOWS\system32\drivers\atinrvxx.sys
2016-11-04 19:05:15 ----N---- C:\WINDOWS\system32\drivers\atinraxx.sys
2016-11-04 19:05:15 ----N---- C:\WINDOWS\system32\drivers\atinpdxx.sys
2016-11-04 19:05:15 ----N---- C:\WINDOWS\system32\drivers\atinmdxx.sys
2016-11-04 19:05:15 ----N---- C:\WINDOWS\system32\drivers\atinbtxx.sys
2016-11-04 19:05:14 ----N---- C:\WINDOWS\system32\drivers\bthusb.sys
2016-11-04 19:05:14 ----N---- C:\WINDOWS\system32\drivers\bthprint.sys
2016-11-04 19:05:14 ----N---- C:\WINDOWS\system32\drivers\bthport.sys
2016-11-04 19:05:14 ----N---- C:\WINDOWS\system32\drivers\bthpan.sys
2016-11-04 19:05:14 ----N---- C:\WINDOWS\system32\drivers\bthmodem.sys
2016-11-04 19:05:14 ----N---- C:\WINDOWS\system32\drivers\bthenum.sys
2016-11-04 19:05:14 ----N---- C:\WINDOWS\system32\drivers\atv10nt5.dll
2016-11-04 19:05:14 ----N---- C:\WINDOWS\system32\drivers\atv06nt5.dll
2016-11-04 19:05:14 ----N---- C:\WINDOWS\system32\drivers\atv04nt5.dll
2016-11-04 19:05:14 ----N---- C:\WINDOWS\system32\drivers\atv02nt5.dll
2016-11-04 19:05:13 ----N---- C:\WINDOWS\system32\drivers\ch7xxnt5.dll
2016-11-04 19:05:13 ----N---- C:\WINDOWS\system32\drivers\hsfbs2s2.sys
2016-11-04 19:05:13 ----N---- C:\WINDOWS\system32\drivers\hidir.sys
2016-11-04 19:05:13 ----N---- C:\WINDOWS\system32\drivers\hidbth.sys
2016-11-04 19:05:13 ----N---- C:\WINDOWS\system32\drivers\hdaudbus.sys
2016-11-04 19:05:12 ----N---- C:\WINDOWS\system32\drivers\mtlmnt5.sys
2016-11-04 19:05:12 ----N---- C:\WINDOWS\system32\drivers\hsfdpsp2.sys
2016-11-04 19:05:12 ----N---- C:\WINDOWS\system32\drivers\hsfcxts2.sys
2016-11-04 19:05:11 ----N---- C:\WINDOWS\system32\drivers\ntmtlfax.sys
2016-11-04 19:05:11 ----N---- C:\WINDOWS\system32\drivers\mutohpen.sys
2016-11-04 19:05:11 ----N---- C:\WINDOWS\system32\drivers\mtxparhm.sys
2016-11-04 19:05:11 ----N---- C:\WINDOWS\system32\drivers\mtlstrm.sys
2016-11-04 19:05:10 ----N---- C:\WINDOWS\system32\drivers\s3gnbm.sys
2016-11-04 19:05:10 ----N---- C:\WINDOWS\system32\drivers\rndismpx.sys
2016-11-04 19:05:10 ----N---- C:\WINDOWS\system32\drivers\rfcomm.sys
2016-11-04 19:05:10 ----N---- C:\WINDOWS\system32\drivers\recagent.sys
2016-11-04 19:05:10 ----N---- C:\WINDOWS\system32\drivers\nv4_mini.sys
2016-11-04 19:05:09 ----N---- C:\WINDOWS\system32\drivers\smbali.sys
2016-11-04 19:05:09 ----N---- C:\WINDOWS\system32\drivers\slwdmsup.sys
2016-11-04 19:05:09 ----N---- C:\WINDOWS\system32\drivers\slnthal.sys
2016-11-04 19:05:09 ----N---- C:\WINDOWS\system32\drivers\slntamr.sys
2016-11-04 19:05:09 ----N---- C:\WINDOWS\system32\drivers\slnt7554.sys
2016-11-04 19:05:09 ----N---- C:\WINDOWS\system32\drivers\sisagp.sys
2016-11-04 19:05:09 ----N---- C:\WINDOWS\system32\drivers\siint5.dll
2016-11-04 19:05:09 ----N---- C:\WINDOWS\system32\drivers\sffp_mmc.sys
2016-11-04 19:05:08 ----N---- C:\WINDOWS\system32\drivers\usb8023x.sys
2016-11-04 19:05:08 ----N---- C:\WINDOWS\system32\drivers\uagp35.sys
2016-11-04 19:05:07 ----N---- C:\WINDOWS\system32\drivers\watv10nt.sys
2016-11-04 19:05:07 ----N---- C:\WINDOWS\system32\drivers\watv06nt.sys
2016-11-04 19:05:07 ----N---- C:\WINDOWS\system32\drivers\wadv11nt.sys
2016-11-04 19:05:07 ----N---- C:\WINDOWS\system32\drivers\wadv09nt.sys
2016-11-04 19:05:07 ----N---- C:\WINDOWS\system32\drivers\wadv08nt.sys
2016-11-04 19:05:07 ----N---- C:\WINDOWS\system32\drivers\wadv07nt.sys
2016-11-04 19:05:07 ----N---- C:\WINDOWS\system32\drivers\wacompen.sys
2016-11-04 19:05:07 ----N---- C:\WINDOWS\system32\drivers\viaagp.sys
2016-11-04 19:05:07 ----N---- C:\WINDOWS\system32\drivers\vchnt5.dll
2016-11-04 19:05:07 ----N---- C:\WINDOWS\system32\drivers\usbvideo.sys
2016-11-04 19:02:54 ----A---- C:\WINDOWS\002508_.tmp
2016-11-04 18:58:02 ----HD---- C:\WINDOWS\$NtServicePackUninstall$
2016-11-04 18:57:49 ----D---- C:\WINDOWS\EHome
2016-11-04 17:20:18 ----D---- C:\AdwCleaner
2016-11-04 16:42:11 ----D---- C:\Program Files\trend micro
2016-11-04 16:42:10 ----D---- C:\rsit

======List of files/folders modified in the last 1 month======

2016-11-04 20:32:48 ----A---- C:\WINDOWS\SchedLgU.Txt
2016-11-04 20:32:24 ----A---- C:\WINDOWS\imsins.BAK
2016-11-04 19:29:22 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\WINDOWS\system32\drivers\aswRvrt.sys [2016-11-04 60424]
R0 aswVmm;avast! VM Monitor; C:\WINDOWS\system32\drivers\aswVmm.sys [2016-11-04 224752]
R0 gagp30kx;Filtr Microsoft Generic AGPv3.0 pro procesorovou platformu K8; C:\WINDOWS\system32\DRIVERS\gagp30kx.sys [2008-04-14 46464]
R0 ohci1394;Hostitelský řadič IEEE 1394 dle standardu OHCI; C:\WINDOWS\system32\DRIVERS\ohci1394.sys [2008-04-14 61696]
R0 rmedia;Ricoh MediaCard Driver; C:\WINDOWS\system32\DRIVERS\rmedia.sys [2004-10-27 67456]
R0 SISAGP;SiS AGP Filter; C:\WINDOWS\system32\DRIVERS\SISAGPX.sys [2003-07-17 36992]
R1 AmdK8;Ovladač procesoru AMD Athlon64; C:\WINDOWS\system32\DRIVERS\AmdK8.sys [2004-11-23 38400]
R1 aswKbd;aswKbd; C:\WINDOWS\system32\drivers\aswKbd.sys [2016-11-04 35096]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2016-11-04 64272]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2016-11-04 735488]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2016-11-04 433768]
R1 SiSkp;SiSkp; C:\WINDOWS\system32\DRIVERS\srvkp.sys [2005-02-17 13312]
R2 aswMonFlt;aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [2016-11-04 92256]
R2 ghaio;ghaio; \??\C:\Program Files\ASUS\NB Probe\SPM\ghaio.sys []
R2 irda;Protokol IrDA; C:\WINDOWS\system32\DRIVERS\irda.sys [2008-04-14 88192]
R2 MDC8021X;AEGIS Protocol (IEEE 802.1x) v2.3.1.9; C:\WINDOWS\system32\DRIVERS\mdc8021x.sys [2013-04-27 15781]
R2 mdmxsdk;mdmxsdk; C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys [2004-03-16 13059]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2005-04-18 2317504]
R3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-14 60800]
R3 ASNDIS5;ASNDIS5 Protocol Driver; \??\C:\WINDOWS\system32\ASNDIS5.SYS []
R3 aswStmXP;Avast StreamFilter Driver; C:\WINDOWS\system32\drivers\aswStmXP.sys [2016-11-04 184592]
R3 BCM43XX;ASUS 802.11 ovladač síťového adaptéru; C:\WINDOWS\system32\DRIVERS\bcmwl5.sys [2005-02-11 371712]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 HSF_DP;HSF_DP; C:\WINDOWS\system32\DRIVERS\HSF_DP.sys [2004-05-12 1037056]
R3 HSFHWSIS;HSFHWSIS; C:\WINDOWS\system32\DRIVERS\HSFHWSIS.sys [2004-06-16 193280]
R3 irsir;Microsoft Serial Infrared Driver; C:\WINDOWS\system32\DRIVERS\irsir.sys [2001-08-17 18688]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2004-08-18 12160]
R3 MTsensor;ATK0100 ACPI UTILITY; C:\WINDOWS\system32\DRIVERS\ATKACPI.sys [2007-08-28 5760]
R3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-14 61824]
R3 Rasirda;WAN Miniport (IrDA); C:\WINDOWS\system32\DRIVERS\rasirda.sys [2001-08-17 19584]
R3 RTL8023xp;Realtek RTL8139/810x/8169/8110 all in one NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtlnicxp.sys [2004-08-08 70144]
R3 SiS315;SiS315; C:\WINDOWS\system32\DRIVERS\sisgrp.sys [2005-02-16 240640]
R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2004-12-21 186240]
R3 Wdf01000;Kernel Mode Driver Frameworks service; C:\WINDOWS\System32\Drivers\wdf01000.sys [2009-07-14 444136]
R3 winachsf;winachsf; C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys [2004-05-12 685312]
S1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
S3 aswHwid;avast! HardwareID; C:\WINDOWS\system32\drivers\aswHwid.sys [2016-11-04 34008]
S3 aswTdi;aswTdi; C:\WINDOWS\system32\drivers\aswTdi.sys [2016-11-04 66688]
S3 massfilter;Mass Storage Filter Driver; C:\WINDOWS\system32\drivers\massfilter.sys [2010-02-22 9216]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-14 32128]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-14 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-14 15104]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 WDC_SAM;WD SCSI Pass Thru driver; C:\WINDOWS\system32\DRIVERS\wdcsam.sys [2009-02-13 11520]
S3 ZTEusbmdm6k;ZTE Proprietary USB Driver; C:\WINDOWS\system32\DRIVERS\ZTEusbmdm6k.sys [2010-03-02 105856]
S3 ZTEusbnmea;ZTE NMEA Port; C:\WINDOWS\system32\DRIVERS\ZTEusbnmea.sys [2010-03-02 105856]
S3 ZTEusbser6k;ZTE Diagnostic Port; C:\WINDOWS\system32\DRIVERS\ZTEusbser6k.sys [2010-03-02 105856]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ASWLSVC;ASWLSVC; C:\WINDOWS\system32\ASWLSVC.exe [2004-05-06 496640]
R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2016-11-04 197128]
R2 Irmon;Sledování infračerveného přenosu; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 spmgr;spmgr; C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe [2005-04-20 118784]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-09-24 267440]
S3 IJPLMSVC;PIXMA Extended Survey Program; C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE [2007-04-13 97432]

-----------------EOF-----------------

[Roli]

Mrknem ještě pro jistotu hlouběji


Stáhni a ulož na plochu ComboFix,

spusť aplikaci jako Administrátor a povol instalaci Konzole pro zotavení - Recovery Console.

Poté se zobrazí okno s licenčními podmínkami které potvrdíš kliknutím na ANO,

pak ještě jednou klik na ANO a už to jede.

Celá akce trvá okolo 10 minut ale může i déle, během skenu se nepokoušej spouštět nic jiného.

Při skenovaní může být PC i restartováno nelekat se.

Upozornění: po dobu skenu vypni rezidentní štít Antiviru a AntiSpy programu,

protože Combofix se pokouší napadené soubory smazat a tyto programy mu můžou bránit.

Po dokončení skenu nebo následném restartu aplikace vytvoří log, uložený na C:/Combofix.txt

(při opakovaném použití jsou logy číslovány Combofix2.txt atd.), jeho obsah zkopíruj sem.


V případě nejasností je ZDE obrázkový návod.

[elina]

Tak ani po 2 hodinách se skenování combofixem nepohnulo z místa. Nějaké jiné řešení?

[Roli]

Tak ani po 2 hodinách se skenování combofixem nepohnulo z místa. Nějaké jiné řešení?

Zkusit spustit v Nouzovém režimu - při restartu mačkej F8 a pak vyber Stav nouze s prací v síti.

[elina]

No to jsem zkoušel, spustil jsem to a jak to napíše že to bude trvat 10min,nebo déle,tak to tak zůstane. Jelo to přes noc.

[Roli]

Tak tedy něco jiného, spusť skener Cure It podle TOHOTO návodu

po skončení skenu mi sem nakopíruj výsledky - stačí konec logu se souhrnem.

(Upozornění je úchylně pomalý a je zapotřebí ho sledovat občas se na něco ptá)


Přes Start >> Spustit >> napiš - cmd >> OK

do otevřeného okna s blikajícím kurzorem nakopíruj sfc /scannow

stiskni ENTER

[elina]

zde je konec logu, nic nenašel, musel jsem ho spustit v nouz. režimu.
Total 3764106156 bytes in 9133 files scanned (30750 objects)
Total 9117 files (30732 objects) are clean
There are no infected objects detected
Total 18 files are raised error condition
Scan time is 00:27:07.578

[Roli]

Bezva breberky tam nejsou jen nějaký nepořádek.

A co ten sken systému, našel nějaké chyby ?

[elina]

Vůbec nic. Zkoušel jsem mbam, ale ten nešel ani nainstalovat.